mac80211: don't split remain-on-channel for coalescing
[linux-2.6-block.git] / net / mac80211 / iface.c
CommitLineData
f0706e82 1/*
c5d54fbf 2 * Interface handling
0d143fe1 3 *
f0706e82
JB
4 * Copyright 2002-2005, Instant802 Networks, Inc.
5 * Copyright 2005-2006, Devicescape Software, Inc.
6 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
75636525 7 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
d98ad83e 8 * Copyright 2013-2014 Intel Mobile Communications GmbH
f0706e82
JB
9 *
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2 as
12 * published by the Free Software Foundation.
13 */
5a0e3ad6 14#include <linux/slab.h>
f0706e82
JB
15#include <linux/kernel.h>
16#include <linux/if_arp.h>
17#include <linux/netdevice.h>
18#include <linux/rtnetlink.h>
19#include <net/mac80211.h>
cf0277e7 20#include <net/ieee80211_radiotap.h>
f0706e82
JB
21#include "ieee80211_i.h"
22#include "sta_info.h"
e9f207f0 23#include "debugfs_netdev.h"
ee385855 24#include "mesh.h"
0d143fe1 25#include "led.h"
24487981 26#include "driver-ops.h"
cf0277e7 27#include "wme.h"
1be7fe8d 28#include "rate.h"
0d143fe1 29
c771c9d8
JB
30/**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL
37 * (2) modifications and readers are protected against each other by
38 * the iflist_mtx.
39 * (3) modifications are done in an RCU manner so atomic readers
40 * can traverse the list in RCU-safe blocks.
41 *
42 * As a consequence, reads (traversals) of the list can be protected
43 * by either the RTNL, the iflist_mtx or RCU.
44 */
45
1ea6f9c0
JB
46bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
47{
48 struct ieee80211_chanctx_conf *chanctx_conf;
49 int power;
50
51 rcu_read_lock();
52 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
53 if (!chanctx_conf) {
54 rcu_read_unlock();
55 return false;
56 }
57
0430c883 58 power = ieee80211_chandef_max_power(&chanctx_conf->def);
1ea6f9c0
JB
59 rcu_read_unlock();
60
61 if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
62 power = min(power, sdata->user_power_level);
63
64 if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
65 power = min(power, sdata->ap_power_level);
66
67 if (power != sdata->vif.bss_conf.txpower) {
68 sdata->vif.bss_conf.txpower = power;
69 ieee80211_hw_config(sdata->local, 0);
70 return true;
71 }
72
73 return false;
74}
75
db82d8a9
LB
76void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata,
77 bool update_bss)
1ea6f9c0 78{
db82d8a9 79 if (__ieee80211_recalc_txpower(sdata) || update_bss)
1ea6f9c0
JB
80 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
81}
c771c9d8 82
62a40a15 83static u32 __ieee80211_idle_off(struct ieee80211_local *local)
cc45ae54
JB
84{
85 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
86 return 0;
87
88 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
89 return IEEE80211_CONF_CHANGE_IDLE;
90}
91
62a40a15 92static u32 __ieee80211_idle_on(struct ieee80211_local *local)
cc45ae54
JB
93{
94 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
95 return 0;
96
3b24f4c6 97 ieee80211_flush_queues(local, NULL, false);
cc45ae54
JB
98
99 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
100 return IEEE80211_CONF_CHANGE_IDLE;
101}
102
62a40a15
JB
103static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
104 bool force_active)
cc45ae54 105{
1d5e1266 106 bool working, scanning, active;
cc45ae54 107 unsigned int led_trig_start = 0, led_trig_stop = 0;
cc45ae54 108
cc45ae54
JB
109 lockdep_assert_held(&local->mtx);
110
62a40a15
JB
111 active = force_active ||
112 !list_empty(&local->chanctx_list) ||
113 local->monitors;
cc45ae54 114
1d5e1266
JB
115 working = !local->ops->remain_on_channel &&
116 !list_empty(&local->roc_list);
cc45ae54 117
f1e3e051
JB
118 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
119 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
cc45ae54 120
cc45ae54
JB
121 if (working || scanning)
122 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
123 else
124 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
125
fd0f979a 126 if (active)
cc45ae54
JB
127 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
128 else
129 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
130
131 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
132
fd0f979a 133 if (working || scanning || active)
62a40a15
JB
134 return __ieee80211_idle_off(local);
135 return __ieee80211_idle_on(local);
136}
137
138u32 ieee80211_idle_off(struct ieee80211_local *local)
139{
140 return __ieee80211_recalc_idle(local, true);
141}
142
143void ieee80211_recalc_idle(struct ieee80211_local *local)
144{
145 u32 change = __ieee80211_recalc_idle(local, false);
fd0f979a
JB
146 if (change)
147 ieee80211_hw_config(local, change);
cc45ae54
JB
148}
149
0d143fe1
JB
150static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
151{
09b1426e 152 if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
0d143fe1 153 return -EINVAL;
0d143fe1 154
0d143fe1
JB
155 dev->mtu = new_mtu;
156 return 0;
157}
158
3899ba90 159static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
31eba5bc 160 bool check_dup)
478622e8 161{
ac20976d
HS
162 struct ieee80211_local *local = sdata->local;
163 struct ieee80211_sub_if_data *iter;
478622e8
HS
164 u64 new, mask, tmp;
165 u8 *m;
166 int ret = 0;
167
168 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
169 return 0;
170
171 m = addr;
172 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
173 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
174 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
175
176 m = local->hw.wiphy->addr_mask;
177 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
178 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
179 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
180
31eba5bc
FF
181 if (!check_dup)
182 return ret;
478622e8
HS
183
184 mutex_lock(&local->iflist_mtx);
ac20976d
HS
185 list_for_each_entry(iter, &local->interfaces, list) {
186 if (iter == sdata)
478622e8
HS
187 continue;
188
3899ba90
JL
189 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
190 !(iter->u.mntr_flags & MONITOR_FLAG_ACTIVE))
478622e8
HS
191 continue;
192
ac20976d 193 m = iter->vif.addr;
478622e8
HS
194 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
195 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
196 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
197
198 if ((new & ~mask) != (tmp & ~mask)) {
199 ret = -EINVAL;
200 break;
201 }
202 }
203 mutex_unlock(&local->iflist_mtx);
204
205 return ret;
206}
207
47846c9b
JB
208static int ieee80211_change_mac(struct net_device *dev, void *addr)
209{
210 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
fc5f7577 211 struct sockaddr *sa = addr;
31eba5bc 212 bool check_dup = true;
47846c9b
JB
213 int ret;
214
9607e6b6 215 if (ieee80211_sdata_running(sdata))
47846c9b
JB
216 return -EBUSY;
217
31eba5bc
FF
218 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
219 !(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
220 check_dup = false;
221
3899ba90 222 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
478622e8
HS
223 if (ret)
224 return ret;
225
fc5f7577 226 ret = eth_mac_addr(dev, sa);
47846c9b
JB
227
228 if (ret == 0)
fc5f7577 229 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
47846c9b
JB
230
231 return ret;
232}
233
0d143fe1
JB
234static inline int identical_mac_addr_allowed(int type1, int type2)
235{
236 return type1 == NL80211_IFTYPE_MONITOR ||
237 type2 == NL80211_IFTYPE_MONITOR ||
f142c6b9
JB
238 type1 == NL80211_IFTYPE_P2P_DEVICE ||
239 type2 == NL80211_IFTYPE_P2P_DEVICE ||
0d143fe1
JB
240 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
241 (type1 == NL80211_IFTYPE_WDS &&
242 (type2 == NL80211_IFTYPE_WDS ||
243 type2 == NL80211_IFTYPE_AP)) ||
244 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
245 (type1 == NL80211_IFTYPE_AP_VLAN &&
246 (type2 == NL80211_IFTYPE_AP ||
247 type2 == NL80211_IFTYPE_AP_VLAN));
248}
249
87490f6d
JB
250static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
251 enum nl80211_iftype iftype)
0d143fe1 252{
b4a4bf5d 253 struct ieee80211_local *local = sdata->local;
87490f6d 254 struct ieee80211_sub_if_data *nsdata;
b6a55015 255 int ret;
0d143fe1 256
87490f6d 257 ASSERT_RTNL();
0d143fe1
JB
258
259 /* we hold the RTNL here so can safely walk the list */
260 list_for_each_entry(nsdata, &local->interfaces, list) {
371a255e 261 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
239281f8
RL
262 /*
263 * Only OCB and monitor mode may coexist
264 */
265 if ((sdata->vif.type == NL80211_IFTYPE_OCB &&
266 nsdata->vif.type != NL80211_IFTYPE_MONITOR) ||
267 (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
268 nsdata->vif.type == NL80211_IFTYPE_OCB))
269 return -EBUSY;
270
0d143fe1
JB
271 /*
272 * Allow only a single IBSS interface to be up at any
273 * time. This is restricted because beacon distribution
274 * cannot work properly if both are in the same IBSS.
275 *
276 * To remove this restriction we'd have to disallow them
277 * from setting the same SSID on different IBSS interfaces
278 * belonging to the same hardware. Then, however, we're
279 * faced with having to adopt two different TSF timers...
280 */
87490f6d 281 if (iftype == NL80211_IFTYPE_ADHOC &&
0d143fe1
JB
282 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
283 return -EBUSY;
73da7d5b
SW
284 /*
285 * will not add another interface while any channel
286 * switch is active.
287 */
288 if (nsdata->vif.csa_active)
289 return -EBUSY;
0d143fe1
JB
290
291 /*
292 * The remaining checks are only performed for interfaces
293 * with the same MAC address.
294 */
371a255e
JB
295 if (!ether_addr_equal(sdata->vif.addr,
296 nsdata->vif.addr))
0d143fe1
JB
297 continue;
298
299 /*
300 * check whether it may have the same address
301 */
87490f6d 302 if (!identical_mac_addr_allowed(iftype,
0d143fe1
JB
303 nsdata->vif.type))
304 return -ENOTUNIQ;
305
306 /*
307 * can only add VLANs to enabled APs
308 */
87490f6d 309 if (iftype == NL80211_IFTYPE_AP_VLAN &&
0d143fe1
JB
310 nsdata->vif.type == NL80211_IFTYPE_AP)
311 sdata->bss = &nsdata->u.ap;
312 }
313 }
314
b6a55015
LC
315 mutex_lock(&local->chanctx_mtx);
316 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
317 mutex_unlock(&local->chanctx_mtx);
318 return ret;
87490f6d
JB
319}
320
a9865538
JB
321static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
322 enum nl80211_iftype iftype)
3a25a8c8
JB
323{
324 int n_queues = sdata->local->hw.queues;
325 int i;
326
a9865538 327 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
0ef24e52
IP
328 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
329 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
330 IEEE80211_INVAL_HW_QUEUE))
331 return -EINVAL;
332 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
333 n_queues))
334 return -EINVAL;
335 }
3a25a8c8
JB
336 }
337
a9865538
JB
338 if ((iftype != NL80211_IFTYPE_AP &&
339 iftype != NL80211_IFTYPE_P2P_GO &&
340 iftype != NL80211_IFTYPE_MESH_POINT) ||
bb3e10fb 341 !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
3a25a8c8
JB
342 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
343 return 0;
344 }
345
346 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
347 return -EINVAL;
348
349 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
350 return -EINVAL;
351
352 return 0;
353}
354
85416a4f
CL
355void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
356 const int offset)
357{
358 struct ieee80211_local *local = sdata->local;
359 u32 flags = sdata->u.mntr_flags;
360
361#define ADJUST(_f, _s) do { \
362 if (flags & MONITOR_FLAG_##_f) \
363 local->fif_##_s += offset; \
364 } while (0)
365
366 ADJUST(FCSFAIL, fcsfail);
367 ADJUST(PLCPFAIL, plcpfail);
368 ADJUST(CONTROL, control);
369 ADJUST(CONTROL, pspoll);
370 ADJUST(OTHER_BSS, other_bss);
371
372#undef ADJUST
373}
374
3a25a8c8
JB
375static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
376{
377 struct ieee80211_local *local = sdata->local;
378 int i;
379
380 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
381 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
382 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
a9d3c05c 383 else if (local->hw.queues >= IEEE80211_NUM_ACS)
3a25a8c8 384 sdata->vif.hw_queue[i] = i;
a9d3c05c
JB
385 else
386 sdata->vif.hw_queue[i] = 0;
3a25a8c8
JB
387 }
388 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
389}
390
3c3e21e7 391int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
4b6f1dd6
JB
392{
393 struct ieee80211_sub_if_data *sdata;
8b305780 394 int ret;
4b6f1dd6
JB
395
396 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
397 return 0;
398
8b305780 399 ASSERT_RTNL();
685fb72b 400
4b6f1dd6 401 if (local->monitor_sdata)
8b305780 402 return 0;
4b6f1dd6
JB
403
404 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
8b305780
JB
405 if (!sdata)
406 return -ENOMEM;
4b6f1dd6
JB
407
408 /* set up data */
409 sdata->local = local;
410 sdata->vif.type = NL80211_IFTYPE_MONITOR;
411 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
412 wiphy_name(local->hw.wiphy));
34171dc0 413 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
4b6f1dd6 414
2475b1cc
MS
415 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
416
3a25a8c8
JB
417 ieee80211_set_default_queues(sdata);
418
4b6f1dd6
JB
419 ret = drv_add_interface(local, sdata);
420 if (WARN_ON(ret)) {
421 /* ok .. stupid driver, it asked for this! */
422 kfree(sdata);
8b305780 423 return ret;
4b6f1dd6
JB
424 }
425
a9865538 426 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
3a25a8c8
JB
427 if (ret) {
428 kfree(sdata);
8b305780 429 return ret;
3a25a8c8
JB
430 }
431
fab57a6c
JB
432 mutex_lock(&local->iflist_mtx);
433 rcu_assign_pointer(local->monitor_sdata, sdata);
434 mutex_unlock(&local->iflist_mtx);
435
34a3740d 436 mutex_lock(&local->mtx);
4bf88530 437 ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
55de908a 438 IEEE80211_CHANCTX_EXCLUSIVE);
34a3740d 439 mutex_unlock(&local->mtx);
55de908a 440 if (ret) {
fab57a6c 441 mutex_lock(&local->iflist_mtx);
0c2bef46 442 RCU_INIT_POINTER(local->monitor_sdata, NULL);
fab57a6c
JB
443 mutex_unlock(&local->iflist_mtx);
444 synchronize_net();
55de908a
JB
445 drv_remove_interface(local, sdata);
446 kfree(sdata);
8b305780 447 return ret;
55de908a
JB
448 }
449
8b305780 450 return 0;
4b6f1dd6
JB
451}
452
3c3e21e7 453void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
4b6f1dd6
JB
454{
455 struct ieee80211_sub_if_data *sdata;
456
457 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
458 return;
459
8b305780
JB
460 ASSERT_RTNL();
461
685fb72b 462 mutex_lock(&local->iflist_mtx);
4b6f1dd6 463
685fb72b
JB
464 sdata = rcu_dereference_protected(local->monitor_sdata,
465 lockdep_is_held(&local->iflist_mtx));
8b305780
JB
466 if (!sdata) {
467 mutex_unlock(&local->iflist_mtx);
468 return;
469 }
4b6f1dd6 470
0c2bef46 471 RCU_INIT_POINTER(local->monitor_sdata, NULL);
8b305780
JB
472 mutex_unlock(&local->iflist_mtx);
473
4b6f1dd6
JB
474 synchronize_net();
475
34a3740d 476 mutex_lock(&local->mtx);
55de908a 477 ieee80211_vif_release_channel(sdata);
34a3740d 478 mutex_unlock(&local->mtx);
55de908a 479
4b6f1dd6
JB
480 drv_remove_interface(local, sdata);
481
482 kfree(sdata);
483}
484
34d4bc4d
JB
485/*
486 * NOTE: Be very careful when changing this function, it must NOT return
487 * an error on interface type changes that have been pre-checked, so most
488 * checks should be in ieee80211_check_concurrent_iface.
489 */
f142c6b9 490int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
87490f6d 491{
f142c6b9
JB
492 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
493 struct net_device *dev = wdev->netdev;
87490f6d
JB
494 struct ieee80211_local *local = sdata->local;
495 struct sta_info *sta;
496 u32 changed = 0;
497 int res;
498 u32 hw_reconf_flags = 0;
499
0d143fe1
JB
500 switch (sdata->vif.type) {
501 case NL80211_IFTYPE_WDS:
502 if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
503 return -ENOLINK;
504 break;
665c93a9
JB
505 case NL80211_IFTYPE_AP_VLAN: {
506 struct ieee80211_sub_if_data *master;
507
0d143fe1
JB
508 if (!sdata->bss)
509 return -ENOLINK;
665c93a9 510
4e141dad 511 mutex_lock(&local->mtx);
0d143fe1 512 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
4e141dad 513 mutex_unlock(&local->mtx);
665c93a9
JB
514
515 master = container_of(sdata->bss,
516 struct ieee80211_sub_if_data, u.ap);
517 sdata->control_port_protocol =
518 master->control_port_protocol;
519 sdata->control_port_no_encrypt =
520 master->control_port_no_encrypt;
1351c5d3
JB
521 sdata->vif.cab_queue = master->vif.cab_queue;
522 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
523 sizeof(sdata->vif.hw_queue));
2967e031 524 sdata->vif.bss_conf.chandef = master->vif.bss_conf.chandef;
0d143fe1 525 break;
665c93a9 526 }
0d143fe1
JB
527 case NL80211_IFTYPE_AP:
528 sdata->bss = &sdata->u.ap;
529 break;
530 case NL80211_IFTYPE_MESH_POINT:
0d143fe1
JB
531 case NL80211_IFTYPE_STATION:
532 case NL80211_IFTYPE_MONITOR:
533 case NL80211_IFTYPE_ADHOC:
f142c6b9 534 case NL80211_IFTYPE_P2P_DEVICE:
6e0bd6c3 535 case NL80211_IFTYPE_OCB:
0d143fe1
JB
536 /* no special treatment */
537 break;
538 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 539 case NUM_NL80211_IFTYPES:
2ca27bcf
JB
540 case NL80211_IFTYPE_P2P_CLIENT:
541 case NL80211_IFTYPE_P2P_GO:
0d143fe1
JB
542 /* cannot happen */
543 WARN_ON(1);
544 break;
545 }
546
547 if (local->open_count == 0) {
24487981 548 res = drv_start(local);
0d143fe1
JB
549 if (res)
550 goto err_del_bss;
e8975581
JB
551 /* we're brought up, everything changes */
552 hw_reconf_flags = ~0;
1f87f7d3 553 ieee80211_led_radio(local, true);
67408c8c
JB
554 ieee80211_mod_tpt_led_trig(local,
555 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
0d143fe1
JB
556 }
557
558 /*
bf533e0b
JB
559 * Copy the hopefully now-present MAC address to
560 * this interface, if it has the special null one.
0d143fe1 561 */
f142c6b9 562 if (dev && is_zero_ether_addr(dev->dev_addr)) {
bf533e0b
JB
563 memcpy(dev->dev_addr,
564 local->hw.wiphy->perm_addr,
565 ETH_ALEN);
566 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
567
568 if (!is_valid_ether_addr(dev->dev_addr)) {
4d6c36fa
JB
569 res = -EADDRNOTAVAIL;
570 goto err_stop;
0adc23f5 571 }
0d143fe1
JB
572 }
573
0d143fe1
JB
574 switch (sdata->vif.type) {
575 case NL80211_IFTYPE_AP_VLAN:
4d76d21b
JB
576 /* no need to tell driver, but set carrier and chanctx */
577 if (rtnl_dereference(sdata->bss->beacon)) {
578 ieee80211_vif_vlan_copy_chanctx(sdata);
3edaf3e6 579 netif_carrier_on(dev);
4d76d21b 580 } else {
3edaf3e6 581 netif_carrier_off(dev);
4d76d21b 582 }
0d143fe1
JB
583 break;
584 case NL80211_IFTYPE_MONITOR:
585 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
586 local->cooked_mntrs++;
587 break;
588 }
589
31eba5bc
FF
590 if (sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE) {
591 res = drv_add_interface(local, sdata);
592 if (res)
593 goto err_stop;
594 } else if (local->monitors == 0 && local->open_count == 0) {
075e0847
JB
595 res = ieee80211_add_virtual_monitor(local);
596 if (res)
597 goto err_stop;
598 }
599
0d143fe1
JB
600 /* must be before the call to ieee80211_configure_filter */
601 local->monitors++;
e8975581 602 if (local->monitors == 1) {
0869aea0
JB
603 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
604 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
e8975581 605 }
0d143fe1 606
85416a4f 607 ieee80211_adjust_monitor_flags(sdata, 1);
0d143fe1 608 ieee80211_configure_filter(local);
801d929c
FF
609 mutex_lock(&local->mtx);
610 ieee80211_recalc_idle(local);
611 mutex_unlock(&local->mtx);
53e9b1de
DG
612
613 netif_carrier_on(dev);
0d143fe1 614 break;
0d143fe1 615 default:
34d4bc4d 616 if (coming_up) {
075e0847
JB
617 ieee80211_del_virtual_monitor(local);
618
7b7eab6f 619 res = drv_add_interface(local, sdata);
34d4bc4d
JB
620 if (res)
621 goto err_stop;
a9865538
JB
622 res = ieee80211_check_queues(sdata,
623 ieee80211_vif_type_p2p(&sdata->vif));
3a25a8c8
JB
624 if (res)
625 goto err_del_interface;
34d4bc4d 626 }
0d143fe1 627
29cbe68c 628 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e3b90ca2 629 local->fif_pspoll++;
7be5086d 630 local->fif_probe_req++;
e3b90ca2 631
e3b90ca2 632 ieee80211_configure_filter(local);
7be5086d
JB
633 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
634 local->fif_probe_req++;
a3c9aa51 635 }
e3b90ca2 636
f142c6b9
JB
637 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
638 changed |= ieee80211_reset_erp_info(sdata);
0d143fe1 639 ieee80211_bss_info_change_notify(sdata, changed);
0d143fe1 640
c405c629
JB
641 switch (sdata->vif.type) {
642 case NL80211_IFTYPE_STATION:
643 case NL80211_IFTYPE_ADHOC:
644 case NL80211_IFTYPE_AP:
645 case NL80211_IFTYPE_MESH_POINT:
6e0bd6c3 646 case NL80211_IFTYPE_OCB:
0d143fe1 647 netif_carrier_off(dev);
c405c629 648 break;
1411af15 649 case NL80211_IFTYPE_WDS:
f142c6b9 650 case NL80211_IFTYPE_P2P_DEVICE:
1411af15 651 break;
c405c629 652 default:
a2310824
JB
653 /* not reached */
654 WARN_ON(1);
c405c629 655 }
59034591
EP
656
657 /*
658 * set default queue parameters so drivers don't
659 * need to initialise the hardware if the hardware
660 * doesn't start up with sane defaults
661 */
3abead59 662 ieee80211_set_wmm_default(sdata, true);
0d143fe1
JB
663 }
664
2d2080c3
JB
665 set_bit(SDATA_STATE_RUNNING, &sdata->state);
666
0d143fe1
JB
667 if (sdata->vif.type == NL80211_IFTYPE_WDS) {
668 /* Create STA entry for the WDS peer */
669 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
670 GFP_KERNEL);
671 if (!sta) {
672 res = -ENOMEM;
673 goto err_del_interface;
674 }
675
83d5cc01
JB
676 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
677 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
678 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
0d143fe1
JB
679
680 res = sta_info_insert(sta);
681 if (res) {
682 /* STA has been freed */
683 goto err_del_interface;
684 }
1be7fe8d
BJ
685
686 rate_control_rate_init(sta);
1411af15 687 netif_carrier_on(dev);
f142c6b9
JB
688 } else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
689 rcu_assign_pointer(local->p2p_sdata, sdata);
0d143fe1
JB
690 }
691
0d143fe1
JB
692 /*
693 * set_multicast_list will be invoked by the networking core
694 * which will check whether any increments here were done in
695 * error and sync them down to the hardware as filter flags.
696 */
697 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
698 atomic_inc(&local->iff_allmultis);
699
700 if (sdata->flags & IEEE80211_SDATA_PROMISC)
701 atomic_inc(&local->iff_promiscs);
702
34d4bc4d
JB
703 if (coming_up)
704 local->open_count++;
705
59034591 706 if (hw_reconf_flags)
e8975581 707 ieee80211_hw_config(local, hw_reconf_flags);
0d143fe1 708
10f644a4 709 ieee80211_recalc_ps(local, -1);
965bedad 710
2b436312
JB
711 if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
712 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
713 /* XXX: for AP_VLAN, actually track AP queues */
714 netif_tx_start_all_queues(dev);
715 } else if (dev) {
2b730daa
JB
716 unsigned long flags;
717 int n_acs = IEEE80211_NUM_ACS;
718 int ac;
719
720 if (local->hw.queues < IEEE80211_NUM_ACS)
721 n_acs = 1;
722
723 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
724 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
725 (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
726 skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
727 for (ac = 0; ac < n_acs; ac++) {
728 int ac_queue = sdata->vif.hw_queue[ac];
729
730 if (local->queue_stop_reasons[ac_queue] == 0 &&
731 skb_queue_empty(&local->pending[ac_queue]))
732 netif_start_subqueue(dev, ac);
733 }
734 }
735 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
736 }
0d143fe1
JB
737
738 return 0;
739 err_del_interface:
7b7eab6f 740 drv_remove_interface(local, sdata);
0d143fe1 741 err_stop:
24487981
JB
742 if (!local->open_count)
743 drv_stop(local);
0d143fe1
JB
744 err_del_bss:
745 sdata->bss = NULL;
4e141dad
MK
746 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
747 mutex_lock(&local->mtx);
0d143fe1 748 list_del(&sdata->u.vlan.list);
4e141dad
MK
749 mutex_unlock(&local->mtx);
750 }
4d6c36fa 751 /* might already be clear but that doesn't matter */
2d2080c3 752 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
0d143fe1
JB
753 return res;
754}
755
34d4bc4d 756static int ieee80211_open(struct net_device *dev)
0d143fe1
JB
757{
758 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
34d4bc4d
JB
759 int err;
760
761 /* fail early if user set an invalid address */
2fcf2824 762 if (!is_valid_ether_addr(dev->dev_addr))
34d4bc4d
JB
763 return -EADDRNOTAVAIL;
764
765 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
766 if (err)
767 return err;
768
f142c6b9 769 return ieee80211_do_open(&sdata->wdev, true);
34d4bc4d
JB
770}
771
772static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
773 bool going_down)
774{
0d143fe1 775 struct ieee80211_local *local = sdata->local;
5061b0c2
JB
776 unsigned long flags;
777 struct sk_buff *skb, *tmp;
e8975581 778 u32 hw_reconf_flags = 0;
09f4114e 779 int i, flushed;
397a7a24 780 struct ps_data *ps;
d2859df5 781 struct cfg80211_chan_def chandef;
46238845 782 bool cancel_scan;
0d143fe1 783
c29acf20
RM
784 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
785
46238845
JB
786 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
787 if (cancel_scan)
352ffad6
BC
788 ieee80211_scan_cancel(local);
789
0d143fe1
JB
790 /*
791 * Stop TX on this interface first.
792 */
f142c6b9
JB
793 if (sdata->dev)
794 netif_tx_stop_all_queues(sdata->dev);
0d143fe1 795
c8f994ee 796 ieee80211_roc_purge(local, sdata);
af6b6374 797
8ffcc704
EG
798 switch (sdata->vif.type) {
799 case NL80211_IFTYPE_STATION:
572078be 800 ieee80211_mgd_stop(sdata);
8ffcc704
EG
801 break;
802 case NL80211_IFTYPE_ADHOC:
cd7760e6 803 ieee80211_ibss_stop(sdata);
8ffcc704
EG
804 break;
805 case NL80211_IFTYPE_AP:
806 cancel_work_sync(&sdata->u.ap.request_smps_work);
807 break;
808 default:
809 break;
810 }
cd7760e6 811
0d143fe1
JB
812 /*
813 * Remove all stations associated with this interface.
814 *
815 * This must be done before calling ops->remove_interface()
816 * because otherwise we can later invoke ops->sta_notify()
817 * whenever the STAs are removed, and that invalidates driver
818 * assumptions about always getting a vif pointer that is valid
819 * (because if we remove a STA after ops->remove_interface()
820 * the driver will have removed the vif info already!)
821 *
5eb8f4d7
JB
822 * In WDS mode a station must exist here and be flushed, for
823 * AP_VLANs stations may exist since there's nothing else that
824 * would have removed them, but in other modes there shouldn't
825 * be any stations.
0d143fe1 826 */
d34ba216 827 flushed = sta_info_flush(sdata);
5eb8f4d7
JB
828 WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
829 ((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
830 (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1)));
0d143fe1 831
afdc7c18 832 /* don't count this interface for promisc/allmulti while it is down */
0d143fe1
JB
833 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
834 atomic_dec(&local->iff_allmultis);
835
836 if (sdata->flags & IEEE80211_SDATA_PROMISC)
837 atomic_dec(&local->iff_promiscs);
838
7be5086d 839 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e3b90ca2 840 local->fif_pspoll--;
7be5086d
JB
841 local->fif_probe_req--;
842 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
843 local->fif_probe_req--;
844 }
e3b90ca2 845
f142c6b9
JB
846 if (sdata->dev) {
847 netif_addr_lock_bh(sdata->dev);
848 spin_lock_bh(&local->filter_lock);
849 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
850 sdata->dev->addr_len);
851 spin_unlock_bh(&local->filter_lock);
852 netif_addr_unlock_bh(sdata->dev);
f142c6b9 853 }
3ac64bee 854
7cbf0ba5
VN
855 del_timer_sync(&local->dynamic_ps_timer);
856 cancel_work_sync(&local->dynamic_ps_enable_work);
0d143fe1 857
04ecd257 858 cancel_work_sync(&sdata->recalc_smps);
dbd72850 859 sdata_lock(sdata);
59af6928 860 mutex_lock(&local->mtx);
73da7d5b 861 sdata->vif.csa_active = false;
0c21e632
LC
862 if (sdata->vif.type == NL80211_IFTYPE_STATION)
863 sdata->u.mgd.csa_waiting_bcn = false;
a46992b4
LC
864 if (sdata->csa_block_tx) {
865 ieee80211_wake_vif_queues(local, sdata,
866 IEEE80211_QUEUE_STOP_REASON_CSA);
867 sdata->csa_block_tx = false;
868 }
59af6928 869 mutex_unlock(&local->mtx);
dbd72850 870 sdata_unlock(sdata);
59af6928 871
73da7d5b 872 cancel_work_sync(&sdata->csa_finalize_work);
04ecd257 873
164eb02d
SW
874 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
875
876 if (sdata->wdev.cac_started) {
d2859df5 877 chandef = sdata->vif.bss_conf.chandef;
b2c0958b 878 WARN_ON(local->suspended);
34a3740d 879 mutex_lock(&local->mtx);
164eb02d 880 ieee80211_vif_release_channel(sdata);
34a3740d 881 mutex_unlock(&local->mtx);
d2859df5
JD
882 cfg80211_cac_event(sdata->dev, &chandef,
883 NL80211_RADAR_CAC_ABORTED,
164eb02d
SW
884 GFP_KERNEL);
885 }
886
0d143fe1
JB
887 /* APs need special treatment */
888 if (sdata->vif.type == NL80211_IFTYPE_AP) {
57c9fff3 889 struct ieee80211_sub_if_data *vlan, *tmpsdata;
0d143fe1
JB
890
891 /* down all dependent devices, that is VLANs */
57c9fff3 892 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
0d143fe1
JB
893 u.vlan.list)
894 dev_close(vlan->dev);
895 WARN_ON(!list_empty(&sdata->u.ap.vlans));
397a7a24
MB
896 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
897 /* remove all packets in parent bc_buf pointing to this dev */
898 ps = &sdata->bss->ps;
899
900 spin_lock_irqsave(&ps->bc_buf.lock, flags);
901 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
902 if (skb->dev == sdata->dev) {
903 __skb_unlink(skb, &ps->bc_buf);
904 local->total_ps_buffered--;
905 ieee80211_free_txskb(&local->hw, skb);
906 }
907 }
908 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
0d143fe1
JB
909 }
910
34d4bc4d
JB
911 if (going_down)
912 local->open_count--;
0d143fe1
JB
913
914 switch (sdata->vif.type) {
915 case NL80211_IFTYPE_AP_VLAN:
4e141dad 916 mutex_lock(&local->mtx);
0d143fe1 917 list_del(&sdata->u.vlan.list);
4e141dad 918 mutex_unlock(&local->mtx);
0c2bef46 919 RCU_INIT_POINTER(sdata->vif.chanctx_conf, NULL);
10b68487
FF
920 /* see comment in the default case below */
921 ieee80211_free_keys(sdata, true);
0d143fe1
JB
922 /* no need to tell driver */
923 break;
924 case NL80211_IFTYPE_MONITOR:
925 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
926 local->cooked_mntrs--;
927 break;
928 }
929
930 local->monitors--;
e8975581 931 if (local->monitors == 0) {
0869aea0
JB
932 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
933 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
e8975581 934 }
0d143fe1 935
85416a4f 936 ieee80211_adjust_monitor_flags(sdata, -1);
0d143fe1 937 break;
f142c6b9
JB
938 case NL80211_IFTYPE_P2P_DEVICE:
939 /* relies on synchronize_rcu() below */
0c2bef46 940 RCU_INIT_POINTER(local->p2p_sdata, NULL);
f142c6b9 941 /* fall through */
0d143fe1 942 default:
0b7dff4f 943 cancel_work_sync(&sdata->work);
35f20c14
JB
944 /*
945 * When we get here, the interface is marked down.
7907c7d3 946 * Free the remaining keys, if there are any
10b68487
FF
947 * (which can happen in AP mode if userspace sets
948 * keys before the interface is operating, and maybe
949 * also in WDS mode)
75de9113 950 *
7907c7d3
JB
951 * Force the key freeing to always synchronize_net()
952 * to wait for the RX path in case it is using this
10b68487 953 * interface enqueuing frames at this very time on
75de9113 954 * another CPU.
35f20c14 955 */
7907c7d3 956 ieee80211_free_keys(sdata, true);
1861b845 957 skb_queue_purge(&sdata->skb_queue);
0d143fe1
JB
958 }
959
960 sdata->bss = NULL;
961
5061b0c2
JB
962 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
963 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
964 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
965 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
966 if (info->control.vif == &sdata->vif) {
967 __skb_unlink(skb, &local->pending[i]);
d4fa14cd 968 ieee80211_free_txskb(&local->hw, skb);
5061b0c2
JB
969 }
970 }
971 }
972 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
075e0847 973
ba8c3d6f
FF
974 if (sdata->vif.txq) {
975 struct txq_info *txqi = to_txq_info(sdata->vif.txq);
976
977 ieee80211_purge_tx_queue(&local->hw, &txqi->queue);
978 atomic_set(&sdata->txqs_len[txqi->txq.ac], 0);
979 }
980
b2c0958b
JB
981 if (local->open_count == 0)
982 ieee80211_clear_tx_pending(local);
983
984 /*
985 * If the interface goes down while suspended, presumably because
986 * the device was unplugged and that happens before our resume,
987 * then the driver is already unconfigured and the remainder of
988 * this function isn't needed.
989 * XXX: what about WoWLAN? If the device has software state, e.g.
990 * memory allocated, it might expect teardown commands from
991 * mac80211 here?
992 */
993 if (local->suspended) {
994 WARN_ON(local->wowlan);
995 WARN_ON(rtnl_dereference(local->monitor_sdata));
996 return;
997 }
998
999 switch (sdata->vif.type) {
1000 case NL80211_IFTYPE_AP_VLAN:
1001 break;
1002 case NL80211_IFTYPE_MONITOR:
1003 if (local->monitors == 0)
1004 ieee80211_del_virtual_monitor(local);
1005
1006 mutex_lock(&local->mtx);
1007 ieee80211_recalc_idle(local);
1008 mutex_unlock(&local->mtx);
31eba5bc
FF
1009
1010 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
1011 break;
1012
1013 /* fall through */
b2c0958b
JB
1014 default:
1015 if (going_down)
1016 drv_remove_interface(local, sdata);
1017 }
1018
1019 ieee80211_recalc_ps(local, -1);
1020
46238845
JB
1021 if (cancel_scan)
1022 flush_delayed_work(&local->scan_work);
1023
b2c0958b
JB
1024 if (local->open_count == 0) {
1025 ieee80211_stop_device(local);
1026
1027 /* no reconfiguring after stop! */
1028 return;
1029 }
1030
1031 /* do after stop to avoid reconfiguring when we stop anyway */
1032 ieee80211_configure_filter(local);
1033 ieee80211_hw_config(local, hw_reconf_flags);
1034
1035 if (local->monitors == local->open_count)
075e0847 1036 ieee80211_add_virtual_monitor(local);
34d4bc4d
JB
1037}
1038
1039static int ieee80211_stop(struct net_device *dev)
1040{
1041 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1042
1043 ieee80211_do_stop(sdata, true);
5061b0c2 1044
0d143fe1
JB
1045 return 0;
1046}
1047
1048static void ieee80211_set_multicast_list(struct net_device *dev)
1049{
0d143fe1 1050 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
b4a4bf5d 1051 struct ieee80211_local *local = sdata->local;
0d143fe1
JB
1052 int allmulti, promisc, sdata_allmulti, sdata_promisc;
1053
1054 allmulti = !!(dev->flags & IFF_ALLMULTI);
1055 promisc = !!(dev->flags & IFF_PROMISC);
1056 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
1057 sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
1058
1059 if (allmulti != sdata_allmulti) {
1060 if (dev->flags & IFF_ALLMULTI)
1061 atomic_inc(&local->iff_allmultis);
1062 else
1063 atomic_dec(&local->iff_allmultis);
1064 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
1065 }
1066
1067 if (promisc != sdata_promisc) {
1068 if (dev->flags & IFF_PROMISC)
1069 atomic_inc(&local->iff_promiscs);
1070 else
1071 atomic_dec(&local->iff_promiscs);
1072 sdata->flags ^= IEEE80211_SDATA_PROMISC;
1073 }
3b8d81e0 1074 spin_lock_bh(&local->filter_lock);
22bedad3 1075 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
3b8d81e0 1076 spin_unlock_bh(&local->filter_lock);
3ac64bee 1077 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
0d143fe1
JB
1078}
1079
75636525
JB
1080/*
1081 * Called when the netdev is removed or, by the code below, before
1082 * the interface type changes.
1083 */
f142c6b9 1084static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
f0706e82
JB
1085{
1086 int i;
1087
75636525 1088 /* free extra data */
7907c7d3 1089 ieee80211_free_keys(sdata, false);
75636525 1090
aee14ceb
JM
1091 ieee80211_debugfs_remove_netdev(sdata);
1092
f0706e82 1093 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
75636525
JB
1094 __skb_queue_purge(&sdata->fragments[i].skb_list);
1095 sdata->fragment_next = 0;
11a843b7 1096
b9dcf712
JB
1097 if (ieee80211_vif_is_mesh(&sdata->vif))
1098 mesh_rmc_free(sdata);
f0706e82
JB
1099}
1100
f142c6b9
JB
1101static void ieee80211_uninit(struct net_device *dev)
1102{
1103 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
1104}
1105
cf0277e7 1106static u16 ieee80211_netdev_select_queue(struct net_device *dev,
f663dd9a 1107 struct sk_buff *skb,
99932d4f
DB
1108 void *accel_priv,
1109 select_queue_fallback_t fallback)
cf0277e7
JB
1110{
1111 return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
1112}
1113
587e729e
JB
1114static const struct net_device_ops ieee80211_dataif_ops = {
1115 .ndo_open = ieee80211_open,
1116 .ndo_stop = ieee80211_stop,
f142c6b9 1117 .ndo_uninit = ieee80211_uninit,
587e729e 1118 .ndo_start_xmit = ieee80211_subif_start_xmit,
afc4b13d 1119 .ndo_set_rx_mode = ieee80211_set_multicast_list,
587e729e 1120 .ndo_change_mtu = ieee80211_change_mtu,
47846c9b 1121 .ndo_set_mac_address = ieee80211_change_mac,
cf0277e7 1122 .ndo_select_queue = ieee80211_netdev_select_queue,
587e729e
JB
1123};
1124
cf0277e7 1125static u16 ieee80211_monitor_select_queue(struct net_device *dev,
f663dd9a 1126 struct sk_buff *skb,
99932d4f
DB
1127 void *accel_priv,
1128 select_queue_fallback_t fallback)
cf0277e7
JB
1129{
1130 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1131 struct ieee80211_local *local = sdata->local;
1132 struct ieee80211_hdr *hdr;
1133 struct ieee80211_radiotap_header *rtap = (void *)skb->data;
1134
32c5057b 1135 if (local->hw.queues < IEEE80211_NUM_ACS)
cf0277e7
JB
1136 return 0;
1137
1138 if (skb->len < 4 ||
b49bb574 1139 skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */)
cf0277e7
JB
1140 return 0; /* doesn't matter, frame will be dropped */
1141
b49bb574 1142 hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len));
cf0277e7 1143
00e96dec 1144 return ieee80211_select_queue_80211(sdata, skb, hdr);
cf0277e7
JB
1145}
1146
587e729e
JB
1147static const struct net_device_ops ieee80211_monitorif_ops = {
1148 .ndo_open = ieee80211_open,
1149 .ndo_stop = ieee80211_stop,
f142c6b9 1150 .ndo_uninit = ieee80211_uninit,
587e729e 1151 .ndo_start_xmit = ieee80211_monitor_start_xmit,
afc4b13d 1152 .ndo_set_rx_mode = ieee80211_set_multicast_list,
587e729e 1153 .ndo_change_mtu = ieee80211_change_mtu,
31eba5bc 1154 .ndo_set_mac_address = ieee80211_change_mac,
cf0277e7 1155 .ndo_select_queue = ieee80211_monitor_select_queue,
587e729e
JB
1156};
1157
1158static void ieee80211_if_setup(struct net_device *dev)
1159{
1160 ether_setup(dev);
550fd08c 1161 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
587e729e 1162 dev->netdev_ops = &ieee80211_dataif_ops;
587e729e
JB
1163 dev->destructor = free_netdev;
1164}
1165
1fa57d01
JB
1166static void ieee80211_iface_work(struct work_struct *work)
1167{
1168 struct ieee80211_sub_if_data *sdata =
1169 container_of(work, struct ieee80211_sub_if_data, work);
1170 struct ieee80211_local *local = sdata->local;
1171 struct sk_buff *skb;
344eec67 1172 struct sta_info *sta;
c1475ca9 1173 struct ieee80211_ra_tid *ra_tid;
08cf42e8 1174 struct ieee80211_rx_agg *rx_agg;
1fa57d01
JB
1175
1176 if (!ieee80211_sdata_running(sdata))
1177 return;
1178
1179 if (local->scanning)
1180 return;
1181
4afaff17 1182 if (!ieee80211_can_run_worker(local))
1fa57d01
JB
1183 return;
1184
1185 /* first process frames */
1186 while ((skb = skb_dequeue(&sdata->skb_queue))) {
bed7ee6e
JB
1187 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1188
c1475ca9
JB
1189 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) {
1190 ra_tid = (void *)&skb->cb;
1191 ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra,
1192 ra_tid->tid);
1193 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) {
1194 ra_tid = (void *)&skb->cb;
1195 ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra,
1196 ra_tid->tid);
08cf42e8
MK
1197 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_START) {
1198 rx_agg = (void *)&skb->cb;
1199 mutex_lock(&local->sta_mtx);
1200 sta = sta_info_get_bss(sdata, rx_agg->addr);
4549cf2b 1201 if (sta)
08cf42e8 1202 __ieee80211_start_rx_ba_session(sta,
4549cf2b 1203 0, 0, 0, 1, rx_agg->tid,
08cf42e8 1204 IEEE80211_MAX_AMPDU_BUF,
4549cf2b 1205 false, true);
08cf42e8
MK
1206 mutex_unlock(&local->sta_mtx);
1207 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_STOP) {
1208 rx_agg = (void *)&skb->cb;
1209 mutex_lock(&local->sta_mtx);
1210 sta = sta_info_get_bss(sdata, rx_agg->addr);
1211 if (sta)
1212 __ieee80211_stop_rx_ba_session(sta,
1213 rx_agg->tid,
1214 WLAN_BACK_RECIPIENT, 0,
1215 false);
1216 mutex_unlock(&local->sta_mtx);
8a4d32f3
AN
1217 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_TDLS_CHSW) {
1218 ieee80211_process_tdls_channel_switch(sdata, skb);
c1475ca9
JB
1219 } else if (ieee80211_is_action(mgmt->frame_control) &&
1220 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
bed7ee6e 1221 int len = skb->len;
bed7ee6e 1222
a93e3644 1223 mutex_lock(&local->sta_mtx);
875ae5f6 1224 sta = sta_info_get_bss(sdata, mgmt->sa);
bed7ee6e
JB
1225 if (sta) {
1226 switch (mgmt->u.action.u.addba_req.action_code) {
1227 case WLAN_ACTION_ADDBA_REQ:
1228 ieee80211_process_addba_request(
1229 local, sta, mgmt, len);
1230 break;
1231 case WLAN_ACTION_ADDBA_RESP:
1232 ieee80211_process_addba_resp(local, sta,
1233 mgmt, len);
1234 break;
1235 case WLAN_ACTION_DELBA:
1236 ieee80211_process_delba(sdata, sta,
1237 mgmt, len);
1238 break;
1239 default:
1240 WARN_ON(1);
1241 break;
1242 }
1243 }
a93e3644 1244 mutex_unlock(&local->sta_mtx);
344eec67
JB
1245 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1246 struct ieee80211_hdr *hdr = (void *)mgmt;
1247 /*
1248 * So the frame isn't mgmt, but frame_control
1249 * is at the right place anyway, of course, so
1250 * the if statement is correct.
1251 *
1252 * Warn if we have other data frame types here,
1253 * they must not get here.
1254 */
1255 WARN_ON(hdr->frame_control &
1256 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1257 WARN_ON(!(hdr->seq_ctrl &
1258 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1259 /*
1260 * This was a fragment of a frame, received while
1261 * a block-ack session was active. That cannot be
1262 * right, so terminate the session.
1263 */
a93e3644 1264 mutex_lock(&local->sta_mtx);
875ae5f6 1265 sta = sta_info_get_bss(sdata, mgmt->sa);
344eec67
JB
1266 if (sta) {
1267 u16 tid = *ieee80211_get_qos_ctl(hdr) &
1268 IEEE80211_QOS_CTL_TID_MASK;
1269
1270 __ieee80211_stop_rx_ba_session(
1271 sta, tid, WLAN_BACK_RECIPIENT,
53f73c09
JB
1272 WLAN_REASON_QSTA_REQUIRE_SETUP,
1273 true);
344eec67 1274 }
a93e3644 1275 mutex_unlock(&local->sta_mtx);
bed7ee6e 1276 } else switch (sdata->vif.type) {
1fa57d01
JB
1277 case NL80211_IFTYPE_STATION:
1278 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1279 break;
1280 case NL80211_IFTYPE_ADHOC:
1281 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1282 break;
1283 case NL80211_IFTYPE_MESH_POINT:
1284 if (!ieee80211_vif_is_mesh(&sdata->vif))
1285 break;
1286 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1287 break;
1288 default:
1289 WARN(1, "frame for unexpected interface type");
1fa57d01
JB
1290 break;
1291 }
36b3a628
JB
1292
1293 kfree_skb(skb);
1fa57d01
JB
1294 }
1295
1296 /* then other type-dependent work */
1297 switch (sdata->vif.type) {
1298 case NL80211_IFTYPE_STATION:
1299 ieee80211_sta_work(sdata);
1300 break;
1301 case NL80211_IFTYPE_ADHOC:
1302 ieee80211_ibss_work(sdata);
1303 break;
1304 case NL80211_IFTYPE_MESH_POINT:
1305 if (!ieee80211_vif_is_mesh(&sdata->vif))
1306 break;
1307 ieee80211_mesh_work(sdata);
1308 break;
239281f8
RL
1309 case NL80211_IFTYPE_OCB:
1310 ieee80211_ocb_work(sdata);
1311 break;
1fa57d01
JB
1312 default:
1313 break;
1314 }
1315}
1316
04ecd257
JB
1317static void ieee80211_recalc_smps_work(struct work_struct *work)
1318{
1319 struct ieee80211_sub_if_data *sdata =
1320 container_of(work, struct ieee80211_sub_if_data, recalc_smps);
1321
1322 ieee80211_recalc_smps(sdata);
1323}
1fa57d01 1324
75636525
JB
1325/*
1326 * Helper function to initialise an interface to a specific type.
1327 */
1328static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
05c914fe 1329 enum nl80211_iftype type)
f0706e82 1330{
239281f8
RL
1331 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff,
1332 0xff, 0xff, 0xff};
1333
75636525
JB
1334 /* clear type-dependent union */
1335 memset(&sdata->u, 0, sizeof(sdata->u));
1336
1337 /* and set some type-dependent values */
1338 sdata->vif.type = type;
2ca27bcf 1339 sdata->vif.p2p = false;
60719ffd 1340 sdata->wdev.iftype = type;
75636525 1341
a621fa4d
JB
1342 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1343 sdata->control_port_no_encrypt = false;
2475b1cc 1344 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
d3a58df8 1345 sdata->vif.bss_conf.idle = true;
a621fa4d 1346
b53be792
SW
1347 sdata->noack_map = 0;
1348
f142c6b9
JB
1349 /* only monitor/p2p-device differ */
1350 if (sdata->dev) {
1351 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1352 sdata->dev->type = ARPHRD_ETHER;
1353 }
75636525 1354
35f20c14 1355 skb_queue_head_init(&sdata->skb_queue);
1fa57d01 1356 INIT_WORK(&sdata->work, ieee80211_iface_work);
04ecd257 1357 INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work);
73da7d5b 1358 INIT_WORK(&sdata->csa_finalize_work, ieee80211_csa_finalize_work);
484298ad 1359 INIT_LIST_HEAD(&sdata->assigned_chanctx_list);
e3afb920 1360 INIT_LIST_HEAD(&sdata->reserved_chanctx_list);
35f20c14 1361
75636525 1362 switch (type) {
2ca27bcf
JB
1363 case NL80211_IFTYPE_P2P_GO:
1364 type = NL80211_IFTYPE_AP;
1365 sdata->vif.type = type;
1366 sdata->vif.p2p = true;
1367 /* fall through */
05c914fe 1368 case NL80211_IFTYPE_AP:
d012a605 1369 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
75636525 1370 INIT_LIST_HEAD(&sdata->u.ap.vlans);
687da132
EG
1371 INIT_WORK(&sdata->u.ap.request_smps_work,
1372 ieee80211_request_smps_ap_work);
ad2d223a 1373 sdata->vif.bss_conf.bssid = sdata->vif.addr;
687da132 1374 sdata->u.ap.req_smps = IEEE80211_SMPS_OFF;
75636525 1375 break;
2ca27bcf
JB
1376 case NL80211_IFTYPE_P2P_CLIENT:
1377 type = NL80211_IFTYPE_STATION;
1378 sdata->vif.type = type;
1379 sdata->vif.p2p = true;
1380 /* fall through */
05c914fe 1381 case NL80211_IFTYPE_STATION:
ad2d223a 1382 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
9c6bd790 1383 ieee80211_sta_setup_sdata(sdata);
472dbc45 1384 break;
6e0bd6c3 1385 case NL80211_IFTYPE_OCB:
239281f8
RL
1386 sdata->vif.bss_conf.bssid = bssid_wildcard;
1387 ieee80211_ocb_setup_sdata(sdata);
6e0bd6c3 1388 break;
46900298 1389 case NL80211_IFTYPE_ADHOC:
ad2d223a 1390 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
46900298
JB
1391 ieee80211_ibss_setup_sdata(sdata);
1392 break;
05c914fe 1393 case NL80211_IFTYPE_MESH_POINT:
75636525
JB
1394 if (ieee80211_vif_is_mesh(&sdata->vif))
1395 ieee80211_mesh_init_sdata(sdata);
1396 break;
05c914fe 1397 case NL80211_IFTYPE_MONITOR:
75636525 1398 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
587e729e 1399 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
75636525
JB
1400 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL |
1401 MONITOR_FLAG_OTHER_BSS;
1402 break;
05c914fe 1403 case NL80211_IFTYPE_WDS:
ad2d223a
JB
1404 sdata->vif.bss_conf.bssid = NULL;
1405 break;
05c914fe 1406 case NL80211_IFTYPE_AP_VLAN:
98104fde 1407 case NL80211_IFTYPE_P2P_DEVICE:
ad2d223a 1408 sdata->vif.bss_conf.bssid = sdata->vif.addr;
f142c6b9 1409 break;
05c914fe 1410 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 1411 case NUM_NL80211_IFTYPES:
75636525
JB
1412 BUG();
1413 break;
1414 }
1415
1416 ieee80211_debugfs_add_netdev(sdata);
1417}
1418
34d4bc4d
JB
1419static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1420 enum nl80211_iftype type)
1421{
1422 struct ieee80211_local *local = sdata->local;
1423 int ret, err;
2ca27bcf
JB
1424 enum nl80211_iftype internal_type = type;
1425 bool p2p = false;
34d4bc4d
JB
1426
1427 ASSERT_RTNL();
1428
1429 if (!local->ops->change_interface)
1430 return -EBUSY;
1431
1432 switch (sdata->vif.type) {
1433 case NL80211_IFTYPE_AP:
1434 case NL80211_IFTYPE_STATION:
1435 case NL80211_IFTYPE_ADHOC:
239281f8 1436 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1437 /*
1438 * Could maybe also all others here?
1439 * Just not sure how that interacts
1440 * with the RX/config path e.g. for
1441 * mesh.
1442 */
1443 break;
1444 default:
1445 return -EBUSY;
1446 }
1447
1448 switch (type) {
1449 case NL80211_IFTYPE_AP:
1450 case NL80211_IFTYPE_STATION:
1451 case NL80211_IFTYPE_ADHOC:
239281f8 1452 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1453 /*
1454 * Could probably support everything
1455 * but WDS here (WDS do_open can fail
1456 * under memory pressure, which this
1457 * code isn't prepared to handle).
1458 */
1459 break;
2ca27bcf
JB
1460 case NL80211_IFTYPE_P2P_CLIENT:
1461 p2p = true;
1462 internal_type = NL80211_IFTYPE_STATION;
1463 break;
1464 case NL80211_IFTYPE_P2P_GO:
1465 p2p = true;
1466 internal_type = NL80211_IFTYPE_AP;
1467 break;
34d4bc4d
JB
1468 default:
1469 return -EBUSY;
1470 }
1471
2ca27bcf 1472 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
34d4bc4d
JB
1473 if (ret)
1474 return ret;
1475
1476 ieee80211_do_stop(sdata, false);
1477
f142c6b9 1478 ieee80211_teardown_sdata(sdata);
34d4bc4d 1479
2ca27bcf 1480 ret = drv_change_interface(local, sdata, internal_type, p2p);
34d4bc4d 1481 if (ret)
a9865538 1482 type = ieee80211_vif_type_p2p(&sdata->vif);
34d4bc4d 1483
3a25a8c8
JB
1484 /*
1485 * Ignore return value here, there's not much we can do since
1486 * the driver changed the interface type internally already.
1487 * The warnings will hopefully make driver authors fix it :-)
1488 */
a9865538 1489 ieee80211_check_queues(sdata, type);
3a25a8c8 1490
34d4bc4d
JB
1491 ieee80211_setup_sdata(sdata, type);
1492
f142c6b9 1493 err = ieee80211_do_open(&sdata->wdev, false);
34d4bc4d
JB
1494 WARN(err, "type change: do_open returned %d", err);
1495
1496 return ret;
1497}
1498
f3947e2d 1499int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
05c914fe 1500 enum nl80211_iftype type)
75636525 1501{
34d4bc4d
JB
1502 int ret;
1503
f3947e2d
JB
1504 ASSERT_RTNL();
1505
2ca27bcf 1506 if (type == ieee80211_vif_type_p2p(&sdata->vif))
f3947e2d
JB
1507 return 0;
1508
34d4bc4d
JB
1509 if (ieee80211_sdata_running(sdata)) {
1510 ret = ieee80211_runtime_change_iftype(sdata, type);
1511 if (ret)
1512 return ret;
1513 } else {
1514 /* Purge and reset type-dependent state. */
f142c6b9 1515 ieee80211_teardown_sdata(sdata);
34d4bc4d
JB
1516 ieee80211_setup_sdata(sdata, type);
1517 }
75636525
JB
1518
1519 /* reset some values that shouldn't be kept across type changes */
9bc383de
JB
1520 if (type == NL80211_IFTYPE_STATION)
1521 sdata->u.mgd.use_4addr = false;
f3947e2d
JB
1522
1523 return 0;
f0706e82
JB
1524}
1525
fa9029f8 1526static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
f142c6b9 1527 u8 *perm_addr, enum nl80211_iftype type)
fa9029f8
JB
1528{
1529 struct ieee80211_sub_if_data *sdata;
1530 u64 mask, start, addr, val, inc;
1531 u8 *m;
1532 u8 tmp_addr[ETH_ALEN];
1533 int i;
1534
1535 /* default ... something at least */
f142c6b9 1536 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
fa9029f8
JB
1537
1538 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1539 local->hw.wiphy->n_addresses <= 1)
1540 return;
1541
fa9029f8
JB
1542 mutex_lock(&local->iflist_mtx);
1543
1544 switch (type) {
1545 case NL80211_IFTYPE_MONITOR:
1546 /* doesn't matter */
1547 break;
1548 case NL80211_IFTYPE_WDS:
1549 case NL80211_IFTYPE_AP_VLAN:
1550 /* match up with an AP interface */
1551 list_for_each_entry(sdata, &local->interfaces, list) {
1552 if (sdata->vif.type != NL80211_IFTYPE_AP)
1553 continue;
f142c6b9 1554 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
fa9029f8
JB
1555 break;
1556 }
1557 /* keep default if no AP interface present */
1558 break;
6d71117a
JB
1559 case NL80211_IFTYPE_P2P_CLIENT:
1560 case NL80211_IFTYPE_P2P_GO:
1561 if (local->hw.flags & IEEE80211_HW_P2P_DEV_ADDR_FOR_INTF) {
1562 list_for_each_entry(sdata, &local->interfaces, list) {
1563 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1564 continue;
1565 if (!ieee80211_sdata_running(sdata))
1566 continue;
1567 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1568 goto out_unlock;
1569 }
1570 }
1571 /* otherwise fall through */
fa9029f8
JB
1572 default:
1573 /* assign a new address if possible -- try n_addresses first */
1574 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1575 bool used = false;
1576
1577 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1578 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1579 sdata->vif.addr)) {
fa9029f8
JB
1580 used = true;
1581 break;
1582 }
1583 }
1584
1585 if (!used) {
f142c6b9 1586 memcpy(perm_addr,
fa9029f8
JB
1587 local->hw.wiphy->addresses[i].addr,
1588 ETH_ALEN);
1589 break;
1590 }
1591 }
1592
1593 /* try mask if available */
1594 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1595 break;
1596
1597 m = local->hw.wiphy->addr_mask;
1598 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1599 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1600 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1601
1602 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1603 /* not a contiguous mask ... not handled now! */
bdcbd8e0 1604 pr_info("not contiguous\n");
fa9029f8
JB
1605 break;
1606 }
1607
ac20976d
HS
1608 /*
1609 * Pick address of existing interface in case user changed
1610 * MAC address manually, default to perm_addr.
1611 */
fa9029f8 1612 m = local->hw.wiphy->perm_addr;
ac20976d
HS
1613 list_for_each_entry(sdata, &local->interfaces, list) {
1614 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
1615 continue;
1616 m = sdata->vif.addr;
1617 break;
1618 }
fa9029f8
JB
1619 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1620 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1621 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1622
1623 inc = 1ULL<<__ffs64(mask);
1624 val = (start & mask);
1625 addr = (start & ~mask) | (val & mask);
1626 do {
1627 bool used = false;
1628
1629 tmp_addr[5] = addr >> 0*8;
1630 tmp_addr[4] = addr >> 1*8;
1631 tmp_addr[3] = addr >> 2*8;
1632 tmp_addr[2] = addr >> 3*8;
1633 tmp_addr[1] = addr >> 4*8;
1634 tmp_addr[0] = addr >> 5*8;
1635
1636 val += inc;
1637
1638 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1639 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
fa9029f8
JB
1640 used = true;
1641 break;
1642 }
1643 }
1644
1645 if (!used) {
f142c6b9 1646 memcpy(perm_addr, tmp_addr, ETH_ALEN);
fa9029f8
JB
1647 break;
1648 }
1649 addr = (start & ~mask) | (val & mask);
1650 } while (addr != start);
1651
1652 break;
1653 }
1654
6d71117a 1655 out_unlock:
fa9029f8
JB
1656 mutex_unlock(&local->iflist_mtx);
1657}
1658
3e122be0 1659int ieee80211_if_add(struct ieee80211_local *local, const char *name,
6bab2e19 1660 unsigned char name_assign_type,
84efbb84 1661 struct wireless_dev **new_wdev, enum nl80211_iftype type,
ee385855 1662 struct vif_params *params)
f0706e82 1663{
f142c6b9 1664 struct net_device *ndev = NULL;
f0706e82 1665 struct ieee80211_sub_if_data *sdata = NULL;
ba8c3d6f 1666 struct txq_info *txqi;
75636525 1667 int ret, i;
ded81f6b 1668 int txqs = 1;
f0706e82
JB
1669
1670 ASSERT_RTNL();
75636525 1671
f142c6b9
JB
1672 if (type == NL80211_IFTYPE_P2P_DEVICE) {
1673 struct wireless_dev *wdev;
1674
1675 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
1676 GFP_KERNEL);
1677 if (!sdata)
1678 return -ENOMEM;
1679 wdev = &sdata->wdev;
1680
1681 sdata->dev = NULL;
1682 strlcpy(sdata->name, name, IFNAMSIZ);
1683 ieee80211_assign_perm_addr(local, wdev->address, type);
1684 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
1685 } else {
ba8c3d6f
FF
1686 int size = ALIGN(sizeof(*sdata) + local->hw.vif_data_size,
1687 sizeof(void *));
1688 int txq_size = 0;
1689
1690 if (local->ops->wake_tx_queue)
1691 txq_size += sizeof(struct txq_info) +
1692 local->hw.txq_data_size;
1693
f142c6b9
JB
1694 if (local->hw.queues >= IEEE80211_NUM_ACS)
1695 txqs = IEEE80211_NUM_ACS;
1696
ba8c3d6f 1697 ndev = alloc_netdev_mqs(size + txq_size,
6bab2e19 1698 name, name_assign_type,
c835a677 1699 ieee80211_if_setup, txqs, 1);
f142c6b9
JB
1700 if (!ndev)
1701 return -ENOMEM;
1702 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
1703
1704 ndev->needed_headroom = local->tx_headroom +
1705 4*6 /* four MAC addresses */
1706 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
1707 + 6 /* mesh */
1708 + 8 /* rfc1042/bridge tunnel */
1709 - ETH_HLEN /* ethernet hard_header_len */
1710 + IEEE80211_ENCRYPT_HEADROOM;
1711 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
1712
1713 ret = dev_alloc_name(ndev, ndev->name);
1714 if (ret < 0) {
1715 free_netdev(ndev);
1716 return ret;
1717 }
1718
1719 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
b5dfae02
BG
1720 if (params && is_valid_ether_addr(params->macaddr))
1721 memcpy(ndev->dev_addr, params->macaddr, ETH_ALEN);
1722 else
1723 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN);
f142c6b9
JB
1724 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
1725
1726 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
1727 sdata = netdev_priv(ndev);
1728 ndev->ieee80211_ptr = &sdata->wdev;
1729 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
1730 memcpy(sdata->name, ndev->name, IFNAMSIZ);
1731
ba8c3d6f
FF
1732 if (txq_size) {
1733 txqi = netdev_priv(ndev) + size;
1734 ieee80211_init_tx_queue(sdata, NULL, txqi, 0);
1735 }
1736
f142c6b9
JB
1737 sdata->dev = ndev;
1738 }
75636525
JB
1739
1740 /* initialise type-independent data */
f0706e82 1741 sdata->wdev.wiphy = local->hw.wiphy;
f0706e82 1742 sdata->local = local;
75636525
JB
1743
1744 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1745 skb_queue_head_init(&sdata->fragments[i].skb_list);
1746
1747 INIT_LIST_HEAD(&sdata->key_list);
1748
164eb02d
SW
1749 INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work,
1750 ieee80211_dfs_cac_timer_work);
8d1f7ecd
JB
1751 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk,
1752 ieee80211_delayed_tailroom_dec);
97f97b1f 1753
37eb0b16
JM
1754 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1755 struct ieee80211_supported_band *sband;
1756 sband = local->hw.wiphy->bands[i];
1757 sdata->rc_rateidx_mask[i] =
1758 sband ? (1 << sband->n_bitrates) - 1 : 0;
19468413
SW
1759 if (sband)
1760 memcpy(sdata->rc_rateidx_mcs_mask[i],
1761 sband->ht_cap.mcs.rx_mask,
1762 sizeof(sdata->rc_rateidx_mcs_mask[i]));
1763 else
1764 memset(sdata->rc_rateidx_mcs_mask[i], 0,
1765 sizeof(sdata->rc_rateidx_mcs_mask[i]));
37eb0b16 1766 }
75636525 1767
3a25a8c8
JB
1768 ieee80211_set_default_queues(sdata);
1769
1ea6f9c0
JB
1770 sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
1771 sdata->user_power_level = local->user_power_level;
1772
2475b1cc
MS
1773 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1774
75636525
JB
1775 /* setup type-dependent data */
1776 ieee80211_setup_sdata(sdata, type);
f0706e82 1777
f142c6b9
JB
1778 if (ndev) {
1779 if (params) {
1780 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
1781 if (type == NL80211_IFTYPE_STATION)
1782 sdata->u.mgd.use_4addr = params->use_4addr;
1783 }
9bc383de 1784
f142c6b9 1785 ndev->features |= local->hw.netdev_features;
72d78728 1786
b7ffbd7e
JB
1787 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
1788
f142c6b9
JB
1789 ret = register_netdevice(ndev);
1790 if (ret) {
1791 free_netdev(ndev);
1792 return ret;
1793 }
1794 }
f0706e82 1795
c771c9d8 1796 mutex_lock(&local->iflist_mtx);
79010420 1797 list_add_tail_rcu(&sdata->list, &local->interfaces);
c771c9d8 1798 mutex_unlock(&local->iflist_mtx);
79010420 1799
84efbb84
JB
1800 if (new_wdev)
1801 *new_wdev = &sdata->wdev;
f0706e82 1802
f0706e82 1803 return 0;
f0706e82
JB
1804}
1805
f698d856 1806void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
f0706e82 1807{
f0706e82 1808 ASSERT_RTNL();
11a843b7 1809
c771c9d8 1810 mutex_lock(&sdata->local->iflist_mtx);
75636525 1811 list_del_rcu(&sdata->list);
c771c9d8
JB
1812 mutex_unlock(&sdata->local->iflist_mtx);
1813
75636525 1814 synchronize_rcu();
f142c6b9
JB
1815
1816 if (sdata->dev) {
1817 unregister_netdevice(sdata->dev);
1818 } else {
1819 cfg80211_unregister_wdev(&sdata->wdev);
1820 kfree(sdata);
1821 }
1822}
1823
1824void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
1825{
1826 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
1827 return;
1828 ieee80211_do_stop(sdata, true);
1829 ieee80211_teardown_sdata(sdata);
f0706e82
JB
1830}
1831
75636525
JB
1832/*
1833 * Remove all interfaces, may only be called at hardware unregistration
1834 * time because it doesn't do RCU-safe list removals.
1835 */
1836void ieee80211_remove_interfaces(struct ieee80211_local *local)
f0706e82 1837{
75636525 1838 struct ieee80211_sub_if_data *sdata, *tmp;
efe117ab 1839 LIST_HEAD(unreg_list);
f142c6b9 1840 LIST_HEAD(wdev_list);
f0706e82
JB
1841
1842 ASSERT_RTNL();
1843
c8aa22db
JB
1844 /*
1845 * Close all AP_VLAN interfaces first, as otherwise they
1846 * might be closed while the AP interface they belong to
1847 * is closed, causing unregister_netdevice_many() to crash.
1848 */
1849 list_for_each_entry(sdata, &local->interfaces, list)
1850 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1851 dev_close(sdata->dev);
1852
efe117ab 1853 mutex_lock(&local->iflist_mtx);
75636525
JB
1854 list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) {
1855 list_del(&sdata->list);
c771c9d8 1856
f142c6b9
JB
1857 if (sdata->dev)
1858 unregister_netdevice_queue(sdata->dev, &unreg_list);
1859 else
1860 list_add(&sdata->list, &wdev_list);
f0706e82 1861 }
efe117ab
ED
1862 mutex_unlock(&local->iflist_mtx);
1863 unregister_netdevice_many(&unreg_list);
f142c6b9
JB
1864
1865 list_for_each_entry_safe(sdata, tmp, &wdev_list, list) {
1866 list_del(&sdata->list);
1867 cfg80211_unregister_wdev(&sdata->wdev);
1868 kfree(sdata);
1869 }
f0706e82 1870}
5cff20e6 1871
47846c9b 1872static int netdev_notify(struct notifier_block *nb,
351638e7 1873 unsigned long state, void *ptr)
47846c9b 1874{
351638e7 1875 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
47846c9b
JB
1876 struct ieee80211_sub_if_data *sdata;
1877
1878 if (state != NETDEV_CHANGENAME)
8bd811aa 1879 return NOTIFY_DONE;
47846c9b
JB
1880
1881 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
8bd811aa 1882 return NOTIFY_DONE;
47846c9b
JB
1883
1884 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
8bd811aa 1885 return NOTIFY_DONE;
47846c9b
JB
1886
1887 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2f5265e6 1888 memcpy(sdata->name, dev->name, IFNAMSIZ);
47846c9b 1889 ieee80211_debugfs_rename_netdev(sdata);
8bd811aa
ZG
1890
1891 return NOTIFY_OK;
47846c9b
JB
1892}
1893
1894static struct notifier_block mac80211_netdev_notifier = {
1895 .notifier_call = netdev_notify,
1896};
1897
1898int ieee80211_iface_init(void)
1899{
1900 return register_netdevice_notifier(&mac80211_netdev_notifier);
1901}
1902
1903void ieee80211_iface_exit(void)
1904{
1905 unregister_netdevice_notifier(&mac80211_netdev_notifier);
1906}