projects / linux-2.6-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
mac80211: pass P2P powersave parameters to driver
[linux-2.6-block.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
5a0e3ad6 10#include <linux/slab.h>
55682965
JB		 11#include <linux/list.h>
12#include <linux/if_ether.h>
13#include <linux/ieee80211.h>
14#include <linux/nl80211.h>
15#include <linux/rtnetlink.h>
16#include <linux/netlink.h>
2a519311 17#include <linux/etherdevice.h>
463d0183 18#include <net/net_namespace.h>
55682965
JB		 19#include <net/genetlink.h>
20#include <net/cfg80211.h>
463d0183 21#include <net/sock.h>
55682965
JB		 22#include "core.h"
23#include "nl80211.h"
b2e1b302 24#include "reg.h"
e35e4d28 25#include "rdev-ops.h"
55682965 26
5fb628e9
JM		 27static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
28 struct genl_info *info,
29 struct cfg80211_crypto_settings *settings,
30 int cipher_limit);
31
4c476991
JB		 32static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
33 struct genl_info *info);
34static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
35 struct genl_info *info);
36
55682965
JB		 37/* the netlink family */
38static struct genl_family nl80211_fam = {
39 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
40 .name = "nl80211", /* have users key off the name instead */
41 .hdrsize = 0, /* no private header */
42 .version = 1, /* no particular meaning now */
43 .maxattr = NL80211_ATTR_MAX,
463d0183 44 .netnsok = true,
4c476991
JB		 45 .pre_doit = nl80211_pre_doit,
46 .post_doit = nl80211_post_doit,
55682965
JB		 47};
48
89a54e48
JB		 49/* returns ERR_PTR values */
50static struct wireless_dev *
51__cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
55682965 52{
89a54e48
JB		 53 struct cfg80211_registered_device *rdev;
54 struct wireless_dev *result = NULL;
55 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
56 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
57 u64 wdev_id;
58 int wiphy_idx = -1;
59 int ifidx = -1;
55682965 60
89a54e48 61 assert_cfg80211_lock();
55682965 62
89a54e48
JB		 63 if (!have_ifidx && !have_wdev_id)
64 return ERR_PTR(-EINVAL);
55682965 65
89a54e48
JB		 66 if (have_ifidx)
67 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
68 if (have_wdev_id) {
69 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
70 wiphy_idx = wdev_id >> 32;
55682965
JB		 71 }
72
89a54e48
JB		 73 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
74 struct wireless_dev *wdev;
75
76 if (wiphy_net(&rdev->wiphy) != netns)
77 continue;
78
79 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
80 continue;
81
82 mutex_lock(&rdev->devlist_mtx);
83 list_for_each_entry(wdev, &rdev->wdev_list, list) {
84 if (have_ifidx && wdev->netdev &&
85 wdev->netdev->ifindex == ifidx) {
86 result = wdev;
87 break;
88 }
89 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
90 result = wdev;
91 break;
92 }
93 }
94 mutex_unlock(&rdev->devlist_mtx);
95
96 if (result)
97 break;
98 }
99
100 if (result)
101 return result;
102 return ERR_PTR(-ENODEV);
55682965
JB		 103}
104
a9455408 105static struct cfg80211_registered_device *
878d9ec7 106__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 107{
7fee4778
JB		 108 struct cfg80211_registered_device *rdev = NULL, *tmp;
109 struct net_device *netdev;
a9455408
JB		 110
111 assert_cfg80211_lock();
112
878d9ec7 113 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 114 !attrs[NL80211_ATTR_IFINDEX] &&
115 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 116 return ERR_PTR(-EINVAL);
117
878d9ec7 118 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 119 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 120 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 121
89a54e48
JB		 122 if (attrs[NL80211_ATTR_WDEV]) {
123 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
124 struct wireless_dev *wdev;
125 bool found = false;
126
127 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
128 if (tmp) {
129 /* make sure wdev exists */
130 mutex_lock(&tmp->devlist_mtx);
131 list_for_each_entry(wdev, &tmp->wdev_list, list) {
132 if (wdev->identifier != (u32)wdev_id)
133 continue;
134 found = true;
135 break;
136 }
137 mutex_unlock(&tmp->devlist_mtx);
138
139 if (!found)
140 tmp = NULL;
141
142 if (rdev && tmp != rdev)
143 return ERR_PTR(-EINVAL);
144 rdev = tmp;
145 }
146 }
147
878d9ec7
JB		 148 if (attrs[NL80211_ATTR_IFINDEX]) {
149 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
4f7eff10 150 netdev = dev_get_by_index(netns, ifindex);
7fee4778
JB		 151 if (netdev) {
152 if (netdev->ieee80211_ptr)
153 tmp = wiphy_to_dev(
154 netdev->ieee80211_ptr->wiphy);
155 else
156 tmp = NULL;
157
158 dev_put(netdev);
159
160 /* not wireless device -- return error */
161 if (!tmp)
162 return ERR_PTR(-EINVAL);
163
164 /* mismatch -- return error */
165 if (rdev && tmp != rdev)
166 return ERR_PTR(-EINVAL);
167
168 rdev = tmp;
a9455408 169 }
a9455408 170 }
a9455408 171
4f7eff10
JB		 172 if (!rdev)
173 return ERR_PTR(-ENODEV);
a9455408 174
4f7eff10
JB		 175 if (netns != wiphy_net(&rdev->wiphy))
176 return ERR_PTR(-ENODEV);
177
178 return rdev;
a9455408
JB		 179}
180
181/*
182 * This function returns a pointer to the driver
183 * that the genl_info item that is passed refers to.
184 * If successful, it returns non-NULL and also locks
185 * the driver's mutex!
186 *
187 * This means that you need to call cfg80211_unlock_rdev()
188 * before being allowed to acquire &cfg80211_mutex!
189 *
190 * This is necessary because we need to lock the global
191 * mutex to get an item off the list safely, and then
192 * we lock the rdev mutex so it doesn't go away under us.
193 *
194 * We don't want to keep cfg80211_mutex locked
195 * for all the time in order to allow requests on
196 * other interfaces to go through at the same time.
197 *
198 * The result of this can be a PTR_ERR and hence must
199 * be checked with IS_ERR() for errors.
200 */
201static struct cfg80211_registered_device *
4f7eff10 202cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408
JB		 203{
204 struct cfg80211_registered_device *rdev;
205
206 mutex_lock(&cfg80211_mutex);
878d9ec7 207 rdev = __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 208
209 /* if it is not an error we grab the lock on
210 * it to assure it won't be going away while
211 * we operate on it */
212 if (!IS_ERR(rdev))
213 mutex_lock(&rdev->mtx);
214
215 mutex_unlock(&cfg80211_mutex);
216
217 return rdev;
218}
219
55682965 220/* policy for the attributes */
b54452b0 221static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
55682965
JB		 222 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
223 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 224 .len = 20-1 },
31888487 225 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
72bdcf34 226 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 227 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
b9a5f8ca
JM		 228 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
229 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
230 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
231 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 232 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
55682965
JB		 233
234 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
235 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
236 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 237
e007b857
EP		 238 [NL80211_ATTR_MAC] = { .len = ETH_ALEN },
239 [NL80211_ATTR_PREV_BSSID] = { .len = ETH_ALEN },
41ade00f 240
b9454e83 241 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 242 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
243 .len = WLAN_MAX_KEY_LEN },
244 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
245 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
246 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 247 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
e31b8213 248 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
ed1b6cc7
JB		 249
250 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
251 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
252 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
253 .len = IEEE80211_MAX_DATA_LEN },
254 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
255 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 256 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
257 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
258 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
259 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
260 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 261 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 262 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 263 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 264 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 265 .len = IEEE80211_MAX_MESH_ID_LEN },
2ec600d6 266 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 267
b2e1b302
LR		 268 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
269 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
270
9f1ba906
JM		 271 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
272 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
273 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 274 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
275 .len = NL80211_MAX_SUPP_RATES },
50b12f59 276 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 277
24bdd9f4 278 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 279 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 280
6c739419 281 [NL80211_ATTR_HT_CAPABILITY] = { .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 282
283 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
284 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
285 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 286 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
287 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 288
289 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
290 .len = IEEE80211_MAX_SSID_LEN },
291 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
292 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 293 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 294 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 295 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 296 [NL80211_ATTR_STA_FLAGS2] = {
297 .len = sizeof(struct nl80211_sta_flag_update),
298 },
3f77316c 299 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 300 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
301 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
b23aa676
SO		 302 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
303 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
304 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 305 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 306 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
67fbb16b
SO		 307 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
308 .len = WLAN_PMKID_LEN },
9588bbd5
JM		 309 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
310 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 311 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 312 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
313 .len = IEEE80211_MAX_DATA_LEN },
314 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ffb9eb3d 315 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
d6dc1a38 316 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 317 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 318 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 319 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
320 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 321 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 322 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
323 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 324 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 325 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 326 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 327 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
9c3990aa 328 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
bbe6ad6d 329 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 330 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 331 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
32e9de84 332 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
9946ecfb
JM		 333 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
334 .len = IEEE80211_MAX_DATA_LEN },
335 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
336 .len = IEEE80211_MAX_DATA_LEN },
f4b34b55 337 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 338 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 339 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 340 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
341 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
342 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
343 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
344 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
e247bd90 345 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 346 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
347 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 348 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 349 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
350 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
351 .len = NL80211_HT_CAPABILITY_LEN
352 },
1d9d9213 353 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 354 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 355 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 356 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 357 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
e39e5b5e 358 [NL80211_ATTR_SAE_DATA] = { .type = NLA_BINARY, },
f461be3e 359 [NL80211_ATTR_VHT_CAPABILITY] = { .len = NL80211_VHT_CAPABILITY_LEN },
ed473771 360 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
55682965
JB		 361};
362
e31b8213 363/* policy for the key attributes */
b54452b0 364static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 365 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 366 [NL80211_KEY_IDX] = { .type = NLA_U8 },
367 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 368 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 369 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
370 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
e31b8213 371 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
dbd2fd65
JB		 372 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
373};
374
375/* policy for the key default flags */
376static const struct nla_policy
377nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
378 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
379 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 380};
381
ff1b6e69
JB		 382/* policy for WoWLAN attributes */
383static const struct nla_policy
384nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
385 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
386 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
387 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
388 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 389 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
390 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
391 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
392 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
ff1b6e69
JB		 393};
394
e5497d76
JB		 395/* policy for GTK rekey offload attributes */
396static const struct nla_policy
397nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
398 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
399 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
400 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
401};
402
a1f1c21c
LC		 403static const struct nla_policy
404nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 405 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 406 .len = IEEE80211_MAX_SSID_LEN },
88e920b4 407 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
a1f1c21c
LC		 408};
409
a043897a
HS		 410/* ifidx get helper */
411static int nl80211_get_ifidx(struct netlink_callback *cb)
412{
413 int res;
414
415 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
416 nl80211_fam.attrbuf, nl80211_fam.maxattr,
417 nl80211_policy);
418 if (res)
419 return res;
420
421 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
422 return -EINVAL;
423
424 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
425 if (!res)
426 return -EINVAL;
427 return res;
428}
429
67748893
JB		 430static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
431 struct netlink_callback *cb,
432 struct cfg80211_registered_device **rdev,
433 struct net_device **dev)
434{
435 int ifidx = cb->args[0];
436 int err;
437
438 if (!ifidx)
439 ifidx = nl80211_get_ifidx(cb);
440 if (ifidx < 0)
441 return ifidx;
442
443 cb->args[0] = ifidx;
444
445 rtnl_lock();
446
447 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
448 if (!*dev) {
449 err = -ENODEV;
450 goto out_rtnl;
451 }
452
453 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3cc25e51
FF		 454 if (IS_ERR(*rdev)) {
455 err = PTR_ERR(*rdev);
67748893
JB		 456 goto out_rtnl;
457 }
458
459 return 0;
460 out_rtnl:
461 rtnl_unlock();
462 return err;
463}
464
465static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
466{
467 cfg80211_unlock_rdev(rdev);
468 rtnl_unlock();
469}
470
f4a11bb0
JB		 471/* IE validation */
472static bool is_valid_ie_attr(const struct nlattr *attr)
473{
474 const u8 *pos;
475 int len;
476
477 if (!attr)
478 return true;
479
480 pos = nla_data(attr);
481 len = nla_len(attr);
482
483 while (len) {
484 u8 elemlen;
485
486 if (len < 2)
487 return false;
488 len -= 2;
489
490 elemlen = pos[1];
491 if (elemlen > len)
492 return false;
493
494 len -= elemlen;
495 pos += 2 + elemlen;
496 }
497
498 return true;
499}
500
55682965 501/* message building helper */
15e47304 502static inline void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
55682965
JB		 503 int flags, u8 cmd)
504{
505 /* since there is no private header just add the generic one */
15e47304 506 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 507}
508
5dab3b8a
LR		 509static int nl80211_msg_put_channel(struct sk_buff *msg,
510 struct ieee80211_channel *chan)
511{
9360ffd1
DM		 512 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
513 chan->center_freq))
514 goto nla_put_failure;
5dab3b8a 515
9360ffd1
DM		 516 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
517 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
518 goto nla_put_failure;
519 if ((chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) &&
520 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN))
521 goto nla_put_failure;
522 if ((chan->flags & IEEE80211_CHAN_NO_IBSS) &&
523 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IBSS))
524 goto nla_put_failure;
525 if ((chan->flags & IEEE80211_CHAN_RADAR) &&
526 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
527 goto nla_put_failure;
5dab3b8a 528
9360ffd1
DM		 529 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
530 DBM_TO_MBM(chan->max_power)))
531 goto nla_put_failure;
5dab3b8a
LR		 532
533 return 0;
534
535 nla_put_failure:
536 return -ENOBUFS;
537}
538
55682965
JB		 539/* netlink command implementations */
540
b9454e83
JB		 541struct key_parse {
542 struct key_params p;
543 int idx;
e31b8213 544 int type;
b9454e83 545 bool def, defmgmt;
dbd2fd65 546 bool def_uni, def_multi;
b9454e83
JB		 547};
548
549static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
550{
551 struct nlattr *tb[NL80211_KEY_MAX + 1];
552 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
553 nl80211_key_policy);
554 if (err)
555 return err;
556
557 k->def = !!tb[NL80211_KEY_DEFAULT];
558 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
559
dbd2fd65
JB		 560 if (k->def) {
561 k->def_uni = true;
562 k->def_multi = true;
563 }
564 if (k->defmgmt)
565 k->def_multi = true;
566
b9454e83
JB		 567 if (tb[NL80211_KEY_IDX])
568 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
569
570 if (tb[NL80211_KEY_DATA]) {
571 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
572 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
573 }
574
575 if (tb[NL80211_KEY_SEQ]) {
576 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
577 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
578 }
579
580 if (tb[NL80211_KEY_CIPHER])
581 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
582
e31b8213
JB		 583 if (tb[NL80211_KEY_TYPE]) {
584 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
585 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
586 return -EINVAL;
587 }
588
dbd2fd65
JB		 589 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
590 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
2da8f419
JB		 591 err = nla_parse_nested(kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
592 tb[NL80211_KEY_DEFAULT_TYPES],
593 nl80211_key_default_policy);
dbd2fd65
JB		 594 if (err)
595 return err;
596
597 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
598 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
599 }
600
b9454e83
JB		 601 return 0;
602}
603
604static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
605{
606 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
607 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
608 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
609 }
610
611 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
612 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
613 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
614 }
615
616 if (info->attrs[NL80211_ATTR_KEY_IDX])
617 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
618
619 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
620 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
621
622 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
623 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
624
dbd2fd65
JB		 625 if (k->def) {
626 k->def_uni = true;
627 k->def_multi = true;
628 }
629 if (k->defmgmt)
630 k->def_multi = true;
631
e31b8213
JB		 632 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
633 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
634 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
635 return -EINVAL;
636 }
637
dbd2fd65
JB		 638 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
639 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
640 int err = nla_parse_nested(
641 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
642 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
643 nl80211_key_default_policy);
644 if (err)
645 return err;
646
647 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
648 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
649 }
650
b9454e83
JB		 651 return 0;
652}
653
654static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
655{
656 int err;
657
658 memset(k, 0, sizeof(*k));
659 k->idx = -1;
e31b8213 660 k->type = -1;
b9454e83
JB		 661
662 if (info->attrs[NL80211_ATTR_KEY])
663 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
664 else
665 err = nl80211_parse_key_old(info, k);
666
667 if (err)
668 return err;
669
670 if (k->def && k->defmgmt)
671 return -EINVAL;
672
dbd2fd65
JB		 673 if (k->defmgmt) {
674 if (k->def_uni || !k->def_multi)
675 return -EINVAL;
676 }
677
b9454e83
JB		 678 if (k->idx != -1) {
679 if (k->defmgmt) {
680 if (k->idx < 4 || k->idx > 5)
681 return -EINVAL;
682 } else if (k->def) {
683 if (k->idx < 0 || k->idx > 3)
684 return -EINVAL;
685 } else {
686 if (k->idx < 0 || k->idx > 5)
687 return -EINVAL;
688 }
689 }
690
691 return 0;
692}
693
fffd0934
JB		 694static struct cfg80211_cached_keys *
695nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
de7044ee 696 struct nlattr *keys, bool *no_ht)
fffd0934
JB		 697{
698 struct key_parse parse;
699 struct nlattr *key;
700 struct cfg80211_cached_keys *result;
701 int rem, err, def = 0;
702
703 result = kzalloc(sizeof(*result), GFP_KERNEL);
704 if (!result)
705 return ERR_PTR(-ENOMEM);
706
707 result->def = -1;
708 result->defmgmt = -1;
709
710 nla_for_each_nested(key, keys, rem) {
711 memset(&parse, 0, sizeof(parse));
712 parse.idx = -1;
713
714 err = nl80211_parse_key_new(key, &parse);
715 if (err)
716 goto error;
717 err = -EINVAL;
718 if (!parse.p.key)
719 goto error;
720 if (parse.idx < 0 || parse.idx > 4)
721 goto error;
722 if (parse.def) {
723 if (def)
724 goto error;
725 def = 1;
726 result->def = parse.idx;
dbd2fd65
JB		 727 if (!parse.def_uni || !parse.def_multi)
728 goto error;
fffd0934
JB		 729 } else if (parse.defmgmt)
730 goto error;
731 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 732 parse.idx, false, NULL);
fffd0934
JB		 733 if (err)
734 goto error;
735 result->params[parse.idx].cipher = parse.p.cipher;
736 result->params[parse.idx].key_len = parse.p.key_len;
737 result->params[parse.idx].key = result->data[parse.idx];
738 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee
SM		 739
740 if (parse.p.cipher == WLAN_CIPHER_SUITE_WEP40 ||
741 parse.p.cipher == WLAN_CIPHER_SUITE_WEP104) {
742 if (no_ht)
743 *no_ht = true;
744 }
fffd0934
JB		 745 }
746
747 return result;
748 error:
749 kfree(result);
750 return ERR_PTR(err);
751}
752
753static int nl80211_key_allowed(struct wireless_dev *wdev)
754{
755 ASSERT_WDEV_LOCK(wdev);
756
fffd0934
JB		 757 switch (wdev->iftype) {
758 case NL80211_IFTYPE_AP:
759 case NL80211_IFTYPE_AP_VLAN:
074ac8df 760 case NL80211_IFTYPE_P2P_GO:
ff973af7 761 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 762 break;
763 case NL80211_IFTYPE_ADHOC:
764 if (!wdev->current_bss)
765 return -ENOLINK;
766 break;
767 case NL80211_IFTYPE_STATION:
074ac8df 768 case NL80211_IFTYPE_P2P_CLIENT:
fffd0934
JB		 769 if (wdev->sme_state != CFG80211_SME_CONNECTED)
770 return -ENOLINK;
771 break;
772 default:
773 return -EINVAL;
774 }
775
776 return 0;
777}
778
7527a782
JB		 779static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
780{
781 struct nlattr *nl_modes = nla_nest_start(msg, attr);
782 int i;
783
784 if (!nl_modes)
785 goto nla_put_failure;
786
787 i = 0;
788 while (ifmodes) {
9360ffd1
DM		 789 if ((ifmodes & 1) && nla_put_flag(msg, i))
790 goto nla_put_failure;
7527a782
JB		 791 ifmodes >>= 1;
792 i++;
793 }
794
795 nla_nest_end(msg, nl_modes);
796 return 0;
797
798nla_put_failure:
799 return -ENOBUFS;
800}
801
802static int nl80211_put_iface_combinations(struct wiphy *wiphy,
803 struct sk_buff *msg)
804{
805 struct nlattr *nl_combis;
806 int i, j;
807
808 nl_combis = nla_nest_start(msg,
809 NL80211_ATTR_INTERFACE_COMBINATIONS);
810 if (!nl_combis)
811 goto nla_put_failure;
812
813 for (i = 0; i < wiphy->n_iface_combinations; i++) {
814 const struct ieee80211_iface_combination *c;
815 struct nlattr *nl_combi, *nl_limits;
816
817 c = &wiphy->iface_combinations[i];
818
819 nl_combi = nla_nest_start(msg, i + 1);
820 if (!nl_combi)
821 goto nla_put_failure;
822
823 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
824 if (!nl_limits)
825 goto nla_put_failure;
826
827 for (j = 0; j < c->n_limits; j++) {
828 struct nlattr *nl_limit;
829
830 nl_limit = nla_nest_start(msg, j + 1);
831 if (!nl_limit)
832 goto nla_put_failure;
9360ffd1
DM		 833 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
834 c->limits[j].max))
835 goto nla_put_failure;
7527a782
JB		 836 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
837 c->limits[j].types))
838 goto nla_put_failure;
839 nla_nest_end(msg, nl_limit);
840 }
841
842 nla_nest_end(msg, nl_limits);
843
9360ffd1
DM		 844 if (c->beacon_int_infra_match &&
845 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
846 goto nla_put_failure;
847 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
848 c->num_different_channels) ||
849 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
850 c->max_interfaces))
851 goto nla_put_failure;
7527a782
JB		 852
853 nla_nest_end(msg, nl_combi);
854 }
855
856 nla_nest_end(msg, nl_combis);
857
858 return 0;
859nla_put_failure:
860 return -ENOBUFS;
861}
862
15e47304 863static int nl80211_send_wiphy(struct sk_buff *msg, u32 portid, u32 seq, int flags,
55682965
JB		 864 struct cfg80211_registered_device *dev)
865{
866 void *hdr;
ee688b00
JB		 867 struct nlattr *nl_bands, *nl_band;
868 struct nlattr *nl_freqs, *nl_freq;
869 struct nlattr *nl_rates, *nl_rate;
8fdc621d 870 struct nlattr *nl_cmds;
ee688b00
JB		 871 enum ieee80211_band band;
872 struct ieee80211_channel *chan;
873 struct ieee80211_rate *rate;
874 int i;
2e161f78
JB		 875 const struct ieee80211_txrx_stypes *mgmt_stypes =
876 dev->wiphy.mgmt_stypes;
55682965 877
15e47304 878 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_WIPHY);
55682965
JB		 879 if (!hdr)
880 return -1;
881
9360ffd1
DM		 882 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx) ||
883 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy)) ||
884 nla_put_u32(msg, NL80211_ATTR_GENERATION,
885 cfg80211_rdev_list_generation) ||
886 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
887 dev->wiphy.retry_short) ||
888 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
889 dev->wiphy.retry_long) ||
890 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
891 dev->wiphy.frag_threshold) ||
892 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
893 dev->wiphy.rts_threshold) ||
894 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
895 dev->wiphy.coverage_class) ||
896 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
897 dev->wiphy.max_scan_ssids) ||
898 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
899 dev->wiphy.max_sched_scan_ssids) ||
900 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
901 dev->wiphy.max_scan_ie_len) ||
902 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
903 dev->wiphy.max_sched_scan_ie_len) ||
904 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
905 dev->wiphy.max_match_sets))
906 goto nla_put_failure;
907
908 if ((dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
909 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
910 goto nla_put_failure;
911 if ((dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
912 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
913 goto nla_put_failure;
914 if ((dev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
915 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
916 goto nla_put_failure;
917 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
918 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
919 goto nla_put_failure;
920 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
921 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
922 goto nla_put_failure;
923 if ((dev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
924 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
925 goto nla_put_failure;
926
927 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
928 sizeof(u32) * dev->wiphy.n_cipher_suites,
929 dev->wiphy.cipher_suites))
930 goto nla_put_failure;
931
932 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
933 dev->wiphy.max_num_pmkids))
934 goto nla_put_failure;
935
936 if ((dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
937 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
938 goto nla_put_failure;
939
940 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
941 dev->wiphy.available_antennas_tx) ||
942 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
943 dev->wiphy.available_antennas_rx))
944 goto nla_put_failure;
945
946 if ((dev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
947 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
948 dev->wiphy.probe_resp_offload))
949 goto nla_put_failure;
87bbbe22 950
7f531e03
BR		 951 if ((dev->wiphy.available_antennas_tx ||
952 dev->wiphy.available_antennas_rx) && dev->ops->get_antenna) {
afe0cbf8
BR		 953 u32 tx_ant = 0, rx_ant = 0;
954 int res;
e35e4d28 955 res = rdev_get_antenna(dev, &tx_ant, &rx_ant);
afe0cbf8 956 if (!res) {
9360ffd1
DM		 957 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_TX,
958 tx_ant) ||
959 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_RX,
960 rx_ant))
961 goto nla_put_failure;
afe0cbf8
BR		 962 }
963 }
964
7527a782
JB		 965 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
966 dev->wiphy.interface_modes))
f59ac048
LR		 967 goto nla_put_failure;
968
ee688b00
JB		 969 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
970 if (!nl_bands)
971 goto nla_put_failure;
972
973 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
974 if (!dev->wiphy.bands[band])
975 continue;
976
977 nl_band = nla_nest_start(msg, band);
978 if (!nl_band)
979 goto nla_put_failure;
980
d51626df 981 /* add HT info */
9360ffd1
DM		 982 if (dev->wiphy.bands[band]->ht_cap.ht_supported &&
983 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
984 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
985 &dev->wiphy.bands[band]->ht_cap.mcs) ||
986 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
987 dev->wiphy.bands[band]->ht_cap.cap) ||
988 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
989 dev->wiphy.bands[band]->ht_cap.ampdu_factor) ||
990 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
991 dev->wiphy.bands[band]->ht_cap.ampdu_density)))
992 goto nla_put_failure;
d51626df 993
bf0c111e
MP		 994 /* add VHT info */
995 if (dev->wiphy.bands[band]->vht_cap.vht_supported &&
996 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
997 sizeof(dev->wiphy.bands[band]->vht_cap.vht_mcs),
998 &dev->wiphy.bands[band]->vht_cap.vht_mcs) ||
999 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1000 dev->wiphy.bands[band]->vht_cap.cap)))
1001 goto nla_put_failure;
1002
ee688b00
JB		 1003 /* add frequencies */
1004 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
1005 if (!nl_freqs)
1006 goto nla_put_failure;
1007
1008 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
1009 nl_freq = nla_nest_start(msg, i);
1010 if (!nl_freq)
1011 goto nla_put_failure;
1012
1013 chan = &dev->wiphy.bands[band]->channels[i];
5dab3b8a
LR		 1014
1015 if (nl80211_msg_put_channel(msg, chan))
1016 goto nla_put_failure;
e2f367f2 1017
ee688b00
JB		 1018 nla_nest_end(msg, nl_freq);
1019 }
1020
1021 nla_nest_end(msg, nl_freqs);
1022
1023 /* add bitrates */
1024 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
1025 if (!nl_rates)
1026 goto nla_put_failure;
1027
1028 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
1029 nl_rate = nla_nest_start(msg, i);
1030 if (!nl_rate)
1031 goto nla_put_failure;
1032
1033 rate = &dev->wiphy.bands[band]->bitrates[i];
9360ffd1
DM		 1034 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1035 rate->bitrate))
1036 goto nla_put_failure;
1037 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1038 nla_put_flag(msg,
1039 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1040 goto nla_put_failure;
ee688b00
JB		 1041
1042 nla_nest_end(msg, nl_rate);
1043 }
1044
1045 nla_nest_end(msg, nl_rates);
1046
1047 nla_nest_end(msg, nl_band);
1048 }
1049 nla_nest_end(msg, nl_bands);
1050
8fdc621d
JB		 1051 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
1052 if (!nl_cmds)
1053 goto nla_put_failure;
1054
1055 i = 0;
1056#define CMD(op, n) \
1057 do { \
1058 if (dev->ops->op) { \
1059 i++; \
9360ffd1
DM		 1060 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1061 goto nla_put_failure; \
8fdc621d
JB		 1062 } \
1063 } while (0)
1064
1065 CMD(add_virtual_intf, NEW_INTERFACE);
1066 CMD(change_virtual_intf, SET_INTERFACE);
1067 CMD(add_key, NEW_KEY);
8860020e 1068 CMD(start_ap, START_AP);
8fdc621d
JB		 1069 CMD(add_station, NEW_STATION);
1070 CMD(add_mpath, NEW_MPATH);
24bdd9f4 1071 CMD(update_mesh_config, SET_MESH_CONFIG);
8fdc621d 1072 CMD(change_bss, SET_BSS);
636a5d36
JM		 1073 CMD(auth, AUTHENTICATE);
1074 CMD(assoc, ASSOCIATE);
1075 CMD(deauth, DEAUTHENTICATE);
1076 CMD(disassoc, DISASSOCIATE);
04a773ad 1077 CMD(join_ibss, JOIN_IBSS);
29cbe68c 1078 CMD(join_mesh, JOIN_MESH);
67fbb16b
SO		 1079 CMD(set_pmksa, SET_PMKSA);
1080 CMD(del_pmksa, DEL_PMKSA);
1081 CMD(flush_pmksa, FLUSH_PMKSA);
7c4ef712
JB		 1082 if (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1083 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
13ae75b1 1084 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2e161f78 1085 CMD(mgmt_tx, FRAME);
f7ca38df 1086 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
5be83de5 1087 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
463d0183 1088 i++;
9360ffd1
DM		 1089 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
1090 goto nla_put_failure;
463d0183 1091 }
e8c9bd5b 1092 if (dev->ops->set_monitor_channel || dev->ops->start_ap ||
cc1d2806 1093 dev->ops->join_mesh) {
aa430da4
JB		 1094 i++;
1095 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1096 goto nla_put_failure;
1097 }
e8347eba 1098 CMD(set_wds_peer, SET_WDS_PEER);
109086ce
AN		 1099 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1100 CMD(tdls_mgmt, TDLS_MGMT);
1101 CMD(tdls_oper, TDLS_OPER);
1102 }
807f8a8c
LC		 1103 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
1104 CMD(sched_scan_start, START_SCHED_SCAN);
7f6cf311 1105 CMD(probe_client, PROBE_CLIENT);
1d9d9213 1106 CMD(set_noack_map, SET_NOACK_MAP);
5e760230
JB		 1107 if (dev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1108 i++;
9360ffd1
DM		 1109 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1110 goto nla_put_failure;
5e760230 1111 }
98104fde 1112 CMD(start_p2p_device, START_P2P_DEVICE);
f4e583c8 1113 CMD(set_mcast_rate, SET_MCAST_RATE);
8fdc621d 1114
4745fc09
KV		 1115#ifdef CONFIG_NL80211_TESTMODE
1116 CMD(testmode_cmd, TESTMODE);
1117#endif
1118
8fdc621d 1119#undef CMD
b23aa676 1120
6829c878 1121 if (dev->ops->connect || dev->ops->auth) {
b23aa676 1122 i++;
9360ffd1
DM		 1123 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
1124 goto nla_put_failure;
b23aa676
SO		 1125 }
1126
6829c878 1127 if (dev->ops->disconnect || dev->ops->deauth) {
b23aa676 1128 i++;
9360ffd1
DM		 1129 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1130 goto nla_put_failure;
b23aa676
SO		 1131 }
1132
8fdc621d
JB		 1133 nla_nest_end(msg, nl_cmds);
1134
7c4ef712 1135 if (dev->ops->remain_on_channel &&
9360ffd1
DM		 1136 (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
1137 nla_put_u32(msg, NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1138 dev->wiphy.max_remain_on_channel_duration))
1139 goto nla_put_failure;
a293911d 1140
9360ffd1
DM		 1141 if ((dev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
1142 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
1143 goto nla_put_failure;
f7ca38df 1144
2e161f78
JB		 1145 if (mgmt_stypes) {
1146 u16 stypes;
1147 struct nlattr *nl_ftypes, *nl_ifs;
1148 enum nl80211_iftype ift;
1149
1150 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
1151 if (!nl_ifs)
1152 goto nla_put_failure;
1153
1154 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1155 nl_ftypes = nla_nest_start(msg, ift);
1156 if (!nl_ftypes)
1157 goto nla_put_failure;
1158 i = 0;
1159 stypes = mgmt_stypes[ift].tx;
1160 while (stypes) {
9360ffd1
DM		 1161 if ((stypes & 1) &&
1162 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1163 (i << 4) | IEEE80211_FTYPE_MGMT))
1164 goto nla_put_failure;
2e161f78
JB		 1165 stypes >>= 1;
1166 i++;
1167 }
1168 nla_nest_end(msg, nl_ftypes);
1169 }
1170
74b70a4e
JB		 1171 nla_nest_end(msg, nl_ifs);
1172
2e161f78
JB		 1173 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
1174 if (!nl_ifs)
1175 goto nla_put_failure;
1176
1177 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1178 nl_ftypes = nla_nest_start(msg, ift);
1179 if (!nl_ftypes)
1180 goto nla_put_failure;
1181 i = 0;
1182 stypes = mgmt_stypes[ift].rx;
1183 while (stypes) {
9360ffd1
DM		 1184 if ((stypes & 1) &&
1185 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1186 (i << 4) | IEEE80211_FTYPE_MGMT))
1187 goto nla_put_failure;
2e161f78
JB		 1188 stypes >>= 1;
1189 i++;
1190 }
1191 nla_nest_end(msg, nl_ftypes);
1192 }
1193 nla_nest_end(msg, nl_ifs);
1194 }
1195
dfb89c56 1196#ifdef CONFIG_PM
ff1b6e69
JB		 1197 if (dev->wiphy.wowlan.flags || dev->wiphy.wowlan.n_patterns) {
1198 struct nlattr *nl_wowlan;
1199
1200 nl_wowlan = nla_nest_start(msg,
1201 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
1202 if (!nl_wowlan)
1203 goto nla_put_failure;
1204
9360ffd1
DM		 1205 if (((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY) &&
1206 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1207 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT) &&
1208 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1209 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT) &&
1210 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1211 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
1212 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1213 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
1214 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1215 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
1216 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1217 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
1218 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1219 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
1220 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1221 goto nla_put_failure;
ff1b6e69
JB		 1222 if (dev->wiphy.wowlan.n_patterns) {
1223 struct nl80211_wowlan_pattern_support pat = {
1224 .max_patterns = dev->wiphy.wowlan.n_patterns,
1225 .min_pattern_len =
1226 dev->wiphy.wowlan.pattern_min_len,
1227 .max_pattern_len =
1228 dev->wiphy.wowlan.pattern_max_len,
1229 };
9360ffd1
DM		 1230 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1231 sizeof(pat), &pat))
1232 goto nla_put_failure;
ff1b6e69
JB		 1233 }
1234
1235 nla_nest_end(msg, nl_wowlan);
1236 }
dfb89c56 1237#endif
ff1b6e69 1238
7527a782
JB		 1239 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1240 dev->wiphy.software_iftypes))
1241 goto nla_put_failure;
1242
1243 if (nl80211_put_iface_combinations(&dev->wiphy, msg))
1244 goto nla_put_failure;
1245
9360ffd1
DM		 1246 if ((dev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
1247 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1248 dev->wiphy.ap_sme_capa))
1249 goto nla_put_failure;
562a7480 1250
9360ffd1
DM		 1251 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS,
1252 dev->wiphy.features))
1253 goto nla_put_failure;
1f074bd8 1254
9360ffd1
DM		 1255 if (dev->wiphy.ht_capa_mod_mask &&
1256 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1257 sizeof(*dev->wiphy.ht_capa_mod_mask),
1258 dev->wiphy.ht_capa_mod_mask))
1259 goto nla_put_failure;
7e7c8926 1260
55682965
JB		 1261 return genlmsg_end(msg, hdr);
1262
1263 nla_put_failure:
bc3ed28c
TG		 1264 genlmsg_cancel(msg, hdr);
1265 return -EMSGSIZE;
55682965
JB		 1266}
1267
1268static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
1269{
1270 int idx = 0;
1271 int start = cb->args[0];
1272 struct cfg80211_registered_device *dev;
1273
a1794390 1274 mutex_lock(&cfg80211_mutex);
79c97e97 1275 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 1276 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
1277 continue;
b4637271 1278 if (++idx <= start)
55682965 1279 continue;
15e47304 1280 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).portid,
55682965 1281 cb->nlh->nlmsg_seq, NLM_F_MULTI,
b4637271
JV		 1282 dev) < 0) {
1283 idx--;
55682965 1284 break;
b4637271 1285 }
55682965 1286 }
a1794390 1287 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1288
1289 cb->args[0] = idx;
1290
1291 return skb->len;
1292}
1293
1294static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1295{
1296 struct sk_buff *msg;
4c476991 1297 struct cfg80211_registered_device *dev = info->user_ptr[0];
55682965 1298
fd2120ca 1299 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1300 if (!msg)
4c476991 1301 return -ENOMEM;
55682965 1302
15e47304 1303 if (nl80211_send_wiphy(msg, info->snd_portid, info->snd_seq, 0, dev) < 0) {
4c476991
JB		 1304 nlmsg_free(msg);
1305 return -ENOBUFS;
1306 }
55682965 1307
134e6375 1308 return genlmsg_reply(msg, info);
55682965
JB		 1309}
1310
31888487
JM		 1311static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1312 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1313 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1314 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1315 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1316 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1317};
1318
1319static int parse_txq_params(struct nlattr *tb[],
1320 struct ieee80211_txq_params *txq_params)
1321{
a3304b0a 1322 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 1323 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1324 !tb[NL80211_TXQ_ATTR_AIFS])
1325 return -EINVAL;
1326
a3304b0a 1327 txq_params->ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 1328 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1329 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1330 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1331 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1332
a3304b0a
JB		 1333 if (txq_params->ac >= NL80211_NUM_ACS)
1334 return -EINVAL;
1335
31888487
JM		 1336 return 0;
1337}
1338
f444de05
JB		 1339static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1340{
1341 /*
cc1d2806
JB		 1342 * You can only set the channel explicitly for WDS interfaces,
1343 * all others have their channel managed via their respective
1344 * "establish a connection" command (connect, join, ...)
1345 *
1346 * For AP/GO and mesh mode, the channel can be set with the
1347 * channel userspace API, but is only stored and passed to the
1348 * low-level driver when the AP starts or the mesh is joined.
1349 * This is for backward compatibility, userspace can also give
1350 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 1351 *
1352 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 1353 * whatever else is going on, so they have their own special
1354 * operation to set the monitor channel if possible.
f444de05
JB		 1355 */
1356 return !wdev ||
1357 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 1358 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 1359 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1360 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 1361}
1362
cd6c6598
JB		 1363static bool nl80211_valid_channel_type(struct genl_info *info,
1364 enum nl80211_channel_type *channel_type)
1365{
1366 enum nl80211_channel_type tmp;
1367
1368 if (!info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE])
1369 return false;
1370
1371 tmp = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1372 if (tmp != NL80211_CHAN_NO_HT &&
1373 tmp != NL80211_CHAN_HT20 &&
1374 tmp != NL80211_CHAN_HT40PLUS &&
1375 tmp != NL80211_CHAN_HT40MINUS)
1376 return false;
1377
1378 if (channel_type)
1379 *channel_type = tmp;
1380
1381 return true;
1382}
1383
f444de05
JB		 1384static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1385 struct wireless_dev *wdev,
1386 struct genl_info *info)
1387{
aa430da4 1388 struct ieee80211_channel *channel;
f444de05
JB		 1389 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
1390 u32 freq;
1391 int result;
e8c9bd5b
JB		 1392 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
1393
1394 if (wdev)
1395 iftype = wdev->iftype;
f444de05
JB		 1396
1397 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1398 return -EINVAL;
1399
1400 if (!nl80211_can_set_dev_channel(wdev))
1401 return -EOPNOTSUPP;
1402
cd6c6598
JB		 1403 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
1404 !nl80211_valid_channel_type(info, &channel_type))
1405 return -EINVAL;
f444de05
JB		 1406
1407 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1408
1409 mutex_lock(&rdev->devlist_mtx);
e8c9bd5b 1410 switch (iftype) {
aa430da4
JB		 1411 case NL80211_IFTYPE_AP:
1412 case NL80211_IFTYPE_P2P_GO:
1413 if (wdev->beacon_interval) {
1414 result = -EBUSY;
1415 break;
1416 }
1417 channel = rdev_freq_to_chan(rdev, freq, channel_type);
1418 if (!channel || !cfg80211_can_beacon_sec_chan(&rdev->wiphy,
1419 channel,
1420 channel_type)) {
1421 result = -EINVAL;
1422 break;
1423 }
1424 wdev->preset_chan = channel;
1425 wdev->preset_chantype = channel_type;
1426 result = 0;
1427 break;
cc1d2806
JB		 1428 case NL80211_IFTYPE_MESH_POINT:
1429 result = cfg80211_set_mesh_freq(rdev, wdev, freq, channel_type);
1430 break;
e8c9bd5b
JB		 1431 case NL80211_IFTYPE_MONITOR:
1432 result = cfg80211_set_monitor_channel(rdev, freq, channel_type);
1433 break;
aa430da4 1434 default:
e8c9bd5b 1435 result = -EINVAL;
f444de05
JB		 1436 }
1437 mutex_unlock(&rdev->devlist_mtx);
1438
1439 return result;
1440}
1441
1442static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1443{
4c476991
JB		 1444 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1445 struct net_device *netdev = info->user_ptr[1];
f444de05 1446
4c476991 1447 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
f444de05
JB		 1448}
1449
e8347eba
BJ		 1450static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1451{
43b19952
JB		 1452 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1453 struct net_device *dev = info->user_ptr[1];
1454 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 1455 const u8 *bssid;
e8347eba
BJ		 1456
1457 if (!info->attrs[NL80211_ATTR_MAC])
1458 return -EINVAL;
1459
43b19952
JB		 1460 if (netif_running(dev))
1461 return -EBUSY;
e8347eba 1462
43b19952
JB		 1463 if (!rdev->ops->set_wds_peer)
1464 return -EOPNOTSUPP;
e8347eba 1465
43b19952
JB		 1466 if (wdev->iftype != NL80211_IFTYPE_WDS)
1467 return -EOPNOTSUPP;
e8347eba
BJ		 1468
1469 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
e35e4d28 1470 return rdev_set_wds_peer(rdev, dev, bssid);
e8347eba
BJ		 1471}
1472
1473
55682965
JB		 1474static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1475{
1476 struct cfg80211_registered_device *rdev;
f444de05
JB		 1477 struct net_device *netdev = NULL;
1478 struct wireless_dev *wdev;
a1e567c8 1479 int result = 0, rem_txq_params = 0;
31888487 1480 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 1481 u32 changed;
1482 u8 retry_short = 0, retry_long = 0;
1483 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 1484 u8 coverage_class = 0;
55682965 1485
f444de05
JB		 1486 /*
1487 * Try to find the wiphy and netdev. Normally this
1488 * function shouldn't need the netdev, but this is
1489 * done for backward compatibility -- previously
1490 * setting the channel was done per wiphy, but now
1491 * it is per netdev. Previous userland like hostapd
1492 * also passed a netdev to set_wiphy, so that it is
1493 * possible to let that go to the right netdev!
1494 */
4bbf4d56
JB		 1495 mutex_lock(&cfg80211_mutex);
1496
f444de05
JB		 1497 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1498 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1499
1500 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1501 if (netdev && netdev->ieee80211_ptr) {
1502 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1503 mutex_lock(&rdev->mtx);
1504 } else
1505 netdev = NULL;
4bbf4d56
JB		 1506 }
1507
f444de05 1508 if (!netdev) {
878d9ec7
JB		 1509 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
1510 info->attrs);
f444de05
JB		 1511 if (IS_ERR(rdev)) {
1512 mutex_unlock(&cfg80211_mutex);
4c476991 1513 return PTR_ERR(rdev);
f444de05
JB		 1514 }
1515 wdev = NULL;
1516 netdev = NULL;
1517 result = 0;
1518
1519 mutex_lock(&rdev->mtx);
71fe96bf 1520 } else
f444de05 1521 wdev = netdev->ieee80211_ptr;
f444de05
JB		 1522
1523 /*
1524 * end workaround code, by now the rdev is available
1525 * and locked, and wdev may or may not be NULL.
1526 */
4bbf4d56
JB		 1527
1528 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 1529 result = cfg80211_dev_rename(
1530 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 1531
1532 mutex_unlock(&cfg80211_mutex);
1533
1534 if (result)
1535 goto bad_res;
31888487
JM		 1536
1537 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1538 struct ieee80211_txq_params txq_params;
1539 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1540
1541 if (!rdev->ops->set_txq_params) {
1542 result = -EOPNOTSUPP;
1543 goto bad_res;
1544 }
1545
f70f01c2
EP		 1546 if (!netdev) {
1547 result = -EINVAL;
1548 goto bad_res;
1549 }
1550
133a3ff2
JB		 1551 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
1552 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
1553 result = -EINVAL;
1554 goto bad_res;
1555 }
1556
2b5f8b0b
JB		 1557 if (!netif_running(netdev)) {
1558 result = -ENETDOWN;
1559 goto bad_res;
1560 }
1561
31888487
JM		 1562 nla_for_each_nested(nl_txq_params,
1563 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1564 rem_txq_params) {
1565 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1566 nla_data(nl_txq_params),
1567 nla_len(nl_txq_params),
1568 txq_params_policy);
1569 result = parse_txq_params(tb, &txq_params);
1570 if (result)
1571 goto bad_res;
1572
e35e4d28
HG		 1573 result = rdev_set_txq_params(rdev, netdev,
1574 &txq_params);
31888487
JM		 1575 if (result)
1576 goto bad_res;
1577 }
1578 }
55682965 1579
72bdcf34 1580 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
71fe96bf
JB		 1581 result = __nl80211_set_channel(rdev,
1582 nl80211_can_set_dev_channel(wdev) ? wdev : NULL,
1583 info);
72bdcf34
JM		 1584 if (result)
1585 goto bad_res;
1586 }
1587
98d2ff8b 1588 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 1589 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 1590 enum nl80211_tx_power_setting type;
1591 int idx, mbm = 0;
1592
c8442118
JB		 1593 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
1594 txp_wdev = NULL;
1595
98d2ff8b 1596 if (!rdev->ops->set_tx_power) {
60ea385f 1597 result = -EOPNOTSUPP;
98d2ff8b
JO		 1598 goto bad_res;
1599 }
1600
1601 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1602 type = nla_get_u32(info->attrs[idx]);
1603
1604 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1605 (type != NL80211_TX_POWER_AUTOMATIC)) {
1606 result = -EINVAL;
1607 goto bad_res;
1608 }
1609
1610 if (type != NL80211_TX_POWER_AUTOMATIC) {
1611 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1612 mbm = nla_get_u32(info->attrs[idx]);
1613 }
1614
c8442118 1615 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b
JO		 1616 if (result)
1617 goto bad_res;
1618 }
1619
afe0cbf8
BR		 1620 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1621 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1622 u32 tx_ant, rx_ant;
7f531e03
BR		 1623 if ((!rdev->wiphy.available_antennas_tx &&
1624 !rdev->wiphy.available_antennas_rx) ||
1625 !rdev->ops->set_antenna) {
afe0cbf8
BR		 1626 result = -EOPNOTSUPP;
1627 goto bad_res;
1628 }
1629
1630 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1631 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1632
a7ffac95 1633 /* reject antenna configurations which don't match the
7f531e03
BR		 1634 * available antenna masks, except for the "all" mask */
1635 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1636 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
a7ffac95
BR		 1637 result = -EINVAL;
1638 goto bad_res;
1639 }
1640
7f531e03
BR		 1641 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1642 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 1643
e35e4d28 1644 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8
BR		 1645 if (result)
1646 goto bad_res;
1647 }
1648
b9a5f8ca
JM		 1649 changed = 0;
1650
1651 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1652 retry_short = nla_get_u8(
1653 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1654 if (retry_short == 0) {
1655 result = -EINVAL;
1656 goto bad_res;
1657 }
1658 changed |= WIPHY_PARAM_RETRY_SHORT;
1659 }
1660
1661 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1662 retry_long = nla_get_u8(
1663 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1664 if (retry_long == 0) {
1665 result = -EINVAL;
1666 goto bad_res;
1667 }
1668 changed |= WIPHY_PARAM_RETRY_LONG;
1669 }
1670
1671 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
1672 frag_threshold = nla_get_u32(
1673 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
1674 if (frag_threshold < 256) {
1675 result = -EINVAL;
1676 goto bad_res;
1677 }
1678 if (frag_threshold != (u32) -1) {
1679 /*
1680 * Fragments (apart from the last one) are required to
1681 * have even length. Make the fragmentation code
1682 * simpler by stripping LSB should someone try to use
1683 * odd threshold value.
1684 */
1685 frag_threshold &= ~0x1;
1686 }
1687 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
1688 }
1689
1690 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
1691 rts_threshold = nla_get_u32(
1692 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
1693 changed |= WIPHY_PARAM_RTS_THRESHOLD;
1694 }
1695
81077e82
LT		 1696 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
1697 coverage_class = nla_get_u8(
1698 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
1699 changed |= WIPHY_PARAM_COVERAGE_CLASS;
1700 }
1701
b9a5f8ca
JM		 1702 if (changed) {
1703 u8 old_retry_short, old_retry_long;
1704 u32 old_frag_threshold, old_rts_threshold;
81077e82 1705 u8 old_coverage_class;
b9a5f8ca
JM		 1706
1707 if (!rdev->ops->set_wiphy_params) {
1708 result = -EOPNOTSUPP;
1709 goto bad_res;
1710 }
1711
1712 old_retry_short = rdev->wiphy.retry_short;
1713 old_retry_long = rdev->wiphy.retry_long;
1714 old_frag_threshold = rdev->wiphy.frag_threshold;
1715 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 1716 old_coverage_class = rdev->wiphy.coverage_class;
b9a5f8ca
JM		 1717
1718 if (changed & WIPHY_PARAM_RETRY_SHORT)
1719 rdev->wiphy.retry_short = retry_short;
1720 if (changed & WIPHY_PARAM_RETRY_LONG)
1721 rdev->wiphy.retry_long = retry_long;
1722 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1723 rdev->wiphy.frag_threshold = frag_threshold;
1724 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1725 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 1726 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1727 rdev->wiphy.coverage_class = coverage_class;
b9a5f8ca 1728
e35e4d28 1729 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 1730 if (result) {
1731 rdev->wiphy.retry_short = old_retry_short;
1732 rdev->wiphy.retry_long = old_retry_long;
1733 rdev->wiphy.frag_threshold = old_frag_threshold;
1734 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 1735 rdev->wiphy.coverage_class = old_coverage_class;
b9a5f8ca
JM		 1736 }
1737 }
72bdcf34 1738
306d6112 1739 bad_res:
4bbf4d56 1740 mutex_unlock(&rdev->mtx);
f444de05
JB		 1741 if (netdev)
1742 dev_put(netdev);
55682965
JB		 1743 return result;
1744}
1745
71bbc994
JB		 1746static inline u64 wdev_id(struct wireless_dev *wdev)
1747{
1748 return (u64)wdev->identifier |
1749 ((u64)wiphy_to_dev(wdev->wiphy)->wiphy_idx << 32);
1750}
55682965 1751
15e47304 1752static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 1753 struct cfg80211_registered_device *rdev,
72fb2abc 1754 struct wireless_dev *wdev)
55682965 1755{
72fb2abc 1756 struct net_device *dev = wdev->netdev;
55682965
JB		 1757 void *hdr;
1758
15e47304 1759 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_INTERFACE);
55682965
JB		 1760 if (!hdr)
1761 return -1;
1762
72fb2abc
JB		 1763 if (dev &&
1764 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 1765 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 1766 goto nla_put_failure;
1767
1768 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
1769 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
71bbc994 1770 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
98104fde 1771 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 1772 nla_put_u32(msg, NL80211_ATTR_GENERATION,
1773 rdev->devlist_generation ^
1774 (cfg80211_rdev_list_generation << 2)))
1775 goto nla_put_failure;
f5ea9120 1776
5b7ccaf3
JB		 1777 if (rdev->ops->get_channel) {
1778 struct ieee80211_channel *chan;
1779 enum nl80211_channel_type channel_type;
1780
e35e4d28 1781 chan = rdev_get_channel(rdev, wdev, &channel_type);
5b7ccaf3
JB		 1782 if (chan &&
1783 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
1784 chan->center_freq) ||
1785 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
1786 channel_type)))
59ef43e6 1787 goto nla_put_failure;
d91df0e3
PF		 1788 }
1789
55682965
JB		 1790 return genlmsg_end(msg, hdr);
1791
1792 nla_put_failure:
bc3ed28c
TG		 1793 genlmsg_cancel(msg, hdr);
1794 return -EMSGSIZE;
55682965
JB		 1795}
1796
1797static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
1798{
1799 int wp_idx = 0;
1800 int if_idx = 0;
1801 int wp_start = cb->args[0];
1802 int if_start = cb->args[1];
f5ea9120 1803 struct cfg80211_registered_device *rdev;
55682965
JB		 1804 struct wireless_dev *wdev;
1805
a1794390 1806 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 1807 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1808 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 1809 continue;
bba95fef
JB		 1810 if (wp_idx < wp_start) {
1811 wp_idx++;
55682965 1812 continue;
bba95fef 1813 }
55682965
JB		 1814 if_idx = 0;
1815
f5ea9120 1816 mutex_lock(&rdev->devlist_mtx);
89a54e48 1817 list_for_each_entry(wdev, &rdev->wdev_list, list) {
bba95fef
JB		 1818 if (if_idx < if_start) {
1819 if_idx++;
55682965 1820 continue;
bba95fef 1821 }
15e47304 1822 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 1823 cb->nlh->nlmsg_seq, NLM_F_MULTI,
72fb2abc 1824 rdev, wdev) < 0) {
f5ea9120 1825 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1826 goto out;
1827 }
1828 if_idx++;
55682965 1829 }
f5ea9120 1830 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1831
1832 wp_idx++;
55682965 1833 }
bba95fef 1834 out:
a1794390 1835 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1836
1837 cb->args[0] = wp_idx;
1838 cb->args[1] = if_idx;
1839
1840 return skb->len;
1841}
1842
1843static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
1844{
1845 struct sk_buff *msg;
4c476991 1846 struct cfg80211_registered_device *dev = info->user_ptr[0];
72fb2abc 1847 struct wireless_dev *wdev = info->user_ptr[1];
55682965 1848
fd2120ca 1849 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1850 if (!msg)
4c476991 1851 return -ENOMEM;
55682965 1852
15e47304 1853 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
72fb2abc 1854 dev, wdev) < 0) {
4c476991
JB		 1855 nlmsg_free(msg);
1856 return -ENOBUFS;
1857 }
55682965 1858
134e6375 1859 return genlmsg_reply(msg, info);
55682965
JB		 1860}
1861
66f7ac50
MW		 1862static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
1863 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
1864 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
1865 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
1866 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
1867 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
1868};
1869
1870static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
1871{
1872 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
1873 int flag;
1874
1875 *mntrflags = 0;
1876
1877 if (!nla)
1878 return -EINVAL;
1879
1880 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
1881 nla, mntr_flags_policy))
1882 return -EINVAL;
1883
1884 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
1885 if (flags[flag])
1886 *mntrflags |= (1<<flag);
1887
1888 return 0;
1889}
1890
9bc383de 1891static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 1892 struct net_device *netdev, u8 use_4addr,
1893 enum nl80211_iftype iftype)
9bc383de 1894{
ad4bb6f8 1895 if (!use_4addr) {
f350a0a8 1896 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
ad4bb6f8 1897 return -EBUSY;
9bc383de 1898 return 0;
ad4bb6f8 1899 }
9bc383de
JB		 1900
1901 switch (iftype) {
1902 case NL80211_IFTYPE_AP_VLAN:
1903 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
1904 return 0;
1905 break;
1906 case NL80211_IFTYPE_STATION:
1907 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
1908 return 0;
1909 break;
1910 default:
1911 break;
1912 }
1913
1914 return -EOPNOTSUPP;
1915}
1916
55682965
JB		 1917static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
1918{
4c476991 1919 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1920 struct vif_params params;
e36d56b6 1921 int err;
04a773ad 1922 enum nl80211_iftype otype, ntype;
4c476991 1923 struct net_device *dev = info->user_ptr[1];
92ffe055 1924 u32 _flags, *flags = NULL;
ac7f9cfa 1925 bool change = false;
55682965 1926
2ec600d6
LCC		 1927 memset(&params, 0, sizeof(params));
1928
04a773ad 1929 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 1930
723b038d 1931 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 1932 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 1933 if (otype != ntype)
ac7f9cfa 1934 change = true;
4c476991
JB		 1935 if (ntype > NL80211_IFTYPE_MAX)
1936 return -EINVAL;
723b038d
JB		 1937 }
1938
92ffe055 1939 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 1940 struct wireless_dev *wdev = dev->ieee80211_ptr;
1941
4c476991
JB		 1942 if (ntype != NL80211_IFTYPE_MESH_POINT)
1943 return -EINVAL;
29cbe68c
JB		 1944 if (netif_running(dev))
1945 return -EBUSY;
1946
1947 wdev_lock(wdev);
1948 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1949 IEEE80211_MAX_MESH_ID_LEN);
1950 wdev->mesh_id_up_len =
1951 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1952 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1953 wdev->mesh_id_up_len);
1954 wdev_unlock(wdev);
2ec600d6
LCC		 1955 }
1956
8b787643
FF		 1957 if (info->attrs[NL80211_ATTR_4ADDR]) {
1958 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1959 change = true;
ad4bb6f8 1960 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 1961 if (err)
4c476991 1962 return err;
8b787643
FF		 1963 } else {
1964 params.use_4addr = -1;
1965 }
1966
92ffe055 1967 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4c476991
JB		 1968 if (ntype != NL80211_IFTYPE_MONITOR)
1969 return -EINVAL;
92ffe055
JB		 1970 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1971 &_flags);
ac7f9cfa 1972 if (err)
4c476991 1973 return err;
ac7f9cfa
JB		 1974
1975 flags = &_flags;
1976 change = true;
92ffe055 1977 }
3b85875a 1978
ac7f9cfa 1979 if (change)
3d54d255 1980 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
ac7f9cfa
JB		 1981 else
1982 err = 0;
60719ffd 1983
9bc383de
JB		 1984 if (!err && params.use_4addr != -1)
1985 dev->ieee80211_ptr->use_4addr = params.use_4addr;
1986
55682965
JB		 1987 return err;
1988}
1989
1990static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1991{
4c476991 1992 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1993 struct vif_params params;
84efbb84 1994 struct wireless_dev *wdev;
1c90f9d4 1995 struct sk_buff *msg;
55682965
JB		 1996 int err;
1997 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 1998 u32 flags;
55682965 1999
2ec600d6
LCC		 2000 memset(&params, 0, sizeof(params));
2001
55682965
JB		 2002 if (!info->attrs[NL80211_ATTR_IFNAME])
2003 return -EINVAL;
2004
2005 if (info->attrs[NL80211_ATTR_IFTYPE]) {
2006 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
2007 if (type > NL80211_IFTYPE_MAX)
2008 return -EINVAL;
2009 }
2010
79c97e97 2011 if (!rdev->ops->add_virtual_intf ||
4c476991
JB		 2012 !(rdev->wiphy.interface_modes & (1 << type)))
2013 return -EOPNOTSUPP;
55682965 2014
9bc383de 2015 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 2016 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 2017 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 2018 if (err)
4c476991 2019 return err;
9bc383de 2020 }
8b787643 2021
1c90f9d4
JB		 2022 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2023 if (!msg)
2024 return -ENOMEM;
2025
66f7ac50
MW		 2026 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
2027 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
2028 &flags);
e35e4d28
HG		 2029 wdev = rdev_add_virtual_intf(rdev,
2030 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2031 type, err ? NULL : &flags, &params);
1c90f9d4
JB		 2032 if (IS_ERR(wdev)) {
2033 nlmsg_free(msg);
84efbb84 2034 return PTR_ERR(wdev);
1c90f9d4 2035 }
2ec600d6 2036
98104fde
JB		 2037 switch (type) {
2038 case NL80211_IFTYPE_MESH_POINT:
2039 if (!info->attrs[NL80211_ATTR_MESH_ID])
2040 break;
29cbe68c
JB		 2041 wdev_lock(wdev);
2042 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
2043 IEEE80211_MAX_MESH_ID_LEN);
2044 wdev->mesh_id_up_len =
2045 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
2046 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
2047 wdev->mesh_id_up_len);
2048 wdev_unlock(wdev);
98104fde
JB		 2049 break;
2050 case NL80211_IFTYPE_P2P_DEVICE:
2051 /*
2052 * P2P Device doesn't have a netdev, so doesn't go
2053 * through the netdev notifier and must be added here
2054 */
2055 mutex_init(&wdev->mtx);
2056 INIT_LIST_HEAD(&wdev->event_list);
2057 spin_lock_init(&wdev->event_lock);
2058 INIT_LIST_HEAD(&wdev->mgmt_registrations);
2059 spin_lock_init(&wdev->mgmt_registrations_lock);
2060
2061 mutex_lock(&rdev->devlist_mtx);
2062 wdev->identifier = ++rdev->wdev_id;
2063 list_add_rcu(&wdev->list, &rdev->wdev_list);
2064 rdev->devlist_generation++;
2065 mutex_unlock(&rdev->devlist_mtx);
2066 break;
2067 default:
2068 break;
29cbe68c
JB		 2069 }
2070
15e47304 2071 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
1c90f9d4
JB		 2072 rdev, wdev) < 0) {
2073 nlmsg_free(msg);
2074 return -ENOBUFS;
2075 }
2076
2077 return genlmsg_reply(msg, info);
55682965
JB		 2078}
2079
2080static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
2081{
4c476991 2082 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 2083 struct wireless_dev *wdev = info->user_ptr[1];
55682965 2084
4c476991
JB		 2085 if (!rdev->ops->del_virtual_intf)
2086 return -EOPNOTSUPP;
55682965 2087
84efbb84
JB		 2088 /*
2089 * If we remove a wireless device without a netdev then clear
2090 * user_ptr[1] so that nl80211_post_doit won't dereference it
2091 * to check if it needs to do dev_put(). Otherwise it crashes
2092 * since the wdev has been freed, unlike with a netdev where
2093 * we need the dev_put() for the netdev to really be freed.
2094 */
2095 if (!wdev->netdev)
2096 info->user_ptr[1] = NULL;
2097
e35e4d28 2098 return rdev_del_virtual_intf(rdev, wdev);
55682965
JB		 2099}
2100
1d9d9213
SW		 2101static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
2102{
2103 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2104 struct net_device *dev = info->user_ptr[1];
2105 u16 noack_map;
2106
2107 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
2108 return -EINVAL;
2109
2110 if (!rdev->ops->set_noack_map)
2111 return -EOPNOTSUPP;
2112
2113 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
2114
e35e4d28 2115 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 2116}
2117
41ade00f
JB		 2118struct get_key_cookie {
2119 struct sk_buff *msg;
2120 int error;
b9454e83 2121 int idx;
41ade00f
JB		 2122};
2123
2124static void get_key_callback(void *c, struct key_params *params)
2125{
b9454e83 2126 struct nlattr *key;
41ade00f
JB		 2127 struct get_key_cookie *cookie = c;
2128
9360ffd1
DM		 2129 if ((params->key &&
2130 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
2131 params->key_len, params->key)) ||
2132 (params->seq &&
2133 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
2134 params->seq_len, params->seq)) ||
2135 (params->cipher &&
2136 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
2137 params->cipher)))
2138 goto nla_put_failure;
41ade00f 2139
b9454e83
JB		 2140 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
2141 if (!key)
2142 goto nla_put_failure;
2143
9360ffd1
DM		 2144 if ((params->key &&
2145 nla_put(cookie->msg, NL80211_KEY_DATA,
2146 params->key_len, params->key)) ||
2147 (params->seq &&
2148 nla_put(cookie->msg, NL80211_KEY_SEQ,
2149 params->seq_len, params->seq)) ||
2150 (params->cipher &&
2151 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
2152 params->cipher)))
2153 goto nla_put_failure;
b9454e83 2154
9360ffd1
DM		 2155 if (nla_put_u8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx))
2156 goto nla_put_failure;
b9454e83
JB		 2157
2158 nla_nest_end(cookie->msg, key);
2159
41ade00f
JB		 2160 return;
2161 nla_put_failure:
2162 cookie->error = 1;
2163}
2164
2165static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
2166{
4c476991 2167 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2168 int err;
4c476991 2169 struct net_device *dev = info->user_ptr[1];
41ade00f 2170 u8 key_idx = 0;
e31b8213
JB		 2171 const u8 *mac_addr = NULL;
2172 bool pairwise;
41ade00f
JB		 2173 struct get_key_cookie cookie = {
2174 .error = 0,
2175 };
2176 void *hdr;
2177 struct sk_buff *msg;
2178
2179 if (info->attrs[NL80211_ATTR_KEY_IDX])
2180 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
2181
3cfcf6ac 2182 if (key_idx > 5)
41ade00f
JB		 2183 return -EINVAL;
2184
2185 if (info->attrs[NL80211_ATTR_MAC])
2186 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2187
e31b8213
JB		 2188 pairwise = !!mac_addr;
2189 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
2190 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
2191 if (kt >= NUM_NL80211_KEYTYPES)
2192 return -EINVAL;
2193 if (kt != NL80211_KEYTYPE_GROUP &&
2194 kt != NL80211_KEYTYPE_PAIRWISE)
2195 return -EINVAL;
2196 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
2197 }
2198
4c476991
JB		 2199 if (!rdev->ops->get_key)
2200 return -EOPNOTSUPP;
41ade00f 2201
fd2120ca 2202 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 2203 if (!msg)
2204 return -ENOMEM;
41ade00f 2205
15e47304 2206 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 2207 NL80211_CMD_NEW_KEY);
4c476991
JB		 2208 if (IS_ERR(hdr))
2209 return PTR_ERR(hdr);
41ade00f
JB		 2210
2211 cookie.msg = msg;
b9454e83 2212 cookie.idx = key_idx;
41ade00f 2213
9360ffd1
DM		 2214 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2215 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
2216 goto nla_put_failure;
2217 if (mac_addr &&
2218 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
2219 goto nla_put_failure;
41ade00f 2220
e31b8213
JB		 2221 if (pairwise && mac_addr &&
2222 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2223 return -ENOENT;
2224
e35e4d28
HG		 2225 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
2226 get_key_callback);
41ade00f
JB		 2227
2228 if (err)
6c95e2a2 2229 goto free_msg;
41ade00f
JB		 2230
2231 if (cookie.error)
2232 goto nla_put_failure;
2233
2234 genlmsg_end(msg, hdr);
4c476991 2235 return genlmsg_reply(msg, info);
41ade00f
JB		 2236
2237 nla_put_failure:
2238 err = -ENOBUFS;
6c95e2a2 2239 free_msg:
41ade00f 2240 nlmsg_free(msg);
41ade00f
JB		 2241 return err;
2242}
2243
2244static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
2245{
4c476991 2246 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 2247 struct key_parse key;
41ade00f 2248 int err;
4c476991 2249 struct net_device *dev = info->user_ptr[1];
41ade00f 2250
b9454e83
JB		 2251 err = nl80211_parse_key(info, &key);
2252 if (err)
2253 return err;
41ade00f 2254
b9454e83 2255 if (key.idx < 0)
41ade00f
JB		 2256 return -EINVAL;
2257
b9454e83
JB		 2258 /* only support setting default key */
2259 if (!key.def && !key.defmgmt)
41ade00f
JB		 2260 return -EINVAL;
2261
dbd2fd65 2262 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 2263
dbd2fd65
JB		 2264 if (key.def) {
2265 if (!rdev->ops->set_default_key) {
2266 err = -EOPNOTSUPP;
2267 goto out;
2268 }
41ade00f 2269
dbd2fd65
JB		 2270 err = nl80211_key_allowed(dev->ieee80211_ptr);
2271 if (err)
2272 goto out;
2273
e35e4d28 2274 err = rdev_set_default_key(rdev, dev, key.idx,
dbd2fd65
JB		 2275 key.def_uni, key.def_multi);
2276
2277 if (err)
2278 goto out;
fffd0934 2279
3d23e349 2280#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 2281 dev->ieee80211_ptr->wext.default_key = key.idx;
2282#endif
2283 } else {
2284 if (key.def_uni || !key.def_multi) {
2285 err = -EINVAL;
2286 goto out;
2287 }
2288
2289 if (!rdev->ops->set_default_mgmt_key) {
2290 err = -EOPNOTSUPP;
2291 goto out;
2292 }
2293
2294 err = nl80211_key_allowed(dev->ieee80211_ptr);
2295 if (err)
2296 goto out;
2297
e35e4d28 2298 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
dbd2fd65
JB		 2299 if (err)
2300 goto out;
2301
2302#ifdef CONFIG_CFG80211_WEXT
2303 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 2304#endif
dbd2fd65
JB		 2305 }
2306
2307 out:
fffd0934 2308 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2309
41ade00f
JB		 2310 return err;
2311}
2312
2313static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
2314{
4c476991 2315 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 2316 int err;
4c476991 2317 struct net_device *dev = info->user_ptr[1];
b9454e83 2318 struct key_parse key;
e31b8213 2319 const u8 *mac_addr = NULL;
41ade00f 2320
b9454e83
JB		 2321 err = nl80211_parse_key(info, &key);
2322 if (err)
2323 return err;
41ade00f 2324
b9454e83 2325 if (!key.p.key)
41ade00f
JB		 2326 return -EINVAL;
2327
41ade00f
JB		 2328 if (info->attrs[NL80211_ATTR_MAC])
2329 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2330
e31b8213
JB		 2331 if (key.type == -1) {
2332 if (mac_addr)
2333 key.type = NL80211_KEYTYPE_PAIRWISE;
2334 else
2335 key.type = NL80211_KEYTYPE_GROUP;
2336 }
2337
2338 /* for now */
2339 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2340 key.type != NL80211_KEYTYPE_GROUP)
2341 return -EINVAL;
2342
4c476991
JB		 2343 if (!rdev->ops->add_key)
2344 return -EOPNOTSUPP;
25e47c18 2345
e31b8213
JB		 2346 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
2347 key.type == NL80211_KEYTYPE_PAIRWISE,
2348 mac_addr))
4c476991 2349 return -EINVAL;
41ade00f 2350
fffd0934
JB		 2351 wdev_lock(dev->ieee80211_ptr);
2352 err = nl80211_key_allowed(dev->ieee80211_ptr);
2353 if (!err)
e35e4d28
HG		 2354 err = rdev_add_key(rdev, dev, key.idx,
2355 key.type == NL80211_KEYTYPE_PAIRWISE,
2356 mac_addr, &key.p);
fffd0934 2357 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2358
41ade00f
JB		 2359 return err;
2360}
2361
2362static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
2363{
4c476991 2364 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2365 int err;
4c476991 2366 struct net_device *dev = info->user_ptr[1];
41ade00f 2367 u8 *mac_addr = NULL;
b9454e83 2368 struct key_parse key;
41ade00f 2369
b9454e83
JB		 2370 err = nl80211_parse_key(info, &key);
2371 if (err)
2372 return err;
41ade00f
JB		 2373
2374 if (info->attrs[NL80211_ATTR_MAC])
2375 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2376
e31b8213
JB		 2377 if (key.type == -1) {
2378 if (mac_addr)
2379 key.type = NL80211_KEYTYPE_PAIRWISE;
2380 else
2381 key.type = NL80211_KEYTYPE_GROUP;
2382 }
2383
2384 /* for now */
2385 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2386 key.type != NL80211_KEYTYPE_GROUP)
2387 return -EINVAL;
2388
4c476991
JB		 2389 if (!rdev->ops->del_key)
2390 return -EOPNOTSUPP;
41ade00f 2391
fffd0934
JB		 2392 wdev_lock(dev->ieee80211_ptr);
2393 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213
JB		 2394
2395 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
2396 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2397 err = -ENOENT;
2398
fffd0934 2399 if (!err)
e35e4d28
HG		 2400 err = rdev_del_key(rdev, dev, key.idx,
2401 key.type == NL80211_KEYTYPE_PAIRWISE,
2402 mac_addr);
41ade00f 2403
3d23e349 2404#ifdef CONFIG_CFG80211_WEXT
08645126 2405 if (!err) {
b9454e83 2406 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 2407 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 2408 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 2409 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
2410 }
2411#endif
fffd0934 2412 wdev_unlock(dev->ieee80211_ptr);
08645126 2413
41ade00f
JB		 2414 return err;
2415}
2416
8860020e
JB		 2417static int nl80211_parse_beacon(struct genl_info *info,
2418 struct cfg80211_beacon_data *bcn)
ed1b6cc7 2419{
8860020e 2420 bool haveinfo = false;
ed1b6cc7 2421
9946ecfb
JM		 2422 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
2423 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2424 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2425 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
f4a11bb0
JB		 2426 return -EINVAL;
2427
8860020e 2428 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 2429
ed1b6cc7 2430 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
8860020e
JB		 2431 bcn->head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2432 bcn->head_len = nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2433 if (!bcn->head_len)
2434 return -EINVAL;
2435 haveinfo = true;
ed1b6cc7
JB		 2436 }
2437
2438 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
8860020e
JB		 2439 bcn->tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2440 bcn->tail_len =
ed1b6cc7 2441 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 2442 haveinfo = true;
ed1b6cc7
JB		 2443 }
2444
4c476991
JB		 2445 if (!haveinfo)
2446 return -EINVAL;
3b85875a 2447
9946ecfb 2448 if (info->attrs[NL80211_ATTR_IE]) {
8860020e
JB		 2449 bcn->beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2450 bcn->beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 2451 }
2452
2453 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 2454 bcn->proberesp_ies =
9946ecfb 2455 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 2456 bcn->proberesp_ies_len =
9946ecfb
JM		 2457 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2458 }
2459
2460 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 2461 bcn->assocresp_ies =
9946ecfb 2462 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 2463 bcn->assocresp_ies_len =
9946ecfb
JM		 2464 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2465 }
2466
00f740e1 2467 if (info->attrs[NL80211_ATTR_PROBE_RESP]) {
8860020e 2468 bcn->probe_resp =
00f740e1 2469 nla_data(info->attrs[NL80211_ATTR_PROBE_RESP]);
8860020e 2470 bcn->probe_resp_len =
00f740e1
AN		 2471 nla_len(info->attrs[NL80211_ATTR_PROBE_RESP]);
2472 }
2473
8860020e
JB		 2474 return 0;
2475}
2476
46c1dd0c
FF		 2477static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
2478 struct cfg80211_ap_settings *params)
2479{
2480 struct wireless_dev *wdev;
2481 bool ret = false;
2482
2483 mutex_lock(&rdev->devlist_mtx);
2484
89a54e48 2485 list_for_each_entry(wdev, &rdev->wdev_list, list) {
46c1dd0c
FF		 2486 if (wdev->iftype != NL80211_IFTYPE_AP &&
2487 wdev->iftype != NL80211_IFTYPE_P2P_GO)
2488 continue;
2489
2490 if (!wdev->preset_chan)
2491 continue;
2492
2493 params->channel = wdev->preset_chan;
2494 params->channel_type = wdev->preset_chantype;
2495 ret = true;
2496 break;
2497 }
2498
2499 mutex_unlock(&rdev->devlist_mtx);
2500
2501 return ret;
2502}
2503
e39e5b5e
JM		 2504static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
2505 enum nl80211_auth_type auth_type,
2506 enum nl80211_commands cmd)
2507{
2508 if (auth_type > NL80211_AUTHTYPE_MAX)
2509 return false;
2510
2511 switch (cmd) {
2512 case NL80211_CMD_AUTHENTICATE:
2513 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
2514 auth_type == NL80211_AUTHTYPE_SAE)
2515 return false;
2516 return true;
2517 case NL80211_CMD_CONNECT:
2518 case NL80211_CMD_START_AP:
2519 /* SAE not supported yet */
2520 if (auth_type == NL80211_AUTHTYPE_SAE)
2521 return false;
2522 return true;
2523 default:
2524 return false;
2525 }
2526}
2527
8860020e
JB		 2528static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
2529{
2530 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2531 struct net_device *dev = info->user_ptr[1];
2532 struct wireless_dev *wdev = dev->ieee80211_ptr;
2533 struct cfg80211_ap_settings params;
2534 int err;
2535
2536 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2537 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2538 return -EOPNOTSUPP;
2539
2540 if (!rdev->ops->start_ap)
2541 return -EOPNOTSUPP;
2542
2543 if (wdev->beacon_interval)
2544 return -EALREADY;
2545
2546 memset(&params, 0, sizeof(params));
2547
2548 /* these are required for START_AP */
2549 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
2550 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
2551 !info->attrs[NL80211_ATTR_BEACON_HEAD])
2552 return -EINVAL;
2553
2554 err = nl80211_parse_beacon(info, &params.beacon);
2555 if (err)
2556 return err;
2557
2558 params.beacon_interval =
2559 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
2560 params.dtim_period =
2561 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
2562
2563 err = cfg80211_validate_beacon_int(rdev, params.beacon_interval);
2564 if (err)
2565 return err;
2566
2567 /*
2568 * In theory, some of these attributes should be required here
2569 * but since they were not used when the command was originally
2570 * added, keep them optional for old user space programs to let
2571 * them continue to work with drivers that do not need the
2572 * additional information -- drivers must check!
2573 */
2574 if (info->attrs[NL80211_ATTR_SSID]) {
2575 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
2576 params.ssid_len =
2577 nla_len(info->attrs[NL80211_ATTR_SSID]);
2578 if (params.ssid_len == 0 ||
2579 params.ssid_len > IEEE80211_MAX_SSID_LEN)
2580 return -EINVAL;
2581 }
2582
2583 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
2584 params.hidden_ssid = nla_get_u32(
2585 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
2586 if (params.hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE &&
2587 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_LEN &&
2588 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_CONTENTS)
2589 return -EINVAL;
2590 }
2591
2592 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
2593
2594 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
2595 params.auth_type = nla_get_u32(
2596 info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 2597 if (!nl80211_valid_auth_type(rdev, params.auth_type,
2598 NL80211_CMD_START_AP))
8860020e
JB		 2599 return -EINVAL;
2600 } else
2601 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
2602
2603 err = nl80211_crypto_settings(rdev, info, &params.crypto,
2604 NL80211_MAX_NR_CIPHER_SUITES);
2605 if (err)
2606 return err;
2607
1b658f11
VT		 2608 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
2609 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
2610 return -EOPNOTSUPP;
2611 params.inactivity_timeout = nla_get_u16(
2612 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
2613 }
2614
aa430da4
JB		 2615 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
2616 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
2617
2618 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
2619 !nl80211_valid_channel_type(info, &channel_type))
2620 return -EINVAL;
2621
2622 params.channel = rdev_freq_to_chan(rdev,
2623 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
2624 channel_type);
2625 if (!params.channel)
2626 return -EINVAL;
2627 params.channel_type = channel_type;
2628 } else if (wdev->preset_chan) {
2629 params.channel = wdev->preset_chan;
2630 params.channel_type = wdev->preset_chantype;
46c1dd0c 2631 } else if (!nl80211_get_ap_channel(rdev, &params))
aa430da4
JB		 2632 return -EINVAL;
2633
2634 if (!cfg80211_can_beacon_sec_chan(&rdev->wiphy, params.channel,
2635 params.channel_type))
2636 return -EINVAL;
2637
e4e32459
MK		 2638 mutex_lock(&rdev->devlist_mtx);
2639 err = cfg80211_can_use_chan(rdev, wdev, params.channel,
2640 CHAN_MODE_SHARED);
2641 mutex_unlock(&rdev->devlist_mtx);
2642
2643 if (err)
2644 return err;
2645
e35e4d28 2646 err = rdev_start_ap(rdev, dev, &params);
46c1dd0c
FF		 2647 if (!err) {
2648 wdev->preset_chan = params.channel;
2649 wdev->preset_chantype = params.channel_type;
8860020e 2650 wdev->beacon_interval = params.beacon_interval;
f4489ebe 2651 wdev->channel = params.channel;
46c1dd0c 2652 }
56d1893d 2653 return err;
ed1b6cc7
JB		 2654}
2655
8860020e
JB		 2656static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
2657{
2658 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2659 struct net_device *dev = info->user_ptr[1];
2660 struct wireless_dev *wdev = dev->ieee80211_ptr;
2661 struct cfg80211_beacon_data params;
2662 int err;
2663
2664 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2665 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2666 return -EOPNOTSUPP;
2667
2668 if (!rdev->ops->change_beacon)
2669 return -EOPNOTSUPP;
2670
2671 if (!wdev->beacon_interval)
2672 return -EINVAL;
2673
2674 err = nl80211_parse_beacon(info, &params);
2675 if (err)
2676 return err;
2677
e35e4d28 2678 return rdev_change_beacon(rdev, dev, &params);
8860020e
JB		 2679}
2680
2681static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 2682{
4c476991
JB		 2683 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2684 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 2685
60771780 2686 return cfg80211_stop_ap(rdev, dev);
ed1b6cc7
JB		 2687}
2688
5727ef1b
JB		 2689static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
2690 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
2691 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
2692 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 2693 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 2694 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 2695 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 2696};
2697
eccb8e8f 2698static int parse_station_flags(struct genl_info *info,
bdd3ae3d 2699 enum nl80211_iftype iftype,
eccb8e8f 2700 struct station_parameters *params)
5727ef1b
JB		 2701{
2702 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 2703 struct nlattr *nla;
5727ef1b
JB		 2704 int flag;
2705
eccb8e8f
JB		 2706 /*
2707 * Try parsing the new attribute first so userspace
2708 * can specify both for older kernels.
2709 */
2710 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
2711 if (nla) {
2712 struct nl80211_sta_flag_update *sta_flags;
2713
2714 sta_flags = nla_data(nla);
2715 params->sta_flags_mask = sta_flags->mask;
2716 params->sta_flags_set = sta_flags->set;
2717 if ((params->sta_flags_mask |
2718 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
2719 return -EINVAL;
2720 return 0;
2721 }
2722
2723 /* if present, parse the old attribute */
5727ef1b 2724
eccb8e8f 2725 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 2726 if (!nla)
2727 return 0;
2728
2729 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
2730 nla, sta_flags_policy))
2731 return -EINVAL;
2732
bdd3ae3d
JB		 2733 /*
2734 * Only allow certain flags for interface types so that
2735 * other attributes are silently ignored. Remember that
2736 * this is backward compatibility code with old userspace
2737 * and shouldn't be hit in other cases anyway.
2738 */
2739 switch (iftype) {
2740 case NL80211_IFTYPE_AP:
2741 case NL80211_IFTYPE_AP_VLAN:
2742 case NL80211_IFTYPE_P2P_GO:
2743 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2744 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
2745 BIT(NL80211_STA_FLAG_WME) |
2746 BIT(NL80211_STA_FLAG_MFP);
2747 break;
2748 case NL80211_IFTYPE_P2P_CLIENT:
2749 case NL80211_IFTYPE_STATION:
2750 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2751 BIT(NL80211_STA_FLAG_TDLS_PEER);
2752 break;
2753 case NL80211_IFTYPE_MESH_POINT:
2754 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
2755 BIT(NL80211_STA_FLAG_MFP) |
2756 BIT(NL80211_STA_FLAG_AUTHORIZED);
2757 default:
2758 return -EINVAL;
2759 }
5727ef1b 2760
3383b5a6
JB		 2761 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
2762 if (flags[flag]) {
eccb8e8f 2763 params->sta_flags_set |= (1<<flag);
5727ef1b 2764
3383b5a6
JB		 2765 /* no longer support new API additions in old API */
2766 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
2767 return -EINVAL;
2768 }
2769 }
2770
5727ef1b
JB		 2771 return 0;
2772}
2773
c8dcfd8a
FF		 2774static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
2775 int attr)
2776{
2777 struct nlattr *rate;
8eb41c8d
VK		 2778 u32 bitrate;
2779 u16 bitrate_compat;
c8dcfd8a
FF		 2780
2781 rate = nla_nest_start(msg, attr);
2782 if (!rate)
2783 goto nla_put_failure;
2784
2785 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
2786 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 2787 /* report 16-bit bitrate only if we can */
2788 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
9360ffd1 2789 if ((bitrate > 0 &&
8eb41c8d
VK		 2790 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate)) ||
2791 (bitrate_compat > 0 &&
2792 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat)) ||
9360ffd1
DM		 2793 ((info->flags & RATE_INFO_FLAGS_MCS) &&
2794 nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs)) ||
2795 ((info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH) &&
2796 nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH)) ||
2797 ((info->flags & RATE_INFO_FLAGS_SHORT_GI) &&
2798 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI)))
2799 goto nla_put_failure;
c8dcfd8a
FF		 2800
2801 nla_nest_end(msg, rate);
2802 return true;
2803
2804nla_put_failure:
2805 return false;
2806}
2807
15e47304 2808static int nl80211_send_station(struct sk_buff *msg, u32 portid, u32 seq,
66266b3a
JL		 2809 int flags,
2810 struct cfg80211_registered_device *rdev,
2811 struct net_device *dev,
98b62183 2812 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 2813{
2814 void *hdr;
f4263c98 2815 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 2816
15e47304 2817 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_STATION);
fd5b74dc
JB		 2818 if (!hdr)
2819 return -1;
2820
9360ffd1
DM		 2821 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2822 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
2823 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
2824 goto nla_put_failure;
f5ea9120 2825
2ec600d6
LCC		 2826 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
2827 if (!sinfoattr)
fd5b74dc 2828 goto nla_put_failure;
9360ffd1
DM		 2829 if ((sinfo->filled & STATION_INFO_CONNECTED_TIME) &&
2830 nla_put_u32(msg, NL80211_STA_INFO_CONNECTED_TIME,
2831 sinfo->connected_time))
2832 goto nla_put_failure;
2833 if ((sinfo->filled & STATION_INFO_INACTIVE_TIME) &&
2834 nla_put_u32(msg, NL80211_STA_INFO_INACTIVE_TIME,
2835 sinfo->inactive_time))
2836 goto nla_put_failure;
2837 if ((sinfo->filled & STATION_INFO_RX_BYTES) &&
2838 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
2839 sinfo->rx_bytes))
2840 goto nla_put_failure;
2841 if ((sinfo->filled & STATION_INFO_TX_BYTES) &&
2842 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
2843 sinfo->tx_bytes))
2844 goto nla_put_failure;
2845 if ((sinfo->filled & STATION_INFO_LLID) &&
2846 nla_put_u16(msg, NL80211_STA_INFO_LLID, sinfo->llid))
2847 goto nla_put_failure;
2848 if ((sinfo->filled & STATION_INFO_PLID) &&
2849 nla_put_u16(msg, NL80211_STA_INFO_PLID, sinfo->plid))
2850 goto nla_put_failure;
2851 if ((sinfo->filled & STATION_INFO_PLINK_STATE) &&
2852 nla_put_u8(msg, NL80211_STA_INFO_PLINK_STATE,
2853 sinfo->plink_state))
2854 goto nla_put_failure;
66266b3a
JL		 2855 switch (rdev->wiphy.signal_type) {
2856 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 2857 if ((sinfo->filled & STATION_INFO_SIGNAL) &&
2858 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL,
2859 sinfo->signal))
2860 goto nla_put_failure;
2861 if ((sinfo->filled & STATION_INFO_SIGNAL_AVG) &&
2862 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL_AVG,
2863 sinfo->signal_avg))
2864 goto nla_put_failure;
66266b3a
JL		 2865 break;
2866 default:
2867 break;
2868 }
420e7fab 2869 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
c8dcfd8a
FF		 2870 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
2871 NL80211_STA_INFO_TX_BITRATE))
2872 goto nla_put_failure;
2873 }
2874 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
2875 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
2876 NL80211_STA_INFO_RX_BITRATE))
420e7fab 2877 goto nla_put_failure;
420e7fab 2878 }
9360ffd1
DM		 2879 if ((sinfo->filled & STATION_INFO_RX_PACKETS) &&
2880 nla_put_u32(msg, NL80211_STA_INFO_RX_PACKETS,
2881 sinfo->rx_packets))
2882 goto nla_put_failure;
2883 if ((sinfo->filled & STATION_INFO_TX_PACKETS) &&
2884 nla_put_u32(msg, NL80211_STA_INFO_TX_PACKETS,
2885 sinfo->tx_packets))
2886 goto nla_put_failure;
2887 if ((sinfo->filled & STATION_INFO_TX_RETRIES) &&
2888 nla_put_u32(msg, NL80211_STA_INFO_TX_RETRIES,
2889 sinfo->tx_retries))
2890 goto nla_put_failure;
2891 if ((sinfo->filled & STATION_INFO_TX_FAILED) &&
2892 nla_put_u32(msg, NL80211_STA_INFO_TX_FAILED,
2893 sinfo->tx_failed))
2894 goto nla_put_failure;
2895 if ((sinfo->filled & STATION_INFO_BEACON_LOSS_COUNT) &&
2896 nla_put_u32(msg, NL80211_STA_INFO_BEACON_LOSS,
2897 sinfo->beacon_loss_count))
2898 goto nla_put_failure;
f4263c98
PS		 2899 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
2900 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
2901 if (!bss_param)
2902 goto nla_put_failure;
2903
9360ffd1
DM		 2904 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
2905 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
2906 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
2907 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
2908 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
2909 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
2910 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
2911 sinfo->bss_param.dtim_period) ||
2912 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
2913 sinfo->bss_param.beacon_interval))
2914 goto nla_put_failure;
f4263c98
PS		 2915
2916 nla_nest_end(msg, bss_param);
2917 }
9360ffd1
DM		 2918 if ((sinfo->filled & STATION_INFO_STA_FLAGS) &&
2919 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
2920 sizeof(struct nl80211_sta_flag_update),
2921 &sinfo->sta_flags))
2922 goto nla_put_failure;
7eab0f64
JL		 2923 if ((sinfo->filled & STATION_INFO_T_OFFSET) &&
2924 nla_put_u64(msg, NL80211_STA_INFO_T_OFFSET,
2925 sinfo->t_offset))
2926 goto nla_put_failure;
2ec600d6 2927 nla_nest_end(msg, sinfoattr);
fd5b74dc 2928
9360ffd1
DM		 2929 if ((sinfo->filled & STATION_INFO_ASSOC_REQ_IES) &&
2930 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
2931 sinfo->assoc_req_ies))
2932 goto nla_put_failure;
50d3dfb7 2933
fd5b74dc
JB		 2934 return genlmsg_end(msg, hdr);
2935
2936 nla_put_failure:
bc3ed28c
TG		 2937 genlmsg_cancel(msg, hdr);
2938 return -EMSGSIZE;
fd5b74dc
JB		 2939}
2940
2ec600d6 2941static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 2942 struct netlink_callback *cb)
2ec600d6 2943{
2ec600d6
LCC		 2944 struct station_info sinfo;
2945 struct cfg80211_registered_device *dev;
bba95fef 2946 struct net_device *netdev;
2ec600d6 2947 u8 mac_addr[ETH_ALEN];
bba95fef 2948 int sta_idx = cb->args[1];
2ec600d6 2949 int err;
2ec600d6 2950
67748893
JB		 2951 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2952 if (err)
2953 return err;
bba95fef
JB		 2954
2955 if (!dev->ops->dump_station) {
eec60b03 2956 err = -EOPNOTSUPP;
bba95fef
JB		 2957 goto out_err;
2958 }
2959
bba95fef 2960 while (1) {
f612cedf 2961 memset(&sinfo, 0, sizeof(sinfo));
e35e4d28
HG		 2962 err = rdev_dump_station(dev, netdev, sta_idx,
2963 mac_addr, &sinfo);
bba95fef
JB		 2964 if (err == -ENOENT)
2965 break;
2966 if (err)
3b85875a 2967 goto out_err;
bba95fef
JB		 2968
2969 if (nl80211_send_station(skb,
15e47304 2970 NETLINK_CB(cb->skb).portid,
bba95fef 2971 cb->nlh->nlmsg_seq, NLM_F_MULTI,
66266b3a 2972 dev, netdev, mac_addr,
bba95fef
JB		 2973 &sinfo) < 0)
2974 goto out;
2975
2976 sta_idx++;
2977 }
2978
2979
2980 out:
2981 cb->args[1] = sta_idx;
2982 err = skb->len;
bba95fef 2983 out_err:
67748893 2984 nl80211_finish_netdev_dump(dev);
bba95fef
JB		 2985
2986 return err;
2ec600d6 2987}
fd5b74dc 2988
5727ef1b
JB		 2989static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
2990{
4c476991
JB		 2991 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2992 struct net_device *dev = info->user_ptr[1];
2ec600d6 2993 struct station_info sinfo;
fd5b74dc
JB		 2994 struct sk_buff *msg;
2995 u8 *mac_addr = NULL;
4c476991 2996 int err;
fd5b74dc 2997
2ec600d6 2998 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 2999
3000 if (!info->attrs[NL80211_ATTR_MAC])
3001 return -EINVAL;
3002
3003 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3004
4c476991
JB		 3005 if (!rdev->ops->get_station)
3006 return -EOPNOTSUPP;
3b85875a 3007
e35e4d28 3008 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 3009 if (err)
4c476991 3010 return err;
2ec600d6 3011
fd2120ca 3012 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc 3013 if (!msg)
4c476991 3014 return -ENOMEM;
fd5b74dc 3015
15e47304 3016 if (nl80211_send_station(msg, info->snd_portid, info->snd_seq, 0,
66266b3a 3017 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991
JB		 3018 nlmsg_free(msg);
3019 return -ENOBUFS;
3020 }
3b85875a 3021
4c476991 3022 return genlmsg_reply(msg, info);
5727ef1b
JB		 3023}
3024
3025/*
c258d2de 3026 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 3027 */
80b99899
JB		 3028static struct net_device *get_vlan(struct genl_info *info,
3029 struct cfg80211_registered_device *rdev)
5727ef1b 3030{
463d0183 3031 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 3032 struct net_device *v;
3033 int ret;
3034
3035 if (!vlanattr)
3036 return NULL;
3037
3038 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
3039 if (!v)
3040 return ERR_PTR(-ENODEV);
3041
3042 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
3043 ret = -EINVAL;
3044 goto error;
5727ef1b 3045 }
80b99899
JB		 3046
3047 if (!netif_running(v)) {
3048 ret = -ENETDOWN;
3049 goto error;
3050 }
3051
3052 return v;
3053 error:
3054 dev_put(v);
3055 return ERR_PTR(ret);
5727ef1b
JB		 3056}
3057
3058static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
3059{
4c476991 3060 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 3061 int err;
4c476991 3062 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3063 struct station_parameters params;
3064 u8 *mac_addr = NULL;
3065
3066 memset(&params, 0, sizeof(params));
3067
3068 params.listen_interval = -1;
57cf8043 3069 params.plink_state = -1;
5727ef1b
JB		 3070
3071 if (info->attrs[NL80211_ATTR_STA_AID])
3072 return -EINVAL;
3073
3074 if (!info->attrs[NL80211_ATTR_MAC])
3075 return -EINVAL;
3076
3077 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3078
3079 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
3080 params.supported_rates =
3081 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3082 params.supported_rates_len =
3083 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3084 }
3085
3086 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3087 params.listen_interval =
3088 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
3089
36aedc90
JM		 3090 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3091 params.ht_capa =
3092 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
3093
bdd90d5e
JB		 3094 if (!rdev->ops->change_station)
3095 return -EOPNOTSUPP;
3096
bdd3ae3d 3097 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 3098 return -EINVAL;
3099
2ec600d6
LCC		 3100 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
3101 params.plink_action =
3102 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3103
9c3990aa
JC		 3104 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE])
3105 params.plink_state =
3106 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
3107
a97f4424
JB		 3108 switch (dev->ieee80211_ptr->iftype) {
3109 case NL80211_IFTYPE_AP:
3110 case NL80211_IFTYPE_AP_VLAN:
074ac8df 3111 case NL80211_IFTYPE_P2P_GO:
a97f4424
JB		 3112 /* disallow mesh-specific things */
3113 if (params.plink_action)
bdd90d5e
JB		 3114 return -EINVAL;
3115
3116 /* TDLS can't be set, ... */
3117 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3118 return -EINVAL;
3119 /*
3120 * ... but don't bother the driver with it. This works around
3121 * a hostapd/wpa_supplicant issue -- it always includes the
3122 * TLDS_PEER flag in the mask even for AP mode.
3123 */
3124 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3125
3126 /* accept only the listed bits */
3127 if (params.sta_flags_mask &
3128 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
3129 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
3130 BIT(NL80211_STA_FLAG_WME) |
3131 BIT(NL80211_STA_FLAG_MFP)))
3132 return -EINVAL;
3133
3134 /* must be last in here for error handling */
3135 params.vlan = get_vlan(info, rdev);
3136 if (IS_ERR(params.vlan))
3137 return PTR_ERR(params.vlan);
a97f4424 3138 break;
074ac8df 3139 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 3140 case NL80211_IFTYPE_STATION:
bdd90d5e
JB		 3141 /*
3142 * Don't allow userspace to change the TDLS_PEER flag,
3143 * but silently ignore attempts to change it since we
3144 * don't have state here to verify that it doesn't try
3145 * to change the flag.
3146 */
3147 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
267335d6
AQ		 3148 /* fall through */
3149 case NL80211_IFTYPE_ADHOC:
3150 /* disallow things sta doesn't support */
3151 if (params.plink_action)
3152 return -EINVAL;
3153 if (params.ht_capa)
3154 return -EINVAL;
3155 if (params.listen_interval >= 0)
3156 return -EINVAL;
bdd90d5e
JB		 3157 /* reject any changes other than AUTHORIZED */
3158 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
3159 return -EINVAL;
a97f4424
JB		 3160 break;
3161 case NL80211_IFTYPE_MESH_POINT:
3162 /* disallow things mesh doesn't support */
3163 if (params.vlan)
bdd90d5e 3164 return -EINVAL;
a97f4424 3165 if (params.ht_capa)
bdd90d5e 3166 return -EINVAL;
a97f4424 3167 if (params.listen_interval >= 0)
bdd90d5e
JB		 3168 return -EINVAL;
3169 /*
3170 * No special handling for TDLS here -- the userspace
3171 * mesh code doesn't have this bug.
3172 */
b39c48fa
JC		 3173 if (params.sta_flags_mask &
3174 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
8429828e 3175 BIT(NL80211_STA_FLAG_MFP) |
b39c48fa 3176 BIT(NL80211_STA_FLAG_AUTHORIZED)))
bdd90d5e 3177 return -EINVAL;
a97f4424
JB		 3178 break;
3179 default:
bdd90d5e 3180 return -EOPNOTSUPP;
034d655e
JB		 3181 }
3182
bdd90d5e 3183 /* be aware of params.vlan when changing code here */
5727ef1b 3184
e35e4d28 3185 err = rdev_change_station(rdev, dev, mac_addr, &params);
5727ef1b 3186
5727ef1b
JB		 3187 if (params.vlan)
3188 dev_put(params.vlan);
3b85875a 3189
5727ef1b
JB		 3190 return err;
3191}
3192
c75786c9
EP		 3193static struct nla_policy
3194nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] __read_mostly = {
3195 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
3196 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
3197};
3198
5727ef1b
JB		 3199static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
3200{
4c476991 3201 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 3202 int err;
4c476991 3203 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3204 struct station_parameters params;
3205 u8 *mac_addr = NULL;
3206
3207 memset(&params, 0, sizeof(params));
3208
3209 if (!info->attrs[NL80211_ATTR_MAC])
3210 return -EINVAL;
3211
5727ef1b
JB		 3212 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3213 return -EINVAL;
3214
3215 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
3216 return -EINVAL;
3217
0e956c13
TLSC		 3218 if (!info->attrs[NL80211_ATTR_STA_AID])
3219 return -EINVAL;
3220
5727ef1b
JB		 3221 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3222 params.supported_rates =
3223 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3224 params.supported_rates_len =
3225 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3226 params.listen_interval =
3227 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 3228
0e956c13
TLSC		 3229 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
3230 if (!params.aid || params.aid > IEEE80211_MAX_AID)
3231 return -EINVAL;
51b50fbe 3232
36aedc90
JM		 3233 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3234 params.ht_capa =
3235 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 3236
f461be3e
MP		 3237 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
3238 params.vht_capa =
3239 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
3240
96b78dff
JC		 3241 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
3242 params.plink_action =
3243 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3244
bdd90d5e
JB		 3245 if (!rdev->ops->add_station)
3246 return -EOPNOTSUPP;
3247
bdd3ae3d 3248 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 3249 return -EINVAL;
3250
bdd90d5e
JB		 3251 switch (dev->ieee80211_ptr->iftype) {
3252 case NL80211_IFTYPE_AP:
3253 case NL80211_IFTYPE_AP_VLAN:
3254 case NL80211_IFTYPE_P2P_GO:
3255 /* parse WME attributes if sta is WME capable */
3256 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3257 (params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)) &&
3258 info->attrs[NL80211_ATTR_STA_WME]) {
3259 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
3260 struct nlattr *nla;
3261
3262 nla = info->attrs[NL80211_ATTR_STA_WME];
3263 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
3264 nl80211_sta_wme_policy);
3265 if (err)
3266 return err;
3267
3268 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
3269 params.uapsd_queues =
3270 nla_get_u8(tb[NL80211_STA_WME_UAPSD_QUEUES]);
3271 if (params.uapsd_queues &
3272 ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
3273 return -EINVAL;
c75786c9 3274
bdd90d5e
JB		 3275 if (tb[NL80211_STA_WME_MAX_SP])
3276 params.max_sp =
3277 nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
c75786c9 3278
bdd90d5e
JB		 3279 if (params.max_sp &
3280 ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
3281 return -EINVAL;
4319e193 3282
bdd90d5e
JB		 3283 params.sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
3284 }
3285 /* TDLS peers cannot be added */
3286 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
4319e193 3287 return -EINVAL;
bdd90d5e
JB		 3288 /* but don't bother the driver with it */
3289 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 3290
bdd90d5e
JB		 3291 /* must be last in here for error handling */
3292 params.vlan = get_vlan(info, rdev);
3293 if (IS_ERR(params.vlan))
3294 return PTR_ERR(params.vlan);
3295 break;
3296 case NL80211_IFTYPE_MESH_POINT:
3297 /* TDLS peers cannot be added */
3298 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3299 return -EINVAL;
3300 break;
3301 case NL80211_IFTYPE_STATION:
3302 /* Only TDLS peers can be added */
3303 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
3304 return -EINVAL;
3305 /* Can only add if TDLS ... */
3306 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
3307 return -EOPNOTSUPP;
3308 /* ... with external setup is supported */
3309 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
3310 return -EOPNOTSUPP;
3311 break;
3312 default:
3313 return -EOPNOTSUPP;
c75786c9
EP		 3314 }
3315
bdd90d5e 3316 /* be aware of params.vlan when changing code here */
5727ef1b 3317
e35e4d28 3318 err = rdev_add_station(rdev, dev, mac_addr, &params);
5727ef1b 3319
5727ef1b
JB		 3320 if (params.vlan)
3321 dev_put(params.vlan);
5727ef1b
JB		 3322 return err;
3323}
3324
3325static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
3326{
4c476991
JB		 3327 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3328 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3329 u8 *mac_addr = NULL;
3330
3331 if (info->attrs[NL80211_ATTR_MAC])
3332 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3333
e80cf853 3334 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 3335 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 3336 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 3337 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3338 return -EINVAL;
5727ef1b 3339
4c476991
JB		 3340 if (!rdev->ops->del_station)
3341 return -EOPNOTSUPP;
3b85875a 3342
e35e4d28 3343 return rdev_del_station(rdev, dev, mac_addr);
5727ef1b
JB		 3344}
3345
15e47304 3346static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 3347 int flags, struct net_device *dev,
3348 u8 *dst, u8 *next_hop,
3349 struct mpath_info *pinfo)
3350{
3351 void *hdr;
3352 struct nlattr *pinfoattr;
3353
15e47304 3354 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_STATION);
2ec600d6
LCC		 3355 if (!hdr)
3356 return -1;
3357
9360ffd1
DM		 3358 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3359 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
3360 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
3361 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
3362 goto nla_put_failure;
f5ea9120 3363
2ec600d6
LCC		 3364 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
3365 if (!pinfoattr)
3366 goto nla_put_failure;
9360ffd1
DM		 3367 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
3368 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
3369 pinfo->frame_qlen))
3370 goto nla_put_failure;
3371 if (((pinfo->filled & MPATH_INFO_SN) &&
3372 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
3373 ((pinfo->filled & MPATH_INFO_METRIC) &&
3374 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
3375 pinfo->metric)) ||
3376 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
3377 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
3378 pinfo->exptime)) ||
3379 ((pinfo->filled & MPATH_INFO_FLAGS) &&
3380 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
3381 pinfo->flags)) ||
3382 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
3383 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
3384 pinfo->discovery_timeout)) ||
3385 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
3386 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
3387 pinfo->discovery_retries)))
3388 goto nla_put_failure;
2ec600d6
LCC		 3389
3390 nla_nest_end(msg, pinfoattr);
3391
3392 return genlmsg_end(msg, hdr);
3393
3394 nla_put_failure:
bc3ed28c
TG		 3395 genlmsg_cancel(msg, hdr);
3396 return -EMSGSIZE;
2ec600d6
LCC		 3397}
3398
3399static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 3400 struct netlink_callback *cb)
2ec600d6 3401{
2ec600d6
LCC		 3402 struct mpath_info pinfo;
3403 struct cfg80211_registered_device *dev;
bba95fef 3404 struct net_device *netdev;
2ec600d6
LCC		 3405 u8 dst[ETH_ALEN];
3406 u8 next_hop[ETH_ALEN];
bba95fef 3407 int path_idx = cb->args[1];
2ec600d6 3408 int err;
2ec600d6 3409
67748893
JB		 3410 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
3411 if (err)
3412 return err;
bba95fef
JB		 3413
3414 if (!dev->ops->dump_mpath) {
eec60b03 3415 err = -EOPNOTSUPP;
bba95fef
JB		 3416 goto out_err;
3417 }
3418
eec60b03
JM		 3419 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
3420 err = -EOPNOTSUPP;
0448b5fc 3421 goto out_err;
eec60b03
JM		 3422 }
3423
bba95fef 3424 while (1) {
e35e4d28
HG		 3425 err = rdev_dump_mpath(dev, netdev, path_idx, dst, next_hop,
3426 &pinfo);
bba95fef 3427 if (err == -ENOENT)
2ec600d6 3428 break;
bba95fef 3429 if (err)
3b85875a 3430 goto out_err;
2ec600d6 3431
15e47304 3432 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef
JB		 3433 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3434 netdev, dst, next_hop,
3435 &pinfo) < 0)
3436 goto out;
2ec600d6 3437
bba95fef 3438 path_idx++;
2ec600d6 3439 }
2ec600d6 3440
2ec600d6 3441
bba95fef
JB		 3442 out:
3443 cb->args[1] = path_idx;
3444 err = skb->len;
bba95fef 3445 out_err:
67748893 3446 nl80211_finish_netdev_dump(dev);
bba95fef 3447 return err;
2ec600d6
LCC		 3448}
3449
3450static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
3451{
4c476991 3452 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3453 int err;
4c476991 3454 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3455 struct mpath_info pinfo;
3456 struct sk_buff *msg;
3457 u8 *dst = NULL;
3458 u8 next_hop[ETH_ALEN];
3459
3460 memset(&pinfo, 0, sizeof(pinfo));
3461
3462 if (!info->attrs[NL80211_ATTR_MAC])
3463 return -EINVAL;
3464
3465 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3466
4c476991
JB		 3467 if (!rdev->ops->get_mpath)
3468 return -EOPNOTSUPP;
2ec600d6 3469
4c476991
JB		 3470 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3471 return -EOPNOTSUPP;
eec60b03 3472
e35e4d28 3473 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 3474 if (err)
4c476991 3475 return err;
2ec600d6 3476
fd2120ca 3477 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 3478 if (!msg)
4c476991 3479 return -ENOMEM;
2ec600d6 3480
15e47304 3481 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 3482 dev, dst, next_hop, &pinfo) < 0) {
3483 nlmsg_free(msg);
3484 return -ENOBUFS;
3485 }
3b85875a 3486
4c476991 3487 return genlmsg_reply(msg, info);
2ec600d6
LCC		 3488}
3489
3490static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
3491{
4c476991
JB		 3492 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3493 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3494 u8 *dst = NULL;
3495 u8 *next_hop = NULL;
3496
3497 if (!info->attrs[NL80211_ATTR_MAC])
3498 return -EINVAL;
3499
3500 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3501 return -EINVAL;
3502
3503 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3504 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3505
4c476991
JB		 3506 if (!rdev->ops->change_mpath)
3507 return -EOPNOTSUPP;
35a8efe1 3508
4c476991
JB		 3509 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3510 return -EOPNOTSUPP;
2ec600d6 3511
e35e4d28 3512 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 3513}
4c476991 3514
2ec600d6
LCC		 3515static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
3516{
4c476991
JB		 3517 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3518 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3519 u8 *dst = NULL;
3520 u8 *next_hop = NULL;
3521
3522 if (!info->attrs[NL80211_ATTR_MAC])
3523 return -EINVAL;
3524
3525 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3526 return -EINVAL;
3527
3528 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3529 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3530
4c476991
JB		 3531 if (!rdev->ops->add_mpath)
3532 return -EOPNOTSUPP;
35a8efe1 3533
4c476991
JB		 3534 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3535 return -EOPNOTSUPP;
2ec600d6 3536
e35e4d28 3537 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 3538}
3539
3540static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
3541{
4c476991
JB		 3542 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3543 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3544 u8 *dst = NULL;
3545
3546 if (info->attrs[NL80211_ATTR_MAC])
3547 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3548
4c476991
JB		 3549 if (!rdev->ops->del_mpath)
3550 return -EOPNOTSUPP;
3b85875a 3551
e35e4d28 3552 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 3553}
3554
9f1ba906
JM		 3555static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
3556{
4c476991
JB		 3557 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3558 struct net_device *dev = info->user_ptr[1];
9f1ba906
JM		 3559 struct bss_parameters params;
3560
3561 memset(&params, 0, sizeof(params));
3562 /* default to not changing parameters */
3563 params.use_cts_prot = -1;
3564 params.use_short_preamble = -1;
3565 params.use_short_slot_time = -1;
fd8aaaf3 3566 params.ap_isolate = -1;
50b12f59 3567 params.ht_opmode = -1;
9f1ba906
JM		 3568
3569 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
3570 params.use_cts_prot =
3571 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
3572 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
3573 params.use_short_preamble =
3574 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
3575 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
3576 params.use_short_slot_time =
3577 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 3578 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
3579 params.basic_rates =
3580 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
3581 params.basic_rates_len =
3582 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
3583 }
fd8aaaf3
FF		 3584 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
3585 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 3586 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
3587 params.ht_opmode =
3588 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 3589
4c476991
JB		 3590 if (!rdev->ops->change_bss)
3591 return -EOPNOTSUPP;
9f1ba906 3592
074ac8df 3593 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 3594 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3595 return -EOPNOTSUPP;
3b85875a 3596
e35e4d28 3597 return rdev_change_bss(rdev, dev, &params);
9f1ba906
JM		 3598}
3599
b54452b0 3600static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
b2e1b302
LR		 3601 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
3602 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
3603 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
3604 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
3605 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
3606 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
3607};
3608
3609static int parse_reg_rule(struct nlattr *tb[],
3610 struct ieee80211_reg_rule *reg_rule)
3611{
3612 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
3613 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
3614
3615 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
3616 return -EINVAL;
3617 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
3618 return -EINVAL;
3619 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
3620 return -EINVAL;
3621 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
3622 return -EINVAL;
3623 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
3624 return -EINVAL;
3625
3626 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
3627
3628 freq_range->start_freq_khz =
3629 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
3630 freq_range->end_freq_khz =
3631 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
3632 freq_range->max_bandwidth_khz =
3633 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
3634
3635 power_rule->max_eirp =
3636 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
3637
3638 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
3639 power_rule->max_antenna_gain =
3640 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
3641
3642 return 0;
3643}
3644
3645static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
3646{
3647 int r;
3648 char *data = NULL;
57b5ce07 3649 enum nl80211_user_reg_hint_type user_reg_hint_type;
b2e1b302 3650
80778f18
LR		 3651 /*
3652 * You should only get this when cfg80211 hasn't yet initialized
3653 * completely when built-in to the kernel right between the time
3654 * window between nl80211_init() and regulatory_init(), if that is
3655 * even possible.
3656 */
3657 mutex_lock(&cfg80211_mutex);
3658 if (unlikely(!cfg80211_regdomain)) {
fe33eb39
LR		 3659 mutex_unlock(&cfg80211_mutex);
3660 return -EINPROGRESS;
80778f18 3661 }
fe33eb39 3662 mutex_unlock(&cfg80211_mutex);
80778f18 3663
fe33eb39
LR		 3664 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3665 return -EINVAL;
b2e1b302
LR		 3666
3667 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3668
57b5ce07
LR		 3669 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
3670 user_reg_hint_type =
3671 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
3672 else
3673 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
3674
3675 switch (user_reg_hint_type) {
3676 case NL80211_USER_REG_HINT_USER:
3677 case NL80211_USER_REG_HINT_CELL_BASE:
3678 break;
3679 default:
3680 return -EINVAL;
3681 }
3682
3683 r = regulatory_hint_user(data, user_reg_hint_type);
fe33eb39 3684
b2e1b302
LR		 3685 return r;
3686}
3687
24bdd9f4 3688static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 3689 struct genl_info *info)
93da9cc1 3690{
4c476991 3691 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 3692 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 3693 struct wireless_dev *wdev = dev->ieee80211_ptr;
3694 struct mesh_config cur_params;
3695 int err = 0;
93da9cc1 3696 void *hdr;
3697 struct nlattr *pinfoattr;
3698 struct sk_buff *msg;
3699
29cbe68c
JB		 3700 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3701 return -EOPNOTSUPP;
3702
24bdd9f4 3703 if (!rdev->ops->get_mesh_config)
4c476991 3704 return -EOPNOTSUPP;
f3f92586 3705
29cbe68c
JB		 3706 wdev_lock(wdev);
3707 /* If not connected, get default parameters */
3708 if (!wdev->mesh_id_len)
3709 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
3710 else
e35e4d28 3711 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 3712 wdev_unlock(wdev);
3713
93da9cc1 3714 if (err)
4c476991 3715 return err;
93da9cc1 3716
3717 /* Draw up a netlink message to send back */
fd2120ca 3718 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 3719 if (!msg)
3720 return -ENOMEM;
15e47304 3721 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 3722 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 3723 if (!hdr)
efe1cf0c 3724 goto out;
24bdd9f4 3725 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 3726 if (!pinfoattr)
3727 goto nla_put_failure;
9360ffd1
DM		 3728 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3729 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
3730 cur_params.dot11MeshRetryTimeout) ||
3731 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3732 cur_params.dot11MeshConfirmTimeout) ||
3733 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
3734 cur_params.dot11MeshHoldingTimeout) ||
3735 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
3736 cur_params.dot11MeshMaxPeerLinks) ||
3737 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
3738 cur_params.dot11MeshMaxRetries) ||
3739 nla_put_u8(msg, NL80211_MESHCONF_TTL,
3740 cur_params.dot11MeshTTL) ||
3741 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
3742 cur_params.element_ttl) ||
3743 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3744 cur_params.auto_open_plinks) ||
7eab0f64
JL		 3745 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
3746 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 3747 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3748 cur_params.dot11MeshHWMPmaxPREQretries) ||
3749 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
3750 cur_params.path_refresh_time) ||
3751 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3752 cur_params.min_discovery_timeout) ||
3753 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3754 cur_params.dot11MeshHWMPactivePathTimeout) ||
3755 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3756 cur_params.dot11MeshHWMPpreqMinInterval) ||
3757 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
3758 cur_params.dot11MeshHWMPperrMinInterval) ||
3759 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3760 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
3761 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
3762 cur_params.dot11MeshHWMPRootMode) ||
3763 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3764 cur_params.dot11MeshHWMPRannInterval) ||
3765 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3766 cur_params.dot11MeshGateAnnouncementProtocol) ||
3767 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
3768 cur_params.dot11MeshForwarding) ||
3769 nla_put_u32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 3770 cur_params.rssi_threshold) ||
3771 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 3772 cur_params.ht_opmode) ||
3773 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
3774 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
3775 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 3776 cur_params.dot11MeshHWMProotInterval) ||
3777 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3778 cur_params.dot11MeshHWMPconfirmationInterval))
9360ffd1 3779 goto nla_put_failure;
93da9cc1 3780 nla_nest_end(msg, pinfoattr);
3781 genlmsg_end(msg, hdr);
4c476991 3782 return genlmsg_reply(msg, info);
93da9cc1 3783
3b85875a 3784 nla_put_failure:
93da9cc1 3785 genlmsg_cancel(msg, hdr);
efe1cf0c 3786 out:
d080e275 3787 nlmsg_free(msg);
4c476991 3788 return -ENOBUFS;
93da9cc1 3789}
3790
b54452b0 3791static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
93da9cc1 3792 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
3793 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
3794 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
3795 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
3796 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
3797 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
45904f21 3798 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
93da9cc1 3799 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
d299a1f2 3800 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] = { .type = NLA_U32 },
93da9cc1 3801 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
3802 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
3803 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
3804 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
3805 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
dca7e943 3806 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] = { .type = NLA_U16 },
93da9cc1 3807 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
699403db 3808 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
0507e159 3809 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
16dd7267 3810 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
94f90656 3811 [NL80211_MESHCONF_FORWARDING] = { .type = NLA_U8 },
a4f606ea
CYY		 3812 [NL80211_MESHCONF_RSSI_THRESHOLD] = { .type = NLA_U32 },
3813 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6
CYY		 3814 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
3815 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] = { .type = NLA_U16 },
728b19e5 3816 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] = { .type = NLA_U16 },
93da9cc1 3817};
3818
c80d545d
JC		 3819static const struct nla_policy
3820 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 3821 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 3822 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
3823 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 3824 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
581a8b0f 3825 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
a4f606ea 3826 .len = IEEE80211_MAX_DATA_LEN },
b130e5ce 3827 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 3828};
3829
24bdd9f4 3830static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 3831 struct mesh_config *cfg,
3832 u32 *mask_out)
93da9cc1 3833{
93da9cc1 3834 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 3835 u32 mask = 0;
93da9cc1 3836
bd90fdcc
JB		 3837#define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
3838do {\
3839 if (table[attr_num]) {\
3840 cfg->param = nla_fn(table[attr_num]); \
3841 mask |= (1 << (attr_num - 1)); \
3842 } \
3843} while (0);\
3844
3845
24bdd9f4 3846 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 3847 return -EINVAL;
3848 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
24bdd9f4 3849 info->attrs[NL80211_ATTR_MESH_CONFIG],
bd90fdcc 3850 nl80211_meshconf_params_policy))
93da9cc1 3851 return -EINVAL;
3852
93da9cc1 3853 /* This makes sure that there aren't more than 32 mesh config
3854 * parameters (otherwise our bitfield scheme would not work.) */
3855 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
3856
3857 /* Fill in the params struct */
93da9cc1 3858 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
a4f606ea
CYY		 3859 mask, NL80211_MESHCONF_RETRY_TIMEOUT,
3860 nla_get_u16);
93da9cc1 3861 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
a4f606ea
CYY		 3862 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3863 nla_get_u16);
93da9cc1 3864 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
a4f606ea
CYY		 3865 mask, NL80211_MESHCONF_HOLDING_TIMEOUT,
3866 nla_get_u16);
93da9cc1 3867 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
a4f606ea
CYY		 3868 mask, NL80211_MESHCONF_MAX_PEER_LINKS,
3869 nla_get_u16);
93da9cc1 3870 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
a4f606ea
CYY		 3871 mask, NL80211_MESHCONF_MAX_RETRIES,
3872 nla_get_u8);
93da9cc1 3873 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
a4f606ea 3874 mask, NL80211_MESHCONF_TTL, nla_get_u8);
45904f21 3875 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl,
a4f606ea
CYY		 3876 mask, NL80211_MESHCONF_ELEMENT_TTL,
3877 nla_get_u8);
93da9cc1 3878 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
a4f606ea
CYY		 3879 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3880 nla_get_u8);
3881 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor, mask,
3882 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
3883 nla_get_u32);
93da9cc1 3884 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
a4f606ea
CYY		 3885 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3886 nla_get_u8);
93da9cc1 3887 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
a4f606ea
CYY		 3888 mask, NL80211_MESHCONF_PATH_REFRESH_TIME,
3889 nla_get_u32);
93da9cc1 3890 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
a4f606ea
CYY		 3891 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3892 nla_get_u16);
3893 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout, mask,
3894 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3895 nla_get_u32);
93da9cc1 3896 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
a4f606ea
CYY		 3897 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3898 nla_get_u16);
dca7e943 3899 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval,
a4f606ea
CYY		 3900 mask, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
3901 nla_get_u16);
93da9cc1 3902 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
a4f606ea
CYY		 3903 dot11MeshHWMPnetDiameterTraversalTime, mask,
3904 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3905 nla_get_u16);
3906 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
3907 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
3908 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
3909 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3910 nla_get_u16);
63c5723b 3911 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
a4f606ea
CYY		 3912 dot11MeshGateAnnouncementProtocol, mask,
3913 NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3914 nla_get_u8);
94f90656 3915 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding,
a4f606ea
CYY		 3916 mask, NL80211_MESHCONF_FORWARDING,
3917 nla_get_u8);
55335137 3918 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold,
a4f606ea
CYY		 3919 mask, NL80211_MESHCONF_RSSI_THRESHOLD,
3920 nla_get_u32);
70c33eaa 3921 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, ht_opmode,
a4f606ea 3922 mask, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 3923 nla_get_u16);
3924 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathToRootTimeout,
3925 mask,
3926 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
3927 nla_get_u32);
3928 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval,
3929 mask, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 3930 nla_get_u16);
3931 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3932 dot11MeshHWMPconfirmationInterval, mask,
3933 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
a4f606ea 3934 nla_get_u16);
bd90fdcc
JB		 3935 if (mask_out)
3936 *mask_out = mask;
c80d545d 3937
bd90fdcc
JB		 3938 return 0;
3939
3940#undef FILL_IN_MESH_PARAM_IF_SET
3941}
3942
c80d545d
JC		 3943static int nl80211_parse_mesh_setup(struct genl_info *info,
3944 struct mesh_setup *setup)
3945{
3946 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
3947
3948 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
3949 return -EINVAL;
3950 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
3951 info->attrs[NL80211_ATTR_MESH_SETUP],
3952 nl80211_mesh_setup_params_policy))
3953 return -EINVAL;
3954
d299a1f2
JC		 3955 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
3956 setup->sync_method =
3957 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
3958 IEEE80211_SYNC_METHOD_VENDOR :
3959 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
3960
c80d545d
JC		 3961 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
3962 setup->path_sel_proto =
3963 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
3964 IEEE80211_PATH_PROTOCOL_VENDOR :
3965 IEEE80211_PATH_PROTOCOL_HWMP;
3966
3967 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
3968 setup->path_metric =
3969 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
3970 IEEE80211_PATH_METRIC_VENDOR :
3971 IEEE80211_PATH_METRIC_AIRTIME;
3972
581a8b0f
JC		 3973
3974 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 3975 struct nlattr *ieattr =
581a8b0f 3976 tb[NL80211_MESH_SETUP_IE];
c80d545d
JC		 3977 if (!is_valid_ie_attr(ieattr))
3978 return -EINVAL;
581a8b0f
JC		 3979 setup->ie = nla_data(ieattr);
3980 setup->ie_len = nla_len(ieattr);
c80d545d 3981 }
b130e5ce
JC		 3982 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
3983 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
c80d545d
JC		 3984
3985 return 0;
3986}
3987
24bdd9f4 3988static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 3989 struct genl_info *info)
bd90fdcc
JB		 3990{
3991 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3992 struct net_device *dev = info->user_ptr[1];
29cbe68c 3993 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 3994 struct mesh_config cfg;
3995 u32 mask;
3996 int err;
3997
29cbe68c
JB		 3998 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3999 return -EOPNOTSUPP;
4000
24bdd9f4 4001 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 4002 return -EOPNOTSUPP;
4003
24bdd9f4 4004 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 4005 if (err)
4006 return err;
4007
29cbe68c
JB		 4008 wdev_lock(wdev);
4009 if (!wdev->mesh_id_len)
4010 err = -ENOLINK;
4011
4012 if (!err)
e35e4d28 4013 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 4014
4015 wdev_unlock(wdev);
4016
4017 return err;
93da9cc1 4018}
4019
f130347c
LR		 4020static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
4021{
4022 struct sk_buff *msg;
4023 void *hdr = NULL;
4024 struct nlattr *nl_reg_rules;
4025 unsigned int i;
4026 int err = -EINVAL;
4027
a1794390 4028 mutex_lock(&cfg80211_mutex);
f130347c
LR		 4029
4030 if (!cfg80211_regdomain)
4031 goto out;
4032
fd2120ca 4033 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 4034 if (!msg) {
4035 err = -ENOBUFS;
4036 goto out;
4037 }
4038
15e47304 4039 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
f130347c
LR		 4040 NL80211_CMD_GET_REG);
4041 if (!hdr)
efe1cf0c 4042 goto put_failure;
f130347c 4043
9360ffd1
DM		 4044 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
4045 cfg80211_regdomain->alpha2) ||
4046 (cfg80211_regdomain->dfs_region &&
4047 nla_put_u8(msg, NL80211_ATTR_DFS_REGION,
4048 cfg80211_regdomain->dfs_region)))
4049 goto nla_put_failure;
f130347c 4050
57b5ce07
LR		 4051 if (reg_last_request_cell_base() &&
4052 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
4053 NL80211_USER_REG_HINT_CELL_BASE))
4054 goto nla_put_failure;
4055
f130347c
LR		 4056 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
4057 if (!nl_reg_rules)
4058 goto nla_put_failure;
4059
4060 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
4061 struct nlattr *nl_reg_rule;
4062 const struct ieee80211_reg_rule *reg_rule;
4063 const struct ieee80211_freq_range *freq_range;
4064 const struct ieee80211_power_rule *power_rule;
4065
4066 reg_rule = &cfg80211_regdomain->reg_rules[i];
4067 freq_range = &reg_rule->freq_range;
4068 power_rule = &reg_rule->power_rule;
4069
4070 nl_reg_rule = nla_nest_start(msg, i);
4071 if (!nl_reg_rule)
4072 goto nla_put_failure;
4073
9360ffd1
DM		 4074 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
4075 reg_rule->flags) ||
4076 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
4077 freq_range->start_freq_khz) ||
4078 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
4079 freq_range->end_freq_khz) ||
4080 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
4081 freq_range->max_bandwidth_khz) ||
4082 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
4083 power_rule->max_antenna_gain) ||
4084 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
4085 power_rule->max_eirp))
4086 goto nla_put_failure;
f130347c
LR		 4087
4088 nla_nest_end(msg, nl_reg_rule);
4089 }
4090
4091 nla_nest_end(msg, nl_reg_rules);
4092
4093 genlmsg_end(msg, hdr);
134e6375 4094 err = genlmsg_reply(msg, info);
f130347c
LR		 4095 goto out;
4096
4097nla_put_failure:
4098 genlmsg_cancel(msg, hdr);
efe1cf0c 4099put_failure:
d080e275 4100 nlmsg_free(msg);
f130347c
LR		 4101 err = -EMSGSIZE;
4102out:
a1794390 4103 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 4104 return err;
4105}
4106
b2e1b302
LR		 4107static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
4108{
4109 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
4110 struct nlattr *nl_reg_rule;
4111 char *alpha2 = NULL;
4112 int rem_reg_rules = 0, r = 0;
4113 u32 num_rules = 0, rule_idx = 0, size_of_regd;
8b60b078 4114 u8 dfs_region = 0;
b2e1b302
LR		 4115 struct ieee80211_regdomain *rd = NULL;
4116
4117 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
4118 return -EINVAL;
4119
4120 if (!info->attrs[NL80211_ATTR_REG_RULES])
4121 return -EINVAL;
4122
4123 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
4124
8b60b078
LR		 4125 if (info->attrs[NL80211_ATTR_DFS_REGION])
4126 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
4127
b2e1b302
LR		 4128 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
4129 rem_reg_rules) {
4130 num_rules++;
4131 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 4132 return -EINVAL;
b2e1b302
LR		 4133 }
4134
61405e97
LR		 4135 mutex_lock(&cfg80211_mutex);
4136
d0e18f83
LR		 4137 if (!reg_is_valid_request(alpha2)) {
4138 r = -EINVAL;
4139 goto bad_reg;
4140 }
b2e1b302
LR		 4141
4142 size_of_regd = sizeof(struct ieee80211_regdomain) +
4143 (num_rules * sizeof(struct ieee80211_reg_rule));
4144
4145 rd = kzalloc(size_of_regd, GFP_KERNEL);
d0e18f83
LR		 4146 if (!rd) {
4147 r = -ENOMEM;
4148 goto bad_reg;
4149 }
b2e1b302
LR		 4150
4151 rd->n_reg_rules = num_rules;
4152 rd->alpha2[0] = alpha2[0];
4153 rd->alpha2[1] = alpha2[1];
4154
8b60b078
LR		 4155 /*
4156 * Disable DFS master mode if the DFS region was
4157 * not supported or known on this kernel.
4158 */
4159 if (reg_supported_dfs_region(dfs_region))
4160 rd->dfs_region = dfs_region;
4161
b2e1b302
LR		 4162 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
4163 rem_reg_rules) {
4164 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
4165 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
4166 reg_rule_policy);
4167 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
4168 if (r)
4169 goto bad_reg;
4170
4171 rule_idx++;
4172
d0e18f83
LR		 4173 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
4174 r = -EINVAL;
b2e1b302 4175 goto bad_reg;
d0e18f83 4176 }
b2e1b302
LR		 4177 }
4178
4179 BUG_ON(rule_idx != num_rules);
4180
b2e1b302 4181 r = set_regdom(rd);
61405e97 4182
a1794390 4183 mutex_unlock(&cfg80211_mutex);
d0e18f83 4184
b2e1b302
LR		 4185 return r;
4186
d2372b31 4187 bad_reg:
61405e97 4188 mutex_unlock(&cfg80211_mutex);
b2e1b302 4189 kfree(rd);
d0e18f83 4190 return r;
b2e1b302
LR		 4191}
4192
83f5e2cf
JB		 4193static int validate_scan_freqs(struct nlattr *freqs)
4194{
4195 struct nlattr *attr1, *attr2;
4196 int n_channels = 0, tmp1, tmp2;
4197
4198 nla_for_each_nested(attr1, freqs, tmp1) {
4199 n_channels++;
4200 /*
4201 * Some hardware has a limited channel list for
4202 * scanning, and it is pretty much nonsensical
4203 * to scan for a channel twice, so disallow that
4204 * and don't require drivers to check that the
4205 * channel list they get isn't longer than what
4206 * they can scan, as long as they can scan all
4207 * the channels they registered at once.
4208 */
4209 nla_for_each_nested(attr2, freqs, tmp2)
4210 if (attr1 != attr2 &&
4211 nla_get_u32(attr1) == nla_get_u32(attr2))
4212 return 0;
4213 }
4214
4215 return n_channels;
4216}
4217
2a519311
JB		 4218static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
4219{
4c476991 4220 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 4221 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 4222 struct cfg80211_scan_request *request;
2a519311
JB		 4223 struct nlattr *attr;
4224 struct wiphy *wiphy;
83f5e2cf 4225 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 4226 size_t ie_len;
2a519311 4227
f4a11bb0
JB		 4228 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4229 return -EINVAL;
4230
79c97e97 4231 wiphy = &rdev->wiphy;
2a519311 4232
4c476991
JB		 4233 if (!rdev->ops->scan)
4234 return -EOPNOTSUPP;
2a519311 4235
4c476991
JB		 4236 if (rdev->scan_req)
4237 return -EBUSY;
2a519311
JB		 4238
4239 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 4240 n_channels = validate_scan_freqs(
4241 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4c476991
JB		 4242 if (!n_channels)
4243 return -EINVAL;
2a519311 4244 } else {
34850ab2 4245 enum ieee80211_band band;
83f5e2cf
JB		 4246 n_channels = 0;
4247
2a519311
JB		 4248 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4249 if (wiphy->bands[band])
4250 n_channels += wiphy->bands[band]->n_channels;
4251 }
4252
4253 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4254 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
4255 n_ssids++;
4256
4c476991
JB		 4257 if (n_ssids > wiphy->max_scan_ssids)
4258 return -EINVAL;
2a519311 4259
70692ad2
JM		 4260 if (info->attrs[NL80211_ATTR_IE])
4261 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4262 else
4263 ie_len = 0;
4264
4c476991
JB		 4265 if (ie_len > wiphy->max_scan_ie_len)
4266 return -EINVAL;
18a83659 4267
2a519311 4268 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 4269 + sizeof(*request->ssids) * n_ssids
4270 + sizeof(*request->channels) * n_channels
70692ad2 4271 + ie_len, GFP_KERNEL);
4c476991
JB		 4272 if (!request)
4273 return -ENOMEM;
2a519311 4274
2a519311 4275 if (n_ssids)
5ba63533 4276 request->ssids = (void *)&request->channels[n_channels];
2a519311 4277 request->n_ssids = n_ssids;
70692ad2
JM		 4278 if (ie_len) {
4279 if (request->ssids)
4280 request->ie = (void *)(request->ssids + n_ssids);
4281 else
4282 request->ie = (void *)(request->channels + n_channels);
4283 }
2a519311 4284
584991dc 4285 i = 0;
2a519311
JB		 4286 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4287 /* user specified, bail out if channel not found */
2a519311 4288 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 4289 struct ieee80211_channel *chan;
4290
4291 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
4292
4293 if (!chan) {
2a519311
JB		 4294 err = -EINVAL;
4295 goto out_free;
4296 }
584991dc
JB		 4297
4298 /* ignore disabled channels */
4299 if (chan->flags & IEEE80211_CHAN_DISABLED)
4300 continue;
4301
4302 request->channels[i] = chan;
2a519311
JB		 4303 i++;
4304 }
4305 } else {
34850ab2
JB		 4306 enum ieee80211_band band;
4307
2a519311 4308 /* all channels */
2a519311
JB		 4309 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4310 int j;
4311 if (!wiphy->bands[band])
4312 continue;
4313 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 4314 struct ieee80211_channel *chan;
4315
4316 chan = &wiphy->bands[band]->channels[j];
4317
4318 if (chan->flags & IEEE80211_CHAN_DISABLED)
4319 continue;
4320
4321 request->channels[i] = chan;
2a519311
JB		 4322 i++;
4323 }
4324 }
4325 }
4326
584991dc
JB		 4327 if (!i) {
4328 err = -EINVAL;
4329 goto out_free;
4330 }
4331
4332 request->n_channels = i;
4333
2a519311
JB		 4334 i = 0;
4335 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4336 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 4337 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 4338 err = -EINVAL;
4339 goto out_free;
4340 }
57a27e1d 4341 request->ssids[i].ssid_len = nla_len(attr);
2a519311 4342 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 4343 i++;
4344 }
4345 }
4346
70692ad2
JM		 4347 if (info->attrs[NL80211_ATTR_IE]) {
4348 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 4349 memcpy((void *)request->ie,
4350 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 4351 request->ie_len);
4352 }
4353
34850ab2 4354 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
a401d2bb
JB		 4355 if (wiphy->bands[i])
4356 request->rates[i] =
4357 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 4358
4359 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
4360 nla_for_each_nested(attr,
4361 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
4362 tmp) {
4363 enum ieee80211_band band = nla_type(attr);
4364
84404623 4365 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
34850ab2
JB		 4366 err = -EINVAL;
4367 goto out_free;
4368 }
4369 err = ieee80211_get_ratemask(wiphy->bands[band],
4370 nla_data(attr),
4371 nla_len(attr),
4372 &request->rates[band]);
4373 if (err)
4374 goto out_free;
4375 }
4376 }
4377
46856bbf 4378 if (info->attrs[NL80211_ATTR_SCAN_FLAGS]) {
ed473771
SL		 4379 request->flags = nla_get_u32(
4380 info->attrs[NL80211_ATTR_SCAN_FLAGS]);
15d6030b
SL		 4381 if (((request->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
4382 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
4383 ((request->flags & NL80211_SCAN_FLAG_FLUSH) &&
4384 !(wiphy->features & NL80211_FEATURE_SCAN_FLUSH))) {
46856bbf
SL		 4385 err = -EOPNOTSUPP;
4386 goto out_free;
4387 }
4388 }
ed473771 4389
e9f935e3
RM		 4390 request->no_cck =
4391 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
4392
fd014284 4393 request->wdev = wdev;
79c97e97 4394 request->wiphy = &rdev->wiphy;
15d6030b 4395 request->scan_start = jiffies;
2a519311 4396
79c97e97 4397 rdev->scan_req = request;
e35e4d28 4398 err = rdev_scan(rdev, request);
2a519311 4399
463d0183 4400 if (!err) {
fd014284
JB		 4401 nl80211_send_scan_start(rdev, wdev);
4402 if (wdev->netdev)
4403 dev_hold(wdev->netdev);
4c476991 4404 } else {
2a519311 4405 out_free:
79c97e97 4406 rdev->scan_req = NULL;
2a519311
JB		 4407 kfree(request);
4408 }
3b85875a 4409
2a519311
JB		 4410 return err;
4411}
4412
807f8a8c
LC		 4413static int nl80211_start_sched_scan(struct sk_buff *skb,
4414 struct genl_info *info)
4415{
4416 struct cfg80211_sched_scan_request *request;
4417 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4418 struct net_device *dev = info->user_ptr[1];
807f8a8c
LC		 4419 struct nlattr *attr;
4420 struct wiphy *wiphy;
a1f1c21c 4421 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i;
bbe6ad6d 4422 u32 interval;
807f8a8c
LC		 4423 enum ieee80211_band band;
4424 size_t ie_len;
a1f1c21c 4425 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
807f8a8c
LC		 4426
4427 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4428 !rdev->ops->sched_scan_start)
4429 return -EOPNOTSUPP;
4430
4431 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4432 return -EINVAL;
4433
bbe6ad6d
LC		 4434 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
4435 return -EINVAL;
4436
4437 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
4438 if (interval == 0)
4439 return -EINVAL;
4440
807f8a8c
LC		 4441 wiphy = &rdev->wiphy;
4442
4443 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4444 n_channels = validate_scan_freqs(
4445 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4446 if (!n_channels)
4447 return -EINVAL;
4448 } else {
4449 n_channels = 0;
4450
4451 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4452 if (wiphy->bands[band])
4453 n_channels += wiphy->bands[band]->n_channels;
4454 }
4455
4456 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4457 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4458 tmp)
4459 n_ssids++;
4460
93b6aa69 4461 if (n_ssids > wiphy->max_sched_scan_ssids)
807f8a8c
LC		 4462 return -EINVAL;
4463
a1f1c21c
LC		 4464 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH])
4465 nla_for_each_nested(attr,
4466 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4467 tmp)
4468 n_match_sets++;
4469
4470 if (n_match_sets > wiphy->max_match_sets)
4471 return -EINVAL;
4472
807f8a8c
LC		 4473 if (info->attrs[NL80211_ATTR_IE])
4474 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4475 else
4476 ie_len = 0;
4477
5a865bad 4478 if (ie_len > wiphy->max_sched_scan_ie_len)
807f8a8c
LC		 4479 return -EINVAL;
4480
c10841ca
LC		 4481 mutex_lock(&rdev->sched_scan_mtx);
4482
4483 if (rdev->sched_scan_req) {
4484 err = -EINPROGRESS;
4485 goto out;
4486 }
4487
807f8a8c 4488 request = kzalloc(sizeof(*request)
a2cd43c5 4489 + sizeof(*request->ssids) * n_ssids
a1f1c21c 4490 + sizeof(*request->match_sets) * n_match_sets
a2cd43c5 4491 + sizeof(*request->channels) * n_channels
807f8a8c 4492 + ie_len, GFP_KERNEL);
c10841ca
LC		 4493 if (!request) {
4494 err = -ENOMEM;
4495 goto out;
4496 }
807f8a8c
LC		 4497
4498 if (n_ssids)
4499 request->ssids = (void *)&request->channels[n_channels];
4500 request->n_ssids = n_ssids;
4501 if (ie_len) {
4502 if (request->ssids)
4503 request->ie = (void *)(request->ssids + n_ssids);
4504 else
4505 request->ie = (void *)(request->channels + n_channels);
4506 }
4507
a1f1c21c
LC		 4508 if (n_match_sets) {
4509 if (request->ie)
4510 request->match_sets = (void *)(request->ie + ie_len);
4511 else if (request->ssids)
4512 request->match_sets =
4513 (void *)(request->ssids + n_ssids);
4514 else
4515 request->match_sets =
4516 (void *)(request->channels + n_channels);
4517 }
4518 request->n_match_sets = n_match_sets;
4519
807f8a8c
LC		 4520 i = 0;
4521 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4522 /* user specified, bail out if channel not found */
4523 nla_for_each_nested(attr,
4524 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
4525 tmp) {
4526 struct ieee80211_channel *chan;
4527
4528 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
4529
4530 if (!chan) {
4531 err = -EINVAL;
4532 goto out_free;
4533 }
4534
4535 /* ignore disabled channels */
4536 if (chan->flags & IEEE80211_CHAN_DISABLED)
4537 continue;
4538
4539 request->channels[i] = chan;
4540 i++;
4541 }
4542 } else {
4543 /* all channels */
4544 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4545 int j;
4546 if (!wiphy->bands[band])
4547 continue;
4548 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
4549 struct ieee80211_channel *chan;
4550
4551 chan = &wiphy->bands[band]->channels[j];
4552
4553 if (chan->flags & IEEE80211_CHAN_DISABLED)
4554 continue;
4555
4556 request->channels[i] = chan;
4557 i++;
4558 }
4559 }
4560 }
4561
4562 if (!i) {
4563 err = -EINVAL;
4564 goto out_free;
4565 }
4566
4567 request->n_channels = i;
4568
4569 i = 0;
4570 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4571 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4572 tmp) {
57a27e1d 4573 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 4574 err = -EINVAL;
4575 goto out_free;
4576 }
57a27e1d 4577 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 4578 memcpy(request->ssids[i].ssid, nla_data(attr),
4579 nla_len(attr));
807f8a8c
LC		 4580 i++;
4581 }
4582 }
4583
a1f1c21c
LC		 4584 i = 0;
4585 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
4586 nla_for_each_nested(attr,
4587 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4588 tmp) {
88e920b4 4589 struct nlattr *ssid, *rssi;
a1f1c21c
LC		 4590
4591 nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
4592 nla_data(attr), nla_len(attr),
4593 nl80211_match_policy);
4a4ab0d7 4594 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
a1f1c21c
LC		 4595 if (ssid) {
4596 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
4597 err = -EINVAL;
4598 goto out_free;
4599 }
4600 memcpy(request->match_sets[i].ssid.ssid,
4601 nla_data(ssid), nla_len(ssid));
4602 request->match_sets[i].ssid.ssid_len =
4603 nla_len(ssid);
4604 }
88e920b4
TP		 4605 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
4606 if (rssi)
4607 request->rssi_thold = nla_get_u32(rssi);
4608 else
4609 request->rssi_thold =
4610 NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 4611 i++;
4612 }
4613 }
4614
807f8a8c
LC		 4615 if (info->attrs[NL80211_ATTR_IE]) {
4616 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4617 memcpy((void *)request->ie,
4618 nla_data(info->attrs[NL80211_ATTR_IE]),
4619 request->ie_len);
4620 }
4621
46856bbf 4622 if (info->attrs[NL80211_ATTR_SCAN_FLAGS]) {
ed473771
SL		 4623 request->flags = nla_get_u32(
4624 info->attrs[NL80211_ATTR_SCAN_FLAGS]);
15d6030b
SL		 4625 if (((request->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
4626 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
4627 ((request->flags & NL80211_SCAN_FLAG_FLUSH) &&
4628 !(wiphy->features & NL80211_FEATURE_SCAN_FLUSH))) {
46856bbf
SL		 4629 err = -EOPNOTSUPP;
4630 goto out_free;
4631 }
4632 }
ed473771 4633
807f8a8c
LC		 4634 request->dev = dev;
4635 request->wiphy = &rdev->wiphy;
bbe6ad6d 4636 request->interval = interval;
15d6030b 4637 request->scan_start = jiffies;
807f8a8c 4638
e35e4d28 4639 err = rdev_sched_scan_start(rdev, dev, request);
807f8a8c
LC		 4640 if (!err) {
4641 rdev->sched_scan_req = request;
4642 nl80211_send_sched_scan(rdev, dev,
4643 NL80211_CMD_START_SCHED_SCAN);
4644 goto out;
4645 }
4646
4647out_free:
4648 kfree(request);
4649out:
c10841ca 4650 mutex_unlock(&rdev->sched_scan_mtx);
807f8a8c
LC		 4651 return err;
4652}
4653
4654static int nl80211_stop_sched_scan(struct sk_buff *skb,
4655 struct genl_info *info)
4656{
4657 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c10841ca 4658 int err;
807f8a8c
LC		 4659
4660 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4661 !rdev->ops->sched_scan_stop)
4662 return -EOPNOTSUPP;
4663
c10841ca
LC		 4664 mutex_lock(&rdev->sched_scan_mtx);
4665 err = __cfg80211_stop_sched_scan(rdev, false);
4666 mutex_unlock(&rdev->sched_scan_mtx);
4667
4668 return err;
807f8a8c
LC		 4669}
4670
9720bb3a
JB		 4671static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
4672 u32 seq, int flags,
2a519311 4673 struct cfg80211_registered_device *rdev,
48ab905d
JB		 4674 struct wireless_dev *wdev,
4675 struct cfg80211_internal_bss *intbss)
2a519311 4676{
48ab905d 4677 struct cfg80211_bss *res = &intbss->pub;
2a519311
JB		 4678 void *hdr;
4679 struct nlattr *bss;
48ab905d
JB		 4680
4681 ASSERT_WDEV_LOCK(wdev);
2a519311 4682
15e47304 4683 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 4684 NL80211_CMD_NEW_SCAN_RESULTS);
4685 if (!hdr)
4686 return -1;
4687
9720bb3a
JB		 4688 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
4689
9360ffd1
DM		 4690 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation) ||
4691 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
4692 goto nla_put_failure;
2a519311
JB		 4693
4694 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
4695 if (!bss)
4696 goto nla_put_failure;
9360ffd1
DM		 4697 if ((!is_zero_ether_addr(res->bssid) &&
4698 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)) ||
4699 (res->information_elements && res->len_information_elements &&
4700 nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
4701 res->len_information_elements,
4702 res->information_elements)) ||
4703 (res->beacon_ies && res->len_beacon_ies &&
4704 res->beacon_ies != res->information_elements &&
4705 nla_put(msg, NL80211_BSS_BEACON_IES,
4706 res->len_beacon_ies, res->beacon_ies)))
4707 goto nla_put_failure;
4708 if (res->tsf &&
4709 nla_put_u64(msg, NL80211_BSS_TSF, res->tsf))
4710 goto nla_put_failure;
4711 if (res->beacon_interval &&
4712 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
4713 goto nla_put_failure;
4714 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
4715 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
4716 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
4717 jiffies_to_msecs(jiffies - intbss->ts)))
4718 goto nla_put_failure;
2a519311 4719
77965c97 4720 switch (rdev->wiphy.signal_type) {
2a519311 4721 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 4722 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
4723 goto nla_put_failure;
2a519311
JB		 4724 break;
4725 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 4726 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
4727 goto nla_put_failure;
2a519311
JB		 4728 break;
4729 default:
4730 break;
4731 }
4732
48ab905d 4733 switch (wdev->iftype) {
074ac8df 4734 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 4735 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 4736 if (intbss == wdev->current_bss &&
4737 nla_put_u32(msg, NL80211_BSS_STATUS,
4738 NL80211_BSS_STATUS_ASSOCIATED))
4739 goto nla_put_failure;
48ab905d
JB		 4740 break;
4741 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 4742 if (intbss == wdev->current_bss &&
4743 nla_put_u32(msg, NL80211_BSS_STATUS,
4744 NL80211_BSS_STATUS_IBSS_JOINED))
4745 goto nla_put_failure;
48ab905d
JB		 4746 break;
4747 default:
4748 break;
4749 }
4750
2a519311
JB		 4751 nla_nest_end(msg, bss);
4752
4753 return genlmsg_end(msg, hdr);
4754
4755 nla_put_failure:
4756 genlmsg_cancel(msg, hdr);
4757 return -EMSGSIZE;
4758}
4759
4760static int nl80211_dump_scan(struct sk_buff *skb,
4761 struct netlink_callback *cb)
4762{
48ab905d
JB		 4763 struct cfg80211_registered_device *rdev;
4764 struct net_device *dev;
2a519311 4765 struct cfg80211_internal_bss *scan;
48ab905d 4766 struct wireless_dev *wdev;
2a519311
JB		 4767 int start = cb->args[1], idx = 0;
4768 int err;
4769
67748893
JB		 4770 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
4771 if (err)
4772 return err;
2a519311 4773
48ab905d 4774 wdev = dev->ieee80211_ptr;
2a519311 4775
48ab905d
JB		 4776 wdev_lock(wdev);
4777 spin_lock_bh(&rdev->bss_lock);
4778 cfg80211_bss_expire(rdev);
4779
9720bb3a
JB		 4780 cb->seq = rdev->bss_generation;
4781
48ab905d 4782 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 4783 if (++idx <= start)
4784 continue;
9720bb3a 4785 if (nl80211_send_bss(skb, cb,
2a519311 4786 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 4787 rdev, wdev, scan) < 0) {
2a519311 4788 idx--;
67748893 4789 break;
2a519311
JB		 4790 }
4791 }
4792
48ab905d
JB		 4793 spin_unlock_bh(&rdev->bss_lock);
4794 wdev_unlock(wdev);
2a519311
JB		 4795
4796 cb->args[1] = idx;
67748893 4797 nl80211_finish_netdev_dump(rdev);
2a519311 4798
67748893 4799 return skb->len;
2a519311
JB		 4800}
4801
15e47304 4802static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
61fa713c
HS		 4803 int flags, struct net_device *dev,
4804 struct survey_info *survey)
4805{
4806 void *hdr;
4807 struct nlattr *infoattr;
4808
15e47304 4809 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 4810 NL80211_CMD_NEW_SURVEY_RESULTS);
4811 if (!hdr)
4812 return -ENOMEM;
4813
9360ffd1
DM		 4814 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
4815 goto nla_put_failure;
61fa713c
HS		 4816
4817 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
4818 if (!infoattr)
4819 goto nla_put_failure;
4820
9360ffd1
DM		 4821 if (nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
4822 survey->channel->center_freq))
4823 goto nla_put_failure;
4824
4825 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
4826 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
4827 goto nla_put_failure;
4828 if ((survey->filled & SURVEY_INFO_IN_USE) &&
4829 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
4830 goto nla_put_failure;
4831 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME) &&
4832 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
4833 survey->channel_time))
4834 goto nla_put_failure;
4835 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY) &&
4836 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
4837 survey->channel_time_busy))
4838 goto nla_put_failure;
4839 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY) &&
4840 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
4841 survey->channel_time_ext_busy))
4842 goto nla_put_failure;
4843 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_RX) &&
4844 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
4845 survey->channel_time_rx))
4846 goto nla_put_failure;
4847 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_TX) &&
4848 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
4849 survey->channel_time_tx))
4850 goto nla_put_failure;
61fa713c
HS		 4851
4852 nla_nest_end(msg, infoattr);
4853
4854 return genlmsg_end(msg, hdr);
4855
4856 nla_put_failure:
4857 genlmsg_cancel(msg, hdr);
4858 return -EMSGSIZE;
4859}
4860
4861static int nl80211_dump_survey(struct sk_buff *skb,
4862 struct netlink_callback *cb)
4863{
4864 struct survey_info survey;
4865 struct cfg80211_registered_device *dev;
4866 struct net_device *netdev;
61fa713c
HS		 4867 int survey_idx = cb->args[1];
4868 int res;
4869
67748893
JB		 4870 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
4871 if (res)
4872 return res;
61fa713c
HS		 4873
4874 if (!dev->ops->dump_survey) {
4875 res = -EOPNOTSUPP;
4876 goto out_err;
4877 }
4878
4879 while (1) {
180cdc79
LR		 4880 struct ieee80211_channel *chan;
4881
e35e4d28 4882 res = rdev_dump_survey(dev, netdev, survey_idx, &survey);
61fa713c
HS		 4883 if (res == -ENOENT)
4884 break;
4885 if (res)
4886 goto out_err;
4887
180cdc79
LR		 4888 /* Survey without a channel doesn't make sense */
4889 if (!survey.channel) {
4890 res = -EINVAL;
4891 goto out;
4892 }
4893
4894 chan = ieee80211_get_channel(&dev->wiphy,
4895 survey.channel->center_freq);
4896 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
4897 survey_idx++;
4898 continue;
4899 }
4900
61fa713c 4901 if (nl80211_send_survey(skb,
15e47304 4902 NETLINK_CB(cb->skb).portid,
61fa713c
HS		 4903 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4904 netdev,
4905 &survey) < 0)
4906 goto out;
4907 survey_idx++;
4908 }
4909
4910 out:
4911 cb->args[1] = survey_idx;
4912 res = skb->len;
4913 out_err:
67748893 4914 nl80211_finish_netdev_dump(dev);
61fa713c
HS		 4915 return res;
4916}
4917
b23aa676
SO		 4918static bool nl80211_valid_wpa_versions(u32 wpa_versions)
4919{
4920 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
4921 NL80211_WPA_VERSION_2));
4922}
4923
636a5d36
JM		 4924static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
4925{
4c476991
JB		 4926 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4927 struct net_device *dev = info->user_ptr[1];
19957bb3 4928 struct ieee80211_channel *chan;
e39e5b5e
JM		 4929 const u8 *bssid, *ssid, *ie = NULL, *sae_data = NULL;
4930 int err, ssid_len, ie_len = 0, sae_data_len = 0;
19957bb3 4931 enum nl80211_auth_type auth_type;
fffd0934 4932 struct key_parse key;
d5cdfacb 4933 bool local_state_change;
636a5d36 4934
f4a11bb0
JB		 4935 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4936 return -EINVAL;
4937
4938 if (!info->attrs[NL80211_ATTR_MAC])
4939 return -EINVAL;
4940
1778092e
JM		 4941 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
4942 return -EINVAL;
4943
19957bb3
JB		 4944 if (!info->attrs[NL80211_ATTR_SSID])
4945 return -EINVAL;
4946
4947 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
4948 return -EINVAL;
4949
fffd0934
JB		 4950 err = nl80211_parse_key(info, &key);
4951 if (err)
4952 return err;
4953
4954 if (key.idx >= 0) {
e31b8213
JB		 4955 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
4956 return -EINVAL;
fffd0934
JB		 4957 if (!key.p.key || !key.p.key_len)
4958 return -EINVAL;
4959 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
4960 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
4961 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
4962 key.p.key_len != WLAN_KEY_LEN_WEP104))
4963 return -EINVAL;
4964 if (key.idx > 4)
4965 return -EINVAL;
4966 } else {
4967 key.p.key_len = 0;
4968 key.p.key = NULL;
4969 }
4970
afea0b7a
JB		 4971 if (key.idx >= 0) {
4972 int i;
4973 bool ok = false;
4974 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
4975 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
4976 ok = true;
4977 break;
4978 }
4979 }
4c476991
JB		 4980 if (!ok)
4981 return -EINVAL;
afea0b7a
JB		 4982 }
4983
4c476991
JB		 4984 if (!rdev->ops->auth)
4985 return -EOPNOTSUPP;
636a5d36 4986
074ac8df 4987 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4988 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4989 return -EOPNOTSUPP;
eec60b03 4990
19957bb3 4991 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 4992 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3 4993 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4994 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4995 return -EINVAL;
636a5d36 4996
19957bb3
JB		 4997 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4998 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4999
5000 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5001 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5002 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5003 }
5004
19957bb3 5005 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 5006 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 5007 return -EINVAL;
636a5d36 5008
e39e5b5e
JM		 5009 if (auth_type == NL80211_AUTHTYPE_SAE &&
5010 !info->attrs[NL80211_ATTR_SAE_DATA])
5011 return -EINVAL;
5012
5013 if (info->attrs[NL80211_ATTR_SAE_DATA]) {
5014 if (auth_type != NL80211_AUTHTYPE_SAE)
5015 return -EINVAL;
5016 sae_data = nla_data(info->attrs[NL80211_ATTR_SAE_DATA]);
5017 sae_data_len = nla_len(info->attrs[NL80211_ATTR_SAE_DATA]);
5018 /* need to include at least Auth Transaction and Status Code */
5019 if (sae_data_len < 4)
5020 return -EINVAL;
5021 }
5022
d5cdfacb
JM		 5023 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5024
95de817b
JB		 5025 /*
5026 * Since we no longer track auth state, ignore
5027 * requests to only change local state.
5028 */
5029 if (local_state_change)
5030 return 0;
5031
4c476991
JB		 5032 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
5033 ssid, ssid_len, ie, ie_len,
e39e5b5e
JM		 5034 key.p.key, key.p.key_len, key.idx,
5035 sae_data, sae_data_len);
636a5d36
JM		 5036}
5037
c0692b8f
JB		 5038static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
5039 struct genl_info *info,
3dc27d25
JB		 5040 struct cfg80211_crypto_settings *settings,
5041 int cipher_limit)
b23aa676 5042{
c0b2bbd8
JB		 5043 memset(settings, 0, sizeof(*settings));
5044
b23aa676
SO		 5045 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
5046
c0692b8f
JB		 5047 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
5048 u16 proto;
5049 proto = nla_get_u16(
5050 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
5051 settings->control_port_ethertype = cpu_to_be16(proto);
5052 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
5053 proto != ETH_P_PAE)
5054 return -EINVAL;
5055 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
5056 settings->control_port_no_encrypt = true;
5057 } else
5058 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
5059
b23aa676
SO		 5060 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
5061 void *data;
5062 int len, i;
5063
5064 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
5065 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
5066 settings->n_ciphers_pairwise = len / sizeof(u32);
5067
5068 if (len % sizeof(u32))
5069 return -EINVAL;
5070
3dc27d25 5071 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 5072 return -EINVAL;
5073
5074 memcpy(settings->ciphers_pairwise, data, len);
5075
5076 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 5077 if (!cfg80211_supported_cipher_suite(
5078 &rdev->wiphy,
b23aa676
SO		 5079 settings->ciphers_pairwise[i]))
5080 return -EINVAL;
5081 }
5082
5083 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
5084 settings->cipher_group =
5085 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 5086 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
5087 settings->cipher_group))
b23aa676
SO		 5088 return -EINVAL;
5089 }
5090
5091 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
5092 settings->wpa_versions =
5093 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
5094 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
5095 return -EINVAL;
5096 }
5097
5098 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
5099 void *data;
6d30240e 5100 int len;
b23aa676
SO		 5101
5102 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
5103 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
5104 settings->n_akm_suites = len / sizeof(u32);
5105
5106 if (len % sizeof(u32))
5107 return -EINVAL;
5108
1b9ca027
JM		 5109 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
5110 return -EINVAL;
5111
b23aa676 5112 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 5113 }
5114
5115 return 0;
5116}
5117
636a5d36
JM		 5118static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
5119{
4c476991
JB		 5120 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5121 struct net_device *dev = info->user_ptr[1];
19957bb3 5122 struct cfg80211_crypto_settings crypto;
f444de05 5123 struct ieee80211_channel *chan;
3e5d7649 5124 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 5125 int err, ssid_len, ie_len = 0;
5126 bool use_mfp = false;
7e7c8926
BG		 5127 u32 flags = 0;
5128 struct ieee80211_ht_cap *ht_capa = NULL;
5129 struct ieee80211_ht_cap *ht_capa_mask = NULL;
636a5d36 5130
f4a11bb0
JB		 5131 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5132 return -EINVAL;
5133
5134 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 5135 !info->attrs[NL80211_ATTR_SSID] ||
5136 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 5137 return -EINVAL;
5138
4c476991
JB		 5139 if (!rdev->ops->assoc)
5140 return -EOPNOTSUPP;
636a5d36 5141
074ac8df 5142 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5143 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5144 return -EOPNOTSUPP;
eec60b03 5145
19957bb3 5146 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5147
19957bb3
JB		 5148 chan = ieee80211_get_channel(&rdev->wiphy,
5149 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 5150 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
5151 return -EINVAL;
636a5d36 5152
19957bb3
JB		 5153 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5154 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 5155
5156 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5157 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5158 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5159 }
5160
dc6382ce 5161 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 5162 enum nl80211_mfp mfp =
dc6382ce 5163 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 5164 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 5165 use_mfp = true;
4c476991
JB		 5166 else if (mfp != NL80211_MFP_NO)
5167 return -EINVAL;
dc6382ce
JM		 5168 }
5169
3e5d7649
JB		 5170 if (info->attrs[NL80211_ATTR_PREV_BSSID])
5171 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
5172
7e7c8926
BG		 5173 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5174 flags |= ASSOC_REQ_DISABLE_HT;
5175
5176 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5177 ht_capa_mask =
5178 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]);
5179
5180 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
5181 if (!ht_capa_mask)
5182 return -EINVAL;
5183 ht_capa = nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5184 }
5185
c0692b8f 5186 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
b23aa676 5187 if (!err)
3e5d7649
JB		 5188 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
5189 ssid, ssid_len, ie, ie_len, use_mfp,
7e7c8926
BG		 5190 &crypto, flags, ht_capa,
5191 ht_capa_mask);
636a5d36 5192
636a5d36
JM		 5193 return err;
5194}
5195
5196static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
5197{
4c476991
JB		 5198 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5199 struct net_device *dev = info->user_ptr[1];
19957bb3 5200 const u8 *ie = NULL, *bssid;
4c476991 5201 int ie_len = 0;
19957bb3 5202 u16 reason_code;
d5cdfacb 5203 bool local_state_change;
636a5d36 5204
f4a11bb0
JB		 5205 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5206 return -EINVAL;
5207
5208 if (!info->attrs[NL80211_ATTR_MAC])
5209 return -EINVAL;
5210
5211 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5212 return -EINVAL;
5213
4c476991
JB		 5214 if (!rdev->ops->deauth)
5215 return -EOPNOTSUPP;
636a5d36 5216
074ac8df 5217 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5218 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5219 return -EOPNOTSUPP;
eec60b03 5220
19957bb3 5221 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5222
19957bb3
JB		 5223 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5224 if (reason_code == 0) {
f4a11bb0 5225 /* Reason Code 0 is reserved */
4c476991 5226 return -EINVAL;
255e737e 5227 }
636a5d36
JM		 5228
5229 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5230 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5231 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5232 }
5233
d5cdfacb
JM		 5234 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5235
4c476991
JB		 5236 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
5237 local_state_change);
636a5d36
JM		 5238}
5239
5240static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
5241{
4c476991
JB		 5242 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5243 struct net_device *dev = info->user_ptr[1];
19957bb3 5244 const u8 *ie = NULL, *bssid;
4c476991 5245 int ie_len = 0;
19957bb3 5246 u16 reason_code;
d5cdfacb 5247 bool local_state_change;
636a5d36 5248
f4a11bb0
JB		 5249 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5250 return -EINVAL;
5251
5252 if (!info->attrs[NL80211_ATTR_MAC])
5253 return -EINVAL;
5254
5255 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5256 return -EINVAL;
5257
4c476991
JB		 5258 if (!rdev->ops->disassoc)
5259 return -EOPNOTSUPP;
636a5d36 5260
074ac8df 5261 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5262 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5263 return -EOPNOTSUPP;
eec60b03 5264
19957bb3 5265 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5266
19957bb3
JB		 5267 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5268 if (reason_code == 0) {
f4a11bb0 5269 /* Reason Code 0 is reserved */
4c476991 5270 return -EINVAL;
255e737e 5271 }
636a5d36
JM		 5272
5273 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5274 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5275 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5276 }
5277
d5cdfacb
JM		 5278 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5279
4c476991
JB		 5280 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
5281 local_state_change);
636a5d36
JM		 5282}
5283
dd5b4cc7
FF		 5284static bool
5285nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
5286 int mcast_rate[IEEE80211_NUM_BANDS],
5287 int rateval)
5288{
5289 struct wiphy *wiphy = &rdev->wiphy;
5290 bool found = false;
5291 int band, i;
5292
5293 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
5294 struct ieee80211_supported_band *sband;
5295
5296 sband = wiphy->bands[band];
5297 if (!sband)
5298 continue;
5299
5300 for (i = 0; i < sband->n_bitrates; i++) {
5301 if (sband->bitrates[i].bitrate == rateval) {
5302 mcast_rate[band] = i + 1;
5303 found = true;
5304 break;
5305 }
5306 }
5307 }
5308
5309 return found;
5310}
5311
04a773ad
JB		 5312static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
5313{
4c476991
JB		 5314 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5315 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 5316 struct cfg80211_ibss_params ibss;
5317 struct wiphy *wiphy;
fffd0934 5318 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 5319 int err;
5320
8e30bc55
JB		 5321 memset(&ibss, 0, sizeof(ibss));
5322
04a773ad
JB		 5323 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5324 return -EINVAL;
5325
5326 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
5327 !info->attrs[NL80211_ATTR_SSID] ||
5328 !nla_len(info->attrs[NL80211_ATTR_SSID]))
5329 return -EINVAL;
5330
8e30bc55
JB		 5331 ibss.beacon_interval = 100;
5332
5333 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
5334 ibss.beacon_interval =
5335 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
5336 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
5337 return -EINVAL;
5338 }
5339
4c476991
JB		 5340 if (!rdev->ops->join_ibss)
5341 return -EOPNOTSUPP;
04a773ad 5342
4c476991
JB		 5343 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5344 return -EOPNOTSUPP;
04a773ad 5345
79c97e97 5346 wiphy = &rdev->wiphy;
04a773ad 5347
39193498 5348 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 5349 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 5350
5351 if (!is_valid_ether_addr(ibss.bssid))
5352 return -EINVAL;
5353 }
04a773ad
JB		 5354 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5355 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5356
5357 if (info->attrs[NL80211_ATTR_IE]) {
5358 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5359 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5360 }
5361
54858ee5
AS		 5362 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
5363 enum nl80211_channel_type channel_type;
5364
cd6c6598 5365 if (!nl80211_valid_channel_type(info, &channel_type))
54858ee5
AS		 5366 return -EINVAL;
5367
5368 if (channel_type != NL80211_CHAN_NO_HT &&
5369 !(wiphy->features & NL80211_FEATURE_HT_IBSS))
5370 return -EINVAL;
5371
5372 ibss.channel_type = channel_type;
5373 } else {
5374 ibss.channel_type = NL80211_CHAN_NO_HT;
5375 }
5376
5377 ibss.channel = rdev_freq_to_chan(rdev,
5378 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
5379 ibss.channel_type);
04a773ad
JB		 5380 if (!ibss.channel ||
5381 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
4c476991
JB		 5382 ibss.channel->flags & IEEE80211_CHAN_DISABLED)
5383 return -EINVAL;
04a773ad 5384
54858ee5
AS		 5385 /* Both channels should be able to initiate communication */
5386 if ((ibss.channel_type == NL80211_CHAN_HT40PLUS ||
5387 ibss.channel_type == NL80211_CHAN_HT40MINUS) &&
5388 !cfg80211_can_beacon_sec_chan(&rdev->wiphy, ibss.channel,
5389 ibss.channel_type))
5390 return -EINVAL;
5391
04a773ad 5392 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 5393 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
5394
fbd2c8dc
TP		 5395 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
5396 u8 *rates =
5397 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5398 int n_rates =
5399 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5400 struct ieee80211_supported_band *sband =
5401 wiphy->bands[ibss.channel->band];
fbd2c8dc 5402
34850ab2
JB		 5403 err = ieee80211_get_ratemask(sband, rates, n_rates,
5404 &ibss.basic_rates);
5405 if (err)
5406 return err;
fbd2c8dc 5407 }
dd5b4cc7
FF		 5408
5409 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
5410 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
5411 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
5412 return -EINVAL;
fbd2c8dc 5413
4c476991 5414 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 5415 bool no_ht = false;
5416
4c476991 5417 connkeys = nl80211_parse_connkeys(rdev,
de7044ee
SM		 5418 info->attrs[NL80211_ATTR_KEYS],
5419 &no_ht);
4c476991
JB		 5420 if (IS_ERR(connkeys))
5421 return PTR_ERR(connkeys);
de7044ee
SM		 5422
5423 if ((ibss.channel_type != NL80211_CHAN_NO_HT) && no_ht) {
5424 kfree(connkeys);
5425 return -EINVAL;
5426 }
4c476991 5427 }
04a773ad 5428
267335d6
AQ		 5429 ibss.control_port =
5430 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
5431
4c476991 5432 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934
JB		 5433 if (err)
5434 kfree(connkeys);
04a773ad
JB		 5435 return err;
5436}
5437
5438static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
5439{
4c476991
JB		 5440 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5441 struct net_device *dev = info->user_ptr[1];
04a773ad 5442
4c476991
JB		 5443 if (!rdev->ops->leave_ibss)
5444 return -EOPNOTSUPP;
04a773ad 5445
4c476991
JB		 5446 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5447 return -EOPNOTSUPP;
04a773ad 5448
4c476991 5449 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 5450}
5451
f4e583c8
AQ		 5452static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
5453{
5454 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5455 struct net_device *dev = info->user_ptr[1];
5456 int mcast_rate[IEEE80211_NUM_BANDS];
5457 u32 nla_rate;
5458 int err;
5459
5460 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
5461 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
5462 return -EOPNOTSUPP;
5463
5464 if (!rdev->ops->set_mcast_rate)
5465 return -EOPNOTSUPP;
5466
5467 memset(mcast_rate, 0, sizeof(mcast_rate));
5468
5469 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
5470 return -EINVAL;
5471
5472 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
5473 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
5474 return -EINVAL;
5475
5476 err = rdev->ops->set_mcast_rate(&rdev->wiphy, dev, mcast_rate);
5477
5478 return err;
5479}
5480
5481
aff89a9b
JB		 5482#ifdef CONFIG_NL80211_TESTMODE
5483static struct genl_multicast_group nl80211_testmode_mcgrp = {
5484 .name = "testmode",
5485};
5486
5487static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
5488{
4c476991 5489 struct cfg80211_registered_device *rdev = info->user_ptr[0];
aff89a9b
JB		 5490 int err;
5491
5492 if (!info->attrs[NL80211_ATTR_TESTDATA])
5493 return -EINVAL;
5494
aff89a9b
JB		 5495 err = -EOPNOTSUPP;
5496 if (rdev->ops->testmode_cmd) {
5497 rdev->testmode_info = info;
e35e4d28 5498 err = rdev_testmode_cmd(rdev,
aff89a9b
JB		 5499 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
5500 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
5501 rdev->testmode_info = NULL;
5502 }
5503
aff89a9b
JB		 5504 return err;
5505}
5506
71063f0e
WYG		 5507static int nl80211_testmode_dump(struct sk_buff *skb,
5508 struct netlink_callback *cb)
5509{
00918d33 5510 struct cfg80211_registered_device *rdev;
71063f0e
WYG		 5511 int err;
5512 long phy_idx;
5513 void *data = NULL;
5514 int data_len = 0;
5515
5516 if (cb->args[0]) {
5517 /*
5518 * 0 is a valid index, but not valid for args[0],
5519 * so we need to offset by 1.
5520 */
5521 phy_idx = cb->args[0] - 1;
5522 } else {
5523 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
5524 nl80211_fam.attrbuf, nl80211_fam.maxattr,
5525 nl80211_policy);
5526 if (err)
5527 return err;
00918d33 5528
2bd7e35d
JB		 5529 mutex_lock(&cfg80211_mutex);
5530 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk),
5531 nl80211_fam.attrbuf);
5532 if (IS_ERR(rdev)) {
5533 mutex_unlock(&cfg80211_mutex);
5534 return PTR_ERR(rdev);
00918d33 5535 }
2bd7e35d
JB		 5536 phy_idx = rdev->wiphy_idx;
5537 rdev = NULL;
5538 mutex_unlock(&cfg80211_mutex);
5539
71063f0e
WYG		 5540 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
5541 cb->args[1] =
5542 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
5543 }
5544
5545 if (cb->args[1]) {
5546 data = nla_data((void *)cb->args[1]);
5547 data_len = nla_len((void *)cb->args[1]);
5548 }
5549
5550 mutex_lock(&cfg80211_mutex);
00918d33
JB		 5551 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
5552 if (!rdev) {
71063f0e
WYG		 5553 mutex_unlock(&cfg80211_mutex);
5554 return -ENOENT;
5555 }
00918d33 5556 cfg80211_lock_rdev(rdev);
71063f0e
WYG		 5557 mutex_unlock(&cfg80211_mutex);
5558
00918d33 5559 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 5560 err = -EOPNOTSUPP;
5561 goto out_err;
5562 }
5563
5564 while (1) {
15e47304 5565 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 5566 cb->nlh->nlmsg_seq, NLM_F_MULTI,
5567 NL80211_CMD_TESTMODE);
5568 struct nlattr *tmdata;
5569
9360ffd1 5570 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 5571 genlmsg_cancel(skb, hdr);
5572 break;
5573 }
5574
5575 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
5576 if (!tmdata) {
5577 genlmsg_cancel(skb, hdr);
5578 break;
5579 }
e35e4d28 5580 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 5581 nla_nest_end(skb, tmdata);
5582
5583 if (err == -ENOBUFS || err == -ENOENT) {
5584 genlmsg_cancel(skb, hdr);
5585 break;
5586 } else if (err) {
5587 genlmsg_cancel(skb, hdr);
5588 goto out_err;
5589 }
5590
5591 genlmsg_end(skb, hdr);
5592 }
5593
5594 err = skb->len;
5595 /* see above */
5596 cb->args[0] = phy_idx + 1;
5597 out_err:
00918d33 5598 cfg80211_unlock_rdev(rdev);
71063f0e
WYG		 5599 return err;
5600}
5601
aff89a9b
JB		 5602static struct sk_buff *
5603__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
15e47304 5604 int approxlen, u32 portid, u32 seq, gfp_t gfp)
aff89a9b
JB		 5605{
5606 struct sk_buff *skb;
5607 void *hdr;
5608 struct nlattr *data;
5609
5610 skb = nlmsg_new(approxlen + 100, gfp);
5611 if (!skb)
5612 return NULL;
5613
15e47304 5614 hdr = nl80211hdr_put(skb, portid, seq, 0, NL80211_CMD_TESTMODE);
aff89a9b
JB		 5615 if (!hdr) {
5616 kfree_skb(skb);
5617 return NULL;
5618 }
5619
9360ffd1
DM		 5620 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
5621 goto nla_put_failure;
aff89a9b
JB		 5622 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
5623
5624 ((void **)skb->cb)[0] = rdev;
5625 ((void **)skb->cb)[1] = hdr;
5626 ((void **)skb->cb)[2] = data;
5627
5628 return skb;
5629
5630 nla_put_failure:
5631 kfree_skb(skb);
5632 return NULL;
5633}
5634
5635struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
5636 int approxlen)
5637{
5638 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
5639
5640 if (WARN_ON(!rdev->testmode_info))
5641 return NULL;
5642
5643 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
15e47304 5644 rdev->testmode_info->snd_portid,
aff89a9b
JB		 5645 rdev->testmode_info->snd_seq,
5646 GFP_KERNEL);
5647}
5648EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
5649
5650int cfg80211_testmode_reply(struct sk_buff *skb)
5651{
5652 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
5653 void *hdr = ((void **)skb->cb)[1];
5654 struct nlattr *data = ((void **)skb->cb)[2];
5655
5656 if (WARN_ON(!rdev->testmode_info)) {
5657 kfree_skb(skb);
5658 return -EINVAL;
5659 }
5660
5661 nla_nest_end(skb, data);
5662 genlmsg_end(skb, hdr);
5663 return genlmsg_reply(skb, rdev->testmode_info);
5664}
5665EXPORT_SYMBOL(cfg80211_testmode_reply);
5666
5667struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
5668 int approxlen, gfp_t gfp)
5669{
5670 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
5671
5672 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
5673}
5674EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
5675
5676void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
5677{
5678 void *hdr = ((void **)skb->cb)[1];
5679 struct nlattr *data = ((void **)skb->cb)[2];
5680
5681 nla_nest_end(skb, data);
5682 genlmsg_end(skb, hdr);
5683 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
5684}
5685EXPORT_SYMBOL(cfg80211_testmode_event);
5686#endif
5687
b23aa676
SO		 5688static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
5689{
4c476991
JB		 5690 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5691 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 5692 struct cfg80211_connect_params connect;
5693 struct wiphy *wiphy;
fffd0934 5694 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 5695 int err;
5696
5697 memset(&connect, 0, sizeof(connect));
5698
5699 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5700 return -EINVAL;
5701
5702 if (!info->attrs[NL80211_ATTR_SSID] ||
5703 !nla_len(info->attrs[NL80211_ATTR_SSID]))
5704 return -EINVAL;
5705
5706 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
5707 connect.auth_type =
5708 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 5709 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
5710 NL80211_CMD_CONNECT))
b23aa676
SO		 5711 return -EINVAL;
5712 } else
5713 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
5714
5715 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
5716
c0692b8f 5717 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 5718 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 5719 if (err)
5720 return err;
b23aa676 5721
074ac8df 5722 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5723 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5724 return -EOPNOTSUPP;
b23aa676 5725
79c97e97 5726 wiphy = &rdev->wiphy;
b23aa676 5727
4486ea98
BS		 5728 connect.bg_scan_period = -1;
5729 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
5730 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
5731 connect.bg_scan_period =
5732 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
5733 }
5734
b23aa676
SO		 5735 if (info->attrs[NL80211_ATTR_MAC])
5736 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5737 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5738 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5739
5740 if (info->attrs[NL80211_ATTR_IE]) {
5741 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5742 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5743 }
5744
5745 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
5746 connect.channel =
5747 ieee80211_get_channel(wiphy,
5748 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
5749 if (!connect.channel ||
4c476991
JB		 5750 connect.channel->flags & IEEE80211_CHAN_DISABLED)
5751 return -EINVAL;
b23aa676
SO		 5752 }
5753
fffd0934
JB		 5754 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
5755 connkeys = nl80211_parse_connkeys(rdev,
de7044ee 5756 info->attrs[NL80211_ATTR_KEYS], NULL);
4c476991
JB		 5757 if (IS_ERR(connkeys))
5758 return PTR_ERR(connkeys);
fffd0934
JB		 5759 }
5760
7e7c8926
BG		 5761 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5762 connect.flags |= ASSOC_REQ_DISABLE_HT;
5763
5764 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5765 memcpy(&connect.ht_capa_mask,
5766 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
5767 sizeof(connect.ht_capa_mask));
5768
5769 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e
WY		 5770 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
5771 kfree(connkeys);
7e7c8926 5772 return -EINVAL;
b4e4f47e 5773 }
7e7c8926
BG		 5774 memcpy(&connect.ht_capa,
5775 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
5776 sizeof(connect.ht_capa));
5777 }
5778
fffd0934 5779 err = cfg80211_connect(rdev, dev, &connect, connkeys);
fffd0934
JB		 5780 if (err)
5781 kfree(connkeys);
b23aa676
SO		 5782 return err;
5783}
5784
5785static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
5786{
4c476991
JB		 5787 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5788 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 5789 u16 reason;
5790
5791 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5792 reason = WLAN_REASON_DEAUTH_LEAVING;
5793 else
5794 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5795
5796 if (reason == 0)
5797 return -EINVAL;
5798
074ac8df 5799 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5800 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5801 return -EOPNOTSUPP;
b23aa676 5802
4c476991 5803 return cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 5804}
5805
463d0183
JB		 5806static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
5807{
4c476991 5808 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 5809 struct net *net;
5810 int err;
5811 u32 pid;
5812
5813 if (!info->attrs[NL80211_ATTR_PID])
5814 return -EINVAL;
5815
5816 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
5817
463d0183 5818 net = get_net_ns_by_pid(pid);
4c476991
JB		 5819 if (IS_ERR(net))
5820 return PTR_ERR(net);
463d0183
JB		 5821
5822 err = 0;
5823
5824 /* check if anything to do */
4c476991
JB		 5825 if (!net_eq(wiphy_net(&rdev->wiphy), net))
5826 err = cfg80211_switch_netns(rdev, net);
463d0183 5827
463d0183 5828 put_net(net);
463d0183
JB		 5829 return err;
5830}
5831
67fbb16b
SO		 5832static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
5833{
4c476991 5834 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 5835 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
5836 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 5837 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 5838 struct cfg80211_pmksa pmksa;
5839
5840 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
5841
5842 if (!info->attrs[NL80211_ATTR_MAC])
5843 return -EINVAL;
5844
5845 if (!info->attrs[NL80211_ATTR_PMKID])
5846 return -EINVAL;
5847
67fbb16b
SO		 5848 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
5849 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5850
074ac8df 5851 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5852 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5853 return -EOPNOTSUPP;
67fbb16b
SO		 5854
5855 switch (info->genlhdr->cmd) {
5856 case NL80211_CMD_SET_PMKSA:
5857 rdev_ops = rdev->ops->set_pmksa;
5858 break;
5859 case NL80211_CMD_DEL_PMKSA:
5860 rdev_ops = rdev->ops->del_pmksa;
5861 break;
5862 default:
5863 WARN_ON(1);
5864 break;
5865 }
5866
4c476991
JB		 5867 if (!rdev_ops)
5868 return -EOPNOTSUPP;
67fbb16b 5869
4c476991 5870 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 5871}
5872
5873static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
5874{
4c476991
JB		 5875 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5876 struct net_device *dev = info->user_ptr[1];
67fbb16b 5877
074ac8df 5878 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5879 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5880 return -EOPNOTSUPP;
67fbb16b 5881
4c476991
JB		 5882 if (!rdev->ops->flush_pmksa)
5883 return -EOPNOTSUPP;
67fbb16b 5884
e35e4d28 5885 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 5886}
5887
109086ce
AN		 5888static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
5889{
5890 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5891 struct net_device *dev = info->user_ptr[1];
5892 u8 action_code, dialog_token;
5893 u16 status_code;
5894 u8 *peer;
5895
5896 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
5897 !rdev->ops->tdls_mgmt)
5898 return -EOPNOTSUPP;
5899
5900 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
5901 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
5902 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
5903 !info->attrs[NL80211_ATTR_IE] ||
5904 !info->attrs[NL80211_ATTR_MAC])
5905 return -EINVAL;
5906
5907 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
5908 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
5909 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
5910 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
5911
e35e4d28
HG		 5912 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
5913 dialog_token, status_code,
5914 nla_data(info->attrs[NL80211_ATTR_IE]),
5915 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 5916}
5917
5918static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
5919{
5920 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5921 struct net_device *dev = info->user_ptr[1];
5922 enum nl80211_tdls_operation operation;
5923 u8 *peer;
5924
5925 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
5926 !rdev->ops->tdls_oper)
5927 return -EOPNOTSUPP;
5928
5929 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
5930 !info->attrs[NL80211_ATTR_MAC])
5931 return -EINVAL;
5932
5933 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
5934 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
5935
e35e4d28 5936 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 5937}
5938
9588bbd5
JM		 5939static int nl80211_remain_on_channel(struct sk_buff *skb,
5940 struct genl_info *info)
5941{
4c476991 5942 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 5943 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5
JM		 5944 struct ieee80211_channel *chan;
5945 struct sk_buff *msg;
5946 void *hdr;
5947 u64 cookie;
5948 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
5949 u32 freq, duration;
5950 int err;
5951
5952 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
5953 !info->attrs[NL80211_ATTR_DURATION])
5954 return -EINVAL;
5955
5956 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
5957
ebf348fc
JB		 5958 if (!rdev->ops->remain_on_channel ||
5959 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
5960 return -EOPNOTSUPP;
5961
9588bbd5 5962 /*
ebf348fc
JB		 5963 * We should be on that channel for at least a minimum amount of
5964 * time (10ms) but no longer than the driver supports.
9588bbd5 5965 */
ebf348fc 5966 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 5967 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 5968 return -EINVAL;
5969
cd6c6598
JB		 5970 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
5971 !nl80211_valid_channel_type(info, &channel_type))
5972 return -EINVAL;
9588bbd5
JM		 5973
5974 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5975 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5976 if (chan == NULL)
5977 return -EINVAL;
9588bbd5
JM		 5978
5979 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5980 if (!msg)
5981 return -ENOMEM;
9588bbd5 5982
15e47304 5983 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5
JM		 5984 NL80211_CMD_REMAIN_ON_CHANNEL);
5985
5986 if (IS_ERR(hdr)) {
5987 err = PTR_ERR(hdr);
5988 goto free_msg;
5989 }
5990
e35e4d28
HG		 5991 err = rdev_remain_on_channel(rdev, wdev, chan, channel_type, duration,
5992 &cookie);
9588bbd5
JM		 5993
5994 if (err)
5995 goto free_msg;
5996
9360ffd1
DM		 5997 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
5998 goto nla_put_failure;
9588bbd5
JM		 5999
6000 genlmsg_end(msg, hdr);
4c476991
JB		 6001
6002 return genlmsg_reply(msg, info);
9588bbd5
JM		 6003
6004 nla_put_failure:
6005 err = -ENOBUFS;
6006 free_msg:
6007 nlmsg_free(msg);
9588bbd5
JM		 6008 return err;
6009}
6010
6011static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
6012 struct genl_info *info)
6013{
4c476991 6014 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6015 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 6016 u64 cookie;
9588bbd5
JM		 6017
6018 if (!info->attrs[NL80211_ATTR_COOKIE])
6019 return -EINVAL;
6020
4c476991
JB		 6021 if (!rdev->ops->cancel_remain_on_channel)
6022 return -EOPNOTSUPP;
9588bbd5 6023
9588bbd5
JM		 6024 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
6025
e35e4d28 6026 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 6027}
6028
13ae75b1
JM		 6029static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
6030 u8 *rates, u8 rates_len)
6031{
6032 u8 i;
6033 u32 mask = 0;
6034
6035 for (i = 0; i < rates_len; i++) {
6036 int rate = (rates[i] & 0x7f) * 5;
6037 int ridx;
6038 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
6039 struct ieee80211_rate *srate =
6040 &sband->bitrates[ridx];
6041 if (rate == srate->bitrate) {
6042 mask |= 1 << ridx;
6043 break;
6044 }
6045 }
6046 if (ridx == sband->n_bitrates)
6047 return 0; /* rate not found */
6048 }
6049
6050 return mask;
6051}
6052
24db78c0
SW		 6053static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
6054 u8 *rates, u8 rates_len,
6055 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
6056{
6057 u8 i;
6058
6059 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
6060
6061 for (i = 0; i < rates_len; i++) {
6062 int ridx, rbit;
6063
6064 ridx = rates[i] / 8;
6065 rbit = BIT(rates[i] % 8);
6066
6067 /* check validity */
910570b5 6068 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
24db78c0
SW		 6069 return false;
6070
6071 /* check availability */
6072 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
6073 mcs[ridx] |= rbit;
6074 else
6075 return false;
6076 }
6077
6078 return true;
6079}
6080
b54452b0 6081static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
13ae75b1
JM		 6082 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
6083 .len = NL80211_MAX_SUPP_RATES },
24db78c0
SW		 6084 [NL80211_TXRATE_MCS] = { .type = NLA_BINARY,
6085 .len = NL80211_MAX_SUPP_HT_RATES },
13ae75b1
JM		 6086};
6087
6088static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
6089 struct genl_info *info)
6090{
6091 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4c476991 6092 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13ae75b1 6093 struct cfg80211_bitrate_mask mask;
4c476991
JB		 6094 int rem, i;
6095 struct net_device *dev = info->user_ptr[1];
13ae75b1
JM		 6096 struct nlattr *tx_rates;
6097 struct ieee80211_supported_band *sband;
6098
6099 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
6100 return -EINVAL;
6101
4c476991
JB		 6102 if (!rdev->ops->set_bitrate_mask)
6103 return -EOPNOTSUPP;
13ae75b1
JM		 6104
6105 memset(&mask, 0, sizeof(mask));
6106 /* Default to all rates enabled */
6107 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
6108 sband = rdev->wiphy.bands[i];
6109 mask.control[i].legacy =
6110 sband ? (1 << sband->n_bitrates) - 1 : 0;
24db78c0
SW		 6111 if (sband)
6112 memcpy(mask.control[i].mcs,
6113 sband->ht_cap.mcs.rx_mask,
6114 sizeof(mask.control[i].mcs));
6115 else
6116 memset(mask.control[i].mcs, 0,
6117 sizeof(mask.control[i].mcs));
13ae75b1
JM		 6118 }
6119
6120 /*
6121 * The nested attribute uses enum nl80211_band as the index. This maps
6122 * directly to the enum ieee80211_band values used in cfg80211.
6123 */
24db78c0 6124 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
13ae75b1
JM		 6125 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
6126 {
6127 enum ieee80211_band band = nla_type(tx_rates);
4c476991
JB		 6128 if (band < 0 || band >= IEEE80211_NUM_BANDS)
6129 return -EINVAL;
13ae75b1 6130 sband = rdev->wiphy.bands[band];
4c476991
JB		 6131 if (sband == NULL)
6132 return -EINVAL;
13ae75b1
JM		 6133 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
6134 nla_len(tx_rates), nl80211_txattr_policy);
6135 if (tb[NL80211_TXRATE_LEGACY]) {
6136 mask.control[band].legacy = rateset_to_mask(
6137 sband,
6138 nla_data(tb[NL80211_TXRATE_LEGACY]),
6139 nla_len(tb[NL80211_TXRATE_LEGACY]));
218d2e26
BS		 6140 if ((mask.control[band].legacy == 0) &&
6141 nla_len(tb[NL80211_TXRATE_LEGACY]))
6142 return -EINVAL;
24db78c0
SW		 6143 }
6144 if (tb[NL80211_TXRATE_MCS]) {
6145 if (!ht_rateset_to_mask(
6146 sband,
6147 nla_data(tb[NL80211_TXRATE_MCS]),
6148 nla_len(tb[NL80211_TXRATE_MCS]),
6149 mask.control[band].mcs))
6150 return -EINVAL;
6151 }
6152
6153 if (mask.control[band].legacy == 0) {
6154 /* don't allow empty legacy rates if HT
6155 * is not even supported. */
6156 if (!rdev->wiphy.bands[band]->ht_cap.ht_supported)
6157 return -EINVAL;
6158
6159 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
6160 if (mask.control[band].mcs[i])
6161 break;
6162
6163 /* legacy and mcs rates may not be both empty */
6164 if (i == IEEE80211_HT_MCS_MASK_LEN)
4c476991 6165 return -EINVAL;
13ae75b1
JM		 6166 }
6167 }
6168
e35e4d28 6169 return rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
13ae75b1
JM		 6170}
6171
2e161f78 6172static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 6173{
4c476991 6174 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6175 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 6176 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 6177
6178 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
6179 return -EINVAL;
6180
2e161f78
JB		 6181 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
6182 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 6183
71bbc994
JB		 6184 switch (wdev->iftype) {
6185 case NL80211_IFTYPE_STATION:
6186 case NL80211_IFTYPE_ADHOC:
6187 case NL80211_IFTYPE_P2P_CLIENT:
6188 case NL80211_IFTYPE_AP:
6189 case NL80211_IFTYPE_AP_VLAN:
6190 case NL80211_IFTYPE_MESH_POINT:
6191 case NL80211_IFTYPE_P2P_GO:
98104fde 6192 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 6193 break;
6194 default:
4c476991 6195 return -EOPNOTSUPP;
71bbc994 6196 }
026331c4
JM		 6197
6198 /* not much point in registering if we can't reply */
4c476991
JB		 6199 if (!rdev->ops->mgmt_tx)
6200 return -EOPNOTSUPP;
026331c4 6201
15e47304 6202 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
026331c4
JM		 6203 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
6204 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
026331c4
JM		 6205}
6206
2e161f78 6207static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 6208{
4c476991 6209 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6210 struct wireless_dev *wdev = info->user_ptr[1];
026331c4
JM		 6211 struct ieee80211_channel *chan;
6212 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
252aa631 6213 bool channel_type_valid = false;
026331c4
JM		 6214 u32 freq;
6215 int err;
d64d373f 6216 void *hdr = NULL;
026331c4 6217 u64 cookie;
e247bd90 6218 struct sk_buff *msg = NULL;
f7ca38df 6219 unsigned int wait = 0;
e247bd90
JB		 6220 bool offchan, no_cck, dont_wait_for_ack;
6221
6222 dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
026331c4
JM		 6223
6224 if (!info->attrs[NL80211_ATTR_FRAME] ||
6225 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
6226 return -EINVAL;
6227
4c476991
JB		 6228 if (!rdev->ops->mgmt_tx)
6229 return -EOPNOTSUPP;
026331c4 6230
71bbc994
JB		 6231 switch (wdev->iftype) {
6232 case NL80211_IFTYPE_STATION:
6233 case NL80211_IFTYPE_ADHOC:
6234 case NL80211_IFTYPE_P2P_CLIENT:
6235 case NL80211_IFTYPE_AP:
6236 case NL80211_IFTYPE_AP_VLAN:
6237 case NL80211_IFTYPE_MESH_POINT:
6238 case NL80211_IFTYPE_P2P_GO:
98104fde 6239 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 6240 break;
6241 default:
4c476991 6242 return -EOPNOTSUPP;
71bbc994 6243 }
026331c4 6244
f7ca38df 6245 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 6246 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df
JB		 6247 return -EINVAL;
6248 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 6249
6250 /*
6251 * We should wait on the channel for at least a minimum amount
6252 * of time (10ms) but no longer than the driver supports.
6253 */
6254 if (wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
6255 wait > rdev->wiphy.max_remain_on_channel_duration)
6256 return -EINVAL;
6257
f7ca38df
JB		 6258 }
6259
026331c4 6260 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
cd6c6598 6261 if (!nl80211_valid_channel_type(info, &channel_type))
4c476991 6262 return -EINVAL;
252aa631 6263 channel_type_valid = true;
026331c4
JM		 6264 }
6265
f7ca38df
JB		 6266 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
6267
7c4ef712
JB		 6268 if (offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
6269 return -EINVAL;
6270
e9f935e3
RM		 6271 no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
6272
026331c4
JM		 6273 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
6274 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 6275 if (chan == NULL)
6276 return -EINVAL;
026331c4 6277
e247bd90
JB		 6278 if (!dont_wait_for_ack) {
6279 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6280 if (!msg)
6281 return -ENOMEM;
026331c4 6282
15e47304 6283 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 6284 NL80211_CMD_FRAME);
026331c4 6285
e247bd90
JB		 6286 if (IS_ERR(hdr)) {
6287 err = PTR_ERR(hdr);
6288 goto free_msg;
6289 }
026331c4 6290 }
e247bd90 6291
71bbc994 6292 err = cfg80211_mlme_mgmt_tx(rdev, wdev, chan, offchan, channel_type,
f7ca38df 6293 channel_type_valid, wait,
2e161f78
JB		 6294 nla_data(info->attrs[NL80211_ATTR_FRAME]),
6295 nla_len(info->attrs[NL80211_ATTR_FRAME]),
e247bd90 6296 no_cck, dont_wait_for_ack, &cookie);
026331c4
JM		 6297 if (err)
6298 goto free_msg;
6299
e247bd90 6300 if (msg) {
9360ffd1
DM		 6301 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6302 goto nla_put_failure;
026331c4 6303
e247bd90
JB		 6304 genlmsg_end(msg, hdr);
6305 return genlmsg_reply(msg, info);
6306 }
6307
6308 return 0;
026331c4
JM		 6309
6310 nla_put_failure:
6311 err = -ENOBUFS;
6312 free_msg:
6313 nlmsg_free(msg);
026331c4
JM		 6314 return err;
6315}
6316
f7ca38df
JB		 6317static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
6318{
6319 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6320 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 6321 u64 cookie;
6322
6323 if (!info->attrs[NL80211_ATTR_COOKIE])
6324 return -EINVAL;
6325
6326 if (!rdev->ops->mgmt_tx_cancel_wait)
6327 return -EOPNOTSUPP;
6328
71bbc994
JB		 6329 switch (wdev->iftype) {
6330 case NL80211_IFTYPE_STATION:
6331 case NL80211_IFTYPE_ADHOC:
6332 case NL80211_IFTYPE_P2P_CLIENT:
6333 case NL80211_IFTYPE_AP:
6334 case NL80211_IFTYPE_AP_VLAN:
6335 case NL80211_IFTYPE_P2P_GO:
98104fde 6336 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 6337 break;
6338 default:
f7ca38df 6339 return -EOPNOTSUPP;
71bbc994 6340 }
f7ca38df
JB		 6341
6342 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
6343
e35e4d28 6344 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 6345}
6346
ffb9eb3d
KV		 6347static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
6348{
4c476991 6349 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 6350 struct wireless_dev *wdev;
4c476991 6351 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 6352 u8 ps_state;
6353 bool state;
6354 int err;
6355
4c476991
JB		 6356 if (!info->attrs[NL80211_ATTR_PS_STATE])
6357 return -EINVAL;
ffb9eb3d
KV		 6358
6359 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
6360
4c476991
JB		 6361 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
6362 return -EINVAL;
ffb9eb3d
KV		 6363
6364 wdev = dev->ieee80211_ptr;
6365
4c476991
JB		 6366 if (!rdev->ops->set_power_mgmt)
6367 return -EOPNOTSUPP;
ffb9eb3d
KV		 6368
6369 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
6370
6371 if (state == wdev->ps)
4c476991 6372 return 0;
ffb9eb3d 6373
e35e4d28 6374 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 6375 if (!err)
6376 wdev->ps = state;
ffb9eb3d
KV		 6377 return err;
6378}
6379
6380static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
6381{
4c476991 6382 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 6383 enum nl80211_ps_state ps_state;
6384 struct wireless_dev *wdev;
4c476991 6385 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 6386 struct sk_buff *msg;
6387 void *hdr;
6388 int err;
6389
ffb9eb3d
KV		 6390 wdev = dev->ieee80211_ptr;
6391
4c476991
JB		 6392 if (!rdev->ops->set_power_mgmt)
6393 return -EOPNOTSUPP;
ffb9eb3d
KV		 6394
6395 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 6396 if (!msg)
6397 return -ENOMEM;
ffb9eb3d 6398
15e47304 6399 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 6400 NL80211_CMD_GET_POWER_SAVE);
6401 if (!hdr) {
4c476991 6402 err = -ENOBUFS;
ffb9eb3d
KV		 6403 goto free_msg;
6404 }
6405
6406 if (wdev->ps)
6407 ps_state = NL80211_PS_ENABLED;
6408 else
6409 ps_state = NL80211_PS_DISABLED;
6410
9360ffd1
DM		 6411 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
6412 goto nla_put_failure;
ffb9eb3d
KV		 6413
6414 genlmsg_end(msg, hdr);
4c476991 6415 return genlmsg_reply(msg, info);
ffb9eb3d 6416
4c476991 6417 nla_put_failure:
ffb9eb3d 6418 err = -ENOBUFS;
4c476991 6419 free_msg:
ffb9eb3d 6420 nlmsg_free(msg);
ffb9eb3d
KV		 6421 return err;
6422}
6423
d6dc1a38
JO		 6424static struct nla_policy
6425nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
6426 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
6427 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
6428 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 6429 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
6430 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
6431 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
d6dc1a38
JO		 6432};
6433
84f10708
TP		 6434static int nl80211_set_cqm_txe(struct genl_info *info,
6435 u32 rate, u32 pkts, u32 intvl)
6436{
6437 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6438 struct wireless_dev *wdev;
6439 struct net_device *dev = info->user_ptr[1];
6440
6441 if ((rate < 0 || rate > 100) ||
6442 (intvl < 0 || intvl > NL80211_CQM_TXE_MAX_INTVL))
6443 return -EINVAL;
6444
6445 wdev = dev->ieee80211_ptr;
6446
6447 if (!rdev->ops->set_cqm_txe_config)
6448 return -EOPNOTSUPP;
6449
6450 if (wdev->iftype != NL80211_IFTYPE_STATION &&
6451 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
6452 return -EOPNOTSUPP;
6453
e35e4d28 6454 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 6455}
6456
d6dc1a38
JO		 6457static int nl80211_set_cqm_rssi(struct genl_info *info,
6458 s32 threshold, u32 hysteresis)
6459{
4c476991 6460 struct cfg80211_registered_device *rdev = info->user_ptr[0];
d6dc1a38 6461 struct wireless_dev *wdev;
4c476991 6462 struct net_device *dev = info->user_ptr[1];
d6dc1a38
JO		 6463
6464 if (threshold > 0)
6465 return -EINVAL;
6466
d6dc1a38
JO		 6467 wdev = dev->ieee80211_ptr;
6468
4c476991
JB		 6469 if (!rdev->ops->set_cqm_rssi_config)
6470 return -EOPNOTSUPP;
d6dc1a38 6471
074ac8df 6472 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6473 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
6474 return -EOPNOTSUPP;
d6dc1a38 6475
e35e4d28 6476 return rdev_set_cqm_rssi_config(rdev, dev, threshold, hysteresis);
d6dc1a38
JO		 6477}
6478
6479static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
6480{
6481 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
6482 struct nlattr *cqm;
6483 int err;
6484
6485 cqm = info->attrs[NL80211_ATTR_CQM];
6486 if (!cqm) {
6487 err = -EINVAL;
6488 goto out;
6489 }
6490
6491 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
6492 nl80211_attr_cqm_policy);
6493 if (err)
6494 goto out;
6495
6496 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
6497 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
6498 s32 threshold;
6499 u32 hysteresis;
6500 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
6501 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
6502 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
84f10708
TP		 6503 } else if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
6504 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
6505 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
6506 u32 rate, pkts, intvl;
6507 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
6508 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
6509 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
6510 err = nl80211_set_cqm_txe(info, rate, pkts, intvl);
d6dc1a38
JO		 6511 } else
6512 err = -EINVAL;
6513
6514out:
6515 return err;
6516}
6517
29cbe68c
JB		 6518static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
6519{
6520 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6521 struct net_device *dev = info->user_ptr[1];
6522 struct mesh_config cfg;
c80d545d 6523 struct mesh_setup setup;
29cbe68c
JB		 6524 int err;
6525
6526 /* start with default */
6527 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 6528 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 6529
24bdd9f4 6530 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 6531 /* and parse parameters if given */
24bdd9f4 6532 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 6533 if (err)
6534 return err;
6535 }
6536
6537 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
6538 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
6539 return -EINVAL;
6540
c80d545d
JC		 6541 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
6542 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
6543
4bb62344
CYY		 6544 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
6545 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
6546 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
6547 return -EINVAL;
6548
c80d545d
JC		 6549 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
6550 /* parse additional setup parameters if given */
6551 err = nl80211_parse_mesh_setup(info, &setup);
6552 if (err)
6553 return err;
6554 }
6555
cc1d2806
JB		 6556 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
6557 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
6558
6559 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
6560 !nl80211_valid_channel_type(info, &channel_type))
6561 return -EINVAL;
6562
6563 setup.channel = rdev_freq_to_chan(rdev,
6564 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
6565 channel_type);
6566 if (!setup.channel)
6567 return -EINVAL;
6568 setup.channel_type = channel_type;
6569 } else {
6570 /* cfg80211_join_mesh() will sort it out */
6571 setup.channel = NULL;
6572 }
6573
c80d545d 6574 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
29cbe68c
JB		 6575}
6576
6577static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
6578{
6579 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6580 struct net_device *dev = info->user_ptr[1];
6581
6582 return cfg80211_leave_mesh(rdev, dev);
6583}
6584
dfb89c56 6585#ifdef CONFIG_PM
ff1b6e69
JB		 6586static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
6587{
6588 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6589 struct sk_buff *msg;
6590 void *hdr;
6591
6592 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
6593 return -EOPNOTSUPP;
6594
6595 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6596 if (!msg)
6597 return -ENOMEM;
6598
15e47304 6599 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 6600 NL80211_CMD_GET_WOWLAN);
6601 if (!hdr)
6602 goto nla_put_failure;
6603
6604 if (rdev->wowlan) {
6605 struct nlattr *nl_wowlan;
6606
6607 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
6608 if (!nl_wowlan)
6609 goto nla_put_failure;
6610
9360ffd1
DM		 6611 if ((rdev->wowlan->any &&
6612 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6613 (rdev->wowlan->disconnect &&
6614 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6615 (rdev->wowlan->magic_pkt &&
6616 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6617 (rdev->wowlan->gtk_rekey_failure &&
6618 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6619 (rdev->wowlan->eap_identity_req &&
6620 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6621 (rdev->wowlan->four_way_handshake &&
6622 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6623 (rdev->wowlan->rfkill_release &&
6624 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
6625 goto nla_put_failure;
ff1b6e69
JB		 6626 if (rdev->wowlan->n_patterns) {
6627 struct nlattr *nl_pats, *nl_pat;
6628 int i, pat_len;
6629
6630 nl_pats = nla_nest_start(msg,
6631 NL80211_WOWLAN_TRIG_PKT_PATTERN);
6632 if (!nl_pats)
6633 goto nla_put_failure;
6634
6635 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
6636 nl_pat = nla_nest_start(msg, i + 1);
6637 if (!nl_pat)
6638 goto nla_put_failure;
6639 pat_len = rdev->wowlan->patterns[i].pattern_len;
9360ffd1
DM		 6640 if (nla_put(msg, NL80211_WOWLAN_PKTPAT_MASK,
6641 DIV_ROUND_UP(pat_len, 8),
6642 rdev->wowlan->patterns[i].mask) ||
6643 nla_put(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
6644 pat_len,
6645 rdev->wowlan->patterns[i].pattern))
6646 goto nla_put_failure;
ff1b6e69
JB		 6647 nla_nest_end(msg, nl_pat);
6648 }
6649 nla_nest_end(msg, nl_pats);
6650 }
6651
6652 nla_nest_end(msg, nl_wowlan);
6653 }
6654
6655 genlmsg_end(msg, hdr);
6656 return genlmsg_reply(msg, info);
6657
6658nla_put_failure:
6659 nlmsg_free(msg);
6660 return -ENOBUFS;
6661}
6662
6663static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
6664{
6665 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6666 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 6667 struct cfg80211_wowlan new_triggers = {};
ae33bd81 6668 struct cfg80211_wowlan *ntrig;
ff1b6e69
JB		 6669 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
6670 int err, i;
6d52563f 6671 bool prev_enabled = rdev->wowlan;
ff1b6e69
JB		 6672
6673 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
6674 return -EOPNOTSUPP;
6675
ae33bd81
JB		 6676 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
6677 cfg80211_rdev_free_wowlan(rdev);
6678 rdev->wowlan = NULL;
6679 goto set_wakeup;
6680 }
ff1b6e69
JB		 6681
6682 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
6683 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
6684 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
6685 nl80211_wowlan_policy);
6686 if (err)
6687 return err;
6688
6689 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
6690 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
6691 return -EINVAL;
6692 new_triggers.any = true;
6693 }
6694
6695 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
6696 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
6697 return -EINVAL;
6698 new_triggers.disconnect = true;
6699 }
6700
6701 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
6702 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
6703 return -EINVAL;
6704 new_triggers.magic_pkt = true;
6705 }
6706
77dbbb13
JB		 6707 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
6708 return -EINVAL;
6709
6710 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
6711 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
6712 return -EINVAL;
6713 new_triggers.gtk_rekey_failure = true;
6714 }
6715
6716 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
6717 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
6718 return -EINVAL;
6719 new_triggers.eap_identity_req = true;
6720 }
6721
6722 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
6723 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
6724 return -EINVAL;
6725 new_triggers.four_way_handshake = true;
6726 }
6727
6728 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
6729 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
6730 return -EINVAL;
6731 new_triggers.rfkill_release = true;
6732 }
6733
ff1b6e69
JB		 6734 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
6735 struct nlattr *pat;
6736 int n_patterns = 0;
6737 int rem, pat_len, mask_len;
6738 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
6739
6740 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
6741 rem)
6742 n_patterns++;
6743 if (n_patterns > wowlan->n_patterns)
6744 return -EINVAL;
6745
6746 new_triggers.patterns = kcalloc(n_patterns,
6747 sizeof(new_triggers.patterns[0]),
6748 GFP_KERNEL);
6749 if (!new_triggers.patterns)
6750 return -ENOMEM;
6751
6752 new_triggers.n_patterns = n_patterns;
6753 i = 0;
6754
6755 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
6756 rem) {
6757 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
6758 nla_data(pat), nla_len(pat), NULL);
6759 err = -EINVAL;
6760 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
6761 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
6762 goto error;
6763 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
6764 mask_len = DIV_ROUND_UP(pat_len, 8);
6765 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
6766 mask_len)
6767 goto error;
6768 if (pat_len > wowlan->pattern_max_len ||
6769 pat_len < wowlan->pattern_min_len)
6770 goto error;
6771
6772 new_triggers.patterns[i].mask =
6773 kmalloc(mask_len + pat_len, GFP_KERNEL);
6774 if (!new_triggers.patterns[i].mask) {
6775 err = -ENOMEM;
6776 goto error;
6777 }
6778 new_triggers.patterns[i].pattern =
6779 new_triggers.patterns[i].mask + mask_len;
6780 memcpy(new_triggers.patterns[i].mask,
6781 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
6782 mask_len);
6783 new_triggers.patterns[i].pattern_len = pat_len;
6784 memcpy(new_triggers.patterns[i].pattern,
6785 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
6786 pat_len);
6787 i++;
6788 }
6789 }
6790
ae33bd81
JB		 6791 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
6792 if (!ntrig) {
6793 err = -ENOMEM;
6794 goto error;
ff1b6e69 6795 }
ae33bd81
JB		 6796 cfg80211_rdev_free_wowlan(rdev);
6797 rdev->wowlan = ntrig;
ff1b6e69 6798
ae33bd81 6799 set_wakeup:
6d52563f 6800 if (rdev->ops->set_wakeup && prev_enabled != !!rdev->wowlan)
e35e4d28 6801 rdev_set_wakeup(rdev, rdev->wowlan);
6d52563f 6802
ff1b6e69
JB		 6803 return 0;
6804 error:
6805 for (i = 0; i < new_triggers.n_patterns; i++)
6806 kfree(new_triggers.patterns[i].mask);
6807 kfree(new_triggers.patterns);
6808 return err;
6809}
dfb89c56 6810#endif
ff1b6e69 6811
e5497d76
JB		 6812static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
6813{
6814 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6815 struct net_device *dev = info->user_ptr[1];
6816 struct wireless_dev *wdev = dev->ieee80211_ptr;
6817 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
6818 struct cfg80211_gtk_rekey_data rekey_data;
6819 int err;
6820
6821 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
6822 return -EINVAL;
6823
6824 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
6825 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
6826 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
6827 nl80211_rekey_policy);
6828 if (err)
6829 return err;
6830
6831 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
6832 return -ERANGE;
6833 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
6834 return -ERANGE;
6835 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
6836 return -ERANGE;
6837
6838 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
6839 NL80211_KEK_LEN);
6840 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
6841 NL80211_KCK_LEN);
6842 memcpy(rekey_data.replay_ctr,
6843 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
6844 NL80211_REPLAY_CTR_LEN);
6845
6846 wdev_lock(wdev);
6847 if (!wdev->current_bss) {
6848 err = -ENOTCONN;
6849 goto out;
6850 }
6851
6852 if (!rdev->ops->set_rekey_data) {
6853 err = -EOPNOTSUPP;
6854 goto out;
6855 }
6856
e35e4d28 6857 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 6858 out:
6859 wdev_unlock(wdev);
6860 return err;
6861}
6862
28946da7
JB		 6863static int nl80211_register_unexpected_frame(struct sk_buff *skb,
6864 struct genl_info *info)
6865{
6866 struct net_device *dev = info->user_ptr[1];
6867 struct wireless_dev *wdev = dev->ieee80211_ptr;
6868
6869 if (wdev->iftype != NL80211_IFTYPE_AP &&
6870 wdev->iftype != NL80211_IFTYPE_P2P_GO)
6871 return -EINVAL;
6872
15e47304 6873 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 6874 return -EBUSY;
6875
15e47304 6876 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 6877 return 0;
6878}
6879
7f6cf311
JB		 6880static int nl80211_probe_client(struct sk_buff *skb,
6881 struct genl_info *info)
6882{
6883 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6884 struct net_device *dev = info->user_ptr[1];
6885 struct wireless_dev *wdev = dev->ieee80211_ptr;
6886 struct sk_buff *msg;
6887 void *hdr;
6888 const u8 *addr;
6889 u64 cookie;
6890 int err;
6891
6892 if (wdev->iftype != NL80211_IFTYPE_AP &&
6893 wdev->iftype != NL80211_IFTYPE_P2P_GO)
6894 return -EOPNOTSUPP;
6895
6896 if (!info->attrs[NL80211_ATTR_MAC])
6897 return -EINVAL;
6898
6899 if (!rdev->ops->probe_client)
6900 return -EOPNOTSUPP;
6901
6902 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6903 if (!msg)
6904 return -ENOMEM;
6905
15e47304 6906 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311
JB		 6907 NL80211_CMD_PROBE_CLIENT);
6908
6909 if (IS_ERR(hdr)) {
6910 err = PTR_ERR(hdr);
6911 goto free_msg;
6912 }
6913
6914 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6915
e35e4d28 6916 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 6917 if (err)
6918 goto free_msg;
6919
9360ffd1
DM		 6920 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6921 goto nla_put_failure;
7f6cf311
JB		 6922
6923 genlmsg_end(msg, hdr);
6924
6925 return genlmsg_reply(msg, info);
6926
6927 nla_put_failure:
6928 err = -ENOBUFS;
6929 free_msg:
6930 nlmsg_free(msg);
6931 return err;
6932}
6933
5e760230
JB		 6934static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
6935{
6936 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 6937 struct cfg80211_beacon_registration *reg, *nreg;
6938 int rv;
5e760230
JB		 6939
6940 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
6941 return -EOPNOTSUPP;
6942
37c73b5f
BG		 6943 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
6944 if (!nreg)
6945 return -ENOMEM;
6946
6947 /* First, check if already registered. */
6948 spin_lock_bh(&rdev->beacon_registrations_lock);
6949 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
6950 if (reg->nlportid == info->snd_portid) {
6951 rv = -EALREADY;
6952 goto out_err;
6953 }
6954 }
6955 /* Add it to the list */
6956 nreg->nlportid = info->snd_portid;
6957 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 6958
37c73b5f 6959 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 6960
6961 return 0;
37c73b5f
BG		 6962out_err:
6963 spin_unlock_bh(&rdev->beacon_registrations_lock);
6964 kfree(nreg);
6965 return rv;
5e760230
JB		 6966}
6967
98104fde
JB		 6968static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
6969{
6970 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6971 struct wireless_dev *wdev = info->user_ptr[1];
6972 int err;
6973
6974 if (!rdev->ops->start_p2p_device)
6975 return -EOPNOTSUPP;
6976
6977 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
6978 return -EOPNOTSUPP;
6979
6980 if (wdev->p2p_started)
6981 return 0;
6982
6983 mutex_lock(&rdev->devlist_mtx);
6984 err = cfg80211_can_add_interface(rdev, wdev->iftype);
6985 mutex_unlock(&rdev->devlist_mtx);
6986 if (err)
6987 return err;
6988
eeb126e9 6989 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 6990 if (err)
6991 return err;
6992
6993 wdev->p2p_started = true;
6994 mutex_lock(&rdev->devlist_mtx);
6995 rdev->opencount++;
6996 mutex_unlock(&rdev->devlist_mtx);
6997
6998 return 0;
6999}
7000
7001static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
7002{
7003 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7004 struct wireless_dev *wdev = info->user_ptr[1];
7005
7006 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
7007 return -EOPNOTSUPP;
7008
7009 if (!rdev->ops->stop_p2p_device)
7010 return -EOPNOTSUPP;
7011
7012 if (!wdev->p2p_started)
7013 return 0;
7014
eeb126e9 7015 rdev_stop_p2p_device(rdev, wdev);
98104fde
JB		 7016 wdev->p2p_started = false;
7017
7018 mutex_lock(&rdev->devlist_mtx);
7019 rdev->opencount--;
7020 mutex_unlock(&rdev->devlist_mtx);
7021
7022 if (WARN_ON(rdev->scan_req && rdev->scan_req->wdev == wdev)) {
7023 rdev->scan_req->aborted = true;
7024 ___cfg80211_scan_done(rdev, true);
7025 }
7026
7027 return 0;
7028}
7029
4c476991
JB		 7030#define NL80211_FLAG_NEED_WIPHY 0x01
7031#define NL80211_FLAG_NEED_NETDEV 0x02
7032#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 7033#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
7034#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
7035 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 7036#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 7037/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 7038#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
7039 NL80211_FLAG_CHECK_NETDEV_UP)
4c476991
JB		 7040
7041static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
7042 struct genl_info *info)
7043{
7044 struct cfg80211_registered_device *rdev;
89a54e48 7045 struct wireless_dev *wdev;
4c476991 7046 struct net_device *dev;
4c476991
JB		 7047 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
7048
7049 if (rtnl)
7050 rtnl_lock();
7051
7052 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 7053 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991
JB		 7054 if (IS_ERR(rdev)) {
7055 if (rtnl)
7056 rtnl_unlock();
7057 return PTR_ERR(rdev);
7058 }
7059 info->user_ptr[0] = rdev;
1bf614ef
JB		 7060 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
7061 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
89a54e48
JB		 7062 mutex_lock(&cfg80211_mutex);
7063 wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
7064 info->attrs);
7065 if (IS_ERR(wdev)) {
7066 mutex_unlock(&cfg80211_mutex);
4c476991
JB		 7067 if (rtnl)
7068 rtnl_unlock();
89a54e48 7069 return PTR_ERR(wdev);
4c476991 7070 }
89a54e48 7071
89a54e48
JB		 7072 dev = wdev->netdev;
7073 rdev = wiphy_to_dev(wdev->wiphy);
7074
1bf614ef
JB		 7075 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
7076 if (!dev) {
7077 mutex_unlock(&cfg80211_mutex);
7078 if (rtnl)
7079 rtnl_unlock();
7080 return -EINVAL;
7081 }
7082
7083 info->user_ptr[1] = dev;
7084 } else {
7085 info->user_ptr[1] = wdev;
41265714 7086 }
1bf614ef
JB		 7087
7088 if (dev) {
7089 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
7090 !netif_running(dev)) {
7091 mutex_unlock(&cfg80211_mutex);
7092 if (rtnl)
7093 rtnl_unlock();
7094 return -ENETDOWN;
7095 }
7096
7097 dev_hold(dev);
98104fde
JB		 7098 } else if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP) {
7099 if (!wdev->p2p_started) {
7100 mutex_unlock(&cfg80211_mutex);
7101 if (rtnl)
7102 rtnl_unlock();
7103 return -ENETDOWN;
7104 }
41265714 7105 }
89a54e48 7106
89a54e48
JB		 7107 cfg80211_lock_rdev(rdev);
7108
7109 mutex_unlock(&cfg80211_mutex);
7110
4c476991 7111 info->user_ptr[0] = rdev;
4c476991
JB		 7112 }
7113
7114 return 0;
7115}
7116
7117static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
7118 struct genl_info *info)
7119{
7120 if (info->user_ptr[0])
7121 cfg80211_unlock_rdev(info->user_ptr[0]);
1bf614ef
JB		 7122 if (info->user_ptr[1]) {
7123 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
7124 struct wireless_dev *wdev = info->user_ptr[1];
7125
7126 if (wdev->netdev)
7127 dev_put(wdev->netdev);
7128 } else {
7129 dev_put(info->user_ptr[1]);
7130 }
7131 }
4c476991
JB		 7132 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
7133 rtnl_unlock();
7134}
7135
55682965
JB		 7136static struct genl_ops nl80211_ops[] = {
7137 {
7138 .cmd = NL80211_CMD_GET_WIPHY,
7139 .doit = nl80211_get_wiphy,
7140 .dumpit = nl80211_dump_wiphy,
7141 .policy = nl80211_policy,
7142 /* can be retrieved by unprivileged users */
4c476991 7143 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965
JB		 7144 },
7145 {
7146 .cmd = NL80211_CMD_SET_WIPHY,
7147 .doit = nl80211_set_wiphy,
7148 .policy = nl80211_policy,
7149 .flags = GENL_ADMIN_PERM,
4c476991 7150 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 7151 },
7152 {
7153 .cmd = NL80211_CMD_GET_INTERFACE,
7154 .doit = nl80211_get_interface,
7155 .dumpit = nl80211_dump_interface,
7156 .policy = nl80211_policy,
7157 /* can be retrieved by unprivileged users */
72fb2abc 7158 .internal_flags = NL80211_FLAG_NEED_WDEV,
55682965
JB		 7159 },
7160 {
7161 .cmd = NL80211_CMD_SET_INTERFACE,
7162 .doit = nl80211_set_interface,
7163 .policy = nl80211_policy,
7164 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7165 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7166 NL80211_FLAG_NEED_RTNL,
55682965
JB		 7167 },
7168 {
7169 .cmd = NL80211_CMD_NEW_INTERFACE,
7170 .doit = nl80211_new_interface,
7171 .policy = nl80211_policy,
7172 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7173 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7174 NL80211_FLAG_NEED_RTNL,
55682965
JB		 7175 },
7176 {
7177 .cmd = NL80211_CMD_DEL_INTERFACE,
7178 .doit = nl80211_del_interface,
7179 .policy = nl80211_policy,
41ade00f 7180 .flags = GENL_ADMIN_PERM,
84efbb84 7181 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 7182 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 7183 },
7184 {
7185 .cmd = NL80211_CMD_GET_KEY,
7186 .doit = nl80211_get_key,
7187 .policy = nl80211_policy,
7188 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7189 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7190 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 7191 },
7192 {
7193 .cmd = NL80211_CMD_SET_KEY,
7194 .doit = nl80211_set_key,
7195 .policy = nl80211_policy,
7196 .flags = GENL_ADMIN_PERM,
41265714 7197 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7198 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 7199 },
7200 {
7201 .cmd = NL80211_CMD_NEW_KEY,
7202 .doit = nl80211_new_key,
7203 .policy = nl80211_policy,
7204 .flags = GENL_ADMIN_PERM,
41265714 7205 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7206 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 7207 },
7208 {
7209 .cmd = NL80211_CMD_DEL_KEY,
7210 .doit = nl80211_del_key,
7211 .policy = nl80211_policy,
55682965 7212 .flags = GENL_ADMIN_PERM,
41265714 7213 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7214 NL80211_FLAG_NEED_RTNL,
55682965 7215 },
ed1b6cc7
JB		 7216 {
7217 .cmd = NL80211_CMD_SET_BEACON,
7218 .policy = nl80211_policy,
7219 .flags = GENL_ADMIN_PERM,
8860020e 7220 .doit = nl80211_set_beacon,
2b5f8b0b 7221 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7222 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 7223 },
7224 {
8860020e 7225 .cmd = NL80211_CMD_START_AP,
ed1b6cc7
JB		 7226 .policy = nl80211_policy,
7227 .flags = GENL_ADMIN_PERM,
8860020e 7228 .doit = nl80211_start_ap,
2b5f8b0b 7229 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7230 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 7231 },
7232 {
8860020e 7233 .cmd = NL80211_CMD_STOP_AP,
ed1b6cc7
JB		 7234 .policy = nl80211_policy,
7235 .flags = GENL_ADMIN_PERM,
8860020e 7236 .doit = nl80211_stop_ap,
2b5f8b0b 7237 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7238 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 7239 },
5727ef1b
JB		 7240 {
7241 .cmd = NL80211_CMD_GET_STATION,
7242 .doit = nl80211_get_station,
2ec600d6 7243 .dumpit = nl80211_dump_station,
5727ef1b 7244 .policy = nl80211_policy,
4c476991
JB		 7245 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7246 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 7247 },
7248 {
7249 .cmd = NL80211_CMD_SET_STATION,
7250 .doit = nl80211_set_station,
7251 .policy = nl80211_policy,
7252 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7253 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7254 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 7255 },
7256 {
7257 .cmd = NL80211_CMD_NEW_STATION,
7258 .doit = nl80211_new_station,
7259 .policy = nl80211_policy,
7260 .flags = GENL_ADMIN_PERM,
41265714 7261 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7262 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 7263 },
7264 {
7265 .cmd = NL80211_CMD_DEL_STATION,
7266 .doit = nl80211_del_station,
7267 .policy = nl80211_policy,
2ec600d6 7268 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7269 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7270 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7271 },
7272 {
7273 .cmd = NL80211_CMD_GET_MPATH,
7274 .doit = nl80211_get_mpath,
7275 .dumpit = nl80211_dump_mpath,
7276 .policy = nl80211_policy,
7277 .flags = GENL_ADMIN_PERM,
41265714 7278 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7279 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7280 },
7281 {
7282 .cmd = NL80211_CMD_SET_MPATH,
7283 .doit = nl80211_set_mpath,
7284 .policy = nl80211_policy,
7285 .flags = GENL_ADMIN_PERM,
41265714 7286 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7287 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7288 },
7289 {
7290 .cmd = NL80211_CMD_NEW_MPATH,
7291 .doit = nl80211_new_mpath,
7292 .policy = nl80211_policy,
7293 .flags = GENL_ADMIN_PERM,
41265714 7294 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7295 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7296 },
7297 {
7298 .cmd = NL80211_CMD_DEL_MPATH,
7299 .doit = nl80211_del_mpath,
7300 .policy = nl80211_policy,
9f1ba906 7301 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7302 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7303 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 7304 },
7305 {
7306 .cmd = NL80211_CMD_SET_BSS,
7307 .doit = nl80211_set_bss,
7308 .policy = nl80211_policy,
b2e1b302 7309 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7310 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7311 NL80211_FLAG_NEED_RTNL,
b2e1b302 7312 },
f130347c
LR		 7313 {
7314 .cmd = NL80211_CMD_GET_REG,
7315 .doit = nl80211_get_reg,
7316 .policy = nl80211_policy,
7317 /* can be retrieved by unprivileged users */
7318 },
b2e1b302
LR		 7319 {
7320 .cmd = NL80211_CMD_SET_REG,
7321 .doit = nl80211_set_reg,
7322 .policy = nl80211_policy,
7323 .flags = GENL_ADMIN_PERM,
7324 },
7325 {
7326 .cmd = NL80211_CMD_REQ_SET_REG,
7327 .doit = nl80211_req_set_reg,
7328 .policy = nl80211_policy,
93da9cc1 7329 .flags = GENL_ADMIN_PERM,
7330 },
7331 {
24bdd9f4
JC		 7332 .cmd = NL80211_CMD_GET_MESH_CONFIG,
7333 .doit = nl80211_get_mesh_config,
93da9cc1 7334 .policy = nl80211_policy,
7335 /* can be retrieved by unprivileged users */
2b5f8b0b 7336 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7337 NL80211_FLAG_NEED_RTNL,
93da9cc1 7338 },
7339 {
24bdd9f4
JC		 7340 .cmd = NL80211_CMD_SET_MESH_CONFIG,
7341 .doit = nl80211_update_mesh_config,
93da9cc1 7342 .policy = nl80211_policy,
9aed3cc1 7343 .flags = GENL_ADMIN_PERM,
29cbe68c 7344 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7345 NL80211_FLAG_NEED_RTNL,
9aed3cc1 7346 },
2a519311
JB		 7347 {
7348 .cmd = NL80211_CMD_TRIGGER_SCAN,
7349 .doit = nl80211_trigger_scan,
7350 .policy = nl80211_policy,
7351 .flags = GENL_ADMIN_PERM,
fd014284 7352 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7353 NL80211_FLAG_NEED_RTNL,
2a519311
JB		 7354 },
7355 {
7356 .cmd = NL80211_CMD_GET_SCAN,
7357 .policy = nl80211_policy,
7358 .dumpit = nl80211_dump_scan,
7359 },
807f8a8c
LC		 7360 {
7361 .cmd = NL80211_CMD_START_SCHED_SCAN,
7362 .doit = nl80211_start_sched_scan,
7363 .policy = nl80211_policy,
7364 .flags = GENL_ADMIN_PERM,
7365 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7366 NL80211_FLAG_NEED_RTNL,
7367 },
7368 {
7369 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
7370 .doit = nl80211_stop_sched_scan,
7371 .policy = nl80211_policy,
7372 .flags = GENL_ADMIN_PERM,
7373 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7374 NL80211_FLAG_NEED_RTNL,
7375 },
636a5d36
JM		 7376 {
7377 .cmd = NL80211_CMD_AUTHENTICATE,
7378 .doit = nl80211_authenticate,
7379 .policy = nl80211_policy,
7380 .flags = GENL_ADMIN_PERM,
41265714 7381 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7382 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7383 },
7384 {
7385 .cmd = NL80211_CMD_ASSOCIATE,
7386 .doit = nl80211_associate,
7387 .policy = nl80211_policy,
7388 .flags = GENL_ADMIN_PERM,
41265714 7389 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7390 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7391 },
7392 {
7393 .cmd = NL80211_CMD_DEAUTHENTICATE,
7394 .doit = nl80211_deauthenticate,
7395 .policy = nl80211_policy,
7396 .flags = GENL_ADMIN_PERM,
41265714 7397 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7398 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7399 },
7400 {
7401 .cmd = NL80211_CMD_DISASSOCIATE,
7402 .doit = nl80211_disassociate,
7403 .policy = nl80211_policy,
7404 .flags = GENL_ADMIN_PERM,
41265714 7405 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7406 NL80211_FLAG_NEED_RTNL,
636a5d36 7407 },
04a773ad
JB		 7408 {
7409 .cmd = NL80211_CMD_JOIN_IBSS,
7410 .doit = nl80211_join_ibss,
7411 .policy = nl80211_policy,
7412 .flags = GENL_ADMIN_PERM,
41265714 7413 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7414 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 7415 },
7416 {
7417 .cmd = NL80211_CMD_LEAVE_IBSS,
7418 .doit = nl80211_leave_ibss,
7419 .policy = nl80211_policy,
7420 .flags = GENL_ADMIN_PERM,
41265714 7421 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7422 NL80211_FLAG_NEED_RTNL,
04a773ad 7423 },
aff89a9b
JB		 7424#ifdef CONFIG_NL80211_TESTMODE
7425 {
7426 .cmd = NL80211_CMD_TESTMODE,
7427 .doit = nl80211_testmode_do,
71063f0e 7428 .dumpit = nl80211_testmode_dump,
aff89a9b
JB		 7429 .policy = nl80211_policy,
7430 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7431 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7432 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 7433 },
7434#endif
b23aa676
SO		 7435 {
7436 .cmd = NL80211_CMD_CONNECT,
7437 .doit = nl80211_connect,
7438 .policy = nl80211_policy,
7439 .flags = GENL_ADMIN_PERM,
41265714 7440 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7441 NL80211_FLAG_NEED_RTNL,
b23aa676
SO		 7442 },
7443 {
7444 .cmd = NL80211_CMD_DISCONNECT,
7445 .doit = nl80211_disconnect,
7446 .policy = nl80211_policy,
7447 .flags = GENL_ADMIN_PERM,
41265714 7448 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7449 NL80211_FLAG_NEED_RTNL,
b23aa676 7450 },
463d0183
JB		 7451 {
7452 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
7453 .doit = nl80211_wiphy_netns,
7454 .policy = nl80211_policy,
7455 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7456 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7457 NL80211_FLAG_NEED_RTNL,
463d0183 7458 },
61fa713c
HS		 7459 {
7460 .cmd = NL80211_CMD_GET_SURVEY,
7461 .policy = nl80211_policy,
7462 .dumpit = nl80211_dump_survey,
7463 },
67fbb16b
SO		 7464 {
7465 .cmd = NL80211_CMD_SET_PMKSA,
7466 .doit = nl80211_setdel_pmksa,
7467 .policy = nl80211_policy,
7468 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7469 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7470 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 7471 },
7472 {
7473 .cmd = NL80211_CMD_DEL_PMKSA,
7474 .doit = nl80211_setdel_pmksa,
7475 .policy = nl80211_policy,
7476 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7477 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7478 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 7479 },
7480 {
7481 .cmd = NL80211_CMD_FLUSH_PMKSA,
7482 .doit = nl80211_flush_pmksa,
7483 .policy = nl80211_policy,
7484 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7485 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7486 NL80211_FLAG_NEED_RTNL,
67fbb16b 7487 },
9588bbd5
JM		 7488 {
7489 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
7490 .doit = nl80211_remain_on_channel,
7491 .policy = nl80211_policy,
7492 .flags = GENL_ADMIN_PERM,
71bbc994 7493 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7494 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 7495 },
7496 {
7497 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
7498 .doit = nl80211_cancel_remain_on_channel,
7499 .policy = nl80211_policy,
7500 .flags = GENL_ADMIN_PERM,
71bbc994 7501 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7502 NL80211_FLAG_NEED_RTNL,
9588bbd5 7503 },
13ae75b1
JM		 7504 {
7505 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
7506 .doit = nl80211_set_tx_bitrate_mask,
7507 .policy = nl80211_policy,
7508 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7509 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7510 NL80211_FLAG_NEED_RTNL,
13ae75b1 7511 },
026331c4 7512 {
2e161f78
JB		 7513 .cmd = NL80211_CMD_REGISTER_FRAME,
7514 .doit = nl80211_register_mgmt,
026331c4
JM		 7515 .policy = nl80211_policy,
7516 .flags = GENL_ADMIN_PERM,
71bbc994 7517 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 7518 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 7519 },
7520 {
2e161f78
JB		 7521 .cmd = NL80211_CMD_FRAME,
7522 .doit = nl80211_tx_mgmt,
026331c4 7523 .policy = nl80211_policy,
f7ca38df 7524 .flags = GENL_ADMIN_PERM,
71bbc994 7525 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
f7ca38df
JB		 7526 NL80211_FLAG_NEED_RTNL,
7527 },
7528 {
7529 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
7530 .doit = nl80211_tx_mgmt_cancel_wait,
7531 .policy = nl80211_policy,
026331c4 7532 .flags = GENL_ADMIN_PERM,
71bbc994 7533 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7534 NL80211_FLAG_NEED_RTNL,
026331c4 7535 },
ffb9eb3d
KV		 7536 {
7537 .cmd = NL80211_CMD_SET_POWER_SAVE,
7538 .doit = nl80211_set_power_save,
7539 .policy = nl80211_policy,
7540 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7541 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7542 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 7543 },
7544 {
7545 .cmd = NL80211_CMD_GET_POWER_SAVE,
7546 .doit = nl80211_get_power_save,
7547 .policy = nl80211_policy,
7548 /* can be retrieved by unprivileged users */
4c476991
JB		 7549 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7550 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 7551 },
d6dc1a38
JO		 7552 {
7553 .cmd = NL80211_CMD_SET_CQM,
7554 .doit = nl80211_set_cqm,
7555 .policy = nl80211_policy,
7556 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7557 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7558 NL80211_FLAG_NEED_RTNL,
d6dc1a38 7559 },
f444de05
JB		 7560 {
7561 .cmd = NL80211_CMD_SET_CHANNEL,
7562 .doit = nl80211_set_channel,
7563 .policy = nl80211_policy,
7564 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7565 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7566 NL80211_FLAG_NEED_RTNL,
f444de05 7567 },
e8347eba
BJ		 7568 {
7569 .cmd = NL80211_CMD_SET_WDS_PEER,
7570 .doit = nl80211_set_wds_peer,
7571 .policy = nl80211_policy,
7572 .flags = GENL_ADMIN_PERM,
43b19952
JB		 7573 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7574 NL80211_FLAG_NEED_RTNL,
e8347eba 7575 },
29cbe68c
JB		 7576 {
7577 .cmd = NL80211_CMD_JOIN_MESH,
7578 .doit = nl80211_join_mesh,
7579 .policy = nl80211_policy,
7580 .flags = GENL_ADMIN_PERM,
7581 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7582 NL80211_FLAG_NEED_RTNL,
7583 },
7584 {
7585 .cmd = NL80211_CMD_LEAVE_MESH,
7586 .doit = nl80211_leave_mesh,
7587 .policy = nl80211_policy,
7588 .flags = GENL_ADMIN_PERM,
7589 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7590 NL80211_FLAG_NEED_RTNL,
7591 },
dfb89c56 7592#ifdef CONFIG_PM
ff1b6e69
JB		 7593 {
7594 .cmd = NL80211_CMD_GET_WOWLAN,
7595 .doit = nl80211_get_wowlan,
7596 .policy = nl80211_policy,
7597 /* can be retrieved by unprivileged users */
7598 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7599 NL80211_FLAG_NEED_RTNL,
7600 },
7601 {
7602 .cmd = NL80211_CMD_SET_WOWLAN,
7603 .doit = nl80211_set_wowlan,
7604 .policy = nl80211_policy,
7605 .flags = GENL_ADMIN_PERM,
7606 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7607 NL80211_FLAG_NEED_RTNL,
7608 },
dfb89c56 7609#endif
e5497d76
JB		 7610 {
7611 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
7612 .doit = nl80211_set_rekey_data,
7613 .policy = nl80211_policy,
7614 .flags = GENL_ADMIN_PERM,
7615 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7616 NL80211_FLAG_NEED_RTNL,
7617 },
109086ce
AN		 7618 {
7619 .cmd = NL80211_CMD_TDLS_MGMT,
7620 .doit = nl80211_tdls_mgmt,
7621 .policy = nl80211_policy,
7622 .flags = GENL_ADMIN_PERM,
7623 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7624 NL80211_FLAG_NEED_RTNL,
7625 },
7626 {
7627 .cmd = NL80211_CMD_TDLS_OPER,
7628 .doit = nl80211_tdls_oper,
7629 .policy = nl80211_policy,
7630 .flags = GENL_ADMIN_PERM,
7631 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7632 NL80211_FLAG_NEED_RTNL,
7633 },
28946da7
JB		 7634 {
7635 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
7636 .doit = nl80211_register_unexpected_frame,
7637 .policy = nl80211_policy,
7638 .flags = GENL_ADMIN_PERM,
7639 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7640 NL80211_FLAG_NEED_RTNL,
7641 },
7f6cf311
JB		 7642 {
7643 .cmd = NL80211_CMD_PROBE_CLIENT,
7644 .doit = nl80211_probe_client,
7645 .policy = nl80211_policy,
7646 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7647 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7f6cf311
JB		 7648 NL80211_FLAG_NEED_RTNL,
7649 },
5e760230
JB		 7650 {
7651 .cmd = NL80211_CMD_REGISTER_BEACONS,
7652 .doit = nl80211_register_beacons,
7653 .policy = nl80211_policy,
7654 .flags = GENL_ADMIN_PERM,
7655 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7656 NL80211_FLAG_NEED_RTNL,
7657 },
1d9d9213
SW		 7658 {
7659 .cmd = NL80211_CMD_SET_NOACK_MAP,
7660 .doit = nl80211_set_noack_map,
7661 .policy = nl80211_policy,
7662 .flags = GENL_ADMIN_PERM,
7663 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7664 NL80211_FLAG_NEED_RTNL,
7665 },
98104fde
JB		 7666 {
7667 .cmd = NL80211_CMD_START_P2P_DEVICE,
7668 .doit = nl80211_start_p2p_device,
7669 .policy = nl80211_policy,
7670 .flags = GENL_ADMIN_PERM,
7671 .internal_flags = NL80211_FLAG_NEED_WDEV |
7672 NL80211_FLAG_NEED_RTNL,
7673 },
7674 {
7675 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
7676 .doit = nl80211_stop_p2p_device,
7677 .policy = nl80211_policy,
7678 .flags = GENL_ADMIN_PERM,
7679 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
7680 NL80211_FLAG_NEED_RTNL,
7681 },
f4e583c8
AQ		 7682 {
7683 .cmd = NL80211_CMD_SET_MCAST_RATE,
7684 .doit = nl80211_set_mcast_rate,
7685 .policy = nl80211_policy,
7686 .flags = GENL_ADMIN_PERM,
7687 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7688 NL80211_FLAG_NEED_RTNL,
7689 },
55682965 7690};
9588bbd5 7691
6039f6d2
JM		 7692static struct genl_multicast_group nl80211_mlme_mcgrp = {
7693 .name = "mlme",
7694};
55682965
JB		 7695
7696/* multicast groups */
7697static struct genl_multicast_group nl80211_config_mcgrp = {
7698 .name = "config",
7699};
2a519311
JB		 7700static struct genl_multicast_group nl80211_scan_mcgrp = {
7701 .name = "scan",
7702};
73d54c9e
LR		 7703static struct genl_multicast_group nl80211_regulatory_mcgrp = {
7704 .name = "regulatory",
7705};
55682965
JB		 7706
7707/* notification functions */
7708
7709void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
7710{
7711 struct sk_buff *msg;
7712
fd2120ca 7713 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 7714 if (!msg)
7715 return;
7716
7717 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
7718 nlmsg_free(msg);
7719 return;
7720 }
7721
463d0183
JB		 7722 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7723 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 7724}
7725
362a415d
JB		 7726static int nl80211_add_scan_req(struct sk_buff *msg,
7727 struct cfg80211_registered_device *rdev)
7728{
7729 struct cfg80211_scan_request *req = rdev->scan_req;
7730 struct nlattr *nest;
7731 int i;
7732
667503dd
JB		 7733 ASSERT_RDEV_LOCK(rdev);
7734
362a415d
JB		 7735 if (WARN_ON(!req))
7736 return 0;
7737
7738 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
7739 if (!nest)
7740 goto nla_put_failure;
9360ffd1
DM		 7741 for (i = 0; i < req->n_ssids; i++) {
7742 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
7743 goto nla_put_failure;
7744 }
362a415d
JB		 7745 nla_nest_end(msg, nest);
7746
7747 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
7748 if (!nest)
7749 goto nla_put_failure;
9360ffd1
DM		 7750 for (i = 0; i < req->n_channels; i++) {
7751 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
7752 goto nla_put_failure;
7753 }
362a415d
JB		 7754 nla_nest_end(msg, nest);
7755
9360ffd1
DM		 7756 if (req->ie &&
7757 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
7758 goto nla_put_failure;
362a415d 7759
ed473771
SL		 7760 if (req->flags)
7761 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags);
7762
362a415d
JB		 7763 return 0;
7764 nla_put_failure:
7765 return -ENOBUFS;
7766}
7767
a538e2d5
JB		 7768static int nl80211_send_scan_msg(struct sk_buff *msg,
7769 struct cfg80211_registered_device *rdev,
fd014284 7770 struct wireless_dev *wdev,
15e47304 7771 u32 portid, u32 seq, int flags,
a538e2d5 7772 u32 cmd)
2a519311
JB		 7773{
7774 void *hdr;
7775
15e47304 7776 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 7777 if (!hdr)
7778 return -1;
7779
9360ffd1 7780 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 7781 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
7782 wdev->netdev->ifindex)) ||
7783 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
9360ffd1 7784 goto nla_put_failure;
2a519311 7785
362a415d
JB		 7786 /* ignore errors and send incomplete event anyway */
7787 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 7788
7789 return genlmsg_end(msg, hdr);
7790
7791 nla_put_failure:
7792 genlmsg_cancel(msg, hdr);
7793 return -EMSGSIZE;
7794}
7795
807f8a8c
LC		 7796static int
7797nl80211_send_sched_scan_msg(struct sk_buff *msg,
7798 struct cfg80211_registered_device *rdev,
7799 struct net_device *netdev,
15e47304 7800 u32 portid, u32 seq, int flags, u32 cmd)
807f8a8c
LC		 7801{
7802 void *hdr;
7803
15e47304 7804 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
807f8a8c
LC		 7805 if (!hdr)
7806 return -1;
7807
9360ffd1
DM		 7808 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7809 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
7810 goto nla_put_failure;
807f8a8c
LC		 7811
7812 return genlmsg_end(msg, hdr);
7813
7814 nla_put_failure:
7815 genlmsg_cancel(msg, hdr);
7816 return -EMSGSIZE;
7817}
7818
a538e2d5 7819void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 7820 struct wireless_dev *wdev)
a538e2d5
JB		 7821{
7822 struct sk_buff *msg;
7823
58050fce 7824 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 7825 if (!msg)
7826 return;
7827
fd014284 7828 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 7829 NL80211_CMD_TRIGGER_SCAN) < 0) {
7830 nlmsg_free(msg);
7831 return;
7832 }
7833
463d0183
JB		 7834 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7835 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 7836}
7837
2a519311 7838void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
fd014284 7839 struct wireless_dev *wdev)
2a519311
JB		 7840{
7841 struct sk_buff *msg;
7842
fd2120ca 7843 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 7844 if (!msg)
7845 return;
7846
fd014284 7847 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5 7848 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 7849 nlmsg_free(msg);
7850 return;
7851 }
7852
463d0183
JB		 7853 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7854 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 7855}
7856
7857void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
fd014284 7858 struct wireless_dev *wdev)
2a519311
JB		 7859{
7860 struct sk_buff *msg;
7861
fd2120ca 7862 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 7863 if (!msg)
7864 return;
7865
fd014284 7866 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5 7867 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 7868 nlmsg_free(msg);
7869 return;
7870 }
7871
463d0183
JB		 7872 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7873 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 7874}
7875
807f8a8c
LC		 7876void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
7877 struct net_device *netdev)
7878{
7879 struct sk_buff *msg;
7880
7881 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7882 if (!msg)
7883 return;
7884
7885 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
7886 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
7887 nlmsg_free(msg);
7888 return;
7889 }
7890
7891 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7892 nl80211_scan_mcgrp.id, GFP_KERNEL);
7893}
7894
7895void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
7896 struct net_device *netdev, u32 cmd)
7897{
7898 struct sk_buff *msg;
7899
58050fce 7900 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 7901 if (!msg)
7902 return;
7903
7904 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
7905 nlmsg_free(msg);
7906 return;
7907 }
7908
7909 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7910 nl80211_scan_mcgrp.id, GFP_KERNEL);
7911}
7912
73d54c9e
LR		 7913/*
7914 * This can happen on global regulatory changes or device specific settings
7915 * based on custom world regulatory domains.
7916 */
7917void nl80211_send_reg_change_event(struct regulatory_request *request)
7918{
7919 struct sk_buff *msg;
7920 void *hdr;
7921
fd2120ca 7922 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 7923 if (!msg)
7924 return;
7925
7926 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
7927 if (!hdr) {
7928 nlmsg_free(msg);
7929 return;
7930 }
7931
7932 /* Userspace can always count this one always being set */
9360ffd1
DM		 7933 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
7934 goto nla_put_failure;
7935
7936 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
7937 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7938 NL80211_REGDOM_TYPE_WORLD))
7939 goto nla_put_failure;
7940 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
7941 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7942 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
7943 goto nla_put_failure;
7944 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
7945 request->intersect) {
7946 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7947 NL80211_REGDOM_TYPE_INTERSECTION))
7948 goto nla_put_failure;
7949 } else {
7950 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7951 NL80211_REGDOM_TYPE_COUNTRY) ||
7952 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
7953 request->alpha2))
7954 goto nla_put_failure;
7955 }
7956
7957 if (wiphy_idx_valid(request->wiphy_idx) &&
7958 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
7959 goto nla_put_failure;
73d54c9e 7960
3b7b72ee 7961 genlmsg_end(msg, hdr);
73d54c9e 7962
bc43b28c 7963 rcu_read_lock();
463d0183 7964 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 7965 GFP_ATOMIC);
7966 rcu_read_unlock();
73d54c9e
LR		 7967
7968 return;
7969
7970nla_put_failure:
7971 genlmsg_cancel(msg, hdr);
7972 nlmsg_free(msg);
7973}
7974
6039f6d2
JM		 7975static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
7976 struct net_device *netdev,
7977 const u8 *buf, size_t len,
e6d6e342 7978 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 7979{
7980 struct sk_buff *msg;
7981 void *hdr;
7982
e6d6e342 7983 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 7984 if (!msg)
7985 return;
7986
7987 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7988 if (!hdr) {
7989 nlmsg_free(msg);
7990 return;
7991 }
7992
9360ffd1
DM		 7993 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7994 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7995 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
7996 goto nla_put_failure;
6039f6d2 7997
3b7b72ee 7998 genlmsg_end(msg, hdr);
6039f6d2 7999
463d0183
JB		 8000 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8001 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 8002 return;
8003
8004 nla_put_failure:
8005 genlmsg_cancel(msg, hdr);
8006 nlmsg_free(msg);
8007}
8008
8009void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 8010 struct net_device *netdev, const u8 *buf,
8011 size_t len, gfp_t gfp)
6039f6d2
JM		 8012{
8013 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 8014 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 8015}
8016
8017void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
8018 struct net_device *netdev, const u8 *buf,
e6d6e342 8019 size_t len, gfp_t gfp)
6039f6d2 8020{
e6d6e342
JB		 8021 nl80211_send_mlme_event(rdev, netdev, buf, len,
8022 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 8023}
8024
53b46b84 8025void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 8026 struct net_device *netdev, const u8 *buf,
8027 size_t len, gfp_t gfp)
6039f6d2
JM		 8028{
8029 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 8030 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 8031}
8032
53b46b84
JM		 8033void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
8034 struct net_device *netdev, const u8 *buf,
e6d6e342 8035 size_t len, gfp_t gfp)
6039f6d2
JM		 8036{
8037 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 8038 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 8039}
8040
cf4e594e
JM		 8041void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
8042 struct net_device *netdev, const u8 *buf,
8043 size_t len, gfp_t gfp)
8044{
8045 nl80211_send_mlme_event(rdev, netdev, buf, len,
8046 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
8047}
8048
8049void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
8050 struct net_device *netdev, const u8 *buf,
8051 size_t len, gfp_t gfp)
8052{
8053 nl80211_send_mlme_event(rdev, netdev, buf, len,
8054 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
8055}
8056
1b06bb40
LR		 8057static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
8058 struct net_device *netdev, int cmd,
e6d6e342 8059 const u8 *addr, gfp_t gfp)
1965c853
JM		 8060{
8061 struct sk_buff *msg;
8062 void *hdr;
8063
e6d6e342 8064 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 8065 if (!msg)
8066 return;
8067
8068 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
8069 if (!hdr) {
8070 nlmsg_free(msg);
8071 return;
8072 }
8073
9360ffd1
DM		 8074 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8075 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8076 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
8077 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
8078 goto nla_put_failure;
1965c853 8079
3b7b72ee 8080 genlmsg_end(msg, hdr);
1965c853 8081
463d0183
JB		 8082 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8083 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 8084 return;
8085
8086 nla_put_failure:
8087 genlmsg_cancel(msg, hdr);
8088 nlmsg_free(msg);
8089}
8090
8091void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 8092 struct net_device *netdev, const u8 *addr,
8093 gfp_t gfp)
1965c853
JM		 8094{
8095 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 8096 addr, gfp);
1965c853
JM		 8097}
8098
8099void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 8100 struct net_device *netdev, const u8 *addr,
8101 gfp_t gfp)
1965c853 8102{
e6d6e342
JB		 8103 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
8104 addr, gfp);
1965c853
JM		 8105}
8106
b23aa676
SO		 8107void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
8108 struct net_device *netdev, const u8 *bssid,
8109 const u8 *req_ie, size_t req_ie_len,
8110 const u8 *resp_ie, size_t resp_ie_len,
8111 u16 status, gfp_t gfp)
8112{
8113 struct sk_buff *msg;
8114 void *hdr;
8115
58050fce 8116 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
b23aa676
SO		 8117 if (!msg)
8118 return;
8119
8120 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
8121 if (!hdr) {
8122 nlmsg_free(msg);
8123 return;
8124 }
8125
9360ffd1
DM		 8126 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8127 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8128 (bssid && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid)) ||
8129 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE, status) ||
8130 (req_ie &&
8131 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
8132 (resp_ie &&
8133 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
8134 goto nla_put_failure;
b23aa676 8135
3b7b72ee 8136 genlmsg_end(msg, hdr);
b23aa676 8137
463d0183
JB		 8138 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8139 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 8140 return;
8141
8142 nla_put_failure:
8143 genlmsg_cancel(msg, hdr);
8144 nlmsg_free(msg);
8145
8146}
8147
8148void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
8149 struct net_device *netdev, const u8 *bssid,
8150 const u8 *req_ie, size_t req_ie_len,
8151 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
8152{
8153 struct sk_buff *msg;
8154 void *hdr;
8155
58050fce 8156 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
b23aa676
SO		 8157 if (!msg)
8158 return;
8159
8160 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
8161 if (!hdr) {
8162 nlmsg_free(msg);
8163 return;
8164 }
8165
9360ffd1
DM		 8166 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8167 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8168 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
8169 (req_ie &&
8170 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
8171 (resp_ie &&
8172 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
8173 goto nla_put_failure;
b23aa676 8174
3b7b72ee 8175 genlmsg_end(msg, hdr);
b23aa676 8176
463d0183
JB		 8177 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8178 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 8179 return;
8180
8181 nla_put_failure:
8182 genlmsg_cancel(msg, hdr);
8183 nlmsg_free(msg);
8184
8185}
8186
8187void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
8188 struct net_device *netdev, u16 reason,
667503dd 8189 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 8190{
8191 struct sk_buff *msg;
8192 void *hdr;
8193
58050fce 8194 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
b23aa676
SO		 8195 if (!msg)
8196 return;
8197
8198 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
8199 if (!hdr) {
8200 nlmsg_free(msg);
8201 return;
8202 }
8203
9360ffd1
DM		 8204 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8205 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8206 (from_ap && reason &&
8207 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
8208 (from_ap &&
8209 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
8210 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
8211 goto nla_put_failure;
b23aa676 8212
3b7b72ee 8213 genlmsg_end(msg, hdr);
b23aa676 8214
463d0183
JB		 8215 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8216 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 8217 return;
8218
8219 nla_put_failure:
8220 genlmsg_cancel(msg, hdr);
8221 nlmsg_free(msg);
8222
8223}
8224
04a773ad
JB		 8225void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
8226 struct net_device *netdev, const u8 *bssid,
8227 gfp_t gfp)
8228{
8229 struct sk_buff *msg;
8230 void *hdr;
8231
fd2120ca 8232 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 8233 if (!msg)
8234 return;
8235
8236 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
8237 if (!hdr) {
8238 nlmsg_free(msg);
8239 return;
8240 }
8241
9360ffd1
DM		 8242 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8243 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8244 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
8245 goto nla_put_failure;
04a773ad 8246
3b7b72ee 8247 genlmsg_end(msg, hdr);
04a773ad 8248
463d0183
JB		 8249 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8250 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 8251 return;
8252
8253 nla_put_failure:
8254 genlmsg_cancel(msg, hdr);
8255 nlmsg_free(msg);
8256}
8257
c93b5e71
JC		 8258void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
8259 struct net_device *netdev,
8260 const u8 *macaddr, const u8* ie, u8 ie_len,
8261 gfp_t gfp)
8262{
8263 struct sk_buff *msg;
8264 void *hdr;
8265
8266 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8267 if (!msg)
8268 return;
8269
8270 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
8271 if (!hdr) {
8272 nlmsg_free(msg);
8273 return;
8274 }
8275
9360ffd1
DM		 8276 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8277 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8278 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr) ||
8279 (ie_len && ie &&
8280 nla_put(msg, NL80211_ATTR_IE, ie_len , ie)))
8281 goto nla_put_failure;
c93b5e71 8282
3b7b72ee 8283 genlmsg_end(msg, hdr);
c93b5e71
JC		 8284
8285 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8286 nl80211_mlme_mcgrp.id, gfp);
8287 return;
8288
8289 nla_put_failure:
8290 genlmsg_cancel(msg, hdr);
8291 nlmsg_free(msg);
8292}
8293
a3b8b056
JM		 8294void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
8295 struct net_device *netdev, const u8 *addr,
8296 enum nl80211_key_type key_type, int key_id,
e6d6e342 8297 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 8298{
8299 struct sk_buff *msg;
8300 void *hdr;
8301
e6d6e342 8302 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 8303 if (!msg)
8304 return;
8305
8306 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
8307 if (!hdr) {
8308 nlmsg_free(msg);
8309 return;
8310 }
8311
9360ffd1
DM		 8312 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8313 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8314 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
8315 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
8316 (key_id != -1 &&
8317 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
8318 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
8319 goto nla_put_failure;
a3b8b056 8320
3b7b72ee 8321 genlmsg_end(msg, hdr);
a3b8b056 8322
463d0183
JB		 8323 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8324 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 8325 return;
8326
8327 nla_put_failure:
8328 genlmsg_cancel(msg, hdr);
8329 nlmsg_free(msg);
8330}
8331
6bad8766
LR		 8332void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
8333 struct ieee80211_channel *channel_before,
8334 struct ieee80211_channel *channel_after)
8335{
8336 struct sk_buff *msg;
8337 void *hdr;
8338 struct nlattr *nl_freq;
8339
fd2120ca 8340 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 8341 if (!msg)
8342 return;
8343
8344 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
8345 if (!hdr) {
8346 nlmsg_free(msg);
8347 return;
8348 }
8349
8350 /*
8351 * Since we are applying the beacon hint to a wiphy we know its
8352 * wiphy_idx is valid
8353 */
9360ffd1
DM		 8354 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
8355 goto nla_put_failure;
6bad8766
LR		 8356
8357 /* Before */
8358 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
8359 if (!nl_freq)
8360 goto nla_put_failure;
8361 if (nl80211_msg_put_channel(msg, channel_before))
8362 goto nla_put_failure;
8363 nla_nest_end(msg, nl_freq);
8364
8365 /* After */
8366 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
8367 if (!nl_freq)
8368 goto nla_put_failure;
8369 if (nl80211_msg_put_channel(msg, channel_after))
8370 goto nla_put_failure;
8371 nla_nest_end(msg, nl_freq);
8372
3b7b72ee 8373 genlmsg_end(msg, hdr);
6bad8766 8374
463d0183
JB		 8375 rcu_read_lock();
8376 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
8377 GFP_ATOMIC);
8378 rcu_read_unlock();
6bad8766
LR		 8379
8380 return;
8381
8382nla_put_failure:
8383 genlmsg_cancel(msg, hdr);
8384 nlmsg_free(msg);
8385}
8386
9588bbd5
JM		 8387static void nl80211_send_remain_on_chan_event(
8388 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 8389 struct wireless_dev *wdev, u64 cookie,
9588bbd5
JM		 8390 struct ieee80211_channel *chan,
8391 enum nl80211_channel_type channel_type,
8392 unsigned int duration, gfp_t gfp)
8393{
8394 struct sk_buff *msg;
8395 void *hdr;
8396
8397 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8398 if (!msg)
8399 return;
8400
8401 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
8402 if (!hdr) {
8403 nlmsg_free(msg);
8404 return;
8405 }
8406
9360ffd1 8407 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8408 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8409 wdev->netdev->ifindex)) ||
00f53350 8410 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
9360ffd1
DM		 8411 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
8412 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, channel_type) ||
8413 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
8414 goto nla_put_failure;
9588bbd5 8415
9360ffd1
DM		 8416 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
8417 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
8418 goto nla_put_failure;
9588bbd5 8419
3b7b72ee 8420 genlmsg_end(msg, hdr);
9588bbd5
JM		 8421
8422 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8423 nl80211_mlme_mcgrp.id, gfp);
8424 return;
8425
8426 nla_put_failure:
8427 genlmsg_cancel(msg, hdr);
8428 nlmsg_free(msg);
8429}
8430
8431void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
71bbc994 8432 struct wireless_dev *wdev, u64 cookie,
9588bbd5
JM		 8433 struct ieee80211_channel *chan,
8434 enum nl80211_channel_type channel_type,
8435 unsigned int duration, gfp_t gfp)
8436{
8437 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 8438 rdev, wdev, cookie, chan,
9588bbd5
JM		 8439 channel_type, duration, gfp);
8440}
8441
8442void nl80211_send_remain_on_channel_cancel(
71bbc994
JB		 8443 struct cfg80211_registered_device *rdev,
8444 struct wireless_dev *wdev,
9588bbd5
JM		 8445 u64 cookie, struct ieee80211_channel *chan,
8446 enum nl80211_channel_type channel_type, gfp_t gfp)
8447{
8448 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
71bbc994 8449 rdev, wdev, cookie, chan,
9588bbd5
JM		 8450 channel_type, 0, gfp);
8451}
8452
98b62183
JB		 8453void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
8454 struct net_device *dev, const u8 *mac_addr,
8455 struct station_info *sinfo, gfp_t gfp)
8456{
8457 struct sk_buff *msg;
8458
58050fce 8459 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 8460 if (!msg)
8461 return;
8462
66266b3a
JL		 8463 if (nl80211_send_station(msg, 0, 0, 0,
8464 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 8465 nlmsg_free(msg);
8466 return;
8467 }
8468
8469 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8470 nl80211_mlme_mcgrp.id, gfp);
8471}
8472
ec15e68b
JM		 8473void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
8474 struct net_device *dev, const u8 *mac_addr,
8475 gfp_t gfp)
8476{
8477 struct sk_buff *msg;
8478 void *hdr;
8479
58050fce 8480 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
ec15e68b
JM		 8481 if (!msg)
8482 return;
8483
8484 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
8485 if (!hdr) {
8486 nlmsg_free(msg);
8487 return;
8488 }
8489
9360ffd1
DM		 8490 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8491 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
8492 goto nla_put_failure;
ec15e68b 8493
3b7b72ee 8494 genlmsg_end(msg, hdr);
ec15e68b
JM		 8495
8496 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8497 nl80211_mlme_mcgrp.id, gfp);
8498 return;
8499
8500 nla_put_failure:
8501 genlmsg_cancel(msg, hdr);
8502 nlmsg_free(msg);
8503}
8504
ed44a951
PP		 8505void nl80211_send_conn_failed_event(struct cfg80211_registered_device *rdev,
8506 struct net_device *dev, const u8 *mac_addr,
8507 enum nl80211_connect_failed_reason reason,
8508 gfp_t gfp)
8509{
8510 struct sk_buff *msg;
8511 void *hdr;
8512
8513 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8514 if (!msg)
8515 return;
8516
8517 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
8518 if (!hdr) {
8519 nlmsg_free(msg);
8520 return;
8521 }
8522
8523 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8524 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
8525 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
8526 goto nla_put_failure;
8527
8528 genlmsg_end(msg, hdr);
8529
8530 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8531 nl80211_mlme_mcgrp.id, gfp);
8532 return;
8533
8534 nla_put_failure:
8535 genlmsg_cancel(msg, hdr);
8536 nlmsg_free(msg);
8537}
8538
b92ab5d8
JB		 8539static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
8540 const u8 *addr, gfp_t gfp)
28946da7
JB		 8541{
8542 struct wireless_dev *wdev = dev->ieee80211_ptr;
8543 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
8544 struct sk_buff *msg;
8545 void *hdr;
8546 int err;
15e47304 8547 u32 nlportid = ACCESS_ONCE(wdev->ap_unexpected_nlportid);
28946da7 8548
15e47304 8549 if (!nlportid)
28946da7
JB		 8550 return false;
8551
8552 msg = nlmsg_new(100, gfp);
8553 if (!msg)
8554 return true;
8555
b92ab5d8 8556 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 8557 if (!hdr) {
8558 nlmsg_free(msg);
8559 return true;
8560 }
8561
9360ffd1
DM		 8562 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8563 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8564 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
8565 goto nla_put_failure;
28946da7
JB		 8566
8567 err = genlmsg_end(msg, hdr);
8568 if (err < 0) {
8569 nlmsg_free(msg);
8570 return true;
8571 }
8572
15e47304 8573 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 8574 return true;
8575
8576 nla_put_failure:
8577 genlmsg_cancel(msg, hdr);
8578 nlmsg_free(msg);
8579 return true;
8580}
8581
b92ab5d8
JB		 8582bool nl80211_unexpected_frame(struct net_device *dev, const u8 *addr, gfp_t gfp)
8583{
8584 return __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
8585 addr, gfp);
8586}
8587
8588bool nl80211_unexpected_4addr_frame(struct net_device *dev,
8589 const u8 *addr, gfp_t gfp)
8590{
8591 return __nl80211_unexpected_frame(dev,
8592 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
8593 addr, gfp);
8594}
8595
2e161f78 8596int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 8597 struct wireless_dev *wdev, u32 nlportid,
804483e9
JB		 8598 int freq, int sig_dbm,
8599 const u8 *buf, size_t len, gfp_t gfp)
026331c4 8600{
71bbc994 8601 struct net_device *netdev = wdev->netdev;
026331c4
JM		 8602 struct sk_buff *msg;
8603 void *hdr;
026331c4
JM		 8604
8605 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8606 if (!msg)
8607 return -ENOMEM;
8608
2e161f78 8609 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 8610 if (!hdr) {
8611 nlmsg_free(msg);
8612 return -ENOMEM;
8613 }
8614
9360ffd1 8615 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8616 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8617 netdev->ifindex)) ||
9360ffd1
DM		 8618 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
8619 (sig_dbm &&
8620 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
8621 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
8622 goto nla_put_failure;
026331c4 8623
3b7b72ee 8624 genlmsg_end(msg, hdr);
026331c4 8625
15e47304 8626 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 8627
8628 nla_put_failure:
8629 genlmsg_cancel(msg, hdr);
8630 nlmsg_free(msg);
8631 return -ENOBUFS;
8632}
8633
2e161f78 8634void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
71bbc994 8635 struct wireless_dev *wdev, u64 cookie,
2e161f78
JB		 8636 const u8 *buf, size_t len, bool ack,
8637 gfp_t gfp)
026331c4 8638{
71bbc994 8639 struct net_device *netdev = wdev->netdev;
026331c4
JM		 8640 struct sk_buff *msg;
8641 void *hdr;
8642
8643 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8644 if (!msg)
8645 return;
8646
2e161f78 8647 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 8648 if (!hdr) {
8649 nlmsg_free(msg);
8650 return;
8651 }
8652
9360ffd1 8653 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8654 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8655 netdev->ifindex)) ||
9360ffd1
DM		 8656 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
8657 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
8658 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
8659 goto nla_put_failure;
026331c4 8660
3b7b72ee 8661 genlmsg_end(msg, hdr);
026331c4
JM		 8662
8663 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
8664 return;
8665
8666 nla_put_failure:
8667 genlmsg_cancel(msg, hdr);
8668 nlmsg_free(msg);
8669}
8670
d6dc1a38
JO		 8671void
8672nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
8673 struct net_device *netdev,
8674 enum nl80211_cqm_rssi_threshold_event rssi_event,
8675 gfp_t gfp)
8676{
8677 struct sk_buff *msg;
8678 struct nlattr *pinfoattr;
8679 void *hdr;
8680
58050fce 8681 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
d6dc1a38
JO		 8682 if (!msg)
8683 return;
8684
8685 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8686 if (!hdr) {
8687 nlmsg_free(msg);
8688 return;
8689 }
8690
9360ffd1
DM		 8691 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8692 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8693 goto nla_put_failure;
d6dc1a38
JO		 8694
8695 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8696 if (!pinfoattr)
8697 goto nla_put_failure;
8698
9360ffd1
DM		 8699 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
8700 rssi_event))
8701 goto nla_put_failure;
d6dc1a38
JO		 8702
8703 nla_nest_end(msg, pinfoattr);
8704
3b7b72ee 8705 genlmsg_end(msg, hdr);
d6dc1a38
JO		 8706
8707 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8708 nl80211_mlme_mcgrp.id, gfp);
8709 return;
8710
8711 nla_put_failure:
8712 genlmsg_cancel(msg, hdr);
8713 nlmsg_free(msg);
8714}
8715
e5497d76
JB		 8716void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
8717 struct net_device *netdev, const u8 *bssid,
8718 const u8 *replay_ctr, gfp_t gfp)
8719{
8720 struct sk_buff *msg;
8721 struct nlattr *rekey_attr;
8722 void *hdr;
8723
58050fce 8724 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 8725 if (!msg)
8726 return;
8727
8728 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
8729 if (!hdr) {
8730 nlmsg_free(msg);
8731 return;
8732 }
8733
9360ffd1
DM		 8734 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8735 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8736 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
8737 goto nla_put_failure;
e5497d76
JB		 8738
8739 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
8740 if (!rekey_attr)
8741 goto nla_put_failure;
8742
9360ffd1
DM		 8743 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
8744 NL80211_REPLAY_CTR_LEN, replay_ctr))
8745 goto nla_put_failure;
e5497d76
JB		 8746
8747 nla_nest_end(msg, rekey_attr);
8748
3b7b72ee 8749 genlmsg_end(msg, hdr);
e5497d76
JB		 8750
8751 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8752 nl80211_mlme_mcgrp.id, gfp);
8753 return;
8754
8755 nla_put_failure:
8756 genlmsg_cancel(msg, hdr);
8757 nlmsg_free(msg);
8758}
8759
c9df56b4
JM		 8760void nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
8761 struct net_device *netdev, int index,
8762 const u8 *bssid, bool preauth, gfp_t gfp)
8763{
8764 struct sk_buff *msg;
8765 struct nlattr *attr;
8766 void *hdr;
8767
58050fce 8768 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 8769 if (!msg)
8770 return;
8771
8772 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
8773 if (!hdr) {
8774 nlmsg_free(msg);
8775 return;
8776 }
8777
9360ffd1
DM		 8778 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8779 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8780 goto nla_put_failure;
c9df56b4
JM		 8781
8782 attr = nla_nest_start(msg, NL80211_ATTR_PMKSA_CANDIDATE);
8783 if (!attr)
8784 goto nla_put_failure;
8785
9360ffd1
DM		 8786 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
8787 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
8788 (preauth &&
8789 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
8790 goto nla_put_failure;
c9df56b4
JM		 8791
8792 nla_nest_end(msg, attr);
8793
3b7b72ee 8794 genlmsg_end(msg, hdr);
c9df56b4
JM		 8795
8796 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8797 nl80211_mlme_mcgrp.id, gfp);
8798 return;
8799
8800 nla_put_failure:
8801 genlmsg_cancel(msg, hdr);
8802 nlmsg_free(msg);
8803}
8804
5314526b
TP		 8805void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
8806 struct net_device *netdev, int freq,
8807 enum nl80211_channel_type type, gfp_t gfp)
8808{
8809 struct sk_buff *msg;
8810 void *hdr;
8811
58050fce 8812 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 8813 if (!msg)
8814 return;
8815
8816 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CH_SWITCH_NOTIFY);
8817 if (!hdr) {
8818 nlmsg_free(msg);
8819 return;
8820 }
8821
7eab0f64
JL		 8822 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8823 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
8824 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, type))
8825 goto nla_put_failure;
5314526b
TP		 8826
8827 genlmsg_end(msg, hdr);
8828
8829 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8830 nl80211_mlme_mcgrp.id, gfp);
8831 return;
8832
8833 nla_put_failure:
8834 genlmsg_cancel(msg, hdr);
8835 nlmsg_free(msg);
8836}
8837
84f10708
TP		 8838void
8839nl80211_send_cqm_txe_notify(struct cfg80211_registered_device *rdev,
8840 struct net_device *netdev, const u8 *peer,
8841 u32 num_packets, u32 rate, u32 intvl, gfp_t gfp)
8842{
8843 struct sk_buff *msg;
8844 struct nlattr *pinfoattr;
8845 void *hdr;
8846
8847 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8848 if (!msg)
8849 return;
8850
8851 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8852 if (!hdr) {
8853 nlmsg_free(msg);
8854 return;
8855 }
8856
8857 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8858 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8859 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
8860 goto nla_put_failure;
8861
8862 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8863 if (!pinfoattr)
8864 goto nla_put_failure;
8865
8866 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
8867 goto nla_put_failure;
8868
8869 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
8870 goto nla_put_failure;
8871
8872 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
8873 goto nla_put_failure;
8874
8875 nla_nest_end(msg, pinfoattr);
8876
8877 genlmsg_end(msg, hdr);
8878
8879 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8880 nl80211_mlme_mcgrp.id, gfp);
8881 return;
8882
8883 nla_put_failure:
8884 genlmsg_cancel(msg, hdr);
8885 nlmsg_free(msg);
8886}
8887
c063dbf5
JB		 8888void
8889nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
8890 struct net_device *netdev, const u8 *peer,
8891 u32 num_packets, gfp_t gfp)
8892{
8893 struct sk_buff *msg;
8894 struct nlattr *pinfoattr;
8895 void *hdr;
8896
58050fce 8897 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c063dbf5
JB		 8898 if (!msg)
8899 return;
8900
8901 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8902 if (!hdr) {
8903 nlmsg_free(msg);
8904 return;
8905 }
8906
9360ffd1
DM		 8907 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8908 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8909 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
8910 goto nla_put_failure;
c063dbf5
JB		 8911
8912 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8913 if (!pinfoattr)
8914 goto nla_put_failure;
8915
9360ffd1
DM		 8916 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
8917 goto nla_put_failure;
c063dbf5
JB		 8918
8919 nla_nest_end(msg, pinfoattr);
8920
3b7b72ee 8921 genlmsg_end(msg, hdr);
c063dbf5
JB		 8922
8923 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8924 nl80211_mlme_mcgrp.id, gfp);
8925 return;
8926
8927 nla_put_failure:
8928 genlmsg_cancel(msg, hdr);
8929 nlmsg_free(msg);
8930}
8931
7f6cf311
JB		 8932void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
8933 u64 cookie, bool acked, gfp_t gfp)
8934{
8935 struct wireless_dev *wdev = dev->ieee80211_ptr;
8936 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
8937 struct sk_buff *msg;
8938 void *hdr;
8939 int err;
8940
4ee3e063
BL		 8941 trace_cfg80211_probe_status(dev, addr, cookie, acked);
8942
58050fce 8943 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 8944
7f6cf311
JB		 8945 if (!msg)
8946 return;
8947
8948 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
8949 if (!hdr) {
8950 nlmsg_free(msg);
8951 return;
8952 }
8953
9360ffd1
DM		 8954 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8955 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8956 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
8957 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
8958 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)))
8959 goto nla_put_failure;
7f6cf311
JB		 8960
8961 err = genlmsg_end(msg, hdr);
8962 if (err < 0) {
8963 nlmsg_free(msg);
8964 return;
8965 }
8966
8967 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8968 nl80211_mlme_mcgrp.id, gfp);
8969 return;
8970
8971 nla_put_failure:
8972 genlmsg_cancel(msg, hdr);
8973 nlmsg_free(msg);
8974}
8975EXPORT_SYMBOL(cfg80211_probe_status);
8976
5e760230
JB		 8977void cfg80211_report_obss_beacon(struct wiphy *wiphy,
8978 const u8 *frame, size_t len,
37c73b5f 8979 int freq, int sig_dbm)
5e760230
JB		 8980{
8981 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
8982 struct sk_buff *msg;
8983 void *hdr;
37c73b5f 8984 struct cfg80211_beacon_registration *reg;
5e760230 8985
4ee3e063
BL		 8986 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
8987
37c73b5f
BG		 8988 spin_lock_bh(&rdev->beacon_registrations_lock);
8989 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
8990 msg = nlmsg_new(len + 100, GFP_ATOMIC);
8991 if (!msg) {
8992 spin_unlock_bh(&rdev->beacon_registrations_lock);
8993 return;
8994 }
5e760230 8995
37c73b5f
BG		 8996 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
8997 if (!hdr)
8998 goto nla_put_failure;
5e760230 8999
37c73b5f
BG		 9000 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9001 (freq &&
9002 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq)) ||
9003 (sig_dbm &&
9004 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
9005 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
9006 goto nla_put_failure;
5e760230 9007
37c73b5f 9008 genlmsg_end(msg, hdr);
5e760230 9009
37c73b5f
BG		 9010 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
9011 }
9012 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 9013 return;
9014
9015 nla_put_failure:
37c73b5f
BG		 9016 spin_unlock_bh(&rdev->beacon_registrations_lock);
9017 if (hdr)
9018 genlmsg_cancel(msg, hdr);
5e760230
JB		 9019 nlmsg_free(msg);
9020}
9021EXPORT_SYMBOL(cfg80211_report_obss_beacon);
9022
026331c4
JM		 9023static int nl80211_netlink_notify(struct notifier_block * nb,
9024 unsigned long state,
9025 void *_notify)
9026{
9027 struct netlink_notify *notify = _notify;
9028 struct cfg80211_registered_device *rdev;
9029 struct wireless_dev *wdev;
37c73b5f 9030 struct cfg80211_beacon_registration *reg, *tmp;
026331c4
JM		 9031
9032 if (state != NETLINK_URELEASE)
9033 return NOTIFY_DONE;
9034
9035 rcu_read_lock();
9036
5e760230 9037 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
89a54e48 9038 list_for_each_entry_rcu(wdev, &rdev->wdev_list, list)
15e47304 9039 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f
BG		 9040
9041 spin_lock_bh(&rdev->beacon_registrations_lock);
9042 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
9043 list) {
9044 if (reg->nlportid == notify->portid) {
9045 list_del(&reg->list);
9046 kfree(reg);
9047 break;
9048 }
9049 }
9050 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 9051 }
026331c4
JM		 9052
9053 rcu_read_unlock();
9054
9055 return NOTIFY_DONE;
9056}
9057
9058static struct notifier_block nl80211_netlink_notifier = {
9059 .notifier_call = nl80211_netlink_notify,
9060};
9061
55682965
JB		 9062/* initialisation/exit functions */
9063
9064int nl80211_init(void)
9065{
0d63cbb5 9066 int err;
55682965 9067
0d63cbb5
MM		 9068 err = genl_register_family_with_ops(&nl80211_fam,
9069 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 9070 if (err)
9071 return err;
9072
55682965
JB		 9073 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
9074 if (err)
9075 goto err_out;
9076
2a519311
JB		 9077 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
9078 if (err)
9079 goto err_out;
9080
73d54c9e
LR		 9081 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
9082 if (err)
9083 goto err_out;
9084
6039f6d2
JM		 9085 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
9086 if (err)
9087 goto err_out;
9088
aff89a9b
JB		 9089#ifdef CONFIG_NL80211_TESTMODE
9090 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
9091 if (err)
9092 goto err_out;
9093#endif
9094
026331c4
JM		 9095 err = netlink_register_notifier(&nl80211_netlink_notifier);
9096 if (err)
9097 goto err_out;
9098
55682965
JB		 9099 return 0;
9100 err_out:
9101 genl_unregister_family(&nl80211_fam);
9102 return err;
9103}
9104
9105void nl80211_exit(void)
9106{
026331c4 9107 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 9108 genl_unregister_family(&nl80211_fam);
9109}
Linux 6.x block layer and io_uring tree(s)