Linux Audio

Check our new training course

Loading...
v4.10.11
   1/*
   2 * mac80211 configuration hooks for cfg80211
   3 *
   4 * Copyright 2006-2010	Johannes Berg <johannes@sipsolutions.net>
   5 * Copyright 2013-2015  Intel Mobile Communications GmbH
   6 * Copyright (C) 2015-2016 Intel Deutschland GmbH
 
   7 *
   8 * This file is GPLv2 as found in COPYING.
   9 */
  10
  11#include <linux/ieee80211.h>
  12#include <linux/nl80211.h>
  13#include <linux/rtnetlink.h>
  14#include <linux/slab.h>
  15#include <net/net_namespace.h>
  16#include <linux/rcupdate.h>
  17#include <linux/if_ether.h>
  18#include <net/cfg80211.h>
  19#include "ieee80211_i.h"
  20#include "driver-ops.h"
  21#include "rate.h"
  22#include "mesh.h"
  23#include "wme.h"
  24
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  25static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy,
  26						const char *name,
  27						unsigned char name_assign_type,
  28						enum nl80211_iftype type,
  29						u32 *flags,
  30						struct vif_params *params)
  31{
  32	struct ieee80211_local *local = wiphy_priv(wiphy);
  33	struct wireless_dev *wdev;
  34	struct ieee80211_sub_if_data *sdata;
  35	int err;
  36
  37	err = ieee80211_if_add(local, name, name_assign_type, &wdev, type, params);
  38	if (err)
  39		return ERR_PTR(err);
  40
  41	if (type == NL80211_IFTYPE_MONITOR && flags) {
  42		sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
  43		sdata->u.mntr.flags = *flags;
 
 
 
 
 
  44	}
  45
  46	return wdev;
  47}
  48
  49static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
  50{
  51	ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev));
  52
  53	return 0;
  54}
  55
  56static int ieee80211_change_iface(struct wiphy *wiphy,
  57				  struct net_device *dev,
  58				  enum nl80211_iftype type, u32 *flags,
  59				  struct vif_params *params)
  60{
  61	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
  62	int ret;
  63
  64	ret = ieee80211_if_change_type(sdata, type);
  65	if (ret)
  66		return ret;
  67
  68	if (type == NL80211_IFTYPE_AP_VLAN &&
  69	    params && params->use_4addr == 0) {
  70		RCU_INIT_POINTER(sdata->u.vlan.sta, NULL);
  71		ieee80211_check_fast_rx_iface(sdata);
  72	} else if (type == NL80211_IFTYPE_STATION &&
  73		   params && params->use_4addr >= 0) {
  74		sdata->u.mgd.use_4addr = params->use_4addr;
  75	}
  76
  77	if (sdata->vif.type == NL80211_IFTYPE_MONITOR) {
  78		struct ieee80211_local *local = sdata->local;
  79		struct ieee80211_sub_if_data *monitor_sdata;
  80		u32 mu_mntr_cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
  81
  82		monitor_sdata = rtnl_dereference(local->monitor_sdata);
  83		if (monitor_sdata &&
  84		    wiphy_ext_feature_isset(wiphy, mu_mntr_cap_flag)) {
  85			memcpy(monitor_sdata->vif.bss_conf.mu_group.membership,
  86			       params->vht_mumimo_groups, WLAN_MEMBERSHIP_LEN);
  87			memcpy(monitor_sdata->vif.bss_conf.mu_group.position,
  88			       params->vht_mumimo_groups + WLAN_MEMBERSHIP_LEN,
  89			       WLAN_USER_POSITION_LEN);
  90			monitor_sdata->vif.mu_mimo_owner = true;
  91			ieee80211_bss_info_change_notify(monitor_sdata,
  92							 BSS_CHANGED_MU_GROUPS);
  93
  94			ether_addr_copy(monitor_sdata->u.mntr.mu_follow_addr,
  95					params->macaddr);
  96		}
  97
  98		if (!flags)
  99			return 0;
 100
 101		if (ieee80211_sdata_running(sdata)) {
 102			u32 mask = MONITOR_FLAG_COOK_FRAMES |
 103				   MONITOR_FLAG_ACTIVE;
 104
 105			/*
 106			 * Prohibit MONITOR_FLAG_COOK_FRAMES and
 107			 * MONITOR_FLAG_ACTIVE to be changed while the
 108			 * interface is up.
 109			 * Else we would need to add a lot of cruft
 110			 * to update everything:
 111			 *	cooked_mntrs, monitor and all fif_* counters
 112			 *	reconfigure hardware
 113			 */
 114			if ((*flags & mask) != (sdata->u.mntr.flags & mask))
 115				return -EBUSY;
 116
 117			ieee80211_adjust_monitor_flags(sdata, -1);
 118			sdata->u.mntr.flags = *flags;
 119			ieee80211_adjust_monitor_flags(sdata, 1);
 120
 121			ieee80211_configure_filter(local);
 122		} else {
 123			/*
 124			 * Because the interface is down, ieee80211_do_stop
 125			 * and ieee80211_do_open take care of "everything"
 126			 * mentioned in the comment above.
 127			 */
 128			sdata->u.mntr.flags = *flags;
 129		}
 130	}
 131
 132	return 0;
 133}
 134
 135static int ieee80211_start_p2p_device(struct wiphy *wiphy,
 136				      struct wireless_dev *wdev)
 137{
 138	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 139	int ret;
 140
 141	mutex_lock(&sdata->local->chanctx_mtx);
 142	ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
 143	mutex_unlock(&sdata->local->chanctx_mtx);
 144	if (ret < 0)
 145		return ret;
 146
 147	return ieee80211_do_open(wdev, true);
 148}
 149
 150static void ieee80211_stop_p2p_device(struct wiphy *wiphy,
 151				      struct wireless_dev *wdev)
 152{
 153	ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev));
 154}
 155
 156static int ieee80211_start_nan(struct wiphy *wiphy,
 157			       struct wireless_dev *wdev,
 158			       struct cfg80211_nan_conf *conf)
 159{
 160	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 161	int ret;
 162
 163	mutex_lock(&sdata->local->chanctx_mtx);
 164	ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
 165	mutex_unlock(&sdata->local->chanctx_mtx);
 166	if (ret < 0)
 167		return ret;
 168
 169	ret = ieee80211_do_open(wdev, true);
 170	if (ret)
 171		return ret;
 172
 173	ret = drv_start_nan(sdata->local, sdata, conf);
 174	if (ret)
 175		ieee80211_sdata_stop(sdata);
 176
 177	sdata->u.nan.conf = *conf;
 178
 179	return ret;
 180}
 181
 182static void ieee80211_stop_nan(struct wiphy *wiphy,
 183			       struct wireless_dev *wdev)
 184{
 185	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 186
 187	drv_stop_nan(sdata->local, sdata);
 188	ieee80211_sdata_stop(sdata);
 189}
 190
 191static int ieee80211_nan_change_conf(struct wiphy *wiphy,
 192				     struct wireless_dev *wdev,
 193				     struct cfg80211_nan_conf *conf,
 194				     u32 changes)
 195{
 196	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 197	struct cfg80211_nan_conf new_conf;
 198	int ret = 0;
 199
 200	if (sdata->vif.type != NL80211_IFTYPE_NAN)
 201		return -EOPNOTSUPP;
 202
 203	if (!ieee80211_sdata_running(sdata))
 204		return -ENETDOWN;
 205
 206	new_conf = sdata->u.nan.conf;
 207
 208	if (changes & CFG80211_NAN_CONF_CHANGED_PREF)
 209		new_conf.master_pref = conf->master_pref;
 210
 211	if (changes & CFG80211_NAN_CONF_CHANGED_DUAL)
 212		new_conf.dual = conf->dual;
 213
 214	ret = drv_nan_change_conf(sdata->local, sdata, &new_conf, changes);
 215	if (!ret)
 216		sdata->u.nan.conf = new_conf;
 217
 218	return ret;
 219}
 220
 221static int ieee80211_add_nan_func(struct wiphy *wiphy,
 222				  struct wireless_dev *wdev,
 223				  struct cfg80211_nan_func *nan_func)
 224{
 225	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 226	int ret;
 227
 228	if (sdata->vif.type != NL80211_IFTYPE_NAN)
 229		return -EOPNOTSUPP;
 230
 231	if (!ieee80211_sdata_running(sdata))
 232		return -ENETDOWN;
 233
 234	spin_lock_bh(&sdata->u.nan.func_lock);
 235
 236	ret = idr_alloc(&sdata->u.nan.function_inst_ids,
 237			nan_func, 1, sdata->local->hw.max_nan_de_entries + 1,
 238			GFP_ATOMIC);
 239	spin_unlock_bh(&sdata->u.nan.func_lock);
 240
 241	if (ret < 0)
 242		return ret;
 243
 244	nan_func->instance_id = ret;
 245
 246	WARN_ON(nan_func->instance_id == 0);
 247
 248	ret = drv_add_nan_func(sdata->local, sdata, nan_func);
 249	if (ret) {
 250		spin_lock_bh(&sdata->u.nan.func_lock);
 251		idr_remove(&sdata->u.nan.function_inst_ids,
 252			   nan_func->instance_id);
 253		spin_unlock_bh(&sdata->u.nan.func_lock);
 254	}
 255
 256	return ret;
 257}
 258
 259static struct cfg80211_nan_func *
 260ieee80211_find_nan_func_by_cookie(struct ieee80211_sub_if_data *sdata,
 261				  u64 cookie)
 262{
 263	struct cfg80211_nan_func *func;
 264	int id;
 265
 266	lockdep_assert_held(&sdata->u.nan.func_lock);
 267
 268	idr_for_each_entry(&sdata->u.nan.function_inst_ids, func, id) {
 269		if (func->cookie == cookie)
 270			return func;
 271	}
 272
 273	return NULL;
 274}
 275
 276static void ieee80211_del_nan_func(struct wiphy *wiphy,
 277				  struct wireless_dev *wdev, u64 cookie)
 278{
 279	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 280	struct cfg80211_nan_func *func;
 281	u8 instance_id = 0;
 282
 283	if (sdata->vif.type != NL80211_IFTYPE_NAN ||
 284	    !ieee80211_sdata_running(sdata))
 285		return;
 286
 287	spin_lock_bh(&sdata->u.nan.func_lock);
 288
 289	func = ieee80211_find_nan_func_by_cookie(sdata, cookie);
 290	if (func)
 291		instance_id = func->instance_id;
 292
 293	spin_unlock_bh(&sdata->u.nan.func_lock);
 294
 295	if (instance_id)
 296		drv_del_nan_func(sdata->local, sdata, instance_id);
 297}
 298
 299static int ieee80211_set_noack_map(struct wiphy *wiphy,
 300				  struct net_device *dev,
 301				  u16 noack_map)
 302{
 303	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 304
 305	sdata->noack_map = noack_map;
 306
 307	ieee80211_check_fast_xmit_iface(sdata);
 308
 309	return 0;
 310}
 311
 312static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev,
 313			     u8 key_idx, bool pairwise, const u8 *mac_addr,
 314			     struct key_params *params)
 315{
 316	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 317	struct ieee80211_local *local = sdata->local;
 318	struct sta_info *sta = NULL;
 319	const struct ieee80211_cipher_scheme *cs = NULL;
 320	struct ieee80211_key *key;
 321	int err;
 322
 323	if (!ieee80211_sdata_running(sdata))
 324		return -ENETDOWN;
 325
 326	/* reject WEP and TKIP keys if WEP failed to initialize */
 327	switch (params->cipher) {
 328	case WLAN_CIPHER_SUITE_WEP40:
 329	case WLAN_CIPHER_SUITE_TKIP:
 330	case WLAN_CIPHER_SUITE_WEP104:
 331		if (IS_ERR(local->wep_tx_tfm))
 332			return -EINVAL;
 333		break;
 334	case WLAN_CIPHER_SUITE_CCMP:
 335	case WLAN_CIPHER_SUITE_CCMP_256:
 336	case WLAN_CIPHER_SUITE_AES_CMAC:
 337	case WLAN_CIPHER_SUITE_BIP_CMAC_256:
 338	case WLAN_CIPHER_SUITE_BIP_GMAC_128:
 339	case WLAN_CIPHER_SUITE_BIP_GMAC_256:
 340	case WLAN_CIPHER_SUITE_GCMP:
 341	case WLAN_CIPHER_SUITE_GCMP_256:
 342		break;
 343	default:
 344		cs = ieee80211_cs_get(local, params->cipher, sdata->vif.type);
 345		break;
 346	}
 347
 348	key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len,
 349				  params->key, params->seq_len, params->seq,
 350				  cs);
 351	if (IS_ERR(key))
 352		return PTR_ERR(key);
 353
 354	if (pairwise)
 355		key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE;
 356
 357	mutex_lock(&local->sta_mtx);
 358
 359	if (mac_addr) {
 360		sta = sta_info_get_bss(sdata, mac_addr);
 361		/*
 362		 * The ASSOC test makes sure the driver is ready to
 363		 * receive the key. When wpa_supplicant has roamed
 364		 * using FT, it attempts to set the key before
 365		 * association has completed, this rejects that attempt
 366		 * so it will set the key again after association.
 367		 *
 368		 * TODO: accept the key if we have a station entry and
 369		 *       add it to the device after the station.
 370		 */
 371		if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) {
 372			ieee80211_key_free_unused(key);
 373			err = -ENOENT;
 374			goto out_unlock;
 375		}
 376	}
 377
 378	switch (sdata->vif.type) {
 379	case NL80211_IFTYPE_STATION:
 380		if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED)
 381			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
 382		break;
 383	case NL80211_IFTYPE_AP:
 384	case NL80211_IFTYPE_AP_VLAN:
 385		/* Keys without a station are used for TX only */
 386		if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP))
 387			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
 388		break;
 389	case NL80211_IFTYPE_ADHOC:
 390		/* no MFP (yet) */
 391		break;
 392	case NL80211_IFTYPE_MESH_POINT:
 393#ifdef CONFIG_MAC80211_MESH
 394		if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE)
 395			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
 396		break;
 397#endif
 398	case NL80211_IFTYPE_WDS:
 399	case NL80211_IFTYPE_MONITOR:
 400	case NL80211_IFTYPE_P2P_DEVICE:
 401	case NL80211_IFTYPE_NAN:
 402	case NL80211_IFTYPE_UNSPECIFIED:
 403	case NUM_NL80211_IFTYPES:
 404	case NL80211_IFTYPE_P2P_CLIENT:
 405	case NL80211_IFTYPE_P2P_GO:
 406	case NL80211_IFTYPE_OCB:
 407		/* shouldn't happen */
 408		WARN_ON_ONCE(1);
 409		break;
 410	}
 411
 412	if (sta)
 413		sta->cipher_scheme = cs;
 414
 415	err = ieee80211_key_link(key, sdata, sta);
 416
 417 out_unlock:
 418	mutex_unlock(&local->sta_mtx);
 419
 420	return err;
 421}
 422
 423static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev,
 424			     u8 key_idx, bool pairwise, const u8 *mac_addr)
 425{
 426	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 427	struct ieee80211_local *local = sdata->local;
 428	struct sta_info *sta;
 429	struct ieee80211_key *key = NULL;
 430	int ret;
 431
 432	mutex_lock(&local->sta_mtx);
 433	mutex_lock(&local->key_mtx);
 434
 435	if (mac_addr) {
 436		ret = -ENOENT;
 437
 438		sta = sta_info_get_bss(sdata, mac_addr);
 439		if (!sta)
 440			goto out_unlock;
 441
 442		if (pairwise)
 443			key = key_mtx_dereference(local, sta->ptk[key_idx]);
 444		else
 445			key = key_mtx_dereference(local, sta->gtk[key_idx]);
 446	} else
 447		key = key_mtx_dereference(local, sdata->keys[key_idx]);
 448
 449	if (!key) {
 450		ret = -ENOENT;
 451		goto out_unlock;
 452	}
 453
 454	ieee80211_key_free(key, true);
 455
 456	ret = 0;
 457 out_unlock:
 458	mutex_unlock(&local->key_mtx);
 459	mutex_unlock(&local->sta_mtx);
 460
 461	return ret;
 462}
 463
 464static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev,
 465			     u8 key_idx, bool pairwise, const u8 *mac_addr,
 466			     void *cookie,
 467			     void (*callback)(void *cookie,
 468					      struct key_params *params))
 469{
 470	struct ieee80211_sub_if_data *sdata;
 471	struct sta_info *sta = NULL;
 472	u8 seq[6] = {0};
 473	struct key_params params;
 474	struct ieee80211_key *key = NULL;
 475	u64 pn64;
 476	u32 iv32;
 477	u16 iv16;
 478	int err = -ENOENT;
 479	struct ieee80211_key_seq kseq = {};
 480
 481	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 482
 483	rcu_read_lock();
 484
 485	if (mac_addr) {
 486		sta = sta_info_get_bss(sdata, mac_addr);
 487		if (!sta)
 488			goto out;
 489
 490		if (pairwise && key_idx < NUM_DEFAULT_KEYS)
 491			key = rcu_dereference(sta->ptk[key_idx]);
 492		else if (!pairwise &&
 493			 key_idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS)
 494			key = rcu_dereference(sta->gtk[key_idx]);
 495	} else
 496		key = rcu_dereference(sdata->keys[key_idx]);
 497
 498	if (!key)
 499		goto out;
 500
 501	memset(&params, 0, sizeof(params));
 502
 503	params.cipher = key->conf.cipher;
 504
 505	switch (key->conf.cipher) {
 506	case WLAN_CIPHER_SUITE_TKIP:
 507		pn64 = atomic64_read(&key->conf.tx_pn);
 508		iv32 = TKIP_PN_TO_IV32(pn64);
 509		iv16 = TKIP_PN_TO_IV16(pn64);
 510
 511		if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE &&
 512		    !(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
 513			drv_get_key_seq(sdata->local, key, &kseq);
 514			iv32 = kseq.tkip.iv32;
 515			iv16 = kseq.tkip.iv16;
 516		}
 517
 518		seq[0] = iv16 & 0xff;
 519		seq[1] = (iv16 >> 8) & 0xff;
 520		seq[2] = iv32 & 0xff;
 521		seq[3] = (iv32 >> 8) & 0xff;
 522		seq[4] = (iv32 >> 16) & 0xff;
 523		seq[5] = (iv32 >> 24) & 0xff;
 524		params.seq = seq;
 525		params.seq_len = 6;
 526		break;
 527	case WLAN_CIPHER_SUITE_CCMP:
 528	case WLAN_CIPHER_SUITE_CCMP_256:
 529	case WLAN_CIPHER_SUITE_AES_CMAC:
 530	case WLAN_CIPHER_SUITE_BIP_CMAC_256:
 531		BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
 532			     offsetof(typeof(kseq), aes_cmac));
 
 533	case WLAN_CIPHER_SUITE_BIP_GMAC_128:
 534	case WLAN_CIPHER_SUITE_BIP_GMAC_256:
 535		BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
 536			     offsetof(typeof(kseq), aes_gmac));
 
 537	case WLAN_CIPHER_SUITE_GCMP:
 538	case WLAN_CIPHER_SUITE_GCMP_256:
 539		BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
 540			     offsetof(typeof(kseq), gcmp));
 541
 542		if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE &&
 543		    !(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
 544			drv_get_key_seq(sdata->local, key, &kseq);
 545			memcpy(seq, kseq.ccmp.pn, 6);
 546		} else {
 547			pn64 = atomic64_read(&key->conf.tx_pn);
 548			seq[0] = pn64;
 549			seq[1] = pn64 >> 8;
 550			seq[2] = pn64 >> 16;
 551			seq[3] = pn64 >> 24;
 552			seq[4] = pn64 >> 32;
 553			seq[5] = pn64 >> 40;
 554		}
 555		params.seq = seq;
 556		params.seq_len = 6;
 557		break;
 558	default:
 559		if (!(key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE))
 560			break;
 561		if (WARN_ON(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV))
 562			break;
 563		drv_get_key_seq(sdata->local, key, &kseq);
 564		params.seq = kseq.hw.seq;
 565		params.seq_len = kseq.hw.seq_len;
 566		break;
 567	}
 568
 569	params.key = key->conf.key;
 570	params.key_len = key->conf.keylen;
 571
 572	callback(cookie, &params);
 573	err = 0;
 574
 575 out:
 576	rcu_read_unlock();
 577	return err;
 578}
 579
 580static int ieee80211_config_default_key(struct wiphy *wiphy,
 581					struct net_device *dev,
 582					u8 key_idx, bool uni,
 583					bool multi)
 584{
 585	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 586
 587	ieee80211_set_default_key(sdata, key_idx, uni, multi);
 588
 589	return 0;
 590}
 591
 592static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy,
 593					     struct net_device *dev,
 594					     u8 key_idx)
 595{
 596	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 597
 598	ieee80211_set_default_mgmt_key(sdata, key_idx);
 599
 600	return 0;
 601}
 602
 603void sta_set_rate_info_tx(struct sta_info *sta,
 604			  const struct ieee80211_tx_rate *rate,
 605			  struct rate_info *rinfo)
 606{
 607	rinfo->flags = 0;
 608	if (rate->flags & IEEE80211_TX_RC_MCS) {
 609		rinfo->flags |= RATE_INFO_FLAGS_MCS;
 610		rinfo->mcs = rate->idx;
 611	} else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) {
 612		rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
 613		rinfo->mcs = ieee80211_rate_get_vht_mcs(rate);
 614		rinfo->nss = ieee80211_rate_get_vht_nss(rate);
 615	} else {
 616		struct ieee80211_supported_band *sband;
 617		int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
 618		u16 brate;
 619
 620		sband = sta->local->hw.wiphy->bands[
 621				ieee80211_get_sdata_band(sta->sdata)];
 622		brate = sband->bitrates[rate->idx].bitrate;
 623		rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
 
 624	}
 625	if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
 626		rinfo->bw = RATE_INFO_BW_40;
 627	else if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
 628		rinfo->bw = RATE_INFO_BW_80;
 629	else if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
 630		rinfo->bw = RATE_INFO_BW_160;
 631	else
 632		rinfo->bw = RATE_INFO_BW_20;
 633	if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
 634		rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
 635}
 636
 637static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev,
 638				  int idx, u8 *mac, struct station_info *sinfo)
 639{
 640	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 641	struct ieee80211_local *local = sdata->local;
 642	struct sta_info *sta;
 643	int ret = -ENOENT;
 644
 645	mutex_lock(&local->sta_mtx);
 646
 647	sta = sta_info_get_by_idx(sdata, idx);
 648	if (sta) {
 649		ret = 0;
 650		memcpy(mac, sta->sta.addr, ETH_ALEN);
 651		sta_set_sinfo(sta, sinfo);
 652	}
 653
 654	mutex_unlock(&local->sta_mtx);
 655
 656	return ret;
 657}
 658
 659static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev,
 660				 int idx, struct survey_info *survey)
 661{
 662	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
 663
 664	return drv_get_survey(local, idx, survey);
 665}
 666
 667static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev,
 668				 const u8 *mac, struct station_info *sinfo)
 669{
 670	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 671	struct ieee80211_local *local = sdata->local;
 672	struct sta_info *sta;
 673	int ret = -ENOENT;
 674
 675	mutex_lock(&local->sta_mtx);
 676
 677	sta = sta_info_get_bss(sdata, mac);
 678	if (sta) {
 679		ret = 0;
 680		sta_set_sinfo(sta, sinfo);
 681	}
 682
 683	mutex_unlock(&local->sta_mtx);
 684
 685	return ret;
 686}
 687
 688static int ieee80211_set_monitor_channel(struct wiphy *wiphy,
 689					 struct cfg80211_chan_def *chandef)
 690{
 691	struct ieee80211_local *local = wiphy_priv(wiphy);
 692	struct ieee80211_sub_if_data *sdata;
 693	int ret = 0;
 694
 695	if (cfg80211_chandef_identical(&local->monitor_chandef, chandef))
 696		return 0;
 697
 698	mutex_lock(&local->mtx);
 699	mutex_lock(&local->iflist_mtx);
 700	if (local->use_chanctx) {
 701		sdata = rcu_dereference_protected(
 702				local->monitor_sdata,
 703				lockdep_is_held(&local->iflist_mtx));
 704		if (sdata) {
 705			ieee80211_vif_release_channel(sdata);
 706			ret = ieee80211_vif_use_channel(sdata, chandef,
 707					IEEE80211_CHANCTX_EXCLUSIVE);
 708		}
 709	} else if (local->open_count == local->monitors) {
 710		local->_oper_chandef = *chandef;
 711		ieee80211_hw_config(local, 0);
 712	}
 713
 714	if (ret == 0)
 715		local->monitor_chandef = *chandef;
 716	mutex_unlock(&local->iflist_mtx);
 717	mutex_unlock(&local->mtx);
 718
 719	return ret;
 720}
 721
 722static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata,
 723				    const u8 *resp, size_t resp_len,
 724				    const struct ieee80211_csa_settings *csa)
 725{
 726	struct probe_resp *new, *old;
 727
 728	if (!resp || !resp_len)
 729		return 1;
 730
 731	old = sdata_dereference(sdata->u.ap.probe_resp, sdata);
 732
 733	new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL);
 734	if (!new)
 735		return -ENOMEM;
 736
 737	new->len = resp_len;
 738	memcpy(new->data, resp, resp_len);
 739
 740	if (csa)
 741		memcpy(new->csa_counter_offsets, csa->counter_offsets_presp,
 742		       csa->n_counter_offsets_presp *
 743		       sizeof(new->csa_counter_offsets[0]));
 744
 745	rcu_assign_pointer(sdata->u.ap.probe_resp, new);
 746	if (old)
 747		kfree_rcu(old, rcu_head);
 748
 749	return 0;
 750}
 751
 752static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata,
 753				   struct cfg80211_beacon_data *params,
 754				   const struct ieee80211_csa_settings *csa)
 755{
 756	struct beacon_data *new, *old;
 757	int new_head_len, new_tail_len;
 758	int size, err;
 759	u32 changed = BSS_CHANGED_BEACON;
 760
 761	old = sdata_dereference(sdata->u.ap.beacon, sdata);
 762
 763
 764	/* Need to have a beacon head if we don't have one yet */
 765	if (!params->head && !old)
 766		return -EINVAL;
 767
 768	/* new or old head? */
 769	if (params->head)
 770		new_head_len = params->head_len;
 771	else
 772		new_head_len = old->head_len;
 773
 774	/* new or old tail? */
 775	if (params->tail || !old)
 776		/* params->tail_len will be zero for !params->tail */
 777		new_tail_len = params->tail_len;
 778	else
 779		new_tail_len = old->tail_len;
 780
 781	size = sizeof(*new) + new_head_len + new_tail_len;
 782
 783	new = kzalloc(size, GFP_KERNEL);
 784	if (!new)
 785		return -ENOMEM;
 786
 787	/* start filling the new info now */
 788
 789	/*
 790	 * pointers go into the block we allocated,
 791	 * memory is | beacon_data | head | tail |
 792	 */
 793	new->head = ((u8 *) new) + sizeof(*new);
 794	new->tail = new->head + new_head_len;
 795	new->head_len = new_head_len;
 796	new->tail_len = new_tail_len;
 797
 798	if (csa) {
 799		new->csa_current_counter = csa->count;
 800		memcpy(new->csa_counter_offsets, csa->counter_offsets_beacon,
 801		       csa->n_counter_offsets_beacon *
 802		       sizeof(new->csa_counter_offsets[0]));
 803	}
 804
 805	/* copy in head */
 806	if (params->head)
 807		memcpy(new->head, params->head, new_head_len);
 808	else
 809		memcpy(new->head, old->head, new_head_len);
 810
 811	/* copy in optional tail */
 812	if (params->tail)
 813		memcpy(new->tail, params->tail, new_tail_len);
 814	else
 815		if (old)
 816			memcpy(new->tail, old->tail, new_tail_len);
 817
 818	err = ieee80211_set_probe_resp(sdata, params->probe_resp,
 819				       params->probe_resp_len, csa);
 820	if (err < 0)
 821		return err;
 822	if (err == 0)
 823		changed |= BSS_CHANGED_AP_PROBE_RESP;
 824
 825	rcu_assign_pointer(sdata->u.ap.beacon, new);
 826
 827	if (old)
 828		kfree_rcu(old, rcu_head);
 829
 830	return changed;
 831}
 832
 833static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev,
 834			      struct cfg80211_ap_settings *params)
 835{
 836	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 837	struct ieee80211_local *local = sdata->local;
 838	struct beacon_data *old;
 839	struct ieee80211_sub_if_data *vlan;
 840	u32 changed = BSS_CHANGED_BEACON_INT |
 841		      BSS_CHANGED_BEACON_ENABLED |
 842		      BSS_CHANGED_BEACON |
 843		      BSS_CHANGED_SSID |
 844		      BSS_CHANGED_P2P_PS |
 845		      BSS_CHANGED_TXPOWER;
 846	int err;
 847
 848	old = sdata_dereference(sdata->u.ap.beacon, sdata);
 849	if (old)
 850		return -EALREADY;
 851
 852	switch (params->smps_mode) {
 853	case NL80211_SMPS_OFF:
 854		sdata->smps_mode = IEEE80211_SMPS_OFF;
 855		break;
 856	case NL80211_SMPS_STATIC:
 857		sdata->smps_mode = IEEE80211_SMPS_STATIC;
 858		break;
 859	case NL80211_SMPS_DYNAMIC:
 860		sdata->smps_mode = IEEE80211_SMPS_DYNAMIC;
 861		break;
 862	default:
 863		return -EINVAL;
 864	}
 
 
 865	sdata->needed_rx_chains = sdata->local->rx_chains;
 866
 867	sdata->vif.bss_conf.beacon_int = params->beacon_interval;
 868
 869	mutex_lock(&local->mtx);
 870	err = ieee80211_vif_use_channel(sdata, &params->chandef,
 871					IEEE80211_CHANCTX_SHARED);
 872	if (!err)
 873		ieee80211_vif_copy_chanctx_to_vlans(sdata, false);
 874	mutex_unlock(&local->mtx);
 875	if (err)
 876		return err;
 877
 878	/*
 879	 * Apply control port protocol, this allows us to
 880	 * not encrypt dynamic WEP control frames.
 881	 */
 882	sdata->control_port_protocol = params->crypto.control_port_ethertype;
 883	sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt;
 
 
 884	sdata->encrypt_headroom = ieee80211_cs_headroom(sdata->local,
 885							&params->crypto,
 886							sdata->vif.type);
 887
 888	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) {
 889		vlan->control_port_protocol =
 890			params->crypto.control_port_ethertype;
 891		vlan->control_port_no_encrypt =
 892			params->crypto.control_port_no_encrypt;
 
 
 893		vlan->encrypt_headroom =
 894			ieee80211_cs_headroom(sdata->local,
 895					      &params->crypto,
 896					      vlan->vif.type);
 897	}
 898
 899	sdata->vif.bss_conf.dtim_period = params->dtim_period;
 900	sdata->vif.bss_conf.enable_beacon = true;
 901	sdata->vif.bss_conf.allow_p2p_go_ps = sdata->vif.p2p;
 902
 903	sdata->vif.bss_conf.ssid_len = params->ssid_len;
 904	if (params->ssid_len)
 905		memcpy(sdata->vif.bss_conf.ssid, params->ssid,
 906		       params->ssid_len);
 907	sdata->vif.bss_conf.hidden_ssid =
 908		(params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE);
 909
 910	memset(&sdata->vif.bss_conf.p2p_noa_attr, 0,
 911	       sizeof(sdata->vif.bss_conf.p2p_noa_attr));
 912	sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow =
 913		params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
 914	if (params->p2p_opp_ps)
 915		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
 916					IEEE80211_P2P_OPPPS_ENABLE_BIT;
 917
 918	err = ieee80211_assign_beacon(sdata, &params->beacon, NULL);
 919	if (err < 0) {
 920		ieee80211_vif_release_channel(sdata);
 921		return err;
 922	}
 923	changed |= err;
 924
 925	err = drv_start_ap(sdata->local, sdata);
 926	if (err) {
 927		old = sdata_dereference(sdata->u.ap.beacon, sdata);
 928
 929		if (old)
 930			kfree_rcu(old, rcu_head);
 931		RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
 932		ieee80211_vif_release_channel(sdata);
 933		return err;
 934	}
 935
 936	ieee80211_recalc_dtim(local, sdata);
 937	ieee80211_bss_info_change_notify(sdata, changed);
 938
 939	netif_carrier_on(dev);
 940	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
 941		netif_carrier_on(vlan->dev);
 942
 943	return 0;
 944}
 945
 946static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev,
 947				   struct cfg80211_beacon_data *params)
 948{
 949	struct ieee80211_sub_if_data *sdata;
 950	struct beacon_data *old;
 951	int err;
 952
 953	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 954	sdata_assert_lock(sdata);
 955
 956	/* don't allow changing the beacon while CSA is in place - offset
 957	 * of channel switch counter may change
 958	 */
 959	if (sdata->vif.csa_active)
 960		return -EBUSY;
 961
 962	old = sdata_dereference(sdata->u.ap.beacon, sdata);
 963	if (!old)
 964		return -ENOENT;
 965
 966	err = ieee80211_assign_beacon(sdata, params, NULL);
 967	if (err < 0)
 968		return err;
 969	ieee80211_bss_info_change_notify(sdata, err);
 970	return 0;
 971}
 972
 973static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev)
 974{
 975	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 976	struct ieee80211_sub_if_data *vlan;
 977	struct ieee80211_local *local = sdata->local;
 978	struct beacon_data *old_beacon;
 979	struct probe_resp *old_probe_resp;
 980	struct cfg80211_chan_def chandef;
 981
 982	sdata_assert_lock(sdata);
 983
 984	old_beacon = sdata_dereference(sdata->u.ap.beacon, sdata);
 985	if (!old_beacon)
 986		return -ENOENT;
 987	old_probe_resp = sdata_dereference(sdata->u.ap.probe_resp, sdata);
 988
 989	/* abort any running channel switch */
 990	mutex_lock(&local->mtx);
 991	sdata->vif.csa_active = false;
 992	if (sdata->csa_block_tx) {
 993		ieee80211_wake_vif_queues(local, sdata,
 994					  IEEE80211_QUEUE_STOP_REASON_CSA);
 995		sdata->csa_block_tx = false;
 996	}
 997
 998	mutex_unlock(&local->mtx);
 999
1000	kfree(sdata->u.ap.next_beacon);
1001	sdata->u.ap.next_beacon = NULL;
1002
1003	/* turn off carrier for this interface and dependent VLANs */
1004	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
1005		netif_carrier_off(vlan->dev);
1006	netif_carrier_off(dev);
1007
1008	/* remove beacon and probe response */
1009	RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
1010	RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL);
1011	kfree_rcu(old_beacon, rcu_head);
1012	if (old_probe_resp)
1013		kfree_rcu(old_probe_resp, rcu_head);
1014	sdata->u.ap.driver_smps_mode = IEEE80211_SMPS_OFF;
1015
1016	__sta_info_flush(sdata, true);
1017	ieee80211_free_keys(sdata, true);
1018
1019	sdata->vif.bss_conf.enable_beacon = false;
1020	sdata->vif.bss_conf.ssid_len = 0;
1021	clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
1022	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
1023
1024	if (sdata->wdev.cac_started) {
1025		chandef = sdata->vif.bss_conf.chandef;
1026		cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
1027		cfg80211_cac_event(sdata->dev, &chandef,
1028				   NL80211_RADAR_CAC_ABORTED,
1029				   GFP_KERNEL);
1030	}
1031
1032	drv_stop_ap(sdata->local, sdata);
1033
1034	/* free all potentially still buffered bcast frames */
1035	local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf);
1036	ieee80211_purge_tx_queue(&local->hw, &sdata->u.ap.ps.bc_buf);
1037
1038	mutex_lock(&local->mtx);
1039	ieee80211_vif_copy_chanctx_to_vlans(sdata, true);
1040	ieee80211_vif_release_channel(sdata);
1041	mutex_unlock(&local->mtx);
1042
1043	return 0;
1044}
1045
1046/* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */
1047struct iapp_layer2_update {
1048	u8 da[ETH_ALEN];	/* broadcast */
1049	u8 sa[ETH_ALEN];	/* STA addr */
1050	__be16 len;		/* 6 */
1051	u8 dsap;		/* 0 */
1052	u8 ssap;		/* 0 */
1053	u8 control;
1054	u8 xid_info[3];
1055} __packed;
1056
1057static void ieee80211_send_layer2_update(struct sta_info *sta)
1058{
1059	struct iapp_layer2_update *msg;
1060	struct sk_buff *skb;
1061
1062	/* Send Level 2 Update Frame to update forwarding tables in layer 2
1063	 * bridge devices */
1064
1065	skb = dev_alloc_skb(sizeof(*msg));
1066	if (!skb)
1067		return;
1068	msg = (struct iapp_layer2_update *)skb_put(skb, sizeof(*msg));
1069
1070	/* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID)
1071	 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */
1072
1073	eth_broadcast_addr(msg->da);
1074	memcpy(msg->sa, sta->sta.addr, ETH_ALEN);
1075	msg->len = htons(6);
1076	msg->dsap = 0;
1077	msg->ssap = 0x01;	/* NULL LSAP, CR Bit: Response */
1078	msg->control = 0xaf;	/* XID response lsb.1111F101.
1079				 * F=0 (no poll command; unsolicited frame) */
1080	msg->xid_info[0] = 0x81;	/* XID format identifier */
1081	msg->xid_info[1] = 1;	/* LLC types/classes: Type 1 LLC */
1082	msg->xid_info[2] = 0;	/* XID sender's receive window size (RW) */
1083
1084	skb->dev = sta->sdata->dev;
1085	skb->protocol = eth_type_trans(skb, sta->sdata->dev);
1086	memset(skb->cb, 0, sizeof(skb->cb));
1087	netif_rx_ni(skb);
1088}
1089
1090static int sta_apply_auth_flags(struct ieee80211_local *local,
1091				struct sta_info *sta,
1092				u32 mask, u32 set)
1093{
1094	int ret;
1095
1096	if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1097	    set & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1098	    !test_sta_flag(sta, WLAN_STA_AUTH)) {
1099		ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
1100		if (ret)
1101			return ret;
1102	}
1103
1104	if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1105	    set & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1106	    !test_sta_flag(sta, WLAN_STA_ASSOC)) {
1107		/*
1108		 * When peer becomes associated, init rate control as
1109		 * well. Some drivers require rate control initialized
1110		 * before drv_sta_state() is called.
1111		 */
1112		if (!test_sta_flag(sta, WLAN_STA_RATE_CONTROL))
1113			rate_control_rate_init(sta);
1114
1115		ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
1116		if (ret)
1117			return ret;
1118	}
1119
1120	if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1121		if (set & BIT(NL80211_STA_FLAG_AUTHORIZED))
1122			ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED);
1123		else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1124			ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
1125		else
1126			ret = 0;
1127		if (ret)
1128			return ret;
1129	}
1130
1131	if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1132	    !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
1133	    test_sta_flag(sta, WLAN_STA_ASSOC)) {
1134		ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
1135		if (ret)
1136			return ret;
1137	}
1138
1139	if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1140	    !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) &&
1141	    test_sta_flag(sta, WLAN_STA_AUTH)) {
1142		ret = sta_info_move_state(sta, IEEE80211_STA_NONE);
1143		if (ret)
1144			return ret;
1145	}
1146
1147	return 0;
1148}
1149
1150static void sta_apply_mesh_params(struct ieee80211_local *local,
1151				  struct sta_info *sta,
1152				  struct station_parameters *params)
1153{
1154#ifdef CONFIG_MAC80211_MESH
1155	struct ieee80211_sub_if_data *sdata = sta->sdata;
1156	u32 changed = 0;
1157
1158	if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) {
1159		switch (params->plink_state) {
1160		case NL80211_PLINK_ESTAB:
1161			if (sta->mesh->plink_state != NL80211_PLINK_ESTAB)
1162				changed = mesh_plink_inc_estab_count(sdata);
1163			sta->mesh->plink_state = params->plink_state;
1164			sta->mesh->aid = params->peer_aid;
1165
1166			ieee80211_mps_sta_status_update(sta);
1167			changed |= ieee80211_mps_set_sta_local_pm(sta,
1168				      sdata->u.mesh.mshcfg.power_mode);
1169			break;
1170		case NL80211_PLINK_LISTEN:
1171		case NL80211_PLINK_BLOCKED:
1172		case NL80211_PLINK_OPN_SNT:
1173		case NL80211_PLINK_OPN_RCVD:
1174		case NL80211_PLINK_CNF_RCVD:
1175		case NL80211_PLINK_HOLDING:
1176			if (sta->mesh->plink_state == NL80211_PLINK_ESTAB)
1177				changed = mesh_plink_dec_estab_count(sdata);
1178			sta->mesh->plink_state = params->plink_state;
1179
1180			ieee80211_mps_sta_status_update(sta);
1181			changed |= ieee80211_mps_set_sta_local_pm(sta,
1182					NL80211_MESH_POWER_UNKNOWN);
1183			break;
1184		default:
1185			/*  nothing  */
1186			break;
1187		}
1188	}
1189
1190	switch (params->plink_action) {
1191	case NL80211_PLINK_ACTION_NO_ACTION:
1192		/* nothing */
1193		break;
1194	case NL80211_PLINK_ACTION_OPEN:
1195		changed |= mesh_plink_open(sta);
1196		break;
1197	case NL80211_PLINK_ACTION_BLOCK:
1198		changed |= mesh_plink_block(sta);
1199		break;
1200	}
1201
1202	if (params->local_pm)
1203		changed |= ieee80211_mps_set_sta_local_pm(sta,
1204							  params->local_pm);
1205
1206	ieee80211_mbss_info_change_notify(sdata, changed);
1207#endif
1208}
1209
1210static int sta_apply_parameters(struct ieee80211_local *local,
1211				struct sta_info *sta,
1212				struct station_parameters *params)
1213{
1214	int ret = 0;
1215	struct ieee80211_supported_band *sband;
1216	struct ieee80211_sub_if_data *sdata = sta->sdata;
1217	enum nl80211_band band = ieee80211_get_sdata_band(sdata);
1218	u32 mask, set;
1219
1220	sband = local->hw.wiphy->bands[band];
 
 
1221
1222	mask = params->sta_flags_mask;
1223	set = params->sta_flags_set;
1224
1225	if (ieee80211_vif_is_mesh(&sdata->vif)) {
1226		/*
1227		 * In mesh mode, ASSOCIATED isn't part of the nl80211
1228		 * API but must follow AUTHENTICATED for driver state.
1229		 */
1230		if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1231			mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
1232		if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1233			set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
1234	} else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1235		/*
1236		 * TDLS -- everything follows authorized, but
1237		 * only becoming authorized is possible, not
1238		 * going back
1239		 */
1240		if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1241			set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1242			       BIT(NL80211_STA_FLAG_ASSOCIATED);
1243			mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1244				BIT(NL80211_STA_FLAG_ASSOCIATED);
1245		}
1246	}
1247
1248	if (mask & BIT(NL80211_STA_FLAG_WME) &&
1249	    local->hw.queues >= IEEE80211_NUM_ACS)
1250		sta->sta.wme = set & BIT(NL80211_STA_FLAG_WME);
1251
1252	/* auth flags will be set later for TDLS,
1253	 * and for unassociated stations that move to assocaited */
1254	if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1255	    !((mask & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
1256	      (set & BIT(NL80211_STA_FLAG_ASSOCIATED)))) {
1257		ret = sta_apply_auth_flags(local, sta, mask, set);
1258		if (ret)
1259			return ret;
1260	}
1261
1262	if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) {
1263		if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1264			set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1265		else
1266			clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1267	}
1268
1269	if (mask & BIT(NL80211_STA_FLAG_MFP)) {
1270		sta->sta.mfp = !!(set & BIT(NL80211_STA_FLAG_MFP));
1271		if (set & BIT(NL80211_STA_FLAG_MFP))
1272			set_sta_flag(sta, WLAN_STA_MFP);
1273		else
1274			clear_sta_flag(sta, WLAN_STA_MFP);
1275	}
1276
1277	if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) {
1278		if (set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1279			set_sta_flag(sta, WLAN_STA_TDLS_PEER);
1280		else
1281			clear_sta_flag(sta, WLAN_STA_TDLS_PEER);
1282	}
1283
1284	/* mark TDLS channel switch support, if the AP allows it */
1285	if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1286	    !sdata->u.mgd.tdls_chan_switch_prohibited &&
1287	    params->ext_capab_len >= 4 &&
1288	    params->ext_capab[3] & WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH)
1289		set_sta_flag(sta, WLAN_STA_TDLS_CHAN_SWITCH);
1290
1291	if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1292	    !sdata->u.mgd.tdls_wider_bw_prohibited &&
1293	    ieee80211_hw_check(&local->hw, TDLS_WIDER_BW) &&
1294	    params->ext_capab_len >= 8 &&
1295	    params->ext_capab[7] & WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED)
1296		set_sta_flag(sta, WLAN_STA_TDLS_WIDER_BW);
1297
1298	if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) {
1299		sta->sta.uapsd_queues = params->uapsd_queues;
1300		sta->sta.max_sp = params->max_sp;
1301	}
1302
1303	/* The sender might not have sent the last bit, consider it to be 0 */
1304	if (params->ext_capab_len >= 8) {
1305		u8 val = (params->ext_capab[7] &
1306			  WLAN_EXT_CAPA8_MAX_MSDU_IN_AMSDU_LSB) >> 7;
1307
1308		/* we did get all the bits, take the MSB as well */
1309		if (params->ext_capab_len >= 9) {
1310			u8 val_msb = params->ext_capab[8] &
1311				WLAN_EXT_CAPA9_MAX_MSDU_IN_AMSDU_MSB;
1312			val_msb <<= 1;
1313			val |= val_msb;
1314		}
1315
1316		switch (val) {
1317		case 1:
1318			sta->sta.max_amsdu_subframes = 32;
1319			break;
1320		case 2:
1321			sta->sta.max_amsdu_subframes = 16;
1322			break;
1323		case 3:
1324			sta->sta.max_amsdu_subframes = 8;
1325			break;
1326		default:
1327			sta->sta.max_amsdu_subframes = 0;
1328		}
1329	}
1330
1331	/*
1332	 * cfg80211 validates this (1-2007) and allows setting the AID
1333	 * only when creating a new station entry
1334	 */
1335	if (params->aid)
1336		sta->sta.aid = params->aid;
1337
1338	/*
1339	 * Some of the following updates would be racy if called on an
1340	 * existing station, via ieee80211_change_station(). However,
1341	 * all such changes are rejected by cfg80211 except for updates
1342	 * changing the supported rates on an existing but not yet used
1343	 * TDLS peer.
1344	 */
1345
1346	if (params->listen_interval >= 0)
1347		sta->listen_interval = params->listen_interval;
1348
1349	if (params->supported_rates) {
1350		ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1351					 sband, params->supported_rates,
1352					 params->supported_rates_len,
1353					 &sta->sta.supp_rates[band]);
1354	}
1355
1356	if (params->ht_capa)
1357		ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband,
1358						  params->ht_capa, sta);
1359
1360	/* VHT can override some HT caps such as the A-MSDU max length */
1361	if (params->vht_capa)
1362		ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband,
1363						    params->vht_capa, sta);
1364
1365	if (params->opmode_notif_used) {
1366		/* returned value is only needed for rc update, but the
1367		 * rc isn't initialized here yet, so ignore it
1368		 */
1369		__ieee80211_vht_handle_opmode(sdata, sta,
1370					      params->opmode_notif, band);
1371	}
1372
1373	if (params->support_p2p_ps >= 0)
1374		sta->sta.support_p2p_ps = params->support_p2p_ps;
1375
1376	if (ieee80211_vif_is_mesh(&sdata->vif))
1377		sta_apply_mesh_params(local, sta, params);
1378
1379	/* set the STA state after all sta info from usermode has been set */
1380	if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) ||
1381	    set & BIT(NL80211_STA_FLAG_ASSOCIATED)) {
1382		ret = sta_apply_auth_flags(local, sta, mask, set);
1383		if (ret)
1384			return ret;
1385	}
1386
1387	return 0;
1388}
1389
1390static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
1391				 const u8 *mac,
1392				 struct station_parameters *params)
1393{
1394	struct ieee80211_local *local = wiphy_priv(wiphy);
1395	struct sta_info *sta;
1396	struct ieee80211_sub_if_data *sdata;
1397	int err;
1398	int layer2_update;
1399
1400	if (params->vlan) {
1401		sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1402
1403		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1404		    sdata->vif.type != NL80211_IFTYPE_AP)
1405			return -EINVAL;
1406	} else
1407		sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1408
1409	if (ether_addr_equal(mac, sdata->vif.addr))
1410		return -EINVAL;
1411
1412	if (is_multicast_ether_addr(mac))
1413		return -EINVAL;
1414
1415	sta = sta_info_alloc(sdata, mac, GFP_KERNEL);
1416	if (!sta)
1417		return -ENOMEM;
1418
1419	if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1420		sta->sta.tdls = true;
1421
1422	err = sta_apply_parameters(local, sta, params);
1423	if (err) {
1424		sta_info_free(local, sta);
1425		return err;
1426	}
1427
1428	/*
1429	 * for TDLS and for unassociated station, rate control should be
1430	 * initialized only when rates are known and station is marked
1431	 * authorized/associated
1432	 */
1433	if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1434	    test_sta_flag(sta, WLAN_STA_ASSOC))
1435		rate_control_rate_init(sta);
1436
1437	layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1438		sdata->vif.type == NL80211_IFTYPE_AP;
1439
1440	err = sta_info_insert_rcu(sta);
1441	if (err) {
1442		rcu_read_unlock();
1443		return err;
1444	}
1445
1446	if (layer2_update)
1447		ieee80211_send_layer2_update(sta);
1448
1449	rcu_read_unlock();
1450
1451	return 0;
1452}
1453
1454static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev,
1455				 struct station_del_parameters *params)
1456{
1457	struct ieee80211_sub_if_data *sdata;
1458
1459	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1460
1461	if (params->mac)
1462		return sta_info_destroy_addr_bss(sdata, params->mac);
1463
1464	sta_info_flush(sdata);
1465	return 0;
1466}
1467
1468static int ieee80211_change_station(struct wiphy *wiphy,
1469				    struct net_device *dev, const u8 *mac,
1470				    struct station_parameters *params)
1471{
1472	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1473	struct ieee80211_local *local = wiphy_priv(wiphy);
1474	struct sta_info *sta;
1475	struct ieee80211_sub_if_data *vlansdata;
1476	enum cfg80211_station_type statype;
1477	int err;
1478
1479	mutex_lock(&local->sta_mtx);
1480
1481	sta = sta_info_get_bss(sdata, mac);
1482	if (!sta) {
1483		err = -ENOENT;
1484		goto out_err;
1485	}
1486
1487	switch (sdata->vif.type) {
1488	case NL80211_IFTYPE_MESH_POINT:
1489		if (sdata->u.mesh.user_mpm)
1490			statype = CFG80211_STA_MESH_PEER_USER;
1491		else
1492			statype = CFG80211_STA_MESH_PEER_KERNEL;
1493		break;
1494	case NL80211_IFTYPE_ADHOC:
1495		statype = CFG80211_STA_IBSS;
1496		break;
1497	case NL80211_IFTYPE_STATION:
1498		if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1499			statype = CFG80211_STA_AP_STA;
1500			break;
1501		}
1502		if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1503			statype = CFG80211_STA_TDLS_PEER_ACTIVE;
1504		else
1505			statype = CFG80211_STA_TDLS_PEER_SETUP;
1506		break;
1507	case NL80211_IFTYPE_AP:
1508	case NL80211_IFTYPE_AP_VLAN:
1509		if (test_sta_flag(sta, WLAN_STA_ASSOC))
1510			statype = CFG80211_STA_AP_CLIENT;
1511		else
1512			statype = CFG80211_STA_AP_CLIENT_UNASSOC;
1513		break;
1514	default:
1515		err = -EOPNOTSUPP;
1516		goto out_err;
1517	}
1518
1519	err = cfg80211_check_station_change(wiphy, params, statype);
1520	if (err)
1521		goto out_err;
1522
1523	if (params->vlan && params->vlan != sta->sdata->dev) {
1524		vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1525
1526		if (params->vlan->ieee80211_ptr->use_4addr) {
1527			if (vlansdata->u.vlan.sta) {
1528				err = -EBUSY;
1529				goto out_err;
1530			}
1531
1532			rcu_assign_pointer(vlansdata->u.vlan.sta, sta);
1533			__ieee80211_check_fast_rx_iface(vlansdata);
1534		}
1535
1536		if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN &&
1537		    sta->sdata->u.vlan.sta)
1538			RCU_INIT_POINTER(sta->sdata->u.vlan.sta, NULL);
1539
1540		if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1541			ieee80211_vif_dec_num_mcast(sta->sdata);
1542
1543		sta->sdata = vlansdata;
1544		ieee80211_check_fast_xmit(sta);
1545
1546		if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1547			ieee80211_vif_inc_num_mcast(sta->sdata);
1548
1549		ieee80211_send_layer2_update(sta);
1550	}
1551
1552	err = sta_apply_parameters(local, sta, params);
1553	if (err)
1554		goto out_err;
1555
1556	mutex_unlock(&local->sta_mtx);
1557
1558	if ((sdata->vif.type == NL80211_IFTYPE_AP ||
1559	     sdata->vif.type == NL80211_IFTYPE_AP_VLAN) &&
1560	    sta->known_smps_mode != sta->sdata->bss->req_smps &&
1561	    test_sta_flag(sta, WLAN_STA_AUTHORIZED) &&
1562	    sta_info_tx_streams(sta) != 1) {
1563		ht_dbg(sta->sdata,
1564		       "%pM just authorized and MIMO capable - update SMPS\n",
1565		       sta->sta.addr);
1566		ieee80211_send_smps_action(sta->sdata,
1567			sta->sdata->bss->req_smps,
1568			sta->sta.addr,
1569			sta->sdata->vif.bss_conf.bssid);
1570	}
1571
1572	if (sdata->vif.type == NL80211_IFTYPE_STATION &&
1573	    params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1574		ieee80211_recalc_ps(local);
1575		ieee80211_recalc_ps_vif(sdata);
1576	}
1577
1578	return 0;
1579out_err:
1580	mutex_unlock(&local->sta_mtx);
1581	return err;
1582}
1583
1584#ifdef CONFIG_MAC80211_MESH
1585static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev,
1586			       const u8 *dst, const u8 *next_hop)
1587{
1588	struct ieee80211_sub_if_data *sdata;
1589	struct mesh_path *mpath;
1590	struct sta_info *sta;
1591
1592	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1593
1594	rcu_read_lock();
1595	sta = sta_info_get(sdata, next_hop);
1596	if (!sta) {
1597		rcu_read_unlock();
1598		return -ENOENT;
1599	}
1600
1601	mpath = mesh_path_add(sdata, dst);
1602	if (IS_ERR(mpath)) {
1603		rcu_read_unlock();
1604		return PTR_ERR(mpath);
1605	}
1606
1607	mesh_path_fix_nexthop(mpath, sta);
1608
1609	rcu_read_unlock();
1610	return 0;
1611}
1612
1613static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev,
1614			       const u8 *dst)
1615{
1616	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1617
1618	if (dst)
1619		return mesh_path_del(sdata, dst);
1620
1621	mesh_path_flush_by_iface(sdata);
1622	return 0;
1623}
1624
1625static int ieee80211_change_mpath(struct wiphy *wiphy, struct net_device *dev,
1626				  const u8 *dst, const u8 *next_hop)
1627{
1628	struct ieee80211_sub_if_data *sdata;
1629	struct mesh_path *mpath;
1630	struct sta_info *sta;
1631
1632	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1633
1634	rcu_read_lock();
1635
1636	sta = sta_info_get(sdata, next_hop);
1637	if (!sta) {
1638		rcu_read_unlock();
1639		return -ENOENT;
1640	}
1641
1642	mpath = mesh_path_lookup(sdata, dst);
1643	if (!mpath) {
1644		rcu_read_unlock();
1645		return -ENOENT;
1646	}
1647
1648	mesh_path_fix_nexthop(mpath, sta);
1649
1650	rcu_read_unlock();
1651	return 0;
1652}
1653
1654static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop,
1655			    struct mpath_info *pinfo)
1656{
1657	struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop);
1658
1659	if (next_hop_sta)
1660		memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN);
1661	else
1662		eth_zero_addr(next_hop);
1663
1664	memset(pinfo, 0, sizeof(*pinfo));
1665
1666	pinfo->generation = mpath->sdata->u.mesh.mesh_paths_generation;
1667
1668	pinfo->filled = MPATH_INFO_FRAME_QLEN |
1669			MPATH_INFO_SN |
1670			MPATH_INFO_METRIC |
1671			MPATH_INFO_EXPTIME |
1672			MPATH_INFO_DISCOVERY_TIMEOUT |
1673			MPATH_INFO_DISCOVERY_RETRIES |
1674			MPATH_INFO_FLAGS;
1675
1676	pinfo->frame_qlen = mpath->frame_queue.qlen;
1677	pinfo->sn = mpath->sn;
1678	pinfo->metric = mpath->metric;
1679	if (time_before(jiffies, mpath->exp_time))
1680		pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies);
1681	pinfo->discovery_timeout =
1682			jiffies_to_msecs(mpath->discovery_timeout);
1683	pinfo->discovery_retries = mpath->discovery_retries;
1684	if (mpath->flags & MESH_PATH_ACTIVE)
1685		pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE;
1686	if (mpath->flags & MESH_PATH_RESOLVING)
1687		pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING;
1688	if (mpath->flags & MESH_PATH_SN_VALID)
1689		pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID;
1690	if (mpath->flags & MESH_PATH_FIXED)
1691		pinfo->flags |= NL80211_MPATH_FLAG_FIXED;
1692	if (mpath->flags & MESH_PATH_RESOLVED)
1693		pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED;
1694}
1695
1696static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev,
1697			       u8 *dst, u8 *next_hop, struct mpath_info *pinfo)
1698
1699{
1700	struct ieee80211_sub_if_data *sdata;
1701	struct mesh_path *mpath;
1702
1703	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1704
1705	rcu_read_lock();
1706	mpath = mesh_path_lookup(sdata, dst);
1707	if (!mpath) {
1708		rcu_read_unlock();
1709		return -ENOENT;
1710	}
1711	memcpy(dst, mpath->dst, ETH_ALEN);
1712	mpath_set_pinfo(mpath, next_hop, pinfo);
1713	rcu_read_unlock();
1714	return 0;
1715}
1716
1717static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev,
1718				int idx, u8 *dst, u8 *next_hop,
1719				struct mpath_info *pinfo)
1720{
1721	struct ieee80211_sub_if_data *sdata;
1722	struct mesh_path *mpath;
1723
1724	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1725
1726	rcu_read_lock();
1727	mpath = mesh_path_lookup_by_idx(sdata, idx);
1728	if (!mpath) {
1729		rcu_read_unlock();
1730		return -ENOENT;
1731	}
1732	memcpy(dst, mpath->dst, ETH_ALEN);
1733	mpath_set_pinfo(mpath, next_hop, pinfo);
1734	rcu_read_unlock();
1735	return 0;
1736}
1737
1738static void mpp_set_pinfo(struct mesh_path *mpath, u8 *mpp,
1739			  struct mpath_info *pinfo)
1740{
1741	memset(pinfo, 0, sizeof(*pinfo));
1742	memcpy(mpp, mpath->mpp, ETH_ALEN);
1743
1744	pinfo->generation = mpath->sdata->u.mesh.mpp_paths_generation;
1745}
1746
1747static int ieee80211_get_mpp(struct wiphy *wiphy, struct net_device *dev,
1748			     u8 *dst, u8 *mpp, struct mpath_info *pinfo)
1749
1750{
1751	struct ieee80211_sub_if_data *sdata;
1752	struct mesh_path *mpath;
1753
1754	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1755
1756	rcu_read_lock();
1757	mpath = mpp_path_lookup(sdata, dst);
1758	if (!mpath) {
1759		rcu_read_unlock();
1760		return -ENOENT;
1761	}
1762	memcpy(dst, mpath->dst, ETH_ALEN);
1763	mpp_set_pinfo(mpath, mpp, pinfo);
1764	rcu_read_unlock();
1765	return 0;
1766}
1767
1768static int ieee80211_dump_mpp(struct wiphy *wiphy, struct net_device *dev,
1769			      int idx, u8 *dst, u8 *mpp,
1770			      struct mpath_info *pinfo)
1771{
1772	struct ieee80211_sub_if_data *sdata;
1773	struct mesh_path *mpath;
1774
1775	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1776
1777	rcu_read_lock();
1778	mpath = mpp_path_lookup_by_idx(sdata, idx);
1779	if (!mpath) {
1780		rcu_read_unlock();
1781		return -ENOENT;
1782	}
1783	memcpy(dst, mpath->dst, ETH_ALEN);
1784	mpp_set_pinfo(mpath, mpp, pinfo);
1785	rcu_read_unlock();
1786	return 0;
1787}
1788
1789static int ieee80211_get_mesh_config(struct wiphy *wiphy,
1790				struct net_device *dev,
1791				struct mesh_config *conf)
1792{
1793	struct ieee80211_sub_if_data *sdata;
1794	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1795
1796	memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config));
1797	return 0;
1798}
1799
1800static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask)
1801{
1802	return (mask >> (parm-1)) & 0x1;
1803}
1804
1805static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh,
1806		const struct mesh_setup *setup)
1807{
1808	u8 *new_ie;
1809	const u8 *old_ie;
1810	struct ieee80211_sub_if_data *sdata = container_of(ifmsh,
1811					struct ieee80211_sub_if_data, u.mesh);
1812
1813	/* allocate information elements */
1814	new_ie = NULL;
1815	old_ie = ifmsh->ie;
1816
1817	if (setup->ie_len) {
1818		new_ie = kmemdup(setup->ie, setup->ie_len,
1819				GFP_KERNEL);
1820		if (!new_ie)
1821			return -ENOMEM;
1822	}
1823	ifmsh->ie_len = setup->ie_len;
1824	ifmsh->ie = new_ie;
1825	kfree(old_ie);
1826
1827	/* now copy the rest of the setup parameters */
1828	ifmsh->mesh_id_len = setup->mesh_id_len;
1829	memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len);
1830	ifmsh->mesh_sp_id = setup->sync_method;
1831	ifmsh->mesh_pp_id = setup->path_sel_proto;
1832	ifmsh->mesh_pm_id = setup->path_metric;
1833	ifmsh->user_mpm = setup->user_mpm;
1834	ifmsh->mesh_auth_id = setup->auth_id;
1835	ifmsh->security = IEEE80211_MESH_SEC_NONE;
 
1836	if (setup->is_authenticated)
1837		ifmsh->security |= IEEE80211_MESH_SEC_AUTHED;
1838	if (setup->is_secure)
1839		ifmsh->security |= IEEE80211_MESH_SEC_SECURED;
1840
1841	/* mcast rate setting in Mesh Node */
1842	memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate,
1843						sizeof(setup->mcast_rate));
1844	sdata->vif.bss_conf.basic_rates = setup->basic_rates;
1845
1846	sdata->vif.bss_conf.beacon_int = setup->beacon_interval;
1847	sdata->vif.bss_conf.dtim_period = setup->dtim_period;
1848
1849	return 0;
1850}
1851
1852static int ieee80211_update_mesh_config(struct wiphy *wiphy,
1853					struct net_device *dev, u32 mask,
1854					const struct mesh_config *nconf)
1855{
1856	struct mesh_config *conf;
1857	struct ieee80211_sub_if_data *sdata;
1858	struct ieee80211_if_mesh *ifmsh;
1859
1860	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1861	ifmsh = &sdata->u.mesh;
1862
1863	/* Set the config options which we are interested in setting */
1864	conf = &(sdata->u.mesh.mshcfg);
1865	if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask))
1866		conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout;
1867	if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask))
1868		conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout;
1869	if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask))
1870		conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout;
1871	if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask))
1872		conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks;
1873	if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask))
1874		conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries;
1875	if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask))
1876		conf->dot11MeshTTL = nconf->dot11MeshTTL;
1877	if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask))
1878		conf->element_ttl = nconf->element_ttl;
1879	if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) {
1880		if (ifmsh->user_mpm)
1881			return -EBUSY;
1882		conf->auto_open_plinks = nconf->auto_open_plinks;
1883	}
1884	if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask))
1885		conf->dot11MeshNbrOffsetMaxNeighbor =
1886			nconf->dot11MeshNbrOffsetMaxNeighbor;
1887	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask))
1888		conf->dot11MeshHWMPmaxPREQretries =
1889			nconf->dot11MeshHWMPmaxPREQretries;
1890	if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask))
1891		conf->path_refresh_time = nconf->path_refresh_time;
1892	if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask))
1893		conf->min_discovery_timeout = nconf->min_discovery_timeout;
1894	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask))
1895		conf->dot11MeshHWMPactivePathTimeout =
1896			nconf->dot11MeshHWMPactivePathTimeout;
1897	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask))
1898		conf->dot11MeshHWMPpreqMinInterval =
1899			nconf->dot11MeshHWMPpreqMinInterval;
1900	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask))
1901		conf->dot11MeshHWMPperrMinInterval =
1902			nconf->dot11MeshHWMPperrMinInterval;
1903	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
1904			   mask))
1905		conf->dot11MeshHWMPnetDiameterTraversalTime =
1906			nconf->dot11MeshHWMPnetDiameterTraversalTime;
1907	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) {
1908		conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode;
1909		ieee80211_mesh_root_setup(ifmsh);
1910	}
1911	if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) {
1912		/* our current gate announcement implementation rides on root
1913		 * announcements, so require this ifmsh to also be a root node
1914		 * */
1915		if (nconf->dot11MeshGateAnnouncementProtocol &&
1916		    !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) {
1917			conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN;
1918			ieee80211_mesh_root_setup(ifmsh);
1919		}
1920		conf->dot11MeshGateAnnouncementProtocol =
1921			nconf->dot11MeshGateAnnouncementProtocol;
1922	}
1923	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask))
1924		conf->dot11MeshHWMPRannInterval =
1925			nconf->dot11MeshHWMPRannInterval;
1926	if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask))
1927		conf->dot11MeshForwarding = nconf->dot11MeshForwarding;
1928	if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) {
1929		/* our RSSI threshold implementation is supported only for
1930		 * devices that report signal in dBm.
1931		 */
1932		if (!ieee80211_hw_check(&sdata->local->hw, SIGNAL_DBM))
1933			return -ENOTSUPP;
1934		conf->rssi_threshold = nconf->rssi_threshold;
1935	}
1936	if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) {
1937		conf->ht_opmode = nconf->ht_opmode;
1938		sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode;
1939		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT);
1940	}
1941	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask))
1942		conf->dot11MeshHWMPactivePathToRootTimeout =
1943			nconf->dot11MeshHWMPactivePathToRootTimeout;
1944	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask))
1945		conf->dot11MeshHWMProotInterval =
1946			nconf->dot11MeshHWMProotInterval;
1947	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask))
1948		conf->dot11MeshHWMPconfirmationInterval =
1949			nconf->dot11MeshHWMPconfirmationInterval;
1950	if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) {
1951		conf->power_mode = nconf->power_mode;
1952		ieee80211_mps_local_status_update(sdata);
1953	}
1954	if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask))
1955		conf->dot11MeshAwakeWindowDuration =
1956			nconf->dot11MeshAwakeWindowDuration;
1957	if (_chg_mesh_attr(NL80211_MESHCONF_PLINK_TIMEOUT, mask))
1958		conf->plink_timeout = nconf->plink_timeout;
1959	ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON);
1960	return 0;
1961}
1962
1963static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev,
1964			       const struct mesh_config *conf,
1965			       const struct mesh_setup *setup)
1966{
1967	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1968	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1969	int err;
1970
1971	memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config));
1972	err = copy_mesh_setup(ifmsh, setup);
1973	if (err)
1974		return err;
1975
 
 
1976	/* can mesh use other SMPS modes? */
1977	sdata->smps_mode = IEEE80211_SMPS_OFF;
1978	sdata->needed_rx_chains = sdata->local->rx_chains;
1979
1980	mutex_lock(&sdata->local->mtx);
1981	err = ieee80211_vif_use_channel(sdata, &setup->chandef,
1982					IEEE80211_CHANCTX_SHARED);
1983	mutex_unlock(&sdata->local->mtx);
1984	if (err)
1985		return err;
1986
1987	return ieee80211_start_mesh(sdata);
1988}
1989
1990static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev)
1991{
1992	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1993
1994	ieee80211_stop_mesh(sdata);
1995	mutex_lock(&sdata->local->mtx);
1996	ieee80211_vif_release_channel(sdata);
1997	mutex_unlock(&sdata->local->mtx);
1998
1999	return 0;
2000}
2001#endif
2002
2003static int ieee80211_change_bss(struct wiphy *wiphy,
2004				struct net_device *dev,
2005				struct bss_parameters *params)
2006{
2007	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2008	enum nl80211_band band;
2009	u32 changed = 0;
2010
2011	if (!sdata_dereference(sdata->u.ap.beacon, sdata))
2012		return -ENOENT;
2013
2014	band = ieee80211_get_sdata_band(sdata);
 
 
2015
2016	if (params->use_cts_prot >= 0) {
2017		sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot;
2018		changed |= BSS_CHANGED_ERP_CTS_PROT;
2019	}
2020	if (params->use_short_preamble >= 0) {
2021		sdata->vif.bss_conf.use_short_preamble =
2022			params->use_short_preamble;
2023		changed |= BSS_CHANGED_ERP_PREAMBLE;
2024	}
2025
2026	if (!sdata->vif.bss_conf.use_short_slot &&
2027	    band == NL80211_BAND_5GHZ) {
2028		sdata->vif.bss_conf.use_short_slot = true;
2029		changed |= BSS_CHANGED_ERP_SLOT;
2030	}
2031
2032	if (params->use_short_slot_time >= 0) {
2033		sdata->vif.bss_conf.use_short_slot =
2034			params->use_short_slot_time;
2035		changed |= BSS_CHANGED_ERP_SLOT;
2036	}
2037
2038	if (params->basic_rates) {
2039		ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
2040					 wiphy->bands[band],
2041					 params->basic_rates,
2042					 params->basic_rates_len,
2043					 &sdata->vif.bss_conf.basic_rates);
2044		changed |= BSS_CHANGED_BASIC_RATES;
 
2045	}
2046
2047	if (params->ap_isolate >= 0) {
2048		if (params->ap_isolate)
2049			sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
2050		else
2051			sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
2052		ieee80211_check_fast_rx_iface(sdata);
2053	}
2054
2055	if (params->ht_opmode >= 0) {
2056		sdata->vif.bss_conf.ht_operation_mode =
2057			(u16) params->ht_opmode;
2058		changed |= BSS_CHANGED_HT;
2059	}
2060
2061	if (params->p2p_ctwindow >= 0) {
2062		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
2063					~IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
2064		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
2065			params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
2066		changed |= BSS_CHANGED_P2P_PS;
2067	}
2068
2069	if (params->p2p_opp_ps > 0) {
2070		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
2071					IEEE80211_P2P_OPPPS_ENABLE_BIT;
2072		changed |= BSS_CHANGED_P2P_PS;
2073	} else if (params->p2p_opp_ps == 0) {
2074		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
2075					~IEEE80211_P2P_OPPPS_ENABLE_BIT;
2076		changed |= BSS_CHANGED_P2P_PS;
2077	}
2078
2079	ieee80211_bss_info_change_notify(sdata, changed);
2080
2081	return 0;
2082}
2083
2084static int ieee80211_set_txq_params(struct wiphy *wiphy,
2085				    struct net_device *dev,
2086				    struct ieee80211_txq_params *params)
2087{
2088	struct ieee80211_local *local = wiphy_priv(wiphy);
2089	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2090	struct ieee80211_tx_queue_params p;
2091
2092	if (!local->ops->conf_tx)
2093		return -EOPNOTSUPP;
2094
2095	if (local->hw.queues < IEEE80211_NUM_ACS)
2096		return -EOPNOTSUPP;
2097
2098	memset(&p, 0, sizeof(p));
2099	p.aifs = params->aifs;
2100	p.cw_max = params->cwmax;
2101	p.cw_min = params->cwmin;
2102	p.txop = params->txop;
2103
2104	/*
2105	 * Setting tx queue params disables u-apsd because it's only
2106	 * called in master mode.
2107	 */
2108	p.uapsd = false;
2109
 
 
2110	sdata->tx_conf[params->ac] = p;
2111	if (drv_conf_tx(local, sdata, params->ac, &p)) {
2112		wiphy_debug(local->hw.wiphy,
2113			    "failed to set TX queue parameters for AC %d\n",
2114			    params->ac);
2115		return -EINVAL;
2116	}
2117
2118	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS);
2119
2120	return 0;
2121}
2122
2123#ifdef CONFIG_PM
2124static int ieee80211_suspend(struct wiphy *wiphy,
2125			     struct cfg80211_wowlan *wowlan)
2126{
2127	return __ieee80211_suspend(wiphy_priv(wiphy), wowlan);
2128}
2129
2130static int ieee80211_resume(struct wiphy *wiphy)
2131{
2132	return __ieee80211_resume(wiphy_priv(wiphy));
2133}
2134#else
2135#define ieee80211_suspend NULL
2136#define ieee80211_resume NULL
2137#endif
2138
2139static int ieee80211_scan(struct wiphy *wiphy,
2140			  struct cfg80211_scan_request *req)
2141{
2142	struct ieee80211_sub_if_data *sdata;
2143
2144	sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev);
2145
2146	switch (ieee80211_vif_type_p2p(&sdata->vif)) {
2147	case NL80211_IFTYPE_STATION:
2148	case NL80211_IFTYPE_ADHOC:
2149	case NL80211_IFTYPE_MESH_POINT:
2150	case NL80211_IFTYPE_P2P_CLIENT:
2151	case NL80211_IFTYPE_P2P_DEVICE:
2152		break;
2153	case NL80211_IFTYPE_P2P_GO:
2154		if (sdata->local->ops->hw_scan)
2155			break;
2156		/*
2157		 * FIXME: implement NoA while scanning in software,
2158		 * for now fall through to allow scanning only when
2159		 * beaconing hasn't been configured yet
2160		 */
 
2161	case NL80211_IFTYPE_AP:
2162		/*
2163		 * If the scan has been forced (and the driver supports
2164		 * forcing), don't care about being beaconing already.
2165		 * This will create problems to the attached stations (e.g. all
2166		 * the  frames sent while scanning on other channel will be
2167		 * lost)
2168		 */
2169		if (sdata->u.ap.beacon &&
2170		    (!(wiphy->features & NL80211_FEATURE_AP_SCAN) ||
2171		     !(req->flags & NL80211_SCAN_FLAG_AP)))
2172			return -EOPNOTSUPP;
2173		break;
2174	case NL80211_IFTYPE_NAN:
2175	default:
2176		return -EOPNOTSUPP;
2177	}
2178
2179	return ieee80211_request_scan(sdata, req);
2180}
2181
2182static void ieee80211_abort_scan(struct wiphy *wiphy, struct wireless_dev *wdev)
2183{
2184	ieee80211_scan_cancel(wiphy_priv(wiphy));
2185}
2186
2187static int
2188ieee80211_sched_scan_start(struct wiphy *wiphy,
2189			   struct net_device *dev,
2190			   struct cfg80211_sched_scan_request *req)
2191{
2192	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2193
2194	if (!sdata->local->ops->sched_scan_start)
2195		return -EOPNOTSUPP;
2196
2197	return ieee80211_request_sched_scan_start(sdata, req);
2198}
2199
2200static int
2201ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev)
 
2202{
2203	struct ieee80211_local *local = wiphy_priv(wiphy);
2204
2205	if (!local->ops->sched_scan_stop)
2206		return -EOPNOTSUPP;
2207
2208	return ieee80211_request_sched_scan_stop(local);
2209}
2210
2211static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev,
2212			  struct cfg80211_auth_request *req)
2213{
2214	return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req);
2215}
2216
2217static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev,
2218			   struct cfg80211_assoc_request *req)
2219{
2220	return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
2221}
2222
2223static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev,
2224			    struct cfg80211_deauth_request *req)
2225{
2226	return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req);
2227}
2228
2229static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev,
2230			      struct cfg80211_disassoc_request *req)
2231{
2232	return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
2233}
2234
2235static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
2236			       struct cfg80211_ibss_params *params)
2237{
2238	return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params);
2239}
2240
2241static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
2242{
2243	return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev));
2244}
2245
2246static int ieee80211_join_ocb(struct wiphy *wiphy, struct net_device *dev,
2247			      struct ocb_setup *setup)
2248{
2249	return ieee80211_ocb_join(IEEE80211_DEV_TO_SUB_IF(dev), setup);
2250}
2251
2252static int ieee80211_leave_ocb(struct wiphy *wiphy, struct net_device *dev)
2253{
2254	return ieee80211_ocb_leave(IEEE80211_DEV_TO_SUB_IF(dev));
2255}
2256
2257static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev,
2258				    int rate[NUM_NL80211_BANDS])
2259{
2260	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2261
2262	memcpy(sdata->vif.bss_conf.mcast_rate, rate,
2263	       sizeof(int) * NUM_NL80211_BANDS);
2264
 
 
2265	return 0;
2266}
2267
2268static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
2269{
2270	struct ieee80211_local *local = wiphy_priv(wiphy);
2271	int err;
2272
2273	if (changed & WIPHY_PARAM_FRAG_THRESHOLD) {
2274		ieee80211_check_fast_xmit_all(local);
2275
2276		err = drv_set_frag_threshold(local, wiphy->frag_threshold);
2277
2278		if (err) {
2279			ieee80211_check_fast_xmit_all(local);
2280			return err;
2281		}
2282	}
2283
2284	if ((changed & WIPHY_PARAM_COVERAGE_CLASS) ||
2285	    (changed & WIPHY_PARAM_DYN_ACK)) {
2286		s16 coverage_class;
2287
2288		coverage_class = changed & WIPHY_PARAM_COVERAGE_CLASS ?
2289					wiphy->coverage_class : -1;
2290		err = drv_set_coverage_class(local, coverage_class);
2291
2292		if (err)
2293			return err;
2294	}
2295
2296	if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
2297		err = drv_set_rts_threshold(local, wiphy->rts_threshold);
2298
2299		if (err)
2300			return err;
2301	}
2302
2303	if (changed & WIPHY_PARAM_RETRY_SHORT) {
2304		if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY)
2305			return -EINVAL;
2306		local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
2307	}
2308	if (changed & WIPHY_PARAM_RETRY_LONG) {
2309		if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY)
2310			return -EINVAL;
2311		local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
2312	}
2313	if (changed &
2314	    (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG))
2315		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS);
2316
2317	return 0;
2318}
2319
2320static int ieee80211_set_tx_power(struct wiphy *wiphy,
2321				  struct wireless_dev *wdev,
2322				  enum nl80211_tx_power_setting type, int mbm)
2323{
2324	struct ieee80211_local *local = wiphy_priv(wiphy);
2325	struct ieee80211_sub_if_data *sdata;
2326	enum nl80211_tx_power_setting txp_type = type;
2327	bool update_txp_type = false;
 
2328
2329	if (wdev) {
2330		sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2331
 
 
 
 
 
 
2332		switch (type) {
2333		case NL80211_TX_POWER_AUTOMATIC:
2334			sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2335			txp_type = NL80211_TX_POWER_LIMITED;
2336			break;
2337		case NL80211_TX_POWER_LIMITED:
2338		case NL80211_TX_POWER_FIXED:
2339			if (mbm < 0 || (mbm % 100))
2340				return -EOPNOTSUPP;
2341			sdata->user_power_level = MBM_TO_DBM(mbm);
2342			break;
2343		}
2344
2345		if (txp_type != sdata->vif.bss_conf.txpower_type) {
2346			update_txp_type = true;
2347			sdata->vif.bss_conf.txpower_type = txp_type;
2348		}
2349
2350		ieee80211_recalc_txpower(sdata, update_txp_type);
2351
2352		return 0;
2353	}
2354
2355	switch (type) {
2356	case NL80211_TX_POWER_AUTOMATIC:
2357		local->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2358		txp_type = NL80211_TX_POWER_LIMITED;
2359		break;
2360	case NL80211_TX_POWER_LIMITED:
2361	case NL80211_TX_POWER_FIXED:
2362		if (mbm < 0 || (mbm % 100))
2363			return -EOPNOTSUPP;
2364		local->user_power_level = MBM_TO_DBM(mbm);
2365		break;
2366	}
2367
2368	mutex_lock(&local->iflist_mtx);
2369	list_for_each_entry(sdata, &local->interfaces, list) {
 
 
 
 
2370		sdata->user_power_level = local->user_power_level;
2371		if (txp_type != sdata->vif.bss_conf.txpower_type)
2372			update_txp_type = true;
2373		sdata->vif.bss_conf.txpower_type = txp_type;
2374	}
2375	list_for_each_entry(sdata, &local->interfaces, list)
 
 
2376		ieee80211_recalc_txpower(sdata, update_txp_type);
 
2377	mutex_unlock(&local->iflist_mtx);
2378
 
 
 
 
 
 
 
 
 
 
 
 
2379	return 0;
2380}
2381
2382static int ieee80211_get_tx_power(struct wiphy *wiphy,
2383				  struct wireless_dev *wdev,
2384				  int *dbm)
2385{
2386	struct ieee80211_local *local = wiphy_priv(wiphy);
2387	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2388
2389	if (local->ops->get_txpower)
2390		return drv_get_txpower(local, sdata, dbm);
2391
2392	if (!local->use_chanctx)
2393		*dbm = local->hw.conf.power_level;
2394	else
2395		*dbm = sdata->vif.bss_conf.txpower;
2396
2397	return 0;
2398}
2399
2400static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev,
2401				  const u8 *addr)
2402{
2403	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2404
2405	memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN);
2406
2407	return 0;
2408}
2409
2410static void ieee80211_rfkill_poll(struct wiphy *wiphy)
2411{
2412	struct ieee80211_local *local = wiphy_priv(wiphy);
2413
2414	drv_rfkill_poll(local);
2415}
2416
2417#ifdef CONFIG_NL80211_TESTMODE
2418static int ieee80211_testmode_cmd(struct wiphy *wiphy,
2419				  struct wireless_dev *wdev,
2420				  void *data, int len)
2421{
2422	struct ieee80211_local *local = wiphy_priv(wiphy);
2423	struct ieee80211_vif *vif = NULL;
2424
2425	if (!local->ops->testmode_cmd)
2426		return -EOPNOTSUPP;
2427
2428	if (wdev) {
2429		struct ieee80211_sub_if_data *sdata;
2430
2431		sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2432		if (sdata->flags & IEEE80211_SDATA_IN_DRIVER)
2433			vif = &sdata->vif;
2434	}
2435
2436	return local->ops->testmode_cmd(&local->hw, vif, data, len);
2437}
2438
2439static int ieee80211_testmode_dump(struct wiphy *wiphy,
2440				   struct sk_buff *skb,
2441				   struct netlink_callback *cb,
2442				   void *data, int len)
2443{
2444	struct ieee80211_local *local = wiphy_priv(wiphy);
2445
2446	if (!local->ops->testmode_dump)
2447		return -EOPNOTSUPP;
2448
2449	return local->ops->testmode_dump(&local->hw, skb, cb, data, len);
2450}
2451#endif
2452
2453int __ieee80211_request_smps_ap(struct ieee80211_sub_if_data *sdata,
2454				enum ieee80211_smps_mode smps_mode)
2455{
2456	struct sta_info *sta;
2457	enum ieee80211_smps_mode old_req;
2458
2459	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP))
2460		return -EINVAL;
2461
2462	if (sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2463		return 0;
2464
2465	old_req = sdata->u.ap.req_smps;
2466	sdata->u.ap.req_smps = smps_mode;
2467
2468	/* AUTOMATIC doesn't mean much for AP - don't allow it */
2469	if (old_req == smps_mode ||
2470	    smps_mode == IEEE80211_SMPS_AUTOMATIC)
2471		return 0;
2472
2473	ht_dbg(sdata,
2474	       "SMPS %d requested in AP mode, sending Action frame to %d stations\n",
2475	       smps_mode, atomic_read(&sdata->u.ap.num_mcast_sta));
2476
2477	mutex_lock(&sdata->local->sta_mtx);
2478	list_for_each_entry(sta, &sdata->local->sta_list, list) {
2479		/*
2480		 * Only stations associated to our AP and
2481		 * associated VLANs
2482		 */
2483		if (sta->sdata->bss != &sdata->u.ap)
2484			continue;
2485
2486		/* This station doesn't support MIMO - skip it */
2487		if (sta_info_tx_streams(sta) == 1)
2488			continue;
2489
2490		/*
2491		 * Don't wake up a STA just to send the action frame
2492		 * unless we are getting more restrictive.
2493		 */
2494		if (test_sta_flag(sta, WLAN_STA_PS_STA) &&
2495		    !ieee80211_smps_is_restrictive(sta->known_smps_mode,
2496						   smps_mode)) {
2497			ht_dbg(sdata, "Won't send SMPS to sleeping STA %pM\n",
2498			       sta->sta.addr);
2499			continue;
2500		}
2501
2502		/*
2503		 * If the STA is not authorized, wait until it gets
2504		 * authorized and the action frame will be sent then.
2505		 */
2506		if (!test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2507			continue;
2508
2509		ht_dbg(sdata, "Sending SMPS to %pM\n", sta->sta.addr);
2510		ieee80211_send_smps_action(sdata, smps_mode, sta->sta.addr,
2511					   sdata->vif.bss_conf.bssid);
2512	}
2513	mutex_unlock(&sdata->local->sta_mtx);
2514
2515	sdata->smps_mode = smps_mode;
2516	ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2517
2518	return 0;
2519}
2520
2521int __ieee80211_request_smps_mgd(struct ieee80211_sub_if_data *sdata,
2522				 enum ieee80211_smps_mode smps_mode)
2523{
2524	const u8 *ap;
2525	enum ieee80211_smps_mode old_req;
2526	int err;
2527	struct sta_info *sta;
2528	bool tdls_peer_found = false;
2529
2530	lockdep_assert_held(&sdata->wdev.mtx);
2531
2532	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION))
2533		return -EINVAL;
2534
2535	old_req = sdata->u.mgd.req_smps;
2536	sdata->u.mgd.req_smps = smps_mode;
2537
2538	if (old_req == smps_mode &&
2539	    smps_mode != IEEE80211_SMPS_AUTOMATIC)
2540		return 0;
2541
2542	/*
2543	 * If not associated, or current association is not an HT
2544	 * association, there's no need to do anything, just store
2545	 * the new value until we associate.
2546	 */
2547	if (!sdata->u.mgd.associated ||
2548	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2549		return 0;
2550
2551	ap = sdata->u.mgd.associated->bssid;
2552
2553	rcu_read_lock();
2554	list_for_each_entry_rcu(sta, &sdata->local->sta_list, list) {
2555		if (!sta->sta.tdls || sta->sdata != sdata || !sta->uploaded ||
2556		    !test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2557			continue;
2558
2559		tdls_peer_found = true;
2560		break;
2561	}
2562	rcu_read_unlock();
2563
2564	if (smps_mode == IEEE80211_SMPS_AUTOMATIC) {
2565		if (tdls_peer_found || !sdata->u.mgd.powersave)
2566			smps_mode = IEEE80211_SMPS_OFF;
2567		else
2568			smps_mode = IEEE80211_SMPS_DYNAMIC;
2569	}
2570
2571	/* send SM PS frame to AP */
2572	err = ieee80211_send_smps_action(sdata, smps_mode,
2573					 ap, ap);
2574	if (err)
2575		sdata->u.mgd.req_smps = old_req;
2576	else if (smps_mode != IEEE80211_SMPS_OFF && tdls_peer_found)
2577		ieee80211_teardown_tdls_peers(sdata);
2578
2579	return err;
2580}
2581
2582static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev,
2583				    bool enabled, int timeout)
2584{
2585	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2586	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2587
2588	if (sdata->vif.type != NL80211_IFTYPE_STATION)
2589		return -EOPNOTSUPP;
2590
2591	if (!ieee80211_hw_check(&local->hw, SUPPORTS_PS))
2592		return -EOPNOTSUPP;
2593
2594	if (enabled == sdata->u.mgd.powersave &&
2595	    timeout == local->dynamic_ps_forced_timeout)
2596		return 0;
2597
2598	sdata->u.mgd.powersave = enabled;
2599	local->dynamic_ps_forced_timeout = timeout;
2600
2601	/* no change, but if automatic follow powersave */
2602	sdata_lock(sdata);
2603	__ieee80211_request_smps_mgd(sdata, sdata->u.mgd.req_smps);
2604	sdata_unlock(sdata);
2605
2606	if (ieee80211_hw_check(&local->hw, SUPPORTS_DYNAMIC_PS))
2607		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2608
2609	ieee80211_recalc_ps(local);
2610	ieee80211_recalc_ps_vif(sdata);
 
2611
2612	return 0;
2613}
2614
2615static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy,
2616					 struct net_device *dev,
2617					 s32 rssi_thold, u32 rssi_hyst)
2618{
2619	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2620	struct ieee80211_vif *vif = &sdata->vif;
2621	struct ieee80211_bss_conf *bss_conf = &vif->bss_conf;
2622
2623	if (rssi_thold == bss_conf->cqm_rssi_thold &&
2624	    rssi_hyst == bss_conf->cqm_rssi_hyst)
2625		return 0;
2626
2627	if (sdata->vif.driver_flags & IEEE80211_VIF_BEACON_FILTER &&
2628	    !(sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI))
2629		return -EOPNOTSUPP;
2630
2631	bss_conf->cqm_rssi_thold = rssi_thold;
2632	bss_conf->cqm_rssi_hyst = rssi_hyst;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
2633	sdata->u.mgd.last_cqm_event_signal = 0;
2634
2635	/* tell the driver upon association, unless already associated */
2636	if (sdata->u.mgd.associated &&
2637	    sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI)
2638		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM);
2639
2640	return 0;
2641}
2642
2643static int ieee80211_set_bitrate_mask(struct wiphy *wiphy,
2644				      struct net_device *dev,
2645				      const u8 *addr,
2646				      const struct cfg80211_bitrate_mask *mask)
2647{
2648	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2649	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2650	int i, ret;
2651
2652	if (!ieee80211_sdata_running(sdata))
2653		return -ENETDOWN;
2654
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
2655	if (ieee80211_hw_check(&local->hw, HAS_RATE_CONTROL)) {
2656		ret = drv_set_bitrate_mask(local, sdata, mask);
2657		if (ret)
2658			return ret;
2659	}
2660
2661	for (i = 0; i < NUM_NL80211_BANDS; i++) {
2662		struct ieee80211_supported_band *sband = wiphy->bands[i];
2663		int j;
2664
2665		sdata->rc_rateidx_mask[i] = mask->control[i].legacy;
2666		memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].ht_mcs,
2667		       sizeof(mask->control[i].ht_mcs));
2668		memcpy(sdata->rc_rateidx_vht_mcs_mask[i],
2669		       mask->control[i].vht_mcs,
2670		       sizeof(mask->control[i].vht_mcs));
2671
2672		sdata->rc_has_mcs_mask[i] = false;
2673		sdata->rc_has_vht_mcs_mask[i] = false;
2674		if (!sband)
2675			continue;
2676
2677		for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++) {
2678			if (~sdata->rc_rateidx_mcs_mask[i][j]) {
2679				sdata->rc_has_mcs_mask[i] = true;
2680				break;
2681			}
2682		}
2683
2684		for (j = 0; j < NL80211_VHT_NSS_MAX; j++) {
2685			if (~sdata->rc_rateidx_vht_mcs_mask[i][j]) {
2686				sdata->rc_has_vht_mcs_mask[i] = true;
2687				break;
2688			}
2689		}
2690	}
2691
2692	return 0;
2693}
2694
2695static int ieee80211_start_radar_detection(struct wiphy *wiphy,
2696					   struct net_device *dev,
2697					   struct cfg80211_chan_def *chandef,
2698					   u32 cac_time_ms)
2699{
2700	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2701	struct ieee80211_local *local = sdata->local;
2702	int err;
2703
2704	mutex_lock(&local->mtx);
2705	if (!list_empty(&local->roc_list) || local->scanning) {
2706		err = -EBUSY;
2707		goto out_unlock;
2708	}
2709
2710	/* whatever, but channel contexts should not complain about that one */
2711	sdata->smps_mode = IEEE80211_SMPS_OFF;
2712	sdata->needed_rx_chains = local->rx_chains;
2713
2714	err = ieee80211_vif_use_channel(sdata, chandef,
2715					IEEE80211_CHANCTX_SHARED);
2716	if (err)
2717		goto out_unlock;
2718
2719	ieee80211_queue_delayed_work(&sdata->local->hw,
2720				     &sdata->dfs_cac_timer_work,
2721				     msecs_to_jiffies(cac_time_ms));
2722
2723 out_unlock:
2724	mutex_unlock(&local->mtx);
2725	return err;
2726}
2727
2728static struct cfg80211_beacon_data *
2729cfg80211_beacon_dup(struct cfg80211_beacon_data *beacon)
2730{
2731	struct cfg80211_beacon_data *new_beacon;
2732	u8 *pos;
2733	int len;
2734
2735	len = beacon->head_len + beacon->tail_len + beacon->beacon_ies_len +
2736	      beacon->proberesp_ies_len + beacon->assocresp_ies_len +
2737	      beacon->probe_resp_len;
2738
2739	new_beacon = kzalloc(sizeof(*new_beacon) + len, GFP_KERNEL);
2740	if (!new_beacon)
2741		return NULL;
2742
2743	pos = (u8 *)(new_beacon + 1);
2744	if (beacon->head_len) {
2745		new_beacon->head_len = beacon->head_len;
2746		new_beacon->head = pos;
2747		memcpy(pos, beacon->head, beacon->head_len);
2748		pos += beacon->head_len;
2749	}
2750	if (beacon->tail_len) {
2751		new_beacon->tail_len = beacon->tail_len;
2752		new_beacon->tail = pos;
2753		memcpy(pos, beacon->tail, beacon->tail_len);
2754		pos += beacon->tail_len;
2755	}
2756	if (beacon->beacon_ies_len) {
2757		new_beacon->beacon_ies_len = beacon->beacon_ies_len;
2758		new_beacon->beacon_ies = pos;
2759		memcpy(pos, beacon->beacon_ies, beacon->beacon_ies_len);
2760		pos += beacon->beacon_ies_len;
2761	}
2762	if (beacon->proberesp_ies_len) {
2763		new_beacon->proberesp_ies_len = beacon->proberesp_ies_len;
2764		new_beacon->proberesp_ies = pos;
2765		memcpy(pos, beacon->proberesp_ies, beacon->proberesp_ies_len);
2766		pos += beacon->proberesp_ies_len;
2767	}
2768	if (beacon->assocresp_ies_len) {
2769		new_beacon->assocresp_ies_len = beacon->assocresp_ies_len;
2770		new_beacon->assocresp_ies = pos;
2771		memcpy(pos, beacon->assocresp_ies, beacon->assocresp_ies_len);
2772		pos += beacon->assocresp_ies_len;
2773	}
2774	if (beacon->probe_resp_len) {
2775		new_beacon->probe_resp_len = beacon->probe_resp_len;
2776		beacon->probe_resp = pos;
2777		memcpy(pos, beacon->probe_resp, beacon->probe_resp_len);
2778		pos += beacon->probe_resp_len;
2779	}
2780
2781	return new_beacon;
2782}
2783
2784void ieee80211_csa_finish(struct ieee80211_vif *vif)
2785{
2786	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2787
2788	ieee80211_queue_work(&sdata->local->hw,
2789			     &sdata->csa_finalize_work);
2790}
2791EXPORT_SYMBOL(ieee80211_csa_finish);
2792
2793static int ieee80211_set_after_csa_beacon(struct ieee80211_sub_if_data *sdata,
2794					  u32 *changed)
2795{
2796	int err;
2797
2798	switch (sdata->vif.type) {
2799	case NL80211_IFTYPE_AP:
2800		err = ieee80211_assign_beacon(sdata, sdata->u.ap.next_beacon,
2801					      NULL);
2802		kfree(sdata->u.ap.next_beacon);
2803		sdata->u.ap.next_beacon = NULL;
2804
2805		if (err < 0)
2806			return err;
2807		*changed |= err;
2808		break;
2809	case NL80211_IFTYPE_ADHOC:
2810		err = ieee80211_ibss_finish_csa(sdata);
2811		if (err < 0)
2812			return err;
2813		*changed |= err;
2814		break;
2815#ifdef CONFIG_MAC80211_MESH
2816	case NL80211_IFTYPE_MESH_POINT:
2817		err = ieee80211_mesh_finish_csa(sdata);
2818		if (err < 0)
2819			return err;
2820		*changed |= err;
2821		break;
2822#endif
2823	default:
2824		WARN_ON(1);
2825		return -EINVAL;
2826	}
2827
2828	return 0;
2829}
2830
2831static int __ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
2832{
2833	struct ieee80211_local *local = sdata->local;
2834	u32 changed = 0;
2835	int err;
2836
2837	sdata_assert_lock(sdata);
2838	lockdep_assert_held(&local->mtx);
2839	lockdep_assert_held(&local->chanctx_mtx);
2840
2841	/*
2842	 * using reservation isn't immediate as it may be deferred until later
2843	 * with multi-vif. once reservation is complete it will re-schedule the
2844	 * work with no reserved_chanctx so verify chandef to check if it
2845	 * completed successfully
2846	 */
2847
2848	if (sdata->reserved_chanctx) {
2849		/*
2850		 * with multi-vif csa driver may call ieee80211_csa_finish()
2851		 * many times while waiting for other interfaces to use their
2852		 * reservations
2853		 */
2854		if (sdata->reserved_ready)
2855			return 0;
2856
2857		return ieee80211_vif_use_reserved_context(sdata);
2858	}
2859
2860	if (!cfg80211_chandef_identical(&sdata->vif.bss_conf.chandef,
2861					&sdata->csa_chandef))
2862		return -EINVAL;
2863
2864	sdata->vif.csa_active = false;
2865
2866	err = ieee80211_set_after_csa_beacon(sdata, &changed);
2867	if (err)
2868		return err;
2869
2870	ieee80211_bss_info_change_notify(sdata, changed);
2871
2872	if (sdata->csa_block_tx) {
2873		ieee80211_wake_vif_queues(local, sdata,
2874					  IEEE80211_QUEUE_STOP_REASON_CSA);
2875		sdata->csa_block_tx = false;
2876	}
2877
2878	err = drv_post_channel_switch(sdata);
2879	if (err)
2880		return err;
2881
2882	cfg80211_ch_switch_notify(sdata->dev, &sdata->csa_chandef);
2883
2884	return 0;
2885}
2886
2887static void ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
2888{
2889	if (__ieee80211_csa_finalize(sdata)) {
2890		sdata_info(sdata, "failed to finalize CSA, disconnecting\n");
2891		cfg80211_stop_iface(sdata->local->hw.wiphy, &sdata->wdev,
2892				    GFP_KERNEL);
2893	}
2894}
2895
2896void ieee80211_csa_finalize_work(struct work_struct *work)
2897{
2898	struct ieee80211_sub_if_data *sdata =
2899		container_of(work, struct ieee80211_sub_if_data,
2900			     csa_finalize_work);
2901	struct ieee80211_local *local = sdata->local;
2902
2903	sdata_lock(sdata);
2904	mutex_lock(&local->mtx);
2905	mutex_lock(&local->chanctx_mtx);
2906
2907	/* AP might have been stopped while waiting for the lock. */
2908	if (!sdata->vif.csa_active)
2909		goto unlock;
2910
2911	if (!ieee80211_sdata_running(sdata))
2912		goto unlock;
2913
2914	ieee80211_csa_finalize(sdata);
2915
2916unlock:
2917	mutex_unlock(&local->chanctx_mtx);
2918	mutex_unlock(&local->mtx);
2919	sdata_unlock(sdata);
2920}
2921
2922static int ieee80211_set_csa_beacon(struct ieee80211_sub_if_data *sdata,
2923				    struct cfg80211_csa_settings *params,
2924				    u32 *changed)
2925{
2926	struct ieee80211_csa_settings csa = {};
2927	int err;
2928
2929	switch (sdata->vif.type) {
2930	case NL80211_IFTYPE_AP:
2931		sdata->u.ap.next_beacon =
2932			cfg80211_beacon_dup(&params->beacon_after);
2933		if (!sdata->u.ap.next_beacon)
2934			return -ENOMEM;
2935
2936		/*
2937		 * With a count of 0, we don't have to wait for any
2938		 * TBTT before switching, so complete the CSA
2939		 * immediately.  In theory, with a count == 1 we
2940		 * should delay the switch until just before the next
2941		 * TBTT, but that would complicate things so we switch
2942		 * immediately too.  If we would delay the switch
2943		 * until the next TBTT, we would have to set the probe
2944		 * response here.
2945		 *
2946		 * TODO: A channel switch with count <= 1 without
2947		 * sending a CSA action frame is kind of useless,
2948		 * because the clients won't know we're changing
2949		 * channels.  The action frame must be implemented
2950		 * either here or in the userspace.
2951		 */
2952		if (params->count <= 1)
2953			break;
2954
2955		if ((params->n_counter_offsets_beacon >
2956		     IEEE80211_MAX_CSA_COUNTERS_NUM) ||
2957		    (params->n_counter_offsets_presp >
2958		     IEEE80211_MAX_CSA_COUNTERS_NUM))
2959			return -EINVAL;
2960
2961		csa.counter_offsets_beacon = params->counter_offsets_beacon;
2962		csa.counter_offsets_presp = params->counter_offsets_presp;
2963		csa.n_counter_offsets_beacon = params->n_counter_offsets_beacon;
2964		csa.n_counter_offsets_presp = params->n_counter_offsets_presp;
2965		csa.count = params->count;
2966
2967		err = ieee80211_assign_beacon(sdata, &params->beacon_csa, &csa);
2968		if (err < 0) {
2969			kfree(sdata->u.ap.next_beacon);
2970			return err;
2971		}
2972		*changed |= err;
2973
2974		break;
2975	case NL80211_IFTYPE_ADHOC:
2976		if (!sdata->vif.bss_conf.ibss_joined)
2977			return -EINVAL;
2978
2979		if (params->chandef.width != sdata->u.ibss.chandef.width)
2980			return -EINVAL;
2981
2982		switch (params->chandef.width) {
2983		case NL80211_CHAN_WIDTH_40:
2984			if (cfg80211_get_chandef_type(&params->chandef) !=
2985			    cfg80211_get_chandef_type(&sdata->u.ibss.chandef))
2986				return -EINVAL;
2987		case NL80211_CHAN_WIDTH_5:
2988		case NL80211_CHAN_WIDTH_10:
2989		case NL80211_CHAN_WIDTH_20_NOHT:
2990		case NL80211_CHAN_WIDTH_20:
2991			break;
2992		default:
2993			return -EINVAL;
2994		}
2995
2996		/* changes into another band are not supported */
2997		if (sdata->u.ibss.chandef.chan->band !=
2998		    params->chandef.chan->band)
2999			return -EINVAL;
3000
3001		/* see comments in the NL80211_IFTYPE_AP block */
3002		if (params->count > 1) {
3003			err = ieee80211_ibss_csa_beacon(sdata, params);
3004			if (err < 0)
3005				return err;
3006			*changed |= err;
3007		}
3008
3009		ieee80211_send_action_csa(sdata, params);
3010
3011		break;
3012#ifdef CONFIG_MAC80211_MESH
3013	case NL80211_IFTYPE_MESH_POINT: {
3014		struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
3015
3016		if (params->chandef.width != sdata->vif.bss_conf.chandef.width)
3017			return -EINVAL;
3018
3019		/* changes into another band are not supported */
3020		if (sdata->vif.bss_conf.chandef.chan->band !=
3021		    params->chandef.chan->band)
3022			return -EINVAL;
3023
3024		if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_NONE) {
3025			ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_INIT;
3026			if (!ifmsh->pre_value)
3027				ifmsh->pre_value = 1;
3028			else
3029				ifmsh->pre_value++;
3030		}
3031
3032		/* see comments in the NL80211_IFTYPE_AP block */
3033		if (params->count > 1) {
3034			err = ieee80211_mesh_csa_beacon(sdata, params);
3035			if (err < 0) {
3036				ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
3037				return err;
3038			}
3039			*changed |= err;
3040		}
3041
3042		if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT)
3043			ieee80211_send_action_csa(sdata, params);
3044
3045		break;
3046		}
3047#endif
3048	default:
3049		return -EOPNOTSUPP;
3050	}
3051
3052	return 0;
3053}
3054
3055static int
3056__ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3057			   struct cfg80211_csa_settings *params)
3058{
3059	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3060	struct ieee80211_local *local = sdata->local;
3061	struct ieee80211_channel_switch ch_switch;
3062	struct ieee80211_chanctx_conf *conf;
3063	struct ieee80211_chanctx *chanctx;
3064	u32 changed = 0;
3065	int err;
3066
3067	sdata_assert_lock(sdata);
3068	lockdep_assert_held(&local->mtx);
3069
3070	if (!list_empty(&local->roc_list) || local->scanning)
3071		return -EBUSY;
3072
3073	if (sdata->wdev.cac_started)
3074		return -EBUSY;
3075
3076	if (cfg80211_chandef_identical(&params->chandef,
3077				       &sdata->vif.bss_conf.chandef))
3078		return -EINVAL;
3079
3080	/* don't allow another channel switch if one is already active. */
3081	if (sdata->vif.csa_active)
3082		return -EBUSY;
3083
3084	mutex_lock(&local->chanctx_mtx);
3085	conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
3086					 lockdep_is_held(&local->chanctx_mtx));
3087	if (!conf) {
3088		err = -EBUSY;
3089		goto out;
3090	}
3091
3092	chanctx = container_of(conf, struct ieee80211_chanctx, conf);
3093
3094	ch_switch.timestamp = 0;
3095	ch_switch.device_timestamp = 0;
3096	ch_switch.block_tx = params->block_tx;
3097	ch_switch.chandef = params->chandef;
3098	ch_switch.count = params->count;
3099
3100	err = drv_pre_channel_switch(sdata, &ch_switch);
3101	if (err)
3102		goto out;
3103
3104	err = ieee80211_vif_reserve_chanctx(sdata, &params->chandef,
3105					    chanctx->mode,
3106					    params->radar_required);
3107	if (err)
3108		goto out;
3109
3110	/* if reservation is invalid then this will fail */
3111	err = ieee80211_check_combinations(sdata, NULL, chanctx->mode, 0);
3112	if (err) {
3113		ieee80211_vif_unreserve_chanctx(sdata);
3114		goto out;
3115	}
3116
3117	err = ieee80211_set_csa_beacon(sdata, params, &changed);
3118	if (err) {
3119		ieee80211_vif_unreserve_chanctx(sdata);
3120		goto out;
3121	}
3122
3123	sdata->csa_chandef = params->chandef;
3124	sdata->csa_block_tx = params->block_tx;
3125	sdata->vif.csa_active = true;
3126
3127	if (sdata->csa_block_tx)
3128		ieee80211_stop_vif_queues(local, sdata,
3129					  IEEE80211_QUEUE_STOP_REASON_CSA);
3130
3131	cfg80211_ch_switch_started_notify(sdata->dev, &sdata->csa_chandef,
3132					  params->count);
3133
3134	if (changed) {
3135		ieee80211_bss_info_change_notify(sdata, changed);
3136		drv_channel_switch_beacon(sdata, &params->chandef);
3137	} else {
3138		/* if the beacon didn't change, we can finalize immediately */
3139		ieee80211_csa_finalize(sdata);
3140	}
3141
3142out:
3143	mutex_unlock(&local->chanctx_mtx);
3144	return err;
3145}
3146
3147int ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3148			     struct cfg80211_csa_settings *params)
3149{
3150	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3151	struct ieee80211_local *local = sdata->local;
3152	int err;
3153
3154	mutex_lock(&local->mtx);
3155	err = __ieee80211_channel_switch(wiphy, dev, params);
3156	mutex_unlock(&local->mtx);
3157
3158	return err;
3159}
3160
3161u64 ieee80211_mgmt_tx_cookie(struct ieee80211_local *local)
3162{
3163	lockdep_assert_held(&local->mtx);
3164
3165	local->roc_cookie_counter++;
3166
3167	/* wow, you wrapped 64 bits ... more likely a bug */
3168	if (WARN_ON(local->roc_cookie_counter == 0))
3169		local->roc_cookie_counter++;
3170
3171	return local->roc_cookie_counter;
3172}
3173
3174int ieee80211_attach_ack_skb(struct ieee80211_local *local, struct sk_buff *skb,
3175			     u64 *cookie, gfp_t gfp)
3176{
3177	unsigned long spin_flags;
3178	struct sk_buff *ack_skb;
3179	int id;
3180
3181	ack_skb = skb_copy(skb, gfp);
3182	if (!ack_skb)
3183		return -ENOMEM;
3184
3185	spin_lock_irqsave(&local->ack_status_lock, spin_flags);
3186	id = idr_alloc(&local->ack_status_frames, ack_skb,
3187		       1, 0x10000, GFP_ATOMIC);
3188	spin_unlock_irqrestore(&local->ack_status_lock, spin_flags);
3189
3190	if (id < 0) {
3191		kfree_skb(ack_skb);
3192		return -ENOMEM;
3193	}
3194
3195	IEEE80211_SKB_CB(skb)->ack_frame_id = id;
3196
3197	*cookie = ieee80211_mgmt_tx_cookie(local);
3198	IEEE80211_SKB_CB(ack_skb)->ack.cookie = *cookie;
3199
3200	return 0;
3201}
3202
3203static void ieee80211_mgmt_frame_register(struct wiphy *wiphy,
3204					  struct wireless_dev *wdev,
3205					  u16 frame_type, bool reg)
3206{
3207	struct ieee80211_local *local = wiphy_priv(wiphy);
3208	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3209
3210	switch (frame_type) {
3211	case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ:
3212		if (reg) {
3213			local->probe_req_reg++;
3214			sdata->vif.probe_req_reg++;
3215		} else {
3216			if (local->probe_req_reg)
3217				local->probe_req_reg--;
3218
3219			if (sdata->vif.probe_req_reg)
3220				sdata->vif.probe_req_reg--;
3221		}
3222
3223		if (!local->open_count)
3224			break;
3225
3226		if (sdata->vif.probe_req_reg == 1)
3227			drv_config_iface_filter(local, sdata, FIF_PROBE_REQ,
3228						FIF_PROBE_REQ);
3229		else if (sdata->vif.probe_req_reg == 0)
3230			drv_config_iface_filter(local, sdata, 0,
3231						FIF_PROBE_REQ);
3232
3233		ieee80211_configure_filter(local);
3234		break;
3235	default:
3236		break;
3237	}
3238}
3239
3240static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant)
3241{
3242	struct ieee80211_local *local = wiphy_priv(wiphy);
3243
3244	if (local->started)
3245		return -EOPNOTSUPP;
3246
3247	return drv_set_antenna(local, tx_ant, rx_ant);
3248}
3249
3250static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant)
3251{
3252	struct ieee80211_local *local = wiphy_priv(wiphy);
3253
3254	return drv_get_antenna(local, tx_ant, rx_ant);
3255}
3256
3257static int ieee80211_set_rekey_data(struct wiphy *wiphy,
3258				    struct net_device *dev,
3259				    struct cfg80211_gtk_rekey_data *data)
3260{
3261	struct ieee80211_local *local = wiphy_priv(wiphy);
3262	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3263
3264	if (!local->ops->set_rekey_data)
3265		return -EOPNOTSUPP;
3266
3267	drv_set_rekey_data(local, sdata, data);
3268
3269	return 0;
3270}
3271
3272static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev,
3273				  const u8 *peer, u64 *cookie)
3274{
3275	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3276	struct ieee80211_local *local = sdata->local;
3277	struct ieee80211_qos_hdr *nullfunc;
3278	struct sk_buff *skb;
3279	int size = sizeof(*nullfunc);
3280	__le16 fc;
3281	bool qos;
3282	struct ieee80211_tx_info *info;
3283	struct sta_info *sta;
3284	struct ieee80211_chanctx_conf *chanctx_conf;
3285	enum nl80211_band band;
3286	int ret;
3287
3288	/* the lock is needed to assign the cookie later */
3289	mutex_lock(&local->mtx);
3290
3291	rcu_read_lock();
3292	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3293	if (WARN_ON(!chanctx_conf)) {
3294		ret = -EINVAL;
3295		goto unlock;
3296	}
3297	band = chanctx_conf->def.chan->band;
3298	sta = sta_info_get_bss(sdata, peer);
3299	if (sta) {
3300		qos = sta->sta.wme;
3301	} else {
3302		ret = -ENOLINK;
3303		goto unlock;
3304	}
3305
3306	if (qos) {
3307		fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3308				 IEEE80211_STYPE_QOS_NULLFUNC |
3309				 IEEE80211_FCTL_FROMDS);
3310	} else {
3311		size -= 2;
3312		fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3313				 IEEE80211_STYPE_NULLFUNC |
3314				 IEEE80211_FCTL_FROMDS);
3315	}
3316
3317	skb = dev_alloc_skb(local->hw.extra_tx_headroom + size);
3318	if (!skb) {
3319		ret = -ENOMEM;
3320		goto unlock;
3321	}
3322
3323	skb->dev = dev;
3324
3325	skb_reserve(skb, local->hw.extra_tx_headroom);
3326
3327	nullfunc = (void *) skb_put(skb, size);
3328	nullfunc->frame_control = fc;
3329	nullfunc->duration_id = 0;
3330	memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
3331	memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
3332	memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN);
3333	nullfunc->seq_ctrl = 0;
3334
3335	info = IEEE80211_SKB_CB(skb);
3336
3337	info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS |
3338		       IEEE80211_TX_INTFL_NL80211_FRAME_TX;
3339	info->band = band;
3340
3341	skb_set_queue_mapping(skb, IEEE80211_AC_VO);
3342	skb->priority = 7;
3343	if (qos)
3344		nullfunc->qos_ctrl = cpu_to_le16(7);
3345
3346	ret = ieee80211_attach_ack_skb(local, skb, cookie, GFP_ATOMIC);
3347	if (ret) {
3348		kfree_skb(skb);
3349		goto unlock;
3350	}
3351
3352	local_bh_disable();
3353	ieee80211_xmit(sdata, sta, skb);
3354	local_bh_enable();
3355
3356	ret = 0;
3357unlock:
3358	rcu_read_unlock();
3359	mutex_unlock(&local->mtx);
3360
3361	return ret;
3362}
3363
3364static int ieee80211_cfg_get_channel(struct wiphy *wiphy,
3365				     struct wireless_dev *wdev,
3366				     struct cfg80211_chan_def *chandef)
3367{
3368	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3369	struct ieee80211_local *local = wiphy_priv(wiphy);
3370	struct ieee80211_chanctx_conf *chanctx_conf;
3371	int ret = -ENODATA;
3372
3373	rcu_read_lock();
3374	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3375	if (chanctx_conf) {
3376		*chandef = sdata->vif.bss_conf.chandef;
3377		ret = 0;
3378	} else if (local->open_count > 0 &&
3379		   local->open_count == local->monitors &&
3380		   sdata->vif.type == NL80211_IFTYPE_MONITOR) {
3381		if (local->use_chanctx)
3382			*chandef = local->monitor_chandef;
3383		else
3384			*chandef = local->_oper_chandef;
3385		ret = 0;
3386	}
3387	rcu_read_unlock();
3388
3389	return ret;
3390}
3391
3392#ifdef CONFIG_PM
3393static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled)
3394{
3395	drv_set_wakeup(wiphy_priv(wiphy), enabled);
3396}
3397#endif
3398
3399static int ieee80211_set_qos_map(struct wiphy *wiphy,
3400				 struct net_device *dev,
3401				 struct cfg80211_qos_map *qos_map)
3402{
3403	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3404	struct mac80211_qos_map *new_qos_map, *old_qos_map;
3405
3406	if (qos_map) {
3407		new_qos_map = kzalloc(sizeof(*new_qos_map), GFP_KERNEL);
3408		if (!new_qos_map)
3409			return -ENOMEM;
3410		memcpy(&new_qos_map->qos_map, qos_map, sizeof(*qos_map));
3411	} else {
3412		/* A NULL qos_map was passed to disable QoS mapping */
3413		new_qos_map = NULL;
3414	}
3415
3416	old_qos_map = sdata_dereference(sdata->qos_map, sdata);
3417	rcu_assign_pointer(sdata->qos_map, new_qos_map);
3418	if (old_qos_map)
3419		kfree_rcu(old_qos_map, rcu_head);
3420
3421	return 0;
3422}
3423
3424static int ieee80211_set_ap_chanwidth(struct wiphy *wiphy,
3425				      struct net_device *dev,
3426				      struct cfg80211_chan_def *chandef)
3427{
3428	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3429	int ret;
3430	u32 changed = 0;
3431
3432	ret = ieee80211_vif_change_bandwidth(sdata, chandef, &changed);
3433	if (ret == 0)
3434		ieee80211_bss_info_change_notify(sdata, changed);
3435
3436	return ret;
3437}
3438
3439static int ieee80211_add_tx_ts(struct wiphy *wiphy, struct net_device *dev,
3440			       u8 tsid, const u8 *peer, u8 up,
3441			       u16 admitted_time)
3442{
3443	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3444	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
3445	int ac = ieee802_1d_to_ac[up];
3446
3447	if (sdata->vif.type != NL80211_IFTYPE_STATION)
3448		return -EOPNOTSUPP;
3449
3450	if (!(sdata->wmm_acm & BIT(up)))
3451		return -EINVAL;
3452
3453	if (ifmgd->tx_tspec[ac].admitted_time)
3454		return -EBUSY;
3455
3456	if (admitted_time) {
3457		ifmgd->tx_tspec[ac].admitted_time = 32 * admitted_time;
3458		ifmgd->tx_tspec[ac].tsid = tsid;
3459		ifmgd->tx_tspec[ac].up = up;
3460	}
3461
3462	return 0;
3463}
3464
3465static int ieee80211_del_tx_ts(struct wiphy *wiphy, struct net_device *dev,
3466			       u8 tsid, const u8 *peer)
3467{
3468	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3469	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
3470	struct ieee80211_local *local = wiphy_priv(wiphy);
3471	int ac;
3472
3473	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
3474		struct ieee80211_sta_tx_tspec *tx_tspec = &ifmgd->tx_tspec[ac];
3475
3476		/* skip unused entries */
3477		if (!tx_tspec->admitted_time)
3478			continue;
3479
3480		if (tx_tspec->tsid != tsid)
3481			continue;
3482
3483		/* due to this new packets will be reassigned to non-ACM ACs */
3484		tx_tspec->up = -1;
3485
3486		/* Make sure that all packets have been sent to avoid to
3487		 * restore the QoS params on packets that are still on the
3488		 * queues.
3489		 */
3490		synchronize_net();
3491		ieee80211_flush_queues(local, sdata, false);
3492
3493		/* restore the normal QoS parameters
3494		 * (unconditionally to avoid races)
3495		 */
3496		tx_tspec->action = TX_TSPEC_ACTION_STOP_DOWNGRADE;
3497		tx_tspec->downgraded = false;
3498		ieee80211_sta_handle_tspec_ac_params(sdata);
3499
3500		/* finally clear all the data */
3501		memset(tx_tspec, 0, sizeof(*tx_tspec));
3502
3503		return 0;
3504	}
3505
3506	return -ENOENT;
3507}
3508
3509void ieee80211_nan_func_terminated(struct ieee80211_vif *vif,
3510				   u8 inst_id,
3511				   enum nl80211_nan_func_term_reason reason,
3512				   gfp_t gfp)
3513{
3514	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
3515	struct cfg80211_nan_func *func;
3516	u64 cookie;
3517
3518	if (WARN_ON(vif->type != NL80211_IFTYPE_NAN))
3519		return;
3520
3521	spin_lock_bh(&sdata->u.nan.func_lock);
3522
3523	func = idr_find(&sdata->u.nan.function_inst_ids, inst_id);
3524	if (WARN_ON(!func)) {
3525		spin_unlock_bh(&sdata->u.nan.func_lock);
3526		return;
3527	}
3528
3529	cookie = func->cookie;
3530	idr_remove(&sdata->u.nan.function_inst_ids, inst_id);
3531
3532	spin_unlock_bh(&sdata->u.nan.func_lock);
3533
3534	cfg80211_free_nan_func(func);
3535
3536	cfg80211_nan_func_terminated(ieee80211_vif_to_wdev(vif), inst_id,
3537				     reason, cookie, gfp);
3538}
3539EXPORT_SYMBOL(ieee80211_nan_func_terminated);
3540
3541void ieee80211_nan_func_match(struct ieee80211_vif *vif,
3542			      struct cfg80211_nan_match_params *match,
3543			      gfp_t gfp)
3544{
3545	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
3546	struct cfg80211_nan_func *func;
3547
3548	if (WARN_ON(vif->type != NL80211_IFTYPE_NAN))
3549		return;
3550
3551	spin_lock_bh(&sdata->u.nan.func_lock);
3552
3553	func = idr_find(&sdata->u.nan.function_inst_ids,  match->inst_id);
3554	if (WARN_ON(!func)) {
3555		spin_unlock_bh(&sdata->u.nan.func_lock);
3556		return;
3557	}
3558	match->cookie = func->cookie;
3559
3560	spin_unlock_bh(&sdata->u.nan.func_lock);
3561
3562	cfg80211_nan_match(ieee80211_vif_to_wdev(vif), match, gfp);
3563}
3564EXPORT_SYMBOL(ieee80211_nan_func_match);
3565
 
 
 
 
 
 
 
 
 
 
 
3566const struct cfg80211_ops mac80211_config_ops = {
3567	.add_virtual_intf = ieee80211_add_iface,
3568	.del_virtual_intf = ieee80211_del_iface,
3569	.change_virtual_intf = ieee80211_change_iface,
3570	.start_p2p_device = ieee80211_start_p2p_device,
3571	.stop_p2p_device = ieee80211_stop_p2p_device,
3572	.add_key = ieee80211_add_key,
3573	.del_key = ieee80211_del_key,
3574	.get_key = ieee80211_get_key,
3575	.set_default_key = ieee80211_config_default_key,
3576	.set_default_mgmt_key = ieee80211_config_default_mgmt_key,
3577	.start_ap = ieee80211_start_ap,
3578	.change_beacon = ieee80211_change_beacon,
3579	.stop_ap = ieee80211_stop_ap,
3580	.add_station = ieee80211_add_station,
3581	.del_station = ieee80211_del_station,
3582	.change_station = ieee80211_change_station,
3583	.get_station = ieee80211_get_station,
3584	.dump_station = ieee80211_dump_station,
3585	.dump_survey = ieee80211_dump_survey,
3586#ifdef CONFIG_MAC80211_MESH
3587	.add_mpath = ieee80211_add_mpath,
3588	.del_mpath = ieee80211_del_mpath,
3589	.change_mpath = ieee80211_change_mpath,
3590	.get_mpath = ieee80211_get_mpath,
3591	.dump_mpath = ieee80211_dump_mpath,
3592	.get_mpp = ieee80211_get_mpp,
3593	.dump_mpp = ieee80211_dump_mpp,
3594	.update_mesh_config = ieee80211_update_mesh_config,
3595	.get_mesh_config = ieee80211_get_mesh_config,
3596	.join_mesh = ieee80211_join_mesh,
3597	.leave_mesh = ieee80211_leave_mesh,
3598#endif
3599	.join_ocb = ieee80211_join_ocb,
3600	.leave_ocb = ieee80211_leave_ocb,
3601	.change_bss = ieee80211_change_bss,
3602	.set_txq_params = ieee80211_set_txq_params,
3603	.set_monitor_channel = ieee80211_set_monitor_channel,
3604	.suspend = ieee80211_suspend,
3605	.resume = ieee80211_resume,
3606	.scan = ieee80211_scan,
3607	.abort_scan = ieee80211_abort_scan,
3608	.sched_scan_start = ieee80211_sched_scan_start,
3609	.sched_scan_stop = ieee80211_sched_scan_stop,
3610	.auth = ieee80211_auth,
3611	.assoc = ieee80211_assoc,
3612	.deauth = ieee80211_deauth,
3613	.disassoc = ieee80211_disassoc,
3614	.join_ibss = ieee80211_join_ibss,
3615	.leave_ibss = ieee80211_leave_ibss,
3616	.set_mcast_rate = ieee80211_set_mcast_rate,
3617	.set_wiphy_params = ieee80211_set_wiphy_params,
3618	.set_tx_power = ieee80211_set_tx_power,
3619	.get_tx_power = ieee80211_get_tx_power,
3620	.set_wds_peer = ieee80211_set_wds_peer,
3621	.rfkill_poll = ieee80211_rfkill_poll,
3622	CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd)
3623	CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump)
3624	.set_power_mgmt = ieee80211_set_power_mgmt,
3625	.set_bitrate_mask = ieee80211_set_bitrate_mask,
3626	.remain_on_channel = ieee80211_remain_on_channel,
3627	.cancel_remain_on_channel = ieee80211_cancel_remain_on_channel,
3628	.mgmt_tx = ieee80211_mgmt_tx,
3629	.mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait,
3630	.set_cqm_rssi_config = ieee80211_set_cqm_rssi_config,
 
3631	.mgmt_frame_register = ieee80211_mgmt_frame_register,
3632	.set_antenna = ieee80211_set_antenna,
3633	.get_antenna = ieee80211_get_antenna,
3634	.set_rekey_data = ieee80211_set_rekey_data,
3635	.tdls_oper = ieee80211_tdls_oper,
3636	.tdls_mgmt = ieee80211_tdls_mgmt,
3637	.tdls_channel_switch = ieee80211_tdls_channel_switch,
3638	.tdls_cancel_channel_switch = ieee80211_tdls_cancel_channel_switch,
3639	.probe_client = ieee80211_probe_client,
3640	.set_noack_map = ieee80211_set_noack_map,
3641#ifdef CONFIG_PM
3642	.set_wakeup = ieee80211_set_wakeup,
3643#endif
3644	.get_channel = ieee80211_cfg_get_channel,
3645	.start_radar_detection = ieee80211_start_radar_detection,
3646	.channel_switch = ieee80211_channel_switch,
3647	.set_qos_map = ieee80211_set_qos_map,
3648	.set_ap_chanwidth = ieee80211_set_ap_chanwidth,
3649	.add_tx_ts = ieee80211_add_tx_ts,
3650	.del_tx_ts = ieee80211_del_tx_ts,
3651	.start_nan = ieee80211_start_nan,
3652	.stop_nan = ieee80211_stop_nan,
3653	.nan_change_conf = ieee80211_nan_change_conf,
3654	.add_nan_func = ieee80211_add_nan_func,
3655	.del_nan_func = ieee80211_del_nan_func,
 
 
3656};
v4.17
   1/*
   2 * mac80211 configuration hooks for cfg80211
   3 *
   4 * Copyright 2006-2010	Johannes Berg <johannes@sipsolutions.net>
   5 * Copyright 2013-2015  Intel Mobile Communications GmbH
   6 * Copyright (C) 2015-2017 Intel Deutschland GmbH
   7 * Copyright (C) 2018 Intel Corporation
   8 *
   9 * This file is GPLv2 as found in COPYING.
  10 */
  11
  12#include <linux/ieee80211.h>
  13#include <linux/nl80211.h>
  14#include <linux/rtnetlink.h>
  15#include <linux/slab.h>
  16#include <net/net_namespace.h>
  17#include <linux/rcupdate.h>
  18#include <linux/if_ether.h>
  19#include <net/cfg80211.h>
  20#include "ieee80211_i.h"
  21#include "driver-ops.h"
  22#include "rate.h"
  23#include "mesh.h"
  24#include "wme.h"
  25
  26static void ieee80211_set_mu_mimo_follow(struct ieee80211_sub_if_data *sdata,
  27					 struct vif_params *params)
  28{
  29	bool mu_mimo_groups = false;
  30	bool mu_mimo_follow = false;
  31
  32	if (params->vht_mumimo_groups) {
  33		u64 membership;
  34
  35		BUILD_BUG_ON(sizeof(membership) != WLAN_MEMBERSHIP_LEN);
  36
  37		memcpy(sdata->vif.bss_conf.mu_group.membership,
  38		       params->vht_mumimo_groups, WLAN_MEMBERSHIP_LEN);
  39		memcpy(sdata->vif.bss_conf.mu_group.position,
  40		       params->vht_mumimo_groups + WLAN_MEMBERSHIP_LEN,
  41		       WLAN_USER_POSITION_LEN);
  42		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_MU_GROUPS);
  43		/* don't care about endianness - just check for 0 */
  44		memcpy(&membership, params->vht_mumimo_groups,
  45		       WLAN_MEMBERSHIP_LEN);
  46		mu_mimo_groups = membership != 0;
  47	}
  48
  49	if (params->vht_mumimo_follow_addr) {
  50		mu_mimo_follow =
  51			is_valid_ether_addr(params->vht_mumimo_follow_addr);
  52		ether_addr_copy(sdata->u.mntr.mu_follow_addr,
  53				params->vht_mumimo_follow_addr);
  54	}
  55
  56	sdata->vif.mu_mimo_owner = mu_mimo_groups || mu_mimo_follow;
  57}
  58
  59static int ieee80211_set_mon_options(struct ieee80211_sub_if_data *sdata,
  60				     struct vif_params *params)
  61{
  62	struct ieee80211_local *local = sdata->local;
  63	struct ieee80211_sub_if_data *monitor_sdata;
  64
  65	/* check flags first */
  66	if (params->flags && ieee80211_sdata_running(sdata)) {
  67		u32 mask = MONITOR_FLAG_COOK_FRAMES | MONITOR_FLAG_ACTIVE;
  68
  69		/*
  70		 * Prohibit MONITOR_FLAG_COOK_FRAMES and
  71		 * MONITOR_FLAG_ACTIVE to be changed while the
  72		 * interface is up.
  73		 * Else we would need to add a lot of cruft
  74		 * to update everything:
  75		 *	cooked_mntrs, monitor and all fif_* counters
  76		 *	reconfigure hardware
  77		 */
  78		if ((params->flags & mask) != (sdata->u.mntr.flags & mask))
  79			return -EBUSY;
  80	}
  81
  82	/* also validate MU-MIMO change */
  83	monitor_sdata = rtnl_dereference(local->monitor_sdata);
  84
  85	if (!monitor_sdata &&
  86	    (params->vht_mumimo_groups || params->vht_mumimo_follow_addr))
  87		return -EOPNOTSUPP;
  88
  89	/* apply all changes now - no failures allowed */
  90
  91	if (monitor_sdata)
  92		ieee80211_set_mu_mimo_follow(monitor_sdata, params);
  93
  94	if (params->flags) {
  95		if (ieee80211_sdata_running(sdata)) {
  96			ieee80211_adjust_monitor_flags(sdata, -1);
  97			sdata->u.mntr.flags = params->flags;
  98			ieee80211_adjust_monitor_flags(sdata, 1);
  99
 100			ieee80211_configure_filter(local);
 101		} else {
 102			/*
 103			 * Because the interface is down, ieee80211_do_stop
 104			 * and ieee80211_do_open take care of "everything"
 105			 * mentioned in the comment above.
 106			 */
 107			sdata->u.mntr.flags = params->flags;
 108		}
 109	}
 110
 111	return 0;
 112}
 113
 114static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy,
 115						const char *name,
 116						unsigned char name_assign_type,
 117						enum nl80211_iftype type,
 
 118						struct vif_params *params)
 119{
 120	struct ieee80211_local *local = wiphy_priv(wiphy);
 121	struct wireless_dev *wdev;
 122	struct ieee80211_sub_if_data *sdata;
 123	int err;
 124
 125	err = ieee80211_if_add(local, name, name_assign_type, &wdev, type, params);
 126	if (err)
 127		return ERR_PTR(err);
 128
 129	sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 130
 131	if (type == NL80211_IFTYPE_MONITOR) {
 132		err = ieee80211_set_mon_options(sdata, params);
 133		if (err) {
 134			ieee80211_if_remove(sdata);
 135			return NULL;
 136		}
 137	}
 138
 139	return wdev;
 140}
 141
 142static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
 143{
 144	ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev));
 145
 146	return 0;
 147}
 148
 149static int ieee80211_change_iface(struct wiphy *wiphy,
 150				  struct net_device *dev,
 151				  enum nl80211_iftype type,
 152				  struct vif_params *params)
 153{
 154	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 155	int ret;
 156
 157	ret = ieee80211_if_change_type(sdata, type);
 158	if (ret)
 159		return ret;
 160
 161	if (type == NL80211_IFTYPE_AP_VLAN &&
 162	    params && params->use_4addr == 0) {
 163		RCU_INIT_POINTER(sdata->u.vlan.sta, NULL);
 164		ieee80211_check_fast_rx_iface(sdata);
 165	} else if (type == NL80211_IFTYPE_STATION &&
 166		   params && params->use_4addr >= 0) {
 167		sdata->u.mgd.use_4addr = params->use_4addr;
 168	}
 169
 170	if (sdata->vif.type == NL80211_IFTYPE_MONITOR) {
 171		ret = ieee80211_set_mon_options(sdata, params);
 172		if (ret)
 173			return ret;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 174	}
 175
 176	return 0;
 177}
 178
 179static int ieee80211_start_p2p_device(struct wiphy *wiphy,
 180				      struct wireless_dev *wdev)
 181{
 182	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 183	int ret;
 184
 185	mutex_lock(&sdata->local->chanctx_mtx);
 186	ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
 187	mutex_unlock(&sdata->local->chanctx_mtx);
 188	if (ret < 0)
 189		return ret;
 190
 191	return ieee80211_do_open(wdev, true);
 192}
 193
 194static void ieee80211_stop_p2p_device(struct wiphy *wiphy,
 195				      struct wireless_dev *wdev)
 196{
 197	ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev));
 198}
 199
 200static int ieee80211_start_nan(struct wiphy *wiphy,
 201			       struct wireless_dev *wdev,
 202			       struct cfg80211_nan_conf *conf)
 203{
 204	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 205	int ret;
 206
 207	mutex_lock(&sdata->local->chanctx_mtx);
 208	ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
 209	mutex_unlock(&sdata->local->chanctx_mtx);
 210	if (ret < 0)
 211		return ret;
 212
 213	ret = ieee80211_do_open(wdev, true);
 214	if (ret)
 215		return ret;
 216
 217	ret = drv_start_nan(sdata->local, sdata, conf);
 218	if (ret)
 219		ieee80211_sdata_stop(sdata);
 220
 221	sdata->u.nan.conf = *conf;
 222
 223	return ret;
 224}
 225
 226static void ieee80211_stop_nan(struct wiphy *wiphy,
 227			       struct wireless_dev *wdev)
 228{
 229	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 230
 231	drv_stop_nan(sdata->local, sdata);
 232	ieee80211_sdata_stop(sdata);
 233}
 234
 235static int ieee80211_nan_change_conf(struct wiphy *wiphy,
 236				     struct wireless_dev *wdev,
 237				     struct cfg80211_nan_conf *conf,
 238				     u32 changes)
 239{
 240	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 241	struct cfg80211_nan_conf new_conf;
 242	int ret = 0;
 243
 244	if (sdata->vif.type != NL80211_IFTYPE_NAN)
 245		return -EOPNOTSUPP;
 246
 247	if (!ieee80211_sdata_running(sdata))
 248		return -ENETDOWN;
 249
 250	new_conf = sdata->u.nan.conf;
 251
 252	if (changes & CFG80211_NAN_CONF_CHANGED_PREF)
 253		new_conf.master_pref = conf->master_pref;
 254
 255	if (changes & CFG80211_NAN_CONF_CHANGED_BANDS)
 256		new_conf.bands = conf->bands;
 257
 258	ret = drv_nan_change_conf(sdata->local, sdata, &new_conf, changes);
 259	if (!ret)
 260		sdata->u.nan.conf = new_conf;
 261
 262	return ret;
 263}
 264
 265static int ieee80211_add_nan_func(struct wiphy *wiphy,
 266				  struct wireless_dev *wdev,
 267				  struct cfg80211_nan_func *nan_func)
 268{
 269	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 270	int ret;
 271
 272	if (sdata->vif.type != NL80211_IFTYPE_NAN)
 273		return -EOPNOTSUPP;
 274
 275	if (!ieee80211_sdata_running(sdata))
 276		return -ENETDOWN;
 277
 278	spin_lock_bh(&sdata->u.nan.func_lock);
 279
 280	ret = idr_alloc(&sdata->u.nan.function_inst_ids,
 281			nan_func, 1, sdata->local->hw.max_nan_de_entries + 1,
 282			GFP_ATOMIC);
 283	spin_unlock_bh(&sdata->u.nan.func_lock);
 284
 285	if (ret < 0)
 286		return ret;
 287
 288	nan_func->instance_id = ret;
 289
 290	WARN_ON(nan_func->instance_id == 0);
 291
 292	ret = drv_add_nan_func(sdata->local, sdata, nan_func);
 293	if (ret) {
 294		spin_lock_bh(&sdata->u.nan.func_lock);
 295		idr_remove(&sdata->u.nan.function_inst_ids,
 296			   nan_func->instance_id);
 297		spin_unlock_bh(&sdata->u.nan.func_lock);
 298	}
 299
 300	return ret;
 301}
 302
 303static struct cfg80211_nan_func *
 304ieee80211_find_nan_func_by_cookie(struct ieee80211_sub_if_data *sdata,
 305				  u64 cookie)
 306{
 307	struct cfg80211_nan_func *func;
 308	int id;
 309
 310	lockdep_assert_held(&sdata->u.nan.func_lock);
 311
 312	idr_for_each_entry(&sdata->u.nan.function_inst_ids, func, id) {
 313		if (func->cookie == cookie)
 314			return func;
 315	}
 316
 317	return NULL;
 318}
 319
 320static void ieee80211_del_nan_func(struct wiphy *wiphy,
 321				  struct wireless_dev *wdev, u64 cookie)
 322{
 323	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
 324	struct cfg80211_nan_func *func;
 325	u8 instance_id = 0;
 326
 327	if (sdata->vif.type != NL80211_IFTYPE_NAN ||
 328	    !ieee80211_sdata_running(sdata))
 329		return;
 330
 331	spin_lock_bh(&sdata->u.nan.func_lock);
 332
 333	func = ieee80211_find_nan_func_by_cookie(sdata, cookie);
 334	if (func)
 335		instance_id = func->instance_id;
 336
 337	spin_unlock_bh(&sdata->u.nan.func_lock);
 338
 339	if (instance_id)
 340		drv_del_nan_func(sdata->local, sdata, instance_id);
 341}
 342
 343static int ieee80211_set_noack_map(struct wiphy *wiphy,
 344				  struct net_device *dev,
 345				  u16 noack_map)
 346{
 347	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 348
 349	sdata->noack_map = noack_map;
 350
 351	ieee80211_check_fast_xmit_iface(sdata);
 352
 353	return 0;
 354}
 355
 356static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev,
 357			     u8 key_idx, bool pairwise, const u8 *mac_addr,
 358			     struct key_params *params)
 359{
 360	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 361	struct ieee80211_local *local = sdata->local;
 362	struct sta_info *sta = NULL;
 363	const struct ieee80211_cipher_scheme *cs = NULL;
 364	struct ieee80211_key *key;
 365	int err;
 366
 367	if (!ieee80211_sdata_running(sdata))
 368		return -ENETDOWN;
 369
 370	/* reject WEP and TKIP keys if WEP failed to initialize */
 371	switch (params->cipher) {
 372	case WLAN_CIPHER_SUITE_WEP40:
 373	case WLAN_CIPHER_SUITE_TKIP:
 374	case WLAN_CIPHER_SUITE_WEP104:
 375		if (IS_ERR(local->wep_tx_tfm))
 376			return -EINVAL;
 377		break;
 378	case WLAN_CIPHER_SUITE_CCMP:
 379	case WLAN_CIPHER_SUITE_CCMP_256:
 380	case WLAN_CIPHER_SUITE_AES_CMAC:
 381	case WLAN_CIPHER_SUITE_BIP_CMAC_256:
 382	case WLAN_CIPHER_SUITE_BIP_GMAC_128:
 383	case WLAN_CIPHER_SUITE_BIP_GMAC_256:
 384	case WLAN_CIPHER_SUITE_GCMP:
 385	case WLAN_CIPHER_SUITE_GCMP_256:
 386		break;
 387	default:
 388		cs = ieee80211_cs_get(local, params->cipher, sdata->vif.type);
 389		break;
 390	}
 391
 392	key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len,
 393				  params->key, params->seq_len, params->seq,
 394				  cs);
 395	if (IS_ERR(key))
 396		return PTR_ERR(key);
 397
 398	if (pairwise)
 399		key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE;
 400
 401	mutex_lock(&local->sta_mtx);
 402
 403	if (mac_addr) {
 404		sta = sta_info_get_bss(sdata, mac_addr);
 405		/*
 406		 * The ASSOC test makes sure the driver is ready to
 407		 * receive the key. When wpa_supplicant has roamed
 408		 * using FT, it attempts to set the key before
 409		 * association has completed, this rejects that attempt
 410		 * so it will set the key again after association.
 411		 *
 412		 * TODO: accept the key if we have a station entry and
 413		 *       add it to the device after the station.
 414		 */
 415		if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) {
 416			ieee80211_key_free_unused(key);
 417			err = -ENOENT;
 418			goto out_unlock;
 419		}
 420	}
 421
 422	switch (sdata->vif.type) {
 423	case NL80211_IFTYPE_STATION:
 424		if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED)
 425			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
 426		break;
 427	case NL80211_IFTYPE_AP:
 428	case NL80211_IFTYPE_AP_VLAN:
 429		/* Keys without a station are used for TX only */
 430		if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP))
 431			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
 432		break;
 433	case NL80211_IFTYPE_ADHOC:
 434		/* no MFP (yet) */
 435		break;
 436	case NL80211_IFTYPE_MESH_POINT:
 437#ifdef CONFIG_MAC80211_MESH
 438		if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE)
 439			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
 440		break;
 441#endif
 442	case NL80211_IFTYPE_WDS:
 443	case NL80211_IFTYPE_MONITOR:
 444	case NL80211_IFTYPE_P2P_DEVICE:
 445	case NL80211_IFTYPE_NAN:
 446	case NL80211_IFTYPE_UNSPECIFIED:
 447	case NUM_NL80211_IFTYPES:
 448	case NL80211_IFTYPE_P2P_CLIENT:
 449	case NL80211_IFTYPE_P2P_GO:
 450	case NL80211_IFTYPE_OCB:
 451		/* shouldn't happen */
 452		WARN_ON_ONCE(1);
 453		break;
 454	}
 455
 456	if (sta)
 457		sta->cipher_scheme = cs;
 458
 459	err = ieee80211_key_link(key, sdata, sta);
 460
 461 out_unlock:
 462	mutex_unlock(&local->sta_mtx);
 463
 464	return err;
 465}
 466
 467static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev,
 468			     u8 key_idx, bool pairwise, const u8 *mac_addr)
 469{
 470	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 471	struct ieee80211_local *local = sdata->local;
 472	struct sta_info *sta;
 473	struct ieee80211_key *key = NULL;
 474	int ret;
 475
 476	mutex_lock(&local->sta_mtx);
 477	mutex_lock(&local->key_mtx);
 478
 479	if (mac_addr) {
 480		ret = -ENOENT;
 481
 482		sta = sta_info_get_bss(sdata, mac_addr);
 483		if (!sta)
 484			goto out_unlock;
 485
 486		if (pairwise)
 487			key = key_mtx_dereference(local, sta->ptk[key_idx]);
 488		else
 489			key = key_mtx_dereference(local, sta->gtk[key_idx]);
 490	} else
 491		key = key_mtx_dereference(local, sdata->keys[key_idx]);
 492
 493	if (!key) {
 494		ret = -ENOENT;
 495		goto out_unlock;
 496	}
 497
 498	ieee80211_key_free(key, true);
 499
 500	ret = 0;
 501 out_unlock:
 502	mutex_unlock(&local->key_mtx);
 503	mutex_unlock(&local->sta_mtx);
 504
 505	return ret;
 506}
 507
 508static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev,
 509			     u8 key_idx, bool pairwise, const u8 *mac_addr,
 510			     void *cookie,
 511			     void (*callback)(void *cookie,
 512					      struct key_params *params))
 513{
 514	struct ieee80211_sub_if_data *sdata;
 515	struct sta_info *sta = NULL;
 516	u8 seq[6] = {0};
 517	struct key_params params;
 518	struct ieee80211_key *key = NULL;
 519	u64 pn64;
 520	u32 iv32;
 521	u16 iv16;
 522	int err = -ENOENT;
 523	struct ieee80211_key_seq kseq = {};
 524
 525	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 526
 527	rcu_read_lock();
 528
 529	if (mac_addr) {
 530		sta = sta_info_get_bss(sdata, mac_addr);
 531		if (!sta)
 532			goto out;
 533
 534		if (pairwise && key_idx < NUM_DEFAULT_KEYS)
 535			key = rcu_dereference(sta->ptk[key_idx]);
 536		else if (!pairwise &&
 537			 key_idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS)
 538			key = rcu_dereference(sta->gtk[key_idx]);
 539	} else
 540		key = rcu_dereference(sdata->keys[key_idx]);
 541
 542	if (!key)
 543		goto out;
 544
 545	memset(&params, 0, sizeof(params));
 546
 547	params.cipher = key->conf.cipher;
 548
 549	switch (key->conf.cipher) {
 550	case WLAN_CIPHER_SUITE_TKIP:
 551		pn64 = atomic64_read(&key->conf.tx_pn);
 552		iv32 = TKIP_PN_TO_IV32(pn64);
 553		iv16 = TKIP_PN_TO_IV16(pn64);
 554
 555		if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE &&
 556		    !(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
 557			drv_get_key_seq(sdata->local, key, &kseq);
 558			iv32 = kseq.tkip.iv32;
 559			iv16 = kseq.tkip.iv16;
 560		}
 561
 562		seq[0] = iv16 & 0xff;
 563		seq[1] = (iv16 >> 8) & 0xff;
 564		seq[2] = iv32 & 0xff;
 565		seq[3] = (iv32 >> 8) & 0xff;
 566		seq[4] = (iv32 >> 16) & 0xff;
 567		seq[5] = (iv32 >> 24) & 0xff;
 568		params.seq = seq;
 569		params.seq_len = 6;
 570		break;
 571	case WLAN_CIPHER_SUITE_CCMP:
 572	case WLAN_CIPHER_SUITE_CCMP_256:
 573	case WLAN_CIPHER_SUITE_AES_CMAC:
 574	case WLAN_CIPHER_SUITE_BIP_CMAC_256:
 575		BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
 576			     offsetof(typeof(kseq), aes_cmac));
 577		/* fall through */
 578	case WLAN_CIPHER_SUITE_BIP_GMAC_128:
 579	case WLAN_CIPHER_SUITE_BIP_GMAC_256:
 580		BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
 581			     offsetof(typeof(kseq), aes_gmac));
 582		/* fall through */
 583	case WLAN_CIPHER_SUITE_GCMP:
 584	case WLAN_CIPHER_SUITE_GCMP_256:
 585		BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
 586			     offsetof(typeof(kseq), gcmp));
 587
 588		if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE &&
 589		    !(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
 590			drv_get_key_seq(sdata->local, key, &kseq);
 591			memcpy(seq, kseq.ccmp.pn, 6);
 592		} else {
 593			pn64 = atomic64_read(&key->conf.tx_pn);
 594			seq[0] = pn64;
 595			seq[1] = pn64 >> 8;
 596			seq[2] = pn64 >> 16;
 597			seq[3] = pn64 >> 24;
 598			seq[4] = pn64 >> 32;
 599			seq[5] = pn64 >> 40;
 600		}
 601		params.seq = seq;
 602		params.seq_len = 6;
 603		break;
 604	default:
 605		if (!(key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE))
 606			break;
 607		if (WARN_ON(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV))
 608			break;
 609		drv_get_key_seq(sdata->local, key, &kseq);
 610		params.seq = kseq.hw.seq;
 611		params.seq_len = kseq.hw.seq_len;
 612		break;
 613	}
 614
 615	params.key = key->conf.key;
 616	params.key_len = key->conf.keylen;
 617
 618	callback(cookie, &params);
 619	err = 0;
 620
 621 out:
 622	rcu_read_unlock();
 623	return err;
 624}
 625
 626static int ieee80211_config_default_key(struct wiphy *wiphy,
 627					struct net_device *dev,
 628					u8 key_idx, bool uni,
 629					bool multi)
 630{
 631	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 632
 633	ieee80211_set_default_key(sdata, key_idx, uni, multi);
 634
 635	return 0;
 636}
 637
 638static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy,
 639					     struct net_device *dev,
 640					     u8 key_idx)
 641{
 642	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 643
 644	ieee80211_set_default_mgmt_key(sdata, key_idx);
 645
 646	return 0;
 647}
 648
 649void sta_set_rate_info_tx(struct sta_info *sta,
 650			  const struct ieee80211_tx_rate *rate,
 651			  struct rate_info *rinfo)
 652{
 653	rinfo->flags = 0;
 654	if (rate->flags & IEEE80211_TX_RC_MCS) {
 655		rinfo->flags |= RATE_INFO_FLAGS_MCS;
 656		rinfo->mcs = rate->idx;
 657	} else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) {
 658		rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
 659		rinfo->mcs = ieee80211_rate_get_vht_mcs(rate);
 660		rinfo->nss = ieee80211_rate_get_vht_nss(rate);
 661	} else {
 662		struct ieee80211_supported_band *sband;
 663		int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
 664		u16 brate;
 665
 666		sband = ieee80211_get_sband(sta->sdata);
 667		if (sband) {
 668			brate = sband->bitrates[rate->idx].bitrate;
 669			rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
 670		}
 671	}
 672	if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
 673		rinfo->bw = RATE_INFO_BW_40;
 674	else if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
 675		rinfo->bw = RATE_INFO_BW_80;
 676	else if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
 677		rinfo->bw = RATE_INFO_BW_160;
 678	else
 679		rinfo->bw = RATE_INFO_BW_20;
 680	if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
 681		rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
 682}
 683
 684static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev,
 685				  int idx, u8 *mac, struct station_info *sinfo)
 686{
 687	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 688	struct ieee80211_local *local = sdata->local;
 689	struct sta_info *sta;
 690	int ret = -ENOENT;
 691
 692	mutex_lock(&local->sta_mtx);
 693
 694	sta = sta_info_get_by_idx(sdata, idx);
 695	if (sta) {
 696		ret = 0;
 697		memcpy(mac, sta->sta.addr, ETH_ALEN);
 698		sta_set_sinfo(sta, sinfo);
 699	}
 700
 701	mutex_unlock(&local->sta_mtx);
 702
 703	return ret;
 704}
 705
 706static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev,
 707				 int idx, struct survey_info *survey)
 708{
 709	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
 710
 711	return drv_get_survey(local, idx, survey);
 712}
 713
 714static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev,
 715				 const u8 *mac, struct station_info *sinfo)
 716{
 717	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 718	struct ieee80211_local *local = sdata->local;
 719	struct sta_info *sta;
 720	int ret = -ENOENT;
 721
 722	mutex_lock(&local->sta_mtx);
 723
 724	sta = sta_info_get_bss(sdata, mac);
 725	if (sta) {
 726		ret = 0;
 727		sta_set_sinfo(sta, sinfo);
 728	}
 729
 730	mutex_unlock(&local->sta_mtx);
 731
 732	return ret;
 733}
 734
 735static int ieee80211_set_monitor_channel(struct wiphy *wiphy,
 736					 struct cfg80211_chan_def *chandef)
 737{
 738	struct ieee80211_local *local = wiphy_priv(wiphy);
 739	struct ieee80211_sub_if_data *sdata;
 740	int ret = 0;
 741
 742	if (cfg80211_chandef_identical(&local->monitor_chandef, chandef))
 743		return 0;
 744
 745	mutex_lock(&local->mtx);
 
 746	if (local->use_chanctx) {
 747		sdata = rtnl_dereference(local->monitor_sdata);
 
 
 748		if (sdata) {
 749			ieee80211_vif_release_channel(sdata);
 750			ret = ieee80211_vif_use_channel(sdata, chandef,
 751					IEEE80211_CHANCTX_EXCLUSIVE);
 752		}
 753	} else if (local->open_count == local->monitors) {
 754		local->_oper_chandef = *chandef;
 755		ieee80211_hw_config(local, 0);
 756	}
 757
 758	if (ret == 0)
 759		local->monitor_chandef = *chandef;
 
 760	mutex_unlock(&local->mtx);
 761
 762	return ret;
 763}
 764
 765static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata,
 766				    const u8 *resp, size_t resp_len,
 767				    const struct ieee80211_csa_settings *csa)
 768{
 769	struct probe_resp *new, *old;
 770
 771	if (!resp || !resp_len)
 772		return 1;
 773
 774	old = sdata_dereference(sdata->u.ap.probe_resp, sdata);
 775
 776	new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL);
 777	if (!new)
 778		return -ENOMEM;
 779
 780	new->len = resp_len;
 781	memcpy(new->data, resp, resp_len);
 782
 783	if (csa)
 784		memcpy(new->csa_counter_offsets, csa->counter_offsets_presp,
 785		       csa->n_counter_offsets_presp *
 786		       sizeof(new->csa_counter_offsets[0]));
 787
 788	rcu_assign_pointer(sdata->u.ap.probe_resp, new);
 789	if (old)
 790		kfree_rcu(old, rcu_head);
 791
 792	return 0;
 793}
 794
 795static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata,
 796				   struct cfg80211_beacon_data *params,
 797				   const struct ieee80211_csa_settings *csa)
 798{
 799	struct beacon_data *new, *old;
 800	int new_head_len, new_tail_len;
 801	int size, err;
 802	u32 changed = BSS_CHANGED_BEACON;
 803
 804	old = sdata_dereference(sdata->u.ap.beacon, sdata);
 805
 806
 807	/* Need to have a beacon head if we don't have one yet */
 808	if (!params->head && !old)
 809		return -EINVAL;
 810
 811	/* new or old head? */
 812	if (params->head)
 813		new_head_len = params->head_len;
 814	else
 815		new_head_len = old->head_len;
 816
 817	/* new or old tail? */
 818	if (params->tail || !old)
 819		/* params->tail_len will be zero for !params->tail */
 820		new_tail_len = params->tail_len;
 821	else
 822		new_tail_len = old->tail_len;
 823
 824	size = sizeof(*new) + new_head_len + new_tail_len;
 825
 826	new = kzalloc(size, GFP_KERNEL);
 827	if (!new)
 828		return -ENOMEM;
 829
 830	/* start filling the new info now */
 831
 832	/*
 833	 * pointers go into the block we allocated,
 834	 * memory is | beacon_data | head | tail |
 835	 */
 836	new->head = ((u8 *) new) + sizeof(*new);
 837	new->tail = new->head + new_head_len;
 838	new->head_len = new_head_len;
 839	new->tail_len = new_tail_len;
 840
 841	if (csa) {
 842		new->csa_current_counter = csa->count;
 843		memcpy(new->csa_counter_offsets, csa->counter_offsets_beacon,
 844		       csa->n_counter_offsets_beacon *
 845		       sizeof(new->csa_counter_offsets[0]));
 846	}
 847
 848	/* copy in head */
 849	if (params->head)
 850		memcpy(new->head, params->head, new_head_len);
 851	else
 852		memcpy(new->head, old->head, new_head_len);
 853
 854	/* copy in optional tail */
 855	if (params->tail)
 856		memcpy(new->tail, params->tail, new_tail_len);
 857	else
 858		if (old)
 859			memcpy(new->tail, old->tail, new_tail_len);
 860
 861	err = ieee80211_set_probe_resp(sdata, params->probe_resp,
 862				       params->probe_resp_len, csa);
 863	if (err < 0)
 864		return err;
 865	if (err == 0)
 866		changed |= BSS_CHANGED_AP_PROBE_RESP;
 867
 868	rcu_assign_pointer(sdata->u.ap.beacon, new);
 869
 870	if (old)
 871		kfree_rcu(old, rcu_head);
 872
 873	return changed;
 874}
 875
 876static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev,
 877			      struct cfg80211_ap_settings *params)
 878{
 879	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 880	struct ieee80211_local *local = sdata->local;
 881	struct beacon_data *old;
 882	struct ieee80211_sub_if_data *vlan;
 883	u32 changed = BSS_CHANGED_BEACON_INT |
 884		      BSS_CHANGED_BEACON_ENABLED |
 885		      BSS_CHANGED_BEACON |
 886		      BSS_CHANGED_SSID |
 887		      BSS_CHANGED_P2P_PS |
 888		      BSS_CHANGED_TXPOWER;
 889	int err;
 890
 891	old = sdata_dereference(sdata->u.ap.beacon, sdata);
 892	if (old)
 893		return -EALREADY;
 894
 895	switch (params->smps_mode) {
 896	case NL80211_SMPS_OFF:
 897		sdata->smps_mode = IEEE80211_SMPS_OFF;
 898		break;
 899	case NL80211_SMPS_STATIC:
 900		sdata->smps_mode = IEEE80211_SMPS_STATIC;
 901		break;
 902	case NL80211_SMPS_DYNAMIC:
 903		sdata->smps_mode = IEEE80211_SMPS_DYNAMIC;
 904		break;
 905	default:
 906		return -EINVAL;
 907	}
 908	sdata->u.ap.req_smps = sdata->smps_mode;
 909
 910	sdata->needed_rx_chains = sdata->local->rx_chains;
 911
 912	sdata->vif.bss_conf.beacon_int = params->beacon_interval;
 913
 914	mutex_lock(&local->mtx);
 915	err = ieee80211_vif_use_channel(sdata, &params->chandef,
 916					IEEE80211_CHANCTX_SHARED);
 917	if (!err)
 918		ieee80211_vif_copy_chanctx_to_vlans(sdata, false);
 919	mutex_unlock(&local->mtx);
 920	if (err)
 921		return err;
 922
 923	/*
 924	 * Apply control port protocol, this allows us to
 925	 * not encrypt dynamic WEP control frames.
 926	 */
 927	sdata->control_port_protocol = params->crypto.control_port_ethertype;
 928	sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt;
 929	sdata->control_port_over_nl80211 =
 930				params->crypto.control_port_over_nl80211;
 931	sdata->encrypt_headroom = ieee80211_cs_headroom(sdata->local,
 932							&params->crypto,
 933							sdata->vif.type);
 934
 935	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) {
 936		vlan->control_port_protocol =
 937			params->crypto.control_port_ethertype;
 938		vlan->control_port_no_encrypt =
 939			params->crypto.control_port_no_encrypt;
 940		vlan->control_port_over_nl80211 =
 941			params->crypto.control_port_over_nl80211;
 942		vlan->encrypt_headroom =
 943			ieee80211_cs_headroom(sdata->local,
 944					      &params->crypto,
 945					      vlan->vif.type);
 946	}
 947
 948	sdata->vif.bss_conf.dtim_period = params->dtim_period;
 949	sdata->vif.bss_conf.enable_beacon = true;
 950	sdata->vif.bss_conf.allow_p2p_go_ps = sdata->vif.p2p;
 951
 952	sdata->vif.bss_conf.ssid_len = params->ssid_len;
 953	if (params->ssid_len)
 954		memcpy(sdata->vif.bss_conf.ssid, params->ssid,
 955		       params->ssid_len);
 956	sdata->vif.bss_conf.hidden_ssid =
 957		(params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE);
 958
 959	memset(&sdata->vif.bss_conf.p2p_noa_attr, 0,
 960	       sizeof(sdata->vif.bss_conf.p2p_noa_attr));
 961	sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow =
 962		params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
 963	if (params->p2p_opp_ps)
 964		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
 965					IEEE80211_P2P_OPPPS_ENABLE_BIT;
 966
 967	err = ieee80211_assign_beacon(sdata, &params->beacon, NULL);
 968	if (err < 0) {
 969		ieee80211_vif_release_channel(sdata);
 970		return err;
 971	}
 972	changed |= err;
 973
 974	err = drv_start_ap(sdata->local, sdata);
 975	if (err) {
 976		old = sdata_dereference(sdata->u.ap.beacon, sdata);
 977
 978		if (old)
 979			kfree_rcu(old, rcu_head);
 980		RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
 981		ieee80211_vif_release_channel(sdata);
 982		return err;
 983	}
 984
 985	ieee80211_recalc_dtim(local, sdata);
 986	ieee80211_bss_info_change_notify(sdata, changed);
 987
 988	netif_carrier_on(dev);
 989	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
 990		netif_carrier_on(vlan->dev);
 991
 992	return 0;
 993}
 994
 995static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev,
 996				   struct cfg80211_beacon_data *params)
 997{
 998	struct ieee80211_sub_if_data *sdata;
 999	struct beacon_data *old;
1000	int err;
1001
1002	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1003	sdata_assert_lock(sdata);
1004
1005	/* don't allow changing the beacon while CSA is in place - offset
1006	 * of channel switch counter may change
1007	 */
1008	if (sdata->vif.csa_active)
1009		return -EBUSY;
1010
1011	old = sdata_dereference(sdata->u.ap.beacon, sdata);
1012	if (!old)
1013		return -ENOENT;
1014
1015	err = ieee80211_assign_beacon(sdata, params, NULL);
1016	if (err < 0)
1017		return err;
1018	ieee80211_bss_info_change_notify(sdata, err);
1019	return 0;
1020}
1021
1022static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev)
1023{
1024	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1025	struct ieee80211_sub_if_data *vlan;
1026	struct ieee80211_local *local = sdata->local;
1027	struct beacon_data *old_beacon;
1028	struct probe_resp *old_probe_resp;
1029	struct cfg80211_chan_def chandef;
1030
1031	sdata_assert_lock(sdata);
1032
1033	old_beacon = sdata_dereference(sdata->u.ap.beacon, sdata);
1034	if (!old_beacon)
1035		return -ENOENT;
1036	old_probe_resp = sdata_dereference(sdata->u.ap.probe_resp, sdata);
1037
1038	/* abort any running channel switch */
1039	mutex_lock(&local->mtx);
1040	sdata->vif.csa_active = false;
1041	if (sdata->csa_block_tx) {
1042		ieee80211_wake_vif_queues(local, sdata,
1043					  IEEE80211_QUEUE_STOP_REASON_CSA);
1044		sdata->csa_block_tx = false;
1045	}
1046
1047	mutex_unlock(&local->mtx);
1048
1049	kfree(sdata->u.ap.next_beacon);
1050	sdata->u.ap.next_beacon = NULL;
1051
1052	/* turn off carrier for this interface and dependent VLANs */
1053	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
1054		netif_carrier_off(vlan->dev);
1055	netif_carrier_off(dev);
1056
1057	/* remove beacon and probe response */
1058	RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
1059	RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL);
1060	kfree_rcu(old_beacon, rcu_head);
1061	if (old_probe_resp)
1062		kfree_rcu(old_probe_resp, rcu_head);
1063	sdata->u.ap.driver_smps_mode = IEEE80211_SMPS_OFF;
1064
1065	__sta_info_flush(sdata, true);
1066	ieee80211_free_keys(sdata, true);
1067
1068	sdata->vif.bss_conf.enable_beacon = false;
1069	sdata->vif.bss_conf.ssid_len = 0;
1070	clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
1071	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
1072
1073	if (sdata->wdev.cac_started) {
1074		chandef = sdata->vif.bss_conf.chandef;
1075		cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
1076		cfg80211_cac_event(sdata->dev, &chandef,
1077				   NL80211_RADAR_CAC_ABORTED,
1078				   GFP_KERNEL);
1079	}
1080
1081	drv_stop_ap(sdata->local, sdata);
1082
1083	/* free all potentially still buffered bcast frames */
1084	local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf);
1085	ieee80211_purge_tx_queue(&local->hw, &sdata->u.ap.ps.bc_buf);
1086
1087	mutex_lock(&local->mtx);
1088	ieee80211_vif_copy_chanctx_to_vlans(sdata, true);
1089	ieee80211_vif_release_channel(sdata);
1090	mutex_unlock(&local->mtx);
1091
1092	return 0;
1093}
1094
1095/* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */
1096struct iapp_layer2_update {
1097	u8 da[ETH_ALEN];	/* broadcast */
1098	u8 sa[ETH_ALEN];	/* STA addr */
1099	__be16 len;		/* 6 */
1100	u8 dsap;		/* 0 */
1101	u8 ssap;		/* 0 */
1102	u8 control;
1103	u8 xid_info[3];
1104} __packed;
1105
1106static void ieee80211_send_layer2_update(struct sta_info *sta)
1107{
1108	struct iapp_layer2_update *msg;
1109	struct sk_buff *skb;
1110
1111	/* Send Level 2 Update Frame to update forwarding tables in layer 2
1112	 * bridge devices */
1113
1114	skb = dev_alloc_skb(sizeof(*msg));
1115	if (!skb)
1116		return;
1117	msg = skb_put(skb, sizeof(*msg));
1118
1119	/* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID)
1120	 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */
1121
1122	eth_broadcast_addr(msg->da);
1123	memcpy(msg->sa, sta->sta.addr, ETH_ALEN);
1124	msg->len = htons(6);
1125	msg->dsap = 0;
1126	msg->ssap = 0x01;	/* NULL LSAP, CR Bit: Response */
1127	msg->control = 0xaf;	/* XID response lsb.1111F101.
1128				 * F=0 (no poll command; unsolicited frame) */
1129	msg->xid_info[0] = 0x81;	/* XID format identifier */
1130	msg->xid_info[1] = 1;	/* LLC types/classes: Type 1 LLC */
1131	msg->xid_info[2] = 0;	/* XID sender's receive window size (RW) */
1132
1133	skb->dev = sta->sdata->dev;
1134	skb->protocol = eth_type_trans(skb, sta->sdata->dev);
1135	memset(skb->cb, 0, sizeof(skb->cb));
1136	netif_rx_ni(skb);
1137}
1138
1139static int sta_apply_auth_flags(struct ieee80211_local *local,
1140				struct sta_info *sta,
1141				u32 mask, u32 set)
1142{
1143	int ret;
1144
1145	if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1146	    set & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1147	    !test_sta_flag(sta, WLAN_STA_AUTH)) {
1148		ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
1149		if (ret)
1150			return ret;
1151	}
1152
1153	if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1154	    set & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1155	    !test_sta_flag(sta, WLAN_STA_ASSOC)) {
1156		/*
1157		 * When peer becomes associated, init rate control as
1158		 * well. Some drivers require rate control initialized
1159		 * before drv_sta_state() is called.
1160		 */
1161		if (!test_sta_flag(sta, WLAN_STA_RATE_CONTROL))
1162			rate_control_rate_init(sta);
1163
1164		ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
1165		if (ret)
1166			return ret;
1167	}
1168
1169	if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1170		if (set & BIT(NL80211_STA_FLAG_AUTHORIZED))
1171			ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED);
1172		else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1173			ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
1174		else
1175			ret = 0;
1176		if (ret)
1177			return ret;
1178	}
1179
1180	if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1181	    !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
1182	    test_sta_flag(sta, WLAN_STA_ASSOC)) {
1183		ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
1184		if (ret)
1185			return ret;
1186	}
1187
1188	if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1189	    !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) &&
1190	    test_sta_flag(sta, WLAN_STA_AUTH)) {
1191		ret = sta_info_move_state(sta, IEEE80211_STA_NONE);
1192		if (ret)
1193			return ret;
1194	}
1195
1196	return 0;
1197}
1198
1199static void sta_apply_mesh_params(struct ieee80211_local *local,
1200				  struct sta_info *sta,
1201				  struct station_parameters *params)
1202{
1203#ifdef CONFIG_MAC80211_MESH
1204	struct ieee80211_sub_if_data *sdata = sta->sdata;
1205	u32 changed = 0;
1206
1207	if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) {
1208		switch (params->plink_state) {
1209		case NL80211_PLINK_ESTAB:
1210			if (sta->mesh->plink_state != NL80211_PLINK_ESTAB)
1211				changed = mesh_plink_inc_estab_count(sdata);
1212			sta->mesh->plink_state = params->plink_state;
1213			sta->mesh->aid = params->peer_aid;
1214
1215			ieee80211_mps_sta_status_update(sta);
1216			changed |= ieee80211_mps_set_sta_local_pm(sta,
1217				      sdata->u.mesh.mshcfg.power_mode);
1218			break;
1219		case NL80211_PLINK_LISTEN:
1220		case NL80211_PLINK_BLOCKED:
1221		case NL80211_PLINK_OPN_SNT:
1222		case NL80211_PLINK_OPN_RCVD:
1223		case NL80211_PLINK_CNF_RCVD:
1224		case NL80211_PLINK_HOLDING:
1225			if (sta->mesh->plink_state == NL80211_PLINK_ESTAB)
1226				changed = mesh_plink_dec_estab_count(sdata);
1227			sta->mesh->plink_state = params->plink_state;
1228
1229			ieee80211_mps_sta_status_update(sta);
1230			changed |= ieee80211_mps_set_sta_local_pm(sta,
1231					NL80211_MESH_POWER_UNKNOWN);
1232			break;
1233		default:
1234			/*  nothing  */
1235			break;
1236		}
1237	}
1238
1239	switch (params->plink_action) {
1240	case NL80211_PLINK_ACTION_NO_ACTION:
1241		/* nothing */
1242		break;
1243	case NL80211_PLINK_ACTION_OPEN:
1244		changed |= mesh_plink_open(sta);
1245		break;
1246	case NL80211_PLINK_ACTION_BLOCK:
1247		changed |= mesh_plink_block(sta);
1248		break;
1249	}
1250
1251	if (params->local_pm)
1252		changed |= ieee80211_mps_set_sta_local_pm(sta,
1253							  params->local_pm);
1254
1255	ieee80211_mbss_info_change_notify(sdata, changed);
1256#endif
1257}
1258
1259static int sta_apply_parameters(struct ieee80211_local *local,
1260				struct sta_info *sta,
1261				struct station_parameters *params)
1262{
1263	int ret = 0;
1264	struct ieee80211_supported_band *sband;
1265	struct ieee80211_sub_if_data *sdata = sta->sdata;
 
1266	u32 mask, set;
1267
1268	sband = ieee80211_get_sband(sdata);
1269	if (!sband)
1270		return -EINVAL;
1271
1272	mask = params->sta_flags_mask;
1273	set = params->sta_flags_set;
1274
1275	if (ieee80211_vif_is_mesh(&sdata->vif)) {
1276		/*
1277		 * In mesh mode, ASSOCIATED isn't part of the nl80211
1278		 * API but must follow AUTHENTICATED for driver state.
1279		 */
1280		if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1281			mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
1282		if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1283			set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
1284	} else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1285		/*
1286		 * TDLS -- everything follows authorized, but
1287		 * only becoming authorized is possible, not
1288		 * going back
1289		 */
1290		if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1291			set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1292			       BIT(NL80211_STA_FLAG_ASSOCIATED);
1293			mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1294				BIT(NL80211_STA_FLAG_ASSOCIATED);
1295		}
1296	}
1297
1298	if (mask & BIT(NL80211_STA_FLAG_WME) &&
1299	    local->hw.queues >= IEEE80211_NUM_ACS)
1300		sta->sta.wme = set & BIT(NL80211_STA_FLAG_WME);
1301
1302	/* auth flags will be set later for TDLS,
1303	 * and for unassociated stations that move to assocaited */
1304	if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1305	    !((mask & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
1306	      (set & BIT(NL80211_STA_FLAG_ASSOCIATED)))) {
1307		ret = sta_apply_auth_flags(local, sta, mask, set);
1308		if (ret)
1309			return ret;
1310	}
1311
1312	if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) {
1313		if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1314			set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1315		else
1316			clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1317	}
1318
1319	if (mask & BIT(NL80211_STA_FLAG_MFP)) {
1320		sta->sta.mfp = !!(set & BIT(NL80211_STA_FLAG_MFP));
1321		if (set & BIT(NL80211_STA_FLAG_MFP))
1322			set_sta_flag(sta, WLAN_STA_MFP);
1323		else
1324			clear_sta_flag(sta, WLAN_STA_MFP);
1325	}
1326
1327	if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) {
1328		if (set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1329			set_sta_flag(sta, WLAN_STA_TDLS_PEER);
1330		else
1331			clear_sta_flag(sta, WLAN_STA_TDLS_PEER);
1332	}
1333
1334	/* mark TDLS channel switch support, if the AP allows it */
1335	if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1336	    !sdata->u.mgd.tdls_chan_switch_prohibited &&
1337	    params->ext_capab_len >= 4 &&
1338	    params->ext_capab[3] & WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH)
1339		set_sta_flag(sta, WLAN_STA_TDLS_CHAN_SWITCH);
1340
1341	if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1342	    !sdata->u.mgd.tdls_wider_bw_prohibited &&
1343	    ieee80211_hw_check(&local->hw, TDLS_WIDER_BW) &&
1344	    params->ext_capab_len >= 8 &&
1345	    params->ext_capab[7] & WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED)
1346		set_sta_flag(sta, WLAN_STA_TDLS_WIDER_BW);
1347
1348	if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) {
1349		sta->sta.uapsd_queues = params->uapsd_queues;
1350		sta->sta.max_sp = params->max_sp;
1351	}
1352
1353	/* The sender might not have sent the last bit, consider it to be 0 */
1354	if (params->ext_capab_len >= 8) {
1355		u8 val = (params->ext_capab[7] &
1356			  WLAN_EXT_CAPA8_MAX_MSDU_IN_AMSDU_LSB) >> 7;
1357
1358		/* we did get all the bits, take the MSB as well */
1359		if (params->ext_capab_len >= 9) {
1360			u8 val_msb = params->ext_capab[8] &
1361				WLAN_EXT_CAPA9_MAX_MSDU_IN_AMSDU_MSB;
1362			val_msb <<= 1;
1363			val |= val_msb;
1364		}
1365
1366		switch (val) {
1367		case 1:
1368			sta->sta.max_amsdu_subframes = 32;
1369			break;
1370		case 2:
1371			sta->sta.max_amsdu_subframes = 16;
1372			break;
1373		case 3:
1374			sta->sta.max_amsdu_subframes = 8;
1375			break;
1376		default:
1377			sta->sta.max_amsdu_subframes = 0;
1378		}
1379	}
1380
1381	/*
1382	 * cfg80211 validates this (1-2007) and allows setting the AID
1383	 * only when creating a new station entry
1384	 */
1385	if (params->aid)
1386		sta->sta.aid = params->aid;
1387
1388	/*
1389	 * Some of the following updates would be racy if called on an
1390	 * existing station, via ieee80211_change_station(). However,
1391	 * all such changes are rejected by cfg80211 except for updates
1392	 * changing the supported rates on an existing but not yet used
1393	 * TDLS peer.
1394	 */
1395
1396	if (params->listen_interval >= 0)
1397		sta->listen_interval = params->listen_interval;
1398
1399	if (params->supported_rates) {
1400		ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1401					 sband, params->supported_rates,
1402					 params->supported_rates_len,
1403					 &sta->sta.supp_rates[sband->band]);
1404	}
1405
1406	if (params->ht_capa)
1407		ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband,
1408						  params->ht_capa, sta);
1409
1410	/* VHT can override some HT caps such as the A-MSDU max length */
1411	if (params->vht_capa)
1412		ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband,
1413						    params->vht_capa, sta);
1414
1415	if (params->opmode_notif_used) {
1416		/* returned value is only needed for rc update, but the
1417		 * rc isn't initialized here yet, so ignore it
1418		 */
1419		__ieee80211_vht_handle_opmode(sdata, sta, params->opmode_notif,
1420					      sband->band);
1421	}
1422
1423	if (params->support_p2p_ps >= 0)
1424		sta->sta.support_p2p_ps = params->support_p2p_ps;
1425
1426	if (ieee80211_vif_is_mesh(&sdata->vif))
1427		sta_apply_mesh_params(local, sta, params);
1428
1429	/* set the STA state after all sta info from usermode has been set */
1430	if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) ||
1431	    set & BIT(NL80211_STA_FLAG_ASSOCIATED)) {
1432		ret = sta_apply_auth_flags(local, sta, mask, set);
1433		if (ret)
1434			return ret;
1435	}
1436
1437	return 0;
1438}
1439
1440static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
1441				 const u8 *mac,
1442				 struct station_parameters *params)
1443{
1444	struct ieee80211_local *local = wiphy_priv(wiphy);
1445	struct sta_info *sta;
1446	struct ieee80211_sub_if_data *sdata;
1447	int err;
1448	int layer2_update;
1449
1450	if (params->vlan) {
1451		sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1452
1453		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1454		    sdata->vif.type != NL80211_IFTYPE_AP)
1455			return -EINVAL;
1456	} else
1457		sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1458
1459	if (ether_addr_equal(mac, sdata->vif.addr))
1460		return -EINVAL;
1461
1462	if (is_multicast_ether_addr(mac))
1463		return -EINVAL;
1464
1465	sta = sta_info_alloc(sdata, mac, GFP_KERNEL);
1466	if (!sta)
1467		return -ENOMEM;
1468
1469	if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1470		sta->sta.tdls = true;
1471
1472	err = sta_apply_parameters(local, sta, params);
1473	if (err) {
1474		sta_info_free(local, sta);
1475		return err;
1476	}
1477
1478	/*
1479	 * for TDLS and for unassociated station, rate control should be
1480	 * initialized only when rates are known and station is marked
1481	 * authorized/associated
1482	 */
1483	if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1484	    test_sta_flag(sta, WLAN_STA_ASSOC))
1485		rate_control_rate_init(sta);
1486
1487	layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1488		sdata->vif.type == NL80211_IFTYPE_AP;
1489
1490	err = sta_info_insert_rcu(sta);
1491	if (err) {
1492		rcu_read_unlock();
1493		return err;
1494	}
1495
1496	if (layer2_update)
1497		ieee80211_send_layer2_update(sta);
1498
1499	rcu_read_unlock();
1500
1501	return 0;
1502}
1503
1504static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev,
1505				 struct station_del_parameters *params)
1506{
1507	struct ieee80211_sub_if_data *sdata;
1508
1509	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1510
1511	if (params->mac)
1512		return sta_info_destroy_addr_bss(sdata, params->mac);
1513
1514	sta_info_flush(sdata);
1515	return 0;
1516}
1517
1518static int ieee80211_change_station(struct wiphy *wiphy,
1519				    struct net_device *dev, const u8 *mac,
1520				    struct station_parameters *params)
1521{
1522	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1523	struct ieee80211_local *local = wiphy_priv(wiphy);
1524	struct sta_info *sta;
1525	struct ieee80211_sub_if_data *vlansdata;
1526	enum cfg80211_station_type statype;
1527	int err;
1528
1529	mutex_lock(&local->sta_mtx);
1530
1531	sta = sta_info_get_bss(sdata, mac);
1532	if (!sta) {
1533		err = -ENOENT;
1534		goto out_err;
1535	}
1536
1537	switch (sdata->vif.type) {
1538	case NL80211_IFTYPE_MESH_POINT:
1539		if (sdata->u.mesh.user_mpm)
1540			statype = CFG80211_STA_MESH_PEER_USER;
1541		else
1542			statype = CFG80211_STA_MESH_PEER_KERNEL;
1543		break;
1544	case NL80211_IFTYPE_ADHOC:
1545		statype = CFG80211_STA_IBSS;
1546		break;
1547	case NL80211_IFTYPE_STATION:
1548		if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1549			statype = CFG80211_STA_AP_STA;
1550			break;
1551		}
1552		if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1553			statype = CFG80211_STA_TDLS_PEER_ACTIVE;
1554		else
1555			statype = CFG80211_STA_TDLS_PEER_SETUP;
1556		break;
1557	case NL80211_IFTYPE_AP:
1558	case NL80211_IFTYPE_AP_VLAN:
1559		if (test_sta_flag(sta, WLAN_STA_ASSOC))
1560			statype = CFG80211_STA_AP_CLIENT;
1561		else
1562			statype = CFG80211_STA_AP_CLIENT_UNASSOC;
1563		break;
1564	default:
1565		err = -EOPNOTSUPP;
1566		goto out_err;
1567	}
1568
1569	err = cfg80211_check_station_change(wiphy, params, statype);
1570	if (err)
1571		goto out_err;
1572
1573	if (params->vlan && params->vlan != sta->sdata->dev) {
1574		vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1575
1576		if (params->vlan->ieee80211_ptr->use_4addr) {
1577			if (vlansdata->u.vlan.sta) {
1578				err = -EBUSY;
1579				goto out_err;
1580			}
1581
1582			rcu_assign_pointer(vlansdata->u.vlan.sta, sta);
1583			__ieee80211_check_fast_rx_iface(vlansdata);
1584		}
1585
1586		if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN &&
1587		    sta->sdata->u.vlan.sta)
1588			RCU_INIT_POINTER(sta->sdata->u.vlan.sta, NULL);
1589
1590		if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1591			ieee80211_vif_dec_num_mcast(sta->sdata);
1592
1593		sta->sdata = vlansdata;
1594		ieee80211_check_fast_xmit(sta);
1595
1596		if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1597			ieee80211_vif_inc_num_mcast(sta->sdata);
1598
1599		ieee80211_send_layer2_update(sta);
1600	}
1601
1602	err = sta_apply_parameters(local, sta, params);
1603	if (err)
1604		goto out_err;
1605
1606	mutex_unlock(&local->sta_mtx);
1607
1608	if ((sdata->vif.type == NL80211_IFTYPE_AP ||
1609	     sdata->vif.type == NL80211_IFTYPE_AP_VLAN) &&
1610	    sta->known_smps_mode != sta->sdata->bss->req_smps &&
1611	    test_sta_flag(sta, WLAN_STA_AUTHORIZED) &&
1612	    sta_info_tx_streams(sta) != 1) {
1613		ht_dbg(sta->sdata,
1614		       "%pM just authorized and MIMO capable - update SMPS\n",
1615		       sta->sta.addr);
1616		ieee80211_send_smps_action(sta->sdata,
1617			sta->sdata->bss->req_smps,
1618			sta->sta.addr,
1619			sta->sdata->vif.bss_conf.bssid);
1620	}
1621
1622	if (sdata->vif.type == NL80211_IFTYPE_STATION &&
1623	    params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1624		ieee80211_recalc_ps(local);
1625		ieee80211_recalc_ps_vif(sdata);
1626	}
1627
1628	return 0;
1629out_err:
1630	mutex_unlock(&local->sta_mtx);
1631	return err;
1632}
1633
1634#ifdef CONFIG_MAC80211_MESH
1635static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev,
1636			       const u8 *dst, const u8 *next_hop)
1637{
1638	struct ieee80211_sub_if_data *sdata;
1639	struct mesh_path *mpath;
1640	struct sta_info *sta;
1641
1642	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1643
1644	rcu_read_lock();
1645	sta = sta_info_get(sdata, next_hop);
1646	if (!sta) {
1647		rcu_read_unlock();
1648		return -ENOENT;
1649	}
1650
1651	mpath = mesh_path_add(sdata, dst);
1652	if (IS_ERR(mpath)) {
1653		rcu_read_unlock();
1654		return PTR_ERR(mpath);
1655	}
1656
1657	mesh_path_fix_nexthop(mpath, sta);
1658
1659	rcu_read_unlock();
1660	return 0;
1661}
1662
1663static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev,
1664			       const u8 *dst)
1665{
1666	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1667
1668	if (dst)
1669		return mesh_path_del(sdata, dst);
1670
1671	mesh_path_flush_by_iface(sdata);
1672	return 0;
1673}
1674
1675static int ieee80211_change_mpath(struct wiphy *wiphy, struct net_device *dev,
1676				  const u8 *dst, const u8 *next_hop)
1677{
1678	struct ieee80211_sub_if_data *sdata;
1679	struct mesh_path *mpath;
1680	struct sta_info *sta;
1681
1682	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1683
1684	rcu_read_lock();
1685
1686	sta = sta_info_get(sdata, next_hop);
1687	if (!sta) {
1688		rcu_read_unlock();
1689		return -ENOENT;
1690	}
1691
1692	mpath = mesh_path_lookup(sdata, dst);
1693	if (!mpath) {
1694		rcu_read_unlock();
1695		return -ENOENT;
1696	}
1697
1698	mesh_path_fix_nexthop(mpath, sta);
1699
1700	rcu_read_unlock();
1701	return 0;
1702}
1703
1704static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop,
1705			    struct mpath_info *pinfo)
1706{
1707	struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop);
1708
1709	if (next_hop_sta)
1710		memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN);
1711	else
1712		eth_zero_addr(next_hop);
1713
1714	memset(pinfo, 0, sizeof(*pinfo));
1715
1716	pinfo->generation = mpath->sdata->u.mesh.mesh_paths_generation;
1717
1718	pinfo->filled = MPATH_INFO_FRAME_QLEN |
1719			MPATH_INFO_SN |
1720			MPATH_INFO_METRIC |
1721			MPATH_INFO_EXPTIME |
1722			MPATH_INFO_DISCOVERY_TIMEOUT |
1723			MPATH_INFO_DISCOVERY_RETRIES |
1724			MPATH_INFO_FLAGS;
1725
1726	pinfo->frame_qlen = mpath->frame_queue.qlen;
1727	pinfo->sn = mpath->sn;
1728	pinfo->metric = mpath->metric;
1729	if (time_before(jiffies, mpath->exp_time))
1730		pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies);
1731	pinfo->discovery_timeout =
1732			jiffies_to_msecs(mpath->discovery_timeout);
1733	pinfo->discovery_retries = mpath->discovery_retries;
1734	if (mpath->flags & MESH_PATH_ACTIVE)
1735		pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE;
1736	if (mpath->flags & MESH_PATH_RESOLVING)
1737		pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING;
1738	if (mpath->flags & MESH_PATH_SN_VALID)
1739		pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID;
1740	if (mpath->flags & MESH_PATH_FIXED)
1741		pinfo->flags |= NL80211_MPATH_FLAG_FIXED;
1742	if (mpath->flags & MESH_PATH_RESOLVED)
1743		pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED;
1744}
1745
1746static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev,
1747			       u8 *dst, u8 *next_hop, struct mpath_info *pinfo)
1748
1749{
1750	struct ieee80211_sub_if_data *sdata;
1751	struct mesh_path *mpath;
1752
1753	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1754
1755	rcu_read_lock();
1756	mpath = mesh_path_lookup(sdata, dst);
1757	if (!mpath) {
1758		rcu_read_unlock();
1759		return -ENOENT;
1760	}
1761	memcpy(dst, mpath->dst, ETH_ALEN);
1762	mpath_set_pinfo(mpath, next_hop, pinfo);
1763	rcu_read_unlock();
1764	return 0;
1765}
1766
1767static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev,
1768				int idx, u8 *dst, u8 *next_hop,
1769				struct mpath_info *pinfo)
1770{
1771	struct ieee80211_sub_if_data *sdata;
1772	struct mesh_path *mpath;
1773
1774	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1775
1776	rcu_read_lock();
1777	mpath = mesh_path_lookup_by_idx(sdata, idx);
1778	if (!mpath) {
1779		rcu_read_unlock();
1780		return -ENOENT;
1781	}
1782	memcpy(dst, mpath->dst, ETH_ALEN);
1783	mpath_set_pinfo(mpath, next_hop, pinfo);
1784	rcu_read_unlock();
1785	return 0;
1786}
1787
1788static void mpp_set_pinfo(struct mesh_path *mpath, u8 *mpp,
1789			  struct mpath_info *pinfo)
1790{
1791	memset(pinfo, 0, sizeof(*pinfo));
1792	memcpy(mpp, mpath->mpp, ETH_ALEN);
1793
1794	pinfo->generation = mpath->sdata->u.mesh.mpp_paths_generation;
1795}
1796
1797static int ieee80211_get_mpp(struct wiphy *wiphy, struct net_device *dev,
1798			     u8 *dst, u8 *mpp, struct mpath_info *pinfo)
1799
1800{
1801	struct ieee80211_sub_if_data *sdata;
1802	struct mesh_path *mpath;
1803
1804	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1805
1806	rcu_read_lock();
1807	mpath = mpp_path_lookup(sdata, dst);
1808	if (!mpath) {
1809		rcu_read_unlock();
1810		return -ENOENT;
1811	}
1812	memcpy(dst, mpath->dst, ETH_ALEN);
1813	mpp_set_pinfo(mpath, mpp, pinfo);
1814	rcu_read_unlock();
1815	return 0;
1816}
1817
1818static int ieee80211_dump_mpp(struct wiphy *wiphy, struct net_device *dev,
1819			      int idx, u8 *dst, u8 *mpp,
1820			      struct mpath_info *pinfo)
1821{
1822	struct ieee80211_sub_if_data *sdata;
1823	struct mesh_path *mpath;
1824
1825	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1826
1827	rcu_read_lock();
1828	mpath = mpp_path_lookup_by_idx(sdata, idx);
1829	if (!mpath) {
1830		rcu_read_unlock();
1831		return -ENOENT;
1832	}
1833	memcpy(dst, mpath->dst, ETH_ALEN);
1834	mpp_set_pinfo(mpath, mpp, pinfo);
1835	rcu_read_unlock();
1836	return 0;
1837}
1838
1839static int ieee80211_get_mesh_config(struct wiphy *wiphy,
1840				struct net_device *dev,
1841				struct mesh_config *conf)
1842{
1843	struct ieee80211_sub_if_data *sdata;
1844	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1845
1846	memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config));
1847	return 0;
1848}
1849
1850static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask)
1851{
1852	return (mask >> (parm-1)) & 0x1;
1853}
1854
1855static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh,
1856		const struct mesh_setup *setup)
1857{
1858	u8 *new_ie;
1859	const u8 *old_ie;
1860	struct ieee80211_sub_if_data *sdata = container_of(ifmsh,
1861					struct ieee80211_sub_if_data, u.mesh);
1862
1863	/* allocate information elements */
1864	new_ie = NULL;
1865	old_ie = ifmsh->ie;
1866
1867	if (setup->ie_len) {
1868		new_ie = kmemdup(setup->ie, setup->ie_len,
1869				GFP_KERNEL);
1870		if (!new_ie)
1871			return -ENOMEM;
1872	}
1873	ifmsh->ie_len = setup->ie_len;
1874	ifmsh->ie = new_ie;
1875	kfree(old_ie);
1876
1877	/* now copy the rest of the setup parameters */
1878	ifmsh->mesh_id_len = setup->mesh_id_len;
1879	memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len);
1880	ifmsh->mesh_sp_id = setup->sync_method;
1881	ifmsh->mesh_pp_id = setup->path_sel_proto;
1882	ifmsh->mesh_pm_id = setup->path_metric;
1883	ifmsh->user_mpm = setup->user_mpm;
1884	ifmsh->mesh_auth_id = setup->auth_id;
1885	ifmsh->security = IEEE80211_MESH_SEC_NONE;
1886	ifmsh->userspace_handles_dfs = setup->userspace_handles_dfs;
1887	if (setup->is_authenticated)
1888		ifmsh->security |= IEEE80211_MESH_SEC_AUTHED;
1889	if (setup->is_secure)
1890		ifmsh->security |= IEEE80211_MESH_SEC_SECURED;
1891
1892	/* mcast rate setting in Mesh Node */
1893	memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate,
1894						sizeof(setup->mcast_rate));
1895	sdata->vif.bss_conf.basic_rates = setup->basic_rates;
1896
1897	sdata->vif.bss_conf.beacon_int = setup->beacon_interval;
1898	sdata->vif.bss_conf.dtim_period = setup->dtim_period;
1899
1900	return 0;
1901}
1902
1903static int ieee80211_update_mesh_config(struct wiphy *wiphy,
1904					struct net_device *dev, u32 mask,
1905					const struct mesh_config *nconf)
1906{
1907	struct mesh_config *conf;
1908	struct ieee80211_sub_if_data *sdata;
1909	struct ieee80211_if_mesh *ifmsh;
1910
1911	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1912	ifmsh = &sdata->u.mesh;
1913
1914	/* Set the config options which we are interested in setting */
1915	conf = &(sdata->u.mesh.mshcfg);
1916	if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask))
1917		conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout;
1918	if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask))
1919		conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout;
1920	if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask))
1921		conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout;
1922	if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask))
1923		conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks;
1924	if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask))
1925		conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries;
1926	if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask))
1927		conf->dot11MeshTTL = nconf->dot11MeshTTL;
1928	if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask))
1929		conf->element_ttl = nconf->element_ttl;
1930	if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) {
1931		if (ifmsh->user_mpm)
1932			return -EBUSY;
1933		conf->auto_open_plinks = nconf->auto_open_plinks;
1934	}
1935	if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask))
1936		conf->dot11MeshNbrOffsetMaxNeighbor =
1937			nconf->dot11MeshNbrOffsetMaxNeighbor;
1938	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask))
1939		conf->dot11MeshHWMPmaxPREQretries =
1940			nconf->dot11MeshHWMPmaxPREQretries;
1941	if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask))
1942		conf->path_refresh_time = nconf->path_refresh_time;
1943	if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask))
1944		conf->min_discovery_timeout = nconf->min_discovery_timeout;
1945	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask))
1946		conf->dot11MeshHWMPactivePathTimeout =
1947			nconf->dot11MeshHWMPactivePathTimeout;
1948	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask))
1949		conf->dot11MeshHWMPpreqMinInterval =
1950			nconf->dot11MeshHWMPpreqMinInterval;
1951	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask))
1952		conf->dot11MeshHWMPperrMinInterval =
1953			nconf->dot11MeshHWMPperrMinInterval;
1954	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
1955			   mask))
1956		conf->dot11MeshHWMPnetDiameterTraversalTime =
1957			nconf->dot11MeshHWMPnetDiameterTraversalTime;
1958	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) {
1959		conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode;
1960		ieee80211_mesh_root_setup(ifmsh);
1961	}
1962	if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) {
1963		/* our current gate announcement implementation rides on root
1964		 * announcements, so require this ifmsh to also be a root node
1965		 * */
1966		if (nconf->dot11MeshGateAnnouncementProtocol &&
1967		    !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) {
1968			conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN;
1969			ieee80211_mesh_root_setup(ifmsh);
1970		}
1971		conf->dot11MeshGateAnnouncementProtocol =
1972			nconf->dot11MeshGateAnnouncementProtocol;
1973	}
1974	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask))
1975		conf->dot11MeshHWMPRannInterval =
1976			nconf->dot11MeshHWMPRannInterval;
1977	if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask))
1978		conf->dot11MeshForwarding = nconf->dot11MeshForwarding;
1979	if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) {
1980		/* our RSSI threshold implementation is supported only for
1981		 * devices that report signal in dBm.
1982		 */
1983		if (!ieee80211_hw_check(&sdata->local->hw, SIGNAL_DBM))
1984			return -ENOTSUPP;
1985		conf->rssi_threshold = nconf->rssi_threshold;
1986	}
1987	if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) {
1988		conf->ht_opmode = nconf->ht_opmode;
1989		sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode;
1990		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT);
1991	}
1992	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask))
1993		conf->dot11MeshHWMPactivePathToRootTimeout =
1994			nconf->dot11MeshHWMPactivePathToRootTimeout;
1995	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask))
1996		conf->dot11MeshHWMProotInterval =
1997			nconf->dot11MeshHWMProotInterval;
1998	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask))
1999		conf->dot11MeshHWMPconfirmationInterval =
2000			nconf->dot11MeshHWMPconfirmationInterval;
2001	if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) {
2002		conf->power_mode = nconf->power_mode;
2003		ieee80211_mps_local_status_update(sdata);
2004	}
2005	if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask))
2006		conf->dot11MeshAwakeWindowDuration =
2007			nconf->dot11MeshAwakeWindowDuration;
2008	if (_chg_mesh_attr(NL80211_MESHCONF_PLINK_TIMEOUT, mask))
2009		conf->plink_timeout = nconf->plink_timeout;
2010	ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON);
2011	return 0;
2012}
2013
2014static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev,
2015			       const struct mesh_config *conf,
2016			       const struct mesh_setup *setup)
2017{
2018	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2019	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
2020	int err;
2021
2022	memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config));
2023	err = copy_mesh_setup(ifmsh, setup);
2024	if (err)
2025		return err;
2026
2027	sdata->control_port_over_nl80211 = setup->control_port_over_nl80211;
2028
2029	/* can mesh use other SMPS modes? */
2030	sdata->smps_mode = IEEE80211_SMPS_OFF;
2031	sdata->needed_rx_chains = sdata->local->rx_chains;
2032
2033	mutex_lock(&sdata->local->mtx);
2034	err = ieee80211_vif_use_channel(sdata, &setup->chandef,
2035					IEEE80211_CHANCTX_SHARED);
2036	mutex_unlock(&sdata->local->mtx);
2037	if (err)
2038		return err;
2039
2040	return ieee80211_start_mesh(sdata);
2041}
2042
2043static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev)
2044{
2045	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2046
2047	ieee80211_stop_mesh(sdata);
2048	mutex_lock(&sdata->local->mtx);
2049	ieee80211_vif_release_channel(sdata);
2050	mutex_unlock(&sdata->local->mtx);
2051
2052	return 0;
2053}
2054#endif
2055
2056static int ieee80211_change_bss(struct wiphy *wiphy,
2057				struct net_device *dev,
2058				struct bss_parameters *params)
2059{
2060	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2061	struct ieee80211_supported_band *sband;
2062	u32 changed = 0;
2063
2064	if (!sdata_dereference(sdata->u.ap.beacon, sdata))
2065		return -ENOENT;
2066
2067	sband = ieee80211_get_sband(sdata);
2068	if (!sband)
2069		return -EINVAL;
2070
2071	if (params->use_cts_prot >= 0) {
2072		sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot;
2073		changed |= BSS_CHANGED_ERP_CTS_PROT;
2074	}
2075	if (params->use_short_preamble >= 0) {
2076		sdata->vif.bss_conf.use_short_preamble =
2077			params->use_short_preamble;
2078		changed |= BSS_CHANGED_ERP_PREAMBLE;
2079	}
2080
2081	if (!sdata->vif.bss_conf.use_short_slot &&
2082	    sband->band == NL80211_BAND_5GHZ) {
2083		sdata->vif.bss_conf.use_short_slot = true;
2084		changed |= BSS_CHANGED_ERP_SLOT;
2085	}
2086
2087	if (params->use_short_slot_time >= 0) {
2088		sdata->vif.bss_conf.use_short_slot =
2089			params->use_short_slot_time;
2090		changed |= BSS_CHANGED_ERP_SLOT;
2091	}
2092
2093	if (params->basic_rates) {
2094		ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
2095					 wiphy->bands[sband->band],
2096					 params->basic_rates,
2097					 params->basic_rates_len,
2098					 &sdata->vif.bss_conf.basic_rates);
2099		changed |= BSS_CHANGED_BASIC_RATES;
2100		ieee80211_check_rate_mask(sdata);
2101	}
2102
2103	if (params->ap_isolate >= 0) {
2104		if (params->ap_isolate)
2105			sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
2106		else
2107			sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
2108		ieee80211_check_fast_rx_iface(sdata);
2109	}
2110
2111	if (params->ht_opmode >= 0) {
2112		sdata->vif.bss_conf.ht_operation_mode =
2113			(u16) params->ht_opmode;
2114		changed |= BSS_CHANGED_HT;
2115	}
2116
2117	if (params->p2p_ctwindow >= 0) {
2118		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
2119					~IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
2120		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
2121			params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
2122		changed |= BSS_CHANGED_P2P_PS;
2123	}
2124
2125	if (params->p2p_opp_ps > 0) {
2126		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
2127					IEEE80211_P2P_OPPPS_ENABLE_BIT;
2128		changed |= BSS_CHANGED_P2P_PS;
2129	} else if (params->p2p_opp_ps == 0) {
2130		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
2131					~IEEE80211_P2P_OPPPS_ENABLE_BIT;
2132		changed |= BSS_CHANGED_P2P_PS;
2133	}
2134
2135	ieee80211_bss_info_change_notify(sdata, changed);
2136
2137	return 0;
2138}
2139
2140static int ieee80211_set_txq_params(struct wiphy *wiphy,
2141				    struct net_device *dev,
2142				    struct ieee80211_txq_params *params)
2143{
2144	struct ieee80211_local *local = wiphy_priv(wiphy);
2145	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2146	struct ieee80211_tx_queue_params p;
2147
2148	if (!local->ops->conf_tx)
2149		return -EOPNOTSUPP;
2150
2151	if (local->hw.queues < IEEE80211_NUM_ACS)
2152		return -EOPNOTSUPP;
2153
2154	memset(&p, 0, sizeof(p));
2155	p.aifs = params->aifs;
2156	p.cw_max = params->cwmax;
2157	p.cw_min = params->cwmin;
2158	p.txop = params->txop;
2159
2160	/*
2161	 * Setting tx queue params disables u-apsd because it's only
2162	 * called in master mode.
2163	 */
2164	p.uapsd = false;
2165
2166	ieee80211_regulatory_limit_wmm_params(sdata, &p, params->ac);
2167
2168	sdata->tx_conf[params->ac] = p;
2169	if (drv_conf_tx(local, sdata, params->ac, &p)) {
2170		wiphy_debug(local->hw.wiphy,
2171			    "failed to set TX queue parameters for AC %d\n",
2172			    params->ac);
2173		return -EINVAL;
2174	}
2175
2176	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS);
2177
2178	return 0;
2179}
2180
2181#ifdef CONFIG_PM
2182static int ieee80211_suspend(struct wiphy *wiphy,
2183			     struct cfg80211_wowlan *wowlan)
2184{
2185	return __ieee80211_suspend(wiphy_priv(wiphy), wowlan);
2186}
2187
2188static int ieee80211_resume(struct wiphy *wiphy)
2189{
2190	return __ieee80211_resume(wiphy_priv(wiphy));
2191}
2192#else
2193#define ieee80211_suspend NULL
2194#define ieee80211_resume NULL
2195#endif
2196
2197static int ieee80211_scan(struct wiphy *wiphy,
2198			  struct cfg80211_scan_request *req)
2199{
2200	struct ieee80211_sub_if_data *sdata;
2201
2202	sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev);
2203
2204	switch (ieee80211_vif_type_p2p(&sdata->vif)) {
2205	case NL80211_IFTYPE_STATION:
2206	case NL80211_IFTYPE_ADHOC:
2207	case NL80211_IFTYPE_MESH_POINT:
2208	case NL80211_IFTYPE_P2P_CLIENT:
2209	case NL80211_IFTYPE_P2P_DEVICE:
2210		break;
2211	case NL80211_IFTYPE_P2P_GO:
2212		if (sdata->local->ops->hw_scan)
2213			break;
2214		/*
2215		 * FIXME: implement NoA while scanning in software,
2216		 * for now fall through to allow scanning only when
2217		 * beaconing hasn't been configured yet
2218		 */
2219		/* fall through */
2220	case NL80211_IFTYPE_AP:
2221		/*
2222		 * If the scan has been forced (and the driver supports
2223		 * forcing), don't care about being beaconing already.
2224		 * This will create problems to the attached stations (e.g. all
2225		 * the  frames sent while scanning on other channel will be
2226		 * lost)
2227		 */
2228		if (sdata->u.ap.beacon &&
2229		    (!(wiphy->features & NL80211_FEATURE_AP_SCAN) ||
2230		     !(req->flags & NL80211_SCAN_FLAG_AP)))
2231			return -EOPNOTSUPP;
2232		break;
2233	case NL80211_IFTYPE_NAN:
2234	default:
2235		return -EOPNOTSUPP;
2236	}
2237
2238	return ieee80211_request_scan(sdata, req);
2239}
2240
2241static void ieee80211_abort_scan(struct wiphy *wiphy, struct wireless_dev *wdev)
2242{
2243	ieee80211_scan_cancel(wiphy_priv(wiphy));
2244}
2245
2246static int
2247ieee80211_sched_scan_start(struct wiphy *wiphy,
2248			   struct net_device *dev,
2249			   struct cfg80211_sched_scan_request *req)
2250{
2251	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2252
2253	if (!sdata->local->ops->sched_scan_start)
2254		return -EOPNOTSUPP;
2255
2256	return ieee80211_request_sched_scan_start(sdata, req);
2257}
2258
2259static int
2260ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev,
2261			  u64 reqid)
2262{
2263	struct ieee80211_local *local = wiphy_priv(wiphy);
2264
2265	if (!local->ops->sched_scan_stop)
2266		return -EOPNOTSUPP;
2267
2268	return ieee80211_request_sched_scan_stop(local);
2269}
2270
2271static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev,
2272			  struct cfg80211_auth_request *req)
2273{
2274	return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req);
2275}
2276
2277static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev,
2278			   struct cfg80211_assoc_request *req)
2279{
2280	return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
2281}
2282
2283static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev,
2284			    struct cfg80211_deauth_request *req)
2285{
2286	return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req);
2287}
2288
2289static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev,
2290			      struct cfg80211_disassoc_request *req)
2291{
2292	return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
2293}
2294
2295static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
2296			       struct cfg80211_ibss_params *params)
2297{
2298	return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params);
2299}
2300
2301static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
2302{
2303	return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev));
2304}
2305
2306static int ieee80211_join_ocb(struct wiphy *wiphy, struct net_device *dev,
2307			      struct ocb_setup *setup)
2308{
2309	return ieee80211_ocb_join(IEEE80211_DEV_TO_SUB_IF(dev), setup);
2310}
2311
2312static int ieee80211_leave_ocb(struct wiphy *wiphy, struct net_device *dev)
2313{
2314	return ieee80211_ocb_leave(IEEE80211_DEV_TO_SUB_IF(dev));
2315}
2316
2317static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev,
2318				    int rate[NUM_NL80211_BANDS])
2319{
2320	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2321
2322	memcpy(sdata->vif.bss_conf.mcast_rate, rate,
2323	       sizeof(int) * NUM_NL80211_BANDS);
2324
2325	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_MCAST_RATE);
2326
2327	return 0;
2328}
2329
2330static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
2331{
2332	struct ieee80211_local *local = wiphy_priv(wiphy);
2333	int err;
2334
2335	if (changed & WIPHY_PARAM_FRAG_THRESHOLD) {
2336		ieee80211_check_fast_xmit_all(local);
2337
2338		err = drv_set_frag_threshold(local, wiphy->frag_threshold);
2339
2340		if (err) {
2341			ieee80211_check_fast_xmit_all(local);
2342			return err;
2343		}
2344	}
2345
2346	if ((changed & WIPHY_PARAM_COVERAGE_CLASS) ||
2347	    (changed & WIPHY_PARAM_DYN_ACK)) {
2348		s16 coverage_class;
2349
2350		coverage_class = changed & WIPHY_PARAM_COVERAGE_CLASS ?
2351					wiphy->coverage_class : -1;
2352		err = drv_set_coverage_class(local, coverage_class);
2353
2354		if (err)
2355			return err;
2356	}
2357
2358	if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
2359		err = drv_set_rts_threshold(local, wiphy->rts_threshold);
2360
2361		if (err)
2362			return err;
2363	}
2364
2365	if (changed & WIPHY_PARAM_RETRY_SHORT) {
2366		if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY)
2367			return -EINVAL;
2368		local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
2369	}
2370	if (changed & WIPHY_PARAM_RETRY_LONG) {
2371		if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY)
2372			return -EINVAL;
2373		local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
2374	}
2375	if (changed &
2376	    (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG))
2377		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS);
2378
2379	return 0;
2380}
2381
2382static int ieee80211_set_tx_power(struct wiphy *wiphy,
2383				  struct wireless_dev *wdev,
2384				  enum nl80211_tx_power_setting type, int mbm)
2385{
2386	struct ieee80211_local *local = wiphy_priv(wiphy);
2387	struct ieee80211_sub_if_data *sdata;
2388	enum nl80211_tx_power_setting txp_type = type;
2389	bool update_txp_type = false;
2390	bool has_monitor = false;
2391
2392	if (wdev) {
2393		sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2394
2395		if (sdata->vif.type == NL80211_IFTYPE_MONITOR) {
2396			sdata = rtnl_dereference(local->monitor_sdata);
2397			if (!sdata)
2398				return -EOPNOTSUPP;
2399		}
2400
2401		switch (type) {
2402		case NL80211_TX_POWER_AUTOMATIC:
2403			sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2404			txp_type = NL80211_TX_POWER_LIMITED;
2405			break;
2406		case NL80211_TX_POWER_LIMITED:
2407		case NL80211_TX_POWER_FIXED:
2408			if (mbm < 0 || (mbm % 100))
2409				return -EOPNOTSUPP;
2410			sdata->user_power_level = MBM_TO_DBM(mbm);
2411			break;
2412		}
2413
2414		if (txp_type != sdata->vif.bss_conf.txpower_type) {
2415			update_txp_type = true;
2416			sdata->vif.bss_conf.txpower_type = txp_type;
2417		}
2418
2419		ieee80211_recalc_txpower(sdata, update_txp_type);
2420
2421		return 0;
2422	}
2423
2424	switch (type) {
2425	case NL80211_TX_POWER_AUTOMATIC:
2426		local->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2427		txp_type = NL80211_TX_POWER_LIMITED;
2428		break;
2429	case NL80211_TX_POWER_LIMITED:
2430	case NL80211_TX_POWER_FIXED:
2431		if (mbm < 0 || (mbm % 100))
2432			return -EOPNOTSUPP;
2433		local->user_power_level = MBM_TO_DBM(mbm);
2434		break;
2435	}
2436
2437	mutex_lock(&local->iflist_mtx);
2438	list_for_each_entry(sdata, &local->interfaces, list) {
2439		if (sdata->vif.type == NL80211_IFTYPE_MONITOR) {
2440			has_monitor = true;
2441			continue;
2442		}
2443		sdata->user_power_level = local->user_power_level;
2444		if (txp_type != sdata->vif.bss_conf.txpower_type)
2445			update_txp_type = true;
2446		sdata->vif.bss_conf.txpower_type = txp_type;
2447	}
2448	list_for_each_entry(sdata, &local->interfaces, list) {
2449		if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
2450			continue;
2451		ieee80211_recalc_txpower(sdata, update_txp_type);
2452	}
2453	mutex_unlock(&local->iflist_mtx);
2454
2455	if (has_monitor) {
2456		sdata = rtnl_dereference(local->monitor_sdata);
2457		if (sdata) {
2458			sdata->user_power_level = local->user_power_level;
2459			if (txp_type != sdata->vif.bss_conf.txpower_type)
2460				update_txp_type = true;
2461			sdata->vif.bss_conf.txpower_type = txp_type;
2462
2463			ieee80211_recalc_txpower(sdata, update_txp_type);
2464		}
2465	}
2466
2467	return 0;
2468}
2469
2470static int ieee80211_get_tx_power(struct wiphy *wiphy,
2471				  struct wireless_dev *wdev,
2472				  int *dbm)
2473{
2474	struct ieee80211_local *local = wiphy_priv(wiphy);
2475	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2476
2477	if (local->ops->get_txpower)
2478		return drv_get_txpower(local, sdata, dbm);
2479
2480	if (!local->use_chanctx)
2481		*dbm = local->hw.conf.power_level;
2482	else
2483		*dbm = sdata->vif.bss_conf.txpower;
2484
2485	return 0;
2486}
2487
2488static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev,
2489				  const u8 *addr)
2490{
2491	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2492
2493	memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN);
2494
2495	return 0;
2496}
2497
2498static void ieee80211_rfkill_poll(struct wiphy *wiphy)
2499{
2500	struct ieee80211_local *local = wiphy_priv(wiphy);
2501
2502	drv_rfkill_poll(local);
2503}
2504
2505#ifdef CONFIG_NL80211_TESTMODE
2506static int ieee80211_testmode_cmd(struct wiphy *wiphy,
2507				  struct wireless_dev *wdev,
2508				  void *data, int len)
2509{
2510	struct ieee80211_local *local = wiphy_priv(wiphy);
2511	struct ieee80211_vif *vif = NULL;
2512
2513	if (!local->ops->testmode_cmd)
2514		return -EOPNOTSUPP;
2515
2516	if (wdev) {
2517		struct ieee80211_sub_if_data *sdata;
2518
2519		sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2520		if (sdata->flags & IEEE80211_SDATA_IN_DRIVER)
2521			vif = &sdata->vif;
2522	}
2523
2524	return local->ops->testmode_cmd(&local->hw, vif, data, len);
2525}
2526
2527static int ieee80211_testmode_dump(struct wiphy *wiphy,
2528				   struct sk_buff *skb,
2529				   struct netlink_callback *cb,
2530				   void *data, int len)
2531{
2532	struct ieee80211_local *local = wiphy_priv(wiphy);
2533
2534	if (!local->ops->testmode_dump)
2535		return -EOPNOTSUPP;
2536
2537	return local->ops->testmode_dump(&local->hw, skb, cb, data, len);
2538}
2539#endif
2540
2541int __ieee80211_request_smps_ap(struct ieee80211_sub_if_data *sdata,
2542				enum ieee80211_smps_mode smps_mode)
2543{
2544	struct sta_info *sta;
2545	enum ieee80211_smps_mode old_req;
2546
2547	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP))
2548		return -EINVAL;
2549
2550	if (sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2551		return 0;
2552
2553	old_req = sdata->u.ap.req_smps;
2554	sdata->u.ap.req_smps = smps_mode;
2555
2556	/* AUTOMATIC doesn't mean much for AP - don't allow it */
2557	if (old_req == smps_mode ||
2558	    smps_mode == IEEE80211_SMPS_AUTOMATIC)
2559		return 0;
2560
2561	ht_dbg(sdata,
2562	       "SMPS %d requested in AP mode, sending Action frame to %d stations\n",
2563	       smps_mode, atomic_read(&sdata->u.ap.num_mcast_sta));
2564
2565	mutex_lock(&sdata->local->sta_mtx);
2566	list_for_each_entry(sta, &sdata->local->sta_list, list) {
2567		/*
2568		 * Only stations associated to our AP and
2569		 * associated VLANs
2570		 */
2571		if (sta->sdata->bss != &sdata->u.ap)
2572			continue;
2573
2574		/* This station doesn't support MIMO - skip it */
2575		if (sta_info_tx_streams(sta) == 1)
2576			continue;
2577
2578		/*
2579		 * Don't wake up a STA just to send the action frame
2580		 * unless we are getting more restrictive.
2581		 */
2582		if (test_sta_flag(sta, WLAN_STA_PS_STA) &&
2583		    !ieee80211_smps_is_restrictive(sta->known_smps_mode,
2584						   smps_mode)) {
2585			ht_dbg(sdata, "Won't send SMPS to sleeping STA %pM\n",
2586			       sta->sta.addr);
2587			continue;
2588		}
2589
2590		/*
2591		 * If the STA is not authorized, wait until it gets
2592		 * authorized and the action frame will be sent then.
2593		 */
2594		if (!test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2595			continue;
2596
2597		ht_dbg(sdata, "Sending SMPS to %pM\n", sta->sta.addr);
2598		ieee80211_send_smps_action(sdata, smps_mode, sta->sta.addr,
2599					   sdata->vif.bss_conf.bssid);
2600	}
2601	mutex_unlock(&sdata->local->sta_mtx);
2602
2603	sdata->smps_mode = smps_mode;
2604	ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2605
2606	return 0;
2607}
2608
2609int __ieee80211_request_smps_mgd(struct ieee80211_sub_if_data *sdata,
2610				 enum ieee80211_smps_mode smps_mode)
2611{
2612	const u8 *ap;
2613	enum ieee80211_smps_mode old_req;
2614	int err;
2615	struct sta_info *sta;
2616	bool tdls_peer_found = false;
2617
2618	lockdep_assert_held(&sdata->wdev.mtx);
2619
2620	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION))
2621		return -EINVAL;
2622
2623	old_req = sdata->u.mgd.req_smps;
2624	sdata->u.mgd.req_smps = smps_mode;
2625
2626	if (old_req == smps_mode &&
2627	    smps_mode != IEEE80211_SMPS_AUTOMATIC)
2628		return 0;
2629
2630	/*
2631	 * If not associated, or current association is not an HT
2632	 * association, there's no need to do anything, just store
2633	 * the new value until we associate.
2634	 */
2635	if (!sdata->u.mgd.associated ||
2636	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2637		return 0;
2638
2639	ap = sdata->u.mgd.associated->bssid;
2640
2641	rcu_read_lock();
2642	list_for_each_entry_rcu(sta, &sdata->local->sta_list, list) {
2643		if (!sta->sta.tdls || sta->sdata != sdata || !sta->uploaded ||
2644		    !test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2645			continue;
2646
2647		tdls_peer_found = true;
2648		break;
2649	}
2650	rcu_read_unlock();
2651
2652	if (smps_mode == IEEE80211_SMPS_AUTOMATIC) {
2653		if (tdls_peer_found || !sdata->u.mgd.powersave)
2654			smps_mode = IEEE80211_SMPS_OFF;
2655		else
2656			smps_mode = IEEE80211_SMPS_DYNAMIC;
2657	}
2658
2659	/* send SM PS frame to AP */
2660	err = ieee80211_send_smps_action(sdata, smps_mode,
2661					 ap, ap);
2662	if (err)
2663		sdata->u.mgd.req_smps = old_req;
2664	else if (smps_mode != IEEE80211_SMPS_OFF && tdls_peer_found)
2665		ieee80211_teardown_tdls_peers(sdata);
2666
2667	return err;
2668}
2669
2670static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev,
2671				    bool enabled, int timeout)
2672{
2673	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2674	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2675
2676	if (sdata->vif.type != NL80211_IFTYPE_STATION)
2677		return -EOPNOTSUPP;
2678
2679	if (!ieee80211_hw_check(&local->hw, SUPPORTS_PS))
2680		return -EOPNOTSUPP;
2681
2682	if (enabled == sdata->u.mgd.powersave &&
2683	    timeout == local->dynamic_ps_forced_timeout)
2684		return 0;
2685
2686	sdata->u.mgd.powersave = enabled;
2687	local->dynamic_ps_forced_timeout = timeout;
2688
2689	/* no change, but if automatic follow powersave */
2690	sdata_lock(sdata);
2691	__ieee80211_request_smps_mgd(sdata, sdata->u.mgd.req_smps);
2692	sdata_unlock(sdata);
2693
2694	if (ieee80211_hw_check(&local->hw, SUPPORTS_DYNAMIC_PS))
2695		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2696
2697	ieee80211_recalc_ps(local);
2698	ieee80211_recalc_ps_vif(sdata);
2699	ieee80211_check_fast_rx_iface(sdata);
2700
2701	return 0;
2702}
2703
2704static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy,
2705					 struct net_device *dev,
2706					 s32 rssi_thold, u32 rssi_hyst)
2707{
2708	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2709	struct ieee80211_vif *vif = &sdata->vif;
2710	struct ieee80211_bss_conf *bss_conf = &vif->bss_conf;
2711
2712	if (rssi_thold == bss_conf->cqm_rssi_thold &&
2713	    rssi_hyst == bss_conf->cqm_rssi_hyst)
2714		return 0;
2715
2716	if (sdata->vif.driver_flags & IEEE80211_VIF_BEACON_FILTER &&
2717	    !(sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI))
2718		return -EOPNOTSUPP;
2719
2720	bss_conf->cqm_rssi_thold = rssi_thold;
2721	bss_conf->cqm_rssi_hyst = rssi_hyst;
2722	bss_conf->cqm_rssi_low = 0;
2723	bss_conf->cqm_rssi_high = 0;
2724	sdata->u.mgd.last_cqm_event_signal = 0;
2725
2726	/* tell the driver upon association, unless already associated */
2727	if (sdata->u.mgd.associated &&
2728	    sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI)
2729		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM);
2730
2731	return 0;
2732}
2733
2734static int ieee80211_set_cqm_rssi_range_config(struct wiphy *wiphy,
2735					       struct net_device *dev,
2736					       s32 rssi_low, s32 rssi_high)
2737{
2738	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2739	struct ieee80211_vif *vif = &sdata->vif;
2740	struct ieee80211_bss_conf *bss_conf = &vif->bss_conf;
2741
2742	if (sdata->vif.driver_flags & IEEE80211_VIF_BEACON_FILTER)
2743		return -EOPNOTSUPP;
2744
2745	bss_conf->cqm_rssi_low = rssi_low;
2746	bss_conf->cqm_rssi_high = rssi_high;
2747	bss_conf->cqm_rssi_thold = 0;
2748	bss_conf->cqm_rssi_hyst = 0;
2749	sdata->u.mgd.last_cqm_event_signal = 0;
2750
2751	/* tell the driver upon association, unless already associated */
2752	if (sdata->u.mgd.associated &&
2753	    sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI)
2754		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM);
2755
2756	return 0;
2757}
2758
2759static int ieee80211_set_bitrate_mask(struct wiphy *wiphy,
2760				      struct net_device *dev,
2761				      const u8 *addr,
2762				      const struct cfg80211_bitrate_mask *mask)
2763{
2764	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2765	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2766	int i, ret;
2767
2768	if (!ieee80211_sdata_running(sdata))
2769		return -ENETDOWN;
2770
2771	/*
2772	 * If active validate the setting and reject it if it doesn't leave
2773	 * at least one basic rate usable, since we really have to be able
2774	 * to send something, and if we're an AP we have to be able to do
2775	 * so at a basic rate so that all clients can receive it.
2776	 */
2777	if (rcu_access_pointer(sdata->vif.chanctx_conf) &&
2778	    sdata->vif.bss_conf.chandef.chan) {
2779		u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2780		enum nl80211_band band = sdata->vif.bss_conf.chandef.chan->band;
2781
2782		if (!(mask->control[band].legacy & basic_rates))
2783			return -EINVAL;
2784	}
2785
2786	if (ieee80211_hw_check(&local->hw, HAS_RATE_CONTROL)) {
2787		ret = drv_set_bitrate_mask(local, sdata, mask);
2788		if (ret)
2789			return ret;
2790	}
2791
2792	for (i = 0; i < NUM_NL80211_BANDS; i++) {
2793		struct ieee80211_supported_band *sband = wiphy->bands[i];
2794		int j;
2795
2796		sdata->rc_rateidx_mask[i] = mask->control[i].legacy;
2797		memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].ht_mcs,
2798		       sizeof(mask->control[i].ht_mcs));
2799		memcpy(sdata->rc_rateidx_vht_mcs_mask[i],
2800		       mask->control[i].vht_mcs,
2801		       sizeof(mask->control[i].vht_mcs));
2802
2803		sdata->rc_has_mcs_mask[i] = false;
2804		sdata->rc_has_vht_mcs_mask[i] = false;
2805		if (!sband)
2806			continue;
2807
2808		for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++) {
2809			if (~sdata->rc_rateidx_mcs_mask[i][j]) {
2810				sdata->rc_has_mcs_mask[i] = true;
2811				break;
2812			}
2813		}
2814
2815		for (j = 0; j < NL80211_VHT_NSS_MAX; j++) {
2816			if (~sdata->rc_rateidx_vht_mcs_mask[i][j]) {
2817				sdata->rc_has_vht_mcs_mask[i] = true;
2818				break;
2819			}
2820		}
2821	}
2822
2823	return 0;
2824}
2825
2826static int ieee80211_start_radar_detection(struct wiphy *wiphy,
2827					   struct net_device *dev,
2828					   struct cfg80211_chan_def *chandef,
2829					   u32 cac_time_ms)
2830{
2831	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2832	struct ieee80211_local *local = sdata->local;
2833	int err;
2834
2835	mutex_lock(&local->mtx);
2836	if (!list_empty(&local->roc_list) || local->scanning) {
2837		err = -EBUSY;
2838		goto out_unlock;
2839	}
2840
2841	/* whatever, but channel contexts should not complain about that one */
2842	sdata->smps_mode = IEEE80211_SMPS_OFF;
2843	sdata->needed_rx_chains = local->rx_chains;
2844
2845	err = ieee80211_vif_use_channel(sdata, chandef,
2846					IEEE80211_CHANCTX_SHARED);
2847	if (err)
2848		goto out_unlock;
2849
2850	ieee80211_queue_delayed_work(&sdata->local->hw,
2851				     &sdata->dfs_cac_timer_work,
2852				     msecs_to_jiffies(cac_time_ms));
2853
2854 out_unlock:
2855	mutex_unlock(&local->mtx);
2856	return err;
2857}
2858
2859static struct cfg80211_beacon_data *
2860cfg80211_beacon_dup(struct cfg80211_beacon_data *beacon)
2861{
2862	struct cfg80211_beacon_data *new_beacon;
2863	u8 *pos;
2864	int len;
2865
2866	len = beacon->head_len + beacon->tail_len + beacon->beacon_ies_len +
2867	      beacon->proberesp_ies_len + beacon->assocresp_ies_len +
2868	      beacon->probe_resp_len;
2869
2870	new_beacon = kzalloc(sizeof(*new_beacon) + len, GFP_KERNEL);
2871	if (!new_beacon)
2872		return NULL;
2873
2874	pos = (u8 *)(new_beacon + 1);
2875	if (beacon->head_len) {
2876		new_beacon->head_len = beacon->head_len;
2877		new_beacon->head = pos;
2878		memcpy(pos, beacon->head, beacon->head_len);
2879		pos += beacon->head_len;
2880	}
2881	if (beacon->tail_len) {
2882		new_beacon->tail_len = beacon->tail_len;
2883		new_beacon->tail = pos;
2884		memcpy(pos, beacon->tail, beacon->tail_len);
2885		pos += beacon->tail_len;
2886	}
2887	if (beacon->beacon_ies_len) {
2888		new_beacon->beacon_ies_len = beacon->beacon_ies_len;
2889		new_beacon->beacon_ies = pos;
2890		memcpy(pos, beacon->beacon_ies, beacon->beacon_ies_len);
2891		pos += beacon->beacon_ies_len;
2892	}
2893	if (beacon->proberesp_ies_len) {
2894		new_beacon->proberesp_ies_len = beacon->proberesp_ies_len;
2895		new_beacon->proberesp_ies = pos;
2896		memcpy(pos, beacon->proberesp_ies, beacon->proberesp_ies_len);
2897		pos += beacon->proberesp_ies_len;
2898	}
2899	if (beacon->assocresp_ies_len) {
2900		new_beacon->assocresp_ies_len = beacon->assocresp_ies_len;
2901		new_beacon->assocresp_ies = pos;
2902		memcpy(pos, beacon->assocresp_ies, beacon->assocresp_ies_len);
2903		pos += beacon->assocresp_ies_len;
2904	}
2905	if (beacon->probe_resp_len) {
2906		new_beacon->probe_resp_len = beacon->probe_resp_len;
2907		new_beacon->probe_resp = pos;
2908		memcpy(pos, beacon->probe_resp, beacon->probe_resp_len);
2909		pos += beacon->probe_resp_len;
2910	}
2911
2912	return new_beacon;
2913}
2914
2915void ieee80211_csa_finish(struct ieee80211_vif *vif)
2916{
2917	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2918
2919	ieee80211_queue_work(&sdata->local->hw,
2920			     &sdata->csa_finalize_work);
2921}
2922EXPORT_SYMBOL(ieee80211_csa_finish);
2923
2924static int ieee80211_set_after_csa_beacon(struct ieee80211_sub_if_data *sdata,
2925					  u32 *changed)
2926{
2927	int err;
2928
2929	switch (sdata->vif.type) {
2930	case NL80211_IFTYPE_AP:
2931		err = ieee80211_assign_beacon(sdata, sdata->u.ap.next_beacon,
2932					      NULL);
2933		kfree(sdata->u.ap.next_beacon);
2934		sdata->u.ap.next_beacon = NULL;
2935
2936		if (err < 0)
2937			return err;
2938		*changed |= err;
2939		break;
2940	case NL80211_IFTYPE_ADHOC:
2941		err = ieee80211_ibss_finish_csa(sdata);
2942		if (err < 0)
2943			return err;
2944		*changed |= err;
2945		break;
2946#ifdef CONFIG_MAC80211_MESH
2947	case NL80211_IFTYPE_MESH_POINT:
2948		err = ieee80211_mesh_finish_csa(sdata);
2949		if (err < 0)
2950			return err;
2951		*changed |= err;
2952		break;
2953#endif
2954	default:
2955		WARN_ON(1);
2956		return -EINVAL;
2957	}
2958
2959	return 0;
2960}
2961
2962static int __ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
2963{
2964	struct ieee80211_local *local = sdata->local;
2965	u32 changed = 0;
2966	int err;
2967
2968	sdata_assert_lock(sdata);
2969	lockdep_assert_held(&local->mtx);
2970	lockdep_assert_held(&local->chanctx_mtx);
2971
2972	/*
2973	 * using reservation isn't immediate as it may be deferred until later
2974	 * with multi-vif. once reservation is complete it will re-schedule the
2975	 * work with no reserved_chanctx so verify chandef to check if it
2976	 * completed successfully
2977	 */
2978
2979	if (sdata->reserved_chanctx) {
2980		/*
2981		 * with multi-vif csa driver may call ieee80211_csa_finish()
2982		 * many times while waiting for other interfaces to use their
2983		 * reservations
2984		 */
2985		if (sdata->reserved_ready)
2986			return 0;
2987
2988		return ieee80211_vif_use_reserved_context(sdata);
2989	}
2990
2991	if (!cfg80211_chandef_identical(&sdata->vif.bss_conf.chandef,
2992					&sdata->csa_chandef))
2993		return -EINVAL;
2994
2995	sdata->vif.csa_active = false;
2996
2997	err = ieee80211_set_after_csa_beacon(sdata, &changed);
2998	if (err)
2999		return err;
3000
3001	ieee80211_bss_info_change_notify(sdata, changed);
3002
3003	if (sdata->csa_block_tx) {
3004		ieee80211_wake_vif_queues(local, sdata,
3005					  IEEE80211_QUEUE_STOP_REASON_CSA);
3006		sdata->csa_block_tx = false;
3007	}
3008
3009	err = drv_post_channel_switch(sdata);
3010	if (err)
3011		return err;
3012
3013	cfg80211_ch_switch_notify(sdata->dev, &sdata->csa_chandef);
3014
3015	return 0;
3016}
3017
3018static void ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
3019{
3020	if (__ieee80211_csa_finalize(sdata)) {
3021		sdata_info(sdata, "failed to finalize CSA, disconnecting\n");
3022		cfg80211_stop_iface(sdata->local->hw.wiphy, &sdata->wdev,
3023				    GFP_KERNEL);
3024	}
3025}
3026
3027void ieee80211_csa_finalize_work(struct work_struct *work)
3028{
3029	struct ieee80211_sub_if_data *sdata =
3030		container_of(work, struct ieee80211_sub_if_data,
3031			     csa_finalize_work);
3032	struct ieee80211_local *local = sdata->local;
3033
3034	sdata_lock(sdata);
3035	mutex_lock(&local->mtx);
3036	mutex_lock(&local->chanctx_mtx);
3037
3038	/* AP might have been stopped while waiting for the lock. */
3039	if (!sdata->vif.csa_active)
3040		goto unlock;
3041
3042	if (!ieee80211_sdata_running(sdata))
3043		goto unlock;
3044
3045	ieee80211_csa_finalize(sdata);
3046
3047unlock:
3048	mutex_unlock(&local->chanctx_mtx);
3049	mutex_unlock(&local->mtx);
3050	sdata_unlock(sdata);
3051}
3052
3053static int ieee80211_set_csa_beacon(struct ieee80211_sub_if_data *sdata,
3054				    struct cfg80211_csa_settings *params,
3055				    u32 *changed)
3056{
3057	struct ieee80211_csa_settings csa = {};
3058	int err;
3059
3060	switch (sdata->vif.type) {
3061	case NL80211_IFTYPE_AP:
3062		sdata->u.ap.next_beacon =
3063			cfg80211_beacon_dup(&params->beacon_after);
3064		if (!sdata->u.ap.next_beacon)
3065			return -ENOMEM;
3066
3067		/*
3068		 * With a count of 0, we don't have to wait for any
3069		 * TBTT before switching, so complete the CSA
3070		 * immediately.  In theory, with a count == 1 we
3071		 * should delay the switch until just before the next
3072		 * TBTT, but that would complicate things so we switch
3073		 * immediately too.  If we would delay the switch
3074		 * until the next TBTT, we would have to set the probe
3075		 * response here.
3076		 *
3077		 * TODO: A channel switch with count <= 1 without
3078		 * sending a CSA action frame is kind of useless,
3079		 * because the clients won't know we're changing
3080		 * channels.  The action frame must be implemented
3081		 * either here or in the userspace.
3082		 */
3083		if (params->count <= 1)
3084			break;
3085
3086		if ((params->n_counter_offsets_beacon >
3087		     IEEE80211_MAX_CSA_COUNTERS_NUM) ||
3088		    (params->n_counter_offsets_presp >
3089		     IEEE80211_MAX_CSA_COUNTERS_NUM))
3090			return -EINVAL;
3091
3092		csa.counter_offsets_beacon = params->counter_offsets_beacon;
3093		csa.counter_offsets_presp = params->counter_offsets_presp;
3094		csa.n_counter_offsets_beacon = params->n_counter_offsets_beacon;
3095		csa.n_counter_offsets_presp = params->n_counter_offsets_presp;
3096		csa.count = params->count;
3097
3098		err = ieee80211_assign_beacon(sdata, &params->beacon_csa, &csa);
3099		if (err < 0) {
3100			kfree(sdata->u.ap.next_beacon);
3101			return err;
3102		}
3103		*changed |= err;
3104
3105		break;
3106	case NL80211_IFTYPE_ADHOC:
3107		if (!sdata->vif.bss_conf.ibss_joined)
3108			return -EINVAL;
3109
3110		if (params->chandef.width != sdata->u.ibss.chandef.width)
3111			return -EINVAL;
3112
3113		switch (params->chandef.width) {
3114		case NL80211_CHAN_WIDTH_40:
3115			if (cfg80211_get_chandef_type(&params->chandef) !=
3116			    cfg80211_get_chandef_type(&sdata->u.ibss.chandef))
3117				return -EINVAL;
3118		case NL80211_CHAN_WIDTH_5:
3119		case NL80211_CHAN_WIDTH_10:
3120		case NL80211_CHAN_WIDTH_20_NOHT:
3121		case NL80211_CHAN_WIDTH_20:
3122			break;
3123		default:
3124			return -EINVAL;
3125		}
3126
3127		/* changes into another band are not supported */
3128		if (sdata->u.ibss.chandef.chan->band !=
3129		    params->chandef.chan->band)
3130			return -EINVAL;
3131
3132		/* see comments in the NL80211_IFTYPE_AP block */
3133		if (params->count > 1) {
3134			err = ieee80211_ibss_csa_beacon(sdata, params);
3135			if (err < 0)
3136				return err;
3137			*changed |= err;
3138		}
3139
3140		ieee80211_send_action_csa(sdata, params);
3141
3142		break;
3143#ifdef CONFIG_MAC80211_MESH
3144	case NL80211_IFTYPE_MESH_POINT: {
3145		struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
3146
3147		if (params->chandef.width != sdata->vif.bss_conf.chandef.width)
3148			return -EINVAL;
3149
3150		/* changes into another band are not supported */
3151		if (sdata->vif.bss_conf.chandef.chan->band !=
3152		    params->chandef.chan->band)
3153			return -EINVAL;
3154
3155		if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_NONE) {
3156			ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_INIT;
3157			if (!ifmsh->pre_value)
3158				ifmsh->pre_value = 1;
3159			else
3160				ifmsh->pre_value++;
3161		}
3162
3163		/* see comments in the NL80211_IFTYPE_AP block */
3164		if (params->count > 1) {
3165			err = ieee80211_mesh_csa_beacon(sdata, params);
3166			if (err < 0) {
3167				ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
3168				return err;
3169			}
3170			*changed |= err;
3171		}
3172
3173		if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT)
3174			ieee80211_send_action_csa(sdata, params);
3175
3176		break;
3177		}
3178#endif
3179	default:
3180		return -EOPNOTSUPP;
3181	}
3182
3183	return 0;
3184}
3185
3186static int
3187__ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3188			   struct cfg80211_csa_settings *params)
3189{
3190	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3191	struct ieee80211_local *local = sdata->local;
3192	struct ieee80211_channel_switch ch_switch;
3193	struct ieee80211_chanctx_conf *conf;
3194	struct ieee80211_chanctx *chanctx;
3195	u32 changed = 0;
3196	int err;
3197
3198	sdata_assert_lock(sdata);
3199	lockdep_assert_held(&local->mtx);
3200
3201	if (!list_empty(&local->roc_list) || local->scanning)
3202		return -EBUSY;
3203
3204	if (sdata->wdev.cac_started)
3205		return -EBUSY;
3206
3207	if (cfg80211_chandef_identical(&params->chandef,
3208				       &sdata->vif.bss_conf.chandef))
3209		return -EINVAL;
3210
3211	/* don't allow another channel switch if one is already active. */
3212	if (sdata->vif.csa_active)
3213		return -EBUSY;
3214
3215	mutex_lock(&local->chanctx_mtx);
3216	conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
3217					 lockdep_is_held(&local->chanctx_mtx));
3218	if (!conf) {
3219		err = -EBUSY;
3220		goto out;
3221	}
3222
3223	chanctx = container_of(conf, struct ieee80211_chanctx, conf);
3224
3225	ch_switch.timestamp = 0;
3226	ch_switch.device_timestamp = 0;
3227	ch_switch.block_tx = params->block_tx;
3228	ch_switch.chandef = params->chandef;
3229	ch_switch.count = params->count;
3230
3231	err = drv_pre_channel_switch(sdata, &ch_switch);
3232	if (err)
3233		goto out;
3234
3235	err = ieee80211_vif_reserve_chanctx(sdata, &params->chandef,
3236					    chanctx->mode,
3237					    params->radar_required);
3238	if (err)
3239		goto out;
3240
3241	/* if reservation is invalid then this will fail */
3242	err = ieee80211_check_combinations(sdata, NULL, chanctx->mode, 0);
3243	if (err) {
3244		ieee80211_vif_unreserve_chanctx(sdata);
3245		goto out;
3246	}
3247
3248	err = ieee80211_set_csa_beacon(sdata, params, &changed);
3249	if (err) {
3250		ieee80211_vif_unreserve_chanctx(sdata);
3251		goto out;
3252	}
3253
3254	sdata->csa_chandef = params->chandef;
3255	sdata->csa_block_tx = params->block_tx;
3256	sdata->vif.csa_active = true;
3257
3258	if (sdata->csa_block_tx)
3259		ieee80211_stop_vif_queues(local, sdata,
3260					  IEEE80211_QUEUE_STOP_REASON_CSA);
3261
3262	cfg80211_ch_switch_started_notify(sdata->dev, &sdata->csa_chandef,
3263					  params->count);
3264
3265	if (changed) {
3266		ieee80211_bss_info_change_notify(sdata, changed);
3267		drv_channel_switch_beacon(sdata, &params->chandef);
3268	} else {
3269		/* if the beacon didn't change, we can finalize immediately */
3270		ieee80211_csa_finalize(sdata);
3271	}
3272
3273out:
3274	mutex_unlock(&local->chanctx_mtx);
3275	return err;
3276}
3277
3278int ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3279			     struct cfg80211_csa_settings *params)
3280{
3281	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3282	struct ieee80211_local *local = sdata->local;
3283	int err;
3284
3285	mutex_lock(&local->mtx);
3286	err = __ieee80211_channel_switch(wiphy, dev, params);
3287	mutex_unlock(&local->mtx);
3288
3289	return err;
3290}
3291
3292u64 ieee80211_mgmt_tx_cookie(struct ieee80211_local *local)
3293{
3294	lockdep_assert_held(&local->mtx);
3295
3296	local->roc_cookie_counter++;
3297
3298	/* wow, you wrapped 64 bits ... more likely a bug */
3299	if (WARN_ON(local->roc_cookie_counter == 0))
3300		local->roc_cookie_counter++;
3301
3302	return local->roc_cookie_counter;
3303}
3304
3305int ieee80211_attach_ack_skb(struct ieee80211_local *local, struct sk_buff *skb,
3306			     u64 *cookie, gfp_t gfp)
3307{
3308	unsigned long spin_flags;
3309	struct sk_buff *ack_skb;
3310	int id;
3311
3312	ack_skb = skb_copy(skb, gfp);
3313	if (!ack_skb)
3314		return -ENOMEM;
3315
3316	spin_lock_irqsave(&local->ack_status_lock, spin_flags);
3317	id = idr_alloc(&local->ack_status_frames, ack_skb,
3318		       1, 0x10000, GFP_ATOMIC);
3319	spin_unlock_irqrestore(&local->ack_status_lock, spin_flags);
3320
3321	if (id < 0) {
3322		kfree_skb(ack_skb);
3323		return -ENOMEM;
3324	}
3325
3326	IEEE80211_SKB_CB(skb)->ack_frame_id = id;
3327
3328	*cookie = ieee80211_mgmt_tx_cookie(local);
3329	IEEE80211_SKB_CB(ack_skb)->ack.cookie = *cookie;
3330
3331	return 0;
3332}
3333
3334static void ieee80211_mgmt_frame_register(struct wiphy *wiphy,
3335					  struct wireless_dev *wdev,
3336					  u16 frame_type, bool reg)
3337{
3338	struct ieee80211_local *local = wiphy_priv(wiphy);
3339	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3340
3341	switch (frame_type) {
3342	case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ:
3343		if (reg) {
3344			local->probe_req_reg++;
3345			sdata->vif.probe_req_reg++;
3346		} else {
3347			if (local->probe_req_reg)
3348				local->probe_req_reg--;
3349
3350			if (sdata->vif.probe_req_reg)
3351				sdata->vif.probe_req_reg--;
3352		}
3353
3354		if (!local->open_count)
3355			break;
3356
3357		if (sdata->vif.probe_req_reg == 1)
3358			drv_config_iface_filter(local, sdata, FIF_PROBE_REQ,
3359						FIF_PROBE_REQ);
3360		else if (sdata->vif.probe_req_reg == 0)
3361			drv_config_iface_filter(local, sdata, 0,
3362						FIF_PROBE_REQ);
3363
3364		ieee80211_configure_filter(local);
3365		break;
3366	default:
3367		break;
3368	}
3369}
3370
3371static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant)
3372{
3373	struct ieee80211_local *local = wiphy_priv(wiphy);
3374
3375	if (local->started)
3376		return -EOPNOTSUPP;
3377
3378	return drv_set_antenna(local, tx_ant, rx_ant);
3379}
3380
3381static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant)
3382{
3383	struct ieee80211_local *local = wiphy_priv(wiphy);
3384
3385	return drv_get_antenna(local, tx_ant, rx_ant);
3386}
3387
3388static int ieee80211_set_rekey_data(struct wiphy *wiphy,
3389				    struct net_device *dev,
3390				    struct cfg80211_gtk_rekey_data *data)
3391{
3392	struct ieee80211_local *local = wiphy_priv(wiphy);
3393	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3394
3395	if (!local->ops->set_rekey_data)
3396		return -EOPNOTSUPP;
3397
3398	drv_set_rekey_data(local, sdata, data);
3399
3400	return 0;
3401}
3402
3403static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev,
3404				  const u8 *peer, u64 *cookie)
3405{
3406	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3407	struct ieee80211_local *local = sdata->local;
3408	struct ieee80211_qos_hdr *nullfunc;
3409	struct sk_buff *skb;
3410	int size = sizeof(*nullfunc);
3411	__le16 fc;
3412	bool qos;
3413	struct ieee80211_tx_info *info;
3414	struct sta_info *sta;
3415	struct ieee80211_chanctx_conf *chanctx_conf;
3416	enum nl80211_band band;
3417	int ret;
3418
3419	/* the lock is needed to assign the cookie later */
3420	mutex_lock(&local->mtx);
3421
3422	rcu_read_lock();
3423	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3424	if (WARN_ON(!chanctx_conf)) {
3425		ret = -EINVAL;
3426		goto unlock;
3427	}
3428	band = chanctx_conf->def.chan->band;
3429	sta = sta_info_get_bss(sdata, peer);
3430	if (sta) {
3431		qos = sta->sta.wme;
3432	} else {
3433		ret = -ENOLINK;
3434		goto unlock;
3435	}
3436
3437	if (qos) {
3438		fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3439				 IEEE80211_STYPE_QOS_NULLFUNC |
3440				 IEEE80211_FCTL_FROMDS);
3441	} else {
3442		size -= 2;
3443		fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3444				 IEEE80211_STYPE_NULLFUNC |
3445				 IEEE80211_FCTL_FROMDS);
3446	}
3447
3448	skb = dev_alloc_skb(local->hw.extra_tx_headroom + size);
3449	if (!skb) {
3450		ret = -ENOMEM;
3451		goto unlock;
3452	}
3453
3454	skb->dev = dev;
3455
3456	skb_reserve(skb, local->hw.extra_tx_headroom);
3457
3458	nullfunc = skb_put(skb, size);
3459	nullfunc->frame_control = fc;
3460	nullfunc->duration_id = 0;
3461	memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
3462	memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
3463	memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN);
3464	nullfunc->seq_ctrl = 0;
3465
3466	info = IEEE80211_SKB_CB(skb);
3467
3468	info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS |
3469		       IEEE80211_TX_INTFL_NL80211_FRAME_TX;
3470	info->band = band;
3471
3472	skb_set_queue_mapping(skb, IEEE80211_AC_VO);
3473	skb->priority = 7;
3474	if (qos)
3475		nullfunc->qos_ctrl = cpu_to_le16(7);
3476
3477	ret = ieee80211_attach_ack_skb(local, skb, cookie, GFP_ATOMIC);
3478	if (ret) {
3479		kfree_skb(skb);
3480		goto unlock;
3481	}
3482
3483	local_bh_disable();
3484	ieee80211_xmit(sdata, sta, skb);
3485	local_bh_enable();
3486
3487	ret = 0;
3488unlock:
3489	rcu_read_unlock();
3490	mutex_unlock(&local->mtx);
3491
3492	return ret;
3493}
3494
3495static int ieee80211_cfg_get_channel(struct wiphy *wiphy,
3496				     struct wireless_dev *wdev,
3497				     struct cfg80211_chan_def *chandef)
3498{
3499	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3500	struct ieee80211_local *local = wiphy_priv(wiphy);
3501	struct ieee80211_chanctx_conf *chanctx_conf;
3502	int ret = -ENODATA;
3503
3504	rcu_read_lock();
3505	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3506	if (chanctx_conf) {
3507		*chandef = sdata->vif.bss_conf.chandef;
3508		ret = 0;
3509	} else if (local->open_count > 0 &&
3510		   local->open_count == local->monitors &&
3511		   sdata->vif.type == NL80211_IFTYPE_MONITOR) {
3512		if (local->use_chanctx)
3513			*chandef = local->monitor_chandef;
3514		else
3515			*chandef = local->_oper_chandef;
3516		ret = 0;
3517	}
3518	rcu_read_unlock();
3519
3520	return ret;
3521}
3522
3523#ifdef CONFIG_PM
3524static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled)
3525{
3526	drv_set_wakeup(wiphy_priv(wiphy), enabled);
3527}
3528#endif
3529
3530static int ieee80211_set_qos_map(struct wiphy *wiphy,
3531				 struct net_device *dev,
3532				 struct cfg80211_qos_map *qos_map)
3533{
3534	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3535	struct mac80211_qos_map *new_qos_map, *old_qos_map;
3536
3537	if (qos_map) {
3538		new_qos_map = kzalloc(sizeof(*new_qos_map), GFP_KERNEL);
3539		if (!new_qos_map)
3540			return -ENOMEM;
3541		memcpy(&new_qos_map->qos_map, qos_map, sizeof(*qos_map));
3542	} else {
3543		/* A NULL qos_map was passed to disable QoS mapping */
3544		new_qos_map = NULL;
3545	}
3546
3547	old_qos_map = sdata_dereference(sdata->qos_map, sdata);
3548	rcu_assign_pointer(sdata->qos_map, new_qos_map);
3549	if (old_qos_map)
3550		kfree_rcu(old_qos_map, rcu_head);
3551
3552	return 0;
3553}
3554
3555static int ieee80211_set_ap_chanwidth(struct wiphy *wiphy,
3556				      struct net_device *dev,
3557				      struct cfg80211_chan_def *chandef)
3558{
3559	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3560	int ret;
3561	u32 changed = 0;
3562
3563	ret = ieee80211_vif_change_bandwidth(sdata, chandef, &changed);
3564	if (ret == 0)
3565		ieee80211_bss_info_change_notify(sdata, changed);
3566
3567	return ret;
3568}
3569
3570static int ieee80211_add_tx_ts(struct wiphy *wiphy, struct net_device *dev,
3571			       u8 tsid, const u8 *peer, u8 up,
3572			       u16 admitted_time)
3573{
3574	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3575	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
3576	int ac = ieee802_1d_to_ac[up];
3577
3578	if (sdata->vif.type != NL80211_IFTYPE_STATION)
3579		return -EOPNOTSUPP;
3580
3581	if (!(sdata->wmm_acm & BIT(up)))
3582		return -EINVAL;
3583
3584	if (ifmgd->tx_tspec[ac].admitted_time)
3585		return -EBUSY;
3586
3587	if (admitted_time) {
3588		ifmgd->tx_tspec[ac].admitted_time = 32 * admitted_time;
3589		ifmgd->tx_tspec[ac].tsid = tsid;
3590		ifmgd->tx_tspec[ac].up = up;
3591	}
3592
3593	return 0;
3594}
3595
3596static int ieee80211_del_tx_ts(struct wiphy *wiphy, struct net_device *dev,
3597			       u8 tsid, const u8 *peer)
3598{
3599	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3600	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
3601	struct ieee80211_local *local = wiphy_priv(wiphy);
3602	int ac;
3603
3604	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
3605		struct ieee80211_sta_tx_tspec *tx_tspec = &ifmgd->tx_tspec[ac];
3606
3607		/* skip unused entries */
3608		if (!tx_tspec->admitted_time)
3609			continue;
3610
3611		if (tx_tspec->tsid != tsid)
3612			continue;
3613
3614		/* due to this new packets will be reassigned to non-ACM ACs */
3615		tx_tspec->up = -1;
3616
3617		/* Make sure that all packets have been sent to avoid to
3618		 * restore the QoS params on packets that are still on the
3619		 * queues.
3620		 */
3621		synchronize_net();
3622		ieee80211_flush_queues(local, sdata, false);
3623
3624		/* restore the normal QoS parameters
3625		 * (unconditionally to avoid races)
3626		 */
3627		tx_tspec->action = TX_TSPEC_ACTION_STOP_DOWNGRADE;
3628		tx_tspec->downgraded = false;
3629		ieee80211_sta_handle_tspec_ac_params(sdata);
3630
3631		/* finally clear all the data */
3632		memset(tx_tspec, 0, sizeof(*tx_tspec));
3633
3634		return 0;
3635	}
3636
3637	return -ENOENT;
3638}
3639
3640void ieee80211_nan_func_terminated(struct ieee80211_vif *vif,
3641				   u8 inst_id,
3642				   enum nl80211_nan_func_term_reason reason,
3643				   gfp_t gfp)
3644{
3645	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
3646	struct cfg80211_nan_func *func;
3647	u64 cookie;
3648
3649	if (WARN_ON(vif->type != NL80211_IFTYPE_NAN))
3650		return;
3651
3652	spin_lock_bh(&sdata->u.nan.func_lock);
3653
3654	func = idr_find(&sdata->u.nan.function_inst_ids, inst_id);
3655	if (WARN_ON(!func)) {
3656		spin_unlock_bh(&sdata->u.nan.func_lock);
3657		return;
3658	}
3659
3660	cookie = func->cookie;
3661	idr_remove(&sdata->u.nan.function_inst_ids, inst_id);
3662
3663	spin_unlock_bh(&sdata->u.nan.func_lock);
3664
3665	cfg80211_free_nan_func(func);
3666
3667	cfg80211_nan_func_terminated(ieee80211_vif_to_wdev(vif), inst_id,
3668				     reason, cookie, gfp);
3669}
3670EXPORT_SYMBOL(ieee80211_nan_func_terminated);
3671
3672void ieee80211_nan_func_match(struct ieee80211_vif *vif,
3673			      struct cfg80211_nan_match_params *match,
3674			      gfp_t gfp)
3675{
3676	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
3677	struct cfg80211_nan_func *func;
3678
3679	if (WARN_ON(vif->type != NL80211_IFTYPE_NAN))
3680		return;
3681
3682	spin_lock_bh(&sdata->u.nan.func_lock);
3683
3684	func = idr_find(&sdata->u.nan.function_inst_ids,  match->inst_id);
3685	if (WARN_ON(!func)) {
3686		spin_unlock_bh(&sdata->u.nan.func_lock);
3687		return;
3688	}
3689	match->cookie = func->cookie;
3690
3691	spin_unlock_bh(&sdata->u.nan.func_lock);
3692
3693	cfg80211_nan_match(ieee80211_vif_to_wdev(vif), match, gfp);
3694}
3695EXPORT_SYMBOL(ieee80211_nan_func_match);
3696
3697static int ieee80211_set_multicast_to_unicast(struct wiphy *wiphy,
3698					      struct net_device *dev,
3699					      const bool enabled)
3700{
3701	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3702
3703	sdata->u.ap.multicast_to_unicast = enabled;
3704
3705	return 0;
3706}
3707
3708const struct cfg80211_ops mac80211_config_ops = {
3709	.add_virtual_intf = ieee80211_add_iface,
3710	.del_virtual_intf = ieee80211_del_iface,
3711	.change_virtual_intf = ieee80211_change_iface,
3712	.start_p2p_device = ieee80211_start_p2p_device,
3713	.stop_p2p_device = ieee80211_stop_p2p_device,
3714	.add_key = ieee80211_add_key,
3715	.del_key = ieee80211_del_key,
3716	.get_key = ieee80211_get_key,
3717	.set_default_key = ieee80211_config_default_key,
3718	.set_default_mgmt_key = ieee80211_config_default_mgmt_key,
3719	.start_ap = ieee80211_start_ap,
3720	.change_beacon = ieee80211_change_beacon,
3721	.stop_ap = ieee80211_stop_ap,
3722	.add_station = ieee80211_add_station,
3723	.del_station = ieee80211_del_station,
3724	.change_station = ieee80211_change_station,
3725	.get_station = ieee80211_get_station,
3726	.dump_station = ieee80211_dump_station,
3727	.dump_survey = ieee80211_dump_survey,
3728#ifdef CONFIG_MAC80211_MESH
3729	.add_mpath = ieee80211_add_mpath,
3730	.del_mpath = ieee80211_del_mpath,
3731	.change_mpath = ieee80211_change_mpath,
3732	.get_mpath = ieee80211_get_mpath,
3733	.dump_mpath = ieee80211_dump_mpath,
3734	.get_mpp = ieee80211_get_mpp,
3735	.dump_mpp = ieee80211_dump_mpp,
3736	.update_mesh_config = ieee80211_update_mesh_config,
3737	.get_mesh_config = ieee80211_get_mesh_config,
3738	.join_mesh = ieee80211_join_mesh,
3739	.leave_mesh = ieee80211_leave_mesh,
3740#endif
3741	.join_ocb = ieee80211_join_ocb,
3742	.leave_ocb = ieee80211_leave_ocb,
3743	.change_bss = ieee80211_change_bss,
3744	.set_txq_params = ieee80211_set_txq_params,
3745	.set_monitor_channel = ieee80211_set_monitor_channel,
3746	.suspend = ieee80211_suspend,
3747	.resume = ieee80211_resume,
3748	.scan = ieee80211_scan,
3749	.abort_scan = ieee80211_abort_scan,
3750	.sched_scan_start = ieee80211_sched_scan_start,
3751	.sched_scan_stop = ieee80211_sched_scan_stop,
3752	.auth = ieee80211_auth,
3753	.assoc = ieee80211_assoc,
3754	.deauth = ieee80211_deauth,
3755	.disassoc = ieee80211_disassoc,
3756	.join_ibss = ieee80211_join_ibss,
3757	.leave_ibss = ieee80211_leave_ibss,
3758	.set_mcast_rate = ieee80211_set_mcast_rate,
3759	.set_wiphy_params = ieee80211_set_wiphy_params,
3760	.set_tx_power = ieee80211_set_tx_power,
3761	.get_tx_power = ieee80211_get_tx_power,
3762	.set_wds_peer = ieee80211_set_wds_peer,
3763	.rfkill_poll = ieee80211_rfkill_poll,
3764	CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd)
3765	CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump)
3766	.set_power_mgmt = ieee80211_set_power_mgmt,
3767	.set_bitrate_mask = ieee80211_set_bitrate_mask,
3768	.remain_on_channel = ieee80211_remain_on_channel,
3769	.cancel_remain_on_channel = ieee80211_cancel_remain_on_channel,
3770	.mgmt_tx = ieee80211_mgmt_tx,
3771	.mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait,
3772	.set_cqm_rssi_config = ieee80211_set_cqm_rssi_config,
3773	.set_cqm_rssi_range_config = ieee80211_set_cqm_rssi_range_config,
3774	.mgmt_frame_register = ieee80211_mgmt_frame_register,
3775	.set_antenna = ieee80211_set_antenna,
3776	.get_antenna = ieee80211_get_antenna,
3777	.set_rekey_data = ieee80211_set_rekey_data,
3778	.tdls_oper = ieee80211_tdls_oper,
3779	.tdls_mgmt = ieee80211_tdls_mgmt,
3780	.tdls_channel_switch = ieee80211_tdls_channel_switch,
3781	.tdls_cancel_channel_switch = ieee80211_tdls_cancel_channel_switch,
3782	.probe_client = ieee80211_probe_client,
3783	.set_noack_map = ieee80211_set_noack_map,
3784#ifdef CONFIG_PM
3785	.set_wakeup = ieee80211_set_wakeup,
3786#endif
3787	.get_channel = ieee80211_cfg_get_channel,
3788	.start_radar_detection = ieee80211_start_radar_detection,
3789	.channel_switch = ieee80211_channel_switch,
3790	.set_qos_map = ieee80211_set_qos_map,
3791	.set_ap_chanwidth = ieee80211_set_ap_chanwidth,
3792	.add_tx_ts = ieee80211_add_tx_ts,
3793	.del_tx_ts = ieee80211_del_tx_ts,
3794	.start_nan = ieee80211_start_nan,
3795	.stop_nan = ieee80211_stop_nan,
3796	.nan_change_conf = ieee80211_nan_change_conf,
3797	.add_nan_func = ieee80211_add_nan_func,
3798	.del_nan_func = ieee80211_del_nan_func,
3799	.set_multicast_to_unicast = ieee80211_set_multicast_to_unicast,
3800	.tx_control_port = ieee80211_tx_control_port,
3801};