mac80211: Parse legacy and HT rate in injected frames
[linux-2.6-block.git] / net / mac80211 / iface.c
CommitLineData
f0706e82 1/*
c5d54fbf 2 * Interface handling
0d143fe1 3 *
f0706e82
JB
4 * Copyright 2002-2005, Instant802 Networks, Inc.
5 * Copyright 2005-2006, Devicescape Software, Inc.
6 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
75636525 7 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
d98ad83e 8 * Copyright 2013-2014 Intel Mobile Communications GmbH
f0706e82
JB
9 *
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2 as
12 * published by the Free Software Foundation.
13 */
5a0e3ad6 14#include <linux/slab.h>
f0706e82
JB
15#include <linux/kernel.h>
16#include <linux/if_arp.h>
17#include <linux/netdevice.h>
18#include <linux/rtnetlink.h>
19#include <net/mac80211.h>
cf0277e7 20#include <net/ieee80211_radiotap.h>
f0706e82
JB
21#include "ieee80211_i.h"
22#include "sta_info.h"
e9f207f0 23#include "debugfs_netdev.h"
ee385855 24#include "mesh.h"
0d143fe1 25#include "led.h"
24487981 26#include "driver-ops.h"
cf0277e7 27#include "wme.h"
1be7fe8d 28#include "rate.h"
0d143fe1 29
c771c9d8
JB
30/**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL
37 * (2) modifications and readers are protected against each other by
38 * the iflist_mtx.
39 * (3) modifications are done in an RCU manner so atomic readers
40 * can traverse the list in RCU-safe blocks.
41 *
42 * As a consequence, reads (traversals) of the list can be protected
43 * by either the RTNL, the iflist_mtx or RCU.
44 */
45
1ea6f9c0
JB
46bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
47{
48 struct ieee80211_chanctx_conf *chanctx_conf;
49 int power;
50
51 rcu_read_lock();
52 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
53 if (!chanctx_conf) {
54 rcu_read_unlock();
55 return false;
56 }
57
0430c883 58 power = ieee80211_chandef_max_power(&chanctx_conf->def);
1ea6f9c0
JB
59 rcu_read_unlock();
60
61 if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
62 power = min(power, sdata->user_power_level);
63
64 if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
65 power = min(power, sdata->ap_power_level);
66
67 if (power != sdata->vif.bss_conf.txpower) {
68 sdata->vif.bss_conf.txpower = power;
69 ieee80211_hw_config(sdata->local, 0);
70 return true;
71 }
72
73 return false;
74}
75
db82d8a9
LB
76void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata,
77 bool update_bss)
1ea6f9c0 78{
5ad11b50
EG
79 if (__ieee80211_recalc_txpower(sdata) ||
80 (update_bss && ieee80211_sdata_running(sdata)))
1ea6f9c0
JB
81 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
82}
c771c9d8 83
62a40a15 84static u32 __ieee80211_idle_off(struct ieee80211_local *local)
cc45ae54
JB
85{
86 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
87 return 0;
88
89 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
90 return IEEE80211_CONF_CHANGE_IDLE;
91}
92
62a40a15 93static u32 __ieee80211_idle_on(struct ieee80211_local *local)
cc45ae54
JB
94{
95 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
96 return 0;
97
3b24f4c6 98 ieee80211_flush_queues(local, NULL, false);
cc45ae54
JB
99
100 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
101 return IEEE80211_CONF_CHANGE_IDLE;
102}
103
62a40a15
JB
104static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
105 bool force_active)
cc45ae54 106{
1d5e1266 107 bool working, scanning, active;
cc45ae54 108 unsigned int led_trig_start = 0, led_trig_stop = 0;
cc45ae54 109
cc45ae54
JB
110 lockdep_assert_held(&local->mtx);
111
62a40a15
JB
112 active = force_active ||
113 !list_empty(&local->chanctx_list) ||
114 local->monitors;
cc45ae54 115
1d5e1266
JB
116 working = !local->ops->remain_on_channel &&
117 !list_empty(&local->roc_list);
cc45ae54 118
f1e3e051
JB
119 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
120 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
cc45ae54 121
cc45ae54
JB
122 if (working || scanning)
123 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
124 else
125 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
126
fd0f979a 127 if (active)
cc45ae54
JB
128 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
129 else
130 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
131
132 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
133
fd0f979a 134 if (working || scanning || active)
62a40a15
JB
135 return __ieee80211_idle_off(local);
136 return __ieee80211_idle_on(local);
137}
138
139u32 ieee80211_idle_off(struct ieee80211_local *local)
140{
141 return __ieee80211_recalc_idle(local, true);
142}
143
144void ieee80211_recalc_idle(struct ieee80211_local *local)
145{
146 u32 change = __ieee80211_recalc_idle(local, false);
fd0f979a
JB
147 if (change)
148 ieee80211_hw_config(local, change);
cc45ae54
JB
149}
150
0d143fe1
JB
151static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
152{
09b1426e 153 if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
0d143fe1 154 return -EINVAL;
0d143fe1 155
0d143fe1
JB
156 dev->mtu = new_mtu;
157 return 0;
158}
159
3899ba90 160static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
31eba5bc 161 bool check_dup)
478622e8 162{
ac20976d
HS
163 struct ieee80211_local *local = sdata->local;
164 struct ieee80211_sub_if_data *iter;
478622e8
HS
165 u64 new, mask, tmp;
166 u8 *m;
167 int ret = 0;
168
169 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
170 return 0;
171
172 m = addr;
173 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
174 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
175 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
176
177 m = local->hw.wiphy->addr_mask;
178 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
179 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
180 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
181
31eba5bc
FF
182 if (!check_dup)
183 return ret;
478622e8
HS
184
185 mutex_lock(&local->iflist_mtx);
ac20976d
HS
186 list_for_each_entry(iter, &local->interfaces, list) {
187 if (iter == sdata)
478622e8
HS
188 continue;
189
3899ba90
JL
190 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
191 !(iter->u.mntr_flags & MONITOR_FLAG_ACTIVE))
478622e8
HS
192 continue;
193
ac20976d 194 m = iter->vif.addr;
478622e8
HS
195 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
196 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
197 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
198
199 if ((new & ~mask) != (tmp & ~mask)) {
200 ret = -EINVAL;
201 break;
202 }
203 }
204 mutex_unlock(&local->iflist_mtx);
205
206 return ret;
207}
208
47846c9b
JB
209static int ieee80211_change_mac(struct net_device *dev, void *addr)
210{
211 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
fc5f7577 212 struct sockaddr *sa = addr;
31eba5bc 213 bool check_dup = true;
47846c9b
JB
214 int ret;
215
9607e6b6 216 if (ieee80211_sdata_running(sdata))
47846c9b
JB
217 return -EBUSY;
218
31eba5bc
FF
219 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
220 !(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
221 check_dup = false;
222
3899ba90 223 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
478622e8
HS
224 if (ret)
225 return ret;
226
fc5f7577 227 ret = eth_mac_addr(dev, sa);
47846c9b
JB
228
229 if (ret == 0)
fc5f7577 230 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
47846c9b
JB
231
232 return ret;
233}
234
0d143fe1
JB
235static inline int identical_mac_addr_allowed(int type1, int type2)
236{
237 return type1 == NL80211_IFTYPE_MONITOR ||
238 type2 == NL80211_IFTYPE_MONITOR ||
f142c6b9
JB
239 type1 == NL80211_IFTYPE_P2P_DEVICE ||
240 type2 == NL80211_IFTYPE_P2P_DEVICE ||
0d143fe1
JB
241 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
242 (type1 == NL80211_IFTYPE_WDS &&
243 (type2 == NL80211_IFTYPE_WDS ||
244 type2 == NL80211_IFTYPE_AP)) ||
245 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
246 (type1 == NL80211_IFTYPE_AP_VLAN &&
247 (type2 == NL80211_IFTYPE_AP ||
248 type2 == NL80211_IFTYPE_AP_VLAN));
249}
250
87490f6d
JB
251static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
252 enum nl80211_iftype iftype)
0d143fe1 253{
b4a4bf5d 254 struct ieee80211_local *local = sdata->local;
87490f6d 255 struct ieee80211_sub_if_data *nsdata;
b6a55015 256 int ret;
0d143fe1 257
87490f6d 258 ASSERT_RTNL();
0d143fe1
JB
259
260 /* we hold the RTNL here so can safely walk the list */
261 list_for_each_entry(nsdata, &local->interfaces, list) {
371a255e 262 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
239281f8
RL
263 /*
264 * Only OCB and monitor mode may coexist
265 */
266 if ((sdata->vif.type == NL80211_IFTYPE_OCB &&
267 nsdata->vif.type != NL80211_IFTYPE_MONITOR) ||
268 (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
269 nsdata->vif.type == NL80211_IFTYPE_OCB))
270 return -EBUSY;
271
0d143fe1
JB
272 /*
273 * Allow only a single IBSS interface to be up at any
274 * time. This is restricted because beacon distribution
275 * cannot work properly if both are in the same IBSS.
276 *
277 * To remove this restriction we'd have to disallow them
278 * from setting the same SSID on different IBSS interfaces
279 * belonging to the same hardware. Then, however, we're
280 * faced with having to adopt two different TSF timers...
281 */
87490f6d 282 if (iftype == NL80211_IFTYPE_ADHOC &&
0d143fe1
JB
283 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
284 return -EBUSY;
73da7d5b
SW
285 /*
286 * will not add another interface while any channel
287 * switch is active.
288 */
289 if (nsdata->vif.csa_active)
290 return -EBUSY;
0d143fe1
JB
291
292 /*
293 * The remaining checks are only performed for interfaces
294 * with the same MAC address.
295 */
371a255e
JB
296 if (!ether_addr_equal(sdata->vif.addr,
297 nsdata->vif.addr))
0d143fe1
JB
298 continue;
299
300 /*
301 * check whether it may have the same address
302 */
87490f6d 303 if (!identical_mac_addr_allowed(iftype,
0d143fe1
JB
304 nsdata->vif.type))
305 return -ENOTUNIQ;
306
307 /*
308 * can only add VLANs to enabled APs
309 */
87490f6d 310 if (iftype == NL80211_IFTYPE_AP_VLAN &&
0d143fe1
JB
311 nsdata->vif.type == NL80211_IFTYPE_AP)
312 sdata->bss = &nsdata->u.ap;
313 }
314 }
315
b6a55015
LC
316 mutex_lock(&local->chanctx_mtx);
317 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
318 mutex_unlock(&local->chanctx_mtx);
319 return ret;
87490f6d
JB
320}
321
a9865538
JB
322static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
323 enum nl80211_iftype iftype)
3a25a8c8
JB
324{
325 int n_queues = sdata->local->hw.queues;
326 int i;
327
a9865538 328 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
0ef24e52
IP
329 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
330 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
331 IEEE80211_INVAL_HW_QUEUE))
332 return -EINVAL;
333 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
334 n_queues))
335 return -EINVAL;
336 }
3a25a8c8
JB
337 }
338
a9865538
JB
339 if ((iftype != NL80211_IFTYPE_AP &&
340 iftype != NL80211_IFTYPE_P2P_GO &&
341 iftype != NL80211_IFTYPE_MESH_POINT) ||
30686bf7 342 !ieee80211_hw_check(&sdata->local->hw, QUEUE_CONTROL)) {
3a25a8c8
JB
343 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
344 return 0;
345 }
346
347 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
348 return -EINVAL;
349
350 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
351 return -EINVAL;
352
353 return 0;
354}
355
85416a4f
CL
356void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
357 const int offset)
358{
359 struct ieee80211_local *local = sdata->local;
360 u32 flags = sdata->u.mntr_flags;
361
362#define ADJUST(_f, _s) do { \
363 if (flags & MONITOR_FLAG_##_f) \
364 local->fif_##_s += offset; \
365 } while (0)
366
367 ADJUST(FCSFAIL, fcsfail);
368 ADJUST(PLCPFAIL, plcpfail);
369 ADJUST(CONTROL, control);
370 ADJUST(CONTROL, pspoll);
371 ADJUST(OTHER_BSS, other_bss);
372
373#undef ADJUST
374}
375
3a25a8c8
JB
376static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
377{
378 struct ieee80211_local *local = sdata->local;
379 int i;
380
381 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
30686bf7 382 if (ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
3a25a8c8 383 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
a9d3c05c 384 else if (local->hw.queues >= IEEE80211_NUM_ACS)
3a25a8c8 385 sdata->vif.hw_queue[i] = i;
a9d3c05c
JB
386 else
387 sdata->vif.hw_queue[i] = 0;
3a25a8c8
JB
388 }
389 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
390}
391
3c3e21e7 392int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
4b6f1dd6
JB
393{
394 struct ieee80211_sub_if_data *sdata;
8b305780 395 int ret;
4b6f1dd6 396
30686bf7 397 if (!ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF))
4b6f1dd6
JB
398 return 0;
399
8b305780 400 ASSERT_RTNL();
685fb72b 401
4b6f1dd6 402 if (local->monitor_sdata)
8b305780 403 return 0;
4b6f1dd6
JB
404
405 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
8b305780
JB
406 if (!sdata)
407 return -ENOMEM;
4b6f1dd6
JB
408
409 /* set up data */
410 sdata->local = local;
411 sdata->vif.type = NL80211_IFTYPE_MONITOR;
412 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
413 wiphy_name(local->hw.wiphy));
34171dc0 414 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
4b6f1dd6 415
2475b1cc
MS
416 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
417
3a25a8c8
JB
418 ieee80211_set_default_queues(sdata);
419
4b6f1dd6
JB
420 ret = drv_add_interface(local, sdata);
421 if (WARN_ON(ret)) {
422 /* ok .. stupid driver, it asked for this! */
423 kfree(sdata);
8b305780 424 return ret;
4b6f1dd6
JB
425 }
426
a9865538 427 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
3a25a8c8
JB
428 if (ret) {
429 kfree(sdata);
8b305780 430 return ret;
3a25a8c8
JB
431 }
432
fab57a6c
JB
433 mutex_lock(&local->iflist_mtx);
434 rcu_assign_pointer(local->monitor_sdata, sdata);
435 mutex_unlock(&local->iflist_mtx);
436
34a3740d 437 mutex_lock(&local->mtx);
4bf88530 438 ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
55de908a 439 IEEE80211_CHANCTX_EXCLUSIVE);
34a3740d 440 mutex_unlock(&local->mtx);
55de908a 441 if (ret) {
fab57a6c 442 mutex_lock(&local->iflist_mtx);
0c2bef46 443 RCU_INIT_POINTER(local->monitor_sdata, NULL);
fab57a6c
JB
444 mutex_unlock(&local->iflist_mtx);
445 synchronize_net();
55de908a
JB
446 drv_remove_interface(local, sdata);
447 kfree(sdata);
8b305780 448 return ret;
55de908a
JB
449 }
450
8b305780 451 return 0;
4b6f1dd6
JB
452}
453
3c3e21e7 454void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
4b6f1dd6
JB
455{
456 struct ieee80211_sub_if_data *sdata;
457
30686bf7 458 if (!ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF))
4b6f1dd6
JB
459 return;
460
8b305780
JB
461 ASSERT_RTNL();
462
685fb72b 463 mutex_lock(&local->iflist_mtx);
4b6f1dd6 464
685fb72b
JB
465 sdata = rcu_dereference_protected(local->monitor_sdata,
466 lockdep_is_held(&local->iflist_mtx));
8b305780
JB
467 if (!sdata) {
468 mutex_unlock(&local->iflist_mtx);
469 return;
470 }
4b6f1dd6 471
0c2bef46 472 RCU_INIT_POINTER(local->monitor_sdata, NULL);
8b305780
JB
473 mutex_unlock(&local->iflist_mtx);
474
4b6f1dd6
JB
475 synchronize_net();
476
34a3740d 477 mutex_lock(&local->mtx);
55de908a 478 ieee80211_vif_release_channel(sdata);
34a3740d 479 mutex_unlock(&local->mtx);
55de908a 480
4b6f1dd6
JB
481 drv_remove_interface(local, sdata);
482
483 kfree(sdata);
484}
485
34d4bc4d
JB
486/*
487 * NOTE: Be very careful when changing this function, it must NOT return
488 * an error on interface type changes that have been pre-checked, so most
489 * checks should be in ieee80211_check_concurrent_iface.
490 */
f142c6b9 491int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
87490f6d 492{
f142c6b9
JB
493 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
494 struct net_device *dev = wdev->netdev;
87490f6d
JB
495 struct ieee80211_local *local = sdata->local;
496 struct sta_info *sta;
497 u32 changed = 0;
498 int res;
499 u32 hw_reconf_flags = 0;
500
0d143fe1
JB
501 switch (sdata->vif.type) {
502 case NL80211_IFTYPE_WDS:
503 if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
504 return -ENOLINK;
505 break;
665c93a9
JB
506 case NL80211_IFTYPE_AP_VLAN: {
507 struct ieee80211_sub_if_data *master;
508
0d143fe1
JB
509 if (!sdata->bss)
510 return -ENOLINK;
665c93a9 511
4e141dad 512 mutex_lock(&local->mtx);
0d143fe1 513 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
4e141dad 514 mutex_unlock(&local->mtx);
665c93a9
JB
515
516 master = container_of(sdata->bss,
517 struct ieee80211_sub_if_data, u.ap);
518 sdata->control_port_protocol =
519 master->control_port_protocol;
520 sdata->control_port_no_encrypt =
521 master->control_port_no_encrypt;
1351c5d3
JB
522 sdata->vif.cab_queue = master->vif.cab_queue;
523 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
524 sizeof(sdata->vif.hw_queue));
2967e031 525 sdata->vif.bss_conf.chandef = master->vif.bss_conf.chandef;
f9dca80b
MK
526
527 mutex_lock(&local->key_mtx);
528 sdata->crypto_tx_tailroom_needed_cnt +=
529 master->crypto_tx_tailroom_needed_cnt;
530 mutex_unlock(&local->key_mtx);
531
0d143fe1 532 break;
665c93a9 533 }
0d143fe1
JB
534 case NL80211_IFTYPE_AP:
535 sdata->bss = &sdata->u.ap;
536 break;
537 case NL80211_IFTYPE_MESH_POINT:
0d143fe1
JB
538 case NL80211_IFTYPE_STATION:
539 case NL80211_IFTYPE_MONITOR:
540 case NL80211_IFTYPE_ADHOC:
f142c6b9 541 case NL80211_IFTYPE_P2P_DEVICE:
6e0bd6c3 542 case NL80211_IFTYPE_OCB:
0d143fe1
JB
543 /* no special treatment */
544 break;
545 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 546 case NUM_NL80211_IFTYPES:
2ca27bcf
JB
547 case NL80211_IFTYPE_P2P_CLIENT:
548 case NL80211_IFTYPE_P2P_GO:
0d143fe1
JB
549 /* cannot happen */
550 WARN_ON(1);
551 break;
552 }
553
554 if (local->open_count == 0) {
24487981 555 res = drv_start(local);
0d143fe1
JB
556 if (res)
557 goto err_del_bss;
e8975581
JB
558 /* we're brought up, everything changes */
559 hw_reconf_flags = ~0;
1f87f7d3 560 ieee80211_led_radio(local, true);
67408c8c
JB
561 ieee80211_mod_tpt_led_trig(local,
562 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
0d143fe1
JB
563 }
564
565 /*
bf533e0b
JB
566 * Copy the hopefully now-present MAC address to
567 * this interface, if it has the special null one.
0d143fe1 568 */
f142c6b9 569 if (dev && is_zero_ether_addr(dev->dev_addr)) {
bf533e0b
JB
570 memcpy(dev->dev_addr,
571 local->hw.wiphy->perm_addr,
572 ETH_ALEN);
573 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
574
575 if (!is_valid_ether_addr(dev->dev_addr)) {
4d6c36fa
JB
576 res = -EADDRNOTAVAIL;
577 goto err_stop;
0adc23f5 578 }
0d143fe1
JB
579 }
580
0d143fe1
JB
581 switch (sdata->vif.type) {
582 case NL80211_IFTYPE_AP_VLAN:
4d76d21b
JB
583 /* no need to tell driver, but set carrier and chanctx */
584 if (rtnl_dereference(sdata->bss->beacon)) {
585 ieee80211_vif_vlan_copy_chanctx(sdata);
3edaf3e6 586 netif_carrier_on(dev);
4d76d21b 587 } else {
3edaf3e6 588 netif_carrier_off(dev);
4d76d21b 589 }
0d143fe1
JB
590 break;
591 case NL80211_IFTYPE_MONITOR:
592 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
593 local->cooked_mntrs++;
594 break;
595 }
596
31eba5bc
FF
597 if (sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE) {
598 res = drv_add_interface(local, sdata);
599 if (res)
600 goto err_stop;
601 } else if (local->monitors == 0 && local->open_count == 0) {
075e0847
JB
602 res = ieee80211_add_virtual_monitor(local);
603 if (res)
604 goto err_stop;
605 }
606
0d143fe1
JB
607 /* must be before the call to ieee80211_configure_filter */
608 local->monitors++;
e8975581 609 if (local->monitors == 1) {
0869aea0
JB
610 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
611 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
e8975581 612 }
0d143fe1 613
85416a4f 614 ieee80211_adjust_monitor_flags(sdata, 1);
0d143fe1 615 ieee80211_configure_filter(local);
801d929c
FF
616 mutex_lock(&local->mtx);
617 ieee80211_recalc_idle(local);
618 mutex_unlock(&local->mtx);
53e9b1de
DG
619
620 netif_carrier_on(dev);
0d143fe1 621 break;
0d143fe1 622 default:
34d4bc4d 623 if (coming_up) {
075e0847
JB
624 ieee80211_del_virtual_monitor(local);
625
7b7eab6f 626 res = drv_add_interface(local, sdata);
34d4bc4d
JB
627 if (res)
628 goto err_stop;
a9865538
JB
629 res = ieee80211_check_queues(sdata,
630 ieee80211_vif_type_p2p(&sdata->vif));
3a25a8c8
JB
631 if (res)
632 goto err_del_interface;
34d4bc4d 633 }
0d143fe1 634
29cbe68c 635 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e3b90ca2 636 local->fif_pspoll++;
7be5086d 637 local->fif_probe_req++;
e3b90ca2 638
e3b90ca2 639 ieee80211_configure_filter(local);
7be5086d
JB
640 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
641 local->fif_probe_req++;
a3c9aa51 642 }
e3b90ca2 643
f142c6b9
JB
644 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
645 changed |= ieee80211_reset_erp_info(sdata);
0d143fe1 646 ieee80211_bss_info_change_notify(sdata, changed);
0d143fe1 647
c405c629
JB
648 switch (sdata->vif.type) {
649 case NL80211_IFTYPE_STATION:
650 case NL80211_IFTYPE_ADHOC:
651 case NL80211_IFTYPE_AP:
652 case NL80211_IFTYPE_MESH_POINT:
6e0bd6c3 653 case NL80211_IFTYPE_OCB:
0d143fe1 654 netif_carrier_off(dev);
c405c629 655 break;
1411af15 656 case NL80211_IFTYPE_WDS:
f142c6b9 657 case NL80211_IFTYPE_P2P_DEVICE:
1411af15 658 break;
c405c629 659 default:
a2310824
JB
660 /* not reached */
661 WARN_ON(1);
c405c629 662 }
59034591
EP
663
664 /*
cec66283 665 * Set default queue parameters so drivers don't
59034591 666 * need to initialise the hardware if the hardware
cec66283
JB
667 * doesn't start up with sane defaults.
668 * Enable QoS for anything but station interfaces.
59034591 669 */
cec66283
JB
670 ieee80211_set_wmm_default(sdata, true,
671 sdata->vif.type != NL80211_IFTYPE_STATION);
0d143fe1
JB
672 }
673
2d2080c3
JB
674 set_bit(SDATA_STATE_RUNNING, &sdata->state);
675
0d143fe1
JB
676 if (sdata->vif.type == NL80211_IFTYPE_WDS) {
677 /* Create STA entry for the WDS peer */
678 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
679 GFP_KERNEL);
680 if (!sta) {
681 res = -ENOMEM;
682 goto err_del_interface;
683 }
684
83d5cc01
JB
685 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
686 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
687 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
0d143fe1
JB
688
689 res = sta_info_insert(sta);
690 if (res) {
691 /* STA has been freed */
692 goto err_del_interface;
693 }
1be7fe8d
BJ
694
695 rate_control_rate_init(sta);
1411af15 696 netif_carrier_on(dev);
f142c6b9
JB
697 } else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
698 rcu_assign_pointer(local->p2p_sdata, sdata);
0d143fe1
JB
699 }
700
0d143fe1
JB
701 /*
702 * set_multicast_list will be invoked by the networking core
703 * which will check whether any increments here were done in
704 * error and sync them down to the hardware as filter flags.
705 */
706 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
707 atomic_inc(&local->iff_allmultis);
708
34d4bc4d
JB
709 if (coming_up)
710 local->open_count++;
711
59034591 712 if (hw_reconf_flags)
e8975581 713 ieee80211_hw_config(local, hw_reconf_flags);
0d143fe1 714
4a733ef1 715 ieee80211_recalc_ps(local);
965bedad 716
2b436312
JB
717 if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
718 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
719 /* XXX: for AP_VLAN, actually track AP queues */
720 netif_tx_start_all_queues(dev);
721 } else if (dev) {
2b730daa
JB
722 unsigned long flags;
723 int n_acs = IEEE80211_NUM_ACS;
724 int ac;
725
726 if (local->hw.queues < IEEE80211_NUM_ACS)
727 n_acs = 1;
728
729 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
730 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
731 (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
732 skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
733 for (ac = 0; ac < n_acs; ac++) {
734 int ac_queue = sdata->vif.hw_queue[ac];
735
736 if (local->queue_stop_reasons[ac_queue] == 0 &&
737 skb_queue_empty(&local->pending[ac_queue]))
738 netif_start_subqueue(dev, ac);
739 }
740 }
741 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
742 }
0d143fe1
JB
743
744 return 0;
745 err_del_interface:
7b7eab6f 746 drv_remove_interface(local, sdata);
0d143fe1 747 err_stop:
24487981
JB
748 if (!local->open_count)
749 drv_stop(local);
0d143fe1
JB
750 err_del_bss:
751 sdata->bss = NULL;
4e141dad
MK
752 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
753 mutex_lock(&local->mtx);
0d143fe1 754 list_del(&sdata->u.vlan.list);
4e141dad
MK
755 mutex_unlock(&local->mtx);
756 }
4d6c36fa 757 /* might already be clear but that doesn't matter */
2d2080c3 758 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
0d143fe1
JB
759 return res;
760}
761
34d4bc4d 762static int ieee80211_open(struct net_device *dev)
0d143fe1
JB
763{
764 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
34d4bc4d
JB
765 int err;
766
767 /* fail early if user set an invalid address */
2fcf2824 768 if (!is_valid_ether_addr(dev->dev_addr))
34d4bc4d
JB
769 return -EADDRNOTAVAIL;
770
771 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
772 if (err)
773 return err;
774
f142c6b9 775 return ieee80211_do_open(&sdata->wdev, true);
34d4bc4d
JB
776}
777
778static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
779 bool going_down)
780{
0d143fe1 781 struct ieee80211_local *local = sdata->local;
5061b0c2
JB
782 unsigned long flags;
783 struct sk_buff *skb, *tmp;
e8975581 784 u32 hw_reconf_flags = 0;
09f4114e 785 int i, flushed;
397a7a24 786 struct ps_data *ps;
d2859df5 787 struct cfg80211_chan_def chandef;
46238845 788 bool cancel_scan;
0d143fe1 789
c29acf20
RM
790 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
791
46238845
JB
792 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
793 if (cancel_scan)
352ffad6
BC
794 ieee80211_scan_cancel(local);
795
0d143fe1
JB
796 /*
797 * Stop TX on this interface first.
798 */
f142c6b9
JB
799 if (sdata->dev)
800 netif_tx_stop_all_queues(sdata->dev);
0d143fe1 801
c8f994ee 802 ieee80211_roc_purge(local, sdata);
af6b6374 803
8ffcc704
EG
804 switch (sdata->vif.type) {
805 case NL80211_IFTYPE_STATION:
572078be 806 ieee80211_mgd_stop(sdata);
8ffcc704
EG
807 break;
808 case NL80211_IFTYPE_ADHOC:
cd7760e6 809 ieee80211_ibss_stop(sdata);
8ffcc704
EG
810 break;
811 case NL80211_IFTYPE_AP:
812 cancel_work_sync(&sdata->u.ap.request_smps_work);
813 break;
814 default:
815 break;
816 }
cd7760e6 817
0d143fe1
JB
818 /*
819 * Remove all stations associated with this interface.
820 *
821 * This must be done before calling ops->remove_interface()
822 * because otherwise we can later invoke ops->sta_notify()
823 * whenever the STAs are removed, and that invalidates driver
824 * assumptions about always getting a vif pointer that is valid
825 * (because if we remove a STA after ops->remove_interface()
826 * the driver will have removed the vif info already!)
827 *
5eb8f4d7
JB
828 * In WDS mode a station must exist here and be flushed, for
829 * AP_VLANs stations may exist since there's nothing else that
830 * would have removed them, but in other modes there shouldn't
831 * be any stations.
0d143fe1 832 */
d34ba216 833 flushed = sta_info_flush(sdata);
5eb8f4d7
JB
834 WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
835 ((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
836 (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1)));
0d143fe1 837
df140465 838 /* don't count this interface for allmulti while it is down */
0d143fe1
JB
839 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
840 atomic_dec(&local->iff_allmultis);
841
7be5086d 842 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e3b90ca2 843 local->fif_pspoll--;
7be5086d
JB
844 local->fif_probe_req--;
845 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
846 local->fif_probe_req--;
847 }
e3b90ca2 848
f142c6b9
JB
849 if (sdata->dev) {
850 netif_addr_lock_bh(sdata->dev);
851 spin_lock_bh(&local->filter_lock);
852 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
853 sdata->dev->addr_len);
854 spin_unlock_bh(&local->filter_lock);
855 netif_addr_unlock_bh(sdata->dev);
f142c6b9 856 }
3ac64bee 857
7cbf0ba5
VN
858 del_timer_sync(&local->dynamic_ps_timer);
859 cancel_work_sync(&local->dynamic_ps_enable_work);
0d143fe1 860
04ecd257 861 cancel_work_sync(&sdata->recalc_smps);
dbd72850 862 sdata_lock(sdata);
59af6928 863 mutex_lock(&local->mtx);
73da7d5b 864 sdata->vif.csa_active = false;
0c21e632
LC
865 if (sdata->vif.type == NL80211_IFTYPE_STATION)
866 sdata->u.mgd.csa_waiting_bcn = false;
a46992b4
LC
867 if (sdata->csa_block_tx) {
868 ieee80211_wake_vif_queues(local, sdata,
869 IEEE80211_QUEUE_STOP_REASON_CSA);
870 sdata->csa_block_tx = false;
871 }
59af6928 872 mutex_unlock(&local->mtx);
dbd72850 873 sdata_unlock(sdata);
59af6928 874
73da7d5b 875 cancel_work_sync(&sdata->csa_finalize_work);
04ecd257 876
164eb02d
SW
877 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
878
879 if (sdata->wdev.cac_started) {
d2859df5 880 chandef = sdata->vif.bss_conf.chandef;
b2c0958b 881 WARN_ON(local->suspended);
34a3740d 882 mutex_lock(&local->mtx);
164eb02d 883 ieee80211_vif_release_channel(sdata);
34a3740d 884 mutex_unlock(&local->mtx);
d2859df5
JD
885 cfg80211_cac_event(sdata->dev, &chandef,
886 NL80211_RADAR_CAC_ABORTED,
164eb02d
SW
887 GFP_KERNEL);
888 }
889
0d143fe1
JB
890 /* APs need special treatment */
891 if (sdata->vif.type == NL80211_IFTYPE_AP) {
57c9fff3 892 struct ieee80211_sub_if_data *vlan, *tmpsdata;
0d143fe1
JB
893
894 /* down all dependent devices, that is VLANs */
57c9fff3 895 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
0d143fe1
JB
896 u.vlan.list)
897 dev_close(vlan->dev);
898 WARN_ON(!list_empty(&sdata->u.ap.vlans));
397a7a24
MB
899 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
900 /* remove all packets in parent bc_buf pointing to this dev */
901 ps = &sdata->bss->ps;
902
903 spin_lock_irqsave(&ps->bc_buf.lock, flags);
904 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
905 if (skb->dev == sdata->dev) {
906 __skb_unlink(skb, &ps->bc_buf);
907 local->total_ps_buffered--;
908 ieee80211_free_txskb(&local->hw, skb);
909 }
910 }
911 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
0d143fe1
JB
912 }
913
34d4bc4d
JB
914 if (going_down)
915 local->open_count--;
0d143fe1
JB
916
917 switch (sdata->vif.type) {
918 case NL80211_IFTYPE_AP_VLAN:
4e141dad 919 mutex_lock(&local->mtx);
0d143fe1 920 list_del(&sdata->u.vlan.list);
4e141dad 921 mutex_unlock(&local->mtx);
0c2bef46 922 RCU_INIT_POINTER(sdata->vif.chanctx_conf, NULL);
10b68487
FF
923 /* see comment in the default case below */
924 ieee80211_free_keys(sdata, true);
0d143fe1
JB
925 /* no need to tell driver */
926 break;
927 case NL80211_IFTYPE_MONITOR:
928 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
929 local->cooked_mntrs--;
930 break;
931 }
932
933 local->monitors--;
e8975581 934 if (local->monitors == 0) {
0869aea0
JB
935 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
936 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
e8975581 937 }
0d143fe1 938
85416a4f 939 ieee80211_adjust_monitor_flags(sdata, -1);
0d143fe1 940 break;
f142c6b9
JB
941 case NL80211_IFTYPE_P2P_DEVICE:
942 /* relies on synchronize_rcu() below */
0c2bef46 943 RCU_INIT_POINTER(local->p2p_sdata, NULL);
f142c6b9 944 /* fall through */
0d143fe1 945 default:
0b7dff4f 946 cancel_work_sync(&sdata->work);
35f20c14
JB
947 /*
948 * When we get here, the interface is marked down.
7907c7d3 949 * Free the remaining keys, if there are any
10b68487
FF
950 * (which can happen in AP mode if userspace sets
951 * keys before the interface is operating, and maybe
952 * also in WDS mode)
75de9113 953 *
7907c7d3
JB
954 * Force the key freeing to always synchronize_net()
955 * to wait for the RX path in case it is using this
10b68487 956 * interface enqueuing frames at this very time on
75de9113 957 * another CPU.
35f20c14 958 */
7907c7d3 959 ieee80211_free_keys(sdata, true);
1861b845 960 skb_queue_purge(&sdata->skb_queue);
0d143fe1
JB
961 }
962
963 sdata->bss = NULL;
964
5061b0c2
JB
965 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
966 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
967 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
968 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
969 if (info->control.vif == &sdata->vif) {
970 __skb_unlink(skb, &local->pending[i]);
d4fa14cd 971 ieee80211_free_txskb(&local->hw, skb);
5061b0c2
JB
972 }
973 }
974 }
975 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
075e0847 976
ba8c3d6f
FF
977 if (sdata->vif.txq) {
978 struct txq_info *txqi = to_txq_info(sdata->vif.txq);
979
2a58d42c 980 spin_lock_bh(&txqi->queue.lock);
ba8c3d6f 981 ieee80211_purge_tx_queue(&local->hw, &txqi->queue);
2a58d42c
MK
982 spin_unlock_bh(&txqi->queue.lock);
983
ba8c3d6f
FF
984 atomic_set(&sdata->txqs_len[txqi->txq.ac], 0);
985 }
986
b2c0958b
JB
987 if (local->open_count == 0)
988 ieee80211_clear_tx_pending(local);
989
990 /*
991 * If the interface goes down while suspended, presumably because
992 * the device was unplugged and that happens before our resume,
993 * then the driver is already unconfigured and the remainder of
994 * this function isn't needed.
995 * XXX: what about WoWLAN? If the device has software state, e.g.
996 * memory allocated, it might expect teardown commands from
997 * mac80211 here?
998 */
999 if (local->suspended) {
1000 WARN_ON(local->wowlan);
1001 WARN_ON(rtnl_dereference(local->monitor_sdata));
1002 return;
1003 }
1004
1005 switch (sdata->vif.type) {
1006 case NL80211_IFTYPE_AP_VLAN:
1007 break;
1008 case NL80211_IFTYPE_MONITOR:
1009 if (local->monitors == 0)
1010 ieee80211_del_virtual_monitor(local);
1011
1012 mutex_lock(&local->mtx);
1013 ieee80211_recalc_idle(local);
1014 mutex_unlock(&local->mtx);
31eba5bc
FF
1015
1016 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
1017 break;
1018
1019 /* fall through */
b2c0958b
JB
1020 default:
1021 if (going_down)
1022 drv_remove_interface(local, sdata);
1023 }
1024
4a733ef1 1025 ieee80211_recalc_ps(local);
b2c0958b 1026
46238845
JB
1027 if (cancel_scan)
1028 flush_delayed_work(&local->scan_work);
1029
b2c0958b
JB
1030 if (local->open_count == 0) {
1031 ieee80211_stop_device(local);
1032
1033 /* no reconfiguring after stop! */
1034 return;
1035 }
1036
1037 /* do after stop to avoid reconfiguring when we stop anyway */
1038 ieee80211_configure_filter(local);
1039 ieee80211_hw_config(local, hw_reconf_flags);
1040
1041 if (local->monitors == local->open_count)
075e0847 1042 ieee80211_add_virtual_monitor(local);
34d4bc4d
JB
1043}
1044
1045static int ieee80211_stop(struct net_device *dev)
1046{
1047 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1048
1049 ieee80211_do_stop(sdata, true);
5061b0c2 1050
0d143fe1
JB
1051 return 0;
1052}
1053
1054static void ieee80211_set_multicast_list(struct net_device *dev)
1055{
0d143fe1 1056 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
b4a4bf5d 1057 struct ieee80211_local *local = sdata->local;
df140465 1058 int allmulti, sdata_allmulti;
0d143fe1
JB
1059
1060 allmulti = !!(dev->flags & IFF_ALLMULTI);
0d143fe1 1061 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
0d143fe1
JB
1062
1063 if (allmulti != sdata_allmulti) {
1064 if (dev->flags & IFF_ALLMULTI)
1065 atomic_inc(&local->iff_allmultis);
1066 else
1067 atomic_dec(&local->iff_allmultis);
1068 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
1069 }
1070
3b8d81e0 1071 spin_lock_bh(&local->filter_lock);
22bedad3 1072 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
3b8d81e0 1073 spin_unlock_bh(&local->filter_lock);
3ac64bee 1074 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
0d143fe1
JB
1075}
1076
75636525
JB
1077/*
1078 * Called when the netdev is removed or, by the code below, before
1079 * the interface type changes.
1080 */
f142c6b9 1081static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
f0706e82
JB
1082{
1083 int i;
1084
75636525 1085 /* free extra data */
7907c7d3 1086 ieee80211_free_keys(sdata, false);
75636525 1087
aee14ceb
JM
1088 ieee80211_debugfs_remove_netdev(sdata);
1089
f0706e82 1090 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
75636525
JB
1091 __skb_queue_purge(&sdata->fragments[i].skb_list);
1092 sdata->fragment_next = 0;
11a843b7 1093
b9dcf712
JB
1094 if (ieee80211_vif_is_mesh(&sdata->vif))
1095 mesh_rmc_free(sdata);
f0706e82
JB
1096}
1097
f142c6b9
JB
1098static void ieee80211_uninit(struct net_device *dev)
1099{
1100 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
1101}
1102
cf0277e7 1103static u16 ieee80211_netdev_select_queue(struct net_device *dev,
f663dd9a 1104 struct sk_buff *skb,
99932d4f
DB
1105 void *accel_priv,
1106 select_queue_fallback_t fallback)
cf0277e7
JB
1107{
1108 return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
1109}
1110
5a490510
JB
1111static struct rtnl_link_stats64 *
1112ieee80211_get_stats64(struct net_device *dev, struct rtnl_link_stats64 *stats)
1113{
1114 int i;
1115
1116 for_each_possible_cpu(i) {
1117 const struct pcpu_sw_netstats *tstats;
1118 u64 rx_packets, rx_bytes, tx_packets, tx_bytes;
1119 unsigned int start;
1120
1121 tstats = per_cpu_ptr(dev->tstats, i);
1122
1123 do {
1124 start = u64_stats_fetch_begin_irq(&tstats->syncp);
1125 rx_packets = tstats->rx_packets;
1126 tx_packets = tstats->tx_packets;
1127 rx_bytes = tstats->rx_bytes;
1128 tx_bytes = tstats->tx_bytes;
1129 } while (u64_stats_fetch_retry_irq(&tstats->syncp, start));
1130
1131 stats->rx_packets += rx_packets;
1132 stats->tx_packets += tx_packets;
1133 stats->rx_bytes += rx_bytes;
1134 stats->tx_bytes += tx_bytes;
1135 }
1136
1137 return stats;
1138}
1139
587e729e
JB
1140static const struct net_device_ops ieee80211_dataif_ops = {
1141 .ndo_open = ieee80211_open,
1142 .ndo_stop = ieee80211_stop,
f142c6b9 1143 .ndo_uninit = ieee80211_uninit,
587e729e 1144 .ndo_start_xmit = ieee80211_subif_start_xmit,
afc4b13d 1145 .ndo_set_rx_mode = ieee80211_set_multicast_list,
587e729e 1146 .ndo_change_mtu = ieee80211_change_mtu,
47846c9b 1147 .ndo_set_mac_address = ieee80211_change_mac,
cf0277e7 1148 .ndo_select_queue = ieee80211_netdev_select_queue,
5a490510 1149 .ndo_get_stats64 = ieee80211_get_stats64,
587e729e
JB
1150};
1151
cf0277e7 1152static u16 ieee80211_monitor_select_queue(struct net_device *dev,
f663dd9a 1153 struct sk_buff *skb,
99932d4f
DB
1154 void *accel_priv,
1155 select_queue_fallback_t fallback)
cf0277e7
JB
1156{
1157 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1158 struct ieee80211_local *local = sdata->local;
1159 struct ieee80211_hdr *hdr;
1160 struct ieee80211_radiotap_header *rtap = (void *)skb->data;
1161
32c5057b 1162 if (local->hw.queues < IEEE80211_NUM_ACS)
cf0277e7
JB
1163 return 0;
1164
1165 if (skb->len < 4 ||
b49bb574 1166 skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */)
cf0277e7
JB
1167 return 0; /* doesn't matter, frame will be dropped */
1168
b49bb574 1169 hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len));
cf0277e7 1170
00e96dec 1171 return ieee80211_select_queue_80211(sdata, skb, hdr);
cf0277e7
JB
1172}
1173
587e729e
JB
1174static const struct net_device_ops ieee80211_monitorif_ops = {
1175 .ndo_open = ieee80211_open,
1176 .ndo_stop = ieee80211_stop,
f142c6b9 1177 .ndo_uninit = ieee80211_uninit,
587e729e 1178 .ndo_start_xmit = ieee80211_monitor_start_xmit,
afc4b13d 1179 .ndo_set_rx_mode = ieee80211_set_multicast_list,
587e729e 1180 .ndo_change_mtu = ieee80211_change_mtu,
31eba5bc 1181 .ndo_set_mac_address = ieee80211_change_mac,
cf0277e7 1182 .ndo_select_queue = ieee80211_monitor_select_queue,
5a490510 1183 .ndo_get_stats64 = ieee80211_get_stats64,
587e729e
JB
1184};
1185
5a490510
JB
1186static void ieee80211_if_free(struct net_device *dev)
1187{
1188 free_percpu(dev->tstats);
1189 free_netdev(dev);
1190}
1191
587e729e
JB
1192static void ieee80211_if_setup(struct net_device *dev)
1193{
1194 ether_setup(dev);
550fd08c 1195 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
587e729e 1196 dev->netdev_ops = &ieee80211_dataif_ops;
5a490510 1197 dev->destructor = ieee80211_if_free;
587e729e
JB
1198}
1199
1fa57d01
JB
1200static void ieee80211_iface_work(struct work_struct *work)
1201{
1202 struct ieee80211_sub_if_data *sdata =
1203 container_of(work, struct ieee80211_sub_if_data, work);
1204 struct ieee80211_local *local = sdata->local;
1205 struct sk_buff *skb;
344eec67 1206 struct sta_info *sta;
c1475ca9 1207 struct ieee80211_ra_tid *ra_tid;
08cf42e8 1208 struct ieee80211_rx_agg *rx_agg;
1fa57d01
JB
1209
1210 if (!ieee80211_sdata_running(sdata))
1211 return;
1212
fc58c47e 1213 if (test_bit(SCAN_SW_SCANNING, &local->scanning))
1fa57d01
JB
1214 return;
1215
4afaff17 1216 if (!ieee80211_can_run_worker(local))
1fa57d01
JB
1217 return;
1218
1219 /* first process frames */
1220 while ((skb = skb_dequeue(&sdata->skb_queue))) {
bed7ee6e
JB
1221 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1222
c1475ca9
JB
1223 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) {
1224 ra_tid = (void *)&skb->cb;
1225 ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra,
1226 ra_tid->tid);
1227 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) {
1228 ra_tid = (void *)&skb->cb;
1229 ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra,
1230 ra_tid->tid);
08cf42e8
MK
1231 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_START) {
1232 rx_agg = (void *)&skb->cb;
1233 mutex_lock(&local->sta_mtx);
1234 sta = sta_info_get_bss(sdata, rx_agg->addr);
4549cf2b 1235 if (sta)
08cf42e8 1236 __ieee80211_start_rx_ba_session(sta,
4549cf2b 1237 0, 0, 0, 1, rx_agg->tid,
08cf42e8 1238 IEEE80211_MAX_AMPDU_BUF,
4549cf2b 1239 false, true);
08cf42e8
MK
1240 mutex_unlock(&local->sta_mtx);
1241 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_STOP) {
1242 rx_agg = (void *)&skb->cb;
1243 mutex_lock(&local->sta_mtx);
1244 sta = sta_info_get_bss(sdata, rx_agg->addr);
1245 if (sta)
1246 __ieee80211_stop_rx_ba_session(sta,
1247 rx_agg->tid,
1248 WLAN_BACK_RECIPIENT, 0,
1249 false);
1250 mutex_unlock(&local->sta_mtx);
c1475ca9
JB
1251 } else if (ieee80211_is_action(mgmt->frame_control) &&
1252 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
bed7ee6e 1253 int len = skb->len;
bed7ee6e 1254
a93e3644 1255 mutex_lock(&local->sta_mtx);
875ae5f6 1256 sta = sta_info_get_bss(sdata, mgmt->sa);
bed7ee6e
JB
1257 if (sta) {
1258 switch (mgmt->u.action.u.addba_req.action_code) {
1259 case WLAN_ACTION_ADDBA_REQ:
1260 ieee80211_process_addba_request(
1261 local, sta, mgmt, len);
1262 break;
1263 case WLAN_ACTION_ADDBA_RESP:
1264 ieee80211_process_addba_resp(local, sta,
1265 mgmt, len);
1266 break;
1267 case WLAN_ACTION_DELBA:
1268 ieee80211_process_delba(sdata, sta,
1269 mgmt, len);
1270 break;
1271 default:
1272 WARN_ON(1);
1273 break;
1274 }
1275 }
a93e3644 1276 mutex_unlock(&local->sta_mtx);
23a1f8d4
SS
1277 } else if (ieee80211_is_action(mgmt->frame_control) &&
1278 mgmt->u.action.category == WLAN_CATEGORY_VHT) {
1279 switch (mgmt->u.action.u.vht_group_notif.action_code) {
1280 case WLAN_VHT_ACTION_GROUPID_MGMT:
1281 ieee80211_process_mu_groups(sdata, mgmt);
1282 break;
1283 default:
1284 WARN_ON(1);
1285 break;
1286 }
344eec67
JB
1287 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1288 struct ieee80211_hdr *hdr = (void *)mgmt;
1289 /*
1290 * So the frame isn't mgmt, but frame_control
1291 * is at the right place anyway, of course, so
1292 * the if statement is correct.
1293 *
1294 * Warn if we have other data frame types here,
1295 * they must not get here.
1296 */
1297 WARN_ON(hdr->frame_control &
1298 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1299 WARN_ON(!(hdr->seq_ctrl &
1300 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1301 /*
1302 * This was a fragment of a frame, received while
1303 * a block-ack session was active. That cannot be
1304 * right, so terminate the session.
1305 */
a93e3644 1306 mutex_lock(&local->sta_mtx);
875ae5f6 1307 sta = sta_info_get_bss(sdata, mgmt->sa);
344eec67
JB
1308 if (sta) {
1309 u16 tid = *ieee80211_get_qos_ctl(hdr) &
1310 IEEE80211_QOS_CTL_TID_MASK;
1311
1312 __ieee80211_stop_rx_ba_session(
1313 sta, tid, WLAN_BACK_RECIPIENT,
53f73c09
JB
1314 WLAN_REASON_QSTA_REQUIRE_SETUP,
1315 true);
344eec67 1316 }
a93e3644 1317 mutex_unlock(&local->sta_mtx);
bed7ee6e 1318 } else switch (sdata->vif.type) {
1fa57d01
JB
1319 case NL80211_IFTYPE_STATION:
1320 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1321 break;
1322 case NL80211_IFTYPE_ADHOC:
1323 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1324 break;
1325 case NL80211_IFTYPE_MESH_POINT:
1326 if (!ieee80211_vif_is_mesh(&sdata->vif))
1327 break;
1328 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1329 break;
1330 default:
1331 WARN(1, "frame for unexpected interface type");
1fa57d01
JB
1332 break;
1333 }
36b3a628
JB
1334
1335 kfree_skb(skb);
1fa57d01
JB
1336 }
1337
1338 /* then other type-dependent work */
1339 switch (sdata->vif.type) {
1340 case NL80211_IFTYPE_STATION:
1341 ieee80211_sta_work(sdata);
1342 break;
1343 case NL80211_IFTYPE_ADHOC:
1344 ieee80211_ibss_work(sdata);
1345 break;
1346 case NL80211_IFTYPE_MESH_POINT:
1347 if (!ieee80211_vif_is_mesh(&sdata->vif))
1348 break;
1349 ieee80211_mesh_work(sdata);
1350 break;
239281f8
RL
1351 case NL80211_IFTYPE_OCB:
1352 ieee80211_ocb_work(sdata);
1353 break;
1fa57d01
JB
1354 default:
1355 break;
1356 }
1357}
1358
04ecd257
JB
1359static void ieee80211_recalc_smps_work(struct work_struct *work)
1360{
1361 struct ieee80211_sub_if_data *sdata =
1362 container_of(work, struct ieee80211_sub_if_data, recalc_smps);
1363
1364 ieee80211_recalc_smps(sdata);
1365}
1fa57d01 1366
75636525
JB
1367/*
1368 * Helper function to initialise an interface to a specific type.
1369 */
1370static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
05c914fe 1371 enum nl80211_iftype type)
f0706e82 1372{
239281f8
RL
1373 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff,
1374 0xff, 0xff, 0xff};
1375
75636525
JB
1376 /* clear type-dependent union */
1377 memset(&sdata->u, 0, sizeof(sdata->u));
1378
1379 /* and set some type-dependent values */
1380 sdata->vif.type = type;
2ca27bcf 1381 sdata->vif.p2p = false;
60719ffd 1382 sdata->wdev.iftype = type;
75636525 1383
a621fa4d
JB
1384 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1385 sdata->control_port_no_encrypt = false;
2475b1cc 1386 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
d3a58df8 1387 sdata->vif.bss_conf.idle = true;
a621fa4d 1388
b53be792
SW
1389 sdata->noack_map = 0;
1390
f142c6b9
JB
1391 /* only monitor/p2p-device differ */
1392 if (sdata->dev) {
1393 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1394 sdata->dev->type = ARPHRD_ETHER;
1395 }
75636525 1396
35f20c14 1397 skb_queue_head_init(&sdata->skb_queue);
1fa57d01 1398 INIT_WORK(&sdata->work, ieee80211_iface_work);
04ecd257 1399 INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work);
73da7d5b 1400 INIT_WORK(&sdata->csa_finalize_work, ieee80211_csa_finalize_work);
484298ad 1401 INIT_LIST_HEAD(&sdata->assigned_chanctx_list);
e3afb920 1402 INIT_LIST_HEAD(&sdata->reserved_chanctx_list);
35f20c14 1403
75636525 1404 switch (type) {
2ca27bcf
JB
1405 case NL80211_IFTYPE_P2P_GO:
1406 type = NL80211_IFTYPE_AP;
1407 sdata->vif.type = type;
1408 sdata->vif.p2p = true;
1409 /* fall through */
05c914fe 1410 case NL80211_IFTYPE_AP:
d012a605 1411 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
75636525 1412 INIT_LIST_HEAD(&sdata->u.ap.vlans);
687da132
EG
1413 INIT_WORK(&sdata->u.ap.request_smps_work,
1414 ieee80211_request_smps_ap_work);
ad2d223a 1415 sdata->vif.bss_conf.bssid = sdata->vif.addr;
687da132 1416 sdata->u.ap.req_smps = IEEE80211_SMPS_OFF;
75636525 1417 break;
2ca27bcf
JB
1418 case NL80211_IFTYPE_P2P_CLIENT:
1419 type = NL80211_IFTYPE_STATION;
1420 sdata->vif.type = type;
1421 sdata->vif.p2p = true;
1422 /* fall through */
05c914fe 1423 case NL80211_IFTYPE_STATION:
ad2d223a 1424 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
9c6bd790 1425 ieee80211_sta_setup_sdata(sdata);
472dbc45 1426 break;
6e0bd6c3 1427 case NL80211_IFTYPE_OCB:
239281f8
RL
1428 sdata->vif.bss_conf.bssid = bssid_wildcard;
1429 ieee80211_ocb_setup_sdata(sdata);
6e0bd6c3 1430 break;
46900298 1431 case NL80211_IFTYPE_ADHOC:
ad2d223a 1432 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
46900298
JB
1433 ieee80211_ibss_setup_sdata(sdata);
1434 break;
05c914fe 1435 case NL80211_IFTYPE_MESH_POINT:
75636525
JB
1436 if (ieee80211_vif_is_mesh(&sdata->vif))
1437 ieee80211_mesh_init_sdata(sdata);
1438 break;
05c914fe 1439 case NL80211_IFTYPE_MONITOR:
75636525 1440 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
587e729e 1441 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
75636525
JB
1442 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL |
1443 MONITOR_FLAG_OTHER_BSS;
1444 break;
05c914fe 1445 case NL80211_IFTYPE_WDS:
ad2d223a
JB
1446 sdata->vif.bss_conf.bssid = NULL;
1447 break;
05c914fe 1448 case NL80211_IFTYPE_AP_VLAN:
98104fde 1449 case NL80211_IFTYPE_P2P_DEVICE:
ad2d223a 1450 sdata->vif.bss_conf.bssid = sdata->vif.addr;
f142c6b9 1451 break;
05c914fe 1452 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 1453 case NUM_NL80211_IFTYPES:
75636525
JB
1454 BUG();
1455 break;
1456 }
1457
1458 ieee80211_debugfs_add_netdev(sdata);
1459}
1460
34d4bc4d
JB
1461static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1462 enum nl80211_iftype type)
1463{
1464 struct ieee80211_local *local = sdata->local;
1465 int ret, err;
2ca27bcf
JB
1466 enum nl80211_iftype internal_type = type;
1467 bool p2p = false;
34d4bc4d
JB
1468
1469 ASSERT_RTNL();
1470
1471 if (!local->ops->change_interface)
1472 return -EBUSY;
1473
1474 switch (sdata->vif.type) {
1475 case NL80211_IFTYPE_AP:
1476 case NL80211_IFTYPE_STATION:
1477 case NL80211_IFTYPE_ADHOC:
239281f8 1478 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1479 /*
1480 * Could maybe also all others here?
1481 * Just not sure how that interacts
1482 * with the RX/config path e.g. for
1483 * mesh.
1484 */
1485 break;
1486 default:
1487 return -EBUSY;
1488 }
1489
1490 switch (type) {
1491 case NL80211_IFTYPE_AP:
1492 case NL80211_IFTYPE_STATION:
1493 case NL80211_IFTYPE_ADHOC:
239281f8 1494 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1495 /*
1496 * Could probably support everything
1497 * but WDS here (WDS do_open can fail
1498 * under memory pressure, which this
1499 * code isn't prepared to handle).
1500 */
1501 break;
2ca27bcf
JB
1502 case NL80211_IFTYPE_P2P_CLIENT:
1503 p2p = true;
1504 internal_type = NL80211_IFTYPE_STATION;
1505 break;
1506 case NL80211_IFTYPE_P2P_GO:
1507 p2p = true;
1508 internal_type = NL80211_IFTYPE_AP;
1509 break;
34d4bc4d
JB
1510 default:
1511 return -EBUSY;
1512 }
1513
2ca27bcf 1514 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
34d4bc4d
JB
1515 if (ret)
1516 return ret;
1517
1518 ieee80211_do_stop(sdata, false);
1519
f142c6b9 1520 ieee80211_teardown_sdata(sdata);
34d4bc4d 1521
2ca27bcf 1522 ret = drv_change_interface(local, sdata, internal_type, p2p);
34d4bc4d 1523 if (ret)
a9865538 1524 type = ieee80211_vif_type_p2p(&sdata->vif);
34d4bc4d 1525
3a25a8c8
JB
1526 /*
1527 * Ignore return value here, there's not much we can do since
1528 * the driver changed the interface type internally already.
1529 * The warnings will hopefully make driver authors fix it :-)
1530 */
a9865538 1531 ieee80211_check_queues(sdata, type);
3a25a8c8 1532
34d4bc4d
JB
1533 ieee80211_setup_sdata(sdata, type);
1534
f142c6b9 1535 err = ieee80211_do_open(&sdata->wdev, false);
34d4bc4d
JB
1536 WARN(err, "type change: do_open returned %d", err);
1537
1538 return ret;
1539}
1540
f3947e2d 1541int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
05c914fe 1542 enum nl80211_iftype type)
75636525 1543{
34d4bc4d
JB
1544 int ret;
1545
f3947e2d
JB
1546 ASSERT_RTNL();
1547
2ca27bcf 1548 if (type == ieee80211_vif_type_p2p(&sdata->vif))
f3947e2d
JB
1549 return 0;
1550
34d4bc4d
JB
1551 if (ieee80211_sdata_running(sdata)) {
1552 ret = ieee80211_runtime_change_iftype(sdata, type);
1553 if (ret)
1554 return ret;
1555 } else {
1556 /* Purge and reset type-dependent state. */
f142c6b9 1557 ieee80211_teardown_sdata(sdata);
34d4bc4d
JB
1558 ieee80211_setup_sdata(sdata, type);
1559 }
75636525
JB
1560
1561 /* reset some values that shouldn't be kept across type changes */
9bc383de
JB
1562 if (type == NL80211_IFTYPE_STATION)
1563 sdata->u.mgd.use_4addr = false;
f3947e2d
JB
1564
1565 return 0;
f0706e82
JB
1566}
1567
fa9029f8 1568static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
f142c6b9 1569 u8 *perm_addr, enum nl80211_iftype type)
fa9029f8
JB
1570{
1571 struct ieee80211_sub_if_data *sdata;
1572 u64 mask, start, addr, val, inc;
1573 u8 *m;
1574 u8 tmp_addr[ETH_ALEN];
1575 int i;
1576
1577 /* default ... something at least */
f142c6b9 1578 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
fa9029f8
JB
1579
1580 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1581 local->hw.wiphy->n_addresses <= 1)
1582 return;
1583
fa9029f8
JB
1584 mutex_lock(&local->iflist_mtx);
1585
1586 switch (type) {
1587 case NL80211_IFTYPE_MONITOR:
1588 /* doesn't matter */
1589 break;
1590 case NL80211_IFTYPE_WDS:
1591 case NL80211_IFTYPE_AP_VLAN:
1592 /* match up with an AP interface */
1593 list_for_each_entry(sdata, &local->interfaces, list) {
1594 if (sdata->vif.type != NL80211_IFTYPE_AP)
1595 continue;
f142c6b9 1596 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
fa9029f8
JB
1597 break;
1598 }
1599 /* keep default if no AP interface present */
1600 break;
6d71117a
JB
1601 case NL80211_IFTYPE_P2P_CLIENT:
1602 case NL80211_IFTYPE_P2P_GO:
30686bf7 1603 if (ieee80211_hw_check(&local->hw, P2P_DEV_ADDR_FOR_INTF)) {
6d71117a
JB
1604 list_for_each_entry(sdata, &local->interfaces, list) {
1605 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1606 continue;
1607 if (!ieee80211_sdata_running(sdata))
1608 continue;
1609 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1610 goto out_unlock;
1611 }
1612 }
1613 /* otherwise fall through */
fa9029f8
JB
1614 default:
1615 /* assign a new address if possible -- try n_addresses first */
1616 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1617 bool used = false;
1618
1619 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1620 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1621 sdata->vif.addr)) {
fa9029f8
JB
1622 used = true;
1623 break;
1624 }
1625 }
1626
1627 if (!used) {
f142c6b9 1628 memcpy(perm_addr,
fa9029f8
JB
1629 local->hw.wiphy->addresses[i].addr,
1630 ETH_ALEN);
1631 break;
1632 }
1633 }
1634
1635 /* try mask if available */
1636 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1637 break;
1638
1639 m = local->hw.wiphy->addr_mask;
1640 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1641 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1642 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1643
1644 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1645 /* not a contiguous mask ... not handled now! */
bdcbd8e0 1646 pr_info("not contiguous\n");
fa9029f8
JB
1647 break;
1648 }
1649
ac20976d
HS
1650 /*
1651 * Pick address of existing interface in case user changed
1652 * MAC address manually, default to perm_addr.
1653 */
fa9029f8 1654 m = local->hw.wiphy->perm_addr;
ac20976d
HS
1655 list_for_each_entry(sdata, &local->interfaces, list) {
1656 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
1657 continue;
1658 m = sdata->vif.addr;
1659 break;
1660 }
fa9029f8
JB
1661 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1662 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1663 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1664
1665 inc = 1ULL<<__ffs64(mask);
1666 val = (start & mask);
1667 addr = (start & ~mask) | (val & mask);
1668 do {
1669 bool used = false;
1670
1671 tmp_addr[5] = addr >> 0*8;
1672 tmp_addr[4] = addr >> 1*8;
1673 tmp_addr[3] = addr >> 2*8;
1674 tmp_addr[2] = addr >> 3*8;
1675 tmp_addr[1] = addr >> 4*8;
1676 tmp_addr[0] = addr >> 5*8;
1677
1678 val += inc;
1679
1680 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1681 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
fa9029f8
JB
1682 used = true;
1683 break;
1684 }
1685 }
1686
1687 if (!used) {
f142c6b9 1688 memcpy(perm_addr, tmp_addr, ETH_ALEN);
fa9029f8
JB
1689 break;
1690 }
1691 addr = (start & ~mask) | (val & mask);
1692 } while (addr != start);
1693
1694 break;
1695 }
1696
6d71117a 1697 out_unlock:
fa9029f8
JB
1698 mutex_unlock(&local->iflist_mtx);
1699}
1700
3e122be0 1701int ieee80211_if_add(struct ieee80211_local *local, const char *name,
6bab2e19 1702 unsigned char name_assign_type,
84efbb84 1703 struct wireless_dev **new_wdev, enum nl80211_iftype type,
ee385855 1704 struct vif_params *params)
f0706e82 1705{
f142c6b9 1706 struct net_device *ndev = NULL;
f0706e82 1707 struct ieee80211_sub_if_data *sdata = NULL;
ba8c3d6f 1708 struct txq_info *txqi;
75636525 1709 int ret, i;
ded81f6b 1710 int txqs = 1;
f0706e82
JB
1711
1712 ASSERT_RTNL();
75636525 1713
f142c6b9
JB
1714 if (type == NL80211_IFTYPE_P2P_DEVICE) {
1715 struct wireless_dev *wdev;
1716
1717 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
1718 GFP_KERNEL);
1719 if (!sdata)
1720 return -ENOMEM;
1721 wdev = &sdata->wdev;
1722
1723 sdata->dev = NULL;
1724 strlcpy(sdata->name, name, IFNAMSIZ);
1725 ieee80211_assign_perm_addr(local, wdev->address, type);
1726 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
1727 } else {
ba8c3d6f
FF
1728 int size = ALIGN(sizeof(*sdata) + local->hw.vif_data_size,
1729 sizeof(void *));
1730 int txq_size = 0;
1731
1732 if (local->ops->wake_tx_queue)
1733 txq_size += sizeof(struct txq_info) +
1734 local->hw.txq_data_size;
1735
f142c6b9
JB
1736 if (local->hw.queues >= IEEE80211_NUM_ACS)
1737 txqs = IEEE80211_NUM_ACS;
1738
ba8c3d6f 1739 ndev = alloc_netdev_mqs(size + txq_size,
6bab2e19 1740 name, name_assign_type,
c835a677 1741 ieee80211_if_setup, txqs, 1);
f142c6b9
JB
1742 if (!ndev)
1743 return -ENOMEM;
1744 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
1745
5a490510
JB
1746 ndev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
1747 if (!ndev->tstats) {
1748 free_netdev(ndev);
1749 return -ENOMEM;
1750 }
1751
f142c6b9
JB
1752 ndev->needed_headroom = local->tx_headroom +
1753 4*6 /* four MAC addresses */
1754 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
1755 + 6 /* mesh */
1756 + 8 /* rfc1042/bridge tunnel */
1757 - ETH_HLEN /* ethernet hard_header_len */
1758 + IEEE80211_ENCRYPT_HEADROOM;
1759 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
1760
1761 ret = dev_alloc_name(ndev, ndev->name);
1762 if (ret < 0) {
1763 free_netdev(ndev);
1764 return ret;
1765 }
1766
1767 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
b5dfae02
BG
1768 if (params && is_valid_ether_addr(params->macaddr))
1769 memcpy(ndev->dev_addr, params->macaddr, ETH_ALEN);
1770 else
1771 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN);
f142c6b9
JB
1772 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
1773
1774 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
1775 sdata = netdev_priv(ndev);
1776 ndev->ieee80211_ptr = &sdata->wdev;
1777 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
1778 memcpy(sdata->name, ndev->name, IFNAMSIZ);
1779
ba8c3d6f
FF
1780 if (txq_size) {
1781 txqi = netdev_priv(ndev) + size;
1782 ieee80211_init_tx_queue(sdata, NULL, txqi, 0);
1783 }
1784
f142c6b9
JB
1785 sdata->dev = ndev;
1786 }
75636525
JB
1787
1788 /* initialise type-independent data */
f0706e82 1789 sdata->wdev.wiphy = local->hw.wiphy;
f0706e82 1790 sdata->local = local;
75636525
JB
1791
1792 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1793 skb_queue_head_init(&sdata->fragments[i].skb_list);
1794
1795 INIT_LIST_HEAD(&sdata->key_list);
1796
164eb02d
SW
1797 INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work,
1798 ieee80211_dfs_cac_timer_work);
8d1f7ecd
JB
1799 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk,
1800 ieee80211_delayed_tailroom_dec);
97f97b1f 1801
37eb0b16
JM
1802 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1803 struct ieee80211_supported_band *sband;
1804 sband = local->hw.wiphy->bands[i];
1805 sdata->rc_rateidx_mask[i] =
1806 sband ? (1 << sband->n_bitrates) - 1 : 0;
b119ad6e
LB
1807 if (sband) {
1808 __le16 cap;
1809 u16 *vht_rate_mask;
1810
19468413
SW
1811 memcpy(sdata->rc_rateidx_mcs_mask[i],
1812 sband->ht_cap.mcs.rx_mask,
1813 sizeof(sdata->rc_rateidx_mcs_mask[i]));
b119ad6e
LB
1814
1815 cap = sband->vht_cap.vht_mcs.rx_mcs_map;
1816 vht_rate_mask = sdata->rc_rateidx_vht_mcs_mask[i];
1817 ieee80211_get_vht_mask_from_cap(cap, vht_rate_mask);
1818 } else {
19468413
SW
1819 memset(sdata->rc_rateidx_mcs_mask[i], 0,
1820 sizeof(sdata->rc_rateidx_mcs_mask[i]));
b119ad6e
LB
1821 memset(sdata->rc_rateidx_vht_mcs_mask[i], 0,
1822 sizeof(sdata->rc_rateidx_vht_mcs_mask[i]));
1823 }
37eb0b16 1824 }
75636525 1825
3a25a8c8
JB
1826 ieee80211_set_default_queues(sdata);
1827
1ea6f9c0
JB
1828 sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
1829 sdata->user_power_level = local->user_power_level;
1830
2475b1cc
MS
1831 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1832
75636525
JB
1833 /* setup type-dependent data */
1834 ieee80211_setup_sdata(sdata, type);
f0706e82 1835
f142c6b9
JB
1836 if (ndev) {
1837 if (params) {
1838 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
1839 if (type == NL80211_IFTYPE_STATION)
1840 sdata->u.mgd.use_4addr = params->use_4addr;
1841 }
9bc383de 1842
f142c6b9 1843 ndev->features |= local->hw.netdev_features;
72d78728 1844
b7ffbd7e
JB
1845 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
1846
f142c6b9
JB
1847 ret = register_netdevice(ndev);
1848 if (ret) {
1849 free_netdev(ndev);
1850 return ret;
1851 }
1852 }
f0706e82 1853
c771c9d8 1854 mutex_lock(&local->iflist_mtx);
79010420 1855 list_add_tail_rcu(&sdata->list, &local->interfaces);
c771c9d8 1856 mutex_unlock(&local->iflist_mtx);
79010420 1857
84efbb84
JB
1858 if (new_wdev)
1859 *new_wdev = &sdata->wdev;
f0706e82 1860
f0706e82 1861 return 0;
f0706e82
JB
1862}
1863
f698d856 1864void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
f0706e82 1865{
f0706e82 1866 ASSERT_RTNL();
11a843b7 1867
c771c9d8 1868 mutex_lock(&sdata->local->iflist_mtx);
75636525 1869 list_del_rcu(&sdata->list);
c771c9d8
JB
1870 mutex_unlock(&sdata->local->iflist_mtx);
1871
75636525 1872 synchronize_rcu();
f142c6b9
JB
1873
1874 if (sdata->dev) {
1875 unregister_netdevice(sdata->dev);
1876 } else {
1877 cfg80211_unregister_wdev(&sdata->wdev);
835112b2 1878 ieee80211_teardown_sdata(sdata);
f142c6b9
JB
1879 kfree(sdata);
1880 }
1881}
1882
1883void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
1884{
1885 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
1886 return;
1887 ieee80211_do_stop(sdata, true);
f0706e82
JB
1888}
1889
75636525 1890void ieee80211_remove_interfaces(struct ieee80211_local *local)
f0706e82 1891{
75636525 1892 struct ieee80211_sub_if_data *sdata, *tmp;
efe117ab 1893 LIST_HEAD(unreg_list);
f142c6b9 1894 LIST_HEAD(wdev_list);
f0706e82
JB
1895
1896 ASSERT_RTNL();
1897
d8d9008c
JB
1898 /* Before destroying the interfaces, make sure they're all stopped so
1899 * that the hardware is stopped. Otherwise, the driver might still be
1900 * iterating the interfaces during the shutdown, e.g. from a worker
1901 * or from RX processing or similar, and if it does so (using atomic
1902 * iteration) while we're manipulating the list, the iteration will
1903 * crash.
1904 *
1905 * After this, the hardware should be stopped and the driver should
1906 * have stopped all of its activities, so that we can do RCU-unaware
1907 * manipulations of the interface list below.
c8aa22db 1908 */
d8d9008c
JB
1909 cfg80211_shutdown_all_interfaces(local->hw.wiphy);
1910
1911 WARN(local->open_count, "%s: open count remains %d\n",
1912 wiphy_name(local->hw.wiphy), local->open_count);
c8aa22db 1913
efe117ab 1914 mutex_lock(&local->iflist_mtx);
75636525
JB
1915 list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) {
1916 list_del(&sdata->list);
c771c9d8 1917
f142c6b9
JB
1918 if (sdata->dev)
1919 unregister_netdevice_queue(sdata->dev, &unreg_list);
1920 else
1921 list_add(&sdata->list, &wdev_list);
f0706e82 1922 }
efe117ab
ED
1923 mutex_unlock(&local->iflist_mtx);
1924 unregister_netdevice_many(&unreg_list);
f142c6b9
JB
1925
1926 list_for_each_entry_safe(sdata, tmp, &wdev_list, list) {
1927 list_del(&sdata->list);
1928 cfg80211_unregister_wdev(&sdata->wdev);
1929 kfree(sdata);
1930 }
f0706e82 1931}
5cff20e6 1932
47846c9b 1933static int netdev_notify(struct notifier_block *nb,
351638e7 1934 unsigned long state, void *ptr)
47846c9b 1935{
351638e7 1936 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
47846c9b
JB
1937 struct ieee80211_sub_if_data *sdata;
1938
1939 if (state != NETDEV_CHANGENAME)
8bd811aa 1940 return NOTIFY_DONE;
47846c9b
JB
1941
1942 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
8bd811aa 1943 return NOTIFY_DONE;
47846c9b
JB
1944
1945 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
8bd811aa 1946 return NOTIFY_DONE;
47846c9b
JB
1947
1948 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2f5265e6 1949 memcpy(sdata->name, dev->name, IFNAMSIZ);
47846c9b 1950 ieee80211_debugfs_rename_netdev(sdata);
8bd811aa
ZG
1951
1952 return NOTIFY_OK;
47846c9b
JB
1953}
1954
1955static struct notifier_block mac80211_netdev_notifier = {
1956 .notifier_call = netdev_notify,
1957};
1958
1959int ieee80211_iface_init(void)
1960{
1961 return register_netdevice_notifier(&mac80211_netdev_notifier);
1962}
1963
1964void ieee80211_iface_exit(void)
1965{
1966 unregister_netdevice_notifier(&mac80211_netdev_notifier);
1967}