projects / linux-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Merge tag 'spi-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi
[linux-block.git] / net / wireless / nl80211.c
CommitLineData
457c8996 1// SPDX-License-Identifier: GPL-2.0-only
55682965
JB		 2/*
3 * This is the new netlink-based wireless configuration interface.
4 *
026331c4 5 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
2740f0cf 6 * Copyright 2013-2014 Intel Mobile Communications GmbH
66cd794e 7 * Copyright 2015-2017 Intel Deutschland GmbH
abaf94ec 8 * Copyright (C) 2018-2021 Intel Corporation
55682965
JB		 9 */
10
11#include <linux/if.h>
12#include <linux/module.h>
13#include <linux/err.h>
5a0e3ad6 14#include <linux/slab.h>
55682965
JB		 15#include <linux/list.h>
16#include <linux/if_ether.h>
17#include <linux/ieee80211.h>
18#include <linux/nl80211.h>
19#include <linux/rtnetlink.h>
20#include <linux/netlink.h>
259d8c1e 21#include <linux/nospec.h>
2a519311 22#include <linux/etherdevice.h>
e3ae39ed 23#include <linux/if_vlan.h>
463d0183 24#include <net/net_namespace.h>
55682965
JB		 25#include <net/genetlink.h>
26#include <net/cfg80211.h>
463d0183 27#include <net/sock.h>
2a0e047e 28#include <net/inet_connection_sock.h>
55682965
JB		 29#include "core.h"
30#include "nl80211.h"
b2e1b302 31#include "reg.h"
e35e4d28 32#include "rdev-ops.h"
55682965 33
5fb628e9
JM		 34static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
35 struct genl_info *info,
36 struct cfg80211_crypto_settings *settings,
37 int cipher_limit);
38
55682965 39/* the netlink family */
489111e5 40static struct genl_family nl80211_fam;
55682965 41
2a94fe48
JB		 42/* multicast groups */
43enum nl80211_multicast_groups {
44 NL80211_MCGRP_CONFIG,
45 NL80211_MCGRP_SCAN,
46 NL80211_MCGRP_REGULATORY,
47 NL80211_MCGRP_MLME,
567ffc35 48 NL80211_MCGRP_VENDOR,
50bcd31d 49 NL80211_MCGRP_NAN,
2a94fe48
JB		 50 NL80211_MCGRP_TESTMODE /* keep last - ifdef! */
51};
52
53static const struct genl_multicast_group nl80211_mcgrps[] = {
71b836ec
JB		 54 [NL80211_MCGRP_CONFIG] = { .name = NL80211_MULTICAST_GROUP_CONFIG },
55 [NL80211_MCGRP_SCAN] = { .name = NL80211_MULTICAST_GROUP_SCAN },
56 [NL80211_MCGRP_REGULATORY] = { .name = NL80211_MULTICAST_GROUP_REG },
57 [NL80211_MCGRP_MLME] = { .name = NL80211_MULTICAST_GROUP_MLME },
58 [NL80211_MCGRP_VENDOR] = { .name = NL80211_MULTICAST_GROUP_VENDOR },
50bcd31d 59 [NL80211_MCGRP_NAN] = { .name = NL80211_MULTICAST_GROUP_NAN },
2a94fe48 60#ifdef CONFIG_NL80211_TESTMODE
71b836ec 61 [NL80211_MCGRP_TESTMODE] = { .name = NL80211_MULTICAST_GROUP_TESTMODE }
2a94fe48
JB		 62#endif
63};
64
89a54e48
JB		 65/* returns ERR_PTR values */
66static struct wireless_dev *
a05829a7
JB		 67__cfg80211_wdev_from_attrs(struct cfg80211_registered_device *rdev,
68 struct net *netns, struct nlattr **attrs)
55682965 69{
89a54e48
JB		 70 struct wireless_dev *result = NULL;
71 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
72 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
239729a2 73 u64 wdev_id = 0;
89a54e48
JB		 74 int wiphy_idx = -1;
75 int ifidx = -1;
55682965 76
89a54e48
JB		 77 if (!have_ifidx && !have_wdev_id)
78 return ERR_PTR(-EINVAL);
55682965 79
89a54e48
JB		 80 if (have_ifidx)
81 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
82 if (have_wdev_id) {
83 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
84 wiphy_idx = wdev_id >> 32;
55682965
JB		 85 }
86
a05829a7
JB		 87 if (rdev) {
88 struct wireless_dev *wdev;
89
90 lockdep_assert_held(&rdev->wiphy.mtx);
91
92 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
93 if (have_ifidx && wdev->netdev &&
94 wdev->netdev->ifindex == ifidx) {
95 result = wdev;
96 break;
97 }
98 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
99 result = wdev;
100 break;
101 }
102 }
103
104 return result ?: ERR_PTR(-ENODEV);
105 }
106
107 ASSERT_RTNL();
108
89a54e48
JB		 109 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
110 struct wireless_dev *wdev;
111
112 if (wiphy_net(&rdev->wiphy) != netns)
113 continue;
114
115 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
116 continue;
117
53873f13 118 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
89a54e48
JB		 119 if (have_ifidx && wdev->netdev &&
120 wdev->netdev->ifindex == ifidx) {
121 result = wdev;
122 break;
123 }
124 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
125 result = wdev;
126 break;
127 }
128 }
89a54e48
JB		 129
130 if (result)
131 break;
132 }
133
134 if (result)
135 return result;
136 return ERR_PTR(-ENODEV);
55682965
JB		 137}
138
a9455408 139static struct cfg80211_registered_device *
878d9ec7 140__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 141{
7fee4778
JB		 142 struct cfg80211_registered_device *rdev = NULL, *tmp;
143 struct net_device *netdev;
a9455408 144
5fe231e8 145 ASSERT_RTNL();
a9455408 146
878d9ec7 147 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 148 !attrs[NL80211_ATTR_IFINDEX] &&
149 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 150 return ERR_PTR(-EINVAL);
151
878d9ec7 152 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 153 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 154 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 155
89a54e48
JB		 156 if (attrs[NL80211_ATTR_WDEV]) {
157 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
158 struct wireless_dev *wdev;
159 bool found = false;
160
161 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
162 if (tmp) {
163 /* make sure wdev exists */
53873f13 164 list_for_each_entry(wdev, &tmp->wiphy.wdev_list, list) {
89a54e48
JB		 165 if (wdev->identifier != (u32)wdev_id)
166 continue;
167 found = true;
168 break;
169 }
89a54e48
JB		 170
171 if (!found)
172 tmp = NULL;
173
174 if (rdev && tmp != rdev)
175 return ERR_PTR(-EINVAL);
176 rdev = tmp;
177 }
178 }
179
878d9ec7
JB		 180 if (attrs[NL80211_ATTR_IFINDEX]) {
181 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
7a087e74 182
7f2b8562 183 netdev = __dev_get_by_index(netns, ifindex);
7fee4778
JB		 184 if (netdev) {
185 if (netdev->ieee80211_ptr)
f26cbf40
ZG		 186 tmp = wiphy_to_rdev(
187 netdev->ieee80211_ptr->wiphy);
7fee4778
JB		 188 else
189 tmp = NULL;
190
7fee4778
JB		 191 /* not wireless device -- return error */
192 if (!tmp)
193 return ERR_PTR(-EINVAL);
194
195 /* mismatch -- return error */
196 if (rdev && tmp != rdev)
197 return ERR_PTR(-EINVAL);
198
199 rdev = tmp;
a9455408 200 }
a9455408 201 }
a9455408 202
4f7eff10
JB		 203 if (!rdev)
204 return ERR_PTR(-ENODEV);
a9455408 205
4f7eff10
JB		 206 if (netns != wiphy_net(&rdev->wiphy))
207 return ERR_PTR(-ENODEV);
208
209 return rdev;
a9455408
JB		 210}
211
212/*
213 * This function returns a pointer to the driver
214 * that the genl_info item that is passed refers to.
a9455408
JB		 215 *
216 * The result of this can be a PTR_ERR and hence must
217 * be checked with IS_ERR() for errors.
218 */
219static struct cfg80211_registered_device *
4f7eff10 220cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408 221{
5fe231e8 222 return __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 223}
224
f88eb7c0
JB		 225static int validate_beacon_head(const struct nlattr *attr,
226 struct netlink_ext_ack *extack)
227{
228 const u8 *data = nla_data(attr);
229 unsigned int len = nla_len(attr);
230 const struct element *elem;
231 const struct ieee80211_mgmt *mgmt = (void *)data;
1d47f119 232 unsigned int fixedlen, hdrlen;
9a6847ba 233 bool s1g_bcn;
1d47f119 234
9a6847ba
JB		 235 if (len < offsetofend(typeof(*mgmt), frame_control))
236 goto err;
237
238 s1g_bcn = ieee80211_is_s1g_beacon(mgmt->frame_control);
1d47f119
TP		 239 if (s1g_bcn) {
240 fixedlen = offsetof(struct ieee80211_ext,
241 u.s1g_beacon.variable);
242 hdrlen = offsetof(struct ieee80211_ext, u.s1g_beacon);
243 } else {
244 fixedlen = offsetof(struct ieee80211_mgmt,
245 u.beacon.variable);
246 hdrlen = offsetof(struct ieee80211_mgmt, u.beacon);
247 }
f88eb7c0
JB		 248
249 if (len < fixedlen)
250 goto err;
251
1d47f119 252 if (ieee80211_hdrlen(mgmt->frame_control) != hdrlen)
f88eb7c0
JB		 253 goto err;
254
255 data += fixedlen;
256 len -= fixedlen;
257
258 for_each_element(elem, data, len) {
259 /* nothing */
260 }
261
262 if (for_each_element_completed(elem, data, len))
263 return 0;
264
265err:
266 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed beacon head");
267 return -EINVAL;
268}
269
3d7af878
JB		 270static int validate_ie_attr(const struct nlattr *attr,
271 struct netlink_ext_ack *extack)
272{
9f308616
JB		 273 const u8 *data = nla_data(attr);
274 unsigned int len = nla_len(attr);
7388afe0 275 const struct element *elem;
3d7af878 276
9f308616
JB		 277 for_each_element(elem, data, len) {
278 /* nothing */
3d7af878
JB		 279 }
280
9f308616
JB		 281 if (for_each_element_completed(elem, data, len))
282 return 0;
283
3d7af878
JB		 284 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed information elements");
285 return -EINVAL;
286}
287
55682965 288/* policy for the attributes */
d15da2a2
JB		 289static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR];
290
81e54d08
PKC		 291static const struct nla_policy
292nl80211_ftm_responder_policy[NL80211_FTM_RESP_ATTR_MAX + 1] = {
293 [NL80211_FTM_RESP_ATTR_ENABLED] = { .type = NLA_FLAG, },
294 [NL80211_FTM_RESP_ATTR_LCI] = { .type = NLA_BINARY,
295 .len = U8_MAX },
296 [NL80211_FTM_RESP_ATTR_CIVICLOC] = { .type = NLA_BINARY,
297 .len = U8_MAX },
298};
299
9bb7e0f2
JB		 300static const struct nla_policy
301nl80211_pmsr_ftm_req_attr_policy[NL80211_PMSR_FTM_REQ_ATTR_MAX + 1] = {
302 [NL80211_PMSR_FTM_REQ_ATTR_ASAP] = { .type = NLA_FLAG },
303 [NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE] = { .type = NLA_U32 },
304 [NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP] =
305 NLA_POLICY_MAX(NLA_U8, 15),
306 [NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD] = { .type = NLA_U16 },
307 [NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION] =
308 NLA_POLICY_MAX(NLA_U8, 15),
309 [NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST] =
ea18709a 310 NLA_POLICY_MAX(NLA_U8, 31),
9bb7e0f2
JB		 311 [NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES] = { .type = NLA_U8 },
312 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI] = { .type = NLA_FLAG },
313 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC] = { .type = NLA_FLAG },
efb5520d
AS		 314 [NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED] = { .type = NLA_FLAG },
315 [NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED] = { .type = NLA_FLAG },
9bb7e0f2
JB		 316};
317
318static const struct nla_policy
319nl80211_pmsr_req_data_policy[NL80211_PMSR_TYPE_MAX + 1] = {
320 [NL80211_PMSR_TYPE_FTM] =
23323289 321 NLA_POLICY_NESTED(nl80211_pmsr_ftm_req_attr_policy),
9bb7e0f2
JB		 322};
323
324static const struct nla_policy
325nl80211_pmsr_req_attr_policy[NL80211_PMSR_REQ_ATTR_MAX + 1] = {
326 [NL80211_PMSR_REQ_ATTR_DATA] =
23323289 327 NLA_POLICY_NESTED(nl80211_pmsr_req_data_policy),
9bb7e0f2
JB		 328 [NL80211_PMSR_REQ_ATTR_GET_AP_TSF] = { .type = NLA_FLAG },
329};
330
331static const struct nla_policy
332nl80211_psmr_peer_attr_policy[NL80211_PMSR_PEER_ATTR_MAX + 1] = {
333 [NL80211_PMSR_PEER_ATTR_ADDR] = NLA_POLICY_ETH_ADDR,
d15da2a2 334 [NL80211_PMSR_PEER_ATTR_CHAN] = NLA_POLICY_NESTED(nl80211_policy),
9bb7e0f2 335 [NL80211_PMSR_PEER_ATTR_REQ] =
23323289 336 NLA_POLICY_NESTED(nl80211_pmsr_req_attr_policy),
9bb7e0f2
JB		 337 [NL80211_PMSR_PEER_ATTR_RESP] = { .type = NLA_REJECT },
338};
339
340static const struct nla_policy
341nl80211_pmsr_attr_policy[NL80211_PMSR_ATTR_MAX + 1] = {
342 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_REJECT },
343 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_REJECT },
344 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_REJECT },
345 [NL80211_PMSR_ATTR_TYPE_CAPA] = { .type = NLA_REJECT },
346 [NL80211_PMSR_ATTR_PEERS] =
23323289 347 NLA_POLICY_NESTED_ARRAY(nl80211_psmr_peer_attr_policy),
9bb7e0f2
JB		 348};
349
796e90f4
JC		 350static const struct nla_policy
351he_obss_pd_policy[NL80211_HE_OBSS_PD_ATTR_MAX + 1] = {
352 [NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] =
353 NLA_POLICY_RANGE(NLA_U8, 1, 20),
354 [NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET] =
355 NLA_POLICY_RANGE(NLA_U8, 1, 20),
f5bec330
RM		 356 [NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET] =
357 NLA_POLICY_RANGE(NLA_U8, 1, 20),
358 [NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP] =
359 NLA_POLICY_EXACT_LEN(8),
360 [NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP] =
361 NLA_POLICY_EXACT_LEN(8),
362 [NL80211_HE_OBSS_PD_ATTR_SR_CTRL] = { .type = NLA_U8 },
796e90f4
JC		 363};
364
5c5e52d1
JC		 365static const struct nla_policy
366he_bss_color_policy[NL80211_HE_BSS_COLOR_ATTR_MAX + 1] = {
367 [NL80211_HE_BSS_COLOR_ATTR_COLOR] = NLA_POLICY_RANGE(NLA_U8, 1, 63),
368 [NL80211_HE_BSS_COLOR_ATTR_DISABLED] = { .type = NLA_FLAG },
369 [NL80211_HE_BSS_COLOR_ATTR_PARTIAL] = { .type = NLA_FLAG },
370};
371
9a5f6488
TC		 372static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
373 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
374 .len = NL80211_MAX_SUPP_RATES },
375 [NL80211_TXRATE_HT] = { .type = NLA_BINARY,
376 .len = NL80211_MAX_SUPP_HT_RATES },
377 [NL80211_TXRATE_VHT] = NLA_POLICY_EXACT_LEN_WARN(sizeof(struct nl80211_txrate_vht)),
378 [NL80211_TXRATE_GI] = { .type = NLA_U8 },
eb89a6a6
MH		 379 [NL80211_TXRATE_HE] = NLA_POLICY_EXACT_LEN(sizeof(struct nl80211_txrate_he)),
380 [NL80211_TXRATE_HE_GI] = NLA_POLICY_RANGE(NLA_U8,
381 NL80211_RATE_INFO_HE_GI_0_8,
382 NL80211_RATE_INFO_HE_GI_3_2),
383 [NL80211_TXRATE_HE_LTF] = NLA_POLICY_RANGE(NLA_U8,
384 NL80211_RATE_INFO_HE_1XLTF,
385 NL80211_RATE_INFO_HE_4XLTF),
9a5f6488
TC		 386};
387
77f576de
T		 388static const struct nla_policy
389nl80211_tid_config_attr_policy[NL80211_TID_CONFIG_ATTR_MAX + 1] = {
3710a8a6
JB		 390 [NL80211_TID_CONFIG_ATTR_VIF_SUPP] = { .type = NLA_U64 },
391 [NL80211_TID_CONFIG_ATTR_PEER_SUPP] = { .type = NLA_U64 },
77f576de 392 [NL80211_TID_CONFIG_ATTR_OVERRIDE] = { .type = NLA_FLAG },
3710a8a6 393 [NL80211_TID_CONFIG_ATTR_TIDS] = NLA_POLICY_RANGE(NLA_U16, 1, 0xff),
77f576de
T		 394 [NL80211_TID_CONFIG_ATTR_NOACK] =
395 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
6a21d16c
T		 396 [NL80211_TID_CONFIG_ATTR_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
397 [NL80211_TID_CONFIG_ATTR_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
ade274b2
T		 398 [NL80211_TID_CONFIG_ATTR_AMPDU_CTRL] =
399 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
04f7d142
T		 400 [NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL] =
401 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
33462e68
SM		 402 [NL80211_TID_CONFIG_ATTR_AMSDU_CTRL] =
403 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
9a5f6488
TC		 404 [NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE] =
405 NLA_POLICY_MAX(NLA_U8, NL80211_TX_RATE_FIXED),
406 [NL80211_TID_CONFIG_ATTR_TX_RATE] =
407 NLA_POLICY_NESTED(nl80211_txattr_policy),
77f576de
T		 408};
409
291c49de
AD		 410static const struct nla_policy
411nl80211_fils_discovery_policy[NL80211_FILS_DISCOVERY_ATTR_MAX + 1] = {
412 [NL80211_FILS_DISCOVERY_ATTR_INT_MIN] = NLA_POLICY_MAX(NLA_U32, 10000),
413 [NL80211_FILS_DISCOVERY_ATTR_INT_MAX] = NLA_POLICY_MAX(NLA_U32, 10000),
414 NLA_POLICY_RANGE(NLA_BINARY,
415 NL80211_FILS_DISCOVERY_TMPL_MIN_LEN,
416 IEEE80211_MAX_DATA_LEN),
417};
418
7443dcd1
AD		 419static const struct nla_policy
420nl80211_unsol_bcast_probe_resp_policy[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1] = {
421 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] = NLA_POLICY_MAX(NLA_U32, 20),
422 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL] = { .type = NLA_BINARY,
423 .len = IEEE80211_MAX_DATA_LEN }
424};
425
6bdb68ce
CH		 426static const struct nla_policy
427sar_specs_policy[NL80211_SAR_ATTR_SPECS_MAX + 1] = {
428 [NL80211_SAR_ATTR_SPECS_POWER] = { .type = NLA_S32 },
429 [NL80211_SAR_ATTR_SPECS_RANGE_INDEX] = {.type = NLA_U32 },
430};
431
432static const struct nla_policy
433sar_policy[NL80211_SAR_ATTR_MAX + 1] = {
434 [NL80211_SAR_ATTR_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_SAR_TYPE),
435 [NL80211_SAR_ATTR_SPECS] = NLA_POLICY_NESTED_ARRAY(sar_specs_policy),
436};
437
d15da2a2 438static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR] = {
6d4dd4ef 439 [0] = { .strict_start_type = NL80211_ATTR_HE_OBSS_PD },
55682965
JB		 440 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
441 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 442 .len = 20-1 },
31888487 443 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
3d9d1d66 444
72bdcf34 445 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 446 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
2a38075c
AAL		 447 [NL80211_ATTR_WIPHY_EDMG_CHANNELS] = NLA_POLICY_RANGE(NLA_U8,
448 NL80211_EDMG_CHANNELS_MIN,
449 NL80211_EDMG_CHANNELS_MAX),
450 [NL80211_ATTR_WIPHY_EDMG_BW_CONFIG] = NLA_POLICY_RANGE(NLA_U8,
451 NL80211_EDMG_BW_CONFIG_MIN,
452 NL80211_EDMG_BW_CONFIG_MAX),
453
3d9d1d66
JB		 454 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
455 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
942ba88b 456 [NL80211_ATTR_CENTER_FREQ1_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
3d9d1d66
JB		 457 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
458
ab0d76f6
JB		 459 [NL80211_ATTR_WIPHY_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
460 [NL80211_ATTR_WIPHY_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
b9a5f8ca
JM		 461 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
462 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 463 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
3057dbfd 464 [NL80211_ATTR_WIPHY_DYN_ACK] = { .type = NLA_FLAG },
55682965 465
ab0d76f6 466 [NL80211_ATTR_IFTYPE] = NLA_POLICY_MAX(NLA_U32, NL80211_IFTYPE_MAX),
55682965
JB		 467 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
468 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 469
c7721c05
JB		 470 [NL80211_ATTR_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
471 [NL80211_ATTR_PREV_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
41ade00f 472
b9454e83 473 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 474 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
475 .len = WLAN_MAX_KEY_LEN },
56be393f 476 [NL80211_ATTR_KEY_IDX] = NLA_POLICY_MAX(NLA_U8, 7),
41ade00f
JB		 477 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
478 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 479 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
ab0d76f6
JB		 480 [NL80211_ATTR_KEY_TYPE] =
481 NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES),
ed1b6cc7
JB		 482
483 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
484 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
f88eb7c0
JB		 485 [NL80211_ATTR_BEACON_HEAD] =
486 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_beacon_head,
487 IEEE80211_MAX_DATA_LEN),
3d7af878
JB		 488 [NL80211_ATTR_BEACON_TAIL] =
489 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
490 IEEE80211_MAX_DATA_LEN),
ab0d76f6
JB		 491 [NL80211_ATTR_STA_AID] =
492 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
5727ef1b
JB		 493 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
494 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
495 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
496 .len = NL80211_MAX_SUPP_RATES },
ab0d76f6
JB		 497 [NL80211_ATTR_STA_PLINK_ACTION] =
498 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_ACTIONS - 1),
e96d1cd2
ARN		 499 [NL80211_ATTR_STA_TX_POWER_SETTING] =
500 NLA_POLICY_RANGE(NLA_U8,
501 NL80211_TX_POWER_AUTOMATIC,
502 NL80211_TX_POWER_FIXED),
503 [NL80211_ATTR_STA_TX_POWER] = { .type = NLA_S16 },
5727ef1b 504 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 505 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 506 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 507 .len = IEEE80211_MAX_MESH_ID_LEN },
1fab1b89 508 [NL80211_ATTR_MPATH_NEXT_HOP] = NLA_POLICY_ETH_ADDR_COMPAT,
9f1ba906 509
b2e1b302
LR		 510 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
511 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
512
9f1ba906
JM		 513 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
514 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
515 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 516 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
517 .len = NL80211_MAX_SUPP_RATES },
50b12f59 518 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 519
24bdd9f4 520 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 521 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 522
c7721c05 523 [NL80211_ATTR_HT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_HT_CAPABILITY_LEN),
9aed3cc1
JM		 524
525 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
3d7af878
JB		 526 [NL80211_ATTR_IE] = NLA_POLICY_VALIDATE_FN(NLA_BINARY,
527 validate_ie_attr,
528 IEEE80211_MAX_DATA_LEN),
2a519311
JB		 529 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
530 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 531
532 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
533 .len = IEEE80211_MAX_SSID_LEN },
534 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
535 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 536 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 537 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
ab0d76f6
JB		 538 [NL80211_ATTR_USE_MFP] = NLA_POLICY_RANGE(NLA_U32,
539 NL80211_MFP_NO,
540 NL80211_MFP_OPTIONAL),
eccb8e8f
JB		 541 [NL80211_ATTR_STA_FLAGS2] = {
542 .len = sizeof(struct nl80211_sta_flag_update),
543 },
3f77316c 544 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 545 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
546 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
64bf3d4b 547 [NL80211_ATTR_CONTROL_PORT_OVER_NL80211] = { .type = NLA_FLAG },
b23aa676 548 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
ea750801 549 [NL80211_ATTR_STATUS_CODE] = { .type = NLA_U16 },
b23aa676
SO		 550 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
551 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 552 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 553 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
c7721c05 554 [NL80211_ATTR_PMKID] = NLA_POLICY_EXACT_LEN_WARN(WLAN_PMKID_LEN),
9588bbd5
JM		 555 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
556 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 557 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 558 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
559 .len = IEEE80211_MAX_DATA_LEN },
560 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ab0d76f6
JB		 561 [NL80211_ATTR_PS_STATE] = NLA_POLICY_RANGE(NLA_U32,
562 NL80211_PS_DISABLED,
563 NL80211_PS_ENABLED),
d6dc1a38 564 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 565 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 566 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 567 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
568 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 569 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 570 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
571 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 572 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 573 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 574 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 575 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
ab0d76f6
JB		 576 [NL80211_ATTR_STA_PLINK_STATE] =
577 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_STATES - 1),
056e9375
JK		 578 [NL80211_ATTR_MEASUREMENT_DURATION] = { .type = NLA_U16 },
579 [NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY] = { .type = NLA_FLAG },
ab0d76f6
JB		 580 [NL80211_ATTR_MESH_PEER_AID] =
581 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
bbe6ad6d 582 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 583 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 584 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
ab0d76f6
JB		 585 [NL80211_ATTR_HIDDEN_SSID] =
586 NLA_POLICY_RANGE(NLA_U32,
587 NL80211_HIDDEN_SSID_NOT_IN_USE,
588 NL80211_HIDDEN_SSID_ZERO_CONTENTS),
3d7af878
JB		 589 [NL80211_ATTR_IE_PROBE_RESP] =
590 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
591 IEEE80211_MAX_DATA_LEN),
592 [NL80211_ATTR_IE_ASSOC_RESP] =
593 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
594 IEEE80211_MAX_DATA_LEN),
f4b34b55 595 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 596 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 597 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 598 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
599 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
600 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
601 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
602 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
31fa97c5 603 [NL80211_ATTR_TDLS_INITIATOR] = { .type = NLA_FLAG },
e247bd90 604 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 605 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
606 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 607 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 608 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
609 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
610 .len = NL80211_HT_CAPABILITY_LEN
611 },
1d9d9213 612 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 613 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 614 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 615 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 616 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
cb9abd48
JB		 617
618 /* need to include at least Auth Transaction and Status Code */
619 [NL80211_ATTR_AUTH_DATA] = NLA_POLICY_MIN_LEN(4),
620
c7721c05 621 [NL80211_ATTR_VHT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_VHT_CAPABILITY_LEN),
ed473771 622 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
ab0d76f6
JB		 623 [NL80211_ATTR_P2P_CTWINDOW] = NLA_POLICY_MAX(NLA_U8, 127),
624 [NL80211_ATTR_P2P_OPPPS] = NLA_POLICY_MAX(NLA_U8, 1),
625 [NL80211_ATTR_LOCAL_MESH_POWER_MODE] =
626 NLA_POLICY_RANGE(NLA_U32,
627 NL80211_MESH_POWER_UNKNOWN + 1,
628 NL80211_MESH_POWER_MAX),
77765eaf
VT		 629 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
630 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
9d62a986
JM		 631 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
632 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
3713b4e3 633 [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
ee2aca34
JB		 634 [NL80211_ATTR_DISABLE_VHT] = { .type = NLA_FLAG },
635 [NL80211_ATTR_VHT_CAPABILITY_MASK] = {
636 .len = NL80211_VHT_CAPABILITY_LEN,
637 },
355199e0
JM		 638 [NL80211_ATTR_MDID] = { .type = NLA_U16 },
639 [NL80211_ATTR_IE_RIC] = { .type = NLA_BINARY,
640 .len = IEEE80211_MAX_DATA_LEN },
0e1a1d85 641 [NL80211_ATTR_CRIT_PROT_ID] = { .type = NLA_U16 },
cb9abd48
JB		 642 [NL80211_ATTR_MAX_CRIT_PROT_DURATION] =
643 NLA_POLICY_MAX(NLA_U16, NL80211_CRIT_PROTO_MAX_DURATION),
ab0d76f6
JB		 644 [NL80211_ATTR_PEER_AID] =
645 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
16ef1fe2
SW		 646 [NL80211_ATTR_CH_SWITCH_COUNT] = { .type = NLA_U32 },
647 [NL80211_ATTR_CH_SWITCH_BLOCK_TX] = { .type = NLA_FLAG },
648 [NL80211_ATTR_CSA_IES] = { .type = NLA_NESTED },
00c207ed
JC		 649 [NL80211_ATTR_CNTDWN_OFFS_BEACON] = { .type = NLA_BINARY },
650 [NL80211_ATTR_CNTDWN_OFFS_PRESP] = { .type = NLA_BINARY },
cb9abd48 651 [NL80211_ATTR_STA_SUPPORTED_CHANNELS] = NLA_POLICY_MIN_LEN(2),
c8b82802
JB		 652 /*
653 * The value of the Length field of the Supported Operating
654 * Classes element is between 2 and 253.
655 */
656 [NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES] =
657 NLA_POLICY_RANGE(NLA_BINARY, 2, 253),
5336fa88 658 [NL80211_ATTR_HANDLE_DFS] = { .type = NLA_FLAG },
60f4a7b1 659 [NL80211_ATTR_OPMODE_NOTIF] = { .type = NLA_U8 },
ad7e718c
JB		 660 [NL80211_ATTR_VENDOR_ID] = { .type = NLA_U32 },
661 [NL80211_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
662 [NL80211_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
c8b82802
JB		 663 [NL80211_ATTR_QOS_MAP] = NLA_POLICY_RANGE(NLA_BINARY,
664 IEEE80211_QOS_MAP_LEN_MIN,
665 IEEE80211_QOS_MAP_LEN_MAX),
c7721c05 666 [NL80211_ATTR_MAC_HINT] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1df4a510 667 [NL80211_ATTR_WIPHY_FREQ_HINT] = { .type = NLA_U32 },
df942e7b 668 [NL80211_ATTR_TDLS_PEER_CAPABILITY] = { .type = NLA_U32 },
18e5ca65 669 [NL80211_ATTR_SOCKET_OWNER] = { .type = NLA_FLAG },
34d22ce2 670 [NL80211_ATTR_CSA_C_OFFSETS_TX] = { .type = NLA_BINARY },
bab5ab7d 671 [NL80211_ATTR_USE_RRM] = { .type = NLA_FLAG },
ab0d76f6
JB		 672 [NL80211_ATTR_TSID] = NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_TIDS - 1),
673 [NL80211_ATTR_USER_PRIO] =
674 NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_UPS - 1),
960d01ac 675 [NL80211_ATTR_ADMITTED_TIME] = { .type = NLA_U16 },
18998c38 676 [NL80211_ATTR_SMPS_MODE] = { .type = NLA_U8 },
5cde05c6 677 [NL80211_ATTR_OPER_CLASS] = { .type = NLA_U8 },
c7721c05 678 [NL80211_ATTR_MAC_MASK] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1bdd716c 679 [NL80211_ATTR_WIPHY_SELF_MANAGED_REG] = { .type = NLA_FLAG },
4b681c82 680 [NL80211_ATTR_NETNS_FD] = { .type = NLA_U32 },
9c748934 681 [NL80211_ATTR_SCHED_SCAN_DELAY] = { .type = NLA_U32 },
05050753 682 [NL80211_ATTR_REG_INDOOR] = { .type = NLA_FLAG },
34d50519 683 [NL80211_ATTR_PBSS] = { .type = NLA_FLAG },
38de03d2 684 [NL80211_ATTR_BSS_SELECT] = { .type = NLA_NESTED },
ab0d76f6
JB		 685 [NL80211_ATTR_STA_SUPPORT_P2P_PS] =
686 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_P2P_PS_STATUS - 1),
c6e6a0c8
AE		 687 [NL80211_ATTR_MU_MIMO_GROUP_DATA] = {
688 .len = VHT_MUMIMO_GROUPS_DATA_LEN
689 },
c7721c05 690 [NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
ab0d76f6 691 [NL80211_ATTR_NAN_MASTER_PREF] = NLA_POLICY_MIN(NLA_U8, 1),
8585989d 692 [NL80211_ATTR_BANDS] = { .type = NLA_U32 },
a442b761 693 [NL80211_ATTR_NAN_FUNC] = { .type = NLA_NESTED },
348bd456
JM		 694 [NL80211_ATTR_FILS_KEK] = { .type = NLA_BINARY,
695 .len = FILS_MAX_KEK_LEN },
c7721c05 696 [NL80211_ATTR_FILS_NONCES] = NLA_POLICY_EXACT_LEN_WARN(2 * FILS_NONCE_LEN),
ce0ce13a 697 [NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED] = { .type = NLA_FLAG, },
c7721c05 698 [NL80211_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
bf95ecdb 699 [NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] = { .type = NLA_S8 },
700 [NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST] = {
701 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
702 },
3093ebbe 703 [NL80211_ATTR_TIMEOUT_REASON] = { .type = NLA_U32 },
a3caf744
VK		 704 [NL80211_ATTR_FILS_ERP_USERNAME] = { .type = NLA_BINARY,
705 .len = FILS_ERP_MAX_USERNAME_LEN },
706 [NL80211_ATTR_FILS_ERP_REALM] = { .type = NLA_BINARY,
707 .len = FILS_ERP_MAX_REALM_LEN },
708 [NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] = { .type = NLA_U16 },
709 [NL80211_ATTR_FILS_ERP_RRK] = { .type = NLA_BINARY,
710 .len = FILS_ERP_MAX_RRK_LEN },
c7721c05 711 [NL80211_ATTR_FILS_CACHE_ID] = NLA_POLICY_EXACT_LEN_WARN(2),
a3caf744 712 [NL80211_ATTR_PMK] = { .type = NLA_BINARY, .len = PMK_MAX_LEN },
cb9abd48 713 [NL80211_ATTR_PMKR0_NAME] = NLA_POLICY_EXACT_LEN(WLAN_PMK_NAME_LEN),
ca986ad9 714 [NL80211_ATTR_SCHED_SCAN_MULTI] = { .type = NLA_FLAG },
40cbfa90 715 [NL80211_ATTR_EXTERNAL_AUTH_SUPPORT] = { .type = NLA_FLAG },
52539ca8
THJ		 716
717 [NL80211_ATTR_TXQ_LIMIT] = { .type = NLA_U32 },
718 [NL80211_ATTR_TXQ_MEMORY_LIMIT] = { .type = NLA_U32 },
719 [NL80211_ATTR_TXQ_QUANTUM] = { .type = NLA_U32 },
c8b82802
JB		 720 [NL80211_ATTR_HE_CAPABILITY] =
721 NLA_POLICY_RANGE(NLA_BINARY,
722 NL80211_HE_MIN_CAPABILITY_LEN,
723 NL80211_HE_MAX_CAPABILITY_LEN),
0e012b4e
JB		 724 [NL80211_ATTR_FTM_RESPONDER] =
725 NLA_POLICY_NESTED(nl80211_ftm_responder_policy),
9bb7e0f2
JB		 726 [NL80211_ATTR_TIMEOUT] = NLA_POLICY_MIN(NLA_U32, 1),
727 [NL80211_ATTR_PEER_MEASUREMENTS] =
23323289 728 NLA_POLICY_NESTED(nl80211_pmsr_attr_policy),
36647055 729 [NL80211_ATTR_AIRTIME_WEIGHT] = NLA_POLICY_MIN(NLA_U16, 1),
26f7044e
CHH		 730 [NL80211_ATTR_SAE_PASSWORD] = { .type = NLA_BINARY,
731 .len = SAE_PASSWORD_MAX_LEN },
a0de1ca3 732 [NL80211_ATTR_TWT_RESPONDER] = { .type = NLA_FLAG },
796e90f4 733 [NL80211_ATTR_HE_OBSS_PD] = NLA_POLICY_NESTED(he_obss_pd_policy),
14f34e36 734 [NL80211_ATTR_VLAN_ID] = NLA_POLICY_RANGE(NLA_U16, 1, VLAN_N_VID - 2),
5c5e52d1 735 [NL80211_ATTR_HE_BSS_COLOR] = NLA_POLICY_NESTED(he_bss_color_policy),
77f576de
T		 736 [NL80211_ATTR_TID_CONFIG] =
737 NLA_POLICY_NESTED_ARRAY(nl80211_tid_config_attr_policy),
5631d96a 738 [NL80211_ATTR_CONTROL_PORT_NO_PREAUTH] = { .type = NLA_FLAG },
7fc82af8
VJ		 739 [NL80211_ATTR_PMK_LIFETIME] = NLA_POLICY_MIN(NLA_U32, 1),
740 [NL80211_ATTR_PMK_REAUTH_THRESHOLD] = NLA_POLICY_RANGE(NLA_U8, 1, 100),
9dba48a6 741 [NL80211_ATTR_RECEIVE_MULTICAST] = { .type = NLA_FLAG },
942ba88b 742 [NL80211_ATTR_WIPHY_FREQ_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
2032f3b2 743 [NL80211_ATTR_SCAN_FREQ_KHZ] = { .type = NLA_NESTED },
8140860c
JB		 744 [NL80211_ATTR_HE_6GHZ_CAPABILITY] =
745 NLA_POLICY_EXACT_LEN(sizeof(struct ieee80211_he_6ghz_capa)),
291c49de
AD		 746 [NL80211_ATTR_FILS_DISCOVERY] =
747 NLA_POLICY_NESTED(nl80211_fils_discovery_policy),
7443dcd1
AD		 748 [NL80211_ATTR_UNSOL_BCAST_PROBE_RESP] =
749 NLA_POLICY_NESTED(nl80211_unsol_bcast_probe_resp_policy),
d2b7588a
TP		 750 [NL80211_ATTR_S1G_CAPABILITY] =
751 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
752 [NL80211_ATTR_S1G_CAPABILITY_MASK] =
753 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
9f0ffa41
RD		 754 [NL80211_ATTR_SAE_PWE] =
755 NLA_POLICY_RANGE(NLA_U8, NL80211_SAE_PWE_HUNT_AND_PECK,
756 NL80211_SAE_PWE_BOTH),
3bb02143 757 [NL80211_ATTR_RECONNECT_REQUESTED] = { .type = NLA_REJECT },
6bdb68ce 758 [NL80211_ATTR_SAR_SPEC] = NLA_POLICY_NESTED(sar_policy),
b6db0f89 759 [NL80211_ATTR_DISABLE_HE] = { .type = NLA_FLAG },
55682965
JB		 760};
761
e31b8213 762/* policy for the key attributes */
b54452b0 763static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 764 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 765 [NL80211_KEY_IDX] = { .type = NLA_U8 },
766 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 767 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 768 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
769 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
ab0d76f6 770 [NL80211_KEY_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES - 1),
dbd2fd65 771 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
6cdd3979 772 [NL80211_KEY_MODE] = NLA_POLICY_RANGE(NLA_U8, 0, NL80211_KEY_SET_TX),
dbd2fd65
JB		 773};
774
775/* policy for the key default flags */
776static const struct nla_policy
777nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
778 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
779 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 780};
781
f83ace3b 782#ifdef CONFIG_PM
ff1b6e69
JB		 783/* policy for WoWLAN attributes */
784static const struct nla_policy
785nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
786 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
787 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
788 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
789 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 790 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
791 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
792 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
793 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
2a0e047e 794 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
8cd4d456 795 [NL80211_WOWLAN_TRIG_NET_DETECT] = { .type = NLA_NESTED },
2a0e047e
JB		 796};
797
798static const struct nla_policy
799nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
800 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
801 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
c7721c05 802 [NL80211_WOWLAN_TCP_DST_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
2a0e047e
JB		 803 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
804 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
bc043585 805 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
2a0e047e
JB		 806 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
807 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
808 },
809 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
810 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
811 },
812 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
bc043585
JB		 813 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
814 [NL80211_WOWLAN_TCP_WAKE_MASK] = NLA_POLICY_MIN_LEN(1),
ff1b6e69 815};
f83ace3b 816#endif /* CONFIG_PM */
ff1b6e69 817
be29b99a
AK		 818/* policy for coalesce rule attributes */
819static const struct nla_policy
820nl80211_coalesce_policy[NUM_NL80211_ATTR_COALESCE_RULE] = {
821 [NL80211_ATTR_COALESCE_RULE_DELAY] = { .type = NLA_U32 },
ab0d76f6
JB		 822 [NL80211_ATTR_COALESCE_RULE_CONDITION] =
823 NLA_POLICY_RANGE(NLA_U32,
824 NL80211_COALESCE_CONDITION_MATCH,
825 NL80211_COALESCE_CONDITION_NO_MATCH),
be29b99a
AK		 826 [NL80211_ATTR_COALESCE_RULE_PKT_PATTERN] = { .type = NLA_NESTED },
827};
828
e5497d76
JB		 829/* policy for GTK rekey offload attributes */
830static const struct nla_policy
831nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
093a48d2
NE		 832 [NL80211_REKEY_DATA_KEK] = {
833 .type = NLA_BINARY,
834 .len = NL80211_KEK_EXT_LEN
835 },
836 [NL80211_REKEY_DATA_KCK] = {
837 .type = NLA_BINARY,
838 .len = NL80211_KCK_EXT_LEN
839 },
cb9abd48 840 [NL80211_REKEY_DATA_REPLAY_CTR] = NLA_POLICY_EXACT_LEN(NL80211_REPLAY_CTR_LEN),
093a48d2 841 [NL80211_REKEY_DATA_AKM] = { .type = NLA_U32 },
e5497d76
JB		 842};
843
1e1b11b6 844static const struct nla_policy
845nl80211_match_band_rssi_policy[NUM_NL80211_BANDS] = {
846 [NL80211_BAND_2GHZ] = { .type = NLA_S32 },
847 [NL80211_BAND_5GHZ] = { .type = NLA_S32 },
e548a1c3 848 [NL80211_BAND_6GHZ] = { .type = NLA_S32 },
1e1b11b6 849 [NL80211_BAND_60GHZ] = { .type = NLA_S32 },
850};
851
a1f1c21c
LC		 852static const struct nla_policy
853nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 854 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 855 .len = IEEE80211_MAX_SSID_LEN },
c7721c05 856 [NL80211_SCHED_SCAN_MATCH_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
88e920b4 857 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
1e1b11b6 858 [NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI] =
859 NLA_POLICY_NESTED(nl80211_match_band_rssi_policy),
a1f1c21c
LC		 860};
861
3b06d277
AS		 862static const struct nla_policy
863nl80211_plan_policy[NL80211_SCHED_SCAN_PLAN_MAX + 1] = {
864 [NL80211_SCHED_SCAN_PLAN_INTERVAL] = { .type = NLA_U32 },
865 [NL80211_SCHED_SCAN_PLAN_ITERATIONS] = { .type = NLA_U32 },
866};
867
38de03d2
AS		 868static const struct nla_policy
869nl80211_bss_select_policy[NL80211_BSS_SELECT_ATTR_MAX + 1] = {
870 [NL80211_BSS_SELECT_ATTR_RSSI] = { .type = NLA_FLAG },
871 [NL80211_BSS_SELECT_ATTR_BAND_PREF] = { .type = NLA_U32 },
872 [NL80211_BSS_SELECT_ATTR_RSSI_ADJUST] = {
873 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
874 },
875};
876
a442b761
AB		 877/* policy for NAN function attributes */
878static const struct nla_policy
879nl80211_nan_func_policy[NL80211_NAN_FUNC_ATTR_MAX + 1] = {
cb9abd48
JB		 880 [NL80211_NAN_FUNC_TYPE] =
881 NLA_POLICY_MAX(NLA_U8, NL80211_NAN_FUNC_MAX_TYPE),
0a27844c 882 [NL80211_NAN_FUNC_SERVICE_ID] = {
a442b761
AB		 883 .len = NL80211_NAN_FUNC_SERVICE_ID_LEN },
884 [NL80211_NAN_FUNC_PUBLISH_TYPE] = { .type = NLA_U8 },
885 [NL80211_NAN_FUNC_PUBLISH_BCAST] = { .type = NLA_FLAG },
886 [NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE] = { .type = NLA_FLAG },
887 [NL80211_NAN_FUNC_FOLLOW_UP_ID] = { .type = NLA_U8 },
888 [NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] = { .type = NLA_U8 },
c7721c05 889 [NL80211_NAN_FUNC_FOLLOW_UP_DEST] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
a442b761
AB		 890 [NL80211_NAN_FUNC_CLOSE_RANGE] = { .type = NLA_FLAG },
891 [NL80211_NAN_FUNC_TTL] = { .type = NLA_U32 },
892 [NL80211_NAN_FUNC_SERVICE_INFO] = { .type = NLA_BINARY,
893 .len = NL80211_NAN_FUNC_SERVICE_SPEC_INFO_MAX_LEN },
894 [NL80211_NAN_FUNC_SRF] = { .type = NLA_NESTED },
895 [NL80211_NAN_FUNC_RX_MATCH_FILTER] = { .type = NLA_NESTED },
896 [NL80211_NAN_FUNC_TX_MATCH_FILTER] = { .type = NLA_NESTED },
897 [NL80211_NAN_FUNC_INSTANCE_ID] = { .type = NLA_U8 },
898 [NL80211_NAN_FUNC_TERM_REASON] = { .type = NLA_U8 },
899};
900
901/* policy for Service Response Filter attributes */
902static const struct nla_policy
903nl80211_nan_srf_policy[NL80211_NAN_SRF_ATTR_MAX + 1] = {
904 [NL80211_NAN_SRF_INCLUDE] = { .type = NLA_FLAG },
905 [NL80211_NAN_SRF_BF] = { .type = NLA_BINARY,
906 .len = NL80211_NAN_FUNC_SRF_MAX_LEN },
907 [NL80211_NAN_SRF_BF_IDX] = { .type = NLA_U8 },
908 [NL80211_NAN_SRF_MAC_ADDRS] = { .type = NLA_NESTED },
909};
910
ad670233
PX		 911/* policy for packet pattern attributes */
912static const struct nla_policy
913nl80211_packet_pattern_policy[MAX_NL80211_PKTPAT + 1] = {
914 [NL80211_PKTPAT_MASK] = { .type = NLA_BINARY, },
915 [NL80211_PKTPAT_PATTERN] = { .type = NLA_BINARY, },
916 [NL80211_PKTPAT_OFFSET] = { .type = NLA_U32 },
917};
918
9bb7e0f2
JB		 919int nl80211_prepare_wdev_dump(struct netlink_callback *cb,
920 struct cfg80211_registered_device **rdev,
921 struct wireless_dev **wdev)
a043897a 922{
97990a06 923 int err;
a043897a 924
97990a06 925 if (!cb->args[0]) {
50508d94
JB		 926 struct nlattr **attrbuf;
927
928 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
929 GFP_KERNEL);
930 if (!attrbuf)
931 return -ENOMEM;
932
8cb08174
JB		 933 err = nlmsg_parse_deprecated(cb->nlh,
934 GENL_HDRLEN + nl80211_fam.hdrsize,
50508d94 935 attrbuf, nl80211_fam.maxattr,
8cb08174 936 nl80211_policy, NULL);
50508d94
JB		 937 if (err) {
938 kfree(attrbuf);
ea90e0dc 939 return err;
50508d94 940 }
67748893 941
a05829a7
JB		 942 rtnl_lock();
943 *wdev = __cfg80211_wdev_from_attrs(NULL, sock_net(cb->skb->sk),
50508d94
JB		 944 attrbuf);
945 kfree(attrbuf);
a05829a7
JB		 946 if (IS_ERR(*wdev)) {
947 rtnl_unlock();
ea90e0dc 948 return PTR_ERR(*wdev);
a05829a7 949 }
f26cbf40 950 *rdev = wiphy_to_rdev((*wdev)->wiphy);
a05829a7
JB		 951 mutex_lock(&(*rdev)->wiphy.mtx);
952 rtnl_unlock();
c319d50b
JB		 953 /* 0 is the first index - add 1 to parse only once */
954 cb->args[0] = (*rdev)->wiphy_idx + 1;
97990a06
JB		 955 cb->args[1] = (*wdev)->identifier;
956 } else {
c319d50b 957 /* subtract the 1 again here */
a05829a7 958 struct wiphy *wiphy;
97990a06 959 struct wireless_dev *tmp;
67748893 960
a05829a7
JB		 961 rtnl_lock();
962 wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
963 if (!wiphy) {
964 rtnl_unlock();
ea90e0dc 965 return -ENODEV;
a05829a7 966 }
f26cbf40 967 *rdev = wiphy_to_rdev(wiphy);
97990a06 968 *wdev = NULL;
67748893 969
53873f13 970 list_for_each_entry(tmp, &(*rdev)->wiphy.wdev_list, list) {
97990a06
JB		 971 if (tmp->identifier == cb->args[1]) {
972 *wdev = tmp;
973 break;
974 }
975 }
67748893 976
a05829a7
JB		 977 if (!*wdev) {
978 rtnl_unlock();
ea90e0dc 979 return -ENODEV;
a05829a7
JB		 980 }
981 mutex_lock(&(*rdev)->wiphy.mtx);
982 rtnl_unlock();
67748893
JB		 983 }
984
67748893 985 return 0;
67748893
JB		 986}
987
55682965 988/* message building helper */
9bb7e0f2
JB		 989void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
990 int flags, u8 cmd)
55682965
JB		 991{
992 /* since there is no private header just add the generic one */
15e47304 993 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 994}
995
50f32718
HD		 996static int nl80211_msg_put_wmm_rules(struct sk_buff *msg,
997 const struct ieee80211_reg_rule *rule)
998{
999 int j;
1000 struct nlattr *nl_wmm_rules =
ae0be8de 1001 nla_nest_start_noflag(msg, NL80211_FREQUENCY_ATTR_WMM);
50f32718
HD		 1002
1003 if (!nl_wmm_rules)
1004 goto nla_put_failure;
1005
1006 for (j = 0; j < IEEE80211_NUM_ACS; j++) {
ae0be8de 1007 struct nlattr *nl_wmm_rule = nla_nest_start_noflag(msg, j);
50f32718
HD		 1008
1009 if (!nl_wmm_rule)
1010 goto nla_put_failure;
1011
1012 if (nla_put_u16(msg, NL80211_WMMR_CW_MIN,
38cb87ee 1013 rule->wmm_rule.client[j].cw_min) ||
50f32718 1014 nla_put_u16(msg, NL80211_WMMR_CW_MAX,
38cb87ee 1015 rule->wmm_rule.client[j].cw_max) ||
50f32718 1016 nla_put_u8(msg, NL80211_WMMR_AIFSN,
38cb87ee 1017 rule->wmm_rule.client[j].aifsn) ||
d3c89bbc
HD		 1018 nla_put_u16(msg, NL80211_WMMR_TXOP,
1019 rule->wmm_rule.client[j].cot))
50f32718
HD		 1020 goto nla_put_failure;
1021
1022 nla_nest_end(msg, nl_wmm_rule);
1023 }
1024 nla_nest_end(msg, nl_wmm_rules);
1025
1026 return 0;
1027
1028nla_put_failure:
1029 return -ENOBUFS;
1030}
1031
1032static int nl80211_msg_put_channel(struct sk_buff *msg, struct wiphy *wiphy,
cdc89b97
JB		 1033 struct ieee80211_channel *chan,
1034 bool large)
5dab3b8a 1035{
ea077c1c
RL		 1036 /* Some channels must be completely excluded from the
1037 * list to protect old user-space tools from breaking
1038 */
1039 if (!large && chan->flags &
1040 (IEEE80211_CHAN_NO_10MHZ | IEEE80211_CHAN_NO_20MHZ))
1041 return 0;
f8d504ca
JB		 1042 if (!large && chan->freq_offset)
1043 return 0;
ea077c1c 1044
9360ffd1
DM		 1045 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
1046 chan->center_freq))
1047 goto nla_put_failure;
5dab3b8a 1048
942ba88b
TP		 1049 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_OFFSET, chan->freq_offset))
1050 goto nla_put_failure;
1051
9360ffd1
DM		 1052 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
1053 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
1054 goto nla_put_failure;
8fe02e16
LR		 1055 if (chan->flags & IEEE80211_CHAN_NO_IR) {
1056 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IR))
1057 goto nla_put_failure;
1058 if (nla_put_flag(msg, __NL80211_FREQUENCY_ATTR_NO_IBSS))
1059 goto nla_put_failure;
1060 }
cdc89b97
JB		 1061 if (chan->flags & IEEE80211_CHAN_RADAR) {
1062 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
1063 goto nla_put_failure;
1064 if (large) {
1065 u32 time;
1066
1067 time = elapsed_jiffies_msecs(chan->dfs_state_entered);
1068
1069 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
1070 chan->dfs_state))
1071 goto nla_put_failure;
1072 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
1073 time))
1074 goto nla_put_failure;
089027e5
JD		 1075 if (nla_put_u32(msg,
1076 NL80211_FREQUENCY_ATTR_DFS_CAC_TIME,
1077 chan->dfs_cac_ms))
1078 goto nla_put_failure;
cdc89b97
JB		 1079 }
1080 }
5dab3b8a 1081
fe1abafd
JB		 1082 if (large) {
1083 if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
1084 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
1085 goto nla_put_failure;
1086 if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
1087 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
1088 goto nla_put_failure;
1089 if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
1090 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
1091 goto nla_put_failure;
1092 if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
1093 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
1094 goto nla_put_failure;
570dbde1
DS		 1095 if ((chan->flags & IEEE80211_CHAN_INDOOR_ONLY) &&
1096 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_INDOOR_ONLY))
1097 goto nla_put_failure;
06f207fc
AN		 1098 if ((chan->flags & IEEE80211_CHAN_IR_CONCURRENT) &&
1099 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_IR_CONCURRENT))
570dbde1 1100 goto nla_put_failure;
ea077c1c
RL		 1101 if ((chan->flags & IEEE80211_CHAN_NO_20MHZ) &&
1102 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_20MHZ))
1103 goto nla_put_failure;
1104 if ((chan->flags & IEEE80211_CHAN_NO_10MHZ) &&
1105 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_10MHZ))
1106 goto nla_put_failure;
1e61d82c
HD		 1107 if ((chan->flags & IEEE80211_CHAN_NO_HE) &&
1108 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HE))
1109 goto nla_put_failure;
d65a9770
TP		 1110 if ((chan->flags & IEEE80211_CHAN_1MHZ) &&
1111 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_1MHZ))
1112 goto nla_put_failure;
1113 if ((chan->flags & IEEE80211_CHAN_2MHZ) &&
1114 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_2MHZ))
1115 goto nla_put_failure;
1116 if ((chan->flags & IEEE80211_CHAN_4MHZ) &&
1117 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_4MHZ))
1118 goto nla_put_failure;
1119 if ((chan->flags & IEEE80211_CHAN_8MHZ) &&
1120 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_8MHZ))
1121 goto nla_put_failure;
1122 if ((chan->flags & IEEE80211_CHAN_16MHZ) &&
1123 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_16MHZ))
1124 goto nla_put_failure;
fe1abafd
JB		 1125 }
1126
9360ffd1
DM		 1127 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
1128 DBM_TO_MBM(chan->max_power)))
1129 goto nla_put_failure;
5dab3b8a 1130
50f32718
HD		 1131 if (large) {
1132 const struct ieee80211_reg_rule *rule =
b88d26d9 1133 freq_reg_info(wiphy, MHZ_TO_KHZ(chan->center_freq));
50f32718 1134
38cb87ee 1135 if (!IS_ERR_OR_NULL(rule) && rule->has_wmm) {
50f32718
HD		 1136 if (nl80211_msg_put_wmm_rules(msg, rule))
1137 goto nla_put_failure;
1138 }
1139 }
1140
5dab3b8a
LR		 1141 return 0;
1142
1143 nla_put_failure:
1144 return -ENOBUFS;
1145}
1146
52539ca8
THJ		 1147static bool nl80211_put_txq_stats(struct sk_buff *msg,
1148 struct cfg80211_txq_stats *txqstats,
1149 int attrtype)
1150{
1151 struct nlattr *txqattr;
1152
1153#define PUT_TXQVAL_U32(attr, memb) do { \
1154 if (txqstats->filled & BIT(NL80211_TXQ_STATS_ ## attr) && \
1155 nla_put_u32(msg, NL80211_TXQ_STATS_ ## attr, txqstats->memb)) \
1156 return false; \
1157 } while (0)
1158
ae0be8de 1159 txqattr = nla_nest_start_noflag(msg, attrtype);
52539ca8
THJ		 1160 if (!txqattr)
1161 return false;
1162
1163 PUT_TXQVAL_U32(BACKLOG_BYTES, backlog_bytes);
1164 PUT_TXQVAL_U32(BACKLOG_PACKETS, backlog_packets);
1165 PUT_TXQVAL_U32(FLOWS, flows);
1166 PUT_TXQVAL_U32(DROPS, drops);
1167 PUT_TXQVAL_U32(ECN_MARKS, ecn_marks);
1168 PUT_TXQVAL_U32(OVERLIMIT, overlimit);
1169 PUT_TXQVAL_U32(OVERMEMORY, overmemory);
1170 PUT_TXQVAL_U32(COLLISIONS, collisions);
1171 PUT_TXQVAL_U32(TX_BYTES, tx_bytes);
1172 PUT_TXQVAL_U32(TX_PACKETS, tx_packets);
1173 PUT_TXQVAL_U32(MAX_FLOWS, max_flows);
1174 nla_nest_end(msg, txqattr);
1175
1176#undef PUT_TXQVAL_U32
1177 return true;
1178}
1179
55682965
JB		 1180/* netlink command implementations */
1181
b9454e83
JB		 1182struct key_parse {
1183 struct key_params p;
1184 int idx;
e31b8213 1185 int type;
56be393f 1186 bool def, defmgmt, defbeacon;
dbd2fd65 1187 bool def_uni, def_multi;
b9454e83
JB		 1188};
1189
768075eb
JB		 1190static int nl80211_parse_key_new(struct genl_info *info, struct nlattr *key,
1191 struct key_parse *k)
b9454e83
JB		 1192{
1193 struct nlattr *tb[NL80211_KEY_MAX + 1];
8cb08174
JB		 1194 int err = nla_parse_nested_deprecated(tb, NL80211_KEY_MAX, key,
1195 nl80211_key_policy,
1196 info->extack);
b9454e83
JB		 1197 if (err)
1198 return err;
1199
1200 k->def = !!tb[NL80211_KEY_DEFAULT];
1201 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
56be393f 1202 k->defbeacon = !!tb[NL80211_KEY_DEFAULT_BEACON];
b9454e83 1203
dbd2fd65
JB		 1204 if (k->def) {
1205 k->def_uni = true;
1206 k->def_multi = true;
1207 }
56be393f 1208 if (k->defmgmt || k->defbeacon)
dbd2fd65
JB		 1209 k->def_multi = true;
1210
b9454e83
JB		 1211 if (tb[NL80211_KEY_IDX])
1212 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
1213
1214 if (tb[NL80211_KEY_DATA]) {
1215 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
1216 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
1217 }
1218
1219 if (tb[NL80211_KEY_SEQ]) {
1220 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
1221 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
1222 }
1223
1224 if (tb[NL80211_KEY_CIPHER])
1225 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
1226
ab0d76f6 1227 if (tb[NL80211_KEY_TYPE])
e31b8213 1228 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
e31b8213 1229
dbd2fd65
JB		 1230 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
1231 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
7a087e74 1232
8cb08174
JB		 1233 err = nla_parse_nested_deprecated(kdt,
1234 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1235 tb[NL80211_KEY_DEFAULT_TYPES],
1236 nl80211_key_default_policy,
1237 info->extack);
dbd2fd65
JB		 1238 if (err)
1239 return err;
1240
1241 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1242 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1243 }
1244
6cdd3979
AW		 1245 if (tb[NL80211_KEY_MODE])
1246 k->p.mode = nla_get_u8(tb[NL80211_KEY_MODE]);
1247
b9454e83
JB		 1248 return 0;
1249}
1250
1251static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
1252{
1253 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
1254 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
1255 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
1256 }
1257
1258 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
1259 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
1260 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
1261 }
1262
1263 if (info->attrs[NL80211_ATTR_KEY_IDX])
1264 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1265
1266 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
1267 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
1268
1269 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
1270 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
1271
dbd2fd65
JB		 1272 if (k->def) {
1273 k->def_uni = true;
1274 k->def_multi = true;
1275 }
1276 if (k->defmgmt)
1277 k->def_multi = true;
1278
ab0d76f6 1279 if (info->attrs[NL80211_ATTR_KEY_TYPE])
e31b8213 1280 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
e31b8213 1281
dbd2fd65
JB		 1282 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
1283 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
8cb08174
JB		 1284 int err = nla_parse_nested_deprecated(kdt,
1285 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1286 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
1287 nl80211_key_default_policy,
1288 info->extack);
dbd2fd65
JB		 1289 if (err)
1290 return err;
1291
1292 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1293 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1294 }
1295
b9454e83
JB		 1296 return 0;
1297}
1298
1299static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
1300{
1301 int err;
1302
1303 memset(k, 0, sizeof(*k));
1304 k->idx = -1;
e31b8213 1305 k->type = -1;
b9454e83
JB		 1306
1307 if (info->attrs[NL80211_ATTR_KEY])
768075eb 1308 err = nl80211_parse_key_new(info, info->attrs[NL80211_ATTR_KEY], k);
b9454e83
JB		 1309 else
1310 err = nl80211_parse_key_old(info, k);
1311
1312 if (err)
1313 return err;
1314
56be393f
JM		 1315 if ((k->def ? 1 : 0) + (k->defmgmt ? 1 : 0) +
1316 (k->defbeacon ? 1 : 0) > 1) {
1317 GENL_SET_ERR_MSG(info,
1318 "key with multiple default flags is invalid");
b9454e83 1319 return -EINVAL;
768075eb 1320 }
b9454e83 1321
56be393f 1322 if (k->defmgmt || k->defbeacon) {
768075eb 1323 if (k->def_uni || !k->def_multi) {
56be393f
JM		 1324 GENL_SET_ERR_MSG(info,
1325 "defmgmt/defbeacon key must be mcast");
dbd2fd65 1326 return -EINVAL;
768075eb 1327 }
dbd2fd65
JB		 1328 }
1329
b9454e83
JB		 1330 if (k->idx != -1) {
1331 if (k->defmgmt) {
768075eb
JB		 1332 if (k->idx < 4 || k->idx > 5) {
1333 GENL_SET_ERR_MSG(info,
1334 "defmgmt key idx not 4 or 5");
b9454e83 1335 return -EINVAL;
768075eb 1336 }
56be393f
JM		 1337 } else if (k->defbeacon) {
1338 if (k->idx < 6 || k->idx > 7) {
1339 GENL_SET_ERR_MSG(info,
1340 "defbeacon key idx not 6 or 7");
1341 return -EINVAL;
1342 }
b9454e83 1343 } else if (k->def) {
768075eb
JB		 1344 if (k->idx < 0 || k->idx > 3) {
1345 GENL_SET_ERR_MSG(info, "def key idx not 0-3");
b9454e83 1346 return -EINVAL;
768075eb 1347 }
b9454e83 1348 } else {
56be393f
JM		 1349 if (k->idx < 0 || k->idx > 7) {
1350 GENL_SET_ERR_MSG(info, "key idx not 0-7");
b9454e83 1351 return -EINVAL;
768075eb 1352 }
b9454e83
JB		 1353 }
1354 }
1355
1356 return 0;
1357}
1358
fffd0934
JB		 1359static struct cfg80211_cached_keys *
1360nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
768075eb 1361 struct genl_info *info, bool *no_ht)
fffd0934 1362{
768075eb 1363 struct nlattr *keys = info->attrs[NL80211_ATTR_KEYS];
fffd0934
JB		 1364 struct key_parse parse;
1365 struct nlattr *key;
1366 struct cfg80211_cached_keys *result;
1367 int rem, err, def = 0;
f1c1f17a
JB		 1368 bool have_key = false;
1369
1370 nla_for_each_nested(key, keys, rem) {
1371 have_key = true;
1372 break;
1373 }
1374
1375 if (!have_key)
1376 return NULL;
fffd0934
JB		 1377
1378 result = kzalloc(sizeof(*result), GFP_KERNEL);
1379 if (!result)
1380 return ERR_PTR(-ENOMEM);
1381
1382 result->def = -1;
fffd0934
JB		 1383
1384 nla_for_each_nested(key, keys, rem) {
1385 memset(&parse, 0, sizeof(parse));
1386 parse.idx = -1;
1387
768075eb 1388 err = nl80211_parse_key_new(info, key, &parse);
fffd0934
JB		 1389 if (err)
1390 goto error;
1391 err = -EINVAL;
1392 if (!parse.p.key)
1393 goto error;
768075eb
JB		 1394 if (parse.idx < 0 || parse.idx > 3) {
1395 GENL_SET_ERR_MSG(info, "key index out of range [0-3]");
fffd0934 1396 goto error;
768075eb 1397 }
fffd0934 1398 if (parse.def) {
768075eb
JB		 1399 if (def) {
1400 GENL_SET_ERR_MSG(info,
1401 "only one key can be default");
fffd0934 1402 goto error;
768075eb 1403 }
fffd0934
JB		 1404 def = 1;
1405 result->def = parse.idx;
dbd2fd65
JB		 1406 if (!parse.def_uni || !parse.def_multi)
1407 goto error;
fffd0934
JB		 1408 } else if (parse.defmgmt)
1409 goto error;
1410 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 1411 parse.idx, false, NULL);
fffd0934
JB		 1412 if (err)
1413 goto error;
386b1f27
JB		 1414 if (parse.p.cipher != WLAN_CIPHER_SUITE_WEP40 &&
1415 parse.p.cipher != WLAN_CIPHER_SUITE_WEP104) {
768075eb 1416 GENL_SET_ERR_MSG(info, "connect key must be WEP");
386b1f27
JB		 1417 err = -EINVAL;
1418 goto error;
1419 }
fffd0934
JB		 1420 result->params[parse.idx].cipher = parse.p.cipher;
1421 result->params[parse.idx].key_len = parse.p.key_len;
1422 result->params[parse.idx].key = result->data[parse.idx];
1423 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee 1424
386b1f27
JB		 1425 /* must be WEP key if we got here */
1426 if (no_ht)
1427 *no_ht = true;
fffd0934
JB		 1428 }
1429
f1c1f17a
JB		 1430 if (result->def < 0) {
1431 err = -EINVAL;
768075eb 1432 GENL_SET_ERR_MSG(info, "need a default/TX key");
f1c1f17a
JB		 1433 goto error;
1434 }
1435
fffd0934
JB		 1436 return result;
1437 error:
1438 kfree(result);
1439 return ERR_PTR(err);
1440}
1441
1442static int nl80211_key_allowed(struct wireless_dev *wdev)
1443{
1444 ASSERT_WDEV_LOCK(wdev);
1445
fffd0934
JB		 1446 switch (wdev->iftype) {
1447 case NL80211_IFTYPE_AP:
1448 case NL80211_IFTYPE_AP_VLAN:
074ac8df 1449 case NL80211_IFTYPE_P2P_GO:
ff973af7 1450 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 1451 break;
1452 case NL80211_IFTYPE_ADHOC:
fffd0934 1453 case NL80211_IFTYPE_STATION:
074ac8df 1454 case NL80211_IFTYPE_P2P_CLIENT:
ceca7b71 1455 if (!wdev->current_bss)
fffd0934
JB		 1456 return -ENOLINK;
1457 break;
de4fcbad 1458 case NL80211_IFTYPE_UNSPECIFIED:
6e0bd6c3 1459 case NL80211_IFTYPE_OCB:
de4fcbad 1460 case NL80211_IFTYPE_MONITOR:
cb3b7d87 1461 case NL80211_IFTYPE_NAN:
de4fcbad
JB		 1462 case NL80211_IFTYPE_P2P_DEVICE:
1463 case NL80211_IFTYPE_WDS:
1464 case NUM_NL80211_IFTYPES:
fffd0934
JB		 1465 return -EINVAL;
1466 }
1467
1468 return 0;
1469}
1470
664834de 1471static struct ieee80211_channel *nl80211_get_valid_chan(struct wiphy *wiphy,
942ba88b 1472 u32 freq)
664834de
JM		 1473{
1474 struct ieee80211_channel *chan;
1475
942ba88b 1476 chan = ieee80211_get_channel_khz(wiphy, freq);
664834de
JM		 1477 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
1478 return NULL;
1479 return chan;
1480}
1481
7527a782
JB		 1482static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
1483{
ae0be8de 1484 struct nlattr *nl_modes = nla_nest_start_noflag(msg, attr);
7527a782
JB		 1485 int i;
1486
1487 if (!nl_modes)
1488 goto nla_put_failure;
1489
1490 i = 0;
1491 while (ifmodes) {
9360ffd1
DM		 1492 if ((ifmodes & 1) && nla_put_flag(msg, i))
1493 goto nla_put_failure;
7527a782
JB		 1494 ifmodes >>= 1;
1495 i++;
1496 }
1497
1498 nla_nest_end(msg, nl_modes);
1499 return 0;
1500
1501nla_put_failure:
1502 return -ENOBUFS;
1503}
1504
1505static int nl80211_put_iface_combinations(struct wiphy *wiphy,
cdc89b97
JB		 1506 struct sk_buff *msg,
1507 bool large)
7527a782
JB		 1508{
1509 struct nlattr *nl_combis;
1510 int i, j;
1511
ae0be8de
MK		 1512 nl_combis = nla_nest_start_noflag(msg,
1513 NL80211_ATTR_INTERFACE_COMBINATIONS);
7527a782
JB		 1514 if (!nl_combis)
1515 goto nla_put_failure;
1516
1517 for (i = 0; i < wiphy->n_iface_combinations; i++) {
1518 const struct ieee80211_iface_combination *c;
1519 struct nlattr *nl_combi, *nl_limits;
1520
1521 c = &wiphy->iface_combinations[i];
1522
ae0be8de 1523 nl_combi = nla_nest_start_noflag(msg, i + 1);
7527a782
JB		 1524 if (!nl_combi)
1525 goto nla_put_failure;
1526
ae0be8de
MK		 1527 nl_limits = nla_nest_start_noflag(msg,
1528 NL80211_IFACE_COMB_LIMITS);
7527a782
JB		 1529 if (!nl_limits)
1530 goto nla_put_failure;
1531
1532 for (j = 0; j < c->n_limits; j++) {
1533 struct nlattr *nl_limit;
1534
ae0be8de 1535 nl_limit = nla_nest_start_noflag(msg, j + 1);
7527a782
JB		 1536 if (!nl_limit)
1537 goto nla_put_failure;
9360ffd1
DM		 1538 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
1539 c->limits[j].max))
1540 goto nla_put_failure;
7527a782
JB		 1541 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
1542 c->limits[j].types))
1543 goto nla_put_failure;
1544 nla_nest_end(msg, nl_limit);
1545 }
1546
1547 nla_nest_end(msg, nl_limits);
1548
9360ffd1
DM		 1549 if (c->beacon_int_infra_match &&
1550 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
1551 goto nla_put_failure;
1552 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
1553 c->num_different_channels) ||
1554 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
1555 c->max_interfaces))
1556 goto nla_put_failure;
cdc89b97 1557 if (large &&
8c48b50a
FF		 1558 (nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
1559 c->radar_detect_widths) ||
1560 nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_REGIONS,
1561 c->radar_detect_regions)))
cdc89b97 1562 goto nla_put_failure;
0c317a02
PK		 1563 if (c->beacon_int_min_gcd &&
1564 nla_put_u32(msg, NL80211_IFACE_COMB_BI_MIN_GCD,
1565 c->beacon_int_min_gcd))
1566 goto nla_put_failure;
7527a782
JB		 1567
1568 nla_nest_end(msg, nl_combi);
1569 }
1570
1571 nla_nest_end(msg, nl_combis);
1572
1573 return 0;
1574nla_put_failure:
1575 return -ENOBUFS;
1576}
1577
3713b4e3 1578#ifdef CONFIG_PM
b56cf720
JB		 1579static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
1580 struct sk_buff *msg)
1581{
964dc9e2 1582 const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan->tcp;
b56cf720
JB		 1583 struct nlattr *nl_tcp;
1584
1585 if (!tcp)
1586 return 0;
1587
ae0be8de
MK		 1588 nl_tcp = nla_nest_start_noflag(msg,
1589 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
b56cf720
JB		 1590 if (!nl_tcp)
1591 return -ENOBUFS;
1592
1593 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1594 tcp->data_payload_max))
1595 return -ENOBUFS;
1596
1597 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1598 tcp->data_payload_max))
1599 return -ENOBUFS;
1600
1601 if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
1602 return -ENOBUFS;
1603
1604 if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
1605 sizeof(*tcp->tok), tcp->tok))
1606 return -ENOBUFS;
1607
1608 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
1609 tcp->data_interval_max))
1610 return -ENOBUFS;
1611
1612 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
1613 tcp->wake_payload_max))
1614 return -ENOBUFS;
1615
1616 nla_nest_end(msg, nl_tcp);
1617 return 0;
1618}
1619
3713b4e3 1620static int nl80211_send_wowlan(struct sk_buff *msg,
1b8ec87a 1621 struct cfg80211_registered_device *rdev,
b56cf720 1622 bool large)
55682965 1623{
3713b4e3 1624 struct nlattr *nl_wowlan;
55682965 1625
1b8ec87a 1626 if (!rdev->wiphy.wowlan)
3713b4e3 1627 return 0;
55682965 1628
ae0be8de
MK		 1629 nl_wowlan = nla_nest_start_noflag(msg,
1630 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
3713b4e3
JB		 1631 if (!nl_wowlan)
1632 return -ENOBUFS;
9360ffd1 1633
1b8ec87a 1634 if (((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_ANY) &&
3713b4e3 1635 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1b8ec87a 1636 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_DISCONNECT) &&
3713b4e3 1637 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1b8ec87a 1638 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT) &&
3713b4e3 1639 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1b8ec87a 1640 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
3713b4e3 1641 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1b8ec87a 1642 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
3713b4e3 1643 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1b8ec87a 1644 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
3713b4e3 1645 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1b8ec87a 1646 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
3713b4e3 1647 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1b8ec87a 1648 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
3713b4e3
JB		 1649 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1650 return -ENOBUFS;
9360ffd1 1651
1b8ec87a 1652 if (rdev->wiphy.wowlan->n_patterns) {
50ac6607 1653 struct nl80211_pattern_support pat = {
1b8ec87a
ZG		 1654 .max_patterns = rdev->wiphy.wowlan->n_patterns,
1655 .min_pattern_len = rdev->wiphy.wowlan->pattern_min_len,
1656 .max_pattern_len = rdev->wiphy.wowlan->pattern_max_len,
1657 .max_pkt_offset = rdev->wiphy.wowlan->max_pkt_offset,
3713b4e3 1658 };
9360ffd1 1659
3713b4e3
JB		 1660 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1661 sizeof(pat), &pat))
1662 return -ENOBUFS;
1663 }
9360ffd1 1664
75453ccb
LC		 1665 if ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_NET_DETECT) &&
1666 nla_put_u32(msg, NL80211_WOWLAN_TRIG_NET_DETECT,
1667 rdev->wiphy.wowlan->max_nd_match_sets))
1668 return -ENOBUFS;
1669
1b8ec87a 1670 if (large && nl80211_send_wowlan_tcp_caps(rdev, msg))
b56cf720
JB		 1671 return -ENOBUFS;
1672
3713b4e3 1673 nla_nest_end(msg, nl_wowlan);
9360ffd1 1674
3713b4e3
JB		 1675 return 0;
1676}
1677#endif
9360ffd1 1678
be29b99a 1679static int nl80211_send_coalesce(struct sk_buff *msg,
1b8ec87a 1680 struct cfg80211_registered_device *rdev)
be29b99a
AK		 1681{
1682 struct nl80211_coalesce_rule_support rule;
1683
1b8ec87a 1684 if (!rdev->wiphy.coalesce)
be29b99a
AK		 1685 return 0;
1686
1b8ec87a
ZG		 1687 rule.max_rules = rdev->wiphy.coalesce->n_rules;
1688 rule.max_delay = rdev->wiphy.coalesce->max_delay;
1689 rule.pat.max_patterns = rdev->wiphy.coalesce->n_patterns;
1690 rule.pat.min_pattern_len = rdev->wiphy.coalesce->pattern_min_len;
1691 rule.pat.max_pattern_len = rdev->wiphy.coalesce->pattern_max_len;
1692 rule.pat.max_pkt_offset = rdev->wiphy.coalesce->max_pkt_offset;
be29b99a
AK		 1693
1694 if (nla_put(msg, NL80211_ATTR_COALESCE_RULE, sizeof(rule), &rule))
1695 return -ENOBUFS;
1696
1697 return 0;
1698}
1699
c4cbaf79
LC		 1700static int
1701nl80211_send_iftype_data(struct sk_buff *msg,
22395217 1702 const struct ieee80211_supported_band *sband,
c4cbaf79
LC		 1703 const struct ieee80211_sband_iftype_data *iftdata)
1704{
1705 const struct ieee80211_sta_he_cap *he_cap = &iftdata->he_cap;
1706
1707 if (nl80211_put_iftypes(msg, NL80211_BAND_IFTYPE_ATTR_IFTYPES,
1708 iftdata->types_mask))
1709 return -ENOBUFS;
1710
1711 if (he_cap->has_he) {
1712 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MAC,
1713 sizeof(he_cap->he_cap_elem.mac_cap_info),
1714 he_cap->he_cap_elem.mac_cap_info) ||
1715 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PHY,
1716 sizeof(he_cap->he_cap_elem.phy_cap_info),
1717 he_cap->he_cap_elem.phy_cap_info) ||
1718 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET,
1719 sizeof(he_cap->he_mcs_nss_supp),
1720 &he_cap->he_mcs_nss_supp) ||
1721 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PPE,
1722 sizeof(he_cap->ppe_thres), he_cap->ppe_thres))
1723 return -ENOBUFS;
1724 }
1725
22395217
JB		 1726 if (sband->band == NL80211_BAND_6GHZ &&
1727 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_6GHZ_CAPA,
1728 sizeof(iftdata->he_6ghz_capa),
1729 &iftdata->he_6ghz_capa))
1730 return -ENOBUFS;
1731
c4cbaf79
LC		 1732 return 0;
1733}
1734
3713b4e3 1735static int nl80211_send_band_rateinfo(struct sk_buff *msg,
f8d504ca
JB		 1736 struct ieee80211_supported_band *sband,
1737 bool large)
3713b4e3
JB		 1738{
1739 struct nlattr *nl_rates, *nl_rate;
1740 struct ieee80211_rate *rate;
1741 int i;
87bbbe22 1742
3713b4e3
JB		 1743 /* add HT info */
1744 if (sband->ht_cap.ht_supported &&
1745 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1746 sizeof(sband->ht_cap.mcs),
1747 &sband->ht_cap.mcs) ||
1748 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1749 sband->ht_cap.cap) ||
1750 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1751 sband->ht_cap.ampdu_factor) ||
1752 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1753 sband->ht_cap.ampdu_density)))
1754 return -ENOBUFS;
afe0cbf8 1755
3713b4e3
JB		 1756 /* add VHT info */
1757 if (sband->vht_cap.vht_supported &&
1758 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1759 sizeof(sband->vht_cap.vht_mcs),
1760 &sband->vht_cap.vht_mcs) ||
1761 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1762 sband->vht_cap.cap)))
1763 return -ENOBUFS;
f59ac048 1764
f8d504ca 1765 if (large && sband->n_iftype_data) {
c4cbaf79 1766 struct nlattr *nl_iftype_data =
ae0be8de
MK		 1767 nla_nest_start_noflag(msg,
1768 NL80211_BAND_ATTR_IFTYPE_DATA);
c4cbaf79
LC		 1769 int err;
1770
1771 if (!nl_iftype_data)
1772 return -ENOBUFS;
1773
1774 for (i = 0; i < sband->n_iftype_data; i++) {
1775 struct nlattr *iftdata;
1776
ae0be8de 1777 iftdata = nla_nest_start_noflag(msg, i + 1);
c4cbaf79
LC		 1778 if (!iftdata)
1779 return -ENOBUFS;
1780
22395217 1781 err = nl80211_send_iftype_data(msg, sband,
c4cbaf79
LC		 1782 &sband->iftype_data[i]);
1783 if (err)
1784 return err;
1785
1786 nla_nest_end(msg, iftdata);
1787 }
1788
1789 nla_nest_end(msg, nl_iftype_data);
1790 }
1791
2a38075c 1792 /* add EDMG info */
f8d504ca 1793 if (large && sband->edmg_cap.channels &&
2a38075c
AAL		 1794 (nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_CHANNELS,
1795 sband->edmg_cap.channels) ||
1796 nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_BW_CONFIG,
1797 sband->edmg_cap.bw_config)))
1798
1799 return -ENOBUFS;
1800
3713b4e3 1801 /* add bitrates */
ae0be8de 1802 nl_rates = nla_nest_start_noflag(msg, NL80211_BAND_ATTR_RATES);
3713b4e3
JB		 1803 if (!nl_rates)
1804 return -ENOBUFS;
ee688b00 1805
3713b4e3 1806 for (i = 0; i < sband->n_bitrates; i++) {
ae0be8de 1807 nl_rate = nla_nest_start_noflag(msg, i);
3713b4e3
JB		 1808 if (!nl_rate)
1809 return -ENOBUFS;
ee688b00 1810
3713b4e3
JB		 1811 rate = &sband->bitrates[i];
1812 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1813 rate->bitrate))
1814 return -ENOBUFS;
1815 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1816 nla_put_flag(msg,
1817 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1818 return -ENOBUFS;
ee688b00 1819
3713b4e3
JB		 1820 nla_nest_end(msg, nl_rate);
1821 }
d51626df 1822
3713b4e3 1823 nla_nest_end(msg, nl_rates);
bf0c111e 1824
3713b4e3
JB		 1825 return 0;
1826}
ee688b00 1827
3713b4e3
JB		 1828static int
1829nl80211_send_mgmt_stypes(struct sk_buff *msg,
1830 const struct ieee80211_txrx_stypes *mgmt_stypes)
1831{
1832 u16 stypes;
1833 struct nlattr *nl_ftypes, *nl_ifs;
1834 enum nl80211_iftype ift;
1835 int i;
ee688b00 1836
3713b4e3
JB		 1837 if (!mgmt_stypes)
1838 return 0;
5dab3b8a 1839
ae0be8de 1840 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_TX_FRAME_TYPES);
3713b4e3
JB		 1841 if (!nl_ifs)
1842 return -ENOBUFS;
e2f367f2 1843
3713b4e3 1844 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1845 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1846 if (!nl_ftypes)
1847 return -ENOBUFS;
1848 i = 0;
1849 stypes = mgmt_stypes[ift].tx;
1850 while (stypes) {
1851 if ((stypes & 1) &&
1852 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1853 (i << 4) | IEEE80211_FTYPE_MGMT))
1854 return -ENOBUFS;
1855 stypes >>= 1;
1856 i++;
ee688b00 1857 }
3713b4e3
JB		 1858 nla_nest_end(msg, nl_ftypes);
1859 }
ee688b00 1860
3713b4e3 1861 nla_nest_end(msg, nl_ifs);
ee688b00 1862
ae0be8de 1863 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_RX_FRAME_TYPES);
3713b4e3
JB		 1864 if (!nl_ifs)
1865 return -ENOBUFS;
ee688b00 1866
3713b4e3 1867 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1868 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1869 if (!nl_ftypes)
1870 return -ENOBUFS;
1871 i = 0;
1872 stypes = mgmt_stypes[ift].rx;
1873 while (stypes) {
1874 if ((stypes & 1) &&
1875 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1876 (i << 4) | IEEE80211_FTYPE_MGMT))
1877 return -ENOBUFS;
1878 stypes >>= 1;
1879 i++;
1880 }
1881 nla_nest_end(msg, nl_ftypes);
1882 }
1883 nla_nest_end(msg, nl_ifs);
ee688b00 1884
3713b4e3
JB		 1885 return 0;
1886}
ee688b00 1887
1794899e
JB		 1888#define CMD(op, n) \
1889 do { \
1890 if (rdev->ops->op) { \
1891 i++; \
1892 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1893 goto nla_put_failure; \
1894 } \
1895 } while (0)
1896
1897static int nl80211_add_commands_unsplit(struct cfg80211_registered_device *rdev,
1898 struct sk_buff *msg)
1899{
1900 int i = 0;
1901
1902 /*
1903 * do *NOT* add anything into this function, new things need to be
1904 * advertised only to new versions of userspace that can deal with
1905 * the split (and they can't possibly care about new features...
1906 */
1907 CMD(add_virtual_intf, NEW_INTERFACE);
1908 CMD(change_virtual_intf, SET_INTERFACE);
1909 CMD(add_key, NEW_KEY);
1910 CMD(start_ap, START_AP);
1911 CMD(add_station, NEW_STATION);
1912 CMD(add_mpath, NEW_MPATH);
1913 CMD(update_mesh_config, SET_MESH_CONFIG);
1914 CMD(change_bss, SET_BSS);
1915 CMD(auth, AUTHENTICATE);
1916 CMD(assoc, ASSOCIATE);
1917 CMD(deauth, DEAUTHENTICATE);
1918 CMD(disassoc, DISASSOCIATE);
1919 CMD(join_ibss, JOIN_IBSS);
1920 CMD(join_mesh, JOIN_MESH);
1921 CMD(set_pmksa, SET_PMKSA);
1922 CMD(del_pmksa, DEL_PMKSA);
1923 CMD(flush_pmksa, FLUSH_PMKSA);
1924 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1925 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
1926 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
1927 CMD(mgmt_tx, FRAME);
1928 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
1929 if (rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
1930 i++;
1931 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
1932 goto nla_put_failure;
1933 }
1934 if (rdev->ops->set_monitor_channel || rdev->ops->start_ap ||
1935 rdev->ops->join_mesh) {
1936 i++;
1937 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1938 goto nla_put_failure;
1939 }
1794899e
JB		 1940 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1941 CMD(tdls_mgmt, TDLS_MGMT);
1942 CMD(tdls_oper, TDLS_OPER);
1943 }
ca986ad9 1944 if (rdev->wiphy.max_sched_scan_reqs)
1794899e
JB		 1945 CMD(sched_scan_start, START_SCHED_SCAN);
1946 CMD(probe_client, PROBE_CLIENT);
1947 CMD(set_noack_map, SET_NOACK_MAP);
1948 if (rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1949 i++;
1950 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1951 goto nla_put_failure;
1952 }
1953 CMD(start_p2p_device, START_P2P_DEVICE);
1954 CMD(set_mcast_rate, SET_MCAST_RATE);
1955#ifdef CONFIG_NL80211_TESTMODE
1956 CMD(testmode_cmd, TESTMODE);
1957#endif
1958
1959 if (rdev->ops->connect || rdev->ops->auth) {
1960 i++;
1961 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
1962 goto nla_put_failure;
1963 }
1964
1965 if (rdev->ops->disconnect || rdev->ops->deauth) {
1966 i++;
1967 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1968 goto nla_put_failure;
1969 }
1970
1971 return i;
1972 nla_put_failure:
1973 return -ENOBUFS;
1974}
1975
9bb7e0f2
JB		 1976static int
1977nl80211_send_pmsr_ftm_capa(const struct cfg80211_pmsr_capabilities *cap,
1978 struct sk_buff *msg)
1979{
1980 struct nlattr *ftm;
1981
1982 if (!cap->ftm.supported)
1983 return 0;
1984
ae0be8de 1985 ftm = nla_nest_start_noflag(msg, NL80211_PMSR_TYPE_FTM);
9bb7e0f2
JB		 1986 if (!ftm)
1987 return -ENOBUFS;
1988
1989 if (cap->ftm.asap && nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_ASAP))
1990 return -ENOBUFS;
1991 if (cap->ftm.non_asap &&
1992 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP))
1993 return -ENOBUFS;
1994 if (cap->ftm.request_lci &&
1995 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI))
1996 return -ENOBUFS;
1997 if (cap->ftm.request_civicloc &&
1998 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC))
1999 return -ENOBUFS;
2000 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES,
2001 cap->ftm.preambles))
2002 return -ENOBUFS;
2003 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS,
2004 cap->ftm.bandwidths))
2005 return -ENOBUFS;
2006 if (cap->ftm.max_bursts_exponent >= 0 &&
2007 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT,
2008 cap->ftm.max_bursts_exponent))
2009 return -ENOBUFS;
2010 if (cap->ftm.max_ftms_per_burst &&
2011 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST,
2012 cap->ftm.max_ftms_per_burst))
2013 return -ENOBUFS;
efb5520d
AS		 2014 if (cap->ftm.trigger_based &&
2015 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED))
2016 return -ENOBUFS;
2017 if (cap->ftm.non_trigger_based &&
2018 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED))
2019 return -ENOBUFS;
9bb7e0f2
JB		 2020
2021 nla_nest_end(msg, ftm);
2022 return 0;
2023}
2024
2025static int nl80211_send_pmsr_capa(struct cfg80211_registered_device *rdev,
2026 struct sk_buff *msg)
2027{
2028 const struct cfg80211_pmsr_capabilities *cap = rdev->wiphy.pmsr_capa;
2029 struct nlattr *pmsr, *caps;
2030
2031 if (!cap)
2032 return 0;
2033
2034 /*
2035 * we don't need to clean up anything here since the caller
2036 * will genlmsg_cancel() if we fail
2037 */
2038
ae0be8de 2039 pmsr = nla_nest_start_noflag(msg, NL80211_ATTR_PEER_MEASUREMENTS);
9bb7e0f2
JB		 2040 if (!pmsr)
2041 return -ENOBUFS;
2042
2043 if (nla_put_u32(msg, NL80211_PMSR_ATTR_MAX_PEERS, cap->max_peers))
2044 return -ENOBUFS;
2045
2046 if (cap->report_ap_tsf &&
2047 nla_put_flag(msg, NL80211_PMSR_ATTR_REPORT_AP_TSF))
2048 return -ENOBUFS;
2049
2050 if (cap->randomize_mac_addr &&
2051 nla_put_flag(msg, NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR))
2052 return -ENOBUFS;
2053
ae0be8de 2054 caps = nla_nest_start_noflag(msg, NL80211_PMSR_ATTR_TYPE_CAPA);
9bb7e0f2
JB		 2055 if (!caps)
2056 return -ENOBUFS;
2057
2058 if (nl80211_send_pmsr_ftm_capa(cap, msg))
2059 return -ENOBUFS;
2060
2061 nla_nest_end(msg, caps);
2062 nla_nest_end(msg, pmsr);
2063
2064 return 0;
2065}
2066
d6039a34
VJ		 2067static int
2068nl80211_put_iftype_akm_suites(struct cfg80211_registered_device *rdev,
2069 struct sk_buff *msg)
2070{
2071 int i;
2072 struct nlattr *nested, *nested_akms;
2073 const struct wiphy_iftype_akm_suites *iftype_akms;
2074
2075 if (!rdev->wiphy.num_iftype_akm_suites ||
2076 !rdev->wiphy.iftype_akm_suites)
2077 return 0;
2078
2079 nested = nla_nest_start(msg, NL80211_ATTR_IFTYPE_AKM_SUITES);
2080 if (!nested)
2081 return -ENOBUFS;
2082
2083 for (i = 0; i < rdev->wiphy.num_iftype_akm_suites; i++) {
2084 nested_akms = nla_nest_start(msg, i + 1);
2085 if (!nested_akms)
2086 return -ENOBUFS;
2087
2088 iftype_akms = &rdev->wiphy.iftype_akm_suites[i];
2089
2090 if (nl80211_put_iftypes(msg, NL80211_IFTYPE_AKM_ATTR_IFTYPES,
2091 iftype_akms->iftypes_mask))
2092 return -ENOBUFS;
2093
2094 if (nla_put(msg, NL80211_IFTYPE_AKM_ATTR_SUITES,
2095 sizeof(u32) * iftype_akms->n_akm_suites,
2096 iftype_akms->akm_suites)) {
2097 return -ENOBUFS;
2098 }
2099 nla_nest_end(msg, nested_akms);
2100 }
2101
2102 nla_nest_end(msg, nested);
2103
2104 return 0;
2105}
2106
3710a8a6
JB		 2107static int
2108nl80211_put_tid_config_support(struct cfg80211_registered_device *rdev,
2109 struct sk_buff *msg)
2110{
2111 struct nlattr *supp;
2112
2113 if (!rdev->wiphy.tid_config_support.vif &&
2114 !rdev->wiphy.tid_config_support.peer)
2115 return 0;
2116
2117 supp = nla_nest_start(msg, NL80211_ATTR_TID_CONFIG);
2118 if (!supp)
2119 return -ENOSPC;
2120
2121 if (rdev->wiphy.tid_config_support.vif &&
2122 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_VIF_SUPP,
2123 rdev->wiphy.tid_config_support.vif,
2124 NL80211_TID_CONFIG_ATTR_PAD))
2125 goto fail;
2126
2127 if (rdev->wiphy.tid_config_support.peer &&
2128 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_PEER_SUPP,
2129 rdev->wiphy.tid_config_support.peer,
2130 NL80211_TID_CONFIG_ATTR_PAD))
2131 goto fail;
2132
6a21d16c
T		 2133 /* for now we just use the same value ... makes more sense */
2134 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_SHORT,
2135 rdev->wiphy.tid_config_support.max_retry))
2136 goto fail;
2137 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_LONG,
2138 rdev->wiphy.tid_config_support.max_retry))
2139 goto fail;
2140
3710a8a6
JB		 2141 nla_nest_end(msg, supp);
2142
2143 return 0;
2144fail:
2145 nla_nest_cancel(msg, supp);
2146 return -ENOBUFS;
2147}
2148
6bdb68ce
CH		 2149static int
2150nl80211_put_sar_specs(struct cfg80211_registered_device *rdev,
2151 struct sk_buff *msg)
2152{
2153 struct nlattr *sar_capa, *specs, *sub_freq_range;
2154 u8 num_freq_ranges;
2155 int i;
2156
2157 if (!rdev->wiphy.sar_capa)
2158 return 0;
2159
2160 num_freq_ranges = rdev->wiphy.sar_capa->num_freq_ranges;
2161
2162 sar_capa = nla_nest_start(msg, NL80211_ATTR_SAR_SPEC);
2163 if (!sar_capa)
2164 return -ENOSPC;
2165
2166 if (nla_put_u32(msg, NL80211_SAR_ATTR_TYPE, rdev->wiphy.sar_capa->type))
2167 goto fail;
2168
2169 specs = nla_nest_start(msg, NL80211_SAR_ATTR_SPECS);
2170 if (!specs)
2171 goto fail;
2172
2173 /* report supported freq_ranges */
2174 for (i = 0; i < num_freq_ranges; i++) {
2175 sub_freq_range = nla_nest_start(msg, i + 1);
2176 if (!sub_freq_range)
2177 goto fail;
2178
2179 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_START_FREQ,
2180 rdev->wiphy.sar_capa->freq_ranges[i].start_freq))
2181 goto fail;
2182
2183 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_END_FREQ,
2184 rdev->wiphy.sar_capa->freq_ranges[i].end_freq))
2185 goto fail;
2186
2187 nla_nest_end(msg, sub_freq_range);
2188 }
2189
2190 nla_nest_end(msg, specs);
2191 nla_nest_end(msg, sar_capa);
2192
2193 return 0;
2194fail:
2195 nla_nest_cancel(msg, sar_capa);
2196 return -ENOBUFS;
2197}
2198
86e8cf98
JB		 2199struct nl80211_dump_wiphy_state {
2200 s64 filter_wiphy;
2201 long start;
019ae3a9 2202 long split_start, band_start, chan_start, capa_start;
86e8cf98
JB		 2203 bool split;
2204};
2205
1b8ec87a 2206static int nl80211_send_wiphy(struct cfg80211_registered_device *rdev,
3bb20556 2207 enum nl80211_commands cmd,
3713b4e3 2208 struct sk_buff *msg, u32 portid, u32 seq,
86e8cf98 2209 int flags, struct nl80211_dump_wiphy_state *state)
3713b4e3
JB		 2210{
2211 void *hdr;
2212 struct nlattr *nl_bands, *nl_band;
2213 struct nlattr *nl_freqs, *nl_freq;
2214 struct nlattr *nl_cmds;
57fbcce3 2215 enum nl80211_band band;
3713b4e3
JB		 2216 struct ieee80211_channel *chan;
2217 int i;
2218 const struct ieee80211_txrx_stypes *mgmt_stypes =
1b8ec87a 2219 rdev->wiphy.mgmt_stypes;
fe1abafd 2220 u32 features;
ee688b00 2221
3bb20556 2222 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
3713b4e3
JB		 2223 if (!hdr)
2224 return -ENOBUFS;
ee688b00 2225
86e8cf98
JB		 2226 if (WARN_ON(!state))
2227 return -EINVAL;
ee688b00 2228
1b8ec87a 2229 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3713b4e3 2230 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
1b8ec87a 2231 wiphy_name(&rdev->wiphy)) ||
3713b4e3
JB		 2232 nla_put_u32(msg, NL80211_ATTR_GENERATION,
2233 cfg80211_rdev_list_generation))
8fdc621d
JB		 2234 goto nla_put_failure;
2235
3bb20556
JB		 2236 if (cmd != NL80211_CMD_NEW_WIPHY)
2237 goto finish;
2238
86e8cf98 2239 switch (state->split_start) {
3713b4e3
JB		 2240 case 0:
2241 if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
1b8ec87a 2242 rdev->wiphy.retry_short) ||
3713b4e3 2243 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
1b8ec87a 2244 rdev->wiphy.retry_long) ||
3713b4e3 2245 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
1b8ec87a 2246 rdev->wiphy.frag_threshold) ||
3713b4e3 2247 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
1b8ec87a 2248 rdev->wiphy.rts_threshold) ||
3713b4e3 2249 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
1b8ec87a 2250 rdev->wiphy.coverage_class) ||
3713b4e3 2251 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
1b8ec87a 2252 rdev->wiphy.max_scan_ssids) ||
3713b4e3 2253 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
1b8ec87a 2254 rdev->wiphy.max_sched_scan_ssids) ||
3713b4e3 2255 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
1b8ec87a 2256 rdev->wiphy.max_scan_ie_len) ||
3713b4e3 2257 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
1b8ec87a 2258 rdev->wiphy.max_sched_scan_ie_len) ||
3713b4e3 2259 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
f8d504ca 2260 rdev->wiphy.max_match_sets))
9360ffd1 2261 goto nla_put_failure;
3713b4e3 2262
1b8ec87a 2263 if ((rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
3713b4e3 2264 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
aa430da4 2265 goto nla_put_failure;
1b8ec87a 2266 if ((rdev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
3713b4e3
JB		 2267 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
2268 goto nla_put_failure;
1b8ec87a 2269 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3713b4e3
JB		 2270 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
2271 goto nla_put_failure;
1b8ec87a 2272 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
3713b4e3
JB		 2273 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
2274 goto nla_put_failure;
1b8ec87a 2275 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
3713b4e3
JB		 2276 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
2277 goto nla_put_failure;
1b8ec87a 2278 if ((rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
3713b4e3 2279 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
9360ffd1 2280 goto nla_put_failure;
86e8cf98
JB		 2281 state->split_start++;
2282 if (state->split)
3713b4e3 2283 break;
7b506ff6 2284 fallthrough;
3713b4e3
JB		 2285 case 1:
2286 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
1b8ec87a
ZG		 2287 sizeof(u32) * rdev->wiphy.n_cipher_suites,
2288 rdev->wiphy.cipher_suites))
3713b4e3 2289 goto nla_put_failure;
4745fc09 2290
3713b4e3 2291 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
1b8ec87a 2292 rdev->wiphy.max_num_pmkids))
3713b4e3 2293 goto nla_put_failure;
b23aa676 2294
1b8ec87a 2295 if ((rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
3713b4e3 2296 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
9360ffd1 2297 goto nla_put_failure;
b23aa676 2298
3713b4e3 2299 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
1b8ec87a 2300 rdev->wiphy.available_antennas_tx) ||
3713b4e3 2301 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
1b8ec87a 2302 rdev->wiphy.available_antennas_rx))
9360ffd1 2303 goto nla_put_failure;
b23aa676 2304
1b8ec87a 2305 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
3713b4e3 2306 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
1b8ec87a 2307 rdev->wiphy.probe_resp_offload))
3713b4e3 2308 goto nla_put_failure;
8fdc621d 2309
1b8ec87a
ZG		 2310 if ((rdev->wiphy.available_antennas_tx ||
2311 rdev->wiphy.available_antennas_rx) &&
2312 rdev->ops->get_antenna) {
3713b4e3
JB		 2313 u32 tx_ant = 0, rx_ant = 0;
2314 int res;
7a087e74 2315
1b8ec87a 2316 res = rdev_get_antenna(rdev, &tx_ant, &rx_ant);
3713b4e3
JB		 2317 if (!res) {
2318 if (nla_put_u32(msg,
2319 NL80211_ATTR_WIPHY_ANTENNA_TX,
2320 tx_ant) ||
2321 nla_put_u32(msg,
2322 NL80211_ATTR_WIPHY_ANTENNA_RX,
2323 rx_ant))
2324 goto nla_put_failure;
2325 }
2326 }
a293911d 2327
86e8cf98
JB		 2328 state->split_start++;
2329 if (state->split)
3713b4e3 2330 break;
7b506ff6 2331 fallthrough;
3713b4e3
JB		 2332 case 2:
2333 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1b8ec87a 2334 rdev->wiphy.interface_modes))
3713b4e3 2335 goto nla_put_failure;
86e8cf98
JB		 2336 state->split_start++;
2337 if (state->split)
3713b4e3 2338 break;
7b506ff6 2339 fallthrough;
3713b4e3 2340 case 3:
ae0be8de
MK		 2341 nl_bands = nla_nest_start_noflag(msg,
2342 NL80211_ATTR_WIPHY_BANDS);
3713b4e3
JB		 2343 if (!nl_bands)
2344 goto nla_put_failure;
f7ca38df 2345
86e8cf98 2346 for (band = state->band_start;
57fbcce3 2347 band < NUM_NL80211_BANDS; band++) {
3713b4e3 2348 struct ieee80211_supported_band *sband;
2e161f78 2349
f8d504ca
JB		 2350 /* omit higher bands for ancient software */
2351 if (band > NL80211_BAND_5GHZ && !state->split)
2352 break;
2353
1b8ec87a 2354 sband = rdev->wiphy.bands[band];
2e161f78 2355
3713b4e3
JB		 2356 if (!sband)
2357 continue;
2358
ae0be8de 2359 nl_band = nla_nest_start_noflag(msg, band);
3713b4e3 2360 if (!nl_band)
2e161f78 2361 goto nla_put_failure;
3713b4e3 2362
86e8cf98 2363 switch (state->chan_start) {
3713b4e3 2364 case 0:
f8d504ca
JB		 2365 if (nl80211_send_band_rateinfo(msg, sband,
2366 state->split))
9360ffd1 2367 goto nla_put_failure;
86e8cf98
JB		 2368 state->chan_start++;
2369 if (state->split)
3713b4e3 2370 break;
7b506ff6 2371 fallthrough;
3713b4e3
JB		 2372 default:
2373 /* add frequencies */
ae0be8de
MK		 2374 nl_freqs = nla_nest_start_noflag(msg,
2375 NL80211_BAND_ATTR_FREQS);
3713b4e3
JB		 2376 if (!nl_freqs)
2377 goto nla_put_failure;
2378
86e8cf98 2379 for (i = state->chan_start - 1;
3713b4e3
JB		 2380 i < sband->n_channels;
2381 i++) {
ae0be8de
MK		 2382 nl_freq = nla_nest_start_noflag(msg,
2383 i);
3713b4e3
JB		 2384 if (!nl_freq)
2385 goto nla_put_failure;
2386
2387 chan = &sband->channels[i];
2388
86e8cf98 2389 if (nl80211_msg_put_channel(
50f32718 2390 msg, &rdev->wiphy, chan,
86e8cf98 2391 state->split))
3713b4e3
JB		 2392 goto nla_put_failure;
2393
2394 nla_nest_end(msg, nl_freq);
86e8cf98 2395 if (state->split)
3713b4e3
JB		 2396 break;
2397 }
2398 if (i < sband->n_channels)
86e8cf98 2399 state->chan_start = i + 2;
3713b4e3 2400 else
86e8cf98 2401 state->chan_start = 0;
3713b4e3
JB		 2402 nla_nest_end(msg, nl_freqs);
2403 }
2404
2405 nla_nest_end(msg, nl_band);
2406
86e8cf98 2407 if (state->split) {
3713b4e3 2408 /* start again here */
86e8cf98 2409 if (state->chan_start)
3713b4e3
JB		 2410 band--;
2411 break;
2e161f78 2412 }
2e161f78 2413 }
3713b4e3 2414 nla_nest_end(msg, nl_bands);
2e161f78 2415
57fbcce3 2416 if (band < NUM_NL80211_BANDS)
86e8cf98 2417 state->band_start = band + 1;
3713b4e3 2418 else
86e8cf98 2419 state->band_start = 0;
74b70a4e 2420
3713b4e3 2421 /* if bands & channels are done, continue outside */
86e8cf98
JB		 2422 if (state->band_start == 0 && state->chan_start == 0)
2423 state->split_start++;
2424 if (state->split)
3713b4e3 2425 break;
7b506ff6 2426 fallthrough;
3713b4e3 2427 case 4:
ae0be8de
MK		 2428 nl_cmds = nla_nest_start_noflag(msg,
2429 NL80211_ATTR_SUPPORTED_COMMANDS);
3713b4e3 2430 if (!nl_cmds)
2e161f78
JB		 2431 goto nla_put_failure;
2432
1794899e
JB		 2433 i = nl80211_add_commands_unsplit(rdev, msg);
2434 if (i < 0)
2435 goto nla_put_failure;
86e8cf98 2436 if (state->split) {
5de17984
AS		 2437 CMD(crit_proto_start, CRIT_PROTOCOL_START);
2438 CMD(crit_proto_stop, CRIT_PROTOCOL_STOP);
1b8ec87a 2439 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH)
16ef1fe2 2440 CMD(channel_switch, CHANNEL_SWITCH);
02df00eb 2441 CMD(set_qos_map, SET_QOS_MAP);
723e73ac
JB		 2442 if (rdev->wiphy.features &
2443 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION)
960d01ac 2444 CMD(add_tx_ts, ADD_TX_TS);
ce0ce13a 2445 CMD(set_multicast_to_unicast, SET_MULTICAST_TO_UNICAST);
088e8df8 2446 CMD(update_connect_params, UPDATE_CONNECT_PARAMS);
7010998c 2447 CMD(update_ft_ies, UPDATE_FT_IES);
6bdb68ce
CH		 2448 if (rdev->wiphy.sar_capa)
2449 CMD(set_sar_specs, SET_SAR_SPECS);
5de17984 2450 }
3713b4e3 2451#undef CMD
ff1b6e69 2452
3713b4e3 2453 nla_nest_end(msg, nl_cmds);
86e8cf98
JB		 2454 state->split_start++;
2455 if (state->split)
3713b4e3 2456 break;
7b506ff6 2457 fallthrough;
3713b4e3 2458 case 5:
1b8ec87a
ZG		 2459 if (rdev->ops->remain_on_channel &&
2460 (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
3713b4e3
JB		 2461 nla_put_u32(msg,
2462 NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1b8ec87a 2463 rdev->wiphy.max_remain_on_channel_duration))
3713b4e3
JB		 2464 goto nla_put_failure;
2465
1b8ec87a 2466 if ((rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
3713b4e3
JB		 2467 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
2468 goto nla_put_failure;
2469
86e8cf98
JB		 2470 state->split_start++;
2471 if (state->split)
3713b4e3 2472 break;
7b506ff6 2473 fallthrough;
3713b4e3
JB		 2474 case 6:
2475#ifdef CONFIG_PM
1b8ec87a 2476 if (nl80211_send_wowlan(msg, rdev, state->split))
3713b4e3 2477 goto nla_put_failure;
86e8cf98
JB		 2478 state->split_start++;
2479 if (state->split)
3713b4e3
JB		 2480 break;
2481#else
86e8cf98 2482 state->split_start++;
dfb89c56 2483#endif
7b506ff6 2484 fallthrough;
3713b4e3
JB		 2485 case 7:
2486 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1b8ec87a 2487 rdev->wiphy.software_iftypes))
3713b4e3 2488 goto nla_put_failure;
ff1b6e69 2489
1b8ec87a 2490 if (nl80211_put_iface_combinations(&rdev->wiphy, msg,
86e8cf98 2491 state->split))
3713b4e3 2492 goto nla_put_failure;
7527a782 2493
86e8cf98
JB		 2494 state->split_start++;
2495 if (state->split)
3713b4e3 2496 break;
7b506ff6 2497 fallthrough;
3713b4e3 2498 case 8:
1b8ec87a 2499 if ((rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
3713b4e3 2500 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1b8ec87a 2501 rdev->wiphy.ap_sme_capa))
3713b4e3 2502 goto nla_put_failure;
7527a782 2503
1b8ec87a 2504 features = rdev->wiphy.features;
fe1abafd
JB		 2505 /*
2506 * We can only add the per-channel limit information if the
2507 * dump is split, otherwise it makes it too big. Therefore
2508 * only advertise it in that case.
2509 */
86e8cf98 2510 if (state->split)
fe1abafd
JB		 2511 features |= NL80211_FEATURE_ADVERTISE_CHAN_LIMITS;
2512 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS, features))
3713b4e3 2513 goto nla_put_failure;
562a7480 2514
1b8ec87a 2515 if (rdev->wiphy.ht_capa_mod_mask &&
3713b4e3 2516 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1b8ec87a
ZG		 2517 sizeof(*rdev->wiphy.ht_capa_mod_mask),
2518 rdev->wiphy.ht_capa_mod_mask))
3713b4e3 2519 goto nla_put_failure;
1f074bd8 2520
1b8ec87a
ZG		 2521 if (rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
2522 rdev->wiphy.max_acl_mac_addrs &&
3713b4e3 2523 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1b8ec87a 2524 rdev->wiphy.max_acl_mac_addrs))
3713b4e3 2525 goto nla_put_failure;
7e7c8926 2526
3713b4e3
JB		 2527 /*
2528 * Any information below this point is only available to
2529 * applications that can deal with it being split. This
2530 * helps ensure that newly added capabilities don't break
2531 * older tools by overrunning their buffers.
2532 *
2533 * We still increment split_start so that in the split
2534 * case we'll continue with more data in the next round,
2535 * but break unconditionally so unsplit data stops here.
2536 */
ab10c22b
JB		 2537 if (state->split)
2538 state->split_start++;
2539 else
2540 state->split_start = 0;
3713b4e3
JB		 2541 break;
2542 case 9:
f8d504ca
JB		 2543 if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
2544 goto nla_put_failure;
2545
2546 if (nla_put_u32(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_PLANS,
2547 rdev->wiphy.max_sched_scan_plans) ||
2548 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_INTERVAL,
2549 rdev->wiphy.max_sched_scan_plan_interval) ||
2550 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_ITERATIONS,
2551 rdev->wiphy.max_sched_scan_plan_iterations))
2552 goto nla_put_failure;
2553
1b8ec87a 2554 if (rdev->wiphy.extended_capabilities &&
fe1abafd 2555 (nla_put(msg, NL80211_ATTR_EXT_CAPA,
1b8ec87a
ZG		 2556 rdev->wiphy.extended_capabilities_len,
2557 rdev->wiphy.extended_capabilities) ||
fe1abafd 2558 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
1b8ec87a
ZG		 2559 rdev->wiphy.extended_capabilities_len,
2560 rdev->wiphy.extended_capabilities_mask)))
fe1abafd 2561 goto nla_put_failure;
a50df0c4 2562
1b8ec87a 2563 if (rdev->wiphy.vht_capa_mod_mask &&
ee2aca34 2564 nla_put(msg, NL80211_ATTR_VHT_CAPABILITY_MASK,
1b8ec87a
ZG		 2565 sizeof(*rdev->wiphy.vht_capa_mod_mask),
2566 rdev->wiphy.vht_capa_mod_mask))
ee2aca34
JB		 2567 goto nla_put_failure;
2568
ae6fa4d5
DK		 2569 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
2570 rdev->wiphy.perm_addr))
2571 goto nla_put_failure;
2572
2573 if (!is_zero_ether_addr(rdev->wiphy.addr_mask) &&
2574 nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN,
2575 rdev->wiphy.addr_mask))
2576 goto nla_put_failure;
2577
2578 if (rdev->wiphy.n_addresses > 1) {
2579 void *attr;
2580
2581 attr = nla_nest_start(msg, NL80211_ATTR_MAC_ADDRS);
2582 if (!attr)
2583 goto nla_put_failure;
2584
2585 for (i = 0; i < rdev->wiphy.n_addresses; i++)
2586 if (nla_put(msg, i + 1, ETH_ALEN,
2587 rdev->wiphy.addresses[i].addr))
2588 goto nla_put_failure;
2589
2590 nla_nest_end(msg, attr);
2591 }
2592
be29b99a
AK		 2593 state->split_start++;
2594 break;
2595 case 10:
1b8ec87a 2596 if (nl80211_send_coalesce(msg, rdev))
be29b99a
AK		 2597 goto nla_put_failure;
2598
1b8ec87a 2599 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ) &&
01e0daa4
FF		 2600 (nla_put_flag(msg, NL80211_ATTR_SUPPORT_5_MHZ) ||
2601 nla_put_flag(msg, NL80211_ATTR_SUPPORT_10_MHZ)))
2602 goto nla_put_failure;
b43504cf 2603
1b8ec87a 2604 if (rdev->wiphy.max_ap_assoc_sta &&
b43504cf 2605 nla_put_u32(msg, NL80211_ATTR_MAX_AP_ASSOC_STA,
1b8ec87a 2606 rdev->wiphy.max_ap_assoc_sta))
b43504cf
JM		 2607 goto nla_put_failure;
2608
ad7e718c
JB		 2609 state->split_start++;
2610 break;
2611 case 11:
1b8ec87a 2612 if (rdev->wiphy.n_vendor_commands) {
567ffc35
JB		 2613 const struct nl80211_vendor_cmd_info *info;
2614 struct nlattr *nested;
2615
ae0be8de
MK		 2616 nested = nla_nest_start_noflag(msg,
2617 NL80211_ATTR_VENDOR_DATA);
567ffc35
JB		 2618 if (!nested)
2619 goto nla_put_failure;
2620
1b8ec87a
ZG		 2621 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
2622 info = &rdev->wiphy.vendor_commands[i].info;
567ffc35
JB		 2623 if (nla_put(msg, i + 1, sizeof(*info), info))
2624 goto nla_put_failure;
2625 }
2626 nla_nest_end(msg, nested);
2627 }
2628
1b8ec87a 2629 if (rdev->wiphy.n_vendor_events) {
567ffc35
JB		 2630 const struct nl80211_vendor_cmd_info *info;
2631 struct nlattr *nested;
ad7e718c 2632
ae0be8de
MK		 2633 nested = nla_nest_start_noflag(msg,
2634 NL80211_ATTR_VENDOR_EVENTS);
567ffc35 2635 if (!nested)
ad7e718c 2636 goto nla_put_failure;
567ffc35 2637
1b8ec87a
ZG		 2638 for (i = 0; i < rdev->wiphy.n_vendor_events; i++) {
2639 info = &rdev->wiphy.vendor_events[i];
567ffc35
JB		 2640 if (nla_put(msg, i + 1, sizeof(*info), info))
2641 goto nla_put_failure;
2642 }
2643 nla_nest_end(msg, nested);
2644 }
9a774c78
AO		 2645 state->split_start++;
2646 break;
2647 case 12:
2648 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH &&
2649 nla_put_u8(msg, NL80211_ATTR_MAX_CSA_COUNTERS,
2650 rdev->wiphy.max_num_csa_counters))
2651 goto nla_put_failure;
01e0daa4 2652
1bdd716c
AN		 2653 if (rdev->wiphy.regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
2654 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
2655 goto nla_put_failure;
2656
ca986ad9
AVS		 2657 if (rdev->wiphy.max_sched_scan_reqs &&
2658 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_MAX_REQS,
2659 rdev->wiphy.max_sched_scan_reqs))
2660 goto nla_put_failure;
2661
d75bb06b
GKS		 2662 if (nla_put(msg, NL80211_ATTR_EXT_FEATURES,
2663 sizeof(rdev->wiphy.ext_features),
2664 rdev->wiphy.ext_features))
2665 goto nla_put_failure;
2666
38de03d2
AS		 2667 if (rdev->wiphy.bss_select_support) {
2668 struct nlattr *nested;
2669 u32 bss_select_support = rdev->wiphy.bss_select_support;
2670
ae0be8de
MK		 2671 nested = nla_nest_start_noflag(msg,
2672 NL80211_ATTR_BSS_SELECT);
38de03d2
AS		 2673 if (!nested)
2674 goto nla_put_failure;
2675
2676 i = 0;
2677 while (bss_select_support) {
2678 if ((bss_select_support & 1) &&
2679 nla_put_flag(msg, i))
2680 goto nla_put_failure;
2681 i++;
2682 bss_select_support >>= 1;
2683 }
2684 nla_nest_end(msg, nested);
2685 }
2686
019ae3a9
KV		 2687 state->split_start++;
2688 break;
2689 case 13:
2690 if (rdev->wiphy.num_iftype_ext_capab &&
2691 rdev->wiphy.iftype_ext_capab) {
2692 struct nlattr *nested_ext_capab, *nested;
2693
ae0be8de
MK		 2694 nested = nla_nest_start_noflag(msg,
2695 NL80211_ATTR_IFTYPE_EXT_CAPA);
019ae3a9
KV		 2696 if (!nested)
2697 goto nla_put_failure;
2698
2699 for (i = state->capa_start;
2700 i < rdev->wiphy.num_iftype_ext_capab; i++) {
2701 const struct wiphy_iftype_ext_capab *capab;
2702
2703 capab = &rdev->wiphy.iftype_ext_capab[i];
2704
ae0be8de
MK		 2705 nested_ext_capab = nla_nest_start_noflag(msg,
2706 i);
019ae3a9
KV		 2707 if (!nested_ext_capab ||
2708 nla_put_u32(msg, NL80211_ATTR_IFTYPE,
2709 capab->iftype) ||
2710 nla_put(msg, NL80211_ATTR_EXT_CAPA,
2711 capab->extended_capabilities_len,
2712 capab->extended_capabilities) ||
2713 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
2714 capab->extended_capabilities_len,
2715 capab->extended_capabilities_mask))
2716 goto nla_put_failure;
2717
2718 nla_nest_end(msg, nested_ext_capab);
2719 if (state->split)
2720 break;
2721 }
2722 nla_nest_end(msg, nested);
2723 if (i < rdev->wiphy.num_iftype_ext_capab) {
2724 state->capa_start = i + 1;
2725 break;
2726 }
2727 }
2728
8585989d
LC		 2729 if (nla_put_u32(msg, NL80211_ATTR_BANDS,
2730 rdev->wiphy.nan_supported_bands))
2731 goto nla_put_failure;
2732
52539ca8
THJ		 2733 if (wiphy_ext_feature_isset(&rdev->wiphy,
2734 NL80211_EXT_FEATURE_TXQS)) {
2735 struct cfg80211_txq_stats txqstats = {};
2736 int res;
2737
2738 res = rdev_get_txq_stats(rdev, NULL, &txqstats);
2739 if (!res &&
2740 !nl80211_put_txq_stats(msg, &txqstats,
2741 NL80211_ATTR_TXQ_STATS))
2742 goto nla_put_failure;
2743
2744 if (nla_put_u32(msg, NL80211_ATTR_TXQ_LIMIT,
2745 rdev->wiphy.txq_limit))
2746 goto nla_put_failure;
2747 if (nla_put_u32(msg, NL80211_ATTR_TXQ_MEMORY_LIMIT,
2748 rdev->wiphy.txq_memory_limit))
2749 goto nla_put_failure;
2750 if (nla_put_u32(msg, NL80211_ATTR_TXQ_QUANTUM,
2751 rdev->wiphy.txq_quantum))
2752 goto nla_put_failure;
2753 }
2754
9bb7e0f2
JB		 2755 state->split_start++;
2756 break;
2757 case 14:
2758 if (nl80211_send_pmsr_capa(rdev, msg))
2759 goto nla_put_failure;
2760
ab4dfa20
VJ		 2761 state->split_start++;
2762 break;
2763 case 15:
2764 if (rdev->wiphy.akm_suites &&
2765 nla_put(msg, NL80211_ATTR_AKM_SUITES,
2766 sizeof(u32) * rdev->wiphy.n_akm_suites,
2767 rdev->wiphy.akm_suites))
2768 goto nla_put_failure;
2769
d6039a34
VJ		 2770 if (nl80211_put_iftype_akm_suites(rdev, msg))
2771 goto nla_put_failure;
2772
3710a8a6
JB		 2773 if (nl80211_put_tid_config_support(rdev, msg))
2774 goto nla_put_failure;
6bdb68ce
CH		 2775 state->split_start++;
2776 break;
2777 case 16:
2778 if (nl80211_put_sar_specs(rdev, msg))
2779 goto nla_put_failure;
3710a8a6 2780
3713b4e3 2781 /* done */
86e8cf98 2782 state->split_start = 0;
3713b4e3
JB		 2783 break;
2784 }
3bb20556 2785 finish:
053c095a
JB		 2786 genlmsg_end(msg, hdr);
2787 return 0;
55682965
JB		 2788
2789 nla_put_failure:
bc3ed28c
TG		 2790 genlmsg_cancel(msg, hdr);
2791 return -EMSGSIZE;
55682965
JB		 2792}
2793
86e8cf98
JB		 2794static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
2795 struct netlink_callback *cb,
2796 struct nl80211_dump_wiphy_state *state)
2797{
50508d94
JB		 2798 struct nlattr **tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
2799 int ret;
2800
2801 if (!tb)
2802 return -ENOMEM;
2803
2804 ret = nlmsg_parse_deprecated(cb->nlh,
2805 GENL_HDRLEN + nl80211_fam.hdrsize,
2806 tb, nl80211_fam.maxattr,
2807 nl80211_policy, NULL);
86e8cf98 2808 /* ignore parse errors for backward compatibility */
50508d94
JB		 2809 if (ret) {
2810 ret = 0;
2811 goto out;
2812 }
86e8cf98
JB		 2813
2814 state->split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
2815 if (tb[NL80211_ATTR_WIPHY])
2816 state->filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
2817 if (tb[NL80211_ATTR_WDEV])
2818 state->filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
2819 if (tb[NL80211_ATTR_IFINDEX]) {
2820 struct net_device *netdev;
2821 struct cfg80211_registered_device *rdev;
2822 int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
2823
7f2b8562 2824 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
50508d94
JB		 2825 if (!netdev) {
2826 ret = -ENODEV;
2827 goto out;
2828 }
86e8cf98 2829 if (netdev->ieee80211_ptr) {
f26cbf40 2830 rdev = wiphy_to_rdev(
86e8cf98
JB		 2831 netdev->ieee80211_ptr->wiphy);
2832 state->filter_wiphy = rdev->wiphy_idx;
2833 }
86e8cf98
JB		 2834 }
2835
50508d94
JB		 2836 ret = 0;
2837out:
2838 kfree(tb);
2839 return ret;
86e8cf98
JB		 2840}
2841
55682965
JB		 2842static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
2843{
645e77de 2844 int idx = 0, ret;
86e8cf98 2845 struct nl80211_dump_wiphy_state *state = (void *)cb->args[0];
1b8ec87a 2846 struct cfg80211_registered_device *rdev;
3a5a423b 2847
5fe231e8 2848 rtnl_lock();
86e8cf98
JB		 2849 if (!state) {
2850 state = kzalloc(sizeof(*state), GFP_KERNEL);
57ed5cd6
JL		 2851 if (!state) {
2852 rtnl_unlock();
86e8cf98 2853 return -ENOMEM;
3713b4e3 2854 }
86e8cf98
JB		 2855 state->filter_wiphy = -1;
2856 ret = nl80211_dump_wiphy_parse(skb, cb, state);
2857 if (ret) {
2858 kfree(state);
2859 rtnl_unlock();
2860 return ret;
3713b4e3 2861 }
86e8cf98 2862 cb->args[0] = (long)state;
3713b4e3
JB		 2863 }
2864
1b8ec87a
ZG		 2865 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
2866 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 2867 continue;
86e8cf98 2868 if (++idx <= state->start)
55682965 2869 continue;
86e8cf98 2870 if (state->filter_wiphy != -1 &&
1b8ec87a 2871 state->filter_wiphy != rdev->wiphy_idx)
3713b4e3
JB		 2872 continue;
2873 /* attempt to fit multiple wiphy data chunks into the skb */
2874 do {
3bb20556
JB		 2875 ret = nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY,
2876 skb,
3713b4e3
JB		 2877 NETLINK_CB(cb->skb).portid,
2878 cb->nlh->nlmsg_seq,
86e8cf98 2879 NLM_F_MULTI, state);
3713b4e3
JB		 2880 if (ret < 0) {
2881 /*
2882 * If sending the wiphy data didn't fit (ENOBUFS
2883 * or EMSGSIZE returned), this SKB is still
2884 * empty (so it's not too big because another
2885 * wiphy dataset is already in the skb) and
2886 * we've not tried to adjust the dump allocation
2887 * yet ... then adjust the alloc size to be
2888 * bigger, and return 1 but with the empty skb.
2889 * This results in an empty message being RX'ed
2890 * in userspace, but that is ignored.
2891 *
2892 * We can then retry with the larger buffer.
2893 */
2894 if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
f12cb289 2895 !skb->len && !state->split &&
3713b4e3
JB		 2896 cb->min_dump_alloc < 4096) {
2897 cb->min_dump_alloc = 4096;
f12cb289 2898 state->split_start = 0;
d98cae64 2899 rtnl_unlock();
3713b4e3
JB		 2900 return 1;
2901 }
2902 idx--;
2903 break;
645e77de 2904 }
86e8cf98 2905 } while (state->split_start > 0);
3713b4e3 2906 break;
55682965 2907 }
5fe231e8 2908 rtnl_unlock();
55682965 2909
86e8cf98 2910 state->start = idx;
55682965
JB		 2911
2912 return skb->len;
2913}
2914
86e8cf98
JB		 2915static int nl80211_dump_wiphy_done(struct netlink_callback *cb)
2916{
2917 kfree((void *)cb->args[0]);
2918 return 0;
2919}
2920
55682965
JB		 2921static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
2922{
2923 struct sk_buff *msg;
1b8ec87a 2924 struct cfg80211_registered_device *rdev = info->user_ptr[0];
86e8cf98 2925 struct nl80211_dump_wiphy_state state = {};
55682965 2926
645e77de 2927 msg = nlmsg_new(4096, GFP_KERNEL);
55682965 2928 if (!msg)
4c476991 2929 return -ENOMEM;
55682965 2930
3bb20556
JB		 2931 if (nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY, msg,
2932 info->snd_portid, info->snd_seq, 0,
86e8cf98 2933 &state) < 0) {
4c476991
JB		 2934 nlmsg_free(msg);
2935 return -ENOBUFS;
2936 }
55682965 2937
134e6375 2938 return genlmsg_reply(msg, info);
55682965
JB		 2939}
2940
31888487
JM		 2941static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
2942 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
2943 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
2944 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
2945 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
2946 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
2947};
2948
2949static int parse_txq_params(struct nlattr *tb[],
2950 struct ieee80211_txq_params *txq_params)
2951{
259d8c1e
DW		 2952 u8 ac;
2953
a3304b0a 2954 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 2955 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
2956 !tb[NL80211_TXQ_ATTR_AIFS])
2957 return -EINVAL;
2958
259d8c1e 2959 ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 2960 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
2961 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
2962 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
2963 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
2964
259d8c1e 2965 if (ac >= NL80211_NUM_ACS)
a3304b0a 2966 return -EINVAL;
259d8c1e 2967 txq_params->ac = array_index_nospec(ac, NL80211_NUM_ACS);
31888487
JM		 2968 return 0;
2969}
2970
f444de05
JB		 2971static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
2972{
2973 /*
e7e0517c
JB		 2974 * You can only set the channel explicitly for some interfaces,
2975 * most have their channel managed via their respective
cc1d2806
JB		 2976 * "establish a connection" command (connect, join, ...)
2977 *
2978 * For AP/GO and mesh mode, the channel can be set with the
2979 * channel userspace API, but is only stored and passed to the
2980 * low-level driver when the AP starts or the mesh is joined.
2981 * This is for backward compatibility, userspace can also give
2982 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 2983 *
2984 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 2985 * whatever else is going on, so they have their own special
2986 * operation to set the monitor channel if possible.
f444de05
JB		 2987 */
2988 return !wdev ||
2989 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 2990 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 2991 wdev->iftype == NL80211_IFTYPE_MONITOR ||
2992 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 2993}
2994
9bb7e0f2
JB		 2995int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
2996 struct genl_info *info,
2997 struct cfg80211_chan_def *chandef)
683b6d3b 2998{
49f9cf0e
JB		 2999 struct netlink_ext_ack *extack = info->extack;
3000 struct nlattr **attrs = info->attrs;
dbeca2ea 3001 u32 control_freq;
683b6d3b 3002
49f9cf0e 3003 if (!attrs[NL80211_ATTR_WIPHY_FREQ])
683b6d3b
JB		 3004 return -EINVAL;
3005
942ba88b
TP		 3006 control_freq = MHZ_TO_KHZ(
3007 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3008 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
3009 control_freq +=
3010 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
683b6d3b 3011
f43e5210 3012 memset(chandef, 0, sizeof(*chandef));
942ba88b 3013 chandef->chan = ieee80211_get_channel_khz(&rdev->wiphy, control_freq);
3d9d1d66 3014 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
942ba88b
TP		 3015 chandef->center_freq1 = KHZ_TO_MHZ(control_freq);
3016 chandef->freq1_offset = control_freq % 1000;
3d9d1d66 3017 chandef->center_freq2 = 0;
683b6d3b
JB		 3018
3019 /* Primary channel not allowed */
49f9cf0e
JB		 3020 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED) {
3021 NL_SET_ERR_MSG_ATTR(extack, attrs[NL80211_ATTR_WIPHY_FREQ],
3022 "Channel is disabled");
683b6d3b 3023 return -EINVAL;
49f9cf0e 3024 }
683b6d3b 3025
49f9cf0e 3026 if (attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
3d9d1d66
JB		 3027 enum nl80211_channel_type chantype;
3028
49f9cf0e 3029 chantype = nla_get_u32(attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
3d9d1d66
JB		 3030
3031 switch (chantype) {
3032 case NL80211_CHAN_NO_HT:
3033 case NL80211_CHAN_HT20:
3034 case NL80211_CHAN_HT40PLUS:
3035 case NL80211_CHAN_HT40MINUS:
3036 cfg80211_chandef_create(chandef, chandef->chan,
3037 chantype);
ffa4629e 3038 /* user input for center_freq is incorrect */
49f9cf0e
JB		 3039 if (attrs[NL80211_ATTR_CENTER_FREQ1] &&
3040 chandef->center_freq1 != nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1])) {
3041 NL_SET_ERR_MSG_ATTR(extack,
3042 attrs[NL80211_ATTR_CENTER_FREQ1],
3043 "bad center frequency 1");
ffa4629e 3044 return -EINVAL;
49f9cf0e 3045 }
ffa4629e 3046 /* center_freq2 must be zero */
49f9cf0e
JB		 3047 if (attrs[NL80211_ATTR_CENTER_FREQ2] &&
3048 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2])) {
3049 NL_SET_ERR_MSG_ATTR(extack,
3050 attrs[NL80211_ATTR_CENTER_FREQ2],
3051 "center frequency 2 can't be used");
ffa4629e 3052 return -EINVAL;
49f9cf0e 3053 }
3d9d1d66
JB		 3054 break;
3055 default:
49f9cf0e
JB		 3056 NL_SET_ERR_MSG_ATTR(extack,
3057 attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
3058 "invalid channel type");
3d9d1d66
JB		 3059 return -EINVAL;
3060 }
49f9cf0e 3061 } else if (attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
3d9d1d66 3062 chandef->width =
49f9cf0e 3063 nla_get_u32(attrs[NL80211_ATTR_CHANNEL_WIDTH]);
942ba88b 3064 if (attrs[NL80211_ATTR_CENTER_FREQ1]) {
3d9d1d66 3065 chandef->center_freq1 =
49f9cf0e 3066 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1]);
942ba88b
TP		 3067 if (attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET])
3068 chandef->freq1_offset = nla_get_u32(
3069 attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET]);
3070 else
3071 chandef->freq1_offset = 0;
3072 }
49f9cf0e 3073 if (attrs[NL80211_ATTR_CENTER_FREQ2])
3d9d1d66 3074 chandef->center_freq2 =
49f9cf0e 3075 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2]);
3d9d1d66
JB		 3076 }
3077
2a38075c
AAL		 3078 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
3079 chandef->edmg.channels =
3080 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
3081
3082 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
3083 chandef->edmg.bw_config =
3084 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
3085 } else {
3086 chandef->edmg.bw_config = 0;
3087 chandef->edmg.channels = 0;
3088 }
3089
49f9cf0e
JB		 3090 if (!cfg80211_chandef_valid(chandef)) {
3091 NL_SET_ERR_MSG(extack, "invalid channel definition");
3d9d1d66 3092 return -EINVAL;
49f9cf0e 3093 }
3d9d1d66 3094
9f5e8f6e 3095 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
49f9cf0e
JB		 3096 IEEE80211_CHAN_DISABLED)) {
3097 NL_SET_ERR_MSG(extack, "(extension) channel is disabled");
3d9d1d66 3098 return -EINVAL;
49f9cf0e 3099 }
3d9d1d66 3100
2f301ab2
SW		 3101 if ((chandef->width == NL80211_CHAN_WIDTH_5 ||
3102 chandef->width == NL80211_CHAN_WIDTH_10) &&
49f9cf0e
JB		 3103 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ)) {
3104 NL_SET_ERR_MSG(extack, "5/10 MHz not supported");
2f301ab2 3105 return -EINVAL;
49f9cf0e 3106 }
2f301ab2 3107
683b6d3b
JB		 3108 return 0;
3109}
3110
f444de05 3111static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
e16821bc 3112 struct net_device *dev,
f444de05
JB		 3113 struct genl_info *info)
3114{
683b6d3b 3115 struct cfg80211_chan_def chandef;
f444de05 3116 int result;
e8c9bd5b 3117 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
e16821bc 3118 struct wireless_dev *wdev = NULL;
e8c9bd5b 3119
e16821bc
JM		 3120 if (dev)
3121 wdev = dev->ieee80211_ptr;
f444de05
JB		 3122 if (!nl80211_can_set_dev_channel(wdev))
3123 return -EOPNOTSUPP;
e16821bc
JM		 3124 if (wdev)
3125 iftype = wdev->iftype;
f444de05 3126
683b6d3b
JB		 3127 result = nl80211_parse_chandef(rdev, info, &chandef);
3128 if (result)
3129 return result;
f444de05 3130
e8c9bd5b 3131 switch (iftype) {
aa430da4
JB		 3132 case NL80211_IFTYPE_AP:
3133 case NL80211_IFTYPE_P2P_GO:
923b352f
AN		 3134 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
3135 iftype)) {
aa430da4
JB		 3136 result = -EINVAL;
3137 break;
3138 }
e16821bc
JM		 3139 if (wdev->beacon_interval) {
3140 if (!dev || !rdev->ops->set_ap_chanwidth ||
3141 !(rdev->wiphy.features &
3142 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE)) {
3143 result = -EBUSY;
3144 break;
3145 }
3146
3147 /* Only allow dynamic channel width changes */
3148 if (chandef.chan != wdev->preset_chandef.chan) {
3149 result = -EBUSY;
3150 break;
3151 }
3152 result = rdev_set_ap_chanwidth(rdev, dev, &chandef);
3153 if (result)
3154 break;
3155 }
683b6d3b 3156 wdev->preset_chandef = chandef;
aa430da4
JB		 3157 result = 0;
3158 break;
cc1d2806 3159 case NL80211_IFTYPE_MESH_POINT:
683b6d3b 3160 result = cfg80211_set_mesh_channel(rdev, wdev, &chandef);
cc1d2806 3161 break;
e8c9bd5b 3162 case NL80211_IFTYPE_MONITOR:
683b6d3b 3163 result = cfg80211_set_monitor_channel(rdev, &chandef);
e8c9bd5b 3164 break;
aa430da4 3165 default:
e8c9bd5b 3166 result = -EINVAL;
f444de05 3167 }
f444de05
JB		 3168
3169 return result;
3170}
3171
3172static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
3173{
4c476991
JB		 3174 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3175 struct net_device *netdev = info->user_ptr[1];
f444de05 3176
e16821bc 3177 return __nl80211_set_channel(rdev, netdev, info);
f444de05
JB		 3178}
3179
55682965
JB		 3180static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
3181{
a05829a7 3182 struct cfg80211_registered_device *rdev = NULL;
f444de05
JB		 3183 struct net_device *netdev = NULL;
3184 struct wireless_dev *wdev;
a1e567c8 3185 int result = 0, rem_txq_params = 0;
31888487 3186 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 3187 u32 changed;
3188 u8 retry_short = 0, retry_long = 0;
3189 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 3190 u8 coverage_class = 0;
52539ca8 3191 u32 txq_limit = 0, txq_memory_limit = 0, txq_quantum = 0;
55682965 3192
a05829a7 3193 rtnl_lock();
f444de05
JB		 3194 /*
3195 * Try to find the wiphy and netdev. Normally this
3196 * function shouldn't need the netdev, but this is
3197 * done for backward compatibility -- previously
3198 * setting the channel was done per wiphy, but now
3199 * it is per netdev. Previous userland like hostapd
3200 * also passed a netdev to set_wiphy, so that it is
3201 * possible to let that go to the right netdev!
3202 */
4bbf4d56 3203
f444de05
JB		 3204 if (info->attrs[NL80211_ATTR_IFINDEX]) {
3205 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
3206
7f2b8562 3207 netdev = __dev_get_by_index(genl_info_net(info), ifindex);
5fe231e8 3208 if (netdev && netdev->ieee80211_ptr)
f26cbf40 3209 rdev = wiphy_to_rdev(netdev->ieee80211_ptr->wiphy);
5fe231e8 3210 else
f444de05 3211 netdev = NULL;
4bbf4d56
JB		 3212 }
3213
f444de05 3214 if (!netdev) {
878d9ec7
JB		 3215 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
3216 info->attrs);
a05829a7
JB		 3217 if (IS_ERR(rdev)) {
3218 rtnl_unlock();
4c476991 3219 return PTR_ERR(rdev);
a05829a7 3220 }
f444de05
JB		 3221 wdev = NULL;
3222 netdev = NULL;
3223 result = 0;
71fe96bf 3224 } else
f444de05 3225 wdev = netdev->ieee80211_ptr;
f444de05 3226
a05829a7 3227 wiphy_lock(&rdev->wiphy);
a05829a7 3228
f444de05
JB		 3229 /*
3230 * end workaround code, by now the rdev is available
3231 * and locked, and wdev may or may not be NULL.
3232 */
4bbf4d56
JB		 3233
3234 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 3235 result = cfg80211_dev_rename(
3236 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
0391a45c 3237 rtnl_unlock();
4bbf4d56 3238
4bbf4d56 3239 if (result)
a05829a7 3240 goto out;
31888487
JM		 3241
3242 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
3243 struct ieee80211_txq_params txq_params;
3244 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
3245
a05829a7
JB		 3246 if (!rdev->ops->set_txq_params) {
3247 result = -EOPNOTSUPP;
3248 goto out;
3249 }
31888487 3250
a05829a7
JB		 3251 if (!netdev) {
3252 result = -EINVAL;
3253 goto out;
3254 }
f70f01c2 3255
133a3ff2 3256 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
a05829a7
JB		 3257 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
3258 result = -EINVAL;
3259 goto out;
3260 }
133a3ff2 3261
a05829a7
JB		 3262 if (!netif_running(netdev)) {
3263 result = -ENETDOWN;
3264 goto out;
3265 }
2b5f8b0b 3266
31888487
JM		 3267 nla_for_each_nested(nl_txq_params,
3268 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
3269 rem_txq_params) {
8cb08174
JB		 3270 result = nla_parse_nested_deprecated(tb,
3271 NL80211_TXQ_ATTR_MAX,
3272 nl_txq_params,
3273 txq_params_policy,
3274 info->extack);
ae811e21 3275 if (result)
a05829a7 3276 goto out;
31888487
JM		 3277 result = parse_txq_params(tb, &txq_params);
3278 if (result)
a05829a7 3279 goto out;
31888487 3280
e35e4d28
HG		 3281 result = rdev_set_txq_params(rdev, netdev,
3282 &txq_params);
31888487 3283 if (result)
a05829a7 3284 goto out;
31888487
JM		 3285 }
3286 }
55682965 3287
72bdcf34 3288 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
e16821bc
JM		 3289 result = __nl80211_set_channel(
3290 rdev,
3291 nl80211_can_set_dev_channel(wdev) ? netdev : NULL,
3292 info);
72bdcf34 3293 if (result)
a05829a7 3294 goto out;
72bdcf34
JM		 3295 }
3296
98d2ff8b 3297 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 3298 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 3299 enum nl80211_tx_power_setting type;
3300 int idx, mbm = 0;
3301
c8442118
JB		 3302 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
3303 txp_wdev = NULL;
3304
a05829a7
JB		 3305 if (!rdev->ops->set_tx_power) {
3306 result = -EOPNOTSUPP;
3307 goto out;
3308 }
98d2ff8b
JO		 3309
3310 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
3311 type = nla_get_u32(info->attrs[idx]);
3312
3313 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
a05829a7
JB		 3314 (type != NL80211_TX_POWER_AUTOMATIC)) {
3315 result = -EINVAL;
3316 goto out;
3317 }
98d2ff8b
JO		 3318
3319 if (type != NL80211_TX_POWER_AUTOMATIC) {
3320 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
3321 mbm = nla_get_u32(info->attrs[idx]);
3322 }
3323
c8442118 3324 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b 3325 if (result)
a05829a7 3326 goto out;
98d2ff8b
JO		 3327 }
3328
afe0cbf8
BR		 3329 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
3330 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
3331 u32 tx_ant, rx_ant;
7a087e74 3332
7f531e03
BR		 3333 if ((!rdev->wiphy.available_antennas_tx &&
3334 !rdev->wiphy.available_antennas_rx) ||
a05829a7
JB		 3335 !rdev->ops->set_antenna) {
3336 result = -EOPNOTSUPP;
3337 goto out;
3338 }
afe0cbf8
BR		 3339
3340 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
3341 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
3342
a7ffac95 3343 /* reject antenna configurations which don't match the
7f531e03
BR		 3344 * available antenna masks, except for the "all" mask */
3345 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
a05829a7
JB		 3346 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
3347 result = -EINVAL;
3348 goto out;
3349 }
a7ffac95 3350
7f531e03
BR		 3351 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
3352 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 3353
e35e4d28 3354 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8 3355 if (result)
a05829a7 3356 goto out;
afe0cbf8
BR		 3357 }
3358
b9a5f8ca
JM		 3359 changed = 0;
3360
3361 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
3362 retry_short = nla_get_u8(
3363 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
7f2b8562 3364
b9a5f8ca
JM		 3365 changed |= WIPHY_PARAM_RETRY_SHORT;
3366 }
3367
3368 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
3369 retry_long = nla_get_u8(
3370 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
7f2b8562 3371
b9a5f8ca
JM		 3372 changed |= WIPHY_PARAM_RETRY_LONG;
3373 }
3374
3375 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
3376 frag_threshold = nla_get_u32(
3377 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
a05829a7
JB		 3378 if (frag_threshold < 256) {
3379 result = -EINVAL;
3380 goto out;
3381 }
7f2b8562 3382
b9a5f8ca
JM		 3383 if (frag_threshold != (u32) -1) {
3384 /*
3385 * Fragments (apart from the last one) are required to
3386 * have even length. Make the fragmentation code
3387 * simpler by stripping LSB should someone try to use
3388 * odd threshold value.
3389 */
3390 frag_threshold &= ~0x1;
3391 }
3392 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
3393 }
3394
3395 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
3396 rts_threshold = nla_get_u32(
3397 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
3398 changed |= WIPHY_PARAM_RTS_THRESHOLD;
3399 }
3400
81077e82 3401 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
a05829a7
JB		 3402 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
3403 result = -EINVAL;
3404 goto out;
3405 }
3057dbfd 3406
81077e82
LT		 3407 coverage_class = nla_get_u8(
3408 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
3409 changed |= WIPHY_PARAM_COVERAGE_CLASS;
3410 }
3411
3057dbfd 3412 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
a05829a7
JB		 3413 if (!(rdev->wiphy.features & NL80211_FEATURE_ACKTO_ESTIMATION)) {
3414 result = -EOPNOTSUPP;
3415 goto out;
3416 }
3057dbfd
LB		 3417
3418 changed |= WIPHY_PARAM_DYN_ACK;
81077e82
LT		 3419 }
3420
52539ca8
THJ		 3421 if (info->attrs[NL80211_ATTR_TXQ_LIMIT]) {
3422 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3423 NL80211_EXT_FEATURE_TXQS)) {
3424 result = -EOPNOTSUPP;
3425 goto out;
3426 }
52539ca8
THJ		 3427 txq_limit = nla_get_u32(
3428 info->attrs[NL80211_ATTR_TXQ_LIMIT]);
3429 changed |= WIPHY_PARAM_TXQ_LIMIT;
3430 }
3431
3432 if (info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]) {
3433 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3434 NL80211_EXT_FEATURE_TXQS)) {
3435 result = -EOPNOTSUPP;
3436 goto out;
3437 }
52539ca8
THJ		 3438 txq_memory_limit = nla_get_u32(
3439 info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]);
3440 changed |= WIPHY_PARAM_TXQ_MEMORY_LIMIT;
3441 }
3442
3443 if (info->attrs[NL80211_ATTR_TXQ_QUANTUM]) {
3444 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3445 NL80211_EXT_FEATURE_TXQS)) {
3446 result = -EOPNOTSUPP;
3447 goto out;
3448 }
52539ca8
THJ		 3449 txq_quantum = nla_get_u32(
3450 info->attrs[NL80211_ATTR_TXQ_QUANTUM]);
3451 changed |= WIPHY_PARAM_TXQ_QUANTUM;
3452 }
3453
b9a5f8ca
JM		 3454 if (changed) {
3455 u8 old_retry_short, old_retry_long;
3456 u32 old_frag_threshold, old_rts_threshold;
81077e82 3457 u8 old_coverage_class;
52539ca8 3458 u32 old_txq_limit, old_txq_memory_limit, old_txq_quantum;
b9a5f8ca 3459
a05829a7
JB		 3460 if (!rdev->ops->set_wiphy_params) {
3461 result = -EOPNOTSUPP;
3462 goto out;
3463 }
b9a5f8ca
JM		 3464
3465 old_retry_short = rdev->wiphy.retry_short;
3466 old_retry_long = rdev->wiphy.retry_long;
3467 old_frag_threshold = rdev->wiphy.frag_threshold;
3468 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 3469 old_coverage_class = rdev->wiphy.coverage_class;
52539ca8
THJ		 3470 old_txq_limit = rdev->wiphy.txq_limit;
3471 old_txq_memory_limit = rdev->wiphy.txq_memory_limit;
3472 old_txq_quantum = rdev->wiphy.txq_quantum;
b9a5f8ca
JM		 3473
3474 if (changed & WIPHY_PARAM_RETRY_SHORT)
3475 rdev->wiphy.retry_short = retry_short;
3476 if (changed & WIPHY_PARAM_RETRY_LONG)
3477 rdev->wiphy.retry_long = retry_long;
3478 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
3479 rdev->wiphy.frag_threshold = frag_threshold;
3480 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
3481 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 3482 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
3483 rdev->wiphy.coverage_class = coverage_class;
52539ca8
THJ		 3484 if (changed & WIPHY_PARAM_TXQ_LIMIT)
3485 rdev->wiphy.txq_limit = txq_limit;
3486 if (changed & WIPHY_PARAM_TXQ_MEMORY_LIMIT)
3487 rdev->wiphy.txq_memory_limit = txq_memory_limit;
3488 if (changed & WIPHY_PARAM_TXQ_QUANTUM)
3489 rdev->wiphy.txq_quantum = txq_quantum;
b9a5f8ca 3490
e35e4d28 3491 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 3492 if (result) {
3493 rdev->wiphy.retry_short = old_retry_short;
3494 rdev->wiphy.retry_long = old_retry_long;
3495 rdev->wiphy.frag_threshold = old_frag_threshold;
3496 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 3497 rdev->wiphy.coverage_class = old_coverage_class;
52539ca8
THJ		 3498 rdev->wiphy.txq_limit = old_txq_limit;
3499 rdev->wiphy.txq_memory_limit = old_txq_memory_limit;
3500 rdev->wiphy.txq_quantum = old_txq_quantum;
a05829a7 3501 goto out;
b9a5f8ca
JM		 3502 }
3503 }
a05829a7
JB		 3504
3505 result = 0;
3506
3507out:
3508 wiphy_unlock(&rdev->wiphy);
3509 return result;
55682965
JB		 3510}
3511
683b6d3b 3512static int nl80211_send_chandef(struct sk_buff *msg,
d2859df5 3513 const struct cfg80211_chan_def *chandef)
683b6d3b 3514{
601555cd
JB		 3515 if (WARN_ON(!cfg80211_chandef_valid(chandef)))
3516 return -EINVAL;
3d9d1d66 3517
683b6d3b
JB		 3518 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
3519 chandef->chan->center_freq))
3520 return -ENOBUFS;
942ba88b
TP		 3521 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
3522 chandef->chan->freq_offset))
3523 return -ENOBUFS;
3d9d1d66
JB		 3524 switch (chandef->width) {
3525 case NL80211_CHAN_WIDTH_20_NOHT:
3526 case NL80211_CHAN_WIDTH_20:
3527 case NL80211_CHAN_WIDTH_40:
3528 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
3529 cfg80211_get_chandef_type(chandef)))
3530 return -ENOBUFS;
3531 break;
3532 default:
3533 break;
3534 }
3535 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
3536 return -ENOBUFS;
3537 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
3538 return -ENOBUFS;
3539 if (chandef->center_freq2 &&
3540 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
683b6d3b
JB		 3541 return -ENOBUFS;
3542 return 0;
3543}
3544
15e47304 3545static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 3546 struct cfg80211_registered_device *rdev,
3d1a5bbf
AZ		 3547 struct wireless_dev *wdev,
3548 enum nl80211_commands cmd)
55682965 3549{
72fb2abc 3550 struct net_device *dev = wdev->netdev;
55682965
JB		 3551 void *hdr;
3552
3d1a5bbf
AZ		 3553 WARN_ON(cmd != NL80211_CMD_NEW_INTERFACE &&
3554 cmd != NL80211_CMD_DEL_INTERFACE &&
3555 cmd != NL80211_CMD_SET_INTERFACE);
8f894be2
TB		 3556
3557 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
55682965
JB		 3558 if (!hdr)
3559 return -1;
3560
72fb2abc
JB		 3561 if (dev &&
3562 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 3563 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 3564 goto nla_put_failure;
3565
3566 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3567 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
2dad624e
ND		 3568 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
3569 NL80211_ATTR_PAD) ||
98104fde 3570 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 3571 nla_put_u32(msg, NL80211_ATTR_GENERATION,
3572 rdev->devlist_generation ^
446faa15
AQ		 3573 (cfg80211_rdev_list_generation << 2)) ||
3574 nla_put_u8(msg, NL80211_ATTR_4ADDR, wdev->use_4addr))
9360ffd1 3575 goto nla_put_failure;
f5ea9120 3576
5b7ccaf3 3577 if (rdev->ops->get_channel) {
683b6d3b 3578 int ret;
f43e5210 3579 struct cfg80211_chan_def chandef = {};
683b6d3b
JB		 3580
3581 ret = rdev_get_channel(rdev, wdev, &chandef);
3582 if (ret == 0) {
3583 if (nl80211_send_chandef(msg, &chandef))
3584 goto nla_put_failure;
3585 }
d91df0e3
PF		 3586 }
3587
d55d0d59
RM		 3588 if (rdev->ops->get_tx_power) {
3589 int dbm, ret;
3590
3591 ret = rdev_get_tx_power(rdev, wdev, &dbm);
3592 if (ret == 0 &&
3593 nla_put_u32(msg, NL80211_ATTR_WIPHY_TX_POWER_LEVEL,
3594 DBM_TO_MBM(dbm)))
3595 goto nla_put_failure;
3596 }
3597
44905265
JB		 3598 wdev_lock(wdev);
3599 switch (wdev->iftype) {
3600 case NL80211_IFTYPE_AP:
3601 if (wdev->ssid_len &&
3602 nla_put(msg, NL80211_ATTR_SSID, wdev->ssid_len, wdev->ssid))
4564b187 3603 goto nla_put_failure_locked;
44905265
JB		 3604 break;
3605 case NL80211_IFTYPE_STATION:
3606 case NL80211_IFTYPE_P2P_CLIENT:
3607 case NL80211_IFTYPE_ADHOC: {
3608 const u8 *ssid_ie;
3609 if (!wdev->current_bss)
3610 break;
7a94b8c2 3611 rcu_read_lock();
44905265
JB		 3612 ssid_ie = ieee80211_bss_get_ie(&wdev->current_bss->pub,
3613 WLAN_EID_SSID);
7a94b8c2
DB		 3614 if (ssid_ie &&
3615 nla_put(msg, NL80211_ATTR_SSID, ssid_ie[1], ssid_ie + 2))
3616 goto nla_put_failure_rcu_locked;
3617 rcu_read_unlock();
44905265
JB		 3618 break;
3619 }
3620 default:
3621 /* nothing */
3622 break;
b84e7a05 3623 }
44905265 3624 wdev_unlock(wdev);
b84e7a05 3625
52539ca8
THJ		 3626 if (rdev->ops->get_txq_stats) {
3627 struct cfg80211_txq_stats txqstats = {};
3628 int ret = rdev_get_txq_stats(rdev, wdev, &txqstats);
3629
3630 if (ret == 0 &&
3631 !nl80211_put_txq_stats(msg, &txqstats,
3632 NL80211_ATTR_TXQ_STATS))
3633 goto nla_put_failure;
3634 }
3635
053c095a
JB		 3636 genlmsg_end(msg, hdr);
3637 return 0;
55682965 3638
7a94b8c2
DB		 3639 nla_put_failure_rcu_locked:
3640 rcu_read_unlock();
4564b187
JB		 3641 nla_put_failure_locked:
3642 wdev_unlock(wdev);
55682965 3643 nla_put_failure:
bc3ed28c
TG		 3644 genlmsg_cancel(msg, hdr);
3645 return -EMSGSIZE;
55682965
JB		 3646}
3647
3648static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
3649{
3650 int wp_idx = 0;
3651 int if_idx = 0;
3652 int wp_start = cb->args[0];
3653 int if_start = cb->args[1];
b7fb44da 3654 int filter_wiphy = -1;
f5ea9120 3655 struct cfg80211_registered_device *rdev;
55682965 3656 struct wireless_dev *wdev;
ea90e0dc 3657 int ret;
55682965 3658
5fe231e8 3659 rtnl_lock();
b7fb44da
DK		 3660 if (!cb->args[2]) {
3661 struct nl80211_dump_wiphy_state state = {
3662 .filter_wiphy = -1,
3663 };
b7fb44da
DK		 3664
3665 ret = nl80211_dump_wiphy_parse(skb, cb, &state);
3666 if (ret)
ea90e0dc 3667 goto out_unlock;
b7fb44da
DK		 3668
3669 filter_wiphy = state.filter_wiphy;
3670
3671 /*
3672 * if filtering, set cb->args[2] to +1 since 0 is the default
3673 * value needed to determine that parsing is necessary.
3674 */
3675 if (filter_wiphy >= 0)
3676 cb->args[2] = filter_wiphy + 1;
3677 else
3678 cb->args[2] = -1;
3679 } else if (cb->args[2] > 0) {
3680 filter_wiphy = cb->args[2] - 1;
3681 }
3682
f5ea9120
JB		 3683 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3684 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3685 continue;
bba95fef
JB		 3686 if (wp_idx < wp_start) {
3687 wp_idx++;
55682965 3688 continue;
bba95fef 3689 }
b7fb44da
DK		 3690
3691 if (filter_wiphy >= 0 && filter_wiphy != rdev->wiphy_idx)
3692 continue;
3693
55682965
JB		 3694 if_idx = 0;
3695
53873f13 3696 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
bba95fef
JB		 3697 if (if_idx < if_start) {
3698 if_idx++;
55682965 3699 continue;
bba95fef 3700 }
15e47304 3701 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 3702 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3d1a5bbf
AZ		 3703 rdev, wdev,
3704 NL80211_CMD_NEW_INTERFACE) < 0) {
bba95fef
JB		 3705 goto out;
3706 }
3707 if_idx++;
55682965 3708 }
bba95fef
JB		 3709
3710 wp_idx++;
55682965 3711 }
bba95fef 3712 out:
55682965
JB		 3713 cb->args[0] = wp_idx;
3714 cb->args[1] = if_idx;
3715
ea90e0dc
JB		 3716 ret = skb->len;
3717 out_unlock:
3718 rtnl_unlock();
3719
3720 return ret;
55682965
JB		 3721}
3722
3723static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
3724{
3725 struct sk_buff *msg;
1b8ec87a 3726 struct cfg80211_registered_device *rdev = info->user_ptr[0];
72fb2abc 3727 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3728
fd2120ca 3729 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 3730 if (!msg)
4c476991 3731 return -ENOMEM;
55682965 3732
15e47304 3733 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3734 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
4c476991
JB		 3735 nlmsg_free(msg);
3736 return -ENOBUFS;
3737 }
55682965 3738
134e6375 3739 return genlmsg_reply(msg, info);
55682965
JB		 3740}
3741
66f7ac50
MW		 3742static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
3743 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
3744 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
3745 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
3746 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
3747 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
e057d3c3 3748 [NL80211_MNTR_FLAG_ACTIVE] = { .type = NLA_FLAG },
66f7ac50
MW		 3749};
3750
3751static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
3752{
3753 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
3754 int flag;
3755
3756 *mntrflags = 0;
3757
3758 if (!nla)
3759 return -EINVAL;
3760
8cb08174 3761 if (nla_parse_nested_deprecated(flags, NL80211_MNTR_FLAG_MAX, nla, mntr_flags_policy, NULL))
66f7ac50
MW		 3762 return -EINVAL;
3763
3764 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
3765 if (flags[flag])
3766 *mntrflags |= (1<<flag);
3767
818a986e
JB		 3768 *mntrflags |= MONITOR_FLAG_CHANGED;
3769
66f7ac50
MW		 3770 return 0;
3771}
3772
1db77596
JB		 3773static int nl80211_parse_mon_options(struct cfg80211_registered_device *rdev,
3774 enum nl80211_iftype type,
3775 struct genl_info *info,
3776 struct vif_params *params)
3777{
3778 bool change = false;
3779 int err;
3780
3781 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
3782 if (type != NL80211_IFTYPE_MONITOR)
3783 return -EINVAL;
3784
3785 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
3786 &params->flags);
3787 if (err)
3788 return err;
3789
3790 change = true;
3791 }
3792
3793 if (params->flags & MONITOR_FLAG_ACTIVE &&
3794 !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
3795 return -EOPNOTSUPP;
3796
3797 if (info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]) {
3798 const u8 *mumimo_groups;
3799 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
3800
3801 if (type != NL80211_IFTYPE_MONITOR)
3802 return -EINVAL;
3803
3804 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
3805 return -EOPNOTSUPP;
3806
3807 mumimo_groups =
3808 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]);
3809
3810 /* bits 0 and 63 are reserved and must be zero */
4954601f
JB		 3811 if ((mumimo_groups[0] & BIT(0)) ||
3812 (mumimo_groups[VHT_MUMIMO_GROUPS_DATA_LEN - 1] & BIT(7)))
1db77596
JB		 3813 return -EINVAL;
3814
3815 params->vht_mumimo_groups = mumimo_groups;
3816 change = true;
3817 }
3818
3819 if (info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]) {
3820 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
3821
3822 if (type != NL80211_IFTYPE_MONITOR)
3823 return -EINVAL;
3824
3825 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
3826 return -EOPNOTSUPP;
3827
3828 params->vht_mumimo_follow_addr =
3829 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]);
3830 change = true;
3831 }
3832
3833 return change ? 1 : 0;
3834}
3835
9bc383de 3836static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 3837 struct net_device *netdev, u8 use_4addr,
3838 enum nl80211_iftype iftype)
9bc383de 3839{
ad4bb6f8 3840 if (!use_4addr) {
2e92a2d0 3841 if (netdev && netif_is_bridge_port(netdev))
ad4bb6f8 3842 return -EBUSY;
9bc383de 3843 return 0;
ad4bb6f8 3844 }
9bc383de
JB		 3845
3846 switch (iftype) {
3847 case NL80211_IFTYPE_AP_VLAN:
3848 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
3849 return 0;
3850 break;
3851 case NL80211_IFTYPE_STATION:
3852 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
3853 return 0;
3854 break;
3855 default:
3856 break;
3857 }
3858
3859 return -EOPNOTSUPP;
3860}
3861
55682965
JB		 3862static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
3863{
4c476991 3864 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3865 struct vif_params params;
e36d56b6 3866 int err;
04a773ad 3867 enum nl80211_iftype otype, ntype;
4c476991 3868 struct net_device *dev = info->user_ptr[1];
ac7f9cfa 3869 bool change = false;
55682965 3870
2ec600d6
LCC		 3871 memset(&params, 0, sizeof(params));
3872
04a773ad 3873 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 3874
723b038d 3875 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 3876 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 3877 if (otype != ntype)
ac7f9cfa 3878 change = true;
723b038d
JB		 3879 }
3880
92ffe055 3881 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 3882 struct wireless_dev *wdev = dev->ieee80211_ptr;
3883
4c476991
JB		 3884 if (ntype != NL80211_IFTYPE_MESH_POINT)
3885 return -EINVAL;
29cbe68c
JB		 3886 if (netif_running(dev))
3887 return -EBUSY;
3888
3889 wdev_lock(wdev);
3890 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
3891 IEEE80211_MAX_MESH_ID_LEN);
3892 wdev->mesh_id_up_len =
3893 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
3894 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
3895 wdev->mesh_id_up_len);
3896 wdev_unlock(wdev);
2ec600d6
LCC		 3897 }
3898
8b787643
FF		 3899 if (info->attrs[NL80211_ATTR_4ADDR]) {
3900 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
3901 change = true;
ad4bb6f8 3902 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 3903 if (err)
4c476991 3904 return err;
8b787643
FF		 3905 } else {
3906 params.use_4addr = -1;
3907 }
3908
1db77596
JB		 3909 err = nl80211_parse_mon_options(rdev, ntype, info, &params);
3910 if (err < 0)
3911 return err;
3912 if (err > 0)
c6e6a0c8 3913 change = true;
e057d3c3 3914
ac7f9cfa 3915 if (change)
818a986e 3916 err = cfg80211_change_iface(rdev, dev, ntype, &params);
ac7f9cfa
JB		 3917 else
3918 err = 0;
60719ffd 3919
9bc383de
JB		 3920 if (!err && params.use_4addr != -1)
3921 dev->ieee80211_ptr->use_4addr = params.use_4addr;
3922
3d1a5bbf
AZ		 3923 if (change && !err) {
3924 struct wireless_dev *wdev = dev->ieee80211_ptr;
3925
3926 nl80211_notify_iface(rdev, wdev, NL80211_CMD_SET_INTERFACE);
3927 }
3928
55682965
JB		 3929 return err;
3930}
3931
3932static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
3933{
4c476991 3934 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3935 struct vif_params params;
84efbb84 3936 struct wireless_dev *wdev;
896ff063 3937 struct sk_buff *msg;
55682965
JB		 3938 int err;
3939 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
3940
78f22b6a
JB		 3941 /* to avoid failing a new interface creation due to pending removal */
3942 cfg80211_destroy_ifaces(rdev);
3943
2ec600d6
LCC		 3944 memset(&params, 0, sizeof(params));
3945
55682965
JB		 3946 if (!info->attrs[NL80211_ATTR_IFNAME])
3947 return -EINVAL;
3948
ab0d76f6 3949 if (info->attrs[NL80211_ATTR_IFTYPE])
55682965 3950 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
55682965 3951
33d915d9 3952 if (!rdev->ops->add_virtual_intf)
4c476991 3953 return -EOPNOTSUPP;
55682965 3954
cb3b7d87 3955 if ((type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN ||
e8f479b1
BG		 3956 rdev->wiphy.features & NL80211_FEATURE_MAC_ON_CREATE) &&
3957 info->attrs[NL80211_ATTR_MAC]) {
1c18f145
AS		 3958 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
3959 ETH_ALEN);
3960 if (!is_valid_ether_addr(params.macaddr))
3961 return -EADDRNOTAVAIL;
3962 }
3963
9bc383de 3964 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 3965 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 3966 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 3967 if (err)
4c476991 3968 return err;
9bc383de 3969 }
8b787643 3970
e6f40511 3971 if (!cfg80211_iftype_allowed(&rdev->wiphy, type, params.use_4addr, 0))
33d915d9
MP		 3972 return -EOPNOTSUPP;
3973
1db77596
JB		 3974 err = nl80211_parse_mon_options(rdev, type, info, &params);
3975 if (err < 0)
3976 return err;
e057d3c3 3977
a18c7192
JB		 3978 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
3979 if (!msg)
3980 return -ENOMEM;
3981
e35e4d28
HG		 3982 wdev = rdev_add_virtual_intf(rdev,
3983 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
818a986e 3984 NET_NAME_USER, type, &params);
d687cbb7
RM		 3985 if (WARN_ON(!wdev)) {
3986 nlmsg_free(msg);
3987 return -EPROTO;
3988 } else if (IS_ERR(wdev)) {
1c90f9d4 3989 nlmsg_free(msg);
84efbb84 3990 return PTR_ERR(wdev);
1c90f9d4 3991 }
2ec600d6 3992
18e5ca65 3993 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
78f22b6a
JB		 3994 wdev->owner_nlportid = info->snd_portid;
3995
98104fde
JB		 3996 switch (type) {
3997 case NL80211_IFTYPE_MESH_POINT:
3998 if (!info->attrs[NL80211_ATTR_MESH_ID])
3999 break;
29cbe68c
JB		 4000 wdev_lock(wdev);
4001 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
4002 IEEE80211_MAX_MESH_ID_LEN);
4003 wdev->mesh_id_up_len =
4004 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
4005 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
4006 wdev->mesh_id_up_len);
4007 wdev_unlock(wdev);
98104fde 4008 break;
cb3b7d87 4009 case NL80211_IFTYPE_NAN:
98104fde
JB		 4010 case NL80211_IFTYPE_P2P_DEVICE:
4011 /*
cb3b7d87 4012 * P2P Device and NAN do not have a netdev, so don't go
98104fde
JB		 4013 * through the netdev notifier and must be added here
4014 */
9bdaf3b9
JB		 4015 cfg80211_init_wdev(wdev);
4016 cfg80211_register_wdev(rdev, wdev);
98104fde
JB		 4017 break;
4018 default:
4019 break;
29cbe68c
JB		 4020 }
4021
15e47304 4022 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 4023 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
1c90f9d4
JB		 4024 nlmsg_free(msg);
4025 return -ENOBUFS;
4026 }
4027
4028 return genlmsg_reply(msg, info);
55682965
JB		 4029}
4030
4031static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
4032{
4c476991 4033 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 4034 struct wireless_dev *wdev = info->user_ptr[1];
55682965 4035
4c476991
JB		 4036 if (!rdev->ops->del_virtual_intf)
4037 return -EOPNOTSUPP;
55682965 4038
a05829a7
JB		 4039 /*
4040 * We hold RTNL, so this is safe, without RTNL opencount cannot
4041 * reach 0, and thus the rdev cannot be deleted.
4042 *
4043 * We need to do it for the dev_close(), since that will call
4044 * the netdev notifiers, and we need to acquire the mutex there
4045 * but don't know if we get there from here or from some other
4046 * place (e.g. "ip link set ... down").
4047 */
4048 mutex_unlock(&rdev->wiphy.mtx);
4049
84efbb84
JB		 4050 /*
4051 * If we remove a wireless device without a netdev then clear
4052 * user_ptr[1] so that nl80211_post_doit won't dereference it
4053 * to check if it needs to do dev_put(). Otherwise it crashes
4054 * since the wdev has been freed, unlike with a netdev where
4055 * we need the dev_put() for the netdev to really be freed.
4056 */
4057 if (!wdev->netdev)
4058 info->user_ptr[1] = NULL;
a05829a7
JB		 4059 else
4060 dev_close(wdev->netdev);
4061
4062 mutex_lock(&rdev->wiphy.mtx);
84efbb84 4063
7f8ed01e 4064 return rdev_del_virtual_intf(rdev, wdev);
55682965
JB		 4065}
4066
1d9d9213
SW		 4067static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
4068{
4069 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4070 struct net_device *dev = info->user_ptr[1];
4071 u16 noack_map;
4072
4073 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
4074 return -EINVAL;
4075
4076 if (!rdev->ops->set_noack_map)
4077 return -EOPNOTSUPP;
4078
4079 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
4080
e35e4d28 4081 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 4082}
4083
41ade00f
JB		 4084struct get_key_cookie {
4085 struct sk_buff *msg;
4086 int error;
b9454e83 4087 int idx;
41ade00f
JB		 4088};
4089
4090static void get_key_callback(void *c, struct key_params *params)
4091{
b9454e83 4092 struct nlattr *key;
41ade00f
JB		 4093 struct get_key_cookie *cookie = c;
4094
9360ffd1
DM		 4095 if ((params->key &&
4096 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
4097 params->key_len, params->key)) ||
4098 (params->seq &&
4099 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
4100 params->seq_len, params->seq)) ||
4101 (params->cipher &&
4102 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
4103 params->cipher)))
4104 goto nla_put_failure;
41ade00f 4105
ae0be8de 4106 key = nla_nest_start_noflag(cookie->msg, NL80211_ATTR_KEY);
b9454e83
JB		 4107 if (!key)
4108 goto nla_put_failure;
4109
9360ffd1
DM		 4110 if ((params->key &&
4111 nla_put(cookie->msg, NL80211_KEY_DATA,
4112 params->key_len, params->key)) ||
4113 (params->seq &&
4114 nla_put(cookie->msg, NL80211_KEY_SEQ,
4115 params->seq_len, params->seq)) ||
4116 (params->cipher &&
4117 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
4118 params->cipher)))
4119 goto nla_put_failure;
b9454e83 4120
efdfce72 4121 if (nla_put_u8(cookie->msg, NL80211_KEY_IDX, cookie->idx))
9360ffd1 4122 goto nla_put_failure;
b9454e83
JB		 4123
4124 nla_nest_end(cookie->msg, key);
4125
41ade00f
JB		 4126 return;
4127 nla_put_failure:
4128 cookie->error = 1;
4129}
4130
4131static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
4132{
4c476991 4133 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4134 int err;
4c476991 4135 struct net_device *dev = info->user_ptr[1];
41ade00f 4136 u8 key_idx = 0;
e31b8213
JB		 4137 const u8 *mac_addr = NULL;
4138 bool pairwise;
41ade00f
JB		 4139 struct get_key_cookie cookie = {
4140 .error = 0,
4141 };
4142 void *hdr;
4143 struct sk_buff *msg;
155d7c73
JB		 4144 bool bigtk_support = false;
4145
4146 if (wiphy_ext_feature_isset(&rdev->wiphy,
4147 NL80211_EXT_FEATURE_BEACON_PROTECTION))
4148 bigtk_support = true;
4149
4150 if ((dev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION ||
4151 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
4152 wiphy_ext_feature_isset(&rdev->wiphy,
4153 NL80211_EXT_FEATURE_BEACON_PROTECTION_CLIENT))
4154 bigtk_support = true;
41ade00f 4155
56be393f 4156 if (info->attrs[NL80211_ATTR_KEY_IDX]) {
41ade00f 4157 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
155d7c73
JB		 4158
4159 if (key_idx >= 6 && key_idx <= 7 && !bigtk_support) {
4160 GENL_SET_ERR_MSG(info, "BIGTK not supported");
56be393f 4161 return -EINVAL;
155d7c73 4162 }
56be393f 4163 }
41ade00f 4164
41ade00f
JB		 4165 if (info->attrs[NL80211_ATTR_MAC])
4166 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4167
e31b8213
JB		 4168 pairwise = !!mac_addr;
4169 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
4170 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
7a087e74 4171
e31b8213
JB		 4172 if (kt != NL80211_KEYTYPE_GROUP &&
4173 kt != NL80211_KEYTYPE_PAIRWISE)
4174 return -EINVAL;
4175 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
4176 }
4177
4c476991
JB		 4178 if (!rdev->ops->get_key)
4179 return -EOPNOTSUPP;
41ade00f 4180
0fa7b391
JB		 4181 if (!pairwise && mac_addr && !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4182 return -ENOENT;
4183
fd2120ca 4184 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 4185 if (!msg)
4186 return -ENOMEM;
41ade00f 4187
15e47304 4188 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 4189 NL80211_CMD_NEW_KEY);
cb35fba3 4190 if (!hdr)
9fe271af 4191 goto nla_put_failure;
41ade00f
JB		 4192
4193 cookie.msg = msg;
b9454e83 4194 cookie.idx = key_idx;
41ade00f 4195
9360ffd1
DM		 4196 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
4197 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
4198 goto nla_put_failure;
4199 if (mac_addr &&
4200 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
4201 goto nla_put_failure;
41ade00f 4202
e35e4d28
HG		 4203 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
4204 get_key_callback);
41ade00f
JB		 4205
4206 if (err)
6c95e2a2 4207 goto free_msg;
41ade00f
JB		 4208
4209 if (cookie.error)
4210 goto nla_put_failure;
4211
4212 genlmsg_end(msg, hdr);
4c476991 4213 return genlmsg_reply(msg, info);
41ade00f
JB		 4214
4215 nla_put_failure:
4216 err = -ENOBUFS;
6c95e2a2 4217 free_msg:
41ade00f 4218 nlmsg_free(msg);
41ade00f
JB		 4219 return err;
4220}
4221
4222static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
4223{
4c476991 4224 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 4225 struct key_parse key;
41ade00f 4226 int err;
4c476991 4227 struct net_device *dev = info->user_ptr[1];
41ade00f 4228
b9454e83
JB		 4229 err = nl80211_parse_key(info, &key);
4230 if (err)
4231 return err;
41ade00f 4232
b9454e83 4233 if (key.idx < 0)
41ade00f
JB		 4234 return -EINVAL;
4235
6cdd3979
AW		 4236 /* Only support setting default key and
4237 * Extended Key ID action NL80211_KEY_SET_TX.
4238 */
56be393f 4239 if (!key.def && !key.defmgmt && !key.defbeacon &&
6cdd3979 4240 !(key.p.mode == NL80211_KEY_SET_TX))
41ade00f
JB		 4241 return -EINVAL;
4242
dbd2fd65 4243 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 4244
dbd2fd65
JB		 4245 if (key.def) {
4246 if (!rdev->ops->set_default_key) {
4247 err = -EOPNOTSUPP;
4248 goto out;
4249 }
41ade00f 4250
dbd2fd65
JB		 4251 err = nl80211_key_allowed(dev->ieee80211_ptr);
4252 if (err)
4253 goto out;
4254
e35e4d28 4255 err = rdev_set_default_key(rdev, dev, key.idx,
dbd2fd65
JB		 4256 key.def_uni, key.def_multi);
4257
4258 if (err)
4259 goto out;
fffd0934 4260
3d23e349 4261#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 4262 dev->ieee80211_ptr->wext.default_key = key.idx;
4263#endif
6cdd3979 4264 } else if (key.defmgmt) {
dbd2fd65
JB		 4265 if (key.def_uni || !key.def_multi) {
4266 err = -EINVAL;
4267 goto out;
4268 }
4269
4270 if (!rdev->ops->set_default_mgmt_key) {
4271 err = -EOPNOTSUPP;
4272 goto out;
4273 }
4274
4275 err = nl80211_key_allowed(dev->ieee80211_ptr);
4276 if (err)
4277 goto out;
4278
e35e4d28 4279 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
dbd2fd65
JB		 4280 if (err)
4281 goto out;
4282
4283#ifdef CONFIG_CFG80211_WEXT
4284 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 4285#endif
56be393f
JM		 4286 } else if (key.defbeacon) {
4287 if (key.def_uni || !key.def_multi) {
4288 err = -EINVAL;
4289 goto out;
4290 }
4291
4292 if (!rdev->ops->set_default_beacon_key) {
4293 err = -EOPNOTSUPP;
4294 goto out;
4295 }
4296
4297 err = nl80211_key_allowed(dev->ieee80211_ptr);
4298 if (err)
4299 goto out;
4300
4301 err = rdev_set_default_beacon_key(rdev, dev, key.idx);
4302 if (err)
4303 goto out;
6cdd3979
AW		 4304 } else if (key.p.mode == NL80211_KEY_SET_TX &&
4305 wiphy_ext_feature_isset(&rdev->wiphy,
4306 NL80211_EXT_FEATURE_EXT_KEY_ID)) {
4307 u8 *mac_addr = NULL;
4308
4309 if (info->attrs[NL80211_ATTR_MAC])
4310 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4311
4312 if (!mac_addr || key.idx < 0 || key.idx > 1) {
4313 err = -EINVAL;
4314 goto out;
4315 }
dbd2fd65 4316
6cdd3979
AW		 4317 err = rdev_add_key(rdev, dev, key.idx,
4318 NL80211_KEYTYPE_PAIRWISE,
4319 mac_addr, &key.p);
4320 } else {
4321 err = -EINVAL;
4322 }
dbd2fd65 4323 out:
fffd0934 4324 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4325
41ade00f
JB		 4326 return err;
4327}
4328
4329static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
4330{
4c476991 4331 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 4332 int err;
4c476991 4333 struct net_device *dev = info->user_ptr[1];
b9454e83 4334 struct key_parse key;
e31b8213 4335 const u8 *mac_addr = NULL;
41ade00f 4336
b9454e83
JB		 4337 err = nl80211_parse_key(info, &key);
4338 if (err)
4339 return err;
41ade00f 4340
f8af764b
JM		 4341 if (!key.p.key) {
4342 GENL_SET_ERR_MSG(info, "no key");
41ade00f 4343 return -EINVAL;
f8af764b 4344 }
41ade00f 4345
41ade00f
JB		 4346 if (info->attrs[NL80211_ATTR_MAC])
4347 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4348
e31b8213
JB		 4349 if (key.type == -1) {
4350 if (mac_addr)
4351 key.type = NL80211_KEYTYPE_PAIRWISE;
4352 else
4353 key.type = NL80211_KEYTYPE_GROUP;
4354 }
4355
4356 /* for now */
4357 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
f8af764b
JM		 4358 key.type != NL80211_KEYTYPE_GROUP) {
4359 GENL_SET_ERR_MSG(info, "key type not pairwise or group");
e31b8213 4360 return -EINVAL;
f8af764b 4361 }
e31b8213 4362
14f34e36
GG		 4363 if (key.type == NL80211_KEYTYPE_GROUP &&
4364 info->attrs[NL80211_ATTR_VLAN_ID])
4365 key.p.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
4366
4c476991
JB		 4367 if (!rdev->ops->add_key)
4368 return -EOPNOTSUPP;
25e47c18 4369
e31b8213
JB		 4370 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
4371 key.type == NL80211_KEYTYPE_PAIRWISE,
f8af764b
JM		 4372 mac_addr)) {
4373 GENL_SET_ERR_MSG(info, "key setting validation failed");
4c476991 4374 return -EINVAL;
f8af764b 4375 }
41ade00f 4376
fffd0934
JB		 4377 wdev_lock(dev->ieee80211_ptr);
4378 err = nl80211_key_allowed(dev->ieee80211_ptr);
f8af764b
JM		 4379 if (err)
4380 GENL_SET_ERR_MSG(info, "key not allowed");
4381 if (!err) {
e35e4d28
HG		 4382 err = rdev_add_key(rdev, dev, key.idx,
4383 key.type == NL80211_KEYTYPE_PAIRWISE,
4384 mac_addr, &key.p);
f8af764b
JM		 4385 if (err)
4386 GENL_SET_ERR_MSG(info, "key addition failed");
4387 }
fffd0934 4388 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4389
41ade00f
JB		 4390 return err;
4391}
4392
4393static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
4394{
4c476991 4395 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4396 int err;
4c476991 4397 struct net_device *dev = info->user_ptr[1];
41ade00f 4398 u8 *mac_addr = NULL;
b9454e83 4399 struct key_parse key;
41ade00f 4400
b9454e83
JB		 4401 err = nl80211_parse_key(info, &key);
4402 if (err)
4403 return err;
41ade00f
JB		 4404
4405 if (info->attrs[NL80211_ATTR_MAC])
4406 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4407
e31b8213
JB		 4408 if (key.type == -1) {
4409 if (mac_addr)
4410 key.type = NL80211_KEYTYPE_PAIRWISE;
4411 else
4412 key.type = NL80211_KEYTYPE_GROUP;
4413 }
4414
4415 /* for now */
4416 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
4417 key.type != NL80211_KEYTYPE_GROUP)
4418 return -EINVAL;
4419
2d946308
AT		 4420 if (!cfg80211_valid_key_idx(rdev, key.idx,
4421 key.type == NL80211_KEYTYPE_PAIRWISE))
4422 return -EINVAL;
4423
4c476991
JB		 4424 if (!rdev->ops->del_key)
4425 return -EOPNOTSUPP;
41ade00f 4426
fffd0934
JB		 4427 wdev_lock(dev->ieee80211_ptr);
4428 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213 4429
0fa7b391 4430 if (key.type == NL80211_KEYTYPE_GROUP && mac_addr &&
e31b8213
JB		 4431 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4432 err = -ENOENT;
4433
fffd0934 4434 if (!err)
e35e4d28
HG		 4435 err = rdev_del_key(rdev, dev, key.idx,
4436 key.type == NL80211_KEYTYPE_PAIRWISE,
4437 mac_addr);
41ade00f 4438
3d23e349 4439#ifdef CONFIG_CFG80211_WEXT
08645126 4440 if (!err) {
b9454e83 4441 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 4442 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 4443 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 4444 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
4445 }
4446#endif
fffd0934 4447 wdev_unlock(dev->ieee80211_ptr);
08645126 4448
41ade00f
JB		 4449 return err;
4450}
4451
77765eaf
VT		 4452/* This function returns an error or the number of nested attributes */
4453static int validate_acl_mac_addrs(struct nlattr *nl_attr)
4454{
4455 struct nlattr *attr;
4456 int n_entries = 0, tmp;
4457
4458 nla_for_each_nested(attr, nl_attr, tmp) {
4459 if (nla_len(attr) != ETH_ALEN)
4460 return -EINVAL;
4461
4462 n_entries++;
4463 }
4464
4465 return n_entries;
4466}
4467
4468/*
4469 * This function parses ACL information and allocates memory for ACL data.
4470 * On successful return, the calling function is responsible to free the
4471 * ACL buffer returned by this function.
4472 */
4473static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
4474 struct genl_info *info)
4475{
4476 enum nl80211_acl_policy acl_policy;
4477 struct nlattr *attr;
4478 struct cfg80211_acl_data *acl;
4479 int i = 0, n_entries, tmp;
4480
4481 if (!wiphy->max_acl_mac_addrs)
4482 return ERR_PTR(-EOPNOTSUPP);
4483
4484 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
4485 return ERR_PTR(-EINVAL);
4486
4487 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
4488 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
4489 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
4490 return ERR_PTR(-EINVAL);
4491
4492 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
4493 return ERR_PTR(-EINVAL);
4494
4495 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
4496 if (n_entries < 0)
4497 return ERR_PTR(n_entries);
4498
4499 if (n_entries > wiphy->max_acl_mac_addrs)
4500 return ERR_PTR(-ENOTSUPP);
4501
391d132c 4502 acl = kzalloc(struct_size(acl, mac_addrs, n_entries), GFP_KERNEL);
77765eaf
VT		 4503 if (!acl)
4504 return ERR_PTR(-ENOMEM);
4505
4506 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
4507 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
4508 i++;
4509 }
4510
4511 acl->n_acl_entries = n_entries;
4512 acl->acl_policy = acl_policy;
4513
4514 return acl;
4515}
4516
4517static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
4518{
4519 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4520 struct net_device *dev = info->user_ptr[1];
4521 struct cfg80211_acl_data *acl;
4522 int err;
4523
4524 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4525 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4526 return -EOPNOTSUPP;
4527
4528 if (!dev->ieee80211_ptr->beacon_interval)
4529 return -EINVAL;
4530
4531 acl = parse_acl_data(&rdev->wiphy, info);
4532 if (IS_ERR(acl))
4533 return PTR_ERR(acl);
4534
4535 err = rdev_set_mac_acl(rdev, dev, acl);
4536
4537 kfree(acl);
4538
4539 return err;
4540}
4541
a7c7fbff
PK		 4542static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4543 u8 *rates, u8 rates_len)
4544{
4545 u8 i;
4546 u32 mask = 0;
4547
4548 for (i = 0; i < rates_len; i++) {
4549 int rate = (rates[i] & 0x7f) * 5;
4550 int ridx;
4551
4552 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
4553 struct ieee80211_rate *srate =
4554 &sband->bitrates[ridx];
4555 if (rate == srate->bitrate) {
4556 mask |= 1 << ridx;
4557 break;
4558 }
4559 }
4560 if (ridx == sband->n_bitrates)
4561 return 0; /* rate not found */
4562 }
4563
4564 return mask;
4565}
4566
4567static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
4568 u8 *rates, u8 rates_len,
4569 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
4570{
4571 u8 i;
4572
4573 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
4574
4575 for (i = 0; i < rates_len; i++) {
4576 int ridx, rbit;
4577
4578 ridx = rates[i] / 8;
4579 rbit = BIT(rates[i] % 8);
4580
4581 /* check validity */
4582 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
4583 return false;
4584
4585 /* check availability */
30fe6d50 4586 ridx = array_index_nospec(ridx, IEEE80211_HT_MCS_MASK_LEN);
a7c7fbff
PK		 4587 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
4588 mcs[ridx] |= rbit;
4589 else
4590 return false;
4591 }
4592
4593 return true;
4594}
4595
4596static u16 vht_mcs_map_to_mcs_mask(u8 vht_mcs_map)
4597{
4598 u16 mcs_mask = 0;
4599
4600 switch (vht_mcs_map) {
4601 case IEEE80211_VHT_MCS_NOT_SUPPORTED:
4602 break;
4603 case IEEE80211_VHT_MCS_SUPPORT_0_7:
4604 mcs_mask = 0x00FF;
4605 break;
4606 case IEEE80211_VHT_MCS_SUPPORT_0_8:
4607 mcs_mask = 0x01FF;
4608 break;
4609 case IEEE80211_VHT_MCS_SUPPORT_0_9:
4610 mcs_mask = 0x03FF;
4611 break;
4612 default:
4613 break;
4614 }
4615
4616 return mcs_mask;
4617}
4618
4619static void vht_build_mcs_mask(u16 vht_mcs_map,
4620 u16 vht_mcs_mask[NL80211_VHT_NSS_MAX])
4621{
4622 u8 nss;
4623
4624 for (nss = 0; nss < NL80211_VHT_NSS_MAX; nss++) {
4625 vht_mcs_mask[nss] = vht_mcs_map_to_mcs_mask(vht_mcs_map & 0x03);
4626 vht_mcs_map >>= 2;
4627 }
4628}
4629
4630static bool vht_set_mcs_mask(struct ieee80211_supported_band *sband,
4631 struct nl80211_txrate_vht *txrate,
4632 u16 mcs[NL80211_VHT_NSS_MAX])
4633{
4634 u16 tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4635 u16 tx_mcs_mask[NL80211_VHT_NSS_MAX] = {};
4636 u8 i;
4637
4638 if (!sband->vht_cap.vht_supported)
4639 return false;
4640
4641 memset(mcs, 0, sizeof(u16) * NL80211_VHT_NSS_MAX);
4642
4643 /* Build vht_mcs_mask from VHT capabilities */
4644 vht_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4645
4646 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
4647 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4648 mcs[i] = txrate->mcs[i];
4649 else
4650 return false;
4651 }
4652
4653 return true;
4654}
4655
eb89a6a6
MH		 4656static u16 he_mcs_map_to_mcs_mask(u8 he_mcs_map)
4657{
4658 switch (he_mcs_map) {
4659 case IEEE80211_HE_MCS_NOT_SUPPORTED:
4660 return 0;
4661 case IEEE80211_HE_MCS_SUPPORT_0_7:
4662 return 0x00FF;
4663 case IEEE80211_HE_MCS_SUPPORT_0_9:
4664 return 0x03FF;
4665 case IEEE80211_HE_MCS_SUPPORT_0_11:
4666 return 0xFFF;
4667 default:
4668 break;
4669 }
4670 return 0;
4671}
4672
4673static void he_build_mcs_mask(u16 he_mcs_map,
4674 u16 he_mcs_mask[NL80211_HE_NSS_MAX])
4675{
4676 u8 nss;
4677
4678 for (nss = 0; nss < NL80211_HE_NSS_MAX; nss++) {
4679 he_mcs_mask[nss] = he_mcs_map_to_mcs_mask(he_mcs_map & 0x03);
4680 he_mcs_map >>= 2;
4681 }
4682}
4683
4684static u16 he_get_txmcsmap(struct genl_info *info,
4685 const struct ieee80211_sta_he_cap *he_cap)
4686{
4687 struct net_device *dev = info->user_ptr[1];
4688 struct wireless_dev *wdev = dev->ieee80211_ptr;
4689 __le16 tx_mcs;
4690
4691 switch (wdev->chandef.width) {
4692 case NL80211_CHAN_WIDTH_80P80:
4693 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80p80;
4694 break;
4695 case NL80211_CHAN_WIDTH_160:
4696 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_160;
4697 break;
4698 default:
4699 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80;
4700 break;
4701 }
4702 return le16_to_cpu(tx_mcs);
4703}
4704
4705static bool he_set_mcs_mask(struct genl_info *info,
4706 struct wireless_dev *wdev,
4707 struct ieee80211_supported_band *sband,
4708 struct nl80211_txrate_he *txrate,
4709 u16 mcs[NL80211_HE_NSS_MAX])
4710{
4711 const struct ieee80211_sta_he_cap *he_cap;
4712 u16 tx_mcs_mask[NL80211_HE_NSS_MAX] = {};
4713 u16 tx_mcs_map = 0;
4714 u8 i;
4715
4716 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
4717 if (!he_cap)
4718 return false;
4719
4720 memset(mcs, 0, sizeof(u16) * NL80211_HE_NSS_MAX);
4721
4722 tx_mcs_map = he_get_txmcsmap(info, he_cap);
4723
4724 /* Build he_mcs_mask from HE capabilities */
4725 he_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4726
4727 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
4728 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4729 mcs[i] = txrate->mcs[i];
4730 else
4731 return false;
4732 }
4733
4734 return true;
4735}
4736
a7c7fbff 4737static int nl80211_parse_tx_bitrate_mask(struct genl_info *info,
9a5f6488
TC		 4738 struct nlattr *attrs[],
4739 enum nl80211_attrs attr,
eb89a6a6 4740 struct cfg80211_bitrate_mask *mask,
857b34c4
RM		 4741 struct net_device *dev,
4742 bool default_all_enabled)
a7c7fbff
PK		 4743{
4744 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4745 struct cfg80211_registered_device *rdev = info->user_ptr[0];
eb89a6a6 4746 struct wireless_dev *wdev = dev->ieee80211_ptr;
a7c7fbff
PK		 4747 int rem, i;
4748 struct nlattr *tx_rates;
4749 struct ieee80211_supported_band *sband;
eb89a6a6 4750 u16 vht_tx_mcs_map, he_tx_mcs_map;
a7c7fbff
PK		 4751
4752 memset(mask, 0, sizeof(*mask));
4753 /* Default to all rates enabled */
4754 for (i = 0; i < NUM_NL80211_BANDS; i++) {
eb89a6a6
MH		 4755 const struct ieee80211_sta_he_cap *he_cap;
4756
857b34c4
RM		 4757 if (!default_all_enabled)
4758 break;
4759
a7c7fbff
PK		 4760 sband = rdev->wiphy.bands[i];
4761
4762 if (!sband)
4763 continue;
4764
4765 mask->control[i].legacy = (1 << sband->n_bitrates) - 1;
4766 memcpy(mask->control[i].ht_mcs,
4767 sband->ht_cap.mcs.rx_mask,
4768 sizeof(mask->control[i].ht_mcs));
4769
4770 if (!sband->vht_cap.vht_supported)
4771 continue;
4772
4773 vht_tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4774 vht_build_mcs_mask(vht_tx_mcs_map, mask->control[i].vht_mcs);
eb89a6a6
MH		 4775
4776 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
4777 if (!he_cap)
4778 continue;
4779
4780 he_tx_mcs_map = he_get_txmcsmap(info, he_cap);
4781 he_build_mcs_mask(he_tx_mcs_map, mask->control[i].he_mcs);
4782
4783 mask->control[i].he_gi = 0xFF;
4784 mask->control[i].he_ltf = 0xFF;
a7c7fbff
PK		 4785 }
4786
4787 /* if no rates are given set it back to the defaults */
9a5f6488 4788 if (!attrs[attr])
a7c7fbff
PK		 4789 goto out;
4790
4791 /* The nested attribute uses enum nl80211_band as the index. This maps
4792 * directly to the enum nl80211_band values used in cfg80211.
4793 */
4794 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
9a5f6488 4795 nla_for_each_nested(tx_rates, attrs[attr], rem) {
a7c7fbff
PK		 4796 enum nl80211_band band = nla_type(tx_rates);
4797 int err;
4798
4799 if (band < 0 || band >= NUM_NL80211_BANDS)
4800 return -EINVAL;
4801 sband = rdev->wiphy.bands[band];
4802 if (sband == NULL)
4803 return -EINVAL;
8cb08174
JB		 4804 err = nla_parse_nested_deprecated(tb, NL80211_TXRATE_MAX,
4805 tx_rates,
4806 nl80211_txattr_policy,
4807 info->extack);
a7c7fbff
PK		 4808 if (err)
4809 return err;
4810 if (tb[NL80211_TXRATE_LEGACY]) {
4811 mask->control[band].legacy = rateset_to_mask(
4812 sband,
4813 nla_data(tb[NL80211_TXRATE_LEGACY]),
4814 nla_len(tb[NL80211_TXRATE_LEGACY]));
4815 if ((mask->control[band].legacy == 0) &&
4816 nla_len(tb[NL80211_TXRATE_LEGACY]))
4817 return -EINVAL;
4818 }
4819 if (tb[NL80211_TXRATE_HT]) {
4820 if (!ht_rateset_to_mask(
4821 sband,
4822 nla_data(tb[NL80211_TXRATE_HT]),
4823 nla_len(tb[NL80211_TXRATE_HT]),
4824 mask->control[band].ht_mcs))
4825 return -EINVAL;
4826 }
c4a30446 4827
a7c7fbff
PK		 4828 if (tb[NL80211_TXRATE_VHT]) {
4829 if (!vht_set_mcs_mask(
4830 sband,
4831 nla_data(tb[NL80211_TXRATE_VHT]),
4832 mask->control[band].vht_mcs))
4833 return -EINVAL;
4834 }
c4a30446 4835
a7c7fbff
PK		 4836 if (tb[NL80211_TXRATE_GI]) {
4837 mask->control[band].gi =
4838 nla_get_u8(tb[NL80211_TXRATE_GI]);
4839 if (mask->control[band].gi > NL80211_TXRATE_FORCE_LGI)
4840 return -EINVAL;
4841 }
eb89a6a6
MH		 4842 if (tb[NL80211_TXRATE_HE] &&
4843 !he_set_mcs_mask(info, wdev, sband,
4844 nla_data(tb[NL80211_TXRATE_HE]),
4845 mask->control[band].he_mcs))
4846 return -EINVAL;
c4a30446 4847
eb89a6a6
MH		 4848 if (tb[NL80211_TXRATE_HE_GI])
4849 mask->control[band].he_gi =
4850 nla_get_u8(tb[NL80211_TXRATE_HE_GI]);
4851 if (tb[NL80211_TXRATE_HE_LTF])
4852 mask->control[band].he_ltf =
4853 nla_get_u8(tb[NL80211_TXRATE_HE_LTF]);
a7c7fbff
PK		 4854
4855 if (mask->control[band].legacy == 0) {
eb89a6a6 4856 /* don't allow empty legacy rates if HT, VHT or HE
a7c7fbff
PK		 4857 * are not even supported.
4858 */
4859 if (!(rdev->wiphy.bands[band]->ht_cap.ht_supported ||
eb89a6a6
MH		 4860 rdev->wiphy.bands[band]->vht_cap.vht_supported ||
4861 ieee80211_get_he_iftype_cap(sband, wdev->iftype)))
a7c7fbff
PK		 4862 return -EINVAL;
4863
4864 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
4865 if (mask->control[band].ht_mcs[i])
4866 goto out;
4867
4868 for (i = 0; i < NL80211_VHT_NSS_MAX; i++)
4869 if (mask->control[band].vht_mcs[i])
4870 goto out;
4871
eb89a6a6
MH		 4872 for (i = 0; i < NL80211_HE_NSS_MAX; i++)
4873 if (mask->control[band].he_mcs[i])
4874 goto out;
4875
a7c7fbff
PK		 4876 /* legacy and mcs rates may not be both empty */
4877 return -EINVAL;
4878 }
4879 }
4880
4881out:
4882 return 0;
4883}
4884
8564e382
JB		 4885static int validate_beacon_tx_rate(struct cfg80211_registered_device *rdev,
4886 enum nl80211_band band,
4887 struct cfg80211_bitrate_mask *beacon_rate)
a7c7fbff 4888{
c4a30446 4889 u32 count_ht, count_vht, count_he, i;
8564e382 4890 u32 rate = beacon_rate->control[band].legacy;
a7c7fbff
PK		 4891
4892 /* Allow only one rate */
4893 if (hweight32(rate) > 1)
4894 return -EINVAL;
4895
4896 count_ht = 0;
4897 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
8564e382 4898 if (hweight8(beacon_rate->control[band].ht_mcs[i]) > 1) {
a7c7fbff 4899 return -EINVAL;
8564e382 4900 } else if (beacon_rate->control[band].ht_mcs[i]) {
a7c7fbff
PK		 4901 count_ht++;
4902 if (count_ht > 1)
4903 return -EINVAL;
4904 }
4905 if (count_ht && rate)
4906 return -EINVAL;
4907 }
4908
4909 count_vht = 0;
4910 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
8564e382 4911 if (hweight16(beacon_rate->control[band].vht_mcs[i]) > 1) {
a7c7fbff 4912 return -EINVAL;
8564e382 4913 } else if (beacon_rate->control[band].vht_mcs[i]) {
a7c7fbff
PK		 4914 count_vht++;
4915 if (count_vht > 1)
4916 return -EINVAL;
4917 }
4918 if (count_vht && rate)
4919 return -EINVAL;
4920 }
4921
c4a30446
RM		 4922 count_he = 0;
4923 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
4924 if (hweight16(beacon_rate->control[band].he_mcs[i]) > 1) {
4925 return -EINVAL;
4926 } else if (beacon_rate->control[band].he_mcs[i]) {
4927 count_he++;
4928 if (count_he > 1)
4929 return -EINVAL;
4930 }
4931 if (count_he && rate)
4932 return -EINVAL;
4933 }
4934
4935 if ((count_ht && count_vht && count_he) ||
4936 (!rate && !count_ht && !count_vht && !count_he))
a7c7fbff
PK		 4937 return -EINVAL;
4938
8564e382
JB		 4939 if (rate &&
4940 !wiphy_ext_feature_isset(&rdev->wiphy,
4941 NL80211_EXT_FEATURE_BEACON_RATE_LEGACY))
4942 return -EINVAL;
4943 if (count_ht &&
4944 !wiphy_ext_feature_isset(&rdev->wiphy,
4945 NL80211_EXT_FEATURE_BEACON_RATE_HT))
4946 return -EINVAL;
4947 if (count_vht &&
4948 !wiphy_ext_feature_isset(&rdev->wiphy,
4949 NL80211_EXT_FEATURE_BEACON_RATE_VHT))
4950 return -EINVAL;
c4a30446
RM		 4951 if (count_he &&
4952 !wiphy_ext_feature_isset(&rdev->wiphy,
4953 NL80211_EXT_FEATURE_BEACON_RATE_HE))
4954 return -EINVAL;
8564e382 4955
a7c7fbff
PK		 4956 return 0;
4957}
4958
81e54d08
PKC		 4959static int nl80211_parse_beacon(struct cfg80211_registered_device *rdev,
4960 struct nlattr *attrs[],
8860020e 4961 struct cfg80211_beacon_data *bcn)
ed1b6cc7 4962{
8860020e 4963 bool haveinfo = false;
81e54d08 4964 int err;
ed1b6cc7 4965
8860020e 4966 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 4967
a1193be8
SW		 4968 if (attrs[NL80211_ATTR_BEACON_HEAD]) {
4969 bcn->head = nla_data(attrs[NL80211_ATTR_BEACON_HEAD]);
4970 bcn->head_len = nla_len(attrs[NL80211_ATTR_BEACON_HEAD]);
8860020e
JB		 4971 if (!bcn->head_len)
4972 return -EINVAL;
4973 haveinfo = true;
ed1b6cc7
JB		 4974 }
4975
a1193be8
SW		 4976 if (attrs[NL80211_ATTR_BEACON_TAIL]) {
4977 bcn->tail = nla_data(attrs[NL80211_ATTR_BEACON_TAIL]);
4978 bcn->tail_len = nla_len(attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 4979 haveinfo = true;
ed1b6cc7
JB		 4980 }
4981
4c476991
JB		 4982 if (!haveinfo)
4983 return -EINVAL;
3b85875a 4984
a1193be8
SW		 4985 if (attrs[NL80211_ATTR_IE]) {
4986 bcn->beacon_ies = nla_data(attrs[NL80211_ATTR_IE]);
4987 bcn->beacon_ies_len = nla_len(attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 4988 }
4989
a1193be8 4990 if (attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 4991 bcn->proberesp_ies =
a1193be8 4992 nla_data(attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 4993 bcn->proberesp_ies_len =
a1193be8 4994 nla_len(attrs[NL80211_ATTR_IE_PROBE_RESP]);
9946ecfb
JM		 4995 }
4996
a1193be8 4997 if (attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 4998 bcn->assocresp_ies =
a1193be8 4999 nla_data(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 5000 bcn->assocresp_ies_len =
a1193be8 5001 nla_len(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
9946ecfb
JM		 5002 }
5003
a1193be8
SW		 5004 if (attrs[NL80211_ATTR_PROBE_RESP]) {
5005 bcn->probe_resp = nla_data(attrs[NL80211_ATTR_PROBE_RESP]);
5006 bcn->probe_resp_len = nla_len(attrs[NL80211_ATTR_PROBE_RESP]);
00f740e1
AN		 5007 }
5008
81e54d08
PKC		 5009 if (attrs[NL80211_ATTR_FTM_RESPONDER]) {
5010 struct nlattr *tb[NL80211_FTM_RESP_ATTR_MAX + 1];
5011
8cb08174
JB		 5012 err = nla_parse_nested_deprecated(tb,
5013 NL80211_FTM_RESP_ATTR_MAX,
5014 attrs[NL80211_ATTR_FTM_RESPONDER],
5015 NULL, NULL);
81e54d08
PKC		 5016 if (err)
5017 return err;
5018
5019 if (tb[NL80211_FTM_RESP_ATTR_ENABLED] &&
5020 wiphy_ext_feature_isset(&rdev->wiphy,
5021 NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER))
5022 bcn->ftm_responder = 1;
5023 else
5024 return -EOPNOTSUPP;
5025
5026 if (tb[NL80211_FTM_RESP_ATTR_LCI]) {
5027 bcn->lci = nla_data(tb[NL80211_FTM_RESP_ATTR_LCI]);
5028 bcn->lci_len = nla_len(tb[NL80211_FTM_RESP_ATTR_LCI]);
5029 }
5030
5031 if (tb[NL80211_FTM_RESP_ATTR_CIVICLOC]) {
5032 bcn->civicloc = nla_data(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
5033 bcn->civicloc_len = nla_len(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
5034 }
5035 } else {
5036 bcn->ftm_responder = -1;
5037 }
5038
8860020e
JB		 5039 return 0;
5040}
5041
796e90f4
JC		 5042static int nl80211_parse_he_obss_pd(struct nlattr *attrs,
5043 struct ieee80211_he_obss_pd *he_obss_pd)
5044{
5045 struct nlattr *tb[NL80211_HE_OBSS_PD_ATTR_MAX + 1];
5046 int err;
5047
5048 err = nla_parse_nested(tb, NL80211_HE_OBSS_PD_ATTR_MAX, attrs,
5049 he_obss_pd_policy, NULL);
5050 if (err)
5051 return err;
5052
f5bec330
RM		 5053 if (!tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL])
5054 return -EINVAL;
5055
5056 he_obss_pd->sr_ctrl = nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL]);
5057
6c8b6e4a
RM		 5058 if (tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET])
5059 he_obss_pd->min_offset =
5060 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET]);
5061 if (tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET])
5062 he_obss_pd->max_offset =
5063 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET]);
f5bec330
RM		 5064 if (tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET])
5065 he_obss_pd->non_srg_max_offset =
5066 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET]);
6c8b6e4a
RM		 5067
5068 if (he_obss_pd->min_offset > he_obss_pd->max_offset)
796e90f4
JC		 5069 return -EINVAL;
5070
f5bec330
RM		 5071 if (tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP])
5072 memcpy(he_obss_pd->bss_color_bitmap,
5073 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP]),
5074 sizeof(he_obss_pd->bss_color_bitmap));
5075
5076 if (tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP])
5077 memcpy(he_obss_pd->partial_bssid_bitmap,
5078 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP]),
5079 sizeof(he_obss_pd->partial_bssid_bitmap));
5080
796e90f4
JC		 5081 he_obss_pd->enable = true;
5082
5083 return 0;
5084}
5085
5c5e52d1
JC		 5086static int nl80211_parse_he_bss_color(struct nlattr *attrs,
5087 struct cfg80211_he_bss_color *he_bss_color)
5088{
5089 struct nlattr *tb[NL80211_HE_BSS_COLOR_ATTR_MAX + 1];
5090 int err;
5091
5092 err = nla_parse_nested(tb, NL80211_HE_BSS_COLOR_ATTR_MAX, attrs,
5093 he_bss_color_policy, NULL);
5094 if (err)
5095 return err;
5096
5097 if (!tb[NL80211_HE_BSS_COLOR_ATTR_COLOR])
5098 return -EINVAL;
5099
5100 he_bss_color->color =
5101 nla_get_u8(tb[NL80211_HE_BSS_COLOR_ATTR_COLOR]);
75e6b594
JB		 5102 he_bss_color->enabled =
5103 !nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_DISABLED]);
5c5e52d1
JC		 5104 he_bss_color->partial =
5105 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_PARTIAL]);
5106
5107 return 0;
5108}
5109
291c49de
AD		 5110static int nl80211_parse_fils_discovery(struct cfg80211_registered_device *rdev,
5111 struct nlattr *attrs,
5112 struct cfg80211_ap_settings *params)
5113{
5114 struct nlattr *tb[NL80211_FILS_DISCOVERY_ATTR_MAX + 1];
5115 int ret;
5116 struct cfg80211_fils_discovery *fd = &params->fils_discovery;
5117
5118 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5119 NL80211_EXT_FEATURE_FILS_DISCOVERY))
5120 return -EINVAL;
5121
5122 ret = nla_parse_nested(tb, NL80211_FILS_DISCOVERY_ATTR_MAX, attrs,
5123 NULL, NULL);
5124 if (ret)
5125 return ret;
5126
5127 if (!tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN] ||
5128 !tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX] ||
5129 !tb[NL80211_FILS_DISCOVERY_ATTR_TMPL])
5130 return -EINVAL;
5131
5132 fd->tmpl_len = nla_len(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5133 fd->tmpl = nla_data(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5134 fd->min_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN]);
5135 fd->max_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX]);
5136
5137 return 0;
5138}
5139
7443dcd1
AD		 5140static int
5141nl80211_parse_unsol_bcast_probe_resp(struct cfg80211_registered_device *rdev,
5142 struct nlattr *attrs,
5143 struct cfg80211_ap_settings *params)
5144{
5145 struct nlattr *tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1];
5146 int ret;
5147 struct cfg80211_unsol_bcast_probe_resp *presp =
5148 &params->unsol_bcast_probe_resp;
5149
5150 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5151 NL80211_EXT_FEATURE_UNSOL_BCAST_PROBE_RESP))
5152 return -EINVAL;
5153
5154 ret = nla_parse_nested(tb, NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX,
5155 attrs, NULL, NULL);
5156 if (ret)
5157 return ret;
5158
5159 if (!tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] ||
5160 !tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL])
5161 return -EINVAL;
5162
5163 presp->tmpl = nla_data(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5164 presp->tmpl_len = nla_len(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5165 presp->interval = nla_get_u32(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT]);
5166 return 0;
5167}
5168
66cd794e
JB		 5169static void nl80211_check_ap_rate_selectors(struct cfg80211_ap_settings *params,
5170 const u8 *rates)
5171{
5172 int i;
5173
5174 if (!rates)
5175 return;
5176
5177 for (i = 0; i < rates[1]; i++) {
5178 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
5179 params->ht_required = true;
5180 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_VHT_PHY)
5181 params->vht_required = true;
2a392596
IP		 5182 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_HE_PHY)
5183 params->he_required = true;
d6587602
IP		 5184 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_SAE_H2E)
5185 params->sae_h2e_required = true;
66cd794e
JB		 5186 }
5187}
5188
5189/*
5190 * Since the nl80211 API didn't include, from the beginning, attributes about
5191 * HT/VHT requirements/capabilities, we parse them out of the IEs for the
5192 * benefit of drivers that rebuild IEs in the firmware.
5193 */
5194static void nl80211_calculate_ap_params(struct cfg80211_ap_settings *params)
5195{
5196 const struct cfg80211_beacon_data *bcn = &params->beacon;
ba83bfb1
IM		 5197 size_t ies_len = bcn->tail_len;
5198 const u8 *ies = bcn->tail;
66cd794e
JB		 5199 const u8 *rates;
5200 const u8 *cap;
5201
5202 rates = cfg80211_find_ie(WLAN_EID_SUPP_RATES, ies, ies_len);
5203 nl80211_check_ap_rate_selectors(params, rates);
5204
5205 rates = cfg80211_find_ie(WLAN_EID_EXT_SUPP_RATES, ies, ies_len);
5206 nl80211_check_ap_rate_selectors(params, rates);
5207
5208 cap = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, ies, ies_len);
5209 if (cap && cap[1] >= sizeof(*params->ht_cap))
5210 params->ht_cap = (void *)(cap + 2);
5211 cap = cfg80211_find_ie(WLAN_EID_VHT_CAPABILITY, ies, ies_len);
5212 if (cap && cap[1] >= sizeof(*params->vht_cap))
5213 params->vht_cap = (void *)(cap + 2);
244eb9ae
ST		 5214 cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_CAPABILITY, ies, ies_len);
5215 if (cap && cap[1] >= sizeof(*params->he_cap) + 1)
5216 params->he_cap = (void *)(cap + 3);
7e8d6f12
ST		 5217 cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_OPERATION, ies, ies_len);
5218 if (cap && cap[1] >= sizeof(*params->he_oper) + 1)
5219 params->he_oper = (void *)(cap + 3);
66cd794e
JB		 5220}
5221
46c1dd0c
FF		 5222static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
5223 struct cfg80211_ap_settings *params)
5224{
5225 struct wireless_dev *wdev;
5226 bool ret = false;
5227
53873f13 5228 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
46c1dd0c
FF		 5229 if (wdev->iftype != NL80211_IFTYPE_AP &&
5230 wdev->iftype != NL80211_IFTYPE_P2P_GO)
5231 continue;
5232
683b6d3b 5233 if (!wdev->preset_chandef.chan)
46c1dd0c
FF		 5234 continue;
5235
683b6d3b 5236 params->chandef = wdev->preset_chandef;
46c1dd0c
FF		 5237 ret = true;
5238 break;
5239 }
5240
46c1dd0c
FF		 5241 return ret;
5242}
5243
e39e5b5e
JM		 5244static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
5245 enum nl80211_auth_type auth_type,
5246 enum nl80211_commands cmd)
5247{
5248 if (auth_type > NL80211_AUTHTYPE_MAX)
5249 return false;
5250
5251 switch (cmd) {
5252 case NL80211_CMD_AUTHENTICATE:
5253 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
5254 auth_type == NL80211_AUTHTYPE_SAE)
5255 return false;
63181060
JM		 5256 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5257 NL80211_EXT_FEATURE_FILS_STA) &&
5258 (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5259 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5260 auth_type == NL80211_AUTHTYPE_FILS_PK))
5261 return false;
e39e5b5e
JM		 5262 return true;
5263 case NL80211_CMD_CONNECT:
10773a7c 5264 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
26f7044e
CHH		 5265 !wiphy_ext_feature_isset(&rdev->wiphy,
5266 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10773a7c 5267 auth_type == NL80211_AUTHTYPE_SAE)
a3caf744 5268 return false;
10773a7c 5269
a3caf744
VK		 5270 /* FILS with SK PFS or PK not supported yet */
5271 if (auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5272 auth_type == NL80211_AUTHTYPE_FILS_PK)
5273 return false;
5274 if (!wiphy_ext_feature_isset(
5275 &rdev->wiphy,
5276 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
5277 auth_type == NL80211_AUTHTYPE_FILS_SK)
5278 return false;
5279 return true;
e39e5b5e 5280 case NL80211_CMD_START_AP:
2831a631
CHH		 5281 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5282 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP) &&
5283 auth_type == NL80211_AUTHTYPE_SAE)
e39e5b5e 5284 return false;
63181060
JM		 5285 /* FILS not supported yet */
5286 if (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5287 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5288 auth_type == NL80211_AUTHTYPE_FILS_PK)
5289 return false;
e39e5b5e
JM		 5290 return true;
5291 default:
5292 return false;
5293 }
5294}
5295
8860020e
JB		 5296static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
5297{
5298 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5299 struct net_device *dev = info->user_ptr[1];
5300 struct wireless_dev *wdev = dev->ieee80211_ptr;
5301 struct cfg80211_ap_settings params;
5302 int err;
5303
5304 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5305 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5306 return -EOPNOTSUPP;
5307
5308 if (!rdev->ops->start_ap)
5309 return -EOPNOTSUPP;
5310
5311 if (wdev->beacon_interval)
5312 return -EALREADY;
5313
5314 memset(&params, 0, sizeof(params));
5315
5316 /* these are required for START_AP */
5317 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
5318 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
5319 !info->attrs[NL80211_ATTR_BEACON_HEAD])
5320 return -EINVAL;
5321
81e54d08 5322 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon);
8860020e
JB		 5323 if (err)
5324 return err;
5325
5326 params.beacon_interval =
5327 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
5328 params.dtim_period =
5329 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
5330
0c317a02
PK		 5331 err = cfg80211_validate_beacon_int(rdev, dev->ieee80211_ptr->iftype,
5332 params.beacon_interval);
8860020e
JB		 5333 if (err)
5334 return err;
5335
5336 /*
5337 * In theory, some of these attributes should be required here
5338 * but since they were not used when the command was originally
5339 * added, keep them optional for old user space programs to let
5340 * them continue to work with drivers that do not need the
5341 * additional information -- drivers must check!
5342 */
5343 if (info->attrs[NL80211_ATTR_SSID]) {
5344 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5345 params.ssid_len =
5346 nla_len(info->attrs[NL80211_ATTR_SSID]);
cb9abd48 5347 if (params.ssid_len == 0)
8860020e
JB		 5348 return -EINVAL;
5349 }
5350
ab0d76f6 5351 if (info->attrs[NL80211_ATTR_HIDDEN_SSID])
8860020e
JB		 5352 params.hidden_ssid = nla_get_u32(
5353 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
8860020e
JB		 5354
5355 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
5356
5357 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
5358 params.auth_type = nla_get_u32(
5359 info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 5360 if (!nl80211_valid_auth_type(rdev, params.auth_type,
5361 NL80211_CMD_START_AP))
8860020e
JB		 5362 return -EINVAL;
5363 } else
5364 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
5365
5366 err = nl80211_crypto_settings(rdev, info, &params.crypto,
5367 NL80211_MAX_NR_CIPHER_SUITES);
5368 if (err)
5369 return err;
5370
1b658f11
VT		 5371 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
5372 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
5373 return -EOPNOTSUPP;
5374 params.inactivity_timeout = nla_get_u16(
5375 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
5376 }
5377
53cabad7
JB		 5378 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
5379 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5380 return -EINVAL;
5381 params.p2p_ctwindow =
5382 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 5383 if (params.p2p_ctwindow != 0 &&
5384 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
5385 return -EINVAL;
5386 }
5387
5388 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
5389 u8 tmp;
5390
5391 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5392 return -EINVAL;
5393 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 5394 params.p2p_opp_ps = tmp;
5395 if (params.p2p_opp_ps != 0 &&
5396 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
5397 return -EINVAL;
5398 }
5399
aa430da4 5400 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 5401 err = nl80211_parse_chandef(rdev, info, &params.chandef);
5402 if (err)
5403 return err;
5404 } else if (wdev->preset_chandef.chan) {
5405 params.chandef = wdev->preset_chandef;
46c1dd0c 5406 } else if (!nl80211_get_ap_channel(rdev, &params))
aa430da4
JB		 5407 return -EINVAL;
5408
923b352f
AN		 5409 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
5410 wdev->iftype))
aa430da4
JB		 5411 return -EINVAL;
5412
a7c7fbff 5413 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 5414 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
5415 NL80211_ATTR_TX_RATES,
eb89a6a6 5416 &params.beacon_rate,
857b34c4 5417 dev, false);
a7c7fbff
PK		 5418 if (err)
5419 return err;
5420
8564e382
JB		 5421 err = validate_beacon_tx_rate(rdev, params.chandef.chan->band,
5422 &params.beacon_rate);
a7c7fbff
PK		 5423 if (err)
5424 return err;
5425 }
5426
18998c38
EP		 5427 if (info->attrs[NL80211_ATTR_SMPS_MODE]) {
5428 params.smps_mode =
5429 nla_get_u8(info->attrs[NL80211_ATTR_SMPS_MODE]);
5430 switch (params.smps_mode) {
5431 case NL80211_SMPS_OFF:
5432 break;
5433 case NL80211_SMPS_STATIC:
5434 if (!(rdev->wiphy.features &
5435 NL80211_FEATURE_STATIC_SMPS))
5436 return -EINVAL;
5437 break;
5438 case NL80211_SMPS_DYNAMIC:
5439 if (!(rdev->wiphy.features &
5440 NL80211_FEATURE_DYNAMIC_SMPS))
5441 return -EINVAL;
5442 break;
5443 default:
5444 return -EINVAL;
5445 }
5446 } else {
5447 params.smps_mode = NL80211_SMPS_OFF;
5448 }
5449
6e8ef842
PK		 5450 params.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
5451 if (params.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ])
5452 return -EOPNOTSUPP;
5453
4baf6bea
OO		 5454 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
5455 params.acl = parse_acl_data(&rdev->wiphy, info);
5456 if (IS_ERR(params.acl))
5457 return PTR_ERR(params.acl);
5458 }
5459
a0de1ca3
JC		 5460 params.twt_responder =
5461 nla_get_flag(info->attrs[NL80211_ATTR_TWT_RESPONDER]);
5462
796e90f4
JC		 5463 if (info->attrs[NL80211_ATTR_HE_OBSS_PD]) {
5464 err = nl80211_parse_he_obss_pd(
5465 info->attrs[NL80211_ATTR_HE_OBSS_PD],
5466 &params.he_obss_pd);
bc7a39b4
LC		 5467 if (err)
5468 goto out;
796e90f4
JC		 5469 }
5470
5c5e52d1
JC		 5471 if (info->attrs[NL80211_ATTR_HE_BSS_COLOR]) {
5472 err = nl80211_parse_he_bss_color(
5473 info->attrs[NL80211_ATTR_HE_BSS_COLOR],
5474 &params.he_bss_color);
5475 if (err)
60a0121f 5476 goto out;
5c5e52d1
JC		 5477 }
5478
291c49de
AD		 5479 if (info->attrs[NL80211_ATTR_FILS_DISCOVERY]) {
5480 err = nl80211_parse_fils_discovery(rdev,
5481 info->attrs[NL80211_ATTR_FILS_DISCOVERY],
5482 &params);
5483 if (err)
5484 goto out;
5485 }
5486
7443dcd1
AD		 5487 if (info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP]) {
5488 err = nl80211_parse_unsol_bcast_probe_resp(
5489 rdev, info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP],
5490 &params);
5491 if (err)
abaf94ec 5492 goto out;
7443dcd1
AD		 5493 }
5494
66cd794e
JB		 5495 nl80211_calculate_ap_params(&params);
5496
fe494370
SD		 5497 if (info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])
5498 params.flags |= AP_SETTINGS_EXTERNAL_AUTH_SUPPORT;
5499
c56589ed 5500 wdev_lock(wdev);
e35e4d28 5501 err = rdev_start_ap(rdev, dev, &params);
46c1dd0c 5502 if (!err) {
683b6d3b 5503 wdev->preset_chandef = params.chandef;
8860020e 5504 wdev->beacon_interval = params.beacon_interval;
9e0e2961 5505 wdev->chandef = params.chandef;
06e191e2
AQ		 5506 wdev->ssid_len = params.ssid_len;
5507 memcpy(wdev->ssid, params.ssid, wdev->ssid_len);
466a3061
DK		 5508
5509 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
5510 wdev->conn_owner_nlportid = info->snd_portid;
46c1dd0c 5511 }
c56589ed 5512 wdev_unlock(wdev);
77765eaf 5513
9951ebfc 5514out:
77765eaf
VT		 5515 kfree(params.acl);
5516
56d1893d 5517 return err;
ed1b6cc7
JB		 5518}
5519
8860020e
JB		 5520static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
5521{
5522 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5523 struct net_device *dev = info->user_ptr[1];
5524 struct wireless_dev *wdev = dev->ieee80211_ptr;
5525 struct cfg80211_beacon_data params;
5526 int err;
5527
5528 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5529 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5530 return -EOPNOTSUPP;
5531
5532 if (!rdev->ops->change_beacon)
5533 return -EOPNOTSUPP;
5534
5535 if (!wdev->beacon_interval)
5536 return -EINVAL;
5537
81e54d08 5538 err = nl80211_parse_beacon(rdev, info->attrs, &params);
8860020e
JB		 5539 if (err)
5540 return err;
5541
c56589ed
SW		 5542 wdev_lock(wdev);
5543 err = rdev_change_beacon(rdev, dev, &params);
5544 wdev_unlock(wdev);
5545
5546 return err;
8860020e
JB		 5547}
5548
5549static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 5550{
4c476991
JB		 5551 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5552 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 5553
7c8d5e03 5554 return cfg80211_stop_ap(rdev, dev, false);
ed1b6cc7
JB		 5555}
5556
5727ef1b
JB		 5557static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
5558 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
5559 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
5560 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 5561 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 5562 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 5563 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 5564};
5565
eccb8e8f 5566static int parse_station_flags(struct genl_info *info,
bdd3ae3d 5567 enum nl80211_iftype iftype,
eccb8e8f 5568 struct station_parameters *params)
5727ef1b
JB		 5569{
5570 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 5571 struct nlattr *nla;
5727ef1b
JB		 5572 int flag;
5573
eccb8e8f
JB		 5574 /*
5575 * Try parsing the new attribute first so userspace
5576 * can specify both for older kernels.
5577 */
5578 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
5579 if (nla) {
5580 struct nl80211_sta_flag_update *sta_flags;
5581
5582 sta_flags = nla_data(nla);
5583 params->sta_flags_mask = sta_flags->mask;
5584 params->sta_flags_set = sta_flags->set;
77ee7c89 5585 params->sta_flags_set &= params->sta_flags_mask;
eccb8e8f
JB		 5586 if ((params->sta_flags_mask |
5587 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
5588 return -EINVAL;
5589 return 0;
5590 }
5591
5592 /* if present, parse the old attribute */
5727ef1b 5593
eccb8e8f 5594 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 5595 if (!nla)
5596 return 0;
5597
8cb08174 5598 if (nla_parse_nested_deprecated(flags, NL80211_STA_FLAG_MAX, nla, sta_flags_policy, info->extack))
5727ef1b
JB		 5599 return -EINVAL;
5600
bdd3ae3d
JB		 5601 /*
5602 * Only allow certain flags for interface types so that
5603 * other attributes are silently ignored. Remember that
5604 * this is backward compatibility code with old userspace
5605 * and shouldn't be hit in other cases anyway.
5606 */
5607 switch (iftype) {
5608 case NL80211_IFTYPE_AP:
5609 case NL80211_IFTYPE_AP_VLAN:
5610 case NL80211_IFTYPE_P2P_GO:
5611 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
5612 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
5613 BIT(NL80211_STA_FLAG_WME) |
5614 BIT(NL80211_STA_FLAG_MFP);
5615 break;
5616 case NL80211_IFTYPE_P2P_CLIENT:
5617 case NL80211_IFTYPE_STATION:
5618 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
5619 BIT(NL80211_STA_FLAG_TDLS_PEER);
5620 break;
5621 case NL80211_IFTYPE_MESH_POINT:
5622 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5623 BIT(NL80211_STA_FLAG_MFP) |
5624 BIT(NL80211_STA_FLAG_AUTHORIZED);
5cf3006c 5625 break;
bdd3ae3d
JB		 5626 default:
5627 return -EINVAL;
5628 }
5727ef1b 5629
3383b5a6
JB		 5630 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
5631 if (flags[flag]) {
eccb8e8f 5632 params->sta_flags_set |= (1<<flag);
5727ef1b 5633
3383b5a6
JB		 5634 /* no longer support new API additions in old API */
5635 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
5636 return -EINVAL;
5637 }
5638 }
5639
5727ef1b
JB		 5640 return 0;
5641}
5642
9bb7e0f2 5643bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info, int attr)
c8dcfd8a
FF		 5644{
5645 struct nlattr *rate;
8eb41c8d
VK		 5646 u32 bitrate;
5647 u16 bitrate_compat;
bbf67e45 5648 enum nl80211_rate_info rate_flg;
c8dcfd8a 5649
ae0be8de 5650 rate = nla_nest_start_noflag(msg, attr);
c8dcfd8a 5651 if (!rate)
db9c64cf 5652 return false;
c8dcfd8a
FF		 5653
5654 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
5655 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 5656 /* report 16-bit bitrate only if we can */
5657 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
db9c64cf
JB		 5658 if (bitrate > 0 &&
5659 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
5660 return false;
5661 if (bitrate_compat > 0 &&
5662 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
5663 return false;
5664
b51f3bee
JB		 5665 switch (info->bw) {
5666 case RATE_INFO_BW_5:
5667 rate_flg = NL80211_RATE_INFO_5_MHZ_WIDTH;
5668 break;
5669 case RATE_INFO_BW_10:
5670 rate_flg = NL80211_RATE_INFO_10_MHZ_WIDTH;
5671 break;
5672 default:
5673 WARN_ON(1);
7b506ff6 5674 fallthrough;
b51f3bee
JB		 5675 case RATE_INFO_BW_20:
5676 rate_flg = 0;
5677 break;
5678 case RATE_INFO_BW_40:
5679 rate_flg = NL80211_RATE_INFO_40_MHZ_WIDTH;
5680 break;
5681 case RATE_INFO_BW_80:
5682 rate_flg = NL80211_RATE_INFO_80_MHZ_WIDTH;
5683 break;
5684 case RATE_INFO_BW_160:
5685 rate_flg = NL80211_RATE_INFO_160_MHZ_WIDTH;
5686 break;
c4cbaf79
LC		 5687 case RATE_INFO_BW_HE_RU:
5688 rate_flg = 0;
5689 WARN_ON(!(info->flags & RATE_INFO_FLAGS_HE_MCS));
b51f3bee
JB		 5690 }
5691
5692 if (rate_flg && nla_put_flag(msg, rate_flg))
5693 return false;
5694
db9c64cf
JB		 5695 if (info->flags & RATE_INFO_FLAGS_MCS) {
5696 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
5697 return false;
db9c64cf
JB		 5698 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
5699 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
5700 return false;
5701 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
5702 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
5703 return false;
5704 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
5705 return false;
db9c64cf
JB		 5706 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
5707 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
5708 return false;
c4cbaf79
LC		 5709 } else if (info->flags & RATE_INFO_FLAGS_HE_MCS) {
5710 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_MCS, info->mcs))
5711 return false;
5712 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_NSS, info->nss))
5713 return false;
5714 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_GI, info->he_gi))
5715 return false;
5716 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_DCM, info->he_dcm))
5717 return false;
5718 if (info->bw == RATE_INFO_BW_HE_RU &&
5719 nla_put_u8(msg, NL80211_RATE_INFO_HE_RU_ALLOC,
5720 info->he_ru_alloc))
5721 return false;
db9c64cf 5722 }
c8dcfd8a
FF		 5723
5724 nla_nest_end(msg, rate);
5725 return true;
c8dcfd8a
FF		 5726}
5727
119363c7
FF		 5728static bool nl80211_put_signal(struct sk_buff *msg, u8 mask, s8 *signal,
5729 int id)
5730{
5731 void *attr;
5732 int i = 0;
5733
5734 if (!mask)
5735 return true;
5736
ae0be8de 5737 attr = nla_nest_start_noflag(msg, id);
119363c7
FF		 5738 if (!attr)
5739 return false;
5740
5741 for (i = 0; i < IEEE80211_MAX_CHAINS; i++) {
5742 if (!(mask & BIT(i)))
5743 continue;
5744
5745 if (nla_put_u8(msg, i, signal[i]))
5746 return false;
5747 }
5748
5749 nla_nest_end(msg, attr);
5750
5751 return true;
5752}
5753
cf5ead82
JB		 5754static int nl80211_send_station(struct sk_buff *msg, u32 cmd, u32 portid,
5755 u32 seq, int flags,
66266b3a
JL		 5756 struct cfg80211_registered_device *rdev,
5757 struct net_device *dev,
98b62183 5758 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 5759{
5760 void *hdr;
f4263c98 5761 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 5762
cf5ead82 5763 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
f77bf486
AS		 5764 if (!hdr) {
5765 cfg80211_sinfo_release_content(sinfo);
fd5b74dc 5766 return -1;
f77bf486 5767 }
fd5b74dc 5768
9360ffd1
DM		 5769 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
5770 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
5771 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
5772 goto nla_put_failure;
f5ea9120 5773
ae0be8de 5774 sinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_STA_INFO);
2ec600d6 5775 if (!sinfoattr)
fd5b74dc 5776 goto nla_put_failure;
319090bf
JB		 5777
5778#define PUT_SINFO(attr, memb, type) do { \
d686b920 5779 BUILD_BUG_ON(sizeof(type) == sizeof(u64)); \
397c657a 5780 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
319090bf
JB		 5781 nla_put_ ## type(msg, NL80211_STA_INFO_ ## attr, \
5782 sinfo->memb)) \
5783 goto nla_put_failure; \
5784 } while (0)
d686b920 5785#define PUT_SINFO_U64(attr, memb) do { \
397c657a 5786 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
d686b920
JB		 5787 nla_put_u64_64bit(msg, NL80211_STA_INFO_ ## attr, \
5788 sinfo->memb, NL80211_STA_INFO_PAD)) \
5789 goto nla_put_failure; \
5790 } while (0)
319090bf
JB		 5791
5792 PUT_SINFO(CONNECTED_TIME, connected_time, u32);
5793 PUT_SINFO(INACTIVE_TIME, inactive_time, u32);
6c7a0033 5794 PUT_SINFO_U64(ASSOC_AT_BOOTTIME, assoc_at);
319090bf 5795
397c657a
OE		 5796 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_RX_BYTES) |
5797 BIT_ULL(NL80211_STA_INFO_RX_BYTES64)) &&
9360ffd1 5798 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
42745e03 5799 (u32)sinfo->rx_bytes))
9360ffd1 5800 goto nla_put_failure;
319090bf 5801
397c657a
OE		 5802 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_TX_BYTES) |
5803 BIT_ULL(NL80211_STA_INFO_TX_BYTES64)) &&
9360ffd1 5804 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
42745e03
VK		 5805 (u32)sinfo->tx_bytes))
5806 goto nla_put_failure;
319090bf 5807
d686b920
JB		 5808 PUT_SINFO_U64(RX_BYTES64, rx_bytes);
5809 PUT_SINFO_U64(TX_BYTES64, tx_bytes);
319090bf
JB		 5810 PUT_SINFO(LLID, llid, u16);
5811 PUT_SINFO(PLID, plid, u16);
5812 PUT_SINFO(PLINK_STATE, plink_state, u8);
d686b920 5813 PUT_SINFO_U64(RX_DURATION, rx_duration);
36647055
THJ		 5814 PUT_SINFO_U64(TX_DURATION, tx_duration);
5815
5816 if (wiphy_ext_feature_isset(&rdev->wiphy,
5817 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
5818 PUT_SINFO(AIRTIME_WEIGHT, airtime_weight, u16);
319090bf 5819
66266b3a
JL		 5820 switch (rdev->wiphy.signal_type) {
5821 case CFG80211_SIGNAL_TYPE_MBM:
319090bf
JB		 5822 PUT_SINFO(SIGNAL, signal, u8);
5823 PUT_SINFO(SIGNAL_AVG, signal_avg, u8);
66266b3a
JL		 5824 break;
5825 default:
5826 break;
5827 }
397c657a 5828 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL)) {
119363c7
FF		 5829 if (!nl80211_put_signal(msg, sinfo->chains,
5830 sinfo->chain_signal,
5831 NL80211_STA_INFO_CHAIN_SIGNAL))
5832 goto nla_put_failure;
5833 }
397c657a 5834 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)) {
119363c7
FF		 5835 if (!nl80211_put_signal(msg, sinfo->chains,
5836 sinfo->chain_signal_avg,
5837 NL80211_STA_INFO_CHAIN_SIGNAL_AVG))
5838 goto nla_put_failure;
5839 }
397c657a 5840 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_TX_BITRATE)) {
c8dcfd8a
FF		 5841 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
5842 NL80211_STA_INFO_TX_BITRATE))
5843 goto nla_put_failure;
5844 }
397c657a 5845 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_RX_BITRATE)) {
c8dcfd8a
FF		 5846 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
5847 NL80211_STA_INFO_RX_BITRATE))
420e7fab 5848 goto nla_put_failure;
420e7fab 5849 }
319090bf
JB		 5850
5851 PUT_SINFO(RX_PACKETS, rx_packets, u32);
5852 PUT_SINFO(TX_PACKETS, tx_packets, u32);
5853 PUT_SINFO(TX_RETRIES, tx_retries, u32);
5854 PUT_SINFO(TX_FAILED, tx_failed, u32);
5855 PUT_SINFO(EXPECTED_THROUGHPUT, expected_throughput, u32);
ab60633c 5856 PUT_SINFO(AIRTIME_LINK_METRIC, airtime_link_metric, u32);
319090bf
JB		 5857 PUT_SINFO(BEACON_LOSS, beacon_loss_count, u32);
5858 PUT_SINFO(LOCAL_PM, local_pm, u32);
5859 PUT_SINFO(PEER_PM, peer_pm, u32);
5860 PUT_SINFO(NONPEER_PM, nonpeer_pm, u32);
dbdaee7a 5861 PUT_SINFO(CONNECTED_TO_GATE, connected_to_gate, u8);
1303a51c 5862 PUT_SINFO(CONNECTED_TO_AS, connected_to_as, u8);
319090bf 5863
397c657a 5864 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_BSS_PARAM)) {
ae0be8de
MK		 5865 bss_param = nla_nest_start_noflag(msg,
5866 NL80211_STA_INFO_BSS_PARAM);
f4263c98
PS		 5867 if (!bss_param)
5868 goto nla_put_failure;
5869
9360ffd1
DM		 5870 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
5871 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
5872 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
5873 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
5874 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
5875 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
5876 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
5877 sinfo->bss_param.dtim_period) ||
5878 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
5879 sinfo->bss_param.beacon_interval))
5880 goto nla_put_failure;
f4263c98
PS		 5881
5882 nla_nest_end(msg, bss_param);
5883 }
397c657a 5884 if ((sinfo->filled & BIT_ULL(NL80211_STA_INFO_STA_FLAGS)) &&
9360ffd1
DM		 5885 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
5886 sizeof(struct nl80211_sta_flag_update),
5887 &sinfo->sta_flags))
5888 goto nla_put_failure;
319090bf 5889
d686b920
JB		 5890 PUT_SINFO_U64(T_OFFSET, t_offset);
5891 PUT_SINFO_U64(RX_DROP_MISC, rx_dropped_misc);
5892 PUT_SINFO_U64(BEACON_RX, rx_beacon);
a76b1942 5893 PUT_SINFO(BEACON_SIGNAL_AVG, rx_beacon_signal_avg, u8);
0d4e14a3
AB		 5894 PUT_SINFO(RX_MPDUS, rx_mpdu_count, u32);
5895 PUT_SINFO(FCS_ERROR_COUNT, fcs_err_count, u32);
81d5439d 5896 if (wiphy_ext_feature_isset(&rdev->wiphy,
9c06602b
BP		 5897 NL80211_EXT_FEATURE_ACK_SIGNAL_SUPPORT)) {
5898 PUT_SINFO(ACK_SIGNAL, ack_signal, u8);
5899 PUT_SINFO(ACK_SIGNAL_AVG, avg_ack_signal, s8);
5900 }
319090bf
JB		 5901
5902#undef PUT_SINFO
d686b920 5903#undef PUT_SINFO_U64
6de39808 5904
8689c051 5905 if (sinfo->pertid) {
6de39808
JB		 5906 struct nlattr *tidsattr;
5907 int tid;
5908
ae0be8de
MK		 5909 tidsattr = nla_nest_start_noflag(msg,
5910 NL80211_STA_INFO_TID_STATS);
6de39808
JB		 5911 if (!tidsattr)
5912 goto nla_put_failure;
5913
5914 for (tid = 0; tid < IEEE80211_NUM_TIDS + 1; tid++) {
5915 struct cfg80211_tid_stats *tidstats;
5916 struct nlattr *tidattr;
5917
5918 tidstats = &sinfo->pertid[tid];
5919
5920 if (!tidstats->filled)
5921 continue;
5922
ae0be8de 5923 tidattr = nla_nest_start_noflag(msg, tid + 1);
6de39808
JB		 5924 if (!tidattr)
5925 goto nla_put_failure;
5926
d686b920 5927#define PUT_TIDVAL_U64(attr, memb) do { \
6de39808 5928 if (tidstats->filled & BIT(NL80211_TID_STATS_ ## attr) && \
d686b920
JB		 5929 nla_put_u64_64bit(msg, NL80211_TID_STATS_ ## attr, \
5930 tidstats->memb, NL80211_TID_STATS_PAD)) \
6de39808
JB		 5931 goto nla_put_failure; \
5932 } while (0)
5933
d686b920
JB		 5934 PUT_TIDVAL_U64(RX_MSDU, rx_msdu);
5935 PUT_TIDVAL_U64(TX_MSDU, tx_msdu);
5936 PUT_TIDVAL_U64(TX_MSDU_RETRIES, tx_msdu_retries);
5937 PUT_TIDVAL_U64(TX_MSDU_FAILED, tx_msdu_failed);
6de39808 5938
d686b920 5939#undef PUT_TIDVAL_U64
52539ca8
THJ		 5940 if ((tidstats->filled &
5941 BIT(NL80211_TID_STATS_TXQ_STATS)) &&
5942 !nl80211_put_txq_stats(msg, &tidstats->txq_stats,
5943 NL80211_TID_STATS_TXQ_STATS))
5944 goto nla_put_failure;
5945
6de39808
JB		 5946 nla_nest_end(msg, tidattr);
5947 }
5948
5949 nla_nest_end(msg, tidsattr);
5950 }
5951
2ec600d6 5952 nla_nest_end(msg, sinfoattr);
fd5b74dc 5953
319090bf 5954 if (sinfo->assoc_req_ies_len &&
9360ffd1
DM		 5955 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
5956 sinfo->assoc_req_ies))
5957 goto nla_put_failure;
50d3dfb7 5958
7ea3e110 5959 cfg80211_sinfo_release_content(sinfo);
053c095a
JB		 5960 genlmsg_end(msg, hdr);
5961 return 0;
fd5b74dc
JB		 5962
5963 nla_put_failure:
7ea3e110 5964 cfg80211_sinfo_release_content(sinfo);
bc3ed28c
TG		 5965 genlmsg_cancel(msg, hdr);
5966 return -EMSGSIZE;
fd5b74dc
JB		 5967}
5968
2ec600d6 5969static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 5970 struct netlink_callback *cb)
2ec600d6 5971{
73887fd9 5972 struct station_info sinfo;
1b8ec87a 5973 struct cfg80211_registered_device *rdev;
97990a06 5974 struct wireless_dev *wdev;
2ec600d6 5975 u8 mac_addr[ETH_ALEN];
97990a06 5976 int sta_idx = cb->args[2];
2ec600d6 5977 int err;
2ec600d6 5978
5297c65c 5979 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 5980 if (err)
a05829a7
JB		 5981 return err;
5982 /* nl80211_prepare_wdev_dump acquired it in the successful case */
5983 __acquire(&rdev->wiphy.mtx);
bba95fef 5984
97990a06
JB		 5985 if (!wdev->netdev) {
5986 err = -EINVAL;
5987 goto out_err;
5988 }
5989
1b8ec87a 5990 if (!rdev->ops->dump_station) {
eec60b03 5991 err = -EOPNOTSUPP;
bba95fef
JB		 5992 goto out_err;
5993 }
5994
bba95fef 5995 while (1) {
73887fd9 5996 memset(&sinfo, 0, sizeof(sinfo));
1b8ec87a 5997 err = rdev_dump_station(rdev, wdev->netdev, sta_idx,
73887fd9 5998 mac_addr, &sinfo);
bba95fef
JB		 5999 if (err == -ENOENT)
6000 break;
6001 if (err)
3b85875a 6002 goto out_err;
bba95fef 6003
cf5ead82 6004 if (nl80211_send_station(skb, NL80211_CMD_NEW_STATION,
15e47304 6005 NETLINK_CB(cb->skb).portid,
bba95fef 6006 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1b8ec87a 6007 rdev, wdev->netdev, mac_addr,
73887fd9 6008 &sinfo) < 0)
bba95fef
JB		 6009 goto out;
6010
6011 sta_idx++;
6012 }
6013
bba95fef 6014 out:
97990a06 6015 cb->args[2] = sta_idx;
bba95fef 6016 err = skb->len;
bba95fef 6017 out_err:
a05829a7 6018 wiphy_unlock(&rdev->wiphy);
bba95fef
JB		 6019
6020 return err;
2ec600d6 6021}
fd5b74dc 6022
5727ef1b
JB		 6023static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
6024{
4c476991
JB		 6025 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6026 struct net_device *dev = info->user_ptr[1];
73887fd9 6027 struct station_info sinfo;
fd5b74dc
JB		 6028 struct sk_buff *msg;
6029 u8 *mac_addr = NULL;
4c476991 6030 int err;
fd5b74dc 6031
73887fd9 6032 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc 6033
73887fd9
JB		 6034 if (!info->attrs[NL80211_ATTR_MAC])
6035 return -EINVAL;
fd5b74dc
JB		 6036
6037 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6038
73887fd9
JB		 6039 if (!rdev->ops->get_station)
6040 return -EOPNOTSUPP;
3b85875a 6041
73887fd9 6042 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 6043 if (err)
73887fd9 6044 return err;
2ec600d6 6045
fd2120ca 6046 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7ea3e110 6047 if (!msg) {
ba8f566a 6048 cfg80211_sinfo_release_content(&sinfo);
73887fd9 6049 return -ENOMEM;
7ea3e110 6050 }
fd5b74dc 6051
cf5ead82
JB		 6052 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION,
6053 info->snd_portid, info->snd_seq, 0,
73887fd9 6054 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991 6055 nlmsg_free(msg);
73887fd9 6056 return -ENOBUFS;
4c476991 6057 }
3b85875a 6058
73887fd9 6059 return genlmsg_reply(msg, info);
5727ef1b
JB		 6060}
6061
77ee7c89
JB		 6062int cfg80211_check_station_change(struct wiphy *wiphy,
6063 struct station_parameters *params,
6064 enum cfg80211_station_type statype)
6065{
e4208427
AB		 6066 if (params->listen_interval != -1 &&
6067 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89 6068 return -EINVAL;
e4208427 6069
17b94247
AB		 6070 if (params->support_p2p_ps != -1 &&
6071 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
6072 return -EINVAL;
6073
c72e1140 6074 if (params->aid &&
e4208427
AB		 6075 !(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) &&
6076 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89
JB		 6077 return -EINVAL;
6078
6079 /* When you run into this, adjust the code below for the new flag */
6080 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
6081
6082 switch (statype) {
eef941e6
TP		 6083 case CFG80211_STA_MESH_PEER_KERNEL:
6084 case CFG80211_STA_MESH_PEER_USER:
77ee7c89
JB		 6085 /*
6086 * No ignoring the TDLS flag here -- the userspace mesh
6087 * code doesn't have the bug of including TDLS in the
6088 * mask everywhere.
6089 */
6090 if (params->sta_flags_mask &
6091 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6092 BIT(NL80211_STA_FLAG_MFP) |
6093 BIT(NL80211_STA_FLAG_AUTHORIZED)))
6094 return -EINVAL;
6095 break;
6096 case CFG80211_STA_TDLS_PEER_SETUP:
6097 case CFG80211_STA_TDLS_PEER_ACTIVE:
6098 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6099 return -EINVAL;
6100 /* ignore since it can't change */
6101 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6102 break;
6103 default:
6104 /* disallow mesh-specific things */
6105 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
6106 return -EINVAL;
6107 if (params->local_pm)
6108 return -EINVAL;
6109 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6110 return -EINVAL;
6111 }
6112
6113 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6114 statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
6115 /* TDLS can't be set, ... */
6116 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
6117 return -EINVAL;
6118 /*
6119 * ... but don't bother the driver with it. This works around
6120 * a hostapd/wpa_supplicant issue -- it always includes the
6121 * TLDS_PEER flag in the mask even for AP mode.
6122 */
6123 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6124 }
6125
47edb11b
AB		 6126 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6127 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6128 /* reject other things that can't change */
6129 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
6130 return -EINVAL;
6131 if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
6132 return -EINVAL;
6133 if (params->supported_rates)
6134 return -EINVAL;
c4cbaf79
LC		 6135 if (params->ext_capab || params->ht_capa || params->vht_capa ||
6136 params->he_capa)
77ee7c89
JB		 6137 return -EINVAL;
6138 }
6139
47edb11b
AB		 6140 if (statype != CFG80211_STA_AP_CLIENT &&
6141 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6142 if (params->vlan)
6143 return -EINVAL;
6144 }
6145
6146 switch (statype) {
6147 case CFG80211_STA_AP_MLME_CLIENT:
6148 /* Use this only for authorizing/unauthorizing a station */
6149 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
6150 return -EOPNOTSUPP;
6151 break;
6152 case CFG80211_STA_AP_CLIENT:
47edb11b 6153 case CFG80211_STA_AP_CLIENT_UNASSOC:
77ee7c89
JB		 6154 /* accept only the listed bits */
6155 if (params->sta_flags_mask &
6156 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6157 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6158 BIT(NL80211_STA_FLAG_ASSOCIATED) |
6159 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
6160 BIT(NL80211_STA_FLAG_WME) |
6161 BIT(NL80211_STA_FLAG_MFP)))
6162 return -EINVAL;
6163
6164 /* but authenticated/associated only if driver handles it */
6165 if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
6166 params->sta_flags_mask &
6167 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6168 BIT(NL80211_STA_FLAG_ASSOCIATED)))
6169 return -EINVAL;
6170 break;
6171 case CFG80211_STA_IBSS:
6172 case CFG80211_STA_AP_STA:
6173 /* reject any changes other than AUTHORIZED */
6174 if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
6175 return -EINVAL;
6176 break;
6177 case CFG80211_STA_TDLS_PEER_SETUP:
6178 /* reject any changes other than AUTHORIZED or WME */
6179 if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6180 BIT(NL80211_STA_FLAG_WME)))
6181 return -EINVAL;
6182 /* force (at least) rates when authorizing */
6183 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
6184 !params->supported_rates)
6185 return -EINVAL;
6186 break;
6187 case CFG80211_STA_TDLS_PEER_ACTIVE:
6188 /* reject any changes */
6189 return -EINVAL;
eef941e6 6190 case CFG80211_STA_MESH_PEER_KERNEL:
77ee7c89
JB		 6191 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6192 return -EINVAL;
6193 break;
eef941e6 6194 case CFG80211_STA_MESH_PEER_USER:
42925040
CYY		 6195 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION &&
6196 params->plink_action != NL80211_PLINK_ACTION_BLOCK)
77ee7c89
JB		 6197 return -EINVAL;
6198 break;
6199 }
6200
06f7c88c
BL		 6201 /*
6202 * Older kernel versions ignored this attribute entirely, so don't
6203 * reject attempts to update it but mark it as unused instead so the
6204 * driver won't look at the data.
6205 */
6206 if (statype != CFG80211_STA_AP_CLIENT_UNASSOC &&
6207 statype != CFG80211_STA_TDLS_PEER_SETUP)
6208 params->opmode_notif_used = false;
6209
77ee7c89
JB		 6210 return 0;
6211}
6212EXPORT_SYMBOL(cfg80211_check_station_change);
6213
5727ef1b 6214/*
c258d2de 6215 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 6216 */
80b99899
JB		 6217static struct net_device *get_vlan(struct genl_info *info,
6218 struct cfg80211_registered_device *rdev)
5727ef1b 6219{
463d0183 6220 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 6221 struct net_device *v;
6222 int ret;
6223
6224 if (!vlanattr)
6225 return NULL;
6226
6227 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
6228 if (!v)
6229 return ERR_PTR(-ENODEV);
6230
6231 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
6232 ret = -EINVAL;
6233 goto error;
5727ef1b 6234 }
80b99899 6235
77ee7c89
JB		 6236 if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
6237 v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
6238 v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
6239 ret = -EINVAL;
6240 goto error;
6241 }
6242
80b99899
JB		 6243 if (!netif_running(v)) {
6244 ret = -ENETDOWN;
6245 goto error;
6246 }
6247
6248 return v;
6249 error:
6250 dev_put(v);
6251 return ERR_PTR(ret);
5727ef1b
JB		 6252}
6253
94e860f1
JB		 6254static const struct nla_policy
6255nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] = {
df881293
JM		 6256 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
6257 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
6258};
6259
ff276691
JB		 6260static int nl80211_parse_sta_wme(struct genl_info *info,
6261 struct station_parameters *params)
df881293 6262{
df881293
JM		 6263 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
6264 struct nlattr *nla;
6265 int err;
6266
df881293
JM		 6267 /* parse WME attributes if present */
6268 if (!info->attrs[NL80211_ATTR_STA_WME])
6269 return 0;
6270
6271 nla = info->attrs[NL80211_ATTR_STA_WME];
8cb08174
JB		 6272 err = nla_parse_nested_deprecated(tb, NL80211_STA_WME_MAX, nla,
6273 nl80211_sta_wme_policy,
6274 info->extack);
df881293
JM		 6275 if (err)
6276 return err;
6277
6278 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
6279 params->uapsd_queues = nla_get_u8(
6280 tb[NL80211_STA_WME_UAPSD_QUEUES]);
6281 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
6282 return -EINVAL;
6283
6284 if (tb[NL80211_STA_WME_MAX_SP])
6285 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
6286
6287 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
6288 return -EINVAL;
6289
6290 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
6291
6292 return 0;
6293}
6294
c01fc9ad
SD		 6295static int nl80211_parse_sta_channel_info(struct genl_info *info,
6296 struct station_parameters *params)
6297{
6298 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]) {
6299 params->supported_channels =
6300 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6301 params->supported_channels_len =
6302 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6303 /*
6304 * Need to include at least one (first channel, number of
cb9abd48
JB		 6305 * channels) tuple for each subband (checked in policy),
6306 * and must have proper tuples for the rest of the data as well.
c01fc9ad 6307 */
c01fc9ad
SD		 6308 if (params->supported_channels_len % 2)
6309 return -EINVAL;
6310 }
6311
6312 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]) {
6313 params->supported_oper_classes =
6314 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
6315 params->supported_oper_classes_len =
6316 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
c01fc9ad
SD		 6317 }
6318 return 0;
6319}
6320
ff276691
JB		 6321static int nl80211_set_station_tdls(struct genl_info *info,
6322 struct station_parameters *params)
6323{
c01fc9ad 6324 int err;
ff276691 6325 /* Dummy STA entry gets updated once the peer capabilities are known */
5e4b6f56
JM		 6326 if (info->attrs[NL80211_ATTR_PEER_AID])
6327 params->aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
ff276691
JB		 6328 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
6329 params->ht_capa =
6330 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
6331 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
6332 params->vht_capa =
6333 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
c4cbaf79
LC		 6334 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
6335 params->he_capa =
6336 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6337 params->he_capa_len =
6338 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
c4cbaf79 6339 }
ff276691 6340
c01fc9ad
SD		 6341 err = nl80211_parse_sta_channel_info(info, params);
6342 if (err)
6343 return err;
6344
ff276691
JB		 6345 return nl80211_parse_sta_wme(info, params);
6346}
6347
e96d1cd2
ARN		 6348static int nl80211_parse_sta_txpower_setting(struct genl_info *info,
6349 struct station_parameters *params)
6350{
6351 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6352 int idx;
6353
6354 if (info->attrs[NL80211_ATTR_STA_TX_POWER_SETTING]) {
6355 if (!rdev->ops->set_tx_power ||
6356 !wiphy_ext_feature_isset(&rdev->wiphy,
6357 NL80211_EXT_FEATURE_STA_TX_PWR))
6358 return -EOPNOTSUPP;
6359
6360 idx = NL80211_ATTR_STA_TX_POWER_SETTING;
6361 params->txpwr.type = nla_get_u8(info->attrs[idx]);
6362
6363 if (params->txpwr.type == NL80211_TX_POWER_LIMITED) {
6364 idx = NL80211_ATTR_STA_TX_POWER;
6365
6366 if (info->attrs[idx])
6367 params->txpwr.power =
6368 nla_get_s16(info->attrs[idx]);
6369 else
6370 return -EINVAL;
6371 }
6372 params->sta_modify_mask |= STATION_PARAM_APPLY_STA_TXPOWER;
6373 }
6374
6375 return 0;
6376}
6377
5727ef1b
JB		 6378static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
6379{
4c476991 6380 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 6381 struct net_device *dev = info->user_ptr[1];
5727ef1b 6382 struct station_parameters params;
77ee7c89
JB		 6383 u8 *mac_addr;
6384 int err;
5727ef1b
JB		 6385
6386 memset(&params, 0, sizeof(params));
6387
77ee7c89
JB		 6388 if (!rdev->ops->change_station)
6389 return -EOPNOTSUPP;
6390
e4208427
AB		 6391 /*
6392 * AID and listen_interval properties can be set only for unassociated
6393 * station. Include these parameters here and will check them in
6394 * cfg80211_check_station_change().
6395 */
a9bc31e4
AB		 6396 if (info->attrs[NL80211_ATTR_STA_AID])
6397 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
e4208427 6398
14f34e36
GG		 6399 if (info->attrs[NL80211_ATTR_VLAN_ID])
6400 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6401
e4208427
AB		 6402 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6403 params.listen_interval =
6404 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
6405 else
6406 params.listen_interval = -1;
5727ef1b 6407
ab0d76f6
JB		 6408 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS])
6409 params.support_p2p_ps =
6410 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
6411 else
17b94247 6412 params.support_p2p_ps = -1;
17b94247 6413
5727ef1b
JB		 6414 if (!info->attrs[NL80211_ATTR_MAC])
6415 return -EINVAL;
6416
6417 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6418
6419 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
6420 params.supported_rates =
6421 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6422 params.supported_rates_len =
6423 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6424 }
6425
9d62a986
JM		 6426 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
6427 params.capability =
6428 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
6429 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
6430 }
6431
6432 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
6433 params.ext_capab =
6434 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6435 params.ext_capab_len =
6436 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6437 }
6438
bdd3ae3d 6439 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 6440 return -EINVAL;
6441
ab0d76f6 6442 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2ec600d6 6443 params.plink_action =
f8bacc21 6444 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2ec600d6 6445
f8bacc21 6446 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
9c3990aa 6447 params.plink_state =
f8bacc21 6448 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
ab0d76f6 6449 if (info->attrs[NL80211_ATTR_MESH_PEER_AID])
7d27a0ba
MH		 6450 params.peer_aid = nla_get_u16(
6451 info->attrs[NL80211_ATTR_MESH_PEER_AID]);
f8bacc21
JB		 6452 params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
6453 }
9c3990aa 6454
ab0d76f6
JB		 6455 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE])
6456 params.local_pm = nla_get_u32(
3b1c5a53
MP		 6457 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
6458
06f7c88c
BL		 6459 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
6460 params.opmode_notif_used = true;
6461 params.opmode_notif =
6462 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6463 }
6464
43e64bf3
RM		 6465 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
6466 params.he_6ghz_capa =
fce2ff72 6467 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
43e64bf3 6468
36647055
THJ		 6469 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6470 params.airtime_weight =
6471 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6472
6473 if (params.airtime_weight &&
6474 !wiphy_ext_feature_isset(&rdev->wiphy,
6475 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6476 return -EOPNOTSUPP;
6477
e96d1cd2
ARN		 6478 err = nl80211_parse_sta_txpower_setting(info, &params);
6479 if (err)
6480 return err;
6481
77ee7c89
JB		 6482 /* Include parameters for TDLS peer (will check later) */
6483 err = nl80211_set_station_tdls(info, &params);
6484 if (err)
6485 return err;
6486
6487 params.vlan = get_vlan(info, rdev);
6488 if (IS_ERR(params.vlan))
6489 return PTR_ERR(params.vlan);
6490
a97f4424
JB		 6491 switch (dev->ieee80211_ptr->iftype) {
6492 case NL80211_IFTYPE_AP:
6493 case NL80211_IFTYPE_AP_VLAN:
074ac8df 6494 case NL80211_IFTYPE_P2P_GO:
074ac8df 6495 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 6496 case NL80211_IFTYPE_STATION:
267335d6 6497 case NL80211_IFTYPE_ADHOC:
a97f4424 6498 case NL80211_IFTYPE_MESH_POINT:
a97f4424
JB		 6499 break;
6500 default:
77ee7c89
JB		 6501 err = -EOPNOTSUPP;
6502 goto out_put_vlan;
034d655e
JB		 6503 }
6504
77ee7c89 6505 /* driver will call cfg80211_check_station_change() */
e35e4d28 6506 err = rdev_change_station(rdev, dev, mac_addr, &params);
5727ef1b 6507
77ee7c89 6508 out_put_vlan:
5727ef1b
JB		 6509 if (params.vlan)
6510 dev_put(params.vlan);
3b85875a 6511
5727ef1b
JB		 6512 return err;
6513}
6514
6515static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
6516{
4c476991 6517 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 6518 int err;
4c476991 6519 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 6520 struct station_parameters params;
6521 u8 *mac_addr = NULL;
bda95eb1
JB		 6522 u32 auth_assoc = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6523 BIT(NL80211_STA_FLAG_ASSOCIATED);
5727ef1b
JB		 6524
6525 memset(&params, 0, sizeof(params));
6526
984c311b
JB		 6527 if (!rdev->ops->add_station)
6528 return -EOPNOTSUPP;
6529
5727ef1b
JB		 6530 if (!info->attrs[NL80211_ATTR_MAC])
6531 return -EINVAL;
6532
5727ef1b
JB		 6533 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6534 return -EINVAL;
6535
6536 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
6537 return -EINVAL;
6538
5e4b6f56
JM		 6539 if (!info->attrs[NL80211_ATTR_STA_AID] &&
6540 !info->attrs[NL80211_ATTR_PEER_AID])
0e956c13
TLSC		 6541 return -EINVAL;
6542
5727ef1b
JB		 6543 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6544 params.supported_rates =
6545 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6546 params.supported_rates_len =
6547 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6548 params.listen_interval =
6549 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 6550
14f34e36
GG		 6551 if (info->attrs[NL80211_ATTR_VLAN_ID])
6552 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6553
17b94247 6554 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]) {
ab0d76f6
JB		 6555 params.support_p2p_ps =
6556 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
17b94247
AB		 6557 } else {
6558 /*
6559 * if not specified, assume it's supported for P2P GO interface,
6560 * and is NOT supported for AP interface
6561 */
6562 params.support_p2p_ps =
6563 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO;
6564 }
6565
3d124ea2 6566 if (info->attrs[NL80211_ATTR_PEER_AID])
5e4b6f56 6567 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
3d124ea2
JM		 6568 else
6569 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
51b50fbe 6570
9d62a986
JM		 6571 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
6572 params.capability =
6573 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
6574 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
6575 }
6576
6577 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
6578 params.ext_capab =
6579 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6580 params.ext_capab_len =
6581 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6582 }
6583
36aedc90
JM		 6584 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
6585 params.ht_capa =
6586 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 6587
f461be3e
MP		 6588 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
6589 params.vht_capa =
6590 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
6591
c4cbaf79
LC		 6592 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
6593 params.he_capa =
6594 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6595 params.he_capa_len =
6596 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
c4cbaf79
LC		 6597 }
6598
43e64bf3
RM		 6599 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
6600 params.he_6ghz_capa =
6601 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
6602
60f4a7b1
MK		 6603 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
6604 params.opmode_notif_used = true;
6605 params.opmode_notif =
6606 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6607 }
6608
ab0d76f6 6609 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
96b78dff 6610 params.plink_action =
f8bacc21 6611 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
96b78dff 6612
36647055
THJ		 6613 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6614 params.airtime_weight =
6615 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6616
6617 if (params.airtime_weight &&
6618 !wiphy_ext_feature_isset(&rdev->wiphy,
6619 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6620 return -EOPNOTSUPP;
6621
e96d1cd2
ARN		 6622 err = nl80211_parse_sta_txpower_setting(info, &params);
6623 if (err)
6624 return err;
6625
c01fc9ad
SD		 6626 err = nl80211_parse_sta_channel_info(info, &params);
6627 if (err)
6628 return err;
6629
ff276691
JB		 6630 err = nl80211_parse_sta_wme(info, &params);
6631 if (err)
6632 return err;
bdd90d5e 6633
bdd3ae3d 6634 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 6635 return -EINVAL;
6636
496fcc29
JB		 6637 /* HT/VHT requires QoS, but if we don't have that just ignore HT/VHT
6638 * as userspace might just pass through the capabilities from the IEs
6639 * directly, rather than enforcing this restriction and returning an
6640 * error in this case.
6641 */
6642 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME))) {
6643 params.ht_capa = NULL;
6644 params.vht_capa = NULL;
c4cbaf79
LC		 6645
6646 /* HE requires WME */
43e64bf3 6647 if (params.he_capa_len || params.he_6ghz_capa)
c4cbaf79 6648 return -EINVAL;
496fcc29
JB		 6649 }
6650
43e64bf3
RM		 6651 /* Ensure that HT/VHT capabilities are not set for 6 GHz HE STA */
6652 if (params.he_6ghz_capa && (params.ht_capa || params.vht_capa))
6653 return -EINVAL;
6654
77ee7c89
JB		 6655 /* When you run into this, adjust the code below for the new flag */
6656 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
6657
bdd90d5e
JB		 6658 switch (dev->ieee80211_ptr->iftype) {
6659 case NL80211_IFTYPE_AP:
6660 case NL80211_IFTYPE_AP_VLAN:
6661 case NL80211_IFTYPE_P2P_GO:
984c311b
JB		 6662 /* ignore WME attributes if iface/sta is not capable */
6663 if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
6664 !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
6665 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
c75786c9 6666
bdd90d5e 6667 /* TDLS peers cannot be added */
3d124ea2
JM		 6668 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
6669 info->attrs[NL80211_ATTR_PEER_AID])
4319e193 6670 return -EINVAL;
bdd90d5e
JB		 6671 /* but don't bother the driver with it */
6672 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 6673
d582cffb
JB		 6674 /* allow authenticated/associated only if driver handles it */
6675 if (!(rdev->wiphy.features &
6676 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
bda95eb1 6677 params.sta_flags_mask & auth_assoc)
d582cffb
JB		 6678 return -EINVAL;
6679
bda95eb1
JB		 6680 /* Older userspace, or userspace wanting to be compatible with
6681 * !NL80211_FEATURE_FULL_AP_CLIENT_STATE, will not set the auth
6682 * and assoc flags in the mask, but assumes the station will be
6683 * added as associated anyway since this was the required driver
6684 * behaviour before NL80211_FEATURE_FULL_AP_CLIENT_STATE was
6685 * introduced.
6686 * In order to not bother drivers with this quirk in the API
6687 * set the flags in both the mask and set for new stations in
6688 * this case.
6689 */
6690 if (!(params.sta_flags_mask & auth_assoc)) {
6691 params.sta_flags_mask |= auth_assoc;
6692 params.sta_flags_set |= auth_assoc;
6693 }
6694
bdd90d5e
JB		 6695 /* must be last in here for error handling */
6696 params.vlan = get_vlan(info, rdev);
6697 if (IS_ERR(params.vlan))
6698 return PTR_ERR(params.vlan);
6699 break;
6700 case NL80211_IFTYPE_MESH_POINT:
984c311b
JB		 6701 /* ignore uAPSD data */
6702 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
6703
d582cffb
JB		 6704 /* associated is disallowed */
6705 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
6706 return -EINVAL;
bdd90d5e 6707 /* TDLS peers cannot be added */
3d124ea2
JM		 6708 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
6709 info->attrs[NL80211_ATTR_PEER_AID])
bdd90d5e
JB		 6710 return -EINVAL;
6711 break;
6712 case NL80211_IFTYPE_STATION:
93d08f0b 6713 case NL80211_IFTYPE_P2P_CLIENT:
984c311b
JB		 6714 /* ignore uAPSD data */
6715 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
6716
77ee7c89
JB		 6717 /* these are disallowed */
6718 if (params.sta_flags_mask &
6719 (BIT(NL80211_STA_FLAG_ASSOCIATED) |
6720 BIT(NL80211_STA_FLAG_AUTHENTICATED)))
d582cffb 6721 return -EINVAL;
bdd90d5e
JB		 6722 /* Only TDLS peers can be added */
6723 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6724 return -EINVAL;
6725 /* Can only add if TDLS ... */
6726 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
6727 return -EOPNOTSUPP;
6728 /* ... with external setup is supported */
6729 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
6730 return -EOPNOTSUPP;
77ee7c89
JB		 6731 /*
6732 * Older wpa_supplicant versions always mark the TDLS peer
6733 * as authorized, but it shouldn't yet be.
6734 */
6735 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
bdd90d5e
JB		 6736 break;
6737 default:
6738 return -EOPNOTSUPP;
c75786c9
EP		 6739 }
6740
bdd90d5e 6741 /* be aware of params.vlan when changing code here */
5727ef1b 6742
e35e4d28 6743 err = rdev_add_station(rdev, dev, mac_addr, &params);
5727ef1b 6744
5727ef1b
JB		 6745 if (params.vlan)
6746 dev_put(params.vlan);
5727ef1b
JB		 6747 return err;
6748}
6749
6750static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
6751{
4c476991
JB		 6752 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6753 struct net_device *dev = info->user_ptr[1];
89c771e5
JM		 6754 struct station_del_parameters params;
6755
6756 memset(&params, 0, sizeof(params));
5727ef1b
JB		 6757
6758 if (info->attrs[NL80211_ATTR_MAC])
89c771e5 6759 params.mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
5727ef1b 6760
306b79ea
JB		 6761 switch (dev->ieee80211_ptr->iftype) {
6762 case NL80211_IFTYPE_AP:
6763 case NL80211_IFTYPE_AP_VLAN:
6764 case NL80211_IFTYPE_MESH_POINT:
6765 case NL80211_IFTYPE_P2P_GO:
6766 /* always accept these */
6767 break;
6768 case NL80211_IFTYPE_ADHOC:
6769 /* conditionally accept */
6770 if (wiphy_ext_feature_isset(&rdev->wiphy,
6771 NL80211_EXT_FEATURE_DEL_IBSS_STA))
6772 break;
edafcf42 6773 return -EINVAL;
306b79ea 6774 default:
4c476991 6775 return -EINVAL;
306b79ea 6776 }
5727ef1b 6777
4c476991
JB		 6778 if (!rdev->ops->del_station)
6779 return -EOPNOTSUPP;
3b85875a 6780
98856866
JM		 6781 if (info->attrs[NL80211_ATTR_MGMT_SUBTYPE]) {
6782 params.subtype =
6783 nla_get_u8(info->attrs[NL80211_ATTR_MGMT_SUBTYPE]);
6784 if (params.subtype != IEEE80211_STYPE_DISASSOC >> 4 &&
6785 params.subtype != IEEE80211_STYPE_DEAUTH >> 4)
6786 return -EINVAL;
6787 } else {
6788 /* Default to Deauthentication frame */
6789 params.subtype = IEEE80211_STYPE_DEAUTH >> 4;
6790 }
6791
6792 if (info->attrs[NL80211_ATTR_REASON_CODE]) {
6793 params.reason_code =
6794 nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
6795 if (params.reason_code == 0)
6796 return -EINVAL; /* 0 is reserved */
6797 } else {
6798 /* Default to reason code 2 */
6799 params.reason_code = WLAN_REASON_PREV_AUTH_NOT_VALID;
6800 }
6801
89c771e5 6802 return rdev_del_station(rdev, dev, &params);
5727ef1b
JB		 6803}
6804
15e47304 6805static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 6806 int flags, struct net_device *dev,
6807 u8 *dst, u8 *next_hop,
6808 struct mpath_info *pinfo)
6809{
6810 void *hdr;
6811 struct nlattr *pinfoattr;
6812
1ef4c850 6813 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_MPATH);
2ec600d6
LCC		 6814 if (!hdr)
6815 return -1;
6816
9360ffd1
DM		 6817 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6818 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
6819 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
6820 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
6821 goto nla_put_failure;
f5ea9120 6822
ae0be8de 6823 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MPATH_INFO);
2ec600d6
LCC		 6824 if (!pinfoattr)
6825 goto nla_put_failure;
9360ffd1
DM		 6826 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
6827 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
6828 pinfo->frame_qlen))
6829 goto nla_put_failure;
6830 if (((pinfo->filled & MPATH_INFO_SN) &&
6831 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
6832 ((pinfo->filled & MPATH_INFO_METRIC) &&
6833 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
6834 pinfo->metric)) ||
6835 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
6836 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
6837 pinfo->exptime)) ||
6838 ((pinfo->filled & MPATH_INFO_FLAGS) &&
6839 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
6840 pinfo->flags)) ||
6841 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
6842 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
6843 pinfo->discovery_timeout)) ||
6844 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
6845 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
cc241636
JH		 6846 pinfo->discovery_retries)) ||
6847 ((pinfo->filled & MPATH_INFO_HOP_COUNT) &&
6848 nla_put_u8(msg, NL80211_MPATH_INFO_HOP_COUNT,
540bbcb9
JH		 6849 pinfo->hop_count)) ||
6850 ((pinfo->filled & MPATH_INFO_PATH_CHANGE) &&
6851 nla_put_u32(msg, NL80211_MPATH_INFO_PATH_CHANGE,
6852 pinfo->path_change_count)))
9360ffd1 6853 goto nla_put_failure;
2ec600d6
LCC		 6854
6855 nla_nest_end(msg, pinfoattr);
6856
053c095a
JB		 6857 genlmsg_end(msg, hdr);
6858 return 0;
2ec600d6
LCC		 6859
6860 nla_put_failure:
bc3ed28c
TG		 6861 genlmsg_cancel(msg, hdr);
6862 return -EMSGSIZE;
2ec600d6
LCC		 6863}
6864
6865static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 6866 struct netlink_callback *cb)
2ec600d6 6867{
2ec600d6 6868 struct mpath_info pinfo;
1b8ec87a 6869 struct cfg80211_registered_device *rdev;
97990a06 6870 struct wireless_dev *wdev;
2ec600d6
LCC		 6871 u8 dst[ETH_ALEN];
6872 u8 next_hop[ETH_ALEN];
97990a06 6873 int path_idx = cb->args[2];
2ec600d6 6874 int err;
2ec600d6 6875
5297c65c 6876 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 6877 if (err)
a05829a7
JB		 6878 return err;
6879 /* nl80211_prepare_wdev_dump acquired it in the successful case */
6880 __acquire(&rdev->wiphy.mtx);
bba95fef 6881
1b8ec87a 6882 if (!rdev->ops->dump_mpath) {
eec60b03 6883 err = -EOPNOTSUPP;
bba95fef
JB		 6884 goto out_err;
6885 }
6886
97990a06 6887 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
eec60b03 6888 err = -EOPNOTSUPP;
0448b5fc 6889 goto out_err;
eec60b03
JM		 6890 }
6891
bba95fef 6892 while (1) {
1b8ec87a 6893 err = rdev_dump_mpath(rdev, wdev->netdev, path_idx, dst,
97990a06 6894 next_hop, &pinfo);
bba95fef 6895 if (err == -ENOENT)
2ec600d6 6896 break;
bba95fef 6897 if (err)
3b85875a 6898 goto out_err;
2ec600d6 6899
15e47304 6900 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef 6901 cb->nlh->nlmsg_seq, NLM_F_MULTI,
97990a06 6902 wdev->netdev, dst, next_hop,
bba95fef
JB		 6903 &pinfo) < 0)
6904 goto out;
2ec600d6 6905
bba95fef 6906 path_idx++;
2ec600d6 6907 }
2ec600d6 6908
bba95fef 6909 out:
97990a06 6910 cb->args[2] = path_idx;
bba95fef 6911 err = skb->len;
bba95fef 6912 out_err:
a05829a7 6913 wiphy_unlock(&rdev->wiphy);
bba95fef 6914 return err;
2ec600d6
LCC		 6915}
6916
6917static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
6918{
4c476991 6919 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 6920 int err;
4c476991 6921 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6922 struct mpath_info pinfo;
6923 struct sk_buff *msg;
6924 u8 *dst = NULL;
6925 u8 next_hop[ETH_ALEN];
6926
6927 memset(&pinfo, 0, sizeof(pinfo));
6928
6929 if (!info->attrs[NL80211_ATTR_MAC])
6930 return -EINVAL;
6931
6932 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6933
4c476991
JB		 6934 if (!rdev->ops->get_mpath)
6935 return -EOPNOTSUPP;
2ec600d6 6936
4c476991
JB		 6937 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6938 return -EOPNOTSUPP;
eec60b03 6939
e35e4d28 6940 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 6941 if (err)
4c476991 6942 return err;
2ec600d6 6943
fd2120ca 6944 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 6945 if (!msg)
4c476991 6946 return -ENOMEM;
2ec600d6 6947
15e47304 6948 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 6949 dev, dst, next_hop, &pinfo) < 0) {
6950 nlmsg_free(msg);
6951 return -ENOBUFS;
6952 }
3b85875a 6953
4c476991 6954 return genlmsg_reply(msg, info);
2ec600d6
LCC		 6955}
6956
6957static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
6958{
4c476991
JB		 6959 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6960 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6961 u8 *dst = NULL;
6962 u8 *next_hop = NULL;
6963
6964 if (!info->attrs[NL80211_ATTR_MAC])
6965 return -EINVAL;
6966
6967 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
6968 return -EINVAL;
6969
6970 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6971 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
6972
4c476991
JB		 6973 if (!rdev->ops->change_mpath)
6974 return -EOPNOTSUPP;
35a8efe1 6975
4c476991
JB		 6976 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6977 return -EOPNOTSUPP;
2ec600d6 6978
e35e4d28 6979 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 6980}
4c476991 6981
2ec600d6
LCC		 6982static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
6983{
4c476991
JB		 6984 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6985 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6986 u8 *dst = NULL;
6987 u8 *next_hop = NULL;
6988
6989 if (!info->attrs[NL80211_ATTR_MAC])
6990 return -EINVAL;
6991
6992 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
6993 return -EINVAL;
6994
6995 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6996 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
6997
4c476991
JB		 6998 if (!rdev->ops->add_mpath)
6999 return -EOPNOTSUPP;
35a8efe1 7000
4c476991
JB		 7001 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7002 return -EOPNOTSUPP;
2ec600d6 7003
e35e4d28 7004 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 7005}
7006
7007static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
7008{
4c476991
JB		 7009 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7010 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7011 u8 *dst = NULL;
7012
7013 if (info->attrs[NL80211_ATTR_MAC])
7014 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7015
4c476991
JB		 7016 if (!rdev->ops->del_mpath)
7017 return -EOPNOTSUPP;
3b85875a 7018
b501426c
MP		 7019 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7020 return -EOPNOTSUPP;
7021
e35e4d28 7022 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 7023}
7024
66be7d2b
HR		 7025static int nl80211_get_mpp(struct sk_buff *skb, struct genl_info *info)
7026{
7027 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7028 int err;
7029 struct net_device *dev = info->user_ptr[1];
7030 struct mpath_info pinfo;
7031 struct sk_buff *msg;
7032 u8 *dst = NULL;
7033 u8 mpp[ETH_ALEN];
7034
7035 memset(&pinfo, 0, sizeof(pinfo));
7036
7037 if (!info->attrs[NL80211_ATTR_MAC])
7038 return -EINVAL;
7039
7040 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7041
7042 if (!rdev->ops->get_mpp)
7043 return -EOPNOTSUPP;
7044
7045 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7046 return -EOPNOTSUPP;
7047
7048 err = rdev_get_mpp(rdev, dev, dst, mpp, &pinfo);
7049 if (err)
7050 return err;
7051
7052 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7053 if (!msg)
7054 return -ENOMEM;
7055
7056 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
7057 dev, dst, mpp, &pinfo) < 0) {
7058 nlmsg_free(msg);
7059 return -ENOBUFS;
7060 }
7061
7062 return genlmsg_reply(msg, info);
7063}
7064
7065static int nl80211_dump_mpp(struct sk_buff *skb,
7066 struct netlink_callback *cb)
7067{
7068 struct mpath_info pinfo;
7069 struct cfg80211_registered_device *rdev;
7070 struct wireless_dev *wdev;
7071 u8 dst[ETH_ALEN];
7072 u8 mpp[ETH_ALEN];
7073 int path_idx = cb->args[2];
7074 int err;
7075
5297c65c 7076 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
66be7d2b 7077 if (err)
a05829a7
JB		 7078 return err;
7079 /* nl80211_prepare_wdev_dump acquired it in the successful case */
7080 __acquire(&rdev->wiphy.mtx);
66be7d2b
HR		 7081
7082 if (!rdev->ops->dump_mpp) {
7083 err = -EOPNOTSUPP;
7084 goto out_err;
7085 }
7086
7087 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
7088 err = -EOPNOTSUPP;
7089 goto out_err;
7090 }
7091
7092 while (1) {
7093 err = rdev_dump_mpp(rdev, wdev->netdev, path_idx, dst,
7094 mpp, &pinfo);
7095 if (err == -ENOENT)
7096 break;
7097 if (err)
7098 goto out_err;
7099
7100 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
7101 cb->nlh->nlmsg_seq, NLM_F_MULTI,
7102 wdev->netdev, dst, mpp,
7103 &pinfo) < 0)
7104 goto out;
7105
7106 path_idx++;
7107 }
7108
7109 out:
7110 cb->args[2] = path_idx;
7111 err = skb->len;
7112 out_err:
a05829a7 7113 wiphy_unlock(&rdev->wiphy);
66be7d2b
HR		 7114 return err;
7115}
7116
9f1ba906
JM		 7117static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
7118{
4c476991
JB		 7119 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7120 struct net_device *dev = info->user_ptr[1];
c56589ed 7121 struct wireless_dev *wdev = dev->ieee80211_ptr;
9f1ba906 7122 struct bss_parameters params;
c56589ed 7123 int err;
9f1ba906
JM		 7124
7125 memset(&params, 0, sizeof(params));
7126 /* default to not changing parameters */
7127 params.use_cts_prot = -1;
7128 params.use_short_preamble = -1;
7129 params.use_short_slot_time = -1;
fd8aaaf3 7130 params.ap_isolate = -1;
50b12f59 7131 params.ht_opmode = -1;
53cabad7
JB		 7132 params.p2p_ctwindow = -1;
7133 params.p2p_opp_ps = -1;
9f1ba906
JM		 7134
7135 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
7136 params.use_cts_prot =
7137 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
7138 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
7139 params.use_short_preamble =
7140 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
7141 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
7142 params.use_short_slot_time =
7143 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 7144 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
7145 params.basic_rates =
7146 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7147 params.basic_rates_len =
7148 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7149 }
fd8aaaf3
FF		 7150 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
7151 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 7152 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
7153 params.ht_opmode =
7154 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 7155
53cabad7
JB		 7156 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
7157 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7158 return -EINVAL;
7159 params.p2p_ctwindow =
ab0d76f6 7160 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 7161 if (params.p2p_ctwindow != 0 &&
7162 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
7163 return -EINVAL;
7164 }
7165
7166 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
7167 u8 tmp;
7168
7169 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7170 return -EINVAL;
7171 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 7172 params.p2p_opp_ps = tmp;
7173 if (params.p2p_opp_ps &&
7174 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
7175 return -EINVAL;
7176 }
7177
4c476991
JB		 7178 if (!rdev->ops->change_bss)
7179 return -EOPNOTSUPP;
9f1ba906 7180
074ac8df 7181 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 7182 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7183 return -EOPNOTSUPP;
3b85875a 7184
c56589ed
SW		 7185 wdev_lock(wdev);
7186 err = rdev_change_bss(rdev, dev, &params);
7187 wdev_unlock(wdev);
7188
7189 return err;
9f1ba906
JM		 7190}
7191
b2e1b302
LR		 7192static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
7193{
b2e1b302 7194 char *data = NULL;
05050753 7195 bool is_indoor;
57b5ce07 7196 enum nl80211_user_reg_hint_type user_reg_hint_type;
05050753
I		 7197 u32 owner_nlportid;
7198
80778f18
LR		 7199 /*
7200 * You should only get this when cfg80211 hasn't yet initialized
7201 * completely when built-in to the kernel right between the time
7202 * window between nl80211_init() and regulatory_init(), if that is
7203 * even possible.
7204 */
458f4f9e 7205 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
fe33eb39 7206 return -EINPROGRESS;
80778f18 7207
57b5ce07
LR		 7208 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
7209 user_reg_hint_type =
7210 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
7211 else
7212 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
7213
7214 switch (user_reg_hint_type) {
7215 case NL80211_USER_REG_HINT_USER:
7216 case NL80211_USER_REG_HINT_CELL_BASE:
52616f2b
IP		 7217 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7218 return -EINVAL;
7219
7220 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7221 return regulatory_hint_user(data, user_reg_hint_type);
7222 case NL80211_USER_REG_HINT_INDOOR:
05050753
I		 7223 if (info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
7224 owner_nlportid = info->snd_portid;
7225 is_indoor = !!info->attrs[NL80211_ATTR_REG_INDOOR];
7226 } else {
7227 owner_nlportid = 0;
7228 is_indoor = true;
7229 }
7230
7231 return regulatory_hint_indoor(is_indoor, owner_nlportid);
57b5ce07
LR		 7232 default:
7233 return -EINVAL;
7234 }
b2e1b302
LR		 7235}
7236
1ea4ff3e
JB		 7237static int nl80211_reload_regdb(struct sk_buff *skb, struct genl_info *info)
7238{
7239 return reg_reload_regdb();
7240}
7241
24bdd9f4 7242static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 7243 struct genl_info *info)
93da9cc1 7244{
4c476991 7245 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 7246 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 7247 struct wireless_dev *wdev = dev->ieee80211_ptr;
7248 struct mesh_config cur_params;
7249 int err = 0;
93da9cc1 7250 void *hdr;
7251 struct nlattr *pinfoattr;
7252 struct sk_buff *msg;
7253
29cbe68c
JB		 7254 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7255 return -EOPNOTSUPP;
7256
24bdd9f4 7257 if (!rdev->ops->get_mesh_config)
4c476991 7258 return -EOPNOTSUPP;
f3f92586 7259
29cbe68c
JB		 7260 wdev_lock(wdev);
7261 /* If not connected, get default parameters */
7262 if (!wdev->mesh_id_len)
7263 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
7264 else
e35e4d28 7265 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 7266 wdev_unlock(wdev);
7267
93da9cc1 7268 if (err)
4c476991 7269 return err;
93da9cc1 7270
7271 /* Draw up a netlink message to send back */
fd2120ca 7272 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 7273 if (!msg)
7274 return -ENOMEM;
15e47304 7275 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 7276 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 7277 if (!hdr)
efe1cf0c 7278 goto out;
ae0be8de 7279 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 7280 if (!pinfoattr)
7281 goto nla_put_failure;
9360ffd1
DM		 7282 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7283 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
7284 cur_params.dot11MeshRetryTimeout) ||
7285 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
7286 cur_params.dot11MeshConfirmTimeout) ||
7287 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
7288 cur_params.dot11MeshHoldingTimeout) ||
7289 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
7290 cur_params.dot11MeshMaxPeerLinks) ||
7291 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
7292 cur_params.dot11MeshMaxRetries) ||
7293 nla_put_u8(msg, NL80211_MESHCONF_TTL,
7294 cur_params.dot11MeshTTL) ||
7295 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
7296 cur_params.element_ttl) ||
7297 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
7298 cur_params.auto_open_plinks) ||
7eab0f64
JL		 7299 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
7300 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 7301 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
7302 cur_params.dot11MeshHWMPmaxPREQretries) ||
7303 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
7304 cur_params.path_refresh_time) ||
7305 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
7306 cur_params.min_discovery_timeout) ||
7307 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
7308 cur_params.dot11MeshHWMPactivePathTimeout) ||
7309 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
7310 cur_params.dot11MeshHWMPpreqMinInterval) ||
7311 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
7312 cur_params.dot11MeshHWMPperrMinInterval) ||
7313 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
7314 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
7315 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
7316 cur_params.dot11MeshHWMPRootMode) ||
7317 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7318 cur_params.dot11MeshHWMPRannInterval) ||
7319 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
7320 cur_params.dot11MeshGateAnnouncementProtocol) ||
7321 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
7322 cur_params.dot11MeshForwarding) ||
335d5349 7323 nla_put_s32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 7324 cur_params.rssi_threshold) ||
7325 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 7326 cur_params.ht_opmode) ||
7327 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7328 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
7329 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 7330 cur_params.dot11MeshHWMProotInterval) ||
7331 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3b1c5a53
MP		 7332 cur_params.dot11MeshHWMPconfirmationInterval) ||
7333 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
7334 cur_params.power_mode) ||
7335 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
8e7c0538
CT		 7336 cur_params.dot11MeshAwakeWindowDuration) ||
7337 nla_put_u32(msg, NL80211_MESHCONF_PLINK_TIMEOUT,
01d66fbd
BC		 7338 cur_params.plink_timeout) ||
7339 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_GATE,
e3718a61
LL		 7340 cur_params.dot11MeshConnectedToMeshGate) ||
7341 nla_put_u8(msg, NL80211_MESHCONF_NOLEARN,
184eebe6
MT		 7342 cur_params.dot11MeshNolearn) ||
7343 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_AS,
7344 cur_params.dot11MeshConnectedToAuthServer))
9360ffd1 7345 goto nla_put_failure;
93da9cc1 7346 nla_nest_end(msg, pinfoattr);
7347 genlmsg_end(msg, hdr);
4c476991 7348 return genlmsg_reply(msg, info);
93da9cc1 7349
3b85875a 7350 nla_put_failure:
efe1cf0c 7351 out:
d080e275 7352 nlmsg_free(msg);
4c476991 7353 return -ENOBUFS;
93da9cc1 7354}
7355
ab0d76f6
JB		 7356static const struct nla_policy
7357nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
7358 [NL80211_MESHCONF_RETRY_TIMEOUT] =
7359 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7360 [NL80211_MESHCONF_CONFIRM_TIMEOUT] =
7361 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7362 [NL80211_MESHCONF_HOLDING_TIMEOUT] =
7363 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7364 [NL80211_MESHCONF_MAX_PEER_LINKS] =
7365 NLA_POLICY_RANGE(NLA_U16, 0, 255),
7366 [NL80211_MESHCONF_MAX_RETRIES] = NLA_POLICY_MAX(NLA_U8, 16),
7367 [NL80211_MESHCONF_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
7368 [NL80211_MESHCONF_ELEMENT_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
7369 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = NLA_POLICY_MAX(NLA_U8, 1),
7370 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] =
7371 NLA_POLICY_RANGE(NLA_U32, 1, 255),
93da9cc1 7372 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
7373 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
ab0d76f6 7374 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = NLA_POLICY_MIN(NLA_U16, 1),
93da9cc1 7375 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 7376 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] =
7377 NLA_POLICY_MIN(NLA_U16, 1),
7378 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] =
7379 NLA_POLICY_MIN(NLA_U16, 1),
7380 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] =
7381 NLA_POLICY_MIN(NLA_U16, 1),
7382 [NL80211_MESHCONF_HWMP_ROOTMODE] = NLA_POLICY_MAX(NLA_U8, 4),
7383 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] =
7384 NLA_POLICY_MIN(NLA_U16, 1),
7385 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = NLA_POLICY_MAX(NLA_U8, 1),
7386 [NL80211_MESHCONF_FORWARDING] = NLA_POLICY_MAX(NLA_U8, 1),
7387 [NL80211_MESHCONF_RSSI_THRESHOLD] =
7388 NLA_POLICY_RANGE(NLA_S32, -255, 0),
a4f606ea 7389 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6 7390 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 7391 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] =
7392 NLA_POLICY_MIN(NLA_U16, 1),
7393 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] =
7394 NLA_POLICY_MIN(NLA_U16, 1),
7395 [NL80211_MESHCONF_POWER_MODE] =
7396 NLA_POLICY_RANGE(NLA_U32,
7397 NL80211_MESH_POWER_ACTIVE,
7398 NL80211_MESH_POWER_MAX),
3b1c5a53 7399 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
8e7c0538 7400 [NL80211_MESHCONF_PLINK_TIMEOUT] = { .type = NLA_U32 },
01d66fbd 7401 [NL80211_MESHCONF_CONNECTED_TO_GATE] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
e3718a61 7402 [NL80211_MESHCONF_NOLEARN] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
184eebe6 7403 [NL80211_MESHCONF_CONNECTED_TO_AS] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
93da9cc1 7404};
7405
c80d545d
JC		 7406static const struct nla_policy
7407 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 7408 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 7409 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
7410 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 7411 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
6e16d90b 7412 [NL80211_MESH_SETUP_AUTH_PROTOCOL] = { .type = NLA_U8 },
bb2798d4 7413 [NL80211_MESH_SETUP_USERSPACE_MPM] = { .type = NLA_FLAG },
3d7af878
JB		 7414 [NL80211_MESH_SETUP_IE] =
7415 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
7416 IEEE80211_MAX_DATA_LEN),
b130e5ce 7417 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 7418};
7419
24bdd9f4 7420static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 7421 struct mesh_config *cfg,
7422 u32 *mask_out)
93da9cc1 7423{
93da9cc1 7424 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 7425 u32 mask = 0;
9757235f 7426 u16 ht_opmode;
93da9cc1 7427
ab0d76f6
JB		 7428#define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, mask, attr, fn) \
7429do { \
7430 if (tb[attr]) { \
7431 cfg->param = fn(tb[attr]); \
7432 mask |= BIT((attr) - 1); \
7433 } \
ea54fba2 7434} while (0)
bd90fdcc 7435
24bdd9f4 7436 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 7437 return -EINVAL;
8cb08174 7438 if (nla_parse_nested_deprecated(tb, NL80211_MESHCONF_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_CONFIG], nl80211_meshconf_params_policy, info->extack))
93da9cc1 7439 return -EINVAL;
7440
93da9cc1 7441 /* This makes sure that there aren't more than 32 mesh config
7442 * parameters (otherwise our bitfield scheme would not work.) */
7443 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
7444
7445 /* Fill in the params struct */
ab0d76f6
JB		 7446 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, mask,
7447 NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
7448 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, mask,
7449 NL80211_MESHCONF_CONFIRM_TIMEOUT,
7450 nla_get_u16);
7451 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, mask,
7452 NL80211_MESHCONF_HOLDING_TIMEOUT,
7453 nla_get_u16);
7454 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, mask,
7455 NL80211_MESHCONF_MAX_PEER_LINKS,
7456 nla_get_u16);
7457 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, mask,
7458 NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
7459 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, mask,
7460 NL80211_MESHCONF_TTL, nla_get_u8);
7461 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, mask,
7462 NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
7463 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, mask,
7464 NL80211_MESHCONF_AUTO_OPEN_PLINKS,
7465 nla_get_u8);
ea54fba2 7466 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
ab0d76f6 7467 mask,
a4f606ea 7468 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
ab0d76f6
JB		 7469 nla_get_u32);
7470 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, mask,
7471 NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
7472 nla_get_u8);
7473 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, mask,
7474 NL80211_MESHCONF_PATH_REFRESH_TIME,
7475 nla_get_u32);
7476 if (mask & BIT(NL80211_MESHCONF_PATH_REFRESH_TIME) &&
7477 (cfg->path_refresh_time < 1 || cfg->path_refresh_time > 65535))
7478 return -EINVAL;
7479 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, mask,
7480 NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
7481 nla_get_u16);
ea54fba2 7482 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
ab0d76f6 7483 mask,
a4f606ea 7484 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
ab0d76f6
JB		 7485 nla_get_u32);
7486 if (mask & BIT(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT) &&
7487 (cfg->dot11MeshHWMPactivePathTimeout < 1 ||
7488 cfg->dot11MeshHWMPactivePathTimeout > 65535))
7489 return -EINVAL;
7490 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval, mask,
ea54fba2 7491 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
ab0d76f6
JB		 7492 nla_get_u16);
7493 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval, mask,
ea54fba2 7494 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
ab0d76f6 7495 nla_get_u16);
93da9cc1 7496 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6 7497 dot11MeshHWMPnetDiameterTraversalTime, mask,
a4f606ea 7498 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
ab0d76f6
JB		 7499 nla_get_u16);
7500 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
7501 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
7502 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
7503 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7504 nla_get_u16);
7505 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshGateAnnouncementProtocol,
ea54fba2 7506 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
ab0d76f6
JB		 7507 nla_get_u8);
7508 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, mask,
7509 NL80211_MESHCONF_FORWARDING, nla_get_u8);
7510 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, mask,
7511 NL80211_MESHCONF_RSSI_THRESHOLD,
7512 nla_get_s32);
01d66fbd
BC		 7513 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToMeshGate, mask,
7514 NL80211_MESHCONF_CONNECTED_TO_GATE,
7515 nla_get_u8);
184eebe6
MT		 7516 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToAuthServer, mask,
7517 NL80211_MESHCONF_CONNECTED_TO_AS,
7518 nla_get_u8);
9757235f
MH		 7519 /*
7520 * Check HT operation mode based on
188f60ab 7521 * IEEE 802.11-2016 9.4.2.57 HT Operation element.
9757235f
MH		 7522 */
7523 if (tb[NL80211_MESHCONF_HT_OPMODE]) {
7524 ht_opmode = nla_get_u16(tb[NL80211_MESHCONF_HT_OPMODE]);
7525
7526 if (ht_opmode & ~(IEEE80211_HT_OP_MODE_PROTECTION |
7527 IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT |
7528 IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT))
7529 return -EINVAL;
7530
188f60ab
BC		 7531 /* NON_HT_STA bit is reserved, but some programs set it */
7532 ht_opmode &= ~IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
9757235f 7533
9757235f 7534 cfg->ht_opmode = ht_opmode;
fd551bac 7535 mask |= (1 << (NL80211_MESHCONF_HT_OPMODE - 1));
9757235f 7536 }
728b19e5 7537 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6
JB		 7538 dot11MeshHWMPactivePathToRootTimeout, mask,
7539 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7540 nla_get_u32);
7541 if (mask & BIT(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT) &&
7542 (cfg->dot11MeshHWMPactivePathToRootTimeout < 1 ||
7543 cfg->dot11MeshHWMPactivePathToRootTimeout > 65535))
7544 return -EINVAL;
7545 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, mask,
7546 NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
7547 nla_get_u16);
7548 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPconfirmationInterval,
7549 mask,
728b19e5 7550 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
ab0d76f6
JB		 7551 nla_get_u16);
7552 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode, mask,
7553 NL80211_MESHCONF_POWER_MODE, nla_get_u32);
7554 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration, mask,
7555 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
7556 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, plink_timeout, mask,
7557 NL80211_MESHCONF_PLINK_TIMEOUT, nla_get_u32);
e3718a61
LL		 7558 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNolearn, mask,
7559 NL80211_MESHCONF_NOLEARN, nla_get_u8);
bd90fdcc
JB		 7560 if (mask_out)
7561 *mask_out = mask;
c80d545d 7562
bd90fdcc
JB		 7563 return 0;
7564
7565#undef FILL_IN_MESH_PARAM_IF_SET
7566}
7567
c80d545d
JC		 7568static int nl80211_parse_mesh_setup(struct genl_info *info,
7569 struct mesh_setup *setup)
7570{
bb2798d4 7571 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c80d545d
JC		 7572 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
7573
7574 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
7575 return -EINVAL;
8cb08174 7576 if (nla_parse_nested_deprecated(tb, NL80211_MESH_SETUP_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_SETUP], nl80211_mesh_setup_params_policy, info->extack))
c80d545d
JC		 7577 return -EINVAL;
7578
d299a1f2
JC		 7579 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
7580 setup->sync_method =
7581 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
7582 IEEE80211_SYNC_METHOD_VENDOR :
7583 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
7584
c80d545d
JC		 7585 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
7586 setup->path_sel_proto =
7587 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
7588 IEEE80211_PATH_PROTOCOL_VENDOR :
7589 IEEE80211_PATH_PROTOCOL_HWMP;
7590
7591 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
7592 setup->path_metric =
7593 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
7594 IEEE80211_PATH_METRIC_VENDOR :
7595 IEEE80211_PATH_METRIC_AIRTIME;
7596
581a8b0f 7597 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 7598 struct nlattr *ieattr =
581a8b0f 7599 tb[NL80211_MESH_SETUP_IE];
581a8b0f
JC		 7600 setup->ie = nla_data(ieattr);
7601 setup->ie_len = nla_len(ieattr);
c80d545d 7602 }
bb2798d4
TP		 7603 if (tb[NL80211_MESH_SETUP_USERSPACE_MPM] &&
7604 !(rdev->wiphy.features & NL80211_FEATURE_USERSPACE_MPM))
7605 return -EINVAL;
7606 setup->user_mpm = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_MPM]);
b130e5ce
JC		 7607 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
7608 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
bb2798d4
TP		 7609 if (setup->is_secure)
7610 setup->user_mpm = true;
c80d545d 7611
6e16d90b
CT		 7612 if (tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]) {
7613 if (!setup->user_mpm)
7614 return -EINVAL;
7615 setup->auth_id =
7616 nla_get_u8(tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]);
7617 }
7618
c80d545d
JC		 7619 return 0;
7620}
7621
24bdd9f4 7622static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 7623 struct genl_info *info)
bd90fdcc
JB		 7624{
7625 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7626 struct net_device *dev = info->user_ptr[1];
29cbe68c 7627 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 7628 struct mesh_config cfg;
7629 u32 mask;
7630 int err;
7631
29cbe68c
JB		 7632 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7633 return -EOPNOTSUPP;
7634
24bdd9f4 7635 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 7636 return -EOPNOTSUPP;
7637
24bdd9f4 7638 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 7639 if (err)
7640 return err;
7641
29cbe68c
JB		 7642 wdev_lock(wdev);
7643 if (!wdev->mesh_id_len)
7644 err = -ENOLINK;
7645
7646 if (!err)
e35e4d28 7647 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 7648
7649 wdev_unlock(wdev);
7650
7651 return err;
93da9cc1 7652}
7653
ad30ca2c
AN		 7654static int nl80211_put_regdom(const struct ieee80211_regdomain *regdom,
7655 struct sk_buff *msg)
f130347c 7656{
f130347c
LR		 7657 struct nlattr *nl_reg_rules;
7658 unsigned int i;
f130347c 7659
458f4f9e
JB		 7660 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
7661 (regdom->dfs_region &&
7662 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
ad30ca2c 7663 goto nla_put_failure;
458f4f9e 7664
ae0be8de 7665 nl_reg_rules = nla_nest_start_noflag(msg, NL80211_ATTR_REG_RULES);
f130347c 7666 if (!nl_reg_rules)
ad30ca2c 7667 goto nla_put_failure;
f130347c 7668
458f4f9e 7669 for (i = 0; i < regdom->n_reg_rules; i++) {
f130347c
LR		 7670 struct nlattr *nl_reg_rule;
7671 const struct ieee80211_reg_rule *reg_rule;
7672 const struct ieee80211_freq_range *freq_range;
7673 const struct ieee80211_power_rule *power_rule;
97524820 7674 unsigned int max_bandwidth_khz;
f130347c 7675
458f4f9e 7676 reg_rule = &regdom->reg_rules[i];
f130347c
LR		 7677 freq_range = &reg_rule->freq_range;
7678 power_rule = &reg_rule->power_rule;
7679
ae0be8de 7680 nl_reg_rule = nla_nest_start_noflag(msg, i);
f130347c 7681 if (!nl_reg_rule)
ad30ca2c 7682 goto nla_put_failure;
f130347c 7683
97524820
JD		 7684 max_bandwidth_khz = freq_range->max_bandwidth_khz;
7685 if (!max_bandwidth_khz)
7686 max_bandwidth_khz = reg_get_max_bandwidth(regdom,
7687 reg_rule);
7688
9360ffd1
DM		 7689 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
7690 reg_rule->flags) ||
7691 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
7692 freq_range->start_freq_khz) ||
7693 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
7694 freq_range->end_freq_khz) ||
7695 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
97524820 7696 max_bandwidth_khz) ||
9360ffd1
DM		 7697 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
7698 power_rule->max_antenna_gain) ||
7699 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
089027e5
JD		 7700 power_rule->max_eirp) ||
7701 nla_put_u32(msg, NL80211_ATTR_DFS_CAC_TIME,
7702 reg_rule->dfs_cac_ms))
ad30ca2c 7703 goto nla_put_failure;
f130347c
LR		 7704
7705 nla_nest_end(msg, nl_reg_rule);
7706 }
7707
7708 nla_nest_end(msg, nl_reg_rules);
ad30ca2c
AN		 7709 return 0;
7710
7711nla_put_failure:
7712 return -EMSGSIZE;
7713}
7714
7715static int nl80211_get_reg_do(struct sk_buff *skb, struct genl_info *info)
7716{
7717 const struct ieee80211_regdomain *regdom = NULL;
7718 struct cfg80211_registered_device *rdev;
7719 struct wiphy *wiphy = NULL;
7720 struct sk_buff *msg;
7721 void *hdr;
7722
7723 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7724 if (!msg)
7725 return -ENOBUFS;
7726
7727 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7728 NL80211_CMD_GET_REG);
7729 if (!hdr)
7730 goto put_failure;
7731
a05829a7
JB		 7732 rtnl_lock();
7733
ad30ca2c 7734 if (info->attrs[NL80211_ATTR_WIPHY]) {
1bdd716c
AN		 7735 bool self_managed;
7736
ad30ca2c
AN		 7737 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
7738 if (IS_ERR(rdev)) {
7739 nlmsg_free(msg);
a05829a7 7740 rtnl_unlock();
ad30ca2c
AN		 7741 return PTR_ERR(rdev);
7742 }
7743
7744 wiphy = &rdev->wiphy;
1bdd716c
AN		 7745 self_managed = wiphy->regulatory_flags &
7746 REGULATORY_WIPHY_SELF_MANAGED;
ad30ca2c
AN		 7747 regdom = get_wiphy_regdom(wiphy);
7748
1bdd716c
AN		 7749 /* a self-managed-reg device must have a private regdom */
7750 if (WARN_ON(!regdom && self_managed)) {
7751 nlmsg_free(msg);
a05829a7 7752 rtnl_unlock();
1bdd716c
AN		 7753 return -EINVAL;
7754 }
7755
ad30ca2c
AN		 7756 if (regdom &&
7757 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7758 goto nla_put_failure;
7759 }
7760
7761 if (!wiphy && reg_last_request_cell_base() &&
7762 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
7763 NL80211_USER_REG_HINT_CELL_BASE))
7764 goto nla_put_failure;
7765
7766 rcu_read_lock();
7767
7768 if (!regdom)
7769 regdom = rcu_dereference(cfg80211_regdomain);
7770
7771 if (nl80211_put_regdom(regdom, msg))
7772 goto nla_put_failure_rcu;
7773
7774 rcu_read_unlock();
f130347c
LR		 7775
7776 genlmsg_end(msg, hdr);
a05829a7 7777 rtnl_unlock();
5fe231e8 7778 return genlmsg_reply(msg, info);
f130347c 7779
458f4f9e
JB		 7780nla_put_failure_rcu:
7781 rcu_read_unlock();
f130347c 7782nla_put_failure:
a05829a7 7783 rtnl_unlock();
efe1cf0c 7784put_failure:
d080e275 7785 nlmsg_free(msg);
5fe231e8 7786 return -EMSGSIZE;
f130347c
LR		 7787}
7788
ad30ca2c
AN		 7789static int nl80211_send_regdom(struct sk_buff *msg, struct netlink_callback *cb,
7790 u32 seq, int flags, struct wiphy *wiphy,
7791 const struct ieee80211_regdomain *regdom)
7792{
7793 void *hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
7794 NL80211_CMD_GET_REG);
7795
7796 if (!hdr)
7797 return -1;
7798
0a833c29 7799 genl_dump_check_consistent(cb, hdr);
ad30ca2c
AN		 7800
7801 if (nl80211_put_regdom(regdom, msg))
7802 goto nla_put_failure;
7803
7804 if (!wiphy && reg_last_request_cell_base() &&
7805 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
7806 NL80211_USER_REG_HINT_CELL_BASE))
7807 goto nla_put_failure;
7808
7809 if (wiphy &&
7810 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7811 goto nla_put_failure;
7812
1bdd716c
AN		 7813 if (wiphy && wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
7814 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
7815 goto nla_put_failure;
7816
053c095a
JB		 7817 genlmsg_end(msg, hdr);
7818 return 0;
ad30ca2c
AN		 7819
7820nla_put_failure:
7821 genlmsg_cancel(msg, hdr);
7822 return -EMSGSIZE;
7823}
7824
7825static int nl80211_get_reg_dump(struct sk_buff *skb,
7826 struct netlink_callback *cb)
7827{
7828 const struct ieee80211_regdomain *regdom = NULL;
7829 struct cfg80211_registered_device *rdev;
7830 int err, reg_idx, start = cb->args[2];
7831
7832 rtnl_lock();
7833
7834 if (cfg80211_regdomain && start == 0) {
7835 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
7836 NLM_F_MULTI, NULL,
7837 rtnl_dereference(cfg80211_regdomain));
7838 if (err < 0)
7839 goto out_err;
7840 }
7841
7842 /* the global regdom is idx 0 */
7843 reg_idx = 1;
7844 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
7845 regdom = get_wiphy_regdom(&rdev->wiphy);
7846 if (!regdom)
7847 continue;
7848
7849 if (++reg_idx <= start)
7850 continue;
7851
7852 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
7853 NLM_F_MULTI, &rdev->wiphy, regdom);
7854 if (err < 0) {
7855 reg_idx--;
7856 break;
7857 }
7858 }
7859
7860 cb->args[2] = reg_idx;
7861 err = skb->len;
7862out_err:
7863 rtnl_unlock();
7864 return err;
7865}
7866
b6863036
JB		 7867#ifdef CONFIG_CFG80211_CRDA_SUPPORT
7868static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
7869 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
7870 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
7871 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
7872 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
7873 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
7874 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
7875 [NL80211_ATTR_DFS_CAC_TIME] = { .type = NLA_U32 },
7876};
7877
7878static int parse_reg_rule(struct nlattr *tb[],
7879 struct ieee80211_reg_rule *reg_rule)
7880{
7881 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
7882 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
7883
7884 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
7885 return -EINVAL;
7886 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
7887 return -EINVAL;
7888 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
7889 return -EINVAL;
7890 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
7891 return -EINVAL;
7892 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
7893 return -EINVAL;
7894
7895 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
7896
7897 freq_range->start_freq_khz =
7898 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
7899 freq_range->end_freq_khz =
7900 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
7901 freq_range->max_bandwidth_khz =
7902 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
7903
7904 power_rule->max_eirp =
7905 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
7906
7907 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
7908 power_rule->max_antenna_gain =
7909 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
7910
7911 if (tb[NL80211_ATTR_DFS_CAC_TIME])
7912 reg_rule->dfs_cac_ms =
7913 nla_get_u32(tb[NL80211_ATTR_DFS_CAC_TIME]);
7914
7915 return 0;
7916}
7917
b2e1b302
LR		 7918static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
7919{
7920 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
7921 struct nlattr *nl_reg_rule;
ea372c54
JB		 7922 char *alpha2;
7923 int rem_reg_rules, r;
391d132c 7924 u32 num_rules = 0, rule_idx = 0;
4c7d3982 7925 enum nl80211_dfs_regions dfs_region = NL80211_DFS_UNSET;
ea372c54 7926 struct ieee80211_regdomain *rd;
b2e1b302
LR		 7927
7928 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7929 return -EINVAL;
7930
7931 if (!info->attrs[NL80211_ATTR_REG_RULES])
7932 return -EINVAL;
7933
7934 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7935
8b60b078
LR		 7936 if (info->attrs[NL80211_ATTR_DFS_REGION])
7937 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
7938
b2e1b302 7939 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 7940 rem_reg_rules) {
b2e1b302
LR		 7941 num_rules++;
7942 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 7943 return -EINVAL;
b2e1b302
LR		 7944 }
7945
a05829a7
JB		 7946 rtnl_lock();
7947 if (!reg_is_valid_request(alpha2)) {
7948 r = -EINVAL;
7949 goto out;
7950 }
e438768f 7951
391d132c 7952 rd = kzalloc(struct_size(rd, reg_rules, num_rules), GFP_KERNEL);
a05829a7
JB		 7953 if (!rd) {
7954 r = -ENOMEM;
7955 goto out;
7956 }
b2e1b302
LR		 7957
7958 rd->n_reg_rules = num_rules;
7959 rd->alpha2[0] = alpha2[0];
7960 rd->alpha2[1] = alpha2[1];
7961
8b60b078
LR		 7962 /*
7963 * Disable DFS master mode if the DFS region was
7964 * not supported or known on this kernel.
7965 */
7966 if (reg_supported_dfs_region(dfs_region))
7967 rd->dfs_region = dfs_region;
7968
b2e1b302 7969 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 7970 rem_reg_rules) {
8cb08174
JB		 7971 r = nla_parse_nested_deprecated(tb, NL80211_REG_RULE_ATTR_MAX,
7972 nl_reg_rule, reg_rule_policy,
7973 info->extack);
ae811e21
JB		 7974 if (r)
7975 goto bad_reg;
b2e1b302
LR		 7976 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
7977 if (r)
7978 goto bad_reg;
7979
7980 rule_idx++;
7981
d0e18f83
LR		 7982 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
7983 r = -EINVAL;
b2e1b302 7984 goto bad_reg;
d0e18f83 7985 }
b2e1b302
LR		 7986 }
7987
a05829a7 7988 r = set_regdom(rd, REGD_SOURCE_CRDA);
06627990 7989 /* set_regdom takes ownership of rd */
a05829a7 7990 rd = NULL;
d2372b31 7991 bad_reg:
b2e1b302 7992 kfree(rd);
a05829a7
JB		 7993 out:
7994 rtnl_unlock();
d0e18f83 7995 return r;
b2e1b302 7996}
b6863036 7997#endif /* CONFIG_CFG80211_CRDA_SUPPORT */
b2e1b302 7998
83f5e2cf
JB		 7999static int validate_scan_freqs(struct nlattr *freqs)
8000{
8001 struct nlattr *attr1, *attr2;
8002 int n_channels = 0, tmp1, tmp2;
8003
d7f13f74
SD		 8004 nla_for_each_nested(attr1, freqs, tmp1)
8005 if (nla_len(attr1) != sizeof(u32))
8006 return 0;
8007
83f5e2cf
JB		 8008 nla_for_each_nested(attr1, freqs, tmp1) {
8009 n_channels++;
8010 /*
8011 * Some hardware has a limited channel list for
8012 * scanning, and it is pretty much nonsensical
8013 * to scan for a channel twice, so disallow that
8014 * and don't require drivers to check that the
8015 * channel list they get isn't longer than what
8016 * they can scan, as long as they can scan all
8017 * the channels they registered at once.
8018 */
8019 nla_for_each_nested(attr2, freqs, tmp2)
8020 if (attr1 != attr2 &&
8021 nla_get_u32(attr1) == nla_get_u32(attr2))
8022 return 0;
8023 }
8024
8025 return n_channels;
8026}
8027
57fbcce3 8028static bool is_band_valid(struct wiphy *wiphy, enum nl80211_band b)
38de03d2 8029{
57fbcce3 8030 return b < NUM_NL80211_BANDS && wiphy->bands[b];
38de03d2
AS		 8031}
8032
8033static int parse_bss_select(struct nlattr *nla, struct wiphy *wiphy,
8034 struct cfg80211_bss_selection *bss_select)
8035{
8036 struct nlattr *attr[NL80211_BSS_SELECT_ATTR_MAX + 1];
8037 struct nlattr *nest;
8038 int err;
8039 bool found = false;
8040 int i;
8041
8042 /* only process one nested attribute */
8043 nest = nla_data(nla);
8044 if (!nla_ok(nest, nla_len(nest)))
8045 return -EINVAL;
8046
8cb08174
JB		 8047 err = nla_parse_nested_deprecated(attr, NL80211_BSS_SELECT_ATTR_MAX,
8048 nest, nl80211_bss_select_policy,
8049 NULL);
38de03d2
AS		 8050 if (err)
8051 return err;
8052
8053 /* only one attribute may be given */
8054 for (i = 0; i <= NL80211_BSS_SELECT_ATTR_MAX; i++) {
8055 if (attr[i]) {
8056 if (found)
8057 return -EINVAL;
8058 found = true;
8059 }
8060 }
8061
8062 bss_select->behaviour = __NL80211_BSS_SELECT_ATTR_INVALID;
8063
8064 if (attr[NL80211_BSS_SELECT_ATTR_RSSI])
8065 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI;
8066
8067 if (attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]) {
8068 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_BAND_PREF;
8069 bss_select->param.band_pref =
8070 nla_get_u32(attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]);
8071 if (!is_band_valid(wiphy, bss_select->param.band_pref))
8072 return -EINVAL;
8073 }
8074
8075 if (attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]) {
8076 struct nl80211_bss_select_rssi_adjust *adj_param;
8077
8078 adj_param = nla_data(attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]);
8079 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI_ADJUST;
8080 bss_select->param.adjust.band = adj_param->band;
8081 bss_select->param.adjust.delta = adj_param->delta;
8082 if (!is_band_valid(wiphy, bss_select->param.adjust.band))
8083 return -EINVAL;
8084 }
8085
8086 /* user-space did not provide behaviour attribute */
8087 if (bss_select->behaviour == __NL80211_BSS_SELECT_ATTR_INVALID)
8088 return -EINVAL;
8089
8090 if (!(wiphy->bss_select_support & BIT(bss_select->behaviour)))
8091 return -EINVAL;
8092
8093 return 0;
8094}
8095
9bb7e0f2
JB		 8096int nl80211_parse_random_mac(struct nlattr **attrs,
8097 u8 *mac_addr, u8 *mac_addr_mask)
ad2b26ab
JB		 8098{
8099 int i;
8100
8101 if (!attrs[NL80211_ATTR_MAC] && !attrs[NL80211_ATTR_MAC_MASK]) {
d2beae10
JP		 8102 eth_zero_addr(mac_addr);
8103 eth_zero_addr(mac_addr_mask);
ad2b26ab
JB		 8104 mac_addr[0] = 0x2;
8105 mac_addr_mask[0] = 0x3;
8106
8107 return 0;
8108 }
8109
8110 /* need both or none */
8111 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_MAC_MASK])
8112 return -EINVAL;
8113
8114 memcpy(mac_addr, nla_data(attrs[NL80211_ATTR_MAC]), ETH_ALEN);
8115 memcpy(mac_addr_mask, nla_data(attrs[NL80211_ATTR_MAC_MASK]), ETH_ALEN);
8116
8117 /* don't allow or configure an mcast address */
8118 if (!is_multicast_ether_addr(mac_addr_mask) ||
8119 is_multicast_ether_addr(mac_addr))
8120 return -EINVAL;
8121
8122 /*
8123 * allow users to pass a MAC address that has bits set outside
8124 * of the mask, but don't bother drivers with having to deal
8125 * with such bits
8126 */
8127 for (i = 0; i < ETH_ALEN; i++)
8128 mac_addr[i] &= mac_addr_mask[i];
8129
8130 return 0;
8131}
8132
34373d12
VT		 8133static bool cfg80211_off_channel_oper_allowed(struct wireless_dev *wdev)
8134{
8135 ASSERT_WDEV_LOCK(wdev);
8136
8137 if (!cfg80211_beaconing_iface_active(wdev))
8138 return true;
8139
8140 if (!(wdev->chandef.chan->flags & IEEE80211_CHAN_RADAR))
8141 return true;
8142
8143 return regulatory_pre_cac_allowed(wdev->wiphy);
8144}
8145
db0a4ad8
JB		 8146static bool nl80211_check_scan_feat(struct wiphy *wiphy, u32 flags, u32 flag,
8147 enum nl80211_ext_feature_index feat)
8148{
8149 if (!(flags & flag))
8150 return true;
8151 if (wiphy_ext_feature_isset(wiphy, feat))
8152 return true;
8153 return false;
8154}
8155
2d23d073
RZ		 8156static int
8157nl80211_check_scan_flags(struct wiphy *wiphy, struct wireless_dev *wdev,
8158 void *request, struct nlattr **attrs,
8159 bool is_sched_scan)
8160{
8161 u8 *mac_addr, *mac_addr_mask;
8162 u32 *flags;
8163 enum nl80211_feature_flags randomness_flag;
8164
8165 if (!attrs[NL80211_ATTR_SCAN_FLAGS])
8166 return 0;
8167
8168 if (is_sched_scan) {
8169 struct cfg80211_sched_scan_request *req = request;
8170
8171 randomness_flag = wdev ?
8172 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR :
8173 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
8174 flags = &req->flags;
8175 mac_addr = req->mac_addr;
8176 mac_addr_mask = req->mac_addr_mask;
8177 } else {
8178 struct cfg80211_scan_request *req = request;
8179
8180 randomness_flag = NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
8181 flags = &req->flags;
8182 mac_addr = req->mac_addr;
8183 mac_addr_mask = req->mac_addr_mask;
8184 }
8185
8186 *flags = nla_get_u32(attrs[NL80211_ATTR_SCAN_FLAGS]);
8187
5037a009
SD		 8188 if (((*flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
8189 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
db0a4ad8
JB		 8190 !nl80211_check_scan_feat(wiphy, *flags,
8191 NL80211_SCAN_FLAG_LOW_SPAN,
8192 NL80211_EXT_FEATURE_LOW_SPAN_SCAN) ||
8193 !nl80211_check_scan_feat(wiphy, *flags,
8194 NL80211_SCAN_FLAG_LOW_POWER,
8195 NL80211_EXT_FEATURE_LOW_POWER_SCAN) ||
8196 !nl80211_check_scan_feat(wiphy, *flags,
8197 NL80211_SCAN_FLAG_HIGH_ACCURACY,
8198 NL80211_EXT_FEATURE_HIGH_ACCURACY_SCAN) ||
8199 !nl80211_check_scan_feat(wiphy, *flags,
8200 NL80211_SCAN_FLAG_FILS_MAX_CHANNEL_TIME,
8201 NL80211_EXT_FEATURE_FILS_MAX_CHANNEL_TIME) ||
8202 !nl80211_check_scan_feat(wiphy, *flags,
8203 NL80211_SCAN_FLAG_ACCEPT_BCAST_PROBE_RESP,
8204 NL80211_EXT_FEATURE_ACCEPT_BCAST_PROBE_RESP) ||
8205 !nl80211_check_scan_feat(wiphy, *flags,
8206 NL80211_SCAN_FLAG_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION,
8207 NL80211_EXT_FEATURE_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION) ||
8208 !nl80211_check_scan_feat(wiphy, *flags,
8209 NL80211_SCAN_FLAG_OCE_PROBE_REQ_HIGH_TX_RATE,
2e076f19
JB		 8210 NL80211_EXT_FEATURE_OCE_PROBE_REQ_HIGH_TX_RATE) ||
8211 !nl80211_check_scan_feat(wiphy, *flags,
8212 NL80211_SCAN_FLAG_RANDOM_SN,
8213 NL80211_EXT_FEATURE_SCAN_RANDOM_SN) ||
8214 !nl80211_check_scan_feat(wiphy, *flags,
8215 NL80211_SCAN_FLAG_MIN_PREQ_CONTENT,
8216 NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT))
2d23d073
RZ		 8217 return -EOPNOTSUPP;
8218
8219 if (*flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
8220 int err;
8221
8222 if (!(wiphy->features & randomness_flag) ||
8223 (wdev && wdev->current_bss))
8224 return -EOPNOTSUPP;
8225
8226 err = nl80211_parse_random_mac(attrs, mac_addr, mac_addr_mask);
8227 if (err)
8228 return err;
8229 }
8230
2d23d073
RZ		 8231 return 0;
8232}
8233
2a519311
JB		 8234static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
8235{
4c476991 8236 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 8237 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 8238 struct cfg80211_scan_request *request;
2032f3b2
TP		 8239 struct nlattr *scan_freqs = NULL;
8240 bool scan_freqs_khz = false;
2a519311
JB		 8241 struct nlattr *attr;
8242 struct wiphy *wiphy;
83f5e2cf 8243 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 8244 size_t ie_len;
2a519311 8245
79c97e97 8246 wiphy = &rdev->wiphy;
2a519311 8247
cb3b7d87
AB		 8248 if (wdev->iftype == NL80211_IFTYPE_NAN)
8249 return -EOPNOTSUPP;
8250
4c476991
JB		 8251 if (!rdev->ops->scan)
8252 return -EOPNOTSUPP;
2a519311 8253
83286856
CJ		 8254 if (rdev->scan_req || rdev->scan_msg)
8255 return -EBUSY;
2a519311 8256
2032f3b2
TP		 8257 if (info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ]) {
8258 if (!wiphy_ext_feature_isset(wiphy,
8259 NL80211_EXT_FEATURE_SCAN_FREQ_KHZ))
8260 return -EOPNOTSUPP;
8261 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ];
8262 scan_freqs_khz = true;
8263 } else if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES])
8264 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQUENCIES];
8265
8266 if (scan_freqs) {
8267 n_channels = validate_scan_freqs(scan_freqs);
83286856
CJ		 8268 if (!n_channels)
8269 return -EINVAL;
2a519311 8270 } else {
bdfbec2d 8271 n_channels = ieee80211_get_num_supported_channels(wiphy);
2a519311
JB		 8272 }
8273
8274 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
8275 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
8276 n_ssids++;
8277
83286856
CJ		 8278 if (n_ssids > wiphy->max_scan_ssids)
8279 return -EINVAL;
2a519311 8280
70692ad2
JM		 8281 if (info->attrs[NL80211_ATTR_IE])
8282 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
8283 else
8284 ie_len = 0;
8285
83286856
CJ		 8286 if (ie_len > wiphy->max_scan_ie_len)
8287 return -EINVAL;
18a83659 8288
2a519311 8289 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 8290 + sizeof(*request->ssids) * n_ssids
8291 + sizeof(*request->channels) * n_channels
70692ad2 8292 + ie_len, GFP_KERNEL);
83286856
CJ		 8293 if (!request)
8294 return -ENOMEM;
2a519311 8295
2a519311 8296 if (n_ssids)
5ba63533 8297 request->ssids = (void *)&request->channels[n_channels];
2a519311 8298 request->n_ssids = n_ssids;
70692ad2 8299 if (ie_len) {
13874e4b 8300 if (n_ssids)
70692ad2
JM		 8301 request->ie = (void *)(request->ssids + n_ssids);
8302 else
8303 request->ie = (void *)(request->channels + n_channels);
8304 }
2a519311 8305
584991dc 8306 i = 0;
2032f3b2 8307 if (scan_freqs) {
2a519311 8308 /* user specified, bail out if channel not found */
2032f3b2 8309 nla_for_each_nested(attr, scan_freqs, tmp) {
584991dc 8310 struct ieee80211_channel *chan;
2032f3b2 8311 int freq = nla_get_u32(attr);
584991dc 8312
2032f3b2
TP		 8313 if (!scan_freqs_khz)
8314 freq = MHZ_TO_KHZ(freq);
584991dc 8315
2032f3b2 8316 chan = ieee80211_get_channel_khz(wiphy, freq);
584991dc 8317 if (!chan) {
2a519311
JB		 8318 err = -EINVAL;
8319 goto out_free;
8320 }
584991dc
JB		 8321
8322 /* ignore disabled channels */
8323 if (chan->flags & IEEE80211_CHAN_DISABLED)
8324 continue;
8325
8326 request->channels[i] = chan;
2a519311
JB		 8327 i++;
8328 }
8329 } else {
57fbcce3 8330 enum nl80211_band band;
34850ab2 8331
2a519311 8332 /* all channels */
57fbcce3 8333 for (band = 0; band < NUM_NL80211_BANDS; band++) {
2a519311 8334 int j;
7a087e74 8335
2a519311
JB		 8336 if (!wiphy->bands[band])
8337 continue;
8338 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 8339 struct ieee80211_channel *chan;
8340
8341 chan = &wiphy->bands[band]->channels[j];
8342
8343 if (chan->flags & IEEE80211_CHAN_DISABLED)
8344 continue;
8345
8346 request->channels[i] = chan;
2a519311
JB		 8347 i++;
8348 }
8349 }
8350 }
8351
584991dc
JB		 8352 if (!i) {
8353 err = -EINVAL;
8354 goto out_free;
8355 }
8356
8357 request->n_channels = i;
8358
34373d12
VT		 8359 wdev_lock(wdev);
8360 if (!cfg80211_off_channel_oper_allowed(wdev)) {
8361 struct ieee80211_channel *chan;
8362
8363 if (request->n_channels != 1) {
8364 wdev_unlock(wdev);
8365 err = -EBUSY;
8366 goto out_free;
8367 }
8368
8369 chan = request->channels[0];
8370 if (chan->center_freq != wdev->chandef.chan->center_freq) {
8371 wdev_unlock(wdev);
8372 err = -EBUSY;
8373 goto out_free;
8374 }
8375 }
8376 wdev_unlock(wdev);
8377
2a519311 8378 i = 0;
13874e4b 8379 if (n_ssids) {
2a519311 8380 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 8381 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 8382 err = -EINVAL;
8383 goto out_free;
8384 }
57a27e1d 8385 request->ssids[i].ssid_len = nla_len(attr);
2a519311 8386 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 8387 i++;
8388 }
8389 }
8390
70692ad2
JM		 8391 if (info->attrs[NL80211_ATTR_IE]) {
8392 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 8393 memcpy((void *)request->ie,
8394 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 8395 request->ie_len);
8396 }
8397
57fbcce3 8398 for (i = 0; i < NUM_NL80211_BANDS; i++)
a401d2bb
JB		 8399 if (wiphy->bands[i])
8400 request->rates[i] =
8401 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 8402
8403 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
8404 nla_for_each_nested(attr,
8405 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
8406 tmp) {
57fbcce3 8407 enum nl80211_band band = nla_type(attr);
34850ab2 8408
57fbcce3 8409 if (band < 0 || band >= NUM_NL80211_BANDS) {
34850ab2
JB		 8410 err = -EINVAL;
8411 goto out_free;
8412 }
1b09cd82
FF		 8413
8414 if (!wiphy->bands[band])
8415 continue;
8416
34850ab2
JB		 8417 err = ieee80211_get_ratemask(wiphy->bands[band],
8418 nla_data(attr),
8419 nla_len(attr),
8420 &request->rates[band]);
8421 if (err)
8422 goto out_free;
8423 }
8424 }
8425
1d76250b 8426 if (info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]) {
1d76250b
AS		 8427 request->duration =
8428 nla_get_u16(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]);
8429 request->duration_mandatory =
8430 nla_get_flag(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY]);
8431 }
8432
2d23d073
RZ		 8433 err = nl80211_check_scan_flags(wiphy, wdev, request, info->attrs,
8434 false);
8435 if (err)
8436 goto out_free;
ed473771 8437
e9f935e3
RM		 8438 request->no_cck =
8439 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
8440
2fa436b3
VK		 8441 /* Initial implementation used NL80211_ATTR_MAC to set the specific
8442 * BSSID to scan for. This was problematic because that same attribute
8443 * was already used for another purpose (local random MAC address). The
8444 * NL80211_ATTR_BSSID attribute was added to fix this. For backwards
8445 * compatibility with older userspace components, also use the
8446 * NL80211_ATTR_MAC value here if it can be determined to be used for
8447 * the specific BSSID use case instead of the random MAC address
8448 * (NL80211_ATTR_SCAN_FLAGS is used to enable random MAC address use).
8449 */
8450 if (info->attrs[NL80211_ATTR_BSSID])
8451 memcpy(request->bssid,
8452 nla_data(info->attrs[NL80211_ATTR_BSSID]), ETH_ALEN);
8453 else if (!(request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) &&
8454 info->attrs[NL80211_ATTR_MAC])
818965d3
JM		 8455 memcpy(request->bssid, nla_data(info->attrs[NL80211_ATTR_MAC]),
8456 ETH_ALEN);
8457 else
8458 eth_broadcast_addr(request->bssid);
8459
fd014284 8460 request->wdev = wdev;
79c97e97 8461 request->wiphy = &rdev->wiphy;
15d6030b 8462 request->scan_start = jiffies;
2a519311 8463
79c97e97 8464 rdev->scan_req = request;
c8cb5b85 8465 err = cfg80211_scan(rdev);
2a519311 8466
504776be
CJ		 8467 if (err)
8468 goto out_free;
8469
8470 nl80211_send_scan_start(rdev, wdev);
8471 if (wdev->netdev)
8472 dev_hold(wdev->netdev);
8473
8474 return 0;
8475
2a519311 8476 out_free:
504776be
CJ		 8477 rdev->scan_req = NULL;
8478 kfree(request);
3b85875a 8479
2a519311
JB		 8480 return err;
8481}
8482
91d3ab46
VK		 8483static int nl80211_abort_scan(struct sk_buff *skb, struct genl_info *info)
8484{
8485 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8486 struct wireless_dev *wdev = info->user_ptr[1];
8487
8488 if (!rdev->ops->abort_scan)
8489 return -EOPNOTSUPP;
8490
8491 if (rdev->scan_msg)
8492 return 0;
8493
8494 if (!rdev->scan_req)
8495 return -ENOENT;
8496
8497 rdev_abort_scan(rdev, wdev);
8498 return 0;
8499}
8500
3b06d277
AS		 8501static int
8502nl80211_parse_sched_scan_plans(struct wiphy *wiphy, int n_plans,
8503 struct cfg80211_sched_scan_request *request,
8504 struct nlattr **attrs)
8505{
8506 int tmp, err, i = 0;
8507 struct nlattr *attr;
8508
8509 if (!attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
8510 u32 interval;
8511
8512 /*
8513 * If scan plans are not specified,
5a88de53 8514 * %NL80211_ATTR_SCHED_SCAN_INTERVAL will be specified. In this
3b06d277
AS		 8515 * case one scan plan will be set with the specified scan
8516 * interval and infinite number of iterations.
8517 */
3b06d277
AS		 8518 interval = nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
8519 if (!interval)
8520 return -EINVAL;
8521
8522 request->scan_plans[0].interval =
8523 DIV_ROUND_UP(interval, MSEC_PER_SEC);
8524 if (!request->scan_plans[0].interval)
8525 return -EINVAL;
8526
8527 if (request->scan_plans[0].interval >
8528 wiphy->max_sched_scan_plan_interval)
8529 request->scan_plans[0].interval =
8530 wiphy->max_sched_scan_plan_interval;
8531
8532 return 0;
8533 }
8534
8535 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp) {
8536 struct nlattr *plan[NL80211_SCHED_SCAN_PLAN_MAX + 1];
8537
8538 if (WARN_ON(i >= n_plans))
8539 return -EINVAL;
8540
8cb08174
JB		 8541 err = nla_parse_nested_deprecated(plan,
8542 NL80211_SCHED_SCAN_PLAN_MAX,
8543 attr, nl80211_plan_policy,
8544 NULL);
3b06d277
AS		 8545 if (err)
8546 return err;
8547
8548 if (!plan[NL80211_SCHED_SCAN_PLAN_INTERVAL])
8549 return -EINVAL;
8550
8551 request->scan_plans[i].interval =
8552 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_INTERVAL]);
8553 if (!request->scan_plans[i].interval ||
8554 request->scan_plans[i].interval >
8555 wiphy->max_sched_scan_plan_interval)
8556 return -EINVAL;
8557
8558 if (plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]) {
8559 request->scan_plans[i].iterations =
8560 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]);
8561 if (!request->scan_plans[i].iterations ||
8562 (request->scan_plans[i].iterations >
8563 wiphy->max_sched_scan_plan_iterations))
8564 return -EINVAL;
8565 } else if (i < n_plans - 1) {
8566 /*
8567 * All scan plans but the last one must specify
8568 * a finite number of iterations
8569 */
8570 return -EINVAL;
8571 }
8572
8573 i++;
8574 }
8575
8576 /*
8577 * The last scan plan must not specify the number of
8578 * iterations, it is supposed to run infinitely
8579 */
8580 if (request->scan_plans[n_plans - 1].iterations)
8581 return -EINVAL;
8582
8583 return 0;
8584}
8585
1e1b11b6 8586static int
8587nl80211_parse_sched_scan_per_band_rssi(struct wiphy *wiphy,
8588 struct cfg80211_match_set *match_sets,
8589 struct nlattr *tb_band_rssi,
8590 s32 rssi_thold)
8591{
8592 struct nlattr *attr;
8593 int i, tmp, ret = 0;
8594
8595 if (!wiphy_ext_feature_isset(wiphy,
8596 NL80211_EXT_FEATURE_SCHED_SCAN_BAND_SPECIFIC_RSSI_THOLD)) {
8597 if (tb_band_rssi)
8598 ret = -EOPNOTSUPP;
8599 else
8600 for (i = 0; i < NUM_NL80211_BANDS; i++)
8601 match_sets->per_band_rssi_thold[i] =
8602 NL80211_SCAN_RSSI_THOLD_OFF;
8603 return ret;
8604 }
8605
8606 for (i = 0; i < NUM_NL80211_BANDS; i++)
8607 match_sets->per_band_rssi_thold[i] = rssi_thold;
8608
8609 nla_for_each_nested(attr, tb_band_rssi, tmp) {
8610 enum nl80211_band band = nla_type(attr);
8611
8612 if (band < 0 || band >= NUM_NL80211_BANDS)
8613 return -EINVAL;
8614
8615 match_sets->per_band_rssi_thold[band] = nla_get_s32(attr);
8616 }
8617
8618 return 0;
8619}
8620
256da02d 8621static struct cfg80211_sched_scan_request *
ad2b26ab 8622nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
aad1e812 8623 struct nlattr **attrs, int max_match_sets)
807f8a8c
LC		 8624{
8625 struct cfg80211_sched_scan_request *request;
807f8a8c 8626 struct nlattr *attr;
3b06d277 8627 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i, n_plans = 0;
57fbcce3 8628 enum nl80211_band band;
807f8a8c 8629 size_t ie_len;
a1f1c21c 8630 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
ea73cbce 8631 s32 default_match_rssi = NL80211_SCAN_RSSI_THOLD_OFF;
807f8a8c 8632
256da02d 8633 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c 8634 n_channels = validate_scan_freqs(
256da02d 8635 attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
807f8a8c 8636 if (!n_channels)
256da02d 8637 return ERR_PTR(-EINVAL);
807f8a8c 8638 } else {
bdfbec2d 8639 n_channels = ieee80211_get_num_supported_channels(wiphy);
807f8a8c
LC		 8640 }
8641
256da02d
LC		 8642 if (attrs[NL80211_ATTR_SCAN_SSIDS])
8643 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c
LC		 8644 tmp)
8645 n_ssids++;
8646
93b6aa69 8647 if (n_ssids > wiphy->max_sched_scan_ssids)
256da02d 8648 return ERR_PTR(-EINVAL);
807f8a8c 8649
ea73cbce
JB		 8650 /*
8651 * First, count the number of 'real' matchsets. Due to an issue with
8652 * the old implementation, matchsets containing only the RSSI attribute
8653 * (NL80211_SCHED_SCAN_MATCH_ATTR_RSSI) are considered as the 'default'
8654 * RSSI for all matchsets, rather than their own matchset for reporting
8655 * all APs with a strong RSSI. This is needed to be compatible with
8656 * older userspace that treated a matchset with only the RSSI as the
8657 * global RSSI for all other matchsets - if there are other matchsets.
8658 */
256da02d 8659 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 8660 nla_for_each_nested(attr,
256da02d 8661 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
ea73cbce
JB		 8662 tmp) {
8663 struct nlattr *rssi;
8664
8cb08174
JB		 8665 err = nla_parse_nested_deprecated(tb,
8666 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
8667 attr,
8668 nl80211_match_policy,
8669 NULL);
ea73cbce 8670 if (err)
256da02d 8671 return ERR_PTR(err);
3007e352
AVS		 8672
8673 /* SSID and BSSID are mutually exclusive */
8674 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] &&
8675 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID])
8676 return ERR_PTR(-EINVAL);
8677
ea73cbce 8678 /* add other standalone attributes here */
3007e352
AVS		 8679 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] ||
8680 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID]) {
ea73cbce
JB		 8681 n_match_sets++;
8682 continue;
8683 }
8684 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
8685 if (rssi)
8686 default_match_rssi = nla_get_s32(rssi);
8687 }
8688 }
8689
8690 /* However, if there's no other matchset, add the RSSI one */
8691 if (!n_match_sets && default_match_rssi != NL80211_SCAN_RSSI_THOLD_OFF)
8692 n_match_sets = 1;
a1f1c21c 8693
aad1e812 8694 if (n_match_sets > max_match_sets)
256da02d 8695 return ERR_PTR(-EINVAL);
a1f1c21c 8696
256da02d
LC		 8697 if (attrs[NL80211_ATTR_IE])
8698 ie_len = nla_len(attrs[NL80211_ATTR_IE]);
807f8a8c
LC		 8699 else
8700 ie_len = 0;
8701
5a865bad 8702 if (ie_len > wiphy->max_sched_scan_ie_len)
256da02d 8703 return ERR_PTR(-EINVAL);
c10841ca 8704
3b06d277
AS		 8705 if (attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
8706 /*
8707 * NL80211_ATTR_SCHED_SCAN_INTERVAL must not be specified since
8708 * each scan plan already specifies its own interval
8709 */
8710 if (attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
8711 return ERR_PTR(-EINVAL);
8712
8713 nla_for_each_nested(attr,
8714 attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp)
8715 n_plans++;
8716 } else {
8717 /*
8718 * The scan interval attribute is kept for backward
8719 * compatibility. If no scan plans are specified and sched scan
8720 * interval is specified, one scan plan will be set with this
8721 * scan interval and infinite number of iterations.
8722 */
8723 if (!attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
8724 return ERR_PTR(-EINVAL);
8725
8726 n_plans = 1;
8727 }
8728
8729 if (!n_plans || n_plans > wiphy->max_sched_scan_plans)
8730 return ERR_PTR(-EINVAL);
8731
bf95ecdb 8732 if (!wiphy_ext_feature_isset(
8733 wiphy, NL80211_EXT_FEATURE_SCHED_SCAN_RELATIVE_RSSI) &&
8734 (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] ||
8735 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]))
8736 return ERR_PTR(-EINVAL);
8737
807f8a8c 8738 request = kzalloc(sizeof(*request)
a2cd43c5 8739 + sizeof(*request->ssids) * n_ssids
a1f1c21c 8740 + sizeof(*request->match_sets) * n_match_sets
3b06d277 8741 + sizeof(*request->scan_plans) * n_plans
a2cd43c5 8742 + sizeof(*request->channels) * n_channels
807f8a8c 8743 + ie_len, GFP_KERNEL);
256da02d
LC		 8744 if (!request)
8745 return ERR_PTR(-ENOMEM);
807f8a8c
LC		 8746
8747 if (n_ssids)
8748 request->ssids = (void *)&request->channels[n_channels];
8749 request->n_ssids = n_ssids;
8750 if (ie_len) {
13874e4b 8751 if (n_ssids)
807f8a8c
LC		 8752 request->ie = (void *)(request->ssids + n_ssids);
8753 else
8754 request->ie = (void *)(request->channels + n_channels);
8755 }
8756
a1f1c21c
LC		 8757 if (n_match_sets) {
8758 if (request->ie)
8759 request->match_sets = (void *)(request->ie + ie_len);
13874e4b 8760 else if (n_ssids)
a1f1c21c
LC		 8761 request->match_sets =
8762 (void *)(request->ssids + n_ssids);
8763 else
8764 request->match_sets =
8765 (void *)(request->channels + n_channels);
8766 }
8767 request->n_match_sets = n_match_sets;
8768
3b06d277
AS		 8769 if (n_match_sets)
8770 request->scan_plans = (void *)(request->match_sets +
8771 n_match_sets);
8772 else if (request->ie)
8773 request->scan_plans = (void *)(request->ie + ie_len);
8774 else if (n_ssids)
8775 request->scan_plans = (void *)(request->ssids + n_ssids);
8776 else
8777 request->scan_plans = (void *)(request->channels + n_channels);
8778
8779 request->n_scan_plans = n_plans;
8780
807f8a8c 8781 i = 0;
256da02d 8782 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c
LC		 8783 /* user specified, bail out if channel not found */
8784 nla_for_each_nested(attr,
256da02d 8785 attrs[NL80211_ATTR_SCAN_FREQUENCIES],
807f8a8c
LC		 8786 tmp) {
8787 struct ieee80211_channel *chan;
8788
8789 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
8790
8791 if (!chan) {
8792 err = -EINVAL;
8793 goto out_free;
8794 }
8795
8796 /* ignore disabled channels */
8797 if (chan->flags & IEEE80211_CHAN_DISABLED)
8798 continue;
8799
8800 request->channels[i] = chan;
8801 i++;
8802 }
8803 } else {
8804 /* all channels */
57fbcce3 8805 for (band = 0; band < NUM_NL80211_BANDS; band++) {
807f8a8c 8806 int j;
7a087e74 8807
807f8a8c
LC		 8808 if (!wiphy->bands[band])
8809 continue;
8810 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
8811 struct ieee80211_channel *chan;
8812
8813 chan = &wiphy->bands[band]->channels[j];
8814
8815 if (chan->flags & IEEE80211_CHAN_DISABLED)
8816 continue;
8817
8818 request->channels[i] = chan;
8819 i++;
8820 }
8821 }
8822 }
8823
8824 if (!i) {
8825 err = -EINVAL;
8826 goto out_free;
8827 }
8828
8829 request->n_channels = i;
8830
8831 i = 0;
13874e4b 8832 if (n_ssids) {
256da02d 8833 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c 8834 tmp) {
57a27e1d 8835 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 8836 err = -EINVAL;
8837 goto out_free;
8838 }
57a27e1d 8839 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 8840 memcpy(request->ssids[i].ssid, nla_data(attr),
8841 nla_len(attr));
807f8a8c
LC		 8842 i++;
8843 }
8844 }
8845
a1f1c21c 8846 i = 0;
256da02d 8847 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 8848 nla_for_each_nested(attr,
256da02d 8849 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
a1f1c21c 8850 tmp) {
3007e352 8851 struct nlattr *ssid, *bssid, *rssi;
a1f1c21c 8852
8cb08174
JB		 8853 err = nla_parse_nested_deprecated(tb,
8854 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
8855 attr,
8856 nl80211_match_policy,
8857 NULL);
ae811e21
JB		 8858 if (err)
8859 goto out_free;
4a4ab0d7 8860 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
3007e352 8861 bssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID];
d39f3b4f
JB		 8862
8863 if (!ssid && !bssid) {
8864 i++;
8865 continue;
8866 }
8867
8868 if (WARN_ON(i >= n_match_sets)) {
8869 /* this indicates a programming error,
8870 * the loop above should have verified
8871 * things properly
8872 */
8873 err = -EINVAL;
8874 goto out_free;
8875 }
8876
8877 if (ssid) {
d39f3b4f
JB		 8878 memcpy(request->match_sets[i].ssid.ssid,
8879 nla_data(ssid), nla_len(ssid));
8880 request->match_sets[i].ssid.ssid_len =
8881 nla_len(ssid);
8882 }
cb9abd48 8883 if (bssid)
d39f3b4f
JB		 8884 memcpy(request->match_sets[i].bssid,
8885 nla_data(bssid), ETH_ALEN);
3007e352 8886
d39f3b4f
JB		 8887 /* special attribute - old implementation w/a */
8888 request->match_sets[i].rssi_thold = default_match_rssi;
8889 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
8890 if (rssi)
ea73cbce 8891 request->match_sets[i].rssi_thold =
d39f3b4f 8892 nla_get_s32(rssi);
1e1b11b6 8893
8894 /* Parse per band RSSI attribute */
8895 err = nl80211_parse_sched_scan_per_band_rssi(wiphy,
8896 &request->match_sets[i],
8897 tb[NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI],
8898 request->match_sets[i].rssi_thold);
8899 if (err)
8900 goto out_free;
8901
a1f1c21c
LC		 8902 i++;
8903 }
ea73cbce
JB		 8904
8905 /* there was no other matchset, so the RSSI one is alone */
f89f46cf 8906 if (i == 0 && n_match_sets)
ea73cbce
JB		 8907 request->match_sets[0].rssi_thold = default_match_rssi;
8908
8909 request->min_rssi_thold = INT_MAX;
8910 for (i = 0; i < n_match_sets; i++)
8911 request->min_rssi_thold =
8912 min(request->match_sets[i].rssi_thold,
8913 request->min_rssi_thold);
8914 } else {
8915 request->min_rssi_thold = NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 8916 }
8917
9900e484
JB		 8918 if (ie_len) {
8919 request->ie_len = ie_len;
807f8a8c 8920 memcpy((void *)request->ie,
256da02d 8921 nla_data(attrs[NL80211_ATTR_IE]),
807f8a8c
LC		 8922 request->ie_len);
8923 }
8924
2d23d073
RZ		 8925 err = nl80211_check_scan_flags(wiphy, wdev, request, attrs, true);
8926 if (err)
8927 goto out_free;
ed473771 8928
9c748934
LC		 8929 if (attrs[NL80211_ATTR_SCHED_SCAN_DELAY])
8930 request->delay =
8931 nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_DELAY]);
8932
bf95ecdb 8933 if (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]) {
8934 request->relative_rssi = nla_get_s8(
8935 attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]);
8936 request->relative_rssi_set = true;
8937 }
8938
8939 if (request->relative_rssi_set &&
8940 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]) {
8941 struct nl80211_bss_select_rssi_adjust *rssi_adjust;
8942
8943 rssi_adjust = nla_data(
8944 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]);
8945 request->rssi_adjust.band = rssi_adjust->band;
8946 request->rssi_adjust.delta = rssi_adjust->delta;
8947 if (!is_band_valid(wiphy, request->rssi_adjust.band)) {
8948 err = -EINVAL;
8949 goto out_free;
8950 }
8951 }
8952
3b06d277
AS		 8953 err = nl80211_parse_sched_scan_plans(wiphy, n_plans, request, attrs);
8954 if (err)
8955 goto out_free;
8956
15d6030b 8957 request->scan_start = jiffies;
807f8a8c 8958
256da02d 8959 return request;
807f8a8c
LC		 8960
8961out_free:
8962 kfree(request);
256da02d
LC		 8963 return ERR_PTR(err);
8964}
8965
8966static int nl80211_start_sched_scan(struct sk_buff *skb,
8967 struct genl_info *info)
8968{
8969 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8970 struct net_device *dev = info->user_ptr[1];
ad2b26ab 8971 struct wireless_dev *wdev = dev->ieee80211_ptr;
31a60ed1 8972 struct cfg80211_sched_scan_request *sched_scan_req;
ca986ad9 8973 bool want_multi;
256da02d
LC		 8974 int err;
8975
ca986ad9 8976 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_start)
256da02d
LC		 8977 return -EOPNOTSUPP;
8978
ca986ad9
AVS		 8979 want_multi = info->attrs[NL80211_ATTR_SCHED_SCAN_MULTI];
8980 err = cfg80211_sched_scan_req_possible(rdev, want_multi);
8981 if (err)
8982 return err;
256da02d 8983
31a60ed1 8984 sched_scan_req = nl80211_parse_sched_scan(&rdev->wiphy, wdev,
aad1e812
AVS		 8985 info->attrs,
8986 rdev->wiphy.max_match_sets);
31a60ed1
JR		 8987
8988 err = PTR_ERR_OR_ZERO(sched_scan_req);
256da02d
LC		 8989 if (err)
8990 goto out_err;
8991
ca986ad9
AVS		 8992 /* leave request id zero for legacy request
8993 * or if driver does not support multi-scheduled scan
8994 */
2fd351a8
DK		 8995 if (want_multi && rdev->wiphy.max_sched_scan_reqs > 1)
8996 sched_scan_req->reqid = cfg80211_assign_cookie(rdev);
ca986ad9 8997
31a60ed1 8998 err = rdev_sched_scan_start(rdev, dev, sched_scan_req);
256da02d
LC		 8999 if (err)
9000 goto out_free;
9001
31a60ed1
JR		 9002 sched_scan_req->dev = dev;
9003 sched_scan_req->wiphy = &rdev->wiphy;
9004
93a1e86c
JR		 9005 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
9006 sched_scan_req->owner_nlportid = info->snd_portid;
9007
ca986ad9 9008 cfg80211_add_sched_scan_req(rdev, sched_scan_req);
256da02d 9009
96b08fd6 9010 nl80211_send_sched_scan(sched_scan_req, NL80211_CMD_START_SCHED_SCAN);
256da02d
LC		 9011 return 0;
9012
9013out_free:
31a60ed1 9014 kfree(sched_scan_req);
256da02d 9015out_err:
807f8a8c
LC		 9016 return err;
9017}
9018
9019static int nl80211_stop_sched_scan(struct sk_buff *skb,
9020 struct genl_info *info)
9021{
ca986ad9 9022 struct cfg80211_sched_scan_request *req;
807f8a8c 9023 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ca986ad9 9024 u64 cookie;
807f8a8c 9025
ca986ad9 9026 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_stop)
807f8a8c
LC		 9027 return -EOPNOTSUPP;
9028
ca986ad9
AVS		 9029 if (info->attrs[NL80211_ATTR_COOKIE]) {
9030 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
9031 return __cfg80211_stop_sched_scan(rdev, cookie, false);
9032 }
9033
9034 req = list_first_or_null_rcu(&rdev->sched_scan_req_list,
9035 struct cfg80211_sched_scan_request,
9036 list);
9037 if (!req || req->reqid ||
9038 (req->owner_nlportid &&
9039 req->owner_nlportid != info->snd_portid))
9040 return -ENOENT;
9041
9042 return cfg80211_stop_sched_scan_req(rdev, req, false);
807f8a8c
LC		 9043}
9044
04f39047
SW		 9045static int nl80211_start_radar_detection(struct sk_buff *skb,
9046 struct genl_info *info)
9047{
9048 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9049 struct net_device *dev = info->user_ptr[1];
9050 struct wireless_dev *wdev = dev->ieee80211_ptr;
13cf6dec 9051 struct wiphy *wiphy = wdev->wiphy;
04f39047 9052 struct cfg80211_chan_def chandef;
55f7435c 9053 enum nl80211_dfs_regions dfs_region;
31559f35 9054 unsigned int cac_time_ms;
04f39047
SW		 9055 int err;
9056
13cf6dec 9057 dfs_region = reg_get_dfs_region(wiphy);
55f7435c
LR		 9058 if (dfs_region == NL80211_DFS_UNSET)
9059 return -EINVAL;
9060
04f39047
SW		 9061 err = nl80211_parse_chandef(rdev, info, &chandef);
9062 if (err)
9063 return err;
9064
ff311bc1
SW		 9065 if (netif_carrier_ok(dev))
9066 return -EBUSY;
9067
04f39047
SW		 9068 if (wdev->cac_started)
9069 return -EBUSY;
9070
13cf6dec 9071 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
04f39047
SW		 9072 if (err < 0)
9073 return err;
9074
9075 if (err == 0)
9076 return -EINVAL;
9077
13cf6dec 9078 if (!cfg80211_chandef_dfs_usable(wiphy, &chandef))
04f39047
SW		 9079 return -EINVAL;
9080
13cf6dec
DL		 9081 /* CAC start is offloaded to HW and can't be started manually */
9082 if (wiphy_ext_feature_isset(wiphy, NL80211_EXT_FEATURE_DFS_OFFLOAD))
9083 return -EOPNOTSUPP;
9084
04f39047
SW		 9085 if (!rdev->ops->start_radar_detection)
9086 return -EOPNOTSUPP;
9087
31559f35
JD		 9088 cac_time_ms = cfg80211_chandef_dfs_cac_time(&rdev->wiphy, &chandef);
9089 if (WARN_ON(!cac_time_ms))
9090 cac_time_ms = IEEE80211_DFS_MIN_CAC_TIME_MS;
9091
a1056b1b 9092 err = rdev_start_radar_detection(rdev, dev, &chandef, cac_time_ms);
04f39047 9093 if (!err) {
9e0e2961 9094 wdev->chandef = chandef;
04f39047
SW		 9095 wdev->cac_started = true;
9096 wdev->cac_start_time = jiffies;
31559f35 9097 wdev->cac_time_ms = cac_time_ms;
04f39047 9098 }
04f39047
SW		 9099 return err;
9100}
9101
30c63115
S		 9102static int nl80211_notify_radar_detection(struct sk_buff *skb,
9103 struct genl_info *info)
9104{
9105 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9106 struct net_device *dev = info->user_ptr[1];
9107 struct wireless_dev *wdev = dev->ieee80211_ptr;
9108 struct wiphy *wiphy = wdev->wiphy;
9109 struct cfg80211_chan_def chandef;
9110 enum nl80211_dfs_regions dfs_region;
9111 int err;
9112
9113 dfs_region = reg_get_dfs_region(wiphy);
9114 if (dfs_region == NL80211_DFS_UNSET) {
9115 GENL_SET_ERR_MSG(info,
9116 "DFS Region is not set. Unexpected Radar indication");
9117 return -EINVAL;
9118 }
9119
9120 err = nl80211_parse_chandef(rdev, info, &chandef);
9121 if (err) {
9122 GENL_SET_ERR_MSG(info, "Unable to extract chandef info");
9123 return err;
9124 }
9125
9126 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
9127 if (err < 0) {
9128 GENL_SET_ERR_MSG(info, "chandef is invalid");
9129 return err;
9130 }
9131
9132 if (err == 0) {
9133 GENL_SET_ERR_MSG(info,
9134 "Unexpected Radar indication for chandef/iftype");
9135 return -EINVAL;
9136 }
9137
9138 /* Do not process this notification if radar is already detected
9139 * by kernel on this channel, and return success.
9140 */
9141 if (chandef.chan->dfs_state == NL80211_DFS_UNAVAILABLE)
9142 return 0;
9143
9144 cfg80211_set_dfs_state(wiphy, &chandef, NL80211_DFS_UNAVAILABLE);
9145
9146 cfg80211_sched_dfs_chan_update(rdev);
9147
a680fe46 9148 rdev->radar_chandef = chandef;
30c63115
S		 9149
9150 /* Propagate this notification to other radios as well */
9151 queue_work(cfg80211_wq, &rdev->propagate_radar_detect_wk);
9152
9153 return 0;
9154}
9155
16ef1fe2
SW		 9156static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
9157{
9158 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9159 struct net_device *dev = info->user_ptr[1];
9160 struct wireless_dev *wdev = dev->ieee80211_ptr;
9161 struct cfg80211_csa_settings params;
a05829a7 9162 struct nlattr **csa_attrs = NULL;
16ef1fe2 9163 int err;
ee4bc9e7 9164 bool need_new_beacon = false;
8d9de16f 9165 bool need_handle_dfs_flag = true;
9a774c78 9166 int len, i;
252e07ca 9167 u32 cs_count;
16ef1fe2
SW		 9168
9169 if (!rdev->ops->channel_switch ||
9170 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH))
9171 return -EOPNOTSUPP;
9172
ee4bc9e7
SW		 9173 switch (dev->ieee80211_ptr->iftype) {
9174 case NL80211_IFTYPE_AP:
9175 case NL80211_IFTYPE_P2P_GO:
9176 need_new_beacon = true;
8d9de16f
BB		 9177 /* For all modes except AP the handle_dfs flag needs to be
9178 * supplied to tell the kernel that userspace will handle radar
9179 * events when they happen. Otherwise a switch to a channel
9180 * requiring DFS will be rejected.
9181 */
9182 need_handle_dfs_flag = false;
ee4bc9e7
SW		 9183
9184 /* useless if AP is not running */
9185 if (!wdev->beacon_interval)
1ff79dfa 9186 return -ENOTCONN;
ee4bc9e7
SW		 9187 break;
9188 case NL80211_IFTYPE_ADHOC:
1ff79dfa
JB		 9189 if (!wdev->ssid_len)
9190 return -ENOTCONN;
9191 break;
c6da674a 9192 case NL80211_IFTYPE_MESH_POINT:
1ff79dfa
JB		 9193 if (!wdev->mesh_id_len)
9194 return -ENOTCONN;
ee4bc9e7
SW		 9195 break;
9196 default:
16ef1fe2 9197 return -EOPNOTSUPP;
ee4bc9e7 9198 }
16ef1fe2
SW		 9199
9200 memset(&params, 0, sizeof(params));
c177db2d 9201 params.beacon_csa.ftm_responder = -1;
16ef1fe2
SW		 9202
9203 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
9204 !info->attrs[NL80211_ATTR_CH_SWITCH_COUNT])
9205 return -EINVAL;
9206
9207 /* only important for AP, IBSS and mesh create IEs internally */
d0a361a5 9208 if (need_new_beacon && !info->attrs[NL80211_ATTR_CSA_IES])
16ef1fe2
SW		 9209 return -EINVAL;
9210
252e07ca
LC		 9211 /* Even though the attribute is u32, the specification says
9212 * u8, so let's make sure we don't overflow.
9213 */
9214 cs_count = nla_get_u32(info->attrs[NL80211_ATTR_CH_SWITCH_COUNT]);
9215 if (cs_count > 255)
9216 return -EINVAL;
9217
9218 params.count = cs_count;
16ef1fe2 9219
ee4bc9e7
SW		 9220 if (!need_new_beacon)
9221 goto skip_beacons;
9222
81e54d08 9223 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_after);
16ef1fe2
SW		 9224 if (err)
9225 return err;
9226
a05829a7
JB		 9227 csa_attrs = kcalloc(NL80211_ATTR_MAX + 1, sizeof(*csa_attrs),
9228 GFP_KERNEL);
9229 if (!csa_attrs)
9230 return -ENOMEM;
9231
8cb08174
JB		 9232 err = nla_parse_nested_deprecated(csa_attrs, NL80211_ATTR_MAX,
9233 info->attrs[NL80211_ATTR_CSA_IES],
9234 nl80211_policy, info->extack);
16ef1fe2 9235 if (err)
a05829a7 9236 goto free;
16ef1fe2 9237
81e54d08 9238 err = nl80211_parse_beacon(rdev, csa_attrs, &params.beacon_csa);
16ef1fe2 9239 if (err)
a05829a7 9240 goto free;
16ef1fe2 9241
a05829a7
JB		 9242 if (!csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]) {
9243 err = -EINVAL;
9244 goto free;
9245 }
16ef1fe2 9246
00c207ed 9247 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
a05829a7
JB		 9248 if (!len || (len % sizeof(u16))) {
9249 err = -EINVAL;
9250 goto free;
9251 }
16ef1fe2 9252
9a774c78
AO		 9253 params.n_counter_offsets_beacon = len / sizeof(u16);
9254 if (rdev->wiphy.max_num_csa_counters &&
9255 (params.n_counter_offsets_beacon >
a05829a7
JB		 9256 rdev->wiphy.max_num_csa_counters)) {
9257 err = -EINVAL;
9258 goto free;
9259 }
16ef1fe2 9260
9a774c78 9261 params.counter_offsets_beacon =
00c207ed 9262 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
9a774c78
AO		 9263
9264 /* sanity checks - counters should fit and be the same */
9265 for (i = 0; i < params.n_counter_offsets_beacon; i++) {
9266 u16 offset = params.counter_offsets_beacon[i];
9267
a05829a7
JB		 9268 if (offset >= params.beacon_csa.tail_len) {
9269 err = -EINVAL;
9270 goto free;
9271 }
9a774c78 9272
a05829a7
JB		 9273 if (params.beacon_csa.tail[offset] != params.count) {
9274 err = -EINVAL;
9275 goto free;
9276 }
9a774c78
AO		 9277 }
9278
00c207ed
JC		 9279 if (csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]) {
9280 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
a05829a7
JB		 9281 if (!len || (len % sizeof(u16))) {
9282 err = -EINVAL;
9283 goto free;
9284 }
16ef1fe2 9285
9a774c78
AO		 9286 params.n_counter_offsets_presp = len / sizeof(u16);
9287 if (rdev->wiphy.max_num_csa_counters &&
ad5987b4 9288 (params.n_counter_offsets_presp >
a05829a7
JB		 9289 rdev->wiphy.max_num_csa_counters)) {
9290 err = -EINVAL;
9291 goto free;
9292 }
9a774c78
AO		 9293
9294 params.counter_offsets_presp =
00c207ed 9295 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
9a774c78
AO		 9296
9297 /* sanity checks - counters should fit and be the same */
9298 for (i = 0; i < params.n_counter_offsets_presp; i++) {
9299 u16 offset = params.counter_offsets_presp[i];
9300
a05829a7
JB		 9301 if (offset >= params.beacon_csa.probe_resp_len) {
9302 err = -EINVAL;
9303 goto free;
9304 }
9a774c78
AO		 9305
9306 if (params.beacon_csa.probe_resp[offset] !=
a05829a7
JB		 9307 params.count) {
9308 err = -EINVAL;
9309 goto free;
9310 }
9a774c78 9311 }
16ef1fe2
SW		 9312 }
9313
ee4bc9e7 9314skip_beacons:
16ef1fe2
SW		 9315 err = nl80211_parse_chandef(rdev, info, &params.chandef);
9316 if (err)
a05829a7 9317 goto free;
16ef1fe2 9318
923b352f 9319 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
a05829a7
JB		 9320 wdev->iftype)) {
9321 err = -EINVAL;
9322 goto free;
9323 }
16ef1fe2 9324
2beb6dab
LC		 9325 err = cfg80211_chandef_dfs_required(wdev->wiphy,
9326 &params.chandef,
9327 wdev->iftype);
9328 if (err < 0)
a05829a7 9329 goto free;
2beb6dab 9330
8d9de16f 9331 if (err > 0) {
2beb6dab 9332 params.radar_required = true;
8d9de16f
BB		 9333 if (need_handle_dfs_flag &&
9334 !nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS])) {
a05829a7
JB		 9335 err = -EINVAL;
9336 goto free;
8d9de16f
BB		 9337 }
9338 }
16ef1fe2 9339
16ef1fe2
SW		 9340 if (info->attrs[NL80211_ATTR_CH_SWITCH_BLOCK_TX])
9341 params.block_tx = true;
9342
c56589ed
SW		 9343 wdev_lock(wdev);
9344 err = rdev_channel_switch(rdev, dev, &params);
9345 wdev_unlock(wdev);
9346
a05829a7
JB		 9347free:
9348 kfree(csa_attrs);
c56589ed 9349 return err;
16ef1fe2
SW		 9350}
9351
9720bb3a
JB		 9352static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
9353 u32 seq, int flags,
2a519311 9354 struct cfg80211_registered_device *rdev,
48ab905d
JB		 9355 struct wireless_dev *wdev,
9356 struct cfg80211_internal_bss *intbss)
2a519311 9357{
48ab905d 9358 struct cfg80211_bss *res = &intbss->pub;
9caf0364 9359 const struct cfg80211_bss_ies *ies;
2a519311
JB		 9360 void *hdr;
9361 struct nlattr *bss;
48ab905d
JB		 9362
9363 ASSERT_WDEV_LOCK(wdev);
2a519311 9364
15e47304 9365 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 9366 NL80211_CMD_NEW_SCAN_RESULTS);
9367 if (!hdr)
9368 return -1;
9369
0a833c29 9370 genl_dump_check_consistent(cb, hdr);
9720bb3a 9371
97990a06
JB		 9372 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation))
9373 goto nla_put_failure;
9374 if (wdev->netdev &&
9360ffd1
DM		 9375 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
9376 goto nla_put_failure;
2dad624e
ND		 9377 if (nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
9378 NL80211_ATTR_PAD))
97990a06 9379 goto nla_put_failure;
2a519311 9380
ae0be8de 9381 bss = nla_nest_start_noflag(msg, NL80211_ATTR_BSS);
2a519311
JB		 9382 if (!bss)
9383 goto nla_put_failure;
9360ffd1 9384 if ((!is_zero_ether_addr(res->bssid) &&
9caf0364 9385 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
9360ffd1 9386 goto nla_put_failure;
9caf0364
JB		 9387
9388 rcu_read_lock();
0e227084
JB		 9389 /* indicate whether we have probe response data or not */
9390 if (rcu_access_pointer(res->proberesp_ies) &&
9391 nla_put_flag(msg, NL80211_BSS_PRESP_DATA))
9392 goto fail_unlock_rcu;
9393
9394 /* this pointer prefers to be pointed to probe response data
9395 * but is always valid
9396 */
9caf0364 9397 ies = rcu_dereference(res->ies);
8cef2c9d 9398 if (ies) {
2dad624e
ND		 9399 if (nla_put_u64_64bit(msg, NL80211_BSS_TSF, ies->tsf,
9400 NL80211_BSS_PAD))
8cef2c9d 9401 goto fail_unlock_rcu;
8cef2c9d
JB		 9402 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
9403 ies->len, ies->data))
9404 goto fail_unlock_rcu;
9caf0364 9405 }
0e227084
JB		 9406
9407 /* and this pointer is always (unless driver didn't know) beacon data */
9caf0364 9408 ies = rcu_dereference(res->beacon_ies);
0e227084 9409 if (ies && ies->from_beacon) {
2dad624e
ND		 9410 if (nla_put_u64_64bit(msg, NL80211_BSS_BEACON_TSF, ies->tsf,
9411 NL80211_BSS_PAD))
8cef2c9d
JB		 9412 goto fail_unlock_rcu;
9413 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
9414 ies->len, ies->data))
9415 goto fail_unlock_rcu;
9caf0364
JB		 9416 }
9417 rcu_read_unlock();
9418
9360ffd1
DM		 9419 if (res->beacon_interval &&
9420 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
9421 goto nla_put_failure;
9422 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
9423 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
942ba88b
TP		 9424 nla_put_u32(msg, NL80211_BSS_FREQUENCY_OFFSET,
9425 res->channel->freq_offset) ||
dcd6eac1 9426 nla_put_u32(msg, NL80211_BSS_CHAN_WIDTH, res->scan_width) ||
9360ffd1
DM		 9427 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
9428 jiffies_to_msecs(jiffies - intbss->ts)))
9429 goto nla_put_failure;
2a519311 9430
1d76250b
AS		 9431 if (intbss->parent_tsf &&
9432 (nla_put_u64_64bit(msg, NL80211_BSS_PARENT_TSF,
9433 intbss->parent_tsf, NL80211_BSS_PAD) ||
9434 nla_put(msg, NL80211_BSS_PARENT_BSSID, ETH_ALEN,
9435 intbss->parent_bssid)))
9436 goto nla_put_failure;
9437
6e19bc4b 9438 if (intbss->ts_boottime &&
2dad624e
ND		 9439 nla_put_u64_64bit(msg, NL80211_BSS_LAST_SEEN_BOOTTIME,
9440 intbss->ts_boottime, NL80211_BSS_PAD))
6e19bc4b
DS		 9441 goto nla_put_failure;
9442
983dafaa
SD		 9443 if (!nl80211_put_signal(msg, intbss->pub.chains,
9444 intbss->pub.chain_signal,
9445 NL80211_BSS_CHAIN_SIGNAL))
9446 goto nla_put_failure;
9447
77965c97 9448 switch (rdev->wiphy.signal_type) {
2a519311 9449 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 9450 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
9451 goto nla_put_failure;
2a519311
JB		 9452 break;
9453 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 9454 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
9455 goto nla_put_failure;
2a519311
JB		 9456 break;
9457 default:
9458 break;
9459 }
9460
48ab905d 9461 switch (wdev->iftype) {
074ac8df 9462 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 9463 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 9464 if (intbss == wdev->current_bss &&
9465 nla_put_u32(msg, NL80211_BSS_STATUS,
9466 NL80211_BSS_STATUS_ASSOCIATED))
9467 goto nla_put_failure;
48ab905d
JB		 9468 break;
9469 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 9470 if (intbss == wdev->current_bss &&
9471 nla_put_u32(msg, NL80211_BSS_STATUS,
9472 NL80211_BSS_STATUS_IBSS_JOINED))
9473 goto nla_put_failure;
48ab905d
JB		 9474 break;
9475 default:
9476 break;
9477 }
9478
2a519311
JB		 9479 nla_nest_end(msg, bss);
9480
053c095a
JB		 9481 genlmsg_end(msg, hdr);
9482 return 0;
2a519311 9483
8cef2c9d
JB		 9484 fail_unlock_rcu:
9485 rcu_read_unlock();
2a519311
JB		 9486 nla_put_failure:
9487 genlmsg_cancel(msg, hdr);
9488 return -EMSGSIZE;
9489}
9490
97990a06 9491static int nl80211_dump_scan(struct sk_buff *skb, struct netlink_callback *cb)
2a519311 9492{
48ab905d 9493 struct cfg80211_registered_device *rdev;
2a519311 9494 struct cfg80211_internal_bss *scan;
48ab905d 9495 struct wireless_dev *wdev;
97990a06 9496 int start = cb->args[2], idx = 0;
2a519311
JB		 9497 int err;
9498
5297c65c 9499 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
a05829a7 9500 if (err)
67748893 9501 return err;
a05829a7
JB		 9502 /* nl80211_prepare_wdev_dump acquired it in the successful case */
9503 __acquire(&rdev->wiphy.mtx);
2a519311 9504
48ab905d
JB		 9505 wdev_lock(wdev);
9506 spin_lock_bh(&rdev->bss_lock);
d1e23c94
DK		 9507
9508 /*
9509 * dump_scan will be called multiple times to break up the scan results
9510 * into multiple messages. It is unlikely that any more bss-es will be
9511 * expired after the first call, so only call only call this on the
9512 * first dump_scan invocation.
9513 */
9514 if (start == 0)
9515 cfg80211_bss_expire(rdev);
48ab905d 9516
9720bb3a
JB		 9517 cb->seq = rdev->bss_generation;
9518
48ab905d 9519 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 9520 if (++idx <= start)
9521 continue;
9720bb3a 9522 if (nl80211_send_bss(skb, cb,
2a519311 9523 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 9524 rdev, wdev, scan) < 0) {
2a519311 9525 idx--;
67748893 9526 break;
2a519311
JB		 9527 }
9528 }
9529
48ab905d
JB		 9530 spin_unlock_bh(&rdev->bss_lock);
9531 wdev_unlock(wdev);
2a519311 9532
97990a06 9533 cb->args[2] = idx;
a05829a7 9534 wiphy_unlock(&rdev->wiphy);
2a519311 9535
67748893 9536 return skb->len;
2a519311
JB		 9537}
9538
15e47304 9539static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
11f78ac3
JB		 9540 int flags, struct net_device *dev,
9541 bool allow_radio_stats,
9542 struct survey_info *survey)
61fa713c
HS		 9543{
9544 void *hdr;
9545 struct nlattr *infoattr;
9546
11f78ac3
JB		 9547 /* skip radio stats if userspace didn't request them */
9548 if (!survey->channel && !allow_radio_stats)
9549 return 0;
9550
15e47304 9551 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 9552 NL80211_CMD_NEW_SURVEY_RESULTS);
9553 if (!hdr)
9554 return -ENOMEM;
9555
9360ffd1
DM		 9556 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9557 goto nla_put_failure;
61fa713c 9558
ae0be8de 9559 infoattr = nla_nest_start_noflag(msg, NL80211_ATTR_SURVEY_INFO);
61fa713c
HS		 9560 if (!infoattr)
9561 goto nla_put_failure;
9562
11f78ac3
JB		 9563 if (survey->channel &&
9564 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
9360ffd1
DM		 9565 survey->channel->center_freq))
9566 goto nla_put_failure;
58ef7c1b
TP		 9567
9568 if (survey->channel && survey->channel->freq_offset &&
9569 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY_OFFSET,
9570 survey->channel->freq_offset))
9571 goto nla_put_failure;
9360ffd1
DM		 9572
9573 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
9574 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
9575 goto nla_put_failure;
9576 if ((survey->filled & SURVEY_INFO_IN_USE) &&
9577 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
9578 goto nla_put_failure;
4ed20beb 9579 if ((survey->filled & SURVEY_INFO_TIME) &&
2dad624e
ND		 9580 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME,
9581 survey->time, NL80211_SURVEY_INFO_PAD))
9360ffd1 9582 goto nla_put_failure;
4ed20beb 9583 if ((survey->filled & SURVEY_INFO_TIME_BUSY) &&
2dad624e
ND		 9584 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BUSY,
9585 survey->time_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 9586 goto nla_put_failure;
4ed20beb 9587 if ((survey->filled & SURVEY_INFO_TIME_EXT_BUSY) &&
2dad624e
ND		 9588 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_EXT_BUSY,
9589 survey->time_ext_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 9590 goto nla_put_failure;
4ed20beb 9591 if ((survey->filled & SURVEY_INFO_TIME_RX) &&
2dad624e
ND		 9592 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_RX,
9593 survey->time_rx, NL80211_SURVEY_INFO_PAD))
9360ffd1 9594 goto nla_put_failure;
4ed20beb 9595 if ((survey->filled & SURVEY_INFO_TIME_TX) &&
2dad624e
ND		 9596 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_TX,
9597 survey->time_tx, NL80211_SURVEY_INFO_PAD))
9360ffd1 9598 goto nla_put_failure;
052536ab 9599 if ((survey->filled & SURVEY_INFO_TIME_SCAN) &&
2dad624e
ND		 9600 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_SCAN,
9601 survey->time_scan, NL80211_SURVEY_INFO_PAD))
052536ab 9602 goto nla_put_failure;
c8cd6e7f
FF		 9603 if ((survey->filled & SURVEY_INFO_TIME_BSS_RX) &&
9604 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BSS_RX,
9605 survey->time_bss_rx, NL80211_SURVEY_INFO_PAD))
9606 goto nla_put_failure;
61fa713c
HS		 9607
9608 nla_nest_end(msg, infoattr);
9609
053c095a
JB		 9610 genlmsg_end(msg, hdr);
9611 return 0;
61fa713c
HS		 9612
9613 nla_put_failure:
9614 genlmsg_cancel(msg, hdr);
9615 return -EMSGSIZE;
9616}
9617
11f78ac3 9618static int nl80211_dump_survey(struct sk_buff *skb, struct netlink_callback *cb)
61fa713c 9619{
50508d94 9620 struct nlattr **attrbuf;
61fa713c 9621 struct survey_info survey;
1b8ec87a 9622 struct cfg80211_registered_device *rdev;
97990a06
JB		 9623 struct wireless_dev *wdev;
9624 int survey_idx = cb->args[2];
61fa713c 9625 int res;
11f78ac3 9626 bool radio_stats;
61fa713c 9627
50508d94
JB		 9628 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
9629 if (!attrbuf)
9630 return -ENOMEM;
9631
5297c65c 9632 res = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
a05829a7
JB		 9633 if (res) {
9634 kfree(attrbuf);
9635 return res;
9636 }
9637 /* nl80211_prepare_wdev_dump acquired it in the successful case */
9638 __acquire(&rdev->wiphy.mtx);
61fa713c 9639
11f78ac3 9640 /* prepare_wdev_dump parsed the attributes */
c90c39da 9641 radio_stats = attrbuf[NL80211_ATTR_SURVEY_RADIO_STATS];
11f78ac3 9642
97990a06
JB		 9643 if (!wdev->netdev) {
9644 res = -EINVAL;
9645 goto out_err;
9646 }
9647
1b8ec87a 9648 if (!rdev->ops->dump_survey) {
61fa713c
HS		 9649 res = -EOPNOTSUPP;
9650 goto out_err;
9651 }
9652
9653 while (1) {
1b8ec87a 9654 res = rdev_dump_survey(rdev, wdev->netdev, survey_idx, &survey);
61fa713c
HS		 9655 if (res == -ENOENT)
9656 break;
9657 if (res)
9658 goto out_err;
9659
11f78ac3
JB		 9660 /* don't send disabled channels, but do send non-channel data */
9661 if (survey.channel &&
9662 survey.channel->flags & IEEE80211_CHAN_DISABLED) {
180cdc79
LR		 9663 survey_idx++;
9664 continue;
9665 }
9666
61fa713c 9667 if (nl80211_send_survey(skb,
15e47304 9668 NETLINK_CB(cb->skb).portid,
61fa713c 9669 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11f78ac3 9670 wdev->netdev, radio_stats, &survey) < 0)
61fa713c
HS		 9671 goto out;
9672 survey_idx++;
9673 }
9674
9675 out:
97990a06 9676 cb->args[2] = survey_idx;
61fa713c
HS		 9677 res = skb->len;
9678 out_err:
50508d94 9679 kfree(attrbuf);
a05829a7 9680 wiphy_unlock(&rdev->wiphy);
61fa713c
HS		 9681 return res;
9682}
9683
b23aa676
SO		 9684static bool nl80211_valid_wpa_versions(u32 wpa_versions)
9685{
9686 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
cc3e14c2
CHH		 9687 NL80211_WPA_VERSION_2 |
9688 NL80211_WPA_VERSION_3));
b23aa676
SO		 9689}
9690
636a5d36
JM		 9691static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
9692{
4c476991
JB		 9693 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9694 struct net_device *dev = info->user_ptr[1];
19957bb3 9695 struct ieee80211_channel *chan;
11b6b5a4
JM		 9696 const u8 *bssid, *ssid, *ie = NULL, *auth_data = NULL;
9697 int err, ssid_len, ie_len = 0, auth_data_len = 0;
19957bb3 9698 enum nl80211_auth_type auth_type;
fffd0934 9699 struct key_parse key;
d5cdfacb 9700 bool local_state_change;
942ba88b 9701 u32 freq;
636a5d36 9702
f4a11bb0
JB		 9703 if (!info->attrs[NL80211_ATTR_MAC])
9704 return -EINVAL;
9705
1778092e
JM		 9706 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
9707 return -EINVAL;
9708
19957bb3
JB		 9709 if (!info->attrs[NL80211_ATTR_SSID])
9710 return -EINVAL;
9711
9712 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
9713 return -EINVAL;
9714
fffd0934
JB		 9715 err = nl80211_parse_key(info, &key);
9716 if (err)
9717 return err;
9718
9719 if (key.idx >= 0) {
e31b8213
JB		 9720 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
9721 return -EINVAL;
fffd0934
JB		 9722 if (!key.p.key || !key.p.key_len)
9723 return -EINVAL;
9724 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
9725 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
9726 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
9727 key.p.key_len != WLAN_KEY_LEN_WEP104))
9728 return -EINVAL;
b6b5555b 9729 if (key.idx > 3)
fffd0934
JB		 9730 return -EINVAL;
9731 } else {
9732 key.p.key_len = 0;
9733 key.p.key = NULL;
9734 }
9735
afea0b7a
JB		 9736 if (key.idx >= 0) {
9737 int i;
9738 bool ok = false;
7a087e74 9739
afea0b7a
JB		 9740 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
9741 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
9742 ok = true;
9743 break;
9744 }
9745 }
4c476991
JB		 9746 if (!ok)
9747 return -EINVAL;
afea0b7a
JB		 9748 }
9749
4c476991
JB		 9750 if (!rdev->ops->auth)
9751 return -EOPNOTSUPP;
636a5d36 9752
074ac8df 9753 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9754 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9755 return -EOPNOTSUPP;
eec60b03 9756
19957bb3 9757 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
942ba88b
TP		 9758 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
9759 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
9760 freq +=
9761 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
9762
9763 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 9764 if (!chan)
4c476991 9765 return -EINVAL;
636a5d36 9766
19957bb3
JB		 9767 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9768 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 9769
9770 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9771 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9772 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9773 }
9774
19957bb3 9775 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 9776 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 9777 return -EINVAL;
636a5d36 9778
63181060
JM		 9779 if ((auth_type == NL80211_AUTHTYPE_SAE ||
9780 auth_type == NL80211_AUTHTYPE_FILS_SK ||
9781 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
9782 auth_type == NL80211_AUTHTYPE_FILS_PK) &&
11b6b5a4 9783 !info->attrs[NL80211_ATTR_AUTH_DATA])
e39e5b5e
JM		 9784 return -EINVAL;
9785
11b6b5a4 9786 if (info->attrs[NL80211_ATTR_AUTH_DATA]) {
63181060
JM		 9787 if (auth_type != NL80211_AUTHTYPE_SAE &&
9788 auth_type != NL80211_AUTHTYPE_FILS_SK &&
9789 auth_type != NL80211_AUTHTYPE_FILS_SK_PFS &&
9790 auth_type != NL80211_AUTHTYPE_FILS_PK)
e39e5b5e 9791 return -EINVAL;
11b6b5a4
JM		 9792 auth_data = nla_data(info->attrs[NL80211_ATTR_AUTH_DATA]);
9793 auth_data_len = nla_len(info->attrs[NL80211_ATTR_AUTH_DATA]);
e39e5b5e
JM		 9794 }
9795
d5cdfacb
JM		 9796 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
9797
95de817b
JB		 9798 /*
9799 * Since we no longer track auth state, ignore
9800 * requests to only change local state.
9801 */
9802 if (local_state_change)
9803 return 0;
9804
91bf9b26
JB		 9805 wdev_lock(dev->ieee80211_ptr);
9806 err = cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
9807 ssid, ssid_len, ie, ie_len,
9808 key.p.key, key.p.key_len, key.idx,
11b6b5a4 9809 auth_data, auth_data_len);
91bf9b26
JB		 9810 wdev_unlock(dev->ieee80211_ptr);
9811 return err;
636a5d36
JM		 9812}
9813
64bf3d4b
DK		 9814static int validate_pae_over_nl80211(struct cfg80211_registered_device *rdev,
9815 struct genl_info *info)
9816{
9817 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
9818 GENL_SET_ERR_MSG(info, "SOCKET_OWNER not set");
9819 return -EINVAL;
9820 }
9821
9822 if (!rdev->ops->tx_control_port ||
9823 !wiphy_ext_feature_isset(&rdev->wiphy,
9824 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
9825 return -EOPNOTSUPP;
9826
9827 return 0;
9828}
9829
c0692b8f
JB		 9830static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
9831 struct genl_info *info,
3dc27d25
JB		 9832 struct cfg80211_crypto_settings *settings,
9833 int cipher_limit)
b23aa676 9834{
c0b2bbd8
JB		 9835 memset(settings, 0, sizeof(*settings));
9836
b23aa676
SO		 9837 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
9838
c0692b8f
JB		 9839 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
9840 u16 proto;
7a087e74 9841
c0692b8f
JB		 9842 proto = nla_get_u16(
9843 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
9844 settings->control_port_ethertype = cpu_to_be16(proto);
9845 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
9846 proto != ETH_P_PAE)
9847 return -EINVAL;
9848 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
9849 settings->control_port_no_encrypt = true;
9850 } else
9851 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
9852
64bf3d4b
DK		 9853 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
9854 int r = validate_pae_over_nl80211(rdev, info);
9855
9856 if (r < 0)
9857 return r;
9858
9859 settings->control_port_over_nl80211 = true;
7f3f96ce
MT		 9860
9861 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_PREAUTH])
9862 settings->control_port_no_preauth = true;
64bf3d4b
DK		 9863 }
9864
b23aa676
SO		 9865 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
9866 void *data;
9867 int len, i;
9868
9869 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
9870 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
9871 settings->n_ciphers_pairwise = len / sizeof(u32);
9872
9873 if (len % sizeof(u32))
9874 return -EINVAL;
9875
3dc27d25 9876 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 9877 return -EINVAL;
9878
9879 memcpy(settings->ciphers_pairwise, data, len);
9880
9881 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 9882 if (!cfg80211_supported_cipher_suite(
9883 &rdev->wiphy,
b23aa676
SO		 9884 settings->ciphers_pairwise[i]))
9885 return -EINVAL;
9886 }
9887
9888 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
9889 settings->cipher_group =
9890 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 9891 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
9892 settings->cipher_group))
b23aa676
SO		 9893 return -EINVAL;
9894 }
9895
9896 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
9897 settings->wpa_versions =
9898 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
9899 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
9900 return -EINVAL;
9901 }
9902
9903 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
9904 void *data;
6d30240e 9905 int len;
b23aa676
SO		 9906
9907 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
9908 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
9909 settings->n_akm_suites = len / sizeof(u32);
9910
9911 if (len % sizeof(u32))
9912 return -EINVAL;
9913
1b9ca027
JM		 9914 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
9915 return -EINVAL;
9916
b23aa676 9917 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 9918 }
9919
91b5ab62
EP		 9920 if (info->attrs[NL80211_ATTR_PMK]) {
9921 if (nla_len(info->attrs[NL80211_ATTR_PMK]) != WLAN_PMK_LEN)
9922 return -EINVAL;
9923 if (!wiphy_ext_feature_isset(&rdev->wiphy,
f9662274
CHH		 9924 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_PSK) &&
9925 !wiphy_ext_feature_isset(&rdev->wiphy,
9926 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_AP_PSK))
91b5ab62
EP		 9927 return -EINVAL;
9928 settings->psk = nla_data(info->attrs[NL80211_ATTR_PMK]);
9929 }
9930
26f7044e
CHH		 9931 if (info->attrs[NL80211_ATTR_SAE_PASSWORD]) {
9932 if (!wiphy_ext_feature_isset(&rdev->wiphy,
2831a631
CHH		 9933 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
9934 !wiphy_ext_feature_isset(&rdev->wiphy,
9935 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP))
26f7044e
CHH		 9936 return -EINVAL;
9937 settings->sae_pwd =
9938 nla_data(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
9939 settings->sae_pwd_len =
9940 nla_len(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
9941 }
9942
9f0ffa41
RD		 9943 if (info->attrs[NL80211_ATTR_SAE_PWE])
9944 settings->sae_pwe =
9945 nla_get_u8(info->attrs[NL80211_ATTR_SAE_PWE]);
9946 else
9947 settings->sae_pwe = NL80211_SAE_PWE_UNSPECIFIED;
9948
b23aa676
SO		 9949 return 0;
9950}
9951
636a5d36
JM		 9952static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
9953{
4c476991
JB		 9954 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9955 struct net_device *dev = info->user_ptr[1];
f444de05 9956 struct ieee80211_channel *chan;
f62fab73
JB		 9957 struct cfg80211_assoc_request req = {};
9958 const u8 *bssid, *ssid;
9959 int err, ssid_len = 0;
942ba88b 9960 u32 freq;
636a5d36 9961
bad29297
AZ		 9962 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9963 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9964 return -EPERM;
9965
f4a11bb0 9966 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 9967 !info->attrs[NL80211_ATTR_SSID] ||
9968 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 9969 return -EINVAL;
9970
4c476991
JB		 9971 if (!rdev->ops->assoc)
9972 return -EOPNOTSUPP;
636a5d36 9973
074ac8df 9974 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9975 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9976 return -EOPNOTSUPP;
eec60b03 9977
19957bb3 9978 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9979
942ba88b
TP		 9980 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
9981 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
9982 freq +=
9983 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
9984 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 9985 if (!chan)
4c476991 9986 return -EINVAL;
636a5d36 9987
19957bb3
JB		 9988 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9989 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 9990
9991 if (info->attrs[NL80211_ATTR_IE]) {
f62fab73
JB		 9992 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9993 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9994 }
9995
dc6382ce 9996 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 9997 enum nl80211_mfp mfp =
dc6382ce 9998 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 9999 if (mfp == NL80211_MFP_REQUIRED)
f62fab73 10000 req.use_mfp = true;
4c476991
JB		 10001 else if (mfp != NL80211_MFP_NO)
10002 return -EINVAL;
dc6382ce
JM		 10003 }
10004
3e5d7649 10005 if (info->attrs[NL80211_ATTR_PREV_BSSID])
f62fab73 10006 req.prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3e5d7649 10007
7e7c8926 10008 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
f62fab73 10009 req.flags |= ASSOC_REQ_DISABLE_HT;
7e7c8926
BG		 10010
10011 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
f62fab73
JB		 10012 memcpy(&req.ht_capa_mask,
10013 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10014 sizeof(req.ht_capa_mask));
7e7c8926
BG		 10015
10016 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
f62fab73 10017 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
7e7c8926 10018 return -EINVAL;
f62fab73
JB		 10019 memcpy(&req.ht_capa,
10020 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10021 sizeof(req.ht_capa));
7e7c8926
BG		 10022 }
10023
ee2aca34 10024 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
f62fab73 10025 req.flags |= ASSOC_REQ_DISABLE_VHT;
ee2aca34 10026
b6db0f89
BG		 10027 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HE]))
10028 req.flags |= ASSOC_REQ_DISABLE_HE;
10029
ee2aca34 10030 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
f62fab73
JB		 10031 memcpy(&req.vht_capa_mask,
10032 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
10033 sizeof(req.vht_capa_mask));
ee2aca34
JB		 10034
10035 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
f62fab73 10036 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
ee2aca34 10037 return -EINVAL;
f62fab73
JB		 10038 memcpy(&req.vht_capa,
10039 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
10040 sizeof(req.vht_capa));
ee2aca34
JB		 10041 }
10042
bab5ab7d 10043 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 10044 if (!((rdev->wiphy.features &
10045 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
10046 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
10047 !wiphy_ext_feature_isset(&rdev->wiphy,
10048 NL80211_EXT_FEATURE_RRM))
bab5ab7d
AK		 10049 return -EINVAL;
10050 req.flags |= ASSOC_REQ_USE_RRM;
10051 }
10052
348bd456
JM		 10053 if (info->attrs[NL80211_ATTR_FILS_KEK]) {
10054 req.fils_kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
10055 req.fils_kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
10056 if (!info->attrs[NL80211_ATTR_FILS_NONCES])
10057 return -EINVAL;
10058 req.fils_nonces =
10059 nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
10060 }
10061
d2b7588a
TP		 10062 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]) {
10063 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY])
10064 return -EINVAL;
10065 memcpy(&req.s1g_capa_mask,
10066 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]),
10067 sizeof(req.s1g_capa_mask));
10068 }
10069
10070 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY]) {
10071 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK])
10072 return -EINVAL;
10073 memcpy(&req.s1g_capa,
10074 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY]),
10075 sizeof(req.s1g_capa));
10076 }
10077
f62fab73 10078 err = nl80211_crypto_settings(rdev, info, &req.crypto, 1);
91bf9b26
JB		 10079 if (!err) {
10080 wdev_lock(dev->ieee80211_ptr);
bd2522b1 10081
f62fab73
JB		 10082 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid,
10083 ssid, ssid_len, &req);
bd2522b1
AZ		 10084
10085 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10086 dev->ieee80211_ptr->conn_owner_nlportid =
10087 info->snd_portid;
10088 memcpy(dev->ieee80211_ptr->disconnect_bssid,
10089 bssid, ETH_ALEN);
10090 }
10091
91bf9b26
JB		 10092 wdev_unlock(dev->ieee80211_ptr);
10093 }
636a5d36 10094
636a5d36
JM		 10095 return err;
10096}
10097
10098static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
10099{
4c476991
JB		 10100 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10101 struct net_device *dev = info->user_ptr[1];
19957bb3 10102 const u8 *ie = NULL, *bssid;
91bf9b26 10103 int ie_len = 0, err;
19957bb3 10104 u16 reason_code;
d5cdfacb 10105 bool local_state_change;
636a5d36 10106
bad29297
AZ		 10107 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10108 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10109 return -EPERM;
10110
f4a11bb0
JB		 10111 if (!info->attrs[NL80211_ATTR_MAC])
10112 return -EINVAL;
10113
10114 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10115 return -EINVAL;
10116
4c476991
JB		 10117 if (!rdev->ops->deauth)
10118 return -EOPNOTSUPP;
636a5d36 10119
074ac8df 10120 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10121 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10122 return -EOPNOTSUPP;
eec60b03 10123
19957bb3 10124 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 10125
19957bb3
JB		 10126 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10127 if (reason_code == 0) {
f4a11bb0 10128 /* Reason Code 0 is reserved */
4c476991 10129 return -EINVAL;
255e737e 10130 }
636a5d36
JM		 10131
10132 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 10133 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10134 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10135 }
10136
d5cdfacb
JM		 10137 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10138
91bf9b26
JB		 10139 wdev_lock(dev->ieee80211_ptr);
10140 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
10141 local_state_change);
10142 wdev_unlock(dev->ieee80211_ptr);
10143 return err;
636a5d36
JM		 10144}
10145
10146static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
10147{
4c476991
JB		 10148 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10149 struct net_device *dev = info->user_ptr[1];
19957bb3 10150 const u8 *ie = NULL, *bssid;
91bf9b26 10151 int ie_len = 0, err;
19957bb3 10152 u16 reason_code;
d5cdfacb 10153 bool local_state_change;
636a5d36 10154
bad29297
AZ		 10155 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10156 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10157 return -EPERM;
10158
f4a11bb0
JB		 10159 if (!info->attrs[NL80211_ATTR_MAC])
10160 return -EINVAL;
10161
10162 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10163 return -EINVAL;
10164
4c476991
JB		 10165 if (!rdev->ops->disassoc)
10166 return -EOPNOTSUPP;
636a5d36 10167
074ac8df 10168 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10169 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10170 return -EOPNOTSUPP;
eec60b03 10171
19957bb3 10172 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 10173
19957bb3
JB		 10174 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10175 if (reason_code == 0) {
f4a11bb0 10176 /* Reason Code 0 is reserved */
4c476991 10177 return -EINVAL;
255e737e 10178 }
636a5d36
JM		 10179
10180 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 10181 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10182 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10183 }
10184
d5cdfacb
JM		 10185 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10186
91bf9b26
JB		 10187 wdev_lock(dev->ieee80211_ptr);
10188 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
10189 local_state_change);
10190 wdev_unlock(dev->ieee80211_ptr);
10191 return err;
636a5d36
JM		 10192}
10193
dd5b4cc7
FF		 10194static bool
10195nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
57fbcce3 10196 int mcast_rate[NUM_NL80211_BANDS],
dd5b4cc7
FF		 10197 int rateval)
10198{
10199 struct wiphy *wiphy = &rdev->wiphy;
10200 bool found = false;
10201 int band, i;
10202
57fbcce3 10203 for (band = 0; band < NUM_NL80211_BANDS; band++) {
dd5b4cc7
FF		 10204 struct ieee80211_supported_band *sband;
10205
10206 sband = wiphy->bands[band];
10207 if (!sband)
10208 continue;
10209
10210 for (i = 0; i < sband->n_bitrates; i++) {
10211 if (sband->bitrates[i].bitrate == rateval) {
10212 mcast_rate[band] = i + 1;
10213 found = true;
10214 break;
10215 }
10216 }
10217 }
10218
10219 return found;
10220}
10221
04a773ad
JB		 10222static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
10223{
4c476991
JB		 10224 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10225 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 10226 struct cfg80211_ibss_params ibss;
10227 struct wiphy *wiphy;
fffd0934 10228 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 10229 int err;
10230
8e30bc55
JB		 10231 memset(&ibss, 0, sizeof(ibss));
10232
683b6d3b 10233 if (!info->attrs[NL80211_ATTR_SSID] ||
04a773ad
JB		 10234 !nla_len(info->attrs[NL80211_ATTR_SSID]))
10235 return -EINVAL;
10236
8e30bc55
JB		 10237 ibss.beacon_interval = 100;
10238
12d20fc9 10239 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL])
8e30bc55
JB		 10240 ibss.beacon_interval =
10241 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 10242
0c317a02
PK		 10243 err = cfg80211_validate_beacon_int(rdev, NL80211_IFTYPE_ADHOC,
10244 ibss.beacon_interval);
12d20fc9
PK		 10245 if (err)
10246 return err;
8e30bc55 10247
4c476991
JB		 10248 if (!rdev->ops->join_ibss)
10249 return -EOPNOTSUPP;
04a773ad 10250
4c476991
JB		 10251 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
10252 return -EOPNOTSUPP;
04a773ad 10253
79c97e97 10254 wiphy = &rdev->wiphy;
04a773ad 10255
39193498 10256 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 10257 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 10258
10259 if (!is_valid_ether_addr(ibss.bssid))
10260 return -EINVAL;
10261 }
04a773ad
JB		 10262 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10263 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10264
10265 if (info->attrs[NL80211_ATTR_IE]) {
10266 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10267 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10268 }
10269
683b6d3b
JB		 10270 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
10271 if (err)
10272 return err;
04a773ad 10273
174e0cd2
IP		 10274 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef,
10275 NL80211_IFTYPE_ADHOC))
54858ee5
AS		 10276 return -EINVAL;
10277
2f301ab2 10278 switch (ibss.chandef.width) {
bf372645
SW		 10279 case NL80211_CHAN_WIDTH_5:
10280 case NL80211_CHAN_WIDTH_10:
2f301ab2
SW		 10281 case NL80211_CHAN_WIDTH_20_NOHT:
10282 break;
10283 case NL80211_CHAN_WIDTH_20:
10284 case NL80211_CHAN_WIDTH_40:
ffc11991
JD		 10285 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
10286 return -EINVAL;
10287 break;
10288 case NL80211_CHAN_WIDTH_80:
10289 case NL80211_CHAN_WIDTH_80P80:
10290 case NL80211_CHAN_WIDTH_160:
10291 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
10292 return -EINVAL;
10293 if (!wiphy_ext_feature_isset(&rdev->wiphy,
10294 NL80211_EXT_FEATURE_VHT_IBSS))
10295 return -EINVAL;
10296 break;
2f301ab2 10297 default:
c04d6150 10298 return -EINVAL;
2f301ab2 10299 }
db9c64cf 10300
04a773ad 10301 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 10302 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
10303
fbd2c8dc
TP		 10304 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
10305 u8 *rates =
10306 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
10307 int n_rates =
10308 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
10309 struct ieee80211_supported_band *sband =
683b6d3b 10310 wiphy->bands[ibss.chandef.chan->band];
fbd2c8dc 10311
34850ab2
JB		 10312 err = ieee80211_get_ratemask(sband, rates, n_rates,
10313 &ibss.basic_rates);
10314 if (err)
10315 return err;
fbd2c8dc 10316 }
dd5b4cc7 10317
803768f5
SW		 10318 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
10319 memcpy(&ibss.ht_capa_mask,
10320 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10321 sizeof(ibss.ht_capa_mask));
10322
10323 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
10324 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
10325 return -EINVAL;
10326 memcpy(&ibss.ht_capa,
10327 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10328 sizeof(ibss.ht_capa));
10329 }
10330
dd5b4cc7
FF		 10331 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
10332 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
10333 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
10334 return -EINVAL;
fbd2c8dc 10335
4c476991 10336 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 10337 bool no_ht = false;
10338
768075eb 10339 connkeys = nl80211_parse_connkeys(rdev, info, &no_ht);
4c476991
JB		 10340 if (IS_ERR(connkeys))
10341 return PTR_ERR(connkeys);
de7044ee 10342
3d9d1d66
JB		 10343 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
10344 no_ht) {
453431a5 10345 kfree_sensitive(connkeys);
de7044ee
SM		 10346 return -EINVAL;
10347 }
4c476991 10348 }
04a773ad 10349
267335d6
AQ		 10350 ibss.control_port =
10351 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
10352
c3bfe1f6
DK		 10353 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
10354 int r = validate_pae_over_nl80211(rdev, info);
10355
d350a0f4 10356 if (r < 0) {
453431a5 10357 kfree_sensitive(connkeys);
c3bfe1f6 10358 return r;
d350a0f4 10359 }
c3bfe1f6
DK		 10360
10361 ibss.control_port_over_nl80211 = true;
10362 }
10363
5336fa88
SW		 10364 ibss.userspace_handles_dfs =
10365 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
10366
f8d16d3e
DK		 10367 wdev_lock(dev->ieee80211_ptr);
10368 err = __cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934 10369 if (err)
453431a5 10370 kfree_sensitive(connkeys);
f8d16d3e
DK		 10371 else if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
10372 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
10373 wdev_unlock(dev->ieee80211_ptr);
10374
04a773ad
JB		 10375 return err;
10376}
10377
10378static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
10379{
4c476991
JB		 10380 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10381 struct net_device *dev = info->user_ptr[1];
04a773ad 10382
4c476991
JB		 10383 if (!rdev->ops->leave_ibss)
10384 return -EOPNOTSUPP;
04a773ad 10385
4c476991
JB		 10386 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
10387 return -EOPNOTSUPP;
04a773ad 10388
4c476991 10389 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 10390}
10391
f4e583c8
AQ		 10392static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
10393{
10394 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10395 struct net_device *dev = info->user_ptr[1];
57fbcce3 10396 int mcast_rate[NUM_NL80211_BANDS];
f4e583c8
AQ		 10397 u32 nla_rate;
10398 int err;
10399
10400 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
876dc930
BVB		 10401 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
10402 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_OCB)
f4e583c8
AQ		 10403 return -EOPNOTSUPP;
10404
10405 if (!rdev->ops->set_mcast_rate)
10406 return -EOPNOTSUPP;
10407
10408 memset(mcast_rate, 0, sizeof(mcast_rate));
10409
10410 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
10411 return -EINVAL;
10412
10413 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
10414 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
10415 return -EINVAL;
10416
a1056b1b 10417 err = rdev_set_mcast_rate(rdev, dev, mcast_rate);
f4e583c8
AQ		 10418
10419 return err;
10420}
10421
ad7e718c
JB		 10422static struct sk_buff *
10423__cfg80211_alloc_vendor_skb(struct cfg80211_registered_device *rdev,
6c09e791
AK		 10424 struct wireless_dev *wdev, int approxlen,
10425 u32 portid, u32 seq, enum nl80211_commands cmd,
567ffc35
JB		 10426 enum nl80211_attrs attr,
10427 const struct nl80211_vendor_cmd_info *info,
10428 gfp_t gfp)
ad7e718c
JB		 10429{
10430 struct sk_buff *skb;
10431 void *hdr;
10432 struct nlattr *data;
10433
10434 skb = nlmsg_new(approxlen + 100, gfp);
10435 if (!skb)
10436 return NULL;
10437
10438 hdr = nl80211hdr_put(skb, portid, seq, 0, cmd);
10439 if (!hdr) {
10440 kfree_skb(skb);
10441 return NULL;
10442 }
10443
10444 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
10445 goto nla_put_failure;
567ffc35
JB		 10446
10447 if (info) {
10448 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_ID,
10449 info->vendor_id))
10450 goto nla_put_failure;
10451 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_SUBCMD,
10452 info->subcmd))
10453 goto nla_put_failure;
10454 }
10455
6c09e791 10456 if (wdev) {
2dad624e
ND		 10457 if (nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
10458 wdev_id(wdev), NL80211_ATTR_PAD))
6c09e791
AK		 10459 goto nla_put_failure;
10460 if (wdev->netdev &&
10461 nla_put_u32(skb, NL80211_ATTR_IFINDEX,
10462 wdev->netdev->ifindex))
10463 goto nla_put_failure;
10464 }
10465
ae0be8de 10466 data = nla_nest_start_noflag(skb, attr);
76e1fb4b
JB		 10467 if (!data)
10468 goto nla_put_failure;
ad7e718c
JB		 10469
10470 ((void **)skb->cb)[0] = rdev;
10471 ((void **)skb->cb)[1] = hdr;
10472 ((void **)skb->cb)[2] = data;
10473
10474 return skb;
10475
10476 nla_put_failure:
10477 kfree_skb(skb);
10478 return NULL;
10479}
f4e583c8 10480
e03ad6ea 10481struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
6c09e791 10482 struct wireless_dev *wdev,
e03ad6ea
JB		 10483 enum nl80211_commands cmd,
10484 enum nl80211_attrs attr,
55c1fdf0 10485 unsigned int portid,
e03ad6ea
JB		 10486 int vendor_event_idx,
10487 int approxlen, gfp_t gfp)
10488{
f26cbf40 10489 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
e03ad6ea
JB		 10490 const struct nl80211_vendor_cmd_info *info;
10491
10492 switch (cmd) {
10493 case NL80211_CMD_TESTMODE:
10494 if (WARN_ON(vendor_event_idx != -1))
10495 return NULL;
10496 info = NULL;
10497 break;
10498 case NL80211_CMD_VENDOR:
10499 if (WARN_ON(vendor_event_idx < 0 ||
10500 vendor_event_idx >= wiphy->n_vendor_events))
10501 return NULL;
10502 info = &wiphy->vendor_events[vendor_event_idx];
10503 break;
10504 default:
10505 WARN_ON(1);
10506 return NULL;
10507 }
10508
55c1fdf0 10509 return __cfg80211_alloc_vendor_skb(rdev, wdev, approxlen, portid, 0,
e03ad6ea
JB		 10510 cmd, attr, info, gfp);
10511}
10512EXPORT_SYMBOL(__cfg80211_alloc_event_skb);
10513
10514void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp)
10515{
10516 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
10517 void *hdr = ((void **)skb->cb)[1];
55c1fdf0 10518 struct nlmsghdr *nlhdr = nlmsg_hdr(skb);
e03ad6ea
JB		 10519 struct nlattr *data = ((void **)skb->cb)[2];
10520 enum nl80211_multicast_groups mcgrp = NL80211_MCGRP_TESTMODE;
10521
bd8c78e7
JB		 10522 /* clear CB data for netlink core to own from now on */
10523 memset(skb->cb, 0, sizeof(skb->cb));
10524
e03ad6ea
JB		 10525 nla_nest_end(skb, data);
10526 genlmsg_end(skb, hdr);
10527
55c1fdf0
JB		 10528 if (nlhdr->nlmsg_pid) {
10529 genlmsg_unicast(wiphy_net(&rdev->wiphy), skb,
10530 nlhdr->nlmsg_pid);
10531 } else {
10532 if (data->nla_type == NL80211_ATTR_VENDOR_DATA)
10533 mcgrp = NL80211_MCGRP_VENDOR;
e03ad6ea 10534
55c1fdf0
JB		 10535 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
10536 skb, 0, mcgrp, gfp);
10537 }
e03ad6ea
JB		 10538}
10539EXPORT_SYMBOL(__cfg80211_send_event_skb);
10540
aff89a9b 10541#ifdef CONFIG_NL80211_TESTMODE
aff89a9b
JB		 10542static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
10543{
4c476991 10544 struct cfg80211_registered_device *rdev = info->user_ptr[0];
a05829a7 10545 struct wireless_dev *wdev;
aff89a9b
JB		 10546 int err;
10547
a05829a7
JB		 10548 lockdep_assert_held(&rdev->wiphy.mtx);
10549
10550 wdev = __cfg80211_wdev_from_attrs(rdev, genl_info_net(info),
10551 info->attrs);
10552
fc73f11f
DS		 10553 if (!rdev->ops->testmode_cmd)
10554 return -EOPNOTSUPP;
10555
10556 if (IS_ERR(wdev)) {
10557 err = PTR_ERR(wdev);
10558 if (err != -EINVAL)
10559 return err;
10560 wdev = NULL;
10561 } else if (wdev->wiphy != &rdev->wiphy) {
10562 return -EINVAL;
10563 }
10564
aff89a9b
JB		 10565 if (!info->attrs[NL80211_ATTR_TESTDATA])
10566 return -EINVAL;
10567
ad7e718c 10568 rdev->cur_cmd_info = info;
fc73f11f 10569 err = rdev_testmode_cmd(rdev, wdev,
aff89a9b
JB		 10570 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
10571 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
ad7e718c 10572 rdev->cur_cmd_info = NULL;
aff89a9b 10573
aff89a9b
JB		 10574 return err;
10575}
10576
71063f0e
WYG		 10577static int nl80211_testmode_dump(struct sk_buff *skb,
10578 struct netlink_callback *cb)
10579{
00918d33 10580 struct cfg80211_registered_device *rdev;
50508d94 10581 struct nlattr **attrbuf = NULL;
71063f0e
WYG		 10582 int err;
10583 long phy_idx;
10584 void *data = NULL;
10585 int data_len = 0;
10586
5fe231e8
JB		 10587 rtnl_lock();
10588
71063f0e
WYG		 10589 if (cb->args[0]) {
10590 /*
10591 * 0 is a valid index, but not valid for args[0],
10592 * so we need to offset by 1.
10593 */
10594 phy_idx = cb->args[0] - 1;
a4956dca
LC		 10595
10596 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
10597 if (!rdev) {
10598 err = -ENOENT;
10599 goto out_err;
10600 }
71063f0e 10601 } else {
50508d94
JB		 10602 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
10603 GFP_KERNEL);
10604 if (!attrbuf) {
10605 err = -ENOMEM;
10606 goto out_err;
10607 }
c90c39da 10608
8cb08174
JB		 10609 err = nlmsg_parse_deprecated(cb->nlh,
10610 GENL_HDRLEN + nl80211_fam.hdrsize,
10611 attrbuf, nl80211_fam.maxattr,
10612 nl80211_policy, NULL);
71063f0e 10613 if (err)
5fe231e8 10614 goto out_err;
00918d33 10615
c90c39da 10616 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
2bd7e35d 10617 if (IS_ERR(rdev)) {
5fe231e8
JB		 10618 err = PTR_ERR(rdev);
10619 goto out_err;
00918d33 10620 }
2bd7e35d 10621 phy_idx = rdev->wiphy_idx;
2bd7e35d 10622
c90c39da
JB		 10623 if (attrbuf[NL80211_ATTR_TESTDATA])
10624 cb->args[1] = (long)attrbuf[NL80211_ATTR_TESTDATA];
71063f0e
WYG		 10625 }
10626
10627 if (cb->args[1]) {
10628 data = nla_data((void *)cb->args[1]);
10629 data_len = nla_len((void *)cb->args[1]);
10630 }
10631
00918d33 10632 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 10633 err = -EOPNOTSUPP;
10634 goto out_err;
10635 }
10636
10637 while (1) {
15e47304 10638 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 10639 cb->nlh->nlmsg_seq, NLM_F_MULTI,
10640 NL80211_CMD_TESTMODE);
10641 struct nlattr *tmdata;
10642
cb35fba3
DC		 10643 if (!hdr)
10644 break;
10645
9360ffd1 10646 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 10647 genlmsg_cancel(skb, hdr);
10648 break;
10649 }
10650
ae0be8de 10651 tmdata = nla_nest_start_noflag(skb, NL80211_ATTR_TESTDATA);
71063f0e
WYG		 10652 if (!tmdata) {
10653 genlmsg_cancel(skb, hdr);
10654 break;
10655 }
e35e4d28 10656 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 10657 nla_nest_end(skb, tmdata);
10658
10659 if (err == -ENOBUFS || err == -ENOENT) {
10660 genlmsg_cancel(skb, hdr);
10661 break;
10662 } else if (err) {
10663 genlmsg_cancel(skb, hdr);
10664 goto out_err;
10665 }
10666
10667 genlmsg_end(skb, hdr);
10668 }
10669
10670 err = skb->len;
10671 /* see above */
10672 cb->args[0] = phy_idx + 1;
10673 out_err:
50508d94 10674 kfree(attrbuf);
5fe231e8 10675 rtnl_unlock();
71063f0e
WYG		 10676 return err;
10677}
aff89a9b
JB		 10678#endif
10679
b23aa676
SO		 10680static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
10681{
4c476991
JB		 10682 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10683 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 10684 struct cfg80211_connect_params connect;
10685 struct wiphy *wiphy;
fffd0934 10686 struct cfg80211_cached_keys *connkeys = NULL;
942ba88b 10687 u32 freq = 0;
b23aa676
SO		 10688 int err;
10689
10690 memset(&connect, 0, sizeof(connect));
10691
b23aa676
SO		 10692 if (!info->attrs[NL80211_ATTR_SSID] ||
10693 !nla_len(info->attrs[NL80211_ATTR_SSID]))
10694 return -EINVAL;
10695
10696 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
10697 connect.auth_type =
10698 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 10699 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
10700 NL80211_CMD_CONNECT))
b23aa676
SO		 10701 return -EINVAL;
10702 } else
10703 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
10704
10705 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
10706
3a00df57
AS		 10707 if (info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS] &&
10708 !wiphy_ext_feature_isset(&rdev->wiphy,
10709 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
10710 return -EINVAL;
10711 connect.want_1x = info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS];
10712
c0692b8f 10713 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 10714 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 10715 if (err)
10716 return err;
b23aa676 10717
074ac8df 10718 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10719 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10720 return -EOPNOTSUPP;
b23aa676 10721
79c97e97 10722 wiphy = &rdev->wiphy;
b23aa676 10723
4486ea98
BS		 10724 connect.bg_scan_period = -1;
10725 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
10726 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
10727 connect.bg_scan_period =
10728 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
10729 }
10730
b23aa676
SO		 10731 if (info->attrs[NL80211_ATTR_MAC])
10732 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
1df4a510
JM		 10733 else if (info->attrs[NL80211_ATTR_MAC_HINT])
10734 connect.bssid_hint =
10735 nla_data(info->attrs[NL80211_ATTR_MAC_HINT]);
b23aa676
SO		 10736 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10737 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10738
10739 if (info->attrs[NL80211_ATTR_IE]) {
10740 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10741 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10742 }
10743
cee00a95
JM		 10744 if (info->attrs[NL80211_ATTR_USE_MFP]) {
10745 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
65026002
EG		 10746 if (connect.mfp == NL80211_MFP_OPTIONAL &&
10747 !wiphy_ext_feature_isset(&rdev->wiphy,
10748 NL80211_EXT_FEATURE_MFP_OPTIONAL))
10749 return -EOPNOTSUPP;
cee00a95
JM		 10750 } else {
10751 connect.mfp = NL80211_MFP_NO;
10752 }
10753
ba6fbacf
JM		 10754 if (info->attrs[NL80211_ATTR_PREV_BSSID])
10755 connect.prev_bssid =
10756 nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
10757
942ba88b
TP		 10758 if (info->attrs[NL80211_ATTR_WIPHY_FREQ])
10759 freq = MHZ_TO_KHZ(nla_get_u32(
10760 info->attrs[NL80211_ATTR_WIPHY_FREQ]));
10761 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10762 freq +=
10763 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10764
10765 if (freq) {
10766 connect.channel = nl80211_get_valid_chan(wiphy, freq);
664834de 10767 if (!connect.channel)
1df4a510
JM		 10768 return -EINVAL;
10769 } else if (info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]) {
942ba88b
TP		 10770 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]);
10771 freq = MHZ_TO_KHZ(freq);
10772 connect.channel_hint = nl80211_get_valid_chan(wiphy, freq);
664834de 10773 if (!connect.channel_hint)
4c476991 10774 return -EINVAL;
b23aa676
SO		 10775 }
10776
2a38075c
AAL		 10777 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
10778 connect.edmg.channels =
10779 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
10780
10781 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
10782 connect.edmg.bw_config =
10783 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
10784 }
10785
fffd0934 10786 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
768075eb 10787 connkeys = nl80211_parse_connkeys(rdev, info, NULL);
4c476991
JB		 10788 if (IS_ERR(connkeys))
10789 return PTR_ERR(connkeys);
fffd0934
JB		 10790 }
10791
7e7c8926
BG		 10792 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
10793 connect.flags |= ASSOC_REQ_DISABLE_HT;
10794
10795 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
10796 memcpy(&connect.ht_capa_mask,
10797 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10798 sizeof(connect.ht_capa_mask));
10799
10800 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e 10801 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
453431a5 10802 kfree_sensitive(connkeys);
7e7c8926 10803 return -EINVAL;
b4e4f47e 10804 }
7e7c8926
BG		 10805 memcpy(&connect.ht_capa,
10806 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10807 sizeof(connect.ht_capa));
10808 }
10809
ee2aca34
JB		 10810 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
10811 connect.flags |= ASSOC_REQ_DISABLE_VHT;
10812
b6db0f89
BG		 10813 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HE]))
10814 connect.flags |= ASSOC_REQ_DISABLE_HE;
10815
ee2aca34
JB		 10816 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
10817 memcpy(&connect.vht_capa_mask,
10818 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
10819 sizeof(connect.vht_capa_mask));
10820
10821 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
10822 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]) {
453431a5 10823 kfree_sensitive(connkeys);
ee2aca34
JB		 10824 return -EINVAL;
10825 }
10826 memcpy(&connect.vht_capa,
10827 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
10828 sizeof(connect.vht_capa));
10829 }
10830
bab5ab7d 10831 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 10832 if (!((rdev->wiphy.features &
10833 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
10834 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
10835 !wiphy_ext_feature_isset(&rdev->wiphy,
10836 NL80211_EXT_FEATURE_RRM)) {
453431a5 10837 kfree_sensitive(connkeys);
bab5ab7d 10838 return -EINVAL;
707554b4 10839 }
bab5ab7d
AK		 10840 connect.flags |= ASSOC_REQ_USE_RRM;
10841 }
10842
34d50519 10843 connect.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
57fbcce3 10844 if (connect.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
453431a5 10845 kfree_sensitive(connkeys);
34d50519
LD		 10846 return -EOPNOTSUPP;
10847 }
10848
38de03d2
AS		 10849 if (info->attrs[NL80211_ATTR_BSS_SELECT]) {
10850 /* bss selection makes no sense if bssid is set */
10851 if (connect.bssid) {
453431a5 10852 kfree_sensitive(connkeys);
38de03d2
AS		 10853 return -EINVAL;
10854 }
10855
10856 err = parse_bss_select(info->attrs[NL80211_ATTR_BSS_SELECT],
10857 wiphy, &connect.bss_select);
10858 if (err) {
453431a5 10859 kfree_sensitive(connkeys);
38de03d2
AS		 10860 return err;
10861 }
10862 }
10863
a3caf744
VK		 10864 if (wiphy_ext_feature_isset(&rdev->wiphy,
10865 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
10866 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
10867 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
10868 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
10869 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10870 connect.fils_erp_username =
10871 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10872 connect.fils_erp_username_len =
10873 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10874 connect.fils_erp_realm =
10875 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10876 connect.fils_erp_realm_len =
10877 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10878 connect.fils_erp_next_seq_num =
10879 nla_get_u16(
10880 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
10881 connect.fils_erp_rrk =
10882 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10883 connect.fils_erp_rrk_len =
10884 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10885 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
10886 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
10887 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
10888 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
453431a5 10889 kfree_sensitive(connkeys);
a3caf744
VK		 10890 return -EINVAL;
10891 }
10892
40cbfa90
SD		 10893 if (nla_get_flag(info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])) {
10894 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
453431a5 10895 kfree_sensitive(connkeys);
40cbfa90
SD		 10896 GENL_SET_ERR_MSG(info,
10897 "external auth requires connection ownership");
10898 return -EINVAL;
10899 }
10900 connect.flags |= CONNECT_REQ_EXTERNAL_AUTH_SUPPORT;
10901 }
10902
83739b03 10903 wdev_lock(dev->ieee80211_ptr);
bd2522b1 10904
4ce2bd9c
JM		 10905 err = cfg80211_connect(rdev, dev, &connect, connkeys,
10906 connect.prev_bssid);
fffd0934 10907 if (err)
453431a5 10908 kfree_sensitive(connkeys);
bd2522b1
AZ		 10909
10910 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10911 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
10912 if (connect.bssid)
10913 memcpy(dev->ieee80211_ptr->disconnect_bssid,
10914 connect.bssid, ETH_ALEN);
10915 else
3b1648f1 10916 eth_zero_addr(dev->ieee80211_ptr->disconnect_bssid);
bd2522b1
AZ		 10917 }
10918
10919 wdev_unlock(dev->ieee80211_ptr);
10920
b23aa676
SO		 10921 return err;
10922}
10923
088e8df8 10924static int nl80211_update_connect_params(struct sk_buff *skb,
10925 struct genl_info *info)
10926{
10927 struct cfg80211_connect_params connect = {};
10928 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10929 struct net_device *dev = info->user_ptr[1];
10930 struct wireless_dev *wdev = dev->ieee80211_ptr;
7f9a3e15
VK		 10931 bool fils_sk_offload;
10932 u32 auth_type;
088e8df8 10933 u32 changed = 0;
10934 int ret;
10935
10936 if (!rdev->ops->update_connect_params)
10937 return -EOPNOTSUPP;
10938
10939 if (info->attrs[NL80211_ATTR_IE]) {
088e8df8 10940 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10941 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10942 changed |= UPDATE_ASSOC_IES;
10943 }
10944
7f9a3e15
VK		 10945 fils_sk_offload = wiphy_ext_feature_isset(&rdev->wiphy,
10946 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD);
10947
10948 /*
10949 * when driver supports fils-sk offload all attributes must be
10950 * provided. So the else covers "fils-sk-not-all" and
10951 * "no-fils-sk-any".
10952 */
10953 if (fils_sk_offload &&
10954 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
10955 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
10956 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
10957 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10958 connect.fils_erp_username =
10959 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10960 connect.fils_erp_username_len =
10961 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10962 connect.fils_erp_realm =
10963 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10964 connect.fils_erp_realm_len =
10965 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10966 connect.fils_erp_next_seq_num =
10967 nla_get_u16(
10968 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
10969 connect.fils_erp_rrk =
10970 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10971 connect.fils_erp_rrk_len =
10972 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10973 changed |= UPDATE_FILS_ERP_INFO;
10974 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
10975 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
10976 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
10977 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10978 return -EINVAL;
10979 }
10980
10981 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
10982 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
10983 if (!nl80211_valid_auth_type(rdev, auth_type,
10984 NL80211_CMD_CONNECT))
10985 return -EINVAL;
10986
10987 if (auth_type == NL80211_AUTHTYPE_FILS_SK &&
10988 fils_sk_offload && !(changed & UPDATE_FILS_ERP_INFO))
10989 return -EINVAL;
10990
10991 connect.auth_type = auth_type;
10992 changed |= UPDATE_AUTH_TYPE;
10993 }
10994
088e8df8 10995 wdev_lock(dev->ieee80211_ptr);
10996 if (!wdev->current_bss)
10997 ret = -ENOLINK;
10998 else
10999 ret = rdev_update_connect_params(rdev, dev, &connect, changed);
11000 wdev_unlock(dev->ieee80211_ptr);
11001
11002 return ret;
11003}
11004
b23aa676
SO		 11005static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
11006{
4c476991
JB		 11007 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11008 struct net_device *dev = info->user_ptr[1];
b23aa676 11009 u16 reason;
83739b03 11010 int ret;
b23aa676 11011
bad29297
AZ		 11012 if (dev->ieee80211_ptr->conn_owner_nlportid &&
11013 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
11014 return -EPERM;
11015
b23aa676
SO		 11016 if (!info->attrs[NL80211_ATTR_REASON_CODE])
11017 reason = WLAN_REASON_DEAUTH_LEAVING;
11018 else
11019 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
11020
11021 if (reason == 0)
11022 return -EINVAL;
11023
074ac8df 11024 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11025 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11026 return -EOPNOTSUPP;
b23aa676 11027
83739b03
JB		 11028 wdev_lock(dev->ieee80211_ptr);
11029 ret = cfg80211_disconnect(rdev, dev, reason, true);
11030 wdev_unlock(dev->ieee80211_ptr);
11031 return ret;
b23aa676
SO		 11032}
11033
463d0183
JB		 11034static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
11035{
4c476991 11036 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 11037 struct net *net;
11038 int err;
463d0183 11039
4b681c82
VK		 11040 if (info->attrs[NL80211_ATTR_PID]) {
11041 u32 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
11042
11043 net = get_net_ns_by_pid(pid);
11044 } else if (info->attrs[NL80211_ATTR_NETNS_FD]) {
11045 u32 fd = nla_get_u32(info->attrs[NL80211_ATTR_NETNS_FD]);
463d0183 11046
4b681c82
VK		 11047 net = get_net_ns_by_fd(fd);
11048 } else {
11049 return -EINVAL;
11050 }
463d0183 11051
4c476991
JB		 11052 if (IS_ERR(net))
11053 return PTR_ERR(net);
463d0183
JB		 11054
11055 err = 0;
11056
11057 /* check if anything to do */
4c476991
JB		 11058 if (!net_eq(wiphy_net(&rdev->wiphy), net))
11059 err = cfg80211_switch_netns(rdev, net);
463d0183 11060
463d0183 11061 put_net(net);
463d0183
JB		 11062 return err;
11063}
11064
67fbb16b
SO		 11065static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
11066{
4c476991 11067 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 11068 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
11069 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 11070 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 11071 struct cfg80211_pmksa pmksa;
11072
11073 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
11074
67fbb16b
SO		 11075 if (!info->attrs[NL80211_ATTR_PMKID])
11076 return -EINVAL;
11077
67fbb16b 11078 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
a3caf744
VK		 11079
11080 if (info->attrs[NL80211_ATTR_MAC]) {
11081 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
11082 } else if (info->attrs[NL80211_ATTR_SSID] &&
11083 info->attrs[NL80211_ATTR_FILS_CACHE_ID] &&
11084 (info->genlhdr->cmd == NL80211_CMD_DEL_PMKSA ||
11085 info->attrs[NL80211_ATTR_PMK])) {
11086 pmksa.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11087 pmksa.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11088 pmksa.cache_id =
11089 nla_data(info->attrs[NL80211_ATTR_FILS_CACHE_ID]);
11090 } else {
11091 return -EINVAL;
11092 }
11093 if (info->attrs[NL80211_ATTR_PMK]) {
11094 pmksa.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
11095 pmksa.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
11096 }
67fbb16b 11097
7fc82af8
VJ		 11098 if (info->attrs[NL80211_ATTR_PMK_LIFETIME])
11099 pmksa.pmk_lifetime =
11100 nla_get_u32(info->attrs[NL80211_ATTR_PMK_LIFETIME]);
11101
11102 if (info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD])
11103 pmksa.pmk_reauth_threshold =
11104 nla_get_u8(
11105 info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD]);
11106
074ac8df 11107 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6c900360
LD		 11108 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
11109 !(dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP &&
11110 wiphy_ext_feature_isset(&rdev->wiphy,
11111 NL80211_EXT_FEATURE_AP_PMKSA_CACHING)))
4c476991 11112 return -EOPNOTSUPP;
67fbb16b
SO		 11113
11114 switch (info->genlhdr->cmd) {
11115 case NL80211_CMD_SET_PMKSA:
11116 rdev_ops = rdev->ops->set_pmksa;
11117 break;
11118 case NL80211_CMD_DEL_PMKSA:
11119 rdev_ops = rdev->ops->del_pmksa;
11120 break;
11121 default:
11122 WARN_ON(1);
11123 break;
11124 }
11125
4c476991
JB		 11126 if (!rdev_ops)
11127 return -EOPNOTSUPP;
67fbb16b 11128
4c476991 11129 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 11130}
11131
11132static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
11133{
4c476991
JB		 11134 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11135 struct net_device *dev = info->user_ptr[1];
67fbb16b 11136
074ac8df 11137 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11138 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11139 return -EOPNOTSUPP;
67fbb16b 11140
4c476991
JB		 11141 if (!rdev->ops->flush_pmksa)
11142 return -EOPNOTSUPP;
67fbb16b 11143
e35e4d28 11144 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 11145}
11146
109086ce
AN		 11147static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
11148{
11149 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11150 struct net_device *dev = info->user_ptr[1];
11151 u8 action_code, dialog_token;
df942e7b 11152 u32 peer_capability = 0;
109086ce
AN		 11153 u16 status_code;
11154 u8 *peer;
31fa97c5 11155 bool initiator;
109086ce
AN		 11156
11157 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
11158 !rdev->ops->tdls_mgmt)
11159 return -EOPNOTSUPP;
11160
11161 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
11162 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
11163 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
11164 !info->attrs[NL80211_ATTR_IE] ||
11165 !info->attrs[NL80211_ATTR_MAC])
11166 return -EINVAL;
11167
11168 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
11169 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
11170 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
11171 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
31fa97c5 11172 initiator = nla_get_flag(info->attrs[NL80211_ATTR_TDLS_INITIATOR]);
df942e7b
SDU		 11173 if (info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY])
11174 peer_capability =
11175 nla_get_u32(info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY]);
109086ce 11176
e35e4d28 11177 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
df942e7b 11178 dialog_token, status_code, peer_capability,
31fa97c5 11179 initiator,
e35e4d28
HG		 11180 nla_data(info->attrs[NL80211_ATTR_IE]),
11181 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 11182}
11183
11184static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
11185{
11186 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11187 struct net_device *dev = info->user_ptr[1];
11188 enum nl80211_tdls_operation operation;
11189 u8 *peer;
11190
11191 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
11192 !rdev->ops->tdls_oper)
11193 return -EOPNOTSUPP;
11194
11195 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
11196 !info->attrs[NL80211_ATTR_MAC])
11197 return -EINVAL;
11198
11199 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
11200 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
11201
e35e4d28 11202 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 11203}
11204
9588bbd5
JM		 11205static int nl80211_remain_on_channel(struct sk_buff *skb,
11206 struct genl_info *info)
11207{
4c476991 11208 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11209 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 11210 struct cfg80211_chan_def chandef;
34373d12 11211 const struct cfg80211_chan_def *compat_chandef;
9588bbd5
JM		 11212 struct sk_buff *msg;
11213 void *hdr;
11214 u64 cookie;
683b6d3b 11215 u32 duration;
9588bbd5
JM		 11216 int err;
11217
11218 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
11219 !info->attrs[NL80211_ATTR_DURATION])
11220 return -EINVAL;
11221
11222 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
11223
ebf348fc
JB		 11224 if (!rdev->ops->remain_on_channel ||
11225 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
11226 return -EOPNOTSUPP;
11227
9588bbd5 11228 /*
ebf348fc
JB		 11229 * We should be on that channel for at least a minimum amount of
11230 * time (10ms) but no longer than the driver supports.
9588bbd5 11231 */
ebf348fc 11232 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 11233 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 11234 return -EINVAL;
11235
683b6d3b
JB		 11236 err = nl80211_parse_chandef(rdev, info, &chandef);
11237 if (err)
11238 return err;
9588bbd5 11239
34373d12
VT		 11240 wdev_lock(wdev);
11241 if (!cfg80211_off_channel_oper_allowed(wdev) &&
11242 !cfg80211_chandef_identical(&wdev->chandef, &chandef)) {
11243 compat_chandef = cfg80211_chandef_compatible(&wdev->chandef,
11244 &chandef);
11245 if (compat_chandef != &chandef) {
11246 wdev_unlock(wdev);
11247 return -EBUSY;
11248 }
11249 }
11250 wdev_unlock(wdev);
11251
9588bbd5 11252 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 11253 if (!msg)
11254 return -ENOMEM;
9588bbd5 11255
15e47304 11256 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5 11257 NL80211_CMD_REMAIN_ON_CHANNEL);
cb35fba3
DC		 11258 if (!hdr) {
11259 err = -ENOBUFS;
9588bbd5
JM		 11260 goto free_msg;
11261 }
11262
683b6d3b
JB		 11263 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
11264 duration, &cookie);
9588bbd5
JM		 11265
11266 if (err)
11267 goto free_msg;
11268
2dad624e
ND		 11269 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
11270 NL80211_ATTR_PAD))
9360ffd1 11271 goto nla_put_failure;
9588bbd5
JM		 11272
11273 genlmsg_end(msg, hdr);
4c476991
JB		 11274
11275 return genlmsg_reply(msg, info);
9588bbd5
JM		 11276
11277 nla_put_failure:
11278 err = -ENOBUFS;
11279 free_msg:
11280 nlmsg_free(msg);
9588bbd5
JM		 11281 return err;
11282}
11283
11284static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
11285 struct genl_info *info)
11286{
4c476991 11287 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11288 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 11289 u64 cookie;
9588bbd5
JM		 11290
11291 if (!info->attrs[NL80211_ATTR_COOKIE])
11292 return -EINVAL;
11293
4c476991
JB		 11294 if (!rdev->ops->cancel_remain_on_channel)
11295 return -EOPNOTSUPP;
9588bbd5 11296
9588bbd5
JM		 11297 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
11298
e35e4d28 11299 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 11300}
11301
13ae75b1
JM		 11302static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
11303 struct genl_info *info)
11304{
13ae75b1 11305 struct cfg80211_bitrate_mask mask;
a7c7fbff 11306 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 11307 struct net_device *dev = info->user_ptr[1];
a7c7fbff 11308 int err;
13ae75b1 11309
4c476991
JB		 11310 if (!rdev->ops->set_bitrate_mask)
11311 return -EOPNOTSUPP;
13ae75b1 11312
9a5f6488 11313 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
eb89a6a6 11314 NL80211_ATTR_TX_RATES, &mask,
857b34c4 11315 dev, true);
a7c7fbff
PK		 11316 if (err)
11317 return err;
13ae75b1 11318
e35e4d28 11319 return rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
13ae75b1
JM		 11320}
11321
2e161f78 11322static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 11323{
4c476991 11324 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11325 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 11326 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 11327
11328 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
11329 return -EINVAL;
11330
2e161f78
JB		 11331 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
11332 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 11333
71bbc994
JB		 11334 switch (wdev->iftype) {
11335 case NL80211_IFTYPE_STATION:
11336 case NL80211_IFTYPE_ADHOC:
11337 case NL80211_IFTYPE_P2P_CLIENT:
11338 case NL80211_IFTYPE_AP:
11339 case NL80211_IFTYPE_AP_VLAN:
11340 case NL80211_IFTYPE_MESH_POINT:
11341 case NL80211_IFTYPE_P2P_GO:
98104fde 11342 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 11343 break;
cb3b7d87 11344 case NL80211_IFTYPE_NAN:
71bbc994 11345 default:
4c476991 11346 return -EOPNOTSUPP;
71bbc994 11347 }
026331c4
JM		 11348
11349 /* not much point in registering if we can't reply */
4c476991
JB		 11350 if (!rdev->ops->mgmt_tx)
11351 return -EOPNOTSUPP;
026331c4 11352
9dba48a6
JB		 11353 if (info->attrs[NL80211_ATTR_RECEIVE_MULTICAST] &&
11354 !wiphy_ext_feature_isset(&rdev->wiphy,
11355 NL80211_EXT_FEATURE_MULTICAST_REGISTRATIONS)) {
11356 GENL_SET_ERR_MSG(info,
11357 "multicast RX registrations are not supported");
11358 return -EOPNOTSUPP;
11359 }
11360
15e47304 11361 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
ff74c51e
IP		 11362 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
11363 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]),
9dba48a6 11364 info->attrs[NL80211_ATTR_RECEIVE_MULTICAST],
ff74c51e 11365 info->extack);
026331c4
JM		 11366}
11367
2e161f78 11368static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 11369{
4c476991 11370 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11371 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 11372 struct cfg80211_chan_def chandef;
026331c4 11373 int err;
d64d373f 11374 void *hdr = NULL;
026331c4 11375 u64 cookie;
e247bd90 11376 struct sk_buff *msg = NULL;
b176e629
AO		 11377 struct cfg80211_mgmt_tx_params params = {
11378 .dont_wait_for_ack =
11379 info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK],
11380 };
026331c4 11381
683b6d3b 11382 if (!info->attrs[NL80211_ATTR_FRAME])
026331c4
JM		 11383 return -EINVAL;
11384
4c476991
JB		 11385 if (!rdev->ops->mgmt_tx)
11386 return -EOPNOTSUPP;
026331c4 11387
71bbc994 11388 switch (wdev->iftype) {
ea141b75
AQ		 11389 case NL80211_IFTYPE_P2P_DEVICE:
11390 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
11391 return -EINVAL;
d7832c71 11392 break;
71bbc994
JB		 11393 case NL80211_IFTYPE_STATION:
11394 case NL80211_IFTYPE_ADHOC:
11395 case NL80211_IFTYPE_P2P_CLIENT:
11396 case NL80211_IFTYPE_AP:
11397 case NL80211_IFTYPE_AP_VLAN:
11398 case NL80211_IFTYPE_MESH_POINT:
11399 case NL80211_IFTYPE_P2P_GO:
11400 break;
cb3b7d87 11401 case NL80211_IFTYPE_NAN:
71bbc994 11402 default:
4c476991 11403 return -EOPNOTSUPP;
71bbc994 11404 }
026331c4 11405
f7ca38df 11406 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 11407 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df 11408 return -EINVAL;
b176e629 11409 params.wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 11410
11411 /*
11412 * We should wait on the channel for at least a minimum amount
11413 * of time (10ms) but no longer than the driver supports.
11414 */
b176e629
AO		 11415 if (params.wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
11416 params.wait > rdev->wiphy.max_remain_on_channel_duration)
ebf348fc 11417 return -EINVAL;
f7ca38df
JB		 11418 }
11419
b176e629 11420 params.offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
f7ca38df 11421
b176e629 11422 if (params.offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
7c4ef712
JB		 11423 return -EINVAL;
11424
b176e629 11425 params.no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
e9f935e3 11426
ea141b75
AQ		 11427 /* get the channel if any has been specified, otherwise pass NULL to
11428 * the driver. The latter will use the current one
11429 */
11430 chandef.chan = NULL;
11431 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
11432 err = nl80211_parse_chandef(rdev, info, &chandef);
11433 if (err)
11434 return err;
11435 }
11436
b176e629 11437 if (!chandef.chan && params.offchan)
ea141b75 11438 return -EINVAL;
026331c4 11439
34373d12
VT		 11440 wdev_lock(wdev);
11441 if (params.offchan && !cfg80211_off_channel_oper_allowed(wdev)) {
11442 wdev_unlock(wdev);
11443 return -EBUSY;
11444 }
11445 wdev_unlock(wdev);
11446
34d22ce2
AO		 11447 params.buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
11448 params.len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
11449
11450 if (info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]) {
11451 int len = nla_len(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
11452 int i;
11453
11454 if (len % sizeof(u16))
11455 return -EINVAL;
11456
11457 params.n_csa_offsets = len / sizeof(u16);
11458 params.csa_offsets =
11459 nla_data(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
11460
11461 /* check that all the offsets fit the frame */
11462 for (i = 0; i < params.n_csa_offsets; i++) {
11463 if (params.csa_offsets[i] >= params.len)
11464 return -EINVAL;
11465 }
11466 }
11467
b176e629 11468 if (!params.dont_wait_for_ack) {
e247bd90
JB		 11469 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
11470 if (!msg)
11471 return -ENOMEM;
026331c4 11472
15e47304 11473 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 11474 NL80211_CMD_FRAME);
cb35fba3
DC		 11475 if (!hdr) {
11476 err = -ENOBUFS;
e247bd90
JB		 11477 goto free_msg;
11478 }
026331c4 11479 }
e247bd90 11480
b176e629
AO		 11481 params.chan = chandef.chan;
11482 err = cfg80211_mlme_mgmt_tx(rdev, wdev, &params, &cookie);
026331c4
JM		 11483 if (err)
11484 goto free_msg;
11485
e247bd90 11486 if (msg) {
2dad624e
ND		 11487 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
11488 NL80211_ATTR_PAD))
9360ffd1 11489 goto nla_put_failure;
026331c4 11490
e247bd90
JB		 11491 genlmsg_end(msg, hdr);
11492 return genlmsg_reply(msg, info);
11493 }
11494
11495 return 0;
026331c4
JM		 11496
11497 nla_put_failure:
11498 err = -ENOBUFS;
11499 free_msg:
11500 nlmsg_free(msg);
026331c4
JM		 11501 return err;
11502}
11503
f7ca38df
JB		 11504static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
11505{
11506 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11507 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 11508 u64 cookie;
11509
11510 if (!info->attrs[NL80211_ATTR_COOKIE])
11511 return -EINVAL;
11512
11513 if (!rdev->ops->mgmt_tx_cancel_wait)
11514 return -EOPNOTSUPP;
11515
71bbc994
JB		 11516 switch (wdev->iftype) {
11517 case NL80211_IFTYPE_STATION:
11518 case NL80211_IFTYPE_ADHOC:
11519 case NL80211_IFTYPE_P2P_CLIENT:
11520 case NL80211_IFTYPE_AP:
11521 case NL80211_IFTYPE_AP_VLAN:
11522 case NL80211_IFTYPE_P2P_GO:
98104fde 11523 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 11524 break;
cb3b7d87 11525 case NL80211_IFTYPE_NAN:
71bbc994 11526 default:
f7ca38df 11527 return -EOPNOTSUPP;
71bbc994 11528 }
f7ca38df
JB		 11529
11530 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
11531
e35e4d28 11532 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 11533}
11534
ffb9eb3d
KV		 11535static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
11536{
4c476991 11537 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 11538 struct wireless_dev *wdev;
4c476991 11539 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 11540 u8 ps_state;
11541 bool state;
11542 int err;
11543
4c476991
JB		 11544 if (!info->attrs[NL80211_ATTR_PS_STATE])
11545 return -EINVAL;
ffb9eb3d
KV		 11546
11547 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
11548
ffb9eb3d
KV		 11549 wdev = dev->ieee80211_ptr;
11550
4c476991
JB		 11551 if (!rdev->ops->set_power_mgmt)
11552 return -EOPNOTSUPP;
ffb9eb3d
KV		 11553
11554 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
11555
11556 if (state == wdev->ps)
4c476991 11557 return 0;
ffb9eb3d 11558
e35e4d28 11559 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 11560 if (!err)
11561 wdev->ps = state;
ffb9eb3d
KV		 11562 return err;
11563}
11564
11565static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
11566{
4c476991 11567 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 11568 enum nl80211_ps_state ps_state;
11569 struct wireless_dev *wdev;
4c476991 11570 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 11571 struct sk_buff *msg;
11572 void *hdr;
11573 int err;
11574
ffb9eb3d
KV		 11575 wdev = dev->ieee80211_ptr;
11576
4c476991
JB		 11577 if (!rdev->ops->set_power_mgmt)
11578 return -EOPNOTSUPP;
ffb9eb3d
KV		 11579
11580 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 11581 if (!msg)
11582 return -ENOMEM;
ffb9eb3d 11583
15e47304 11584 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 11585 NL80211_CMD_GET_POWER_SAVE);
11586 if (!hdr) {
4c476991 11587 err = -ENOBUFS;
ffb9eb3d
KV		 11588 goto free_msg;
11589 }
11590
11591 if (wdev->ps)
11592 ps_state = NL80211_PS_ENABLED;
11593 else
11594 ps_state = NL80211_PS_DISABLED;
11595
9360ffd1
DM		 11596 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
11597 goto nla_put_failure;
ffb9eb3d
KV		 11598
11599 genlmsg_end(msg, hdr);
4c476991 11600 return genlmsg_reply(msg, info);
ffb9eb3d 11601
4c476991 11602 nla_put_failure:
ffb9eb3d 11603 err = -ENOBUFS;
4c476991 11604 free_msg:
ffb9eb3d 11605 nlmsg_free(msg);
ffb9eb3d
KV		 11606 return err;
11607}
11608
94e860f1
JB		 11609static const struct nla_policy
11610nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
4a4b8169 11611 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_BINARY },
d6dc1a38
JO		 11612 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
11613 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 11614 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
11615 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
11616 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
bee427b8 11617 [NL80211_ATTR_CQM_RSSI_LEVEL] = { .type = NLA_S32 },
d6dc1a38
JO		 11618};
11619
84f10708 11620static int nl80211_set_cqm_txe(struct genl_info *info,
d9d8b019 11621 u32 rate, u32 pkts, u32 intvl)
84f10708
TP		 11622{
11623 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84f10708 11624 struct net_device *dev = info->user_ptr[1];
1da5fcc8 11625 struct wireless_dev *wdev = dev->ieee80211_ptr;
84f10708 11626
d9d8b019 11627 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
84f10708
TP		 11628 return -EINVAL;
11629
84f10708
TP		 11630 if (!rdev->ops->set_cqm_txe_config)
11631 return -EOPNOTSUPP;
11632
11633 if (wdev->iftype != NL80211_IFTYPE_STATION &&
11634 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
11635 return -EOPNOTSUPP;
11636
e35e4d28 11637 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 11638}
11639
4a4b8169
AZ		 11640static int cfg80211_cqm_rssi_update(struct cfg80211_registered_device *rdev,
11641 struct net_device *dev)
11642{
11643 struct wireless_dev *wdev = dev->ieee80211_ptr;
11644 s32 last, low, high;
11645 u32 hyst;
1222a160 11646 int i, n, low_index;
4a4b8169
AZ		 11647 int err;
11648
11649 /* RSSI reporting disabled? */
11650 if (!wdev->cqm_config)
11651 return rdev_set_cqm_rssi_range_config(rdev, dev, 0, 0);
11652
11653 /*
11654 * Obtain current RSSI value if possible, if not and no RSSI threshold
11655 * event has been received yet, we should receive an event after a
11656 * connection is established and enough beacons received to calculate
11657 * the average.
11658 */
11659 if (!wdev->cqm_config->last_rssi_event_value && wdev->current_bss &&
11660 rdev->ops->get_station) {
73887fd9 11661 struct station_info sinfo = {};
4a4b8169
AZ		 11662 u8 *mac_addr;
11663
11664 mac_addr = wdev->current_bss->pub.bssid;
11665
73887fd9
JB		 11666 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
11667 if (err)
4a4b8169
AZ		 11668 return err;
11669
df16737d 11670 cfg80211_sinfo_release_content(&sinfo);
397c657a 11671 if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_BEACON_SIGNAL_AVG))
4a4b8169 11672 wdev->cqm_config->last_rssi_event_value =
73887fd9 11673 (s8) sinfo.rx_beacon_signal_avg;
4a4b8169
AZ		 11674 }
11675
11676 last = wdev->cqm_config->last_rssi_event_value;
11677 hyst = wdev->cqm_config->rssi_hyst;
11678 n = wdev->cqm_config->n_rssi_thresholds;
11679
4b2c5a14
MH		 11680 for (i = 0; i < n; i++) {
11681 i = array_index_nospec(i, n);
4a4b8169
AZ		 11682 if (last < wdev->cqm_config->rssi_thresholds[i])
11683 break;
4b2c5a14 11684 }
4a4b8169 11685
1222a160
MH		 11686 low_index = i - 1;
11687 if (low_index >= 0) {
11688 low_index = array_index_nospec(low_index, n);
11689 low = wdev->cqm_config->rssi_thresholds[low_index] - hyst;
11690 } else {
11691 low = S32_MIN;
11692 }
11693 if (i < n) {
11694 i = array_index_nospec(i, n);
11695 high = wdev->cqm_config->rssi_thresholds[i] + hyst - 1;
11696 } else {
11697 high = S32_MAX;
11698 }
4a4b8169
AZ		 11699
11700 return rdev_set_cqm_rssi_range_config(rdev, dev, low, high);
11701}
11702
d6dc1a38 11703static int nl80211_set_cqm_rssi(struct genl_info *info,
4a4b8169
AZ		 11704 const s32 *thresholds, int n_thresholds,
11705 u32 hysteresis)
d6dc1a38 11706{
4c476991 11707 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 11708 struct net_device *dev = info->user_ptr[1];
1da5fcc8 11709 struct wireless_dev *wdev = dev->ieee80211_ptr;
4a4b8169
AZ		 11710 int i, err;
11711 s32 prev = S32_MIN;
d6dc1a38 11712
4a4b8169
AZ		 11713 /* Check all values negative and sorted */
11714 for (i = 0; i < n_thresholds; i++) {
11715 if (thresholds[i] > 0 || thresholds[i] <= prev)
11716 return -EINVAL;
d6dc1a38 11717
4a4b8169
AZ		 11718 prev = thresholds[i];
11719 }
d6dc1a38 11720
074ac8df 11721 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11722 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
11723 return -EOPNOTSUPP;
d6dc1a38 11724
4a4b8169
AZ		 11725 wdev_lock(wdev);
11726 cfg80211_cqm_config_free(wdev);
11727 wdev_unlock(wdev);
11728
11729 if (n_thresholds <= 1 && rdev->ops->set_cqm_rssi_config) {
11730 if (n_thresholds == 0 || thresholds[0] == 0) /* Disabling */
11731 return rdev_set_cqm_rssi_config(rdev, dev, 0, 0);
11732
11733 return rdev_set_cqm_rssi_config(rdev, dev,
11734 thresholds[0], hysteresis);
11735 }
11736
11737 if (!wiphy_ext_feature_isset(&rdev->wiphy,
11738 NL80211_EXT_FEATURE_CQM_RSSI_LIST))
11739 return -EOPNOTSUPP;
11740
11741 if (n_thresholds == 1 && thresholds[0] == 0) /* Disabling */
11742 n_thresholds = 0;
11743
11744 wdev_lock(wdev);
11745 if (n_thresholds) {
11746 struct cfg80211_cqm_config *cqm_config;
11747
11748 cqm_config = kzalloc(sizeof(struct cfg80211_cqm_config) +
11749 n_thresholds * sizeof(s32), GFP_KERNEL);
11750 if (!cqm_config) {
11751 err = -ENOMEM;
11752 goto unlock;
11753 }
11754
11755 cqm_config->rssi_hyst = hysteresis;
11756 cqm_config->n_rssi_thresholds = n_thresholds;
11757 memcpy(cqm_config->rssi_thresholds, thresholds,
11758 n_thresholds * sizeof(s32));
11759
11760 wdev->cqm_config = cqm_config;
11761 }
11762
11763 err = cfg80211_cqm_rssi_update(rdev, dev);
11764
11765unlock:
11766 wdev_unlock(wdev);
11767
11768 return err;
d6dc1a38
JO		 11769}
11770
11771static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
11772{
11773 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
11774 struct nlattr *cqm;
11775 int err;
11776
11777 cqm = info->attrs[NL80211_ATTR_CQM];
1da5fcc8
JB		 11778 if (!cqm)
11779 return -EINVAL;
d6dc1a38 11780
8cb08174
JB		 11781 err = nla_parse_nested_deprecated(attrs, NL80211_ATTR_CQM_MAX, cqm,
11782 nl80211_attr_cqm_policy,
11783 info->extack);
d6dc1a38 11784 if (err)
1da5fcc8 11785 return err;
d6dc1a38
JO		 11786
11787 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
11788 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
4a4b8169
AZ		 11789 const s32 *thresholds =
11790 nla_data(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
11791 int len = nla_len(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
1da5fcc8 11792 u32 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
d6dc1a38 11793
4a4b8169
AZ		 11794 if (len % 4)
11795 return -EINVAL;
11796
11797 return nl80211_set_cqm_rssi(info, thresholds, len / 4,
11798 hysteresis);
1da5fcc8
JB		 11799 }
11800
11801 if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
11802 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
11803 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
11804 u32 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
11805 u32 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
11806 u32 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
11807
11808 return nl80211_set_cqm_txe(info, rate, pkts, intvl);
11809 }
11810
11811 return -EINVAL;
d6dc1a38
JO		 11812}
11813
6e0bd6c3
RL		 11814static int nl80211_join_ocb(struct sk_buff *skb, struct genl_info *info)
11815{
11816 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11817 struct net_device *dev = info->user_ptr[1];
11818 struct ocb_setup setup = {};
11819 int err;
11820
11821 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
11822 if (err)
11823 return err;
11824
11825 return cfg80211_join_ocb(rdev, dev, &setup);
11826}
11827
11828static int nl80211_leave_ocb(struct sk_buff *skb, struct genl_info *info)
11829{
11830 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11831 struct net_device *dev = info->user_ptr[1];
11832
11833 return cfg80211_leave_ocb(rdev, dev);
11834}
11835
29cbe68c
JB		 11836static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
11837{
11838 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11839 struct net_device *dev = info->user_ptr[1];
11840 struct mesh_config cfg;
c80d545d 11841 struct mesh_setup setup;
29cbe68c
JB		 11842 int err;
11843
11844 /* start with default */
11845 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 11846 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 11847
24bdd9f4 11848 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 11849 /* and parse parameters if given */
24bdd9f4 11850 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 11851 if (err)
11852 return err;
11853 }
11854
11855 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
11856 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
11857 return -EINVAL;
11858
c80d545d
JC		 11859 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
11860 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
11861
4bb62344
CYY		 11862 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
11863 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
11864 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
11865 return -EINVAL;
11866
9bdbf04d
MP		 11867 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
11868 setup.beacon_interval =
11869 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 11870
0c317a02
PK		 11871 err = cfg80211_validate_beacon_int(rdev,
11872 NL80211_IFTYPE_MESH_POINT,
11873 setup.beacon_interval);
12d20fc9
PK		 11874 if (err)
11875 return err;
9bdbf04d
MP		 11876 }
11877
11878 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
11879 setup.dtim_period =
11880 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
11881 if (setup.dtim_period < 1 || setup.dtim_period > 100)
11882 return -EINVAL;
11883 }
11884
c80d545d
JC		 11885 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
11886 /* parse additional setup parameters if given */
11887 err = nl80211_parse_mesh_setup(info, &setup);
11888 if (err)
11889 return err;
11890 }
11891
d37bb18a
TP		 11892 if (setup.user_mpm)
11893 cfg.auto_open_plinks = false;
11894
cc1d2806 11895 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 11896 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
11897 if (err)
11898 return err;
cc1d2806 11899 } else {
188c1b3c 11900 /* __cfg80211_join_mesh() will sort it out */
683b6d3b 11901 setup.chandef.chan = NULL;
cc1d2806
JB		 11902 }
11903
ffb3cf30
AN		 11904 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
11905 u8 *rates = nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11906 int n_rates =
11907 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11908 struct ieee80211_supported_band *sband;
11909
11910 if (!setup.chandef.chan)
11911 return -EINVAL;
11912
11913 sband = rdev->wiphy.bands[setup.chandef.chan->band];
11914
11915 err = ieee80211_get_ratemask(sband, rates, n_rates,
11916 &setup.basic_rates);
11917 if (err)
11918 return err;
11919 }
11920
8564e382 11921 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 11922 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
11923 NL80211_ATTR_TX_RATES,
eb89a6a6 11924 &setup.beacon_rate,
857b34c4 11925 dev, false);
8564e382
JB		 11926 if (err)
11927 return err;
11928
265698d7
JB		 11929 if (!setup.chandef.chan)
11930 return -EINVAL;
11931
8564e382
JB		 11932 err = validate_beacon_tx_rate(rdev, setup.chandef.chan->band,
11933 &setup.beacon_rate);
11934 if (err)
11935 return err;
11936 }
11937
d37d49c2
BB		 11938 setup.userspace_handles_dfs =
11939 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
11940
1224f583
DK		 11941 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
11942 int r = validate_pae_over_nl80211(rdev, info);
11943
11944 if (r < 0)
11945 return r;
11946
11947 setup.control_port_over_nl80211 = true;
11948 }
11949
188c1b3c
DK		 11950 wdev_lock(dev->ieee80211_ptr);
11951 err = __cfg80211_join_mesh(rdev, dev, &setup, &cfg);
11952 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER])
11953 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11954 wdev_unlock(dev->ieee80211_ptr);
11955
11956 return err;
29cbe68c
JB		 11957}
11958
11959static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
11960{
11961 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11962 struct net_device *dev = info->user_ptr[1];
11963
11964 return cfg80211_leave_mesh(rdev, dev);
11965}
11966
dfb89c56 11967#ifdef CONFIG_PM
bb92d199
AK		 11968static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
11969 struct cfg80211_registered_device *rdev)
11970{
6abb9cb9 11971 struct cfg80211_wowlan *wowlan = rdev->wiphy.wowlan_config;
bb92d199
AK		 11972 struct nlattr *nl_pats, *nl_pat;
11973 int i, pat_len;
11974
6abb9cb9 11975 if (!wowlan->n_patterns)
bb92d199
AK		 11976 return 0;
11977
ae0be8de 11978 nl_pats = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
bb92d199
AK		 11979 if (!nl_pats)
11980 return -ENOBUFS;
11981
6abb9cb9 11982 for (i = 0; i < wowlan->n_patterns; i++) {
ae0be8de 11983 nl_pat = nla_nest_start_noflag(msg, i + 1);
bb92d199
AK		 11984 if (!nl_pat)
11985 return -ENOBUFS;
6abb9cb9 11986 pat_len = wowlan->patterns[i].pattern_len;
50ac6607 11987 if (nla_put(msg, NL80211_PKTPAT_MASK, DIV_ROUND_UP(pat_len, 8),
6abb9cb9 11988 wowlan->patterns[i].mask) ||
50ac6607
AK		 11989 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
11990 wowlan->patterns[i].pattern) ||
11991 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
6abb9cb9 11992 wowlan->patterns[i].pkt_offset))
bb92d199
AK		 11993 return -ENOBUFS;
11994 nla_nest_end(msg, nl_pat);
11995 }
11996 nla_nest_end(msg, nl_pats);
11997
11998 return 0;
11999}
12000
2a0e047e
JB		 12001static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
12002 struct cfg80211_wowlan_tcp *tcp)
12003{
12004 struct nlattr *nl_tcp;
12005
12006 if (!tcp)
12007 return 0;
12008
ae0be8de
MK		 12009 nl_tcp = nla_nest_start_noflag(msg,
12010 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
2a0e047e
JB		 12011 if (!nl_tcp)
12012 return -ENOBUFS;
12013
930345ea
JB		 12014 if (nla_put_in_addr(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
12015 nla_put_in_addr(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
2a0e047e
JB		 12016 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
12017 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
12018 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
12019 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
12020 tcp->payload_len, tcp->payload) ||
12021 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
12022 tcp->data_interval) ||
12023 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
12024 tcp->wake_len, tcp->wake_data) ||
12025 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
12026 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
12027 return -ENOBUFS;
12028
12029 if (tcp->payload_seq.len &&
12030 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
12031 sizeof(tcp->payload_seq), &tcp->payload_seq))
12032 return -ENOBUFS;
12033
12034 if (tcp->payload_tok.len &&
12035 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
12036 sizeof(tcp->payload_tok) + tcp->tokens_size,
12037 &tcp->payload_tok))
12038 return -ENOBUFS;
12039
e248ad30
JB		 12040 nla_nest_end(msg, nl_tcp);
12041
2a0e047e
JB		 12042 return 0;
12043}
12044
75453ccb
LC		 12045static int nl80211_send_wowlan_nd(struct sk_buff *msg,
12046 struct cfg80211_sched_scan_request *req)
12047{
3b06d277 12048 struct nlattr *nd, *freqs, *matches, *match, *scan_plans, *scan_plan;
75453ccb
LC		 12049 int i;
12050
12051 if (!req)
12052 return 0;
12053
ae0be8de 12054 nd = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_NET_DETECT);
75453ccb
LC		 12055 if (!nd)
12056 return -ENOBUFS;
12057
3b06d277
AS		 12058 if (req->n_scan_plans == 1 &&
12059 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_INTERVAL,
12060 req->scan_plans[0].interval * 1000))
75453ccb
LC		 12061 return -ENOBUFS;
12062
21fea567
LC		 12063 if (nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_DELAY, req->delay))
12064 return -ENOBUFS;
12065
bf95ecdb 12066 if (req->relative_rssi_set) {
12067 struct nl80211_bss_select_rssi_adjust rssi_adjust;
12068
12069 if (nla_put_s8(msg, NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI,
12070 req->relative_rssi))
12071 return -ENOBUFS;
12072
12073 rssi_adjust.band = req->rssi_adjust.band;
12074 rssi_adjust.delta = req->rssi_adjust.delta;
12075 if (nla_put(msg, NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST,
12076 sizeof(rssi_adjust), &rssi_adjust))
12077 return -ENOBUFS;
12078 }
12079
ae0be8de 12080 freqs = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_FREQUENCIES);
75453ccb
LC		 12081 if (!freqs)
12082 return -ENOBUFS;
12083
53b18980
JB		 12084 for (i = 0; i < req->n_channels; i++) {
12085 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
12086 return -ENOBUFS;
12087 }
75453ccb
LC		 12088
12089 nla_nest_end(msg, freqs);
12090
12091 if (req->n_match_sets) {
ae0be8de
MK		 12092 matches = nla_nest_start_noflag(msg,
12093 NL80211_ATTR_SCHED_SCAN_MATCH);
76e1fb4b
JB		 12094 if (!matches)
12095 return -ENOBUFS;
12096
75453ccb 12097 for (i = 0; i < req->n_match_sets; i++) {
ae0be8de 12098 match = nla_nest_start_noflag(msg, i);
76e1fb4b
JB		 12099 if (!match)
12100 return -ENOBUFS;
12101
53b18980
JB		 12102 if (nla_put(msg, NL80211_SCHED_SCAN_MATCH_ATTR_SSID,
12103 req->match_sets[i].ssid.ssid_len,
12104 req->match_sets[i].ssid.ssid))
12105 return -ENOBUFS;
75453ccb
LC		 12106 nla_nest_end(msg, match);
12107 }
12108 nla_nest_end(msg, matches);
12109 }
12110
ae0be8de 12111 scan_plans = nla_nest_start_noflag(msg, NL80211_ATTR_SCHED_SCAN_PLANS);
3b06d277
AS		 12112 if (!scan_plans)
12113 return -ENOBUFS;
12114
12115 for (i = 0; i < req->n_scan_plans; i++) {
ae0be8de 12116 scan_plan = nla_nest_start_noflag(msg, i + 1);
76e1fb4b
JB		 12117 if (!scan_plan)
12118 return -ENOBUFS;
12119
67626964 12120 if (nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_INTERVAL,
3b06d277
AS		 12121 req->scan_plans[i].interval) ||
12122 (req->scan_plans[i].iterations &&
12123 nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_ITERATIONS,
12124 req->scan_plans[i].iterations)))
12125 return -ENOBUFS;
12126 nla_nest_end(msg, scan_plan);
12127 }
12128 nla_nest_end(msg, scan_plans);
12129
75453ccb
LC		 12130 nla_nest_end(msg, nd);
12131
12132 return 0;
12133}
12134
ff1b6e69
JB		 12135static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
12136{
12137 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12138 struct sk_buff *msg;
12139 void *hdr;
2a0e047e 12140 u32 size = NLMSG_DEFAULT_SIZE;
ff1b6e69 12141
964dc9e2 12142 if (!rdev->wiphy.wowlan)
ff1b6e69
JB		 12143 return -EOPNOTSUPP;
12144
6abb9cb9 12145 if (rdev->wiphy.wowlan_config && rdev->wiphy.wowlan_config->tcp) {
2a0e047e 12146 /* adjust size to have room for all the data */
6abb9cb9
JB		 12147 size += rdev->wiphy.wowlan_config->tcp->tokens_size +
12148 rdev->wiphy.wowlan_config->tcp->payload_len +
12149 rdev->wiphy.wowlan_config->tcp->wake_len +
12150 rdev->wiphy.wowlan_config->tcp->wake_len / 8;
2a0e047e
JB		 12151 }
12152
12153 msg = nlmsg_new(size, GFP_KERNEL);
ff1b6e69
JB		 12154 if (!msg)
12155 return -ENOMEM;
12156
15e47304 12157 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 12158 NL80211_CMD_GET_WOWLAN);
12159 if (!hdr)
12160 goto nla_put_failure;
12161
6abb9cb9 12162 if (rdev->wiphy.wowlan_config) {
ff1b6e69
JB		 12163 struct nlattr *nl_wowlan;
12164
ae0be8de
MK		 12165 nl_wowlan = nla_nest_start_noflag(msg,
12166 NL80211_ATTR_WOWLAN_TRIGGERS);
ff1b6e69
JB		 12167 if (!nl_wowlan)
12168 goto nla_put_failure;
12169
6abb9cb9 12170 if ((rdev->wiphy.wowlan_config->any &&
9360ffd1 12171 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6abb9cb9 12172 (rdev->wiphy.wowlan_config->disconnect &&
9360ffd1 12173 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6abb9cb9 12174 (rdev->wiphy.wowlan_config->magic_pkt &&
9360ffd1 12175 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6abb9cb9 12176 (rdev->wiphy.wowlan_config->gtk_rekey_failure &&
9360ffd1 12177 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6abb9cb9 12178 (rdev->wiphy.wowlan_config->eap_identity_req &&
9360ffd1 12179 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6abb9cb9 12180 (rdev->wiphy.wowlan_config->four_way_handshake &&
9360ffd1 12181 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6abb9cb9 12182 (rdev->wiphy.wowlan_config->rfkill_release &&
9360ffd1
DM		 12183 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
12184 goto nla_put_failure;
2a0e047e 12185
bb92d199
AK		 12186 if (nl80211_send_wowlan_patterns(msg, rdev))
12187 goto nla_put_failure;
2a0e047e 12188
6abb9cb9
JB		 12189 if (nl80211_send_wowlan_tcp(msg,
12190 rdev->wiphy.wowlan_config->tcp))
2a0e047e 12191 goto nla_put_failure;
75453ccb
LC		 12192
12193 if (nl80211_send_wowlan_nd(
12194 msg,
12195 rdev->wiphy.wowlan_config->nd_config))
12196 goto nla_put_failure;
2a0e047e 12197
ff1b6e69
JB		 12198 nla_nest_end(msg, nl_wowlan);
12199 }
12200
12201 genlmsg_end(msg, hdr);
12202 return genlmsg_reply(msg, info);
12203
12204nla_put_failure:
12205 nlmsg_free(msg);
12206 return -ENOBUFS;
12207}
12208
2a0e047e
JB		 12209static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
12210 struct nlattr *attr,
12211 struct cfg80211_wowlan *trig)
12212{
12213 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
12214 struct cfg80211_wowlan_tcp *cfg;
12215 struct nl80211_wowlan_tcp_data_token *tok = NULL;
12216 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
12217 u32 size;
12218 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
12219 int err, port;
12220
964dc9e2 12221 if (!rdev->wiphy.wowlan->tcp)
2a0e047e
JB		 12222 return -EINVAL;
12223
8cb08174
JB		 12224 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TCP, attr,
12225 nl80211_wowlan_tcp_policy, NULL);
2a0e047e
JB		 12226 if (err)
12227 return err;
12228
12229 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
12230 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
12231 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
12232 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
12233 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
12234 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
12235 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
12236 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
12237 return -EINVAL;
12238
12239 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
964dc9e2 12240 if (data_size > rdev->wiphy.wowlan->tcp->data_payload_max)
2a0e047e
JB		 12241 return -EINVAL;
12242
12243 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
964dc9e2 12244 rdev->wiphy.wowlan->tcp->data_interval_max ||
723d568a 12245 nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) == 0)
2a0e047e
JB		 12246 return -EINVAL;
12247
12248 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
964dc9e2 12249 if (wake_size > rdev->wiphy.wowlan->tcp->wake_payload_max)
2a0e047e
JB		 12250 return -EINVAL;
12251
12252 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
12253 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
12254 return -EINVAL;
12255
12256 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
12257 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
12258
12259 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
12260 tokens_size = tokln - sizeof(*tok);
12261
12262 if (!tok->len || tokens_size % tok->len)
12263 return -EINVAL;
964dc9e2 12264 if (!rdev->wiphy.wowlan->tcp->tok)
2a0e047e 12265 return -EINVAL;
964dc9e2 12266 if (tok->len > rdev->wiphy.wowlan->tcp->tok->max_len)
2a0e047e 12267 return -EINVAL;
964dc9e2 12268 if (tok->len < rdev->wiphy.wowlan->tcp->tok->min_len)
2a0e047e 12269 return -EINVAL;
964dc9e2 12270 if (tokens_size > rdev->wiphy.wowlan->tcp->tok->bufsize)
2a0e047e
JB		 12271 return -EINVAL;
12272 if (tok->offset + tok->len > data_size)
12273 return -EINVAL;
12274 }
12275
12276 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
12277 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
964dc9e2 12278 if (!rdev->wiphy.wowlan->tcp->seq)
2a0e047e
JB		 12279 return -EINVAL;
12280 if (seq->len == 0 || seq->len > 4)
12281 return -EINVAL;
12282 if (seq->len + seq->offset > data_size)
12283 return -EINVAL;
12284 }
12285
12286 size = sizeof(*cfg);
12287 size += data_size;
12288 size += wake_size + wake_mask_size;
12289 size += tokens_size;
12290
12291 cfg = kzalloc(size, GFP_KERNEL);
12292 if (!cfg)
12293 return -ENOMEM;
67b61f6c
JB		 12294 cfg->src = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
12295 cfg->dst = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
2a0e047e
JB		 12296 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
12297 ETH_ALEN);
12298 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
12299 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
12300 else
12301 port = 0;
12302#ifdef CONFIG_INET
12303 /* allocate a socket and port for it and use it */
12304 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
12305 IPPROTO_TCP, &cfg->sock, 1);
12306 if (err) {
12307 kfree(cfg);
12308 return err;
12309 }
12310 if (inet_csk_get_port(cfg->sock->sk, port)) {
12311 sock_release(cfg->sock);
12312 kfree(cfg);
12313 return -EADDRINUSE;
12314 }
12315 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
12316#else
12317 if (!port) {
12318 kfree(cfg);
12319 return -EINVAL;
12320 }
12321 cfg->src_port = port;
12322#endif
12323
12324 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
12325 cfg->payload_len = data_size;
12326 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
12327 memcpy((void *)cfg->payload,
12328 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
12329 data_size);
12330 if (seq)
12331 cfg->payload_seq = *seq;
12332 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
12333 cfg->wake_len = wake_size;
12334 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
12335 memcpy((void *)cfg->wake_data,
12336 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
12337 wake_size);
12338 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
12339 data_size + wake_size;
12340 memcpy((void *)cfg->wake_mask,
12341 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
12342 wake_mask_size);
12343 if (tok) {
12344 cfg->tokens_size = tokens_size;
12345 memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
12346 }
12347
12348 trig->tcp = cfg;
12349
12350 return 0;
12351}
12352
8cd4d456
LC		 12353static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
12354 const struct wiphy_wowlan_support *wowlan,
12355 struct nlattr *attr,
12356 struct cfg80211_wowlan *trig)
12357{
12358 struct nlattr **tb;
12359 int err;
12360
6396bb22 12361 tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
8cd4d456
LC		 12362 if (!tb)
12363 return -ENOMEM;
12364
12365 if (!(wowlan->flags & WIPHY_WOWLAN_NET_DETECT)) {
12366 err = -EOPNOTSUPP;
12367 goto out;
12368 }
12369
8cb08174
JB		 12370 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_MAX, attr,
12371 nl80211_policy, NULL);
8cd4d456
LC		 12372 if (err)
12373 goto out;
12374
aad1e812
AVS		 12375 trig->nd_config = nl80211_parse_sched_scan(&rdev->wiphy, NULL, tb,
12376 wowlan->max_nd_match_sets);
8cd4d456
LC		 12377 err = PTR_ERR_OR_ZERO(trig->nd_config);
12378 if (err)
12379 trig->nd_config = NULL;
12380
12381out:
12382 kfree(tb);
12383 return err;
12384}
12385
ff1b6e69
JB		 12386static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
12387{
12388 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12389 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 12390 struct cfg80211_wowlan new_triggers = {};
ae33bd81 12391 struct cfg80211_wowlan *ntrig;
964dc9e2 12392 const struct wiphy_wowlan_support *wowlan = rdev->wiphy.wowlan;
ff1b6e69 12393 int err, i;
6abb9cb9 12394 bool prev_enabled = rdev->wiphy.wowlan_config;
98fc4386 12395 bool regular = false;
ff1b6e69 12396
964dc9e2 12397 if (!wowlan)
ff1b6e69
JB		 12398 return -EOPNOTSUPP;
12399
ae33bd81
JB		 12400 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
12401 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 12402 rdev->wiphy.wowlan_config = NULL;
ae33bd81
JB		 12403 goto set_wakeup;
12404 }
ff1b6e69 12405
8cb08174
JB		 12406 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TRIG,
12407 info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS],
12408 nl80211_wowlan_policy, info->extack);
ff1b6e69
JB		 12409 if (err)
12410 return err;
12411
12412 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
12413 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
12414 return -EINVAL;
12415 new_triggers.any = true;
12416 }
12417
12418 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
12419 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
12420 return -EINVAL;
12421 new_triggers.disconnect = true;
98fc4386 12422 regular = true;
ff1b6e69
JB		 12423 }
12424
12425 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
12426 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
12427 return -EINVAL;
12428 new_triggers.magic_pkt = true;
98fc4386 12429 regular = true;
ff1b6e69
JB		 12430 }
12431
77dbbb13
JB		 12432 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
12433 return -EINVAL;
12434
12435 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
12436 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
12437 return -EINVAL;
12438 new_triggers.gtk_rekey_failure = true;
98fc4386 12439 regular = true;
77dbbb13
JB		 12440 }
12441
12442 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
12443 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
12444 return -EINVAL;
12445 new_triggers.eap_identity_req = true;
98fc4386 12446 regular = true;
77dbbb13
JB		 12447 }
12448
12449 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
12450 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
12451 return -EINVAL;
12452 new_triggers.four_way_handshake = true;
98fc4386 12453 regular = true;
77dbbb13
JB		 12454 }
12455
12456 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
12457 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
12458 return -EINVAL;
12459 new_triggers.rfkill_release = true;
98fc4386 12460 regular = true;
77dbbb13
JB		 12461 }
12462
ff1b6e69
JB		 12463 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
12464 struct nlattr *pat;
12465 int n_patterns = 0;
bb92d199 12466 int rem, pat_len, mask_len, pkt_offset;
50ac6607 12467 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
ff1b6e69 12468
98fc4386
JB		 12469 regular = true;
12470
ff1b6e69
JB		 12471 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
12472 rem)
12473 n_patterns++;
12474 if (n_patterns > wowlan->n_patterns)
12475 return -EINVAL;
12476
12477 new_triggers.patterns = kcalloc(n_patterns,
12478 sizeof(new_triggers.patterns[0]),
12479 GFP_KERNEL);
12480 if (!new_triggers.patterns)
12481 return -ENOMEM;
12482
12483 new_triggers.n_patterns = n_patterns;
12484 i = 0;
12485
12486 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
12487 rem) {
922bd80f
JB		 12488 u8 *mask_pat;
12489
8cb08174
JB		 12490 err = nla_parse_nested_deprecated(pat_tb,
12491 MAX_NL80211_PKTPAT,
12492 pat,
12493 nl80211_packet_pattern_policy,
12494 info->extack);
95bca62f
JB		 12495 if (err)
12496 goto error;
12497
ff1b6e69 12498 err = -EINVAL;
50ac6607
AK		 12499 if (!pat_tb[NL80211_PKTPAT_MASK] ||
12500 !pat_tb[NL80211_PKTPAT_PATTERN])
ff1b6e69 12501 goto error;
50ac6607 12502 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
ff1b6e69 12503 mask_len = DIV_ROUND_UP(pat_len, 8);
50ac6607 12504 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
ff1b6e69
JB		 12505 goto error;
12506 if (pat_len > wowlan->pattern_max_len ||
12507 pat_len < wowlan->pattern_min_len)
12508 goto error;
12509
50ac6607 12510 if (!pat_tb[NL80211_PKTPAT_OFFSET])
bb92d199
AK		 12511 pkt_offset = 0;
12512 else
12513 pkt_offset = nla_get_u32(
50ac6607 12514 pat_tb[NL80211_PKTPAT_OFFSET]);
bb92d199
AK		 12515 if (pkt_offset > wowlan->max_pkt_offset)
12516 goto error;
12517 new_triggers.patterns[i].pkt_offset = pkt_offset;
12518
922bd80f
JB		 12519 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
12520 if (!mask_pat) {
ff1b6e69
JB		 12521 err = -ENOMEM;
12522 goto error;
12523 }
922bd80f
JB		 12524 new_triggers.patterns[i].mask = mask_pat;
12525 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
ff1b6e69 12526 mask_len);
922bd80f
JB		 12527 mask_pat += mask_len;
12528 new_triggers.patterns[i].pattern = mask_pat;
ff1b6e69 12529 new_triggers.patterns[i].pattern_len = pat_len;
922bd80f 12530 memcpy(mask_pat,
50ac6607 12531 nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
ff1b6e69
JB		 12532 pat_len);
12533 i++;
12534 }
12535 }
12536
2a0e047e 12537 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
98fc4386 12538 regular = true;
2a0e047e
JB		 12539 err = nl80211_parse_wowlan_tcp(
12540 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
12541 &new_triggers);
12542 if (err)
12543 goto error;
12544 }
12545
8cd4d456 12546 if (tb[NL80211_WOWLAN_TRIG_NET_DETECT]) {
98fc4386 12547 regular = true;
8cd4d456
LC		 12548 err = nl80211_parse_wowlan_nd(
12549 rdev, wowlan, tb[NL80211_WOWLAN_TRIG_NET_DETECT],
12550 &new_triggers);
12551 if (err)
12552 goto error;
12553 }
12554
98fc4386
JB		 12555 /* The 'any' trigger means the device continues operating more or less
12556 * as in its normal operation mode and wakes up the host on most of the
12557 * normal interrupts (like packet RX, ...)
12558 * It therefore makes little sense to combine with the more constrained
12559 * wakeup trigger modes.
12560 */
12561 if (new_triggers.any && regular) {
12562 err = -EINVAL;
12563 goto error;
12564 }
12565
ae33bd81
JB		 12566 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
12567 if (!ntrig) {
12568 err = -ENOMEM;
12569 goto error;
ff1b6e69 12570 }
ae33bd81 12571 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 12572 rdev->wiphy.wowlan_config = ntrig;
ff1b6e69 12573
ae33bd81 12574 set_wakeup:
6abb9cb9
JB		 12575 if (rdev->ops->set_wakeup &&
12576 prev_enabled != !!rdev->wiphy.wowlan_config)
12577 rdev_set_wakeup(rdev, rdev->wiphy.wowlan_config);
6d52563f 12578
ff1b6e69
JB		 12579 return 0;
12580 error:
12581 for (i = 0; i < new_triggers.n_patterns; i++)
12582 kfree(new_triggers.patterns[i].mask);
12583 kfree(new_triggers.patterns);
2a0e047e
JB		 12584 if (new_triggers.tcp && new_triggers.tcp->sock)
12585 sock_release(new_triggers.tcp->sock);
12586 kfree(new_triggers.tcp);
e5dbe070 12587 kfree(new_triggers.nd_config);
ff1b6e69
JB		 12588 return err;
12589}
dfb89c56 12590#endif
ff1b6e69 12591
be29b99a
AK		 12592static int nl80211_send_coalesce_rules(struct sk_buff *msg,
12593 struct cfg80211_registered_device *rdev)
12594{
12595 struct nlattr *nl_pats, *nl_pat, *nl_rule, *nl_rules;
12596 int i, j, pat_len;
12597 struct cfg80211_coalesce_rules *rule;
12598
12599 if (!rdev->coalesce->n_rules)
12600 return 0;
12601
ae0be8de 12602 nl_rules = nla_nest_start_noflag(msg, NL80211_ATTR_COALESCE_RULE);
be29b99a
AK		 12603 if (!nl_rules)
12604 return -ENOBUFS;
12605
12606 for (i = 0; i < rdev->coalesce->n_rules; i++) {
ae0be8de 12607 nl_rule = nla_nest_start_noflag(msg, i + 1);
be29b99a
AK		 12608 if (!nl_rule)
12609 return -ENOBUFS;
12610
12611 rule = &rdev->coalesce->rules[i];
12612 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_DELAY,
12613 rule->delay))
12614 return -ENOBUFS;
12615
12616 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_CONDITION,
12617 rule->condition))
12618 return -ENOBUFS;
12619
ae0be8de
MK		 12620 nl_pats = nla_nest_start_noflag(msg,
12621 NL80211_ATTR_COALESCE_RULE_PKT_PATTERN);
be29b99a
AK		 12622 if (!nl_pats)
12623 return -ENOBUFS;
12624
12625 for (j = 0; j < rule->n_patterns; j++) {
ae0be8de 12626 nl_pat = nla_nest_start_noflag(msg, j + 1);
be29b99a
AK		 12627 if (!nl_pat)
12628 return -ENOBUFS;
12629 pat_len = rule->patterns[j].pattern_len;
12630 if (nla_put(msg, NL80211_PKTPAT_MASK,
12631 DIV_ROUND_UP(pat_len, 8),
12632 rule->patterns[j].mask) ||
12633 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
12634 rule->patterns[j].pattern) ||
12635 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
12636 rule->patterns[j].pkt_offset))
12637 return -ENOBUFS;
12638 nla_nest_end(msg, nl_pat);
12639 }
12640 nla_nest_end(msg, nl_pats);
12641 nla_nest_end(msg, nl_rule);
12642 }
12643 nla_nest_end(msg, nl_rules);
12644
12645 return 0;
12646}
12647
12648static int nl80211_get_coalesce(struct sk_buff *skb, struct genl_info *info)
12649{
12650 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12651 struct sk_buff *msg;
12652 void *hdr;
12653
12654 if (!rdev->wiphy.coalesce)
12655 return -EOPNOTSUPP;
12656
12657 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12658 if (!msg)
12659 return -ENOMEM;
12660
12661 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
12662 NL80211_CMD_GET_COALESCE);
12663 if (!hdr)
12664 goto nla_put_failure;
12665
12666 if (rdev->coalesce && nl80211_send_coalesce_rules(msg, rdev))
12667 goto nla_put_failure;
12668
12669 genlmsg_end(msg, hdr);
12670 return genlmsg_reply(msg, info);
12671
12672nla_put_failure:
12673 nlmsg_free(msg);
12674 return -ENOBUFS;
12675}
12676
12677void cfg80211_rdev_free_coalesce(struct cfg80211_registered_device *rdev)
12678{
12679 struct cfg80211_coalesce *coalesce = rdev->coalesce;
12680 int i, j;
12681 struct cfg80211_coalesce_rules *rule;
12682
12683 if (!coalesce)
12684 return;
12685
12686 for (i = 0; i < coalesce->n_rules; i++) {
12687 rule = &coalesce->rules[i];
12688 for (j = 0; j < rule->n_patterns; j++)
12689 kfree(rule->patterns[j].mask);
12690 kfree(rule->patterns);
12691 }
12692 kfree(coalesce->rules);
12693 kfree(coalesce);
12694 rdev->coalesce = NULL;
12695}
12696
12697static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
12698 struct nlattr *rule,
12699 struct cfg80211_coalesce_rules *new_rule)
12700{
12701 int err, i;
12702 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
12703 struct nlattr *tb[NUM_NL80211_ATTR_COALESCE_RULE], *pat;
12704 int rem, pat_len, mask_len, pkt_offset, n_patterns = 0;
12705 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
12706
8cb08174
JB		 12707 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_COALESCE_RULE_MAX,
12708 rule, nl80211_coalesce_policy, NULL);
be29b99a
AK		 12709 if (err)
12710 return err;
12711
12712 if (tb[NL80211_ATTR_COALESCE_RULE_DELAY])
12713 new_rule->delay =
12714 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_DELAY]);
12715 if (new_rule->delay > coalesce->max_delay)
12716 return -EINVAL;
12717
12718 if (tb[NL80211_ATTR_COALESCE_RULE_CONDITION])
12719 new_rule->condition =
12720 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_CONDITION]);
be29b99a
AK		 12721
12722 if (!tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN])
12723 return -EINVAL;
12724
12725 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
12726 rem)
12727 n_patterns++;
12728 if (n_patterns > coalesce->n_patterns)
12729 return -EINVAL;
12730
12731 new_rule->patterns = kcalloc(n_patterns, sizeof(new_rule->patterns[0]),
12732 GFP_KERNEL);
12733 if (!new_rule->patterns)
12734 return -ENOMEM;
12735
12736 new_rule->n_patterns = n_patterns;
12737 i = 0;
12738
12739 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
12740 rem) {
922bd80f
JB		 12741 u8 *mask_pat;
12742
8cb08174
JB		 12743 err = nla_parse_nested_deprecated(pat_tb, MAX_NL80211_PKTPAT,
12744 pat,
12745 nl80211_packet_pattern_policy,
12746 NULL);
95bca62f
JB		 12747 if (err)
12748 return err;
12749
be29b99a
AK		 12750 if (!pat_tb[NL80211_PKTPAT_MASK] ||
12751 !pat_tb[NL80211_PKTPAT_PATTERN])
12752 return -EINVAL;
12753 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
12754 mask_len = DIV_ROUND_UP(pat_len, 8);
12755 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
12756 return -EINVAL;
12757 if (pat_len > coalesce->pattern_max_len ||
12758 pat_len < coalesce->pattern_min_len)
12759 return -EINVAL;
12760
12761 if (!pat_tb[NL80211_PKTPAT_OFFSET])
12762 pkt_offset = 0;
12763 else
12764 pkt_offset = nla_get_u32(pat_tb[NL80211_PKTPAT_OFFSET]);
12765 if (pkt_offset > coalesce->max_pkt_offset)
12766 return -EINVAL;
12767 new_rule->patterns[i].pkt_offset = pkt_offset;
12768
922bd80f
JB		 12769 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
12770 if (!mask_pat)
be29b99a 12771 return -ENOMEM;
922bd80f
JB		 12772
12773 new_rule->patterns[i].mask = mask_pat;
12774 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
12775 mask_len);
12776
12777 mask_pat += mask_len;
12778 new_rule->patterns[i].pattern = mask_pat;
be29b99a 12779 new_rule->patterns[i].pattern_len = pat_len;
922bd80f
JB		 12780 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
12781 pat_len);
be29b99a
AK		 12782 i++;
12783 }
12784
12785 return 0;
12786}
12787
12788static int nl80211_set_coalesce(struct sk_buff *skb, struct genl_info *info)
12789{
12790 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12791 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
12792 struct cfg80211_coalesce new_coalesce = {};
12793 struct cfg80211_coalesce *n_coalesce;
12794 int err, rem_rule, n_rules = 0, i, j;
12795 struct nlattr *rule;
12796 struct cfg80211_coalesce_rules *tmp_rule;
12797
12798 if (!rdev->wiphy.coalesce || !rdev->ops->set_coalesce)
12799 return -EOPNOTSUPP;
12800
12801 if (!info->attrs[NL80211_ATTR_COALESCE_RULE]) {
12802 cfg80211_rdev_free_coalesce(rdev);
a1056b1b 12803 rdev_set_coalesce(rdev, NULL);
be29b99a
AK		 12804 return 0;
12805 }
12806
12807 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
12808 rem_rule)
12809 n_rules++;
12810 if (n_rules > coalesce->n_rules)
12811 return -EINVAL;
12812
12813 new_coalesce.rules = kcalloc(n_rules, sizeof(new_coalesce.rules[0]),
12814 GFP_KERNEL);
12815 if (!new_coalesce.rules)
12816 return -ENOMEM;
12817
12818 new_coalesce.n_rules = n_rules;
12819 i = 0;
12820
12821 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
12822 rem_rule) {
12823 err = nl80211_parse_coalesce_rule(rdev, rule,
12824 &new_coalesce.rules[i]);
12825 if (err)
12826 goto error;
12827
12828 i++;
12829 }
12830
a1056b1b 12831 err = rdev_set_coalesce(rdev, &new_coalesce);
be29b99a
AK		 12832 if (err)
12833 goto error;
12834
12835 n_coalesce = kmemdup(&new_coalesce, sizeof(new_coalesce), GFP_KERNEL);
12836 if (!n_coalesce) {
12837 err = -ENOMEM;
12838 goto error;
12839 }
12840 cfg80211_rdev_free_coalesce(rdev);
12841 rdev->coalesce = n_coalesce;
12842
12843 return 0;
12844error:
12845 for (i = 0; i < new_coalesce.n_rules; i++) {
12846 tmp_rule = &new_coalesce.rules[i];
12847 for (j = 0; j < tmp_rule->n_patterns; j++)
12848 kfree(tmp_rule->patterns[j].mask);
12849 kfree(tmp_rule->patterns);
12850 }
12851 kfree(new_coalesce.rules);
12852
12853 return err;
12854}
12855
e5497d76
JB		 12856static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
12857{
12858 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12859 struct net_device *dev = info->user_ptr[1];
12860 struct wireless_dev *wdev = dev->ieee80211_ptr;
12861 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
f495acd8 12862 struct cfg80211_gtk_rekey_data rekey_data = {};
e5497d76
JB		 12863 int err;
12864
12865 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
12866 return -EINVAL;
12867
8cb08174
JB		 12868 err = nla_parse_nested_deprecated(tb, MAX_NL80211_REKEY_DATA,
12869 info->attrs[NL80211_ATTR_REKEY_DATA],
12870 nl80211_rekey_policy, info->extack);
e5497d76
JB		 12871 if (err)
12872 return err;
12873
e785fa0a
VD		 12874 if (!tb[NL80211_REKEY_DATA_REPLAY_CTR] || !tb[NL80211_REKEY_DATA_KEK] ||
12875 !tb[NL80211_REKEY_DATA_KCK])
12876 return -EINVAL;
093a48d2
NE		 12877 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN &&
12878 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
12879 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KEK_EXT_LEN))
e5497d76 12880 return -ERANGE;
093a48d2
NE		 12881 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN &&
12882 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
12883 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KCK_EXT_LEN))
e5497d76
JB		 12884 return -ERANGE;
12885
78f686ca
JB		 12886 rekey_data.kek = nla_data(tb[NL80211_REKEY_DATA_KEK]);
12887 rekey_data.kck = nla_data(tb[NL80211_REKEY_DATA_KCK]);
12888 rekey_data.replay_ctr = nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]);
093a48d2
NE		 12889 rekey_data.kek_len = nla_len(tb[NL80211_REKEY_DATA_KEK]);
12890 rekey_data.kck_len = nla_len(tb[NL80211_REKEY_DATA_KCK]);
12891 if (tb[NL80211_REKEY_DATA_AKM])
12892 rekey_data.akm = nla_get_u32(tb[NL80211_REKEY_DATA_AKM]);
e5497d76
JB		 12893
12894 wdev_lock(wdev);
12895 if (!wdev->current_bss) {
12896 err = -ENOTCONN;
12897 goto out;
12898 }
12899
12900 if (!rdev->ops->set_rekey_data) {
12901 err = -EOPNOTSUPP;
12902 goto out;
12903 }
12904
e35e4d28 12905 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 12906 out:
12907 wdev_unlock(wdev);
12908 return err;
12909}
12910
28946da7
JB		 12911static int nl80211_register_unexpected_frame(struct sk_buff *skb,
12912 struct genl_info *info)
12913{
12914 struct net_device *dev = info->user_ptr[1];
12915 struct wireless_dev *wdev = dev->ieee80211_ptr;
12916
12917 if (wdev->iftype != NL80211_IFTYPE_AP &&
12918 wdev->iftype != NL80211_IFTYPE_P2P_GO)
12919 return -EINVAL;
12920
15e47304 12921 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 12922 return -EBUSY;
12923
15e47304 12924 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 12925 return 0;
12926}
12927
7f6cf311
JB		 12928static int nl80211_probe_client(struct sk_buff *skb,
12929 struct genl_info *info)
12930{
12931 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12932 struct net_device *dev = info->user_ptr[1];
12933 struct wireless_dev *wdev = dev->ieee80211_ptr;
12934 struct sk_buff *msg;
12935 void *hdr;
12936 const u8 *addr;
12937 u64 cookie;
12938 int err;
12939
12940 if (wdev->iftype != NL80211_IFTYPE_AP &&
12941 wdev->iftype != NL80211_IFTYPE_P2P_GO)
12942 return -EOPNOTSUPP;
12943
12944 if (!info->attrs[NL80211_ATTR_MAC])
12945 return -EINVAL;
12946
12947 if (!rdev->ops->probe_client)
12948 return -EOPNOTSUPP;
12949
12950 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12951 if (!msg)
12952 return -ENOMEM;
12953
15e47304 12954 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311 12955 NL80211_CMD_PROBE_CLIENT);
cb35fba3
DC		 12956 if (!hdr) {
12957 err = -ENOBUFS;
7f6cf311
JB		 12958 goto free_msg;
12959 }
12960
12961 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
12962
e35e4d28 12963 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 12964 if (err)
12965 goto free_msg;
12966
2dad624e
ND		 12967 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12968 NL80211_ATTR_PAD))
9360ffd1 12969 goto nla_put_failure;
7f6cf311
JB		 12970
12971 genlmsg_end(msg, hdr);
12972
12973 return genlmsg_reply(msg, info);
12974
12975 nla_put_failure:
12976 err = -ENOBUFS;
12977 free_msg:
12978 nlmsg_free(msg);
12979 return err;
12980}
12981
5e760230
JB		 12982static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
12983{
12984 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 12985 struct cfg80211_beacon_registration *reg, *nreg;
12986 int rv;
5e760230
JB		 12987
12988 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
12989 return -EOPNOTSUPP;
12990
37c73b5f
BG		 12991 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
12992 if (!nreg)
12993 return -ENOMEM;
12994
12995 /* First, check if already registered. */
12996 spin_lock_bh(&rdev->beacon_registrations_lock);
12997 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
12998 if (reg->nlportid == info->snd_portid) {
12999 rv = -EALREADY;
13000 goto out_err;
13001 }
13002 }
13003 /* Add it to the list */
13004 nreg->nlportid = info->snd_portid;
13005 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 13006
37c73b5f 13007 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 13008
13009 return 0;
37c73b5f
BG		 13010out_err:
13011 spin_unlock_bh(&rdev->beacon_registrations_lock);
13012 kfree(nreg);
13013 return rv;
5e760230
JB		 13014}
13015
98104fde
JB		 13016static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
13017{
13018 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13019 struct wireless_dev *wdev = info->user_ptr[1];
13020 int err;
13021
13022 if (!rdev->ops->start_p2p_device)
13023 return -EOPNOTSUPP;
13024
13025 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
13026 return -EOPNOTSUPP;
13027
73c7da3d 13028 if (wdev_running(wdev))
98104fde
JB		 13029 return 0;
13030
b6a55015
LC		 13031 if (rfkill_blocked(rdev->rfkill))
13032 return -ERFKILL;
98104fde 13033
eeb126e9 13034 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 13035 if (err)
13036 return err;
13037
73c7da3d 13038 wdev->is_running = true;
98104fde 13039 rdev->opencount++;
98104fde
JB		 13040
13041 return 0;
13042}
13043
13044static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
13045{
13046 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13047 struct wireless_dev *wdev = info->user_ptr[1];
13048
13049 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
13050 return -EOPNOTSUPP;
13051
13052 if (!rdev->ops->stop_p2p_device)
13053 return -EOPNOTSUPP;
13054
f9f47529 13055 cfg80211_stop_p2p_device(rdev, wdev);
98104fde
JB		 13056
13057 return 0;
13058}
13059
cb3b7d87
AB		 13060static int nl80211_start_nan(struct sk_buff *skb, struct genl_info *info)
13061{
13062 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13063 struct wireless_dev *wdev = info->user_ptr[1];
13064 struct cfg80211_nan_conf conf = {};
13065 int err;
13066
13067 if (wdev->iftype != NL80211_IFTYPE_NAN)
13068 return -EOPNOTSUPP;
13069
eeb04a96 13070 if (wdev_running(wdev))
cb3b7d87
AB		 13071 return -EEXIST;
13072
13073 if (rfkill_blocked(rdev->rfkill))
13074 return -ERFKILL;
13075
13076 if (!info->attrs[NL80211_ATTR_NAN_MASTER_PREF])
13077 return -EINVAL;
13078
cb3b7d87
AB		 13079 conf.master_pref =
13080 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
cb3b7d87 13081
8585989d
LC		 13082 if (info->attrs[NL80211_ATTR_BANDS]) {
13083 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
13084
13085 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
13086 return -EOPNOTSUPP;
13087
13088 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
13089 return -EINVAL;
13090
13091 conf.bands = bands;
13092 }
cb3b7d87
AB		 13093
13094 err = rdev_start_nan(rdev, wdev, &conf);
13095 if (err)
13096 return err;
13097
73c7da3d 13098 wdev->is_running = true;
cb3b7d87
AB		 13099 rdev->opencount++;
13100
13101 return 0;
13102}
13103
13104static int nl80211_stop_nan(struct sk_buff *skb, struct genl_info *info)
13105{
13106 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13107 struct wireless_dev *wdev = info->user_ptr[1];
13108
13109 if (wdev->iftype != NL80211_IFTYPE_NAN)
13110 return -EOPNOTSUPP;
13111
13112 cfg80211_stop_nan(rdev, wdev);
13113
13114 return 0;
13115}
13116
a442b761
AB		 13117static int validate_nan_filter(struct nlattr *filter_attr)
13118{
13119 struct nlattr *attr;
13120 int len = 0, n_entries = 0, rem;
13121
13122 nla_for_each_nested(attr, filter_attr, rem) {
13123 len += nla_len(attr);
13124 n_entries++;
13125 }
13126
13127 if (len >= U8_MAX)
13128 return -EINVAL;
13129
13130 return n_entries;
13131}
13132
13133static int handle_nan_filter(struct nlattr *attr_filter,
13134 struct cfg80211_nan_func *func,
13135 bool tx)
13136{
13137 struct nlattr *attr;
13138 int n_entries, rem, i;
13139 struct cfg80211_nan_func_filter *filter;
13140
13141 n_entries = validate_nan_filter(attr_filter);
13142 if (n_entries < 0)
13143 return n_entries;
13144
13145 BUILD_BUG_ON(sizeof(*func->rx_filters) != sizeof(*func->tx_filters));
13146
13147 filter = kcalloc(n_entries, sizeof(*func->rx_filters), GFP_KERNEL);
13148 if (!filter)
13149 return -ENOMEM;
13150
13151 i = 0;
13152 nla_for_each_nested(attr, attr_filter, rem) {
b15ca182 13153 filter[i].filter = nla_memdup(attr, GFP_KERNEL);
a442b761
AB		 13154 filter[i].len = nla_len(attr);
13155 i++;
13156 }
13157 if (tx) {
13158 func->num_tx_filters = n_entries;
13159 func->tx_filters = filter;
13160 } else {
13161 func->num_rx_filters = n_entries;
13162 func->rx_filters = filter;
13163 }
13164
13165 return 0;
13166}
13167
13168static int nl80211_nan_add_func(struct sk_buff *skb,
13169 struct genl_info *info)
13170{
13171 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13172 struct wireless_dev *wdev = info->user_ptr[1];
13173 struct nlattr *tb[NUM_NL80211_NAN_FUNC_ATTR], *func_attr;
13174 struct cfg80211_nan_func *func;
13175 struct sk_buff *msg = NULL;
13176 void *hdr = NULL;
13177 int err = 0;
13178
13179 if (wdev->iftype != NL80211_IFTYPE_NAN)
13180 return -EOPNOTSUPP;
13181
73c7da3d 13182 if (!wdev_running(wdev))
a442b761
AB		 13183 return -ENOTCONN;
13184
13185 if (!info->attrs[NL80211_ATTR_NAN_FUNC])
13186 return -EINVAL;
13187
8cb08174
JB		 13188 err = nla_parse_nested_deprecated(tb, NL80211_NAN_FUNC_ATTR_MAX,
13189 info->attrs[NL80211_ATTR_NAN_FUNC],
13190 nl80211_nan_func_policy,
13191 info->extack);
a442b761
AB		 13192 if (err)
13193 return err;
13194
13195 func = kzalloc(sizeof(*func), GFP_KERNEL);
13196 if (!func)
13197 return -ENOMEM;
13198
b60ad348 13199 func->cookie = cfg80211_assign_cookie(rdev);
a442b761 13200
cb9abd48 13201 if (!tb[NL80211_NAN_FUNC_TYPE]) {
a442b761
AB		 13202 err = -EINVAL;
13203 goto out;
13204 }
13205
13206
13207 func->type = nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]);
13208
13209 if (!tb[NL80211_NAN_FUNC_SERVICE_ID]) {
13210 err = -EINVAL;
13211 goto out;
13212 }
13213
13214 memcpy(func->service_id, nla_data(tb[NL80211_NAN_FUNC_SERVICE_ID]),
13215 sizeof(func->service_id));
13216
13217 func->close_range =
13218 nla_get_flag(tb[NL80211_NAN_FUNC_CLOSE_RANGE]);
13219
13220 if (tb[NL80211_NAN_FUNC_SERVICE_INFO]) {
13221 func->serv_spec_info_len =
13222 nla_len(tb[NL80211_NAN_FUNC_SERVICE_INFO]);
13223 func->serv_spec_info =
13224 kmemdup(nla_data(tb[NL80211_NAN_FUNC_SERVICE_INFO]),
13225 func->serv_spec_info_len,
13226 GFP_KERNEL);
13227 if (!func->serv_spec_info) {
13228 err = -ENOMEM;
13229 goto out;
13230 }
13231 }
13232
13233 if (tb[NL80211_NAN_FUNC_TTL])
13234 func->ttl = nla_get_u32(tb[NL80211_NAN_FUNC_TTL]);
13235
13236 switch (func->type) {
13237 case NL80211_NAN_FUNC_PUBLISH:
13238 if (!tb[NL80211_NAN_FUNC_PUBLISH_TYPE]) {
13239 err = -EINVAL;
13240 goto out;
13241 }
13242
13243 func->publish_type =
13244 nla_get_u8(tb[NL80211_NAN_FUNC_PUBLISH_TYPE]);
13245 func->publish_bcast =
13246 nla_get_flag(tb[NL80211_NAN_FUNC_PUBLISH_BCAST]);
13247
13248 if ((!(func->publish_type & NL80211_NAN_SOLICITED_PUBLISH)) &&
13249 func->publish_bcast) {
13250 err = -EINVAL;
13251 goto out;
13252 }
13253 break;
13254 case NL80211_NAN_FUNC_SUBSCRIBE:
13255 func->subscribe_active =
13256 nla_get_flag(tb[NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE]);
13257 break;
13258 case NL80211_NAN_FUNC_FOLLOW_UP:
13259 if (!tb[NL80211_NAN_FUNC_FOLLOW_UP_ID] ||
3ea15452
HC		 13260 !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] ||
13261 !tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]) {
a442b761
AB		 13262 err = -EINVAL;
13263 goto out;
13264 }
13265
13266 func->followup_id =
13267 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_ID]);
13268 func->followup_reqid =
13269 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID]);
13270 memcpy(func->followup_dest.addr,
13271 nla_data(tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]),
13272 sizeof(func->followup_dest.addr));
13273 if (func->ttl) {
13274 err = -EINVAL;
13275 goto out;
13276 }
13277 break;
13278 default:
13279 err = -EINVAL;
13280 goto out;
13281 }
13282
13283 if (tb[NL80211_NAN_FUNC_SRF]) {
13284 struct nlattr *srf_tb[NUM_NL80211_NAN_SRF_ATTR];
13285
8cb08174
JB		 13286 err = nla_parse_nested_deprecated(srf_tb,
13287 NL80211_NAN_SRF_ATTR_MAX,
13288 tb[NL80211_NAN_FUNC_SRF],
13289 nl80211_nan_srf_policy,
13290 info->extack);
a442b761
AB		 13291 if (err)
13292 goto out;
13293
13294 func->srf_include =
13295 nla_get_flag(srf_tb[NL80211_NAN_SRF_INCLUDE]);
13296
13297 if (srf_tb[NL80211_NAN_SRF_BF]) {
13298 if (srf_tb[NL80211_NAN_SRF_MAC_ADDRS] ||
13299 !srf_tb[NL80211_NAN_SRF_BF_IDX]) {
13300 err = -EINVAL;
13301 goto out;
13302 }
13303
13304 func->srf_bf_len =
13305 nla_len(srf_tb[NL80211_NAN_SRF_BF]);
13306 func->srf_bf =
13307 kmemdup(nla_data(srf_tb[NL80211_NAN_SRF_BF]),
13308 func->srf_bf_len, GFP_KERNEL);
13309 if (!func->srf_bf) {
13310 err = -ENOMEM;
13311 goto out;
13312 }
13313
13314 func->srf_bf_idx =
13315 nla_get_u8(srf_tb[NL80211_NAN_SRF_BF_IDX]);
13316 } else {
13317 struct nlattr *attr, *mac_attr =
13318 srf_tb[NL80211_NAN_SRF_MAC_ADDRS];
13319 int n_entries, rem, i = 0;
13320
13321 if (!mac_attr) {
13322 err = -EINVAL;
13323 goto out;
13324 }
13325
13326 n_entries = validate_acl_mac_addrs(mac_attr);
13327 if (n_entries <= 0) {
13328 err = -EINVAL;
13329 goto out;
13330 }
13331
13332 func->srf_num_macs = n_entries;
13333 func->srf_macs =
6396bb22 13334 kcalloc(n_entries, sizeof(*func->srf_macs),
a442b761
AB		 13335 GFP_KERNEL);
13336 if (!func->srf_macs) {
13337 err = -ENOMEM;
13338 goto out;
13339 }
13340
13341 nla_for_each_nested(attr, mac_attr, rem)
13342 memcpy(func->srf_macs[i++].addr, nla_data(attr),
13343 sizeof(*func->srf_macs));
13344 }
13345 }
13346
13347 if (tb[NL80211_NAN_FUNC_TX_MATCH_FILTER]) {
13348 err = handle_nan_filter(tb[NL80211_NAN_FUNC_TX_MATCH_FILTER],
13349 func, true);
13350 if (err)
13351 goto out;
13352 }
13353
13354 if (tb[NL80211_NAN_FUNC_RX_MATCH_FILTER]) {
13355 err = handle_nan_filter(tb[NL80211_NAN_FUNC_RX_MATCH_FILTER],
13356 func, false);
13357 if (err)
13358 goto out;
13359 }
13360
13361 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13362 if (!msg) {
13363 err = -ENOMEM;
13364 goto out;
13365 }
13366
13367 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13368 NL80211_CMD_ADD_NAN_FUNCTION);
13369 /* This can't really happen - we just allocated 4KB */
13370 if (WARN_ON(!hdr)) {
13371 err = -ENOMEM;
13372 goto out;
13373 }
13374
13375 err = rdev_add_nan_func(rdev, wdev, func);
13376out:
13377 if (err < 0) {
13378 cfg80211_free_nan_func(func);
13379 nlmsg_free(msg);
13380 return err;
13381 }
13382
13383 /* propagate the instance id and cookie to userspace */
13384 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, func->cookie,
13385 NL80211_ATTR_PAD))
13386 goto nla_put_failure;
13387
ae0be8de 13388 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
a442b761
AB		 13389 if (!func_attr)
13390 goto nla_put_failure;
13391
13392 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID,
13393 func->instance_id))
13394 goto nla_put_failure;
13395
13396 nla_nest_end(msg, func_attr);
13397
13398 genlmsg_end(msg, hdr);
13399 return genlmsg_reply(msg, info);
13400
13401nla_put_failure:
13402 nlmsg_free(msg);
13403 return -ENOBUFS;
13404}
13405
13406static int nl80211_nan_del_func(struct sk_buff *skb,
13407 struct genl_info *info)
13408{
13409 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13410 struct wireless_dev *wdev = info->user_ptr[1];
13411 u64 cookie;
13412
13413 if (wdev->iftype != NL80211_IFTYPE_NAN)
13414 return -EOPNOTSUPP;
13415
73c7da3d 13416 if (!wdev_running(wdev))
a442b761
AB		 13417 return -ENOTCONN;
13418
13419 if (!info->attrs[NL80211_ATTR_COOKIE])
13420 return -EINVAL;
13421
a442b761
AB		 13422 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
13423
13424 rdev_del_nan_func(rdev, wdev, cookie);
13425
13426 return 0;
13427}
13428
a5a9dcf2
AB		 13429static int nl80211_nan_change_config(struct sk_buff *skb,
13430 struct genl_info *info)
13431{
13432 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13433 struct wireless_dev *wdev = info->user_ptr[1];
13434 struct cfg80211_nan_conf conf = {};
13435 u32 changed = 0;
13436
13437 if (wdev->iftype != NL80211_IFTYPE_NAN)
13438 return -EOPNOTSUPP;
13439
73c7da3d 13440 if (!wdev_running(wdev))
a5a9dcf2
AB		 13441 return -ENOTCONN;
13442
13443 if (info->attrs[NL80211_ATTR_NAN_MASTER_PREF]) {
13444 conf.master_pref =
13445 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
13446 if (conf.master_pref <= 1 || conf.master_pref == 255)
13447 return -EINVAL;
13448
13449 changed |= CFG80211_NAN_CONF_CHANGED_PREF;
13450 }
13451
8585989d
LC		 13452 if (info->attrs[NL80211_ATTR_BANDS]) {
13453 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
13454
13455 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
13456 return -EOPNOTSUPP;
13457
13458 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
13459 return -EINVAL;
13460
13461 conf.bands = bands;
13462 changed |= CFG80211_NAN_CONF_CHANGED_BANDS;
a5a9dcf2
AB		 13463 }
13464
13465 if (!changed)
13466 return -EINVAL;
13467
13468 return rdev_nan_change_conf(rdev, wdev, &conf, changed);
13469}
13470
50bcd31d
AB		 13471void cfg80211_nan_match(struct wireless_dev *wdev,
13472 struct cfg80211_nan_match_params *match, gfp_t gfp)
13473{
13474 struct wiphy *wiphy = wdev->wiphy;
13475 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
13476 struct nlattr *match_attr, *local_func_attr, *peer_func_attr;
13477 struct sk_buff *msg;
13478 void *hdr;
13479
13480 if (WARN_ON(!match->inst_id || !match->peer_inst_id || !match->addr))
13481 return;
13482
13483 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
13484 if (!msg)
13485 return;
13486
13487 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NAN_MATCH);
13488 if (!hdr) {
13489 nlmsg_free(msg);
13490 return;
13491 }
13492
13493 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
13494 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
13495 wdev->netdev->ifindex)) ||
13496 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
13497 NL80211_ATTR_PAD))
13498 goto nla_put_failure;
13499
13500 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, match->cookie,
13501 NL80211_ATTR_PAD) ||
13502 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, match->addr))
13503 goto nla_put_failure;
13504
ae0be8de 13505 match_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_MATCH);
50bcd31d
AB		 13506 if (!match_attr)
13507 goto nla_put_failure;
13508
ae0be8de
MK		 13509 local_func_attr = nla_nest_start_noflag(msg,
13510 NL80211_NAN_MATCH_FUNC_LOCAL);
50bcd31d
AB		 13511 if (!local_func_attr)
13512 goto nla_put_failure;
13513
13514 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->inst_id))
13515 goto nla_put_failure;
13516
13517 nla_nest_end(msg, local_func_attr);
13518
ae0be8de
MK		 13519 peer_func_attr = nla_nest_start_noflag(msg,
13520 NL80211_NAN_MATCH_FUNC_PEER);
50bcd31d
AB		 13521 if (!peer_func_attr)
13522 goto nla_put_failure;
13523
13524 if (nla_put_u8(msg, NL80211_NAN_FUNC_TYPE, match->type) ||
13525 nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->peer_inst_id))
13526 goto nla_put_failure;
13527
13528 if (match->info && match->info_len &&
13529 nla_put(msg, NL80211_NAN_FUNC_SERVICE_INFO, match->info_len,
13530 match->info))
13531 goto nla_put_failure;
13532
13533 nla_nest_end(msg, peer_func_attr);
13534 nla_nest_end(msg, match_attr);
13535 genlmsg_end(msg, hdr);
13536
13537 if (!wdev->owner_nlportid)
13538 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
13539 msg, 0, NL80211_MCGRP_NAN, gfp);
13540 else
13541 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
13542 wdev->owner_nlportid);
13543
13544 return;
13545
13546nla_put_failure:
13547 nlmsg_free(msg);
13548}
13549EXPORT_SYMBOL(cfg80211_nan_match);
13550
368e5a7b
AB		 13551void cfg80211_nan_func_terminated(struct wireless_dev *wdev,
13552 u8 inst_id,
13553 enum nl80211_nan_func_term_reason reason,
13554 u64 cookie, gfp_t gfp)
13555{
13556 struct wiphy *wiphy = wdev->wiphy;
13557 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
13558 struct sk_buff *msg;
13559 struct nlattr *func_attr;
13560 void *hdr;
13561
13562 if (WARN_ON(!inst_id))
13563 return;
13564
13565 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
13566 if (!msg)
13567 return;
13568
13569 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_NAN_FUNCTION);
13570 if (!hdr) {
13571 nlmsg_free(msg);
13572 return;
13573 }
13574
13575 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
13576 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
13577 wdev->netdev->ifindex)) ||
13578 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
13579 NL80211_ATTR_PAD))
13580 goto nla_put_failure;
13581
13582 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
13583 NL80211_ATTR_PAD))
13584 goto nla_put_failure;
13585
ae0be8de 13586 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
368e5a7b
AB		 13587 if (!func_attr)
13588 goto nla_put_failure;
13589
13590 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, inst_id) ||
13591 nla_put_u8(msg, NL80211_NAN_FUNC_TERM_REASON, reason))
13592 goto nla_put_failure;
13593
13594 nla_nest_end(msg, func_attr);
13595 genlmsg_end(msg, hdr);
13596
13597 if (!wdev->owner_nlportid)
13598 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
13599 msg, 0, NL80211_MCGRP_NAN, gfp);
13600 else
13601 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
13602 wdev->owner_nlportid);
13603
13604 return;
13605
13606nla_put_failure:
13607 nlmsg_free(msg);
13608}
13609EXPORT_SYMBOL(cfg80211_nan_func_terminated);
13610
3713b4e3
JB		 13611static int nl80211_get_protocol_features(struct sk_buff *skb,
13612 struct genl_info *info)
13613{
13614 void *hdr;
13615 struct sk_buff *msg;
13616
13617 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13618 if (!msg)
13619 return -ENOMEM;
13620
13621 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13622 NL80211_CMD_GET_PROTOCOL_FEATURES);
13623 if (!hdr)
13624 goto nla_put_failure;
13625
13626 if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
13627 NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
13628 goto nla_put_failure;
13629
13630 genlmsg_end(msg, hdr);
13631 return genlmsg_reply(msg, info);
13632
13633 nla_put_failure:
13634 kfree_skb(msg);
13635 return -ENOBUFS;
13636}
13637
355199e0
JM		 13638static int nl80211_update_ft_ies(struct sk_buff *skb, struct genl_info *info)
13639{
13640 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13641 struct cfg80211_update_ft_ies_params ft_params;
13642 struct net_device *dev = info->user_ptr[1];
13643
13644 if (!rdev->ops->update_ft_ies)
13645 return -EOPNOTSUPP;
13646
13647 if (!info->attrs[NL80211_ATTR_MDID] ||
3d7af878 13648 !info->attrs[NL80211_ATTR_IE])
355199e0
JM		 13649 return -EINVAL;
13650
13651 memset(&ft_params, 0, sizeof(ft_params));
13652 ft_params.md = nla_get_u16(info->attrs[NL80211_ATTR_MDID]);
13653 ft_params.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
13654 ft_params.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
13655
13656 return rdev_update_ft_ies(rdev, dev, &ft_params);
13657}
13658
5de17984
AS		 13659static int nl80211_crit_protocol_start(struct sk_buff *skb,
13660 struct genl_info *info)
13661{
13662 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13663 struct wireless_dev *wdev = info->user_ptr[1];
13664 enum nl80211_crit_proto_id proto = NL80211_CRIT_PROTO_UNSPEC;
13665 u16 duration;
13666 int ret;
13667
13668 if (!rdev->ops->crit_proto_start)
13669 return -EOPNOTSUPP;
13670
13671 if (WARN_ON(!rdev->ops->crit_proto_stop))
13672 return -EINVAL;
13673
13674 if (rdev->crit_proto_nlportid)
13675 return -EBUSY;
13676
13677 /* determine protocol if provided */
13678 if (info->attrs[NL80211_ATTR_CRIT_PROT_ID])
13679 proto = nla_get_u16(info->attrs[NL80211_ATTR_CRIT_PROT_ID]);
13680
13681 if (proto >= NUM_NL80211_CRIT_PROTO)
13682 return -EINVAL;
13683
13684 /* timeout must be provided */
13685 if (!info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION])
13686 return -EINVAL;
13687
13688 duration =
13689 nla_get_u16(info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION]);
13690
5de17984
AS		 13691 ret = rdev_crit_proto_start(rdev, wdev, proto, duration);
13692 if (!ret)
13693 rdev->crit_proto_nlportid = info->snd_portid;
13694
13695 return ret;
13696}
13697
13698static int nl80211_crit_protocol_stop(struct sk_buff *skb,
13699 struct genl_info *info)
13700{
13701 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13702 struct wireless_dev *wdev = info->user_ptr[1];
13703
13704 if (!rdev->ops->crit_proto_stop)
13705 return -EOPNOTSUPP;
13706
13707 if (rdev->crit_proto_nlportid) {
13708 rdev->crit_proto_nlportid = 0;
13709 rdev_crit_proto_stop(rdev, wdev);
13710 }
13711 return 0;
13712}
13713
901bb989
JB		 13714static int nl80211_vendor_check_policy(const struct wiphy_vendor_command *vcmd,
13715 struct nlattr *attr,
13716 struct netlink_ext_ack *extack)
13717{
13718 if (vcmd->policy == VENDOR_CMD_RAW_DATA) {
13719 if (attr->nla_type & NLA_F_NESTED) {
13720 NL_SET_ERR_MSG_ATTR(extack, attr,
13721 "unexpected nested data");
13722 return -EINVAL;
13723 }
13724
13725 return 0;
13726 }
13727
13728 if (!(attr->nla_type & NLA_F_NESTED)) {
13729 NL_SET_ERR_MSG_ATTR(extack, attr, "expected nested data");
13730 return -EINVAL;
13731 }
13732
32d5109a 13733 return nla_validate_nested(attr, vcmd->maxattr, vcmd->policy, extack);
901bb989
JB		 13734}
13735
ad7e718c
JB		 13736static int nl80211_vendor_cmd(struct sk_buff *skb, struct genl_info *info)
13737{
13738 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13739 struct wireless_dev *wdev =
a05829a7
JB		 13740 __cfg80211_wdev_from_attrs(rdev, genl_info_net(info),
13741 info->attrs);
ad7e718c
JB		 13742 int i, err;
13743 u32 vid, subcmd;
13744
13745 if (!rdev->wiphy.vendor_commands)
13746 return -EOPNOTSUPP;
13747
13748 if (IS_ERR(wdev)) {
13749 err = PTR_ERR(wdev);
13750 if (err != -EINVAL)
13751 return err;
13752 wdev = NULL;
13753 } else if (wdev->wiphy != &rdev->wiphy) {
13754 return -EINVAL;
13755 }
13756
13757 if (!info->attrs[NL80211_ATTR_VENDOR_ID] ||
13758 !info->attrs[NL80211_ATTR_VENDOR_SUBCMD])
13759 return -EINVAL;
13760
13761 vid = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_ID]);
13762 subcmd = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_SUBCMD]);
13763 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
13764 const struct wiphy_vendor_command *vcmd;
13765 void *data = NULL;
13766 int len = 0;
13767
13768 vcmd = &rdev->wiphy.vendor_commands[i];
13769
13770 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
13771 continue;
13772
13773 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
13774 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
13775 if (!wdev)
13776 return -EINVAL;
13777 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
13778 !wdev->netdev)
13779 return -EINVAL;
13780
13781 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
73c7da3d 13782 if (!wdev_running(wdev))
ad7e718c
JB		 13783 return -ENETDOWN;
13784 }
13785 } else {
13786 wdev = NULL;
13787 }
13788
4052d3d2
JS		 13789 if (!vcmd->doit)
13790 return -EOPNOTSUPP;
13791
ad7e718c
JB		 13792 if (info->attrs[NL80211_ATTR_VENDOR_DATA]) {
13793 data = nla_data(info->attrs[NL80211_ATTR_VENDOR_DATA]);
13794 len = nla_len(info->attrs[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 13795
13796 err = nl80211_vendor_check_policy(vcmd,
13797 info->attrs[NL80211_ATTR_VENDOR_DATA],
13798 info->extack);
13799 if (err)
13800 return err;
ad7e718c
JB		 13801 }
13802
13803 rdev->cur_cmd_info = info;
901bb989 13804 err = vcmd->doit(&rdev->wiphy, wdev, data, len);
ad7e718c
JB		 13805 rdev->cur_cmd_info = NULL;
13806 return err;
13807 }
13808
13809 return -EOPNOTSUPP;
13810}
13811
7bdbe400
JB		 13812static int nl80211_prepare_vendor_dump(struct sk_buff *skb,
13813 struct netlink_callback *cb,
13814 struct cfg80211_registered_device **rdev,
13815 struct wireless_dev **wdev)
13816{
50508d94 13817 struct nlattr **attrbuf;
7bdbe400
JB		 13818 u32 vid, subcmd;
13819 unsigned int i;
13820 int vcmd_idx = -1;
13821 int err;
13822 void *data = NULL;
13823 unsigned int data_len = 0;
13824
7bdbe400
JB		 13825 if (cb->args[0]) {
13826 /* subtract the 1 again here */
13827 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
13828 struct wireless_dev *tmp;
13829
ea90e0dc
JB		 13830 if (!wiphy)
13831 return -ENODEV;
7bdbe400
JB		 13832 *rdev = wiphy_to_rdev(wiphy);
13833 *wdev = NULL;
13834
13835 if (cb->args[1]) {
53873f13 13836 list_for_each_entry(tmp, &wiphy->wdev_list, list) {
7bdbe400
JB		 13837 if (tmp->identifier == cb->args[1] - 1) {
13838 *wdev = tmp;
13839 break;
13840 }
13841 }
13842 }
13843
13844 /* keep rtnl locked in successful case */
13845 return 0;
13846 }
13847
50508d94
JB		 13848 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
13849 if (!attrbuf)
13850 return -ENOMEM;
13851
8cb08174
JB		 13852 err = nlmsg_parse_deprecated(cb->nlh,
13853 GENL_HDRLEN + nl80211_fam.hdrsize,
13854 attrbuf, nl80211_fam.maxattr,
13855 nl80211_policy, NULL);
7bdbe400 13856 if (err)
50508d94 13857 goto out;
7bdbe400 13858
c90c39da 13859 if (!attrbuf[NL80211_ATTR_VENDOR_ID] ||
50508d94
JB		 13860 !attrbuf[NL80211_ATTR_VENDOR_SUBCMD]) {
13861 err = -EINVAL;
13862 goto out;
13863 }
7bdbe400 13864
a05829a7 13865 *wdev = __cfg80211_wdev_from_attrs(NULL, sock_net(skb->sk), attrbuf);
7bdbe400
JB		 13866 if (IS_ERR(*wdev))
13867 *wdev = NULL;
13868
c90c39da 13869 *rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
50508d94
JB		 13870 if (IS_ERR(*rdev)) {
13871 err = PTR_ERR(*rdev);
13872 goto out;
13873 }
7bdbe400 13874
c90c39da
JB		 13875 vid = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_ID]);
13876 subcmd = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_SUBCMD]);
7bdbe400
JB		 13877
13878 for (i = 0; i < (*rdev)->wiphy.n_vendor_commands; i++) {
13879 const struct wiphy_vendor_command *vcmd;
13880
13881 vcmd = &(*rdev)->wiphy.vendor_commands[i];
13882
13883 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
13884 continue;
13885
50508d94
JB		 13886 if (!vcmd->dumpit) {
13887 err = -EOPNOTSUPP;
13888 goto out;
13889 }
7bdbe400
JB		 13890
13891 vcmd_idx = i;
13892 break;
13893 }
13894
50508d94
JB		 13895 if (vcmd_idx < 0) {
13896 err = -EOPNOTSUPP;
13897 goto out;
13898 }
7bdbe400 13899
c90c39da
JB		 13900 if (attrbuf[NL80211_ATTR_VENDOR_DATA]) {
13901 data = nla_data(attrbuf[NL80211_ATTR_VENDOR_DATA]);
13902 data_len = nla_len(attrbuf[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 13903
13904 err = nl80211_vendor_check_policy(
13905 &(*rdev)->wiphy.vendor_commands[vcmd_idx],
13906 attrbuf[NL80211_ATTR_VENDOR_DATA],
13907 cb->extack);
13908 if (err)
50508d94 13909 goto out;
7bdbe400
JB		 13910 }
13911
13912 /* 0 is the first index - add 1 to parse only once */
13913 cb->args[0] = (*rdev)->wiphy_idx + 1;
13914 /* add 1 to know if it was NULL */
13915 cb->args[1] = *wdev ? (*wdev)->identifier + 1 : 0;
13916 cb->args[2] = vcmd_idx;
13917 cb->args[3] = (unsigned long)data;
13918 cb->args[4] = data_len;
13919
13920 /* keep rtnl locked in successful case */
50508d94
JB		 13921 err = 0;
13922out:
13923 kfree(attrbuf);
13924 return err;
7bdbe400
JB		 13925}
13926
13927static int nl80211_vendor_cmd_dump(struct sk_buff *skb,
13928 struct netlink_callback *cb)
13929{
13930 struct cfg80211_registered_device *rdev;
13931 struct wireless_dev *wdev;
13932 unsigned int vcmd_idx;
13933 const struct wiphy_vendor_command *vcmd;
13934 void *data;
13935 int data_len;
13936 int err;
13937 struct nlattr *vendor_data;
13938
ea90e0dc 13939 rtnl_lock();
7bdbe400
JB		 13940 err = nl80211_prepare_vendor_dump(skb, cb, &rdev, &wdev);
13941 if (err)
ea90e0dc 13942 goto out;
7bdbe400
JB		 13943
13944 vcmd_idx = cb->args[2];
13945 data = (void *)cb->args[3];
13946 data_len = cb->args[4];
13947 vcmd = &rdev->wiphy.vendor_commands[vcmd_idx];
13948
13949 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
13950 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
ea90e0dc
JB		 13951 if (!wdev) {
13952 err = -EINVAL;
13953 goto out;
13954 }
7bdbe400 13955 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
ea90e0dc
JB		 13956 !wdev->netdev) {
13957 err = -EINVAL;
13958 goto out;
13959 }
7bdbe400
JB		 13960
13961 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
ea90e0dc
JB		 13962 if (!wdev_running(wdev)) {
13963 err = -ENETDOWN;
13964 goto out;
13965 }
7bdbe400
JB		 13966 }
13967 }
13968
13969 while (1) {
13970 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
13971 cb->nlh->nlmsg_seq, NLM_F_MULTI,
13972 NL80211_CMD_VENDOR);
13973 if (!hdr)
13974 break;
13975
13976 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 13977 (wdev && nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
13978 wdev_id(wdev),
13979 NL80211_ATTR_PAD))) {
7bdbe400
JB		 13980 genlmsg_cancel(skb, hdr);
13981 break;
13982 }
13983
ae0be8de
MK		 13984 vendor_data = nla_nest_start_noflag(skb,
13985 NL80211_ATTR_VENDOR_DATA);
7bdbe400
JB		 13986 if (!vendor_data) {
13987 genlmsg_cancel(skb, hdr);
13988 break;
13989 }
13990
13991 err = vcmd->dumpit(&rdev->wiphy, wdev, skb, data, data_len,
13992 (unsigned long *)&cb->args[5]);
13993 nla_nest_end(skb, vendor_data);
13994
13995 if (err == -ENOBUFS || err == -ENOENT) {
13996 genlmsg_cancel(skb, hdr);
13997 break;
9c167b2d 13998 } else if (err <= 0) {
7bdbe400
JB		 13999 genlmsg_cancel(skb, hdr);
14000 goto out;
14001 }
14002
14003 genlmsg_end(skb, hdr);
14004 }
14005
14006 err = skb->len;
14007 out:
14008 rtnl_unlock();
14009 return err;
14010}
14011
ad7e718c
JB		 14012struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
14013 enum nl80211_commands cmd,
14014 enum nl80211_attrs attr,
14015 int approxlen)
14016{
f26cbf40 14017 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ad7e718c
JB		 14018
14019 if (WARN_ON(!rdev->cur_cmd_info))
14020 return NULL;
14021
6c09e791 14022 return __cfg80211_alloc_vendor_skb(rdev, NULL, approxlen,
ad7e718c
JB		 14023 rdev->cur_cmd_info->snd_portid,
14024 rdev->cur_cmd_info->snd_seq,
567ffc35 14025 cmd, attr, NULL, GFP_KERNEL);
ad7e718c
JB		 14026}
14027EXPORT_SYMBOL(__cfg80211_alloc_reply_skb);
14028
14029int cfg80211_vendor_cmd_reply(struct sk_buff *skb)
14030{
14031 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
14032 void *hdr = ((void **)skb->cb)[1];
14033 struct nlattr *data = ((void **)skb->cb)[2];
14034
bd8c78e7
JB		 14035 /* clear CB data for netlink core to own from now on */
14036 memset(skb->cb, 0, sizeof(skb->cb));
14037
ad7e718c
JB		 14038 if (WARN_ON(!rdev->cur_cmd_info)) {
14039 kfree_skb(skb);
14040 return -EINVAL;
14041 }
14042
14043 nla_nest_end(skb, data);
14044 genlmsg_end(skb, hdr);
14045 return genlmsg_reply(skb, rdev->cur_cmd_info);
14046}
14047EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_reply);
14048
55c1fdf0
JB		 14049unsigned int cfg80211_vendor_cmd_get_sender(struct wiphy *wiphy)
14050{
14051 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14052
14053 if (WARN_ON(!rdev->cur_cmd_info))
14054 return 0;
14055
14056 return rdev->cur_cmd_info->snd_portid;
14057}
14058EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_get_sender);
14059
fa9ffc74
KP		 14060static int nl80211_set_qos_map(struct sk_buff *skb,
14061 struct genl_info *info)
14062{
14063 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14064 struct cfg80211_qos_map *qos_map = NULL;
14065 struct net_device *dev = info->user_ptr[1];
14066 u8 *pos, len, num_des, des_len, des;
14067 int ret;
14068
14069 if (!rdev->ops->set_qos_map)
14070 return -EOPNOTSUPP;
14071
14072 if (info->attrs[NL80211_ATTR_QOS_MAP]) {
14073 pos = nla_data(info->attrs[NL80211_ATTR_QOS_MAP]);
14074 len = nla_len(info->attrs[NL80211_ATTR_QOS_MAP]);
14075
c8b82802 14076 if (len % 2)
fa9ffc74
KP		 14077 return -EINVAL;
14078
14079 qos_map = kzalloc(sizeof(struct cfg80211_qos_map), GFP_KERNEL);
14080 if (!qos_map)
14081 return -ENOMEM;
14082
14083 num_des = (len - IEEE80211_QOS_MAP_LEN_MIN) >> 1;
14084 if (num_des) {
14085 des_len = num_des *
14086 sizeof(struct cfg80211_dscp_exception);
14087 memcpy(qos_map->dscp_exception, pos, des_len);
14088 qos_map->num_des = num_des;
14089 for (des = 0; des < num_des; des++) {
14090 if (qos_map->dscp_exception[des].up > 7) {
14091 kfree(qos_map);
14092 return -EINVAL;
14093 }
14094 }
14095 pos += des_len;
14096 }
14097 memcpy(qos_map->up, pos, IEEE80211_QOS_MAP_LEN_MIN);
14098 }
14099
14100 wdev_lock(dev->ieee80211_ptr);
14101 ret = nl80211_key_allowed(dev->ieee80211_ptr);
14102 if (!ret)
14103 ret = rdev_set_qos_map(rdev, dev, qos_map);
14104 wdev_unlock(dev->ieee80211_ptr);
14105
14106 kfree(qos_map);
14107 return ret;
14108}
14109
960d01ac
JB		 14110static int nl80211_add_tx_ts(struct sk_buff *skb, struct genl_info *info)
14111{
14112 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14113 struct net_device *dev = info->user_ptr[1];
14114 struct wireless_dev *wdev = dev->ieee80211_ptr;
14115 const u8 *peer;
14116 u8 tsid, up;
14117 u16 admitted_time = 0;
14118 int err;
14119
723e73ac 14120 if (!(rdev->wiphy.features & NL80211_FEATURE_SUPPORTS_WMM_ADMISSION))
960d01ac
JB		 14121 return -EOPNOTSUPP;
14122
14123 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC] ||
14124 !info->attrs[NL80211_ATTR_USER_PRIO])
14125 return -EINVAL;
14126
14127 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
960d01ac 14128 up = nla_get_u8(info->attrs[NL80211_ATTR_USER_PRIO]);
960d01ac
JB		 14129
14130 /* WMM uses TIDs 0-7 even for TSPEC */
723e73ac 14131 if (tsid >= IEEE80211_FIRST_TSPEC_TSID) {
960d01ac 14132 /* TODO: handle 802.11 TSPEC/admission control
723e73ac
JB		 14133 * need more attributes for that (e.g. BA session requirement);
14134 * change the WMM adminssion test above to allow both then
960d01ac
JB		 14135 */
14136 return -EINVAL;
14137 }
14138
14139 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14140
14141 if (info->attrs[NL80211_ATTR_ADMITTED_TIME]) {
14142 admitted_time =
14143 nla_get_u16(info->attrs[NL80211_ATTR_ADMITTED_TIME]);
14144 if (!admitted_time)
14145 return -EINVAL;
14146 }
14147
14148 wdev_lock(wdev);
14149 switch (wdev->iftype) {
14150 case NL80211_IFTYPE_STATION:
14151 case NL80211_IFTYPE_P2P_CLIENT:
14152 if (wdev->current_bss)
14153 break;
14154 err = -ENOTCONN;
14155 goto out;
14156 default:
14157 err = -EOPNOTSUPP;
14158 goto out;
14159 }
14160
14161 err = rdev_add_tx_ts(rdev, dev, tsid, peer, up, admitted_time);
14162
14163 out:
14164 wdev_unlock(wdev);
14165 return err;
14166}
14167
14168static int nl80211_del_tx_ts(struct sk_buff *skb, struct genl_info *info)
14169{
14170 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14171 struct net_device *dev = info->user_ptr[1];
14172 struct wireless_dev *wdev = dev->ieee80211_ptr;
14173 const u8 *peer;
14174 u8 tsid;
14175 int err;
14176
14177 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC])
14178 return -EINVAL;
14179
14180 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
14181 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14182
14183 wdev_lock(wdev);
14184 err = rdev_del_tx_ts(rdev, dev, tsid, peer);
14185 wdev_unlock(wdev);
14186
14187 return err;
14188}
14189
1057d35e
AN		 14190static int nl80211_tdls_channel_switch(struct sk_buff *skb,
14191 struct genl_info *info)
14192{
14193 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14194 struct net_device *dev = info->user_ptr[1];
14195 struct wireless_dev *wdev = dev->ieee80211_ptr;
14196 struct cfg80211_chan_def chandef = {};
14197 const u8 *addr;
14198 u8 oper_class;
14199 int err;
14200
14201 if (!rdev->ops->tdls_channel_switch ||
14202 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
14203 return -EOPNOTSUPP;
14204
14205 switch (dev->ieee80211_ptr->iftype) {
14206 case NL80211_IFTYPE_STATION:
14207 case NL80211_IFTYPE_P2P_CLIENT:
14208 break;
14209 default:
14210 return -EOPNOTSUPP;
14211 }
14212
14213 if (!info->attrs[NL80211_ATTR_MAC] ||
14214 !info->attrs[NL80211_ATTR_OPER_CLASS])
14215 return -EINVAL;
14216
14217 err = nl80211_parse_chandef(rdev, info, &chandef);
14218 if (err)
14219 return err;
14220
14221 /*
14222 * Don't allow wide channels on the 2.4Ghz band, as per IEEE802.11-2012
14223 * section 10.22.6.2.1. Disallow 5/10Mhz channels as well for now, the
14224 * specification is not defined for them.
14225 */
57fbcce3 14226 if (chandef.chan->band == NL80211_BAND_2GHZ &&
1057d35e
AN		 14227 chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
14228 chandef.width != NL80211_CHAN_WIDTH_20)
14229 return -EINVAL;
14230
14231 /* we will be active on the TDLS link */
923b352f
AN		 14232 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
14233 wdev->iftype))
1057d35e
AN		 14234 return -EINVAL;
14235
14236 /* don't allow switching to DFS channels */
14237 if (cfg80211_chandef_dfs_required(wdev->wiphy, &chandef, wdev->iftype))
14238 return -EINVAL;
14239
14240 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
14241 oper_class = nla_get_u8(info->attrs[NL80211_ATTR_OPER_CLASS]);
14242
14243 wdev_lock(wdev);
14244 err = rdev_tdls_channel_switch(rdev, dev, addr, oper_class, &chandef);
14245 wdev_unlock(wdev);
14246
14247 return err;
14248}
14249
14250static int nl80211_tdls_cancel_channel_switch(struct sk_buff *skb,
14251 struct genl_info *info)
14252{
14253 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14254 struct net_device *dev = info->user_ptr[1];
14255 struct wireless_dev *wdev = dev->ieee80211_ptr;
14256 const u8 *addr;
14257
14258 if (!rdev->ops->tdls_channel_switch ||
14259 !rdev->ops->tdls_cancel_channel_switch ||
14260 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
14261 return -EOPNOTSUPP;
14262
14263 switch (dev->ieee80211_ptr->iftype) {
14264 case NL80211_IFTYPE_STATION:
14265 case NL80211_IFTYPE_P2P_CLIENT:
14266 break;
14267 default:
14268 return -EOPNOTSUPP;
14269 }
14270
14271 if (!info->attrs[NL80211_ATTR_MAC])
14272 return -EINVAL;
14273
14274 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
14275
14276 wdev_lock(wdev);
14277 rdev_tdls_cancel_channel_switch(rdev, dev, addr);
14278 wdev_unlock(wdev);
14279
14280 return 0;
14281}
14282
ce0ce13a
MB		 14283static int nl80211_set_multicast_to_unicast(struct sk_buff *skb,
14284 struct genl_info *info)
14285{
14286 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14287 struct net_device *dev = info->user_ptr[1];
14288 struct wireless_dev *wdev = dev->ieee80211_ptr;
14289 const struct nlattr *nla;
14290 bool enabled;
14291
ce0ce13a
MB		 14292 if (!rdev->ops->set_multicast_to_unicast)
14293 return -EOPNOTSUPP;
14294
14295 if (wdev->iftype != NL80211_IFTYPE_AP &&
14296 wdev->iftype != NL80211_IFTYPE_P2P_GO)
14297 return -EOPNOTSUPP;
14298
14299 nla = info->attrs[NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED];
14300 enabled = nla_get_flag(nla);
14301
14302 return rdev_set_multicast_to_unicast(rdev, dev, enabled);
14303}
14304
3a00df57
AS		 14305static int nl80211_set_pmk(struct sk_buff *skb, struct genl_info *info)
14306{
14307 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14308 struct net_device *dev = info->user_ptr[1];
14309 struct wireless_dev *wdev = dev->ieee80211_ptr;
14310 struct cfg80211_pmk_conf pmk_conf = {};
14311 int ret;
14312
14313 if (wdev->iftype != NL80211_IFTYPE_STATION &&
14314 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
14315 return -EOPNOTSUPP;
14316
14317 if (!wiphy_ext_feature_isset(&rdev->wiphy,
14318 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
14319 return -EOPNOTSUPP;
14320
14321 if (!info->attrs[NL80211_ATTR_MAC] || !info->attrs[NL80211_ATTR_PMK])
14322 return -EINVAL;
14323
14324 wdev_lock(wdev);
14325 if (!wdev->current_bss) {
14326 ret = -ENOTCONN;
14327 goto out;
14328 }
14329
14330 pmk_conf.aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
14331 if (memcmp(pmk_conf.aa, wdev->current_bss->pub.bssid, ETH_ALEN)) {
14332 ret = -EINVAL;
14333 goto out;
14334 }
14335
14336 pmk_conf.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
14337 pmk_conf.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
14338 if (pmk_conf.pmk_len != WLAN_PMK_LEN &&
14339 pmk_conf.pmk_len != WLAN_PMK_LEN_SUITE_B_192) {
14340 ret = -EINVAL;
14341 goto out;
14342 }
14343
cb9abd48 14344 if (info->attrs[NL80211_ATTR_PMKR0_NAME])
3a00df57
AS		 14345 pmk_conf.pmk_r0_name =
14346 nla_data(info->attrs[NL80211_ATTR_PMKR0_NAME]);
3a00df57
AS		 14347
14348 ret = rdev_set_pmk(rdev, dev, &pmk_conf);
14349out:
14350 wdev_unlock(wdev);
14351 return ret;
14352}
14353
14354static int nl80211_del_pmk(struct sk_buff *skb, struct genl_info *info)
14355{
14356 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14357 struct net_device *dev = info->user_ptr[1];
14358 struct wireless_dev *wdev = dev->ieee80211_ptr;
14359 const u8 *aa;
14360 int ret;
14361
14362 if (wdev->iftype != NL80211_IFTYPE_STATION &&
14363 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
14364 return -EOPNOTSUPP;
14365
14366 if (!wiphy_ext_feature_isset(&rdev->wiphy,
14367 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
14368 return -EOPNOTSUPP;
14369
14370 if (!info->attrs[NL80211_ATTR_MAC])
14371 return -EINVAL;
14372
14373 wdev_lock(wdev);
14374 aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
14375 ret = rdev_del_pmk(rdev, dev, aa);
14376 wdev_unlock(wdev);
14377
14378 return ret;
14379}
14380
40cbfa90
SD		 14381static int nl80211_external_auth(struct sk_buff *skb, struct genl_info *info)
14382{
14383 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14384 struct net_device *dev = info->user_ptr[1];
14385 struct cfg80211_external_auth_params params;
14386
db8d93a7 14387 if (!rdev->ops->external_auth)
40cbfa90
SD		 14388 return -EOPNOTSUPP;
14389
fe494370
SD		 14390 if (!info->attrs[NL80211_ATTR_SSID] &&
14391 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
14392 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
40cbfa90
SD		 14393 return -EINVAL;
14394
14395 if (!info->attrs[NL80211_ATTR_BSSID])
14396 return -EINVAL;
14397
14398 if (!info->attrs[NL80211_ATTR_STATUS_CODE])
14399 return -EINVAL;
14400
14401 memset(&params, 0, sizeof(params));
14402
fe494370
SD		 14403 if (info->attrs[NL80211_ATTR_SSID]) {
14404 params.ssid.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
cb9abd48 14405 if (params.ssid.ssid_len == 0)
fe494370
SD		 14406 return -EINVAL;
14407 memcpy(params.ssid.ssid,
14408 nla_data(info->attrs[NL80211_ATTR_SSID]),
14409 params.ssid.ssid_len);
14410 }
40cbfa90
SD		 14411
14412 memcpy(params.bssid, nla_data(info->attrs[NL80211_ATTR_BSSID]),
14413 ETH_ALEN);
14414
14415 params.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
14416
fe494370
SD		 14417 if (info->attrs[NL80211_ATTR_PMKID])
14418 params.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
14419
40cbfa90
SD		 14420 return rdev_external_auth(rdev, dev, &params);
14421}
14422
2576a9ac
DK		 14423static int nl80211_tx_control_port(struct sk_buff *skb, struct genl_info *info)
14424{
dca9ca2d 14425 bool dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
2576a9ac
DK		 14426 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14427 struct net_device *dev = info->user_ptr[1];
14428 struct wireless_dev *wdev = dev->ieee80211_ptr;
14429 const u8 *buf;
14430 size_t len;
14431 u8 *dest;
14432 u16 proto;
14433 bool noencrypt;
dca9ca2d 14434 u64 cookie = 0;
2576a9ac
DK		 14435 int err;
14436
14437 if (!wiphy_ext_feature_isset(&rdev->wiphy,
14438 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
14439 return -EOPNOTSUPP;
14440
14441 if (!rdev->ops->tx_control_port)
14442 return -EOPNOTSUPP;
14443
14444 if (!info->attrs[NL80211_ATTR_FRAME] ||
14445 !info->attrs[NL80211_ATTR_MAC] ||
14446 !info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
14447 GENL_SET_ERR_MSG(info, "Frame, MAC or ethertype missing");
14448 return -EINVAL;
14449 }
14450
14451 wdev_lock(wdev);
14452
14453 switch (wdev->iftype) {
14454 case NL80211_IFTYPE_AP:
14455 case NL80211_IFTYPE_P2P_GO:
14456 case NL80211_IFTYPE_MESH_POINT:
14457 break;
14458 case NL80211_IFTYPE_ADHOC:
14459 case NL80211_IFTYPE_STATION:
14460 case NL80211_IFTYPE_P2P_CLIENT:
14461 if (wdev->current_bss)
14462 break;
14463 err = -ENOTCONN;
14464 goto out;
14465 default:
14466 err = -EOPNOTSUPP;
14467 goto out;
14468 }
14469
14470 wdev_unlock(wdev);
14471
14472 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
14473 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
14474 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
14475 proto = nla_get_u16(info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
14476 noencrypt =
14477 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]);
14478
dca9ca2d
MT		 14479 err = rdev_tx_control_port(rdev, dev, buf, len,
14480 dest, cpu_to_be16(proto), noencrypt,
14481 dont_wait_for_ack ? NULL : &cookie);
14482 if (!err && !dont_wait_for_ack)
14483 nl_set_extack_cookie_u64(info->extack, cookie);
14484 return err;
2576a9ac
DK		 14485 out:
14486 wdev_unlock(wdev);
14487 return err;
14488}
14489
81e54d08
PKC		 14490static int nl80211_get_ftm_responder_stats(struct sk_buff *skb,
14491 struct genl_info *info)
14492{
14493 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14494 struct net_device *dev = info->user_ptr[1];
14495 struct wireless_dev *wdev = dev->ieee80211_ptr;
14496 struct cfg80211_ftm_responder_stats ftm_stats = {};
14497 struct sk_buff *msg;
14498 void *hdr;
14499 struct nlattr *ftm_stats_attr;
14500 int err;
14501
14502 if (wdev->iftype != NL80211_IFTYPE_AP || !wdev->beacon_interval)
14503 return -EOPNOTSUPP;
14504
14505 err = rdev_get_ftm_responder_stats(rdev, dev, &ftm_stats);
14506 if (err)
14507 return err;
14508
14509 if (!ftm_stats.filled)
14510 return -ENODATA;
14511
14512 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14513 if (!msg)
14514 return -ENOMEM;
14515
14516 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14517 NL80211_CMD_GET_FTM_RESPONDER_STATS);
14518 if (!hdr)
1399c59f 14519 goto nla_put_failure;
81e54d08
PKC		 14520
14521 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
14522 goto nla_put_failure;
14523
ae0be8de
MK		 14524 ftm_stats_attr = nla_nest_start_noflag(msg,
14525 NL80211_ATTR_FTM_RESPONDER_STATS);
81e54d08
PKC		 14526 if (!ftm_stats_attr)
14527 goto nla_put_failure;
14528
14529#define SET_FTM(field, name, type) \
14530 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
14531 nla_put_ ## type(msg, NL80211_FTM_STATS_ ## name, \
14532 ftm_stats.field)) \
14533 goto nla_put_failure; } while (0)
14534#define SET_FTM_U64(field, name) \
14535 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
14536 nla_put_u64_64bit(msg, NL80211_FTM_STATS_ ## name, \
14537 ftm_stats.field, NL80211_FTM_STATS_PAD)) \
14538 goto nla_put_failure; } while (0)
14539
14540 SET_FTM(success_num, SUCCESS_NUM, u32);
14541 SET_FTM(partial_num, PARTIAL_NUM, u32);
14542 SET_FTM(failed_num, FAILED_NUM, u32);
14543 SET_FTM(asap_num, ASAP_NUM, u32);
14544 SET_FTM(non_asap_num, NON_ASAP_NUM, u32);
14545 SET_FTM_U64(total_duration_ms, TOTAL_DURATION_MSEC);
14546 SET_FTM(unknown_triggers_num, UNKNOWN_TRIGGERS_NUM, u32);
14547 SET_FTM(reschedule_requests_num, RESCHEDULE_REQUESTS_NUM, u32);
14548 SET_FTM(out_of_window_triggers_num, OUT_OF_WINDOW_TRIGGERS_NUM, u32);
14549#undef SET_FTM
14550
14551 nla_nest_end(msg, ftm_stats_attr);
14552
14553 genlmsg_end(msg, hdr);
14554 return genlmsg_reply(msg, info);
14555
14556nla_put_failure:
14557 nlmsg_free(msg);
14558 return -ENOBUFS;
14559}
14560
cb74e977
SD		 14561static int nl80211_update_owe_info(struct sk_buff *skb, struct genl_info *info)
14562{
14563 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14564 struct cfg80211_update_owe_info owe_info;
14565 struct net_device *dev = info->user_ptr[1];
14566
14567 if (!rdev->ops->update_owe_info)
14568 return -EOPNOTSUPP;
14569
14570 if (!info->attrs[NL80211_ATTR_STATUS_CODE] ||
14571 !info->attrs[NL80211_ATTR_MAC])
14572 return -EINVAL;
14573
14574 memset(&owe_info, 0, sizeof(owe_info));
14575 owe_info.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
14576 nla_memcpy(owe_info.peer, info->attrs[NL80211_ATTR_MAC], ETH_ALEN);
14577
14578 if (info->attrs[NL80211_ATTR_IE]) {
14579 owe_info.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
14580 owe_info.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
14581 }
14582
14583 return rdev_update_owe_info(rdev, dev, &owe_info);
14584}
14585
5ab92e7f
RM		 14586static int nl80211_probe_mesh_link(struct sk_buff *skb, struct genl_info *info)
14587{
14588 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14589 struct net_device *dev = info->user_ptr[1];
14590 struct wireless_dev *wdev = dev->ieee80211_ptr;
14591 struct station_info sinfo = {};
14592 const u8 *buf;
14593 size_t len;
14594 u8 *dest;
14595 int err;
14596
14597 if (!rdev->ops->probe_mesh_link || !rdev->ops->get_station)
14598 return -EOPNOTSUPP;
14599
14600 if (!info->attrs[NL80211_ATTR_MAC] ||
14601 !info->attrs[NL80211_ATTR_FRAME]) {
14602 GENL_SET_ERR_MSG(info, "Frame or MAC missing");
14603 return -EINVAL;
14604 }
14605
14606 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
14607 return -EOPNOTSUPP;
14608
14609 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
14610 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
14611 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
14612
14613 if (len < sizeof(struct ethhdr))
14614 return -EINVAL;
14615
14616 if (!ether_addr_equal(buf, dest) || is_multicast_ether_addr(buf) ||
14617 !ether_addr_equal(buf + ETH_ALEN, dev->dev_addr))
14618 return -EINVAL;
14619
14620 err = rdev_get_station(rdev, dev, dest, &sinfo);
14621 if (err)
14622 return err;
14623
2a279b34
FF		 14624 cfg80211_sinfo_release_content(&sinfo);
14625
5ab92e7f
RM		 14626 return rdev_probe_mesh_link(rdev, dev, dest, buf, len);
14627}
14628
77f576de
T		 14629static int parse_tid_conf(struct cfg80211_registered_device *rdev,
14630 struct nlattr *attrs[], struct net_device *dev,
3710a8a6 14631 struct cfg80211_tid_cfg *tid_conf,
77f576de
T		 14632 struct genl_info *info, const u8 *peer)
14633{
14634 struct netlink_ext_ack *extack = info->extack;
3710a8a6 14635 u64 mask;
77f576de
T		 14636 int err;
14637
14638 if (!attrs[NL80211_TID_CONFIG_ATTR_TIDS])
14639 return -EINVAL;
14640
14641 tid_conf->config_override =
14642 nla_get_flag(attrs[NL80211_TID_CONFIG_ATTR_OVERRIDE]);
3710a8a6 14643 tid_conf->tids = nla_get_u16(attrs[NL80211_TID_CONFIG_ATTR_TIDS]);
77f576de
T		 14644
14645 if (tid_conf->config_override) {
14646 if (rdev->ops->reset_tid_config) {
14647 err = rdev_reset_tid_config(rdev, dev, peer,
3710a8a6 14648 tid_conf->tids);
c0336955 14649 if (err)
77f576de
T		 14650 return err;
14651 } else {
14652 return -EINVAL;
14653 }
14654 }
14655
14656 if (attrs[NL80211_TID_CONFIG_ATTR_NOACK]) {
3710a8a6 14657 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_NOACK);
77f576de
T		 14658 tid_conf->noack =
14659 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_NOACK]);
14660 }
14661
6a21d16c
T		 14662 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]) {
14663 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_SHORT);
14664 tid_conf->retry_short =
14665 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]);
14666
14667 if (tid_conf->retry_short > rdev->wiphy.max_data_retry_count)
14668 return -EINVAL;
14669 }
14670
14671 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]) {
14672 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_LONG);
14673 tid_conf->retry_long =
14674 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]);
14675
14676 if (tid_conf->retry_long > rdev->wiphy.max_data_retry_count)
14677 return -EINVAL;
14678 }
14679
ade274b2
T		 14680 if (attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]) {
14681 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMPDU_CTRL);
14682 tid_conf->ampdu =
14683 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]);
14684 }
14685
04f7d142
T		 14686 if (attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]) {
14687 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL);
14688 tid_conf->rtscts =
14689 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]);
14690 }
14691
33462e68
SM		 14692 if (attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]) {
14693 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMSDU_CTRL);
14694 tid_conf->amsdu =
14695 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]);
14696 }
14697
9a5f6488
TC		 14698 if (attrs[NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE]) {
14699 u32 idx = NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE, attr;
14700
14701 tid_conf->txrate_type = nla_get_u8(attrs[idx]);
14702
14703 if (tid_conf->txrate_type != NL80211_TX_RATE_AUTOMATIC) {
14704 attr = NL80211_TID_CONFIG_ATTR_TX_RATE;
14705 err = nl80211_parse_tx_bitrate_mask(info, attrs, attr,
857b34c4
RM		 14706 &tid_conf->txrate_mask, dev,
14707 true);
9a5f6488
TC		 14708 if (err)
14709 return err;
14710
14711 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE);
14712 }
14713 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE);
14714 }
14715
3710a8a6
JB		 14716 if (peer)
14717 mask = rdev->wiphy.tid_config_support.peer;
14718 else
14719 mask = rdev->wiphy.tid_config_support.vif;
14720
14721 if (tid_conf->mask & ~mask) {
14722 NL_SET_ERR_MSG(extack, "unsupported TID configuration");
14723 return -ENOTSUPP;
14724 }
14725
77f576de
T		 14726 return 0;
14727}
14728
14729static int nl80211_set_tid_config(struct sk_buff *skb,
14730 struct genl_info *info)
14731{
14732 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14733 struct nlattr *attrs[NL80211_TID_CONFIG_ATTR_MAX + 1];
14734 struct net_device *dev = info->user_ptr[1];
3710a8a6 14735 struct cfg80211_tid_config *tid_config;
77f576de
T		 14736 struct nlattr *tid;
14737 int conf_idx = 0, rem_conf;
14738 int ret = -EINVAL;
14739 u32 num_conf = 0;
14740
14741 if (!info->attrs[NL80211_ATTR_TID_CONFIG])
14742 return -EINVAL;
14743
14744 if (!rdev->ops->set_tid_config)
14745 return -EOPNOTSUPP;
14746
14747 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
14748 rem_conf)
14749 num_conf++;
14750
14751 tid_config = kzalloc(struct_size(tid_config, tid_conf, num_conf),
14752 GFP_KERNEL);
14753 if (!tid_config)
14754 return -ENOMEM;
14755
14756 tid_config->n_tid_conf = num_conf;
14757
14758 if (info->attrs[NL80211_ATTR_MAC])
14759 tid_config->peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14760
14761 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
14762 rem_conf) {
14763 ret = nla_parse_nested(attrs, NL80211_TID_CONFIG_ATTR_MAX,
14764 tid, NULL, NULL);
14765
14766 if (ret)
14767 goto bad_tid_conf;
14768
14769 ret = parse_tid_conf(rdev, attrs, dev,
14770 &tid_config->tid_conf[conf_idx],
14771 info, tid_config->peer);
14772 if (ret)
14773 goto bad_tid_conf;
14774
14775 conf_idx++;
14776 }
14777
14778 ret = rdev_set_tid_config(rdev, dev, tid_config);
14779
14780bad_tid_conf:
14781 kfree(tid_config);
14782 return ret;
14783}
14784
4c476991
JB		 14785#define NL80211_FLAG_NEED_WIPHY 0x01
14786#define NL80211_FLAG_NEED_NETDEV 0x02
14787#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 14788#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
14789#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
14790 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 14791#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 14792/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 14793#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
14794 NL80211_FLAG_CHECK_NETDEV_UP)
5393b917 14795#define NL80211_FLAG_CLEAR_SKB 0x20
77cbf790 14796#define NL80211_FLAG_NO_WIPHY_MTX 0x40
4c476991 14797
f84f771d 14798static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 14799 struct genl_info *info)
14800{
a05829a7 14801 struct cfg80211_registered_device *rdev = NULL;
89a54e48 14802 struct wireless_dev *wdev;
4c476991 14803 struct net_device *dev;
4c476991 14804
a05829a7 14805 rtnl_lock();
4c476991 14806 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 14807 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991 14808 if (IS_ERR(rdev)) {
a05829a7 14809 rtnl_unlock();
4c476991
JB		 14810 return PTR_ERR(rdev);
14811 }
14812 info->user_ptr[0] = rdev;
1bf614ef
JB		 14813 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
14814 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
a05829a7 14815 wdev = __cfg80211_wdev_from_attrs(NULL, genl_info_net(info),
89a54e48
JB		 14816 info->attrs);
14817 if (IS_ERR(wdev)) {
a05829a7 14818 rtnl_unlock();
89a54e48 14819 return PTR_ERR(wdev);
4c476991 14820 }
89a54e48 14821
89a54e48 14822 dev = wdev->netdev;
f26cbf40 14823 rdev = wiphy_to_rdev(wdev->wiphy);
89a54e48 14824
1bf614ef
JB		 14825 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
14826 if (!dev) {
a05829a7 14827 rtnl_unlock();
1bf614ef
JB		 14828 return -EINVAL;
14829 }
14830
14831 info->user_ptr[1] = dev;
14832 } else {
14833 info->user_ptr[1] = wdev;
41265714 14834 }
1bf614ef 14835
73c7da3d
AVS		 14836 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
14837 !wdev_running(wdev)) {
a05829a7 14838 rtnl_unlock();
73c7da3d
AVS		 14839 return -ENETDOWN;
14840 }
1bf614ef 14841
73c7da3d 14842 if (dev)
1bf614ef 14843 dev_hold(dev);
89a54e48 14844
4c476991 14845 info->user_ptr[0] = rdev;
4c476991
JB		 14846 }
14847
77cbf790 14848 if (rdev && !(ops->internal_flags & NL80211_FLAG_NO_WIPHY_MTX)) {
a05829a7
JB		 14849 wiphy_lock(&rdev->wiphy);
14850 /* we keep the mutex locked until post_doit */
14851 __release(&rdev->wiphy.mtx);
14852 }
14853 if (!(ops->internal_flags & NL80211_FLAG_NEED_RTNL))
14854 rtnl_unlock();
14855
4c476991
JB		 14856 return 0;
14857}
14858
f84f771d 14859static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 14860 struct genl_info *info)
14861{
1bf614ef
JB		 14862 if (info->user_ptr[1]) {
14863 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
14864 struct wireless_dev *wdev = info->user_ptr[1];
14865
14866 if (wdev->netdev)
14867 dev_put(wdev->netdev);
14868 } else {
14869 dev_put(info->user_ptr[1]);
14870 }
14871 }
5393b917 14872
77cbf790
JB		 14873 if (info->user_ptr[0] &&
14874 !(ops->internal_flags & NL80211_FLAG_NO_WIPHY_MTX)) {
a05829a7
JB		 14875 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14876
14877 /* we kept the mutex locked since pre_doit */
14878 __acquire(&rdev->wiphy.mtx);
14879 wiphy_unlock(&rdev->wiphy);
14880 }
14881
4c476991
JB		 14882 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
14883 rtnl_unlock();
5393b917
JB		 14884
14885 /* If needed, clear the netlink message payload from the SKB
14886 * as it might contain key data that shouldn't stick around on
14887 * the heap after the SKB is freed. The netlink message header
14888 * is still needed for further processing, so leave it intact.
14889 */
14890 if (ops->internal_flags & NL80211_FLAG_CLEAR_SKB) {
14891 struct nlmsghdr *nlh = nlmsg_hdr(skb);
14892
14893 memset(nlmsg_data(nlh), 0, nlmsg_len(nlh));
14894 }
4c476991
JB		 14895}
14896
6bdb68ce
CH		 14897static int nl80211_set_sar_sub_specs(struct cfg80211_registered_device *rdev,
14898 struct cfg80211_sar_specs *sar_specs,
14899 struct nlattr *spec[], int index)
14900{
14901 u32 range_index, i;
14902
14903 if (!sar_specs || !spec)
14904 return -EINVAL;
14905
14906 if (!spec[NL80211_SAR_ATTR_SPECS_POWER] ||
14907 !spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX])
14908 return -EINVAL;
14909
14910 range_index = nla_get_u32(spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX]);
14911
14912 /* check if range_index exceeds num_freq_ranges */
14913 if (range_index >= rdev->wiphy.sar_capa->num_freq_ranges)
14914 return -EINVAL;
14915
14916 /* check if range_index duplicates */
14917 for (i = 0; i < index; i++) {
14918 if (sar_specs->sub_specs[i].freq_range_index == range_index)
14919 return -EINVAL;
14920 }
14921
14922 sar_specs->sub_specs[index].power =
14923 nla_get_s32(spec[NL80211_SAR_ATTR_SPECS_POWER]);
14924
14925 sar_specs->sub_specs[index].freq_range_index = range_index;
14926
14927 return 0;
14928}
14929
14930static int nl80211_set_sar_specs(struct sk_buff *skb, struct genl_info *info)
14931{
14932 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14933 struct nlattr *spec[NL80211_SAR_ATTR_SPECS_MAX + 1];
14934 struct nlattr *tb[NL80211_SAR_ATTR_MAX + 1];
14935 struct cfg80211_sar_specs *sar_spec;
14936 enum nl80211_sar_type type;
14937 struct nlattr *spec_list;
14938 u32 specs;
14939 int rem, err;
14940
14941 if (!rdev->wiphy.sar_capa || !rdev->ops->set_sar_specs)
14942 return -EOPNOTSUPP;
14943
14944 if (!info->attrs[NL80211_ATTR_SAR_SPEC])
14945 return -EINVAL;
14946
14947 nla_parse_nested(tb, NL80211_SAR_ATTR_MAX,
14948 info->attrs[NL80211_ATTR_SAR_SPEC],
14949 NULL, NULL);
14950
14951 if (!tb[NL80211_SAR_ATTR_TYPE] || !tb[NL80211_SAR_ATTR_SPECS])
14952 return -EINVAL;
14953
14954 type = nla_get_u32(tb[NL80211_SAR_ATTR_TYPE]);
14955 if (type != rdev->wiphy.sar_capa->type)
14956 return -EINVAL;
14957
14958 specs = 0;
14959 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem)
14960 specs++;
14961
14962 if (specs > rdev->wiphy.sar_capa->num_freq_ranges)
14963 return -EINVAL;
14964
14965 sar_spec = kzalloc(sizeof(*sar_spec) +
14966 specs * sizeof(struct cfg80211_sar_sub_specs),
14967 GFP_KERNEL);
14968 if (!sar_spec)
14969 return -ENOMEM;
14970
14971 sar_spec->type = type;
14972 specs = 0;
14973 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem) {
14974 nla_parse_nested(spec, NL80211_SAR_ATTR_SPECS_MAX,
14975 spec_list, NULL, NULL);
14976
14977 switch (type) {
14978 case NL80211_SAR_TYPE_POWER:
14979 if (nl80211_set_sar_sub_specs(rdev, sar_spec,
14980 spec, specs)) {
14981 err = -EINVAL;
14982 goto error;
14983 }
14984 break;
14985 default:
14986 err = -EINVAL;
14987 goto error;
14988 }
14989 specs++;
14990 }
14991
14992 sar_spec->num_sub_specs = specs;
14993
14994 rdev->cur_cmd_info = info;
14995 err = rdev_set_sar_specs(rdev, sar_spec);
14996 rdev->cur_cmd_info = NULL;
14997error:
14998 kfree(sar_spec);
14999 return err;
15000}
15001
4534de83 15002static const struct genl_ops nl80211_ops[] = {
55682965
JB		 15003 {
15004 .cmd = NL80211_CMD_GET_WIPHY,
ef6243ac 15005 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 15006 .doit = nl80211_get_wiphy,
15007 .dumpit = nl80211_dump_wiphy,
86e8cf98 15008 .done = nl80211_dump_wiphy_done,
55682965 15009 /* can be retrieved by unprivileged users */
a05829a7 15010 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965 15011 },
66a9b928
JK		 15012};
15013
15014static const struct genl_small_ops nl80211_small_ops[] = {
55682965
JB		 15015 {
15016 .cmd = NL80211_CMD_SET_WIPHY,
ef6243ac 15017 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 15018 .doit = nl80211_set_wiphy,
5617c6cd 15019 .flags = GENL_UNS_ADMIN_PERM,
55682965
JB		 15020 },
15021 {
15022 .cmd = NL80211_CMD_GET_INTERFACE,
ef6243ac 15023 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 15024 .doit = nl80211_get_interface,
15025 .dumpit = nl80211_dump_interface,
55682965 15026 /* can be retrieved by unprivileged users */
a05829a7 15027 .internal_flags = NL80211_FLAG_NEED_WDEV,
55682965
JB		 15028 },
15029 {
15030 .cmd = NL80211_CMD_SET_INTERFACE,
ef6243ac 15031 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 15032 .doit = nl80211_set_interface,
5617c6cd 15033 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 15034 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15035 NL80211_FLAG_NEED_RTNL,
55682965
JB		 15036 },
15037 {
15038 .cmd = NL80211_CMD_NEW_INTERFACE,
ef6243ac 15039 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 15040 .doit = nl80211_new_interface,
5617c6cd 15041 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 15042 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15043 NL80211_FLAG_NEED_RTNL,
55682965
JB		 15044 },
15045 {
15046 .cmd = NL80211_CMD_DEL_INTERFACE,
ef6243ac 15047 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 15048 .doit = nl80211_del_interface,
5617c6cd 15049 .flags = GENL_UNS_ADMIN_PERM,
84efbb84 15050 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 15051 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 15052 },
15053 {
15054 .cmd = NL80211_CMD_GET_KEY,
ef6243ac 15055 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 15056 .doit = nl80211_get_key,
5617c6cd 15057 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15058 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
41ade00f
JB		 15059 },
15060 {
15061 .cmd = NL80211_CMD_SET_KEY,
ef6243ac 15062 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 15063 .doit = nl80211_set_key,
5617c6cd 15064 .flags = GENL_UNS_ADMIN_PERM,
41265714 15065 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917 15066 NL80211_FLAG_CLEAR_SKB,
41ade00f
JB		 15067 },
15068 {
15069 .cmd = NL80211_CMD_NEW_KEY,
ef6243ac 15070 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 15071 .doit = nl80211_new_key,
5617c6cd 15072 .flags = GENL_UNS_ADMIN_PERM,
41265714 15073 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917 15074 NL80211_FLAG_CLEAR_SKB,
41ade00f
JB		 15075 },
15076 {
15077 .cmd = NL80211_CMD_DEL_KEY,
ef6243ac 15078 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 15079 .doit = nl80211_del_key,
5617c6cd 15080 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15081 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
55682965 15082 },
ed1b6cc7
JB		 15083 {
15084 .cmd = NL80211_CMD_SET_BEACON,
ef6243ac 15085 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 15086 .flags = GENL_UNS_ADMIN_PERM,
8860020e 15087 .doit = nl80211_set_beacon,
a05829a7 15088 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
ed1b6cc7
JB		 15089 },
15090 {
8860020e 15091 .cmd = NL80211_CMD_START_AP,
ef6243ac 15092 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 15093 .flags = GENL_UNS_ADMIN_PERM,
8860020e 15094 .doit = nl80211_start_ap,
a05829a7 15095 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
ed1b6cc7
JB		 15096 },
15097 {
8860020e 15098 .cmd = NL80211_CMD_STOP_AP,
ef6243ac 15099 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 15100 .flags = GENL_UNS_ADMIN_PERM,
8860020e 15101 .doit = nl80211_stop_ap,
a05829a7 15102 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
ed1b6cc7 15103 },
5727ef1b
JB		 15104 {
15105 .cmd = NL80211_CMD_GET_STATION,
ef6243ac 15106 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 15107 .doit = nl80211_get_station,
2ec600d6 15108 .dumpit = nl80211_dump_station,
a05829a7 15109 .internal_flags = NL80211_FLAG_NEED_NETDEV,
5727ef1b
JB		 15110 },
15111 {
15112 .cmd = NL80211_CMD_SET_STATION,
ef6243ac 15113 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 15114 .doit = nl80211_set_station,
5617c6cd 15115 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15116 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
5727ef1b
JB		 15117 },
15118 {
15119 .cmd = NL80211_CMD_NEW_STATION,
ef6243ac 15120 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 15121 .doit = nl80211_new_station,
5617c6cd 15122 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15123 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
5727ef1b
JB		 15124 },
15125 {
15126 .cmd = NL80211_CMD_DEL_STATION,
ef6243ac 15127 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 15128 .doit = nl80211_del_station,
5617c6cd 15129 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15130 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
2ec600d6
LCC		 15131 },
15132 {
15133 .cmd = NL80211_CMD_GET_MPATH,
ef6243ac 15134 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6
LCC		 15135 .doit = nl80211_get_mpath,
15136 .dumpit = nl80211_dump_mpath,
5617c6cd 15137 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15138 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
2ec600d6 15139 },
66be7d2b
HR		 15140 {
15141 .cmd = NL80211_CMD_GET_MPP,
ef6243ac 15142 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
66be7d2b
HR		 15143 .doit = nl80211_get_mpp,
15144 .dumpit = nl80211_dump_mpp,
5617c6cd 15145 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15146 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
66be7d2b 15147 },
2ec600d6
LCC		 15148 {
15149 .cmd = NL80211_CMD_SET_MPATH,
ef6243ac 15150 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 15151 .doit = nl80211_set_mpath,
5617c6cd 15152 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15153 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
2ec600d6
LCC		 15154 },
15155 {
15156 .cmd = NL80211_CMD_NEW_MPATH,
ef6243ac 15157 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 15158 .doit = nl80211_new_mpath,
5617c6cd 15159 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15160 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
2ec600d6
LCC		 15161 },
15162 {
15163 .cmd = NL80211_CMD_DEL_MPATH,
ef6243ac 15164 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 15165 .doit = nl80211_del_mpath,
5617c6cd 15166 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15167 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
9f1ba906
JM		 15168 },
15169 {
15170 .cmd = NL80211_CMD_SET_BSS,
ef6243ac 15171 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9f1ba906 15172 .doit = nl80211_set_bss,
5617c6cd 15173 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15174 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
b2e1b302 15175 },
f130347c
LR		 15176 {
15177 .cmd = NL80211_CMD_GET_REG,
ef6243ac 15178 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad30ca2c
AN		 15179 .doit = nl80211_get_reg_do,
15180 .dumpit = nl80211_get_reg_dump,
a05829a7 15181 .internal_flags = 0,
f130347c
LR		 15182 /* can be retrieved by unprivileged users */
15183 },
b6863036 15184#ifdef CONFIG_CFG80211_CRDA_SUPPORT
b2e1b302
LR		 15185 {
15186 .cmd = NL80211_CMD_SET_REG,
ef6243ac 15187 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 15188 .doit = nl80211_set_reg,
b2e1b302 15189 .flags = GENL_ADMIN_PERM,
a05829a7 15190 .internal_flags = 0,
b2e1b302 15191 },
b6863036 15192#endif
b2e1b302
LR		 15193 {
15194 .cmd = NL80211_CMD_REQ_SET_REG,
ef6243ac 15195 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 15196 .doit = nl80211_req_set_reg,
93da9cc1 15197 .flags = GENL_ADMIN_PERM,
15198 },
1ea4ff3e
JB		 15199 {
15200 .cmd = NL80211_CMD_RELOAD_REGDB,
ef6243ac 15201 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1ea4ff3e 15202 .doit = nl80211_reload_regdb,
1ea4ff3e
JB		 15203 .flags = GENL_ADMIN_PERM,
15204 },
93da9cc1 15205 {
24bdd9f4 15206 .cmd = NL80211_CMD_GET_MESH_CONFIG,
ef6243ac 15207 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 15208 .doit = nl80211_get_mesh_config,
93da9cc1 15209 /* can be retrieved by unprivileged users */
a05829a7 15210 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
93da9cc1 15211 },
15212 {
24bdd9f4 15213 .cmd = NL80211_CMD_SET_MESH_CONFIG,
ef6243ac 15214 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 15215 .doit = nl80211_update_mesh_config,
5617c6cd 15216 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15217 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
9aed3cc1 15218 },
2a519311
JB		 15219 {
15220 .cmd = NL80211_CMD_TRIGGER_SCAN,
ef6243ac 15221 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311 15222 .doit = nl80211_trigger_scan,
5617c6cd 15223 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15224 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
2a519311 15225 },
91d3ab46
VK		 15226 {
15227 .cmd = NL80211_CMD_ABORT_SCAN,
ef6243ac 15228 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
91d3ab46 15229 .doit = nl80211_abort_scan,
5617c6cd 15230 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15231 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
91d3ab46 15232 },
2a519311
JB		 15233 {
15234 .cmd = NL80211_CMD_GET_SCAN,
ef6243ac 15235 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311
JB		 15236 .dumpit = nl80211_dump_scan,
15237 },
807f8a8c
LC		 15238 {
15239 .cmd = NL80211_CMD_START_SCHED_SCAN,
ef6243ac 15240 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 15241 .doit = nl80211_start_sched_scan,
5617c6cd 15242 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15243 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
807f8a8c
LC		 15244 },
15245 {
15246 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
ef6243ac 15247 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 15248 .doit = nl80211_stop_sched_scan,
5617c6cd 15249 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15250 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
807f8a8c 15251 },
636a5d36
JM		 15252 {
15253 .cmd = NL80211_CMD_AUTHENTICATE,
ef6243ac 15254 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 15255 .doit = nl80211_authenticate,
5617c6cd 15256 .flags = GENL_UNS_ADMIN_PERM,
41265714 15257 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
a05829a7 15258 0 |
5393b917 15259 NL80211_FLAG_CLEAR_SKB,
636a5d36
JM		 15260 },
15261 {
15262 .cmd = NL80211_CMD_ASSOCIATE,
ef6243ac 15263 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 15264 .doit = nl80211_associate,
5617c6cd 15265 .flags = GENL_UNS_ADMIN_PERM,
41265714 15266 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
a05829a7 15267 0 |
d6db02a8 15268 NL80211_FLAG_CLEAR_SKB,
636a5d36
JM		 15269 },
15270 {
15271 .cmd = NL80211_CMD_DEAUTHENTICATE,
ef6243ac 15272 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 15273 .doit = nl80211_deauthenticate,
5617c6cd 15274 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15275 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
636a5d36
JM		 15276 },
15277 {
15278 .cmd = NL80211_CMD_DISASSOCIATE,
ef6243ac 15279 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 15280 .doit = nl80211_disassociate,
5617c6cd 15281 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15282 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
636a5d36 15283 },
04a773ad
JB		 15284 {
15285 .cmd = NL80211_CMD_JOIN_IBSS,
ef6243ac 15286 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 15287 .doit = nl80211_join_ibss,
5617c6cd 15288 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15289 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
04a773ad
JB		 15290 },
15291 {
15292 .cmd = NL80211_CMD_LEAVE_IBSS,
ef6243ac 15293 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 15294 .doit = nl80211_leave_ibss,
5617c6cd 15295 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15296 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
04a773ad 15297 },
aff89a9b
JB		 15298#ifdef CONFIG_NL80211_TESTMODE
15299 {
15300 .cmd = NL80211_CMD_TESTMODE,
ef6243ac 15301 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
aff89a9b 15302 .doit = nl80211_testmode_do,
71063f0e 15303 .dumpit = nl80211_testmode_dump,
5617c6cd 15304 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15305 .internal_flags = NL80211_FLAG_NEED_WIPHY,
aff89a9b
JB		 15306 },
15307#endif
b23aa676
SO		 15308 {
15309 .cmd = NL80211_CMD_CONNECT,
ef6243ac 15310 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 15311 .doit = nl80211_connect,
5617c6cd 15312 .flags = GENL_UNS_ADMIN_PERM,
41265714 15313 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
a05829a7 15314 0 |
d6db02a8 15315 NL80211_FLAG_CLEAR_SKB,
b23aa676 15316 },
088e8df8 15317 {
15318 .cmd = NL80211_CMD_UPDATE_CONNECT_PARAMS,
ef6243ac 15319 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
088e8df8 15320 .doit = nl80211_update_connect_params,
088e8df8 15321 .flags = GENL_ADMIN_PERM,
15322 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
a05829a7 15323 0 |
d6db02a8 15324 NL80211_FLAG_CLEAR_SKB,
088e8df8 15325 },
b23aa676
SO		 15326 {
15327 .cmd = NL80211_CMD_DISCONNECT,
ef6243ac 15328 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 15329 .doit = nl80211_disconnect,
5617c6cd 15330 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15331 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
b23aa676 15332 },
463d0183
JB		 15333 {
15334 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
ef6243ac 15335 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
463d0183 15336 .doit = nl80211_wiphy_netns,
5617c6cd 15337 .flags = GENL_UNS_ADMIN_PERM,
77cbf790
JB		 15338 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15339 NL80211_FLAG_NEED_RTNL |
15340 NL80211_FLAG_NO_WIPHY_MTX,
463d0183 15341 },
61fa713c
HS		 15342 {
15343 .cmd = NL80211_CMD_GET_SURVEY,
ef6243ac 15344 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
61fa713c
HS		 15345 .dumpit = nl80211_dump_survey,
15346 },
67fbb16b
SO		 15347 {
15348 .cmd = NL80211_CMD_SET_PMKSA,
ef6243ac 15349 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 15350 .doit = nl80211_setdel_pmksa,
5617c6cd 15351 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 15352 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
a05829a7 15353 0 |
d6db02a8 15354 NL80211_FLAG_CLEAR_SKB,
67fbb16b
SO		 15355 },
15356 {
15357 .cmd = NL80211_CMD_DEL_PMKSA,
ef6243ac 15358 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 15359 .doit = nl80211_setdel_pmksa,
5617c6cd 15360 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15361 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
67fbb16b
SO		 15362 },
15363 {
15364 .cmd = NL80211_CMD_FLUSH_PMKSA,
ef6243ac 15365 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 15366 .doit = nl80211_flush_pmksa,
5617c6cd 15367 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15368 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
67fbb16b 15369 },
9588bbd5
JM		 15370 {
15371 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
ef6243ac 15372 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 15373 .doit = nl80211_remain_on_channel,
5617c6cd 15374 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15375 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
9588bbd5
JM		 15376 },
15377 {
15378 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
ef6243ac 15379 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 15380 .doit = nl80211_cancel_remain_on_channel,
5617c6cd 15381 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15382 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
9588bbd5 15383 },
13ae75b1
JM		 15384 {
15385 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
ef6243ac 15386 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
13ae75b1 15387 .doit = nl80211_set_tx_bitrate_mask,
5617c6cd 15388 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15389 .internal_flags = NL80211_FLAG_NEED_NETDEV,
13ae75b1 15390 },
026331c4 15391 {
2e161f78 15392 .cmd = NL80211_CMD_REGISTER_FRAME,
ef6243ac 15393 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 15394 .doit = nl80211_register_mgmt,
5617c6cd 15395 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15396 .internal_flags = NL80211_FLAG_NEED_WDEV,
026331c4
JM		 15397 },
15398 {
2e161f78 15399 .cmd = NL80211_CMD_FRAME,
ef6243ac 15400 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 15401 .doit = nl80211_tx_mgmt,
5617c6cd 15402 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15403 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
f7ca38df
JB		 15404 },
15405 {
15406 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
ef6243ac 15407 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f7ca38df 15408 .doit = nl80211_tx_mgmt_cancel_wait,
5617c6cd 15409 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15410 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
026331c4 15411 },
ffb9eb3d
KV		 15412 {
15413 .cmd = NL80211_CMD_SET_POWER_SAVE,
ef6243ac 15414 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 15415 .doit = nl80211_set_power_save,
5617c6cd 15416 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15417 .internal_flags = NL80211_FLAG_NEED_NETDEV,
ffb9eb3d
KV		 15418 },
15419 {
15420 .cmd = NL80211_CMD_GET_POWER_SAVE,
ef6243ac 15421 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 15422 .doit = nl80211_get_power_save,
ffb9eb3d 15423 /* can be retrieved by unprivileged users */
a05829a7 15424 .internal_flags = NL80211_FLAG_NEED_NETDEV,
ffb9eb3d 15425 },
d6dc1a38
JO		 15426 {
15427 .cmd = NL80211_CMD_SET_CQM,
ef6243ac 15428 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
d6dc1a38 15429 .doit = nl80211_set_cqm,
5617c6cd 15430 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15431 .internal_flags = NL80211_FLAG_NEED_NETDEV,
d6dc1a38 15432 },
f444de05
JB		 15433 {
15434 .cmd = NL80211_CMD_SET_CHANNEL,
ef6243ac 15435 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f444de05 15436 .doit = nl80211_set_channel,
5617c6cd 15437 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15438 .internal_flags = NL80211_FLAG_NEED_NETDEV,
f444de05 15439 },
29cbe68c
JB		 15440 {
15441 .cmd = NL80211_CMD_JOIN_MESH,
ef6243ac 15442 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 15443 .doit = nl80211_join_mesh,
5617c6cd 15444 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15445 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
29cbe68c
JB		 15446 },
15447 {
15448 .cmd = NL80211_CMD_LEAVE_MESH,
ef6243ac 15449 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 15450 .doit = nl80211_leave_mesh,
5617c6cd 15451 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15452 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
29cbe68c 15453 },
6e0bd6c3
RL		 15454 {
15455 .cmd = NL80211_CMD_JOIN_OCB,
ef6243ac 15456 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 15457 .doit = nl80211_join_ocb,
5617c6cd 15458 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15459 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
6e0bd6c3
RL		 15460 },
15461 {
15462 .cmd = NL80211_CMD_LEAVE_OCB,
ef6243ac 15463 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 15464 .doit = nl80211_leave_ocb,
5617c6cd 15465 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15466 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
6e0bd6c3 15467 },
dfb89c56 15468#ifdef CONFIG_PM
ff1b6e69
JB		 15469 {
15470 .cmd = NL80211_CMD_GET_WOWLAN,
ef6243ac 15471 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 15472 .doit = nl80211_get_wowlan,
ff1b6e69 15473 /* can be retrieved by unprivileged users */
a05829a7 15474 .internal_flags = NL80211_FLAG_NEED_WIPHY,
ff1b6e69
JB		 15475 },
15476 {
15477 .cmd = NL80211_CMD_SET_WOWLAN,
ef6243ac 15478 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 15479 .doit = nl80211_set_wowlan,
5617c6cd 15480 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15481 .internal_flags = NL80211_FLAG_NEED_WIPHY,
ff1b6e69 15482 },
dfb89c56 15483#endif
e5497d76
JB		 15484 {
15485 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
ef6243ac 15486 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e5497d76 15487 .doit = nl80211_set_rekey_data,
5617c6cd 15488 .flags = GENL_UNS_ADMIN_PERM,
e5497d76 15489 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
a05829a7 15490 0 |
5393b917 15491 NL80211_FLAG_CLEAR_SKB,
e5497d76 15492 },
109086ce
AN		 15493 {
15494 .cmd = NL80211_CMD_TDLS_MGMT,
ef6243ac 15495 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 15496 .doit = nl80211_tdls_mgmt,
5617c6cd 15497 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15498 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
109086ce
AN		 15499 },
15500 {
15501 .cmd = NL80211_CMD_TDLS_OPER,
ef6243ac 15502 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 15503 .doit = nl80211_tdls_oper,
5617c6cd 15504 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15505 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
109086ce 15506 },
28946da7
JB		 15507 {
15508 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
ef6243ac 15509 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
28946da7 15510 .doit = nl80211_register_unexpected_frame,
5617c6cd 15511 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15512 .internal_flags = NL80211_FLAG_NEED_NETDEV,
28946da7 15513 },
7f6cf311
JB		 15514 {
15515 .cmd = NL80211_CMD_PROBE_CLIENT,
ef6243ac 15516 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
7f6cf311 15517 .doit = nl80211_probe_client,
5617c6cd 15518 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15519 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
7f6cf311 15520 },
5e760230
JB		 15521 {
15522 .cmd = NL80211_CMD_REGISTER_BEACONS,
ef6243ac 15523 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5e760230 15524 .doit = nl80211_register_beacons,
5617c6cd 15525 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15526 .internal_flags = NL80211_FLAG_NEED_WIPHY,
5e760230 15527 },
1d9d9213
SW		 15528 {
15529 .cmd = NL80211_CMD_SET_NOACK_MAP,
ef6243ac 15530 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1d9d9213 15531 .doit = nl80211_set_noack_map,
5617c6cd 15532 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15533 .internal_flags = NL80211_FLAG_NEED_NETDEV,
1d9d9213 15534 },
98104fde
JB		 15535 {
15536 .cmd = NL80211_CMD_START_P2P_DEVICE,
ef6243ac 15537 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 15538 .doit = nl80211_start_p2p_device,
5617c6cd 15539 .flags = GENL_UNS_ADMIN_PERM,
98104fde
JB		 15540 .internal_flags = NL80211_FLAG_NEED_WDEV |
15541 NL80211_FLAG_NEED_RTNL,
15542 },
15543 {
15544 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
ef6243ac 15545 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 15546 .doit = nl80211_stop_p2p_device,
5617c6cd 15547 .flags = GENL_UNS_ADMIN_PERM,
98104fde
JB		 15548 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15549 NL80211_FLAG_NEED_RTNL,
cb3b7d87
AB		 15550 },
15551 {
15552 .cmd = NL80211_CMD_START_NAN,
ef6243ac 15553 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 15554 .doit = nl80211_start_nan,
cb3b7d87
AB		 15555 .flags = GENL_ADMIN_PERM,
15556 .internal_flags = NL80211_FLAG_NEED_WDEV |
15557 NL80211_FLAG_NEED_RTNL,
15558 },
15559 {
15560 .cmd = NL80211_CMD_STOP_NAN,
ef6243ac 15561 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 15562 .doit = nl80211_stop_nan,
cb3b7d87
AB		 15563 .flags = GENL_ADMIN_PERM,
15564 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15565 NL80211_FLAG_NEED_RTNL,
a442b761
AB		 15566 },
15567 {
15568 .cmd = NL80211_CMD_ADD_NAN_FUNCTION,
ef6243ac 15569 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 15570 .doit = nl80211_nan_add_func,
a442b761 15571 .flags = GENL_ADMIN_PERM,
a05829a7 15572 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
a442b761
AB		 15573 },
15574 {
15575 .cmd = NL80211_CMD_DEL_NAN_FUNCTION,
ef6243ac 15576 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 15577 .doit = nl80211_nan_del_func,
a442b761 15578 .flags = GENL_ADMIN_PERM,
a05829a7 15579 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
a5a9dcf2
AB		 15580 },
15581 {
15582 .cmd = NL80211_CMD_CHANGE_NAN_CONFIG,
ef6243ac 15583 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a5a9dcf2 15584 .doit = nl80211_nan_change_config,
a5a9dcf2 15585 .flags = GENL_ADMIN_PERM,
a05829a7 15586 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
98104fde 15587 },
f4e583c8
AQ		 15588 {
15589 .cmd = NL80211_CMD_SET_MCAST_RATE,
ef6243ac 15590 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f4e583c8 15591 .doit = nl80211_set_mcast_rate,
5617c6cd 15592 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15593 .internal_flags = NL80211_FLAG_NEED_NETDEV,
77765eaf
VT		 15594 },
15595 {
15596 .cmd = NL80211_CMD_SET_MAC_ACL,
ef6243ac 15597 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
77765eaf 15598 .doit = nl80211_set_mac_acl,
5617c6cd 15599 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15600 .internal_flags = NL80211_FLAG_NEED_NETDEV,
f4e583c8 15601 },
04f39047
SW		 15602 {
15603 .cmd = NL80211_CMD_RADAR_DETECT,
ef6243ac 15604 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04f39047 15605 .doit = nl80211_start_radar_detection,
5617c6cd 15606 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15607 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
04f39047 15608 },
3713b4e3
JB		 15609 {
15610 .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
ef6243ac 15611 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3713b4e3 15612 .doit = nl80211_get_protocol_features,
3713b4e3 15613 },
355199e0
JM		 15614 {
15615 .cmd = NL80211_CMD_UPDATE_FT_IES,
ef6243ac 15616 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
355199e0 15617 .doit = nl80211_update_ft_ies,
5617c6cd 15618 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15619 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
355199e0 15620 },
5de17984
AS		 15621 {
15622 .cmd = NL80211_CMD_CRIT_PROTOCOL_START,
ef6243ac 15623 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 15624 .doit = nl80211_crit_protocol_start,
5617c6cd 15625 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15626 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
5de17984
AS		 15627 },
15628 {
15629 .cmd = NL80211_CMD_CRIT_PROTOCOL_STOP,
ef6243ac 15630 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 15631 .doit = nl80211_crit_protocol_stop,
5617c6cd 15632 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15633 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
be29b99a
AK		 15634 },
15635 {
15636 .cmd = NL80211_CMD_GET_COALESCE,
ef6243ac 15637 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 15638 .doit = nl80211_get_coalesce,
a05829a7 15639 .internal_flags = NL80211_FLAG_NEED_WIPHY,
be29b99a
AK		 15640 },
15641 {
15642 .cmd = NL80211_CMD_SET_COALESCE,
ef6243ac 15643 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 15644 .doit = nl80211_set_coalesce,
5617c6cd 15645 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15646 .internal_flags = NL80211_FLAG_NEED_WIPHY,
16ef1fe2
SW		 15647 },
15648 {
15649 .cmd = NL80211_CMD_CHANNEL_SWITCH,
ef6243ac 15650 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
16ef1fe2 15651 .doit = nl80211_channel_switch,
5617c6cd 15652 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15653 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
16ef1fe2 15654 },
ad7e718c
JB		 15655 {
15656 .cmd = NL80211_CMD_VENDOR,
ef6243ac 15657 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad7e718c 15658 .doit = nl80211_vendor_cmd,
7bdbe400 15659 .dumpit = nl80211_vendor_cmd_dump,
5617c6cd 15660 .flags = GENL_UNS_ADMIN_PERM,
ad7e718c 15661 .internal_flags = NL80211_FLAG_NEED_WIPHY |
a05829a7 15662 0 |
d6db02a8 15663 NL80211_FLAG_CLEAR_SKB,
ad7e718c 15664 },
fa9ffc74
KP		 15665 {
15666 .cmd = NL80211_CMD_SET_QOS_MAP,
ef6243ac 15667 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
fa9ffc74 15668 .doit = nl80211_set_qos_map,
5617c6cd 15669 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15670 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
fa9ffc74 15671 },
960d01ac
JB		 15672 {
15673 .cmd = NL80211_CMD_ADD_TX_TS,
ef6243ac 15674 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 15675 .doit = nl80211_add_tx_ts,
5617c6cd 15676 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15677 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
960d01ac
JB		 15678 },
15679 {
15680 .cmd = NL80211_CMD_DEL_TX_TS,
ef6243ac 15681 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 15682 .doit = nl80211_del_tx_ts,
5617c6cd 15683 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15684 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
960d01ac 15685 },
1057d35e
AN		 15686 {
15687 .cmd = NL80211_CMD_TDLS_CHANNEL_SWITCH,
ef6243ac 15688 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 15689 .doit = nl80211_tdls_channel_switch,
5617c6cd 15690 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15691 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
1057d35e
AN		 15692 },
15693 {
15694 .cmd = NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH,
ef6243ac 15695 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 15696 .doit = nl80211_tdls_cancel_channel_switch,
5617c6cd 15697 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15698 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
1057d35e 15699 },
ce0ce13a
MB		 15700 {
15701 .cmd = NL80211_CMD_SET_MULTICAST_TO_UNICAST,
ef6243ac 15702 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ce0ce13a 15703 .doit = nl80211_set_multicast_to_unicast,
ce0ce13a 15704 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15705 .internal_flags = NL80211_FLAG_NEED_NETDEV,
ce0ce13a 15706 },
3a00df57
AS		 15707 {
15708 .cmd = NL80211_CMD_SET_PMK,
ef6243ac 15709 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 15710 .doit = nl80211_set_pmk,
3a00df57 15711 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
a05829a7 15712 0 |
d6db02a8 15713 NL80211_FLAG_CLEAR_SKB,
3a00df57
AS		 15714 },
15715 {
15716 .cmd = NL80211_CMD_DEL_PMK,
ef6243ac 15717 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 15718 .doit = nl80211_del_pmk,
a05829a7 15719 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
3a00df57 15720 },
40cbfa90
SD		 15721 {
15722 .cmd = NL80211_CMD_EXTERNAL_AUTH,
ef6243ac 15723 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
40cbfa90 15724 .doit = nl80211_external_auth,
40cbfa90 15725 .flags = GENL_ADMIN_PERM,
a05829a7 15726 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
40cbfa90 15727 },
2576a9ac
DK		 15728 {
15729 .cmd = NL80211_CMD_CONTROL_PORT_FRAME,
ef6243ac 15730 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2576a9ac 15731 .doit = nl80211_tx_control_port,
2576a9ac 15732 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15733 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
2576a9ac 15734 },
81e54d08
PKC		 15735 {
15736 .cmd = NL80211_CMD_GET_FTM_RESPONDER_STATS,
ef6243ac 15737 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
81e54d08 15738 .doit = nl80211_get_ftm_responder_stats,
a05829a7 15739 .internal_flags = NL80211_FLAG_NEED_NETDEV,
81e54d08 15740 },
9bb7e0f2
JB		 15741 {
15742 .cmd = NL80211_CMD_PEER_MEASUREMENT_START,
ef6243ac 15743 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9bb7e0f2 15744 .doit = nl80211_pmsr_start,
9bb7e0f2 15745 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15746 .internal_flags = NL80211_FLAG_NEED_WDEV_UP,
9bb7e0f2 15747 },
30c63115
S		 15748 {
15749 .cmd = NL80211_CMD_NOTIFY_RADAR,
ef6243ac 15750 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
30c63115 15751 .doit = nl80211_notify_radar_detection,
30c63115 15752 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15753 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
30c63115 15754 },
cb74e977
SD		 15755 {
15756 .cmd = NL80211_CMD_UPDATE_OWE_INFO,
15757 .doit = nl80211_update_owe_info,
15758 .flags = GENL_ADMIN_PERM,
a05829a7 15759 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
5ab92e7f
RM		 15760 },
15761 {
15762 .cmd = NL80211_CMD_PROBE_MESH_LINK,
15763 .doit = nl80211_probe_mesh_link,
15764 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15765 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP,
cb74e977 15766 },
77f576de
T		 15767 {
15768 .cmd = NL80211_CMD_SET_TID_CONFIG,
15769 .doit = nl80211_set_tid_config,
15770 .flags = GENL_UNS_ADMIN_PERM,
a05829a7 15771 .internal_flags = NL80211_FLAG_NEED_NETDEV,
77f576de 15772 },
6bdb68ce
CH		 15773 {
15774 .cmd = NL80211_CMD_SET_SAR_SPECS,
15775 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
15776 .doit = nl80211_set_sar_specs,
15777 .flags = GENL_UNS_ADMIN_PERM,
15778 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15779 NL80211_FLAG_NEED_RTNL,
15780 },
55682965 15781};
9588bbd5 15782
56989f6d 15783static struct genl_family nl80211_fam __ro_after_init = {
489111e5
JB		 15784 .name = NL80211_GENL_NAME, /* have users key off the name instead */
15785 .hdrsize = 0, /* no private header */
15786 .version = 1, /* no particular meaning now */
15787 .maxattr = NL80211_ATTR_MAX,
3b0f31f2 15788 .policy = nl80211_policy,
489111e5
JB		 15789 .netnsok = true,
15790 .pre_doit = nl80211_pre_doit,
15791 .post_doit = nl80211_post_doit,
15792 .module = THIS_MODULE,
15793 .ops = nl80211_ops,
15794 .n_ops = ARRAY_SIZE(nl80211_ops),
66a9b928
JK		 15795 .small_ops = nl80211_small_ops,
15796 .n_small_ops = ARRAY_SIZE(nl80211_small_ops),
489111e5
JB		 15797 .mcgrps = nl80211_mcgrps,
15798 .n_mcgrps = ARRAY_SIZE(nl80211_mcgrps),
50508d94 15799 .parallel_ops = true,
489111e5
JB		 15800};
15801
55682965
JB		 15802/* notification functions */
15803
3bb20556
JB		 15804void nl80211_notify_wiphy(struct cfg80211_registered_device *rdev,
15805 enum nl80211_commands cmd)
55682965
JB		 15806{
15807 struct sk_buff *msg;
86e8cf98 15808 struct nl80211_dump_wiphy_state state = {};
55682965 15809
3bb20556
JB		 15810 WARN_ON(cmd != NL80211_CMD_NEW_WIPHY &&
15811 cmd != NL80211_CMD_DEL_WIPHY);
15812
fd2120ca 15813 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 15814 if (!msg)
15815 return;
15816
3bb20556 15817 if (nl80211_send_wiphy(rdev, cmd, msg, 0, 0, 0, &state) < 0) {
55682965
JB		 15818 nlmsg_free(msg);
15819 return;
15820 }
15821
68eb5503 15822 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15823 NL80211_MCGRP_CONFIG, GFP_KERNEL);
55682965
JB		 15824}
15825
896ff063
DK		 15826void nl80211_notify_iface(struct cfg80211_registered_device *rdev,
15827 struct wireless_dev *wdev,
15828 enum nl80211_commands cmd)
15829{
15830 struct sk_buff *msg;
15831
896ff063
DK		 15832 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15833 if (!msg)
15834 return;
15835
3d1a5bbf 15836 if (nl80211_send_iface(msg, 0, 0, 0, rdev, wdev, cmd) < 0) {
896ff063
DK		 15837 nlmsg_free(msg);
15838 return;
15839 }
15840
15841 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
15842 NL80211_MCGRP_CONFIG, GFP_KERNEL);
15843}
15844
362a415d
JB		 15845static int nl80211_add_scan_req(struct sk_buff *msg,
15846 struct cfg80211_registered_device *rdev)
15847{
15848 struct cfg80211_scan_request *req = rdev->scan_req;
15849 struct nlattr *nest;
15850 int i;
c8cb5b85 15851 struct cfg80211_scan_info *info;
362a415d
JB		 15852
15853 if (WARN_ON(!req))
15854 return 0;
15855
ae0be8de 15856 nest = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_SSIDS);
362a415d
JB		 15857 if (!nest)
15858 goto nla_put_failure;
9360ffd1
DM		 15859 for (i = 0; i < req->n_ssids; i++) {
15860 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
15861 goto nla_put_failure;
15862 }
362a415d
JB		 15863 nla_nest_end(msg, nest);
15864
2032f3b2
TP		 15865 if (req->flags & NL80211_SCAN_FLAG_FREQ_KHZ) {
15866 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQ_KHZ);
15867 if (!nest)
15868 goto nla_put_failure;
15869 for (i = 0; i < req->n_channels; i++) {
15870 if (nla_put_u32(msg, i,
15871 ieee80211_channel_to_khz(req->channels[i])))
15872 goto nla_put_failure;
15873 }
15874 nla_nest_end(msg, nest);
15875 } else {
15876 nest = nla_nest_start_noflag(msg,
15877 NL80211_ATTR_SCAN_FREQUENCIES);
15878 if (!nest)
9360ffd1 15879 goto nla_put_failure;
2032f3b2
TP		 15880 for (i = 0; i < req->n_channels; i++) {
15881 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
15882 goto nla_put_failure;
15883 }
15884 nla_nest_end(msg, nest);
9360ffd1 15885 }
362a415d 15886
9360ffd1
DM		 15887 if (req->ie &&
15888 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
15889 goto nla_put_failure;
362a415d 15890
ae917c9f
JB		 15891 if (req->flags &&
15892 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags))
15893 goto nla_put_failure;
ed473771 15894
c8cb5b85
TM		 15895 info = rdev->int_scan_req ? &rdev->int_scan_req->info :
15896 &rdev->scan_req->info;
15897 if (info->scan_start_tsf &&
1d76250b 15898 (nla_put_u64_64bit(msg, NL80211_ATTR_SCAN_START_TIME_TSF,
c8cb5b85 15899 info->scan_start_tsf, NL80211_BSS_PAD) ||
1d76250b 15900 nla_put(msg, NL80211_ATTR_SCAN_START_TIME_TSF_BSSID, ETH_ALEN,
c8cb5b85 15901 info->tsf_bssid)))
1d76250b
AS		 15902 goto nla_put_failure;
15903
362a415d
JB		 15904 return 0;
15905 nla_put_failure:
15906 return -ENOBUFS;
15907}
15908
505a2e88 15909static int nl80211_prep_scan_msg(struct sk_buff *msg,
a538e2d5 15910 struct cfg80211_registered_device *rdev,
fd014284 15911 struct wireless_dev *wdev,
15e47304 15912 u32 portid, u32 seq, int flags,
a538e2d5 15913 u32 cmd)
2a519311
JB		 15914{
15915 void *hdr;
15916
15e47304 15917 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 15918 if (!hdr)
15919 return -1;
15920
9360ffd1 15921 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 15922 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
15923 wdev->netdev->ifindex)) ||
2dad624e
ND		 15924 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
15925 NL80211_ATTR_PAD))
9360ffd1 15926 goto nla_put_failure;
2a519311 15927
362a415d
JB		 15928 /* ignore errors and send incomplete event anyway */
15929 nl80211_add_scan_req(msg, rdev);
2a519311 15930
053c095a
JB		 15931 genlmsg_end(msg, hdr);
15932 return 0;
2a519311
JB		 15933
15934 nla_put_failure:
15935 genlmsg_cancel(msg, hdr);
15936 return -EMSGSIZE;
15937}
15938
807f8a8c 15939static int
505a2e88 15940nl80211_prep_sched_scan_msg(struct sk_buff *msg,
96b08fd6 15941 struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 15942{
15943 void *hdr;
15944
96b08fd6 15945 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
807f8a8c
LC		 15946 if (!hdr)
15947 return -1;
15948
96b08fd6
AVS		 15949 if (nla_put_u32(msg, NL80211_ATTR_WIPHY,
15950 wiphy_to_rdev(req->wiphy)->wiphy_idx) ||
15951 nla_put_u32(msg, NL80211_ATTR_IFINDEX, req->dev->ifindex) ||
15952 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, req->reqid,
15953 NL80211_ATTR_PAD))
9360ffd1 15954 goto nla_put_failure;
807f8a8c 15955
053c095a
JB		 15956 genlmsg_end(msg, hdr);
15957 return 0;
807f8a8c
LC		 15958
15959 nla_put_failure:
15960 genlmsg_cancel(msg, hdr);
15961 return -EMSGSIZE;
15962}
15963
a538e2d5 15964void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 15965 struct wireless_dev *wdev)
a538e2d5
JB		 15966{
15967 struct sk_buff *msg;
15968
58050fce 15969 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 15970 if (!msg)
15971 return;
15972
505a2e88 15973 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 15974 NL80211_CMD_TRIGGER_SCAN) < 0) {
15975 nlmsg_free(msg);
15976 return;
15977 }
15978
68eb5503 15979 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15980 NL80211_MCGRP_SCAN, GFP_KERNEL);
a538e2d5
JB		 15981}
15982
f9d15d16
JB		 15983struct sk_buff *nl80211_build_scan_msg(struct cfg80211_registered_device *rdev,
15984 struct wireless_dev *wdev, bool aborted)
2a519311
JB		 15985{
15986 struct sk_buff *msg;
15987
fd2120ca 15988 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311 15989 if (!msg)
f9d15d16 15990 return NULL;
2a519311 15991
505a2e88 15992 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
f9d15d16
JB		 15993 aborted ? NL80211_CMD_SCAN_ABORTED :
15994 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311 15995 nlmsg_free(msg);
f9d15d16 15996 return NULL;
2a519311
JB		 15997 }
15998
f9d15d16 15999 return msg;
2a519311
JB		 16000}
16001
505a2e88
AVS		 16002/* send message created by nl80211_build_scan_msg() */
16003void nl80211_send_scan_msg(struct cfg80211_registered_device *rdev,
16004 struct sk_buff *msg)
807f8a8c 16005{
807f8a8c
LC		 16006 if (!msg)
16007 return;
16008
68eb5503 16009 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16010 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 16011}
16012
96b08fd6 16013void nl80211_send_sched_scan(struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 16014{
16015 struct sk_buff *msg;
16016
58050fce 16017 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 16018 if (!msg)
16019 return;
16020
96b08fd6 16021 if (nl80211_prep_sched_scan_msg(msg, req, cmd) < 0) {
807f8a8c
LC		 16022 nlmsg_free(msg);
16023 return;
16024 }
16025
96b08fd6 16026 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(req->wiphy), msg, 0,
2a94fe48 16027 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 16028}
16029
b0d7aa59
JD		 16030static bool nl80211_reg_change_event_fill(struct sk_buff *msg,
16031 struct regulatory_request *request)
73d54c9e 16032{
73d54c9e 16033 /* Userspace can always count this one always being set */
9360ffd1
DM		 16034 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
16035 goto nla_put_failure;
16036
16037 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
16038 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
16039 NL80211_REGDOM_TYPE_WORLD))
16040 goto nla_put_failure;
16041 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
16042 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
16043 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
16044 goto nla_put_failure;
16045 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
16046 request->intersect) {
16047 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
16048 NL80211_REGDOM_TYPE_INTERSECTION))
16049 goto nla_put_failure;
16050 } else {
16051 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
16052 NL80211_REGDOM_TYPE_COUNTRY) ||
16053 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
16054 request->alpha2))
16055 goto nla_put_failure;
16056 }
16057
ad30ca2c
AN		 16058 if (request->wiphy_idx != WIPHY_IDX_INVALID) {
16059 struct wiphy *wiphy = wiphy_idx_to_wiphy(request->wiphy_idx);
16060
16061 if (wiphy &&
16062 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
16063 goto nla_put_failure;
1bdd716c
AN		 16064
16065 if (wiphy &&
16066 wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
16067 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
16068 goto nla_put_failure;
ad30ca2c 16069 }
73d54c9e 16070
b0d7aa59
JD		 16071 return true;
16072
16073nla_put_failure:
16074 return false;
16075}
16076
16077/*
16078 * This can happen on global regulatory changes or device specific settings
16079 * based on custom regulatory domains.
16080 */
16081void nl80211_common_reg_change_event(enum nl80211_commands cmd_id,
16082 struct regulatory_request *request)
16083{
16084 struct sk_buff *msg;
16085 void *hdr;
16086
16087 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
16088 if (!msg)
16089 return;
16090
16091 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd_id);
24f6d765 16092 if (!hdr)
16093 goto nla_put_failure;
b0d7aa59 16094
24f6d765 16095 if (!nl80211_reg_change_event_fill(msg, request))
b0d7aa59
JD		 16096 goto nla_put_failure;
16097
3b7b72ee 16098 genlmsg_end(msg, hdr);
73d54c9e 16099
bc43b28c 16100 rcu_read_lock();
68eb5503 16101 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 16102 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
bc43b28c 16103 rcu_read_unlock();
73d54c9e
LR		 16104
16105 return;
16106
16107nla_put_failure:
73d54c9e
LR		 16108 nlmsg_free(msg);
16109}
16110
6039f6d2
JM		 16111static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
16112 struct net_device *netdev,
16113 const u8 *buf, size_t len,
b0b6aa2c 16114 enum nl80211_commands cmd, gfp_t gfp,
4d9ec73d 16115 int uapsd_queues, const u8 *req_ies,
3bb02143 16116 size_t req_ies_len, bool reconnect)
6039f6d2
JM		 16117{
16118 struct sk_buff *msg;
16119 void *hdr;
16120
4d9ec73d 16121 msg = nlmsg_new(100 + len + req_ies_len, gfp);
6039f6d2
JM		 16122 if (!msg)
16123 return;
16124
16125 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
16126 if (!hdr) {
16127 nlmsg_free(msg);
16128 return;
16129 }
16130
9360ffd1
DM		 16131 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16132 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
4d9ec73d
JM		 16133 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
16134 (req_ies &&
16135 nla_put(msg, NL80211_ATTR_REQ_IE, req_ies_len, req_ies)))
9360ffd1 16136 goto nla_put_failure;
6039f6d2 16137
3bb02143
JB		 16138 if (reconnect && nla_put_flag(msg, NL80211_ATTR_RECONNECT_REQUESTED))
16139 goto nla_put_failure;
16140
b0b6aa2c
EP		 16141 if (uapsd_queues >= 0) {
16142 struct nlattr *nla_wmm =
ae0be8de 16143 nla_nest_start_noflag(msg, NL80211_ATTR_STA_WME);
b0b6aa2c
EP		 16144 if (!nla_wmm)
16145 goto nla_put_failure;
16146
16147 if (nla_put_u8(msg, NL80211_STA_WME_UAPSD_QUEUES,
16148 uapsd_queues))
16149 goto nla_put_failure;
16150
16151 nla_nest_end(msg, nla_wmm);
16152 }
16153
3b7b72ee 16154 genlmsg_end(msg, hdr);
6039f6d2 16155
68eb5503 16156 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16157 NL80211_MCGRP_MLME, gfp);
6039f6d2
JM		 16158 return;
16159
16160 nla_put_failure:
6039f6d2
JM		 16161 nlmsg_free(msg);
16162}
16163
16164void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 16165 struct net_device *netdev, const u8 *buf,
16166 size_t len, gfp_t gfp)
6039f6d2
JM		 16167{
16168 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 16169 NL80211_CMD_AUTHENTICATE, gfp, -1, NULL, 0,
16170 false);
6039f6d2
JM		 16171}
16172
16173void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
16174 struct net_device *netdev, const u8 *buf,
4d9ec73d
JM		 16175 size_t len, gfp_t gfp, int uapsd_queues,
16176 const u8 *req_ies, size_t req_ies_len)
6039f6d2 16177{
e6d6e342 16178 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d 16179 NL80211_CMD_ASSOCIATE, gfp, uapsd_queues,
3bb02143 16180 req_ies, req_ies_len, false);
6039f6d2
JM		 16181}
16182
53b46b84 16183void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342 16184 struct net_device *netdev, const u8 *buf,
3bb02143 16185 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 16186{
16187 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 16188 NL80211_CMD_DEAUTHENTICATE, gfp, -1, NULL, 0,
16189 reconnect);
6039f6d2
JM		 16190}
16191
53b46b84
JM		 16192void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
16193 struct net_device *netdev, const u8 *buf,
3bb02143 16194 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 16195{
16196 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 16197 NL80211_CMD_DISASSOCIATE, gfp, -1, NULL, 0,
16198 reconnect);
6039f6d2
JM		 16199}
16200
6ff57cf8
JB		 16201void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev, const u8 *buf,
16202 size_t len)
cf4e594e 16203{
947add36
JB		 16204 struct wireless_dev *wdev = dev->ieee80211_ptr;
16205 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16206 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
6ff57cf8
JB		 16207 const struct ieee80211_mgmt *mgmt = (void *)buf;
16208 u32 cmd;
947add36 16209
6ff57cf8
JB		 16210 if (WARN_ON(len < 2))
16211 return;
cf4e594e 16212
4d797fce 16213 if (ieee80211_is_deauth(mgmt->frame_control)) {
6ff57cf8 16214 cmd = NL80211_CMD_UNPROT_DEAUTHENTICATE;
4d797fce 16215 } else if (ieee80211_is_disassoc(mgmt->frame_control)) {
6ff57cf8 16216 cmd = NL80211_CMD_UNPROT_DISASSOCIATE;
4d797fce
JM		 16217 } else if (ieee80211_is_beacon(mgmt->frame_control)) {
16218 if (wdev->unprot_beacon_reported &&
16219 elapsed_jiffies_msecs(wdev->unprot_beacon_reported) < 10000)
16220 return;
16221 cmd = NL80211_CMD_UNPROT_BEACON;
16222 wdev->unprot_beacon_reported = jiffies;
16223 } else {
16224 return;
16225 }
947add36 16226
6ff57cf8 16227 trace_cfg80211_rx_unprot_mlme_mgmt(dev, buf, len);
4d9ec73d 16228 nl80211_send_mlme_event(rdev, dev, buf, len, cmd, GFP_ATOMIC, -1,
3bb02143 16229 NULL, 0, false);
cf4e594e 16230}
6ff57cf8 16231EXPORT_SYMBOL(cfg80211_rx_unprot_mlme_mgmt);
cf4e594e 16232
1b06bb40
LR		 16233static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
16234 struct net_device *netdev, int cmd,
e6d6e342 16235 const u8 *addr, gfp_t gfp)
1965c853
JM		 16236{
16237 struct sk_buff *msg;
16238 void *hdr;
16239
e6d6e342 16240 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 16241 if (!msg)
16242 return;
16243
16244 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
16245 if (!hdr) {
16246 nlmsg_free(msg);
16247 return;
16248 }
16249
9360ffd1
DM		 16250 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16251 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16252 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
16253 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
16254 goto nla_put_failure;
1965c853 16255
3b7b72ee 16256 genlmsg_end(msg, hdr);
1965c853 16257
68eb5503 16258 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16259 NL80211_MCGRP_MLME, gfp);
1965c853
JM		 16260 return;
16261
16262 nla_put_failure:
1965c853
JM		 16263 nlmsg_free(msg);
16264}
16265
16266void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 16267 struct net_device *netdev, const u8 *addr,
16268 gfp_t gfp)
1965c853
JM		 16269{
16270 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 16271 addr, gfp);
1965c853
JM		 16272}
16273
16274void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 16275 struct net_device *netdev, const u8 *addr,
16276 gfp_t gfp)
1965c853 16277{
e6d6e342
JB		 16278 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
16279 addr, gfp);
1965c853
JM		 16280}
16281
b23aa676 16282void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
5349a0f7
VK		 16283 struct net_device *netdev,
16284 struct cfg80211_connect_resp_params *cr,
3093ebbe 16285 gfp_t gfp)
b23aa676
SO		 16286{
16287 struct sk_buff *msg;
16288 void *hdr;
16289
a3caf744 16290 msg = nlmsg_new(100 + cr->req_ie_len + cr->resp_ie_len +
76804d28
AVS		 16291 cr->fils.kek_len + cr->fils.pmk_len +
16292 (cr->fils.pmkid ? WLAN_PMKID_LEN : 0), gfp);
b23aa676
SO		 16293 if (!msg)
16294 return;
16295
16296 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
16297 if (!hdr) {
16298 nlmsg_free(msg);
16299 return;
16300 }
16301
9360ffd1
DM		 16302 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16303 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
5349a0f7
VK		 16304 (cr->bssid &&
16305 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, cr->bssid)) ||
bf1ecd21 16306 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE,
5349a0f7
VK		 16307 cr->status < 0 ? WLAN_STATUS_UNSPECIFIED_FAILURE :
16308 cr->status) ||
16309 (cr->status < 0 &&
3093ebbe 16310 (nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
5349a0f7
VK		 16311 nla_put_u32(msg, NL80211_ATTR_TIMEOUT_REASON,
16312 cr->timeout_reason))) ||
16313 (cr->req_ie &&
16314 nla_put(msg, NL80211_ATTR_REQ_IE, cr->req_ie_len, cr->req_ie)) ||
16315 (cr->resp_ie &&
16316 nla_put(msg, NL80211_ATTR_RESP_IE, cr->resp_ie_len,
a3caf744 16317 cr->resp_ie)) ||
76804d28 16318 (cr->fils.update_erp_next_seq_num &&
a3caf744 16319 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
76804d28 16320 cr->fils.erp_next_seq_num)) ||
a3caf744 16321 (cr->status == WLAN_STATUS_SUCCESS &&
76804d28
AVS		 16322 ((cr->fils.kek &&
16323 nla_put(msg, NL80211_ATTR_FILS_KEK, cr->fils.kek_len,
16324 cr->fils.kek)) ||
16325 (cr->fils.pmk &&
16326 nla_put(msg, NL80211_ATTR_PMK, cr->fils.pmk_len, cr->fils.pmk)) ||
16327 (cr->fils.pmkid &&
16328 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, cr->fils.pmkid)))))
9360ffd1 16329 goto nla_put_failure;
b23aa676 16330
3b7b72ee 16331 genlmsg_end(msg, hdr);
b23aa676 16332
68eb5503 16333 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16334 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 16335 return;
16336
16337 nla_put_failure:
b23aa676 16338 nlmsg_free(msg);
b23aa676
SO		 16339}
16340
16341void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
29ce6ecb
AS		 16342 struct net_device *netdev,
16343 struct cfg80211_roam_info *info, gfp_t gfp)
b23aa676
SO		 16344{
16345 struct sk_buff *msg;
16346 void *hdr;
29ce6ecb 16347 const u8 *bssid = info->bss ? info->bss->bssid : info->bssid;
b23aa676 16348
e841b7b1
AVS		 16349 msg = nlmsg_new(100 + info->req_ie_len + info->resp_ie_len +
16350 info->fils.kek_len + info->fils.pmk_len +
16351 (info->fils.pmkid ? WLAN_PMKID_LEN : 0), gfp);
b23aa676
SO		 16352 if (!msg)
16353 return;
16354
16355 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
16356 if (!hdr) {
16357 nlmsg_free(msg);
16358 return;
16359 }
16360
9360ffd1
DM		 16361 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16362 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16363 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
29ce6ecb
AS		 16364 (info->req_ie &&
16365 nla_put(msg, NL80211_ATTR_REQ_IE, info->req_ie_len,
16366 info->req_ie)) ||
16367 (info->resp_ie &&
16368 nla_put(msg, NL80211_ATTR_RESP_IE, info->resp_ie_len,
e841b7b1
AVS		 16369 info->resp_ie)) ||
16370 (info->fils.update_erp_next_seq_num &&
16371 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
16372 info->fils.erp_next_seq_num)) ||
16373 (info->fils.kek &&
16374 nla_put(msg, NL80211_ATTR_FILS_KEK, info->fils.kek_len,
16375 info->fils.kek)) ||
16376 (info->fils.pmk &&
16377 nla_put(msg, NL80211_ATTR_PMK, info->fils.pmk_len, info->fils.pmk)) ||
16378 (info->fils.pmkid &&
16379 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, info->fils.pmkid)))
9360ffd1 16380 goto nla_put_failure;
b23aa676 16381
3b7b72ee 16382 genlmsg_end(msg, hdr);
b23aa676 16383
68eb5503 16384 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16385 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 16386 return;
16387
503c1fb9 16388 nla_put_failure:
503c1fb9
AS		 16389 nlmsg_free(msg);
16390}
16391
16392void nl80211_send_port_authorized(struct cfg80211_registered_device *rdev,
16393 struct net_device *netdev, const u8 *bssid)
16394{
16395 struct sk_buff *msg;
16396 void *hdr;
16397
16398 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
16399 if (!msg)
16400 return;
16401
16402 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PORT_AUTHORIZED);
16403 if (!hdr) {
16404 nlmsg_free(msg);
16405 return;
16406 }
16407
f4d75993
CHH		 16408 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16409 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16410 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
503c1fb9
AS		 16411 goto nla_put_failure;
16412
16413 genlmsg_end(msg, hdr);
16414
16415 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
16416 NL80211_MCGRP_MLME, GFP_KERNEL);
16417 return;
16418
b23aa676 16419 nla_put_failure:
b23aa676 16420 nlmsg_free(msg);
b23aa676
SO		 16421}
16422
16423void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
16424 struct net_device *netdev, u16 reason,
667503dd 16425 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 16426{
16427 struct sk_buff *msg;
16428 void *hdr;
16429
4ef8c1c9 16430 msg = nlmsg_new(100 + ie_len, GFP_KERNEL);
b23aa676
SO		 16431 if (!msg)
16432 return;
16433
16434 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
16435 if (!hdr) {
16436 nlmsg_free(msg);
16437 return;
16438 }
16439
9360ffd1
DM		 16440 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16441 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
86b6c465 16442 (reason &&
9360ffd1
DM		 16443 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
16444 (from_ap &&
16445 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
16446 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
16447 goto nla_put_failure;
b23aa676 16448
3b7b72ee 16449 genlmsg_end(msg, hdr);
b23aa676 16450
68eb5503 16451 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16452 NL80211_MCGRP_MLME, GFP_KERNEL);
b23aa676
SO		 16453 return;
16454
16455 nla_put_failure:
b23aa676 16456 nlmsg_free(msg);
b23aa676
SO		 16457}
16458
04a773ad
JB		 16459void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
16460 struct net_device *netdev, const u8 *bssid,
16461 gfp_t gfp)
16462{
16463 struct sk_buff *msg;
16464 void *hdr;
16465
fd2120ca 16466 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 16467 if (!msg)
16468 return;
16469
16470 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
16471 if (!hdr) {
16472 nlmsg_free(msg);
16473 return;
16474 }
16475
9360ffd1
DM		 16476 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16477 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16478 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
16479 goto nla_put_failure;
04a773ad 16480
3b7b72ee 16481 genlmsg_end(msg, hdr);
04a773ad 16482
68eb5503 16483 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16484 NL80211_MCGRP_MLME, gfp);
04a773ad
JB		 16485 return;
16486
16487 nla_put_failure:
04a773ad
JB		 16488 nlmsg_free(msg);
16489}
16490
947add36 16491void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
ecbc12ad
BC		 16492 const u8 *ie, u8 ie_len,
16493 int sig_dbm, gfp_t gfp)
c93b5e71 16494{
947add36 16495 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 16496 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
c93b5e71
JC		 16497 struct sk_buff *msg;
16498 void *hdr;
16499
947add36
JB		 16500 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_MESH_POINT))
16501 return;
16502
16503 trace_cfg80211_notify_new_peer_candidate(dev, addr);
16504
4ef8c1c9 16505 msg = nlmsg_new(100 + ie_len, gfp);
c93b5e71
JC		 16506 if (!msg)
16507 return;
16508
16509 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
16510 if (!hdr) {
16511 nlmsg_free(msg);
16512 return;
16513 }
16514
9360ffd1 16515 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36
JB		 16516 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16517 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
9360ffd1 16518 (ie_len && ie &&
ecbc12ad
BC		 16519 nla_put(msg, NL80211_ATTR_IE, ie_len, ie)) ||
16520 (sig_dbm &&
16521 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)))
9360ffd1 16522 goto nla_put_failure;
c93b5e71 16523
3b7b72ee 16524 genlmsg_end(msg, hdr);
c93b5e71 16525
68eb5503 16526 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16527 NL80211_MCGRP_MLME, gfp);
c93b5e71
JC		 16528 return;
16529
16530 nla_put_failure:
c93b5e71
JC		 16531 nlmsg_free(msg);
16532}
947add36 16533EXPORT_SYMBOL(cfg80211_notify_new_peer_candidate);
c93b5e71 16534
a3b8b056
JM		 16535void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
16536 struct net_device *netdev, const u8 *addr,
16537 enum nl80211_key_type key_type, int key_id,
e6d6e342 16538 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 16539{
16540 struct sk_buff *msg;
16541 void *hdr;
16542
e6d6e342 16543 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 16544 if (!msg)
16545 return;
16546
16547 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
16548 if (!hdr) {
16549 nlmsg_free(msg);
16550 return;
16551 }
16552
9360ffd1
DM		 16553 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16554 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16555 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
16556 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
16557 (key_id != -1 &&
16558 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
16559 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
16560 goto nla_put_failure;
a3b8b056 16561
3b7b72ee 16562 genlmsg_end(msg, hdr);
a3b8b056 16563
68eb5503 16564 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16565 NL80211_MCGRP_MLME, gfp);
a3b8b056
JM		 16566 return;
16567
16568 nla_put_failure:
a3b8b056
JM		 16569 nlmsg_free(msg);
16570}
16571
6bad8766
LR		 16572void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
16573 struct ieee80211_channel *channel_before,
16574 struct ieee80211_channel *channel_after)
16575{
16576 struct sk_buff *msg;
16577 void *hdr;
16578 struct nlattr *nl_freq;
16579
fd2120ca 16580 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 16581 if (!msg)
16582 return;
16583
16584 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
16585 if (!hdr) {
16586 nlmsg_free(msg);
16587 return;
16588 }
16589
16590 /*
16591 * Since we are applying the beacon hint to a wiphy we know its
16592 * wiphy_idx is valid
16593 */
9360ffd1
DM		 16594 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
16595 goto nla_put_failure;
6bad8766
LR		 16596
16597 /* Before */
ae0be8de 16598 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_BEFORE);
6bad8766
LR		 16599 if (!nl_freq)
16600 goto nla_put_failure;
50f32718
HD		 16601
16602 if (nl80211_msg_put_channel(msg, wiphy, channel_before, false))
6bad8766
LR		 16603 goto nla_put_failure;
16604 nla_nest_end(msg, nl_freq);
16605
16606 /* After */
ae0be8de 16607 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_AFTER);
6bad8766
LR		 16608 if (!nl_freq)
16609 goto nla_put_failure;
50f32718
HD		 16610
16611 if (nl80211_msg_put_channel(msg, wiphy, channel_after, false))
6bad8766
LR		 16612 goto nla_put_failure;
16613 nla_nest_end(msg, nl_freq);
16614
3b7b72ee 16615 genlmsg_end(msg, hdr);
6bad8766 16616
463d0183 16617 rcu_read_lock();
68eb5503 16618 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 16619 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
463d0183 16620 rcu_read_unlock();
6bad8766
LR		 16621
16622 return;
16623
16624nla_put_failure:
6bad8766
LR		 16625 nlmsg_free(msg);
16626}
16627
9588bbd5
JM		 16628static void nl80211_send_remain_on_chan_event(
16629 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 16630 struct wireless_dev *wdev, u64 cookie,
9588bbd5 16631 struct ieee80211_channel *chan,
9588bbd5
JM		 16632 unsigned int duration, gfp_t gfp)
16633{
16634 struct sk_buff *msg;
16635 void *hdr;
16636
16637 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16638 if (!msg)
16639 return;
16640
16641 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
16642 if (!hdr) {
16643 nlmsg_free(msg);
16644 return;
16645 }
16646
9360ffd1 16647 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16648 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16649 wdev->netdev->ifindex)) ||
2dad624e
ND		 16650 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16651 NL80211_ATTR_PAD) ||
9360ffd1 16652 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
42d97a59
JB		 16653 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
16654 NL80211_CHAN_NO_HT) ||
2dad624e
ND		 16655 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16656 NL80211_ATTR_PAD))
9360ffd1 16657 goto nla_put_failure;
9588bbd5 16658
9360ffd1
DM		 16659 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
16660 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
16661 goto nla_put_failure;
9588bbd5 16662
3b7b72ee 16663 genlmsg_end(msg, hdr);
9588bbd5 16664
68eb5503 16665 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16666 NL80211_MCGRP_MLME, gfp);
9588bbd5
JM		 16667 return;
16668
16669 nla_put_failure:
9588bbd5
JM		 16670 nlmsg_free(msg);
16671}
16672
947add36
JB		 16673void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
16674 struct ieee80211_channel *chan,
16675 unsigned int duration, gfp_t gfp)
9588bbd5 16676{
947add36 16677 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16678 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16679
16680 trace_cfg80211_ready_on_channel(wdev, cookie, chan, duration);
9588bbd5 16681 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 16682 rdev, wdev, cookie, chan,
42d97a59 16683 duration, gfp);
9588bbd5 16684}
947add36 16685EXPORT_SYMBOL(cfg80211_ready_on_channel);
9588bbd5 16686
947add36
JB		 16687void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
16688 struct ieee80211_channel *chan,
16689 gfp_t gfp)
9588bbd5 16690{
947add36 16691 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16692 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16693
16694 trace_cfg80211_ready_on_channel_expired(wdev, cookie, chan);
9588bbd5 16695 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
42d97a59 16696 rdev, wdev, cookie, chan, 0, gfp);
9588bbd5 16697}
947add36 16698EXPORT_SYMBOL(cfg80211_remain_on_channel_expired);
9588bbd5 16699
1c38c7f2
JP		 16700void cfg80211_tx_mgmt_expired(struct wireless_dev *wdev, u64 cookie,
16701 struct ieee80211_channel *chan,
16702 gfp_t gfp)
16703{
16704 struct wiphy *wiphy = wdev->wiphy;
16705 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
16706
16707 trace_cfg80211_tx_mgmt_expired(wdev, cookie, chan);
16708 nl80211_send_remain_on_chan_event(NL80211_CMD_FRAME_WAIT_CANCEL,
16709 rdev, wdev, cookie, chan, 0, gfp);
16710}
16711EXPORT_SYMBOL(cfg80211_tx_mgmt_expired);
16712
947add36
JB		 16713void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
16714 struct station_info *sinfo, gfp_t gfp)
98b62183 16715{
947add36 16716 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16717 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
98b62183
JB		 16718 struct sk_buff *msg;
16719
947add36
JB		 16720 trace_cfg80211_new_sta(dev, mac_addr, sinfo);
16721
58050fce 16722 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 16723 if (!msg)
16724 return;
16725
cf5ead82 16726 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION, 0, 0, 0,
66266b3a 16727 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 16728 nlmsg_free(msg);
16729 return;
16730 }
16731
68eb5503 16732 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16733 NL80211_MCGRP_MLME, gfp);
98b62183 16734}
947add36 16735EXPORT_SYMBOL(cfg80211_new_sta);
98b62183 16736
cf5ead82
JB		 16737void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
16738 struct station_info *sinfo, gfp_t gfp)
ec15e68b 16739{
947add36 16740 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16741 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ec15e68b 16742 struct sk_buff *msg;
73887fd9 16743 struct station_info empty_sinfo = {};
cf5ead82 16744
73887fd9
JB		 16745 if (!sinfo)
16746 sinfo = &empty_sinfo;
ec15e68b 16747
947add36
JB		 16748 trace_cfg80211_del_sta(dev, mac_addr);
16749
58050fce 16750 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7ea3e110
JB		 16751 if (!msg) {
16752 cfg80211_sinfo_release_content(sinfo);
73887fd9 16753 return;
7ea3e110 16754 }
ec15e68b 16755
cf5ead82 16756 if (nl80211_send_station(msg, NL80211_CMD_DEL_STATION, 0, 0, 0,
57007121 16757 rdev, dev, mac_addr, sinfo) < 0) {
ec15e68b 16758 nlmsg_free(msg);
73887fd9 16759 return;
ec15e68b
JM		 16760 }
16761
68eb5503 16762 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16763 NL80211_MCGRP_MLME, gfp);
ec15e68b 16764}
cf5ead82 16765EXPORT_SYMBOL(cfg80211_del_sta_sinfo);
ec15e68b 16766
947add36
JB		 16767void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
16768 enum nl80211_connect_failed_reason reason,
16769 gfp_t gfp)
ed44a951 16770{
947add36 16771 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16772 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ed44a951
PP		 16773 struct sk_buff *msg;
16774 void *hdr;
16775
16776 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
16777 if (!msg)
16778 return;
16779
16780 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
16781 if (!hdr) {
16782 nlmsg_free(msg);
16783 return;
16784 }
16785
16786 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16787 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
16788 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
16789 goto nla_put_failure;
16790
16791 genlmsg_end(msg, hdr);
16792
68eb5503 16793 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16794 NL80211_MCGRP_MLME, gfp);
ed44a951
PP		 16795 return;
16796
16797 nla_put_failure:
ed44a951
PP		 16798 nlmsg_free(msg);
16799}
947add36 16800EXPORT_SYMBOL(cfg80211_conn_failed);
ed44a951 16801
b92ab5d8
JB		 16802static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
16803 const u8 *addr, gfp_t gfp)
28946da7
JB		 16804{
16805 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 16806 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
28946da7
JB		 16807 struct sk_buff *msg;
16808 void *hdr;
6aa7de05 16809 u32 nlportid = READ_ONCE(wdev->ap_unexpected_nlportid);
28946da7 16810
15e47304 16811 if (!nlportid)
28946da7
JB		 16812 return false;
16813
16814 msg = nlmsg_new(100, gfp);
16815 if (!msg)
16816 return true;
16817
b92ab5d8 16818 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 16819 if (!hdr) {
16820 nlmsg_free(msg);
16821 return true;
16822 }
16823
9360ffd1
DM		 16824 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16825 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16826 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
16827 goto nla_put_failure;
28946da7 16828
9c90a9f6 16829 genlmsg_end(msg, hdr);
15e47304 16830 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 16831 return true;
16832
16833 nla_put_failure:
28946da7
JB		 16834 nlmsg_free(msg);
16835 return true;
16836}
16837
947add36
JB		 16838bool cfg80211_rx_spurious_frame(struct net_device *dev,
16839 const u8 *addr, gfp_t gfp)
b92ab5d8 16840{
947add36
JB		 16841 struct wireless_dev *wdev = dev->ieee80211_ptr;
16842 bool ret;
16843
16844 trace_cfg80211_rx_spurious_frame(dev, addr);
16845
16846 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
16847 wdev->iftype != NL80211_IFTYPE_P2P_GO)) {
16848 trace_cfg80211_return_bool(false);
16849 return false;
16850 }
16851 ret = __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
16852 addr, gfp);
16853 trace_cfg80211_return_bool(ret);
16854 return ret;
b92ab5d8 16855}
947add36 16856EXPORT_SYMBOL(cfg80211_rx_spurious_frame);
b92ab5d8 16857
947add36
JB		 16858bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
16859 const u8 *addr, gfp_t gfp)
b92ab5d8 16860{
947add36
JB		 16861 struct wireless_dev *wdev = dev->ieee80211_ptr;
16862 bool ret;
16863
16864 trace_cfg80211_rx_unexpected_4addr_frame(dev, addr);
16865
16866 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
16867 wdev->iftype != NL80211_IFTYPE_P2P_GO &&
16868 wdev->iftype != NL80211_IFTYPE_AP_VLAN)) {
16869 trace_cfg80211_return_bool(false);
16870 return false;
16871 }
16872 ret = __nl80211_unexpected_frame(dev,
16873 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
16874 addr, gfp);
16875 trace_cfg80211_return_bool(ret);
16876 return ret;
b92ab5d8 16877}
947add36 16878EXPORT_SYMBOL(cfg80211_rx_unexpected_4addr_frame);
b92ab5d8 16879
2e161f78 16880int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 16881 struct wireless_dev *wdev, u32 nlportid,
804483e9 16882 int freq, int sig_dbm,
19504cf5 16883 const u8 *buf, size_t len, u32 flags, gfp_t gfp)
026331c4 16884{
71bbc994 16885 struct net_device *netdev = wdev->netdev;
026331c4
JM		 16886 struct sk_buff *msg;
16887 void *hdr;
026331c4 16888
4ef8c1c9 16889 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 16890 if (!msg)
16891 return -ENOMEM;
16892
2e161f78 16893 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 16894 if (!hdr) {
16895 nlmsg_free(msg);
16896 return -ENOMEM;
16897 }
16898
9360ffd1 16899 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16900 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16901 netdev->ifindex)) ||
2dad624e
ND		 16902 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16903 NL80211_ATTR_PAD) ||
e76fede8 16904 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, KHZ_TO_MHZ(freq)) ||
942ba88b 16905 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET, freq % 1000) ||
9360ffd1
DM		 16906 (sig_dbm &&
16907 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
19504cf5
VK		 16908 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
16909 (flags &&
16910 nla_put_u32(msg, NL80211_ATTR_RXMGMT_FLAGS, flags)))
9360ffd1 16911 goto nla_put_failure;
026331c4 16912
3b7b72ee 16913 genlmsg_end(msg, hdr);
026331c4 16914
15e47304 16915 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 16916
16917 nla_put_failure:
026331c4
JM		 16918 nlmsg_free(msg);
16919 return -ENOBUFS;
16920}
16921
dca9ca2d
MT		 16922static void nl80211_frame_tx_status(struct wireless_dev *wdev, u64 cookie,
16923 const u8 *buf, size_t len, bool ack,
16924 gfp_t gfp, enum nl80211_commands command)
026331c4 16925{
947add36 16926 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16927 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
71bbc994 16928 struct net_device *netdev = wdev->netdev;
026331c4
JM		 16929 struct sk_buff *msg;
16930 void *hdr;
16931
dca9ca2d
MT		 16932 if (command == NL80211_CMD_FRAME_TX_STATUS)
16933 trace_cfg80211_mgmt_tx_status(wdev, cookie, ack);
16934 else
16935 trace_cfg80211_control_port_tx_status(wdev, cookie, ack);
947add36 16936
4ef8c1c9 16937 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 16938 if (!msg)
16939 return;
16940
dca9ca2d 16941 hdr = nl80211hdr_put(msg, 0, 0, 0, command);
026331c4
JM		 16942 if (!hdr) {
16943 nlmsg_free(msg);
16944 return;
16945 }
16946
9360ffd1 16947 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16948 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16949 netdev->ifindex)) ||
2dad624e
ND		 16950 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16951 NL80211_ATTR_PAD) ||
9360ffd1 16952 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
2dad624e
ND		 16953 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16954 NL80211_ATTR_PAD) ||
9360ffd1
DM		 16955 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
16956 goto nla_put_failure;
026331c4 16957
3b7b72ee 16958 genlmsg_end(msg, hdr);
026331c4 16959
68eb5503 16960 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16961 NL80211_MCGRP_MLME, gfp);
026331c4
JM		 16962 return;
16963
dca9ca2d 16964nla_put_failure:
026331c4
JM		 16965 nlmsg_free(msg);
16966}
dca9ca2d
MT		 16967
16968void cfg80211_control_port_tx_status(struct wireless_dev *wdev, u64 cookie,
16969 const u8 *buf, size_t len, bool ack,
16970 gfp_t gfp)
16971{
16972 nl80211_frame_tx_status(wdev, cookie, buf, len, ack, gfp,
16973 NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS);
16974}
16975EXPORT_SYMBOL(cfg80211_control_port_tx_status);
16976
16977void cfg80211_mgmt_tx_status(struct wireless_dev *wdev, u64 cookie,
16978 const u8 *buf, size_t len, bool ack, gfp_t gfp)
16979{
16980 nl80211_frame_tx_status(wdev, cookie, buf, len, ack, gfp,
16981 NL80211_CMD_FRAME_TX_STATUS);
16982}
947add36 16983EXPORT_SYMBOL(cfg80211_mgmt_tx_status);
026331c4 16984
6a671a50 16985static int __nl80211_rx_control_port(struct net_device *dev,
a948f713 16986 struct sk_buff *skb,
6a671a50
DK		 16987 bool unencrypted, gfp_t gfp)
16988{
16989 struct wireless_dev *wdev = dev->ieee80211_ptr;
16990 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
a948f713 16991 struct ethhdr *ehdr = eth_hdr(skb);
8d74a623 16992 const u8 *addr = ehdr->h_source;
a948f713 16993 u16 proto = be16_to_cpu(skb->protocol);
6a671a50
DK		 16994 struct sk_buff *msg;
16995 void *hdr;
a948f713
DK		 16996 struct nlattr *frame;
16997
6a671a50
DK		 16998 u32 nlportid = READ_ONCE(wdev->conn_owner_nlportid);
16999
17000 if (!nlportid)
17001 return -ENOENT;
17002
a948f713 17003 msg = nlmsg_new(100 + skb->len, gfp);
6a671a50
DK		 17004 if (!msg)
17005 return -ENOMEM;
17006
17007 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONTROL_PORT_FRAME);
17008 if (!hdr) {
17009 nlmsg_free(msg);
17010 return -ENOBUFS;
17011 }
17012
17013 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17014 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17015 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17016 NL80211_ATTR_PAD) ||
8d74a623 17017 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
6a671a50
DK		 17018 nla_put_u16(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE, proto) ||
17019 (unencrypted && nla_put_flag(msg,
17020 NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT)))
17021 goto nla_put_failure;
17022
a948f713
DK		 17023 frame = nla_reserve(msg, NL80211_ATTR_FRAME, skb->len);
17024 if (!frame)
17025 goto nla_put_failure;
17026
17027 skb_copy_bits(skb, 0, nla_data(frame), skb->len);
6a671a50
DK		 17028 genlmsg_end(msg, hdr);
17029
17030 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
17031
17032 nla_put_failure:
17033 nlmsg_free(msg);
17034 return -ENOBUFS;
17035}
17036
17037bool cfg80211_rx_control_port(struct net_device *dev,
a948f713 17038 struct sk_buff *skb, bool unencrypted)
6a671a50
DK		 17039{
17040 int ret;
17041
a948f713
DK		 17042 trace_cfg80211_rx_control_port(dev, skb, unencrypted);
17043 ret = __nl80211_rx_control_port(dev, skb, unencrypted, GFP_ATOMIC);
6a671a50
DK		 17044 trace_cfg80211_return_bool(ret == 0);
17045 return ret == 0;
17046}
17047EXPORT_SYMBOL(cfg80211_rx_control_port);
17048
5b97f49d
JB		 17049static struct sk_buff *cfg80211_prepare_cqm(struct net_device *dev,
17050 const char *mac, gfp_t gfp)
d6dc1a38 17051{
947add36 17052 struct wireless_dev *wdev = dev->ieee80211_ptr;
5b97f49d
JB		 17053 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
17054 struct sk_buff *msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17055 void **cb;
947add36 17056
d6dc1a38 17057 if (!msg)
5b97f49d 17058 return NULL;
d6dc1a38 17059
5b97f49d
JB		 17060 cb = (void **)msg->cb;
17061
17062 cb[0] = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
17063 if (!cb[0]) {
d6dc1a38 17064 nlmsg_free(msg);
5b97f49d 17065 return NULL;
d6dc1a38
JO		 17066 }
17067
9360ffd1 17068 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36 17069 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9360ffd1 17070 goto nla_put_failure;
d6dc1a38 17071
5b97f49d 17072 if (mac && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
d6dc1a38
JO		 17073 goto nla_put_failure;
17074
ae0be8de 17075 cb[1] = nla_nest_start_noflag(msg, NL80211_ATTR_CQM);
5b97f49d 17076 if (!cb[1])
9360ffd1 17077 goto nla_put_failure;
d6dc1a38 17078
5b97f49d 17079 cb[2] = rdev;
d6dc1a38 17080
5b97f49d
JB		 17081 return msg;
17082 nla_put_failure:
17083 nlmsg_free(msg);
17084 return NULL;
17085}
17086
17087static void cfg80211_send_cqm(struct sk_buff *msg, gfp_t gfp)
17088{
17089 void **cb = (void **)msg->cb;
17090 struct cfg80211_registered_device *rdev = cb[2];
17091
17092 nla_nest_end(msg, cb[1]);
17093 genlmsg_end(msg, cb[0]);
17094
17095 memset(msg->cb, 0, sizeof(msg->cb));
d6dc1a38 17096
68eb5503 17097 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17098 NL80211_MCGRP_MLME, gfp);
5b97f49d
JB		 17099}
17100
17101void cfg80211_cqm_rssi_notify(struct net_device *dev,
17102 enum nl80211_cqm_rssi_threshold_event rssi_event,
bee427b8 17103 s32 rssi_level, gfp_t gfp)
5b97f49d
JB		 17104{
17105 struct sk_buff *msg;
4a4b8169
AZ		 17106 struct wireless_dev *wdev = dev->ieee80211_ptr;
17107 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
5b97f49d 17108
bee427b8 17109 trace_cfg80211_cqm_rssi_notify(dev, rssi_event, rssi_level);
5b97f49d 17110
98f03342
JB		 17111 if (WARN_ON(rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW &&
17112 rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH))
17113 return;
17114
4a4b8169
AZ		 17115 if (wdev->cqm_config) {
17116 wdev->cqm_config->last_rssi_event_value = rssi_level;
17117
17118 cfg80211_cqm_rssi_update(rdev, dev);
17119
17120 if (rssi_level == 0)
17121 rssi_level = wdev->cqm_config->last_rssi_event_value;
17122 }
17123
5b97f49d
JB		 17124 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
17125 if (!msg)
17126 return;
17127
17128 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
17129 rssi_event))
17130 goto nla_put_failure;
17131
bee427b8
AZ		 17132 if (rssi_level && nla_put_s32(msg, NL80211_ATTR_CQM_RSSI_LEVEL,
17133 rssi_level))
17134 goto nla_put_failure;
17135
5b97f49d
JB		 17136 cfg80211_send_cqm(msg, gfp);
17137
d6dc1a38
JO		 17138 return;
17139
17140 nla_put_failure:
d6dc1a38
JO		 17141 nlmsg_free(msg);
17142}
947add36 17143EXPORT_SYMBOL(cfg80211_cqm_rssi_notify);
d6dc1a38 17144
5b97f49d
JB		 17145void cfg80211_cqm_txe_notify(struct net_device *dev,
17146 const u8 *peer, u32 num_packets,
17147 u32 rate, u32 intvl, gfp_t gfp)
17148{
17149 struct sk_buff *msg;
17150
17151 msg = cfg80211_prepare_cqm(dev, peer, gfp);
17152 if (!msg)
17153 return;
17154
17155 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
17156 goto nla_put_failure;
17157
17158 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
17159 goto nla_put_failure;
17160
17161 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
17162 goto nla_put_failure;
17163
17164 cfg80211_send_cqm(msg, gfp);
17165 return;
17166
17167 nla_put_failure:
17168 nlmsg_free(msg);
17169}
17170EXPORT_SYMBOL(cfg80211_cqm_txe_notify);
17171
17172void cfg80211_cqm_pktloss_notify(struct net_device *dev,
17173 const u8 *peer, u32 num_packets, gfp_t gfp)
17174{
17175 struct sk_buff *msg;
17176
17177 trace_cfg80211_cqm_pktloss_notify(dev, peer, num_packets);
17178
17179 msg = cfg80211_prepare_cqm(dev, peer, gfp);
17180 if (!msg)
17181 return;
17182
17183 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
17184 goto nla_put_failure;
17185
17186 cfg80211_send_cqm(msg, gfp);
17187 return;
17188
17189 nla_put_failure:
17190 nlmsg_free(msg);
17191}
17192EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify);
17193
98f03342
JB		 17194void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp)
17195{
17196 struct sk_buff *msg;
17197
17198 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
17199 if (!msg)
17200 return;
17201
17202 if (nla_put_flag(msg, NL80211_ATTR_CQM_BEACON_LOSS_EVENT))
17203 goto nla_put_failure;
17204
17205 cfg80211_send_cqm(msg, gfp);
17206 return;
17207
17208 nla_put_failure:
17209 nlmsg_free(msg);
17210}
17211EXPORT_SYMBOL(cfg80211_cqm_beacon_loss_notify);
17212
947add36
JB		 17213static void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
17214 struct net_device *netdev, const u8 *bssid,
17215 const u8 *replay_ctr, gfp_t gfp)
e5497d76
JB		 17216{
17217 struct sk_buff *msg;
17218 struct nlattr *rekey_attr;
17219 void *hdr;
17220
58050fce 17221 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 17222 if (!msg)
17223 return;
17224
17225 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
17226 if (!hdr) {
17227 nlmsg_free(msg);
17228 return;
17229 }
17230
9360ffd1
DM		 17231 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17232 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17233 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
17234 goto nla_put_failure;
e5497d76 17235
ae0be8de 17236 rekey_attr = nla_nest_start_noflag(msg, NL80211_ATTR_REKEY_DATA);
e5497d76
JB		 17237 if (!rekey_attr)
17238 goto nla_put_failure;
17239
9360ffd1
DM		 17240 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
17241 NL80211_REPLAY_CTR_LEN, replay_ctr))
17242 goto nla_put_failure;
e5497d76
JB		 17243
17244 nla_nest_end(msg, rekey_attr);
17245
3b7b72ee 17246 genlmsg_end(msg, hdr);
e5497d76 17247
68eb5503 17248 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17249 NL80211_MCGRP_MLME, gfp);
e5497d76
JB		 17250 return;
17251
17252 nla_put_failure:
e5497d76
JB		 17253 nlmsg_free(msg);
17254}
17255
947add36
JB		 17256void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
17257 const u8 *replay_ctr, gfp_t gfp)
17258{
17259 struct wireless_dev *wdev = dev->ieee80211_ptr;
17260 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17261 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 17262
17263 trace_cfg80211_gtk_rekey_notify(dev, bssid);
17264 nl80211_gtk_rekey_notify(rdev, dev, bssid, replay_ctr, gfp);
17265}
17266EXPORT_SYMBOL(cfg80211_gtk_rekey_notify);
17267
17268static void
17269nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
17270 struct net_device *netdev, int index,
17271 const u8 *bssid, bool preauth, gfp_t gfp)
c9df56b4
JM		 17272{
17273 struct sk_buff *msg;
17274 struct nlattr *attr;
17275 void *hdr;
17276
58050fce 17277 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 17278 if (!msg)
17279 return;
17280
17281 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
17282 if (!hdr) {
17283 nlmsg_free(msg);
17284 return;
17285 }
17286
9360ffd1
DM		 17287 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17288 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
17289 goto nla_put_failure;
c9df56b4 17290
ae0be8de 17291 attr = nla_nest_start_noflag(msg, NL80211_ATTR_PMKSA_CANDIDATE);
c9df56b4
JM		 17292 if (!attr)
17293 goto nla_put_failure;
17294
9360ffd1
DM		 17295 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
17296 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
17297 (preauth &&
17298 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
17299 goto nla_put_failure;
c9df56b4
JM		 17300
17301 nla_nest_end(msg, attr);
17302
3b7b72ee 17303 genlmsg_end(msg, hdr);
c9df56b4 17304
68eb5503 17305 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17306 NL80211_MCGRP_MLME, gfp);
c9df56b4
JM		 17307 return;
17308
17309 nla_put_failure:
c9df56b4
JM		 17310 nlmsg_free(msg);
17311}
17312
947add36
JB		 17313void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
17314 const u8 *bssid, bool preauth, gfp_t gfp)
17315{
17316 struct wireless_dev *wdev = dev->ieee80211_ptr;
17317 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17318 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 17319
17320 trace_cfg80211_pmksa_candidate_notify(dev, index, bssid, preauth);
17321 nl80211_pmksa_candidate_notify(rdev, dev, index, bssid, preauth, gfp);
17322}
17323EXPORT_SYMBOL(cfg80211_pmksa_candidate_notify);
17324
17325static void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
17326 struct net_device *netdev,
17327 struct cfg80211_chan_def *chandef,
f8d7552e
LC		 17328 gfp_t gfp,
17329 enum nl80211_commands notif,
669b8413 17330 u8 count, bool quiet)
5314526b
TP		 17331{
17332 struct sk_buff *msg;
17333 void *hdr;
17334
58050fce 17335 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 17336 if (!msg)
17337 return;
17338
f8d7552e 17339 hdr = nl80211hdr_put(msg, 0, 0, 0, notif);
5314526b
TP		 17340 if (!hdr) {
17341 nlmsg_free(msg);
17342 return;
17343 }
17344
683b6d3b
JB		 17345 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
17346 goto nla_put_failure;
17347
17348 if (nl80211_send_chandef(msg, chandef))
7eab0f64 17349 goto nla_put_failure;
5314526b 17350
669b8413
JB		 17351 if (notif == NL80211_CMD_CH_SWITCH_STARTED_NOTIFY) {
17352 if (nla_put_u32(msg, NL80211_ATTR_CH_SWITCH_COUNT, count))
f8d7552e 17353 goto nla_put_failure;
669b8413
JB		 17354 if (quiet &&
17355 nla_put_flag(msg, NL80211_ATTR_CH_SWITCH_BLOCK_TX))
f8d7552e 17356 goto nla_put_failure;
669b8413 17357 }
f8d7552e 17358
5314526b
TP		 17359 genlmsg_end(msg, hdr);
17360
68eb5503 17361 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17362 NL80211_MCGRP_MLME, gfp);
5314526b
TP		 17363 return;
17364
17365 nla_put_failure:
5314526b
TP		 17366 nlmsg_free(msg);
17367}
17368
947add36
JB		 17369void cfg80211_ch_switch_notify(struct net_device *dev,
17370 struct cfg80211_chan_def *chandef)
84f10708 17371{
947add36
JB		 17372 struct wireless_dev *wdev = dev->ieee80211_ptr;
17373 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17374 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36 17375
e487eaeb 17376 ASSERT_WDEV_LOCK(wdev);
947add36 17377
e487eaeb 17378 trace_cfg80211_ch_switch_notify(dev, chandef);
947add36 17379
9e0e2961 17380 wdev->chandef = *chandef;
96f55f12 17381 wdev->preset_chandef = *chandef;
5dc8cdce
SM		 17382
17383 if (wdev->iftype == NL80211_IFTYPE_STATION &&
17384 !WARN_ON(!wdev->current_bss))
0afd425b 17385 cfg80211_update_assoc_bss_entry(wdev, chandef->chan);
5dc8cdce 17386
d34990bb
MV		 17387 cfg80211_sched_dfs_chan_update(rdev);
17388
f8d7552e 17389 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
669b8413 17390 NL80211_CMD_CH_SWITCH_NOTIFY, 0, false);
947add36
JB		 17391}
17392EXPORT_SYMBOL(cfg80211_ch_switch_notify);
17393
f8d7552e
LC		 17394void cfg80211_ch_switch_started_notify(struct net_device *dev,
17395 struct cfg80211_chan_def *chandef,
669b8413 17396 u8 count, bool quiet)
f8d7552e
LC		 17397{
17398 struct wireless_dev *wdev = dev->ieee80211_ptr;
17399 struct wiphy *wiphy = wdev->wiphy;
17400 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
17401
17402 trace_cfg80211_ch_switch_started_notify(dev, chandef);
17403
17404 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
669b8413
JB		 17405 NL80211_CMD_CH_SWITCH_STARTED_NOTIFY,
17406 count, quiet);
f8d7552e
LC		 17407}
17408EXPORT_SYMBOL(cfg80211_ch_switch_started_notify);
17409
04f39047
SW		 17410void
17411nl80211_radar_notify(struct cfg80211_registered_device *rdev,
d2859df5 17412 const struct cfg80211_chan_def *chandef,
04f39047
SW		 17413 enum nl80211_radar_event event,
17414 struct net_device *netdev, gfp_t gfp)
17415{
17416 struct sk_buff *msg;
17417 void *hdr;
17418
17419 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17420 if (!msg)
17421 return;
17422
17423 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
17424 if (!hdr) {
17425 nlmsg_free(msg);
17426 return;
17427 }
17428
17429 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
17430 goto nla_put_failure;
17431
17432 /* NOP and radar events don't need a netdev parameter */
17433 if (netdev) {
17434 struct wireless_dev *wdev = netdev->ieee80211_ptr;
17435
17436 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
2dad624e
ND		 17437 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17438 NL80211_ATTR_PAD))
04f39047
SW		 17439 goto nla_put_failure;
17440 }
17441
17442 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
17443 goto nla_put_failure;
17444
17445 if (nl80211_send_chandef(msg, chandef))
17446 goto nla_put_failure;
17447
9c90a9f6 17448 genlmsg_end(msg, hdr);
04f39047 17449
68eb5503 17450 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17451 NL80211_MCGRP_MLME, gfp);
04f39047
SW		 17452 return;
17453
17454 nla_put_failure:
04f39047
SW		 17455 nlmsg_free(msg);
17456}
17457
466b9936 17458void cfg80211_sta_opmode_change_notify(struct net_device *dev, const u8 *mac,
17459 struct sta_opmode_info *sta_opmode,
17460 gfp_t gfp)
17461{
17462 struct sk_buff *msg;
17463 struct wireless_dev *wdev = dev->ieee80211_ptr;
17464 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
17465 void *hdr;
17466
17467 if (WARN_ON(!mac))
17468 return;
17469
17470 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17471 if (!msg)
17472 return;
17473
17474 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STA_OPMODE_CHANGED);
17475 if (!hdr) {
17476 nlmsg_free(msg);
17477 return;
17478 }
17479
17480 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
17481 goto nla_put_failure;
17482
17483 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
17484 goto nla_put_failure;
17485
17486 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
17487 goto nla_put_failure;
17488
17489 if ((sta_opmode->changed & STA_OPMODE_SMPS_MODE_CHANGED) &&
17490 nla_put_u8(msg, NL80211_ATTR_SMPS_MODE, sta_opmode->smps_mode))
17491 goto nla_put_failure;
17492
17493 if ((sta_opmode->changed & STA_OPMODE_MAX_BW_CHANGED) &&
0016d320 17494 nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, sta_opmode->bw))
466b9936 17495 goto nla_put_failure;
17496
17497 if ((sta_opmode->changed & STA_OPMODE_N_SS_CHANGED) &&
17498 nla_put_u8(msg, NL80211_ATTR_NSS, sta_opmode->rx_nss))
17499 goto nla_put_failure;
17500
17501 genlmsg_end(msg, hdr);
17502
17503 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17504 NL80211_MCGRP_MLME, gfp);
17505
17506 return;
17507
17508nla_put_failure:
17509 nlmsg_free(msg);
17510}
17511EXPORT_SYMBOL(cfg80211_sta_opmode_change_notify);
17512
7f6cf311 17513void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
c4b50cd3
VN		 17514 u64 cookie, bool acked, s32 ack_signal,
17515 bool is_valid_ack_signal, gfp_t gfp)
7f6cf311
JB		 17516{
17517 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 17518 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
7f6cf311
JB		 17519 struct sk_buff *msg;
17520 void *hdr;
7f6cf311 17521
4ee3e063
BL		 17522 trace_cfg80211_probe_status(dev, addr, cookie, acked);
17523
58050fce 17524 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 17525
7f6cf311
JB		 17526 if (!msg)
17527 return;
17528
17529 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
17530 if (!hdr) {
17531 nlmsg_free(msg);
17532 return;
17533 }
17534
9360ffd1
DM		 17535 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17536 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17537 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
2dad624e
ND		 17538 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
17539 NL80211_ATTR_PAD) ||
c4b50cd3
VN		 17540 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
17541 (is_valid_ack_signal && nla_put_s32(msg, NL80211_ATTR_ACK_SIGNAL,
17542 ack_signal)))
9360ffd1 17543 goto nla_put_failure;
7f6cf311 17544
9c90a9f6 17545 genlmsg_end(msg, hdr);
7f6cf311 17546
68eb5503 17547 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17548 NL80211_MCGRP_MLME, gfp);
7f6cf311
JB		 17549 return;
17550
17551 nla_put_failure:
7f6cf311
JB		 17552 nlmsg_free(msg);
17553}
17554EXPORT_SYMBOL(cfg80211_probe_status);
17555
e76fede8
TP		 17556void cfg80211_report_obss_beacon_khz(struct wiphy *wiphy, const u8 *frame,
17557 size_t len, int freq, int sig_dbm)
5e760230 17558{
f26cbf40 17559 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
5e760230
JB		 17560 struct sk_buff *msg;
17561 void *hdr;
37c73b5f 17562 struct cfg80211_beacon_registration *reg;
5e760230 17563
4ee3e063
BL		 17564 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
17565
37c73b5f
BG		 17566 spin_lock_bh(&rdev->beacon_registrations_lock);
17567 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
17568 msg = nlmsg_new(len + 100, GFP_ATOMIC);
17569 if (!msg) {
17570 spin_unlock_bh(&rdev->beacon_registrations_lock);
17571 return;
17572 }
5e760230 17573
37c73b5f
BG		 17574 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
17575 if (!hdr)
17576 goto nla_put_failure;
5e760230 17577
37c73b5f
BG		 17578 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17579 (freq &&
942ba88b
TP		 17580 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
17581 KHZ_TO_MHZ(freq)) ||
17582 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
17583 freq % 1000))) ||
37c73b5f
BG		 17584 (sig_dbm &&
17585 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
17586 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
17587 goto nla_put_failure;
5e760230 17588
37c73b5f 17589 genlmsg_end(msg, hdr);
5e760230 17590
37c73b5f
BG		 17591 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
17592 }
17593 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 17594 return;
17595
17596 nla_put_failure:
37c73b5f 17597 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 17598 nlmsg_free(msg);
17599}
e76fede8 17600EXPORT_SYMBOL(cfg80211_report_obss_beacon_khz);
5e760230 17601
cd8f7cb4 17602#ifdef CONFIG_PM
8cd4d456
LC		 17603static int cfg80211_net_detect_results(struct sk_buff *msg,
17604 struct cfg80211_wowlan_wakeup *wakeup)
17605{
17606 struct cfg80211_wowlan_nd_info *nd = wakeup->net_detect;
17607 struct nlattr *nl_results, *nl_match, *nl_freqs;
17608 int i, j;
17609
ae0be8de
MK		 17610 nl_results = nla_nest_start_noflag(msg,
17611 NL80211_WOWLAN_TRIG_NET_DETECT_RESULTS);
8cd4d456
LC		 17612 if (!nl_results)
17613 return -EMSGSIZE;
17614
17615 for (i = 0; i < nd->n_matches; i++) {
17616 struct cfg80211_wowlan_nd_match *match = nd->matches[i];
17617
ae0be8de 17618 nl_match = nla_nest_start_noflag(msg, i);
8cd4d456
LC		 17619 if (!nl_match)
17620 break;
17621
17622 /* The SSID attribute is optional in nl80211, but for
17623 * simplicity reasons it's always present in the
17624 * cfg80211 structure. If a driver can't pass the
17625 * SSID, that needs to be changed. A zero length SSID
17626 * is still a valid SSID (wildcard), so it cannot be
17627 * used for this purpose.
17628 */
17629 if (nla_put(msg, NL80211_ATTR_SSID, match->ssid.ssid_len,
17630 match->ssid.ssid)) {
17631 nla_nest_cancel(msg, nl_match);
17632 goto out;
17633 }
17634
17635 if (match->n_channels) {
ae0be8de
MK		 17636 nl_freqs = nla_nest_start_noflag(msg,
17637 NL80211_ATTR_SCAN_FREQUENCIES);
8cd4d456
LC		 17638 if (!nl_freqs) {
17639 nla_nest_cancel(msg, nl_match);
17640 goto out;
17641 }
17642
17643 for (j = 0; j < match->n_channels; j++) {
5528fae8 17644 if (nla_put_u32(msg, j, match->channels[j])) {
8cd4d456
LC		 17645 nla_nest_cancel(msg, nl_freqs);
17646 nla_nest_cancel(msg, nl_match);
17647 goto out;
17648 }
17649 }
17650
17651 nla_nest_end(msg, nl_freqs);
17652 }
17653
17654 nla_nest_end(msg, nl_match);
17655 }
17656
17657out:
17658 nla_nest_end(msg, nl_results);
17659 return 0;
17660}
17661
cd8f7cb4
JB		 17662void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
17663 struct cfg80211_wowlan_wakeup *wakeup,
17664 gfp_t gfp)
17665{
f26cbf40 17666 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
cd8f7cb4
JB		 17667 struct sk_buff *msg;
17668 void *hdr;
9c90a9f6 17669 int size = 200;
cd8f7cb4
JB		 17670
17671 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
17672
17673 if (wakeup)
17674 size += wakeup->packet_present_len;
17675
17676 msg = nlmsg_new(size, gfp);
17677 if (!msg)
17678 return;
17679
17680 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
17681 if (!hdr)
17682 goto free_msg;
17683
17684 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 17685 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17686 NL80211_ATTR_PAD))
cd8f7cb4
JB		 17687 goto free_msg;
17688
17689 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
17690 wdev->netdev->ifindex))
17691 goto free_msg;
17692
17693 if (wakeup) {
17694 struct nlattr *reasons;
17695
ae0be8de
MK		 17696 reasons = nla_nest_start_noflag(msg,
17697 NL80211_ATTR_WOWLAN_TRIGGERS);
7fa322c8
JB		 17698 if (!reasons)
17699 goto free_msg;
cd8f7cb4
JB		 17700
17701 if (wakeup->disconnect &&
17702 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
17703 goto free_msg;
17704 if (wakeup->magic_pkt &&
17705 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
17706 goto free_msg;
17707 if (wakeup->gtk_rekey_failure &&
17708 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
17709 goto free_msg;
17710 if (wakeup->eap_identity_req &&
17711 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
17712 goto free_msg;
17713 if (wakeup->four_way_handshake &&
17714 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
17715 goto free_msg;
17716 if (wakeup->rfkill_release &&
17717 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
17718 goto free_msg;
17719
17720 if (wakeup->pattern_idx >= 0 &&
17721 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
17722 wakeup->pattern_idx))
17723 goto free_msg;
17724
ae917c9f
JB		 17725 if (wakeup->tcp_match &&
17726 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH))
17727 goto free_msg;
2a0e047e 17728
ae917c9f
JB		 17729 if (wakeup->tcp_connlost &&
17730 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST))
17731 goto free_msg;
2a0e047e 17732
ae917c9f
JB		 17733 if (wakeup->tcp_nomoretokens &&
17734 nla_put_flag(msg,
17735 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS))
17736 goto free_msg;
2a0e047e 17737
cd8f7cb4
JB		 17738 if (wakeup->packet) {
17739 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
17740 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
17741
17742 if (!wakeup->packet_80211) {
17743 pkt_attr =
17744 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
17745 len_attr =
17746 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
17747 }
17748
17749 if (wakeup->packet_len &&
17750 nla_put_u32(msg, len_attr, wakeup->packet_len))
17751 goto free_msg;
17752
17753 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
17754 wakeup->packet))
17755 goto free_msg;
17756 }
17757
8cd4d456
LC		 17758 if (wakeup->net_detect &&
17759 cfg80211_net_detect_results(msg, wakeup))
17760 goto free_msg;
17761
cd8f7cb4
JB		 17762 nla_nest_end(msg, reasons);
17763 }
17764
9c90a9f6 17765 genlmsg_end(msg, hdr);
cd8f7cb4 17766
68eb5503 17767 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17768 NL80211_MCGRP_MLME, gfp);
cd8f7cb4
JB		 17769 return;
17770
17771 free_msg:
17772 nlmsg_free(msg);
17773}
17774EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
17775#endif
17776
3475b094
JM		 17777void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
17778 enum nl80211_tdls_operation oper,
17779 u16 reason_code, gfp_t gfp)
17780{
17781 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 17782 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
3475b094
JM		 17783 struct sk_buff *msg;
17784 void *hdr;
3475b094
JM		 17785
17786 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
17787 reason_code);
17788
17789 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17790 if (!msg)
17791 return;
17792
17793 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
17794 if (!hdr) {
17795 nlmsg_free(msg);
17796 return;
17797 }
17798
17799 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17800 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17801 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
17802 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
17803 (reason_code > 0 &&
17804 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
17805 goto nla_put_failure;
17806
9c90a9f6 17807 genlmsg_end(msg, hdr);
3475b094 17808
68eb5503 17809 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17810 NL80211_MCGRP_MLME, gfp);
3475b094
JM		 17811 return;
17812
17813 nla_put_failure:
3475b094
JM		 17814 nlmsg_free(msg);
17815}
17816EXPORT_SYMBOL(cfg80211_tdls_oper_request);
17817
026331c4
JM		 17818static int nl80211_netlink_notify(struct notifier_block * nb,
17819 unsigned long state,
17820 void *_notify)
17821{
17822 struct netlink_notify *notify = _notify;
17823 struct cfg80211_registered_device *rdev;
17824 struct wireless_dev *wdev;
37c73b5f 17825 struct cfg80211_beacon_registration *reg, *tmp;
026331c4 17826
8f815cdd 17827 if (state != NETLINK_URELEASE || notify->protocol != NETLINK_GENERIC)
026331c4
JM		 17828 return NOTIFY_DONE;
17829
17830 rcu_read_lock();
17831
5e760230 17832 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ca986ad9 17833 struct cfg80211_sched_scan_request *sched_scan_req;
753aacfd 17834
ca986ad9
AVS		 17835 list_for_each_entry_rcu(sched_scan_req,
17836 &rdev->sched_scan_req_list,
17837 list) {
17838 if (sched_scan_req->owner_nlportid == notify->portid) {
17839 sched_scan_req->nl_owner_dead = true;
753aacfd 17840 schedule_work(&rdev->sched_scan_stop_wk);
ca986ad9 17841 }
753aacfd 17842 }
78f22b6a 17843
53873f13 17844 list_for_each_entry_rcu(wdev, &rdev->wiphy.wdev_list, list) {
15e47304 17845 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f 17846
ab81007a
JB		 17847 if (wdev->owner_nlportid == notify->portid) {
17848 wdev->nl_owner_dead = true;
17849 schedule_work(&rdev->destroy_work);
17850 } else if (wdev->conn_owner_nlportid == notify->portid) {
bd2522b1 17851 schedule_work(&wdev->disconnect_wk);
ab81007a 17852 }
9bb7e0f2
JB		 17853
17854 cfg80211_release_pmsr(wdev, notify->portid);
78f22b6a
JB		 17855 }
17856
37c73b5f
BG		 17857 spin_lock_bh(&rdev->beacon_registrations_lock);
17858 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
17859 list) {
17860 if (reg->nlportid == notify->portid) {
17861 list_del(&reg->list);
17862 kfree(reg);
17863 break;
17864 }
17865 }
17866 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 17867 }
026331c4
JM		 17868
17869 rcu_read_unlock();
17870
05050753
I		 17871 /*
17872 * It is possible that the user space process that is controlling the
17873 * indoor setting disappeared, so notify the regulatory core.
17874 */
17875 regulatory_netlink_notify(notify->portid);
6784c7db 17876 return NOTIFY_OK;
026331c4
JM		 17877}
17878
17879static struct notifier_block nl80211_netlink_notifier = {
17880 .notifier_call = nl80211_netlink_notify,
17881};
17882
355199e0
JM		 17883void cfg80211_ft_event(struct net_device *netdev,
17884 struct cfg80211_ft_event_params *ft_event)
17885{
17886 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
f26cbf40 17887 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
355199e0
JM		 17888 struct sk_buff *msg;
17889 void *hdr;
355199e0
JM		 17890
17891 trace_cfg80211_ft_event(wiphy, netdev, ft_event);
17892
17893 if (!ft_event->target_ap)
17894 return;
17895
1039d081
DL		 17896 msg = nlmsg_new(100 + ft_event->ies_len + ft_event->ric_ies_len,
17897 GFP_KERNEL);
355199e0
JM		 17898 if (!msg)
17899 return;
17900
17901 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FT_EVENT);
ae917c9f
JB		 17902 if (!hdr)
17903 goto out;
355199e0 17904
ae917c9f
JB		 17905 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17906 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17907 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ft_event->target_ap))
17908 goto out;
355199e0 17909
ae917c9f
JB		 17910 if (ft_event->ies &&
17911 nla_put(msg, NL80211_ATTR_IE, ft_event->ies_len, ft_event->ies))
17912 goto out;
17913 if (ft_event->ric_ies &&
17914 nla_put(msg, NL80211_ATTR_IE_RIC, ft_event->ric_ies_len,
17915 ft_event->ric_ies))
17916 goto out;
355199e0 17917
9c90a9f6 17918 genlmsg_end(msg, hdr);
355199e0 17919
68eb5503 17920 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17921 NL80211_MCGRP_MLME, GFP_KERNEL);
ae917c9f
JB		 17922 return;
17923 out:
17924 nlmsg_free(msg);
355199e0
JM		 17925}
17926EXPORT_SYMBOL(cfg80211_ft_event);
17927
5de17984
AS		 17928void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp)
17929{
17930 struct cfg80211_registered_device *rdev;
17931 struct sk_buff *msg;
17932 void *hdr;
17933 u32 nlportid;
17934
f26cbf40 17935 rdev = wiphy_to_rdev(wdev->wiphy);
5de17984
AS		 17936 if (!rdev->crit_proto_nlportid)
17937 return;
17938
17939 nlportid = rdev->crit_proto_nlportid;
17940 rdev->crit_proto_nlportid = 0;
17941
17942 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17943 if (!msg)
17944 return;
17945
17946 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CRIT_PROTOCOL_STOP);
17947 if (!hdr)
17948 goto nla_put_failure;
17949
17950 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 17951 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17952 NL80211_ATTR_PAD))
5de17984
AS		 17953 goto nla_put_failure;
17954
17955 genlmsg_end(msg, hdr);
17956
17957 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
17958 return;
17959
17960 nla_put_failure:
5de17984 17961 nlmsg_free(msg);
5de17984
AS		 17962}
17963EXPORT_SYMBOL(cfg80211_crit_proto_stopped);
17964
348baf0e
JB		 17965void nl80211_send_ap_stopped(struct wireless_dev *wdev)
17966{
17967 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17968 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
348baf0e
JB		 17969 struct sk_buff *msg;
17970 void *hdr;
17971
17972 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17973 if (!msg)
17974 return;
17975
17976 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STOP_AP);
17977 if (!hdr)
17978 goto out;
17979
17980 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17981 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex) ||
2dad624e
ND		 17982 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17983 NL80211_ATTR_PAD))
348baf0e
JB		 17984 goto out;
17985
17986 genlmsg_end(msg, hdr);
17987
17988 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(wiphy), msg, 0,
17989 NL80211_MCGRP_MLME, GFP_KERNEL);
17990 return;
17991 out:
17992 nlmsg_free(msg);
17993}
17994
40cbfa90
SD		 17995int cfg80211_external_auth_request(struct net_device *dev,
17996 struct cfg80211_external_auth_params *params,
17997 gfp_t gfp)
17998{
17999 struct wireless_dev *wdev = dev->ieee80211_ptr;
18000 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
18001 struct sk_buff *msg;
18002 void *hdr;
18003
18004 if (!wdev->conn_owner_nlportid)
18005 return -EINVAL;
18006
18007 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18008 if (!msg)
18009 return -ENOMEM;
18010
18011 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_EXTERNAL_AUTH);
18012 if (!hdr)
18013 goto nla_put_failure;
18014
18015 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18016 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18017 nla_put_u32(msg, NL80211_ATTR_AKM_SUITES, params->key_mgmt_suite) ||
18018 nla_put_u32(msg, NL80211_ATTR_EXTERNAL_AUTH_ACTION,
18019 params->action) ||
18020 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, params->bssid) ||
18021 nla_put(msg, NL80211_ATTR_SSID, params->ssid.ssid_len,
18022 params->ssid.ssid))
18023 goto nla_put_failure;
18024
18025 genlmsg_end(msg, hdr);
18026 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
18027 wdev->conn_owner_nlportid);
18028 return 0;
18029
18030 nla_put_failure:
18031 nlmsg_free(msg);
18032 return -ENOBUFS;
18033}
18034EXPORT_SYMBOL(cfg80211_external_auth_request);
18035
cb74e977
SD		 18036void cfg80211_update_owe_info_event(struct net_device *netdev,
18037 struct cfg80211_update_owe_info *owe_info,
18038 gfp_t gfp)
18039{
18040 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
18041 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18042 struct sk_buff *msg;
18043 void *hdr;
18044
18045 trace_cfg80211_update_owe_info_event(wiphy, netdev, owe_info);
18046
18047 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18048 if (!msg)
18049 return;
18050
18051 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_UPDATE_OWE_INFO);
18052 if (!hdr)
18053 goto nla_put_failure;
18054
18055 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18056 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
18057 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, owe_info->peer))
18058 goto nla_put_failure;
18059
18060 if (!owe_info->ie_len ||
18061 nla_put(msg, NL80211_ATTR_IE, owe_info->ie_len, owe_info->ie))
18062 goto nla_put_failure;
18063
18064 genlmsg_end(msg, hdr);
18065
18066 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
18067 NL80211_MCGRP_MLME, gfp);
18068 return;
18069
18070nla_put_failure:
18071 genlmsg_cancel(msg, hdr);
18072 nlmsg_free(msg);
18073}
18074EXPORT_SYMBOL(cfg80211_update_owe_info_event);
18075
55682965
JB		 18076/* initialisation/exit functions */
18077
56989f6d 18078int __init nl80211_init(void)
55682965 18079{
0d63cbb5 18080 int err;
55682965 18081
489111e5 18082 err = genl_register_family(&nl80211_fam);
55682965
JB		 18083 if (err)
18084 return err;
18085
026331c4
JM		 18086 err = netlink_register_notifier(&nl80211_netlink_notifier);
18087 if (err)
18088 goto err_out;
18089
55682965
JB		 18090 return 0;
18091 err_out:
18092 genl_unregister_family(&nl80211_fam);
18093 return err;
18094}
18095
18096void nl80211_exit(void)
18097{
026331c4 18098 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 18099 genl_unregister_family(&nl80211_fam);
18100}
Linux 6.x block layer and io_uring tree(s)