projects / linux-2.6-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
mac80211: fix mgmt-tx abort cookie and leak
[linux-2.6-block.git] / net / mac80211 / cfg.c
CommitLineData
f0706e82
JB		 1/*
2 * mac80211 configuration hooks for cfg80211
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
b2eb0ee6 5 * Copyright 2013-2015 Intel Mobile Communications GmbH
f0706e82
JB		 6 *
7 * This file is GPLv2 as found in COPYING.
8 */
9
e8cbb4cb 10#include <linux/ieee80211.h>
f0706e82
JB		 11#include <linux/nl80211.h>
12#include <linux/rtnetlink.h>
5a0e3ad6 13#include <linux/slab.h>
881d966b 14#include <net/net_namespace.h>
5dfdaf58 15#include <linux/rcupdate.h>
dfe018bf 16#include <linux/if_ether.h>
f0706e82
JB		 17#include <net/cfg80211.h>
18#include "ieee80211_i.h"
24487981 19#include "driver-ops.h"
2c8dccc7 20#include "rate.h"
c5dd9c2b 21#include "mesh.h"
02219b3a 22#include "wme.h"
c5dd9c2b 23
552bff0c
JB		 24static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy,
25 const char *name,
6bab2e19 26 unsigned char name_assign_type,
84efbb84
JB		 27 enum nl80211_iftype type,
28 u32 *flags,
29 struct vif_params *params)
f0706e82
JB		 30{
31 struct ieee80211_local *local = wiphy_priv(wiphy);
84efbb84 32 struct wireless_dev *wdev;
8cc9a739
MW		 33 struct ieee80211_sub_if_data *sdata;
34 int err;
f0706e82 35
6bab2e19 36 err = ieee80211_if_add(local, name, name_assign_type, &wdev, type, params);
f9e10ce4
JB		 37 if (err)
38 return ERR_PTR(err);
8cc9a739 39
f9e10ce4 40 if (type == NL80211_IFTYPE_MONITOR && flags) {
84efbb84 41 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
f9e10ce4
JB		 42 sdata->u.mntr_flags = *flags;
43 }
44
84efbb84 45 return wdev;
f0706e82
JB		 46}
47
84efbb84 48static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
f0706e82 49{
84efbb84 50 ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev));
f0706e82 51
75636525 52 return 0;
f0706e82
JB		 53}
54
e36d56b6
JB		 55static int ieee80211_change_iface(struct wiphy *wiphy,
56 struct net_device *dev,
2ec600d6
LCC		 57 enum nl80211_iftype type, u32 *flags,
58 struct vif_params *params)
42613db7 59{
9607e6b6 60 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
f3947e2d 61 int ret;
42613db7 62
05c914fe 63 ret = ieee80211_if_change_type(sdata, type);
f3947e2d
JB		 64 if (ret)
65 return ret;
42613db7 66
9bc383de
JB		 67 if (type == NL80211_IFTYPE_AP_VLAN &&
68 params && params->use_4addr == 0)
a9b3cd7f 69 RCU_INIT_POINTER(sdata->u.vlan.sta, NULL);
9bc383de
JB		 70 else if (type == NL80211_IFTYPE_STATION &&
71 params && params->use_4addr >= 0)
72 sdata->u.mgd.use_4addr = params->use_4addr;
73
85416a4f
CL		 74 if (sdata->vif.type == NL80211_IFTYPE_MONITOR && flags) {
75 struct ieee80211_local *local = sdata->local;
76
77 if (ieee80211_sdata_running(sdata)) {
31eba5bc
FF		 78 u32 mask = MONITOR_FLAG_COOK_FRAMES |
79 MONITOR_FLAG_ACTIVE;
80
85416a4f 81 /*
31eba5bc
FF		 82 * Prohibit MONITOR_FLAG_COOK_FRAMES and
83 * MONITOR_FLAG_ACTIVE to be changed while the
84 * interface is up.
85416a4f
CL		 85 * Else we would need to add a lot of cruft
86 * to update everything:
87 * cooked_mntrs, monitor and all fif_* counters
88 * reconfigure hardware
89 */
31eba5bc 90 if ((*flags & mask) != (sdata->u.mntr_flags & mask))
85416a4f
CL		 91 return -EBUSY;
92
93 ieee80211_adjust_monitor_flags(sdata, -1);
94 sdata->u.mntr_flags = *flags;
95 ieee80211_adjust_monitor_flags(sdata, 1);
96
97 ieee80211_configure_filter(local);
98 } else {
99 /*
100 * Because the interface is down, ieee80211_do_stop
101 * and ieee80211_do_open take care of "everything"
102 * mentioned in the comment above.
103 */
104 sdata->u.mntr_flags = *flags;
105 }
106 }
f7917af9 107
42613db7
JB		 108 return 0;
109}
110
f142c6b9
JB		 111static int ieee80211_start_p2p_device(struct wiphy *wiphy,
112 struct wireless_dev *wdev)
113{
b6a55015
LC		 114 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
115 int ret;
116
117 mutex_lock(&sdata->local->chanctx_mtx);
118 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
119 mutex_unlock(&sdata->local->chanctx_mtx);
120 if (ret < 0)
121 return ret;
122
f142c6b9
JB		 123 return ieee80211_do_open(wdev, true);
124}
125
126static void ieee80211_stop_p2p_device(struct wiphy *wiphy,
127 struct wireless_dev *wdev)
128{
129 ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev));
130}
131
b53be792
SW		 132static int ieee80211_set_noack_map(struct wiphy *wiphy,
133 struct net_device *dev,
134 u16 noack_map)
135{
136 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
137
138 sdata->noack_map = noack_map;
17c18bf8
JB		 139
140 ieee80211_check_fast_xmit_iface(sdata);
141
b53be792
SW		 142 return 0;
143}
144
e8cbb4cb 145static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev,
e31b8213 146 u8 key_idx, bool pairwise, const u8 *mac_addr,
e8cbb4cb
JB		 147 struct key_params *params)
148{
26a58456 149 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2475b1cc 150 struct ieee80211_local *local = sdata->local;
e8cbb4cb 151 struct sta_info *sta = NULL;
2475b1cc 152 const struct ieee80211_cipher_scheme *cs = NULL;
db4d1169 153 struct ieee80211_key *key;
3b96766f 154 int err;
e8cbb4cb 155
26a58456 156 if (!ieee80211_sdata_running(sdata))
ad0e2b5a
JB		 157 return -ENETDOWN;
158
97359d12 159 /* reject WEP and TKIP keys if WEP failed to initialize */
e8cbb4cb
JB		 160 switch (params->cipher) {
161 case WLAN_CIPHER_SUITE_WEP40:
e8cbb4cb 162 case WLAN_CIPHER_SUITE_TKIP:
97359d12 163 case WLAN_CIPHER_SUITE_WEP104:
2475b1cc 164 if (IS_ERR(local->wep_tx_tfm))
97359d12 165 return -EINVAL;
3cfcf6ac 166 break;
2475b1cc 167 case WLAN_CIPHER_SUITE_CCMP:
2b2ba0db 168 case WLAN_CIPHER_SUITE_CCMP_256:
2475b1cc 169 case WLAN_CIPHER_SUITE_AES_CMAC:
56c52da2 170 case WLAN_CIPHER_SUITE_BIP_CMAC_256:
8ade538b
JM		 171 case WLAN_CIPHER_SUITE_BIP_GMAC_128:
172 case WLAN_CIPHER_SUITE_BIP_GMAC_256:
2475b1cc 173 case WLAN_CIPHER_SUITE_GCMP:
00b9cfa3 174 case WLAN_CIPHER_SUITE_GCMP_256:
2475b1cc 175 break;
e8cbb4cb 176 default:
2475b1cc 177 cs = ieee80211_cs_get(local, params->cipher, sdata->vif.type);
97359d12 178 break;
e8cbb4cb
JB		 179 }
180
97359d12 181 key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len,
2475b1cc
MS		 182 params->key, params->seq_len, params->seq,
183 cs);
1ac62ba7
BH		 184 if (IS_ERR(key))
185 return PTR_ERR(key);
db4d1169 186
e31b8213
JB		 187 if (pairwise)
188 key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE;
189
2475b1cc 190 mutex_lock(&local->sta_mtx);
3b96766f 191
e8cbb4cb 192 if (mac_addr) {
ff973af7
TP		 193 if (ieee80211_vif_is_mesh(&sdata->vif))
194 sta = sta_info_get(sdata, mac_addr);
195 else
196 sta = sta_info_get_bss(sdata, mac_addr);
1626e0fa
JB		 197 /*
198 * The ASSOC test makes sure the driver is ready to
199 * receive the key. When wpa_supplicant has roamed
200 * using FT, it attempts to set the key before
201 * association has completed, this rejects that attempt
d070f913 202 * so it will set the key again after association.
1626e0fa
JB		 203 *
204 * TODO: accept the key if we have a station entry and
205 * add it to the device after the station.
206 */
207 if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) {
79cf2dfa 208 ieee80211_key_free_unused(key);
3b96766f
JB		 209 err = -ENOENT;
210 goto out_unlock;
db4d1169 211 }
e8cbb4cb
JB		 212 }
213
e548c49e
JB		 214 switch (sdata->vif.type) {
215 case NL80211_IFTYPE_STATION:
216 if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED)
217 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
218 break;
219 case NL80211_IFTYPE_AP:
220 case NL80211_IFTYPE_AP_VLAN:
221 /* Keys without a station are used for TX only */
222 if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP))
223 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
224 break;
225 case NL80211_IFTYPE_ADHOC:
226 /* no MFP (yet) */
227 break;
228 case NL80211_IFTYPE_MESH_POINT:
229#ifdef CONFIG_MAC80211_MESH
230 if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE)
231 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
232 break;
233#endif
234 case NL80211_IFTYPE_WDS:
235 case NL80211_IFTYPE_MONITOR:
236 case NL80211_IFTYPE_P2P_DEVICE:
237 case NL80211_IFTYPE_UNSPECIFIED:
238 case NUM_NL80211_IFTYPES:
239 case NL80211_IFTYPE_P2P_CLIENT:
240 case NL80211_IFTYPE_P2P_GO:
6e0bd6c3 241 case NL80211_IFTYPE_OCB:
e548c49e
JB		 242 /* shouldn't happen */
243 WARN_ON_ONCE(1);
244 break;
245 }
246
2475b1cc
MS		 247 if (sta)
248 sta->cipher_scheme = cs;
249
3ffc2a90 250 err = ieee80211_key_link(key, sdata, sta);
db4d1169 251
3b96766f 252 out_unlock:
2475b1cc 253 mutex_unlock(&local->sta_mtx);
3b96766f
JB		 254
255 return err;
e8cbb4cb
JB		 256}
257
258static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev,
e31b8213 259 u8 key_idx, bool pairwise, const u8 *mac_addr)
e8cbb4cb 260{
5c0c3641
JB		 261 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
262 struct ieee80211_local *local = sdata->local;
e8cbb4cb 263 struct sta_info *sta;
5c0c3641 264 struct ieee80211_key *key = NULL;
e8cbb4cb
JB		 265 int ret;
266
5c0c3641
JB		 267 mutex_lock(&local->sta_mtx);
268 mutex_lock(&local->key_mtx);
3b96766f 269
e8cbb4cb 270 if (mac_addr) {
3b96766f
JB		 271 ret = -ENOENT;
272
0e5ded5a 273 sta = sta_info_get_bss(sdata, mac_addr);
e8cbb4cb 274 if (!sta)
3b96766f 275 goto out_unlock;
e8cbb4cb 276
5c0c3641 277 if (pairwise)
2475b1cc 278 key = key_mtx_dereference(local, sta->ptk[key_idx]);
5c0c3641 279 else
40b275b6 280 key = key_mtx_dereference(local, sta->gtk[key_idx]);
5c0c3641 281 } else
40b275b6 282 key = key_mtx_dereference(local, sdata->keys[key_idx]);
e8cbb4cb 283
5c0c3641 284 if (!key) {
3b96766f
JB		 285 ret = -ENOENT;
286 goto out_unlock;
287 }
e8cbb4cb 288
3b8d9c29 289 ieee80211_key_free(key, true);
e8cbb4cb 290
3b96766f
JB		 291 ret = 0;
292 out_unlock:
5c0c3641
JB		 293 mutex_unlock(&local->key_mtx);
294 mutex_unlock(&local->sta_mtx);
3b96766f
JB		 295
296 return ret;
e8cbb4cb
JB		 297}
298
62da92fb 299static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev,
e31b8213
JB		 300 u8 key_idx, bool pairwise, const u8 *mac_addr,
301 void *cookie,
62da92fb
JB		 302 void (*callback)(void *cookie,
303 struct key_params *params))
304{
14db74bc 305 struct ieee80211_sub_if_data *sdata;
62da92fb
JB		 306 struct sta_info *sta = NULL;
307 u8 seq[6] = {0};
308 struct key_params params;
e31b8213 309 struct ieee80211_key *key = NULL;
aba83a0b 310 u64 pn64;
62da92fb
JB		 311 u32 iv32;
312 u16 iv16;
313 int err = -ENOENT;
9352c19f 314 struct ieee80211_key_seq kseq = {};
62da92fb 315
14db74bc
JB		 316 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
317
3b96766f
JB		 318 rcu_read_lock();
319
62da92fb 320 if (mac_addr) {
0e5ded5a 321 sta = sta_info_get_bss(sdata, mac_addr);
62da92fb
JB		 322 if (!sta)
323 goto out;
324
354e159d 325 if (pairwise && key_idx < NUM_DEFAULT_KEYS)
2475b1cc 326 key = rcu_dereference(sta->ptk[key_idx]);
31f1f4ec
MS		 327 else if (!pairwise &&
328 key_idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS)
a3836e02 329 key = rcu_dereference(sta->gtk[key_idx]);
62da92fb 330 } else
a3836e02 331 key = rcu_dereference(sdata->keys[key_idx]);
62da92fb
JB		 332
333 if (!key)
334 goto out;
335
336 memset(&params, 0, sizeof(params));
337
97359d12 338 params.cipher = key->conf.cipher;
62da92fb 339
97359d12
JB		 340 switch (key->conf.cipher) {
341 case WLAN_CIPHER_SUITE_TKIP:
b0f76b33
HH		 342 iv32 = key->u.tkip.tx.iv32;
343 iv16 = key->u.tkip.tx.iv16;
62da92fb 344
9352c19f
JB		 345 if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE &&
346 !(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
347 drv_get_key_seq(sdata->local, key, &kseq);
348 iv32 = kseq.tkip.iv32;
349 iv16 = kseq.tkip.iv16;
350 }
62da92fb
JB		 351
352 seq[0] = iv16 & 0xff;
353 seq[1] = (iv16 >> 8) & 0xff;
354 seq[2] = iv32 & 0xff;
355 seq[3] = (iv32 >> 8) & 0xff;
356 seq[4] = (iv32 >> 16) & 0xff;
357 seq[5] = (iv32 >> 24) & 0xff;
358 params.seq = seq;
359 params.seq_len = 6;
360 break;
97359d12 361 case WLAN_CIPHER_SUITE_CCMP:
2b2ba0db 362 case WLAN_CIPHER_SUITE_CCMP_256:
97359d12 363 case WLAN_CIPHER_SUITE_AES_CMAC:
56c52da2 364 case WLAN_CIPHER_SUITE_BIP_CMAC_256:
db388a56
JB		 365 BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
366 offsetof(typeof(kseq), aes_cmac));
8ade538b
JM		 367 case WLAN_CIPHER_SUITE_BIP_GMAC_128:
368 case WLAN_CIPHER_SUITE_BIP_GMAC_256:
db388a56
JB		 369 BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
370 offsetof(typeof(kseq), aes_gmac));
00b9cfa3
JM		 371 case WLAN_CIPHER_SUITE_GCMP:
372 case WLAN_CIPHER_SUITE_GCMP_256:
db388a56
JB		 373 BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
374 offsetof(typeof(kseq), gcmp));
375
9352c19f
JB		 376 if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE &&
377 !(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
378 drv_get_key_seq(sdata->local, key, &kseq);
db388a56 379 memcpy(seq, kseq.ccmp.pn, 6);
9352c19f 380 } else {
db388a56 381 pn64 = atomic64_read(&key->conf.tx_pn);
9352c19f
JB		 382 seq[0] = pn64;
383 seq[1] = pn64 >> 8;
384 seq[2] = pn64 >> 16;
385 seq[3] = pn64 >> 24;
386 seq[4] = pn64 >> 32;
387 seq[5] = pn64 >> 40;
388 }
00b9cfa3
JM		 389 params.seq = seq;
390 params.seq_len = 6;
391 break;
a31cf1c6
JB		 392 default:
393 if (!(key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE))
394 break;
395 if (WARN_ON(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV))
396 break;
397 drv_get_key_seq(sdata->local, key, &kseq);
398 params.seq = kseq.hw.seq;
399 params.seq_len = kseq.hw.seq_len;
400 break;
62da92fb
JB		 401 }
402
403 params.key = key->conf.key;
404 params.key_len = key->conf.keylen;
405
406 callback(cookie, &params);
407 err = 0;
408
409 out:
3b96766f 410 rcu_read_unlock();
62da92fb
JB		 411 return err;
412}
413
e8cbb4cb
JB		 414static int ieee80211_config_default_key(struct wiphy *wiphy,
415 struct net_device *dev,
dbd2fd65
JB		 416 u8 key_idx, bool uni,
417 bool multi)
e8cbb4cb 418{
ad0e2b5a 419 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3b96766f 420
f7e0104c 421 ieee80211_set_default_key(sdata, key_idx, uni, multi);
e8cbb4cb
JB		 422
423 return 0;
424}
425
3cfcf6ac
JM		 426static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy,
427 struct net_device *dev,
428 u8 key_idx)
429{
66c52421 430 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3cfcf6ac 431
3cfcf6ac
JM		 432 ieee80211_set_default_mgmt_key(sdata, key_idx);
433
3cfcf6ac
JM		 434 return 0;
435}
436
6b62bf32
TP		 437void sta_set_rate_info_tx(struct sta_info *sta,
438 const struct ieee80211_tx_rate *rate,
439 struct rate_info *rinfo)
440{
441 rinfo->flags = 0;
8bc83c24 442 if (rate->flags & IEEE80211_TX_RC_MCS) {
6b62bf32 443 rinfo->flags |= RATE_INFO_FLAGS_MCS;
8bc83c24
JB		 444 rinfo->mcs = rate->idx;
445 } else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) {
446 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
447 rinfo->mcs = ieee80211_rate_get_vht_mcs(rate);
448 rinfo->nss = ieee80211_rate_get_vht_nss(rate);
449 } else {
450 struct ieee80211_supported_band *sband;
2103dec1
SW		 451 int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
452 u16 brate;
453
8bc83c24
JB		 454 sband = sta->local->hw.wiphy->bands[
455 ieee80211_get_sdata_band(sta->sdata)];
2103dec1
SW		 456 brate = sband->bitrates[rate->idx].bitrate;
457 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
8bc83c24 458 }
6b62bf32 459 if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
b51f3bee
JB		 460 rinfo->bw = RATE_INFO_BW_40;
461 else if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
462 rinfo->bw = RATE_INFO_BW_80;
463 else if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
464 rinfo->bw = RATE_INFO_BW_160;
465 else
466 rinfo->bw = RATE_INFO_BW_20;
6b62bf32
TP		 467 if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
468 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
6b62bf32
TP		 469}
470
c5dd9c2b 471static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev,
3b3a0162 472 int idx, u8 *mac, struct station_info *sinfo)
c5dd9c2b 473{
3b53fde8 474 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
66572cfc 475 struct ieee80211_local *local = sdata->local;
c5dd9c2b 476 struct sta_info *sta;
d0709a65
JB		 477 int ret = -ENOENT;
478
66572cfc 479 mutex_lock(&local->sta_mtx);
c5dd9c2b 480
3b53fde8 481 sta = sta_info_get_by_idx(sdata, idx);
d0709a65
JB		 482 if (sta) {
483 ret = 0;
17741cdc 484 memcpy(mac, sta->sta.addr, ETH_ALEN);
d0709a65
JB		 485 sta_set_sinfo(sta, sinfo);
486 }
c5dd9c2b 487
66572cfc 488 mutex_unlock(&local->sta_mtx);
c5dd9c2b 489
d0709a65 490 return ret;
c5dd9c2b
LCC		 491}
492
1289723e
HS		 493static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev,
494 int idx, struct survey_info *survey)
495{
496 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
497
1289723e
HS		 498 return drv_get_survey(local, idx, survey);
499}
500
7bbdd2d9 501static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev,
3b3a0162 502 const u8 *mac, struct station_info *sinfo)
7bbdd2d9 503{
abe60632 504 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
66572cfc 505 struct ieee80211_local *local = sdata->local;
7bbdd2d9 506 struct sta_info *sta;
d0709a65 507 int ret = -ENOENT;
7bbdd2d9 508
66572cfc 509 mutex_lock(&local->sta_mtx);
7bbdd2d9 510
0e5ded5a 511 sta = sta_info_get_bss(sdata, mac);
d0709a65
JB		 512 if (sta) {
513 ret = 0;
514 sta_set_sinfo(sta, sinfo);
515 }
516
66572cfc 517 mutex_unlock(&local->sta_mtx);
d0709a65
JB		 518
519 return ret;
7bbdd2d9
JB		 520}
521
55de908a 522static int ieee80211_set_monitor_channel(struct wiphy *wiphy,
683b6d3b 523 struct cfg80211_chan_def *chandef)
3d9e6e12
JB		 524{
525 struct ieee80211_local *local = wiphy_priv(wiphy);
55de908a
JB		 526 struct ieee80211_sub_if_data *sdata;
527 int ret = 0;
3d9e6e12 528
4bf88530 529 if (cfg80211_chandef_identical(&local->monitor_chandef, chandef))
55de908a 530 return 0;
3d9e6e12 531
34a3740d 532 mutex_lock(&local->mtx);
55de908a
JB		 533 mutex_lock(&local->iflist_mtx);
534 if (local->use_chanctx) {
535 sdata = rcu_dereference_protected(
536 local->monitor_sdata,
537 lockdep_is_held(&local->iflist_mtx));
538 if (sdata) {
539 ieee80211_vif_release_channel(sdata);
4bf88530 540 ret = ieee80211_vif_use_channel(sdata, chandef,
55de908a
JB		 541 IEEE80211_CHANCTX_EXCLUSIVE);
542 }
543 } else if (local->open_count == local->monitors) {
675a0b04 544 local->_oper_chandef = *chandef;
55de908a
JB		 545 ieee80211_hw_config(local, 0);
546 }
3d9e6e12 547
4bf88530
JB		 548 if (ret == 0)
549 local->monitor_chandef = *chandef;
55de908a 550 mutex_unlock(&local->iflist_mtx);
34a3740d 551 mutex_unlock(&local->mtx);
3d9e6e12 552
55de908a 553 return ret;
e8c9bd5b
JB		 554}
555
02945821 556static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata,
af296bdb
MK		 557 const u8 *resp, size_t resp_len,
558 const struct ieee80211_csa_settings *csa)
02945821 559{
aa7a0080 560 struct probe_resp *new, *old;
02945821
AN		 561
562 if (!resp || !resp_len)
aba4e6ff 563 return 1;
02945821 564
7ca133bc 565 old = sdata_dereference(sdata->u.ap.probe_resp, sdata);
02945821 566
aa7a0080 567 new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL);
02945821
AN		 568 if (!new)
569 return -ENOMEM;
570
aa7a0080
ES		 571 new->len = resp_len;
572 memcpy(new->data, resp, resp_len);
02945821 573
af296bdb
MK		 574 if (csa)
575 memcpy(new->csa_counter_offsets, csa->counter_offsets_presp,
576 csa->n_counter_offsets_presp *
577 sizeof(new->csa_counter_offsets[0]));
578
02945821 579 rcu_assign_pointer(sdata->u.ap.probe_resp, new);
aa7a0080
ES		 580 if (old)
581 kfree_rcu(old, rcu_head);
02945821
AN		 582
583 return 0;
584}
585
0ae07968 586static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata,
af296bdb
MK		 587 struct cfg80211_beacon_data *params,
588 const struct ieee80211_csa_settings *csa)
5dfdaf58
JB		 589{
590 struct beacon_data *new, *old;
591 int new_head_len, new_tail_len;
8860020e
JB		 592 int size, err;
593 u32 changed = BSS_CHANGED_BEACON;
5dfdaf58 594
7ca133bc
SW		 595 old = sdata_dereference(sdata->u.ap.beacon, sdata);
596
5dfdaf58 597
5dfdaf58
JB		 598 /* Need to have a beacon head if we don't have one yet */
599 if (!params->head && !old)
8860020e 600 return -EINVAL;
5dfdaf58
JB		 601
602 /* new or old head? */
603 if (params->head)
604 new_head_len = params->head_len;
605 else
606 new_head_len = old->head_len;
607
608 /* new or old tail? */
609 if (params->tail || !old)
610 /* params->tail_len will be zero for !params->tail */
611 new_tail_len = params->tail_len;
612 else
613 new_tail_len = old->tail_len;
614
615 size = sizeof(*new) + new_head_len + new_tail_len;
616
617 new = kzalloc(size, GFP_KERNEL);
618 if (!new)
619 return -ENOMEM;
620
621 /* start filling the new info now */
622
5dfdaf58
JB		 623 /*
624 * pointers go into the block we allocated,
625 * memory is | beacon_data | head | tail |
626 */
627 new->head = ((u8 *) new) + sizeof(*new);
628 new->tail = new->head + new_head_len;
629 new->head_len = new_head_len;
630 new->tail_len = new_tail_len;
631
af296bdb
MK		 632 if (csa) {
633 new->csa_current_counter = csa->count;
634 memcpy(new->csa_counter_offsets, csa->counter_offsets_beacon,
635 csa->n_counter_offsets_beacon *
636 sizeof(new->csa_counter_offsets[0]));
637 }
638
5dfdaf58
JB		 639 /* copy in head */
640 if (params->head)
641 memcpy(new->head, params->head, new_head_len);
642 else
643 memcpy(new->head, old->head, new_head_len);
644
645 /* copy in optional tail */
646 if (params->tail)
647 memcpy(new->tail, params->tail, new_tail_len);
648 else
649 if (old)
650 memcpy(new->tail, old->tail, new_tail_len);
651
02945821 652 err = ieee80211_set_probe_resp(sdata, params->probe_resp,
af296bdb 653 params->probe_resp_len, csa);
8860020e
JB		 654 if (err < 0)
655 return err;
656 if (err == 0)
02945821
AN		 657 changed |= BSS_CHANGED_AP_PROBE_RESP;
658
8860020e
JB		 659 rcu_assign_pointer(sdata->u.ap.beacon, new);
660
661 if (old)
662 kfree_rcu(old, rcu_head);
7827493b 663
8860020e 664 return changed;
5dfdaf58
JB		 665}
666
8860020e
JB		 667static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev,
668 struct cfg80211_ap_settings *params)
5dfdaf58 669{
8860020e 670 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
34a3740d 671 struct ieee80211_local *local = sdata->local;
5dfdaf58 672 struct beacon_data *old;
665c93a9 673 struct ieee80211_sub_if_data *vlan;
8860020e
JB		 674 u32 changed = BSS_CHANGED_BEACON_INT |
675 BSS_CHANGED_BEACON_ENABLED |
676 BSS_CHANGED_BEACON |
339afbf4 677 BSS_CHANGED_SSID |
4bcc56bb
JB		 678 BSS_CHANGED_P2P_PS |
679 BSS_CHANGED_TXPOWER;
8860020e 680 int err;
14db74bc 681
7ca133bc 682 old = sdata_dereference(sdata->u.ap.beacon, sdata);
5dfdaf58
JB		 683 if (old)
684 return -EALREADY;
685
f6993174
EP		 686 switch (params->smps_mode) {
687 case NL80211_SMPS_OFF:
688 sdata->smps_mode = IEEE80211_SMPS_OFF;
689 break;
690 case NL80211_SMPS_STATIC:
691 sdata->smps_mode = IEEE80211_SMPS_STATIC;
692 break;
693 case NL80211_SMPS_DYNAMIC:
694 sdata->smps_mode = IEEE80211_SMPS_DYNAMIC;
695 break;
696 default:
697 return -EINVAL;
698 }
04ecd257
JB		 699 sdata->needed_rx_chains = sdata->local->rx_chains;
700
34a3740d 701 mutex_lock(&local->mtx);
4bf88530 702 err = ieee80211_vif_use_channel(sdata, &params->chandef,
55de908a 703 IEEE80211_CHANCTX_SHARED);
4e141dad
MK		 704 if (!err)
705 ieee80211_vif_copy_chanctx_to_vlans(sdata, false);
34a3740d 706 mutex_unlock(&local->mtx);
aa430da4
JB		 707 if (err)
708 return err;
709
665c93a9
JB		 710 /*
711 * Apply control port protocol, this allows us to
712 * not encrypt dynamic WEP control frames.
713 */
714 sdata->control_port_protocol = params->crypto.control_port_ethertype;
715 sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt;
2475b1cc
MS		 716 sdata->encrypt_headroom = ieee80211_cs_headroom(sdata->local,
717 &params->crypto,
718 sdata->vif.type);
719
665c93a9
JB		 720 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) {
721 vlan->control_port_protocol =
722 params->crypto.control_port_ethertype;
723 vlan->control_port_no_encrypt =
724 params->crypto.control_port_no_encrypt;
2475b1cc
MS		 725 vlan->encrypt_headroom =
726 ieee80211_cs_headroom(sdata->local,
727 &params->crypto,
728 vlan->vif.type);
665c93a9
JB		 729 }
730
8860020e
JB		 731 sdata->vif.bss_conf.beacon_int = params->beacon_interval;
732 sdata->vif.bss_conf.dtim_period = params->dtim_period;
d6a83228 733 sdata->vif.bss_conf.enable_beacon = true;
8860020e
JB		 734
735 sdata->vif.bss_conf.ssid_len = params->ssid_len;
736 if (params->ssid_len)
737 memcpy(sdata->vif.bss_conf.ssid, params->ssid,
738 params->ssid_len);
739 sdata->vif.bss_conf.hidden_ssid =
740 (params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE);
741
67baf663
JD		 742 memset(&sdata->vif.bss_conf.p2p_noa_attr, 0,
743 sizeof(sdata->vif.bss_conf.p2p_noa_attr));
744 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow =
745 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
746 if (params->p2p_opp_ps)
747 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
748 IEEE80211_P2P_OPPPS_ENABLE_BIT;
339afbf4 749
af296bdb 750 err = ieee80211_assign_beacon(sdata, &params->beacon, NULL);
0297ea17
EG		 751 if (err < 0) {
752 ieee80211_vif_release_channel(sdata);
8860020e 753 return err;
0297ea17 754 }
8860020e
JB		 755 changed |= err;
756
1041638f
JB		 757 err = drv_start_ap(sdata->local, sdata);
758 if (err) {
7ca133bc
SW		 759 old = sdata_dereference(sdata->u.ap.beacon, sdata);
760
1041638f
JB		 761 if (old)
762 kfree_rcu(old, rcu_head);
763 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
0297ea17 764 ieee80211_vif_release_channel(sdata);
1041638f
JB		 765 return err;
766 }
767
057d5f4b 768 ieee80211_recalc_dtim(local, sdata);
8860020e
JB		 769 ieee80211_bss_info_change_notify(sdata, changed);
770
3edaf3e6
JB		 771 netif_carrier_on(dev);
772 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
773 netif_carrier_on(vlan->dev);
774
665c93a9 775 return 0;
5dfdaf58
JB		 776}
777
8860020e
JB		 778static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev,
779 struct cfg80211_beacon_data *params)
5dfdaf58 780{
14db74bc 781 struct ieee80211_sub_if_data *sdata;
5dfdaf58 782 struct beacon_data *old;
8860020e 783 int err;
5dfdaf58 784
14db74bc 785 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
dbd72850 786 sdata_assert_lock(sdata);
14db74bc 787
73da7d5b
SW		 788 /* don't allow changing the beacon while CSA is in place - offset
789 * of channel switch counter may change
790 */
791 if (sdata->vif.csa_active)
792 return -EBUSY;
793
7ca133bc 794 old = sdata_dereference(sdata->u.ap.beacon, sdata);
5dfdaf58
JB		 795 if (!old)
796 return -ENOENT;
797
af296bdb 798 err = ieee80211_assign_beacon(sdata, params, NULL);
8860020e
JB		 799 if (err < 0)
800 return err;
801 ieee80211_bss_info_change_notify(sdata, err);
802 return 0;
5dfdaf58
JB		 803}
804
8860020e 805static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev)
5dfdaf58 806{
7b20b8e8
JB		 807 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
808 struct ieee80211_sub_if_data *vlan;
809 struct ieee80211_local *local = sdata->local;
810 struct beacon_data *old_beacon;
811 struct probe_resp *old_probe_resp;
d2859df5 812 struct cfg80211_chan_def chandef;
14db74bc 813
dbd72850
MK		 814 sdata_assert_lock(sdata);
815
7ca133bc 816 old_beacon = sdata_dereference(sdata->u.ap.beacon, sdata);
7b20b8e8 817 if (!old_beacon)
5dfdaf58 818 return -ENOENT;
7ca133bc 819 old_probe_resp = sdata_dereference(sdata->u.ap.probe_resp, sdata);
5dfdaf58 820
73da7d5b 821 /* abort any running channel switch */
59af6928 822 mutex_lock(&local->mtx);
73da7d5b 823 sdata->vif.csa_active = false;
a46992b4
LC		 824 if (sdata->csa_block_tx) {
825 ieee80211_wake_vif_queues(local, sdata,
826 IEEE80211_QUEUE_STOP_REASON_CSA);
827 sdata->csa_block_tx = false;
828 }
829
59af6928
MK		 830 mutex_unlock(&local->mtx);
831
1f3b8a2b
SW		 832 kfree(sdata->u.ap.next_beacon);
833 sdata->u.ap.next_beacon = NULL;
834
7b20b8e8 835 /* turn off carrier for this interface and dependent VLANs */
3edaf3e6
JB		 836 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
837 netif_carrier_off(vlan->dev);
838 netif_carrier_off(dev);
839
7b20b8e8 840 /* remove beacon and probe response */
a9b3cd7f 841 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
7b20b8e8
JB		 842 RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL);
843 kfree_rcu(old_beacon, rcu_head);
844 if (old_probe_resp)
845 kfree_rcu(old_probe_resp, rcu_head);
8ffcc704 846 sdata->u.ap.driver_smps_mode = IEEE80211_SMPS_OFF;
8860020e 847
e716251d 848 __sta_info_flush(sdata, true);
7907c7d3 849 ieee80211_free_keys(sdata, true);
75de9113 850
d6a83228 851 sdata->vif.bss_conf.enable_beacon = false;
0eabccd9 852 sdata->vif.bss_conf.ssid_len = 0;
d6a83228 853 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
2d0ddec5 854 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
8860020e 855
a6b368f6 856 if (sdata->wdev.cac_started) {
d2859df5 857 chandef = sdata->vif.bss_conf.chandef;
a6b368f6 858 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
d2859df5
JD		 859 cfg80211_cac_event(sdata->dev, &chandef,
860 NL80211_RADAR_CAC_ABORTED,
a6b368f6
SW		 861 GFP_KERNEL);
862 }
863
1041638f
JB		 864 drv_stop_ap(sdata->local, sdata);
865
7b20b8e8
JB		 866 /* free all potentially still buffered bcast frames */
867 local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf);
868 skb_queue_purge(&sdata->u.ap.ps.bc_buf);
869
34a3740d 870 mutex_lock(&local->mtx);
4e141dad 871 ieee80211_vif_copy_chanctx_to_vlans(sdata, true);
55de908a 872 ieee80211_vif_release_channel(sdata);
34a3740d 873 mutex_unlock(&local->mtx);
55de908a 874
2d0ddec5 875 return 0;
5dfdaf58
JB		 876}
877
4fd6931e
JB		 878/* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */
879struct iapp_layer2_update {
880 u8 da[ETH_ALEN]; /* broadcast */
881 u8 sa[ETH_ALEN]; /* STA addr */
882 __be16 len; /* 6 */
883 u8 dsap; /* 0 */
884 u8 ssap; /* 0 */
885 u8 control;
886 u8 xid_info[3];
bc10502d 887} __packed;
4fd6931e
JB		 888
889static void ieee80211_send_layer2_update(struct sta_info *sta)
890{
891 struct iapp_layer2_update *msg;
892 struct sk_buff *skb;
893
894 /* Send Level 2 Update Frame to update forwarding tables in layer 2
895 * bridge devices */
896
897 skb = dev_alloc_skb(sizeof(*msg));
898 if (!skb)
899 return;
900 msg = (struct iapp_layer2_update *)skb_put(skb, sizeof(*msg));
901
902 /* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID)
903 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */
904
e83e6541 905 eth_broadcast_addr(msg->da);
17741cdc 906 memcpy(msg->sa, sta->sta.addr, ETH_ALEN);
4fd6931e
JB		 907 msg->len = htons(6);
908 msg->dsap = 0;
909 msg->ssap = 0x01; /* NULL LSAP, CR Bit: Response */
910 msg->control = 0xaf; /* XID response lsb.1111F101.
911 * F=0 (no poll command; unsolicited frame) */
912 msg->xid_info[0] = 0x81; /* XID format identifier */
913 msg->xid_info[1] = 1; /* LLC types/classes: Type 1 LLC */
914 msg->xid_info[2] = 0; /* XID sender's receive window size (RW) */
915
d0709a65
JB		 916 skb->dev = sta->sdata->dev;
917 skb->protocol = eth_type_trans(skb, sta->sdata->dev);
4fd6931e 918 memset(skb->cb, 0, sizeof(skb->cb));
06ee1c26 919 netif_rx_ni(skb);
4fd6931e
JB		 920}
921
d582cffb
JB		 922static int sta_apply_auth_flags(struct ieee80211_local *local,
923 struct sta_info *sta,
924 u32 mask, u32 set)
925{
926 int ret;
927
928 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
929 set & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
930 !test_sta_flag(sta, WLAN_STA_AUTH)) {
931 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
932 if (ret)
933 return ret;
934 }
935
936 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
937 set & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
938 !test_sta_flag(sta, WLAN_STA_ASSOC)) {
c23e31cf
MP		 939 /*
940 * When peer becomes associated, init rate control as
941 * well. Some drivers require rate control initialized
942 * before drv_sta_state() is called.
943 */
44674d9c 944 if (!test_sta_flag(sta, WLAN_STA_RATE_CONTROL))
c23e31cf
MP		 945 rate_control_rate_init(sta);
946
d582cffb
JB		 947 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
948 if (ret)
949 return ret;
950 }
951
952 if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
953 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED))
954 ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED);
955 else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
956 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
957 else
958 ret = 0;
959 if (ret)
960 return ret;
961 }
962
963 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
964 !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
965 test_sta_flag(sta, WLAN_STA_ASSOC)) {
966 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
967 if (ret)
968 return ret;
969 }
970
971 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
972 !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) &&
973 test_sta_flag(sta, WLAN_STA_AUTH)) {
974 ret = sta_info_move_state(sta, IEEE80211_STA_NONE);
975 if (ret)
976 return ret;
977 }
978
979 return 0;
980}
981
13657702
JB		 982static void sta_apply_mesh_params(struct ieee80211_local *local,
983 struct sta_info *sta,
984 struct station_parameters *params)
985{
986#ifdef CONFIG_MAC80211_MESH
987 struct ieee80211_sub_if_data *sdata = sta->sdata;
988 u32 changed = 0;
989
990 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) {
991 switch (params->plink_state) {
992 case NL80211_PLINK_ESTAB:
993 if (sta->mesh->plink_state != NL80211_PLINK_ESTAB)
994 changed = mesh_plink_inc_estab_count(sdata);
995 sta->mesh->plink_state = params->plink_state;
996
997 ieee80211_mps_sta_status_update(sta);
998 changed |= ieee80211_mps_set_sta_local_pm(sta,
999 sdata->u.mesh.mshcfg.power_mode);
1000 break;
1001 case NL80211_PLINK_LISTEN:
1002 case NL80211_PLINK_BLOCKED:
1003 case NL80211_PLINK_OPN_SNT:
1004 case NL80211_PLINK_OPN_RCVD:
1005 case NL80211_PLINK_CNF_RCVD:
1006 case NL80211_PLINK_HOLDING:
1007 if (sta->mesh->plink_state == NL80211_PLINK_ESTAB)
1008 changed = mesh_plink_dec_estab_count(sdata);
1009 sta->mesh->plink_state = params->plink_state;
1010
1011 ieee80211_mps_sta_status_update(sta);
1012 changed |= ieee80211_mps_set_sta_local_pm(sta,
1013 NL80211_MESH_POWER_UNKNOWN);
1014 break;
1015 default:
1016 /* nothing */
1017 break;
1018 }
1019 }
1020
1021 switch (params->plink_action) {
1022 case NL80211_PLINK_ACTION_NO_ACTION:
1023 /* nothing */
1024 break;
1025 case NL80211_PLINK_ACTION_OPEN:
1026 changed |= mesh_plink_open(sta);
1027 break;
1028 case NL80211_PLINK_ACTION_BLOCK:
1029 changed |= mesh_plink_block(sta);
1030 break;
1031 }
1032
1033 if (params->local_pm)
1034 changed |= ieee80211_mps_set_sta_local_pm(sta,
1035 params->local_pm);
1036
1037 ieee80211_mbss_info_change_notify(sdata, changed);
1038#endif
1039}
1040
d9a7ddb0
JB		 1041static int sta_apply_parameters(struct ieee80211_local *local,
1042 struct sta_info *sta,
1043 struct station_parameters *params)
4fd6931e 1044{
d9a7ddb0 1045 int ret = 0;
8318d78a 1046 struct ieee80211_supported_band *sband;
d0709a65 1047 struct ieee80211_sub_if_data *sdata = sta->sdata;
55de908a 1048 enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
eccb8e8f 1049 u32 mask, set;
4fd6931e 1050
55de908a 1051 sband = local->hw.wiphy->bands[band];
ae5eb026 1052
eccb8e8f
JB		 1053 mask = params->sta_flags_mask;
1054 set = params->sta_flags_set;
73651ee6 1055
d582cffb
JB		 1056 if (ieee80211_vif_is_mesh(&sdata->vif)) {
1057 /*
1058 * In mesh mode, ASSOCIATED isn't part of the nl80211
1059 * API but must follow AUTHENTICATED for driver state.
1060 */
1061 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1062 mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
1063 if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1064 set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
77ee7c89
JB		 1065 } else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1066 /*
1067 * TDLS -- everything follows authorized, but
1068 * only becoming authorized is possible, not
1069 * going back
1070 */
1071 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1072 set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1073 BIT(NL80211_STA_FLAG_ASSOCIATED);
1074 mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1075 BIT(NL80211_STA_FLAG_ASSOCIATED);
1076 }
eccb8e8f 1077 }
4fd6931e 1078
2c44be81
JB		 1079 if (mask & BIT(NL80211_STA_FLAG_WME) &&
1080 local->hw.queues >= IEEE80211_NUM_ACS)
1081 sta->sta.wme = set & BIT(NL80211_STA_FLAG_WME);
1082
44674d9c
AB		 1083 /* auth flags will be set later for TDLS,
1084 * and for unassociated stations that move to assocaited */
1085 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1086 !((mask & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
1087 (set & BIT(NL80211_STA_FLAG_ASSOCIATED)))) {
68885a54
AN		 1088 ret = sta_apply_auth_flags(local, sta, mask, set);
1089 if (ret)
1090 return ret;
1091 }
d9a7ddb0 1092
eccb8e8f 1093 if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) {
eccb8e8f 1094 if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
c2c98fde
JB		 1095 set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1096 else
1097 clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
eccb8e8f 1098 }
4fd6931e 1099
eccb8e8f 1100 if (mask & BIT(NL80211_STA_FLAG_MFP)) {
93f0490e 1101 sta->sta.mfp = !!(set & BIT(NL80211_STA_FLAG_MFP));
eccb8e8f 1102 if (set & BIT(NL80211_STA_FLAG_MFP))
c2c98fde
JB		 1103 set_sta_flag(sta, WLAN_STA_MFP);
1104 else
1105 clear_sta_flag(sta, WLAN_STA_MFP);
4fd6931e 1106 }
b39c48fa 1107
07ba55d7 1108 if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) {
07ba55d7 1109 if (set & BIT(NL80211_STA_FLAG_TDLS_PEER))
c2c98fde
JB		 1110 set_sta_flag(sta, WLAN_STA_TDLS_PEER);
1111 else
1112 clear_sta_flag(sta, WLAN_STA_TDLS_PEER);
07ba55d7 1113 }
4fd6931e 1114
9041c1fa
AN		 1115 /* mark TDLS channel switch support, if the AP allows it */
1116 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1117 !sdata->u.mgd.tdls_chan_switch_prohibited &&
1118 params->ext_capab_len >= 4 &&
1119 params->ext_capab[3] & WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH)
1120 set_sta_flag(sta, WLAN_STA_TDLS_CHAN_SWITCH);
1121
b98fb44f 1122 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
82c0cc90 1123 !sdata->u.mgd.tdls_wider_bw_prohibited &&
b98fb44f
AN		 1124 ieee80211_hw_check(&local->hw, TDLS_WIDER_BW) &&
1125 params->ext_capab_len >= 8 &&
1126 params->ext_capab[7] & WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED)
1127 set_sta_flag(sta, WLAN_STA_TDLS_WIDER_BW);
1128
3b9ce80c
JB		 1129 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) {
1130 sta->sta.uapsd_queues = params->uapsd_queues;
1131 sta->sta.max_sp = params->max_sp;
1132 }
9533b4ac 1133
51b50fbe
JB		 1134 /*
1135 * cfg80211 validates this (1-2007) and allows setting the AID
1136 * only when creating a new station entry
1137 */
1138 if (params->aid)
1139 sta->sta.aid = params->aid;
1140
73651ee6 1141 /*
ba23d206
JB		 1142 * Some of the following updates would be racy if called on an
1143 * existing station, via ieee80211_change_station(). However,
1144 * all such changes are rejected by cfg80211 except for updates
1145 * changing the supported rates on an existing but not yet used
1146 * TDLS peer.
73651ee6
JB		 1147 */
1148
4fd6931e
JB		 1149 if (params->listen_interval >= 0)
1150 sta->listen_interval = params->listen_interval;
1151
1152 if (params->supported_rates) {
2103dec1
SW		 1153 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1154 sband, params->supported_rates,
1155 params->supported_rates_len,
1156 &sta->sta.supp_rates[band]);
4fd6931e 1157 }
c5dd9c2b 1158
d9fe60de 1159 if (params->ht_capa)
ef96a842 1160 ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband,
e1a0c6b3 1161 params->ht_capa, sta);
36aedc90 1162
f461be3e
MP		 1163 if (params->vht_capa)
1164 ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband,
4a34215e 1165 params->vht_capa, sta);
f461be3e 1166
b1bce14a 1167 if (params->opmode_notif_used) {
b1bce14a
MK		 1168 /* returned value is only needed for rc update, but the
1169 * rc isn't initialized here yet, so ignore it
1170 */
1171 __ieee80211_vht_handle_opmode(sdata, sta,
1172 params->opmode_notif,
1173 band, false);
1174 }
1175
13657702
JB		 1176 if (ieee80211_vif_is_mesh(&sdata->vif))
1177 sta_apply_mesh_params(local, sta, params);
d9a7ddb0 1178
68885a54 1179 /* set the STA state after all sta info from usermode has been set */
44674d9c
AB		 1180 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) ||
1181 set & BIT(NL80211_STA_FLAG_ASSOCIATED)) {
68885a54
AN		 1182 ret = sta_apply_auth_flags(local, sta, mask, set);
1183 if (ret)
1184 return ret;
1185 }
1186
d9a7ddb0 1187 return 0;
4fd6931e
JB		 1188}
1189
1190static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
3b3a0162
JB		 1191 const u8 *mac,
1192 struct station_parameters *params)
4fd6931e 1193{
14db74bc 1194 struct ieee80211_local *local = wiphy_priv(wiphy);
4fd6931e
JB		 1195 struct sta_info *sta;
1196 struct ieee80211_sub_if_data *sdata;
73651ee6 1197 int err;
b8d476c8 1198 int layer2_update;
4fd6931e 1199
4fd6931e
JB		 1200 if (params->vlan) {
1201 sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1202
05c914fe
JB		 1203 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1204 sdata->vif.type != NL80211_IFTYPE_AP)
4fd6931e
JB		 1205 return -EINVAL;
1206 } else
1207 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1208
b203ca39 1209 if (ether_addr_equal(mac, sdata->vif.addr))
03e4497e
JB		 1210 return -EINVAL;
1211
1212 if (is_multicast_ether_addr(mac))
1213 return -EINVAL;
1214
1215 sta = sta_info_alloc(sdata, mac, GFP_KERNEL);
73651ee6
JB		 1216 if (!sta)
1217 return -ENOMEM;
4fd6931e 1218
44674d9c
AB		 1219 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1220 sta->sta.tdls = true;
4fd6931e 1221
d9a7ddb0
JB		 1222 err = sta_apply_parameters(local, sta, params);
1223 if (err) {
1224 sta_info_free(local, sta);
1225 return err;
1226 }
4fd6931e 1227
d64cf63e 1228 /*
44674d9c
AB		 1229 * for TDLS and for unassociated station, rate control should be
1230 * initialized only when rates are known and station is marked
1231 * authorized/associated
d64cf63e 1232 */
44674d9c
AB		 1233 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1234 test_sta_flag(sta, WLAN_STA_ASSOC))
d64cf63e 1235 rate_control_rate_init(sta);
4fd6931e 1236
b8d476c8
JM		 1237 layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1238 sdata->vif.type == NL80211_IFTYPE_AP;
1239
34e89507 1240 err = sta_info_insert_rcu(sta);
73651ee6 1241 if (err) {
73651ee6
JB		 1242 rcu_read_unlock();
1243 return err;
1244 }
1245
b8d476c8 1246 if (layer2_update)
73651ee6
JB		 1247 ieee80211_send_layer2_update(sta);
1248
1249 rcu_read_unlock();
1250
4fd6931e
JB		 1251 return 0;
1252}
1253
1254static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev,
89c771e5 1255 struct station_del_parameters *params)
4fd6931e 1256{
14db74bc 1257 struct ieee80211_sub_if_data *sdata;
4fd6931e 1258
14db74bc
JB		 1259 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1260
89c771e5
JM		 1261 if (params->mac)
1262 return sta_info_destroy_addr_bss(sdata, params->mac);
4fd6931e 1263
b998e8bb 1264 sta_info_flush(sdata);
4fd6931e
JB		 1265 return 0;
1266}
1267
1268static int ieee80211_change_station(struct wiphy *wiphy,
3b3a0162 1269 struct net_device *dev, const u8 *mac,
4fd6931e
JB		 1270 struct station_parameters *params)
1271{
abe60632 1272 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
14db74bc 1273 struct ieee80211_local *local = wiphy_priv(wiphy);
4fd6931e
JB		 1274 struct sta_info *sta;
1275 struct ieee80211_sub_if_data *vlansdata;
77ee7c89 1276 enum cfg80211_station_type statype;
35b88623 1277 int err;
4fd6931e 1278
87be1e1e 1279 mutex_lock(&local->sta_mtx);
98dd6a57 1280
0e5ded5a 1281 sta = sta_info_get_bss(sdata, mac);
98dd6a57 1282 if (!sta) {
77ee7c89
JB		 1283 err = -ENOENT;
1284 goto out_err;
98dd6a57 1285 }
4fd6931e 1286
77ee7c89
JB		 1287 switch (sdata->vif.type) {
1288 case NL80211_IFTYPE_MESH_POINT:
a6dad6a2 1289 if (sdata->u.mesh.user_mpm)
eef941e6 1290 statype = CFG80211_STA_MESH_PEER_USER;
77ee7c89 1291 else
eef941e6 1292 statype = CFG80211_STA_MESH_PEER_KERNEL;
77ee7c89
JB		 1293 break;
1294 case NL80211_IFTYPE_ADHOC:
1295 statype = CFG80211_STA_IBSS;
1296 break;
1297 case NL80211_IFTYPE_STATION:
1298 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1299 statype = CFG80211_STA_AP_STA;
1300 break;
1301 }
1302 if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1303 statype = CFG80211_STA_TDLS_PEER_ACTIVE;
1304 else
1305 statype = CFG80211_STA_TDLS_PEER_SETUP;
1306 break;
1307 case NL80211_IFTYPE_AP:
1308 case NL80211_IFTYPE_AP_VLAN:
44674d9c
AB		 1309 if (test_sta_flag(sta, WLAN_STA_ASSOC))
1310 statype = CFG80211_STA_AP_CLIENT;
1311 else
1312 statype = CFG80211_STA_AP_CLIENT_UNASSOC;
77ee7c89
JB		 1313 break;
1314 default:
1315 err = -EOPNOTSUPP;
1316 goto out_err;
bdd90d5e
JB		 1317 }
1318
77ee7c89
JB		 1319 err = cfg80211_check_station_change(wiphy, params, statype);
1320 if (err)
1321 goto out_err;
1322
d0709a65 1323 if (params->vlan && params->vlan != sta->sdata->dev) {
7e3ed02c
FF		 1324 bool prev_4addr = false;
1325 bool new_4addr = false;
1326
4fd6931e
JB		 1327 vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1328
9bc383de 1329 if (params->vlan->ieee80211_ptr->use_4addr) {
3305443c 1330 if (vlansdata->u.vlan.sta) {
77ee7c89
JB		 1331 err = -EBUSY;
1332 goto out_err;
3305443c 1333 }
f14543ee 1334
cf778b00 1335 rcu_assign_pointer(vlansdata->u.vlan.sta, sta);
7e3ed02c
FF		 1336 new_4addr = true;
1337 }
1338
1339 if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN &&
1340 sta->sdata->u.vlan.sta) {
0c2bef46 1341 RCU_INIT_POINTER(sta->sdata->u.vlan.sta, NULL);
7e3ed02c 1342 prev_4addr = true;
f14543ee
FF		 1343 }
1344
14db74bc 1345 sta->sdata = vlansdata;
464daaf0 1346 ieee80211_check_fast_xmit(sta);
7e3ed02c
FF		 1347
1348 if (sta->sta_state == IEEE80211_STA_AUTHORIZED &&
1349 prev_4addr != new_4addr) {
1350 if (new_4addr)
1351 atomic_dec(&sta->sdata->bss->num_mcast_sta);
1352 else
1353 atomic_inc(&sta->sdata->bss->num_mcast_sta);
1354 }
1355
4fd6931e
JB		 1356 ieee80211_send_layer2_update(sta);
1357 }
1358
35b88623 1359 err = sta_apply_parameters(local, sta, params);
77ee7c89
JB		 1360 if (err)
1361 goto out_err;
4fd6931e 1362
87be1e1e 1363 mutex_unlock(&local->sta_mtx);
98dd6a57 1364
687da132
EG		 1365 if ((sdata->vif.type == NL80211_IFTYPE_AP ||
1366 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) &&
1367 sta->known_smps_mode != sta->sdata->bss->req_smps &&
1368 test_sta_flag(sta, WLAN_STA_AUTHORIZED) &&
1369 sta_info_tx_streams(sta) != 1) {
1370 ht_dbg(sta->sdata,
1371 "%pM just authorized and MIMO capable - update SMPS\n",
1372 sta->sta.addr);
1373 ieee80211_send_smps_action(sta->sdata,
1374 sta->sdata->bss->req_smps,
1375 sta->sta.addr,
1376 sta->sdata->vif.bss_conf.bssid);
1377 }
1378
808118cb 1379 if (sdata->vif.type == NL80211_IFTYPE_STATION &&
ab095877 1380 params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
4a733ef1 1381 ieee80211_recalc_ps(local);
ab095877
EP		 1382 ieee80211_recalc_ps_vif(sdata);
1383 }
77ee7c89 1384
4fd6931e 1385 return 0;
77ee7c89
JB		 1386out_err:
1387 mutex_unlock(&local->sta_mtx);
1388 return err;
4fd6931e
JB		 1389}
1390
c5dd9c2b
LCC		 1391#ifdef CONFIG_MAC80211_MESH
1392static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev,
3b3a0162 1393 const u8 *dst, const u8 *next_hop)
c5dd9c2b 1394{
14db74bc 1395 struct ieee80211_sub_if_data *sdata;
c5dd9c2b
LCC		 1396 struct mesh_path *mpath;
1397 struct sta_info *sta;
c5dd9c2b 1398
14db74bc
JB		 1399 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1400
d0709a65 1401 rcu_read_lock();
abe60632 1402 sta = sta_info_get(sdata, next_hop);
d0709a65
JB		 1403 if (!sta) {
1404 rcu_read_unlock();
c5dd9c2b 1405 return -ENOENT;
d0709a65 1406 }
c5dd9c2b 1407
ae76eef0
BC		 1408 mpath = mesh_path_add(sdata, dst);
1409 if (IS_ERR(mpath)) {
d0709a65 1410 rcu_read_unlock();
ae76eef0 1411 return PTR_ERR(mpath);
d0709a65 1412 }
c5dd9c2b 1413
c5dd9c2b 1414 mesh_path_fix_nexthop(mpath, sta);
d0709a65 1415
c5dd9c2b
LCC		 1416 rcu_read_unlock();
1417 return 0;
1418}
1419
1420static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev,
3b3a0162 1421 const u8 *dst)
c5dd9c2b 1422{
f698d856
JBG		 1423 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1424
c5dd9c2b 1425 if (dst)
bf7cd94d 1426 return mesh_path_del(sdata, dst);
c5dd9c2b 1427
ece1a2e7 1428 mesh_path_flush_by_iface(sdata);
c5dd9c2b
LCC		 1429 return 0;
1430}
1431
3b3a0162
JB		 1432static int ieee80211_change_mpath(struct wiphy *wiphy, struct net_device *dev,
1433 const u8 *dst, const u8 *next_hop)
c5dd9c2b 1434{
14db74bc 1435 struct ieee80211_sub_if_data *sdata;
c5dd9c2b
LCC		 1436 struct mesh_path *mpath;
1437 struct sta_info *sta;
1438
14db74bc
JB		 1439 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1440
d0709a65
JB		 1441 rcu_read_lock();
1442
abe60632 1443 sta = sta_info_get(sdata, next_hop);
d0709a65
JB		 1444 if (!sta) {
1445 rcu_read_unlock();
c5dd9c2b 1446 return -ENOENT;
d0709a65 1447 }
c5dd9c2b 1448
bf7cd94d 1449 mpath = mesh_path_lookup(sdata, dst);
c5dd9c2b
LCC		 1450 if (!mpath) {
1451 rcu_read_unlock();
c5dd9c2b
LCC		 1452 return -ENOENT;
1453 }
1454
1455 mesh_path_fix_nexthop(mpath, sta);
d0709a65 1456
c5dd9c2b
LCC		 1457 rcu_read_unlock();
1458 return 0;
1459}
1460
1461static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop,
1462 struct mpath_info *pinfo)
1463{
a3836e02
JB		 1464 struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop);
1465
1466 if (next_hop_sta)
1467 memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN);
c5dd9c2b 1468 else
c84a67a2 1469 eth_zero_addr(next_hop);
c5dd9c2b 1470
7ce8c7a3
LAYS		 1471 memset(pinfo, 0, sizeof(*pinfo));
1472
f5ea9120
JB		 1473 pinfo->generation = mesh_paths_generation;
1474
c5dd9c2b 1475 pinfo->filled = MPATH_INFO_FRAME_QLEN |
d19b3bf6 1476 MPATH_INFO_SN |
c5dd9c2b
LCC		 1477 MPATH_INFO_METRIC |
1478 MPATH_INFO_EXPTIME |
1479 MPATH_INFO_DISCOVERY_TIMEOUT |
1480 MPATH_INFO_DISCOVERY_RETRIES |
1481 MPATH_INFO_FLAGS;
1482
1483 pinfo->frame_qlen = mpath->frame_queue.qlen;
d19b3bf6 1484 pinfo->sn = mpath->sn;
c5dd9c2b
LCC		 1485 pinfo->metric = mpath->metric;
1486 if (time_before(jiffies, mpath->exp_time))
1487 pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies);
1488 pinfo->discovery_timeout =
1489 jiffies_to_msecs(mpath->discovery_timeout);
1490 pinfo->discovery_retries = mpath->discovery_retries;
c5dd9c2b
LCC		 1491 if (mpath->flags & MESH_PATH_ACTIVE)
1492 pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE;
1493 if (mpath->flags & MESH_PATH_RESOLVING)
1494 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING;
d19b3bf6
RP		 1495 if (mpath->flags & MESH_PATH_SN_VALID)
1496 pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID;
c5dd9c2b
LCC		 1497 if (mpath->flags & MESH_PATH_FIXED)
1498 pinfo->flags |= NL80211_MPATH_FLAG_FIXED;
7ce8c7a3
LAYS		 1499 if (mpath->flags & MESH_PATH_RESOLVED)
1500 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED;
c5dd9c2b
LCC		 1501}
1502
1503static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev,
1504 u8 *dst, u8 *next_hop, struct mpath_info *pinfo)
1505
1506{
14db74bc 1507 struct ieee80211_sub_if_data *sdata;
c5dd9c2b
LCC		 1508 struct mesh_path *mpath;
1509
14db74bc
JB		 1510 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1511
c5dd9c2b 1512 rcu_read_lock();
bf7cd94d 1513 mpath = mesh_path_lookup(sdata, dst);
c5dd9c2b
LCC		 1514 if (!mpath) {
1515 rcu_read_unlock();
1516 return -ENOENT;
1517 }
1518 memcpy(dst, mpath->dst, ETH_ALEN);
1519 mpath_set_pinfo(mpath, next_hop, pinfo);
1520 rcu_read_unlock();
1521 return 0;
1522}
1523
1524static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev,
3b3a0162
JB		 1525 int idx, u8 *dst, u8 *next_hop,
1526 struct mpath_info *pinfo)
c5dd9c2b 1527{
14db74bc 1528 struct ieee80211_sub_if_data *sdata;
c5dd9c2b
LCC		 1529 struct mesh_path *mpath;
1530
14db74bc
JB		 1531 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1532
c5dd9c2b 1533 rcu_read_lock();
bf7cd94d 1534 mpath = mesh_path_lookup_by_idx(sdata, idx);
c5dd9c2b
LCC		 1535 if (!mpath) {
1536 rcu_read_unlock();
1537 return -ENOENT;
1538 }
1539 memcpy(dst, mpath->dst, ETH_ALEN);
1540 mpath_set_pinfo(mpath, next_hop, pinfo);
1541 rcu_read_unlock();
1542 return 0;
1543}
93da9cc1 1544
a2db2ed3
HR		 1545static void mpp_set_pinfo(struct mesh_path *mpath, u8 *mpp,
1546 struct mpath_info *pinfo)
1547{
1548 memset(pinfo, 0, sizeof(*pinfo));
1549 memcpy(mpp, mpath->mpp, ETH_ALEN);
1550
1551 pinfo->generation = mpp_paths_generation;
1552}
1553
1554static int ieee80211_get_mpp(struct wiphy *wiphy, struct net_device *dev,
1555 u8 *dst, u8 *mpp, struct mpath_info *pinfo)
1556
1557{
1558 struct ieee80211_sub_if_data *sdata;
1559 struct mesh_path *mpath;
1560
1561 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1562
1563 rcu_read_lock();
1564 mpath = mpp_path_lookup(sdata, dst);
1565 if (!mpath) {
1566 rcu_read_unlock();
1567 return -ENOENT;
1568 }
1569 memcpy(dst, mpath->dst, ETH_ALEN);
1570 mpp_set_pinfo(mpath, mpp, pinfo);
1571 rcu_read_unlock();
1572 return 0;
1573}
1574
1575static int ieee80211_dump_mpp(struct wiphy *wiphy, struct net_device *dev,
1576 int idx, u8 *dst, u8 *mpp,
1577 struct mpath_info *pinfo)
1578{
1579 struct ieee80211_sub_if_data *sdata;
1580 struct mesh_path *mpath;
1581
1582 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1583
1584 rcu_read_lock();
1585 mpath = mpp_path_lookup_by_idx(sdata, idx);
1586 if (!mpath) {
1587 rcu_read_unlock();
1588 return -ENOENT;
1589 }
1590 memcpy(dst, mpath->dst, ETH_ALEN);
1591 mpp_set_pinfo(mpath, mpp, pinfo);
1592 rcu_read_unlock();
1593 return 0;
1594}
1595
24bdd9f4 1596static int ieee80211_get_mesh_config(struct wiphy *wiphy,
93da9cc1 1597 struct net_device *dev,
1598 struct mesh_config *conf)
1599{
1600 struct ieee80211_sub_if_data *sdata;
1601 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1602
93da9cc1 1603 memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config));
1604 return 0;
1605}
1606
1607static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask)
1608{
1609 return (mask >> (parm-1)) & 0x1;
1610}
1611
c80d545d
JC		 1612static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh,
1613 const struct mesh_setup *setup)
1614{
1615 u8 *new_ie;
1616 const u8 *old_ie;
4bb62344
CYY		 1617 struct ieee80211_sub_if_data *sdata = container_of(ifmsh,
1618 struct ieee80211_sub_if_data, u.mesh);
c80d545d 1619
581a8b0f 1620 /* allocate information elements */
c80d545d 1621 new_ie = NULL;
581a8b0f 1622 old_ie = ifmsh->ie;
c80d545d 1623
581a8b0f
JC		 1624 if (setup->ie_len) {
1625 new_ie = kmemdup(setup->ie, setup->ie_len,
c80d545d
JC		 1626 GFP_KERNEL);
1627 if (!new_ie)
1628 return -ENOMEM;
1629 }
581a8b0f
JC		 1630 ifmsh->ie_len = setup->ie_len;
1631 ifmsh->ie = new_ie;
1632 kfree(old_ie);
c80d545d
JC		 1633
1634 /* now copy the rest of the setup parameters */
1635 ifmsh->mesh_id_len = setup->mesh_id_len;
1636 memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len);
d299a1f2 1637 ifmsh->mesh_sp_id = setup->sync_method;
c80d545d
JC		 1638 ifmsh->mesh_pp_id = setup->path_sel_proto;
1639 ifmsh->mesh_pm_id = setup->path_metric;
a6dad6a2 1640 ifmsh->user_mpm = setup->user_mpm;
0d4261ad 1641 ifmsh->mesh_auth_id = setup->auth_id;
b130e5ce
JC		 1642 ifmsh->security = IEEE80211_MESH_SEC_NONE;
1643 if (setup->is_authenticated)
1644 ifmsh->security |= IEEE80211_MESH_SEC_AUTHED;
1645 if (setup->is_secure)
1646 ifmsh->security |= IEEE80211_MESH_SEC_SECURED;
c80d545d 1647
4bb62344
CYY		 1648 /* mcast rate setting in Mesh Node */
1649 memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate,
1650 sizeof(setup->mcast_rate));
ffb3cf30 1651 sdata->vif.bss_conf.basic_rates = setup->basic_rates;
4bb62344 1652
9bdbf04d
MP		 1653 sdata->vif.bss_conf.beacon_int = setup->beacon_interval;
1654 sdata->vif.bss_conf.dtim_period = setup->dtim_period;
1655
c80d545d
JC		 1656 return 0;
1657}
1658
24bdd9f4 1659static int ieee80211_update_mesh_config(struct wiphy *wiphy,
29cbe68c
JB		 1660 struct net_device *dev, u32 mask,
1661 const struct mesh_config *nconf)
93da9cc1 1662{
1663 struct mesh_config *conf;
1664 struct ieee80211_sub_if_data *sdata;
63c5723b
RP		 1665 struct ieee80211_if_mesh *ifmsh;
1666
93da9cc1 1667 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
63c5723b 1668 ifmsh = &sdata->u.mesh;
93da9cc1 1669
93da9cc1 1670 /* Set the config options which we are interested in setting */
1671 conf = &(sdata->u.mesh.mshcfg);
1672 if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask))
1673 conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout;
1674 if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask))
1675 conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout;
1676 if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask))
1677 conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout;
1678 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask))
1679 conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks;
1680 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask))
1681 conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries;
1682 if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask))
1683 conf->dot11MeshTTL = nconf->dot11MeshTTL;
45904f21 1684 if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask))
58886a90 1685 conf->element_ttl = nconf->element_ttl;
146bb483
TP		 1686 if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) {
1687 if (ifmsh->user_mpm)
1688 return -EBUSY;
93da9cc1 1689 conf->auto_open_plinks = nconf->auto_open_plinks;
146bb483 1690 }
d299a1f2
JC		 1691 if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask))
1692 conf->dot11MeshNbrOffsetMaxNeighbor =
1693 nconf->dot11MeshNbrOffsetMaxNeighbor;
93da9cc1 1694 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask))
1695 conf->dot11MeshHWMPmaxPREQretries =
1696 nconf->dot11MeshHWMPmaxPREQretries;
1697 if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask))
1698 conf->path_refresh_time = nconf->path_refresh_time;
1699 if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask))
1700 conf->min_discovery_timeout = nconf->min_discovery_timeout;
1701 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask))
1702 conf->dot11MeshHWMPactivePathTimeout =
1703 nconf->dot11MeshHWMPactivePathTimeout;
1704 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask))
1705 conf->dot11MeshHWMPpreqMinInterval =
1706 nconf->dot11MeshHWMPpreqMinInterval;
dca7e943
TP		 1707 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask))
1708 conf->dot11MeshHWMPperrMinInterval =
1709 nconf->dot11MeshHWMPperrMinInterval;
93da9cc1 1710 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
1711 mask))
1712 conf->dot11MeshHWMPnetDiameterTraversalTime =
1713 nconf->dot11MeshHWMPnetDiameterTraversalTime;
63c5723b
RP		 1714 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) {
1715 conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode;
1716 ieee80211_mesh_root_setup(ifmsh);
1717 }
16dd7267 1718 if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) {
c6133661
TP		 1719 /* our current gate announcement implementation rides on root
1720 * announcements, so require this ifmsh to also be a root node
1721 * */
1722 if (nconf->dot11MeshGateAnnouncementProtocol &&
dbb912cd
CYY		 1723 !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) {
1724 conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN;
c6133661
TP		 1725 ieee80211_mesh_root_setup(ifmsh);
1726 }
16dd7267
JC		 1727 conf->dot11MeshGateAnnouncementProtocol =
1728 nconf->dot11MeshGateAnnouncementProtocol;
1729 }
a4f606ea 1730 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask))
0507e159
JC		 1731 conf->dot11MeshHWMPRannInterval =
1732 nconf->dot11MeshHWMPRannInterval;
94f90656
CYY		 1733 if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask))
1734 conf->dot11MeshForwarding = nconf->dot11MeshForwarding;
55335137
AN		 1735 if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) {
1736 /* our RSSI threshold implementation is supported only for
1737 * devices that report signal in dBm.
1738 */
30686bf7 1739 if (!ieee80211_hw_check(&sdata->local->hw, SIGNAL_DBM))
55335137
AN		 1740 return -ENOTSUPP;
1741 conf->rssi_threshold = nconf->rssi_threshold;
1742 }
70c33eaa
AN		 1743 if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) {
1744 conf->ht_opmode = nconf->ht_opmode;
1745 sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode;
1746 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT);
1747 }
ac1073a6
CYY		 1748 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask))
1749 conf->dot11MeshHWMPactivePathToRootTimeout =
1750 nconf->dot11MeshHWMPactivePathToRootTimeout;
1751 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask))
1752 conf->dot11MeshHWMProotInterval =
1753 nconf->dot11MeshHWMProotInterval;
728b19e5
CYY		 1754 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask))
1755 conf->dot11MeshHWMPconfirmationInterval =
1756 nconf->dot11MeshHWMPconfirmationInterval;
3f52b7e3
MP		 1757 if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) {
1758 conf->power_mode = nconf->power_mode;
1759 ieee80211_mps_local_status_update(sdata);
1760 }
2b5e1967 1761 if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask))
3f52b7e3
MP		 1762 conf->dot11MeshAwakeWindowDuration =
1763 nconf->dot11MeshAwakeWindowDuration;
66de6713
CT		 1764 if (_chg_mesh_attr(NL80211_MESHCONF_PLINK_TIMEOUT, mask))
1765 conf->plink_timeout = nconf->plink_timeout;
2b5e1967 1766 ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON);
93da9cc1 1767 return 0;
1768}
1769
29cbe68c
JB		 1770static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev,
1771 const struct mesh_config *conf,
1772 const struct mesh_setup *setup)
1773{
1774 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1775 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
c80d545d 1776 int err;
29cbe68c 1777
c80d545d
JC		 1778 memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config));
1779 err = copy_mesh_setup(ifmsh, setup);
1780 if (err)
1781 return err;
cc1d2806 1782
04ecd257
JB		 1783 /* can mesh use other SMPS modes? */
1784 sdata->smps_mode = IEEE80211_SMPS_OFF;
1785 sdata->needed_rx_chains = sdata->local->rx_chains;
1786
34a3740d 1787 mutex_lock(&sdata->local->mtx);
4bf88530 1788 err = ieee80211_vif_use_channel(sdata, &setup->chandef,
55de908a 1789 IEEE80211_CHANCTX_SHARED);
34a3740d 1790 mutex_unlock(&sdata->local->mtx);
cc1d2806
JB		 1791 if (err)
1792 return err;
1793
2b5e1967 1794 return ieee80211_start_mesh(sdata);
29cbe68c
JB		 1795}
1796
1797static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev)
1798{
1799 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1800
1801 ieee80211_stop_mesh(sdata);
34a3740d 1802 mutex_lock(&sdata->local->mtx);
55de908a 1803 ieee80211_vif_release_channel(sdata);
34a3740d 1804 mutex_unlock(&sdata->local->mtx);
29cbe68c
JB		 1805
1806 return 0;
1807}
c5dd9c2b
LCC		 1808#endif
1809
9f1ba906
JM		 1810static int ieee80211_change_bss(struct wiphy *wiphy,
1811 struct net_device *dev,
1812 struct bss_parameters *params)
1813{
55de908a
JB		 1814 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1815 enum ieee80211_band band;
9f1ba906
JM		 1816 u32 changed = 0;
1817
7ca133bc 1818 if (!sdata_dereference(sdata->u.ap.beacon, sdata))
55de908a
JB		 1819 return -ENOENT;
1820
1821 band = ieee80211_get_sdata_band(sdata);
9f1ba906 1822
9f1ba906 1823 if (params->use_cts_prot >= 0) {
bda3933a 1824 sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot;
9f1ba906
JM		 1825 changed |= BSS_CHANGED_ERP_CTS_PROT;
1826 }
1827 if (params->use_short_preamble >= 0) {
bda3933a 1828 sdata->vif.bss_conf.use_short_preamble =
9f1ba906
JM		 1829 params->use_short_preamble;
1830 changed |= BSS_CHANGED_ERP_PREAMBLE;
1831 }
43d35343
FF		 1832
1833 if (!sdata->vif.bss_conf.use_short_slot &&
55de908a 1834 band == IEEE80211_BAND_5GHZ) {
43d35343
FF		 1835 sdata->vif.bss_conf.use_short_slot = true;
1836 changed |= BSS_CHANGED_ERP_SLOT;
1837 }
1838
9f1ba906 1839 if (params->use_short_slot_time >= 0) {
bda3933a 1840 sdata->vif.bss_conf.use_short_slot =
9f1ba906
JM		 1841 params->use_short_slot_time;
1842 changed |= BSS_CHANGED_ERP_SLOT;
1843 }
1844
90c97a04 1845 if (params->basic_rates) {
2103dec1
SW		 1846 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1847 wiphy->bands[band],
1848 params->basic_rates,
1849 params->basic_rates_len,
1850 &sdata->vif.bss_conf.basic_rates);
90c97a04
JM		 1851 changed |= BSS_CHANGED_BASIC_RATES;
1852 }
1853
7b7b5e56
FF		 1854 if (params->ap_isolate >= 0) {
1855 if (params->ap_isolate)
1856 sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1857 else
1858 sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1859 }
1860
80d7e403
HS		 1861 if (params->ht_opmode >= 0) {
1862 sdata->vif.bss_conf.ht_operation_mode =
1863 (u16) params->ht_opmode;
1864 changed |= BSS_CHANGED_HT;
1865 }
1866
339afbf4 1867 if (params->p2p_ctwindow >= 0) {
67baf663
JD		 1868 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1869 ~IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
1870 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1871 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
339afbf4
JB		 1872 changed |= BSS_CHANGED_P2P_PS;
1873 }
1874
67baf663
JD		 1875 if (params->p2p_opp_ps > 0) {
1876 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1877 IEEE80211_P2P_OPPPS_ENABLE_BIT;
1878 changed |= BSS_CHANGED_P2P_PS;
1879 } else if (params->p2p_opp_ps == 0) {
1880 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1881 ~IEEE80211_P2P_OPPPS_ENABLE_BIT;
339afbf4
JB		 1882 changed |= BSS_CHANGED_P2P_PS;
1883 }
1884
9f1ba906
JM		 1885 ieee80211_bss_info_change_notify(sdata, changed);
1886
1887 return 0;
1888}
1889
31888487 1890static int ieee80211_set_txq_params(struct wiphy *wiphy,
f70f01c2 1891 struct net_device *dev,
31888487
JM		 1892 struct ieee80211_txq_params *params)
1893{
1894 struct ieee80211_local *local = wiphy_priv(wiphy);
f6f3def3 1895 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
31888487
JM		 1896 struct ieee80211_tx_queue_params p;
1897
1898 if (!local->ops->conf_tx)
1899 return -EOPNOTSUPP;
1900
54bcbc69
JB		 1901 if (local->hw.queues < IEEE80211_NUM_ACS)
1902 return -EOPNOTSUPP;
1903
31888487
JM		 1904 memset(&p, 0, sizeof(p));
1905 p.aifs = params->aifs;
1906 p.cw_max = params->cwmax;
1907 p.cw_min = params->cwmin;
1908 p.txop = params->txop;
ab13315a
KV		 1909
1910 /*
1911 * Setting tx queue params disables u-apsd because it's only
1912 * called in master mode.
1913 */
1914 p.uapsd = false;
1915
a3304b0a
JB		 1916 sdata->tx_conf[params->ac] = p;
1917 if (drv_conf_tx(local, sdata, params->ac, &p)) {
0fb9a9ec 1918 wiphy_debug(local->hw.wiphy,
a3304b0a
JB		 1919 "failed to set TX queue parameters for AC %d\n",
1920 params->ac);
31888487
JM		 1921 return -EINVAL;
1922 }
1923
7d25745d
JB		 1924 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS);
1925
31888487
JM		 1926 return 0;
1927}
1928
665af4fc 1929#ifdef CONFIG_PM
ff1b6e69
JB		 1930static int ieee80211_suspend(struct wiphy *wiphy,
1931 struct cfg80211_wowlan *wowlan)
665af4fc 1932{
eecc4800 1933 return __ieee80211_suspend(wiphy_priv(wiphy), wowlan);
665af4fc
BC		 1934}
1935
1936static int ieee80211_resume(struct wiphy *wiphy)
1937{
1938 return __ieee80211_resume(wiphy_priv(wiphy));
1939}
1940#else
1941#define ieee80211_suspend NULL
1942#define ieee80211_resume NULL
1943#endif
1944
2a519311 1945static int ieee80211_scan(struct wiphy *wiphy,
2a519311
JB		 1946 struct cfg80211_scan_request *req)
1947{
fd014284
JB		 1948 struct ieee80211_sub_if_data *sdata;
1949
1950 sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev);
2a519311 1951
2ca27bcf
JB		 1952 switch (ieee80211_vif_type_p2p(&sdata->vif)) {
1953 case NL80211_IFTYPE_STATION:
1954 case NL80211_IFTYPE_ADHOC:
1955 case NL80211_IFTYPE_MESH_POINT:
1956 case NL80211_IFTYPE_P2P_CLIENT:
f142c6b9 1957 case NL80211_IFTYPE_P2P_DEVICE:
2ca27bcf
JB		 1958 break;
1959 case NL80211_IFTYPE_P2P_GO:
1960 if (sdata->local->ops->hw_scan)
1961 break;
e9d7732e
JB		 1962 /*
1963 * FIXME: implement NoA while scanning in software,
1964 * for now fall through to allow scanning only when
1965 * beaconing hasn't been configured yet
1966 */
2ca27bcf 1967 case NL80211_IFTYPE_AP:
5c95b940
AQ		 1968 /*
1969 * If the scan has been forced (and the driver supports
1970 * forcing), don't care about being beaconing already.
1971 * This will create problems to the attached stations (e.g. all
1972 * the frames sent while scanning on other channel will be
1973 * lost)
1974 */
1975 if (sdata->u.ap.beacon &&
1976 (!(wiphy->features & NL80211_FEATURE_AP_SCAN) ||
1977 !(req->flags & NL80211_SCAN_FLAG_AP)))
2ca27bcf
JB		 1978 return -EOPNOTSUPP;
1979 break;
1980 default:
1981 return -EOPNOTSUPP;
1982 }
2a519311
JB		 1983
1984 return ieee80211_request_scan(sdata, req);
1985}
1986
91f123f2
VK		 1987static void ieee80211_abort_scan(struct wiphy *wiphy, struct wireless_dev *wdev)
1988{
1989 ieee80211_scan_cancel(wiphy_priv(wiphy));
1990}
1991
79f460ca
LC		 1992static int
1993ieee80211_sched_scan_start(struct wiphy *wiphy,
1994 struct net_device *dev,
1995 struct cfg80211_sched_scan_request *req)
1996{
1997 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1998
1999 if (!sdata->local->ops->sched_scan_start)
2000 return -EOPNOTSUPP;
2001
2002 return ieee80211_request_sched_scan_start(sdata, req);
2003}
2004
2005static int
85a9994a 2006ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev)
79f460ca 2007{
0d440ea2 2008 struct ieee80211_local *local = wiphy_priv(wiphy);
79f460ca 2009
0d440ea2 2010 if (!local->ops->sched_scan_stop)
79f460ca
LC		 2011 return -EOPNOTSUPP;
2012
0d440ea2 2013 return ieee80211_request_sched_scan_stop(local);
79f460ca
LC		 2014}
2015
636a5d36
JM		 2016static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev,
2017 struct cfg80211_auth_request *req)
2018{
77fdaa12 2019 return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req);
636a5d36
JM		 2020}
2021
2022static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev,
2023 struct cfg80211_assoc_request *req)
2024{
77fdaa12 2025 return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
636a5d36
JM		 2026}
2027
2028static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev,
63c9c5e7 2029 struct cfg80211_deauth_request *req)
636a5d36 2030{
63c9c5e7 2031 return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req);
636a5d36
JM		 2032}
2033
2034static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev,
63c9c5e7 2035 struct cfg80211_disassoc_request *req)
636a5d36 2036{
63c9c5e7 2037 return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
636a5d36
JM		 2038}
2039
af8cdcd8
JB		 2040static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
2041 struct cfg80211_ibss_params *params)
2042{
55de908a 2043 return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params);
af8cdcd8
JB		 2044}
2045
2046static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
2047{
55de908a 2048 return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev));
af8cdcd8
JB		 2049}
2050
239281f8
RL		 2051static int ieee80211_join_ocb(struct wiphy *wiphy, struct net_device *dev,
2052 struct ocb_setup *setup)
2053{
2054 return ieee80211_ocb_join(IEEE80211_DEV_TO_SUB_IF(dev), setup);
2055}
2056
2057static int ieee80211_leave_ocb(struct wiphy *wiphy, struct net_device *dev)
2058{
2059 return ieee80211_ocb_leave(IEEE80211_DEV_TO_SUB_IF(dev));
2060}
2061
391e53e3
AQ		 2062static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev,
2063 int rate[IEEE80211_NUM_BANDS])
2064{
2065 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2066
9887dbf5
CD		 2067 memcpy(sdata->vif.bss_conf.mcast_rate, rate,
2068 sizeof(int) * IEEE80211_NUM_BANDS);
391e53e3
AQ		 2069
2070 return 0;
2071}
2072
b9a5f8ca
JM		 2073static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
2074{
2075 struct ieee80211_local *local = wiphy_priv(wiphy);
24487981 2076 int err;
b9a5f8ca 2077
f23a4780 2078 if (changed & WIPHY_PARAM_FRAG_THRESHOLD) {
17c18bf8
JB		 2079 ieee80211_check_fast_xmit_all(local);
2080
f23a4780
AN		 2081 err = drv_set_frag_threshold(local, wiphy->frag_threshold);
2082
17c18bf8
JB		 2083 if (err) {
2084 ieee80211_check_fast_xmit_all(local);
f23a4780 2085 return err;
17c18bf8 2086 }
f23a4780
AN		 2087 }
2088
a4bcaf55
LB		 2089 if ((changed & WIPHY_PARAM_COVERAGE_CLASS) ||
2090 (changed & WIPHY_PARAM_DYN_ACK)) {
2091 s16 coverage_class;
2092
2093 coverage_class = changed & WIPHY_PARAM_COVERAGE_CLASS ?
2094 wiphy->coverage_class : -1;
2095 err = drv_set_coverage_class(local, coverage_class);
310bc676
LT		 2096
2097 if (err)
2098 return err;
2099 }
2100
b9a5f8ca 2101 if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
24487981 2102 err = drv_set_rts_threshold(local, wiphy->rts_threshold);
b9a5f8ca 2103
24487981
JB		 2104 if (err)
2105 return err;
b9a5f8ca
JM		 2106 }
2107
8bc83c24
JB		 2108 if (changed & WIPHY_PARAM_RETRY_SHORT) {
2109 if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY)
2110 return -EINVAL;
b9a5f8ca 2111 local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
8bc83c24
JB		 2112 }
2113 if (changed & WIPHY_PARAM_RETRY_LONG) {
2114 if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY)
2115 return -EINVAL;
b9a5f8ca 2116 local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
8bc83c24 2117 }
b9a5f8ca
JM		 2118 if (changed &
2119 (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG))
2120 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS);
2121
2122 return 0;
2123}
2124
7643a2c3 2125static int ieee80211_set_tx_power(struct wiphy *wiphy,
c8442118 2126 struct wireless_dev *wdev,
fa61cf70 2127 enum nl80211_tx_power_setting type, int mbm)
7643a2c3
JB		 2128{
2129 struct ieee80211_local *local = wiphy_priv(wiphy);
1ea6f9c0 2130 struct ieee80211_sub_if_data *sdata;
db82d8a9
LB		 2131 enum nl80211_tx_power_setting txp_type = type;
2132 bool update_txp_type = false;
7643a2c3 2133
1ea6f9c0
JB		 2134 if (wdev) {
2135 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2136
2137 switch (type) {
2138 case NL80211_TX_POWER_AUTOMATIC:
2139 sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
db82d8a9 2140 txp_type = NL80211_TX_POWER_LIMITED;
1ea6f9c0
JB		 2141 break;
2142 case NL80211_TX_POWER_LIMITED:
2143 case NL80211_TX_POWER_FIXED:
2144 if (mbm < 0 || (mbm % 100))
2145 return -EOPNOTSUPP;
2146 sdata->user_power_level = MBM_TO_DBM(mbm);
2147 break;
2148 }
2149
db82d8a9
LB		 2150 if (txp_type != sdata->vif.bss_conf.txpower_type) {
2151 update_txp_type = true;
2152 sdata->vif.bss_conf.txpower_type = txp_type;
2153 }
2154
2155 ieee80211_recalc_txpower(sdata, update_txp_type);
1ea6f9c0
JB		 2156
2157 return 0;
2158 }
55de908a 2159
7643a2c3 2160 switch (type) {
fa61cf70 2161 case NL80211_TX_POWER_AUTOMATIC:
1ea6f9c0 2162 local->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
db82d8a9 2163 txp_type = NL80211_TX_POWER_LIMITED;
7643a2c3 2164 break;
fa61cf70 2165 case NL80211_TX_POWER_LIMITED:
fa61cf70
JO		 2166 case NL80211_TX_POWER_FIXED:
2167 if (mbm < 0 || (mbm % 100))
2168 return -EOPNOTSUPP;
fa61cf70 2169 local->user_power_level = MBM_TO_DBM(mbm);
7643a2c3 2170 break;
7643a2c3
JB		 2171 }
2172
1ea6f9c0 2173 mutex_lock(&local->iflist_mtx);
db82d8a9 2174 list_for_each_entry(sdata, &local->interfaces, list) {
1ea6f9c0 2175 sdata->user_power_level = local->user_power_level;
db82d8a9
LB		 2176 if (txp_type != sdata->vif.bss_conf.txpower_type)
2177 update_txp_type = true;
2178 sdata->vif.bss_conf.txpower_type = txp_type;
2179 }
1ea6f9c0 2180 list_for_each_entry(sdata, &local->interfaces, list)
db82d8a9 2181 ieee80211_recalc_txpower(sdata, update_txp_type);
1ea6f9c0 2182 mutex_unlock(&local->iflist_mtx);
7643a2c3
JB		 2183
2184 return 0;
2185}
2186
c8442118
JB		 2187static int ieee80211_get_tx_power(struct wiphy *wiphy,
2188 struct wireless_dev *wdev,
2189 int *dbm)
7643a2c3
JB		 2190{
2191 struct ieee80211_local *local = wiphy_priv(wiphy);
1ea6f9c0 2192 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
7643a2c3 2193
5b3dc42b
FF		 2194 if (local->ops->get_txpower)
2195 return drv_get_txpower(local, sdata, dbm);
2196
1ea6f9c0
JB		 2197 if (!local->use_chanctx)
2198 *dbm = local->hw.conf.power_level;
2199 else
2200 *dbm = sdata->vif.bss_conf.txpower;
7643a2c3 2201
7643a2c3
JB		 2202 return 0;
2203}
2204
ab737a4f 2205static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev,
388ac775 2206 const u8 *addr)
ab737a4f
JB		 2207{
2208 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2209
2210 memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN);
2211
2212 return 0;
2213}
2214
1f87f7d3
JB		 2215static void ieee80211_rfkill_poll(struct wiphy *wiphy)
2216{
2217 struct ieee80211_local *local = wiphy_priv(wiphy);
2218
2219 drv_rfkill_poll(local);
2220}
2221
aff89a9b 2222#ifdef CONFIG_NL80211_TESTMODE
fc73f11f
DS		 2223static int ieee80211_testmode_cmd(struct wiphy *wiphy,
2224 struct wireless_dev *wdev,
2225 void *data, int len)
aff89a9b
JB		 2226{
2227 struct ieee80211_local *local = wiphy_priv(wiphy);
52981cd7 2228 struct ieee80211_vif *vif = NULL;
aff89a9b
JB		 2229
2230 if (!local->ops->testmode_cmd)
2231 return -EOPNOTSUPP;
2232
52981cd7
DS		 2233 if (wdev) {
2234 struct ieee80211_sub_if_data *sdata;
2235
2236 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2237 if (sdata->flags & IEEE80211_SDATA_IN_DRIVER)
2238 vif = &sdata->vif;
2239 }
2240
2241 return local->ops->testmode_cmd(&local->hw, vif, data, len);
aff89a9b 2242}
71063f0e
WYG		 2243
2244static int ieee80211_testmode_dump(struct wiphy *wiphy,
2245 struct sk_buff *skb,
2246 struct netlink_callback *cb,
2247 void *data, int len)
2248{
2249 struct ieee80211_local *local = wiphy_priv(wiphy);
2250
2251 if (!local->ops->testmode_dump)
2252 return -EOPNOTSUPP;
2253
2254 return local->ops->testmode_dump(&local->hw, skb, cb, data, len);
2255}
aff89a9b
JB		 2256#endif
2257
687da132
EG		 2258int __ieee80211_request_smps_ap(struct ieee80211_sub_if_data *sdata,
2259 enum ieee80211_smps_mode smps_mode)
2260{
2261 struct sta_info *sta;
2262 enum ieee80211_smps_mode old_req;
687da132
EG		 2263
2264 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP))
2265 return -EINVAL;
2266
2267 if (sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2268 return 0;
2269
2270 old_req = sdata->u.ap.req_smps;
2271 sdata->u.ap.req_smps = smps_mode;
2272
2273 /* AUTOMATIC doesn't mean much for AP - don't allow it */
2274 if (old_req == smps_mode ||
2275 smps_mode == IEEE80211_SMPS_AUTOMATIC)
2276 return 0;
2277
2278 /* If no associated stations, there's no need to do anything */
2279 if (!atomic_read(&sdata->u.ap.num_mcast_sta)) {
2280 sdata->smps_mode = smps_mode;
2281 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2282 return 0;
2283 }
2284
2285 ht_dbg(sdata,
6a8b4adb 2286 "SMPS %d requested in AP mode, sending Action frame to %d stations\n",
687da132
EG		 2287 smps_mode, atomic_read(&sdata->u.ap.num_mcast_sta));
2288
2289 mutex_lock(&sdata->local->sta_mtx);
7d9bb2f0
JB		 2290 list_for_each_entry(sta, &sdata->local->sta_list, list) {
2291 /*
2292 * Only stations associated to our AP and
2293 * associated VLANs
2294 */
2295 if (sta->sdata->bss != &sdata->u.ap)
2296 continue;
687da132 2297
7d9bb2f0
JB		 2298 /* This station doesn't support MIMO - skip it */
2299 if (sta_info_tx_streams(sta) == 1)
2300 continue;
687da132 2301
7d9bb2f0
JB		 2302 /*
2303 * Don't wake up a STA just to send the action frame
2304 * unless we are getting more restrictive.
2305 */
2306 if (test_sta_flag(sta, WLAN_STA_PS_STA) &&
2307 !ieee80211_smps_is_restrictive(sta->known_smps_mode,
2308 smps_mode)) {
2309 ht_dbg(sdata, "Won't send SMPS to sleeping STA %pM\n",
2310 sta->sta.addr);
2311 continue;
2312 }
687da132 2313
7d9bb2f0
JB		 2314 /*
2315 * If the STA is not authorized, wait until it gets
2316 * authorized and the action frame will be sent then.
2317 */
2318 if (!test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2319 continue;
687da132 2320
7d9bb2f0
JB		 2321 ht_dbg(sdata, "Sending SMPS to %pM\n", sta->sta.addr);
2322 ieee80211_send_smps_action(sdata, smps_mode, sta->sta.addr,
2323 sdata->vif.bss_conf.bssid);
687da132
EG		 2324 }
2325 mutex_unlock(&sdata->local->sta_mtx);
2326
2327 sdata->smps_mode = smps_mode;
2328 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2329
2330 return 0;
2331}
2332
2333int __ieee80211_request_smps_mgd(struct ieee80211_sub_if_data *sdata,
2334 enum ieee80211_smps_mode smps_mode)
0f78231b
JB		 2335{
2336 const u8 *ap;
2337 enum ieee80211_smps_mode old_req;
2338 int err;
d51c2ea3
AN		 2339 struct sta_info *sta;
2340 bool tdls_peer_found = false;
0f78231b 2341
8d61ffa5 2342 lockdep_assert_held(&sdata->wdev.mtx);
243e6df4 2343
687da132
EG		 2344 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION))
2345 return -EINVAL;
2346
0f78231b
JB		 2347 old_req = sdata->u.mgd.req_smps;
2348 sdata->u.mgd.req_smps = smps_mode;
2349
2350 if (old_req == smps_mode &&
2351 smps_mode != IEEE80211_SMPS_AUTOMATIC)
2352 return 0;
2353
2354 /*
2355 * If not associated, or current association is not an HT
04ecd257
JB		 2356 * association, there's no need to do anything, just store
2357 * the new value until we associate.
0f78231b
JB		 2358 */
2359 if (!sdata->u.mgd.associated ||
4bf88530 2360 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
0f78231b 2361 return 0;
0f78231b 2362
0c1ad2ca 2363 ap = sdata->u.mgd.associated->bssid;
0f78231b 2364
d51c2ea3
AN		 2365 rcu_read_lock();
2366 list_for_each_entry_rcu(sta, &sdata->local->sta_list, list) {
2367 if (!sta->sta.tdls || sta->sdata != sdata || !sta->uploaded ||
2368 !test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2369 continue;
2370
2371 tdls_peer_found = true;
2372 break;
2373 }
2374 rcu_read_unlock();
2375
0f78231b 2376 if (smps_mode == IEEE80211_SMPS_AUTOMATIC) {
d51c2ea3 2377 if (tdls_peer_found || !sdata->u.mgd.powersave)
0f78231b 2378 smps_mode = IEEE80211_SMPS_OFF;
d51c2ea3
AN		 2379 else
2380 smps_mode = IEEE80211_SMPS_DYNAMIC;
0f78231b
JB		 2381 }
2382
2383 /* send SM PS frame to AP */
2384 err = ieee80211_send_smps_action(sdata, smps_mode,
2385 ap, ap);
2386 if (err)
2387 sdata->u.mgd.req_smps = old_req;
d51c2ea3
AN		 2388 else if (smps_mode != IEEE80211_SMPS_OFF && tdls_peer_found)
2389 ieee80211_teardown_tdls_peers(sdata);
0f78231b
JB		 2390
2391 return err;
2392}
2393
bc92afd9
JB		 2394static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev,
2395 bool enabled, int timeout)
2396{
2397 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2398 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
bc92afd9 2399
2d3db210 2400 if (sdata->vif.type != NL80211_IFTYPE_STATION)
e5de30c9
BP		 2401 return -EOPNOTSUPP;
2402
30686bf7 2403 if (!ieee80211_hw_check(&local->hw, SUPPORTS_PS))
bc92afd9
JB		 2404 return -EOPNOTSUPP;
2405
2406 if (enabled == sdata->u.mgd.powersave &&
ff616381 2407 timeout == local->dynamic_ps_forced_timeout)
bc92afd9
JB		 2408 return 0;
2409
2410 sdata->u.mgd.powersave = enabled;
ff616381 2411 local->dynamic_ps_forced_timeout = timeout;
bc92afd9 2412
0f78231b 2413 /* no change, but if automatic follow powersave */
ed405be5 2414 sdata_lock(sdata);
687da132 2415 __ieee80211_request_smps_mgd(sdata, sdata->u.mgd.req_smps);
ed405be5 2416 sdata_unlock(sdata);
0f78231b 2417
30686bf7 2418 if (ieee80211_hw_check(&local->hw, SUPPORTS_DYNAMIC_PS))
bc92afd9
JB		 2419 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2420
4a733ef1 2421 ieee80211_recalc_ps(local);
ab095877 2422 ieee80211_recalc_ps_vif(sdata);
bc92afd9
JB		 2423
2424 return 0;
2425}
2426
a97c13c3
JO		 2427static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy,
2428 struct net_device *dev,
2429 s32 rssi_thold, u32 rssi_hyst)
2430{
2431 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
a97c13c3
JO		 2432 struct ieee80211_vif *vif = &sdata->vif;
2433 struct ieee80211_bss_conf *bss_conf = &vif->bss_conf;
2434
a97c13c3
JO		 2435 if (rssi_thold == bss_conf->cqm_rssi_thold &&
2436 rssi_hyst == bss_conf->cqm_rssi_hyst)
2437 return 0;
2438
ef9be10c
JB		 2439 if (sdata->vif.driver_flags & IEEE80211_VIF_BEACON_FILTER &&
2440 !(sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI))
2441 return -EOPNOTSUPP;
2442
a97c13c3
JO		 2443 bss_conf->cqm_rssi_thold = rssi_thold;
2444 bss_conf->cqm_rssi_hyst = rssi_hyst;
babc305e 2445 sdata->u.mgd.last_cqm_event_signal = 0;
a97c13c3
JO		 2446
2447 /* tell the driver upon association, unless already associated */
ea086359
JB		 2448 if (sdata->u.mgd.associated &&
2449 sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI)
a97c13c3
JO		 2450 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM);
2451
2452 return 0;
2453}
2454
9930380f
JB		 2455static int ieee80211_set_bitrate_mask(struct wiphy *wiphy,
2456 struct net_device *dev,
2457 const u8 *addr,
2458 const struct cfg80211_bitrate_mask *mask)
2459{
2460 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2461 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
bdbfd6b5 2462 int i, ret;
2c7e6bc9 2463
554a43d5
EP		 2464 if (!ieee80211_sdata_running(sdata))
2465 return -ENETDOWN;
2466
30686bf7 2467 if (ieee80211_hw_check(&local->hw, HAS_RATE_CONTROL)) {
bdbfd6b5
SM		 2468 ret = drv_set_bitrate_mask(local, sdata, mask);
2469 if (ret)
2470 return ret;
2471 }
9930380f 2472
19468413 2473 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
2ffbe6d3
FF		 2474 struct ieee80211_supported_band *sband = wiphy->bands[i];
2475 int j;
2476
37eb0b16 2477 sdata->rc_rateidx_mask[i] = mask->control[i].legacy;
d1e33e65
JD		 2478 memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].ht_mcs,
2479 sizeof(mask->control[i].ht_mcs));
b119ad6e
LB		 2480 memcpy(sdata->rc_rateidx_vht_mcs_mask[i],
2481 mask->control[i].vht_mcs,
2482 sizeof(mask->control[i].vht_mcs));
2ffbe6d3
FF		 2483
2484 sdata->rc_has_mcs_mask[i] = false;
b119ad6e 2485 sdata->rc_has_vht_mcs_mask[i] = false;
2ffbe6d3
FF		 2486 if (!sband)
2487 continue;
2488
b119ad6e 2489 for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++) {
2df1b131 2490 if (~sdata->rc_rateidx_mcs_mask[i][j]) {
2ffbe6d3 2491 sdata->rc_has_mcs_mask[i] = true;
2df1b131
JB		 2492 break;
2493 }
2494 }
b119ad6e 2495
2df1b131
JB		 2496 for (j = 0; j < NL80211_VHT_NSS_MAX; j++) {
2497 if (~sdata->rc_rateidx_vht_mcs_mask[i][j]) {
b119ad6e 2498 sdata->rc_has_vht_mcs_mask[i] = true;
2ffbe6d3 2499 break;
2df1b131 2500 }
b119ad6e 2501 }
19468413 2502 }
9930380f 2503
37eb0b16 2504 return 0;
9930380f
JB		 2505}
2506
eaa336b0
EP		 2507static bool ieee80211_coalesce_started_roc(struct ieee80211_local *local,
2508 struct ieee80211_roc_work *new_roc,
2509 struct ieee80211_roc_work *cur_roc)
2510{
252ec2b3
JB		 2511 unsigned long now = jiffies;
2512 unsigned long remaining = cur_roc->hw_start_time +
2513 msecs_to_jiffies(cur_roc->duration) -
2514 now;
eaa336b0
EP		 2515
2516 if (WARN_ON(!cur_roc->started || !cur_roc->hw_begun))
2517 return false;
2518
252ec2b3
JB		 2519 /* if it doesn't fit entirely, schedule a new one */
2520 if (new_roc->duration > jiffies_to_msecs(remaining))
eaa336b0
EP		 2521 return false;
2522
2523 ieee80211_handle_roc_started(new_roc);
2524
252ec2b3
JB		 2525 /* add to dependents so we send the expired event properly */
2526 list_add_tail(&new_roc->list, &cur_roc->dependents);
eaa336b0
EP		 2527 return true;
2528}
2529
3b79af97
JB		 2530static u64 ieee80211_mgmt_tx_cookie(struct ieee80211_local *local)
2531{
2532 lockdep_assert_held(&local->mtx);
2533
2534 local->roc_cookie_counter++;
2535
2536 /* wow, you wrapped 64 bits ... more likely a bug */
2537 if (WARN_ON(local->roc_cookie_counter == 0))
2538 local->roc_cookie_counter++;
2539
2540 return local->roc_cookie_counter;
2541}
2542
2eb278e0
JB		 2543static int ieee80211_start_roc_work(struct ieee80211_local *local,
2544 struct ieee80211_sub_if_data *sdata,
2545 struct ieee80211_channel *channel,
2eb278e0 2546 unsigned int duration, u64 *cookie,
d339d5ca
IP		 2547 struct sk_buff *txskb,
2548 enum ieee80211_roc_type type)
2eb278e0
JB		 2549{
2550 struct ieee80211_roc_work *roc, *tmp;
2551 bool queued = false;
21f83589 2552 int ret;
21f83589
JB		 2553
2554 lockdep_assert_held(&local->mtx);
2555
fe57d9f5
JB		 2556 if (local->use_chanctx && !local->ops->remain_on_channel)
2557 return -EOPNOTSUPP;
2558
2eb278e0
JB		 2559 roc = kzalloc(sizeof(*roc), GFP_KERNEL);
2560 if (!roc)
2561 return -ENOMEM;
2562
2fae062e
IP		 2563 /*
2564 * If the duration is zero, then the driver
2565 * wouldn't actually do anything. Set it to
2566 * 10 for now.
2567 *
2568 * TODO: cancel the off-channel operation
2569 * when we get the SKB's TX status and
2570 * the wait time was zero before.
2571 */
2572 if (!duration)
2573 duration = 10;
2574
2eb278e0 2575 roc->chan = channel;
2eb278e0
JB		 2576 roc->duration = duration;
2577 roc->req_duration = duration;
2578 roc->frame = txskb;
d339d5ca 2579 roc->type = type;
2eb278e0
JB		 2580 roc->sdata = sdata;
2581 INIT_DELAYED_WORK(&roc->work, ieee80211_sw_roc_work);
2582 INIT_LIST_HEAD(&roc->dependents);
2583
2f617435
EP		 2584 /*
2585 * cookie is either the roc cookie (for normal roc)
2586 * or the SKB (for mgmt TX)
2587 */
2588 if (!txskb) {
3b79af97 2589 roc->cookie = ieee80211_mgmt_tx_cookie(local);
2f617435
EP		 2590 *cookie = roc->cookie;
2591 } else {
3b79af97 2592 roc->mgmt_tx_cookie = *cookie;
2f617435
EP		 2593 }
2594
2eb278e0 2595 /* if there's one pending or we're scanning, queue this one */
164eb02d 2596 if (!list_empty(&local->roc_list) ||
5cbc95a7 2597 local->scanning || ieee80211_is_radar_required(local))
2eb278e0
JB		 2598 goto out_check_combine;
2599
2600 /* if not HW assist, just queue & schedule work */
2601 if (!local->ops->remain_on_channel) {
2602 ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);
2603 goto out_queue;
2604 }
2605
2606 /* otherwise actually kick it off here (for error handling) */
2607
d339d5ca 2608 ret = drv_remain_on_channel(local, sdata, channel, duration, type);
21f83589 2609 if (ret) {
2eb278e0
JB		 2610 kfree(roc);
2611 return ret;
21f83589
JB		 2612 }
2613
2eb278e0
JB		 2614 roc->started = true;
2615 goto out_queue;
2616
2617 out_check_combine:
2618 list_for_each_entry(tmp, &local->roc_list, list) {
42d97a59 2619 if (tmp->chan != channel || tmp->sdata != sdata)
2eb278e0
JB		 2620 continue;
2621
2622 /*
2623 * Extend this ROC if possible:
2624 *
2625 * If it hasn't started yet, just increase the duration
2626 * and add the new one to the list of dependents.
d339d5ca
IP		 2627 * If the type of the new ROC has higher priority, modify the
2628 * type of the previous one to match that of the new one.
2eb278e0
JB		 2629 */
2630 if (!tmp->started) {
2631 list_add_tail(&roc->list, &tmp->dependents);
2632 tmp->duration = max(tmp->duration, roc->duration);
d339d5ca 2633 tmp->type = max(tmp->type, roc->type);
2eb278e0
JB		 2634 queued = true;
2635 break;
2636 }
2637
2638 /* If it has already started, it's more difficult ... */
2639 if (local->ops->remain_on_channel) {
2eb278e0
JB		 2640 /*
2641 * In the offloaded ROC case, if it hasn't begun, add
2642 * this new one to the dependent list to be handled
d339d5ca 2643 * when the master one begins. If it has begun,
252ec2b3
JB		 2644 * check if it fits entirely within the existing one,
2645 * in which case it will just be dependent as well.
2646 * Otherwise, schedule it by itself.
2eb278e0
JB		 2647 */
2648 if (!tmp->hw_begun) {
2649 list_add_tail(&roc->list, &tmp->dependents);
2650 queued = true;
2651 break;
2652 }
2653
eaa336b0 2654 if (ieee80211_coalesce_started_roc(local, roc, tmp))
2eb278e0 2655 queued = true;
2eb278e0
JB		 2656 } else if (del_timer_sync(&tmp->work.timer)) {
2657 unsigned long new_end;
2658
2659 /*
2660 * In the software ROC case, cancel the timer, if
2661 * that fails then the finish work is already
2662 * queued/pending and thus we queue the new ROC
2663 * normally, if that succeeds then we can extend
2664 * the timer duration and TX the frame (if any.)
2665 */
2666
2667 list_add_tail(&roc->list, &tmp->dependents);
2668 queued = true;
2669
2670 new_end = jiffies + msecs_to_jiffies(roc->duration);
2671
2672 /* ok, it was started & we canceled timer */
2673 if (time_after(new_end, tmp->work.timer.expires))
2674 mod_timer(&tmp->work.timer, new_end);
2675 else
2676 add_timer(&tmp->work.timer);
2677
2678 ieee80211_handle_roc_started(roc);
2679 }
2680 break;
2681 }
2682
2683 out_queue:
2684 if (!queued)
2685 list_add_tail(&roc->list, &local->roc_list);
2686
2eb278e0 2687 return 0;
21f83589
JB		 2688}
2689
b8bc4b0a 2690static int ieee80211_remain_on_channel(struct wiphy *wiphy,
71bbc994 2691 struct wireless_dev *wdev,
b8bc4b0a 2692 struct ieee80211_channel *chan,
b8bc4b0a
JB		 2693 unsigned int duration,
2694 u64 *cookie)
2695{
71bbc994 2696 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
21f83589 2697 struct ieee80211_local *local = sdata->local;
2eb278e0 2698 int ret;
21f83589 2699
2eb278e0 2700 mutex_lock(&local->mtx);
42d97a59 2701 ret = ieee80211_start_roc_work(local, sdata, chan,
d339d5ca
IP		 2702 duration, cookie, NULL,
2703 IEEE80211_ROC_TYPE_NORMAL);
2eb278e0 2704 mutex_unlock(&local->mtx);
b8bc4b0a 2705
2eb278e0 2706 return ret;
b8bc4b0a
JB		 2707}
2708
2eb278e0
JB		 2709static int ieee80211_cancel_roc(struct ieee80211_local *local,
2710 u64 cookie, bool mgmt_tx)
21f83589 2711{
2eb278e0 2712 struct ieee80211_roc_work *roc, *tmp, *found = NULL;
21f83589
JB		 2713 int ret;
2714
2eb278e0
JB		 2715 mutex_lock(&local->mtx);
2716 list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
e979e33c
JB		 2717 struct ieee80211_roc_work *dep, *tmp2;
2718
2719 list_for_each_entry_safe(dep, tmp2, &roc->dependents, list) {
50febf6a 2720 if (!mgmt_tx && dep->cookie != cookie)
e979e33c
JB		 2721 continue;
2722 else if (mgmt_tx && dep->mgmt_tx_cookie != cookie)
2723 continue;
2724 /* found dependent item -- just remove it */
2725 list_del(&dep->list);
2726 mutex_unlock(&local->mtx);
2727
3fbd45ca 2728 ieee80211_roc_notify_destroy(dep, true);
e979e33c
JB		 2729 return 0;
2730 }
2731
50febf6a 2732 if (!mgmt_tx && roc->cookie != cookie)
2eb278e0
JB		 2733 continue;
2734 else if (mgmt_tx && roc->mgmt_tx_cookie != cookie)
2735 continue;
21f83589 2736
2eb278e0
JB		 2737 found = roc;
2738 break;
2739 }
21f83589 2740
2eb278e0
JB		 2741 if (!found) {
2742 mutex_unlock(&local->mtx);
2743 return -ENOENT;
2744 }
21f83589 2745
e979e33c
JB		 2746 /*
2747 * We found the item to cancel, so do that. Note that it
2748 * may have dependents, which we also cancel (and send
2749 * the expired signal for.) Not doing so would be quite
2750 * tricky here, but we may need to fix it later.
2751 */
2752
2eb278e0
JB		 2753 if (local->ops->remain_on_channel) {
2754 if (found->started) {
2755 ret = drv_cancel_remain_on_channel(local);
2756 if (WARN_ON_ONCE(ret)) {
2757 mutex_unlock(&local->mtx);
2758 return ret;
2759 }
2760 }
21f83589 2761
2eb278e0 2762 list_del(&found->list);
21f83589 2763
0f6b3f59
JB		 2764 if (found->started)
2765 ieee80211_start_next_roc(local);
2eb278e0 2766 mutex_unlock(&local->mtx);
21f83589 2767
3fbd45ca 2768 ieee80211_roc_notify_destroy(found, true);
2eb278e0
JB		 2769 } else {
2770 /* work may be pending so use it all the time */
2771 found->abort = true;
2772 ieee80211_queue_delayed_work(&local->hw, &found->work, 0);
21f83589 2773
21f83589
JB		 2774 mutex_unlock(&local->mtx);
2775
2eb278e0
JB		 2776 /* work will clean up etc */
2777 flush_delayed_work(&found->work);
3fbd45ca
JB		 2778 WARN_ON(!found->to_be_freed);
2779 kfree(found);
21f83589 2780 }
b8bc4b0a 2781
2eb278e0 2782 return 0;
b8bc4b0a
JB		 2783}
2784
2eb278e0 2785static int ieee80211_cancel_remain_on_channel(struct wiphy *wiphy,
71bbc994 2786 struct wireless_dev *wdev,
2eb278e0 2787 u64 cookie)
f30221e4 2788{
71bbc994 2789 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2eb278e0 2790 struct ieee80211_local *local = sdata->local;
f30221e4 2791
2eb278e0 2792 return ieee80211_cancel_roc(local, cookie, false);
f30221e4
JB		 2793}
2794
164eb02d
SW		 2795static int ieee80211_start_radar_detection(struct wiphy *wiphy,
2796 struct net_device *dev,
31559f35
JD		 2797 struct cfg80211_chan_def *chandef,
2798 u32 cac_time_ms)
164eb02d
SW		 2799{
2800 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2801 struct ieee80211_local *local = sdata->local;
164eb02d
SW		 2802 int err;
2803
34a3740d
JB		 2804 mutex_lock(&local->mtx);
2805 if (!list_empty(&local->roc_list) || local->scanning) {
2806 err = -EBUSY;
2807 goto out_unlock;
2808 }
164eb02d
SW		 2809
2810 /* whatever, but channel contexts should not complain about that one */
2811 sdata->smps_mode = IEEE80211_SMPS_OFF;
2812 sdata->needed_rx_chains = local->rx_chains;
164eb02d 2813
164eb02d
SW		 2814 err = ieee80211_vif_use_channel(sdata, chandef,
2815 IEEE80211_CHANCTX_SHARED);
164eb02d 2816 if (err)
34a3740d 2817 goto out_unlock;
164eb02d 2818
164eb02d 2819 ieee80211_queue_delayed_work(&sdata->local->hw,
31559f35
JD		 2820 &sdata->dfs_cac_timer_work,
2821 msecs_to_jiffies(cac_time_ms));
164eb02d 2822
34a3740d
JB		 2823 out_unlock:
2824 mutex_unlock(&local->mtx);
2825 return err;
164eb02d
SW		 2826}
2827
73da7d5b
SW		 2828static struct cfg80211_beacon_data *
2829cfg80211_beacon_dup(struct cfg80211_beacon_data *beacon)
2830{
2831 struct cfg80211_beacon_data *new_beacon;
2832 u8 *pos;
2833 int len;
2834
2835 len = beacon->head_len + beacon->tail_len + beacon->beacon_ies_len +
2836 beacon->proberesp_ies_len + beacon->assocresp_ies_len +
2837 beacon->probe_resp_len;
2838
2839 new_beacon = kzalloc(sizeof(*new_beacon) + len, GFP_KERNEL);
2840 if (!new_beacon)
2841 return NULL;
2842
2843 pos = (u8 *)(new_beacon + 1);
2844 if (beacon->head_len) {
2845 new_beacon->head_len = beacon->head_len;
2846 new_beacon->head = pos;
2847 memcpy(pos, beacon->head, beacon->head_len);
2848 pos += beacon->head_len;
2849 }
2850 if (beacon->tail_len) {
2851 new_beacon->tail_len = beacon->tail_len;
2852 new_beacon->tail = pos;
2853 memcpy(pos, beacon->tail, beacon->tail_len);
2854 pos += beacon->tail_len;
2855 }
2856 if (beacon->beacon_ies_len) {
2857 new_beacon->beacon_ies_len = beacon->beacon_ies_len;
2858 new_beacon->beacon_ies = pos;
2859 memcpy(pos, beacon->beacon_ies, beacon->beacon_ies_len);
2860 pos += beacon->beacon_ies_len;
2861 }
2862 if (beacon->proberesp_ies_len) {
2863 new_beacon->proberesp_ies_len = beacon->proberesp_ies_len;
2864 new_beacon->proberesp_ies = pos;
2865 memcpy(pos, beacon->proberesp_ies, beacon->proberesp_ies_len);
2866 pos += beacon->proberesp_ies_len;
2867 }
2868 if (beacon->assocresp_ies_len) {
2869 new_beacon->assocresp_ies_len = beacon->assocresp_ies_len;
2870 new_beacon->assocresp_ies = pos;
2871 memcpy(pos, beacon->assocresp_ies, beacon->assocresp_ies_len);
2872 pos += beacon->assocresp_ies_len;
2873 }
2874 if (beacon->probe_resp_len) {
2875 new_beacon->probe_resp_len = beacon->probe_resp_len;
2876 beacon->probe_resp = pos;
2877 memcpy(pos, beacon->probe_resp, beacon->probe_resp_len);
2878 pos += beacon->probe_resp_len;
2879 }
2880
2881 return new_beacon;
2882}
2883
66e01cf9 2884void ieee80211_csa_finish(struct ieee80211_vif *vif)
73da7d5b 2885{
66e01cf9 2886 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
73da7d5b 2887
66e01cf9
LC		 2888 ieee80211_queue_work(&sdata->local->hw,
2889 &sdata->csa_finalize_work);
2890}
2891EXPORT_SYMBOL(ieee80211_csa_finish);
e487eaeb 2892
66199506
MK		 2893static int ieee80211_set_after_csa_beacon(struct ieee80211_sub_if_data *sdata,
2894 u32 *changed)
66e01cf9 2895{
66199506 2896 int err;
7578d575 2897
cd7760e6
SW		 2898 switch (sdata->vif.type) {
2899 case NL80211_IFTYPE_AP:
af296bdb
MK		 2900 err = ieee80211_assign_beacon(sdata, sdata->u.ap.next_beacon,
2901 NULL);
97518af1
MK		 2902 kfree(sdata->u.ap.next_beacon);
2903 sdata->u.ap.next_beacon = NULL;
2904
cd7760e6 2905 if (err < 0)
66199506
MK		 2906 return err;
2907 *changed |= err;
cd7760e6
SW		 2908 break;
2909 case NL80211_IFTYPE_ADHOC:
faf046e7
MK		 2910 err = ieee80211_ibss_finish_csa(sdata);
2911 if (err < 0)
66199506
MK		 2912 return err;
2913 *changed |= err;
cd7760e6 2914 break;
b8456a14
CYY		 2915#ifdef CONFIG_MAC80211_MESH
2916 case NL80211_IFTYPE_MESH_POINT:
2917 err = ieee80211_mesh_finish_csa(sdata);
2918 if (err < 0)
66199506
MK		 2919 return err;
2920 *changed |= err;
b8456a14
CYY		 2921 break;
2922#endif
cd7760e6
SW		 2923 default:
2924 WARN_ON(1);
66199506
MK		 2925 return -EINVAL;
2926 }
2927
2928 return 0;
2929}
2930
cf8767dd 2931static int __ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
66199506
MK		 2932{
2933 struct ieee80211_local *local = sdata->local;
2934 u32 changed = 0;
2935 int err;
2936
2937 sdata_assert_lock(sdata);
2938 lockdep_assert_held(&local->mtx);
03078de4 2939 lockdep_assert_held(&local->chanctx_mtx);
66199506 2940
03078de4
MK		 2941 /*
2942 * using reservation isn't immediate as it may be deferred until later
2943 * with multi-vif. once reservation is complete it will re-schedule the
2944 * work with no reserved_chanctx so verify chandef to check if it
2945 * completed successfully
2946 */
66199506 2947
03078de4
MK		 2948 if (sdata->reserved_chanctx) {
2949 /*
2950 * with multi-vif csa driver may call ieee80211_csa_finish()
2951 * many times while waiting for other interfaces to use their
2952 * reservations
2953 */
2954 if (sdata->reserved_ready)
2955 return 0;
2956
408b18ab 2957 return ieee80211_vif_use_reserved_context(sdata);
cd7760e6 2958 }
73da7d5b 2959
03078de4
MK		 2960 if (!cfg80211_chandef_identical(&sdata->vif.bss_conf.chandef,
2961 &sdata->csa_chandef))
2962 return -EINVAL;
2963
66199506
MK		 2964 sdata->vif.csa_active = false;
2965
2966 err = ieee80211_set_after_csa_beacon(sdata, &changed);
2967 if (err)
cf8767dd 2968 return err;
faf046e7 2969
66199506 2970 ieee80211_bss_info_change_notify(sdata, changed);
59af6928 2971
a46992b4
LC		 2972 if (sdata->csa_block_tx) {
2973 ieee80211_wake_vif_queues(local, sdata,
2974 IEEE80211_QUEUE_STOP_REASON_CSA);
2975 sdata->csa_block_tx = false;
2976 }
cf8767dd 2977
f1d65583
LC		 2978 err = drv_post_channel_switch(sdata);
2979 if (err)
2980 return err;
2981
2982 cfg80211_ch_switch_notify(sdata->dev, &sdata->csa_chandef);
2983
cf8767dd
MK		 2984 return 0;
2985}
2986
2987static void ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
2988{
2989 if (__ieee80211_csa_finalize(sdata)) {
2990 sdata_info(sdata, "failed to finalize CSA, disconnecting\n");
2991 cfg80211_stop_iface(sdata->local->hw.wiphy, &sdata->wdev,
2992 GFP_KERNEL);
2993 }
66e01cf9
LC		 2994}
2995
2996void ieee80211_csa_finalize_work(struct work_struct *work)
2997{
2998 struct ieee80211_sub_if_data *sdata =
2999 container_of(work, struct ieee80211_sub_if_data,
3000 csa_finalize_work);
59af6928 3001 struct ieee80211_local *local = sdata->local;
66e01cf9
LC		 3002
3003 sdata_lock(sdata);
59af6928 3004 mutex_lock(&local->mtx);
03078de4 3005 mutex_lock(&local->chanctx_mtx);
59af6928 3006
66e01cf9
LC		 3007 /* AP might have been stopped while waiting for the lock. */
3008 if (!sdata->vif.csa_active)
3009 goto unlock;
3010
3011 if (!ieee80211_sdata_running(sdata))
3012 goto unlock;
3013
3014 ieee80211_csa_finalize(sdata);
e487eaeb
SW		 3015
3016unlock:
03078de4 3017 mutex_unlock(&local->chanctx_mtx);
59af6928 3018 mutex_unlock(&local->mtx);
e487eaeb 3019 sdata_unlock(sdata);
73da7d5b
SW		 3020}
3021
37fa2bdd
MK		 3022static int ieee80211_set_csa_beacon(struct ieee80211_sub_if_data *sdata,
3023 struct cfg80211_csa_settings *params,
3024 u32 *changed)
73da7d5b 3025{
af296bdb 3026 struct ieee80211_csa_settings csa = {};
37fa2bdd 3027 int err;
73da7d5b 3028
73da7d5b
SW		 3029 switch (sdata->vif.type) {
3030 case NL80211_IFTYPE_AP:
cd7760e6
SW		 3031 sdata->u.ap.next_beacon =
3032 cfg80211_beacon_dup(&params->beacon_after);
3033 if (!sdata->u.ap.next_beacon)
3034 return -ENOMEM;
3035
66e01cf9
LC		 3036 /*
3037 * With a count of 0, we don't have to wait for any
3038 * TBTT before switching, so complete the CSA
3039 * immediately. In theory, with a count == 1 we
3040 * should delay the switch until just before the next
3041 * TBTT, but that would complicate things so we switch
3042 * immediately too. If we would delay the switch
3043 * until the next TBTT, we would have to set the probe
3044 * response here.
3045 *
3046 * TODO: A channel switch with count <= 1 without
3047 * sending a CSA action frame is kind of useless,
3048 * because the clients won't know we're changing
3049 * channels. The action frame must be implemented
3050 * either here or in the userspace.
3051 */
3052 if (params->count <= 1)
3053 break;
3054
0d06d9ba
AO		 3055 if ((params->n_counter_offsets_beacon >
3056 IEEE80211_MAX_CSA_COUNTERS_NUM) ||
3057 (params->n_counter_offsets_presp >
3058 IEEE80211_MAX_CSA_COUNTERS_NUM))
3059 return -EINVAL;
9a774c78 3060
af296bdb
MK		 3061 csa.counter_offsets_beacon = params->counter_offsets_beacon;
3062 csa.counter_offsets_presp = params->counter_offsets_presp;
3063 csa.n_counter_offsets_beacon = params->n_counter_offsets_beacon;
3064 csa.n_counter_offsets_presp = params->n_counter_offsets_presp;
3065 csa.count = params->count;
9a774c78 3066
af296bdb 3067 err = ieee80211_assign_beacon(sdata, &params->beacon_csa, &csa);
cd7760e6
SW		 3068 if (err < 0) {
3069 kfree(sdata->u.ap.next_beacon);
3070 return err;
3071 }
37fa2bdd 3072 *changed |= err;
66e01cf9 3073
cd7760e6
SW		 3074 break;
3075 case NL80211_IFTYPE_ADHOC:
3076 if (!sdata->vif.bss_conf.ibss_joined)
3077 return -EINVAL;
3078
3079 if (params->chandef.width != sdata->u.ibss.chandef.width)
3080 return -EINVAL;
3081
3082 switch (params->chandef.width) {
3083 case NL80211_CHAN_WIDTH_40:
3084 if (cfg80211_get_chandef_type(&params->chandef) !=
3085 cfg80211_get_chandef_type(&sdata->u.ibss.chandef))
3086 return -EINVAL;
3087 case NL80211_CHAN_WIDTH_5:
3088 case NL80211_CHAN_WIDTH_10:
3089 case NL80211_CHAN_WIDTH_20_NOHT:
3090 case NL80211_CHAN_WIDTH_20:
3091 break;
3092 default:
3093 return -EINVAL;
3094 }
3095
3096 /* changes into another band are not supported */
3097 if (sdata->u.ibss.chandef.chan->band !=
3098 params->chandef.chan->band)
3099 return -EINVAL;
3100
66e01cf9
LC		 3101 /* see comments in the NL80211_IFTYPE_AP block */
3102 if (params->count > 1) {
3103 err = ieee80211_ibss_csa_beacon(sdata, params);
3104 if (err < 0)
3105 return err;
37fa2bdd 3106 *changed |= err;
66e01cf9
LC		 3107 }
3108
3109 ieee80211_send_action_csa(sdata, params);
3110
73da7d5b 3111 break;
c6da674a 3112#ifdef CONFIG_MAC80211_MESH
37fa2bdd
MK		 3113 case NL80211_IFTYPE_MESH_POINT: {
3114 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
c6da674a 3115
c6da674a
CYY		 3116 if (params->chandef.width != sdata->vif.bss_conf.chandef.width)
3117 return -EINVAL;
3118
3119 /* changes into another band are not supported */
3120 if (sdata->vif.bss_conf.chandef.chan->band !=
3121 params->chandef.chan->band)
3122 return -EINVAL;
3123
c782bf8c 3124 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_NONE) {
0cb4d4dc 3125 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_INIT;
c782bf8c
CYY		 3126 if (!ifmsh->pre_value)
3127 ifmsh->pre_value = 1;
3128 else
3129 ifmsh->pre_value++;
3130 }
0cb4d4dc 3131
66e01cf9
LC		 3132 /* see comments in the NL80211_IFTYPE_AP block */
3133 if (params->count > 1) {
3134 err = ieee80211_mesh_csa_beacon(sdata, params);
3135 if (err < 0) {
3136 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
3137 return err;
3138 }
37fa2bdd 3139 *changed |= err;
3f718fd8 3140 }
66e01cf9
LC		 3141
3142 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT)
3143 ieee80211_send_action_csa(sdata, params);
3144
c6da674a 3145 break;
37fa2bdd 3146 }
c6da674a 3147#endif
73da7d5b
SW		 3148 default:
3149 return -EOPNOTSUPP;
3150 }
3151
37fa2bdd
MK		 3152 return 0;
3153}
3154
f29f58a9
LC		 3155static int
3156__ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3157 struct cfg80211_csa_settings *params)
37fa2bdd
MK		 3158{
3159 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3160 struct ieee80211_local *local = sdata->local;
6d027bcc 3161 struct ieee80211_channel_switch ch_switch;
2b32713d 3162 struct ieee80211_chanctx_conf *conf;
37fa2bdd 3163 struct ieee80211_chanctx *chanctx;
b08cc24e
JB		 3164 u32 changed = 0;
3165 int err;
37fa2bdd
MK		 3166
3167 sdata_assert_lock(sdata);
59af6928 3168 lockdep_assert_held(&local->mtx);
37fa2bdd
MK		 3169
3170 if (!list_empty(&local->roc_list) || local->scanning)
3171 return -EBUSY;
3172
3173 if (sdata->wdev.cac_started)
3174 return -EBUSY;
3175
3176 if (cfg80211_chandef_identical(&params->chandef,
3177 &sdata->vif.bss_conf.chandef))
3178 return -EINVAL;
3179
03078de4
MK		 3180 /* don't allow another channel switch if one is already active. */
3181 if (sdata->vif.csa_active)
3182 return -EBUSY;
3183
2b32713d
MK		 3184 mutex_lock(&local->chanctx_mtx);
3185 conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
3186 lockdep_is_held(&local->chanctx_mtx));
3187 if (!conf) {
03078de4
MK		 3188 err = -EBUSY;
3189 goto out;
37fa2bdd
MK		 3190 }
3191
2b32713d 3192 chanctx = container_of(conf, struct ieee80211_chanctx, conf);
03078de4
MK		 3193 if (!chanctx) {
3194 err = -EBUSY;
3195 goto out;
37fa2bdd 3196 }
37fa2bdd 3197
000baa5d
LC		 3198 ch_switch.timestamp = 0;
3199 ch_switch.device_timestamp = 0;
3200 ch_switch.block_tx = params->block_tx;
3201 ch_switch.chandef = params->chandef;
3202 ch_switch.count = params->count;
3203
6d027bcc
LC		 3204 err = drv_pre_channel_switch(sdata, &ch_switch);
3205 if (err)
3206 goto out;
3207
03078de4
MK		 3208 err = ieee80211_vif_reserve_chanctx(sdata, &params->chandef,
3209 chanctx->mode,
3210 params->radar_required);
3211 if (err)
3212 goto out;
37fa2bdd 3213
03078de4
MK		 3214 /* if reservation is invalid then this will fail */
3215 err = ieee80211_check_combinations(sdata, NULL, chanctx->mode, 0);
3216 if (err) {
3217 ieee80211_vif_unreserve_chanctx(sdata);
3218 goto out;
3219 }
37fa2bdd
MK		 3220
3221 err = ieee80211_set_csa_beacon(sdata, params, &changed);
03078de4
MK		 3222 if (err) {
3223 ieee80211_vif_unreserve_chanctx(sdata);
3224 goto out;
3225 }
37fa2bdd 3226
33787fc4 3227 sdata->csa_chandef = params->chandef;
59af6928 3228 sdata->csa_block_tx = params->block_tx;
73da7d5b
SW		 3229 sdata->vif.csa_active = true;
3230
59af6928 3231 if (sdata->csa_block_tx)
a46992b4
LC		 3232 ieee80211_stop_vif_queues(local, sdata,
3233 IEEE80211_QUEUE_STOP_REASON_CSA);
59af6928 3234
2f457293
LC		 3235 cfg80211_ch_switch_started_notify(sdata->dev, &sdata->csa_chandef,
3236 params->count);
3237
66e01cf9
LC		 3238 if (changed) {
3239 ieee80211_bss_info_change_notify(sdata, changed);
3240 drv_channel_switch_beacon(sdata, &params->chandef);
3241 } else {
3242 /* if the beacon didn't change, we can finalize immediately */
3243 ieee80211_csa_finalize(sdata);
3244 }
73da7d5b 3245
03078de4
MK		 3246out:
3247 mutex_unlock(&local->chanctx_mtx);
3248 return err;
73da7d5b
SW		 3249}
3250
59af6928
MK		 3251int ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3252 struct cfg80211_csa_settings *params)
3253{
3254 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3255 struct ieee80211_local *local = sdata->local;
3256 int err;
3257
3258 mutex_lock(&local->mtx);
3259 err = __ieee80211_channel_switch(wiphy, dev, params);
3260 mutex_unlock(&local->mtx);
3261
3262 return err;
3263}
3264
3b79af97
JB		 3265static struct sk_buff *ieee80211_make_ack_skb(struct ieee80211_local *local,
3266 struct sk_buff *skb, u64 *cookie,
3267 gfp_t gfp)
3268{
3269 unsigned long spin_flags;
3270 struct sk_buff *ack_skb;
3271 int id;
3272
3273 ack_skb = skb_copy(skb, gfp);
3274 if (!ack_skb)
3275 return ERR_PTR(-ENOMEM);
3276
3277 spin_lock_irqsave(&local->ack_status_lock, spin_flags);
3278 id = idr_alloc(&local->ack_status_frames, ack_skb,
3279 1, 0x10000, GFP_ATOMIC);
3280 spin_unlock_irqrestore(&local->ack_status_lock, spin_flags);
3281
3282 if (id < 0) {
3283 kfree_skb(ack_skb);
3284 return ERR_PTR(-ENOMEM);
3285 }
3286
3287 IEEE80211_SKB_CB(skb)->ack_frame_id = id;
3288
3289 *cookie = ieee80211_mgmt_tx_cookie(local);
3290 IEEE80211_SKB_CB(ack_skb)->ack.cookie = *cookie;
3291
3292 return ack_skb;
3293}
3294
71bbc994 3295static int ieee80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
b176e629
AO		 3296 struct cfg80211_mgmt_tx_params *params,
3297 u64 *cookie)
026331c4 3298{
71bbc994 3299 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
9d38d85d 3300 struct ieee80211_local *local = sdata->local;
b2eb0ee6 3301 struct sk_buff *skb, *ack_skb;
9d38d85d 3302 struct sta_info *sta;
b176e629 3303 const struct ieee80211_mgmt *mgmt = (void *)params->buf;
2eb278e0 3304 bool need_offchan = false;
e247bd90 3305 u32 flags;
2eb278e0 3306 int ret;
387910cc 3307 u8 *data;
f7ca38df 3308
b176e629 3309 if (params->dont_wait_for_ack)
e247bd90
JB		 3310 flags = IEEE80211_TX_CTL_NO_ACK;
3311 else
3312 flags = IEEE80211_TX_INTFL_NL80211_FRAME_TX |
3313 IEEE80211_TX_CTL_REQ_TX_STATUS;
3314
b176e629 3315 if (params->no_cck)
aad14ceb
RM		 3316 flags |= IEEE80211_TX_CTL_NO_CCK_RATE;
3317
9d38d85d
JB		 3318 switch (sdata->vif.type) {
3319 case NL80211_IFTYPE_ADHOC:
2eb278e0
JB		 3320 if (!sdata->vif.bss_conf.ibss_joined)
3321 need_offchan = true;
3322 /* fall through */
3323#ifdef CONFIG_MAC80211_MESH
3324 case NL80211_IFTYPE_MESH_POINT:
3325 if (ieee80211_vif_is_mesh(&sdata->vif) &&
3326 !sdata->u.mesh.mesh_id_len)
3327 need_offchan = true;
3328 /* fall through */
3329#endif
663fcafd
JB		 3330 case NL80211_IFTYPE_AP:
3331 case NL80211_IFTYPE_AP_VLAN:
3332 case NL80211_IFTYPE_P2P_GO:
2eb278e0
JB		 3333 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
3334 !ieee80211_vif_is_mesh(&sdata->vif) &&
3335 !rcu_access_pointer(sdata->bss->beacon))
3336 need_offchan = true;
663fcafd 3337 if (!ieee80211_is_action(mgmt->frame_control) ||
ac49e1a8 3338 mgmt->u.action.category == WLAN_CATEGORY_PUBLIC ||
cd7760e6
SW		 3339 mgmt->u.action.category == WLAN_CATEGORY_SELF_PROTECTED ||
3340 mgmt->u.action.category == WLAN_CATEGORY_SPECTRUM_MGMT)
9d38d85d
JB		 3341 break;
3342 rcu_read_lock();
3343 sta = sta_info_get(sdata, mgmt->da);
3344 rcu_read_unlock();
3345 if (!sta)
3346 return -ENOLINK;
3347 break;
3348 case NL80211_IFTYPE_STATION:
663fcafd 3349 case NL80211_IFTYPE_P2P_CLIENT:
b8e69d51
MG		 3350 sdata_lock(sdata);
3351 if (!sdata->u.mgd.associated ||
3352 (params->offchan && params->wait &&
3353 local->ops->remain_on_channel &&
3354 memcmp(sdata->u.mgd.associated->bssid,
3355 mgmt->bssid, ETH_ALEN)))
2eb278e0 3356 need_offchan = true;
b8e69d51 3357 sdata_unlock(sdata);
9d38d85d 3358 break;
f142c6b9
JB		 3359 case NL80211_IFTYPE_P2P_DEVICE:
3360 need_offchan = true;
3361 break;
9d38d85d
JB		 3362 default:
3363 return -EOPNOTSUPP;
3364 }
3365
f7aeb6fb
AQ		 3366 /* configurations requiring offchan cannot work if no channel has been
3367 * specified
3368 */
b176e629 3369 if (need_offchan && !params->chan)
f7aeb6fb
AQ		 3370 return -EINVAL;
3371
2eb278e0
JB		 3372 mutex_lock(&local->mtx);
3373
3374 /* Check if the operating channel is the requested channel */
3375 if (!need_offchan) {
55de908a
JB		 3376 struct ieee80211_chanctx_conf *chanctx_conf;
3377
3378 rcu_read_lock();
3379 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3380
f7aeb6fb 3381 if (chanctx_conf) {
b176e629
AO		 3382 need_offchan = params->chan &&
3383 (params->chan !=
3384 chanctx_conf->def.chan);
3385 } else if (!params->chan) {
f7aeb6fb
AQ		 3386 ret = -EINVAL;
3387 rcu_read_unlock();
3388 goto out_unlock;
3389 } else {
2eb278e0 3390 need_offchan = true;
f7aeb6fb 3391 }
55de908a 3392 rcu_read_unlock();
2eb278e0
JB		 3393 }
3394
b176e629 3395 if (need_offchan && !params->offchan) {
2eb278e0
JB		 3396 ret = -EBUSY;
3397 goto out_unlock;
3398 }
3399
b176e629 3400 skb = dev_alloc_skb(local->hw.extra_tx_headroom + params->len);
2eb278e0
JB		 3401 if (!skb) {
3402 ret = -ENOMEM;
3403 goto out_unlock;
3404 }
9d38d85d
JB		 3405 skb_reserve(skb, local->hw.extra_tx_headroom);
3406
387910cc
AO		 3407 data = skb_put(skb, params->len);
3408 memcpy(data, params->buf, params->len);
3409
3410 /* Update CSA counters */
3411 if (sdata->vif.csa_active &&
3412 (sdata->vif.type == NL80211_IFTYPE_AP ||
8df734e8 3413 sdata->vif.type == NL80211_IFTYPE_MESH_POINT ||
387910cc
AO		 3414 sdata->vif.type == NL80211_IFTYPE_ADHOC) &&
3415 params->n_csa_offsets) {
3416 int i;
af296bdb 3417 struct beacon_data *beacon = NULL;
387910cc 3418
af296bdb
MK		 3419 rcu_read_lock();
3420
3421 if (sdata->vif.type == NL80211_IFTYPE_AP)
3422 beacon = rcu_dereference(sdata->u.ap.beacon);
3423 else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
3424 beacon = rcu_dereference(sdata->u.ibss.presp);
3425 else if (ieee80211_vif_is_mesh(&sdata->vif))
3426 beacon = rcu_dereference(sdata->u.mesh.beacon);
3427
3428 if (beacon)
3429 for (i = 0; i < params->n_csa_offsets; i++)
3430 data[params->csa_offsets[i]] =
3431 beacon->csa_current_counter;
3432
3433 rcu_read_unlock();
387910cc 3434 }
9d38d85d
JB		 3435
3436 IEEE80211_SKB_CB(skb)->flags = flags;
3437
3438 skb->dev = sdata->dev;
9d38d85d 3439
b2eb0ee6 3440 if (!params->dont_wait_for_ack) {
3b79af97 3441 /* make a copy to preserve the frame contents
b2eb0ee6
JB		 3442 * in case of encryption.
3443 */
3b79af97
JB		 3444 ack_skb = ieee80211_make_ack_skb(local, skb, cookie,
3445 GFP_KERNEL);
3446 if (IS_ERR(ack_skb)) {
3447 ret = PTR_ERR(ack_skb);
b2eb0ee6
JB		 3448 kfree_skb(skb);
3449 goto out_unlock;
3450 }
b2eb0ee6 3451 } else {
c1df932c
JB		 3452 /* Assign a dummy non-zero cookie, it's not sent to
3453 * userspace in this case but we rely on its value
3454 * internally in the need_offchan case to distinguish
3455 * mgmt-tx from remain-on-channel.
3456 */
3457 *cookie = 0xffffffff;
b2eb0ee6
JB		 3458 }
3459
2eb278e0 3460 if (!need_offchan) {
f30221e4 3461 ieee80211_tx_skb(sdata, skb);
2eb278e0
JB		 3462 ret = 0;
3463 goto out_unlock;
f30221e4
JB		 3464 }
3465
6c17b77b
SF		 3466 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_TX_OFFCHAN |
3467 IEEE80211_TX_INTFL_OFFCHAN_TX_OK;
30686bf7 3468 if (ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
2eb278e0
JB		 3469 IEEE80211_SKB_CB(skb)->hw_queue =
3470 local->hw.offchannel_tx_hw_queue;
f30221e4 3471
2eb278e0 3472 /* This will handle all kinds of coalescing and immediate TX */
b176e629
AO		 3473 ret = ieee80211_start_roc_work(local, sdata, params->chan,
3474 params->wait, cookie, skb,
d339d5ca 3475 IEEE80211_ROC_TYPE_MGMT_TX);
2eb278e0 3476 if (ret)
86c7ec9e 3477 ieee80211_free_txskb(&local->hw, skb);
2eb278e0
JB		 3478 out_unlock:
3479 mutex_unlock(&local->mtx);
3480 return ret;
026331c4
JM		 3481}
3482
f30221e4 3483static int ieee80211_mgmt_tx_cancel_wait(struct wiphy *wiphy,
71bbc994 3484 struct wireless_dev *wdev,
f30221e4
JB		 3485 u64 cookie)
3486{
71bbc994 3487 struct ieee80211_local *local = wiphy_priv(wiphy);
f30221e4 3488
2eb278e0 3489 return ieee80211_cancel_roc(local, cookie, true);
f30221e4
JB		 3490}
3491
7be5086d 3492static void ieee80211_mgmt_frame_register(struct wiphy *wiphy,
71bbc994 3493 struct wireless_dev *wdev,
7be5086d
JB		 3494 u16 frame_type, bool reg)
3495{
3496 struct ieee80211_local *local = wiphy_priv(wiphy);
1b09b556 3497 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
7be5086d 3498
6abe0563 3499 switch (frame_type) {
6abe0563 3500 case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ:
1b09b556 3501 if (reg) {
6abe0563 3502 local->probe_req_reg++;
1b09b556
AO		 3503 sdata->vif.probe_req_reg++;
3504 } else {
3505 if (local->probe_req_reg)
3506 local->probe_req_reg--;
3507
3508 if (sdata->vif.probe_req_reg)
3509 sdata->vif.probe_req_reg--;
3510 }
7be5086d 3511
35f5149e
FF		 3512 if (!local->open_count)
3513 break;
3514
1b09b556
AO		 3515 if (sdata->vif.probe_req_reg == 1)
3516 drv_config_iface_filter(local, sdata, FIF_PROBE_REQ,
3517 FIF_PROBE_REQ);
3518 else if (sdata->vif.probe_req_reg == 0)
3519 drv_config_iface_filter(local, sdata, 0,
3520 FIF_PROBE_REQ);
3521
3522 ieee80211_configure_filter(local);
6abe0563
WH		 3523 break;
3524 default:
3525 break;
3526 }
7be5086d
JB		 3527}
3528
15d96753
BR		 3529static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant)
3530{
3531 struct ieee80211_local *local = wiphy_priv(wiphy);
3532
3533 if (local->started)
3534 return -EOPNOTSUPP;
3535
3536 return drv_set_antenna(local, tx_ant, rx_ant);
3537}
3538
3539static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant)
3540{
3541 struct ieee80211_local *local = wiphy_priv(wiphy);
3542
3543 return drv_get_antenna(local, tx_ant, rx_ant);
3544}
3545
c68f4b89
JB		 3546static int ieee80211_set_rekey_data(struct wiphy *wiphy,
3547 struct net_device *dev,
3548 struct cfg80211_gtk_rekey_data *data)
3549{
3550 struct ieee80211_local *local = wiphy_priv(wiphy);
3551 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3552
3553 if (!local->ops->set_rekey_data)
3554 return -EOPNOTSUPP;
3555
3556 drv_set_rekey_data(local, sdata, data);
3557
3558 return 0;
3559}
3560
06500736
JB		 3561static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev,
3562 const u8 *peer, u64 *cookie)
3563{
3564 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3565 struct ieee80211_local *local = sdata->local;
3566 struct ieee80211_qos_hdr *nullfunc;
3b79af97 3567 struct sk_buff *skb, *ack_skb;
06500736
JB		 3568 int size = sizeof(*nullfunc);
3569 __le16 fc;
3570 bool qos;
3571 struct ieee80211_tx_info *info;
3572 struct sta_info *sta;
55de908a
JB		 3573 struct ieee80211_chanctx_conf *chanctx_conf;
3574 enum ieee80211_band band;
3b79af97
JB		 3575 int ret;
3576
3577 /* the lock is needed to assign the cookie later */
3578 mutex_lock(&local->mtx);
06500736
JB		 3579
3580 rcu_read_lock();
55de908a
JB		 3581 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3582 if (WARN_ON(!chanctx_conf)) {
3b79af97
JB		 3583 ret = -EINVAL;
3584 goto unlock;
55de908a 3585 }
4bf88530 3586 band = chanctx_conf->def.chan->band;
03bb7f42 3587 sta = sta_info_get_bss(sdata, peer);
b4487c2d 3588 if (sta) {
a74a8c84 3589 qos = sta->sta.wme;
b4487c2d 3590 } else {
3b79af97
JB		 3591 ret = -ENOLINK;
3592 goto unlock;
b4487c2d 3593 }
06500736
JB		 3594
3595 if (qos) {
3596 fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3597 IEEE80211_STYPE_QOS_NULLFUNC |
3598 IEEE80211_FCTL_FROMDS);
3599 } else {
3600 size -= 2;
3601 fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3602 IEEE80211_STYPE_NULLFUNC |
3603 IEEE80211_FCTL_FROMDS);
3604 }
3605
3606 skb = dev_alloc_skb(local->hw.extra_tx_headroom + size);
55de908a 3607 if (!skb) {
3b79af97
JB		 3608 ret = -ENOMEM;
3609 goto unlock;
55de908a 3610 }
06500736
JB		 3611
3612 skb->dev = dev;
3613
3614 skb_reserve(skb, local->hw.extra_tx_headroom);
3615
3616 nullfunc = (void *) skb_put(skb, size);
3617 nullfunc->frame_control = fc;
3618 nullfunc->duration_id = 0;
3619 memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
3620 memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
3621 memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN);
3622 nullfunc->seq_ctrl = 0;
3623
3624 info = IEEE80211_SKB_CB(skb);
3625
3626 info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS |
3627 IEEE80211_TX_INTFL_NL80211_FRAME_TX;
73c4e195 3628 info->band = band;
06500736
JB		 3629
3630 skb_set_queue_mapping(skb, IEEE80211_AC_VO);
3631 skb->priority = 7;
3632 if (qos)
3633 nullfunc->qos_ctrl = cpu_to_le16(7);
3634
3b79af97
JB		 3635 ack_skb = ieee80211_make_ack_skb(local, skb, cookie, GFP_ATOMIC);
3636 if (IS_ERR(ack_skb)) {
3637 kfree_skb(skb);
3638 ret = PTR_ERR(ack_skb);
3639 goto unlock;
3640 }
3641
06500736 3642 local_bh_disable();
7c10770f 3643 ieee80211_xmit(sdata, sta, skb);
06500736 3644 local_bh_enable();
3b79af97
JB		 3645
3646 ret = 0;
3647unlock:
55de908a 3648 rcu_read_unlock();
3b79af97 3649 mutex_unlock(&local->mtx);
06500736 3650
3b79af97 3651 return ret;
06500736
JB		 3652}
3653
683b6d3b
JB		 3654static int ieee80211_cfg_get_channel(struct wiphy *wiphy,
3655 struct wireless_dev *wdev,
3656 struct cfg80211_chan_def *chandef)
5b7ccaf3 3657{
55de908a 3658 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
cb601ffa 3659 struct ieee80211_local *local = wiphy_priv(wiphy);
55de908a 3660 struct ieee80211_chanctx_conf *chanctx_conf;
683b6d3b 3661 int ret = -ENODATA;
55de908a
JB		 3662
3663 rcu_read_lock();
feda3027
JB		 3664 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3665 if (chanctx_conf) {
c12bc488 3666 *chandef = sdata->vif.bss_conf.chandef;
feda3027
JB		 3667 ret = 0;
3668 } else if (local->open_count > 0 &&
3669 local->open_count == local->monitors &&
3670 sdata->vif.type == NL80211_IFTYPE_MONITOR) {
3671 if (local->use_chanctx)
3672 *chandef = local->monitor_chandef;
3673 else
675a0b04 3674 *chandef = local->_oper_chandef;
683b6d3b 3675 ret = 0;
55de908a
JB		 3676 }
3677 rcu_read_unlock();
5b7ccaf3 3678
683b6d3b 3679 return ret;
5b7ccaf3
JB		 3680}
3681
6d52563f
JB		 3682#ifdef CONFIG_PM
3683static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled)
3684{
3685 drv_set_wakeup(wiphy_priv(wiphy), enabled);
3686}
3687#endif
3688
32db6b54
KP		 3689static int ieee80211_set_qos_map(struct wiphy *wiphy,
3690 struct net_device *dev,
3691 struct cfg80211_qos_map *qos_map)
3692{
3693 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3694 struct mac80211_qos_map *new_qos_map, *old_qos_map;
3695
3696 if (qos_map) {
3697 new_qos_map = kzalloc(sizeof(*new_qos_map), GFP_KERNEL);
3698 if (!new_qos_map)
3699 return -ENOMEM;
3700 memcpy(&new_qos_map->qos_map, qos_map, sizeof(*qos_map));
3701 } else {
3702 /* A NULL qos_map was passed to disable QoS mapping */
3703 new_qos_map = NULL;
3704 }
3705
194ff52d 3706 old_qos_map = sdata_dereference(sdata->qos_map, sdata);
32db6b54
KP		 3707 rcu_assign_pointer(sdata->qos_map, new_qos_map);
3708 if (old_qos_map)
3709 kfree_rcu(old_qos_map, rcu_head);
3710
3711 return 0;
3712}
3713
3b1700bd
JM		 3714static int ieee80211_set_ap_chanwidth(struct wiphy *wiphy,
3715 struct net_device *dev,
3716 struct cfg80211_chan_def *chandef)
3717{
3718 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3719 int ret;
3720 u32 changed = 0;
3721
3722 ret = ieee80211_vif_change_bandwidth(sdata, chandef, &changed);
3723 if (ret == 0)
3724 ieee80211_bss_info_change_notify(sdata, changed);
3725
3726 return ret;
3727}
3728
02219b3a
JB		 3729static int ieee80211_add_tx_ts(struct wiphy *wiphy, struct net_device *dev,
3730 u8 tsid, const u8 *peer, u8 up,
3731 u16 admitted_time)
3732{
3733 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3734 struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
3735 int ac = ieee802_1d_to_ac[up];
3736
3737 if (sdata->vif.type != NL80211_IFTYPE_STATION)
3738 return -EOPNOTSUPP;
3739
3740 if (!(sdata->wmm_acm & BIT(up)))
3741 return -EINVAL;
3742
3743 if (ifmgd->tx_tspec[ac].admitted_time)
3744 return -EBUSY;
3745
3746 if (admitted_time) {
3747 ifmgd->tx_tspec[ac].admitted_time = 32 * admitted_time;
3748 ifmgd->tx_tspec[ac].tsid = tsid;
3749 ifmgd->tx_tspec[ac].up = up;
3750 }
3751
3752 return 0;
3753}
3754
3755static int ieee80211_del_tx_ts(struct wiphy *wiphy, struct net_device *dev,
3756 u8 tsid, const u8 *peer)
3757{
3758 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3759 struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
3760 struct ieee80211_local *local = wiphy_priv(wiphy);
3761 int ac;
3762
3763 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
3764 struct ieee80211_sta_tx_tspec *tx_tspec = &ifmgd->tx_tspec[ac];
3765
3766 /* skip unused entries */
3767 if (!tx_tspec->admitted_time)
3768 continue;
3769
3770 if (tx_tspec->tsid != tsid)
3771 continue;
3772
3773 /* due to this new packets will be reassigned to non-ACM ACs */
3774 tx_tspec->up = -1;
3775
3776 /* Make sure that all packets have been sent to avoid to
3777 * restore the QoS params on packets that are still on the
3778 * queues.
3779 */
3780 synchronize_net();
3b24f4c6 3781 ieee80211_flush_queues(local, sdata, false);
02219b3a
JB		 3782
3783 /* restore the normal QoS parameters
3784 * (unconditionally to avoid races)
3785 */
3786 tx_tspec->action = TX_TSPEC_ACTION_STOP_DOWNGRADE;
3787 tx_tspec->downgraded = false;
3788 ieee80211_sta_handle_tspec_ac_params(sdata);
3789
3790 /* finally clear all the data */
3791 memset(tx_tspec, 0, sizeof(*tx_tspec));
3792
3793 return 0;
3794 }
3795
3796 return -ENOENT;
3797}
3798
8a47cea7 3799const struct cfg80211_ops mac80211_config_ops = {
f0706e82
JB		 3800 .add_virtual_intf = ieee80211_add_iface,
3801 .del_virtual_intf = ieee80211_del_iface,
42613db7 3802 .change_virtual_intf = ieee80211_change_iface,
f142c6b9
JB		 3803 .start_p2p_device = ieee80211_start_p2p_device,
3804 .stop_p2p_device = ieee80211_stop_p2p_device,
e8cbb4cb
JB		 3805 .add_key = ieee80211_add_key,
3806 .del_key = ieee80211_del_key,
62da92fb 3807 .get_key = ieee80211_get_key,
e8cbb4cb 3808 .set_default_key = ieee80211_config_default_key,
3cfcf6ac 3809 .set_default_mgmt_key = ieee80211_config_default_mgmt_key,
8860020e
JB		 3810 .start_ap = ieee80211_start_ap,
3811 .change_beacon = ieee80211_change_beacon,
3812 .stop_ap = ieee80211_stop_ap,
4fd6931e
JB		 3813 .add_station = ieee80211_add_station,
3814 .del_station = ieee80211_del_station,
3815 .change_station = ieee80211_change_station,
7bbdd2d9 3816 .get_station = ieee80211_get_station,
c5dd9c2b 3817 .dump_station = ieee80211_dump_station,
1289723e 3818 .dump_survey = ieee80211_dump_survey,
c5dd9c2b
LCC		 3819#ifdef CONFIG_MAC80211_MESH
3820 .add_mpath = ieee80211_add_mpath,
3821 .del_mpath = ieee80211_del_mpath,
3822 .change_mpath = ieee80211_change_mpath,
3823 .get_mpath = ieee80211_get_mpath,
3824 .dump_mpath = ieee80211_dump_mpath,
a2db2ed3
HR		 3825 .get_mpp = ieee80211_get_mpp,
3826 .dump_mpp = ieee80211_dump_mpp,
24bdd9f4
JC		 3827 .update_mesh_config = ieee80211_update_mesh_config,
3828 .get_mesh_config = ieee80211_get_mesh_config,
29cbe68c
JB		 3829 .join_mesh = ieee80211_join_mesh,
3830 .leave_mesh = ieee80211_leave_mesh,
c5dd9c2b 3831#endif
239281f8
RL		 3832 .join_ocb = ieee80211_join_ocb,
3833 .leave_ocb = ieee80211_leave_ocb,
9f1ba906 3834 .change_bss = ieee80211_change_bss,
31888487 3835 .set_txq_params = ieee80211_set_txq_params,
e8c9bd5b 3836 .set_monitor_channel = ieee80211_set_monitor_channel,
665af4fc
BC		 3837 .suspend = ieee80211_suspend,
3838 .resume = ieee80211_resume,
2a519311 3839 .scan = ieee80211_scan,
91f123f2 3840 .abort_scan = ieee80211_abort_scan,
79f460ca
LC		 3841 .sched_scan_start = ieee80211_sched_scan_start,
3842 .sched_scan_stop = ieee80211_sched_scan_stop,
636a5d36
JM		 3843 .auth = ieee80211_auth,
3844 .assoc = ieee80211_assoc,
3845 .deauth = ieee80211_deauth,
3846 .disassoc = ieee80211_disassoc,
af8cdcd8
JB		 3847 .join_ibss = ieee80211_join_ibss,
3848 .leave_ibss = ieee80211_leave_ibss,
391e53e3 3849 .set_mcast_rate = ieee80211_set_mcast_rate,
b9a5f8ca 3850 .set_wiphy_params = ieee80211_set_wiphy_params,
7643a2c3
JB		 3851 .set_tx_power = ieee80211_set_tx_power,
3852 .get_tx_power = ieee80211_get_tx_power,
ab737a4f 3853 .set_wds_peer = ieee80211_set_wds_peer,
1f87f7d3 3854 .rfkill_poll = ieee80211_rfkill_poll,
aff89a9b 3855 CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd)
71063f0e 3856 CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump)
bc92afd9 3857 .set_power_mgmt = ieee80211_set_power_mgmt,
9930380f 3858 .set_bitrate_mask = ieee80211_set_bitrate_mask,
b8bc4b0a
JB		 3859 .remain_on_channel = ieee80211_remain_on_channel,
3860 .cancel_remain_on_channel = ieee80211_cancel_remain_on_channel,
2e161f78 3861 .mgmt_tx = ieee80211_mgmt_tx,
f30221e4 3862 .mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait,
a97c13c3 3863 .set_cqm_rssi_config = ieee80211_set_cqm_rssi_config,
7be5086d 3864 .mgmt_frame_register = ieee80211_mgmt_frame_register,
15d96753
BR		 3865 .set_antenna = ieee80211_set_antenna,
3866 .get_antenna = ieee80211_get_antenna,
c68f4b89 3867 .set_rekey_data = ieee80211_set_rekey_data,
dfe018bf
AN		 3868 .tdls_oper = ieee80211_tdls_oper,
3869 .tdls_mgmt = ieee80211_tdls_mgmt,
a7a6bdd0
AN		 3870 .tdls_channel_switch = ieee80211_tdls_channel_switch,
3871 .tdls_cancel_channel_switch = ieee80211_tdls_cancel_channel_switch,
06500736 3872 .probe_client = ieee80211_probe_client,
b53be792 3873 .set_noack_map = ieee80211_set_noack_map,
6d52563f
JB		 3874#ifdef CONFIG_PM
3875 .set_wakeup = ieee80211_set_wakeup,
3876#endif
5b7ccaf3 3877 .get_channel = ieee80211_cfg_get_channel,
164eb02d 3878 .start_radar_detection = ieee80211_start_radar_detection,
73da7d5b 3879 .channel_switch = ieee80211_channel_switch,
32db6b54 3880 .set_qos_map = ieee80211_set_qos_map,
3b1700bd 3881 .set_ap_chanwidth = ieee80211_set_ap_chanwidth,
02219b3a
JB		 3882 .add_tx_ts = ieee80211_add_tx_ts,
3883 .del_tx_ts = ieee80211_del_tx_ts,
f0706e82 3884};
Linux 6.x block layer and io_uring tree(s)