projects / linux-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
genetlink: move the private fields in struct genl_family
[linux-block.git] / net / wireless / nl80211.c
CommitLineData
457c8996 1// SPDX-License-Identifier: GPL-2.0-only
55682965
JB		 2/*
3 * This is the new netlink-based wireless configuration interface.
4 *
026331c4 5 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
2740f0cf 6 * Copyright 2013-2014 Intel Mobile Communications GmbH
66cd794e 7 * Copyright 2015-2017 Intel Deutschland GmbH
ea05fd35 8 * Copyright (C) 2018-2022 Intel Corporation
55682965
JB		 9 */
10
11#include <linux/if.h>
12#include <linux/module.h>
13#include <linux/err.h>
5a0e3ad6 14#include <linux/slab.h>
55682965
JB		 15#include <linux/list.h>
16#include <linux/if_ether.h>
17#include <linux/ieee80211.h>
18#include <linux/nl80211.h>
19#include <linux/rtnetlink.h>
20#include <linux/netlink.h>
259d8c1e 21#include <linux/nospec.h>
2a519311 22#include <linux/etherdevice.h>
e3ae39ed 23#include <linux/if_vlan.h>
463d0183 24#include <net/net_namespace.h>
55682965
JB		 25#include <net/genetlink.h>
26#include <net/cfg80211.h>
463d0183 27#include <net/sock.h>
2a0e047e 28#include <net/inet_connection_sock.h>
55682965
JB		 29#include "core.h"
30#include "nl80211.h"
b2e1b302 31#include "reg.h"
e35e4d28 32#include "rdev-ops.h"
55682965 33
5fb628e9
JM		 34static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
35 struct genl_info *info,
36 struct cfg80211_crypto_settings *settings,
37 int cipher_limit);
38
55682965 39/* the netlink family */
489111e5 40static struct genl_family nl80211_fam;
55682965 41
2a94fe48
JB		 42/* multicast groups */
43enum nl80211_multicast_groups {
44 NL80211_MCGRP_CONFIG,
45 NL80211_MCGRP_SCAN,
46 NL80211_MCGRP_REGULATORY,
47 NL80211_MCGRP_MLME,
567ffc35 48 NL80211_MCGRP_VENDOR,
50bcd31d 49 NL80211_MCGRP_NAN,
2a94fe48
JB		 50 NL80211_MCGRP_TESTMODE /* keep last - ifdef! */
51};
52
53static const struct genl_multicast_group nl80211_mcgrps[] = {
71b836ec
JB		 54 [NL80211_MCGRP_CONFIG] = { .name = NL80211_MULTICAST_GROUP_CONFIG },
55 [NL80211_MCGRP_SCAN] = { .name = NL80211_MULTICAST_GROUP_SCAN },
56 [NL80211_MCGRP_REGULATORY] = { .name = NL80211_MULTICAST_GROUP_REG },
57 [NL80211_MCGRP_MLME] = { .name = NL80211_MULTICAST_GROUP_MLME },
58 [NL80211_MCGRP_VENDOR] = { .name = NL80211_MULTICAST_GROUP_VENDOR },
50bcd31d 59 [NL80211_MCGRP_NAN] = { .name = NL80211_MULTICAST_GROUP_NAN },
2a94fe48 60#ifdef CONFIG_NL80211_TESTMODE
71b836ec 61 [NL80211_MCGRP_TESTMODE] = { .name = NL80211_MULTICAST_GROUP_TESTMODE }
2a94fe48
JB		 62#endif
63};
64
89a54e48
JB		 65/* returns ERR_PTR values */
66static struct wireless_dev *
a05829a7
JB		 67__cfg80211_wdev_from_attrs(struct cfg80211_registered_device *rdev,
68 struct net *netns, struct nlattr **attrs)
55682965 69{
89a54e48
JB		 70 struct wireless_dev *result = NULL;
71 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
72 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
239729a2 73 u64 wdev_id = 0;
89a54e48
JB		 74 int wiphy_idx = -1;
75 int ifidx = -1;
55682965 76
89a54e48
JB		 77 if (!have_ifidx && !have_wdev_id)
78 return ERR_PTR(-EINVAL);
55682965 79
89a54e48
JB		 80 if (have_ifidx)
81 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
82 if (have_wdev_id) {
83 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
84 wiphy_idx = wdev_id >> 32;
55682965
JB		 85 }
86
a05829a7
JB		 87 if (rdev) {
88 struct wireless_dev *wdev;
89
90 lockdep_assert_held(&rdev->wiphy.mtx);
91
92 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
93 if (have_ifidx && wdev->netdev &&
94 wdev->netdev->ifindex == ifidx) {
95 result = wdev;
96 break;
97 }
98 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
99 result = wdev;
100 break;
101 }
102 }
103
104 return result ?: ERR_PTR(-ENODEV);
105 }
106
107 ASSERT_RTNL();
108
89a54e48
JB		 109 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
110 struct wireless_dev *wdev;
111
112 if (wiphy_net(&rdev->wiphy) != netns)
113 continue;
114
115 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
116 continue;
117
53873f13 118 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
89a54e48
JB		 119 if (have_ifidx && wdev->netdev &&
120 wdev->netdev->ifindex == ifidx) {
121 result = wdev;
122 break;
123 }
124 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
125 result = wdev;
126 break;
127 }
128 }
89a54e48
JB		 129
130 if (result)
131 break;
132 }
133
134 if (result)
135 return result;
136 return ERR_PTR(-ENODEV);
55682965
JB		 137}
138
a9455408 139static struct cfg80211_registered_device *
878d9ec7 140__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 141{
7fee4778
JB		 142 struct cfg80211_registered_device *rdev = NULL, *tmp;
143 struct net_device *netdev;
a9455408 144
5fe231e8 145 ASSERT_RTNL();
a9455408 146
878d9ec7 147 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 148 !attrs[NL80211_ATTR_IFINDEX] &&
149 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 150 return ERR_PTR(-EINVAL);
151
878d9ec7 152 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 153 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 154 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 155
89a54e48
JB		 156 if (attrs[NL80211_ATTR_WDEV]) {
157 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
158 struct wireless_dev *wdev;
159 bool found = false;
160
161 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
162 if (tmp) {
163 /* make sure wdev exists */
53873f13 164 list_for_each_entry(wdev, &tmp->wiphy.wdev_list, list) {
89a54e48
JB		 165 if (wdev->identifier != (u32)wdev_id)
166 continue;
167 found = true;
168 break;
169 }
89a54e48
JB		 170
171 if (!found)
172 tmp = NULL;
173
174 if (rdev && tmp != rdev)
175 return ERR_PTR(-EINVAL);
176 rdev = tmp;
177 }
178 }
179
878d9ec7
JB		 180 if (attrs[NL80211_ATTR_IFINDEX]) {
181 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
7a087e74 182
7f2b8562 183 netdev = __dev_get_by_index(netns, ifindex);
7fee4778
JB		 184 if (netdev) {
185 if (netdev->ieee80211_ptr)
f26cbf40
ZG		 186 tmp = wiphy_to_rdev(
187 netdev->ieee80211_ptr->wiphy);
7fee4778
JB		 188 else
189 tmp = NULL;
190
7fee4778
JB		 191 /* not wireless device -- return error */
192 if (!tmp)
193 return ERR_PTR(-EINVAL);
194
195 /* mismatch -- return error */
196 if (rdev && tmp != rdev)
197 return ERR_PTR(-EINVAL);
198
199 rdev = tmp;
a9455408 200 }
a9455408 201 }
a9455408 202
4f7eff10
JB		 203 if (!rdev)
204 return ERR_PTR(-ENODEV);
a9455408 205
4f7eff10
JB		 206 if (netns != wiphy_net(&rdev->wiphy))
207 return ERR_PTR(-ENODEV);
208
209 return rdev;
a9455408
JB		 210}
211
212/*
213 * This function returns a pointer to the driver
214 * that the genl_info item that is passed refers to.
a9455408
JB		 215 *
216 * The result of this can be a PTR_ERR and hence must
217 * be checked with IS_ERR() for errors.
218 */
219static struct cfg80211_registered_device *
4f7eff10 220cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408 221{
5fe231e8 222 return __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 223}
224
f88eb7c0
JB		 225static int validate_beacon_head(const struct nlattr *attr,
226 struct netlink_ext_ack *extack)
227{
228 const u8 *data = nla_data(attr);
229 unsigned int len = nla_len(attr);
230 const struct element *elem;
231 const struct ieee80211_mgmt *mgmt = (void *)data;
1d47f119 232 unsigned int fixedlen, hdrlen;
9a6847ba 233 bool s1g_bcn;
1d47f119 234
9a6847ba
JB		 235 if (len < offsetofend(typeof(*mgmt), frame_control))
236 goto err;
237
238 s1g_bcn = ieee80211_is_s1g_beacon(mgmt->frame_control);
1d47f119
TP		 239 if (s1g_bcn) {
240 fixedlen = offsetof(struct ieee80211_ext,
241 u.s1g_beacon.variable);
242 hdrlen = offsetof(struct ieee80211_ext, u.s1g_beacon);
243 } else {
244 fixedlen = offsetof(struct ieee80211_mgmt,
245 u.beacon.variable);
246 hdrlen = offsetof(struct ieee80211_mgmt, u.beacon);
247 }
f88eb7c0
JB		 248
249 if (len < fixedlen)
250 goto err;
251
1d47f119 252 if (ieee80211_hdrlen(mgmt->frame_control) != hdrlen)
f88eb7c0
JB		 253 goto err;
254
255 data += fixedlen;
256 len -= fixedlen;
257
258 for_each_element(elem, data, len) {
259 /* nothing */
260 }
261
262 if (for_each_element_completed(elem, data, len))
263 return 0;
264
265err:
266 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed beacon head");
267 return -EINVAL;
268}
269
3d7af878
JB		 270static int validate_ie_attr(const struct nlattr *attr,
271 struct netlink_ext_ack *extack)
272{
9f308616
JB		 273 const u8 *data = nla_data(attr);
274 unsigned int len = nla_len(attr);
7388afe0 275 const struct element *elem;
3d7af878 276
9f308616
JB		 277 for_each_element(elem, data, len) {
278 /* nothing */
3d7af878
JB		 279 }
280
9f308616
JB		 281 if (for_each_element_completed(elem, data, len))
282 return 0;
283
3d7af878
JB		 284 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed information elements");
285 return -EINVAL;
286}
287
a3a20feb
JB		 288static int validate_he_capa(const struct nlattr *attr,
289 struct netlink_ext_ack *extack)
290{
291 if (!ieee80211_he_capa_size_ok(nla_data(attr), nla_len(attr)))
292 return -EINVAL;
293
294 return 0;
295}
296
55682965 297/* policy for the attributes */
d15da2a2
JB		 298static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR];
299
81e54d08
PKC		 300static const struct nla_policy
301nl80211_ftm_responder_policy[NL80211_FTM_RESP_ATTR_MAX + 1] = {
302 [NL80211_FTM_RESP_ATTR_ENABLED] = { .type = NLA_FLAG, },
303 [NL80211_FTM_RESP_ATTR_LCI] = { .type = NLA_BINARY,
304 .len = U8_MAX },
305 [NL80211_FTM_RESP_ATTR_CIVICLOC] = { .type = NLA_BINARY,
306 .len = U8_MAX },
307};
308
9bb7e0f2
JB		 309static const struct nla_policy
310nl80211_pmsr_ftm_req_attr_policy[NL80211_PMSR_FTM_REQ_ATTR_MAX + 1] = {
311 [NL80211_PMSR_FTM_REQ_ATTR_ASAP] = { .type = NLA_FLAG },
312 [NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE] = { .type = NLA_U32 },
313 [NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP] =
314 NLA_POLICY_MAX(NLA_U8, 15),
315 [NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD] = { .type = NLA_U16 },
316 [NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION] =
317 NLA_POLICY_MAX(NLA_U8, 15),
318 [NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST] =
ea18709a 319 NLA_POLICY_MAX(NLA_U8, 31),
9bb7e0f2
JB		 320 [NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES] = { .type = NLA_U8 },
321 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI] = { .type = NLA_FLAG },
322 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC] = { .type = NLA_FLAG },
efb5520d
AS		 323 [NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED] = { .type = NLA_FLAG },
324 [NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED] = { .type = NLA_FLAG },
73807523 325 [NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK] = { .type = NLA_FLAG },
9bb7e0f2
JB		 326};
327
328static const struct nla_policy
329nl80211_pmsr_req_data_policy[NL80211_PMSR_TYPE_MAX + 1] = {
330 [NL80211_PMSR_TYPE_FTM] =
23323289 331 NLA_POLICY_NESTED(nl80211_pmsr_ftm_req_attr_policy),
9bb7e0f2
JB		 332};
333
334static const struct nla_policy
335nl80211_pmsr_req_attr_policy[NL80211_PMSR_REQ_ATTR_MAX + 1] = {
336 [NL80211_PMSR_REQ_ATTR_DATA] =
23323289 337 NLA_POLICY_NESTED(nl80211_pmsr_req_data_policy),
9bb7e0f2
JB		 338 [NL80211_PMSR_REQ_ATTR_GET_AP_TSF] = { .type = NLA_FLAG },
339};
340
341static const struct nla_policy
aeddc05f 342nl80211_pmsr_peer_attr_policy[NL80211_PMSR_PEER_ATTR_MAX + 1] = {
9bb7e0f2 343 [NL80211_PMSR_PEER_ATTR_ADDR] = NLA_POLICY_ETH_ADDR,
d15da2a2 344 [NL80211_PMSR_PEER_ATTR_CHAN] = NLA_POLICY_NESTED(nl80211_policy),
9bb7e0f2 345 [NL80211_PMSR_PEER_ATTR_REQ] =
23323289 346 NLA_POLICY_NESTED(nl80211_pmsr_req_attr_policy),
9bb7e0f2
JB		 347 [NL80211_PMSR_PEER_ATTR_RESP] = { .type = NLA_REJECT },
348};
349
350static const struct nla_policy
351nl80211_pmsr_attr_policy[NL80211_PMSR_ATTR_MAX + 1] = {
352 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_REJECT },
353 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_REJECT },
354 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_REJECT },
355 [NL80211_PMSR_ATTR_TYPE_CAPA] = { .type = NLA_REJECT },
356 [NL80211_PMSR_ATTR_PEERS] =
aeddc05f 357 NLA_POLICY_NESTED_ARRAY(nl80211_pmsr_peer_attr_policy),
9bb7e0f2
JB		 358};
359
796e90f4
JC		 360static const struct nla_policy
361he_obss_pd_policy[NL80211_HE_OBSS_PD_ATTR_MAX + 1] = {
362 [NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] =
363 NLA_POLICY_RANGE(NLA_U8, 1, 20),
364 [NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET] =
365 NLA_POLICY_RANGE(NLA_U8, 1, 20),
f5bec330
RM		 366 [NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET] =
367 NLA_POLICY_RANGE(NLA_U8, 1, 20),
368 [NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP] =
369 NLA_POLICY_EXACT_LEN(8),
370 [NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP] =
371 NLA_POLICY_EXACT_LEN(8),
372 [NL80211_HE_OBSS_PD_ATTR_SR_CTRL] = { .type = NLA_U8 },
796e90f4
JC		 373};
374
5c5e52d1
JC		 375static const struct nla_policy
376he_bss_color_policy[NL80211_HE_BSS_COLOR_ATTR_MAX + 1] = {
377 [NL80211_HE_BSS_COLOR_ATTR_COLOR] = NLA_POLICY_RANGE(NLA_U8, 1, 63),
378 [NL80211_HE_BSS_COLOR_ATTR_DISABLED] = { .type = NLA_FLAG },
379 [NL80211_HE_BSS_COLOR_ATTR_PARTIAL] = { .type = NLA_FLAG },
380};
381
9a5f6488
TC		 382static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
383 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
384 .len = NL80211_MAX_SUPP_RATES },
385 [NL80211_TXRATE_HT] = { .type = NLA_BINARY,
386 .len = NL80211_MAX_SUPP_HT_RATES },
387 [NL80211_TXRATE_VHT] = NLA_POLICY_EXACT_LEN_WARN(sizeof(struct nl80211_txrate_vht)),
388 [NL80211_TXRATE_GI] = { .type = NLA_U8 },
eb89a6a6
MH		 389 [NL80211_TXRATE_HE] = NLA_POLICY_EXACT_LEN(sizeof(struct nl80211_txrate_he)),
390 [NL80211_TXRATE_HE_GI] = NLA_POLICY_RANGE(NLA_U8,
391 NL80211_RATE_INFO_HE_GI_0_8,
392 NL80211_RATE_INFO_HE_GI_3_2),
393 [NL80211_TXRATE_HE_LTF] = NLA_POLICY_RANGE(NLA_U8,
394 NL80211_RATE_INFO_HE_1XLTF,
395 NL80211_RATE_INFO_HE_4XLTF),
9a5f6488
TC		 396};
397
77f576de
T		 398static const struct nla_policy
399nl80211_tid_config_attr_policy[NL80211_TID_CONFIG_ATTR_MAX + 1] = {
3710a8a6
JB		 400 [NL80211_TID_CONFIG_ATTR_VIF_SUPP] = { .type = NLA_U64 },
401 [NL80211_TID_CONFIG_ATTR_PEER_SUPP] = { .type = NLA_U64 },
77f576de 402 [NL80211_TID_CONFIG_ATTR_OVERRIDE] = { .type = NLA_FLAG },
3710a8a6 403 [NL80211_TID_CONFIG_ATTR_TIDS] = NLA_POLICY_RANGE(NLA_U16, 1, 0xff),
77f576de
T		 404 [NL80211_TID_CONFIG_ATTR_NOACK] =
405 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
6a21d16c
T		 406 [NL80211_TID_CONFIG_ATTR_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
407 [NL80211_TID_CONFIG_ATTR_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
ade274b2
T		 408 [NL80211_TID_CONFIG_ATTR_AMPDU_CTRL] =
409 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
04f7d142
T		 410 [NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL] =
411 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
33462e68
SM		 412 [NL80211_TID_CONFIG_ATTR_AMSDU_CTRL] =
413 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
9a5f6488
TC		 414 [NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE] =
415 NLA_POLICY_MAX(NLA_U8, NL80211_TX_RATE_FIXED),
416 [NL80211_TID_CONFIG_ATTR_TX_RATE] =
417 NLA_POLICY_NESTED(nl80211_txattr_policy),
77f576de
T		 418};
419
291c49de
AD		 420static const struct nla_policy
421nl80211_fils_discovery_policy[NL80211_FILS_DISCOVERY_ATTR_MAX + 1] = {
422 [NL80211_FILS_DISCOVERY_ATTR_INT_MIN] = NLA_POLICY_MAX(NLA_U32, 10000),
423 [NL80211_FILS_DISCOVERY_ATTR_INT_MAX] = NLA_POLICY_MAX(NLA_U32, 10000),
272cd0e8
AD		 424 [NL80211_FILS_DISCOVERY_ATTR_TMPL] =
425 NLA_POLICY_RANGE(NLA_BINARY,
426 NL80211_FILS_DISCOVERY_TMPL_MIN_LEN,
427 IEEE80211_MAX_DATA_LEN),
291c49de
AD		 428};
429
7443dcd1
AD		 430static const struct nla_policy
431nl80211_unsol_bcast_probe_resp_policy[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1] = {
432 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] = NLA_POLICY_MAX(NLA_U32, 20),
433 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL] = { .type = NLA_BINARY,
434 .len = IEEE80211_MAX_DATA_LEN }
435};
436
6bdb68ce
CH		 437static const struct nla_policy
438sar_specs_policy[NL80211_SAR_ATTR_SPECS_MAX + 1] = {
439 [NL80211_SAR_ATTR_SPECS_POWER] = { .type = NLA_S32 },
440 [NL80211_SAR_ATTR_SPECS_RANGE_INDEX] = {.type = NLA_U32 },
441};
442
443static const struct nla_policy
444sar_policy[NL80211_SAR_ATTR_MAX + 1] = {
445 [NL80211_SAR_ATTR_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_SAR_TYPE),
446 [NL80211_SAR_ATTR_SPECS] = NLA_POLICY_NESTED_ARRAY(sar_specs_policy),
447};
448
dc1e3cb8
JC		 449static const struct nla_policy
450nl80211_mbssid_config_policy[NL80211_MBSSID_CONFIG_ATTR_MAX + 1] = {
451 [NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES] = NLA_POLICY_MIN(NLA_U8, 2),
452 [NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY] =
453 NLA_POLICY_MIN(NLA_U8, 1),
454 [NL80211_MBSSID_CONFIG_ATTR_INDEX] = { .type = NLA_U8 },
455 [NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX] = { .type = NLA_U32 },
456 [NL80211_MBSSID_CONFIG_ATTR_EMA] = { .type = NLA_FLAG },
457};
458
ff5c4dc4
JB		 459static const struct nla_policy
460nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] = {
461 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
462 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
463};
464
d15da2a2 465static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR] = {
6d4dd4ef 466 [0] = { .strict_start_type = NL80211_ATTR_HE_OBSS_PD },
55682965
JB		 467 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
468 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 469 .len = 20-1 },
31888487 470 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
3d9d1d66 471
72bdcf34 472 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 473 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
2a38075c
AAL		 474 [NL80211_ATTR_WIPHY_EDMG_CHANNELS] = NLA_POLICY_RANGE(NLA_U8,
475 NL80211_EDMG_CHANNELS_MIN,
476 NL80211_EDMG_CHANNELS_MAX),
477 [NL80211_ATTR_WIPHY_EDMG_BW_CONFIG] = NLA_POLICY_RANGE(NLA_U8,
478 NL80211_EDMG_BW_CONFIG_MIN,
479 NL80211_EDMG_BW_CONFIG_MAX),
480
3d9d1d66
JB		 481 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
482 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
942ba88b 483 [NL80211_ATTR_CENTER_FREQ1_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
3d9d1d66
JB		 484 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
485
ab0d76f6
JB		 486 [NL80211_ATTR_WIPHY_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
487 [NL80211_ATTR_WIPHY_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
b9a5f8ca
JM		 488 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
489 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 490 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
3057dbfd 491 [NL80211_ATTR_WIPHY_DYN_ACK] = { .type = NLA_FLAG },
55682965 492
ab0d76f6 493 [NL80211_ATTR_IFTYPE] = NLA_POLICY_MAX(NLA_U32, NL80211_IFTYPE_MAX),
55682965
JB		 494 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
495 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 496
c7721c05
JB		 497 [NL80211_ATTR_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
498 [NL80211_ATTR_PREV_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
41ade00f 499
b9454e83 500 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 501 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
502 .len = WLAN_MAX_KEY_LEN },
56be393f 503 [NL80211_ATTR_KEY_IDX] = NLA_POLICY_MAX(NLA_U8, 7),
41ade00f
JB		 504 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
505 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 506 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
ab0d76f6
JB		 507 [NL80211_ATTR_KEY_TYPE] =
508 NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES),
ed1b6cc7
JB		 509
510 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
511 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
f88eb7c0
JB		 512 [NL80211_ATTR_BEACON_HEAD] =
513 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_beacon_head,
514 IEEE80211_MAX_DATA_LEN),
3d7af878
JB		 515 [NL80211_ATTR_BEACON_TAIL] =
516 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
517 IEEE80211_MAX_DATA_LEN),
ab0d76f6
JB		 518 [NL80211_ATTR_STA_AID] =
519 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
5727ef1b
JB		 520 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
521 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
522 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
523 .len = NL80211_MAX_SUPP_RATES },
ab0d76f6
JB		 524 [NL80211_ATTR_STA_PLINK_ACTION] =
525 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_ACTIONS - 1),
e96d1cd2
ARN		 526 [NL80211_ATTR_STA_TX_POWER_SETTING] =
527 NLA_POLICY_RANGE(NLA_U8,
528 NL80211_TX_POWER_AUTOMATIC,
529 NL80211_TX_POWER_FIXED),
530 [NL80211_ATTR_STA_TX_POWER] = { .type = NLA_S16 },
5727ef1b 531 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 532 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 533 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 534 .len = IEEE80211_MAX_MESH_ID_LEN },
1fab1b89 535 [NL80211_ATTR_MPATH_NEXT_HOP] = NLA_POLICY_ETH_ADDR_COMPAT,
9f1ba906 536
6624bb34
JB		 537 /* allow 3 for NUL-termination, we used to declare this NLA_STRING */
538 [NL80211_ATTR_REG_ALPHA2] = NLA_POLICY_RANGE(NLA_BINARY, 2, 3),
b2e1b302
LR		 539 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
540
9f1ba906
JM		 541 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
542 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
543 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 544 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
545 .len = NL80211_MAX_SUPP_RATES },
50b12f59 546 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 547
24bdd9f4 548 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 549 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 550
c7721c05 551 [NL80211_ATTR_HT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_HT_CAPABILITY_LEN),
9aed3cc1
JM		 552
553 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
3d7af878
JB		 554 [NL80211_ATTR_IE] = NLA_POLICY_VALIDATE_FN(NLA_BINARY,
555 validate_ie_attr,
556 IEEE80211_MAX_DATA_LEN),
2a519311
JB		 557 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
558 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 559
560 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
561 .len = IEEE80211_MAX_SSID_LEN },
562 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
563 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 564 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 565 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
ab0d76f6
JB		 566 [NL80211_ATTR_USE_MFP] = NLA_POLICY_RANGE(NLA_U32,
567 NL80211_MFP_NO,
568 NL80211_MFP_OPTIONAL),
ff5c4dc4
JB		 569 [NL80211_ATTR_STA_FLAGS2] =
570 NLA_POLICY_EXACT_LEN_WARN(sizeof(struct nl80211_sta_flag_update)),
3f77316c 571 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 572 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
573 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
64bf3d4b 574 [NL80211_ATTR_CONTROL_PORT_OVER_NL80211] = { .type = NLA_FLAG },
b23aa676 575 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
ea750801 576 [NL80211_ATTR_STATUS_CODE] = { .type = NLA_U16 },
b23aa676
SO		 577 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
578 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 579 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 580 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
c7721c05 581 [NL80211_ATTR_PMKID] = NLA_POLICY_EXACT_LEN_WARN(WLAN_PMKID_LEN),
9588bbd5
JM		 582 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
583 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 584 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 585 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
586 .len = IEEE80211_MAX_DATA_LEN },
587 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ab0d76f6
JB		 588 [NL80211_ATTR_PS_STATE] = NLA_POLICY_RANGE(NLA_U32,
589 NL80211_PS_DISABLED,
590 NL80211_PS_ENABLED),
d6dc1a38 591 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 592 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 593 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 594 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
595 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 596 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 597 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
598 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 599 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 600 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 601 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 602 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
ab0d76f6
JB		 603 [NL80211_ATTR_STA_PLINK_STATE] =
604 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_STATES - 1),
056e9375
JK		 605 [NL80211_ATTR_MEASUREMENT_DURATION] = { .type = NLA_U16 },
606 [NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY] = { .type = NLA_FLAG },
ab0d76f6
JB		 607 [NL80211_ATTR_MESH_PEER_AID] =
608 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
bbe6ad6d 609 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 610 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 611 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
ab0d76f6
JB		 612 [NL80211_ATTR_HIDDEN_SSID] =
613 NLA_POLICY_RANGE(NLA_U32,
614 NL80211_HIDDEN_SSID_NOT_IN_USE,
615 NL80211_HIDDEN_SSID_ZERO_CONTENTS),
3d7af878
JB		 616 [NL80211_ATTR_IE_PROBE_RESP] =
617 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
618 IEEE80211_MAX_DATA_LEN),
619 [NL80211_ATTR_IE_ASSOC_RESP] =
620 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
621 IEEE80211_MAX_DATA_LEN),
f4b34b55 622 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
ff5c4dc4 623 [NL80211_ATTR_STA_WME] = NLA_POLICY_NESTED(nl80211_sta_wme_policy),
a1f1c21c 624 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 625 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 626 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
627 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
628 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
629 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
630 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
31fa97c5 631 [NL80211_ATTR_TDLS_INITIATOR] = { .type = NLA_FLAG },
e247bd90 632 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 633 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
634 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 635 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 636 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
637 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
638 .len = NL80211_HT_CAPABILITY_LEN
639 },
1d9d9213 640 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 641 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 642 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 643 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 644 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
cb9abd48
JB		 645
646 /* need to include at least Auth Transaction and Status Code */
647 [NL80211_ATTR_AUTH_DATA] = NLA_POLICY_MIN_LEN(4),
648
c7721c05 649 [NL80211_ATTR_VHT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_VHT_CAPABILITY_LEN),
ed473771 650 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
ab0d76f6
JB		 651 [NL80211_ATTR_P2P_CTWINDOW] = NLA_POLICY_MAX(NLA_U8, 127),
652 [NL80211_ATTR_P2P_OPPPS] = NLA_POLICY_MAX(NLA_U8, 1),
653 [NL80211_ATTR_LOCAL_MESH_POWER_MODE] =
654 NLA_POLICY_RANGE(NLA_U32,
655 NL80211_MESH_POWER_UNKNOWN + 1,
656 NL80211_MESH_POWER_MAX),
77765eaf
VT		 657 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
658 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
9d62a986
JM		 659 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
660 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
3713b4e3 661 [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
ee2aca34
JB		 662 [NL80211_ATTR_DISABLE_VHT] = { .type = NLA_FLAG },
663 [NL80211_ATTR_VHT_CAPABILITY_MASK] = {
664 .len = NL80211_VHT_CAPABILITY_LEN,
665 },
355199e0
JM		 666 [NL80211_ATTR_MDID] = { .type = NLA_U16 },
667 [NL80211_ATTR_IE_RIC] = { .type = NLA_BINARY,
668 .len = IEEE80211_MAX_DATA_LEN },
0e1a1d85 669 [NL80211_ATTR_CRIT_PROT_ID] = { .type = NLA_U16 },
cb9abd48
JB		 670 [NL80211_ATTR_MAX_CRIT_PROT_DURATION] =
671 NLA_POLICY_MAX(NLA_U16, NL80211_CRIT_PROTO_MAX_DURATION),
ab0d76f6
JB		 672 [NL80211_ATTR_PEER_AID] =
673 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
16ef1fe2
SW		 674 [NL80211_ATTR_CH_SWITCH_COUNT] = { .type = NLA_U32 },
675 [NL80211_ATTR_CH_SWITCH_BLOCK_TX] = { .type = NLA_FLAG },
676 [NL80211_ATTR_CSA_IES] = { .type = NLA_NESTED },
00c207ed
JC		 677 [NL80211_ATTR_CNTDWN_OFFS_BEACON] = { .type = NLA_BINARY },
678 [NL80211_ATTR_CNTDWN_OFFS_PRESP] = { .type = NLA_BINARY },
cb9abd48 679 [NL80211_ATTR_STA_SUPPORTED_CHANNELS] = NLA_POLICY_MIN_LEN(2),
c8b82802
JB		 680 /*
681 * The value of the Length field of the Supported Operating
682 * Classes element is between 2 and 253.
683 */
684 [NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES] =
685 NLA_POLICY_RANGE(NLA_BINARY, 2, 253),
5336fa88 686 [NL80211_ATTR_HANDLE_DFS] = { .type = NLA_FLAG },
60f4a7b1 687 [NL80211_ATTR_OPMODE_NOTIF] = { .type = NLA_U8 },
ad7e718c
JB		 688 [NL80211_ATTR_VENDOR_ID] = { .type = NLA_U32 },
689 [NL80211_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
690 [NL80211_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
c8b82802
JB		 691 [NL80211_ATTR_QOS_MAP] = NLA_POLICY_RANGE(NLA_BINARY,
692 IEEE80211_QOS_MAP_LEN_MIN,
693 IEEE80211_QOS_MAP_LEN_MAX),
c7721c05 694 [NL80211_ATTR_MAC_HINT] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1df4a510 695 [NL80211_ATTR_WIPHY_FREQ_HINT] = { .type = NLA_U32 },
df942e7b 696 [NL80211_ATTR_TDLS_PEER_CAPABILITY] = { .type = NLA_U32 },
18e5ca65 697 [NL80211_ATTR_SOCKET_OWNER] = { .type = NLA_FLAG },
34d22ce2 698 [NL80211_ATTR_CSA_C_OFFSETS_TX] = { .type = NLA_BINARY },
bab5ab7d 699 [NL80211_ATTR_USE_RRM] = { .type = NLA_FLAG },
ab0d76f6
JB		 700 [NL80211_ATTR_TSID] = NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_TIDS - 1),
701 [NL80211_ATTR_USER_PRIO] =
702 NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_UPS - 1),
960d01ac 703 [NL80211_ATTR_ADMITTED_TIME] = { .type = NLA_U16 },
18998c38 704 [NL80211_ATTR_SMPS_MODE] = { .type = NLA_U8 },
5cde05c6 705 [NL80211_ATTR_OPER_CLASS] = { .type = NLA_U8 },
c7721c05 706 [NL80211_ATTR_MAC_MASK] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1bdd716c 707 [NL80211_ATTR_WIPHY_SELF_MANAGED_REG] = { .type = NLA_FLAG },
4b681c82 708 [NL80211_ATTR_NETNS_FD] = { .type = NLA_U32 },
9c748934 709 [NL80211_ATTR_SCHED_SCAN_DELAY] = { .type = NLA_U32 },
05050753 710 [NL80211_ATTR_REG_INDOOR] = { .type = NLA_FLAG },
34d50519 711 [NL80211_ATTR_PBSS] = { .type = NLA_FLAG },
38de03d2 712 [NL80211_ATTR_BSS_SELECT] = { .type = NLA_NESTED },
ab0d76f6
JB		 713 [NL80211_ATTR_STA_SUPPORT_P2P_PS] =
714 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_P2P_PS_STATUS - 1),
c6e6a0c8
AE		 715 [NL80211_ATTR_MU_MIMO_GROUP_DATA] = {
716 .len = VHT_MUMIMO_GROUPS_DATA_LEN
717 },
c7721c05 718 [NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
ab0d76f6 719 [NL80211_ATTR_NAN_MASTER_PREF] = NLA_POLICY_MIN(NLA_U8, 1),
8585989d 720 [NL80211_ATTR_BANDS] = { .type = NLA_U32 },
a442b761 721 [NL80211_ATTR_NAN_FUNC] = { .type = NLA_NESTED },
348bd456
JM		 722 [NL80211_ATTR_FILS_KEK] = { .type = NLA_BINARY,
723 .len = FILS_MAX_KEK_LEN },
c7721c05 724 [NL80211_ATTR_FILS_NONCES] = NLA_POLICY_EXACT_LEN_WARN(2 * FILS_NONCE_LEN),
ce0ce13a 725 [NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED] = { .type = NLA_FLAG, },
c7721c05 726 [NL80211_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
bf95ecdb 727 [NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] = { .type = NLA_S8 },
728 [NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST] = {
729 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
730 },
3093ebbe 731 [NL80211_ATTR_TIMEOUT_REASON] = { .type = NLA_U32 },
a3caf744
VK		 732 [NL80211_ATTR_FILS_ERP_USERNAME] = { .type = NLA_BINARY,
733 .len = FILS_ERP_MAX_USERNAME_LEN },
734 [NL80211_ATTR_FILS_ERP_REALM] = { .type = NLA_BINARY,
735 .len = FILS_ERP_MAX_REALM_LEN },
736 [NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] = { .type = NLA_U16 },
737 [NL80211_ATTR_FILS_ERP_RRK] = { .type = NLA_BINARY,
738 .len = FILS_ERP_MAX_RRK_LEN },
c7721c05 739 [NL80211_ATTR_FILS_CACHE_ID] = NLA_POLICY_EXACT_LEN_WARN(2),
a3caf744 740 [NL80211_ATTR_PMK] = { .type = NLA_BINARY, .len = PMK_MAX_LEN },
cb9abd48 741 [NL80211_ATTR_PMKR0_NAME] = NLA_POLICY_EXACT_LEN(WLAN_PMK_NAME_LEN),
ca986ad9 742 [NL80211_ATTR_SCHED_SCAN_MULTI] = { .type = NLA_FLAG },
40cbfa90 743 [NL80211_ATTR_EXTERNAL_AUTH_SUPPORT] = { .type = NLA_FLAG },
52539ca8
THJ		 744
745 [NL80211_ATTR_TXQ_LIMIT] = { .type = NLA_U32 },
746 [NL80211_ATTR_TXQ_MEMORY_LIMIT] = { .type = NLA_U32 },
747 [NL80211_ATTR_TXQ_QUANTUM] = { .type = NLA_U32 },
c8b82802 748 [NL80211_ATTR_HE_CAPABILITY] =
a3a20feb
JB		 749 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_he_capa,
750 NL80211_HE_MAX_CAPABILITY_LEN),
0e012b4e
JB		 751 [NL80211_ATTR_FTM_RESPONDER] =
752 NLA_POLICY_NESTED(nl80211_ftm_responder_policy),
9bb7e0f2
JB		 753 [NL80211_ATTR_TIMEOUT] = NLA_POLICY_MIN(NLA_U32, 1),
754 [NL80211_ATTR_PEER_MEASUREMENTS] =
23323289 755 NLA_POLICY_NESTED(nl80211_pmsr_attr_policy),
36647055 756 [NL80211_ATTR_AIRTIME_WEIGHT] = NLA_POLICY_MIN(NLA_U16, 1),
26f7044e
CHH		 757 [NL80211_ATTR_SAE_PASSWORD] = { .type = NLA_BINARY,
758 .len = SAE_PASSWORD_MAX_LEN },
a0de1ca3 759 [NL80211_ATTR_TWT_RESPONDER] = { .type = NLA_FLAG },
796e90f4 760 [NL80211_ATTR_HE_OBSS_PD] = NLA_POLICY_NESTED(he_obss_pd_policy),
14f34e36 761 [NL80211_ATTR_VLAN_ID] = NLA_POLICY_RANGE(NLA_U16, 1, VLAN_N_VID - 2),
5c5e52d1 762 [NL80211_ATTR_HE_BSS_COLOR] = NLA_POLICY_NESTED(he_bss_color_policy),
77f576de
T		 763 [NL80211_ATTR_TID_CONFIG] =
764 NLA_POLICY_NESTED_ARRAY(nl80211_tid_config_attr_policy),
5631d96a 765 [NL80211_ATTR_CONTROL_PORT_NO_PREAUTH] = { .type = NLA_FLAG },
7fc82af8
VJ		 766 [NL80211_ATTR_PMK_LIFETIME] = NLA_POLICY_MIN(NLA_U32, 1),
767 [NL80211_ATTR_PMK_REAUTH_THRESHOLD] = NLA_POLICY_RANGE(NLA_U8, 1, 100),
9dba48a6 768 [NL80211_ATTR_RECEIVE_MULTICAST] = { .type = NLA_FLAG },
942ba88b 769 [NL80211_ATTR_WIPHY_FREQ_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
2032f3b2 770 [NL80211_ATTR_SCAN_FREQ_KHZ] = { .type = NLA_NESTED },
8140860c
JB		 771 [NL80211_ATTR_HE_6GHZ_CAPABILITY] =
772 NLA_POLICY_EXACT_LEN(sizeof(struct ieee80211_he_6ghz_capa)),
291c49de
AD		 773 [NL80211_ATTR_FILS_DISCOVERY] =
774 NLA_POLICY_NESTED(nl80211_fils_discovery_policy),
7443dcd1
AD		 775 [NL80211_ATTR_UNSOL_BCAST_PROBE_RESP] =
776 NLA_POLICY_NESTED(nl80211_unsol_bcast_probe_resp_policy),
d2b7588a
TP		 777 [NL80211_ATTR_S1G_CAPABILITY] =
778 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
779 [NL80211_ATTR_S1G_CAPABILITY_MASK] =
780 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
9f0ffa41
RD		 781 [NL80211_ATTR_SAE_PWE] =
782 NLA_POLICY_RANGE(NLA_U8, NL80211_SAE_PWE_HUNT_AND_PECK,
783 NL80211_SAE_PWE_BOTH),
3bb02143 784 [NL80211_ATTR_RECONNECT_REQUESTED] = { .type = NLA_REJECT },
6bdb68ce 785 [NL80211_ATTR_SAR_SPEC] = NLA_POLICY_NESTED(sar_policy),
b6db0f89 786 [NL80211_ATTR_DISABLE_HE] = { .type = NLA_FLAG },
0d2ab3ae
JC		 787 [NL80211_ATTR_OBSS_COLOR_BITMAP] = { .type = NLA_U64 },
788 [NL80211_ATTR_COLOR_CHANGE_COUNT] = { .type = NLA_U8 },
789 [NL80211_ATTR_COLOR_CHANGE_COLOR] = { .type = NLA_U8 },
790 [NL80211_ATTR_COLOR_CHANGE_ELEMS] = NLA_POLICY_NESTED(nl80211_policy),
dc1e3cb8
JC		 791 [NL80211_ATTR_MBSSID_CONFIG] =
792 NLA_POLICY_NESTED(nl80211_mbssid_config_policy),
793 [NL80211_ATTR_MBSSID_ELEMS] = { .type = NLA_NESTED },
a95bfb87 794 [NL80211_ATTR_RADAR_BACKGROUND] = { .type = NLA_FLAG },
47301a74 795 [NL80211_ATTR_AP_SETTINGS_FLAGS] = { .type = NLA_U32 },
ea05fd35
IP		 796 [NL80211_ATTR_EHT_CAPABILITY] =
797 NLA_POLICY_RANGE(NLA_BINARY,
798 NL80211_EHT_MIN_CAPABILITY_LEN,
799 NL80211_EHT_MAX_CAPABILITY_LEN),
36f84235 800 [NL80211_ATTR_DISABLE_EHT] = { .type = NLA_FLAG },
7b0a0e3c
JB		 801 [NL80211_ATTR_MLO_LINKS] =
802 NLA_POLICY_NESTED_ARRAY(nl80211_policy),
803 [NL80211_ATTR_MLO_LINK_ID] =
804 NLA_POLICY_RANGE(NLA_U8, 0, IEEE80211_MLD_MAX_NUM_LINKS),
d648c230 805 [NL80211_ATTR_MLD_ADDR] = NLA_POLICY_EXACT_LEN(ETH_ALEN),
efbabc11 806 [NL80211_ATTR_MLO_SUPPORT] = { .type = NLA_FLAG },
ecad3b0b 807 [NL80211_ATTR_MAX_NUM_AKM_SUITES] = { .type = NLA_REJECT },
55682965
JB		 808};
809
e31b8213 810/* policy for the key attributes */
b54452b0 811static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 812 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 813 [NL80211_KEY_IDX] = { .type = NLA_U8 },
814 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 815 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 816 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
817 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
ab0d76f6 818 [NL80211_KEY_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES - 1),
dbd2fd65 819 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
6cdd3979 820 [NL80211_KEY_MODE] = NLA_POLICY_RANGE(NLA_U8, 0, NL80211_KEY_SET_TX),
dbd2fd65
JB		 821};
822
823/* policy for the key default flags */
824static const struct nla_policy
825nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
826 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
827 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 828};
829
f83ace3b 830#ifdef CONFIG_PM
ff1b6e69
JB		 831/* policy for WoWLAN attributes */
832static const struct nla_policy
833nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
834 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
835 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
836 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
837 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 838 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
839 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
840 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
841 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
2a0e047e 842 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
8cd4d456 843 [NL80211_WOWLAN_TRIG_NET_DETECT] = { .type = NLA_NESTED },
2a0e047e
JB		 844};
845
846static const struct nla_policy
847nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
848 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
849 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
c7721c05 850 [NL80211_WOWLAN_TCP_DST_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
2a0e047e
JB		 851 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
852 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
bc043585 853 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
2a0e047e
JB		 854 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
855 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
856 },
857 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
858 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
859 },
860 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
bc043585
JB		 861 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
862 [NL80211_WOWLAN_TCP_WAKE_MASK] = NLA_POLICY_MIN_LEN(1),
ff1b6e69 863};
f83ace3b 864#endif /* CONFIG_PM */
ff1b6e69 865
be29b99a
AK		 866/* policy for coalesce rule attributes */
867static const struct nla_policy
868nl80211_coalesce_policy[NUM_NL80211_ATTR_COALESCE_RULE] = {
869 [NL80211_ATTR_COALESCE_RULE_DELAY] = { .type = NLA_U32 },
ab0d76f6
JB		 870 [NL80211_ATTR_COALESCE_RULE_CONDITION] =
871 NLA_POLICY_RANGE(NLA_U32,
872 NL80211_COALESCE_CONDITION_MATCH,
873 NL80211_COALESCE_CONDITION_NO_MATCH),
be29b99a
AK		 874 [NL80211_ATTR_COALESCE_RULE_PKT_PATTERN] = { .type = NLA_NESTED },
875};
876
e5497d76
JB		 877/* policy for GTK rekey offload attributes */
878static const struct nla_policy
879nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
093a48d2
NE		 880 [NL80211_REKEY_DATA_KEK] = {
881 .type = NLA_BINARY,
882 .len = NL80211_KEK_EXT_LEN
883 },
884 [NL80211_REKEY_DATA_KCK] = {
885 .type = NLA_BINARY,
886 .len = NL80211_KCK_EXT_LEN
887 },
cb9abd48 888 [NL80211_REKEY_DATA_REPLAY_CTR] = NLA_POLICY_EXACT_LEN(NL80211_REPLAY_CTR_LEN),
093a48d2 889 [NL80211_REKEY_DATA_AKM] = { .type = NLA_U32 },
e5497d76
JB		 890};
891
1e1b11b6 892static const struct nla_policy
893nl80211_match_band_rssi_policy[NUM_NL80211_BANDS] = {
894 [NL80211_BAND_2GHZ] = { .type = NLA_S32 },
895 [NL80211_BAND_5GHZ] = { .type = NLA_S32 },
e548a1c3 896 [NL80211_BAND_6GHZ] = { .type = NLA_S32 },
1e1b11b6 897 [NL80211_BAND_60GHZ] = { .type = NLA_S32 },
63fa0426 898 [NL80211_BAND_LC] = { .type = NLA_S32 },
1e1b11b6 899};
900
a1f1c21c
LC		 901static const struct nla_policy
902nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 903 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 904 .len = IEEE80211_MAX_SSID_LEN },
c7721c05 905 [NL80211_SCHED_SCAN_MATCH_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
88e920b4 906 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
1e1b11b6 907 [NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI] =
908 NLA_POLICY_NESTED(nl80211_match_band_rssi_policy),
a1f1c21c
LC		 909};
910
3b06d277
AS		 911static const struct nla_policy
912nl80211_plan_policy[NL80211_SCHED_SCAN_PLAN_MAX + 1] = {
913 [NL80211_SCHED_SCAN_PLAN_INTERVAL] = { .type = NLA_U32 },
914 [NL80211_SCHED_SCAN_PLAN_ITERATIONS] = { .type = NLA_U32 },
915};
916
38de03d2
AS		 917static const struct nla_policy
918nl80211_bss_select_policy[NL80211_BSS_SELECT_ATTR_MAX + 1] = {
919 [NL80211_BSS_SELECT_ATTR_RSSI] = { .type = NLA_FLAG },
920 [NL80211_BSS_SELECT_ATTR_BAND_PREF] = { .type = NLA_U32 },
921 [NL80211_BSS_SELECT_ATTR_RSSI_ADJUST] = {
922 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
923 },
924};
925
a442b761
AB		 926/* policy for NAN function attributes */
927static const struct nla_policy
928nl80211_nan_func_policy[NL80211_NAN_FUNC_ATTR_MAX + 1] = {
cb9abd48
JB		 929 [NL80211_NAN_FUNC_TYPE] =
930 NLA_POLICY_MAX(NLA_U8, NL80211_NAN_FUNC_MAX_TYPE),
0a27844c 931 [NL80211_NAN_FUNC_SERVICE_ID] = {
a442b761
AB		 932 .len = NL80211_NAN_FUNC_SERVICE_ID_LEN },
933 [NL80211_NAN_FUNC_PUBLISH_TYPE] = { .type = NLA_U8 },
934 [NL80211_NAN_FUNC_PUBLISH_BCAST] = { .type = NLA_FLAG },
935 [NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE] = { .type = NLA_FLAG },
936 [NL80211_NAN_FUNC_FOLLOW_UP_ID] = { .type = NLA_U8 },
937 [NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] = { .type = NLA_U8 },
c7721c05 938 [NL80211_NAN_FUNC_FOLLOW_UP_DEST] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
a442b761
AB		 939 [NL80211_NAN_FUNC_CLOSE_RANGE] = { .type = NLA_FLAG },
940 [NL80211_NAN_FUNC_TTL] = { .type = NLA_U32 },
941 [NL80211_NAN_FUNC_SERVICE_INFO] = { .type = NLA_BINARY,
942 .len = NL80211_NAN_FUNC_SERVICE_SPEC_INFO_MAX_LEN },
943 [NL80211_NAN_FUNC_SRF] = { .type = NLA_NESTED },
944 [NL80211_NAN_FUNC_RX_MATCH_FILTER] = { .type = NLA_NESTED },
945 [NL80211_NAN_FUNC_TX_MATCH_FILTER] = { .type = NLA_NESTED },
946 [NL80211_NAN_FUNC_INSTANCE_ID] = { .type = NLA_U8 },
947 [NL80211_NAN_FUNC_TERM_REASON] = { .type = NLA_U8 },
948};
949
950/* policy for Service Response Filter attributes */
951static const struct nla_policy
952nl80211_nan_srf_policy[NL80211_NAN_SRF_ATTR_MAX + 1] = {
953 [NL80211_NAN_SRF_INCLUDE] = { .type = NLA_FLAG },
954 [NL80211_NAN_SRF_BF] = { .type = NLA_BINARY,
955 .len = NL80211_NAN_FUNC_SRF_MAX_LEN },
956 [NL80211_NAN_SRF_BF_IDX] = { .type = NLA_U8 },
957 [NL80211_NAN_SRF_MAC_ADDRS] = { .type = NLA_NESTED },
958};
959
ad670233
PX		 960/* policy for packet pattern attributes */
961static const struct nla_policy
962nl80211_packet_pattern_policy[MAX_NL80211_PKTPAT + 1] = {
963 [NL80211_PKTPAT_MASK] = { .type = NLA_BINARY, },
964 [NL80211_PKTPAT_PATTERN] = { .type = NLA_BINARY, },
965 [NL80211_PKTPAT_OFFSET] = { .type = NLA_U32 },
966};
967
ce6b6974
JB		 968static int nl80211_prepare_wdev_dump(struct netlink_callback *cb,
969 struct cfg80211_registered_device **rdev,
970 struct wireless_dev **wdev,
971 struct nlattr **attrbuf)
a043897a 972{
97990a06 973 int err;
a043897a 974
97990a06 975 if (!cb->args[0]) {
ce6b6974
JB		 976 struct nlattr **attrbuf_free = NULL;
977
978 if (!attrbuf) {
979 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
980 GFP_KERNEL);
981 if (!attrbuf)
982 return -ENOMEM;
983 attrbuf_free = attrbuf;
984 }
50508d94 985
8cb08174
JB		 986 err = nlmsg_parse_deprecated(cb->nlh,
987 GENL_HDRLEN + nl80211_fam.hdrsize,
50508d94 988 attrbuf, nl80211_fam.maxattr,
8cb08174 989 nl80211_policy, NULL);
50508d94 990 if (err) {
ce6b6974 991 kfree(attrbuf_free);
ea90e0dc 992 return err;
50508d94 993 }
67748893 994
a05829a7
JB		 995 rtnl_lock();
996 *wdev = __cfg80211_wdev_from_attrs(NULL, sock_net(cb->skb->sk),
50508d94 997 attrbuf);
ce6b6974 998 kfree(attrbuf_free);
a05829a7
JB		 999 if (IS_ERR(*wdev)) {
1000 rtnl_unlock();
ea90e0dc 1001 return PTR_ERR(*wdev);
a05829a7 1002 }
f26cbf40 1003 *rdev = wiphy_to_rdev((*wdev)->wiphy);
a05829a7
JB		 1004 mutex_lock(&(*rdev)->wiphy.mtx);
1005 rtnl_unlock();
c319d50b
JB		 1006 /* 0 is the first index - add 1 to parse only once */
1007 cb->args[0] = (*rdev)->wiphy_idx + 1;
97990a06
JB		 1008 cb->args[1] = (*wdev)->identifier;
1009 } else {
c319d50b 1010 /* subtract the 1 again here */
a05829a7 1011 struct wiphy *wiphy;
97990a06 1012 struct wireless_dev *tmp;
67748893 1013
a05829a7
JB		 1014 rtnl_lock();
1015 wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
1016 if (!wiphy) {
1017 rtnl_unlock();
ea90e0dc 1018 return -ENODEV;
a05829a7 1019 }
f26cbf40 1020 *rdev = wiphy_to_rdev(wiphy);
97990a06 1021 *wdev = NULL;
67748893 1022
53873f13 1023 list_for_each_entry(tmp, &(*rdev)->wiphy.wdev_list, list) {
97990a06
JB		 1024 if (tmp->identifier == cb->args[1]) {
1025 *wdev = tmp;
1026 break;
1027 }
1028 }
67748893 1029
a05829a7
JB		 1030 if (!*wdev) {
1031 rtnl_unlock();
ea90e0dc 1032 return -ENODEV;
a05829a7
JB		 1033 }
1034 mutex_lock(&(*rdev)->wiphy.mtx);
1035 rtnl_unlock();
67748893
JB		 1036 }
1037
67748893 1038 return 0;
67748893
JB		 1039}
1040
55682965 1041/* message building helper */
9bb7e0f2
JB		 1042void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1043 int flags, u8 cmd)
55682965
JB		 1044{
1045 /* since there is no private header just add the generic one */
15e47304 1046 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 1047}
1048
50f32718
HD		 1049static int nl80211_msg_put_wmm_rules(struct sk_buff *msg,
1050 const struct ieee80211_reg_rule *rule)
1051{
1052 int j;
1053 struct nlattr *nl_wmm_rules =
ae0be8de 1054 nla_nest_start_noflag(msg, NL80211_FREQUENCY_ATTR_WMM);
50f32718
HD		 1055
1056 if (!nl_wmm_rules)
1057 goto nla_put_failure;
1058
1059 for (j = 0; j < IEEE80211_NUM_ACS; j++) {
ae0be8de 1060 struct nlattr *nl_wmm_rule = nla_nest_start_noflag(msg, j);
50f32718
HD		 1061
1062 if (!nl_wmm_rule)
1063 goto nla_put_failure;
1064
1065 if (nla_put_u16(msg, NL80211_WMMR_CW_MIN,
38cb87ee 1066 rule->wmm_rule.client[j].cw_min) ||
50f32718 1067 nla_put_u16(msg, NL80211_WMMR_CW_MAX,
38cb87ee 1068 rule->wmm_rule.client[j].cw_max) ||
50f32718 1069 nla_put_u8(msg, NL80211_WMMR_AIFSN,
38cb87ee 1070 rule->wmm_rule.client[j].aifsn) ||
d3c89bbc
HD		 1071 nla_put_u16(msg, NL80211_WMMR_TXOP,
1072 rule->wmm_rule.client[j].cot))
50f32718
HD		 1073 goto nla_put_failure;
1074
1075 nla_nest_end(msg, nl_wmm_rule);
1076 }
1077 nla_nest_end(msg, nl_wmm_rules);
1078
1079 return 0;
1080
1081nla_put_failure:
1082 return -ENOBUFS;
1083}
1084
1085static int nl80211_msg_put_channel(struct sk_buff *msg, struct wiphy *wiphy,
cdc89b97
JB		 1086 struct ieee80211_channel *chan,
1087 bool large)
5dab3b8a 1088{
ea077c1c
RL		 1089 /* Some channels must be completely excluded from the
1090 * list to protect old user-space tools from breaking
1091 */
1092 if (!large && chan->flags &
1093 (IEEE80211_CHAN_NO_10MHZ | IEEE80211_CHAN_NO_20MHZ))
1094 return 0;
f8d504ca
JB		 1095 if (!large && chan->freq_offset)
1096 return 0;
ea077c1c 1097
9360ffd1
DM		 1098 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
1099 chan->center_freq))
1100 goto nla_put_failure;
5dab3b8a 1101
942ba88b
TP		 1102 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_OFFSET, chan->freq_offset))
1103 goto nla_put_failure;
1104
9360ffd1
DM		 1105 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
1106 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
1107 goto nla_put_failure;
8fe02e16
LR		 1108 if (chan->flags & IEEE80211_CHAN_NO_IR) {
1109 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IR))
1110 goto nla_put_failure;
1111 if (nla_put_flag(msg, __NL80211_FREQUENCY_ATTR_NO_IBSS))
1112 goto nla_put_failure;
1113 }
cdc89b97
JB		 1114 if (chan->flags & IEEE80211_CHAN_RADAR) {
1115 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
1116 goto nla_put_failure;
1117 if (large) {
1118 u32 time;
1119
1120 time = elapsed_jiffies_msecs(chan->dfs_state_entered);
1121
1122 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
1123 chan->dfs_state))
1124 goto nla_put_failure;
1125 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
1126 time))
1127 goto nla_put_failure;
089027e5
JD		 1128 if (nla_put_u32(msg,
1129 NL80211_FREQUENCY_ATTR_DFS_CAC_TIME,
1130 chan->dfs_cac_ms))
1131 goto nla_put_failure;
cdc89b97
JB		 1132 }
1133 }
5dab3b8a 1134
fe1abafd
JB		 1135 if (large) {
1136 if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
1137 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
1138 goto nla_put_failure;
1139 if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
1140 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
1141 goto nla_put_failure;
1142 if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
1143 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
1144 goto nla_put_failure;
1145 if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
1146 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
1147 goto nla_put_failure;
570dbde1
DS		 1148 if ((chan->flags & IEEE80211_CHAN_INDOOR_ONLY) &&
1149 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_INDOOR_ONLY))
1150 goto nla_put_failure;
06f207fc
AN		 1151 if ((chan->flags & IEEE80211_CHAN_IR_CONCURRENT) &&
1152 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_IR_CONCURRENT))
570dbde1 1153 goto nla_put_failure;
ea077c1c
RL		 1154 if ((chan->flags & IEEE80211_CHAN_NO_20MHZ) &&
1155 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_20MHZ))
1156 goto nla_put_failure;
1157 if ((chan->flags & IEEE80211_CHAN_NO_10MHZ) &&
1158 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_10MHZ))
1159 goto nla_put_failure;
1e61d82c
HD		 1160 if ((chan->flags & IEEE80211_CHAN_NO_HE) &&
1161 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HE))
1162 goto nla_put_failure;
d65a9770
TP		 1163 if ((chan->flags & IEEE80211_CHAN_1MHZ) &&
1164 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_1MHZ))
1165 goto nla_put_failure;
1166 if ((chan->flags & IEEE80211_CHAN_2MHZ) &&
1167 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_2MHZ))
1168 goto nla_put_failure;
1169 if ((chan->flags & IEEE80211_CHAN_4MHZ) &&
1170 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_4MHZ))
1171 goto nla_put_failure;
1172 if ((chan->flags & IEEE80211_CHAN_8MHZ) &&
1173 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_8MHZ))
1174 goto nla_put_failure;
1175 if ((chan->flags & IEEE80211_CHAN_16MHZ) &&
1176 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_16MHZ))
1177 goto nla_put_failure;
c2b3d769
S		 1178 if ((chan->flags & IEEE80211_CHAN_NO_320MHZ) &&
1179 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_320MHZ))
1180 goto nla_put_failure;
31846b65
IP		 1181 if ((chan->flags & IEEE80211_CHAN_NO_EHT) &&
1182 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_EHT))
1183 goto nla_put_failure;
fe1abafd
JB		 1184 }
1185
9360ffd1
DM		 1186 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
1187 DBM_TO_MBM(chan->max_power)))
1188 goto nla_put_failure;
5dab3b8a 1189
50f32718
HD		 1190 if (large) {
1191 const struct ieee80211_reg_rule *rule =
b88d26d9 1192 freq_reg_info(wiphy, MHZ_TO_KHZ(chan->center_freq));
50f32718 1193
38cb87ee 1194 if (!IS_ERR_OR_NULL(rule) && rule->has_wmm) {
50f32718
HD		 1195 if (nl80211_msg_put_wmm_rules(msg, rule))
1196 goto nla_put_failure;
1197 }
1198 }
1199
5dab3b8a
LR		 1200 return 0;
1201
1202 nla_put_failure:
1203 return -ENOBUFS;
1204}
1205
52539ca8
THJ		 1206static bool nl80211_put_txq_stats(struct sk_buff *msg,
1207 struct cfg80211_txq_stats *txqstats,
1208 int attrtype)
1209{
1210 struct nlattr *txqattr;
1211
1212#define PUT_TXQVAL_U32(attr, memb) do { \
1213 if (txqstats->filled & BIT(NL80211_TXQ_STATS_ ## attr) && \
1214 nla_put_u32(msg, NL80211_TXQ_STATS_ ## attr, txqstats->memb)) \
1215 return false; \
1216 } while (0)
1217
ae0be8de 1218 txqattr = nla_nest_start_noflag(msg, attrtype);
52539ca8
THJ		 1219 if (!txqattr)
1220 return false;
1221
1222 PUT_TXQVAL_U32(BACKLOG_BYTES, backlog_bytes);
1223 PUT_TXQVAL_U32(BACKLOG_PACKETS, backlog_packets);
1224 PUT_TXQVAL_U32(FLOWS, flows);
1225 PUT_TXQVAL_U32(DROPS, drops);
1226 PUT_TXQVAL_U32(ECN_MARKS, ecn_marks);
1227 PUT_TXQVAL_U32(OVERLIMIT, overlimit);
1228 PUT_TXQVAL_U32(OVERMEMORY, overmemory);
1229 PUT_TXQVAL_U32(COLLISIONS, collisions);
1230 PUT_TXQVAL_U32(TX_BYTES, tx_bytes);
1231 PUT_TXQVAL_U32(TX_PACKETS, tx_packets);
1232 PUT_TXQVAL_U32(MAX_FLOWS, max_flows);
1233 nla_nest_end(msg, txqattr);
1234
1235#undef PUT_TXQVAL_U32
1236 return true;
1237}
1238
55682965
JB		 1239/* netlink command implementations */
1240
7b0a0e3c
JB		 1241/**
1242 * nl80211_link_id - return link ID
1243 * @attrs: attributes to look at
1244 *
1245 * Returns: the link ID or 0 if not given
1246 *
1247 * Note this function doesn't do any validation of the link
1248 * ID validity wrt. links that were actually added, so it must
1249 * be called only from ops with %NL80211_FLAG_MLO_VALID_LINK_ID
1250 * or if additional validation is done.
1251 */
1252static unsigned int nl80211_link_id(struct nlattr **attrs)
1253{
1254 struct nlattr *linkid = attrs[NL80211_ATTR_MLO_LINK_ID];
1255
1256 if (!linkid)
1257 return 0;
1258
1259 return nla_get_u8(linkid);
1260}
1261
1262static int nl80211_link_id_or_invalid(struct nlattr **attrs)
1263{
1264 struct nlattr *linkid = attrs[NL80211_ATTR_MLO_LINK_ID];
1265
1266 if (!linkid)
1267 return -1;
1268
1269 return nla_get_u8(linkid);
1270}
1271
b9454e83
JB		 1272struct key_parse {
1273 struct key_params p;
1274 int idx;
e31b8213 1275 int type;
56be393f 1276 bool def, defmgmt, defbeacon;
dbd2fd65 1277 bool def_uni, def_multi;
b9454e83
JB		 1278};
1279
768075eb
JB		 1280static int nl80211_parse_key_new(struct genl_info *info, struct nlattr *key,
1281 struct key_parse *k)
b9454e83
JB		 1282{
1283 struct nlattr *tb[NL80211_KEY_MAX + 1];
8cb08174
JB		 1284 int err = nla_parse_nested_deprecated(tb, NL80211_KEY_MAX, key,
1285 nl80211_key_policy,
1286 info->extack);
b9454e83
JB		 1287 if (err)
1288 return err;
1289
1290 k->def = !!tb[NL80211_KEY_DEFAULT];
1291 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
56be393f 1292 k->defbeacon = !!tb[NL80211_KEY_DEFAULT_BEACON];
b9454e83 1293
dbd2fd65
JB		 1294 if (k->def) {
1295 k->def_uni = true;
1296 k->def_multi = true;
1297 }
56be393f 1298 if (k->defmgmt || k->defbeacon)
dbd2fd65
JB		 1299 k->def_multi = true;
1300
b9454e83
JB		 1301 if (tb[NL80211_KEY_IDX])
1302 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
1303
1304 if (tb[NL80211_KEY_DATA]) {
1305 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
1306 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
1307 }
1308
1309 if (tb[NL80211_KEY_SEQ]) {
1310 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
1311 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
1312 }
1313
1314 if (tb[NL80211_KEY_CIPHER])
1315 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
1316
ab0d76f6 1317 if (tb[NL80211_KEY_TYPE])
e31b8213 1318 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
e31b8213 1319
dbd2fd65
JB		 1320 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
1321 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
7a087e74 1322
8cb08174
JB		 1323 err = nla_parse_nested_deprecated(kdt,
1324 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1325 tb[NL80211_KEY_DEFAULT_TYPES],
1326 nl80211_key_default_policy,
1327 info->extack);
dbd2fd65
JB		 1328 if (err)
1329 return err;
1330
1331 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1332 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1333 }
1334
6cdd3979
AW		 1335 if (tb[NL80211_KEY_MODE])
1336 k->p.mode = nla_get_u8(tb[NL80211_KEY_MODE]);
1337
b9454e83
JB		 1338 return 0;
1339}
1340
1341static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
1342{
1343 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
1344 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
1345 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
1346 }
1347
1348 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
1349 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
1350 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
1351 }
1352
1353 if (info->attrs[NL80211_ATTR_KEY_IDX])
1354 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1355
1356 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
1357 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
1358
1359 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
1360 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
1361
dbd2fd65
JB		 1362 if (k->def) {
1363 k->def_uni = true;
1364 k->def_multi = true;
1365 }
1366 if (k->defmgmt)
1367 k->def_multi = true;
1368
ab0d76f6 1369 if (info->attrs[NL80211_ATTR_KEY_TYPE])
e31b8213 1370 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
e31b8213 1371
dbd2fd65
JB		 1372 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
1373 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
8cb08174
JB		 1374 int err = nla_parse_nested_deprecated(kdt,
1375 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1376 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
1377 nl80211_key_default_policy,
1378 info->extack);
dbd2fd65
JB		 1379 if (err)
1380 return err;
1381
1382 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1383 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1384 }
1385
b9454e83
JB		 1386 return 0;
1387}
1388
1389static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
1390{
1391 int err;
1392
1393 memset(k, 0, sizeof(*k));
1394 k->idx = -1;
e31b8213 1395 k->type = -1;
b9454e83
JB		 1396
1397 if (info->attrs[NL80211_ATTR_KEY])
768075eb 1398 err = nl80211_parse_key_new(info, info->attrs[NL80211_ATTR_KEY], k);
b9454e83
JB		 1399 else
1400 err = nl80211_parse_key_old(info, k);
1401
1402 if (err)
1403 return err;
1404
56be393f
JM		 1405 if ((k->def ? 1 : 0) + (k->defmgmt ? 1 : 0) +
1406 (k->defbeacon ? 1 : 0) > 1) {
1407 GENL_SET_ERR_MSG(info,
1408 "key with multiple default flags is invalid");
b9454e83 1409 return -EINVAL;
768075eb 1410 }
b9454e83 1411
56be393f 1412 if (k->defmgmt || k->defbeacon) {
768075eb 1413 if (k->def_uni || !k->def_multi) {
56be393f
JM		 1414 GENL_SET_ERR_MSG(info,
1415 "defmgmt/defbeacon key must be mcast");
dbd2fd65 1416 return -EINVAL;
768075eb 1417 }
dbd2fd65
JB		 1418 }
1419
b9454e83
JB		 1420 if (k->idx != -1) {
1421 if (k->defmgmt) {
768075eb
JB		 1422 if (k->idx < 4 || k->idx > 5) {
1423 GENL_SET_ERR_MSG(info,
1424 "defmgmt key idx not 4 or 5");
b9454e83 1425 return -EINVAL;
768075eb 1426 }
56be393f
JM		 1427 } else if (k->defbeacon) {
1428 if (k->idx < 6 || k->idx > 7) {
1429 GENL_SET_ERR_MSG(info,
1430 "defbeacon key idx not 6 or 7");
1431 return -EINVAL;
1432 }
b9454e83 1433 } else if (k->def) {
768075eb
JB		 1434 if (k->idx < 0 || k->idx > 3) {
1435 GENL_SET_ERR_MSG(info, "def key idx not 0-3");
b9454e83 1436 return -EINVAL;
768075eb 1437 }
b9454e83 1438 } else {
56be393f
JM		 1439 if (k->idx < 0 || k->idx > 7) {
1440 GENL_SET_ERR_MSG(info, "key idx not 0-7");
b9454e83 1441 return -EINVAL;
768075eb 1442 }
b9454e83
JB		 1443 }
1444 }
1445
1446 return 0;
1447}
1448
fffd0934
JB		 1449static struct cfg80211_cached_keys *
1450nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
768075eb 1451 struct genl_info *info, bool *no_ht)
fffd0934 1452{
768075eb 1453 struct nlattr *keys = info->attrs[NL80211_ATTR_KEYS];
fffd0934
JB		 1454 struct key_parse parse;
1455 struct nlattr *key;
1456 struct cfg80211_cached_keys *result;
1457 int rem, err, def = 0;
f1c1f17a
JB		 1458 bool have_key = false;
1459
1460 nla_for_each_nested(key, keys, rem) {
1461 have_key = true;
1462 break;
1463 }
1464
1465 if (!have_key)
1466 return NULL;
fffd0934
JB		 1467
1468 result = kzalloc(sizeof(*result), GFP_KERNEL);
1469 if (!result)
1470 return ERR_PTR(-ENOMEM);
1471
1472 result->def = -1;
fffd0934
JB		 1473
1474 nla_for_each_nested(key, keys, rem) {
1475 memset(&parse, 0, sizeof(parse));
1476 parse.idx = -1;
1477
768075eb 1478 err = nl80211_parse_key_new(info, key, &parse);
fffd0934
JB		 1479 if (err)
1480 goto error;
1481 err = -EINVAL;
1482 if (!parse.p.key)
1483 goto error;
768075eb
JB		 1484 if (parse.idx < 0 || parse.idx > 3) {
1485 GENL_SET_ERR_MSG(info, "key index out of range [0-3]");
fffd0934 1486 goto error;
768075eb 1487 }
fffd0934 1488 if (parse.def) {
768075eb
JB		 1489 if (def) {
1490 GENL_SET_ERR_MSG(info,
1491 "only one key can be default");
fffd0934 1492 goto error;
768075eb 1493 }
fffd0934
JB		 1494 def = 1;
1495 result->def = parse.idx;
dbd2fd65
JB		 1496 if (!parse.def_uni || !parse.def_multi)
1497 goto error;
fffd0934
JB		 1498 } else if (parse.defmgmt)
1499 goto error;
1500 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 1501 parse.idx, false, NULL);
fffd0934
JB		 1502 if (err)
1503 goto error;
386b1f27
JB		 1504 if (parse.p.cipher != WLAN_CIPHER_SUITE_WEP40 &&
1505 parse.p.cipher != WLAN_CIPHER_SUITE_WEP104) {
768075eb 1506 GENL_SET_ERR_MSG(info, "connect key must be WEP");
386b1f27
JB		 1507 err = -EINVAL;
1508 goto error;
1509 }
fffd0934
JB		 1510 result->params[parse.idx].cipher = parse.p.cipher;
1511 result->params[parse.idx].key_len = parse.p.key_len;
1512 result->params[parse.idx].key = result->data[parse.idx];
1513 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee 1514
386b1f27
JB		 1515 /* must be WEP key if we got here */
1516 if (no_ht)
1517 *no_ht = true;
fffd0934
JB		 1518 }
1519
f1c1f17a
JB		 1520 if (result->def < 0) {
1521 err = -EINVAL;
768075eb 1522 GENL_SET_ERR_MSG(info, "need a default/TX key");
f1c1f17a
JB		 1523 goto error;
1524 }
1525
fffd0934
JB		 1526 return result;
1527 error:
1528 kfree(result);
1529 return ERR_PTR(err);
1530}
1531
1532static int nl80211_key_allowed(struct wireless_dev *wdev)
1533{
1534 ASSERT_WDEV_LOCK(wdev);
1535
fffd0934
JB		 1536 switch (wdev->iftype) {
1537 case NL80211_IFTYPE_AP:
1538 case NL80211_IFTYPE_AP_VLAN:
074ac8df 1539 case NL80211_IFTYPE_P2P_GO:
ff973af7 1540 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 1541 break;
1542 case NL80211_IFTYPE_ADHOC:
7b0a0e3c
JB		 1543 if (wdev->u.ibss.current_bss)
1544 return 0;
1545 return -ENOLINK;
fffd0934 1546 case NL80211_IFTYPE_STATION:
074ac8df 1547 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c
JB		 1548 if (wdev->connected)
1549 return 0;
1550 return -ENOLINK;
de4fcbad 1551 case NL80211_IFTYPE_UNSPECIFIED:
6e0bd6c3 1552 case NL80211_IFTYPE_OCB:
de4fcbad 1553 case NL80211_IFTYPE_MONITOR:
cb3b7d87 1554 case NL80211_IFTYPE_NAN:
de4fcbad
JB		 1555 case NL80211_IFTYPE_P2P_DEVICE:
1556 case NL80211_IFTYPE_WDS:
1557 case NUM_NL80211_IFTYPES:
fffd0934
JB		 1558 return -EINVAL;
1559 }
1560
1561 return 0;
1562}
1563
664834de 1564static struct ieee80211_channel *nl80211_get_valid_chan(struct wiphy *wiphy,
942ba88b 1565 u32 freq)
664834de
JM		 1566{
1567 struct ieee80211_channel *chan;
1568
942ba88b 1569 chan = ieee80211_get_channel_khz(wiphy, freq);
664834de
JM		 1570 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
1571 return NULL;
1572 return chan;
1573}
1574
7527a782
JB		 1575static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
1576{
ae0be8de 1577 struct nlattr *nl_modes = nla_nest_start_noflag(msg, attr);
7527a782
JB		 1578 int i;
1579
1580 if (!nl_modes)
1581 goto nla_put_failure;
1582
1583 i = 0;
1584 while (ifmodes) {
9360ffd1
DM		 1585 if ((ifmodes & 1) && nla_put_flag(msg, i))
1586 goto nla_put_failure;
7527a782
JB		 1587 ifmodes >>= 1;
1588 i++;
1589 }
1590
1591 nla_nest_end(msg, nl_modes);
1592 return 0;
1593
1594nla_put_failure:
1595 return -ENOBUFS;
1596}
1597
1598static int nl80211_put_iface_combinations(struct wiphy *wiphy,
cdc89b97
JB		 1599 struct sk_buff *msg,
1600 bool large)
7527a782
JB		 1601{
1602 struct nlattr *nl_combis;
1603 int i, j;
1604
ae0be8de
MK		 1605 nl_combis = nla_nest_start_noflag(msg,
1606 NL80211_ATTR_INTERFACE_COMBINATIONS);
7527a782
JB		 1607 if (!nl_combis)
1608 goto nla_put_failure;
1609
1610 for (i = 0; i < wiphy->n_iface_combinations; i++) {
1611 const struct ieee80211_iface_combination *c;
1612 struct nlattr *nl_combi, *nl_limits;
1613
1614 c = &wiphy->iface_combinations[i];
1615
ae0be8de 1616 nl_combi = nla_nest_start_noflag(msg, i + 1);
7527a782
JB		 1617 if (!nl_combi)
1618 goto nla_put_failure;
1619
ae0be8de
MK		 1620 nl_limits = nla_nest_start_noflag(msg,
1621 NL80211_IFACE_COMB_LIMITS);
7527a782
JB		 1622 if (!nl_limits)
1623 goto nla_put_failure;
1624
1625 for (j = 0; j < c->n_limits; j++) {
1626 struct nlattr *nl_limit;
1627
ae0be8de 1628 nl_limit = nla_nest_start_noflag(msg, j + 1);
7527a782
JB		 1629 if (!nl_limit)
1630 goto nla_put_failure;
9360ffd1
DM		 1631 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
1632 c->limits[j].max))
1633 goto nla_put_failure;
7527a782
JB		 1634 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
1635 c->limits[j].types))
1636 goto nla_put_failure;
1637 nla_nest_end(msg, nl_limit);
1638 }
1639
1640 nla_nest_end(msg, nl_limits);
1641
9360ffd1
DM		 1642 if (c->beacon_int_infra_match &&
1643 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
1644 goto nla_put_failure;
1645 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
1646 c->num_different_channels) ||
1647 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
1648 c->max_interfaces))
1649 goto nla_put_failure;
cdc89b97 1650 if (large &&
8c48b50a
FF		 1651 (nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
1652 c->radar_detect_widths) ||
1653 nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_REGIONS,
1654 c->radar_detect_regions)))
cdc89b97 1655 goto nla_put_failure;
0c317a02
PK		 1656 if (c->beacon_int_min_gcd &&
1657 nla_put_u32(msg, NL80211_IFACE_COMB_BI_MIN_GCD,
1658 c->beacon_int_min_gcd))
1659 goto nla_put_failure;
7527a782
JB		 1660
1661 nla_nest_end(msg, nl_combi);
1662 }
1663
1664 nla_nest_end(msg, nl_combis);
1665
1666 return 0;
1667nla_put_failure:
1668 return -ENOBUFS;
1669}
1670
3713b4e3 1671#ifdef CONFIG_PM
b56cf720
JB		 1672static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
1673 struct sk_buff *msg)
1674{
964dc9e2 1675 const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan->tcp;
b56cf720
JB		 1676 struct nlattr *nl_tcp;
1677
1678 if (!tcp)
1679 return 0;
1680
ae0be8de
MK		 1681 nl_tcp = nla_nest_start_noflag(msg,
1682 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
b56cf720
JB		 1683 if (!nl_tcp)
1684 return -ENOBUFS;
1685
1686 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1687 tcp->data_payload_max))
1688 return -ENOBUFS;
1689
1690 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1691 tcp->data_payload_max))
1692 return -ENOBUFS;
1693
1694 if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
1695 return -ENOBUFS;
1696
1697 if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
1698 sizeof(*tcp->tok), tcp->tok))
1699 return -ENOBUFS;
1700
1701 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
1702 tcp->data_interval_max))
1703 return -ENOBUFS;
1704
1705 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
1706 tcp->wake_payload_max))
1707 return -ENOBUFS;
1708
1709 nla_nest_end(msg, nl_tcp);
1710 return 0;
1711}
1712
3713b4e3 1713static int nl80211_send_wowlan(struct sk_buff *msg,
1b8ec87a 1714 struct cfg80211_registered_device *rdev,
b56cf720 1715 bool large)
55682965 1716{
3713b4e3 1717 struct nlattr *nl_wowlan;
55682965 1718
1b8ec87a 1719 if (!rdev->wiphy.wowlan)
3713b4e3 1720 return 0;
55682965 1721
ae0be8de
MK		 1722 nl_wowlan = nla_nest_start_noflag(msg,
1723 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
3713b4e3
JB		 1724 if (!nl_wowlan)
1725 return -ENOBUFS;
9360ffd1 1726
1b8ec87a 1727 if (((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_ANY) &&
3713b4e3 1728 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1b8ec87a 1729 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_DISCONNECT) &&
3713b4e3 1730 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1b8ec87a 1731 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT) &&
3713b4e3 1732 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1b8ec87a 1733 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
3713b4e3 1734 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1b8ec87a 1735 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
3713b4e3 1736 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1b8ec87a 1737 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
3713b4e3 1738 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1b8ec87a 1739 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
3713b4e3 1740 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1b8ec87a 1741 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
3713b4e3
JB		 1742 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1743 return -ENOBUFS;
9360ffd1 1744
1b8ec87a 1745 if (rdev->wiphy.wowlan->n_patterns) {
50ac6607 1746 struct nl80211_pattern_support pat = {
1b8ec87a
ZG		 1747 .max_patterns = rdev->wiphy.wowlan->n_patterns,
1748 .min_pattern_len = rdev->wiphy.wowlan->pattern_min_len,
1749 .max_pattern_len = rdev->wiphy.wowlan->pattern_max_len,
1750 .max_pkt_offset = rdev->wiphy.wowlan->max_pkt_offset,
3713b4e3 1751 };
9360ffd1 1752
3713b4e3
JB		 1753 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1754 sizeof(pat), &pat))
1755 return -ENOBUFS;
1756 }
9360ffd1 1757
75453ccb
LC		 1758 if ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_NET_DETECT) &&
1759 nla_put_u32(msg, NL80211_WOWLAN_TRIG_NET_DETECT,
1760 rdev->wiphy.wowlan->max_nd_match_sets))
1761 return -ENOBUFS;
1762
1b8ec87a 1763 if (large && nl80211_send_wowlan_tcp_caps(rdev, msg))
b56cf720
JB		 1764 return -ENOBUFS;
1765
3713b4e3 1766 nla_nest_end(msg, nl_wowlan);
9360ffd1 1767
3713b4e3
JB		 1768 return 0;
1769}
1770#endif
9360ffd1 1771
be29b99a 1772static int nl80211_send_coalesce(struct sk_buff *msg,
1b8ec87a 1773 struct cfg80211_registered_device *rdev)
be29b99a
AK		 1774{
1775 struct nl80211_coalesce_rule_support rule;
1776
1b8ec87a 1777 if (!rdev->wiphy.coalesce)
be29b99a
AK		 1778 return 0;
1779
1b8ec87a
ZG		 1780 rule.max_rules = rdev->wiphy.coalesce->n_rules;
1781 rule.max_delay = rdev->wiphy.coalesce->max_delay;
1782 rule.pat.max_patterns = rdev->wiphy.coalesce->n_patterns;
1783 rule.pat.min_pattern_len = rdev->wiphy.coalesce->pattern_min_len;
1784 rule.pat.max_pattern_len = rdev->wiphy.coalesce->pattern_max_len;
1785 rule.pat.max_pkt_offset = rdev->wiphy.coalesce->max_pkt_offset;
be29b99a
AK		 1786
1787 if (nla_put(msg, NL80211_ATTR_COALESCE_RULE, sizeof(rule), &rule))
1788 return -ENOBUFS;
1789
1790 return 0;
1791}
1792
c4cbaf79
LC		 1793static int
1794nl80211_send_iftype_data(struct sk_buff *msg,
22395217 1795 const struct ieee80211_supported_band *sband,
c4cbaf79
LC		 1796 const struct ieee80211_sband_iftype_data *iftdata)
1797{
1798 const struct ieee80211_sta_he_cap *he_cap = &iftdata->he_cap;
5cd5a8a3 1799 const struct ieee80211_sta_eht_cap *eht_cap = &iftdata->eht_cap;
c4cbaf79
LC		 1800
1801 if (nl80211_put_iftypes(msg, NL80211_BAND_IFTYPE_ATTR_IFTYPES,
1802 iftdata->types_mask))
1803 return -ENOBUFS;
1804
1805 if (he_cap->has_he) {
1806 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MAC,
1807 sizeof(he_cap->he_cap_elem.mac_cap_info),
1808 he_cap->he_cap_elem.mac_cap_info) ||
1809 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PHY,
1810 sizeof(he_cap->he_cap_elem.phy_cap_info),
1811 he_cap->he_cap_elem.phy_cap_info) ||
1812 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET,
1813 sizeof(he_cap->he_mcs_nss_supp),
1814 &he_cap->he_mcs_nss_supp) ||
1815 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PPE,
1816 sizeof(he_cap->ppe_thres), he_cap->ppe_thres))
1817 return -ENOBUFS;
1818 }
1819
5cd5a8a3
IP		 1820 if (eht_cap->has_eht && he_cap->has_he) {
1821 u8 mcs_nss_size, ppe_thresh_size;
1822 u16 ppe_thres_hdr;
ea5cba26
JB		 1823 bool is_ap;
1824
1825 is_ap = iftdata->types_mask & BIT(NL80211_IFTYPE_AP) ||
1826 iftdata->types_mask & BIT(NL80211_IFTYPE_P2P_GO);
5cd5a8a3
IP		 1827
1828 mcs_nss_size =
1829 ieee80211_eht_mcs_nss_size(&he_cap->he_cap_elem,
ea5cba26
JB		 1830 &eht_cap->eht_cap_elem,
1831 is_ap);
5cd5a8a3
IP		 1832
1833 ppe_thres_hdr = get_unaligned_le16(&eht_cap->eht_ppe_thres[0]);
1834 ppe_thresh_size =
1835 ieee80211_eht_ppe_size(ppe_thres_hdr,
1836 eht_cap->eht_cap_elem.phy_cap_info);
1837
1838 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_MAC,
1839 sizeof(eht_cap->eht_cap_elem.mac_cap_info),
1840 eht_cap->eht_cap_elem.mac_cap_info) ||
1841 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_PHY,
1842 sizeof(eht_cap->eht_cap_elem.phy_cap_info),
1843 eht_cap->eht_cap_elem.phy_cap_info) ||
1844 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_MCS_SET,
1845 mcs_nss_size, &eht_cap->eht_mcs_nss_supp) ||
1846 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_PPE,
1847 ppe_thresh_size, eht_cap->eht_ppe_thres))
1848 return -ENOBUFS;
1849 }
1850
22395217
JB		 1851 if (sband->band == NL80211_BAND_6GHZ &&
1852 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_6GHZ_CAPA,
1853 sizeof(iftdata->he_6ghz_capa),
1854 &iftdata->he_6ghz_capa))
1855 return -ENOBUFS;
1856
f4f86505
JB		 1857 if (iftdata->vendor_elems.data && iftdata->vendor_elems.len &&
1858 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_VENDOR_ELEMS,
1859 iftdata->vendor_elems.len, iftdata->vendor_elems.data))
1860 return -ENOBUFS;
1861
c4cbaf79
LC		 1862 return 0;
1863}
1864
3713b4e3 1865static int nl80211_send_band_rateinfo(struct sk_buff *msg,
f8d504ca
JB		 1866 struct ieee80211_supported_band *sband,
1867 bool large)
3713b4e3
JB		 1868{
1869 struct nlattr *nl_rates, *nl_rate;
1870 struct ieee80211_rate *rate;
1871 int i;
87bbbe22 1872
3713b4e3
JB		 1873 /* add HT info */
1874 if (sband->ht_cap.ht_supported &&
1875 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1876 sizeof(sband->ht_cap.mcs),
1877 &sband->ht_cap.mcs) ||
1878 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1879 sband->ht_cap.cap) ||
1880 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1881 sband->ht_cap.ampdu_factor) ||
1882 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1883 sband->ht_cap.ampdu_density)))
1884 return -ENOBUFS;
afe0cbf8 1885
3713b4e3
JB		 1886 /* add VHT info */
1887 if (sband->vht_cap.vht_supported &&
1888 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1889 sizeof(sband->vht_cap.vht_mcs),
1890 &sband->vht_cap.vht_mcs) ||
1891 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1892 sband->vht_cap.cap)))
1893 return -ENOBUFS;
f59ac048 1894
f8d504ca 1895 if (large && sband->n_iftype_data) {
c4cbaf79 1896 struct nlattr *nl_iftype_data =
ae0be8de
MK		 1897 nla_nest_start_noflag(msg,
1898 NL80211_BAND_ATTR_IFTYPE_DATA);
c4cbaf79
LC		 1899 int err;
1900
1901 if (!nl_iftype_data)
1902 return -ENOBUFS;
1903
1904 for (i = 0; i < sband->n_iftype_data; i++) {
1905 struct nlattr *iftdata;
1906
ae0be8de 1907 iftdata = nla_nest_start_noflag(msg, i + 1);
c4cbaf79
LC		 1908 if (!iftdata)
1909 return -ENOBUFS;
1910
22395217 1911 err = nl80211_send_iftype_data(msg, sband,
c4cbaf79
LC		 1912 &sband->iftype_data[i]);
1913 if (err)
1914 return err;
1915
1916 nla_nest_end(msg, iftdata);
1917 }
1918
1919 nla_nest_end(msg, nl_iftype_data);
1920 }
1921
2a38075c 1922 /* add EDMG info */
f8d504ca 1923 if (large && sband->edmg_cap.channels &&
2a38075c
AAL		 1924 (nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_CHANNELS,
1925 sband->edmg_cap.channels) ||
1926 nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_BW_CONFIG,
1927 sband->edmg_cap.bw_config)))
1928
1929 return -ENOBUFS;
1930
3713b4e3 1931 /* add bitrates */
ae0be8de 1932 nl_rates = nla_nest_start_noflag(msg, NL80211_BAND_ATTR_RATES);
3713b4e3
JB		 1933 if (!nl_rates)
1934 return -ENOBUFS;
ee688b00 1935
3713b4e3 1936 for (i = 0; i < sband->n_bitrates; i++) {
ae0be8de 1937 nl_rate = nla_nest_start_noflag(msg, i);
3713b4e3
JB		 1938 if (!nl_rate)
1939 return -ENOBUFS;
ee688b00 1940
3713b4e3
JB		 1941 rate = &sband->bitrates[i];
1942 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1943 rate->bitrate))
1944 return -ENOBUFS;
1945 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1946 nla_put_flag(msg,
1947 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1948 return -ENOBUFS;
ee688b00 1949
3713b4e3
JB		 1950 nla_nest_end(msg, nl_rate);
1951 }
d51626df 1952
3713b4e3 1953 nla_nest_end(msg, nl_rates);
bf0c111e 1954
3713b4e3
JB		 1955 return 0;
1956}
ee688b00 1957
3713b4e3
JB		 1958static int
1959nl80211_send_mgmt_stypes(struct sk_buff *msg,
1960 const struct ieee80211_txrx_stypes *mgmt_stypes)
1961{
1962 u16 stypes;
1963 struct nlattr *nl_ftypes, *nl_ifs;
1964 enum nl80211_iftype ift;
1965 int i;
ee688b00 1966
3713b4e3
JB		 1967 if (!mgmt_stypes)
1968 return 0;
5dab3b8a 1969
ae0be8de 1970 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_TX_FRAME_TYPES);
3713b4e3
JB		 1971 if (!nl_ifs)
1972 return -ENOBUFS;
e2f367f2 1973
3713b4e3 1974 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1975 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1976 if (!nl_ftypes)
1977 return -ENOBUFS;
1978 i = 0;
1979 stypes = mgmt_stypes[ift].tx;
1980 while (stypes) {
1981 if ((stypes & 1) &&
1982 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1983 (i << 4) | IEEE80211_FTYPE_MGMT))
1984 return -ENOBUFS;
1985 stypes >>= 1;
1986 i++;
ee688b00 1987 }
3713b4e3
JB		 1988 nla_nest_end(msg, nl_ftypes);
1989 }
ee688b00 1990
3713b4e3 1991 nla_nest_end(msg, nl_ifs);
ee688b00 1992
ae0be8de 1993 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_RX_FRAME_TYPES);
3713b4e3
JB		 1994 if (!nl_ifs)
1995 return -ENOBUFS;
ee688b00 1996
3713b4e3 1997 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1998 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1999 if (!nl_ftypes)
2000 return -ENOBUFS;
2001 i = 0;
2002 stypes = mgmt_stypes[ift].rx;
2003 while (stypes) {
2004 if ((stypes & 1) &&
2005 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
2006 (i << 4) | IEEE80211_FTYPE_MGMT))
2007 return -ENOBUFS;
2008 stypes >>= 1;
2009 i++;
2010 }
2011 nla_nest_end(msg, nl_ftypes);
2012 }
2013 nla_nest_end(msg, nl_ifs);
ee688b00 2014
3713b4e3
JB		 2015 return 0;
2016}
ee688b00 2017
1794899e
JB		 2018#define CMD(op, n) \
2019 do { \
2020 if (rdev->ops->op) { \
2021 i++; \
2022 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
2023 goto nla_put_failure; \
2024 } \
2025 } while (0)
2026
2027static int nl80211_add_commands_unsplit(struct cfg80211_registered_device *rdev,
2028 struct sk_buff *msg)
2029{
2030 int i = 0;
2031
2032 /*
2033 * do *NOT* add anything into this function, new things need to be
2034 * advertised only to new versions of userspace that can deal with
2035 * the split (and they can't possibly care about new features...
2036 */
2037 CMD(add_virtual_intf, NEW_INTERFACE);
2038 CMD(change_virtual_intf, SET_INTERFACE);
2039 CMD(add_key, NEW_KEY);
2040 CMD(start_ap, START_AP);
2041 CMD(add_station, NEW_STATION);
2042 CMD(add_mpath, NEW_MPATH);
2043 CMD(update_mesh_config, SET_MESH_CONFIG);
2044 CMD(change_bss, SET_BSS);
2045 CMD(auth, AUTHENTICATE);
2046 CMD(assoc, ASSOCIATE);
2047 CMD(deauth, DEAUTHENTICATE);
2048 CMD(disassoc, DISASSOCIATE);
2049 CMD(join_ibss, JOIN_IBSS);
2050 CMD(join_mesh, JOIN_MESH);
2051 CMD(set_pmksa, SET_PMKSA);
2052 CMD(del_pmksa, DEL_PMKSA);
2053 CMD(flush_pmksa, FLUSH_PMKSA);
2054 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
2055 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
2056 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2057 CMD(mgmt_tx, FRAME);
2058 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
2059 if (rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
2060 i++;
2061 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
2062 goto nla_put_failure;
2063 }
2064 if (rdev->ops->set_monitor_channel || rdev->ops->start_ap ||
2065 rdev->ops->join_mesh) {
2066 i++;
2067 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
2068 goto nla_put_failure;
2069 }
1794899e
JB		 2070 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
2071 CMD(tdls_mgmt, TDLS_MGMT);
2072 CMD(tdls_oper, TDLS_OPER);
2073 }
ca986ad9 2074 if (rdev->wiphy.max_sched_scan_reqs)
1794899e
JB		 2075 CMD(sched_scan_start, START_SCHED_SCAN);
2076 CMD(probe_client, PROBE_CLIENT);
2077 CMD(set_noack_map, SET_NOACK_MAP);
2078 if (rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
2079 i++;
2080 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
2081 goto nla_put_failure;
2082 }
2083 CMD(start_p2p_device, START_P2P_DEVICE);
2084 CMD(set_mcast_rate, SET_MCAST_RATE);
2085#ifdef CONFIG_NL80211_TESTMODE
2086 CMD(testmode_cmd, TESTMODE);
2087#endif
2088
2089 if (rdev->ops->connect || rdev->ops->auth) {
2090 i++;
2091 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
2092 goto nla_put_failure;
2093 }
2094
2095 if (rdev->ops->disconnect || rdev->ops->deauth) {
2096 i++;
2097 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
2098 goto nla_put_failure;
2099 }
2100
2101 return i;
2102 nla_put_failure:
2103 return -ENOBUFS;
2104}
2105
9bb7e0f2
JB		 2106static int
2107nl80211_send_pmsr_ftm_capa(const struct cfg80211_pmsr_capabilities *cap,
2108 struct sk_buff *msg)
2109{
2110 struct nlattr *ftm;
2111
2112 if (!cap->ftm.supported)
2113 return 0;
2114
ae0be8de 2115 ftm = nla_nest_start_noflag(msg, NL80211_PMSR_TYPE_FTM);
9bb7e0f2
JB		 2116 if (!ftm)
2117 return -ENOBUFS;
2118
2119 if (cap->ftm.asap && nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_ASAP))
2120 return -ENOBUFS;
2121 if (cap->ftm.non_asap &&
2122 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP))
2123 return -ENOBUFS;
2124 if (cap->ftm.request_lci &&
2125 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI))
2126 return -ENOBUFS;
2127 if (cap->ftm.request_civicloc &&
2128 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC))
2129 return -ENOBUFS;
2130 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES,
2131 cap->ftm.preambles))
2132 return -ENOBUFS;
2133 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS,
2134 cap->ftm.bandwidths))
2135 return -ENOBUFS;
2136 if (cap->ftm.max_bursts_exponent >= 0 &&
2137 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT,
2138 cap->ftm.max_bursts_exponent))
2139 return -ENOBUFS;
2140 if (cap->ftm.max_ftms_per_burst &&
2141 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST,
2142 cap->ftm.max_ftms_per_burst))
2143 return -ENOBUFS;
efb5520d
AS		 2144 if (cap->ftm.trigger_based &&
2145 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED))
2146 return -ENOBUFS;
2147 if (cap->ftm.non_trigger_based &&
2148 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED))
2149 return -ENOBUFS;
9bb7e0f2
JB		 2150
2151 nla_nest_end(msg, ftm);
2152 return 0;
2153}
2154
2155static int nl80211_send_pmsr_capa(struct cfg80211_registered_device *rdev,
2156 struct sk_buff *msg)
2157{
2158 const struct cfg80211_pmsr_capabilities *cap = rdev->wiphy.pmsr_capa;
2159 struct nlattr *pmsr, *caps;
2160
2161 if (!cap)
2162 return 0;
2163
2164 /*
2165 * we don't need to clean up anything here since the caller
2166 * will genlmsg_cancel() if we fail
2167 */
2168
ae0be8de 2169 pmsr = nla_nest_start_noflag(msg, NL80211_ATTR_PEER_MEASUREMENTS);
9bb7e0f2
JB		 2170 if (!pmsr)
2171 return -ENOBUFS;
2172
2173 if (nla_put_u32(msg, NL80211_PMSR_ATTR_MAX_PEERS, cap->max_peers))
2174 return -ENOBUFS;
2175
2176 if (cap->report_ap_tsf &&
2177 nla_put_flag(msg, NL80211_PMSR_ATTR_REPORT_AP_TSF))
2178 return -ENOBUFS;
2179
2180 if (cap->randomize_mac_addr &&
2181 nla_put_flag(msg, NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR))
2182 return -ENOBUFS;
2183
ae0be8de 2184 caps = nla_nest_start_noflag(msg, NL80211_PMSR_ATTR_TYPE_CAPA);
9bb7e0f2
JB		 2185 if (!caps)
2186 return -ENOBUFS;
2187
2188 if (nl80211_send_pmsr_ftm_capa(cap, msg))
2189 return -ENOBUFS;
2190
2191 nla_nest_end(msg, caps);
2192 nla_nest_end(msg, pmsr);
2193
2194 return 0;
2195}
2196
d6039a34
VJ		 2197static int
2198nl80211_put_iftype_akm_suites(struct cfg80211_registered_device *rdev,
2199 struct sk_buff *msg)
2200{
2201 int i;
2202 struct nlattr *nested, *nested_akms;
2203 const struct wiphy_iftype_akm_suites *iftype_akms;
2204
2205 if (!rdev->wiphy.num_iftype_akm_suites ||
2206 !rdev->wiphy.iftype_akm_suites)
2207 return 0;
2208
2209 nested = nla_nest_start(msg, NL80211_ATTR_IFTYPE_AKM_SUITES);
2210 if (!nested)
2211 return -ENOBUFS;
2212
2213 for (i = 0; i < rdev->wiphy.num_iftype_akm_suites; i++) {
2214 nested_akms = nla_nest_start(msg, i + 1);
2215 if (!nested_akms)
2216 return -ENOBUFS;
2217
2218 iftype_akms = &rdev->wiphy.iftype_akm_suites[i];
2219
2220 if (nl80211_put_iftypes(msg, NL80211_IFTYPE_AKM_ATTR_IFTYPES,
2221 iftype_akms->iftypes_mask))
2222 return -ENOBUFS;
2223
2224 if (nla_put(msg, NL80211_IFTYPE_AKM_ATTR_SUITES,
2225 sizeof(u32) * iftype_akms->n_akm_suites,
2226 iftype_akms->akm_suites)) {
2227 return -ENOBUFS;
2228 }
2229 nla_nest_end(msg, nested_akms);
2230 }
2231
2232 nla_nest_end(msg, nested);
2233
2234 return 0;
2235}
2236
3710a8a6
JB		 2237static int
2238nl80211_put_tid_config_support(struct cfg80211_registered_device *rdev,
2239 struct sk_buff *msg)
2240{
2241 struct nlattr *supp;
2242
2243 if (!rdev->wiphy.tid_config_support.vif &&
2244 !rdev->wiphy.tid_config_support.peer)
2245 return 0;
2246
2247 supp = nla_nest_start(msg, NL80211_ATTR_TID_CONFIG);
2248 if (!supp)
2249 return -ENOSPC;
2250
2251 if (rdev->wiphy.tid_config_support.vif &&
2252 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_VIF_SUPP,
2253 rdev->wiphy.tid_config_support.vif,
2254 NL80211_TID_CONFIG_ATTR_PAD))
2255 goto fail;
2256
2257 if (rdev->wiphy.tid_config_support.peer &&
2258 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_PEER_SUPP,
2259 rdev->wiphy.tid_config_support.peer,
2260 NL80211_TID_CONFIG_ATTR_PAD))
2261 goto fail;
2262
6a21d16c
T		 2263 /* for now we just use the same value ... makes more sense */
2264 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_SHORT,
2265 rdev->wiphy.tid_config_support.max_retry))
2266 goto fail;
2267 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_LONG,
2268 rdev->wiphy.tid_config_support.max_retry))
2269 goto fail;
2270
3710a8a6
JB		 2271 nla_nest_end(msg, supp);
2272
2273 return 0;
2274fail:
2275 nla_nest_cancel(msg, supp);
2276 return -ENOBUFS;
2277}
2278
6bdb68ce
CH		 2279static int
2280nl80211_put_sar_specs(struct cfg80211_registered_device *rdev,
2281 struct sk_buff *msg)
2282{
2283 struct nlattr *sar_capa, *specs, *sub_freq_range;
2284 u8 num_freq_ranges;
2285 int i;
2286
2287 if (!rdev->wiphy.sar_capa)
2288 return 0;
2289
2290 num_freq_ranges = rdev->wiphy.sar_capa->num_freq_ranges;
2291
2292 sar_capa = nla_nest_start(msg, NL80211_ATTR_SAR_SPEC);
2293 if (!sar_capa)
2294 return -ENOSPC;
2295
2296 if (nla_put_u32(msg, NL80211_SAR_ATTR_TYPE, rdev->wiphy.sar_capa->type))
2297 goto fail;
2298
2299 specs = nla_nest_start(msg, NL80211_SAR_ATTR_SPECS);
2300 if (!specs)
2301 goto fail;
2302
2303 /* report supported freq_ranges */
2304 for (i = 0; i < num_freq_ranges; i++) {
2305 sub_freq_range = nla_nest_start(msg, i + 1);
2306 if (!sub_freq_range)
2307 goto fail;
2308
2309 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_START_FREQ,
2310 rdev->wiphy.sar_capa->freq_ranges[i].start_freq))
2311 goto fail;
2312
2313 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_END_FREQ,
2314 rdev->wiphy.sar_capa->freq_ranges[i].end_freq))
2315 goto fail;
2316
2317 nla_nest_end(msg, sub_freq_range);
2318 }
2319
2320 nla_nest_end(msg, specs);
2321 nla_nest_end(msg, sar_capa);
2322
2323 return 0;
2324fail:
2325 nla_nest_cancel(msg, sar_capa);
2326 return -ENOBUFS;
2327}
2328
dc1e3cb8
JC		 2329static int nl80211_put_mbssid_support(struct wiphy *wiphy, struct sk_buff *msg)
2330{
2331 struct nlattr *config;
2332
2333 if (!wiphy->mbssid_max_interfaces)
2334 return 0;
2335
2336 config = nla_nest_start(msg, NL80211_ATTR_MBSSID_CONFIG);
2337 if (!config)
2338 return -ENOBUFS;
2339
2340 if (nla_put_u8(msg, NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES,
2341 wiphy->mbssid_max_interfaces))
2342 goto fail;
2343
2344 if (wiphy->ema_max_profile_periodicity &&
2345 nla_put_u8(msg,
2346 NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY,
2347 wiphy->ema_max_profile_periodicity))
2348 goto fail;
2349
2350 nla_nest_end(msg, config);
2351 return 0;
2352
2353fail:
2354 nla_nest_cancel(msg, config);
2355 return -ENOBUFS;
2356}
2357
86e8cf98
JB		 2358struct nl80211_dump_wiphy_state {
2359 s64 filter_wiphy;
2360 long start;
019ae3a9 2361 long split_start, band_start, chan_start, capa_start;
86e8cf98
JB		 2362 bool split;
2363};
2364
1b8ec87a 2365static int nl80211_send_wiphy(struct cfg80211_registered_device *rdev,
3bb20556 2366 enum nl80211_commands cmd,
3713b4e3 2367 struct sk_buff *msg, u32 portid, u32 seq,
86e8cf98 2368 int flags, struct nl80211_dump_wiphy_state *state)
3713b4e3
JB		 2369{
2370 void *hdr;
2371 struct nlattr *nl_bands, *nl_band;
2372 struct nlattr *nl_freqs, *nl_freq;
2373 struct nlattr *nl_cmds;
57fbcce3 2374 enum nl80211_band band;
3713b4e3
JB		 2375 struct ieee80211_channel *chan;
2376 int i;
2377 const struct ieee80211_txrx_stypes *mgmt_stypes =
1b8ec87a 2378 rdev->wiphy.mgmt_stypes;
fe1abafd 2379 u32 features;
ee688b00 2380
3bb20556 2381 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
3713b4e3
JB		 2382 if (!hdr)
2383 return -ENOBUFS;
ee688b00 2384
86e8cf98
JB		 2385 if (WARN_ON(!state))
2386 return -EINVAL;
ee688b00 2387
1b8ec87a 2388 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3713b4e3 2389 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
1b8ec87a 2390 wiphy_name(&rdev->wiphy)) ||
3713b4e3
JB		 2391 nla_put_u32(msg, NL80211_ATTR_GENERATION,
2392 cfg80211_rdev_list_generation))
8fdc621d
JB		 2393 goto nla_put_failure;
2394
3bb20556
JB		 2395 if (cmd != NL80211_CMD_NEW_WIPHY)
2396 goto finish;
2397
86e8cf98 2398 switch (state->split_start) {
3713b4e3
JB		 2399 case 0:
2400 if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
1b8ec87a 2401 rdev->wiphy.retry_short) ||
3713b4e3 2402 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
1b8ec87a 2403 rdev->wiphy.retry_long) ||
3713b4e3 2404 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
1b8ec87a 2405 rdev->wiphy.frag_threshold) ||
3713b4e3 2406 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
1b8ec87a 2407 rdev->wiphy.rts_threshold) ||
3713b4e3 2408 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
1b8ec87a 2409 rdev->wiphy.coverage_class) ||
3713b4e3 2410 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
1b8ec87a 2411 rdev->wiphy.max_scan_ssids) ||
3713b4e3 2412 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
1b8ec87a 2413 rdev->wiphy.max_sched_scan_ssids) ||
3713b4e3 2414 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
1b8ec87a 2415 rdev->wiphy.max_scan_ie_len) ||
3713b4e3 2416 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
1b8ec87a 2417 rdev->wiphy.max_sched_scan_ie_len) ||
3713b4e3 2418 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
f8d504ca 2419 rdev->wiphy.max_match_sets))
9360ffd1 2420 goto nla_put_failure;
3713b4e3 2421
1b8ec87a 2422 if ((rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
3713b4e3 2423 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
aa430da4 2424 goto nla_put_failure;
1b8ec87a 2425 if ((rdev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
3713b4e3
JB		 2426 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
2427 goto nla_put_failure;
1b8ec87a 2428 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3713b4e3
JB		 2429 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
2430 goto nla_put_failure;
1b8ec87a 2431 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
3713b4e3
JB		 2432 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
2433 goto nla_put_failure;
1b8ec87a 2434 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
3713b4e3
JB		 2435 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
2436 goto nla_put_failure;
1b8ec87a 2437 if ((rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
3713b4e3 2438 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
9360ffd1 2439 goto nla_put_failure;
86e8cf98
JB		 2440 state->split_start++;
2441 if (state->split)
3713b4e3 2442 break;
7b506ff6 2443 fallthrough;
3713b4e3
JB		 2444 case 1:
2445 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
1b8ec87a
ZG		 2446 sizeof(u32) * rdev->wiphy.n_cipher_suites,
2447 rdev->wiphy.cipher_suites))
3713b4e3 2448 goto nla_put_failure;
4745fc09 2449
3713b4e3 2450 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
1b8ec87a 2451 rdev->wiphy.max_num_pmkids))
3713b4e3 2452 goto nla_put_failure;
b23aa676 2453
1b8ec87a 2454 if ((rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
3713b4e3 2455 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
9360ffd1 2456 goto nla_put_failure;
b23aa676 2457
3713b4e3 2458 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
1b8ec87a 2459 rdev->wiphy.available_antennas_tx) ||
3713b4e3 2460 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
1b8ec87a 2461 rdev->wiphy.available_antennas_rx))
9360ffd1 2462 goto nla_put_failure;
b23aa676 2463
1b8ec87a 2464 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
3713b4e3 2465 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
1b8ec87a 2466 rdev->wiphy.probe_resp_offload))
3713b4e3 2467 goto nla_put_failure;
8fdc621d 2468
1b8ec87a
ZG		 2469 if ((rdev->wiphy.available_antennas_tx ||
2470 rdev->wiphy.available_antennas_rx) &&
2471 rdev->ops->get_antenna) {
3713b4e3
JB		 2472 u32 tx_ant = 0, rx_ant = 0;
2473 int res;
7a087e74 2474
1b8ec87a 2475 res = rdev_get_antenna(rdev, &tx_ant, &rx_ant);
3713b4e3
JB		 2476 if (!res) {
2477 if (nla_put_u32(msg,
2478 NL80211_ATTR_WIPHY_ANTENNA_TX,
2479 tx_ant) ||
2480 nla_put_u32(msg,
2481 NL80211_ATTR_WIPHY_ANTENNA_RX,
2482 rx_ant))
2483 goto nla_put_failure;
2484 }
2485 }
a293911d 2486
86e8cf98
JB		 2487 state->split_start++;
2488 if (state->split)
3713b4e3 2489 break;
7b506ff6 2490 fallthrough;
3713b4e3
JB		 2491 case 2:
2492 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1b8ec87a 2493 rdev->wiphy.interface_modes))
3713b4e3 2494 goto nla_put_failure;
86e8cf98
JB		 2495 state->split_start++;
2496 if (state->split)
3713b4e3 2497 break;
7b506ff6 2498 fallthrough;
3713b4e3 2499 case 3:
ae0be8de
MK		 2500 nl_bands = nla_nest_start_noflag(msg,
2501 NL80211_ATTR_WIPHY_BANDS);
3713b4e3
JB		 2502 if (!nl_bands)
2503 goto nla_put_failure;
f7ca38df 2504
86e8cf98 2505 for (band = state->band_start;
0d059964
JB		 2506 band < (state->split ?
2507 NUM_NL80211_BANDS :
2508 NL80211_BAND_60GHZ + 1);
2509 band++) {
3713b4e3 2510 struct ieee80211_supported_band *sband;
2e161f78 2511
f8d504ca
JB		 2512 /* omit higher bands for ancient software */
2513 if (band > NL80211_BAND_5GHZ && !state->split)
2514 break;
2515
1b8ec87a 2516 sband = rdev->wiphy.bands[band];
2e161f78 2517
3713b4e3
JB		 2518 if (!sband)
2519 continue;
2520
ae0be8de 2521 nl_band = nla_nest_start_noflag(msg, band);
3713b4e3 2522 if (!nl_band)
2e161f78 2523 goto nla_put_failure;
3713b4e3 2524
86e8cf98 2525 switch (state->chan_start) {
3713b4e3 2526 case 0:
f8d504ca
JB		 2527 if (nl80211_send_band_rateinfo(msg, sband,
2528 state->split))
9360ffd1 2529 goto nla_put_failure;
86e8cf98
JB		 2530 state->chan_start++;
2531 if (state->split)
3713b4e3 2532 break;
7b506ff6 2533 fallthrough;
3713b4e3
JB		 2534 default:
2535 /* add frequencies */
ae0be8de
MK		 2536 nl_freqs = nla_nest_start_noflag(msg,
2537 NL80211_BAND_ATTR_FREQS);
3713b4e3
JB		 2538 if (!nl_freqs)
2539 goto nla_put_failure;
2540
86e8cf98 2541 for (i = state->chan_start - 1;
3713b4e3
JB		 2542 i < sband->n_channels;
2543 i++) {
ae0be8de
MK		 2544 nl_freq = nla_nest_start_noflag(msg,
2545 i);
3713b4e3
JB		 2546 if (!nl_freq)
2547 goto nla_put_failure;
2548
2549 chan = &sband->channels[i];
2550
86e8cf98 2551 if (nl80211_msg_put_channel(
50f32718 2552 msg, &rdev->wiphy, chan,
86e8cf98 2553 state->split))
3713b4e3
JB		 2554 goto nla_put_failure;
2555
2556 nla_nest_end(msg, nl_freq);
86e8cf98 2557 if (state->split)
3713b4e3
JB		 2558 break;
2559 }
2560 if (i < sband->n_channels)
86e8cf98 2561 state->chan_start = i + 2;
3713b4e3 2562 else
86e8cf98 2563 state->chan_start = 0;
3713b4e3
JB		 2564 nla_nest_end(msg, nl_freqs);
2565 }
2566
2567 nla_nest_end(msg, nl_band);
2568
86e8cf98 2569 if (state->split) {
3713b4e3 2570 /* start again here */
86e8cf98 2571 if (state->chan_start)
3713b4e3
JB		 2572 band--;
2573 break;
2e161f78 2574 }
2e161f78 2575 }
3713b4e3 2576 nla_nest_end(msg, nl_bands);
2e161f78 2577
57fbcce3 2578 if (band < NUM_NL80211_BANDS)
86e8cf98 2579 state->band_start = band + 1;
3713b4e3 2580 else
86e8cf98 2581 state->band_start = 0;
74b70a4e 2582
3713b4e3 2583 /* if bands & channels are done, continue outside */
86e8cf98
JB		 2584 if (state->band_start == 0 && state->chan_start == 0)
2585 state->split_start++;
2586 if (state->split)
3713b4e3 2587 break;
7b506ff6 2588 fallthrough;
3713b4e3 2589 case 4:
ae0be8de
MK		 2590 nl_cmds = nla_nest_start_noflag(msg,
2591 NL80211_ATTR_SUPPORTED_COMMANDS);
3713b4e3 2592 if (!nl_cmds)
2e161f78
JB		 2593 goto nla_put_failure;
2594
1794899e
JB		 2595 i = nl80211_add_commands_unsplit(rdev, msg);
2596 if (i < 0)
2597 goto nla_put_failure;
86e8cf98 2598 if (state->split) {
5de17984
AS		 2599 CMD(crit_proto_start, CRIT_PROTOCOL_START);
2600 CMD(crit_proto_stop, CRIT_PROTOCOL_STOP);
1b8ec87a 2601 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH)
16ef1fe2 2602 CMD(channel_switch, CHANNEL_SWITCH);
02df00eb 2603 CMD(set_qos_map, SET_QOS_MAP);
723e73ac
JB		 2604 if (rdev->wiphy.features &
2605 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION)
960d01ac 2606 CMD(add_tx_ts, ADD_TX_TS);
ce0ce13a 2607 CMD(set_multicast_to_unicast, SET_MULTICAST_TO_UNICAST);
088e8df8 2608 CMD(update_connect_params, UPDATE_CONNECT_PARAMS);
7010998c 2609 CMD(update_ft_ies, UPDATE_FT_IES);
6bdb68ce
CH		 2610 if (rdev->wiphy.sar_capa)
2611 CMD(set_sar_specs, SET_SAR_SPECS);
5de17984 2612 }
3713b4e3 2613#undef CMD
ff1b6e69 2614
3713b4e3 2615 nla_nest_end(msg, nl_cmds);
86e8cf98
JB		 2616 state->split_start++;
2617 if (state->split)
3713b4e3 2618 break;
7b506ff6 2619 fallthrough;
3713b4e3 2620 case 5:
1b8ec87a
ZG		 2621 if (rdev->ops->remain_on_channel &&
2622 (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
3713b4e3
JB		 2623 nla_put_u32(msg,
2624 NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1b8ec87a 2625 rdev->wiphy.max_remain_on_channel_duration))
3713b4e3
JB		 2626 goto nla_put_failure;
2627
1b8ec87a 2628 if ((rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
3713b4e3
JB		 2629 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
2630 goto nla_put_failure;
2631
86e8cf98
JB		 2632 state->split_start++;
2633 if (state->split)
3713b4e3 2634 break;
7b506ff6 2635 fallthrough;
3713b4e3
JB		 2636 case 6:
2637#ifdef CONFIG_PM
1b8ec87a 2638 if (nl80211_send_wowlan(msg, rdev, state->split))
3713b4e3 2639 goto nla_put_failure;
86e8cf98
JB		 2640 state->split_start++;
2641 if (state->split)
3713b4e3
JB		 2642 break;
2643#else
86e8cf98 2644 state->split_start++;
dfb89c56 2645#endif
7b506ff6 2646 fallthrough;
3713b4e3
JB		 2647 case 7:
2648 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1b8ec87a 2649 rdev->wiphy.software_iftypes))
3713b4e3 2650 goto nla_put_failure;
ff1b6e69 2651
1b8ec87a 2652 if (nl80211_put_iface_combinations(&rdev->wiphy, msg,
86e8cf98 2653 state->split))
3713b4e3 2654 goto nla_put_failure;
7527a782 2655
86e8cf98
JB		 2656 state->split_start++;
2657 if (state->split)
3713b4e3 2658 break;
7b506ff6 2659 fallthrough;
3713b4e3 2660 case 8:
1b8ec87a 2661 if ((rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
3713b4e3 2662 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1b8ec87a 2663 rdev->wiphy.ap_sme_capa))
3713b4e3 2664 goto nla_put_failure;
7527a782 2665
1b8ec87a 2666 features = rdev->wiphy.features;
fe1abafd
JB		 2667 /*
2668 * We can only add the per-channel limit information if the
2669 * dump is split, otherwise it makes it too big. Therefore
2670 * only advertise it in that case.
2671 */
86e8cf98 2672 if (state->split)
fe1abafd
JB		 2673 features |= NL80211_FEATURE_ADVERTISE_CHAN_LIMITS;
2674 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS, features))
3713b4e3 2675 goto nla_put_failure;
562a7480 2676
1b8ec87a 2677 if (rdev->wiphy.ht_capa_mod_mask &&
3713b4e3 2678 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1b8ec87a
ZG		 2679 sizeof(*rdev->wiphy.ht_capa_mod_mask),
2680 rdev->wiphy.ht_capa_mod_mask))
3713b4e3 2681 goto nla_put_failure;
1f074bd8 2682
1b8ec87a
ZG		 2683 if (rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
2684 rdev->wiphy.max_acl_mac_addrs &&
3713b4e3 2685 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1b8ec87a 2686 rdev->wiphy.max_acl_mac_addrs))
3713b4e3 2687 goto nla_put_failure;
7e7c8926 2688
3713b4e3
JB		 2689 /*
2690 * Any information below this point is only available to
2691 * applications that can deal with it being split. This
2692 * helps ensure that newly added capabilities don't break
2693 * older tools by overrunning their buffers.
2694 *
2695 * We still increment split_start so that in the split
2696 * case we'll continue with more data in the next round,
2697 * but break unconditionally so unsplit data stops here.
2698 */
ab10c22b
JB		 2699 if (state->split)
2700 state->split_start++;
2701 else
2702 state->split_start = 0;
3713b4e3
JB		 2703 break;
2704 case 9:
f8d504ca
JB		 2705 if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
2706 goto nla_put_failure;
2707
2708 if (nla_put_u32(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_PLANS,
2709 rdev->wiphy.max_sched_scan_plans) ||
2710 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_INTERVAL,
2711 rdev->wiphy.max_sched_scan_plan_interval) ||
2712 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_ITERATIONS,
2713 rdev->wiphy.max_sched_scan_plan_iterations))
2714 goto nla_put_failure;
2715
1b8ec87a 2716 if (rdev->wiphy.extended_capabilities &&
fe1abafd 2717 (nla_put(msg, NL80211_ATTR_EXT_CAPA,
1b8ec87a
ZG		 2718 rdev->wiphy.extended_capabilities_len,
2719 rdev->wiphy.extended_capabilities) ||
fe1abafd 2720 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
1b8ec87a
ZG		 2721 rdev->wiphy.extended_capabilities_len,
2722 rdev->wiphy.extended_capabilities_mask)))
fe1abafd 2723 goto nla_put_failure;
a50df0c4 2724
1b8ec87a 2725 if (rdev->wiphy.vht_capa_mod_mask &&
ee2aca34 2726 nla_put(msg, NL80211_ATTR_VHT_CAPABILITY_MASK,
1b8ec87a
ZG		 2727 sizeof(*rdev->wiphy.vht_capa_mod_mask),
2728 rdev->wiphy.vht_capa_mod_mask))
ee2aca34
JB		 2729 goto nla_put_failure;
2730
ae6fa4d5
DK		 2731 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
2732 rdev->wiphy.perm_addr))
2733 goto nla_put_failure;
2734
2735 if (!is_zero_ether_addr(rdev->wiphy.addr_mask) &&
2736 nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN,
2737 rdev->wiphy.addr_mask))
2738 goto nla_put_failure;
2739
2740 if (rdev->wiphy.n_addresses > 1) {
2741 void *attr;
2742
2743 attr = nla_nest_start(msg, NL80211_ATTR_MAC_ADDRS);
2744 if (!attr)
2745 goto nla_put_failure;
2746
2747 for (i = 0; i < rdev->wiphy.n_addresses; i++)
2748 if (nla_put(msg, i + 1, ETH_ALEN,
2749 rdev->wiphy.addresses[i].addr))
2750 goto nla_put_failure;
2751
2752 nla_nest_end(msg, attr);
2753 }
2754
be29b99a
AK		 2755 state->split_start++;
2756 break;
2757 case 10:
1b8ec87a 2758 if (nl80211_send_coalesce(msg, rdev))
be29b99a
AK		 2759 goto nla_put_failure;
2760
1b8ec87a 2761 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ) &&
01e0daa4
FF		 2762 (nla_put_flag(msg, NL80211_ATTR_SUPPORT_5_MHZ) ||
2763 nla_put_flag(msg, NL80211_ATTR_SUPPORT_10_MHZ)))
2764 goto nla_put_failure;
b43504cf 2765
1b8ec87a 2766 if (rdev->wiphy.max_ap_assoc_sta &&
b43504cf 2767 nla_put_u32(msg, NL80211_ATTR_MAX_AP_ASSOC_STA,
1b8ec87a 2768 rdev->wiphy.max_ap_assoc_sta))
b43504cf
JM		 2769 goto nla_put_failure;
2770
ad7e718c
JB		 2771 state->split_start++;
2772 break;
2773 case 11:
1b8ec87a 2774 if (rdev->wiphy.n_vendor_commands) {
567ffc35
JB		 2775 const struct nl80211_vendor_cmd_info *info;
2776 struct nlattr *nested;
2777
ae0be8de
MK		 2778 nested = nla_nest_start_noflag(msg,
2779 NL80211_ATTR_VENDOR_DATA);
567ffc35
JB		 2780 if (!nested)
2781 goto nla_put_failure;
2782
1b8ec87a
ZG		 2783 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
2784 info = &rdev->wiphy.vendor_commands[i].info;
567ffc35
JB		 2785 if (nla_put(msg, i + 1, sizeof(*info), info))
2786 goto nla_put_failure;
2787 }
2788 nla_nest_end(msg, nested);
2789 }
2790
1b8ec87a 2791 if (rdev->wiphy.n_vendor_events) {
567ffc35
JB		 2792 const struct nl80211_vendor_cmd_info *info;
2793 struct nlattr *nested;
ad7e718c 2794
ae0be8de
MK		 2795 nested = nla_nest_start_noflag(msg,
2796 NL80211_ATTR_VENDOR_EVENTS);
567ffc35 2797 if (!nested)
ad7e718c 2798 goto nla_put_failure;
567ffc35 2799
1b8ec87a
ZG		 2800 for (i = 0; i < rdev->wiphy.n_vendor_events; i++) {
2801 info = &rdev->wiphy.vendor_events[i];
567ffc35
JB		 2802 if (nla_put(msg, i + 1, sizeof(*info), info))
2803 goto nla_put_failure;
2804 }
2805 nla_nest_end(msg, nested);
2806 }
9a774c78
AO		 2807 state->split_start++;
2808 break;
2809 case 12:
2810 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH &&
2811 nla_put_u8(msg, NL80211_ATTR_MAX_CSA_COUNTERS,
2812 rdev->wiphy.max_num_csa_counters))
2813 goto nla_put_failure;
01e0daa4 2814
1bdd716c
AN		 2815 if (rdev->wiphy.regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
2816 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
2817 goto nla_put_failure;
2818
ca986ad9
AVS		 2819 if (rdev->wiphy.max_sched_scan_reqs &&
2820 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_MAX_REQS,
2821 rdev->wiphy.max_sched_scan_reqs))
2822 goto nla_put_failure;
2823
d75bb06b
GKS		 2824 if (nla_put(msg, NL80211_ATTR_EXT_FEATURES,
2825 sizeof(rdev->wiphy.ext_features),
2826 rdev->wiphy.ext_features))
2827 goto nla_put_failure;
2828
38de03d2
AS		 2829 if (rdev->wiphy.bss_select_support) {
2830 struct nlattr *nested;
2831 u32 bss_select_support = rdev->wiphy.bss_select_support;
2832
ae0be8de
MK		 2833 nested = nla_nest_start_noflag(msg,
2834 NL80211_ATTR_BSS_SELECT);
38de03d2
AS		 2835 if (!nested)
2836 goto nla_put_failure;
2837
2838 i = 0;
2839 while (bss_select_support) {
2840 if ((bss_select_support & 1) &&
2841 nla_put_flag(msg, i))
2842 goto nla_put_failure;
2843 i++;
2844 bss_select_support >>= 1;
2845 }
2846 nla_nest_end(msg, nested);
2847 }
2848
019ae3a9
KV		 2849 state->split_start++;
2850 break;
2851 case 13:
2852 if (rdev->wiphy.num_iftype_ext_capab &&
2853 rdev->wiphy.iftype_ext_capab) {
2854 struct nlattr *nested_ext_capab, *nested;
2855
ae0be8de
MK		 2856 nested = nla_nest_start_noflag(msg,
2857 NL80211_ATTR_IFTYPE_EXT_CAPA);
019ae3a9
KV		 2858 if (!nested)
2859 goto nla_put_failure;
2860
2861 for (i = state->capa_start;
2862 i < rdev->wiphy.num_iftype_ext_capab; i++) {
2863 const struct wiphy_iftype_ext_capab *capab;
2864
2865 capab = &rdev->wiphy.iftype_ext_capab[i];
2866
ae0be8de
MK		 2867 nested_ext_capab = nla_nest_start_noflag(msg,
2868 i);
019ae3a9
KV		 2869 if (!nested_ext_capab ||
2870 nla_put_u32(msg, NL80211_ATTR_IFTYPE,
2871 capab->iftype) ||
2872 nla_put(msg, NL80211_ATTR_EXT_CAPA,
2873 capab->extended_capabilities_len,
2874 capab->extended_capabilities) ||
2875 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
2876 capab->extended_capabilities_len,
2877 capab->extended_capabilities_mask))
2878 goto nla_put_failure;
2879
4e9c3af3
JB		 2880 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO &&
2881 (nla_put_u16(msg,
2882 NL80211_ATTR_EML_CAPABILITY,
2883 capab->eml_capabilities) ||
2884 nla_put_u16(msg,
2885 NL80211_ATTR_MLD_CAPA_AND_OPS,
2886 capab->mld_capa_and_ops)))
2887 goto nla_put_failure;
2888
019ae3a9
KV		 2889 nla_nest_end(msg, nested_ext_capab);
2890 if (state->split)
2891 break;
2892 }
2893 nla_nest_end(msg, nested);
2894 if (i < rdev->wiphy.num_iftype_ext_capab) {
2895 state->capa_start = i + 1;
2896 break;
2897 }
2898 }
2899
8585989d
LC		 2900 if (nla_put_u32(msg, NL80211_ATTR_BANDS,
2901 rdev->wiphy.nan_supported_bands))
2902 goto nla_put_failure;
2903
52539ca8
THJ		 2904 if (wiphy_ext_feature_isset(&rdev->wiphy,
2905 NL80211_EXT_FEATURE_TXQS)) {
2906 struct cfg80211_txq_stats txqstats = {};
2907 int res;
2908
2909 res = rdev_get_txq_stats(rdev, NULL, &txqstats);
2910 if (!res &&
2911 !nl80211_put_txq_stats(msg, &txqstats,
2912 NL80211_ATTR_TXQ_STATS))
2913 goto nla_put_failure;
2914
2915 if (nla_put_u32(msg, NL80211_ATTR_TXQ_LIMIT,
2916 rdev->wiphy.txq_limit))
2917 goto nla_put_failure;
2918 if (nla_put_u32(msg, NL80211_ATTR_TXQ_MEMORY_LIMIT,
2919 rdev->wiphy.txq_memory_limit))
2920 goto nla_put_failure;
2921 if (nla_put_u32(msg, NL80211_ATTR_TXQ_QUANTUM,
2922 rdev->wiphy.txq_quantum))
2923 goto nla_put_failure;
2924 }
2925
9bb7e0f2
JB		 2926 state->split_start++;
2927 break;
2928 case 14:
2929 if (nl80211_send_pmsr_capa(rdev, msg))
2930 goto nla_put_failure;
2931
ab4dfa20
VJ		 2932 state->split_start++;
2933 break;
2934 case 15:
2935 if (rdev->wiphy.akm_suites &&
2936 nla_put(msg, NL80211_ATTR_AKM_SUITES,
2937 sizeof(u32) * rdev->wiphy.n_akm_suites,
2938 rdev->wiphy.akm_suites))
2939 goto nla_put_failure;
2940
d6039a34
VJ		 2941 if (nl80211_put_iftype_akm_suites(rdev, msg))
2942 goto nla_put_failure;
2943
3710a8a6
JB		 2944 if (nl80211_put_tid_config_support(rdev, msg))
2945 goto nla_put_failure;
6bdb68ce
CH		 2946 state->split_start++;
2947 break;
2948 case 16:
2949 if (nl80211_put_sar_specs(rdev, msg))
2950 goto nla_put_failure;
3710a8a6 2951
dc1e3cb8
JC		 2952 if (nl80211_put_mbssid_support(&rdev->wiphy, msg))
2953 goto nla_put_failure;
2954
ecad3b0b
VJ		 2955 if (nla_put_u16(msg, NL80211_ATTR_MAX_NUM_AKM_SUITES,
2956 rdev->wiphy.max_num_akm_suites))
2957 goto nla_put_failure;
2958
fa2ca639
JB		 2959 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO)
2960 nla_put_flag(msg, NL80211_ATTR_MLO_SUPPORT);
2961
3713b4e3 2962 /* done */
86e8cf98 2963 state->split_start = 0;
3713b4e3
JB		 2964 break;
2965 }
3bb20556 2966 finish:
053c095a
JB		 2967 genlmsg_end(msg, hdr);
2968 return 0;
55682965
JB		 2969
2970 nla_put_failure:
bc3ed28c
TG		 2971 genlmsg_cancel(msg, hdr);
2972 return -EMSGSIZE;
55682965
JB		 2973}
2974
86e8cf98
JB		 2975static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
2976 struct netlink_callback *cb,
2977 struct nl80211_dump_wiphy_state *state)
2978{
50508d94
JB		 2979 struct nlattr **tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
2980 int ret;
2981
2982 if (!tb)
2983 return -ENOMEM;
2984
2985 ret = nlmsg_parse_deprecated(cb->nlh,
2986 GENL_HDRLEN + nl80211_fam.hdrsize,
2987 tb, nl80211_fam.maxattr,
2988 nl80211_policy, NULL);
86e8cf98 2989 /* ignore parse errors for backward compatibility */
50508d94
JB		 2990 if (ret) {
2991 ret = 0;
2992 goto out;
2993 }
86e8cf98
JB		 2994
2995 state->split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
2996 if (tb[NL80211_ATTR_WIPHY])
2997 state->filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
2998 if (tb[NL80211_ATTR_WDEV])
2999 state->filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
3000 if (tb[NL80211_ATTR_IFINDEX]) {
3001 struct net_device *netdev;
3002 struct cfg80211_registered_device *rdev;
3003 int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
3004
7f2b8562 3005 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
50508d94
JB		 3006 if (!netdev) {
3007 ret = -ENODEV;
3008 goto out;
3009 }
86e8cf98 3010 if (netdev->ieee80211_ptr) {
f26cbf40 3011 rdev = wiphy_to_rdev(
86e8cf98
JB		 3012 netdev->ieee80211_ptr->wiphy);
3013 state->filter_wiphy = rdev->wiphy_idx;
3014 }
86e8cf98
JB		 3015 }
3016
50508d94
JB		 3017 ret = 0;
3018out:
3019 kfree(tb);
3020 return ret;
86e8cf98
JB		 3021}
3022
55682965
JB		 3023static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
3024{
645e77de 3025 int idx = 0, ret;
86e8cf98 3026 struct nl80211_dump_wiphy_state *state = (void *)cb->args[0];
1b8ec87a 3027 struct cfg80211_registered_device *rdev;
3a5a423b 3028
5fe231e8 3029 rtnl_lock();
86e8cf98
JB		 3030 if (!state) {
3031 state = kzalloc(sizeof(*state), GFP_KERNEL);
57ed5cd6
JL		 3032 if (!state) {
3033 rtnl_unlock();
86e8cf98 3034 return -ENOMEM;
3713b4e3 3035 }
86e8cf98
JB		 3036 state->filter_wiphy = -1;
3037 ret = nl80211_dump_wiphy_parse(skb, cb, state);
3038 if (ret) {
3039 kfree(state);
3040 rtnl_unlock();
3041 return ret;
3713b4e3 3042 }
86e8cf98 3043 cb->args[0] = (long)state;
3713b4e3
JB		 3044 }
3045
1b8ec87a
ZG		 3046 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3047 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3048 continue;
86e8cf98 3049 if (++idx <= state->start)
55682965 3050 continue;
86e8cf98 3051 if (state->filter_wiphy != -1 &&
1b8ec87a 3052 state->filter_wiphy != rdev->wiphy_idx)
3713b4e3
JB		 3053 continue;
3054 /* attempt to fit multiple wiphy data chunks into the skb */
3055 do {
3bb20556
JB		 3056 ret = nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY,
3057 skb,
3713b4e3
JB		 3058 NETLINK_CB(cb->skb).portid,
3059 cb->nlh->nlmsg_seq,
86e8cf98 3060 NLM_F_MULTI, state);
3713b4e3
JB		 3061 if (ret < 0) {
3062 /*
3063 * If sending the wiphy data didn't fit (ENOBUFS
3064 * or EMSGSIZE returned), this SKB is still
3065 * empty (so it's not too big because another
3066 * wiphy dataset is already in the skb) and
3067 * we've not tried to adjust the dump allocation
3068 * yet ... then adjust the alloc size to be
3069 * bigger, and return 1 but with the empty skb.
3070 * This results in an empty message being RX'ed
3071 * in userspace, but that is ignored.
3072 *
3073 * We can then retry with the larger buffer.
3074 */
3075 if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
f12cb289 3076 !skb->len && !state->split &&
3713b4e3
JB		 3077 cb->min_dump_alloc < 4096) {
3078 cb->min_dump_alloc = 4096;
f12cb289 3079 state->split_start = 0;
d98cae64 3080 rtnl_unlock();
3713b4e3
JB		 3081 return 1;
3082 }
3083 idx--;
3084 break;
645e77de 3085 }
86e8cf98 3086 } while (state->split_start > 0);
3713b4e3 3087 break;
55682965 3088 }
5fe231e8 3089 rtnl_unlock();
55682965 3090
86e8cf98 3091 state->start = idx;
55682965
JB		 3092
3093 return skb->len;
3094}
3095
86e8cf98
JB		 3096static int nl80211_dump_wiphy_done(struct netlink_callback *cb)
3097{
3098 kfree((void *)cb->args[0]);
3099 return 0;
3100}
3101
55682965
JB		 3102static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
3103{
3104 struct sk_buff *msg;
1b8ec87a 3105 struct cfg80211_registered_device *rdev = info->user_ptr[0];
86e8cf98 3106 struct nl80211_dump_wiphy_state state = {};
55682965 3107
645e77de 3108 msg = nlmsg_new(4096, GFP_KERNEL);
55682965 3109 if (!msg)
4c476991 3110 return -ENOMEM;
55682965 3111
3bb20556
JB		 3112 if (nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY, msg,
3113 info->snd_portid, info->snd_seq, 0,
86e8cf98 3114 &state) < 0) {
4c476991
JB		 3115 nlmsg_free(msg);
3116 return -ENOBUFS;
3117 }
55682965 3118
134e6375 3119 return genlmsg_reply(msg, info);
55682965
JB		 3120}
3121
31888487
JM		 3122static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
3123 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
3124 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
3125 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
3126 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
3127 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
3128};
3129
3130static int parse_txq_params(struct nlattr *tb[],
3131 struct ieee80211_txq_params *txq_params)
3132{
259d8c1e
DW		 3133 u8 ac;
3134
a3304b0a 3135 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 3136 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
3137 !tb[NL80211_TXQ_ATTR_AIFS])
3138 return -EINVAL;
3139
259d8c1e 3140 ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 3141 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
3142 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
3143 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
3144 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
3145
259d8c1e 3146 if (ac >= NL80211_NUM_ACS)
a3304b0a 3147 return -EINVAL;
259d8c1e 3148 txq_params->ac = array_index_nospec(ac, NL80211_NUM_ACS);
31888487
JM		 3149 return 0;
3150}
3151
f444de05
JB		 3152static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
3153{
3154 /*
e7e0517c
JB		 3155 * You can only set the channel explicitly for some interfaces,
3156 * most have their channel managed via their respective
cc1d2806
JB		 3157 * "establish a connection" command (connect, join, ...)
3158 *
3159 * For AP/GO and mesh mode, the channel can be set with the
3160 * channel userspace API, but is only stored and passed to the
3161 * low-level driver when the AP starts or the mesh is joined.
3162 * This is for backward compatibility, userspace can also give
3163 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 3164 *
3165 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 3166 * whatever else is going on, so they have their own special
3167 * operation to set the monitor channel if possible.
f444de05
JB		 3168 */
3169 return !wdev ||
3170 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 3171 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 3172 wdev->iftype == NL80211_IFTYPE_MONITOR ||
3173 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 3174}
3175
9bb7e0f2
JB		 3176int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
3177 struct genl_info *info,
3178 struct cfg80211_chan_def *chandef)
683b6d3b 3179{
49f9cf0e
JB		 3180 struct netlink_ext_ack *extack = info->extack;
3181 struct nlattr **attrs = info->attrs;
dbeca2ea 3182 u32 control_freq;
683b6d3b 3183
49f9cf0e 3184 if (!attrs[NL80211_ATTR_WIPHY_FREQ])
683b6d3b
JB		 3185 return -EINVAL;
3186
942ba88b
TP		 3187 control_freq = MHZ_TO_KHZ(
3188 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3189 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
3190 control_freq +=
3191 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
683b6d3b 3192
f43e5210 3193 memset(chandef, 0, sizeof(*chandef));
942ba88b 3194 chandef->chan = ieee80211_get_channel_khz(&rdev->wiphy, control_freq);
3d9d1d66 3195 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
942ba88b
TP		 3196 chandef->center_freq1 = KHZ_TO_MHZ(control_freq);
3197 chandef->freq1_offset = control_freq % 1000;
3d9d1d66 3198 chandef->center_freq2 = 0;
683b6d3b
JB		 3199
3200 /* Primary channel not allowed */
49f9cf0e
JB		 3201 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED) {
3202 NL_SET_ERR_MSG_ATTR(extack, attrs[NL80211_ATTR_WIPHY_FREQ],
3203 "Channel is disabled");
683b6d3b 3204 return -EINVAL;
49f9cf0e 3205 }
683b6d3b 3206
49f9cf0e 3207 if (attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
3d9d1d66
JB		 3208 enum nl80211_channel_type chantype;
3209
49f9cf0e 3210 chantype = nla_get_u32(attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
3d9d1d66
JB		 3211
3212 switch (chantype) {
3213 case NL80211_CHAN_NO_HT:
3214 case NL80211_CHAN_HT20:
3215 case NL80211_CHAN_HT40PLUS:
3216 case NL80211_CHAN_HT40MINUS:
3217 cfg80211_chandef_create(chandef, chandef->chan,
3218 chantype);
ffa4629e 3219 /* user input for center_freq is incorrect */
49f9cf0e
JB		 3220 if (attrs[NL80211_ATTR_CENTER_FREQ1] &&
3221 chandef->center_freq1 != nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1])) {
3222 NL_SET_ERR_MSG_ATTR(extack,
3223 attrs[NL80211_ATTR_CENTER_FREQ1],
3224 "bad center frequency 1");
ffa4629e 3225 return -EINVAL;
49f9cf0e 3226 }
ffa4629e 3227 /* center_freq2 must be zero */
49f9cf0e
JB		 3228 if (attrs[NL80211_ATTR_CENTER_FREQ2] &&
3229 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2])) {
3230 NL_SET_ERR_MSG_ATTR(extack,
3231 attrs[NL80211_ATTR_CENTER_FREQ2],
3232 "center frequency 2 can't be used");
ffa4629e 3233 return -EINVAL;
49f9cf0e 3234 }
3d9d1d66
JB		 3235 break;
3236 default:
49f9cf0e
JB		 3237 NL_SET_ERR_MSG_ATTR(extack,
3238 attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
3239 "invalid channel type");
3d9d1d66
JB		 3240 return -EINVAL;
3241 }
49f9cf0e 3242 } else if (attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
3d9d1d66 3243 chandef->width =
49f9cf0e 3244 nla_get_u32(attrs[NL80211_ATTR_CHANNEL_WIDTH]);
5d087aa7
KF		 3245 if (chandef->chan->band == NL80211_BAND_S1GHZ) {
3246 /* User input error for channel width doesn't match channel */
3247 if (chandef->width != ieee80211_s1g_channel_width(chandef->chan)) {
3248 NL_SET_ERR_MSG_ATTR(extack,
3249 attrs[NL80211_ATTR_CHANNEL_WIDTH],
3250 "bad channel width");
3251 return -EINVAL;
3252 }
3253 }
942ba88b 3254 if (attrs[NL80211_ATTR_CENTER_FREQ1]) {
3d9d1d66 3255 chandef->center_freq1 =
49f9cf0e 3256 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1]);
942ba88b
TP		 3257 if (attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET])
3258 chandef->freq1_offset = nla_get_u32(
3259 attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET]);
3260 else
3261 chandef->freq1_offset = 0;
3262 }
49f9cf0e 3263 if (attrs[NL80211_ATTR_CENTER_FREQ2])
3d9d1d66 3264 chandef->center_freq2 =
49f9cf0e 3265 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2]);
3d9d1d66
JB		 3266 }
3267
2a38075c
AAL		 3268 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
3269 chandef->edmg.channels =
3270 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
3271
3272 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
3273 chandef->edmg.bw_config =
3274 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
3275 } else {
3276 chandef->edmg.bw_config = 0;
3277 chandef->edmg.channels = 0;
3278 }
3279
49f9cf0e
JB		 3280 if (!cfg80211_chandef_valid(chandef)) {
3281 NL_SET_ERR_MSG(extack, "invalid channel definition");
3d9d1d66 3282 return -EINVAL;
49f9cf0e 3283 }
3d9d1d66 3284
9f5e8f6e 3285 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
49f9cf0e
JB		 3286 IEEE80211_CHAN_DISABLED)) {
3287 NL_SET_ERR_MSG(extack, "(extension) channel is disabled");
3d9d1d66 3288 return -EINVAL;
49f9cf0e 3289 }
3d9d1d66 3290
2f301ab2
SW		 3291 if ((chandef->width == NL80211_CHAN_WIDTH_5 ||
3292 chandef->width == NL80211_CHAN_WIDTH_10) &&
49f9cf0e
JB		 3293 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ)) {
3294 NL_SET_ERR_MSG(extack, "5/10 MHz not supported");
2f301ab2 3295 return -EINVAL;
49f9cf0e 3296 }
2f301ab2 3297
683b6d3b
JB		 3298 return 0;
3299}
3300
f444de05 3301static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
e16821bc 3302 struct net_device *dev,
7b0a0e3c
JB		 3303 struct genl_info *info,
3304 int _link_id)
f444de05 3305{
683b6d3b 3306 struct cfg80211_chan_def chandef;
f444de05 3307 int result;
e8c9bd5b 3308 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
e16821bc 3309 struct wireless_dev *wdev = NULL;
7b0a0e3c 3310 int link_id = _link_id;
e8c9bd5b 3311
e16821bc
JM		 3312 if (dev)
3313 wdev = dev->ieee80211_ptr;
f444de05
JB		 3314 if (!nl80211_can_set_dev_channel(wdev))
3315 return -EOPNOTSUPP;
e16821bc
JM		 3316 if (wdev)
3317 iftype = wdev->iftype;
f444de05 3318
7b0a0e3c
JB		 3319 if (link_id < 0) {
3320 if (wdev && wdev->valid_links)
3321 return -EINVAL;
3322 link_id = 0;
3323 }
3324
683b6d3b
JB		 3325 result = nl80211_parse_chandef(rdev, info, &chandef);
3326 if (result)
3327 return result;
f444de05 3328
e8c9bd5b 3329 switch (iftype) {
aa430da4
JB		 3330 case NL80211_IFTYPE_AP:
3331 case NL80211_IFTYPE_P2P_GO:
923b352f 3332 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
7b0a0e3c
JB		 3333 iftype))
3334 return -EINVAL;
3335 if (wdev->links[link_id].ap.beacon_interval) {
3336 struct ieee80211_channel *cur_chan;
3337
e16821bc
JM		 3338 if (!dev || !rdev->ops->set_ap_chanwidth ||
3339 !(rdev->wiphy.features &
7b0a0e3c
JB		 3340 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE))
3341 return -EBUSY;
e16821bc
JM		 3342
3343 /* Only allow dynamic channel width changes */
7b0a0e3c
JB		 3344 cur_chan = wdev->links[link_id].ap.chandef.chan;
3345 if (chandef.chan != cur_chan)
3346 return -EBUSY;
3347
3348 result = rdev_set_ap_chanwidth(rdev, dev, link_id,
3349 &chandef);
e16821bc 3350 if (result)
7b0a0e3c
JB		 3351 return result;
3352 wdev->links[link_id].ap.chandef = chandef;
3353 } else {
3354 wdev->u.ap.preset_chandef = chandef;
e16821bc 3355 }
7b0a0e3c 3356 return 0;
cc1d2806 3357 case NL80211_IFTYPE_MESH_POINT:
7b0a0e3c 3358 return cfg80211_set_mesh_channel(rdev, wdev, &chandef);
e8c9bd5b 3359 case NL80211_IFTYPE_MONITOR:
7b0a0e3c 3360 return cfg80211_set_monitor_channel(rdev, &chandef);
aa430da4 3361 default:
7b0a0e3c 3362 break;
f444de05 3363 }
f444de05 3364
7b0a0e3c 3365 return -EINVAL;
f444de05
JB		 3366}
3367
3368static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
3369{
4c476991 3370 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 3371 int link_id = nl80211_link_id_or_invalid(info->attrs);
4c476991 3372 struct net_device *netdev = info->user_ptr[1];
4e2f3d67
JB		 3373 int ret;
3374
3375 wdev_lock(netdev->ieee80211_ptr);
3376 ret = __nl80211_set_channel(rdev, netdev, info, link_id);
3377 wdev_unlock(netdev->ieee80211_ptr);
f444de05 3378
4e2f3d67 3379 return ret;
f444de05
JB		 3380}
3381
55682965
JB		 3382static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
3383{
a05829a7 3384 struct cfg80211_registered_device *rdev = NULL;
f444de05
JB		 3385 struct net_device *netdev = NULL;
3386 struct wireless_dev *wdev;
a1e567c8 3387 int result = 0, rem_txq_params = 0;
31888487 3388 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 3389 u32 changed;
3390 u8 retry_short = 0, retry_long = 0;
3391 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 3392 u8 coverage_class = 0;
52539ca8 3393 u32 txq_limit = 0, txq_memory_limit = 0, txq_quantum = 0;
55682965 3394
a05829a7 3395 rtnl_lock();
f444de05
JB		 3396 /*
3397 * Try to find the wiphy and netdev. Normally this
3398 * function shouldn't need the netdev, but this is
3399 * done for backward compatibility -- previously
3400 * setting the channel was done per wiphy, but now
3401 * it is per netdev. Previous userland like hostapd
3402 * also passed a netdev to set_wiphy, so that it is
3403 * possible to let that go to the right netdev!
3404 */
4bbf4d56 3405
f444de05
JB		 3406 if (info->attrs[NL80211_ATTR_IFINDEX]) {
3407 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
3408
7f2b8562 3409 netdev = __dev_get_by_index(genl_info_net(info), ifindex);
5fe231e8 3410 if (netdev && netdev->ieee80211_ptr)
f26cbf40 3411 rdev = wiphy_to_rdev(netdev->ieee80211_ptr->wiphy);
5fe231e8 3412 else
f444de05 3413 netdev = NULL;
4bbf4d56
JB		 3414 }
3415
f444de05 3416 if (!netdev) {
878d9ec7
JB		 3417 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
3418 info->attrs);
a05829a7
JB		 3419 if (IS_ERR(rdev)) {
3420 rtnl_unlock();
4c476991 3421 return PTR_ERR(rdev);
a05829a7 3422 }
f444de05
JB		 3423 wdev = NULL;
3424 netdev = NULL;
3425 result = 0;
71fe96bf 3426 } else
f444de05 3427 wdev = netdev->ieee80211_ptr;
f444de05 3428
a05829a7 3429 wiphy_lock(&rdev->wiphy);
a05829a7 3430
f444de05
JB		 3431 /*
3432 * end workaround code, by now the rdev is available
3433 * and locked, and wdev may or may not be NULL.
3434 */
4bbf4d56
JB		 3435
3436 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 3437 result = cfg80211_dev_rename(
3438 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
0391a45c 3439 rtnl_unlock();
4bbf4d56 3440
4bbf4d56 3441 if (result)
a05829a7 3442 goto out;
31888487
JM		 3443
3444 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
3445 struct ieee80211_txq_params txq_params;
3446 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
3447
a05829a7
JB		 3448 if (!rdev->ops->set_txq_params) {
3449 result = -EOPNOTSUPP;
3450 goto out;
3451 }
31888487 3452
a05829a7
JB		 3453 if (!netdev) {
3454 result = -EINVAL;
3455 goto out;
3456 }
f70f01c2 3457
133a3ff2 3458 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
a05829a7
JB		 3459 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
3460 result = -EINVAL;
3461 goto out;
3462 }
133a3ff2 3463
a05829a7
JB		 3464 if (!netif_running(netdev)) {
3465 result = -ENETDOWN;
3466 goto out;
3467 }
2b5f8b0b 3468
31888487
JM		 3469 nla_for_each_nested(nl_txq_params,
3470 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
3471 rem_txq_params) {
8cb08174
JB		 3472 result = nla_parse_nested_deprecated(tb,
3473 NL80211_TXQ_ATTR_MAX,
3474 nl_txq_params,
3475 txq_params_policy,
3476 info->extack);
ae811e21 3477 if (result)
a05829a7 3478 goto out;
31888487
JM		 3479 result = parse_txq_params(tb, &txq_params);
3480 if (result)
a05829a7 3481 goto out;
31888487 3482
9d2bb84d
ST		 3483 txq_params.link_id =
3484 nl80211_link_id_or_invalid(info->attrs);
3485
3486 wdev_lock(netdev->ieee80211_ptr);
3487 if (txq_params.link_id >= 0 &&
3488 !(netdev->ieee80211_ptr->valid_links &
3489 BIT(txq_params.link_id)))
3490 result = -ENOLINK;
3491 else if (txq_params.link_id >= 0 &&
3492 !netdev->ieee80211_ptr->valid_links)
3493 result = -EINVAL;
3494 else
3495 result = rdev_set_txq_params(rdev, netdev,
3496 &txq_params);
3497 wdev_unlock(netdev->ieee80211_ptr);
31888487 3498 if (result)
a05829a7 3499 goto out;
31888487
JM		 3500 }
3501 }
55682965 3502
72bdcf34 3503 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
69c3f2d3
IP		 3504 int link_id = nl80211_link_id_or_invalid(info->attrs);
3505
4e2f3d67
JB		 3506 if (wdev) {
3507 wdev_lock(wdev);
3508 result = __nl80211_set_channel(
3509 rdev,
3510 nl80211_can_set_dev_channel(wdev) ? netdev : NULL,
69c3f2d3 3511 info, link_id);
4e2f3d67
JB		 3512 wdev_unlock(wdev);
3513 } else {
69c3f2d3 3514 result = __nl80211_set_channel(rdev, netdev, info, link_id);
4e2f3d67 3515 }
69c3f2d3 3516
72bdcf34 3517 if (result)
a05829a7 3518 goto out;
72bdcf34
JM		 3519 }
3520
98d2ff8b 3521 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 3522 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 3523 enum nl80211_tx_power_setting type;
3524 int idx, mbm = 0;
3525
c8442118
JB		 3526 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
3527 txp_wdev = NULL;
3528
a05829a7
JB		 3529 if (!rdev->ops->set_tx_power) {
3530 result = -EOPNOTSUPP;
3531 goto out;
3532 }
98d2ff8b
JO		 3533
3534 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
3535 type = nla_get_u32(info->attrs[idx]);
3536
3537 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
a05829a7
JB		 3538 (type != NL80211_TX_POWER_AUTOMATIC)) {
3539 result = -EINVAL;
3540 goto out;
3541 }
98d2ff8b
JO		 3542
3543 if (type != NL80211_TX_POWER_AUTOMATIC) {
3544 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
3545 mbm = nla_get_u32(info->attrs[idx]);
3546 }
3547
c8442118 3548 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b 3549 if (result)
a05829a7 3550 goto out;
98d2ff8b
JO		 3551 }
3552
afe0cbf8
BR		 3553 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
3554 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
3555 u32 tx_ant, rx_ant;
7a087e74 3556
7f531e03
BR		 3557 if ((!rdev->wiphy.available_antennas_tx &&
3558 !rdev->wiphy.available_antennas_rx) ||
a05829a7
JB		 3559 !rdev->ops->set_antenna) {
3560 result = -EOPNOTSUPP;
3561 goto out;
3562 }
afe0cbf8
BR		 3563
3564 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
3565 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
3566
a7ffac95 3567 /* reject antenna configurations which don't match the
7f531e03
BR		 3568 * available antenna masks, except for the "all" mask */
3569 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
a05829a7
JB		 3570 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
3571 result = -EINVAL;
3572 goto out;
3573 }
a7ffac95 3574
7f531e03
BR		 3575 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
3576 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 3577
e35e4d28 3578 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8 3579 if (result)
a05829a7 3580 goto out;
afe0cbf8
BR		 3581 }
3582
b9a5f8ca
JM		 3583 changed = 0;
3584
3585 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
3586 retry_short = nla_get_u8(
3587 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
7f2b8562 3588
b9a5f8ca
JM		 3589 changed |= WIPHY_PARAM_RETRY_SHORT;
3590 }
3591
3592 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
3593 retry_long = nla_get_u8(
3594 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
7f2b8562 3595
b9a5f8ca
JM		 3596 changed |= WIPHY_PARAM_RETRY_LONG;
3597 }
3598
3599 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
3600 frag_threshold = nla_get_u32(
3601 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
a05829a7
JB		 3602 if (frag_threshold < 256) {
3603 result = -EINVAL;
3604 goto out;
3605 }
7f2b8562 3606
b9a5f8ca
JM		 3607 if (frag_threshold != (u32) -1) {
3608 /*
3609 * Fragments (apart from the last one) are required to
3610 * have even length. Make the fragmentation code
3611 * simpler by stripping LSB should someone try to use
3612 * odd threshold value.
3613 */
3614 frag_threshold &= ~0x1;
3615 }
3616 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
3617 }
3618
3619 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
3620 rts_threshold = nla_get_u32(
3621 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
3622 changed |= WIPHY_PARAM_RTS_THRESHOLD;
3623 }
3624
81077e82 3625 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
a05829a7
JB		 3626 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
3627 result = -EINVAL;
3628 goto out;
3629 }
3057dbfd 3630
81077e82
LT		 3631 coverage_class = nla_get_u8(
3632 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
3633 changed |= WIPHY_PARAM_COVERAGE_CLASS;
3634 }
3635
3057dbfd 3636 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
a05829a7
JB		 3637 if (!(rdev->wiphy.features & NL80211_FEATURE_ACKTO_ESTIMATION)) {
3638 result = -EOPNOTSUPP;
3639 goto out;
3640 }
3057dbfd
LB		 3641
3642 changed |= WIPHY_PARAM_DYN_ACK;
81077e82
LT		 3643 }
3644
52539ca8
THJ		 3645 if (info->attrs[NL80211_ATTR_TXQ_LIMIT]) {
3646 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3647 NL80211_EXT_FEATURE_TXQS)) {
3648 result = -EOPNOTSUPP;
3649 goto out;
3650 }
52539ca8
THJ		 3651 txq_limit = nla_get_u32(
3652 info->attrs[NL80211_ATTR_TXQ_LIMIT]);
3653 changed |= WIPHY_PARAM_TXQ_LIMIT;
3654 }
3655
3656 if (info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]) {
3657 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3658 NL80211_EXT_FEATURE_TXQS)) {
3659 result = -EOPNOTSUPP;
3660 goto out;
3661 }
52539ca8
THJ		 3662 txq_memory_limit = nla_get_u32(
3663 info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]);
3664 changed |= WIPHY_PARAM_TXQ_MEMORY_LIMIT;
3665 }
3666
3667 if (info->attrs[NL80211_ATTR_TXQ_QUANTUM]) {
3668 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3669 NL80211_EXT_FEATURE_TXQS)) {
3670 result = -EOPNOTSUPP;
3671 goto out;
3672 }
52539ca8
THJ		 3673 txq_quantum = nla_get_u32(
3674 info->attrs[NL80211_ATTR_TXQ_QUANTUM]);
3675 changed |= WIPHY_PARAM_TXQ_QUANTUM;
3676 }
3677
b9a5f8ca
JM		 3678 if (changed) {
3679 u8 old_retry_short, old_retry_long;
3680 u32 old_frag_threshold, old_rts_threshold;
81077e82 3681 u8 old_coverage_class;
52539ca8 3682 u32 old_txq_limit, old_txq_memory_limit, old_txq_quantum;
b9a5f8ca 3683
a05829a7
JB		 3684 if (!rdev->ops->set_wiphy_params) {
3685 result = -EOPNOTSUPP;
3686 goto out;
3687 }
b9a5f8ca
JM		 3688
3689 old_retry_short = rdev->wiphy.retry_short;
3690 old_retry_long = rdev->wiphy.retry_long;
3691 old_frag_threshold = rdev->wiphy.frag_threshold;
3692 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 3693 old_coverage_class = rdev->wiphy.coverage_class;
52539ca8
THJ		 3694 old_txq_limit = rdev->wiphy.txq_limit;
3695 old_txq_memory_limit = rdev->wiphy.txq_memory_limit;
3696 old_txq_quantum = rdev->wiphy.txq_quantum;
b9a5f8ca
JM		 3697
3698 if (changed & WIPHY_PARAM_RETRY_SHORT)
3699 rdev->wiphy.retry_short = retry_short;
3700 if (changed & WIPHY_PARAM_RETRY_LONG)
3701 rdev->wiphy.retry_long = retry_long;
3702 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
3703 rdev->wiphy.frag_threshold = frag_threshold;
3704 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
3705 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 3706 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
3707 rdev->wiphy.coverage_class = coverage_class;
52539ca8
THJ		 3708 if (changed & WIPHY_PARAM_TXQ_LIMIT)
3709 rdev->wiphy.txq_limit = txq_limit;
3710 if (changed & WIPHY_PARAM_TXQ_MEMORY_LIMIT)
3711 rdev->wiphy.txq_memory_limit = txq_memory_limit;
3712 if (changed & WIPHY_PARAM_TXQ_QUANTUM)
3713 rdev->wiphy.txq_quantum = txq_quantum;
b9a5f8ca 3714
e35e4d28 3715 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 3716 if (result) {
3717 rdev->wiphy.retry_short = old_retry_short;
3718 rdev->wiphy.retry_long = old_retry_long;
3719 rdev->wiphy.frag_threshold = old_frag_threshold;
3720 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 3721 rdev->wiphy.coverage_class = old_coverage_class;
52539ca8
THJ		 3722 rdev->wiphy.txq_limit = old_txq_limit;
3723 rdev->wiphy.txq_memory_limit = old_txq_memory_limit;
3724 rdev->wiphy.txq_quantum = old_txq_quantum;
a05829a7 3725 goto out;
b9a5f8ca
JM		 3726 }
3727 }
a05829a7
JB		 3728
3729 result = 0;
3730
3731out:
3732 wiphy_unlock(&rdev->wiphy);
3733 return result;
55682965
JB		 3734}
3735
683b6d3b 3736static int nl80211_send_chandef(struct sk_buff *msg,
d2859df5 3737 const struct cfg80211_chan_def *chandef)
683b6d3b 3738{
601555cd
JB		 3739 if (WARN_ON(!cfg80211_chandef_valid(chandef)))
3740 return -EINVAL;
3d9d1d66 3741
683b6d3b
JB		 3742 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
3743 chandef->chan->center_freq))
3744 return -ENOBUFS;
942ba88b
TP		 3745 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
3746 chandef->chan->freq_offset))
3747 return -ENOBUFS;
3d9d1d66
JB		 3748 switch (chandef->width) {
3749 case NL80211_CHAN_WIDTH_20_NOHT:
3750 case NL80211_CHAN_WIDTH_20:
3751 case NL80211_CHAN_WIDTH_40:
3752 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
3753 cfg80211_get_chandef_type(chandef)))
3754 return -ENOBUFS;
3755 break;
3756 default:
3757 break;
3758 }
3759 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
3760 return -ENOBUFS;
3761 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
3762 return -ENOBUFS;
3763 if (chandef->center_freq2 &&
3764 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
683b6d3b
JB		 3765 return -ENOBUFS;
3766 return 0;
3767}
3768
15e47304 3769static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 3770 struct cfg80211_registered_device *rdev,
3d1a5bbf
AZ		 3771 struct wireless_dev *wdev,
3772 enum nl80211_commands cmd)
55682965 3773{
72fb2abc 3774 struct net_device *dev = wdev->netdev;
55682965
JB		 3775 void *hdr;
3776
3d1a5bbf
AZ		 3777 WARN_ON(cmd != NL80211_CMD_NEW_INTERFACE &&
3778 cmd != NL80211_CMD_DEL_INTERFACE &&
3779 cmd != NL80211_CMD_SET_INTERFACE);
8f894be2
TB		 3780
3781 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
55682965
JB		 3782 if (!hdr)
3783 return -1;
3784
72fb2abc
JB		 3785 if (dev &&
3786 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 3787 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 3788 goto nla_put_failure;
3789
3790 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3791 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
2dad624e
ND		 3792 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
3793 NL80211_ATTR_PAD) ||
98104fde 3794 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 3795 nla_put_u32(msg, NL80211_ATTR_GENERATION,
3796 rdev->devlist_generation ^
446faa15
AQ		 3797 (cfg80211_rdev_list_generation << 2)) ||
3798 nla_put_u8(msg, NL80211_ATTR_4ADDR, wdev->use_4addr))
9360ffd1 3799 goto nla_put_failure;
f5ea9120 3800
7b0a0e3c 3801 if (rdev->ops->get_channel && !wdev->valid_links) {
f43e5210 3802 struct cfg80211_chan_def chandef = {};
7b0a0e3c 3803 int ret;
683b6d3b 3804
7b0a0e3c
JB		 3805 ret = rdev_get_channel(rdev, wdev, 0, &chandef);
3806 if (ret == 0 && nl80211_send_chandef(msg, &chandef))
3807 goto nla_put_failure;
d91df0e3
PF		 3808 }
3809
d55d0d59
RM		 3810 if (rdev->ops->get_tx_power) {
3811 int dbm, ret;
3812
3813 ret = rdev_get_tx_power(rdev, wdev, &dbm);
3814 if (ret == 0 &&
3815 nla_put_u32(msg, NL80211_ATTR_WIPHY_TX_POWER_LEVEL,
3816 DBM_TO_MBM(dbm)))
3817 goto nla_put_failure;
3818 }
3819
44905265
JB		 3820 wdev_lock(wdev);
3821 switch (wdev->iftype) {
3822 case NL80211_IFTYPE_AP:
a75971bc 3823 case NL80211_IFTYPE_P2P_GO:
7b0a0e3c
JB		 3824 if (wdev->u.ap.ssid_len &&
3825 nla_put(msg, NL80211_ATTR_SSID, wdev->u.ap.ssid_len,
3826 wdev->u.ap.ssid))
4564b187 3827 goto nla_put_failure_locked;
44905265
JB		 3828 break;
3829 case NL80211_IFTYPE_STATION:
3830 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c
JB		 3831 if (wdev->u.client.ssid_len &&
3832 nla_put(msg, NL80211_ATTR_SSID, wdev->u.client.ssid_len,
3833 wdev->u.client.ssid))
3834 goto nla_put_failure_locked;
3835 break;
3836 case NL80211_IFTYPE_ADHOC:
3837 if (wdev->u.ibss.ssid_len &&
3838 nla_put(msg, NL80211_ATTR_SSID, wdev->u.ibss.ssid_len,
3839 wdev->u.ibss.ssid))
3840 goto nla_put_failure_locked;
44905265 3841 break;
44905265
JB		 3842 default:
3843 /* nothing */
3844 break;
b84e7a05 3845 }
44905265 3846 wdev_unlock(wdev);
b84e7a05 3847
52539ca8
THJ		 3848 if (rdev->ops->get_txq_stats) {
3849 struct cfg80211_txq_stats txqstats = {};
3850 int ret = rdev_get_txq_stats(rdev, wdev, &txqstats);
3851
3852 if (ret == 0 &&
3853 !nl80211_put_txq_stats(msg, &txqstats,
3854 NL80211_ATTR_TXQ_STATS))
3855 goto nla_put_failure;
3856 }
3857
ce08cd34
JB		 3858 if (wdev->valid_links) {
3859 unsigned int link_id;
3860 struct nlattr *links = nla_nest_start(msg,
3861 NL80211_ATTR_MLO_LINKS);
3862
3863 if (!links)
3864 goto nla_put_failure;
3865
3866 for_each_valid_link(wdev, link_id) {
3867 struct nlattr *link = nla_nest_start(msg, link_id + 1);
7a77cd47
VJ		 3868 struct cfg80211_chan_def chandef = {};
3869 int ret;
ce08cd34
JB		 3870
3871 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link_id))
3872 goto nla_put_failure;
3873 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
3874 wdev->links[link_id].addr))
3875 goto nla_put_failure;
7a77cd47
VJ		 3876
3877 ret = rdev_get_channel(rdev, wdev, link_id, &chandef);
3878 if (ret == 0 && nl80211_send_chandef(msg, &chandef))
3879 goto nla_put_failure;
3880
ce08cd34
JB		 3881 nla_nest_end(msg, link);
3882 }
3883
3884 nla_nest_end(msg, links);
3885 }
3886
053c095a
JB		 3887 genlmsg_end(msg, hdr);
3888 return 0;
55682965 3889
4564b187
JB		 3890 nla_put_failure_locked:
3891 wdev_unlock(wdev);
55682965 3892 nla_put_failure:
bc3ed28c
TG		 3893 genlmsg_cancel(msg, hdr);
3894 return -EMSGSIZE;
55682965
JB		 3895}
3896
3897static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
3898{
3899 int wp_idx = 0;
3900 int if_idx = 0;
3901 int wp_start = cb->args[0];
3902 int if_start = cb->args[1];
b7fb44da 3903 int filter_wiphy = -1;
f5ea9120 3904 struct cfg80211_registered_device *rdev;
55682965 3905 struct wireless_dev *wdev;
ea90e0dc 3906 int ret;
55682965 3907
5fe231e8 3908 rtnl_lock();
b7fb44da
DK		 3909 if (!cb->args[2]) {
3910 struct nl80211_dump_wiphy_state state = {
3911 .filter_wiphy = -1,
3912 };
b7fb44da
DK		 3913
3914 ret = nl80211_dump_wiphy_parse(skb, cb, &state);
3915 if (ret)
ea90e0dc 3916 goto out_unlock;
b7fb44da
DK		 3917
3918 filter_wiphy = state.filter_wiphy;
3919
3920 /*
3921 * if filtering, set cb->args[2] to +1 since 0 is the default
3922 * value needed to determine that parsing is necessary.
3923 */
3924 if (filter_wiphy >= 0)
3925 cb->args[2] = filter_wiphy + 1;
3926 else
3927 cb->args[2] = -1;
3928 } else if (cb->args[2] > 0) {
3929 filter_wiphy = cb->args[2] - 1;
3930 }
3931
f5ea9120
JB		 3932 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3933 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3934 continue;
bba95fef
JB		 3935 if (wp_idx < wp_start) {
3936 wp_idx++;
55682965 3937 continue;
bba95fef 3938 }
b7fb44da
DK		 3939
3940 if (filter_wiphy >= 0 && filter_wiphy != rdev->wiphy_idx)
3941 continue;
3942
55682965
JB		 3943 if_idx = 0;
3944
53873f13 3945 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
bba95fef
JB		 3946 if (if_idx < if_start) {
3947 if_idx++;
55682965 3948 continue;
bba95fef 3949 }
15e47304 3950 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 3951 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3d1a5bbf
AZ		 3952 rdev, wdev,
3953 NL80211_CMD_NEW_INTERFACE) < 0) {
bba95fef
JB		 3954 goto out;
3955 }
3956 if_idx++;
55682965 3957 }
bba95fef
JB		 3958
3959 wp_idx++;
55682965 3960 }
bba95fef 3961 out:
55682965
JB		 3962 cb->args[0] = wp_idx;
3963 cb->args[1] = if_idx;
3964
ea90e0dc
JB		 3965 ret = skb->len;
3966 out_unlock:
3967 rtnl_unlock();
3968
3969 return ret;
55682965
JB		 3970}
3971
3972static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
3973{
3974 struct sk_buff *msg;
1b8ec87a 3975 struct cfg80211_registered_device *rdev = info->user_ptr[0];
72fb2abc 3976 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3977
fd2120ca 3978 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 3979 if (!msg)
4c476991 3980 return -ENOMEM;
55682965 3981
15e47304 3982 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3983 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
4c476991
JB		 3984 nlmsg_free(msg);
3985 return -ENOBUFS;
3986 }
55682965 3987
134e6375 3988 return genlmsg_reply(msg, info);
55682965
JB		 3989}
3990
66f7ac50
MW		 3991static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
3992 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
3993 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
3994 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
3995 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
3996 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
e057d3c3 3997 [NL80211_MNTR_FLAG_ACTIVE] = { .type = NLA_FLAG },
66f7ac50
MW		 3998};
3999
4000static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
4001{
4002 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
4003 int flag;
4004
4005 *mntrflags = 0;
4006
4007 if (!nla)
4008 return -EINVAL;
4009
8cb08174 4010 if (nla_parse_nested_deprecated(flags, NL80211_MNTR_FLAG_MAX, nla, mntr_flags_policy, NULL))
66f7ac50
MW		 4011 return -EINVAL;
4012
4013 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
4014 if (flags[flag])
4015 *mntrflags |= (1<<flag);
4016
818a986e
JB		 4017 *mntrflags |= MONITOR_FLAG_CHANGED;
4018
66f7ac50
MW		 4019 return 0;
4020}
4021
1db77596
JB		 4022static int nl80211_parse_mon_options(struct cfg80211_registered_device *rdev,
4023 enum nl80211_iftype type,
4024 struct genl_info *info,
4025 struct vif_params *params)
4026{
4027 bool change = false;
4028 int err;
4029
4030 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4031 if (type != NL80211_IFTYPE_MONITOR)
4032 return -EINVAL;
4033
4034 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
4035 &params->flags);
4036 if (err)
4037 return err;
4038
4039 change = true;
4040 }
4041
4042 if (params->flags & MONITOR_FLAG_ACTIVE &&
4043 !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
4044 return -EOPNOTSUPP;
4045
4046 if (info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]) {
4047 const u8 *mumimo_groups;
4048 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
4049
4050 if (type != NL80211_IFTYPE_MONITOR)
4051 return -EINVAL;
4052
4053 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
4054 return -EOPNOTSUPP;
4055
4056 mumimo_groups =
4057 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]);
4058
4059 /* bits 0 and 63 are reserved and must be zero */
4954601f
JB		 4060 if ((mumimo_groups[0] & BIT(0)) ||
4061 (mumimo_groups[VHT_MUMIMO_GROUPS_DATA_LEN - 1] & BIT(7)))
1db77596
JB		 4062 return -EINVAL;
4063
4064 params->vht_mumimo_groups = mumimo_groups;
4065 change = true;
4066 }
4067
4068 if (info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]) {
4069 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
4070
4071 if (type != NL80211_IFTYPE_MONITOR)
4072 return -EINVAL;
4073
4074 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
4075 return -EOPNOTSUPP;
4076
4077 params->vht_mumimo_follow_addr =
4078 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]);
4079 change = true;
4080 }
4081
4082 return change ? 1 : 0;
4083}
4084
9bc383de 4085static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 4086 struct net_device *netdev, u8 use_4addr,
4087 enum nl80211_iftype iftype)
9bc383de 4088{
ad4bb6f8 4089 if (!use_4addr) {
2e92a2d0 4090 if (netdev && netif_is_bridge_port(netdev))
ad4bb6f8 4091 return -EBUSY;
9bc383de 4092 return 0;
ad4bb6f8 4093 }
9bc383de
JB		 4094
4095 switch (iftype) {
4096 case NL80211_IFTYPE_AP_VLAN:
4097 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
4098 return 0;
4099 break;
4100 case NL80211_IFTYPE_STATION:
4101 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
4102 return 0;
4103 break;
4104 default:
4105 break;
4106 }
4107
4108 return -EOPNOTSUPP;
4109}
4110
55682965
JB		 4111static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
4112{
4c476991 4113 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 4114 struct vif_params params;
e36d56b6 4115 int err;
04a773ad 4116 enum nl80211_iftype otype, ntype;
4c476991 4117 struct net_device *dev = info->user_ptr[1];
ac7f9cfa 4118 bool change = false;
55682965 4119
2ec600d6
LCC		 4120 memset(&params, 0, sizeof(params));
4121
04a773ad 4122 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 4123
723b038d 4124 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 4125 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 4126 if (otype != ntype)
ac7f9cfa 4127 change = true;
723b038d
JB		 4128 }
4129
92ffe055 4130 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 4131 struct wireless_dev *wdev = dev->ieee80211_ptr;
4132
4c476991
JB		 4133 if (ntype != NL80211_IFTYPE_MESH_POINT)
4134 return -EINVAL;
29cbe68c
JB		 4135 if (netif_running(dev))
4136 return -EBUSY;
4137
4138 wdev_lock(wdev);
4139 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
4140 IEEE80211_MAX_MESH_ID_LEN);
7b0a0e3c 4141 wdev->u.mesh.id_up_len =
29cbe68c 4142 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
7b0a0e3c
JB		 4143 memcpy(wdev->u.mesh.id,
4144 nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
4145 wdev->u.mesh.id_up_len);
29cbe68c 4146 wdev_unlock(wdev);
2ec600d6
LCC		 4147 }
4148
8b787643
FF		 4149 if (info->attrs[NL80211_ATTR_4ADDR]) {
4150 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
4151 change = true;
ad4bb6f8 4152 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 4153 if (err)
4c476991 4154 return err;
8b787643
FF		 4155 } else {
4156 params.use_4addr = -1;
4157 }
4158
1db77596
JB		 4159 err = nl80211_parse_mon_options(rdev, ntype, info, &params);
4160 if (err < 0)
4161 return err;
4162 if (err > 0)
c6e6a0c8 4163 change = true;
e057d3c3 4164
ac7f9cfa 4165 if (change)
818a986e 4166 err = cfg80211_change_iface(rdev, dev, ntype, &params);
ac7f9cfa
JB		 4167 else
4168 err = 0;
60719ffd 4169
9bc383de
JB		 4170 if (!err && params.use_4addr != -1)
4171 dev->ieee80211_ptr->use_4addr = params.use_4addr;
4172
3d1a5bbf
AZ		 4173 if (change && !err) {
4174 struct wireless_dev *wdev = dev->ieee80211_ptr;
4175
4176 nl80211_notify_iface(rdev, wdev, NL80211_CMD_SET_INTERFACE);
4177 }
4178
55682965
JB		 4179 return err;
4180}
4181
ea6b2098 4182static int _nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
55682965 4183{
4c476991 4184 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 4185 struct vif_params params;
84efbb84 4186 struct wireless_dev *wdev;
896ff063 4187 struct sk_buff *msg;
55682965
JB		 4188 int err;
4189 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
4190
2ec600d6
LCC		 4191 memset(&params, 0, sizeof(params));
4192
55682965
JB		 4193 if (!info->attrs[NL80211_ATTR_IFNAME])
4194 return -EINVAL;
4195
ab0d76f6 4196 if (info->attrs[NL80211_ATTR_IFTYPE])
55682965 4197 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
55682965 4198
33d915d9 4199 if (!rdev->ops->add_virtual_intf)
4c476991 4200 return -EOPNOTSUPP;
55682965 4201
cb3b7d87 4202 if ((type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN ||
e8f479b1
BG		 4203 rdev->wiphy.features & NL80211_FEATURE_MAC_ON_CREATE) &&
4204 info->attrs[NL80211_ATTR_MAC]) {
1c18f145
AS		 4205 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
4206 ETH_ALEN);
4207 if (!is_valid_ether_addr(params.macaddr))
4208 return -EADDRNOTAVAIL;
4209 }
4210
9bc383de 4211 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 4212 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 4213 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 4214 if (err)
4c476991 4215 return err;
9bc383de 4216 }
8b787643 4217
e6f40511 4218 if (!cfg80211_iftype_allowed(&rdev->wiphy, type, params.use_4addr, 0))
33d915d9
MP		 4219 return -EOPNOTSUPP;
4220
1db77596
JB		 4221 err = nl80211_parse_mon_options(rdev, type, info, &params);
4222 if (err < 0)
4223 return err;
e057d3c3 4224
a18c7192
JB		 4225 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4226 if (!msg)
4227 return -ENOMEM;
4228
e35e4d28
HG		 4229 wdev = rdev_add_virtual_intf(rdev,
4230 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
818a986e 4231 NET_NAME_USER, type, &params);
d687cbb7
RM		 4232 if (WARN_ON(!wdev)) {
4233 nlmsg_free(msg);
4234 return -EPROTO;
4235 } else if (IS_ERR(wdev)) {
1c90f9d4 4236 nlmsg_free(msg);
84efbb84 4237 return PTR_ERR(wdev);
1c90f9d4 4238 }
2ec600d6 4239
18e5ca65 4240 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
78f22b6a
JB		 4241 wdev->owner_nlportid = info->snd_portid;
4242
98104fde
JB		 4243 switch (type) {
4244 case NL80211_IFTYPE_MESH_POINT:
4245 if (!info->attrs[NL80211_ATTR_MESH_ID])
4246 break;
29cbe68c
JB		 4247 wdev_lock(wdev);
4248 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
4249 IEEE80211_MAX_MESH_ID_LEN);
7b0a0e3c 4250 wdev->u.mesh.id_up_len =
29cbe68c 4251 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
7b0a0e3c
JB		 4252 memcpy(wdev->u.mesh.id,
4253 nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
4254 wdev->u.mesh.id_up_len);
29cbe68c 4255 wdev_unlock(wdev);
98104fde 4256 break;
cb3b7d87 4257 case NL80211_IFTYPE_NAN:
98104fde
JB		 4258 case NL80211_IFTYPE_P2P_DEVICE:
4259 /*
cb3b7d87 4260 * P2P Device and NAN do not have a netdev, so don't go
98104fde
JB		 4261 * through the netdev notifier and must be added here
4262 */
9bdaf3b9
JB		 4263 cfg80211_init_wdev(wdev);
4264 cfg80211_register_wdev(rdev, wdev);
98104fde
JB		 4265 break;
4266 default:
4267 break;
29cbe68c
JB		 4268 }
4269
15e47304 4270 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 4271 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
1c90f9d4
JB		 4272 nlmsg_free(msg);
4273 return -ENOBUFS;
4274 }
4275
4276 return genlmsg_reply(msg, info);
55682965
JB		 4277}
4278
ea6b2098
JB		 4279static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
4280{
4281 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4282 int ret;
4283
4284 /* to avoid failing a new interface creation due to pending removal */
4285 cfg80211_destroy_ifaces(rdev);
4286
4287 wiphy_lock(&rdev->wiphy);
4288 ret = _nl80211_new_interface(skb, info);
4289 wiphy_unlock(&rdev->wiphy);
4290
4291 return ret;
4292}
4293
55682965
JB		 4294static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
4295{
4c476991 4296 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 4297 struct wireless_dev *wdev = info->user_ptr[1];
55682965 4298
4c476991
JB		 4299 if (!rdev->ops->del_virtual_intf)
4300 return -EOPNOTSUPP;
55682965 4301
a05829a7
JB		 4302 /*
4303 * We hold RTNL, so this is safe, without RTNL opencount cannot
4304 * reach 0, and thus the rdev cannot be deleted.
4305 *
4306 * We need to do it for the dev_close(), since that will call
4307 * the netdev notifiers, and we need to acquire the mutex there
4308 * but don't know if we get there from here or from some other
4309 * place (e.g. "ip link set ... down").
4310 */
4311 mutex_unlock(&rdev->wiphy.mtx);
4312
84efbb84
JB		 4313 /*
4314 * If we remove a wireless device without a netdev then clear
4315 * user_ptr[1] so that nl80211_post_doit won't dereference it
4316 * to check if it needs to do dev_put(). Otherwise it crashes
4317 * since the wdev has been freed, unlike with a netdev where
4318 * we need the dev_put() for the netdev to really be freed.
4319 */
4320 if (!wdev->netdev)
4321 info->user_ptr[1] = NULL;
a05829a7
JB		 4322 else
4323 dev_close(wdev->netdev);
4324
4325 mutex_lock(&rdev->wiphy.mtx);
84efbb84 4326
cdf0a0a8 4327 return cfg80211_remove_virtual_intf(rdev, wdev);
55682965
JB		 4328}
4329
1d9d9213
SW		 4330static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
4331{
4332 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4333 struct net_device *dev = info->user_ptr[1];
4334 u16 noack_map;
4335
4336 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
4337 return -EINVAL;
4338
4339 if (!rdev->ops->set_noack_map)
4340 return -EOPNOTSUPP;
4341
4342 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
4343
e35e4d28 4344 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 4345}
4346
e7a7b84e
VJ		 4347static int nl80211_validate_key_link_id(struct genl_info *info,
4348 struct wireless_dev *wdev,
4349 int link_id, bool pairwise)
4350{
4351 if (pairwise) {
4352 if (link_id != -1) {
4353 GENL_SET_ERR_MSG(info,
4354 "link ID not allowed for pairwise key");
4355 return -EINVAL;
4356 }
4357
4358 return 0;
4359 }
4360
4361 if (wdev->valid_links) {
4362 if (link_id == -1) {
4363 GENL_SET_ERR_MSG(info,
4364 "link ID must for MLO group key");
4365 return -EINVAL;
4366 }
4367 if (!(wdev->valid_links & BIT(link_id))) {
4368 GENL_SET_ERR_MSG(info, "invalid link ID for MLO group key");
4369 return -EINVAL;
4370 }
4371 } else if (link_id != -1) {
4372 GENL_SET_ERR_MSG(info, "link ID not allowed for non-MLO group key");
4373 return -EINVAL;
4374 }
4375
4376 return 0;
4377}
4378
41ade00f
JB		 4379struct get_key_cookie {
4380 struct sk_buff *msg;
4381 int error;
b9454e83 4382 int idx;
41ade00f
JB		 4383};
4384
4385static void get_key_callback(void *c, struct key_params *params)
4386{
b9454e83 4387 struct nlattr *key;
41ade00f
JB		 4388 struct get_key_cookie *cookie = c;
4389
9360ffd1
DM		 4390 if ((params->key &&
4391 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
4392 params->key_len, params->key)) ||
4393 (params->seq &&
4394 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
4395 params->seq_len, params->seq)) ||
4396 (params->cipher &&
4397 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
4398 params->cipher)))
4399 goto nla_put_failure;
41ade00f 4400
ae0be8de 4401 key = nla_nest_start_noflag(cookie->msg, NL80211_ATTR_KEY);
b9454e83
JB		 4402 if (!key)
4403 goto nla_put_failure;
4404
9360ffd1
DM		 4405 if ((params->key &&
4406 nla_put(cookie->msg, NL80211_KEY_DATA,
4407 params->key_len, params->key)) ||
4408 (params->seq &&
4409 nla_put(cookie->msg, NL80211_KEY_SEQ,
4410 params->seq_len, params->seq)) ||
4411 (params->cipher &&
4412 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
4413 params->cipher)))
4414 goto nla_put_failure;
b9454e83 4415
efdfce72 4416 if (nla_put_u8(cookie->msg, NL80211_KEY_IDX, cookie->idx))
9360ffd1 4417 goto nla_put_failure;
b9454e83
JB		 4418
4419 nla_nest_end(cookie->msg, key);
4420
41ade00f
JB		 4421 return;
4422 nla_put_failure:
4423 cookie->error = 1;
4424}
4425
4426static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
4427{
4c476991 4428 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4429 int err;
4c476991 4430 struct net_device *dev = info->user_ptr[1];
41ade00f 4431 u8 key_idx = 0;
e31b8213
JB		 4432 const u8 *mac_addr = NULL;
4433 bool pairwise;
41ade00f
JB		 4434 struct get_key_cookie cookie = {
4435 .error = 0,
4436 };
4437 void *hdr;
4438 struct sk_buff *msg;
155d7c73 4439 bool bigtk_support = false;
e7a7b84e
VJ		 4440 int link_id = nl80211_link_id_or_invalid(info->attrs);
4441 struct wireless_dev *wdev = dev->ieee80211_ptr;
155d7c73
JB		 4442
4443 if (wiphy_ext_feature_isset(&rdev->wiphy,
4444 NL80211_EXT_FEATURE_BEACON_PROTECTION))
4445 bigtk_support = true;
4446
e7a7b84e
VJ		 4447 if ((wdev->iftype == NL80211_IFTYPE_STATION ||
4448 wdev->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
155d7c73
JB		 4449 wiphy_ext_feature_isset(&rdev->wiphy,
4450 NL80211_EXT_FEATURE_BEACON_PROTECTION_CLIENT))
4451 bigtk_support = true;
41ade00f 4452
56be393f 4453 if (info->attrs[NL80211_ATTR_KEY_IDX]) {
41ade00f 4454 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
155d7c73
JB		 4455
4456 if (key_idx >= 6 && key_idx <= 7 && !bigtk_support) {
4457 GENL_SET_ERR_MSG(info, "BIGTK not supported");
56be393f 4458 return -EINVAL;
155d7c73 4459 }
56be393f 4460 }
41ade00f 4461
41ade00f
JB		 4462 if (info->attrs[NL80211_ATTR_MAC])
4463 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4464
e31b8213
JB		 4465 pairwise = !!mac_addr;
4466 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
4467 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
7a087e74 4468
e31b8213
JB		 4469 if (kt != NL80211_KEYTYPE_GROUP &&
4470 kt != NL80211_KEYTYPE_PAIRWISE)
4471 return -EINVAL;
4472 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
4473 }
4474
4c476991
JB		 4475 if (!rdev->ops->get_key)
4476 return -EOPNOTSUPP;
41ade00f 4477
0fa7b391
JB		 4478 if (!pairwise && mac_addr && !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4479 return -ENOENT;
4480
fd2120ca 4481 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 4482 if (!msg)
4483 return -ENOMEM;
41ade00f 4484
15e47304 4485 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 4486 NL80211_CMD_NEW_KEY);
cb35fba3 4487 if (!hdr)
9fe271af 4488 goto nla_put_failure;
41ade00f
JB		 4489
4490 cookie.msg = msg;
b9454e83 4491 cookie.idx = key_idx;
41ade00f 4492
9360ffd1
DM		 4493 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
4494 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
4495 goto nla_put_failure;
4496 if (mac_addr &&
4497 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
4498 goto nla_put_failure;
41ade00f 4499
e7a7b84e
VJ		 4500 err = nl80211_validate_key_link_id(info, wdev, link_id, pairwise);
4501 if (err)
4502 goto free_msg;
4503
4504 err = rdev_get_key(rdev, dev, link_id, key_idx, pairwise, mac_addr,
4505 &cookie, get_key_callback);
41ade00f
JB		 4506
4507 if (err)
6c95e2a2 4508 goto free_msg;
41ade00f
JB		 4509
4510 if (cookie.error)
4511 goto nla_put_failure;
4512
4513 genlmsg_end(msg, hdr);
4c476991 4514 return genlmsg_reply(msg, info);
41ade00f
JB		 4515
4516 nla_put_failure:
4517 err = -ENOBUFS;
6c95e2a2 4518 free_msg:
41ade00f 4519 nlmsg_free(msg);
41ade00f
JB		 4520 return err;
4521}
4522
4523static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
4524{
4c476991 4525 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 4526 struct key_parse key;
41ade00f 4527 int err;
4c476991 4528 struct net_device *dev = info->user_ptr[1];
e7a7b84e
VJ		 4529 int link_id = nl80211_link_id_or_invalid(info->attrs);
4530 struct wireless_dev *wdev = dev->ieee80211_ptr;
41ade00f 4531
b9454e83
JB		 4532 err = nl80211_parse_key(info, &key);
4533 if (err)
4534 return err;
41ade00f 4535
b9454e83 4536 if (key.idx < 0)
41ade00f
JB		 4537 return -EINVAL;
4538
6cdd3979
AW		 4539 /* Only support setting default key and
4540 * Extended Key ID action NL80211_KEY_SET_TX.
4541 */
56be393f 4542 if (!key.def && !key.defmgmt && !key.defbeacon &&
6cdd3979 4543 !(key.p.mode == NL80211_KEY_SET_TX))
41ade00f
JB		 4544 return -EINVAL;
4545
e7a7b84e 4546 wdev_lock(wdev);
3cfcf6ac 4547
dbd2fd65
JB		 4548 if (key.def) {
4549 if (!rdev->ops->set_default_key) {
4550 err = -EOPNOTSUPP;
4551 goto out;
4552 }
41ade00f 4553
e7a7b84e
VJ		 4554 err = nl80211_key_allowed(wdev);
4555 if (err)
4556 goto out;
4557
4558 err = nl80211_validate_key_link_id(info, wdev, link_id, false);
dbd2fd65
JB		 4559 if (err)
4560 goto out;
4561
e7a7b84e
VJ		 4562 err = rdev_set_default_key(rdev, dev, link_id, key.idx,
4563 key.def_uni, key.def_multi);
dbd2fd65
JB		 4564
4565 if (err)
4566 goto out;
fffd0934 4567
3d23e349 4568#ifdef CONFIG_CFG80211_WEXT
e7a7b84e 4569 wdev->wext.default_key = key.idx;
dbd2fd65 4570#endif
6cdd3979 4571 } else if (key.defmgmt) {
dbd2fd65
JB		 4572 if (key.def_uni || !key.def_multi) {
4573 err = -EINVAL;
4574 goto out;
4575 }
4576
4577 if (!rdev->ops->set_default_mgmt_key) {
4578 err = -EOPNOTSUPP;
4579 goto out;
4580 }
4581
e7a7b84e
VJ		 4582 err = nl80211_key_allowed(wdev);
4583 if (err)
4584 goto out;
4585
4586 err = nl80211_validate_key_link_id(info, wdev, link_id, false);
dbd2fd65
JB		 4587 if (err)
4588 goto out;
4589
e7a7b84e 4590 err = rdev_set_default_mgmt_key(rdev, dev, link_id, key.idx);
dbd2fd65
JB		 4591 if (err)
4592 goto out;
4593
4594#ifdef CONFIG_CFG80211_WEXT
e7a7b84e 4595 wdev->wext.default_mgmt_key = key.idx;
08645126 4596#endif
56be393f
JM		 4597 } else if (key.defbeacon) {
4598 if (key.def_uni || !key.def_multi) {
4599 err = -EINVAL;
4600 goto out;
4601 }
4602
4603 if (!rdev->ops->set_default_beacon_key) {
4604 err = -EOPNOTSUPP;
4605 goto out;
4606 }
4607
e7a7b84e 4608 err = nl80211_key_allowed(wdev);
56be393f
JM		 4609 if (err)
4610 goto out;
4611
e7a7b84e
VJ		 4612 err = nl80211_validate_key_link_id(info, wdev, link_id, false);
4613 if (err)
4614 goto out;
4615
4616 err = rdev_set_default_beacon_key(rdev, dev, link_id, key.idx);
56be393f
JM		 4617 if (err)
4618 goto out;
6cdd3979
AW		 4619 } else if (key.p.mode == NL80211_KEY_SET_TX &&
4620 wiphy_ext_feature_isset(&rdev->wiphy,
4621 NL80211_EXT_FEATURE_EXT_KEY_ID)) {
4622 u8 *mac_addr = NULL;
4623
4624 if (info->attrs[NL80211_ATTR_MAC])
4625 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4626
4627 if (!mac_addr || key.idx < 0 || key.idx > 1) {
4628 err = -EINVAL;
4629 goto out;
4630 }
dbd2fd65 4631
e7a7b84e
VJ		 4632 err = nl80211_validate_key_link_id(info, wdev, link_id, true);
4633 if (err)
4634 goto out;
4635
4636 err = rdev_add_key(rdev, dev, link_id, key.idx,
6cdd3979
AW		 4637 NL80211_KEYTYPE_PAIRWISE,
4638 mac_addr, &key.p);
4639 } else {
4640 err = -EINVAL;
4641 }
dbd2fd65 4642 out:
e7a7b84e 4643 wdev_unlock(wdev);
41ade00f 4644
41ade00f
JB		 4645 return err;
4646}
4647
4648static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
4649{
4c476991 4650 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 4651 int err;
4c476991 4652 struct net_device *dev = info->user_ptr[1];
b9454e83 4653 struct key_parse key;
e31b8213 4654 const u8 *mac_addr = NULL;
e7a7b84e
VJ		 4655 int link_id = nl80211_link_id_or_invalid(info->attrs);
4656 struct wireless_dev *wdev = dev->ieee80211_ptr;
41ade00f 4657
b9454e83
JB		 4658 err = nl80211_parse_key(info, &key);
4659 if (err)
4660 return err;
41ade00f 4661
f8af764b
JM		 4662 if (!key.p.key) {
4663 GENL_SET_ERR_MSG(info, "no key");
41ade00f 4664 return -EINVAL;
f8af764b 4665 }
41ade00f 4666
41ade00f
JB		 4667 if (info->attrs[NL80211_ATTR_MAC])
4668 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4669
e31b8213
JB		 4670 if (key.type == -1) {
4671 if (mac_addr)
4672 key.type = NL80211_KEYTYPE_PAIRWISE;
4673 else
4674 key.type = NL80211_KEYTYPE_GROUP;
4675 }
4676
4677 /* for now */
4678 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
f8af764b
JM		 4679 key.type != NL80211_KEYTYPE_GROUP) {
4680 GENL_SET_ERR_MSG(info, "key type not pairwise or group");
e31b8213 4681 return -EINVAL;
f8af764b 4682 }
e31b8213 4683
14f34e36
GG		 4684 if (key.type == NL80211_KEYTYPE_GROUP &&
4685 info->attrs[NL80211_ATTR_VLAN_ID])
4686 key.p.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
4687
4c476991
JB		 4688 if (!rdev->ops->add_key)
4689 return -EOPNOTSUPP;
25e47c18 4690
e31b8213
JB		 4691 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
4692 key.type == NL80211_KEYTYPE_PAIRWISE,
f8af764b
JM		 4693 mac_addr)) {
4694 GENL_SET_ERR_MSG(info, "key setting validation failed");
4c476991 4695 return -EINVAL;
f8af764b 4696 }
41ade00f 4697
e7a7b84e
VJ		 4698 wdev_lock(wdev);
4699 err = nl80211_key_allowed(wdev);
f8af764b
JM		 4700 if (err)
4701 GENL_SET_ERR_MSG(info, "key not allowed");
e7a7b84e
VJ		 4702
4703 if (!err)
4704 err = nl80211_validate_key_link_id(info, wdev, link_id,
4705 key.type == NL80211_KEYTYPE_PAIRWISE);
4706
f8af764b 4707 if (!err) {
e7a7b84e 4708 err = rdev_add_key(rdev, dev, link_id, key.idx,
e35e4d28
HG		 4709 key.type == NL80211_KEYTYPE_PAIRWISE,
4710 mac_addr, &key.p);
f8af764b
JM		 4711 if (err)
4712 GENL_SET_ERR_MSG(info, "key addition failed");
4713 }
e7a7b84e 4714 wdev_unlock(wdev);
41ade00f 4715
41ade00f
JB		 4716 return err;
4717}
4718
4719static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
4720{
4c476991 4721 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4722 int err;
4c476991 4723 struct net_device *dev = info->user_ptr[1];
41ade00f 4724 u8 *mac_addr = NULL;
b9454e83 4725 struct key_parse key;
e7a7b84e
VJ		 4726 int link_id = nl80211_link_id_or_invalid(info->attrs);
4727 struct wireless_dev *wdev = dev->ieee80211_ptr;
41ade00f 4728
b9454e83
JB		 4729 err = nl80211_parse_key(info, &key);
4730 if (err)
4731 return err;
41ade00f
JB		 4732
4733 if (info->attrs[NL80211_ATTR_MAC])
4734 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4735
e31b8213
JB		 4736 if (key.type == -1) {
4737 if (mac_addr)
4738 key.type = NL80211_KEYTYPE_PAIRWISE;
4739 else
4740 key.type = NL80211_KEYTYPE_GROUP;
4741 }
4742
4743 /* for now */
4744 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
4745 key.type != NL80211_KEYTYPE_GROUP)
4746 return -EINVAL;
4747
2d946308
AT		 4748 if (!cfg80211_valid_key_idx(rdev, key.idx,
4749 key.type == NL80211_KEYTYPE_PAIRWISE))
4750 return -EINVAL;
4751
4c476991
JB		 4752 if (!rdev->ops->del_key)
4753 return -EOPNOTSUPP;
41ade00f 4754
e7a7b84e
VJ		 4755 wdev_lock(wdev);
4756 err = nl80211_key_allowed(wdev);
e31b8213 4757
0fa7b391 4758 if (key.type == NL80211_KEYTYPE_GROUP && mac_addr &&
e31b8213
JB		 4759 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4760 err = -ENOENT;
4761
fffd0934 4762 if (!err)
e7a7b84e
VJ		 4763 err = nl80211_validate_key_link_id(info, wdev, link_id,
4764 key.type == NL80211_KEYTYPE_PAIRWISE);
4765
4766 if (!err)
4767 err = rdev_del_key(rdev, dev, link_id, key.idx,
e35e4d28
HG		 4768 key.type == NL80211_KEYTYPE_PAIRWISE,
4769 mac_addr);
41ade00f 4770
3d23e349 4771#ifdef CONFIG_CFG80211_WEXT
08645126 4772 if (!err) {
e7a7b84e
VJ		 4773 if (key.idx == wdev->wext.default_key)
4774 wdev->wext.default_key = -1;
4775 else if (key.idx == wdev->wext.default_mgmt_key)
4776 wdev->wext.default_mgmt_key = -1;
08645126
JB		 4777 }
4778#endif
e7a7b84e 4779 wdev_unlock(wdev);
08645126 4780
41ade00f
JB		 4781 return err;
4782}
4783
77765eaf
VT		 4784/* This function returns an error or the number of nested attributes */
4785static int validate_acl_mac_addrs(struct nlattr *nl_attr)
4786{
4787 struct nlattr *attr;
4788 int n_entries = 0, tmp;
4789
4790 nla_for_each_nested(attr, nl_attr, tmp) {
4791 if (nla_len(attr) != ETH_ALEN)
4792 return -EINVAL;
4793
4794 n_entries++;
4795 }
4796
4797 return n_entries;
4798}
4799
4800/*
4801 * This function parses ACL information and allocates memory for ACL data.
4802 * On successful return, the calling function is responsible to free the
4803 * ACL buffer returned by this function.
4804 */
4805static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
4806 struct genl_info *info)
4807{
4808 enum nl80211_acl_policy acl_policy;
4809 struct nlattr *attr;
4810 struct cfg80211_acl_data *acl;
4811 int i = 0, n_entries, tmp;
4812
4813 if (!wiphy->max_acl_mac_addrs)
4814 return ERR_PTR(-EOPNOTSUPP);
4815
4816 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
4817 return ERR_PTR(-EINVAL);
4818
4819 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
4820 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
4821 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
4822 return ERR_PTR(-EINVAL);
4823
4824 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
4825 return ERR_PTR(-EINVAL);
4826
4827 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
4828 if (n_entries < 0)
4829 return ERR_PTR(n_entries);
4830
4831 if (n_entries > wiphy->max_acl_mac_addrs)
4832 return ERR_PTR(-ENOTSUPP);
4833
391d132c 4834 acl = kzalloc(struct_size(acl, mac_addrs, n_entries), GFP_KERNEL);
77765eaf
VT		 4835 if (!acl)
4836 return ERR_PTR(-ENOMEM);
4837
4838 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
4839 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
4840 i++;
4841 }
4842
4843 acl->n_acl_entries = n_entries;
4844 acl->acl_policy = acl_policy;
4845
4846 return acl;
4847}
4848
4849static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
4850{
4851 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4852 struct net_device *dev = info->user_ptr[1];
4853 struct cfg80211_acl_data *acl;
4854 int err;
4855
4856 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4857 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4858 return -EOPNOTSUPP;
4859
7b0a0e3c 4860 if (!dev->ieee80211_ptr->links[0].ap.beacon_interval)
77765eaf
VT		 4861 return -EINVAL;
4862
4863 acl = parse_acl_data(&rdev->wiphy, info);
4864 if (IS_ERR(acl))
4865 return PTR_ERR(acl);
4866
4867 err = rdev_set_mac_acl(rdev, dev, acl);
4868
4869 kfree(acl);
4870
4871 return err;
4872}
4873
a7c7fbff
PK		 4874static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4875 u8 *rates, u8 rates_len)
4876{
4877 u8 i;
4878 u32 mask = 0;
4879
4880 for (i = 0; i < rates_len; i++) {
4881 int rate = (rates[i] & 0x7f) * 5;
4882 int ridx;
4883
4884 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
4885 struct ieee80211_rate *srate =
4886 &sband->bitrates[ridx];
4887 if (rate == srate->bitrate) {
4888 mask |= 1 << ridx;
4889 break;
4890 }
4891 }
4892 if (ridx == sband->n_bitrates)
4893 return 0; /* rate not found */
4894 }
4895
4896 return mask;
4897}
4898
4899static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
4900 u8 *rates, u8 rates_len,
4901 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
4902{
4903 u8 i;
4904
4905 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
4906
4907 for (i = 0; i < rates_len; i++) {
4908 int ridx, rbit;
4909
4910 ridx = rates[i] / 8;
4911 rbit = BIT(rates[i] % 8);
4912
4913 /* check validity */
4914 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
4915 return false;
4916
4917 /* check availability */
30fe6d50 4918 ridx = array_index_nospec(ridx, IEEE80211_HT_MCS_MASK_LEN);
a7c7fbff
PK		 4919 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
4920 mcs[ridx] |= rbit;
4921 else
4922 return false;
4923 }
4924
4925 return true;
4926}
4927
4928static u16 vht_mcs_map_to_mcs_mask(u8 vht_mcs_map)
4929{
4930 u16 mcs_mask = 0;
4931
4932 switch (vht_mcs_map) {
4933 case IEEE80211_VHT_MCS_NOT_SUPPORTED:
4934 break;
4935 case IEEE80211_VHT_MCS_SUPPORT_0_7:
4936 mcs_mask = 0x00FF;
4937 break;
4938 case IEEE80211_VHT_MCS_SUPPORT_0_8:
4939 mcs_mask = 0x01FF;
4940 break;
4941 case IEEE80211_VHT_MCS_SUPPORT_0_9:
4942 mcs_mask = 0x03FF;
4943 break;
4944 default:
4945 break;
4946 }
4947
4948 return mcs_mask;
4949}
4950
4951static void vht_build_mcs_mask(u16 vht_mcs_map,
4952 u16 vht_mcs_mask[NL80211_VHT_NSS_MAX])
4953{
4954 u8 nss;
4955
4956 for (nss = 0; nss < NL80211_VHT_NSS_MAX; nss++) {
4957 vht_mcs_mask[nss] = vht_mcs_map_to_mcs_mask(vht_mcs_map & 0x03);
4958 vht_mcs_map >>= 2;
4959 }
4960}
4961
4962static bool vht_set_mcs_mask(struct ieee80211_supported_band *sband,
4963 struct nl80211_txrate_vht *txrate,
4964 u16 mcs[NL80211_VHT_NSS_MAX])
4965{
4966 u16 tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4967 u16 tx_mcs_mask[NL80211_VHT_NSS_MAX] = {};
4968 u8 i;
4969
4970 if (!sband->vht_cap.vht_supported)
4971 return false;
4972
4973 memset(mcs, 0, sizeof(u16) * NL80211_VHT_NSS_MAX);
4974
4975 /* Build vht_mcs_mask from VHT capabilities */
4976 vht_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4977
4978 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
4979 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4980 mcs[i] = txrate->mcs[i];
4981 else
4982 return false;
4983 }
4984
4985 return true;
4986}
4987
eb89a6a6
MH		 4988static u16 he_mcs_map_to_mcs_mask(u8 he_mcs_map)
4989{
4990 switch (he_mcs_map) {
4991 case IEEE80211_HE_MCS_NOT_SUPPORTED:
4992 return 0;
4993 case IEEE80211_HE_MCS_SUPPORT_0_7:
4994 return 0x00FF;
4995 case IEEE80211_HE_MCS_SUPPORT_0_9:
4996 return 0x03FF;
4997 case IEEE80211_HE_MCS_SUPPORT_0_11:
4998 return 0xFFF;
4999 default:
5000 break;
5001 }
5002 return 0;
5003}
5004
5005static void he_build_mcs_mask(u16 he_mcs_map,
5006 u16 he_mcs_mask[NL80211_HE_NSS_MAX])
5007{
5008 u8 nss;
5009
5010 for (nss = 0; nss < NL80211_HE_NSS_MAX; nss++) {
5011 he_mcs_mask[nss] = he_mcs_map_to_mcs_mask(he_mcs_map & 0x03);
5012 he_mcs_map >>= 2;
5013 }
5014}
5015
7b0a0e3c 5016static u16 he_get_txmcsmap(struct genl_info *info, unsigned int link_id,
eb89a6a6
MH		 5017 const struct ieee80211_sta_he_cap *he_cap)
5018{
5019 struct net_device *dev = info->user_ptr[1];
5020 struct wireless_dev *wdev = dev->ieee80211_ptr;
7b0a0e3c
JB		 5021 struct cfg80211_chan_def *chandef;
5022 __le16 tx_mcs;
eb89a6a6 5023
7b0a0e3c
JB		 5024 chandef = wdev_chandef(wdev, link_id);
5025 if (!chandef) {
5026 /*
5027 * This is probably broken, but we never maintained
5028 * a chandef in these cases, so it always was.
5029 */
5030 return le16_to_cpu(he_cap->he_mcs_nss_supp.tx_mcs_80);
5031 }
5032
5033 switch (chandef->width) {
eb89a6a6
MH		 5034 case NL80211_CHAN_WIDTH_80P80:
5035 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80p80;
5036 break;
5037 case NL80211_CHAN_WIDTH_160:
5038 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_160;
5039 break;
5040 default:
5041 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80;
5042 break;
5043 }
7b0a0e3c 5044
eb89a6a6
MH		 5045 return le16_to_cpu(tx_mcs);
5046}
5047
5048static bool he_set_mcs_mask(struct genl_info *info,
5049 struct wireless_dev *wdev,
5050 struct ieee80211_supported_band *sband,
5051 struct nl80211_txrate_he *txrate,
7b0a0e3c
JB		 5052 u16 mcs[NL80211_HE_NSS_MAX],
5053 unsigned int link_id)
eb89a6a6
MH		 5054{
5055 const struct ieee80211_sta_he_cap *he_cap;
5056 u16 tx_mcs_mask[NL80211_HE_NSS_MAX] = {};
5057 u16 tx_mcs_map = 0;
5058 u8 i;
5059
5060 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
5061 if (!he_cap)
5062 return false;
5063
5064 memset(mcs, 0, sizeof(u16) * NL80211_HE_NSS_MAX);
5065
7b0a0e3c 5066 tx_mcs_map = he_get_txmcsmap(info, link_id, he_cap);
eb89a6a6
MH		 5067
5068 /* Build he_mcs_mask from HE capabilities */
5069 he_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
5070
5071 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
5072 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
5073 mcs[i] = txrate->mcs[i];
5074 else
5075 return false;
5076 }
5077
5078 return true;
5079}
5080
a7c7fbff 5081static int nl80211_parse_tx_bitrate_mask(struct genl_info *info,
9a5f6488
TC		 5082 struct nlattr *attrs[],
5083 enum nl80211_attrs attr,
eb89a6a6 5084 struct cfg80211_bitrate_mask *mask,
857b34c4 5085 struct net_device *dev,
7b0a0e3c
JB		 5086 bool default_all_enabled,
5087 unsigned int link_id)
a7c7fbff
PK		 5088{
5089 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
5090 struct cfg80211_registered_device *rdev = info->user_ptr[0];
eb89a6a6 5091 struct wireless_dev *wdev = dev->ieee80211_ptr;
a7c7fbff
PK		 5092 int rem, i;
5093 struct nlattr *tx_rates;
5094 struct ieee80211_supported_band *sband;
eb89a6a6 5095 u16 vht_tx_mcs_map, he_tx_mcs_map;
a7c7fbff
PK		 5096
5097 memset(mask, 0, sizeof(*mask));
5098 /* Default to all rates enabled */
5099 for (i = 0; i < NUM_NL80211_BANDS; i++) {
eb89a6a6
MH		 5100 const struct ieee80211_sta_he_cap *he_cap;
5101
857b34c4
RM		 5102 if (!default_all_enabled)
5103 break;
5104
a7c7fbff
PK		 5105 sband = rdev->wiphy.bands[i];
5106
5107 if (!sband)
5108 continue;
5109
5110 mask->control[i].legacy = (1 << sband->n_bitrates) - 1;
5111 memcpy(mask->control[i].ht_mcs,
5112 sband->ht_cap.mcs.rx_mask,
5113 sizeof(mask->control[i].ht_mcs));
5114
9df66d5b
PKS		 5115 if (sband->vht_cap.vht_supported) {
5116 vht_tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
5117 vht_build_mcs_mask(vht_tx_mcs_map, mask->control[i].vht_mcs);
5118 }
eb89a6a6
MH		 5119
5120 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
5121 if (!he_cap)
5122 continue;
5123
7b0a0e3c 5124 he_tx_mcs_map = he_get_txmcsmap(info, link_id, he_cap);
eb89a6a6
MH		 5125 he_build_mcs_mask(he_tx_mcs_map, mask->control[i].he_mcs);
5126
5127 mask->control[i].he_gi = 0xFF;
5128 mask->control[i].he_ltf = 0xFF;
a7c7fbff
PK		 5129 }
5130
5131 /* if no rates are given set it back to the defaults */
9a5f6488 5132 if (!attrs[attr])
a7c7fbff
PK		 5133 goto out;
5134
5135 /* The nested attribute uses enum nl80211_band as the index. This maps
5136 * directly to the enum nl80211_band values used in cfg80211.
5137 */
5138 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
9a5f6488 5139 nla_for_each_nested(tx_rates, attrs[attr], rem) {
a7c7fbff
PK		 5140 enum nl80211_band band = nla_type(tx_rates);
5141 int err;
5142
5143 if (band < 0 || band >= NUM_NL80211_BANDS)
5144 return -EINVAL;
5145 sband = rdev->wiphy.bands[band];
5146 if (sband == NULL)
5147 return -EINVAL;
8cb08174
JB		 5148 err = nla_parse_nested_deprecated(tb, NL80211_TXRATE_MAX,
5149 tx_rates,
5150 nl80211_txattr_policy,
5151 info->extack);
a7c7fbff
PK		 5152 if (err)
5153 return err;
5154 if (tb[NL80211_TXRATE_LEGACY]) {
5155 mask->control[band].legacy = rateset_to_mask(
5156 sband,
5157 nla_data(tb[NL80211_TXRATE_LEGACY]),
5158 nla_len(tb[NL80211_TXRATE_LEGACY]));
5159 if ((mask->control[band].legacy == 0) &&
5160 nla_len(tb[NL80211_TXRATE_LEGACY]))
5161 return -EINVAL;
5162 }
5163 if (tb[NL80211_TXRATE_HT]) {
5164 if (!ht_rateset_to_mask(
5165 sband,
5166 nla_data(tb[NL80211_TXRATE_HT]),
5167 nla_len(tb[NL80211_TXRATE_HT]),
5168 mask->control[band].ht_mcs))
5169 return -EINVAL;
5170 }
c4a30446 5171
a7c7fbff
PK		 5172 if (tb[NL80211_TXRATE_VHT]) {
5173 if (!vht_set_mcs_mask(
5174 sband,
5175 nla_data(tb[NL80211_TXRATE_VHT]),
5176 mask->control[band].vht_mcs))
5177 return -EINVAL;
5178 }
c4a30446 5179
a7c7fbff
PK		 5180 if (tb[NL80211_TXRATE_GI]) {
5181 mask->control[band].gi =
5182 nla_get_u8(tb[NL80211_TXRATE_GI]);
5183 if (mask->control[band].gi > NL80211_TXRATE_FORCE_LGI)
5184 return -EINVAL;
5185 }
eb89a6a6
MH		 5186 if (tb[NL80211_TXRATE_HE] &&
5187 !he_set_mcs_mask(info, wdev, sband,
5188 nla_data(tb[NL80211_TXRATE_HE]),
7b0a0e3c
JB		 5189 mask->control[band].he_mcs,
5190 link_id))
eb89a6a6 5191 return -EINVAL;
c4a30446 5192
eb89a6a6
MH		 5193 if (tb[NL80211_TXRATE_HE_GI])
5194 mask->control[band].he_gi =
5195 nla_get_u8(tb[NL80211_TXRATE_HE_GI]);
5196 if (tb[NL80211_TXRATE_HE_LTF])
5197 mask->control[band].he_ltf =
5198 nla_get_u8(tb[NL80211_TXRATE_HE_LTF]);
a7c7fbff
PK		 5199
5200 if (mask->control[band].legacy == 0) {
eb89a6a6 5201 /* don't allow empty legacy rates if HT, VHT or HE
a7c7fbff
PK		 5202 * are not even supported.
5203 */
5204 if (!(rdev->wiphy.bands[band]->ht_cap.ht_supported ||
eb89a6a6
MH		 5205 rdev->wiphy.bands[band]->vht_cap.vht_supported ||
5206 ieee80211_get_he_iftype_cap(sband, wdev->iftype)))
a7c7fbff
PK		 5207 return -EINVAL;
5208
5209 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
5210 if (mask->control[band].ht_mcs[i])
5211 goto out;
5212
5213 for (i = 0; i < NL80211_VHT_NSS_MAX; i++)
5214 if (mask->control[band].vht_mcs[i])
5215 goto out;
5216
eb89a6a6
MH		 5217 for (i = 0; i < NL80211_HE_NSS_MAX; i++)
5218 if (mask->control[band].he_mcs[i])
5219 goto out;
5220
a7c7fbff
PK		 5221 /* legacy and mcs rates may not be both empty */
5222 return -EINVAL;
5223 }
5224 }
5225
5226out:
5227 return 0;
5228}
5229
8564e382
JB		 5230static int validate_beacon_tx_rate(struct cfg80211_registered_device *rdev,
5231 enum nl80211_band band,
5232 struct cfg80211_bitrate_mask *beacon_rate)
a7c7fbff 5233{
c4a30446 5234 u32 count_ht, count_vht, count_he, i;
8564e382 5235 u32 rate = beacon_rate->control[band].legacy;
a7c7fbff
PK		 5236
5237 /* Allow only one rate */
5238 if (hweight32(rate) > 1)
5239 return -EINVAL;
5240
5241 count_ht = 0;
5242 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
8564e382 5243 if (hweight8(beacon_rate->control[band].ht_mcs[i]) > 1) {
a7c7fbff 5244 return -EINVAL;
8564e382 5245 } else if (beacon_rate->control[band].ht_mcs[i]) {
a7c7fbff
PK		 5246 count_ht++;
5247 if (count_ht > 1)
5248 return -EINVAL;
5249 }
5250 if (count_ht && rate)
5251 return -EINVAL;
5252 }
5253
5254 count_vht = 0;
5255 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
8564e382 5256 if (hweight16(beacon_rate->control[band].vht_mcs[i]) > 1) {
a7c7fbff 5257 return -EINVAL;
8564e382 5258 } else if (beacon_rate->control[band].vht_mcs[i]) {
a7c7fbff
PK		 5259 count_vht++;
5260 if (count_vht > 1)
5261 return -EINVAL;
5262 }
5263 if (count_vht && rate)
5264 return -EINVAL;
5265 }
5266
c4a30446
RM		 5267 count_he = 0;
5268 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
5269 if (hweight16(beacon_rate->control[band].he_mcs[i]) > 1) {
5270 return -EINVAL;
5271 } else if (beacon_rate->control[band].he_mcs[i]) {
5272 count_he++;
5273 if (count_he > 1)
5274 return -EINVAL;
5275 }
5276 if (count_he && rate)
5277 return -EINVAL;
5278 }
5279
5280 if ((count_ht && count_vht && count_he) ||
5281 (!rate && !count_ht && !count_vht && !count_he))
a7c7fbff
PK		 5282 return -EINVAL;
5283
8564e382
JB		 5284 if (rate &&
5285 !wiphy_ext_feature_isset(&rdev->wiphy,
5286 NL80211_EXT_FEATURE_BEACON_RATE_LEGACY))
5287 return -EINVAL;
5288 if (count_ht &&
5289 !wiphy_ext_feature_isset(&rdev->wiphy,
5290 NL80211_EXT_FEATURE_BEACON_RATE_HT))
5291 return -EINVAL;
5292 if (count_vht &&
5293 !wiphy_ext_feature_isset(&rdev->wiphy,
5294 NL80211_EXT_FEATURE_BEACON_RATE_VHT))
5295 return -EINVAL;
c4a30446
RM		 5296 if (count_he &&
5297 !wiphy_ext_feature_isset(&rdev->wiphy,
5298 NL80211_EXT_FEATURE_BEACON_RATE_HE))
5299 return -EINVAL;
8564e382 5300
a7c7fbff
PK		 5301 return 0;
5302}
5303
dc1e3cb8
JC		 5304static int nl80211_parse_mbssid_config(struct wiphy *wiphy,
5305 struct net_device *dev,
5306 struct nlattr *attrs,
5307 struct cfg80211_mbssid_config *config,
5308 u8 num_elems)
5309{
5310 struct nlattr *tb[NL80211_MBSSID_CONFIG_ATTR_MAX + 1];
5311
5312 if (!wiphy->mbssid_max_interfaces)
5313 return -EOPNOTSUPP;
5314
5315 if (nla_parse_nested(tb, NL80211_MBSSID_CONFIG_ATTR_MAX, attrs, NULL,
5316 NULL) ||
5317 !tb[NL80211_MBSSID_CONFIG_ATTR_INDEX])
5318 return -EINVAL;
5319
5320 config->ema = nla_get_flag(tb[NL80211_MBSSID_CONFIG_ATTR_EMA]);
5321 if (config->ema) {
5322 if (!wiphy->ema_max_profile_periodicity)
5323 return -EOPNOTSUPP;
5324
5325 if (num_elems > wiphy->ema_max_profile_periodicity)
5326 return -EINVAL;
5327 }
5328
5329 config->index = nla_get_u8(tb[NL80211_MBSSID_CONFIG_ATTR_INDEX]);
5330 if (config->index >= wiphy->mbssid_max_interfaces ||
5331 (!config->index && !num_elems))
5332 return -EINVAL;
5333
5334 if (tb[NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX]) {
5335 u32 tx_ifindex =
5336 nla_get_u32(tb[NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX]);
5337
5338 if ((!config->index && tx_ifindex != dev->ifindex) ||
5339 (config->index && tx_ifindex == dev->ifindex))
5340 return -EINVAL;
5341
5342 if (tx_ifindex != dev->ifindex) {
5343 struct net_device *tx_netdev =
5344 dev_get_by_index(wiphy_net(wiphy), tx_ifindex);
5345
5346 if (!tx_netdev || !tx_netdev->ieee80211_ptr ||
5347 tx_netdev->ieee80211_ptr->wiphy != wiphy ||
5348 tx_netdev->ieee80211_ptr->iftype !=
5349 NL80211_IFTYPE_AP) {
5350 dev_put(tx_netdev);
5351 return -EINVAL;
5352 }
5353
5354 config->tx_wdev = tx_netdev->ieee80211_ptr;
5355 } else {
5356 config->tx_wdev = dev->ieee80211_ptr;
5357 }
5358 } else if (!config->index) {
5359 config->tx_wdev = dev->ieee80211_ptr;
5360 } else {
5361 return -EINVAL;
5362 }
5363
5364 return 0;
5365}
5366
5367static struct cfg80211_mbssid_elems *
5368nl80211_parse_mbssid_elems(struct wiphy *wiphy, struct nlattr *attrs)
5369{
5370 struct nlattr *nl_elems;
5371 struct cfg80211_mbssid_elems *elems;
5372 int rem_elems;
5373 u8 i = 0, num_elems = 0;
5374
5375 if (!wiphy->mbssid_max_interfaces)
5376 return ERR_PTR(-EINVAL);
5377
5378 nla_for_each_nested(nl_elems, attrs, rem_elems)
5379 num_elems++;
5380
5381 elems = kzalloc(struct_size(elems, elem, num_elems), GFP_KERNEL);
5382 if (!elems)
5383 return ERR_PTR(-ENOMEM);
5384
5385 nla_for_each_nested(nl_elems, attrs, rem_elems) {
5386 elems->elem[i].data = nla_data(nl_elems);
5387 elems->elem[i].len = nla_len(nl_elems);
5388 i++;
5389 }
5390 elems->cnt = num_elems;
5391 return elems;
5392}
5393
3d48cb74
RS		 5394static int nl80211_parse_he_bss_color(struct nlattr *attrs,
5395 struct cfg80211_he_bss_color *he_bss_color)
5396{
5397 struct nlattr *tb[NL80211_HE_BSS_COLOR_ATTR_MAX + 1];
5398 int err;
5399
5400 err = nla_parse_nested(tb, NL80211_HE_BSS_COLOR_ATTR_MAX, attrs,
5401 he_bss_color_policy, NULL);
5402 if (err)
5403 return err;
5404
5405 if (!tb[NL80211_HE_BSS_COLOR_ATTR_COLOR])
5406 return -EINVAL;
5407
5408 he_bss_color->color =
5409 nla_get_u8(tb[NL80211_HE_BSS_COLOR_ATTR_COLOR]);
5410 he_bss_color->enabled =
5411 !nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_DISABLED]);
5412 he_bss_color->partial =
5413 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_PARTIAL]);
5414
5415 return 0;
5416}
5417
81e54d08
PKC		 5418static int nl80211_parse_beacon(struct cfg80211_registered_device *rdev,
5419 struct nlattr *attrs[],
8860020e 5420 struct cfg80211_beacon_data *bcn)
ed1b6cc7 5421{
8860020e 5422 bool haveinfo = false;
81e54d08 5423 int err;
ed1b6cc7 5424
8860020e 5425 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 5426
7b0a0e3c
JB		 5427 bcn->link_id = nl80211_link_id(attrs);
5428
a1193be8
SW		 5429 if (attrs[NL80211_ATTR_BEACON_HEAD]) {
5430 bcn->head = nla_data(attrs[NL80211_ATTR_BEACON_HEAD]);
5431 bcn->head_len = nla_len(attrs[NL80211_ATTR_BEACON_HEAD]);
8860020e
JB		 5432 if (!bcn->head_len)
5433 return -EINVAL;
5434 haveinfo = true;
ed1b6cc7
JB		 5435 }
5436
a1193be8
SW		 5437 if (attrs[NL80211_ATTR_BEACON_TAIL]) {
5438 bcn->tail = nla_data(attrs[NL80211_ATTR_BEACON_TAIL]);
5439 bcn->tail_len = nla_len(attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 5440 haveinfo = true;
ed1b6cc7
JB		 5441 }
5442
4c476991
JB		 5443 if (!haveinfo)
5444 return -EINVAL;
3b85875a 5445
a1193be8
SW		 5446 if (attrs[NL80211_ATTR_IE]) {
5447 bcn->beacon_ies = nla_data(attrs[NL80211_ATTR_IE]);
5448 bcn->beacon_ies_len = nla_len(attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 5449 }
5450
a1193be8 5451 if (attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 5452 bcn->proberesp_ies =
a1193be8 5453 nla_data(attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 5454 bcn->proberesp_ies_len =
a1193be8 5455 nla_len(attrs[NL80211_ATTR_IE_PROBE_RESP]);
9946ecfb
JM		 5456 }
5457
a1193be8 5458 if (attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 5459 bcn->assocresp_ies =
a1193be8 5460 nla_data(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 5461 bcn->assocresp_ies_len =
a1193be8 5462 nla_len(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
9946ecfb
JM		 5463 }
5464
a1193be8
SW		 5465 if (attrs[NL80211_ATTR_PROBE_RESP]) {
5466 bcn->probe_resp = nla_data(attrs[NL80211_ATTR_PROBE_RESP]);
5467 bcn->probe_resp_len = nla_len(attrs[NL80211_ATTR_PROBE_RESP]);
00f740e1
AN		 5468 }
5469
81e54d08
PKC		 5470 if (attrs[NL80211_ATTR_FTM_RESPONDER]) {
5471 struct nlattr *tb[NL80211_FTM_RESP_ATTR_MAX + 1];
5472
8cb08174
JB		 5473 err = nla_parse_nested_deprecated(tb,
5474 NL80211_FTM_RESP_ATTR_MAX,
5475 attrs[NL80211_ATTR_FTM_RESPONDER],
5476 NULL, NULL);
81e54d08
PKC		 5477 if (err)
5478 return err;
5479
5480 if (tb[NL80211_FTM_RESP_ATTR_ENABLED] &&
5481 wiphy_ext_feature_isset(&rdev->wiphy,
5482 NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER))
5483 bcn->ftm_responder = 1;
5484 else
5485 return -EOPNOTSUPP;
5486
5487 if (tb[NL80211_FTM_RESP_ATTR_LCI]) {
5488 bcn->lci = nla_data(tb[NL80211_FTM_RESP_ATTR_LCI]);
5489 bcn->lci_len = nla_len(tb[NL80211_FTM_RESP_ATTR_LCI]);
5490 }
5491
5492 if (tb[NL80211_FTM_RESP_ATTR_CIVICLOC]) {
5493 bcn->civicloc = nla_data(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
5494 bcn->civicloc_len = nla_len(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
5495 }
5496 } else {
5497 bcn->ftm_responder = -1;
5498 }
5499
3d48cb74
RS		 5500 if (attrs[NL80211_ATTR_HE_BSS_COLOR]) {
5501 err = nl80211_parse_he_bss_color(attrs[NL80211_ATTR_HE_BSS_COLOR],
5502 &bcn->he_bss_color);
5503 if (err)
5504 return err;
5505 bcn->he_bss_color_valid = true;
5506 }
5507
dc1e3cb8
JC		 5508 if (attrs[NL80211_ATTR_MBSSID_ELEMS]) {
5509 struct cfg80211_mbssid_elems *mbssid =
5510 nl80211_parse_mbssid_elems(&rdev->wiphy,
5511 attrs[NL80211_ATTR_MBSSID_ELEMS]);
5512
5513 if (IS_ERR(mbssid))
5514 return PTR_ERR(mbssid);
5515
5516 bcn->mbssid_ies = mbssid;
5517 }
5518
8860020e
JB		 5519 return 0;
5520}
5521
796e90f4
JC		 5522static int nl80211_parse_he_obss_pd(struct nlattr *attrs,
5523 struct ieee80211_he_obss_pd *he_obss_pd)
5524{
5525 struct nlattr *tb[NL80211_HE_OBSS_PD_ATTR_MAX + 1];
5526 int err;
5527
5528 err = nla_parse_nested(tb, NL80211_HE_OBSS_PD_ATTR_MAX, attrs,
5529 he_obss_pd_policy, NULL);
5530 if (err)
5531 return err;
5532
f5bec330
RM		 5533 if (!tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL])
5534 return -EINVAL;
5535
5536 he_obss_pd->sr_ctrl = nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL]);
5537
6c8b6e4a
RM		 5538 if (tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET])
5539 he_obss_pd->min_offset =
5540 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET]);
5541 if (tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET])
5542 he_obss_pd->max_offset =
5543 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET]);
f5bec330
RM		 5544 if (tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET])
5545 he_obss_pd->non_srg_max_offset =
5546 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET]);
6c8b6e4a
RM		 5547
5548 if (he_obss_pd->min_offset > he_obss_pd->max_offset)
796e90f4
JC		 5549 return -EINVAL;
5550
f5bec330
RM		 5551 if (tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP])
5552 memcpy(he_obss_pd->bss_color_bitmap,
5553 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP]),
5554 sizeof(he_obss_pd->bss_color_bitmap));
5555
5556 if (tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP])
5557 memcpy(he_obss_pd->partial_bssid_bitmap,
5558 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP]),
5559 sizeof(he_obss_pd->partial_bssid_bitmap));
5560
796e90f4
JC		 5561 he_obss_pd->enable = true;
5562
5563 return 0;
5564}
5565
291c49de
AD		 5566static int nl80211_parse_fils_discovery(struct cfg80211_registered_device *rdev,
5567 struct nlattr *attrs,
5568 struct cfg80211_ap_settings *params)
5569{
5570 struct nlattr *tb[NL80211_FILS_DISCOVERY_ATTR_MAX + 1];
5571 int ret;
5572 struct cfg80211_fils_discovery *fd = &params->fils_discovery;
5573
5574 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5575 NL80211_EXT_FEATURE_FILS_DISCOVERY))
5576 return -EINVAL;
5577
5578 ret = nla_parse_nested(tb, NL80211_FILS_DISCOVERY_ATTR_MAX, attrs,
5579 NULL, NULL);
5580 if (ret)
5581 return ret;
5582
5583 if (!tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN] ||
5584 !tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX] ||
5585 !tb[NL80211_FILS_DISCOVERY_ATTR_TMPL])
5586 return -EINVAL;
5587
5588 fd->tmpl_len = nla_len(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5589 fd->tmpl = nla_data(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5590 fd->min_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN]);
5591 fd->max_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX]);
5592
5593 return 0;
5594}
5595
7443dcd1
AD		 5596static int
5597nl80211_parse_unsol_bcast_probe_resp(struct cfg80211_registered_device *rdev,
5598 struct nlattr *attrs,
5599 struct cfg80211_ap_settings *params)
5600{
5601 struct nlattr *tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1];
5602 int ret;
5603 struct cfg80211_unsol_bcast_probe_resp *presp =
5604 &params->unsol_bcast_probe_resp;
5605
5606 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5607 NL80211_EXT_FEATURE_UNSOL_BCAST_PROBE_RESP))
5608 return -EINVAL;
5609
5610 ret = nla_parse_nested(tb, NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX,
5611 attrs, NULL, NULL);
5612 if (ret)
5613 return ret;
5614
5615 if (!tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] ||
5616 !tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL])
5617 return -EINVAL;
5618
5619 presp->tmpl = nla_data(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5620 presp->tmpl_len = nla_len(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5621 presp->interval = nla_get_u32(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT]);
5622 return 0;
5623}
5624
66cd794e 5625static void nl80211_check_ap_rate_selectors(struct cfg80211_ap_settings *params,
153e2a11 5626 const struct element *rates)
66cd794e
JB		 5627{
5628 int i;
5629
5630 if (!rates)
5631 return;
5632
153e2a11
JB		 5633 for (i = 0; i < rates->datalen; i++) {
5634 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
66cd794e 5635 params->ht_required = true;
153e2a11 5636 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_VHT_PHY)
66cd794e 5637 params->vht_required = true;
153e2a11 5638 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_HE_PHY)
2a392596 5639 params->he_required = true;
153e2a11 5640 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_SAE_H2E)
d6587602 5641 params->sae_h2e_required = true;
66cd794e
JB		 5642 }
5643}
5644
5645/*
5646 * Since the nl80211 API didn't include, from the beginning, attributes about
5647 * HT/VHT requirements/capabilities, we parse them out of the IEs for the
5648 * benefit of drivers that rebuild IEs in the firmware.
5649 */
8bc65d38 5650static int nl80211_calculate_ap_params(struct cfg80211_ap_settings *params)
66cd794e
JB		 5651{
5652 const struct cfg80211_beacon_data *bcn = &params->beacon;
ba83bfb1
IM		 5653 size_t ies_len = bcn->tail_len;
5654 const u8 *ies = bcn->tail;
153e2a11
JB		 5655 const struct element *rates;
5656 const struct element *cap;
66cd794e 5657
153e2a11 5658 rates = cfg80211_find_elem(WLAN_EID_SUPP_RATES, ies, ies_len);
66cd794e
JB		 5659 nl80211_check_ap_rate_selectors(params, rates);
5660
153e2a11 5661 rates = cfg80211_find_elem(WLAN_EID_EXT_SUPP_RATES, ies, ies_len);
66cd794e
JB		 5662 nl80211_check_ap_rate_selectors(params, rates);
5663
153e2a11
JB		 5664 cap = cfg80211_find_elem(WLAN_EID_HT_CAPABILITY, ies, ies_len);
5665 if (cap && cap->datalen >= sizeof(*params->ht_cap))
5666 params->ht_cap = (void *)cap->data;
5667 cap = cfg80211_find_elem(WLAN_EID_VHT_CAPABILITY, ies, ies_len);
5668 if (cap && cap->datalen >= sizeof(*params->vht_cap))
5669 params->vht_cap = (void *)cap->data;
5670 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_CAPABILITY, ies, ies_len);
5671 if (cap && cap->datalen >= sizeof(*params->he_cap) + 1)
5672 params->he_cap = (void *)(cap->data + 1);
5673 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_OPERATION, ies, ies_len);
5674 if (cap && cap->datalen >= sizeof(*params->he_oper) + 1)
5675 params->he_oper = (void *)(cap->data + 1);
8bc65d38
AD		 5676 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_EHT_CAPABILITY, ies, ies_len);
5677 if (cap) {
5678 if (!cap->datalen)
5679 return -EINVAL;
5680 params->eht_cap = (void *)(cap->data + 1);
5681 if (!ieee80211_eht_capa_size_ok((const u8 *)params->he_cap,
5682 (const u8 *)params->eht_cap,
ea5cba26 5683 cap->datalen - 1, true))
8bc65d38
AD		 5684 return -EINVAL;
5685 }
5686 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_EHT_OPERATION, ies, ies_len);
5687 if (cap) {
5688 if (!cap->datalen)
5689 return -EINVAL;
5690 params->eht_oper = (void *)(cap->data + 1);
5691 if (!ieee80211_eht_oper_size_ok((const u8 *)params->eht_oper,
5692 cap->datalen - 1))
5693 return -EINVAL;
5694 }
5695 return 0;
66cd794e
JB		 5696}
5697
46c1dd0c
FF		 5698static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
5699 struct cfg80211_ap_settings *params)
5700{
5701 struct wireless_dev *wdev;
46c1dd0c 5702
53873f13 5703 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
46c1dd0c
FF		 5704 if (wdev->iftype != NL80211_IFTYPE_AP &&
5705 wdev->iftype != NL80211_IFTYPE_P2P_GO)
5706 continue;
5707
7b0a0e3c 5708 if (!wdev->u.ap.preset_chandef.chan)
46c1dd0c
FF		 5709 continue;
5710
7b0a0e3c
JB		 5711 params->chandef = wdev->u.ap.preset_chandef;
5712 return true;
46c1dd0c
FF		 5713 }
5714
7b0a0e3c 5715 return false;
46c1dd0c
FF		 5716}
5717
e39e5b5e
JM		 5718static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
5719 enum nl80211_auth_type auth_type,
5720 enum nl80211_commands cmd)
5721{
5722 if (auth_type > NL80211_AUTHTYPE_MAX)
5723 return false;
5724
5725 switch (cmd) {
5726 case NL80211_CMD_AUTHENTICATE:
5727 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
5728 auth_type == NL80211_AUTHTYPE_SAE)
5729 return false;
63181060
JM		 5730 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5731 NL80211_EXT_FEATURE_FILS_STA) &&
5732 (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5733 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5734 auth_type == NL80211_AUTHTYPE_FILS_PK))
5735 return false;
e39e5b5e
JM		 5736 return true;
5737 case NL80211_CMD_CONNECT:
10773a7c 5738 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
26f7044e
CHH		 5739 !wiphy_ext_feature_isset(&rdev->wiphy,
5740 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10773a7c 5741 auth_type == NL80211_AUTHTYPE_SAE)
a3caf744 5742 return false;
10773a7c 5743
a3caf744
VK		 5744 /* FILS with SK PFS or PK not supported yet */
5745 if (auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5746 auth_type == NL80211_AUTHTYPE_FILS_PK)
5747 return false;
5748 if (!wiphy_ext_feature_isset(
5749 &rdev->wiphy,
5750 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
5751 auth_type == NL80211_AUTHTYPE_FILS_SK)
5752 return false;
5753 return true;
e39e5b5e 5754 case NL80211_CMD_START_AP:
2831a631
CHH		 5755 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5756 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP) &&
5757 auth_type == NL80211_AUTHTYPE_SAE)
e39e5b5e 5758 return false;
63181060
JM		 5759 /* FILS not supported yet */
5760 if (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5761 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5762 auth_type == NL80211_AUTHTYPE_FILS_PK)
5763 return false;
e39e5b5e
JM		 5764 return true;
5765 default:
5766 return false;
5767 }
5768}
5769
8860020e
JB		 5770static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
5771{
5772 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 5773 unsigned int link_id = nl80211_link_id(info->attrs);
8860020e
JB		 5774 struct net_device *dev = info->user_ptr[1];
5775 struct wireless_dev *wdev = dev->ieee80211_ptr;
9e263e19 5776 struct cfg80211_ap_settings *params;
8860020e
JB		 5777 int err;
5778
5779 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5780 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5781 return -EOPNOTSUPP;
5782
5783 if (!rdev->ops->start_ap)
5784 return -EOPNOTSUPP;
5785
7b0a0e3c 5786 if (wdev->links[link_id].ap.beacon_interval)
8860020e
JB		 5787 return -EALREADY;
5788
8860020e
JB		 5789 /* these are required for START_AP */
5790 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
5791 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
5792 !info->attrs[NL80211_ATTR_BEACON_HEAD])
5793 return -EINVAL;
5794
9e263e19
JB		 5795 params = kzalloc(sizeof(*params), GFP_KERNEL);
5796 if (!params)
5797 return -ENOMEM;
5798
5799 err = nl80211_parse_beacon(rdev, info->attrs, &params->beacon);
8860020e 5800 if (err)
9e263e19 5801 goto out;
8860020e 5802
9e263e19 5803 params->beacon_interval =
8860020e 5804 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
9e263e19 5805 params->dtim_period =
8860020e
JB		 5806 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
5807
0c317a02 5808 err = cfg80211_validate_beacon_int(rdev, dev->ieee80211_ptr->iftype,
9e263e19 5809 params->beacon_interval);
8860020e 5810 if (err)
9e263e19 5811 goto out;
8860020e
JB		 5812
5813 /*
5814 * In theory, some of these attributes should be required here
5815 * but since they were not used when the command was originally
5816 * added, keep them optional for old user space programs to let
5817 * them continue to work with drivers that do not need the
5818 * additional information -- drivers must check!
5819 */
5820 if (info->attrs[NL80211_ATTR_SSID]) {
9e263e19
JB		 5821 params->ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5822 params->ssid_len =
8860020e 5823 nla_len(info->attrs[NL80211_ATTR_SSID]);
9e263e19
JB		 5824 if (params->ssid_len == 0) {
5825 err = -EINVAL;
5826 goto out;
5827 }
7b0a0e3c
JB		 5828
5829 if (wdev->u.ap.ssid_len &&
5830 (wdev->u.ap.ssid_len != params->ssid_len ||
5831 memcmp(wdev->u.ap.ssid, params->ssid, params->ssid_len))) {
5832 /* require identical SSID for MLO */
5833 err = -EINVAL;
5834 goto out;
5835 }
5836 } else if (wdev->valid_links) {
5837 /* require SSID for MLO */
5838 err = -EINVAL;
5839 goto out;
8860020e
JB		 5840 }
5841
ab0d76f6 5842 if (info->attrs[NL80211_ATTR_HIDDEN_SSID])
9e263e19 5843 params->hidden_ssid = nla_get_u32(
8860020e 5844 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
8860020e 5845
9e263e19 5846 params->privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
8860020e
JB		 5847
5848 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
9e263e19 5849 params->auth_type = nla_get_u32(
8860020e 5850 info->attrs[NL80211_ATTR_AUTH_TYPE]);
9e263e19
JB		 5851 if (!nl80211_valid_auth_type(rdev, params->auth_type,
5852 NL80211_CMD_START_AP)) {
5853 err = -EINVAL;
5854 goto out;
5855 }
8860020e 5856 } else
9e263e19 5857 params->auth_type = NL80211_AUTHTYPE_AUTOMATIC;
8860020e 5858
9e263e19 5859 err = nl80211_crypto_settings(rdev, info, &params->crypto,
8860020e
JB		 5860 NL80211_MAX_NR_CIPHER_SUITES);
5861 if (err)
9e263e19 5862 goto out;
8860020e 5863
1b658f11 5864 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
9e263e19
JB		 5865 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER)) {
5866 err = -EOPNOTSUPP;
5867 goto out;
5868 }
5869 params->inactivity_timeout = nla_get_u16(
1b658f11
VT		 5870 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
5871 }
5872
53cabad7 5873 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
9e263e19
JB		 5874 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
5875 err = -EINVAL;
5876 goto out;
5877 }
5878 params->p2p_ctwindow =
53cabad7 5879 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
9e263e19
JB		 5880 if (params->p2p_ctwindow != 0 &&
5881 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN)) {
5882 err = -EINVAL;
5883 goto out;
5884 }
53cabad7
JB		 5885 }
5886
5887 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
5888 u8 tmp;
5889
9e263e19
JB		 5890 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
5891 err = -EINVAL;
5892 goto out;
5893 }
53cabad7 5894 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
9e263e19
JB		 5895 params->p2p_opp_ps = tmp;
5896 if (params->p2p_opp_ps != 0 &&
5897 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS)) {
5898 err = -EINVAL;
5899 goto out;
5900 }
53cabad7
JB		 5901 }
5902
aa430da4 5903 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
9e263e19 5904 err = nl80211_parse_chandef(rdev, info, &params->chandef);
683b6d3b 5905 if (err)
9e263e19 5906 goto out;
7b0a0e3c
JB		 5907 } else if (wdev->valid_links) {
5908 /* with MLD need to specify the channel configuration */
5909 err = -EINVAL;
5910 goto out;
5911 } else if (wdev->u.ap.preset_chandef.chan) {
5912 params->chandef = wdev->u.ap.preset_chandef;
9e263e19
JB		 5913 } else if (!nl80211_get_ap_channel(rdev, params)) {
5914 err = -EINVAL;
5915 goto out;
5916 }
aa430da4 5917
9e263e19
JB		 5918 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params->chandef,
5919 wdev->iftype)) {
5920 err = -EINVAL;
5921 goto out;
5922 }
aa430da4 5923
c2653990
JB		 5924 wdev_lock(wdev);
5925
a7c7fbff 5926 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 5927 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
5928 NL80211_ATTR_TX_RATES,
9e263e19 5929 &params->beacon_rate,
7b0a0e3c 5930 dev, false, link_id);
a7c7fbff 5931 if (err)
c2653990 5932 goto out_unlock;
a7c7fbff 5933
9e263e19
JB		 5934 err = validate_beacon_tx_rate(rdev, params->chandef.chan->band,
5935 &params->beacon_rate);
a7c7fbff 5936 if (err)
c2653990 5937 goto out_unlock;
a7c7fbff
PK		 5938 }
5939
18998c38 5940 if (info->attrs[NL80211_ATTR_SMPS_MODE]) {
9e263e19 5941 params->smps_mode =
18998c38 5942 nla_get_u8(info->attrs[NL80211_ATTR_SMPS_MODE]);
9e263e19 5943 switch (params->smps_mode) {
18998c38
EP		 5944 case NL80211_SMPS_OFF:
5945 break;
5946 case NL80211_SMPS_STATIC:
5947 if (!(rdev->wiphy.features &
9e263e19
JB		 5948 NL80211_FEATURE_STATIC_SMPS)) {
5949 err = -EINVAL;
c2653990 5950 goto out_unlock;
9e263e19 5951 }
18998c38
EP		 5952 break;
5953 case NL80211_SMPS_DYNAMIC:
5954 if (!(rdev->wiphy.features &
9e263e19
JB		 5955 NL80211_FEATURE_DYNAMIC_SMPS)) {
5956 err = -EINVAL;
c2653990 5957 goto out_unlock;
9e263e19 5958 }
18998c38
EP		 5959 break;
5960 default:
9e263e19 5961 err = -EINVAL;
c2653990 5962 goto out_unlock;
18998c38
EP		 5963 }
5964 } else {
9e263e19 5965 params->smps_mode = NL80211_SMPS_OFF;
18998c38
EP		 5966 }
5967
9e263e19
JB		 5968 params->pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
5969 if (params->pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
5970 err = -EOPNOTSUPP;
c2653990 5971 goto out_unlock;
9e263e19 5972 }
6e8ef842 5973
4baf6bea 5974 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
9e263e19
JB		 5975 params->acl = parse_acl_data(&rdev->wiphy, info);
5976 if (IS_ERR(params->acl)) {
5977 err = PTR_ERR(params->acl);
05075fe7 5978 params->acl = NULL;
c2653990 5979 goto out_unlock;
9e263e19 5980 }
4baf6bea
OO		 5981 }
5982
9e263e19 5983 params->twt_responder =
a0de1ca3
JC		 5984 nla_get_flag(info->attrs[NL80211_ATTR_TWT_RESPONDER]);
5985
796e90f4
JC		 5986 if (info->attrs[NL80211_ATTR_HE_OBSS_PD]) {
5987 err = nl80211_parse_he_obss_pd(
5988 info->attrs[NL80211_ATTR_HE_OBSS_PD],
9e263e19 5989 &params->he_obss_pd);
bc7a39b4 5990 if (err)
c2653990 5991 goto out_unlock;
796e90f4
JC		 5992 }
5993
291c49de
AD		 5994 if (info->attrs[NL80211_ATTR_FILS_DISCOVERY]) {
5995 err = nl80211_parse_fils_discovery(rdev,
5996 info->attrs[NL80211_ATTR_FILS_DISCOVERY],
9e263e19 5997 params);
291c49de 5998 if (err)
c2653990 5999 goto out_unlock;
291c49de
AD		 6000 }
6001
7443dcd1
AD		 6002 if (info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP]) {
6003 err = nl80211_parse_unsol_bcast_probe_resp(
6004 rdev, info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP],
9e263e19 6005 params);
7443dcd1 6006 if (err)
c2653990 6007 goto out_unlock;
7443dcd1
AD		 6008 }
6009
dc1e3cb8
JC		 6010 if (info->attrs[NL80211_ATTR_MBSSID_CONFIG]) {
6011 err = nl80211_parse_mbssid_config(&rdev->wiphy, dev,
6012 info->attrs[NL80211_ATTR_MBSSID_CONFIG],
6013 &params->mbssid_config,
6014 params->beacon.mbssid_ies ?
6015 params->beacon.mbssid_ies->cnt :
6016 0);
6017 if (err)
c2653990 6018 goto out_unlock;
dc1e3cb8
JC		 6019 }
6020
8bc65d38
AD		 6021 err = nl80211_calculate_ap_params(params);
6022 if (err)
6023 goto out_unlock;
66cd794e 6024
47301a74
VJ		 6025 if (info->attrs[NL80211_ATTR_AP_SETTINGS_FLAGS])
6026 params->flags = nla_get_u32(
6027 info->attrs[NL80211_ATTR_AP_SETTINGS_FLAGS]);
6028 else if (info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])
6029 params->flags |= NL80211_AP_SETTINGS_EXTERNAL_AUTH_SUPPORT;
fe494370 6030
7b0a0e3c
JB		 6031 if (wdev->conn_owner_nlportid &&
6032 info->attrs[NL80211_ATTR_SOCKET_OWNER] &&
6033 wdev->conn_owner_nlportid != info->snd_portid) {
6034 err = -EINVAL;
6035 goto out_unlock;
6036 }
6037
6038 /* FIXME: validate MLO/link-id against driver capabilities */
6039
9e263e19 6040 err = rdev_start_ap(rdev, dev, params);
46c1dd0c 6041 if (!err) {
7b0a0e3c
JB		 6042 wdev->links[link_id].ap.beacon_interval = params->beacon_interval;
6043 wdev->links[link_id].ap.chandef = params->chandef;
6044 wdev->u.ap.ssid_len = params->ssid_len;
6045 memcpy(wdev->u.ap.ssid, params->ssid,
6046 params->ssid_len);
466a3061
DK		 6047
6048 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
6049 wdev->conn_owner_nlportid = info->snd_portid;
46c1dd0c 6050 }
7b0a0e3c 6051out_unlock:
c56589ed 6052 wdev_unlock(wdev);
9951ebfc 6053out:
9e263e19 6054 kfree(params->acl);
dc1e3cb8
JC		 6055 kfree(params->beacon.mbssid_ies);
6056 if (params->mbssid_config.tx_wdev &&
6057 params->mbssid_config.tx_wdev->netdev &&
6058 params->mbssid_config.tx_wdev->netdev != dev)
6059 dev_put(params->mbssid_config.tx_wdev->netdev);
9e263e19 6060 kfree(params);
77765eaf 6061
56d1893d 6062 return err;
ed1b6cc7
JB		 6063}
6064
8860020e
JB		 6065static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
6066{
6067 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 6068 unsigned int link_id = nl80211_link_id(info->attrs);
8860020e
JB		 6069 struct net_device *dev = info->user_ptr[1];
6070 struct wireless_dev *wdev = dev->ieee80211_ptr;
6071 struct cfg80211_beacon_data params;
6072 int err;
6073
6074 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
6075 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
6076 return -EOPNOTSUPP;
6077
6078 if (!rdev->ops->change_beacon)
6079 return -EOPNOTSUPP;
6080
7b0a0e3c 6081 if (!wdev->links[link_id].ap.beacon_interval)
8860020e
JB		 6082 return -EINVAL;
6083
81e54d08 6084 err = nl80211_parse_beacon(rdev, info->attrs, &params);
8860020e 6085 if (err)
dc1e3cb8 6086 goto out;
8860020e 6087
c56589ed
SW		 6088 wdev_lock(wdev);
6089 err = rdev_change_beacon(rdev, dev, &params);
6090 wdev_unlock(wdev);
6091
dc1e3cb8
JC		 6092out:
6093 kfree(params.mbssid_ies);
c56589ed 6094 return err;
8860020e
JB		 6095}
6096
6097static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 6098{
4c476991 6099 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 6100 unsigned int link_id = nl80211_link_id(info->attrs);
4c476991 6101 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 6102
7b0a0e3c 6103 return cfg80211_stop_ap(rdev, dev, link_id, false);
ed1b6cc7
JB		 6104}
6105
5727ef1b
JB		 6106static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
6107 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
6108 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
6109 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 6110 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 6111 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 6112 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 6113};
6114
eccb8e8f 6115static int parse_station_flags(struct genl_info *info,
bdd3ae3d 6116 enum nl80211_iftype iftype,
eccb8e8f 6117 struct station_parameters *params)
5727ef1b
JB		 6118{
6119 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 6120 struct nlattr *nla;
5727ef1b
JB		 6121 int flag;
6122
eccb8e8f
JB		 6123 /*
6124 * Try parsing the new attribute first so userspace
6125 * can specify both for older kernels.
6126 */
6127 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
6128 if (nla) {
6129 struct nl80211_sta_flag_update *sta_flags;
6130
6131 sta_flags = nla_data(nla);
6132 params->sta_flags_mask = sta_flags->mask;
6133 params->sta_flags_set = sta_flags->set;
77ee7c89 6134 params->sta_flags_set &= params->sta_flags_mask;
eccb8e8f
JB		 6135 if ((params->sta_flags_mask |
6136 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
6137 return -EINVAL;
6138 return 0;
6139 }
6140
6141 /* if present, parse the old attribute */
5727ef1b 6142
eccb8e8f 6143 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 6144 if (!nla)
6145 return 0;
6146
8cb08174 6147 if (nla_parse_nested_deprecated(flags, NL80211_STA_FLAG_MAX, nla, sta_flags_policy, info->extack))
5727ef1b
JB		 6148 return -EINVAL;
6149
bdd3ae3d
JB		 6150 /*
6151 * Only allow certain flags for interface types so that
6152 * other attributes are silently ignored. Remember that
6153 * this is backward compatibility code with old userspace
6154 * and shouldn't be hit in other cases anyway.
6155 */
6156 switch (iftype) {
6157 case NL80211_IFTYPE_AP:
6158 case NL80211_IFTYPE_AP_VLAN:
6159 case NL80211_IFTYPE_P2P_GO:
6160 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
6161 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
6162 BIT(NL80211_STA_FLAG_WME) |
6163 BIT(NL80211_STA_FLAG_MFP);
6164 break;
6165 case NL80211_IFTYPE_P2P_CLIENT:
6166 case NL80211_IFTYPE_STATION:
6167 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
6168 BIT(NL80211_STA_FLAG_TDLS_PEER);
6169 break;
6170 case NL80211_IFTYPE_MESH_POINT:
6171 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6172 BIT(NL80211_STA_FLAG_MFP) |
6173 BIT(NL80211_STA_FLAG_AUTHORIZED);
5cf3006c 6174 break;
bdd3ae3d
JB		 6175 default:
6176 return -EINVAL;
6177 }
5727ef1b 6178
3383b5a6
JB		 6179 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
6180 if (flags[flag]) {
eccb8e8f 6181 params->sta_flags_set |= (1<<flag);
5727ef1b 6182
3383b5a6
JB		 6183 /* no longer support new API additions in old API */
6184 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
6185 return -EINVAL;
6186 }
6187 }
6188
5727ef1b
JB		 6189 return 0;
6190}
6191
9bb7e0f2 6192bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info, int attr)
c8dcfd8a
FF		 6193{
6194 struct nlattr *rate;
8eb41c8d
VK		 6195 u32 bitrate;
6196 u16 bitrate_compat;
bbf67e45 6197 enum nl80211_rate_info rate_flg;
c8dcfd8a 6198
ae0be8de 6199 rate = nla_nest_start_noflag(msg, attr);
c8dcfd8a 6200 if (!rate)
db9c64cf 6201 return false;
c8dcfd8a
FF		 6202
6203 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
6204 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 6205 /* report 16-bit bitrate only if we can */
6206 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
db9c64cf
JB		 6207 if (bitrate > 0 &&
6208 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
6209 return false;
6210 if (bitrate_compat > 0 &&
6211 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
6212 return false;
6213
b51f3bee
JB		 6214 switch (info->bw) {
6215 case RATE_INFO_BW_5:
6216 rate_flg = NL80211_RATE_INFO_5_MHZ_WIDTH;
6217 break;
6218 case RATE_INFO_BW_10:
6219 rate_flg = NL80211_RATE_INFO_10_MHZ_WIDTH;
6220 break;
6221 default:
6222 WARN_ON(1);
7b506ff6 6223 fallthrough;
b51f3bee
JB		 6224 case RATE_INFO_BW_20:
6225 rate_flg = 0;
6226 break;
6227 case RATE_INFO_BW_40:
6228 rate_flg = NL80211_RATE_INFO_40_MHZ_WIDTH;
6229 break;
6230 case RATE_INFO_BW_80:
6231 rate_flg = NL80211_RATE_INFO_80_MHZ_WIDTH;
6232 break;
6233 case RATE_INFO_BW_160:
6234 rate_flg = NL80211_RATE_INFO_160_MHZ_WIDTH;
6235 break;
c4cbaf79
LC		 6236 case RATE_INFO_BW_HE_RU:
6237 rate_flg = 0;
6238 WARN_ON(!(info->flags & RATE_INFO_FLAGS_HE_MCS));
cfb14110
VJ		 6239 break;
6240 case RATE_INFO_BW_320:
6241 rate_flg = NL80211_RATE_INFO_320_MHZ_WIDTH;
6242 break;
6243 case RATE_INFO_BW_EHT_RU:
6244 rate_flg = 0;
6245 WARN_ON(!(info->flags & RATE_INFO_FLAGS_EHT_MCS));
6246 break;
b51f3bee
JB		 6247 }
6248
6249 if (rate_flg && nla_put_flag(msg, rate_flg))
6250 return false;
6251
db9c64cf
JB		 6252 if (info->flags & RATE_INFO_FLAGS_MCS) {
6253 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
6254 return false;
db9c64cf
JB		 6255 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
6256 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
6257 return false;
6258 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
6259 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
6260 return false;
6261 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
6262 return false;
db9c64cf
JB		 6263 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
6264 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
6265 return false;
c4cbaf79
LC		 6266 } else if (info->flags & RATE_INFO_FLAGS_HE_MCS) {
6267 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_MCS, info->mcs))
6268 return false;
6269 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_NSS, info->nss))
6270 return false;
6271 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_GI, info->he_gi))
6272 return false;
6273 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_DCM, info->he_dcm))
6274 return false;
6275 if (info->bw == RATE_INFO_BW_HE_RU &&
6276 nla_put_u8(msg, NL80211_RATE_INFO_HE_RU_ALLOC,
6277 info->he_ru_alloc))
6278 return false;
cfb14110
VJ		 6279 } else if (info->flags & RATE_INFO_FLAGS_EHT_MCS) {
6280 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_MCS, info->mcs))
6281 return false;
6282 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_NSS, info->nss))
6283 return false;
6284 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_GI, info->eht_gi))
6285 return false;
6286 if (info->bw == RATE_INFO_BW_EHT_RU &&
6287 nla_put_u8(msg, NL80211_RATE_INFO_EHT_RU_ALLOC,
6288 info->eht_ru_alloc))
6289 return false;
db9c64cf 6290 }
c8dcfd8a
FF		 6291
6292 nla_nest_end(msg, rate);
6293 return true;
c8dcfd8a
FF		 6294}
6295
119363c7
FF		 6296static bool nl80211_put_signal(struct sk_buff *msg, u8 mask, s8 *signal,
6297 int id)
6298{
6299 void *attr;
6300 int i = 0;
6301
6302 if (!mask)
6303 return true;
6304
ae0be8de 6305 attr = nla_nest_start_noflag(msg, id);
119363c7
FF		 6306 if (!attr)
6307 return false;
6308
6309 for (i = 0; i < IEEE80211_MAX_CHAINS; i++) {
6310 if (!(mask & BIT(i)))
6311 continue;
6312
6313 if (nla_put_u8(msg, i, signal[i]))
6314 return false;
6315 }
6316
6317 nla_nest_end(msg, attr);
6318
6319 return true;
6320}
6321
cf5ead82
JB		 6322static int nl80211_send_station(struct sk_buff *msg, u32 cmd, u32 portid,
6323 u32 seq, int flags,
66266b3a
JL		 6324 struct cfg80211_registered_device *rdev,
6325 struct net_device *dev,
98b62183 6326 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 6327{
6328 void *hdr;
f4263c98 6329 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 6330
cf5ead82 6331 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
f77bf486
AS		 6332 if (!hdr) {
6333 cfg80211_sinfo_release_content(sinfo);
fd5b74dc 6334 return -1;
f77bf486 6335 }
fd5b74dc 6336
9360ffd1
DM		 6337 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6338 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
6339 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
6340 goto nla_put_failure;
f5ea9120 6341
ae0be8de 6342 sinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_STA_INFO);
2ec600d6 6343 if (!sinfoattr)
fd5b74dc 6344 goto nla_put_failure;
319090bf
JB		 6345
6346#define PUT_SINFO(attr, memb, type) do { \
d686b920 6347 BUILD_BUG_ON(sizeof(type) == sizeof(u64)); \
397c657a 6348 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
319090bf
JB		 6349 nla_put_ ## type(msg, NL80211_STA_INFO_ ## attr, \
6350 sinfo->memb)) \
6351 goto nla_put_failure; \
6352 } while (0)
d686b920 6353#define PUT_SINFO_U64(attr, memb) do { \
397c657a 6354 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
d686b920
JB		 6355 nla_put_u64_64bit(msg, NL80211_STA_INFO_ ## attr, \
6356 sinfo->memb, NL80211_STA_INFO_PAD)) \
6357 goto nla_put_failure; \
6358 } while (0)
319090bf
JB		 6359
6360 PUT_SINFO(CONNECTED_TIME, connected_time, u32);
6361 PUT_SINFO(INACTIVE_TIME, inactive_time, u32);
6c7a0033 6362 PUT_SINFO_U64(ASSOC_AT_BOOTTIME, assoc_at);
319090bf 6363
397c657a
OE		 6364 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_RX_BYTES) |
6365 BIT_ULL(NL80211_STA_INFO_RX_BYTES64)) &&
9360ffd1 6366 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
42745e03 6367 (u32)sinfo->rx_bytes))
9360ffd1 6368 goto nla_put_failure;
319090bf 6369
397c657a
OE		 6370 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_TX_BYTES) |
6371 BIT_ULL(NL80211_STA_INFO_TX_BYTES64)) &&
9360ffd1 6372 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
42745e03
VK		 6373 (u32)sinfo->tx_bytes))
6374 goto nla_put_failure;
319090bf 6375
d686b920
JB		 6376 PUT_SINFO_U64(RX_BYTES64, rx_bytes);
6377 PUT_SINFO_U64(TX_BYTES64, tx_bytes);
319090bf
JB		 6378 PUT_SINFO(LLID, llid, u16);
6379 PUT_SINFO(PLID, plid, u16);
6380 PUT_SINFO(PLINK_STATE, plink_state, u8);
d686b920 6381 PUT_SINFO_U64(RX_DURATION, rx_duration);
36647055
THJ		 6382 PUT_SINFO_U64(TX_DURATION, tx_duration);
6383
6384 if (wiphy_ext_feature_isset(&rdev->wiphy,
6385 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6386 PUT_SINFO(AIRTIME_WEIGHT, airtime_weight, u16);
319090bf 6387
66266b3a
JL		 6388 switch (rdev->wiphy.signal_type) {
6389 case CFG80211_SIGNAL_TYPE_MBM:
319090bf
JB		 6390 PUT_SINFO(SIGNAL, signal, u8);
6391 PUT_SINFO(SIGNAL_AVG, signal_avg, u8);
66266b3a
JL		 6392 break;
6393 default:
6394 break;
6395 }
397c657a 6396 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL)) {
119363c7
FF		 6397 if (!nl80211_put_signal(msg, sinfo->chains,
6398 sinfo->chain_signal,
6399 NL80211_STA_INFO_CHAIN_SIGNAL))
6400 goto nla_put_failure;
6401 }
397c657a 6402 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)) {
119363c7
FF		 6403 if (!nl80211_put_signal(msg, sinfo->chains,
6404 sinfo->chain_signal_avg,
6405 NL80211_STA_INFO_CHAIN_SIGNAL_AVG))
6406 goto nla_put_failure;
6407 }
397c657a 6408 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_TX_BITRATE)) {
c8dcfd8a
FF		 6409 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
6410 NL80211_STA_INFO_TX_BITRATE))
6411 goto nla_put_failure;
6412 }
397c657a 6413 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_RX_BITRATE)) {
c8dcfd8a
FF		 6414 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
6415 NL80211_STA_INFO_RX_BITRATE))
420e7fab 6416 goto nla_put_failure;
420e7fab 6417 }
319090bf
JB		 6418
6419 PUT_SINFO(RX_PACKETS, rx_packets, u32);
6420 PUT_SINFO(TX_PACKETS, tx_packets, u32);
6421 PUT_SINFO(TX_RETRIES, tx_retries, u32);
6422 PUT_SINFO(TX_FAILED, tx_failed, u32);
6423 PUT_SINFO(EXPECTED_THROUGHPUT, expected_throughput, u32);
ab60633c 6424 PUT_SINFO(AIRTIME_LINK_METRIC, airtime_link_metric, u32);
319090bf
JB		 6425 PUT_SINFO(BEACON_LOSS, beacon_loss_count, u32);
6426 PUT_SINFO(LOCAL_PM, local_pm, u32);
6427 PUT_SINFO(PEER_PM, peer_pm, u32);
6428 PUT_SINFO(NONPEER_PM, nonpeer_pm, u32);
dbdaee7a 6429 PUT_SINFO(CONNECTED_TO_GATE, connected_to_gate, u8);
1303a51c 6430 PUT_SINFO(CONNECTED_TO_AS, connected_to_as, u8);
319090bf 6431
397c657a 6432 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_BSS_PARAM)) {
ae0be8de
MK		 6433 bss_param = nla_nest_start_noflag(msg,
6434 NL80211_STA_INFO_BSS_PARAM);
f4263c98
PS		 6435 if (!bss_param)
6436 goto nla_put_failure;
6437
9360ffd1
DM		 6438 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
6439 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
6440 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
6441 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
6442 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
6443 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
6444 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
6445 sinfo->bss_param.dtim_period) ||
6446 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
6447 sinfo->bss_param.beacon_interval))
6448 goto nla_put_failure;
f4263c98
PS		 6449
6450 nla_nest_end(msg, bss_param);
6451 }
397c657a 6452 if ((sinfo->filled & BIT_ULL(NL80211_STA_INFO_STA_FLAGS)) &&
9360ffd1
DM		 6453 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
6454 sizeof(struct nl80211_sta_flag_update),
6455 &sinfo->sta_flags))
6456 goto nla_put_failure;
319090bf 6457
d686b920
JB		 6458 PUT_SINFO_U64(T_OFFSET, t_offset);
6459 PUT_SINFO_U64(RX_DROP_MISC, rx_dropped_misc);
6460 PUT_SINFO_U64(BEACON_RX, rx_beacon);
a76b1942 6461 PUT_SINFO(BEACON_SIGNAL_AVG, rx_beacon_signal_avg, u8);
0d4e14a3
AB		 6462 PUT_SINFO(RX_MPDUS, rx_mpdu_count, u32);
6463 PUT_SINFO(FCS_ERROR_COUNT, fcs_err_count, u32);
81d5439d 6464 if (wiphy_ext_feature_isset(&rdev->wiphy,
9c06602b
BP		 6465 NL80211_EXT_FEATURE_ACK_SIGNAL_SUPPORT)) {
6466 PUT_SINFO(ACK_SIGNAL, ack_signal, u8);
6467 PUT_SINFO(ACK_SIGNAL_AVG, avg_ack_signal, s8);
6468 }
319090bf
JB		 6469
6470#undef PUT_SINFO
d686b920 6471#undef PUT_SINFO_U64
6de39808 6472
8689c051 6473 if (sinfo->pertid) {
6de39808
JB		 6474 struct nlattr *tidsattr;
6475 int tid;
6476
ae0be8de
MK		 6477 tidsattr = nla_nest_start_noflag(msg,
6478 NL80211_STA_INFO_TID_STATS);
6de39808
JB		 6479 if (!tidsattr)
6480 goto nla_put_failure;
6481
6482 for (tid = 0; tid < IEEE80211_NUM_TIDS + 1; tid++) {
6483 struct cfg80211_tid_stats *tidstats;
6484 struct nlattr *tidattr;
6485
6486 tidstats = &sinfo->pertid[tid];
6487
6488 if (!tidstats->filled)
6489 continue;
6490
ae0be8de 6491 tidattr = nla_nest_start_noflag(msg, tid + 1);
6de39808
JB		 6492 if (!tidattr)
6493 goto nla_put_failure;
6494
d686b920 6495#define PUT_TIDVAL_U64(attr, memb) do { \
6de39808 6496 if (tidstats->filled & BIT(NL80211_TID_STATS_ ## attr) && \
d686b920
JB		 6497 nla_put_u64_64bit(msg, NL80211_TID_STATS_ ## attr, \
6498 tidstats->memb, NL80211_TID_STATS_PAD)) \
6de39808
JB		 6499 goto nla_put_failure; \
6500 } while (0)
6501
d686b920
JB		 6502 PUT_TIDVAL_U64(RX_MSDU, rx_msdu);
6503 PUT_TIDVAL_U64(TX_MSDU, tx_msdu);
6504 PUT_TIDVAL_U64(TX_MSDU_RETRIES, tx_msdu_retries);
6505 PUT_TIDVAL_U64(TX_MSDU_FAILED, tx_msdu_failed);
6de39808 6506
d686b920 6507#undef PUT_TIDVAL_U64
52539ca8
THJ		 6508 if ((tidstats->filled &
6509 BIT(NL80211_TID_STATS_TXQ_STATS)) &&
6510 !nl80211_put_txq_stats(msg, &tidstats->txq_stats,
6511 NL80211_TID_STATS_TXQ_STATS))
6512 goto nla_put_failure;
6513
6de39808
JB		 6514 nla_nest_end(msg, tidattr);
6515 }
6516
6517 nla_nest_end(msg, tidsattr);
6518 }
6519
2ec600d6 6520 nla_nest_end(msg, sinfoattr);
fd5b74dc 6521
319090bf 6522 if (sinfo->assoc_req_ies_len &&
9360ffd1
DM		 6523 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
6524 sinfo->assoc_req_ies))
6525 goto nla_put_failure;
50d3dfb7 6526
7ea3e110 6527 cfg80211_sinfo_release_content(sinfo);
053c095a
JB		 6528 genlmsg_end(msg, hdr);
6529 return 0;
fd5b74dc
JB		 6530
6531 nla_put_failure:
7ea3e110 6532 cfg80211_sinfo_release_content(sinfo);
bc3ed28c
TG		 6533 genlmsg_cancel(msg, hdr);
6534 return -EMSGSIZE;
fd5b74dc
JB		 6535}
6536
2ec600d6 6537static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 6538 struct netlink_callback *cb)
2ec600d6 6539{
73887fd9 6540 struct station_info sinfo;
1b8ec87a 6541 struct cfg80211_registered_device *rdev;
97990a06 6542 struct wireless_dev *wdev;
2ec600d6 6543 u8 mac_addr[ETH_ALEN];
97990a06 6544 int sta_idx = cb->args[2];
2ec600d6 6545 int err;
2ec600d6 6546
ce6b6974 6547 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
67748893 6548 if (err)
a05829a7
JB		 6549 return err;
6550 /* nl80211_prepare_wdev_dump acquired it in the successful case */
6551 __acquire(&rdev->wiphy.mtx);
bba95fef 6552
97990a06
JB		 6553 if (!wdev->netdev) {
6554 err = -EINVAL;
6555 goto out_err;
6556 }
6557
1b8ec87a 6558 if (!rdev->ops->dump_station) {
eec60b03 6559 err = -EOPNOTSUPP;
bba95fef
JB		 6560 goto out_err;
6561 }
6562
bba95fef 6563 while (1) {
73887fd9 6564 memset(&sinfo, 0, sizeof(sinfo));
1b8ec87a 6565 err = rdev_dump_station(rdev, wdev->netdev, sta_idx,
73887fd9 6566 mac_addr, &sinfo);
bba95fef
JB		 6567 if (err == -ENOENT)
6568 break;
6569 if (err)
3b85875a 6570 goto out_err;
bba95fef 6571
cf5ead82 6572 if (nl80211_send_station(skb, NL80211_CMD_NEW_STATION,
15e47304 6573 NETLINK_CB(cb->skb).portid,
bba95fef 6574 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1b8ec87a 6575 rdev, wdev->netdev, mac_addr,
73887fd9 6576 &sinfo) < 0)
bba95fef
JB		 6577 goto out;
6578
6579 sta_idx++;
6580 }
6581
bba95fef 6582 out:
97990a06 6583 cb->args[2] = sta_idx;
bba95fef 6584 err = skb->len;
bba95fef 6585 out_err:
a05829a7 6586 wiphy_unlock(&rdev->wiphy);
bba95fef
JB		 6587
6588 return err;
2ec600d6 6589}
fd5b74dc 6590
5727ef1b
JB		 6591static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
6592{
4c476991
JB		 6593 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6594 struct net_device *dev = info->user_ptr[1];
73887fd9 6595 struct station_info sinfo;
fd5b74dc
JB		 6596 struct sk_buff *msg;
6597 u8 *mac_addr = NULL;
4c476991 6598 int err;
fd5b74dc 6599
73887fd9 6600 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc 6601
73887fd9
JB		 6602 if (!info->attrs[NL80211_ATTR_MAC])
6603 return -EINVAL;
fd5b74dc
JB		 6604
6605 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6606
73887fd9
JB		 6607 if (!rdev->ops->get_station)
6608 return -EOPNOTSUPP;
3b85875a 6609
73887fd9 6610 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 6611 if (err)
73887fd9 6612 return err;
2ec600d6 6613
fd2120ca 6614 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7ea3e110 6615 if (!msg) {
ba8f566a 6616 cfg80211_sinfo_release_content(&sinfo);
73887fd9 6617 return -ENOMEM;
7ea3e110 6618 }
fd5b74dc 6619
cf5ead82
JB		 6620 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION,
6621 info->snd_portid, info->snd_seq, 0,
73887fd9 6622 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991 6623 nlmsg_free(msg);
73887fd9 6624 return -ENOBUFS;
4c476991 6625 }
3b85875a 6626
73887fd9 6627 return genlmsg_reply(msg, info);
5727ef1b
JB		 6628}
6629
77ee7c89
JB		 6630int cfg80211_check_station_change(struct wiphy *wiphy,
6631 struct station_parameters *params,
6632 enum cfg80211_station_type statype)
6633{
e4208427
AB		 6634 if (params->listen_interval != -1 &&
6635 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89 6636 return -EINVAL;
e4208427 6637
17b94247
AB		 6638 if (params->support_p2p_ps != -1 &&
6639 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
6640 return -EINVAL;
6641
c72e1140 6642 if (params->aid &&
e4208427
AB		 6643 !(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) &&
6644 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89
JB		 6645 return -EINVAL;
6646
6647 /* When you run into this, adjust the code below for the new flag */
6648 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
6649
6650 switch (statype) {
eef941e6
TP		 6651 case CFG80211_STA_MESH_PEER_KERNEL:
6652 case CFG80211_STA_MESH_PEER_USER:
77ee7c89
JB		 6653 /*
6654 * No ignoring the TDLS flag here -- the userspace mesh
6655 * code doesn't have the bug of including TDLS in the
6656 * mask everywhere.
6657 */
6658 if (params->sta_flags_mask &
6659 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6660 BIT(NL80211_STA_FLAG_MFP) |
6661 BIT(NL80211_STA_FLAG_AUTHORIZED)))
6662 return -EINVAL;
6663 break;
6664 case CFG80211_STA_TDLS_PEER_SETUP:
6665 case CFG80211_STA_TDLS_PEER_ACTIVE:
6666 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6667 return -EINVAL;
6668 /* ignore since it can't change */
6669 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6670 break;
6671 default:
6672 /* disallow mesh-specific things */
6673 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
6674 return -EINVAL;
6675 if (params->local_pm)
6676 return -EINVAL;
6677 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6678 return -EINVAL;
6679 }
6680
6681 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6682 statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
6683 /* TDLS can't be set, ... */
6684 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
6685 return -EINVAL;
6686 /*
6687 * ... but don't bother the driver with it. This works around
6688 * a hostapd/wpa_supplicant issue -- it always includes the
6689 * TLDS_PEER flag in the mask even for AP mode.
6690 */
6691 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6692 }
6693
47edb11b
AB		 6694 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6695 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6696 /* reject other things that can't change */
6697 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
6698 return -EINVAL;
6699 if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
6700 return -EINVAL;
b95eb7f0 6701 if (params->link_sta_params.supported_rates)
77ee7c89 6702 return -EINVAL;
b95eb7f0
ST		 6703 if (params->ext_capab || params->link_sta_params.ht_capa ||
6704 params->link_sta_params.vht_capa ||
6705 params->link_sta_params.he_capa ||
6706 params->link_sta_params.eht_capa)
77ee7c89
JB		 6707 return -EINVAL;
6708 }
6709
47edb11b
AB		 6710 if (statype != CFG80211_STA_AP_CLIENT &&
6711 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6712 if (params->vlan)
6713 return -EINVAL;
6714 }
6715
6716 switch (statype) {
6717 case CFG80211_STA_AP_MLME_CLIENT:
6718 /* Use this only for authorizing/unauthorizing a station */
6719 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
6720 return -EOPNOTSUPP;
6721 break;
6722 case CFG80211_STA_AP_CLIENT:
47edb11b 6723 case CFG80211_STA_AP_CLIENT_UNASSOC:
77ee7c89
JB		 6724 /* accept only the listed bits */
6725 if (params->sta_flags_mask &
6726 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6727 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6728 BIT(NL80211_STA_FLAG_ASSOCIATED) |
6729 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
6730 BIT(NL80211_STA_FLAG_WME) |
6731 BIT(NL80211_STA_FLAG_MFP)))
6732 return -EINVAL;
6733
6734 /* but authenticated/associated only if driver handles it */
6735 if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
6736 params->sta_flags_mask &
6737 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6738 BIT(NL80211_STA_FLAG_ASSOCIATED)))
6739 return -EINVAL;
6740 break;
6741 case CFG80211_STA_IBSS:
6742 case CFG80211_STA_AP_STA:
6743 /* reject any changes other than AUTHORIZED */
6744 if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
6745 return -EINVAL;
6746 break;
6747 case CFG80211_STA_TDLS_PEER_SETUP:
6748 /* reject any changes other than AUTHORIZED or WME */
6749 if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6750 BIT(NL80211_STA_FLAG_WME)))
6751 return -EINVAL;
6752 /* force (at least) rates when authorizing */
6753 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
b95eb7f0 6754 !params->link_sta_params.supported_rates)
77ee7c89
JB		 6755 return -EINVAL;
6756 break;
6757 case CFG80211_STA_TDLS_PEER_ACTIVE:
6758 /* reject any changes */
6759 return -EINVAL;
eef941e6 6760 case CFG80211_STA_MESH_PEER_KERNEL:
77ee7c89
JB		 6761 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6762 return -EINVAL;
6763 break;
eef941e6 6764 case CFG80211_STA_MESH_PEER_USER:
42925040
CYY		 6765 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION &&
6766 params->plink_action != NL80211_PLINK_ACTION_BLOCK)
77ee7c89
JB		 6767 return -EINVAL;
6768 break;
6769 }
6770
06f7c88c
BL		 6771 /*
6772 * Older kernel versions ignored this attribute entirely, so don't
6773 * reject attempts to update it but mark it as unused instead so the
6774 * driver won't look at the data.
6775 */
6776 if (statype != CFG80211_STA_AP_CLIENT_UNASSOC &&
6777 statype != CFG80211_STA_TDLS_PEER_SETUP)
b95eb7f0 6778 params->link_sta_params.opmode_notif_used = false;
06f7c88c 6779
77ee7c89
JB		 6780 return 0;
6781}
6782EXPORT_SYMBOL(cfg80211_check_station_change);
6783
5727ef1b 6784/*
c258d2de 6785 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 6786 */
80b99899
JB		 6787static struct net_device *get_vlan(struct genl_info *info,
6788 struct cfg80211_registered_device *rdev)
5727ef1b 6789{
463d0183 6790 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 6791 struct net_device *v;
6792 int ret;
6793
6794 if (!vlanattr)
6795 return NULL;
6796
6797 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
6798 if (!v)
6799 return ERR_PTR(-ENODEV);
6800
6801 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
6802 ret = -EINVAL;
6803 goto error;
5727ef1b 6804 }
80b99899 6805
77ee7c89
JB		 6806 if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
6807 v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
6808 v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
6809 ret = -EINVAL;
6810 goto error;
6811 }
6812
80b99899
JB		 6813 if (!netif_running(v)) {
6814 ret = -ENETDOWN;
6815 goto error;
6816 }
6817
6818 return v;
6819 error:
6820 dev_put(v);
6821 return ERR_PTR(ret);
5727ef1b
JB		 6822}
6823
ff276691
JB		 6824static int nl80211_parse_sta_wme(struct genl_info *info,
6825 struct station_parameters *params)
df881293 6826{
df881293
JM		 6827 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
6828 struct nlattr *nla;
6829 int err;
6830
df881293
JM		 6831 /* parse WME attributes if present */
6832 if (!info->attrs[NL80211_ATTR_STA_WME])
6833 return 0;
6834
6835 nla = info->attrs[NL80211_ATTR_STA_WME];
8cb08174
JB		 6836 err = nla_parse_nested_deprecated(tb, NL80211_STA_WME_MAX, nla,
6837 nl80211_sta_wme_policy,
6838 info->extack);
df881293
JM		 6839 if (err)
6840 return err;
6841
6842 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
6843 params->uapsd_queues = nla_get_u8(
6844 tb[NL80211_STA_WME_UAPSD_QUEUES]);
6845 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
6846 return -EINVAL;
6847
6848 if (tb[NL80211_STA_WME_MAX_SP])
6849 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
6850
6851 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
6852 return -EINVAL;
6853
6854 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
6855
6856 return 0;
6857}
6858
c01fc9ad
SD		 6859static int nl80211_parse_sta_channel_info(struct genl_info *info,
6860 struct station_parameters *params)
6861{
6862 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]) {
6863 params->supported_channels =
6864 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6865 params->supported_channels_len =
6866 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6867 /*
6868 * Need to include at least one (first channel, number of
cb9abd48
JB		 6869 * channels) tuple for each subband (checked in policy),
6870 * and must have proper tuples for the rest of the data as well.
c01fc9ad 6871 */
c01fc9ad
SD		 6872 if (params->supported_channels_len % 2)
6873 return -EINVAL;
6874 }
6875
6876 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]) {
6877 params->supported_oper_classes =
6878 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
6879 params->supported_oper_classes_len =
6880 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
c01fc9ad
SD		 6881 }
6882 return 0;
6883}
6884
ff276691
JB		 6885static int nl80211_set_station_tdls(struct genl_info *info,
6886 struct station_parameters *params)
6887{
c01fc9ad 6888 int err;
ff276691 6889 /* Dummy STA entry gets updated once the peer capabilities are known */
5e4b6f56
JM		 6890 if (info->attrs[NL80211_ATTR_PEER_AID])
6891 params->aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
ff276691 6892 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
b95eb7f0 6893 params->link_sta_params.ht_capa =
ff276691
JB		 6894 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
6895 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
b95eb7f0 6896 params->link_sta_params.vht_capa =
ff276691 6897 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
c4cbaf79 6898 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
b95eb7f0 6899 params->link_sta_params.he_capa =
c4cbaf79 6900 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
b95eb7f0 6901 params->link_sta_params.he_capa_len =
c4cbaf79 6902 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
ea05fd35
IP		 6903
6904 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
b95eb7f0 6905 params->link_sta_params.eht_capa =
ea05fd35 6906 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
b95eb7f0 6907 params->link_sta_params.eht_capa_len =
ea05fd35
IP		 6908 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
6909
b95eb7f0
ST		 6910 if (!ieee80211_eht_capa_size_ok((const u8 *)params->link_sta_params.he_capa,
6911 (const u8 *)params->link_sta_params.eht_capa,
ea5cba26
JB		 6912 params->link_sta_params.eht_capa_len,
6913 false))
ea05fd35
IP		 6914 return -EINVAL;
6915 }
c4cbaf79 6916 }
ff276691 6917
c01fc9ad
SD		 6918 err = nl80211_parse_sta_channel_info(info, params);
6919 if (err)
6920 return err;
6921
ff276691
JB		 6922 return nl80211_parse_sta_wme(info, params);
6923}
6924
e96d1cd2 6925static int nl80211_parse_sta_txpower_setting(struct genl_info *info,
577e5b8c
ST		 6926 struct sta_txpwr *txpwr,
6927 bool *txpwr_set)
e96d1cd2
ARN		 6928{
6929 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6930 int idx;
6931
6932 if (info->attrs[NL80211_ATTR_STA_TX_POWER_SETTING]) {
6933 if (!rdev->ops->set_tx_power ||
6934 !wiphy_ext_feature_isset(&rdev->wiphy,
6935 NL80211_EXT_FEATURE_STA_TX_PWR))
6936 return -EOPNOTSUPP;
6937
6938 idx = NL80211_ATTR_STA_TX_POWER_SETTING;
577e5b8c 6939 txpwr->type = nla_get_u8(info->attrs[idx]);
e96d1cd2 6940
577e5b8c 6941 if (txpwr->type == NL80211_TX_POWER_LIMITED) {
e96d1cd2
ARN		 6942 idx = NL80211_ATTR_STA_TX_POWER;
6943
6944 if (info->attrs[idx])
577e5b8c 6945 txpwr->power = nla_get_s16(info->attrs[idx]);
e96d1cd2
ARN		 6946 else
6947 return -EINVAL;
6948 }
577e5b8c
ST		 6949
6950 *txpwr_set = true;
6951 } else {
6952 *txpwr_set = false;
e96d1cd2
ARN		 6953 }
6954
6955 return 0;
6956}
6957
5727ef1b
JB		 6958static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
6959{
4c476991 6960 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 6961 struct net_device *dev = info->user_ptr[1];
5727ef1b 6962 struct station_parameters params;
77ee7c89
JB		 6963 u8 *mac_addr;
6964 int err;
5727ef1b
JB		 6965
6966 memset(&params, 0, sizeof(params));
6967
77ee7c89
JB		 6968 if (!rdev->ops->change_station)
6969 return -EOPNOTSUPP;
6970
e4208427
AB		 6971 /*
6972 * AID and listen_interval properties can be set only for unassociated
6973 * station. Include these parameters here and will check them in
6974 * cfg80211_check_station_change().
6975 */
a9bc31e4
AB		 6976 if (info->attrs[NL80211_ATTR_STA_AID])
6977 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
e4208427 6978
14f34e36
GG		 6979 if (info->attrs[NL80211_ATTR_VLAN_ID])
6980 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6981
e4208427
AB		 6982 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6983 params.listen_interval =
6984 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
6985 else
6986 params.listen_interval = -1;
5727ef1b 6987
ab0d76f6
JB		 6988 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS])
6989 params.support_p2p_ps =
6990 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
6991 else
17b94247 6992 params.support_p2p_ps = -1;
17b94247 6993
5727ef1b
JB		 6994 if (!info->attrs[NL80211_ATTR_MAC])
6995 return -EINVAL;
6996
d2bc5249
AO		 6997 params.link_sta_params.link_id =
6998 nl80211_link_id_or_invalid(info->attrs);
6999
7000 if (info->attrs[NL80211_ATTR_MLD_ADDR]) {
7001 /* If MLD_ADDR attribute is set then this is an MLD station
7002 * and the MLD_ADDR attribute holds the MLD address and the
7003 * MAC attribute holds for the LINK address.
7004 * In that case, the link_id is also expected to be valid.
7005 */
7006 if (params.link_sta_params.link_id < 0)
7007 return -EINVAL;
7008
7009 mac_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
7010 params.link_sta_params.mld_mac = mac_addr;
7011 params.link_sta_params.link_mac =
7012 nla_data(info->attrs[NL80211_ATTR_MAC]);
7013 if (!is_valid_ether_addr(params.link_sta_params.link_mac))
7014 return -EINVAL;
7015 } else {
7016 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
7017 }
7018
5727ef1b
JB		 7019
7020 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
b95eb7f0 7021 params.link_sta_params.supported_rates =
5727ef1b 7022 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
b95eb7f0 7023 params.link_sta_params.supported_rates_len =
5727ef1b
JB		 7024 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
7025 }
7026
9d62a986
JM		 7027 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
7028 params.capability =
7029 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
7030 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
7031 }
7032
7033 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
7034 params.ext_capab =
7035 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
7036 params.ext_capab_len =
7037 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
7038 }
7039
bdd3ae3d 7040 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 7041 return -EINVAL;
7042
ab0d76f6 7043 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2ec600d6 7044 params.plink_action =
f8bacc21 7045 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2ec600d6 7046
f8bacc21 7047 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
9c3990aa 7048 params.plink_state =
f8bacc21 7049 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
ab0d76f6 7050 if (info->attrs[NL80211_ATTR_MESH_PEER_AID])
7d27a0ba
MH		 7051 params.peer_aid = nla_get_u16(
7052 info->attrs[NL80211_ATTR_MESH_PEER_AID]);
f8bacc21
JB		 7053 params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
7054 }
9c3990aa 7055
ab0d76f6
JB		 7056 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE])
7057 params.local_pm = nla_get_u32(
3b1c5a53
MP		 7058 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
7059
06f7c88c 7060 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
b95eb7f0
ST		 7061 params.link_sta_params.opmode_notif_used = true;
7062 params.link_sta_params.opmode_notif =
06f7c88c
BL		 7063 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
7064 }
7065
43e64bf3 7066 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
b95eb7f0 7067 params.link_sta_params.he_6ghz_capa =
fce2ff72 7068 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
43e64bf3 7069
36647055
THJ		 7070 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
7071 params.airtime_weight =
7072 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
7073
7074 if (params.airtime_weight &&
7075 !wiphy_ext_feature_isset(&rdev->wiphy,
7076 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
7077 return -EOPNOTSUPP;
7078
b95eb7f0
ST		 7079 err = nl80211_parse_sta_txpower_setting(info,
7080 &params.link_sta_params.txpwr,
7081 &params.link_sta_params.txpwr_set);
e96d1cd2
ARN		 7082 if (err)
7083 return err;
7084
77ee7c89
JB		 7085 /* Include parameters for TDLS peer (will check later) */
7086 err = nl80211_set_station_tdls(info, &params);
7087 if (err)
7088 return err;
7089
7090 params.vlan = get_vlan(info, rdev);
7091 if (IS_ERR(params.vlan))
7092 return PTR_ERR(params.vlan);
7093
a97f4424
JB		 7094 switch (dev->ieee80211_ptr->iftype) {
7095 case NL80211_IFTYPE_AP:
7096 case NL80211_IFTYPE_AP_VLAN:
074ac8df 7097 case NL80211_IFTYPE_P2P_GO:
074ac8df 7098 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 7099 case NL80211_IFTYPE_STATION:
267335d6 7100 case NL80211_IFTYPE_ADHOC:
a97f4424 7101 case NL80211_IFTYPE_MESH_POINT:
a97f4424
JB		 7102 break;
7103 default:
77ee7c89
JB		 7104 err = -EOPNOTSUPP;
7105 goto out_put_vlan;
034d655e
JB		 7106 }
7107
77ee7c89 7108 /* driver will call cfg80211_check_station_change() */
3d1cc7cd 7109 wdev_lock(dev->ieee80211_ptr);
e35e4d28 7110 err = rdev_change_station(rdev, dev, mac_addr, &params);
3d1cc7cd 7111 wdev_unlock(dev->ieee80211_ptr);
5727ef1b 7112
77ee7c89 7113 out_put_vlan:
1160dfa1 7114 dev_put(params.vlan);
3b85875a 7115
5727ef1b
JB		 7116 return err;
7117}
7118
7119static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
7120{
4c476991 7121 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 7122 int err;
4c476991 7123 struct net_device *dev = info->user_ptr[1];
efbfe516 7124 struct wireless_dev *wdev = dev->ieee80211_ptr;
5727ef1b
JB		 7125 struct station_parameters params;
7126 u8 *mac_addr = NULL;
bda95eb1
JB		 7127 u32 auth_assoc = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
7128 BIT(NL80211_STA_FLAG_ASSOCIATED);
5727ef1b
JB		 7129
7130 memset(&params, 0, sizeof(params));
7131
984c311b
JB		 7132 if (!rdev->ops->add_station)
7133 return -EOPNOTSUPP;
7134
5727ef1b
JB		 7135 if (!info->attrs[NL80211_ATTR_MAC])
7136 return -EINVAL;
7137
5727ef1b
JB		 7138 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
7139 return -EINVAL;
7140
7141 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
7142 return -EINVAL;
7143
5e4b6f56
JM		 7144 if (!info->attrs[NL80211_ATTR_STA_AID] &&
7145 !info->attrs[NL80211_ATTR_PEER_AID])
0e956c13
TLSC		 7146 return -EINVAL;
7147
b95eb7f0
ST		 7148 params.link_sta_params.link_id =
7149 nl80211_link_id_or_invalid(info->attrs);
7150
c0d67012 7151 if (info->attrs[NL80211_ATTR_MLD_ADDR]) {
c0d67012
ST		 7152 mac_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
7153 params.link_sta_params.mld_mac = mac_addr;
7154 params.link_sta_params.link_mac =
7155 nla_data(info->attrs[NL80211_ATTR_MAC]);
7156 if (!is_valid_ether_addr(params.link_sta_params.link_mac))
7157 return -EINVAL;
7158 } else {
7159 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
7160 }
7161
b95eb7f0 7162 params.link_sta_params.supported_rates =
5727ef1b 7163 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
b95eb7f0 7164 params.link_sta_params.supported_rates_len =
5727ef1b
JB		 7165 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
7166 params.listen_interval =
7167 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 7168
14f34e36
GG		 7169 if (info->attrs[NL80211_ATTR_VLAN_ID])
7170 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
7171
17b94247 7172 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]) {
ab0d76f6
JB		 7173 params.support_p2p_ps =
7174 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
17b94247
AB		 7175 } else {
7176 /*
7177 * if not specified, assume it's supported for P2P GO interface,
7178 * and is NOT supported for AP interface
7179 */
7180 params.support_p2p_ps =
7181 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO;
7182 }
7183
3d124ea2 7184 if (info->attrs[NL80211_ATTR_PEER_AID])
5e4b6f56 7185 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
3d124ea2
JM		 7186 else
7187 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
51b50fbe 7188
9d62a986
JM		 7189 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
7190 params.capability =
7191 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
7192 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
7193 }
7194
7195 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
7196 params.ext_capab =
7197 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
7198 params.ext_capab_len =
7199 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
7200 }
7201
36aedc90 7202 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
b95eb7f0 7203 params.link_sta_params.ht_capa =
36aedc90 7204 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 7205
f461be3e 7206 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
b95eb7f0 7207 params.link_sta_params.vht_capa =
f461be3e
MP		 7208 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
7209
c4cbaf79 7210 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
b95eb7f0 7211 params.link_sta_params.he_capa =
c4cbaf79 7212 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
b95eb7f0 7213 params.link_sta_params.he_capa_len =
c4cbaf79 7214 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
ea05fd35
IP		 7215
7216 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
b95eb7f0 7217 params.link_sta_params.eht_capa =
ea05fd35 7218 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
b95eb7f0 7219 params.link_sta_params.eht_capa_len =
ea05fd35
IP		 7220 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
7221
b95eb7f0
ST		 7222 if (!ieee80211_eht_capa_size_ok((const u8 *)params.link_sta_params.he_capa,
7223 (const u8 *)params.link_sta_params.eht_capa,
ea5cba26
JB		 7224 params.link_sta_params.eht_capa_len,
7225 false))
ea05fd35
IP		 7226 return -EINVAL;
7227 }
c4cbaf79
LC		 7228 }
7229
43e64bf3 7230 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
b95eb7f0 7231 params.link_sta_params.he_6ghz_capa =
43e64bf3
RM		 7232 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
7233
60f4a7b1 7234 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
b95eb7f0
ST		 7235 params.link_sta_params.opmode_notif_used = true;
7236 params.link_sta_params.opmode_notif =
60f4a7b1
MK		 7237 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
7238 }
7239
ab0d76f6 7240 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
96b78dff 7241 params.plink_action =
f8bacc21 7242 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
96b78dff 7243
36647055
THJ		 7244 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
7245 params.airtime_weight =
7246 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
7247
7248 if (params.airtime_weight &&
7249 !wiphy_ext_feature_isset(&rdev->wiphy,
7250 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
7251 return -EOPNOTSUPP;
7252
b95eb7f0
ST		 7253 err = nl80211_parse_sta_txpower_setting(info,
7254 &params.link_sta_params.txpwr,
7255 &params.link_sta_params.txpwr_set);
e96d1cd2
ARN		 7256 if (err)
7257 return err;
7258
c01fc9ad
SD		 7259 err = nl80211_parse_sta_channel_info(info, &params);
7260 if (err)
7261 return err;
7262
ff276691
JB		 7263 err = nl80211_parse_sta_wme(info, &params);
7264 if (err)
7265 return err;
bdd90d5e 7266
bdd3ae3d 7267 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 7268 return -EINVAL;
7269
496fcc29
JB		 7270 /* HT/VHT requires QoS, but if we don't have that just ignore HT/VHT
7271 * as userspace might just pass through the capabilities from the IEs
7272 * directly, rather than enforcing this restriction and returning an
7273 * error in this case.
7274 */
7275 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME))) {
b95eb7f0
ST		 7276 params.link_sta_params.ht_capa = NULL;
7277 params.link_sta_params.vht_capa = NULL;
c4cbaf79 7278
ea05fd35 7279 /* HE and EHT require WME */
b95eb7f0
ST		 7280 if (params.link_sta_params.he_capa_len ||
7281 params.link_sta_params.he_6ghz_capa ||
7282 params.link_sta_params.eht_capa_len)
c4cbaf79 7283 return -EINVAL;
496fcc29
JB		 7284 }
7285
43e64bf3 7286 /* Ensure that HT/VHT capabilities are not set for 6 GHz HE STA */
b95eb7f0
ST		 7287 if (params.link_sta_params.he_6ghz_capa &&
7288 (params.link_sta_params.ht_capa || params.link_sta_params.vht_capa))
43e64bf3
RM		 7289 return -EINVAL;
7290
77ee7c89
JB		 7291 /* When you run into this, adjust the code below for the new flag */
7292 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
7293
bdd90d5e
JB		 7294 switch (dev->ieee80211_ptr->iftype) {
7295 case NL80211_IFTYPE_AP:
7296 case NL80211_IFTYPE_AP_VLAN:
7297 case NL80211_IFTYPE_P2P_GO:
984c311b
JB		 7298 /* ignore WME attributes if iface/sta is not capable */
7299 if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
7300 !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
7301 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
c75786c9 7302
bdd90d5e 7303 /* TDLS peers cannot be added */
3d124ea2
JM		 7304 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
7305 info->attrs[NL80211_ATTR_PEER_AID])
4319e193 7306 return -EINVAL;
bdd90d5e
JB		 7307 /* but don't bother the driver with it */
7308 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 7309
d582cffb
JB		 7310 /* allow authenticated/associated only if driver handles it */
7311 if (!(rdev->wiphy.features &
7312 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
bda95eb1 7313 params.sta_flags_mask & auth_assoc)
d582cffb
JB		 7314 return -EINVAL;
7315
bda95eb1
JB		 7316 /* Older userspace, or userspace wanting to be compatible with
7317 * !NL80211_FEATURE_FULL_AP_CLIENT_STATE, will not set the auth
7318 * and assoc flags in the mask, but assumes the station will be
7319 * added as associated anyway since this was the required driver
7320 * behaviour before NL80211_FEATURE_FULL_AP_CLIENT_STATE was
7321 * introduced.
7322 * In order to not bother drivers with this quirk in the API
7323 * set the flags in both the mask and set for new stations in
7324 * this case.
7325 */
7326 if (!(params.sta_flags_mask & auth_assoc)) {
7327 params.sta_flags_mask |= auth_assoc;
7328 params.sta_flags_set |= auth_assoc;
7329 }
7330
bdd90d5e
JB		 7331 /* must be last in here for error handling */
7332 params.vlan = get_vlan(info, rdev);
7333 if (IS_ERR(params.vlan))
7334 return PTR_ERR(params.vlan);
7335 break;
7336 case NL80211_IFTYPE_MESH_POINT:
984c311b
JB		 7337 /* ignore uAPSD data */
7338 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
7339
d582cffb
JB		 7340 /* associated is disallowed */
7341 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
7342 return -EINVAL;
bdd90d5e 7343 /* TDLS peers cannot be added */
3d124ea2
JM		 7344 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
7345 info->attrs[NL80211_ATTR_PEER_AID])
bdd90d5e
JB		 7346 return -EINVAL;
7347 break;
7348 case NL80211_IFTYPE_STATION:
93d08f0b 7349 case NL80211_IFTYPE_P2P_CLIENT:
984c311b
JB		 7350 /* ignore uAPSD data */
7351 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
7352
77ee7c89
JB		 7353 /* these are disallowed */
7354 if (params.sta_flags_mask &
7355 (BIT(NL80211_STA_FLAG_ASSOCIATED) |
7356 BIT(NL80211_STA_FLAG_AUTHENTICATED)))
d582cffb 7357 return -EINVAL;
bdd90d5e
JB		 7358 /* Only TDLS peers can be added */
7359 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
7360 return -EINVAL;
7361 /* Can only add if TDLS ... */
7362 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
7363 return -EOPNOTSUPP;
7364 /* ... with external setup is supported */
7365 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
7366 return -EOPNOTSUPP;
77ee7c89
JB		 7367 /*
7368 * Older wpa_supplicant versions always mark the TDLS peer
7369 * as authorized, but it shouldn't yet be.
7370 */
7371 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
bdd90d5e
JB		 7372 break;
7373 default:
7374 return -EOPNOTSUPP;
c75786c9
EP		 7375 }
7376
bdd90d5e 7377 /* be aware of params.vlan when changing code here */
5727ef1b 7378
3d1cc7cd 7379 wdev_lock(dev->ieee80211_ptr);
efbfe516
JB		 7380 if (wdev->valid_links) {
7381 if (params.link_sta_params.link_id < 0) {
7382 err = -EINVAL;
7383 goto out;
7384 }
7385 if (!(wdev->valid_links & BIT(params.link_sta_params.link_id))) {
7386 err = -ENOLINK;
7387 goto out;
7388 }
7389 } else {
7390 if (params.link_sta_params.link_id >= 0) {
7391 err = -EINVAL;
7392 goto out;
7393 }
7394 }
e35e4d28 7395 err = rdev_add_station(rdev, dev, mac_addr, &params);
efbfe516 7396out:
3d1cc7cd 7397 wdev_unlock(dev->ieee80211_ptr);
1160dfa1 7398 dev_put(params.vlan);
5727ef1b
JB		 7399 return err;
7400}
7401
7402static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
7403{
4c476991
JB		 7404 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7405 struct net_device *dev = info->user_ptr[1];
89c771e5 7406 struct station_del_parameters params;
3d1cc7cd 7407 int ret;
89c771e5
JM		 7408
7409 memset(&params, 0, sizeof(params));
5727ef1b
JB		 7410
7411 if (info->attrs[NL80211_ATTR_MAC])
89c771e5 7412 params.mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
5727ef1b 7413
306b79ea
JB		 7414 switch (dev->ieee80211_ptr->iftype) {
7415 case NL80211_IFTYPE_AP:
7416 case NL80211_IFTYPE_AP_VLAN:
7417 case NL80211_IFTYPE_MESH_POINT:
7418 case NL80211_IFTYPE_P2P_GO:
7419 /* always accept these */
7420 break;
7421 case NL80211_IFTYPE_ADHOC:
7422 /* conditionally accept */
7423 if (wiphy_ext_feature_isset(&rdev->wiphy,
7424 NL80211_EXT_FEATURE_DEL_IBSS_STA))
7425 break;
edafcf42 7426 return -EINVAL;
306b79ea 7427 default:
4c476991 7428 return -EINVAL;
306b79ea 7429 }
5727ef1b 7430
4c476991
JB		 7431 if (!rdev->ops->del_station)
7432 return -EOPNOTSUPP;
3b85875a 7433
98856866
JM		 7434 if (info->attrs[NL80211_ATTR_MGMT_SUBTYPE]) {
7435 params.subtype =
7436 nla_get_u8(info->attrs[NL80211_ATTR_MGMT_SUBTYPE]);
7437 if (params.subtype != IEEE80211_STYPE_DISASSOC >> 4 &&
7438 params.subtype != IEEE80211_STYPE_DEAUTH >> 4)
7439 return -EINVAL;
7440 } else {
7441 /* Default to Deauthentication frame */
7442 params.subtype = IEEE80211_STYPE_DEAUTH >> 4;
7443 }
7444
7445 if (info->attrs[NL80211_ATTR_REASON_CODE]) {
7446 params.reason_code =
7447 nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
7448 if (params.reason_code == 0)
7449 return -EINVAL; /* 0 is reserved */
7450 } else {
7451 /* Default to reason code 2 */
7452 params.reason_code = WLAN_REASON_PREV_AUTH_NOT_VALID;
7453 }
7454
3d1cc7cd
JB		 7455 wdev_lock(dev->ieee80211_ptr);
7456 ret = rdev_del_station(rdev, dev, &params);
7457 wdev_unlock(dev->ieee80211_ptr);
7458
7459 return ret;
5727ef1b
JB		 7460}
7461
15e47304 7462static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 7463 int flags, struct net_device *dev,
7464 u8 *dst, u8 *next_hop,
7465 struct mpath_info *pinfo)
7466{
7467 void *hdr;
7468 struct nlattr *pinfoattr;
7469
1ef4c850 7470 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_MPATH);
2ec600d6
LCC		 7471 if (!hdr)
7472 return -1;
7473
9360ffd1
DM		 7474 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7475 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
7476 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
7477 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
7478 goto nla_put_failure;
f5ea9120 7479
ae0be8de 7480 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MPATH_INFO);
2ec600d6
LCC		 7481 if (!pinfoattr)
7482 goto nla_put_failure;
9360ffd1
DM		 7483 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
7484 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
7485 pinfo->frame_qlen))
7486 goto nla_put_failure;
7487 if (((pinfo->filled & MPATH_INFO_SN) &&
7488 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
7489 ((pinfo->filled & MPATH_INFO_METRIC) &&
7490 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
7491 pinfo->metric)) ||
7492 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
7493 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
7494 pinfo->exptime)) ||
7495 ((pinfo->filled & MPATH_INFO_FLAGS) &&
7496 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
7497 pinfo->flags)) ||
7498 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
7499 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
7500 pinfo->discovery_timeout)) ||
7501 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
7502 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
cc241636
JH		 7503 pinfo->discovery_retries)) ||
7504 ((pinfo->filled & MPATH_INFO_HOP_COUNT) &&
7505 nla_put_u8(msg, NL80211_MPATH_INFO_HOP_COUNT,
540bbcb9
JH		 7506 pinfo->hop_count)) ||
7507 ((pinfo->filled & MPATH_INFO_PATH_CHANGE) &&
7508 nla_put_u32(msg, NL80211_MPATH_INFO_PATH_CHANGE,
7509 pinfo->path_change_count)))
9360ffd1 7510 goto nla_put_failure;
2ec600d6
LCC		 7511
7512 nla_nest_end(msg, pinfoattr);
7513
053c095a
JB		 7514 genlmsg_end(msg, hdr);
7515 return 0;
2ec600d6
LCC		 7516
7517 nla_put_failure:
bc3ed28c
TG		 7518 genlmsg_cancel(msg, hdr);
7519 return -EMSGSIZE;
2ec600d6
LCC		 7520}
7521
7522static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 7523 struct netlink_callback *cb)
2ec600d6 7524{
2ec600d6 7525 struct mpath_info pinfo;
1b8ec87a 7526 struct cfg80211_registered_device *rdev;
97990a06 7527 struct wireless_dev *wdev;
2ec600d6
LCC		 7528 u8 dst[ETH_ALEN];
7529 u8 next_hop[ETH_ALEN];
97990a06 7530 int path_idx = cb->args[2];
2ec600d6 7531 int err;
2ec600d6 7532
ce6b6974 7533 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
67748893 7534 if (err)
a05829a7
JB		 7535 return err;
7536 /* nl80211_prepare_wdev_dump acquired it in the successful case */
7537 __acquire(&rdev->wiphy.mtx);
bba95fef 7538
1b8ec87a 7539 if (!rdev->ops->dump_mpath) {
eec60b03 7540 err = -EOPNOTSUPP;
bba95fef
JB		 7541 goto out_err;
7542 }
7543
97990a06 7544 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
eec60b03 7545 err = -EOPNOTSUPP;
0448b5fc 7546 goto out_err;
eec60b03
JM		 7547 }
7548
bba95fef 7549 while (1) {
1b8ec87a 7550 err = rdev_dump_mpath(rdev, wdev->netdev, path_idx, dst,
97990a06 7551 next_hop, &pinfo);
bba95fef 7552 if (err == -ENOENT)
2ec600d6 7553 break;
bba95fef 7554 if (err)
3b85875a 7555 goto out_err;
2ec600d6 7556
15e47304 7557 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef 7558 cb->nlh->nlmsg_seq, NLM_F_MULTI,
97990a06 7559 wdev->netdev, dst, next_hop,
bba95fef
JB		 7560 &pinfo) < 0)
7561 goto out;
2ec600d6 7562
bba95fef 7563 path_idx++;
2ec600d6 7564 }
2ec600d6 7565
bba95fef 7566 out:
97990a06 7567 cb->args[2] = path_idx;
bba95fef 7568 err = skb->len;
bba95fef 7569 out_err:
a05829a7 7570 wiphy_unlock(&rdev->wiphy);
bba95fef 7571 return err;
2ec600d6
LCC		 7572}
7573
7574static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
7575{
4c476991 7576 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 7577 int err;
4c476991 7578 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7579 struct mpath_info pinfo;
7580 struct sk_buff *msg;
7581 u8 *dst = NULL;
7582 u8 next_hop[ETH_ALEN];
7583
7584 memset(&pinfo, 0, sizeof(pinfo));
7585
7586 if (!info->attrs[NL80211_ATTR_MAC])
7587 return -EINVAL;
7588
7589 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7590
4c476991
JB		 7591 if (!rdev->ops->get_mpath)
7592 return -EOPNOTSUPP;
2ec600d6 7593
4c476991
JB		 7594 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7595 return -EOPNOTSUPP;
eec60b03 7596
e35e4d28 7597 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 7598 if (err)
4c476991 7599 return err;
2ec600d6 7600
fd2120ca 7601 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 7602 if (!msg)
4c476991 7603 return -ENOMEM;
2ec600d6 7604
15e47304 7605 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 7606 dev, dst, next_hop, &pinfo) < 0) {
7607 nlmsg_free(msg);
7608 return -ENOBUFS;
7609 }
3b85875a 7610
4c476991 7611 return genlmsg_reply(msg, info);
2ec600d6
LCC		 7612}
7613
7614static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
7615{
4c476991
JB		 7616 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7617 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7618 u8 *dst = NULL;
7619 u8 *next_hop = NULL;
7620
7621 if (!info->attrs[NL80211_ATTR_MAC])
7622 return -EINVAL;
7623
7624 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
7625 return -EINVAL;
7626
7627 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7628 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
7629
4c476991
JB		 7630 if (!rdev->ops->change_mpath)
7631 return -EOPNOTSUPP;
35a8efe1 7632
4c476991
JB		 7633 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7634 return -EOPNOTSUPP;
2ec600d6 7635
e35e4d28 7636 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 7637}
4c476991 7638
2ec600d6
LCC		 7639static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
7640{
4c476991
JB		 7641 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7642 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7643 u8 *dst = NULL;
7644 u8 *next_hop = NULL;
7645
7646 if (!info->attrs[NL80211_ATTR_MAC])
7647 return -EINVAL;
7648
7649 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
7650 return -EINVAL;
7651
7652 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7653 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
7654
4c476991
JB		 7655 if (!rdev->ops->add_mpath)
7656 return -EOPNOTSUPP;
35a8efe1 7657
4c476991
JB		 7658 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7659 return -EOPNOTSUPP;
2ec600d6 7660
e35e4d28 7661 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 7662}
7663
7664static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
7665{
4c476991
JB		 7666 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7667 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7668 u8 *dst = NULL;
7669
7670 if (info->attrs[NL80211_ATTR_MAC])
7671 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7672
4c476991
JB		 7673 if (!rdev->ops->del_mpath)
7674 return -EOPNOTSUPP;
3b85875a 7675
b501426c
MP		 7676 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7677 return -EOPNOTSUPP;
7678
e35e4d28 7679 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 7680}
7681
66be7d2b
HR		 7682static int nl80211_get_mpp(struct sk_buff *skb, struct genl_info *info)
7683{
7684 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7685 int err;
7686 struct net_device *dev = info->user_ptr[1];
7687 struct mpath_info pinfo;
7688 struct sk_buff *msg;
7689 u8 *dst = NULL;
7690 u8 mpp[ETH_ALEN];
7691
7692 memset(&pinfo, 0, sizeof(pinfo));
7693
7694 if (!info->attrs[NL80211_ATTR_MAC])
7695 return -EINVAL;
7696
7697 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7698
7699 if (!rdev->ops->get_mpp)
7700 return -EOPNOTSUPP;
7701
7702 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7703 return -EOPNOTSUPP;
7704
7705 err = rdev_get_mpp(rdev, dev, dst, mpp, &pinfo);
7706 if (err)
7707 return err;
7708
7709 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7710 if (!msg)
7711 return -ENOMEM;
7712
7713 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
7714 dev, dst, mpp, &pinfo) < 0) {
7715 nlmsg_free(msg);
7716 return -ENOBUFS;
7717 }
7718
7719 return genlmsg_reply(msg, info);
7720}
7721
7722static int nl80211_dump_mpp(struct sk_buff *skb,
7723 struct netlink_callback *cb)
7724{
7725 struct mpath_info pinfo;
7726 struct cfg80211_registered_device *rdev;
7727 struct wireless_dev *wdev;
7728 u8 dst[ETH_ALEN];
7729 u8 mpp[ETH_ALEN];
7730 int path_idx = cb->args[2];
7731 int err;
7732
ce6b6974 7733 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
66be7d2b 7734 if (err)
a05829a7
JB		 7735 return err;
7736 /* nl80211_prepare_wdev_dump acquired it in the successful case */
7737 __acquire(&rdev->wiphy.mtx);
66be7d2b
HR		 7738
7739 if (!rdev->ops->dump_mpp) {
7740 err = -EOPNOTSUPP;
7741 goto out_err;
7742 }
7743
7744 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
7745 err = -EOPNOTSUPP;
7746 goto out_err;
7747 }
7748
7749 while (1) {
7750 err = rdev_dump_mpp(rdev, wdev->netdev, path_idx, dst,
7751 mpp, &pinfo);
7752 if (err == -ENOENT)
7753 break;
7754 if (err)
7755 goto out_err;
7756
7757 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
7758 cb->nlh->nlmsg_seq, NLM_F_MULTI,
7759 wdev->netdev, dst, mpp,
7760 &pinfo) < 0)
7761 goto out;
7762
7763 path_idx++;
7764 }
7765
7766 out:
7767 cb->args[2] = path_idx;
7768 err = skb->len;
7769 out_err:
a05829a7 7770 wiphy_unlock(&rdev->wiphy);
66be7d2b
HR		 7771 return err;
7772}
7773
9f1ba906
JM		 7774static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
7775{
4c476991
JB		 7776 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7777 struct net_device *dev = info->user_ptr[1];
c56589ed 7778 struct wireless_dev *wdev = dev->ieee80211_ptr;
9f1ba906 7779 struct bss_parameters params;
c56589ed 7780 int err;
9f1ba906
JM		 7781
7782 memset(&params, 0, sizeof(params));
1e0f8cc9 7783 params.link_id = nl80211_link_id_or_invalid(info->attrs);
9f1ba906
JM		 7784 /* default to not changing parameters */
7785 params.use_cts_prot = -1;
7786 params.use_short_preamble = -1;
7787 params.use_short_slot_time = -1;
fd8aaaf3 7788 params.ap_isolate = -1;
50b12f59 7789 params.ht_opmode = -1;
53cabad7
JB		 7790 params.p2p_ctwindow = -1;
7791 params.p2p_opp_ps = -1;
9f1ba906
JM		 7792
7793 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
7794 params.use_cts_prot =
7795 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
7796 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
7797 params.use_short_preamble =
7798 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
7799 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
7800 params.use_short_slot_time =
7801 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 7802 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
7803 params.basic_rates =
7804 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7805 params.basic_rates_len =
7806 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7807 }
fd8aaaf3
FF		 7808 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
7809 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 7810 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
7811 params.ht_opmode =
7812 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 7813
53cabad7
JB		 7814 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
7815 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7816 return -EINVAL;
7817 params.p2p_ctwindow =
ab0d76f6 7818 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 7819 if (params.p2p_ctwindow != 0 &&
7820 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
7821 return -EINVAL;
7822 }
7823
7824 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
7825 u8 tmp;
7826
7827 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7828 return -EINVAL;
7829 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 7830 params.p2p_opp_ps = tmp;
7831 if (params.p2p_opp_ps &&
7832 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
7833 return -EINVAL;
7834 }
7835
4c476991
JB		 7836 if (!rdev->ops->change_bss)
7837 return -EOPNOTSUPP;
9f1ba906 7838
074ac8df 7839 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 7840 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7841 return -EOPNOTSUPP;
3b85875a 7842
c56589ed
SW		 7843 wdev_lock(wdev);
7844 err = rdev_change_bss(rdev, dev, &params);
7845 wdev_unlock(wdev);
7846
7847 return err;
9f1ba906
JM		 7848}
7849
b2e1b302
LR		 7850static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
7851{
b2e1b302 7852 char *data = NULL;
05050753 7853 bool is_indoor;
57b5ce07 7854 enum nl80211_user_reg_hint_type user_reg_hint_type;
05050753
I		 7855 u32 owner_nlportid;
7856
80778f18
LR		 7857 /*
7858 * You should only get this when cfg80211 hasn't yet initialized
7859 * completely when built-in to the kernel right between the time
7860 * window between nl80211_init() and regulatory_init(), if that is
7861 * even possible.
7862 */
458f4f9e 7863 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
fe33eb39 7864 return -EINPROGRESS;
80778f18 7865
57b5ce07
LR		 7866 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
7867 user_reg_hint_type =
7868 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
7869 else
7870 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
7871
7872 switch (user_reg_hint_type) {
7873 case NL80211_USER_REG_HINT_USER:
7874 case NL80211_USER_REG_HINT_CELL_BASE:
52616f2b
IP		 7875 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7876 return -EINVAL;
7877
7878 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7879 return regulatory_hint_user(data, user_reg_hint_type);
7880 case NL80211_USER_REG_HINT_INDOOR:
05050753
I		 7881 if (info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
7882 owner_nlportid = info->snd_portid;
7883 is_indoor = !!info->attrs[NL80211_ATTR_REG_INDOOR];
7884 } else {
7885 owner_nlportid = 0;
7886 is_indoor = true;
7887 }
7888
7889 return regulatory_hint_indoor(is_indoor, owner_nlportid);
57b5ce07
LR		 7890 default:
7891 return -EINVAL;
7892 }
b2e1b302
LR		 7893}
7894
1ea4ff3e
JB		 7895static int nl80211_reload_regdb(struct sk_buff *skb, struct genl_info *info)
7896{
7897 return reg_reload_regdb();
7898}
7899
24bdd9f4 7900static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 7901 struct genl_info *info)
93da9cc1 7902{
4c476991 7903 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 7904 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 7905 struct wireless_dev *wdev = dev->ieee80211_ptr;
7906 struct mesh_config cur_params;
7907 int err = 0;
93da9cc1 7908 void *hdr;
7909 struct nlattr *pinfoattr;
7910 struct sk_buff *msg;
7911
29cbe68c
JB		 7912 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7913 return -EOPNOTSUPP;
7914
24bdd9f4 7915 if (!rdev->ops->get_mesh_config)
4c476991 7916 return -EOPNOTSUPP;
f3f92586 7917
29cbe68c
JB		 7918 wdev_lock(wdev);
7919 /* If not connected, get default parameters */
7b0a0e3c 7920 if (!wdev->u.mesh.id_len)
29cbe68c
JB		 7921 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
7922 else
e35e4d28 7923 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 7924 wdev_unlock(wdev);
7925
93da9cc1 7926 if (err)
4c476991 7927 return err;
93da9cc1 7928
7929 /* Draw up a netlink message to send back */
fd2120ca 7930 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 7931 if (!msg)
7932 return -ENOMEM;
15e47304 7933 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 7934 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 7935 if (!hdr)
efe1cf0c 7936 goto out;
ae0be8de 7937 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 7938 if (!pinfoattr)
7939 goto nla_put_failure;
9360ffd1
DM		 7940 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7941 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
7942 cur_params.dot11MeshRetryTimeout) ||
7943 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
7944 cur_params.dot11MeshConfirmTimeout) ||
7945 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
7946 cur_params.dot11MeshHoldingTimeout) ||
7947 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
7948 cur_params.dot11MeshMaxPeerLinks) ||
7949 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
7950 cur_params.dot11MeshMaxRetries) ||
7951 nla_put_u8(msg, NL80211_MESHCONF_TTL,
7952 cur_params.dot11MeshTTL) ||
7953 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
7954 cur_params.element_ttl) ||
7955 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
7956 cur_params.auto_open_plinks) ||
7eab0f64
JL		 7957 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
7958 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 7959 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
7960 cur_params.dot11MeshHWMPmaxPREQretries) ||
7961 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
7962 cur_params.path_refresh_time) ||
7963 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
7964 cur_params.min_discovery_timeout) ||
7965 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
7966 cur_params.dot11MeshHWMPactivePathTimeout) ||
7967 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
7968 cur_params.dot11MeshHWMPpreqMinInterval) ||
7969 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
7970 cur_params.dot11MeshHWMPperrMinInterval) ||
7971 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
7972 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
7973 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
7974 cur_params.dot11MeshHWMPRootMode) ||
7975 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7976 cur_params.dot11MeshHWMPRannInterval) ||
7977 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
7978 cur_params.dot11MeshGateAnnouncementProtocol) ||
7979 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
7980 cur_params.dot11MeshForwarding) ||
335d5349 7981 nla_put_s32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 7982 cur_params.rssi_threshold) ||
7983 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 7984 cur_params.ht_opmode) ||
7985 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7986 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
7987 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 7988 cur_params.dot11MeshHWMProotInterval) ||
7989 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3b1c5a53
MP		 7990 cur_params.dot11MeshHWMPconfirmationInterval) ||
7991 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
7992 cur_params.power_mode) ||
7993 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
8e7c0538
CT		 7994 cur_params.dot11MeshAwakeWindowDuration) ||
7995 nla_put_u32(msg, NL80211_MESHCONF_PLINK_TIMEOUT,
01d66fbd
BC		 7996 cur_params.plink_timeout) ||
7997 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_GATE,
e3718a61
LL		 7998 cur_params.dot11MeshConnectedToMeshGate) ||
7999 nla_put_u8(msg, NL80211_MESHCONF_NOLEARN,
184eebe6
MT		 8000 cur_params.dot11MeshNolearn) ||
8001 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_AS,
8002 cur_params.dot11MeshConnectedToAuthServer))
9360ffd1 8003 goto nla_put_failure;
93da9cc1 8004 nla_nest_end(msg, pinfoattr);
8005 genlmsg_end(msg, hdr);
4c476991 8006 return genlmsg_reply(msg, info);
93da9cc1 8007
3b85875a 8008 nla_put_failure:
efe1cf0c 8009 out:
d080e275 8010 nlmsg_free(msg);
4c476991 8011 return -ENOBUFS;
93da9cc1 8012}
8013
ab0d76f6
JB		 8014static const struct nla_policy
8015nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
8016 [NL80211_MESHCONF_RETRY_TIMEOUT] =
8017 NLA_POLICY_RANGE(NLA_U16, 1, 255),
8018 [NL80211_MESHCONF_CONFIRM_TIMEOUT] =
8019 NLA_POLICY_RANGE(NLA_U16, 1, 255),
8020 [NL80211_MESHCONF_HOLDING_TIMEOUT] =
8021 NLA_POLICY_RANGE(NLA_U16, 1, 255),
8022 [NL80211_MESHCONF_MAX_PEER_LINKS] =
8023 NLA_POLICY_RANGE(NLA_U16, 0, 255),
8024 [NL80211_MESHCONF_MAX_RETRIES] = NLA_POLICY_MAX(NLA_U8, 16),
8025 [NL80211_MESHCONF_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
8026 [NL80211_MESHCONF_ELEMENT_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
8027 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = NLA_POLICY_MAX(NLA_U8, 1),
8028 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] =
8029 NLA_POLICY_RANGE(NLA_U32, 1, 255),
93da9cc1 8030 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
8031 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
ab0d76f6 8032 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = NLA_POLICY_MIN(NLA_U16, 1),
93da9cc1 8033 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 8034 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] =
8035 NLA_POLICY_MIN(NLA_U16, 1),
8036 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] =
8037 NLA_POLICY_MIN(NLA_U16, 1),
8038 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] =
8039 NLA_POLICY_MIN(NLA_U16, 1),
8040 [NL80211_MESHCONF_HWMP_ROOTMODE] = NLA_POLICY_MAX(NLA_U8, 4),
8041 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] =
8042 NLA_POLICY_MIN(NLA_U16, 1),
8043 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = NLA_POLICY_MAX(NLA_U8, 1),
8044 [NL80211_MESHCONF_FORWARDING] = NLA_POLICY_MAX(NLA_U8, 1),
8045 [NL80211_MESHCONF_RSSI_THRESHOLD] =
8046 NLA_POLICY_RANGE(NLA_S32, -255, 0),
a4f606ea 8047 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6 8048 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 8049 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] =
8050 NLA_POLICY_MIN(NLA_U16, 1),
8051 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] =
8052 NLA_POLICY_MIN(NLA_U16, 1),
8053 [NL80211_MESHCONF_POWER_MODE] =
8054 NLA_POLICY_RANGE(NLA_U32,
8055 NL80211_MESH_POWER_ACTIVE,
8056 NL80211_MESH_POWER_MAX),
3b1c5a53 8057 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
8e7c0538 8058 [NL80211_MESHCONF_PLINK_TIMEOUT] = { .type = NLA_U32 },
01d66fbd 8059 [NL80211_MESHCONF_CONNECTED_TO_GATE] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
e3718a61 8060 [NL80211_MESHCONF_NOLEARN] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
184eebe6 8061 [NL80211_MESHCONF_CONNECTED_TO_AS] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
93da9cc1 8062};
8063
c80d545d
JC		 8064static const struct nla_policy
8065 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 8066 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 8067 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
8068 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 8069 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
6e16d90b 8070 [NL80211_MESH_SETUP_AUTH_PROTOCOL] = { .type = NLA_U8 },
bb2798d4 8071 [NL80211_MESH_SETUP_USERSPACE_MPM] = { .type = NLA_FLAG },
3d7af878
JB		 8072 [NL80211_MESH_SETUP_IE] =
8073 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
8074 IEEE80211_MAX_DATA_LEN),
b130e5ce 8075 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 8076};
8077
24bdd9f4 8078static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 8079 struct mesh_config *cfg,
8080 u32 *mask_out)
93da9cc1 8081{
93da9cc1 8082 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 8083 u32 mask = 0;
9757235f 8084 u16 ht_opmode;
93da9cc1 8085
ab0d76f6
JB		 8086#define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, mask, attr, fn) \
8087do { \
8088 if (tb[attr]) { \
8089 cfg->param = fn(tb[attr]); \
8090 mask |= BIT((attr) - 1); \
8091 } \
ea54fba2 8092} while (0)
bd90fdcc 8093
24bdd9f4 8094 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 8095 return -EINVAL;
8cb08174 8096 if (nla_parse_nested_deprecated(tb, NL80211_MESHCONF_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_CONFIG], nl80211_meshconf_params_policy, info->extack))
93da9cc1 8097 return -EINVAL;
8098
93da9cc1 8099 /* This makes sure that there aren't more than 32 mesh config
8100 * parameters (otherwise our bitfield scheme would not work.) */
8101 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
8102
8103 /* Fill in the params struct */
ab0d76f6
JB		 8104 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, mask,
8105 NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
8106 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, mask,
8107 NL80211_MESHCONF_CONFIRM_TIMEOUT,
8108 nla_get_u16);
8109 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, mask,
8110 NL80211_MESHCONF_HOLDING_TIMEOUT,
8111 nla_get_u16);
8112 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, mask,
8113 NL80211_MESHCONF_MAX_PEER_LINKS,
8114 nla_get_u16);
8115 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, mask,
8116 NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
8117 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, mask,
8118 NL80211_MESHCONF_TTL, nla_get_u8);
8119 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, mask,
8120 NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
8121 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, mask,
8122 NL80211_MESHCONF_AUTO_OPEN_PLINKS,
8123 nla_get_u8);
ea54fba2 8124 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
ab0d76f6 8125 mask,
a4f606ea 8126 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
ab0d76f6
JB		 8127 nla_get_u32);
8128 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, mask,
8129 NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
8130 nla_get_u8);
8131 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, mask,
8132 NL80211_MESHCONF_PATH_REFRESH_TIME,
8133 nla_get_u32);
8134 if (mask & BIT(NL80211_MESHCONF_PATH_REFRESH_TIME) &&
8135 (cfg->path_refresh_time < 1 || cfg->path_refresh_time > 65535))
8136 return -EINVAL;
8137 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, mask,
8138 NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
8139 nla_get_u16);
ea54fba2 8140 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
ab0d76f6 8141 mask,
a4f606ea 8142 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
ab0d76f6
JB		 8143 nla_get_u32);
8144 if (mask & BIT(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT) &&
8145 (cfg->dot11MeshHWMPactivePathTimeout < 1 ||
8146 cfg->dot11MeshHWMPactivePathTimeout > 65535))
8147 return -EINVAL;
8148 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval, mask,
ea54fba2 8149 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
ab0d76f6
JB		 8150 nla_get_u16);
8151 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval, mask,
ea54fba2 8152 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
ab0d76f6 8153 nla_get_u16);
93da9cc1 8154 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6 8155 dot11MeshHWMPnetDiameterTraversalTime, mask,
a4f606ea 8156 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
ab0d76f6
JB		 8157 nla_get_u16);
8158 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
8159 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
8160 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
8161 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
8162 nla_get_u16);
8163 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshGateAnnouncementProtocol,
ea54fba2 8164 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
ab0d76f6
JB		 8165 nla_get_u8);
8166 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, mask,
8167 NL80211_MESHCONF_FORWARDING, nla_get_u8);
8168 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, mask,
8169 NL80211_MESHCONF_RSSI_THRESHOLD,
8170 nla_get_s32);
01d66fbd
BC		 8171 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToMeshGate, mask,
8172 NL80211_MESHCONF_CONNECTED_TO_GATE,
8173 nla_get_u8);
184eebe6
MT		 8174 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToAuthServer, mask,
8175 NL80211_MESHCONF_CONNECTED_TO_AS,
8176 nla_get_u8);
9757235f
MH		 8177 /*
8178 * Check HT operation mode based on
188f60ab 8179 * IEEE 802.11-2016 9.4.2.57 HT Operation element.
9757235f
MH		 8180 */
8181 if (tb[NL80211_MESHCONF_HT_OPMODE]) {
8182 ht_opmode = nla_get_u16(tb[NL80211_MESHCONF_HT_OPMODE]);
8183
8184 if (ht_opmode & ~(IEEE80211_HT_OP_MODE_PROTECTION |
8185 IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT |
8186 IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT))
8187 return -EINVAL;
8188
188f60ab
BC		 8189 /* NON_HT_STA bit is reserved, but some programs set it */
8190 ht_opmode &= ~IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
9757235f 8191
9757235f 8192 cfg->ht_opmode = ht_opmode;
fd551bac 8193 mask |= (1 << (NL80211_MESHCONF_HT_OPMODE - 1));
9757235f 8194 }
728b19e5 8195 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6
JB		 8196 dot11MeshHWMPactivePathToRootTimeout, mask,
8197 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
8198 nla_get_u32);
8199 if (mask & BIT(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT) &&
8200 (cfg->dot11MeshHWMPactivePathToRootTimeout < 1 ||
8201 cfg->dot11MeshHWMPactivePathToRootTimeout > 65535))
8202 return -EINVAL;
8203 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, mask,
8204 NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
8205 nla_get_u16);
8206 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPconfirmationInterval,
8207 mask,
728b19e5 8208 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
ab0d76f6
JB		 8209 nla_get_u16);
8210 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode, mask,
8211 NL80211_MESHCONF_POWER_MODE, nla_get_u32);
8212 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration, mask,
8213 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
8214 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, plink_timeout, mask,
8215 NL80211_MESHCONF_PLINK_TIMEOUT, nla_get_u32);
e3718a61
LL		 8216 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNolearn, mask,
8217 NL80211_MESHCONF_NOLEARN, nla_get_u8);
bd90fdcc
JB		 8218 if (mask_out)
8219 *mask_out = mask;
c80d545d 8220
bd90fdcc
JB		 8221 return 0;
8222
8223#undef FILL_IN_MESH_PARAM_IF_SET
8224}
8225
c80d545d
JC		 8226static int nl80211_parse_mesh_setup(struct genl_info *info,
8227 struct mesh_setup *setup)
8228{
bb2798d4 8229 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c80d545d
JC		 8230 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
8231
8232 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
8233 return -EINVAL;
8cb08174 8234 if (nla_parse_nested_deprecated(tb, NL80211_MESH_SETUP_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_SETUP], nl80211_mesh_setup_params_policy, info->extack))
c80d545d
JC		 8235 return -EINVAL;
8236
d299a1f2
JC		 8237 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
8238 setup->sync_method =
8239 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
8240 IEEE80211_SYNC_METHOD_VENDOR :
8241 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
8242
c80d545d
JC		 8243 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
8244 setup->path_sel_proto =
8245 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
8246 IEEE80211_PATH_PROTOCOL_VENDOR :
8247 IEEE80211_PATH_PROTOCOL_HWMP;
8248
8249 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
8250 setup->path_metric =
8251 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
8252 IEEE80211_PATH_METRIC_VENDOR :
8253 IEEE80211_PATH_METRIC_AIRTIME;
8254
581a8b0f 8255 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 8256 struct nlattr *ieattr =
581a8b0f 8257 tb[NL80211_MESH_SETUP_IE];
581a8b0f
JC		 8258 setup->ie = nla_data(ieattr);
8259 setup->ie_len = nla_len(ieattr);
c80d545d 8260 }
bb2798d4
TP		 8261 if (tb[NL80211_MESH_SETUP_USERSPACE_MPM] &&
8262 !(rdev->wiphy.features & NL80211_FEATURE_USERSPACE_MPM))
8263 return -EINVAL;
8264 setup->user_mpm = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_MPM]);
b130e5ce
JC		 8265 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
8266 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
bb2798d4
TP		 8267 if (setup->is_secure)
8268 setup->user_mpm = true;
c80d545d 8269
6e16d90b
CT		 8270 if (tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]) {
8271 if (!setup->user_mpm)
8272 return -EINVAL;
8273 setup->auth_id =
8274 nla_get_u8(tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]);
8275 }
8276
c80d545d
JC		 8277 return 0;
8278}
8279
24bdd9f4 8280static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 8281 struct genl_info *info)
bd90fdcc
JB		 8282{
8283 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8284 struct net_device *dev = info->user_ptr[1];
29cbe68c 8285 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 8286 struct mesh_config cfg;
8287 u32 mask;
8288 int err;
8289
29cbe68c
JB		 8290 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
8291 return -EOPNOTSUPP;
8292
24bdd9f4 8293 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 8294 return -EOPNOTSUPP;
8295
24bdd9f4 8296 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 8297 if (err)
8298 return err;
8299
29cbe68c 8300 wdev_lock(wdev);
7b0a0e3c 8301 if (!wdev->u.mesh.id_len)
29cbe68c
JB		 8302 err = -ENOLINK;
8303
8304 if (!err)
e35e4d28 8305 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 8306
8307 wdev_unlock(wdev);
8308
8309 return err;
93da9cc1 8310}
8311
ad30ca2c
AN		 8312static int nl80211_put_regdom(const struct ieee80211_regdomain *regdom,
8313 struct sk_buff *msg)
f130347c 8314{
f130347c
LR		 8315 struct nlattr *nl_reg_rules;
8316 unsigned int i;
f130347c 8317
458f4f9e
JB		 8318 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
8319 (regdom->dfs_region &&
8320 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
ad30ca2c 8321 goto nla_put_failure;
458f4f9e 8322
ae0be8de 8323 nl_reg_rules = nla_nest_start_noflag(msg, NL80211_ATTR_REG_RULES);
f130347c 8324 if (!nl_reg_rules)
ad30ca2c 8325 goto nla_put_failure;
f130347c 8326
458f4f9e 8327 for (i = 0; i < regdom->n_reg_rules; i++) {
f130347c
LR		 8328 struct nlattr *nl_reg_rule;
8329 const struct ieee80211_reg_rule *reg_rule;
8330 const struct ieee80211_freq_range *freq_range;
8331 const struct ieee80211_power_rule *power_rule;
97524820 8332 unsigned int max_bandwidth_khz;
f130347c 8333
458f4f9e 8334 reg_rule = &regdom->reg_rules[i];
f130347c
LR		 8335 freq_range = &reg_rule->freq_range;
8336 power_rule = &reg_rule->power_rule;
8337
ae0be8de 8338 nl_reg_rule = nla_nest_start_noflag(msg, i);
f130347c 8339 if (!nl_reg_rule)
ad30ca2c 8340 goto nla_put_failure;
f130347c 8341
97524820
JD		 8342 max_bandwidth_khz = freq_range->max_bandwidth_khz;
8343 if (!max_bandwidth_khz)
8344 max_bandwidth_khz = reg_get_max_bandwidth(regdom,
8345 reg_rule);
8346
9360ffd1
DM		 8347 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
8348 reg_rule->flags) ||
8349 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
8350 freq_range->start_freq_khz) ||
8351 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
8352 freq_range->end_freq_khz) ||
8353 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
97524820 8354 max_bandwidth_khz) ||
9360ffd1
DM		 8355 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
8356 power_rule->max_antenna_gain) ||
8357 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
089027e5
JD		 8358 power_rule->max_eirp) ||
8359 nla_put_u32(msg, NL80211_ATTR_DFS_CAC_TIME,
8360 reg_rule->dfs_cac_ms))
ad30ca2c 8361 goto nla_put_failure;
f130347c
LR		 8362
8363 nla_nest_end(msg, nl_reg_rule);
8364 }
8365
8366 nla_nest_end(msg, nl_reg_rules);
ad30ca2c
AN		 8367 return 0;
8368
8369nla_put_failure:
8370 return -EMSGSIZE;
8371}
8372
8373static int nl80211_get_reg_do(struct sk_buff *skb, struct genl_info *info)
8374{
8375 const struct ieee80211_regdomain *regdom = NULL;
8376 struct cfg80211_registered_device *rdev;
8377 struct wiphy *wiphy = NULL;
8378 struct sk_buff *msg;
024fcf5e 8379 int err = -EMSGSIZE;
ad30ca2c
AN		 8380 void *hdr;
8381
8382 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8383 if (!msg)
8384 return -ENOBUFS;
8385
8386 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
8387 NL80211_CMD_GET_REG);
8388 if (!hdr)
8389 goto put_failure;
8390
a05829a7
JB		 8391 rtnl_lock();
8392
ad30ca2c 8393 if (info->attrs[NL80211_ATTR_WIPHY]) {
1bdd716c
AN		 8394 bool self_managed;
8395
ad30ca2c
AN		 8396 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
8397 if (IS_ERR(rdev)) {
024fcf5e
JB		 8398 err = PTR_ERR(rdev);
8399 goto nla_put_failure;
ad30ca2c
AN		 8400 }
8401
8402 wiphy = &rdev->wiphy;
1bdd716c
AN		 8403 self_managed = wiphy->regulatory_flags &
8404 REGULATORY_WIPHY_SELF_MANAGED;
024fcf5e
JB		 8405
8406 rcu_read_lock();
8407
ad30ca2c
AN		 8408 regdom = get_wiphy_regdom(wiphy);
8409
1bdd716c
AN		 8410 /* a self-managed-reg device must have a private regdom */
8411 if (WARN_ON(!regdom && self_managed)) {
024fcf5e
JB		 8412 err = -EINVAL;
8413 goto nla_put_failure_rcu;
1bdd716c
AN		 8414 }
8415
ad30ca2c
AN		 8416 if (regdom &&
8417 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
024fcf5e
JB		 8418 goto nla_put_failure_rcu;
8419 } else {
8420 rcu_read_lock();
ad30ca2c
AN		 8421 }
8422
8423 if (!wiphy && reg_last_request_cell_base() &&
8424 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
8425 NL80211_USER_REG_HINT_CELL_BASE))
024fcf5e 8426 goto nla_put_failure_rcu;
ad30ca2c
AN		 8427
8428 if (!regdom)
8429 regdom = rcu_dereference(cfg80211_regdomain);
8430
8431 if (nl80211_put_regdom(regdom, msg))
8432 goto nla_put_failure_rcu;
8433
8434 rcu_read_unlock();
f130347c
LR		 8435
8436 genlmsg_end(msg, hdr);
a05829a7 8437 rtnl_unlock();
5fe231e8 8438 return genlmsg_reply(msg, info);
f130347c 8439
458f4f9e
JB		 8440nla_put_failure_rcu:
8441 rcu_read_unlock();
f130347c 8442nla_put_failure:
a05829a7 8443 rtnl_unlock();
efe1cf0c 8444put_failure:
d080e275 8445 nlmsg_free(msg);
024fcf5e 8446 return err;
f130347c
LR		 8447}
8448
ad30ca2c
AN		 8449static int nl80211_send_regdom(struct sk_buff *msg, struct netlink_callback *cb,
8450 u32 seq, int flags, struct wiphy *wiphy,
8451 const struct ieee80211_regdomain *regdom)
8452{
8453 void *hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
8454 NL80211_CMD_GET_REG);
8455
8456 if (!hdr)
8457 return -1;
8458
0a833c29 8459 genl_dump_check_consistent(cb, hdr);
ad30ca2c
AN		 8460
8461 if (nl80211_put_regdom(regdom, msg))
8462 goto nla_put_failure;
8463
8464 if (!wiphy && reg_last_request_cell_base() &&
8465 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
8466 NL80211_USER_REG_HINT_CELL_BASE))
8467 goto nla_put_failure;
8468
8469 if (wiphy &&
8470 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
8471 goto nla_put_failure;
8472
1bdd716c
AN		 8473 if (wiphy && wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
8474 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
8475 goto nla_put_failure;
8476
053c095a
JB		 8477 genlmsg_end(msg, hdr);
8478 return 0;
ad30ca2c
AN		 8479
8480nla_put_failure:
8481 genlmsg_cancel(msg, hdr);
8482 return -EMSGSIZE;
8483}
8484
8485static int nl80211_get_reg_dump(struct sk_buff *skb,
8486 struct netlink_callback *cb)
8487{
8488 const struct ieee80211_regdomain *regdom = NULL;
8489 struct cfg80211_registered_device *rdev;
8490 int err, reg_idx, start = cb->args[2];
8491
024fcf5e 8492 rcu_read_lock();
ad30ca2c
AN		 8493
8494 if (cfg80211_regdomain && start == 0) {
8495 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
8496 NLM_F_MULTI, NULL,
024fcf5e 8497 rcu_dereference(cfg80211_regdomain));
ad30ca2c
AN		 8498 if (err < 0)
8499 goto out_err;
8500 }
8501
8502 /* the global regdom is idx 0 */
8503 reg_idx = 1;
024fcf5e 8504 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ad30ca2c
AN		 8505 regdom = get_wiphy_regdom(&rdev->wiphy);
8506 if (!regdom)
8507 continue;
8508
8509 if (++reg_idx <= start)
8510 continue;
8511
8512 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
8513 NLM_F_MULTI, &rdev->wiphy, regdom);
8514 if (err < 0) {
8515 reg_idx--;
8516 break;
8517 }
8518 }
8519
8520 cb->args[2] = reg_idx;
8521 err = skb->len;
8522out_err:
024fcf5e 8523 rcu_read_unlock();
ad30ca2c
AN		 8524 return err;
8525}
8526
b6863036
JB		 8527#ifdef CONFIG_CFG80211_CRDA_SUPPORT
8528static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
8529 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
8530 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
8531 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
8532 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
8533 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
8534 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
8535 [NL80211_ATTR_DFS_CAC_TIME] = { .type = NLA_U32 },
8536};
8537
8538static int parse_reg_rule(struct nlattr *tb[],
8539 struct ieee80211_reg_rule *reg_rule)
8540{
8541 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
8542 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
8543
8544 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
8545 return -EINVAL;
8546 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
8547 return -EINVAL;
8548 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
8549 return -EINVAL;
8550 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
8551 return -EINVAL;
8552 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
8553 return -EINVAL;
8554
8555 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
8556
8557 freq_range->start_freq_khz =
8558 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
8559 freq_range->end_freq_khz =
8560 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
8561 freq_range->max_bandwidth_khz =
8562 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
8563
8564 power_rule->max_eirp =
8565 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
8566
8567 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
8568 power_rule->max_antenna_gain =
8569 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
8570
8571 if (tb[NL80211_ATTR_DFS_CAC_TIME])
8572 reg_rule->dfs_cac_ms =
8573 nla_get_u32(tb[NL80211_ATTR_DFS_CAC_TIME]);
8574
8575 return 0;
8576}
8577
b2e1b302
LR		 8578static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
8579{
8580 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
8581 struct nlattr *nl_reg_rule;
ea372c54
JB		 8582 char *alpha2;
8583 int rem_reg_rules, r;
391d132c 8584 u32 num_rules = 0, rule_idx = 0;
4c7d3982 8585 enum nl80211_dfs_regions dfs_region = NL80211_DFS_UNSET;
ea372c54 8586 struct ieee80211_regdomain *rd;
b2e1b302
LR		 8587
8588 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
8589 return -EINVAL;
8590
8591 if (!info->attrs[NL80211_ATTR_REG_RULES])
8592 return -EINVAL;
8593
8594 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
8595
8b60b078
LR		 8596 if (info->attrs[NL80211_ATTR_DFS_REGION])
8597 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
8598
b2e1b302 8599 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 8600 rem_reg_rules) {
b2e1b302
LR		 8601 num_rules++;
8602 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 8603 return -EINVAL;
b2e1b302
LR		 8604 }
8605
a05829a7
JB		 8606 rtnl_lock();
8607 if (!reg_is_valid_request(alpha2)) {
8608 r = -EINVAL;
8609 goto out;
8610 }
e438768f 8611
391d132c 8612 rd = kzalloc(struct_size(rd, reg_rules, num_rules), GFP_KERNEL);
a05829a7
JB		 8613 if (!rd) {
8614 r = -ENOMEM;
8615 goto out;
8616 }
b2e1b302
LR		 8617
8618 rd->n_reg_rules = num_rules;
8619 rd->alpha2[0] = alpha2[0];
8620 rd->alpha2[1] = alpha2[1];
8621
8b60b078
LR		 8622 /*
8623 * Disable DFS master mode if the DFS region was
8624 * not supported or known on this kernel.
8625 */
8626 if (reg_supported_dfs_region(dfs_region))
8627 rd->dfs_region = dfs_region;
8628
b2e1b302 8629 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 8630 rem_reg_rules) {
8cb08174
JB		 8631 r = nla_parse_nested_deprecated(tb, NL80211_REG_RULE_ATTR_MAX,
8632 nl_reg_rule, reg_rule_policy,
8633 info->extack);
ae811e21
JB		 8634 if (r)
8635 goto bad_reg;
b2e1b302
LR		 8636 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
8637 if (r)
8638 goto bad_reg;
8639
8640 rule_idx++;
8641
d0e18f83
LR		 8642 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
8643 r = -EINVAL;
b2e1b302 8644 goto bad_reg;
d0e18f83 8645 }
b2e1b302
LR		 8646 }
8647
a05829a7 8648 r = set_regdom(rd, REGD_SOURCE_CRDA);
06627990 8649 /* set_regdom takes ownership of rd */
a05829a7 8650 rd = NULL;
d2372b31 8651 bad_reg:
b2e1b302 8652 kfree(rd);
a05829a7
JB		 8653 out:
8654 rtnl_unlock();
d0e18f83 8655 return r;
b2e1b302 8656}
b6863036 8657#endif /* CONFIG_CFG80211_CRDA_SUPPORT */
b2e1b302 8658
83f5e2cf
JB		 8659static int validate_scan_freqs(struct nlattr *freqs)
8660{
8661 struct nlattr *attr1, *attr2;
8662 int n_channels = 0, tmp1, tmp2;
8663
d7f13f74
SD		 8664 nla_for_each_nested(attr1, freqs, tmp1)
8665 if (nla_len(attr1) != sizeof(u32))
8666 return 0;
8667
83f5e2cf
JB		 8668 nla_for_each_nested(attr1, freqs, tmp1) {
8669 n_channels++;
8670 /*
8671 * Some hardware has a limited channel list for
8672 * scanning, and it is pretty much nonsensical
8673 * to scan for a channel twice, so disallow that
8674 * and don't require drivers to check that the
8675 * channel list they get isn't longer than what
8676 * they can scan, as long as they can scan all
8677 * the channels they registered at once.
8678 */
8679 nla_for_each_nested(attr2, freqs, tmp2)
8680 if (attr1 != attr2 &&
8681 nla_get_u32(attr1) == nla_get_u32(attr2))
8682 return 0;
8683 }
8684
8685 return n_channels;
8686}
8687
57fbcce3 8688static bool is_band_valid(struct wiphy *wiphy, enum nl80211_band b)
38de03d2 8689{
57fbcce3 8690 return b < NUM_NL80211_BANDS && wiphy->bands[b];
38de03d2
AS		 8691}
8692
8693static int parse_bss_select(struct nlattr *nla, struct wiphy *wiphy,
8694 struct cfg80211_bss_selection *bss_select)
8695{
8696 struct nlattr *attr[NL80211_BSS_SELECT_ATTR_MAX + 1];
8697 struct nlattr *nest;
8698 int err;
8699 bool found = false;
8700 int i;
8701
8702 /* only process one nested attribute */
8703 nest = nla_data(nla);
8704 if (!nla_ok(nest, nla_len(nest)))
8705 return -EINVAL;
8706
8cb08174
JB		 8707 err = nla_parse_nested_deprecated(attr, NL80211_BSS_SELECT_ATTR_MAX,
8708 nest, nl80211_bss_select_policy,
8709 NULL);
38de03d2
AS		 8710 if (err)
8711 return err;
8712
8713 /* only one attribute may be given */
8714 for (i = 0; i <= NL80211_BSS_SELECT_ATTR_MAX; i++) {
8715 if (attr[i]) {
8716 if (found)
8717 return -EINVAL;
8718 found = true;
8719 }
8720 }
8721
8722 bss_select->behaviour = __NL80211_BSS_SELECT_ATTR_INVALID;
8723
8724 if (attr[NL80211_BSS_SELECT_ATTR_RSSI])
8725 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI;
8726
8727 if (attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]) {
8728 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_BAND_PREF;
8729 bss_select->param.band_pref =
8730 nla_get_u32(attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]);
8731 if (!is_band_valid(wiphy, bss_select->param.band_pref))
8732 return -EINVAL;
8733 }
8734
8735 if (attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]) {
8736 struct nl80211_bss_select_rssi_adjust *adj_param;
8737
8738 adj_param = nla_data(attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]);
8739 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI_ADJUST;
8740 bss_select->param.adjust.band = adj_param->band;
8741 bss_select->param.adjust.delta = adj_param->delta;
8742 if (!is_band_valid(wiphy, bss_select->param.adjust.band))
8743 return -EINVAL;
8744 }
8745
8746 /* user-space did not provide behaviour attribute */
8747 if (bss_select->behaviour == __NL80211_BSS_SELECT_ATTR_INVALID)
8748 return -EINVAL;
8749
8750 if (!(wiphy->bss_select_support & BIT(bss_select->behaviour)))
8751 return -EINVAL;
8752
8753 return 0;
8754}
8755
9bb7e0f2
JB		 8756int nl80211_parse_random_mac(struct nlattr **attrs,
8757 u8 *mac_addr, u8 *mac_addr_mask)
ad2b26ab
JB		 8758{
8759 int i;
8760
8761 if (!attrs[NL80211_ATTR_MAC] && !attrs[NL80211_ATTR_MAC_MASK]) {
d2beae10
JP		 8762 eth_zero_addr(mac_addr);
8763 eth_zero_addr(mac_addr_mask);
ad2b26ab
JB		 8764 mac_addr[0] = 0x2;
8765 mac_addr_mask[0] = 0x3;
8766
8767 return 0;
8768 }
8769
8770 /* need both or none */
8771 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_MAC_MASK])
8772 return -EINVAL;
8773
8774 memcpy(mac_addr, nla_data(attrs[NL80211_ATTR_MAC]), ETH_ALEN);
8775 memcpy(mac_addr_mask, nla_data(attrs[NL80211_ATTR_MAC_MASK]), ETH_ALEN);
8776
8777 /* don't allow or configure an mcast address */
8778 if (!is_multicast_ether_addr(mac_addr_mask) ||
8779 is_multicast_ether_addr(mac_addr))
8780 return -EINVAL;
8781
8782 /*
8783 * allow users to pass a MAC address that has bits set outside
8784 * of the mask, but don't bother drivers with having to deal
8785 * with such bits
8786 */
8787 for (i = 0; i < ETH_ALEN; i++)
8788 mac_addr[i] &= mac_addr_mask[i];
8789
8790 return 0;
8791}
8792
7b0a0e3c
JB		 8793static bool cfg80211_off_channel_oper_allowed(struct wireless_dev *wdev,
8794 struct ieee80211_channel *chan)
34373d12 8795{
7b0a0e3c
JB		 8796 unsigned int link_id;
8797 bool all_ok = true;
8798
34373d12
VT		 8799 ASSERT_WDEV_LOCK(wdev);
8800
8801 if (!cfg80211_beaconing_iface_active(wdev))
8802 return true;
8803
7b0a0e3c
JB		 8804 /*
8805 * FIXME: check if we have a free HW resource/link for chan
8806 *
8807 * This, as well as the FIXME below, requires knowing the link
8808 * capabilities of the hardware.
8809 */
8810
8811 /* we cannot leave radar channels */
8812 for_each_valid_link(wdev, link_id) {
8813 struct cfg80211_chan_def *chandef;
8814
8815 chandef = wdev_chandef(wdev, link_id);
8816 if (!chandef)
8817 continue;
8818
8819 /*
8820 * FIXME: don't require all_ok, but rather check only the
8821 * correct HW resource/link onto which 'chan' falls,
8822 * as only that link leaves the channel for doing
8823 * the off-channel operation.
8824 */
8825
8826 if (chandef->chan->flags & IEEE80211_CHAN_RADAR)
8827 all_ok = false;
8828 }
8829
8830 if (all_ok)
34373d12
VT		 8831 return true;
8832
8833 return regulatory_pre_cac_allowed(wdev->wiphy);
8834}
8835
db0a4ad8
JB		 8836static bool nl80211_check_scan_feat(struct wiphy *wiphy, u32 flags, u32 flag,
8837 enum nl80211_ext_feature_index feat)
8838{
8839 if (!(flags & flag))
8840 return true;
8841 if (wiphy_ext_feature_isset(wiphy, feat))
8842 return true;
8843 return false;
8844}
8845
2d23d073
RZ		 8846static int
8847nl80211_check_scan_flags(struct wiphy *wiphy, struct wireless_dev *wdev,
8848 void *request, struct nlattr **attrs,
8849 bool is_sched_scan)
8850{
8851 u8 *mac_addr, *mac_addr_mask;
8852 u32 *flags;
8853 enum nl80211_feature_flags randomness_flag;
8854
8855 if (!attrs[NL80211_ATTR_SCAN_FLAGS])
8856 return 0;
8857
8858 if (is_sched_scan) {
8859 struct cfg80211_sched_scan_request *req = request;
8860
8861 randomness_flag = wdev ?
8862 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR :
8863 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
8864 flags = &req->flags;
8865 mac_addr = req->mac_addr;
8866 mac_addr_mask = req->mac_addr_mask;
8867 } else {
8868 struct cfg80211_scan_request *req = request;
8869
8870 randomness_flag = NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
8871 flags = &req->flags;
8872 mac_addr = req->mac_addr;
8873 mac_addr_mask = req->mac_addr_mask;
8874 }
8875
8876 *flags = nla_get_u32(attrs[NL80211_ATTR_SCAN_FLAGS]);
8877
5037a009
SD		 8878 if (((*flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
8879 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
db0a4ad8
JB		 8880 !nl80211_check_scan_feat(wiphy, *flags,
8881 NL80211_SCAN_FLAG_LOW_SPAN,
8882 NL80211_EXT_FEATURE_LOW_SPAN_SCAN) ||
8883 !nl80211_check_scan_feat(wiphy, *flags,
8884 NL80211_SCAN_FLAG_LOW_POWER,
8885 NL80211_EXT_FEATURE_LOW_POWER_SCAN) ||
8886 !nl80211_check_scan_feat(wiphy, *flags,
8887 NL80211_SCAN_FLAG_HIGH_ACCURACY,
8888 NL80211_EXT_FEATURE_HIGH_ACCURACY_SCAN) ||
8889 !nl80211_check_scan_feat(wiphy, *flags,
8890 NL80211_SCAN_FLAG_FILS_MAX_CHANNEL_TIME,
8891 NL80211_EXT_FEATURE_FILS_MAX_CHANNEL_TIME) ||
8892 !nl80211_check_scan_feat(wiphy, *flags,
8893 NL80211_SCAN_FLAG_ACCEPT_BCAST_PROBE_RESP,
8894 NL80211_EXT_FEATURE_ACCEPT_BCAST_PROBE_RESP) ||
8895 !nl80211_check_scan_feat(wiphy, *flags,
8896 NL80211_SCAN_FLAG_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION,
8897 NL80211_EXT_FEATURE_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION) ||
8898 !nl80211_check_scan_feat(wiphy, *flags,
8899 NL80211_SCAN_FLAG_OCE_PROBE_REQ_HIGH_TX_RATE,
2e076f19
JB		 8900 NL80211_EXT_FEATURE_OCE_PROBE_REQ_HIGH_TX_RATE) ||
8901 !nl80211_check_scan_feat(wiphy, *flags,
8902 NL80211_SCAN_FLAG_RANDOM_SN,
8903 NL80211_EXT_FEATURE_SCAN_RANDOM_SN) ||
8904 !nl80211_check_scan_feat(wiphy, *flags,
8905 NL80211_SCAN_FLAG_MIN_PREQ_CONTENT,
8906 NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT))
2d23d073
RZ		 8907 return -EOPNOTSUPP;
8908
8909 if (*flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
8910 int err;
8911
8912 if (!(wiphy->features & randomness_flag) ||
7b0a0e3c 8913 (wdev && wdev->connected))
2d23d073
RZ		 8914 return -EOPNOTSUPP;
8915
8916 err = nl80211_parse_random_mac(attrs, mac_addr, mac_addr_mask);
8917 if (err)
8918 return err;
8919 }
8920
2d23d073
RZ		 8921 return 0;
8922}
8923
2a519311
JB		 8924static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
8925{
4c476991 8926 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 8927 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 8928 struct cfg80211_scan_request *request;
2032f3b2
TP		 8929 struct nlattr *scan_freqs = NULL;
8930 bool scan_freqs_khz = false;
2a519311
JB		 8931 struct nlattr *attr;
8932 struct wiphy *wiphy;
83f5e2cf 8933 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 8934 size_t ie_len;
2a519311 8935
79c97e97 8936 wiphy = &rdev->wiphy;
2a519311 8937
cb3b7d87
AB		 8938 if (wdev->iftype == NL80211_IFTYPE_NAN)
8939 return -EOPNOTSUPP;
8940
4c476991
JB		 8941 if (!rdev->ops->scan)
8942 return -EOPNOTSUPP;
2a519311 8943
83286856
CJ		 8944 if (rdev->scan_req || rdev->scan_msg)
8945 return -EBUSY;
2a519311 8946
2032f3b2
TP		 8947 if (info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ]) {
8948 if (!wiphy_ext_feature_isset(wiphy,
8949 NL80211_EXT_FEATURE_SCAN_FREQ_KHZ))
8950 return -EOPNOTSUPP;
8951 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ];
8952 scan_freqs_khz = true;
8953 } else if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES])
8954 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQUENCIES];
8955
8956 if (scan_freqs) {
8957 n_channels = validate_scan_freqs(scan_freqs);
83286856
CJ		 8958 if (!n_channels)
8959 return -EINVAL;
2a519311 8960 } else {
bdfbec2d 8961 n_channels = ieee80211_get_num_supported_channels(wiphy);
2a519311
JB		 8962 }
8963
8964 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
8965 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
8966 n_ssids++;
8967
83286856
CJ		 8968 if (n_ssids > wiphy->max_scan_ssids)
8969 return -EINVAL;
2a519311 8970
70692ad2
JM		 8971 if (info->attrs[NL80211_ATTR_IE])
8972 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
8973 else
8974 ie_len = 0;
8975
83286856
CJ		 8976 if (ie_len > wiphy->max_scan_ie_len)
8977 return -EINVAL;
18a83659 8978
2a519311 8979 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 8980 + sizeof(*request->ssids) * n_ssids
8981 + sizeof(*request->channels) * n_channels
70692ad2 8982 + ie_len, GFP_KERNEL);
83286856
CJ		 8983 if (!request)
8984 return -ENOMEM;
2a519311 8985
2a519311 8986 if (n_ssids)
5ba63533 8987 request->ssids = (void *)&request->channels[n_channels];
2a519311 8988 request->n_ssids = n_ssids;
70692ad2 8989 if (ie_len) {
13874e4b 8990 if (n_ssids)
70692ad2
JM		 8991 request->ie = (void *)(request->ssids + n_ssids);
8992 else
8993 request->ie = (void *)(request->channels + n_channels);
8994 }
2a519311 8995
584991dc 8996 i = 0;
2032f3b2 8997 if (scan_freqs) {
2a519311 8998 /* user specified, bail out if channel not found */
2032f3b2 8999 nla_for_each_nested(attr, scan_freqs, tmp) {
584991dc 9000 struct ieee80211_channel *chan;
2032f3b2 9001 int freq = nla_get_u32(attr);
584991dc 9002
2032f3b2
TP		 9003 if (!scan_freqs_khz)
9004 freq = MHZ_TO_KHZ(freq);
584991dc 9005
2032f3b2 9006 chan = ieee80211_get_channel_khz(wiphy, freq);
584991dc 9007 if (!chan) {
2a519311
JB		 9008 err = -EINVAL;
9009 goto out_free;
9010 }
584991dc
JB		 9011
9012 /* ignore disabled channels */
9013 if (chan->flags & IEEE80211_CHAN_DISABLED)
9014 continue;
9015
9016 request->channels[i] = chan;
2a519311
JB		 9017 i++;
9018 }
9019 } else {
57fbcce3 9020 enum nl80211_band band;
34850ab2 9021
2a519311 9022 /* all channels */
57fbcce3 9023 for (band = 0; band < NUM_NL80211_BANDS; band++) {
2a519311 9024 int j;
7a087e74 9025
2a519311
JB		 9026 if (!wiphy->bands[band])
9027 continue;
9028 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 9029 struct ieee80211_channel *chan;
9030
9031 chan = &wiphy->bands[band]->channels[j];
9032
9033 if (chan->flags & IEEE80211_CHAN_DISABLED)
9034 continue;
9035
9036 request->channels[i] = chan;
2a519311
JB		 9037 i++;
9038 }
9039 }
9040 }
9041
584991dc
JB		 9042 if (!i) {
9043 err = -EINVAL;
9044 goto out_free;
9045 }
9046
9047 request->n_channels = i;
9048
34373d12 9049 wdev_lock(wdev);
7b0a0e3c
JB		 9050 for (i = 0; i < request->n_channels; i++) {
9051 struct ieee80211_channel *chan = request->channels[i];
34373d12 9052
7b0a0e3c
JB		 9053 /* if we can go off-channel to the target channel we're good */
9054 if (cfg80211_off_channel_oper_allowed(wdev, chan))
9055 continue;
34373d12 9056
7b0a0e3c 9057 if (!cfg80211_wdev_on_sub_chan(wdev, chan, true)) {
34373d12
VT		 9058 wdev_unlock(wdev);
9059 err = -EBUSY;
9060 goto out_free;
9061 }
9062 }
9063 wdev_unlock(wdev);
9064
2a519311 9065 i = 0;
13874e4b 9066 if (n_ssids) {
2a519311 9067 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 9068 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 9069 err = -EINVAL;
9070 goto out_free;
9071 }
57a27e1d 9072 request->ssids[i].ssid_len = nla_len(attr);
2a519311 9073 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 9074 i++;
9075 }
9076 }
9077
70692ad2
JM		 9078 if (info->attrs[NL80211_ATTR_IE]) {
9079 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 9080 memcpy((void *)request->ie,
9081 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 9082 request->ie_len);
9083 }
9084
57fbcce3 9085 for (i = 0; i < NUM_NL80211_BANDS; i++)
a401d2bb
JB		 9086 if (wiphy->bands[i])
9087 request->rates[i] =
9088 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 9089
9090 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
9091 nla_for_each_nested(attr,
9092 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
9093 tmp) {
57fbcce3 9094 enum nl80211_band band = nla_type(attr);
34850ab2 9095
57fbcce3 9096 if (band < 0 || band >= NUM_NL80211_BANDS) {
34850ab2
JB		 9097 err = -EINVAL;
9098 goto out_free;
9099 }
1b09cd82
FF		 9100
9101 if (!wiphy->bands[band])
9102 continue;
9103
34850ab2
JB		 9104 err = ieee80211_get_ratemask(wiphy->bands[band],
9105 nla_data(attr),
9106 nla_len(attr),
9107 &request->rates[band]);
9108 if (err)
9109 goto out_free;
9110 }
9111 }
9112
1d76250b 9113 if (info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]) {
1d76250b
AS		 9114 request->duration =
9115 nla_get_u16(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]);
9116 request->duration_mandatory =
9117 nla_get_flag(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY]);
9118 }
9119
2d23d073
RZ		 9120 err = nl80211_check_scan_flags(wiphy, wdev, request, info->attrs,
9121 false);
9122 if (err)
9123 goto out_free;
ed473771 9124
e9f935e3
RM		 9125 request->no_cck =
9126 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
9127
2fa436b3
VK		 9128 /* Initial implementation used NL80211_ATTR_MAC to set the specific
9129 * BSSID to scan for. This was problematic because that same attribute
9130 * was already used for another purpose (local random MAC address). The
9131 * NL80211_ATTR_BSSID attribute was added to fix this. For backwards
9132 * compatibility with older userspace components, also use the
9133 * NL80211_ATTR_MAC value here if it can be determined to be used for
9134 * the specific BSSID use case instead of the random MAC address
9135 * (NL80211_ATTR_SCAN_FLAGS is used to enable random MAC address use).
9136 */
9137 if (info->attrs[NL80211_ATTR_BSSID])
9138 memcpy(request->bssid,
9139 nla_data(info->attrs[NL80211_ATTR_BSSID]), ETH_ALEN);
9140 else if (!(request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) &&
9141 info->attrs[NL80211_ATTR_MAC])
818965d3
JM		 9142 memcpy(request->bssid, nla_data(info->attrs[NL80211_ATTR_MAC]),
9143 ETH_ALEN);
9144 else
9145 eth_broadcast_addr(request->bssid);
9146
fd014284 9147 request->wdev = wdev;
79c97e97 9148 request->wiphy = &rdev->wiphy;
15d6030b 9149 request->scan_start = jiffies;
2a519311 9150
79c97e97 9151 rdev->scan_req = request;
c8cb5b85 9152 err = cfg80211_scan(rdev);
2a519311 9153
504776be
CJ		 9154 if (err)
9155 goto out_free;
9156
9157 nl80211_send_scan_start(rdev, wdev);
1160dfa1 9158 dev_hold(wdev->netdev);
504776be
CJ		 9159
9160 return 0;
9161
2a519311 9162 out_free:
504776be
CJ		 9163 rdev->scan_req = NULL;
9164 kfree(request);
3b85875a 9165
2a519311
JB		 9166 return err;
9167}
9168
91d3ab46
VK		 9169static int nl80211_abort_scan(struct sk_buff *skb, struct genl_info *info)
9170{
9171 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9172 struct wireless_dev *wdev = info->user_ptr[1];
9173
9174 if (!rdev->ops->abort_scan)
9175 return -EOPNOTSUPP;
9176
9177 if (rdev->scan_msg)
9178 return 0;
9179
9180 if (!rdev->scan_req)
9181 return -ENOENT;
9182
9183 rdev_abort_scan(rdev, wdev);
9184 return 0;
9185}
9186
3b06d277
AS		 9187static int
9188nl80211_parse_sched_scan_plans(struct wiphy *wiphy, int n_plans,
9189 struct cfg80211_sched_scan_request *request,
9190 struct nlattr **attrs)
9191{
9192 int tmp, err, i = 0;
9193 struct nlattr *attr;
9194
9195 if (!attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
9196 u32 interval;
9197
9198 /*
9199 * If scan plans are not specified,
5a88de53 9200 * %NL80211_ATTR_SCHED_SCAN_INTERVAL will be specified. In this
3b06d277
AS		 9201 * case one scan plan will be set with the specified scan
9202 * interval and infinite number of iterations.
9203 */
3b06d277
AS		 9204 interval = nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
9205 if (!interval)
9206 return -EINVAL;
9207
9208 request->scan_plans[0].interval =
9209 DIV_ROUND_UP(interval, MSEC_PER_SEC);
9210 if (!request->scan_plans[0].interval)
9211 return -EINVAL;
9212
9213 if (request->scan_plans[0].interval >
9214 wiphy->max_sched_scan_plan_interval)
9215 request->scan_plans[0].interval =
9216 wiphy->max_sched_scan_plan_interval;
9217
9218 return 0;
9219 }
9220
9221 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp) {
9222 struct nlattr *plan[NL80211_SCHED_SCAN_PLAN_MAX + 1];
9223
9224 if (WARN_ON(i >= n_plans))
9225 return -EINVAL;
9226
8cb08174
JB		 9227 err = nla_parse_nested_deprecated(plan,
9228 NL80211_SCHED_SCAN_PLAN_MAX,
9229 attr, nl80211_plan_policy,
9230 NULL);
3b06d277
AS		 9231 if (err)
9232 return err;
9233
9234 if (!plan[NL80211_SCHED_SCAN_PLAN_INTERVAL])
9235 return -EINVAL;
9236
9237 request->scan_plans[i].interval =
9238 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_INTERVAL]);
9239 if (!request->scan_plans[i].interval ||
9240 request->scan_plans[i].interval >
9241 wiphy->max_sched_scan_plan_interval)
9242 return -EINVAL;
9243
9244 if (plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]) {
9245 request->scan_plans[i].iterations =
9246 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]);
9247 if (!request->scan_plans[i].iterations ||
9248 (request->scan_plans[i].iterations >
9249 wiphy->max_sched_scan_plan_iterations))
9250 return -EINVAL;
9251 } else if (i < n_plans - 1) {
9252 /*
9253 * All scan plans but the last one must specify
9254 * a finite number of iterations
9255 */
9256 return -EINVAL;
9257 }
9258
9259 i++;
9260 }
9261
9262 /*
9263 * The last scan plan must not specify the number of
9264 * iterations, it is supposed to run infinitely
9265 */
9266 if (request->scan_plans[n_plans - 1].iterations)
9267 return -EINVAL;
9268
9269 return 0;
9270}
9271
1e1b11b6 9272static int
9273nl80211_parse_sched_scan_per_band_rssi(struct wiphy *wiphy,
9274 struct cfg80211_match_set *match_sets,
9275 struct nlattr *tb_band_rssi,
9276 s32 rssi_thold)
9277{
9278 struct nlattr *attr;
9279 int i, tmp, ret = 0;
9280
9281 if (!wiphy_ext_feature_isset(wiphy,
9282 NL80211_EXT_FEATURE_SCHED_SCAN_BAND_SPECIFIC_RSSI_THOLD)) {
9283 if (tb_band_rssi)
9284 ret = -EOPNOTSUPP;
9285 else
9286 for (i = 0; i < NUM_NL80211_BANDS; i++)
9287 match_sets->per_band_rssi_thold[i] =
9288 NL80211_SCAN_RSSI_THOLD_OFF;
9289 return ret;
9290 }
9291
9292 for (i = 0; i < NUM_NL80211_BANDS; i++)
9293 match_sets->per_band_rssi_thold[i] = rssi_thold;
9294
9295 nla_for_each_nested(attr, tb_band_rssi, tmp) {
9296 enum nl80211_band band = nla_type(attr);
9297
9298 if (band < 0 || band >= NUM_NL80211_BANDS)
9299 return -EINVAL;
9300
9301 match_sets->per_band_rssi_thold[band] = nla_get_s32(attr);
9302 }
9303
9304 return 0;
9305}
9306
256da02d 9307static struct cfg80211_sched_scan_request *
ad2b26ab 9308nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
aad1e812 9309 struct nlattr **attrs, int max_match_sets)
807f8a8c
LC		 9310{
9311 struct cfg80211_sched_scan_request *request;
807f8a8c 9312 struct nlattr *attr;
3b06d277 9313 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i, n_plans = 0;
57fbcce3 9314 enum nl80211_band band;
807f8a8c 9315 size_t ie_len;
a1f1c21c 9316 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
ea73cbce 9317 s32 default_match_rssi = NL80211_SCAN_RSSI_THOLD_OFF;
807f8a8c 9318
256da02d 9319 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c 9320 n_channels = validate_scan_freqs(
256da02d 9321 attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
807f8a8c 9322 if (!n_channels)
256da02d 9323 return ERR_PTR(-EINVAL);
807f8a8c 9324 } else {
bdfbec2d 9325 n_channels = ieee80211_get_num_supported_channels(wiphy);
807f8a8c
LC		 9326 }
9327
256da02d
LC		 9328 if (attrs[NL80211_ATTR_SCAN_SSIDS])
9329 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c
LC		 9330 tmp)
9331 n_ssids++;
9332
93b6aa69 9333 if (n_ssids > wiphy->max_sched_scan_ssids)
256da02d 9334 return ERR_PTR(-EINVAL);
807f8a8c 9335
ea73cbce
JB		 9336 /*
9337 * First, count the number of 'real' matchsets. Due to an issue with
9338 * the old implementation, matchsets containing only the RSSI attribute
9339 * (NL80211_SCHED_SCAN_MATCH_ATTR_RSSI) are considered as the 'default'
9340 * RSSI for all matchsets, rather than their own matchset for reporting
9341 * all APs with a strong RSSI. This is needed to be compatible with
9342 * older userspace that treated a matchset with only the RSSI as the
9343 * global RSSI for all other matchsets - if there are other matchsets.
9344 */
256da02d 9345 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 9346 nla_for_each_nested(attr,
256da02d 9347 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
ea73cbce
JB		 9348 tmp) {
9349 struct nlattr *rssi;
9350
8cb08174
JB		 9351 err = nla_parse_nested_deprecated(tb,
9352 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
9353 attr,
9354 nl80211_match_policy,
9355 NULL);
ea73cbce 9356 if (err)
256da02d 9357 return ERR_PTR(err);
3007e352
AVS		 9358
9359 /* SSID and BSSID are mutually exclusive */
9360 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] &&
9361 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID])
9362 return ERR_PTR(-EINVAL);
9363
ea73cbce 9364 /* add other standalone attributes here */
3007e352
AVS		 9365 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] ||
9366 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID]) {
ea73cbce
JB		 9367 n_match_sets++;
9368 continue;
9369 }
9370 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
9371 if (rssi)
9372 default_match_rssi = nla_get_s32(rssi);
9373 }
9374 }
9375
9376 /* However, if there's no other matchset, add the RSSI one */
9377 if (!n_match_sets && default_match_rssi != NL80211_SCAN_RSSI_THOLD_OFF)
9378 n_match_sets = 1;
a1f1c21c 9379
aad1e812 9380 if (n_match_sets > max_match_sets)
256da02d 9381 return ERR_PTR(-EINVAL);
a1f1c21c 9382
256da02d
LC		 9383 if (attrs[NL80211_ATTR_IE])
9384 ie_len = nla_len(attrs[NL80211_ATTR_IE]);
807f8a8c
LC		 9385 else
9386 ie_len = 0;
9387
5a865bad 9388 if (ie_len > wiphy->max_sched_scan_ie_len)
256da02d 9389 return ERR_PTR(-EINVAL);
c10841ca 9390
3b06d277
AS		 9391 if (attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
9392 /*
9393 * NL80211_ATTR_SCHED_SCAN_INTERVAL must not be specified since
9394 * each scan plan already specifies its own interval
9395 */
9396 if (attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
9397 return ERR_PTR(-EINVAL);
9398
9399 nla_for_each_nested(attr,
9400 attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp)
9401 n_plans++;
9402 } else {
9403 /*
9404 * The scan interval attribute is kept for backward
9405 * compatibility. If no scan plans are specified and sched scan
9406 * interval is specified, one scan plan will be set with this
9407 * scan interval and infinite number of iterations.
9408 */
9409 if (!attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
9410 return ERR_PTR(-EINVAL);
9411
9412 n_plans = 1;
9413 }
9414
9415 if (!n_plans || n_plans > wiphy->max_sched_scan_plans)
9416 return ERR_PTR(-EINVAL);
9417
bf95ecdb 9418 if (!wiphy_ext_feature_isset(
9419 wiphy, NL80211_EXT_FEATURE_SCHED_SCAN_RELATIVE_RSSI) &&
9420 (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] ||
9421 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]))
9422 return ERR_PTR(-EINVAL);
9423
807f8a8c 9424 request = kzalloc(sizeof(*request)
a2cd43c5 9425 + sizeof(*request->ssids) * n_ssids
a1f1c21c 9426 + sizeof(*request->match_sets) * n_match_sets
3b06d277 9427 + sizeof(*request->scan_plans) * n_plans
a2cd43c5 9428 + sizeof(*request->channels) * n_channels
807f8a8c 9429 + ie_len, GFP_KERNEL);
256da02d
LC		 9430 if (!request)
9431 return ERR_PTR(-ENOMEM);
807f8a8c
LC		 9432
9433 if (n_ssids)
9434 request->ssids = (void *)&request->channels[n_channels];
9435 request->n_ssids = n_ssids;
9436 if (ie_len) {
13874e4b 9437 if (n_ssids)
807f8a8c
LC		 9438 request->ie = (void *)(request->ssids + n_ssids);
9439 else
9440 request->ie = (void *)(request->channels + n_channels);
9441 }
9442
a1f1c21c
LC		 9443 if (n_match_sets) {
9444 if (request->ie)
9445 request->match_sets = (void *)(request->ie + ie_len);
13874e4b 9446 else if (n_ssids)
a1f1c21c
LC		 9447 request->match_sets =
9448 (void *)(request->ssids + n_ssids);
9449 else
9450 request->match_sets =
9451 (void *)(request->channels + n_channels);
9452 }
9453 request->n_match_sets = n_match_sets;
9454
3b06d277
AS		 9455 if (n_match_sets)
9456 request->scan_plans = (void *)(request->match_sets +
9457 n_match_sets);
9458 else if (request->ie)
9459 request->scan_plans = (void *)(request->ie + ie_len);
9460 else if (n_ssids)
9461 request->scan_plans = (void *)(request->ssids + n_ssids);
9462 else
9463 request->scan_plans = (void *)(request->channels + n_channels);
9464
9465 request->n_scan_plans = n_plans;
9466
807f8a8c 9467 i = 0;
256da02d 9468 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c
LC		 9469 /* user specified, bail out if channel not found */
9470 nla_for_each_nested(attr,
256da02d 9471 attrs[NL80211_ATTR_SCAN_FREQUENCIES],
807f8a8c
LC		 9472 tmp) {
9473 struct ieee80211_channel *chan;
9474
9475 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
9476
9477 if (!chan) {
9478 err = -EINVAL;
9479 goto out_free;
9480 }
9481
9482 /* ignore disabled channels */
9483 if (chan->flags & IEEE80211_CHAN_DISABLED)
9484 continue;
9485
9486 request->channels[i] = chan;
9487 i++;
9488 }
9489 } else {
9490 /* all channels */
57fbcce3 9491 for (band = 0; band < NUM_NL80211_BANDS; band++) {
807f8a8c 9492 int j;
7a087e74 9493
807f8a8c
LC		 9494 if (!wiphy->bands[band])
9495 continue;
9496 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
9497 struct ieee80211_channel *chan;
9498
9499 chan = &wiphy->bands[band]->channels[j];
9500
9501 if (chan->flags & IEEE80211_CHAN_DISABLED)
9502 continue;
9503
9504 request->channels[i] = chan;
9505 i++;
9506 }
9507 }
9508 }
9509
9510 if (!i) {
9511 err = -EINVAL;
9512 goto out_free;
9513 }
9514
9515 request->n_channels = i;
9516
9517 i = 0;
13874e4b 9518 if (n_ssids) {
256da02d 9519 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c 9520 tmp) {
57a27e1d 9521 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 9522 err = -EINVAL;
9523 goto out_free;
9524 }
57a27e1d 9525 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 9526 memcpy(request->ssids[i].ssid, nla_data(attr),
9527 nla_len(attr));
807f8a8c
LC		 9528 i++;
9529 }
9530 }
9531
a1f1c21c 9532 i = 0;
256da02d 9533 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 9534 nla_for_each_nested(attr,
256da02d 9535 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
a1f1c21c 9536 tmp) {
3007e352 9537 struct nlattr *ssid, *bssid, *rssi;
a1f1c21c 9538
8cb08174
JB		 9539 err = nla_parse_nested_deprecated(tb,
9540 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
9541 attr,
9542 nl80211_match_policy,
9543 NULL);
ae811e21
JB		 9544 if (err)
9545 goto out_free;
4a4ab0d7 9546 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
3007e352 9547 bssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID];
d39f3b4f
JB		 9548
9549 if (!ssid && !bssid) {
9550 i++;
9551 continue;
9552 }
9553
9554 if (WARN_ON(i >= n_match_sets)) {
9555 /* this indicates a programming error,
9556 * the loop above should have verified
9557 * things properly
9558 */
9559 err = -EINVAL;
9560 goto out_free;
9561 }
9562
9563 if (ssid) {
d39f3b4f
JB		 9564 memcpy(request->match_sets[i].ssid.ssid,
9565 nla_data(ssid), nla_len(ssid));
9566 request->match_sets[i].ssid.ssid_len =
9567 nla_len(ssid);
9568 }
cb9abd48 9569 if (bssid)
d39f3b4f
JB		 9570 memcpy(request->match_sets[i].bssid,
9571 nla_data(bssid), ETH_ALEN);
3007e352 9572
d39f3b4f
JB		 9573 /* special attribute - old implementation w/a */
9574 request->match_sets[i].rssi_thold = default_match_rssi;
9575 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
9576 if (rssi)
ea73cbce 9577 request->match_sets[i].rssi_thold =
d39f3b4f 9578 nla_get_s32(rssi);
1e1b11b6 9579
9580 /* Parse per band RSSI attribute */
9581 err = nl80211_parse_sched_scan_per_band_rssi(wiphy,
9582 &request->match_sets[i],
9583 tb[NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI],
9584 request->match_sets[i].rssi_thold);
9585 if (err)
9586 goto out_free;
9587
a1f1c21c
LC		 9588 i++;
9589 }
ea73cbce
JB		 9590
9591 /* there was no other matchset, so the RSSI one is alone */
f89f46cf 9592 if (i == 0 && n_match_sets)
ea73cbce
JB		 9593 request->match_sets[0].rssi_thold = default_match_rssi;
9594
9595 request->min_rssi_thold = INT_MAX;
9596 for (i = 0; i < n_match_sets; i++)
9597 request->min_rssi_thold =
9598 min(request->match_sets[i].rssi_thold,
9599 request->min_rssi_thold);
9600 } else {
9601 request->min_rssi_thold = NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 9602 }
9603
9900e484
JB		 9604 if (ie_len) {
9605 request->ie_len = ie_len;
807f8a8c 9606 memcpy((void *)request->ie,
256da02d 9607 nla_data(attrs[NL80211_ATTR_IE]),
807f8a8c
LC		 9608 request->ie_len);
9609 }
9610
2d23d073
RZ		 9611 err = nl80211_check_scan_flags(wiphy, wdev, request, attrs, true);
9612 if (err)
9613 goto out_free;
ed473771 9614
9c748934
LC		 9615 if (attrs[NL80211_ATTR_SCHED_SCAN_DELAY])
9616 request->delay =
9617 nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_DELAY]);
9618
bf95ecdb 9619 if (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]) {
9620 request->relative_rssi = nla_get_s8(
9621 attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]);
9622 request->relative_rssi_set = true;
9623 }
9624
9625 if (request->relative_rssi_set &&
9626 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]) {
9627 struct nl80211_bss_select_rssi_adjust *rssi_adjust;
9628
9629 rssi_adjust = nla_data(
9630 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]);
9631 request->rssi_adjust.band = rssi_adjust->band;
9632 request->rssi_adjust.delta = rssi_adjust->delta;
9633 if (!is_band_valid(wiphy, request->rssi_adjust.band)) {
9634 err = -EINVAL;
9635 goto out_free;
9636 }
9637 }
9638
3b06d277
AS		 9639 err = nl80211_parse_sched_scan_plans(wiphy, n_plans, request, attrs);
9640 if (err)
9641 goto out_free;
9642
15d6030b 9643 request->scan_start = jiffies;
807f8a8c 9644
256da02d 9645 return request;
807f8a8c
LC		 9646
9647out_free:
9648 kfree(request);
256da02d
LC		 9649 return ERR_PTR(err);
9650}
9651
9652static int nl80211_start_sched_scan(struct sk_buff *skb,
9653 struct genl_info *info)
9654{
9655 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9656 struct net_device *dev = info->user_ptr[1];
ad2b26ab 9657 struct wireless_dev *wdev = dev->ieee80211_ptr;
31a60ed1 9658 struct cfg80211_sched_scan_request *sched_scan_req;
ca986ad9 9659 bool want_multi;
256da02d
LC		 9660 int err;
9661
ca986ad9 9662 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_start)
256da02d
LC		 9663 return -EOPNOTSUPP;
9664
ca986ad9
AVS		 9665 want_multi = info->attrs[NL80211_ATTR_SCHED_SCAN_MULTI];
9666 err = cfg80211_sched_scan_req_possible(rdev, want_multi);
9667 if (err)
9668 return err;
256da02d 9669
31a60ed1 9670 sched_scan_req = nl80211_parse_sched_scan(&rdev->wiphy, wdev,
aad1e812
AVS		 9671 info->attrs,
9672 rdev->wiphy.max_match_sets);
31a60ed1
JR		 9673
9674 err = PTR_ERR_OR_ZERO(sched_scan_req);
256da02d
LC		 9675 if (err)
9676 goto out_err;
9677
ca986ad9
AVS		 9678 /* leave request id zero for legacy request
9679 * or if driver does not support multi-scheduled scan
9680 */
2fd351a8
DK		 9681 if (want_multi && rdev->wiphy.max_sched_scan_reqs > 1)
9682 sched_scan_req->reqid = cfg80211_assign_cookie(rdev);
ca986ad9 9683
31a60ed1 9684 err = rdev_sched_scan_start(rdev, dev, sched_scan_req);
256da02d
LC		 9685 if (err)
9686 goto out_free;
9687
31a60ed1
JR		 9688 sched_scan_req->dev = dev;
9689 sched_scan_req->wiphy = &rdev->wiphy;
9690
93a1e86c
JR		 9691 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
9692 sched_scan_req->owner_nlportid = info->snd_portid;
9693
ca986ad9 9694 cfg80211_add_sched_scan_req(rdev, sched_scan_req);
256da02d 9695
96b08fd6 9696 nl80211_send_sched_scan(sched_scan_req, NL80211_CMD_START_SCHED_SCAN);
256da02d
LC		 9697 return 0;
9698
9699out_free:
31a60ed1 9700 kfree(sched_scan_req);
256da02d 9701out_err:
807f8a8c
LC		 9702 return err;
9703}
9704
9705static int nl80211_stop_sched_scan(struct sk_buff *skb,
9706 struct genl_info *info)
9707{
ca986ad9 9708 struct cfg80211_sched_scan_request *req;
807f8a8c 9709 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ca986ad9 9710 u64 cookie;
807f8a8c 9711
ca986ad9 9712 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_stop)
807f8a8c
LC		 9713 return -EOPNOTSUPP;
9714
ca986ad9
AVS		 9715 if (info->attrs[NL80211_ATTR_COOKIE]) {
9716 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
9717 return __cfg80211_stop_sched_scan(rdev, cookie, false);
9718 }
9719
9720 req = list_first_or_null_rcu(&rdev->sched_scan_req_list,
9721 struct cfg80211_sched_scan_request,
9722 list);
9723 if (!req || req->reqid ||
9724 (req->owner_nlportid &&
9725 req->owner_nlportid != info->snd_portid))
9726 return -ENOENT;
9727
9728 return cfg80211_stop_sched_scan_req(rdev, req, false);
807f8a8c
LC		 9729}
9730
04f39047
SW		 9731static int nl80211_start_radar_detection(struct sk_buff *skb,
9732 struct genl_info *info)
9733{
9734 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9735 struct net_device *dev = info->user_ptr[1];
9736 struct wireless_dev *wdev = dev->ieee80211_ptr;
13cf6dec 9737 struct wiphy *wiphy = wdev->wiphy;
04f39047 9738 struct cfg80211_chan_def chandef;
55f7435c 9739 enum nl80211_dfs_regions dfs_region;
31559f35 9740 unsigned int cac_time_ms;
84158164
LB		 9741 int err = -EINVAL;
9742
9743 flush_delayed_work(&rdev->dfs_update_channels_wk);
9744
9745 wiphy_lock(wiphy);
04f39047 9746
13cf6dec 9747 dfs_region = reg_get_dfs_region(wiphy);
55f7435c 9748 if (dfs_region == NL80211_DFS_UNSET)
84158164 9749 goto unlock;
55f7435c 9750
04f39047
SW		 9751 err = nl80211_parse_chandef(rdev, info, &chandef);
9752 if (err)
84158164 9753 goto unlock;
04f39047 9754
13cf6dec 9755 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
04f39047 9756 if (err < 0)
84158164 9757 goto unlock;
04f39047 9758
84158164
LB		 9759 if (err == 0) {
9760 err = -EINVAL;
9761 goto unlock;
9762 }
04f39047 9763
84158164
LB		 9764 if (!cfg80211_chandef_dfs_usable(wiphy, &chandef)) {
9765 err = -EINVAL;
9766 goto unlock;
9767 }
04f39047 9768
a95bfb87
LB		 9769 if (nla_get_flag(info->attrs[NL80211_ATTR_RADAR_BACKGROUND])) {
9770 err = cfg80211_start_background_radar_detection(rdev, wdev,
9771 &chandef);
84158164
LB		 9772 goto unlock;
9773 }
bc2dfc02 9774
84158164
LB		 9775 if (netif_carrier_ok(dev)) {
9776 err = -EBUSY;
9777 goto unlock;
9778 }
bc2dfc02 9779
84158164
LB		 9780 if (wdev->cac_started) {
9781 err = -EBUSY;
9782 goto unlock;
9783 }
bc2dfc02 9784
13cf6dec 9785 /* CAC start is offloaded to HW and can't be started manually */
84158164
LB		 9786 if (wiphy_ext_feature_isset(wiphy, NL80211_EXT_FEATURE_DFS_OFFLOAD)) {
9787 err = -EOPNOTSUPP;
9788 goto unlock;
9789 }
13cf6dec 9790
84158164
LB		 9791 if (!rdev->ops->start_radar_detection) {
9792 err = -EOPNOTSUPP;
9793 goto unlock;
9794 }
04f39047 9795
31559f35
JD		 9796 cac_time_ms = cfg80211_chandef_dfs_cac_time(&rdev->wiphy, &chandef);
9797 if (WARN_ON(!cac_time_ms))
9798 cac_time_ms = IEEE80211_DFS_MIN_CAC_TIME_MS;
9799
a1056b1b 9800 err = rdev_start_radar_detection(rdev, dev, &chandef, cac_time_ms);
04f39047 9801 if (!err) {
7b0a0e3c 9802 wdev->links[0].ap.chandef = chandef;
04f39047
SW		 9803 wdev->cac_started = true;
9804 wdev->cac_start_time = jiffies;
31559f35 9805 wdev->cac_time_ms = cac_time_ms;
04f39047 9806 }
84158164
LB		 9807unlock:
9808 wiphy_unlock(wiphy);
9809
04f39047
SW		 9810 return err;
9811}
9812
30c63115
S		 9813static int nl80211_notify_radar_detection(struct sk_buff *skb,
9814 struct genl_info *info)
9815{
9816 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9817 struct net_device *dev = info->user_ptr[1];
9818 struct wireless_dev *wdev = dev->ieee80211_ptr;
9819 struct wiphy *wiphy = wdev->wiphy;
9820 struct cfg80211_chan_def chandef;
9821 enum nl80211_dfs_regions dfs_region;
9822 int err;
9823
9824 dfs_region = reg_get_dfs_region(wiphy);
9825 if (dfs_region == NL80211_DFS_UNSET) {
9826 GENL_SET_ERR_MSG(info,
9827 "DFS Region is not set. Unexpected Radar indication");
9828 return -EINVAL;
9829 }
9830
9831 err = nl80211_parse_chandef(rdev, info, &chandef);
9832 if (err) {
9833 GENL_SET_ERR_MSG(info, "Unable to extract chandef info");
9834 return err;
9835 }
9836
9837 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
9838 if (err < 0) {
9839 GENL_SET_ERR_MSG(info, "chandef is invalid");
9840 return err;
9841 }
9842
9843 if (err == 0) {
9844 GENL_SET_ERR_MSG(info,
9845 "Unexpected Radar indication for chandef/iftype");
9846 return -EINVAL;
9847 }
9848
9849 /* Do not process this notification if radar is already detected
9850 * by kernel on this channel, and return success.
9851 */
9852 if (chandef.chan->dfs_state == NL80211_DFS_UNAVAILABLE)
9853 return 0;
9854
9855 cfg80211_set_dfs_state(wiphy, &chandef, NL80211_DFS_UNAVAILABLE);
9856
9857 cfg80211_sched_dfs_chan_update(rdev);
9858
a680fe46 9859 rdev->radar_chandef = chandef;
30c63115
S		 9860
9861 /* Propagate this notification to other radios as well */
9862 queue_work(cfg80211_wq, &rdev->propagate_radar_detect_wk);
9863
9864 return 0;
9865}
9866
16ef1fe2
SW		 9867static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
9868{
9869 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 9870 unsigned int link_id = nl80211_link_id(info->attrs);
16ef1fe2
SW		 9871 struct net_device *dev = info->user_ptr[1];
9872 struct wireless_dev *wdev = dev->ieee80211_ptr;
9873 struct cfg80211_csa_settings params;
a05829a7 9874 struct nlattr **csa_attrs = NULL;
16ef1fe2 9875 int err;
ee4bc9e7 9876 bool need_new_beacon = false;
8d9de16f 9877 bool need_handle_dfs_flag = true;
9a774c78 9878 int len, i;
252e07ca 9879 u32 cs_count;
16ef1fe2
SW		 9880
9881 if (!rdev->ops->channel_switch ||
9882 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH))
9883 return -EOPNOTSUPP;
9884
ee4bc9e7
SW		 9885 switch (dev->ieee80211_ptr->iftype) {
9886 case NL80211_IFTYPE_AP:
9887 case NL80211_IFTYPE_P2P_GO:
9888 need_new_beacon = true;
8d9de16f
BB		 9889 /* For all modes except AP the handle_dfs flag needs to be
9890 * supplied to tell the kernel that userspace will handle radar
9891 * events when they happen. Otherwise a switch to a channel
9892 * requiring DFS will be rejected.
9893 */
9894 need_handle_dfs_flag = false;
ee4bc9e7
SW		 9895
9896 /* useless if AP is not running */
7b0a0e3c 9897 if (!wdev->links[link_id].ap.beacon_interval)
1ff79dfa 9898 return -ENOTCONN;
ee4bc9e7
SW		 9899 break;
9900 case NL80211_IFTYPE_ADHOC:
7b0a0e3c 9901 if (!wdev->u.ibss.ssid_len)
1ff79dfa
JB		 9902 return -ENOTCONN;
9903 break;
c6da674a 9904 case NL80211_IFTYPE_MESH_POINT:
7b0a0e3c 9905 if (!wdev->u.mesh.id_len)
1ff79dfa 9906 return -ENOTCONN;
ee4bc9e7
SW		 9907 break;
9908 default:
16ef1fe2 9909 return -EOPNOTSUPP;
ee4bc9e7 9910 }
16ef1fe2
SW		 9911
9912 memset(&params, 0, sizeof(params));
c177db2d 9913 params.beacon_csa.ftm_responder = -1;
16ef1fe2
SW		 9914
9915 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
9916 !info->attrs[NL80211_ATTR_CH_SWITCH_COUNT])
9917 return -EINVAL;
9918
9919 /* only important for AP, IBSS and mesh create IEs internally */
d0a361a5 9920 if (need_new_beacon && !info->attrs[NL80211_ATTR_CSA_IES])
16ef1fe2
SW		 9921 return -EINVAL;
9922
252e07ca
LC		 9923 /* Even though the attribute is u32, the specification says
9924 * u8, so let's make sure we don't overflow.
9925 */
9926 cs_count = nla_get_u32(info->attrs[NL80211_ATTR_CH_SWITCH_COUNT]);
9927 if (cs_count > 255)
9928 return -EINVAL;
9929
9930 params.count = cs_count;
16ef1fe2 9931
ee4bc9e7
SW		 9932 if (!need_new_beacon)
9933 goto skip_beacons;
9934
81e54d08 9935 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_after);
16ef1fe2 9936 if (err)
dc1e3cb8 9937 goto free;
16ef1fe2 9938
a05829a7
JB		 9939 csa_attrs = kcalloc(NL80211_ATTR_MAX + 1, sizeof(*csa_attrs),
9940 GFP_KERNEL);
dc1e3cb8
JC		 9941 if (!csa_attrs) {
9942 err = -ENOMEM;
9943 goto free;
9944 }
a05829a7 9945
8cb08174
JB		 9946 err = nla_parse_nested_deprecated(csa_attrs, NL80211_ATTR_MAX,
9947 info->attrs[NL80211_ATTR_CSA_IES],
9948 nl80211_policy, info->extack);
16ef1fe2 9949 if (err)
a05829a7 9950 goto free;
16ef1fe2 9951
81e54d08 9952 err = nl80211_parse_beacon(rdev, csa_attrs, &params.beacon_csa);
16ef1fe2 9953 if (err)
a05829a7 9954 goto free;
16ef1fe2 9955
a05829a7
JB		 9956 if (!csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]) {
9957 err = -EINVAL;
9958 goto free;
9959 }
16ef1fe2 9960
00c207ed 9961 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
a05829a7
JB		 9962 if (!len || (len % sizeof(u16))) {
9963 err = -EINVAL;
9964 goto free;
9965 }
16ef1fe2 9966
9a774c78
AO		 9967 params.n_counter_offsets_beacon = len / sizeof(u16);
9968 if (rdev->wiphy.max_num_csa_counters &&
9969 (params.n_counter_offsets_beacon >
a05829a7
JB		 9970 rdev->wiphy.max_num_csa_counters)) {
9971 err = -EINVAL;
9972 goto free;
9973 }
16ef1fe2 9974
9a774c78 9975 params.counter_offsets_beacon =
00c207ed 9976 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
9a774c78
AO		 9977
9978 /* sanity checks - counters should fit and be the same */
9979 for (i = 0; i < params.n_counter_offsets_beacon; i++) {
9980 u16 offset = params.counter_offsets_beacon[i];
9981
a05829a7
JB		 9982 if (offset >= params.beacon_csa.tail_len) {
9983 err = -EINVAL;
9984 goto free;
9985 }
9a774c78 9986
a05829a7
JB		 9987 if (params.beacon_csa.tail[offset] != params.count) {
9988 err = -EINVAL;
9989 goto free;
9990 }
9a774c78
AO		 9991 }
9992
00c207ed
JC		 9993 if (csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]) {
9994 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
a05829a7
JB		 9995 if (!len || (len % sizeof(u16))) {
9996 err = -EINVAL;
9997 goto free;
9998 }
16ef1fe2 9999
9a774c78
AO		 10000 params.n_counter_offsets_presp = len / sizeof(u16);
10001 if (rdev->wiphy.max_num_csa_counters &&
ad5987b4 10002 (params.n_counter_offsets_presp >
a05829a7
JB		 10003 rdev->wiphy.max_num_csa_counters)) {
10004 err = -EINVAL;
10005 goto free;
10006 }
9a774c78
AO		 10007
10008 params.counter_offsets_presp =
00c207ed 10009 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
9a774c78
AO		 10010
10011 /* sanity checks - counters should fit and be the same */
10012 for (i = 0; i < params.n_counter_offsets_presp; i++) {
10013 u16 offset = params.counter_offsets_presp[i];
10014
a05829a7
JB		 10015 if (offset >= params.beacon_csa.probe_resp_len) {
10016 err = -EINVAL;
10017 goto free;
10018 }
9a774c78
AO		 10019
10020 if (params.beacon_csa.probe_resp[offset] !=
a05829a7
JB		 10021 params.count) {
10022 err = -EINVAL;
10023 goto free;
10024 }
9a774c78 10025 }
16ef1fe2
SW		 10026 }
10027
ee4bc9e7 10028skip_beacons:
16ef1fe2
SW		 10029 err = nl80211_parse_chandef(rdev, info, &params.chandef);
10030 if (err)
a05829a7 10031 goto free;
16ef1fe2 10032
923b352f 10033 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
a05829a7
JB		 10034 wdev->iftype)) {
10035 err = -EINVAL;
10036 goto free;
10037 }
16ef1fe2 10038
2beb6dab
LC		 10039 err = cfg80211_chandef_dfs_required(wdev->wiphy,
10040 &params.chandef,
10041 wdev->iftype);
10042 if (err < 0)
a05829a7 10043 goto free;
2beb6dab 10044
8d9de16f 10045 if (err > 0) {
2beb6dab 10046 params.radar_required = true;
8d9de16f
BB		 10047 if (need_handle_dfs_flag &&
10048 !nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS])) {
a05829a7
JB		 10049 err = -EINVAL;
10050 goto free;
8d9de16f
BB		 10051 }
10052 }
16ef1fe2 10053
16ef1fe2
SW		 10054 if (info->attrs[NL80211_ATTR_CH_SWITCH_BLOCK_TX])
10055 params.block_tx = true;
10056
c56589ed
SW		 10057 wdev_lock(wdev);
10058 err = rdev_channel_switch(rdev, dev, &params);
10059 wdev_unlock(wdev);
10060
a05829a7 10061free:
dc1e3cb8
JC		 10062 kfree(params.beacon_after.mbssid_ies);
10063 kfree(params.beacon_csa.mbssid_ies);
a05829a7 10064 kfree(csa_attrs);
c56589ed 10065 return err;
16ef1fe2
SW		 10066}
10067
9720bb3a
JB		 10068static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
10069 u32 seq, int flags,
2a519311 10070 struct cfg80211_registered_device *rdev,
48ab905d
JB		 10071 struct wireless_dev *wdev,
10072 struct cfg80211_internal_bss *intbss)
2a519311 10073{
48ab905d 10074 struct cfg80211_bss *res = &intbss->pub;
9caf0364 10075 const struct cfg80211_bss_ies *ies;
7b0a0e3c 10076 unsigned int link_id;
2a519311
JB		 10077 void *hdr;
10078 struct nlattr *bss;
48ab905d
JB		 10079
10080 ASSERT_WDEV_LOCK(wdev);
2a519311 10081
15e47304 10082 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 10083 NL80211_CMD_NEW_SCAN_RESULTS);
10084 if (!hdr)
10085 return -1;
10086
0a833c29 10087 genl_dump_check_consistent(cb, hdr);
9720bb3a 10088
97990a06
JB		 10089 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation))
10090 goto nla_put_failure;
10091 if (wdev->netdev &&
9360ffd1
DM		 10092 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
10093 goto nla_put_failure;
2dad624e
ND		 10094 if (nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
10095 NL80211_ATTR_PAD))
97990a06 10096 goto nla_put_failure;
2a519311 10097
ae0be8de 10098 bss = nla_nest_start_noflag(msg, NL80211_ATTR_BSS);
2a519311
JB		 10099 if (!bss)
10100 goto nla_put_failure;
9360ffd1 10101 if ((!is_zero_ether_addr(res->bssid) &&
9caf0364 10102 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
9360ffd1 10103 goto nla_put_failure;
9caf0364
JB		 10104
10105 rcu_read_lock();
0e227084
JB		 10106 /* indicate whether we have probe response data or not */
10107 if (rcu_access_pointer(res->proberesp_ies) &&
10108 nla_put_flag(msg, NL80211_BSS_PRESP_DATA))
10109 goto fail_unlock_rcu;
10110
10111 /* this pointer prefers to be pointed to probe response data
10112 * but is always valid
10113 */
9caf0364 10114 ies = rcu_dereference(res->ies);
8cef2c9d 10115 if (ies) {
2dad624e
ND		 10116 if (nla_put_u64_64bit(msg, NL80211_BSS_TSF, ies->tsf,
10117 NL80211_BSS_PAD))
8cef2c9d 10118 goto fail_unlock_rcu;
8cef2c9d
JB		 10119 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
10120 ies->len, ies->data))
10121 goto fail_unlock_rcu;
9caf0364 10122 }
0e227084
JB		 10123
10124 /* and this pointer is always (unless driver didn't know) beacon data */
9caf0364 10125 ies = rcu_dereference(res->beacon_ies);
0e227084 10126 if (ies && ies->from_beacon) {
2dad624e
ND		 10127 if (nla_put_u64_64bit(msg, NL80211_BSS_BEACON_TSF, ies->tsf,
10128 NL80211_BSS_PAD))
8cef2c9d
JB		 10129 goto fail_unlock_rcu;
10130 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
10131 ies->len, ies->data))
10132 goto fail_unlock_rcu;
9caf0364
JB		 10133 }
10134 rcu_read_unlock();
10135
9360ffd1
DM		 10136 if (res->beacon_interval &&
10137 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
10138 goto nla_put_failure;
10139 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
10140 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
942ba88b
TP		 10141 nla_put_u32(msg, NL80211_BSS_FREQUENCY_OFFSET,
10142 res->channel->freq_offset) ||
dcd6eac1 10143 nla_put_u32(msg, NL80211_BSS_CHAN_WIDTH, res->scan_width) ||
9360ffd1
DM		 10144 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
10145 jiffies_to_msecs(jiffies - intbss->ts)))
10146 goto nla_put_failure;
2a519311 10147
1d76250b
AS		 10148 if (intbss->parent_tsf &&
10149 (nla_put_u64_64bit(msg, NL80211_BSS_PARENT_TSF,
10150 intbss->parent_tsf, NL80211_BSS_PAD) ||
10151 nla_put(msg, NL80211_BSS_PARENT_BSSID, ETH_ALEN,
10152 intbss->parent_bssid)))
10153 goto nla_put_failure;
10154
6e19bc4b 10155 if (intbss->ts_boottime &&
2dad624e
ND		 10156 nla_put_u64_64bit(msg, NL80211_BSS_LAST_SEEN_BOOTTIME,
10157 intbss->ts_boottime, NL80211_BSS_PAD))
6e19bc4b
DS		 10158 goto nla_put_failure;
10159
983dafaa
SD		 10160 if (!nl80211_put_signal(msg, intbss->pub.chains,
10161 intbss->pub.chain_signal,
10162 NL80211_BSS_CHAIN_SIGNAL))
10163 goto nla_put_failure;
10164
77965c97 10165 switch (rdev->wiphy.signal_type) {
2a519311 10166 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 10167 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
10168 goto nla_put_failure;
2a519311
JB		 10169 break;
10170 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 10171 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
10172 goto nla_put_failure;
2a519311
JB		 10173 break;
10174 default:
10175 break;
10176 }
10177
48ab905d 10178 switch (wdev->iftype) {
074ac8df 10179 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 10180 case NL80211_IFTYPE_STATION:
7b0a0e3c
JB		 10181 for_each_valid_link(wdev, link_id) {
10182 if (intbss == wdev->links[link_id].client.current_bss &&
dd374f84
JB		 10183 (nla_put_u32(msg, NL80211_BSS_STATUS,
10184 NL80211_BSS_STATUS_ASSOCIATED) ||
10185 (wdev->valid_links &&
6522047c
JB		 10186 (nla_put_u8(msg, NL80211_BSS_MLO_LINK_ID,
10187 link_id) ||
10188 nla_put(msg, NL80211_BSS_MLD_ADDR, ETH_ALEN,
10189 wdev->u.client.connected_addr)))))
7b0a0e3c
JB		 10190 goto nla_put_failure;
10191 }
48ab905d
JB		 10192 break;
10193 case NL80211_IFTYPE_ADHOC:
7b0a0e3c 10194 if (intbss == wdev->u.ibss.current_bss &&
9360ffd1
DM		 10195 nla_put_u32(msg, NL80211_BSS_STATUS,
10196 NL80211_BSS_STATUS_IBSS_JOINED))
10197 goto nla_put_failure;
48ab905d
JB		 10198 break;
10199 default:
10200 break;
10201 }
10202
2a519311
JB		 10203 nla_nest_end(msg, bss);
10204
053c095a
JB		 10205 genlmsg_end(msg, hdr);
10206 return 0;
2a519311 10207
8cef2c9d
JB		 10208 fail_unlock_rcu:
10209 rcu_read_unlock();
2a519311
JB		 10210 nla_put_failure:
10211 genlmsg_cancel(msg, hdr);
10212 return -EMSGSIZE;
10213}
10214
97990a06 10215static int nl80211_dump_scan(struct sk_buff *skb, struct netlink_callback *cb)
2a519311 10216{
48ab905d 10217 struct cfg80211_registered_device *rdev;
2a519311 10218 struct cfg80211_internal_bss *scan;
48ab905d 10219 struct wireless_dev *wdev;
97990a06 10220 int start = cb->args[2], idx = 0;
2a519311
JB		 10221 int err;
10222
ce6b6974 10223 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
a05829a7 10224 if (err)
67748893 10225 return err;
a05829a7
JB		 10226 /* nl80211_prepare_wdev_dump acquired it in the successful case */
10227 __acquire(&rdev->wiphy.mtx);
2a519311 10228
48ab905d
JB		 10229 wdev_lock(wdev);
10230 spin_lock_bh(&rdev->bss_lock);
d1e23c94
DK		 10231
10232 /*
10233 * dump_scan will be called multiple times to break up the scan results
10234 * into multiple messages. It is unlikely that any more bss-es will be
10235 * expired after the first call, so only call only call this on the
10236 * first dump_scan invocation.
10237 */
10238 if (start == 0)
10239 cfg80211_bss_expire(rdev);
48ab905d 10240
9720bb3a
JB		 10241 cb->seq = rdev->bss_generation;
10242
48ab905d 10243 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 10244 if (++idx <= start)
10245 continue;
9720bb3a 10246 if (nl80211_send_bss(skb, cb,
2a519311 10247 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 10248 rdev, wdev, scan) < 0) {
2a519311 10249 idx--;
67748893 10250 break;
2a519311
JB		 10251 }
10252 }
10253
48ab905d
JB		 10254 spin_unlock_bh(&rdev->bss_lock);
10255 wdev_unlock(wdev);
2a519311 10256
97990a06 10257 cb->args[2] = idx;
a05829a7 10258 wiphy_unlock(&rdev->wiphy);
2a519311 10259
67748893 10260 return skb->len;
2a519311
JB		 10261}
10262
15e47304 10263static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
11f78ac3
JB		 10264 int flags, struct net_device *dev,
10265 bool allow_radio_stats,
10266 struct survey_info *survey)
61fa713c
HS		 10267{
10268 void *hdr;
10269 struct nlattr *infoattr;
10270
11f78ac3
JB		 10271 /* skip radio stats if userspace didn't request them */
10272 if (!survey->channel && !allow_radio_stats)
10273 return 0;
10274
15e47304 10275 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 10276 NL80211_CMD_NEW_SURVEY_RESULTS);
10277 if (!hdr)
10278 return -ENOMEM;
10279
9360ffd1
DM		 10280 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
10281 goto nla_put_failure;
61fa713c 10282
ae0be8de 10283 infoattr = nla_nest_start_noflag(msg, NL80211_ATTR_SURVEY_INFO);
61fa713c
HS		 10284 if (!infoattr)
10285 goto nla_put_failure;
10286
11f78ac3
JB		 10287 if (survey->channel &&
10288 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
9360ffd1
DM		 10289 survey->channel->center_freq))
10290 goto nla_put_failure;
58ef7c1b
TP		 10291
10292 if (survey->channel && survey->channel->freq_offset &&
10293 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY_OFFSET,
10294 survey->channel->freq_offset))
10295 goto nla_put_failure;
9360ffd1
DM		 10296
10297 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
10298 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
10299 goto nla_put_failure;
10300 if ((survey->filled & SURVEY_INFO_IN_USE) &&
10301 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
10302 goto nla_put_failure;
4ed20beb 10303 if ((survey->filled & SURVEY_INFO_TIME) &&
2dad624e
ND		 10304 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME,
10305 survey->time, NL80211_SURVEY_INFO_PAD))
9360ffd1 10306 goto nla_put_failure;
4ed20beb 10307 if ((survey->filled & SURVEY_INFO_TIME_BUSY) &&
2dad624e
ND		 10308 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BUSY,
10309 survey->time_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 10310 goto nla_put_failure;
4ed20beb 10311 if ((survey->filled & SURVEY_INFO_TIME_EXT_BUSY) &&
2dad624e
ND		 10312 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_EXT_BUSY,
10313 survey->time_ext_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 10314 goto nla_put_failure;
4ed20beb 10315 if ((survey->filled & SURVEY_INFO_TIME_RX) &&
2dad624e
ND		 10316 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_RX,
10317 survey->time_rx, NL80211_SURVEY_INFO_PAD))
9360ffd1 10318 goto nla_put_failure;
4ed20beb 10319 if ((survey->filled & SURVEY_INFO_TIME_TX) &&
2dad624e
ND		 10320 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_TX,
10321 survey->time_tx, NL80211_SURVEY_INFO_PAD))
9360ffd1 10322 goto nla_put_failure;
052536ab 10323 if ((survey->filled & SURVEY_INFO_TIME_SCAN) &&
2dad624e
ND		 10324 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_SCAN,
10325 survey->time_scan, NL80211_SURVEY_INFO_PAD))
052536ab 10326 goto nla_put_failure;
c8cd6e7f
FF		 10327 if ((survey->filled & SURVEY_INFO_TIME_BSS_RX) &&
10328 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BSS_RX,
10329 survey->time_bss_rx, NL80211_SURVEY_INFO_PAD))
10330 goto nla_put_failure;
61fa713c
HS		 10331
10332 nla_nest_end(msg, infoattr);
10333
053c095a
JB		 10334 genlmsg_end(msg, hdr);
10335 return 0;
61fa713c
HS		 10336
10337 nla_put_failure:
10338 genlmsg_cancel(msg, hdr);
10339 return -EMSGSIZE;
10340}
10341
11f78ac3 10342static int nl80211_dump_survey(struct sk_buff *skb, struct netlink_callback *cb)
61fa713c 10343{
50508d94 10344 struct nlattr **attrbuf;
61fa713c 10345 struct survey_info survey;
1b8ec87a 10346 struct cfg80211_registered_device *rdev;
97990a06
JB		 10347 struct wireless_dev *wdev;
10348 int survey_idx = cb->args[2];
61fa713c 10349 int res;
11f78ac3 10350 bool radio_stats;
61fa713c 10351
50508d94
JB		 10352 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
10353 if (!attrbuf)
10354 return -ENOMEM;
10355
ce6b6974 10356 res = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, attrbuf);
a05829a7
JB		 10357 if (res) {
10358 kfree(attrbuf);
10359 return res;
10360 }
10361 /* nl80211_prepare_wdev_dump acquired it in the successful case */
10362 __acquire(&rdev->wiphy.mtx);
61fa713c 10363
11f78ac3 10364 /* prepare_wdev_dump parsed the attributes */
c90c39da 10365 radio_stats = attrbuf[NL80211_ATTR_SURVEY_RADIO_STATS];
11f78ac3 10366
97990a06
JB		 10367 if (!wdev->netdev) {
10368 res = -EINVAL;
10369 goto out_err;
10370 }
10371
1b8ec87a 10372 if (!rdev->ops->dump_survey) {
61fa713c
HS		 10373 res = -EOPNOTSUPP;
10374 goto out_err;
10375 }
10376
10377 while (1) {
284b38b6 10378 wdev_lock(wdev);
1b8ec87a 10379 res = rdev_dump_survey(rdev, wdev->netdev, survey_idx, &survey);
284b38b6 10380 wdev_unlock(wdev);
61fa713c
HS		 10381 if (res == -ENOENT)
10382 break;
10383 if (res)
10384 goto out_err;
10385
11f78ac3
JB		 10386 /* don't send disabled channels, but do send non-channel data */
10387 if (survey.channel &&
10388 survey.channel->flags & IEEE80211_CHAN_DISABLED) {
180cdc79
LR		 10389 survey_idx++;
10390 continue;
10391 }
10392
61fa713c 10393 if (nl80211_send_survey(skb,
15e47304 10394 NETLINK_CB(cb->skb).portid,
61fa713c 10395 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11f78ac3 10396 wdev->netdev, radio_stats, &survey) < 0)
61fa713c
HS		 10397 goto out;
10398 survey_idx++;
10399 }
10400
10401 out:
97990a06 10402 cb->args[2] = survey_idx;
61fa713c
HS		 10403 res = skb->len;
10404 out_err:
50508d94 10405 kfree(attrbuf);
a05829a7 10406 wiphy_unlock(&rdev->wiphy);
61fa713c
HS		 10407 return res;
10408}
10409
b23aa676
SO		 10410static bool nl80211_valid_wpa_versions(u32 wpa_versions)
10411{
10412 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
cc3e14c2
CHH		 10413 NL80211_WPA_VERSION_2 |
10414 NL80211_WPA_VERSION_3));
b23aa676
SO		 10415}
10416
636a5d36
JM		 10417static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
10418{
4c476991
JB		 10419 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10420 struct net_device *dev = info->user_ptr[1];
19957bb3 10421 struct ieee80211_channel *chan;
325839da
JB		 10422 const u8 *bssid, *ssid;
10423 int err, ssid_len;
19957bb3 10424 enum nl80211_auth_type auth_type;
fffd0934 10425 struct key_parse key;
d5cdfacb 10426 bool local_state_change;
325839da 10427 struct cfg80211_auth_request req = {};
942ba88b 10428 u32 freq;
636a5d36 10429
f4a11bb0
JB		 10430 if (!info->attrs[NL80211_ATTR_MAC])
10431 return -EINVAL;
10432
1778092e
JM		 10433 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
10434 return -EINVAL;
10435
19957bb3
JB		 10436 if (!info->attrs[NL80211_ATTR_SSID])
10437 return -EINVAL;
10438
10439 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
10440 return -EINVAL;
10441
fffd0934
JB		 10442 err = nl80211_parse_key(info, &key);
10443 if (err)
10444 return err;
10445
10446 if (key.idx >= 0) {
e31b8213
JB		 10447 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
10448 return -EINVAL;
fffd0934
JB		 10449 if (!key.p.key || !key.p.key_len)
10450 return -EINVAL;
10451 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
10452 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
10453 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
10454 key.p.key_len != WLAN_KEY_LEN_WEP104))
10455 return -EINVAL;
b6b5555b 10456 if (key.idx > 3)
fffd0934
JB		 10457 return -EINVAL;
10458 } else {
10459 key.p.key_len = 0;
10460 key.p.key = NULL;
10461 }
10462
afea0b7a
JB		 10463 if (key.idx >= 0) {
10464 int i;
10465 bool ok = false;
7a087e74 10466
afea0b7a
JB		 10467 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
10468 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
10469 ok = true;
10470 break;
10471 }
10472 }
4c476991
JB		 10473 if (!ok)
10474 return -EINVAL;
afea0b7a
JB		 10475 }
10476
4c476991
JB		 10477 if (!rdev->ops->auth)
10478 return -EOPNOTSUPP;
636a5d36 10479
074ac8df 10480 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10481 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10482 return -EOPNOTSUPP;
eec60b03 10483
19957bb3 10484 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
942ba88b
TP		 10485 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
10486 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10487 freq +=
10488 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10489
10490 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 10491 if (!chan)
4c476991 10492 return -EINVAL;
636a5d36 10493
19957bb3
JB		 10494 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10495 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 10496
10497 if (info->attrs[NL80211_ATTR_IE]) {
325839da
JB		 10498 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10499 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10500 }
10501
19957bb3 10502 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 10503 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 10504 return -EINVAL;
636a5d36 10505
63181060
JM		 10506 if ((auth_type == NL80211_AUTHTYPE_SAE ||
10507 auth_type == NL80211_AUTHTYPE_FILS_SK ||
10508 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
10509 auth_type == NL80211_AUTHTYPE_FILS_PK) &&
11b6b5a4 10510 !info->attrs[NL80211_ATTR_AUTH_DATA])
e39e5b5e
JM		 10511 return -EINVAL;
10512
11b6b5a4 10513 if (info->attrs[NL80211_ATTR_AUTH_DATA]) {
63181060
JM		 10514 if (auth_type != NL80211_AUTHTYPE_SAE &&
10515 auth_type != NL80211_AUTHTYPE_FILS_SK &&
10516 auth_type != NL80211_AUTHTYPE_FILS_SK_PFS &&
10517 auth_type != NL80211_AUTHTYPE_FILS_PK)
e39e5b5e 10518 return -EINVAL;
325839da
JB		 10519 req.auth_data = nla_data(info->attrs[NL80211_ATTR_AUTH_DATA]);
10520 req.auth_data_len = nla_len(info->attrs[NL80211_ATTR_AUTH_DATA]);
e39e5b5e
JM		 10521 }
10522
d5cdfacb
JM		 10523 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10524
95de817b
JB		 10525 /*
10526 * Since we no longer track auth state, ignore
10527 * requests to only change local state.
10528 */
10529 if (local_state_change)
10530 return 0;
10531
325839da
JB		 10532 req.auth_type = auth_type;
10533 req.key = key.p.key;
10534 req.key_len = key.p.key_len;
10535 req.key_idx = key.idx;
d648c230
JB		 10536 req.link_id = nl80211_link_id_or_invalid(info->attrs);
10537 if (req.link_id >= 0) {
45aaf17c
JB		 10538 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO))
10539 return -EINVAL;
d648c230
JB		 10540 if (!info->attrs[NL80211_ATTR_MLD_ADDR])
10541 return -EINVAL;
10542 req.ap_mld_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
10543 }
325839da
JB		 10544
10545 req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
10546 IEEE80211_BSS_TYPE_ESS,
10547 IEEE80211_PRIVACY_ANY);
10548 if (!req.bss)
10549 return -ENOENT;
10550
91bf9b26 10551 wdev_lock(dev->ieee80211_ptr);
325839da 10552 err = cfg80211_mlme_auth(rdev, dev, &req);
91bf9b26 10553 wdev_unlock(dev->ieee80211_ptr);
325839da
JB		 10554
10555 cfg80211_put_bss(&rdev->wiphy, req.bss);
10556
91bf9b26 10557 return err;
636a5d36
JM		 10558}
10559
64bf3d4b
DK		 10560static int validate_pae_over_nl80211(struct cfg80211_registered_device *rdev,
10561 struct genl_info *info)
10562{
10563 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10564 GENL_SET_ERR_MSG(info, "SOCKET_OWNER not set");
10565 return -EINVAL;
10566 }
10567
10568 if (!rdev->ops->tx_control_port ||
10569 !wiphy_ext_feature_isset(&rdev->wiphy,
10570 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
10571 return -EOPNOTSUPP;
10572
10573 return 0;
10574}
10575
c0692b8f
JB		 10576static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
10577 struct genl_info *info,
3dc27d25
JB		 10578 struct cfg80211_crypto_settings *settings,
10579 int cipher_limit)
b23aa676 10580{
c0b2bbd8
JB		 10581 memset(settings, 0, sizeof(*settings));
10582
b23aa676
SO		 10583 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
10584
c0692b8f
JB		 10585 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
10586 u16 proto;
7a087e74 10587
c0692b8f
JB		 10588 proto = nla_get_u16(
10589 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
10590 settings->control_port_ethertype = cpu_to_be16(proto);
10591 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
10592 proto != ETH_P_PAE)
10593 return -EINVAL;
10594 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
10595 settings->control_port_no_encrypt = true;
10596 } else
10597 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
10598
64bf3d4b
DK		 10599 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
10600 int r = validate_pae_over_nl80211(rdev, info);
10601
10602 if (r < 0)
10603 return r;
10604
10605 settings->control_port_over_nl80211 = true;
7f3f96ce
MT		 10606
10607 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_PREAUTH])
10608 settings->control_port_no_preauth = true;
64bf3d4b
DK		 10609 }
10610
b23aa676
SO		 10611 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
10612 void *data;
10613 int len, i;
10614
10615 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
10616 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
10617 settings->n_ciphers_pairwise = len / sizeof(u32);
10618
10619 if (len % sizeof(u32))
10620 return -EINVAL;
10621
3dc27d25 10622 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 10623 return -EINVAL;
10624
10625 memcpy(settings->ciphers_pairwise, data, len);
10626
10627 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 10628 if (!cfg80211_supported_cipher_suite(
10629 &rdev->wiphy,
b23aa676
SO		 10630 settings->ciphers_pairwise[i]))
10631 return -EINVAL;
10632 }
10633
10634 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
10635 settings->cipher_group =
10636 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 10637 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
10638 settings->cipher_group))
b23aa676
SO		 10639 return -EINVAL;
10640 }
10641
10642 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
10643 settings->wpa_versions =
10644 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
10645 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
10646 return -EINVAL;
10647 }
10648
10649 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
10650 void *data;
6d30240e 10651 int len;
b23aa676
SO		 10652
10653 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
10654 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
10655 settings->n_akm_suites = len / sizeof(u32);
10656
10657 if (len % sizeof(u32))
10658 return -EINVAL;
10659
ecad3b0b 10660 if (settings->n_akm_suites > rdev->wiphy.max_num_akm_suites)
1b9ca027
JM		 10661 return -EINVAL;
10662
b23aa676 10663 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 10664 }
10665
91b5ab62
EP		 10666 if (info->attrs[NL80211_ATTR_PMK]) {
10667 if (nla_len(info->attrs[NL80211_ATTR_PMK]) != WLAN_PMK_LEN)
10668 return -EINVAL;
10669 if (!wiphy_ext_feature_isset(&rdev->wiphy,
f9662274
CHH		 10670 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_PSK) &&
10671 !wiphy_ext_feature_isset(&rdev->wiphy,
10672 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_AP_PSK))
91b5ab62
EP		 10673 return -EINVAL;
10674 settings->psk = nla_data(info->attrs[NL80211_ATTR_PMK]);
10675 }
10676
26f7044e
CHH		 10677 if (info->attrs[NL80211_ATTR_SAE_PASSWORD]) {
10678 if (!wiphy_ext_feature_isset(&rdev->wiphy,
2831a631
CHH		 10679 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10680 !wiphy_ext_feature_isset(&rdev->wiphy,
10681 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP))
26f7044e
CHH		 10682 return -EINVAL;
10683 settings->sae_pwd =
10684 nla_data(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
10685 settings->sae_pwd_len =
10686 nla_len(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
10687 }
10688
9f0ffa41
RD		 10689 if (info->attrs[NL80211_ATTR_SAE_PWE])
10690 settings->sae_pwe =
10691 nla_get_u8(info->attrs[NL80211_ATTR_SAE_PWE]);
10692 else
10693 settings->sae_pwe = NL80211_SAE_PWE_UNSPECIFIED;
10694
b23aa676
SO		 10695 return 0;
10696}
10697
9ecff10e
JB		 10698static struct cfg80211_bss *nl80211_assoc_bss(struct cfg80211_registered_device *rdev,
10699 const u8 *ssid, int ssid_len,
10700 struct nlattr **attrs,
10701 const u8 **bssid_out)
10702{
10703 struct ieee80211_channel *chan;
10704 struct cfg80211_bss *bss;
10705 const u8 *bssid;
10706 u32 freq;
10707
10708 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_WIPHY_FREQ])
10709 return ERR_PTR(-EINVAL);
10710
10711 bssid = nla_data(attrs[NL80211_ATTR_MAC]);
10712
10713 freq = MHZ_TO_KHZ(nla_get_u32(attrs[NL80211_ATTR_WIPHY_FREQ]));
10714 if (attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10715 freq += nla_get_u32(attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10716
10717 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
10718 if (!chan)
10719 return ERR_PTR(-EINVAL);
10720
10721 bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid,
10722 ssid, ssid_len,
10723 IEEE80211_BSS_TYPE_ESS,
10724 IEEE80211_PRIVACY_ANY);
10725 if (!bss)
10726 return ERR_PTR(-ENOENT);
10727
10728 *bssid_out = bssid;
10729 return bss;
10730}
10731
636a5d36
JM		 10732static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
10733{
4c476991
JB		 10734 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10735 struct net_device *dev = info->user_ptr[1];
f62fab73 10736 struct cfg80211_assoc_request req = {};
d648c230 10737 struct nlattr **attrs = NULL;
f62fab73 10738 const u8 *bssid, *ssid;
d648c230 10739 unsigned int link_id;
0f759448 10740 int err, ssid_len;
636a5d36 10741
bad29297
AZ		 10742 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10743 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10744 return -EPERM;
10745
9ecff10e 10746 if (!info->attrs[NL80211_ATTR_SSID])
f4a11bb0
JB		 10747 return -EINVAL;
10748
4c476991
JB		 10749 if (!rdev->ops->assoc)
10750 return -EOPNOTSUPP;
636a5d36 10751
074ac8df 10752 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10753 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10754 return -EOPNOTSUPP;
eec60b03 10755
19957bb3
JB		 10756 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10757 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 10758
10759 if (info->attrs[NL80211_ATTR_IE]) {
f62fab73
JB		 10760 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10761 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
df35f316
JB		 10762
10763 if (cfg80211_find_ext_elem(WLAN_EID_EXT_NON_INHERITANCE,
10764 req.ie, req.ie_len)) {
10765 GENL_SET_ERR_MSG(info,
10766 "non-inheritance makes no sense");
10767 return -EINVAL;
10768 }
636a5d36
JM		 10769 }
10770
dc6382ce 10771 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 10772 enum nl80211_mfp mfp =
dc6382ce 10773 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 10774 if (mfp == NL80211_MFP_REQUIRED)
f62fab73 10775 req.use_mfp = true;
4c476991
JB		 10776 else if (mfp != NL80211_MFP_NO)
10777 return -EINVAL;
dc6382ce
JM		 10778 }
10779
3e5d7649 10780 if (info->attrs[NL80211_ATTR_PREV_BSSID])
f62fab73 10781 req.prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3e5d7649 10782
7e7c8926 10783 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
f62fab73 10784 req.flags |= ASSOC_REQ_DISABLE_HT;
7e7c8926
BG		 10785
10786 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
f62fab73
JB		 10787 memcpy(&req.ht_capa_mask,
10788 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10789 sizeof(req.ht_capa_mask));
7e7c8926
BG		 10790
10791 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
f62fab73 10792 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
7e7c8926 10793 return -EINVAL;
f62fab73
JB		 10794 memcpy(&req.ht_capa,
10795 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10796 sizeof(req.ht_capa));
7e7c8926
BG		 10797 }
10798
ee2aca34 10799 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
f62fab73 10800 req.flags |= ASSOC_REQ_DISABLE_VHT;
ee2aca34 10801
b6db0f89
BG		 10802 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HE]))
10803 req.flags |= ASSOC_REQ_DISABLE_HE;
10804
36f84235
MS		 10805 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_EHT]))
10806 req.flags |= ASSOC_REQ_DISABLE_EHT;
10807
ee2aca34 10808 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
f62fab73
JB		 10809 memcpy(&req.vht_capa_mask,
10810 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
10811 sizeof(req.vht_capa_mask));
ee2aca34
JB		 10812
10813 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
f62fab73 10814 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
ee2aca34 10815 return -EINVAL;
f62fab73
JB		 10816 memcpy(&req.vht_capa,
10817 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
10818 sizeof(req.vht_capa));
ee2aca34
JB		 10819 }
10820
bab5ab7d 10821 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 10822 if (!((rdev->wiphy.features &
10823 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
10824 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
10825 !wiphy_ext_feature_isset(&rdev->wiphy,
10826 NL80211_EXT_FEATURE_RRM))
bab5ab7d
AK		 10827 return -EINVAL;
10828 req.flags |= ASSOC_REQ_USE_RRM;
10829 }
10830
348bd456
JM		 10831 if (info->attrs[NL80211_ATTR_FILS_KEK]) {
10832 req.fils_kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
10833 req.fils_kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
10834 if (!info->attrs[NL80211_ATTR_FILS_NONCES])
10835 return -EINVAL;
10836 req.fils_nonces =
10837 nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
10838 }
10839
d2b7588a
TP		 10840 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]) {
10841 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY])
10842 return -EINVAL;
10843 memcpy(&req.s1g_capa_mask,
10844 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]),
10845 sizeof(req.s1g_capa_mask));
10846 }
10847
10848 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY]) {
10849 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK])
10850 return -EINVAL;
10851 memcpy(&req.s1g_capa,
10852 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY]),
10853 sizeof(req.s1g_capa));
10854 }
10855
d648c230
JB		 10856 req.link_id = nl80211_link_id_or_invalid(info->attrs);
10857
10858 if (info->attrs[NL80211_ATTR_MLO_LINKS]) {
10859 unsigned int attrsize = NUM_NL80211_ATTR * sizeof(*attrs);
10860 struct nlattr *link;
10861 int rem = 0;
10862
10863 if (req.link_id < 0)
10864 return -EINVAL;
10865
10866 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO))
10867 return -EINVAL;
10868
10869 if (info->attrs[NL80211_ATTR_MAC] ||
10870 info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
10871 !info->attrs[NL80211_ATTR_MLD_ADDR])
10872 return -EINVAL;
10873
10874 req.ap_mld_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
10875
10876 attrs = kzalloc(attrsize, GFP_KERNEL);
10877 if (!attrs)
10878 return -ENOMEM;
10879
10880 nla_for_each_nested(link,
10881 info->attrs[NL80211_ATTR_MLO_LINKS],
10882 rem) {
10883 memset(attrs, 0, attrsize);
10884
10885 nla_parse_nested(attrs, NL80211_ATTR_MAX,
10886 link, NULL, NULL);
10887
10888 if (!attrs[NL80211_ATTR_MLO_LINK_ID]) {
10889 err = -EINVAL;
10890 goto free;
10891 }
10892
10893 link_id = nla_get_u8(attrs[NL80211_ATTR_MLO_LINK_ID]);
10894 /* cannot use the same link ID again */
10895 if (req.links[link_id].bss) {
10896 err = -EINVAL;
10897 goto free;
10898 }
10899 req.links[link_id].bss =
10900 nl80211_assoc_bss(rdev, ssid, ssid_len, attrs,
10901 &bssid);
10902 if (IS_ERR(req.links[link_id].bss)) {
10903 err = PTR_ERR(req.links[link_id].bss);
9b6bf4d6 10904 req.links[link_id].bss = NULL;
d648c230
JB		 10905 goto free;
10906 }
10907
10908 if (attrs[NL80211_ATTR_IE]) {
10909 req.links[link_id].elems =
10910 nla_data(attrs[NL80211_ATTR_IE]);
10911 req.links[link_id].elems_len =
10912 nla_len(attrs[NL80211_ATTR_IE]);
df35f316
JB		 10913
10914 if (cfg80211_find_elem(WLAN_EID_FRAGMENT,
10915 req.links[link_id].elems,
10916 req.links[link_id].elems_len)) {
10917 GENL_SET_ERR_MSG(info,
10918 "cannot deal with fragmentation");
10919 err = -EINVAL;
10920 goto free;
10921 }
10922
10923 if (cfg80211_find_ext_elem(WLAN_EID_EXT_NON_INHERITANCE,
10924 req.links[link_id].elems,
10925 req.links[link_id].elems_len)) {
10926 GENL_SET_ERR_MSG(info,
10927 "cannot deal with non-inheritance");
10928 err = -EINVAL;
10929 goto free;
10930 }
d648c230
JB		 10931 }
10932 }
10933
10934 if (!req.links[req.link_id].bss) {
10935 err = -EINVAL;
10936 goto free;
10937 }
10938
34d76a14
JB		 10939 if (req.links[req.link_id].elems_len) {
10940 GENL_SET_ERR_MSG(info,
10941 "cannot have per-link elems on assoc link");
10942 err = -EINVAL;
10943 goto free;
10944 }
10945
d648c230
JB		 10946 kfree(attrs);
10947 attrs = NULL;
10948 } else {
10949 if (req.link_id >= 0)
10950 return -EINVAL;
10951
10952 req.bss = nl80211_assoc_bss(rdev, ssid, ssid_len, info->attrs,
10953 &bssid);
10954 if (IS_ERR(req.bss))
10955 return PTR_ERR(req.bss);
10956 }
0f759448 10957
f62fab73 10958 err = nl80211_crypto_settings(rdev, info, &req.crypto, 1);
91bf9b26
JB		 10959 if (!err) {
10960 wdev_lock(dev->ieee80211_ptr);
bd2522b1 10961
0f759448 10962 err = cfg80211_mlme_assoc(rdev, dev, &req);
bd2522b1
AZ		 10963
10964 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10965 dev->ieee80211_ptr->conn_owner_nlportid =
10966 info->snd_portid;
10967 memcpy(dev->ieee80211_ptr->disconnect_bssid,
10968 bssid, ETH_ALEN);
10969 }
10970
91bf9b26
JB		 10971 wdev_unlock(dev->ieee80211_ptr);
10972 }
636a5d36 10973
d648c230
JB		 10974free:
10975 for (link_id = 0; link_id < ARRAY_SIZE(req.links); link_id++)
10976 cfg80211_put_bss(&rdev->wiphy, req.links[link_id].bss);
0f759448 10977 cfg80211_put_bss(&rdev->wiphy, req.bss);
d648c230 10978 kfree(attrs);
0f759448 10979
636a5d36
JM		 10980 return err;
10981}
10982
10983static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
10984{
4c476991
JB		 10985 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10986 struct net_device *dev = info->user_ptr[1];
19957bb3 10987 const u8 *ie = NULL, *bssid;
91bf9b26 10988 int ie_len = 0, err;
19957bb3 10989 u16 reason_code;
d5cdfacb 10990 bool local_state_change;
636a5d36 10991
bad29297
AZ		 10992 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10993 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10994 return -EPERM;
10995
f4a11bb0
JB		 10996 if (!info->attrs[NL80211_ATTR_MAC])
10997 return -EINVAL;
10998
10999 if (!info->attrs[NL80211_ATTR_REASON_CODE])
11000 return -EINVAL;
11001
4c476991
JB		 11002 if (!rdev->ops->deauth)
11003 return -EOPNOTSUPP;
636a5d36 11004
074ac8df 11005 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11006 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11007 return -EOPNOTSUPP;
eec60b03 11008
19957bb3 11009 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 11010
19957bb3
JB		 11011 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
11012 if (reason_code == 0) {
f4a11bb0 11013 /* Reason Code 0 is reserved */
4c476991 11014 return -EINVAL;
255e737e 11015 }
636a5d36
JM		 11016
11017 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 11018 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11019 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 11020 }
11021
d5cdfacb
JM		 11022 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
11023
91bf9b26
JB		 11024 wdev_lock(dev->ieee80211_ptr);
11025 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
11026 local_state_change);
11027 wdev_unlock(dev->ieee80211_ptr);
11028 return err;
636a5d36
JM		 11029}
11030
11031static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
11032{
4c476991
JB		 11033 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11034 struct net_device *dev = info->user_ptr[1];
19957bb3 11035 const u8 *ie = NULL, *bssid;
91bf9b26 11036 int ie_len = 0, err;
19957bb3 11037 u16 reason_code;
d5cdfacb 11038 bool local_state_change;
636a5d36 11039
bad29297
AZ		 11040 if (dev->ieee80211_ptr->conn_owner_nlportid &&
11041 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
11042 return -EPERM;
11043
f4a11bb0
JB		 11044 if (!info->attrs[NL80211_ATTR_MAC])
11045 return -EINVAL;
11046
11047 if (!info->attrs[NL80211_ATTR_REASON_CODE])
11048 return -EINVAL;
11049
4c476991
JB		 11050 if (!rdev->ops->disassoc)
11051 return -EOPNOTSUPP;
636a5d36 11052
074ac8df 11053 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11054 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11055 return -EOPNOTSUPP;
eec60b03 11056
19957bb3 11057 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 11058
19957bb3
JB		 11059 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
11060 if (reason_code == 0) {
f4a11bb0 11061 /* Reason Code 0 is reserved */
4c476991 11062 return -EINVAL;
255e737e 11063 }
636a5d36
JM		 11064
11065 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 11066 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11067 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 11068 }
11069
d5cdfacb
JM		 11070 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
11071
91bf9b26
JB		 11072 wdev_lock(dev->ieee80211_ptr);
11073 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
11074 local_state_change);
11075 wdev_unlock(dev->ieee80211_ptr);
11076 return err;
636a5d36
JM		 11077}
11078
dd5b4cc7
FF		 11079static bool
11080nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
57fbcce3 11081 int mcast_rate[NUM_NL80211_BANDS],
dd5b4cc7
FF		 11082 int rateval)
11083{
11084 struct wiphy *wiphy = &rdev->wiphy;
11085 bool found = false;
11086 int band, i;
11087
57fbcce3 11088 for (band = 0; band < NUM_NL80211_BANDS; band++) {
dd5b4cc7
FF		 11089 struct ieee80211_supported_band *sband;
11090
11091 sband = wiphy->bands[band];
11092 if (!sband)
11093 continue;
11094
11095 for (i = 0; i < sband->n_bitrates; i++) {
11096 if (sband->bitrates[i].bitrate == rateval) {
11097 mcast_rate[band] = i + 1;
11098 found = true;
11099 break;
11100 }
11101 }
11102 }
11103
11104 return found;
11105}
11106
04a773ad
JB		 11107static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
11108{
4c476991
JB		 11109 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11110 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 11111 struct cfg80211_ibss_params ibss;
11112 struct wiphy *wiphy;
fffd0934 11113 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 11114 int err;
11115
8e30bc55
JB		 11116 memset(&ibss, 0, sizeof(ibss));
11117
683b6d3b 11118 if (!info->attrs[NL80211_ATTR_SSID] ||
04a773ad
JB		 11119 !nla_len(info->attrs[NL80211_ATTR_SSID]))
11120 return -EINVAL;
11121
8e30bc55
JB		 11122 ibss.beacon_interval = 100;
11123
12d20fc9 11124 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL])
8e30bc55
JB		 11125 ibss.beacon_interval =
11126 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 11127
0c317a02
PK		 11128 err = cfg80211_validate_beacon_int(rdev, NL80211_IFTYPE_ADHOC,
11129 ibss.beacon_interval);
12d20fc9
PK		 11130 if (err)
11131 return err;
8e30bc55 11132
4c476991
JB		 11133 if (!rdev->ops->join_ibss)
11134 return -EOPNOTSUPP;
04a773ad 11135
4c476991
JB		 11136 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
11137 return -EOPNOTSUPP;
04a773ad 11138
79c97e97 11139 wiphy = &rdev->wiphy;
04a773ad 11140
39193498 11141 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 11142 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 11143
11144 if (!is_valid_ether_addr(ibss.bssid))
11145 return -EINVAL;
11146 }
04a773ad
JB		 11147 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11148 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11149
11150 if (info->attrs[NL80211_ATTR_IE]) {
11151 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11152 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11153 }
11154
683b6d3b
JB		 11155 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
11156 if (err)
11157 return err;
04a773ad 11158
174e0cd2
IP		 11159 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef,
11160 NL80211_IFTYPE_ADHOC))
54858ee5
AS		 11161 return -EINVAL;
11162
2f301ab2 11163 switch (ibss.chandef.width) {
bf372645
SW		 11164 case NL80211_CHAN_WIDTH_5:
11165 case NL80211_CHAN_WIDTH_10:
2f301ab2
SW		 11166 case NL80211_CHAN_WIDTH_20_NOHT:
11167 break;
11168 case NL80211_CHAN_WIDTH_20:
11169 case NL80211_CHAN_WIDTH_40:
ffc11991
JD		 11170 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
11171 return -EINVAL;
11172 break;
11173 case NL80211_CHAN_WIDTH_80:
11174 case NL80211_CHAN_WIDTH_80P80:
11175 case NL80211_CHAN_WIDTH_160:
11176 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
11177 return -EINVAL;
11178 if (!wiphy_ext_feature_isset(&rdev->wiphy,
11179 NL80211_EXT_FEATURE_VHT_IBSS))
11180 return -EINVAL;
11181 break;
3743bec6
JD		 11182 case NL80211_CHAN_WIDTH_320:
11183 return -EINVAL;
2f301ab2 11184 default:
c04d6150 11185 return -EINVAL;
2f301ab2 11186 }
db9c64cf 11187
04a773ad 11188 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 11189 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
11190
fbd2c8dc
TP		 11191 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
11192 u8 *rates =
11193 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11194 int n_rates =
11195 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11196 struct ieee80211_supported_band *sband =
683b6d3b 11197 wiphy->bands[ibss.chandef.chan->band];
fbd2c8dc 11198
34850ab2
JB		 11199 err = ieee80211_get_ratemask(sband, rates, n_rates,
11200 &ibss.basic_rates);
11201 if (err)
11202 return err;
fbd2c8dc 11203 }
dd5b4cc7 11204
803768f5
SW		 11205 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11206 memcpy(&ibss.ht_capa_mask,
11207 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
11208 sizeof(ibss.ht_capa_mask));
11209
11210 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
11211 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11212 return -EINVAL;
11213 memcpy(&ibss.ht_capa,
11214 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
11215 sizeof(ibss.ht_capa));
11216 }
11217
dd5b4cc7
FF		 11218 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
11219 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
11220 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
11221 return -EINVAL;
fbd2c8dc 11222
4c476991 11223 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 11224 bool no_ht = false;
11225
768075eb 11226 connkeys = nl80211_parse_connkeys(rdev, info, &no_ht);
4c476991
JB		 11227 if (IS_ERR(connkeys))
11228 return PTR_ERR(connkeys);
de7044ee 11229
3d9d1d66
JB		 11230 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
11231 no_ht) {
453431a5 11232 kfree_sensitive(connkeys);
de7044ee
SM		 11233 return -EINVAL;
11234 }
4c476991 11235 }
04a773ad 11236
267335d6
AQ		 11237 ibss.control_port =
11238 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
11239
c3bfe1f6
DK		 11240 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
11241 int r = validate_pae_over_nl80211(rdev, info);
11242
d350a0f4 11243 if (r < 0) {
453431a5 11244 kfree_sensitive(connkeys);
c3bfe1f6 11245 return r;
d350a0f4 11246 }
c3bfe1f6
DK		 11247
11248 ibss.control_port_over_nl80211 = true;
11249 }
11250
5336fa88
SW		 11251 ibss.userspace_handles_dfs =
11252 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
11253
f8d16d3e
DK		 11254 wdev_lock(dev->ieee80211_ptr);
11255 err = __cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934 11256 if (err)
453431a5 11257 kfree_sensitive(connkeys);
f8d16d3e
DK		 11258 else if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
11259 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11260 wdev_unlock(dev->ieee80211_ptr);
11261
04a773ad
JB		 11262 return err;
11263}
11264
11265static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
11266{
4c476991
JB		 11267 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11268 struct net_device *dev = info->user_ptr[1];
04a773ad 11269
4c476991
JB		 11270 if (!rdev->ops->leave_ibss)
11271 return -EOPNOTSUPP;
04a773ad 11272
4c476991
JB		 11273 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
11274 return -EOPNOTSUPP;
04a773ad 11275
4c476991 11276 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 11277}
11278
f4e583c8
AQ		 11279static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
11280{
11281 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11282 struct net_device *dev = info->user_ptr[1];
57fbcce3 11283 int mcast_rate[NUM_NL80211_BANDS];
f4e583c8 11284 u32 nla_rate;
f4e583c8
AQ		 11285
11286 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
876dc930
BVB		 11287 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
11288 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_OCB)
f4e583c8
AQ		 11289 return -EOPNOTSUPP;
11290
11291 if (!rdev->ops->set_mcast_rate)
11292 return -EOPNOTSUPP;
11293
11294 memset(mcast_rate, 0, sizeof(mcast_rate));
11295
11296 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
11297 return -EINVAL;
11298
11299 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
11300 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
11301 return -EINVAL;
11302
a21cd7d6 11303 return rdev_set_mcast_rate(rdev, dev, mcast_rate);
f4e583c8
AQ		 11304}
11305
ad7e718c
JB		 11306static struct sk_buff *
11307__cfg80211_alloc_vendor_skb(struct cfg80211_registered_device *rdev,
6c09e791
AK		 11308 struct wireless_dev *wdev, int approxlen,
11309 u32 portid, u32 seq, enum nl80211_commands cmd,
567ffc35
JB		 11310 enum nl80211_attrs attr,
11311 const struct nl80211_vendor_cmd_info *info,
11312 gfp_t gfp)
ad7e718c
JB		 11313{
11314 struct sk_buff *skb;
11315 void *hdr;
11316 struct nlattr *data;
11317
11318 skb = nlmsg_new(approxlen + 100, gfp);
11319 if (!skb)
11320 return NULL;
11321
11322 hdr = nl80211hdr_put(skb, portid, seq, 0, cmd);
11323 if (!hdr) {
11324 kfree_skb(skb);
11325 return NULL;
11326 }
11327
11328 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
11329 goto nla_put_failure;
567ffc35
JB		 11330
11331 if (info) {
11332 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_ID,
11333 info->vendor_id))
11334 goto nla_put_failure;
11335 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_SUBCMD,
11336 info->subcmd))
11337 goto nla_put_failure;
11338 }
11339
6c09e791 11340 if (wdev) {
2dad624e
ND		 11341 if (nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
11342 wdev_id(wdev), NL80211_ATTR_PAD))
6c09e791
AK		 11343 goto nla_put_failure;
11344 if (wdev->netdev &&
11345 nla_put_u32(skb, NL80211_ATTR_IFINDEX,
11346 wdev->netdev->ifindex))
11347 goto nla_put_failure;
11348 }
11349
ae0be8de 11350 data = nla_nest_start_noflag(skb, attr);
76e1fb4b
JB		 11351 if (!data)
11352 goto nla_put_failure;
ad7e718c
JB		 11353
11354 ((void **)skb->cb)[0] = rdev;
11355 ((void **)skb->cb)[1] = hdr;
11356 ((void **)skb->cb)[2] = data;
11357
11358 return skb;
11359
11360 nla_put_failure:
11361 kfree_skb(skb);
11362 return NULL;
11363}
f4e583c8 11364
e03ad6ea 11365struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
6c09e791 11366 struct wireless_dev *wdev,
e03ad6ea
JB		 11367 enum nl80211_commands cmd,
11368 enum nl80211_attrs attr,
55c1fdf0 11369 unsigned int portid,
e03ad6ea
JB		 11370 int vendor_event_idx,
11371 int approxlen, gfp_t gfp)
11372{
f26cbf40 11373 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
e03ad6ea
JB		 11374 const struct nl80211_vendor_cmd_info *info;
11375
11376 switch (cmd) {
11377 case NL80211_CMD_TESTMODE:
11378 if (WARN_ON(vendor_event_idx != -1))
11379 return NULL;
11380 info = NULL;
11381 break;
11382 case NL80211_CMD_VENDOR:
11383 if (WARN_ON(vendor_event_idx < 0 ||
11384 vendor_event_idx >= wiphy->n_vendor_events))
11385 return NULL;
11386 info = &wiphy->vendor_events[vendor_event_idx];
11387 break;
11388 default:
11389 WARN_ON(1);
11390 return NULL;
11391 }
11392
55c1fdf0 11393 return __cfg80211_alloc_vendor_skb(rdev, wdev, approxlen, portid, 0,
e03ad6ea
JB		 11394 cmd, attr, info, gfp);
11395}
11396EXPORT_SYMBOL(__cfg80211_alloc_event_skb);
11397
11398void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp)
11399{
11400 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
11401 void *hdr = ((void **)skb->cb)[1];
55c1fdf0 11402 struct nlmsghdr *nlhdr = nlmsg_hdr(skb);
e03ad6ea
JB		 11403 struct nlattr *data = ((void **)skb->cb)[2];
11404 enum nl80211_multicast_groups mcgrp = NL80211_MCGRP_TESTMODE;
11405
bd8c78e7
JB		 11406 /* clear CB data for netlink core to own from now on */
11407 memset(skb->cb, 0, sizeof(skb->cb));
11408
e03ad6ea
JB		 11409 nla_nest_end(skb, data);
11410 genlmsg_end(skb, hdr);
11411
55c1fdf0
JB		 11412 if (nlhdr->nlmsg_pid) {
11413 genlmsg_unicast(wiphy_net(&rdev->wiphy), skb,
11414 nlhdr->nlmsg_pid);
11415 } else {
11416 if (data->nla_type == NL80211_ATTR_VENDOR_DATA)
11417 mcgrp = NL80211_MCGRP_VENDOR;
e03ad6ea 11418
55c1fdf0
JB		 11419 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
11420 skb, 0, mcgrp, gfp);
11421 }
e03ad6ea
JB		 11422}
11423EXPORT_SYMBOL(__cfg80211_send_event_skb);
11424
aff89a9b 11425#ifdef CONFIG_NL80211_TESTMODE
aff89a9b
JB		 11426static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
11427{
4c476991 11428 struct cfg80211_registered_device *rdev = info->user_ptr[0];
a05829a7 11429 struct wireless_dev *wdev;
aff89a9b
JB		 11430 int err;
11431
a05829a7
JB		 11432 lockdep_assert_held(&rdev->wiphy.mtx);
11433
11434 wdev = __cfg80211_wdev_from_attrs(rdev, genl_info_net(info),
11435 info->attrs);
11436
fc73f11f
DS		 11437 if (!rdev->ops->testmode_cmd)
11438 return -EOPNOTSUPP;
11439
11440 if (IS_ERR(wdev)) {
11441 err = PTR_ERR(wdev);
11442 if (err != -EINVAL)
11443 return err;
11444 wdev = NULL;
11445 } else if (wdev->wiphy != &rdev->wiphy) {
11446 return -EINVAL;
11447 }
11448
aff89a9b
JB		 11449 if (!info->attrs[NL80211_ATTR_TESTDATA])
11450 return -EINVAL;
11451
ad7e718c 11452 rdev->cur_cmd_info = info;
fc73f11f 11453 err = rdev_testmode_cmd(rdev, wdev,
aff89a9b
JB		 11454 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
11455 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
ad7e718c 11456 rdev->cur_cmd_info = NULL;
aff89a9b 11457
aff89a9b
JB		 11458 return err;
11459}
11460
71063f0e
WYG		 11461static int nl80211_testmode_dump(struct sk_buff *skb,
11462 struct netlink_callback *cb)
11463{
00918d33 11464 struct cfg80211_registered_device *rdev;
50508d94 11465 struct nlattr **attrbuf = NULL;
71063f0e
WYG		 11466 int err;
11467 long phy_idx;
11468 void *data = NULL;
11469 int data_len = 0;
11470
5fe231e8
JB		 11471 rtnl_lock();
11472
71063f0e
WYG		 11473 if (cb->args[0]) {
11474 /*
11475 * 0 is a valid index, but not valid for args[0],
11476 * so we need to offset by 1.
11477 */
11478 phy_idx = cb->args[0] - 1;
a4956dca
LC		 11479
11480 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
11481 if (!rdev) {
11482 err = -ENOENT;
11483 goto out_err;
11484 }
71063f0e 11485 } else {
50508d94
JB		 11486 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
11487 GFP_KERNEL);
11488 if (!attrbuf) {
11489 err = -ENOMEM;
11490 goto out_err;
11491 }
c90c39da 11492
8cb08174
JB		 11493 err = nlmsg_parse_deprecated(cb->nlh,
11494 GENL_HDRLEN + nl80211_fam.hdrsize,
11495 attrbuf, nl80211_fam.maxattr,
11496 nl80211_policy, NULL);
71063f0e 11497 if (err)
5fe231e8 11498 goto out_err;
00918d33 11499
c90c39da 11500 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
2bd7e35d 11501 if (IS_ERR(rdev)) {
5fe231e8
JB		 11502 err = PTR_ERR(rdev);
11503 goto out_err;
00918d33 11504 }
2bd7e35d 11505 phy_idx = rdev->wiphy_idx;
2bd7e35d 11506
c90c39da
JB		 11507 if (attrbuf[NL80211_ATTR_TESTDATA])
11508 cb->args[1] = (long)attrbuf[NL80211_ATTR_TESTDATA];
71063f0e
WYG		 11509 }
11510
11511 if (cb->args[1]) {
11512 data = nla_data((void *)cb->args[1]);
11513 data_len = nla_len((void *)cb->args[1]);
11514 }
11515
00918d33 11516 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 11517 err = -EOPNOTSUPP;
11518 goto out_err;
11519 }
11520
11521 while (1) {
15e47304 11522 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 11523 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11524 NL80211_CMD_TESTMODE);
11525 struct nlattr *tmdata;
11526
cb35fba3
DC		 11527 if (!hdr)
11528 break;
11529
9360ffd1 11530 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 11531 genlmsg_cancel(skb, hdr);
11532 break;
11533 }
11534
ae0be8de 11535 tmdata = nla_nest_start_noflag(skb, NL80211_ATTR_TESTDATA);
71063f0e
WYG		 11536 if (!tmdata) {
11537 genlmsg_cancel(skb, hdr);
11538 break;
11539 }
e35e4d28 11540 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 11541 nla_nest_end(skb, tmdata);
11542
11543 if (err == -ENOBUFS || err == -ENOENT) {
11544 genlmsg_cancel(skb, hdr);
11545 break;
11546 } else if (err) {
11547 genlmsg_cancel(skb, hdr);
11548 goto out_err;
11549 }
11550
11551 genlmsg_end(skb, hdr);
11552 }
11553
11554 err = skb->len;
11555 /* see above */
11556 cb->args[0] = phy_idx + 1;
11557 out_err:
50508d94 11558 kfree(attrbuf);
5fe231e8 11559 rtnl_unlock();
71063f0e
WYG		 11560 return err;
11561}
aff89a9b
JB		 11562#endif
11563
b23aa676
SO		 11564static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
11565{
4c476991
JB		 11566 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11567 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 11568 struct cfg80211_connect_params connect;
11569 struct wiphy *wiphy;
fffd0934 11570 struct cfg80211_cached_keys *connkeys = NULL;
942ba88b 11571 u32 freq = 0;
b23aa676
SO		 11572 int err;
11573
11574 memset(&connect, 0, sizeof(connect));
11575
b23aa676
SO		 11576 if (!info->attrs[NL80211_ATTR_SSID] ||
11577 !nla_len(info->attrs[NL80211_ATTR_SSID]))
11578 return -EINVAL;
11579
11580 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
11581 connect.auth_type =
11582 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 11583 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
11584 NL80211_CMD_CONNECT))
b23aa676
SO		 11585 return -EINVAL;
11586 } else
11587 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
11588
11589 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
11590
3a00df57
AS		 11591 if (info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS] &&
11592 !wiphy_ext_feature_isset(&rdev->wiphy,
11593 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
11594 return -EINVAL;
11595 connect.want_1x = info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS];
11596
c0692b8f 11597 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 11598 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 11599 if (err)
11600 return err;
b23aa676 11601
074ac8df 11602 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11603 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11604 return -EOPNOTSUPP;
b23aa676 11605
79c97e97 11606 wiphy = &rdev->wiphy;
b23aa676 11607
4486ea98
BS		 11608 connect.bg_scan_period = -1;
11609 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
11610 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
11611 connect.bg_scan_period =
11612 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
11613 }
11614
b23aa676
SO		 11615 if (info->attrs[NL80211_ATTR_MAC])
11616 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
1df4a510
JM		 11617 else if (info->attrs[NL80211_ATTR_MAC_HINT])
11618 connect.bssid_hint =
11619 nla_data(info->attrs[NL80211_ATTR_MAC_HINT]);
b23aa676
SO		 11620 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11621 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11622
11623 if (info->attrs[NL80211_ATTR_IE]) {
11624 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11625 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11626 }
11627
cee00a95
JM		 11628 if (info->attrs[NL80211_ATTR_USE_MFP]) {
11629 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
65026002
EG		 11630 if (connect.mfp == NL80211_MFP_OPTIONAL &&
11631 !wiphy_ext_feature_isset(&rdev->wiphy,
11632 NL80211_EXT_FEATURE_MFP_OPTIONAL))
11633 return -EOPNOTSUPP;
cee00a95
JM		 11634 } else {
11635 connect.mfp = NL80211_MFP_NO;
11636 }
11637
ba6fbacf
JM		 11638 if (info->attrs[NL80211_ATTR_PREV_BSSID])
11639 connect.prev_bssid =
11640 nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
11641
942ba88b
TP		 11642 if (info->attrs[NL80211_ATTR_WIPHY_FREQ])
11643 freq = MHZ_TO_KHZ(nla_get_u32(
11644 info->attrs[NL80211_ATTR_WIPHY_FREQ]));
11645 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
11646 freq +=
11647 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
11648
11649 if (freq) {
11650 connect.channel = nl80211_get_valid_chan(wiphy, freq);
664834de 11651 if (!connect.channel)
1df4a510
JM		 11652 return -EINVAL;
11653 } else if (info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]) {
942ba88b
TP		 11654 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]);
11655 freq = MHZ_TO_KHZ(freq);
11656 connect.channel_hint = nl80211_get_valid_chan(wiphy, freq);
664834de 11657 if (!connect.channel_hint)
4c476991 11658 return -EINVAL;
b23aa676
SO		 11659 }
11660
2a38075c
AAL		 11661 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
11662 connect.edmg.channels =
11663 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
11664
11665 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
11666 connect.edmg.bw_config =
11667 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
11668 }
11669
fffd0934 11670 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
768075eb 11671 connkeys = nl80211_parse_connkeys(rdev, info, NULL);
4c476991
JB		 11672 if (IS_ERR(connkeys))
11673 return PTR_ERR(connkeys);
fffd0934
JB		 11674 }
11675
7e7c8926
BG		 11676 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
11677 connect.flags |= ASSOC_REQ_DISABLE_HT;
11678
11679 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11680 memcpy(&connect.ht_capa_mask,
11681 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
11682 sizeof(connect.ht_capa_mask));
11683
11684 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e 11685 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
453431a5 11686 kfree_sensitive(connkeys);
7e7c8926 11687 return -EINVAL;
b4e4f47e 11688 }
7e7c8926
BG		 11689 memcpy(&connect.ht_capa,
11690 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
11691 sizeof(connect.ht_capa));
11692 }
11693
ee2aca34
JB		 11694 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
11695 connect.flags |= ASSOC_REQ_DISABLE_VHT;
11696
b6db0f89
BG		 11697 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HE]))
11698 connect.flags |= ASSOC_REQ_DISABLE_HE;
11699
36f84235
MS		 11700 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_EHT]))
11701 connect.flags |= ASSOC_REQ_DISABLE_EHT;
11702
ee2aca34
JB		 11703 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
11704 memcpy(&connect.vht_capa_mask,
11705 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
11706 sizeof(connect.vht_capa_mask));
11707
11708 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
11709 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]) {
453431a5 11710 kfree_sensitive(connkeys);
ee2aca34
JB		 11711 return -EINVAL;
11712 }
11713 memcpy(&connect.vht_capa,
11714 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
11715 sizeof(connect.vht_capa));
11716 }
11717
bab5ab7d 11718 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 11719 if (!((rdev->wiphy.features &
11720 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
11721 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
11722 !wiphy_ext_feature_isset(&rdev->wiphy,
11723 NL80211_EXT_FEATURE_RRM)) {
453431a5 11724 kfree_sensitive(connkeys);
bab5ab7d 11725 return -EINVAL;
707554b4 11726 }
bab5ab7d
AK		 11727 connect.flags |= ASSOC_REQ_USE_RRM;
11728 }
11729
34d50519 11730 connect.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
57fbcce3 11731 if (connect.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
453431a5 11732 kfree_sensitive(connkeys);
34d50519
LD		 11733 return -EOPNOTSUPP;
11734 }
11735
38de03d2
AS		 11736 if (info->attrs[NL80211_ATTR_BSS_SELECT]) {
11737 /* bss selection makes no sense if bssid is set */
11738 if (connect.bssid) {
453431a5 11739 kfree_sensitive(connkeys);
38de03d2
AS		 11740 return -EINVAL;
11741 }
11742
11743 err = parse_bss_select(info->attrs[NL80211_ATTR_BSS_SELECT],
11744 wiphy, &connect.bss_select);
11745 if (err) {
453431a5 11746 kfree_sensitive(connkeys);
38de03d2
AS		 11747 return err;
11748 }
11749 }
11750
a3caf744
VK		 11751 if (wiphy_ext_feature_isset(&rdev->wiphy,
11752 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
11753 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
11754 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
11755 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
11756 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11757 connect.fils_erp_username =
11758 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11759 connect.fils_erp_username_len =
11760 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11761 connect.fils_erp_realm =
11762 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11763 connect.fils_erp_realm_len =
11764 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11765 connect.fils_erp_next_seq_num =
11766 nla_get_u16(
11767 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
11768 connect.fils_erp_rrk =
11769 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11770 connect.fils_erp_rrk_len =
11771 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11772 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
11773 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
11774 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
11775 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
453431a5 11776 kfree_sensitive(connkeys);
a3caf744
VK		 11777 return -EINVAL;
11778 }
11779
40cbfa90
SD		 11780 if (nla_get_flag(info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])) {
11781 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
453431a5 11782 kfree_sensitive(connkeys);
40cbfa90
SD		 11783 GENL_SET_ERR_MSG(info,
11784 "external auth requires connection ownership");
11785 return -EINVAL;
11786 }
11787 connect.flags |= CONNECT_REQ_EXTERNAL_AUTH_SUPPORT;
11788 }
11789
efbabc11
VJ		 11790 if (nla_get_flag(info->attrs[NL80211_ATTR_MLO_SUPPORT]))
11791 connect.flags |= CONNECT_REQ_MLO_SUPPORT;
11792
83739b03 11793 wdev_lock(dev->ieee80211_ptr);
bd2522b1 11794
4ce2bd9c
JM		 11795 err = cfg80211_connect(rdev, dev, &connect, connkeys,
11796 connect.prev_bssid);
fffd0934 11797 if (err)
453431a5 11798 kfree_sensitive(connkeys);
bd2522b1
AZ		 11799
11800 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
11801 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11802 if (connect.bssid)
11803 memcpy(dev->ieee80211_ptr->disconnect_bssid,
11804 connect.bssid, ETH_ALEN);
11805 else
3b1648f1 11806 eth_zero_addr(dev->ieee80211_ptr->disconnect_bssid);
bd2522b1
AZ		 11807 }
11808
11809 wdev_unlock(dev->ieee80211_ptr);
11810
b23aa676
SO		 11811 return err;
11812}
11813
088e8df8 11814static int nl80211_update_connect_params(struct sk_buff *skb,
11815 struct genl_info *info)
11816{
11817 struct cfg80211_connect_params connect = {};
11818 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11819 struct net_device *dev = info->user_ptr[1];
11820 struct wireless_dev *wdev = dev->ieee80211_ptr;
7f9a3e15
VK		 11821 bool fils_sk_offload;
11822 u32 auth_type;
088e8df8 11823 u32 changed = 0;
11824 int ret;
11825
11826 if (!rdev->ops->update_connect_params)
11827 return -EOPNOTSUPP;
11828
11829 if (info->attrs[NL80211_ATTR_IE]) {
088e8df8 11830 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11831 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11832 changed |= UPDATE_ASSOC_IES;
11833 }
11834
7f9a3e15
VK		 11835 fils_sk_offload = wiphy_ext_feature_isset(&rdev->wiphy,
11836 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD);
11837
11838 /*
11839 * when driver supports fils-sk offload all attributes must be
11840 * provided. So the else covers "fils-sk-not-all" and
11841 * "no-fils-sk-any".
11842 */
11843 if (fils_sk_offload &&
11844 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
11845 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
11846 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
11847 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11848 connect.fils_erp_username =
11849 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11850 connect.fils_erp_username_len =
11851 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11852 connect.fils_erp_realm =
11853 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11854 connect.fils_erp_realm_len =
11855 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11856 connect.fils_erp_next_seq_num =
11857 nla_get_u16(
11858 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
11859 connect.fils_erp_rrk =
11860 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11861 connect.fils_erp_rrk_len =
11862 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11863 changed |= UPDATE_FILS_ERP_INFO;
11864 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
11865 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
11866 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
11867 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11868 return -EINVAL;
11869 }
11870
11871 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
11872 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
11873 if (!nl80211_valid_auth_type(rdev, auth_type,
11874 NL80211_CMD_CONNECT))
11875 return -EINVAL;
11876
11877 if (auth_type == NL80211_AUTHTYPE_FILS_SK &&
11878 fils_sk_offload && !(changed & UPDATE_FILS_ERP_INFO))
11879 return -EINVAL;
11880
11881 connect.auth_type = auth_type;
11882 changed |= UPDATE_AUTH_TYPE;
11883 }
11884
088e8df8 11885 wdev_lock(dev->ieee80211_ptr);
7b0a0e3c 11886 if (!wdev->connected)
088e8df8 11887 ret = -ENOLINK;
11888 else
11889 ret = rdev_update_connect_params(rdev, dev, &connect, changed);
11890 wdev_unlock(dev->ieee80211_ptr);
11891
11892 return ret;
11893}
11894
b23aa676
SO		 11895static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
11896{
4c476991
JB		 11897 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11898 struct net_device *dev = info->user_ptr[1];
b23aa676 11899 u16 reason;
83739b03 11900 int ret;
b23aa676 11901
bad29297
AZ		 11902 if (dev->ieee80211_ptr->conn_owner_nlportid &&
11903 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
11904 return -EPERM;
11905
b23aa676
SO		 11906 if (!info->attrs[NL80211_ATTR_REASON_CODE])
11907 reason = WLAN_REASON_DEAUTH_LEAVING;
11908 else
11909 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
11910
11911 if (reason == 0)
11912 return -EINVAL;
11913
074ac8df 11914 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11915 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11916 return -EOPNOTSUPP;
b23aa676 11917
83739b03
JB		 11918 wdev_lock(dev->ieee80211_ptr);
11919 ret = cfg80211_disconnect(rdev, dev, reason, true);
11920 wdev_unlock(dev->ieee80211_ptr);
11921 return ret;
b23aa676
SO		 11922}
11923
463d0183
JB		 11924static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
11925{
4c476991 11926 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 11927 struct net *net;
11928 int err;
463d0183 11929
4b681c82
VK		 11930 if (info->attrs[NL80211_ATTR_PID]) {
11931 u32 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
11932
11933 net = get_net_ns_by_pid(pid);
11934 } else if (info->attrs[NL80211_ATTR_NETNS_FD]) {
11935 u32 fd = nla_get_u32(info->attrs[NL80211_ATTR_NETNS_FD]);
463d0183 11936
4b681c82
VK		 11937 net = get_net_ns_by_fd(fd);
11938 } else {
11939 return -EINVAL;
11940 }
463d0183 11941
4c476991
JB		 11942 if (IS_ERR(net))
11943 return PTR_ERR(net);
463d0183
JB		 11944
11945 err = 0;
11946
11947 /* check if anything to do */
4c476991
JB		 11948 if (!net_eq(wiphy_net(&rdev->wiphy), net))
11949 err = cfg80211_switch_netns(rdev, net);
463d0183 11950
463d0183 11951 put_net(net);
463d0183
JB		 11952 return err;
11953}
11954
67fbb16b
SO		 11955static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
11956{
4c476991 11957 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 11958 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
11959 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 11960 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 11961 struct cfg80211_pmksa pmksa;
11962
11963 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
11964
67fbb16b
SO		 11965 if (!info->attrs[NL80211_ATTR_PMKID])
11966 return -EINVAL;
11967
67fbb16b 11968 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
a3caf744
VK		 11969
11970 if (info->attrs[NL80211_ATTR_MAC]) {
11971 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
11972 } else if (info->attrs[NL80211_ATTR_SSID] &&
11973 info->attrs[NL80211_ATTR_FILS_CACHE_ID] &&
11974 (info->genlhdr->cmd == NL80211_CMD_DEL_PMKSA ||
11975 info->attrs[NL80211_ATTR_PMK])) {
11976 pmksa.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11977 pmksa.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11978 pmksa.cache_id =
11979 nla_data(info->attrs[NL80211_ATTR_FILS_CACHE_ID]);
11980 } else {
11981 return -EINVAL;
11982 }
11983 if (info->attrs[NL80211_ATTR_PMK]) {
11984 pmksa.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
11985 pmksa.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
11986 }
67fbb16b 11987
7fc82af8
VJ		 11988 if (info->attrs[NL80211_ATTR_PMK_LIFETIME])
11989 pmksa.pmk_lifetime =
11990 nla_get_u32(info->attrs[NL80211_ATTR_PMK_LIFETIME]);
11991
11992 if (info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD])
11993 pmksa.pmk_reauth_threshold =
11994 nla_get_u8(
11995 info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD]);
11996
074ac8df 11997 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6c900360
LD		 11998 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
11999 !(dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP &&
12000 wiphy_ext_feature_isset(&rdev->wiphy,
12001 NL80211_EXT_FEATURE_AP_PMKSA_CACHING)))
4c476991 12002 return -EOPNOTSUPP;
67fbb16b
SO		 12003
12004 switch (info->genlhdr->cmd) {
12005 case NL80211_CMD_SET_PMKSA:
12006 rdev_ops = rdev->ops->set_pmksa;
12007 break;
12008 case NL80211_CMD_DEL_PMKSA:
12009 rdev_ops = rdev->ops->del_pmksa;
12010 break;
12011 default:
12012 WARN_ON(1);
12013 break;
12014 }
12015
4c476991
JB		 12016 if (!rdev_ops)
12017 return -EOPNOTSUPP;
67fbb16b 12018
4c476991 12019 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 12020}
12021
12022static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
12023{
4c476991
JB		 12024 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12025 struct net_device *dev = info->user_ptr[1];
67fbb16b 12026
074ac8df 12027 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 12028 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
12029 return -EOPNOTSUPP;
67fbb16b 12030
4c476991
JB		 12031 if (!rdev->ops->flush_pmksa)
12032 return -EOPNOTSUPP;
67fbb16b 12033
e35e4d28 12034 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 12035}
12036
109086ce
AN		 12037static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
12038{
12039 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12040 struct net_device *dev = info->user_ptr[1];
12041 u8 action_code, dialog_token;
df942e7b 12042 u32 peer_capability = 0;
109086ce
AN		 12043 u16 status_code;
12044 u8 *peer;
31fa97c5 12045 bool initiator;
109086ce
AN		 12046
12047 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
12048 !rdev->ops->tdls_mgmt)
12049 return -EOPNOTSUPP;
12050
12051 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
12052 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
12053 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
12054 !info->attrs[NL80211_ATTR_IE] ||
12055 !info->attrs[NL80211_ATTR_MAC])
12056 return -EINVAL;
12057
12058 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
12059 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
12060 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
12061 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
31fa97c5 12062 initiator = nla_get_flag(info->attrs[NL80211_ATTR_TDLS_INITIATOR]);
df942e7b
SDU		 12063 if (info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY])
12064 peer_capability =
12065 nla_get_u32(info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY]);
109086ce 12066
e35e4d28 12067 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
df942e7b 12068 dialog_token, status_code, peer_capability,
31fa97c5 12069 initiator,
e35e4d28
HG		 12070 nla_data(info->attrs[NL80211_ATTR_IE]),
12071 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 12072}
12073
12074static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
12075{
12076 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12077 struct net_device *dev = info->user_ptr[1];
12078 enum nl80211_tdls_operation operation;
12079 u8 *peer;
12080
12081 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
12082 !rdev->ops->tdls_oper)
12083 return -EOPNOTSUPP;
12084
12085 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
12086 !info->attrs[NL80211_ATTR_MAC])
12087 return -EINVAL;
12088
12089 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
12090 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
12091
e35e4d28 12092 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 12093}
12094
9588bbd5
JM		 12095static int nl80211_remain_on_channel(struct sk_buff *skb,
12096 struct genl_info *info)
12097{
4c476991 12098 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 12099 unsigned int link_id = nl80211_link_id(info->attrs);
71bbc994 12100 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 12101 struct cfg80211_chan_def chandef;
9588bbd5
JM		 12102 struct sk_buff *msg;
12103 void *hdr;
12104 u64 cookie;
683b6d3b 12105 u32 duration;
9588bbd5
JM		 12106 int err;
12107
12108 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
12109 !info->attrs[NL80211_ATTR_DURATION])
12110 return -EINVAL;
12111
12112 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
12113
ebf348fc
JB		 12114 if (!rdev->ops->remain_on_channel ||
12115 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
12116 return -EOPNOTSUPP;
12117
9588bbd5 12118 /*
ebf348fc
JB		 12119 * We should be on that channel for at least a minimum amount of
12120 * time (10ms) but no longer than the driver supports.
9588bbd5 12121 */
ebf348fc 12122 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 12123 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 12124 return -EINVAL;
12125
683b6d3b
JB		 12126 err = nl80211_parse_chandef(rdev, info, &chandef);
12127 if (err)
12128 return err;
9588bbd5 12129
34373d12 12130 wdev_lock(wdev);
7b0a0e3c
JB		 12131 if (!cfg80211_off_channel_oper_allowed(wdev, chandef.chan)) {
12132 const struct cfg80211_chan_def *oper_chandef, *compat_chandef;
12133
12134 oper_chandef = wdev_chandef(wdev, link_id);
12135
12136 if (WARN_ON(!oper_chandef)) {
12137 /* cannot happen since we must beacon to get here */
12138 WARN_ON(1);
12139 wdev_unlock(wdev);
12140 return -EBUSY;
12141 }
12142
12143 /* note: returns first one if identical chandefs */
12144 compat_chandef = cfg80211_chandef_compatible(&chandef,
12145 oper_chandef);
12146
34373d12
VT		 12147 if (compat_chandef != &chandef) {
12148 wdev_unlock(wdev);
12149 return -EBUSY;
12150 }
12151 }
12152 wdev_unlock(wdev);
12153
9588bbd5 12154 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 12155 if (!msg)
12156 return -ENOMEM;
9588bbd5 12157
15e47304 12158 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5 12159 NL80211_CMD_REMAIN_ON_CHANNEL);
cb35fba3
DC		 12160 if (!hdr) {
12161 err = -ENOBUFS;
9588bbd5
JM		 12162 goto free_msg;
12163 }
12164
683b6d3b
JB		 12165 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
12166 duration, &cookie);
9588bbd5
JM		 12167
12168 if (err)
12169 goto free_msg;
12170
2dad624e
ND		 12171 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12172 NL80211_ATTR_PAD))
9360ffd1 12173 goto nla_put_failure;
9588bbd5
JM		 12174
12175 genlmsg_end(msg, hdr);
4c476991
JB		 12176
12177 return genlmsg_reply(msg, info);
9588bbd5
JM		 12178
12179 nla_put_failure:
12180 err = -ENOBUFS;
12181 free_msg:
12182 nlmsg_free(msg);
9588bbd5
JM		 12183 return err;
12184}
12185
12186static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
12187 struct genl_info *info)
12188{
4c476991 12189 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12190 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 12191 u64 cookie;
9588bbd5
JM		 12192
12193 if (!info->attrs[NL80211_ATTR_COOKIE])
12194 return -EINVAL;
12195
4c476991
JB		 12196 if (!rdev->ops->cancel_remain_on_channel)
12197 return -EOPNOTSUPP;
9588bbd5 12198
9588bbd5
JM		 12199 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
12200
e35e4d28 12201 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 12202}
12203
13ae75b1
JM		 12204static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
12205 struct genl_info *info)
12206{
13ae75b1 12207 struct cfg80211_bitrate_mask mask;
7b0a0e3c 12208 unsigned int link_id = nl80211_link_id(info->attrs);
a7c7fbff 12209 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 12210 struct net_device *dev = info->user_ptr[1];
f971e188 12211 struct wireless_dev *wdev = dev->ieee80211_ptr;
a7c7fbff 12212 int err;
13ae75b1 12213
4c476991
JB		 12214 if (!rdev->ops->set_bitrate_mask)
12215 return -EOPNOTSUPP;
13ae75b1 12216
f971e188 12217 wdev_lock(wdev);
9a5f6488 12218 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
eb89a6a6 12219 NL80211_ATTR_TX_RATES, &mask,
7b0a0e3c 12220 dev, true, link_id);
a7c7fbff 12221 if (err)
f971e188 12222 goto out;
13ae75b1 12223
7b0a0e3c 12224 err = rdev_set_bitrate_mask(rdev, dev, link_id, NULL, &mask);
f971e188
JB		 12225out:
12226 wdev_unlock(wdev);
12227 return err;
13ae75b1
JM		 12228}
12229
2e161f78 12230static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 12231{
4c476991 12232 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12233 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 12234 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 12235
12236 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
12237 return -EINVAL;
12238
2e161f78
JB		 12239 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
12240 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 12241
71bbc994
JB		 12242 switch (wdev->iftype) {
12243 case NL80211_IFTYPE_STATION:
12244 case NL80211_IFTYPE_ADHOC:
12245 case NL80211_IFTYPE_P2P_CLIENT:
12246 case NL80211_IFTYPE_AP:
12247 case NL80211_IFTYPE_AP_VLAN:
12248 case NL80211_IFTYPE_MESH_POINT:
12249 case NL80211_IFTYPE_P2P_GO:
98104fde 12250 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 12251 break;
cb3b7d87 12252 case NL80211_IFTYPE_NAN:
71bbc994 12253 default:
4c476991 12254 return -EOPNOTSUPP;
71bbc994 12255 }
026331c4
JM		 12256
12257 /* not much point in registering if we can't reply */
4c476991
JB		 12258 if (!rdev->ops->mgmt_tx)
12259 return -EOPNOTSUPP;
026331c4 12260
9dba48a6
JB		 12261 if (info->attrs[NL80211_ATTR_RECEIVE_MULTICAST] &&
12262 !wiphy_ext_feature_isset(&rdev->wiphy,
12263 NL80211_EXT_FEATURE_MULTICAST_REGISTRATIONS)) {
12264 GENL_SET_ERR_MSG(info,
12265 "multicast RX registrations are not supported");
12266 return -EOPNOTSUPP;
12267 }
12268
15e47304 12269 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
ff74c51e
IP		 12270 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
12271 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]),
9dba48a6 12272 info->attrs[NL80211_ATTR_RECEIVE_MULTICAST],
ff74c51e 12273 info->extack);
026331c4
JM		 12274}
12275
2e161f78 12276static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 12277{
4c476991 12278 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12279 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 12280 struct cfg80211_chan_def chandef;
026331c4 12281 int err;
d64d373f 12282 void *hdr = NULL;
026331c4 12283 u64 cookie;
e247bd90 12284 struct sk_buff *msg = NULL;
b176e629
AO		 12285 struct cfg80211_mgmt_tx_params params = {
12286 .dont_wait_for_ack =
12287 info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK],
12288 };
026331c4 12289
683b6d3b 12290 if (!info->attrs[NL80211_ATTR_FRAME])
026331c4
JM		 12291 return -EINVAL;
12292
4c476991
JB		 12293 if (!rdev->ops->mgmt_tx)
12294 return -EOPNOTSUPP;
026331c4 12295
71bbc994 12296 switch (wdev->iftype) {
ea141b75
AQ		 12297 case NL80211_IFTYPE_P2P_DEVICE:
12298 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
12299 return -EINVAL;
d7832c71 12300 break;
71bbc994
JB		 12301 case NL80211_IFTYPE_STATION:
12302 case NL80211_IFTYPE_ADHOC:
12303 case NL80211_IFTYPE_P2P_CLIENT:
12304 case NL80211_IFTYPE_AP:
12305 case NL80211_IFTYPE_AP_VLAN:
12306 case NL80211_IFTYPE_MESH_POINT:
12307 case NL80211_IFTYPE_P2P_GO:
12308 break;
cb3b7d87 12309 case NL80211_IFTYPE_NAN:
71bbc994 12310 default:
4c476991 12311 return -EOPNOTSUPP;
71bbc994 12312 }
026331c4 12313
f7ca38df 12314 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 12315 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df 12316 return -EINVAL;
b176e629 12317 params.wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 12318
12319 /*
12320 * We should wait on the channel for at least a minimum amount
12321 * of time (10ms) but no longer than the driver supports.
12322 */
b176e629
AO		 12323 if (params.wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
12324 params.wait > rdev->wiphy.max_remain_on_channel_duration)
ebf348fc 12325 return -EINVAL;
f7ca38df
JB		 12326 }
12327
b176e629 12328 params.offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
f7ca38df 12329
b176e629 12330 if (params.offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
7c4ef712
JB		 12331 return -EINVAL;
12332
b176e629 12333 params.no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
e9f935e3 12334
ea141b75
AQ		 12335 /* get the channel if any has been specified, otherwise pass NULL to
12336 * the driver. The latter will use the current one
12337 */
12338 chandef.chan = NULL;
12339 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
12340 err = nl80211_parse_chandef(rdev, info, &chandef);
12341 if (err)
12342 return err;
12343 }
12344
b176e629 12345 if (!chandef.chan && params.offchan)
ea141b75 12346 return -EINVAL;
026331c4 12347
34373d12 12348 wdev_lock(wdev);
7b0a0e3c
JB		 12349 if (params.offchan &&
12350 !cfg80211_off_channel_oper_allowed(wdev, chandef.chan)) {
34373d12
VT		 12351 wdev_unlock(wdev);
12352 return -EBUSY;
12353 }
95f498bb
JB		 12354
12355 params.link_id = nl80211_link_id_or_invalid(info->attrs);
12356 /*
12357 * This now races due to the unlock, but we cannot check
12358 * the valid links for the _station_ anyway, so that's up
12359 * to the driver.
12360 */
12361 if (params.link_id >= 0 &&
12362 !(wdev->valid_links & BIT(params.link_id))) {
12363 wdev_unlock(wdev);
12364 return -EINVAL;
12365 }
34373d12
VT		 12366 wdev_unlock(wdev);
12367
34d22ce2
AO		 12368 params.buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
12369 params.len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
12370
12371 if (info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]) {
12372 int len = nla_len(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
12373 int i;
12374
12375 if (len % sizeof(u16))
12376 return -EINVAL;
12377
12378 params.n_csa_offsets = len / sizeof(u16);
12379 params.csa_offsets =
12380 nla_data(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
12381
12382 /* check that all the offsets fit the frame */
12383 for (i = 0; i < params.n_csa_offsets; i++) {
12384 if (params.csa_offsets[i] >= params.len)
12385 return -EINVAL;
12386 }
12387 }
12388
b176e629 12389 if (!params.dont_wait_for_ack) {
e247bd90
JB		 12390 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12391 if (!msg)
12392 return -ENOMEM;
026331c4 12393
15e47304 12394 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 12395 NL80211_CMD_FRAME);
cb35fba3
DC		 12396 if (!hdr) {
12397 err = -ENOBUFS;
e247bd90
JB		 12398 goto free_msg;
12399 }
026331c4 12400 }
e247bd90 12401
b176e629
AO		 12402 params.chan = chandef.chan;
12403 err = cfg80211_mlme_mgmt_tx(rdev, wdev, &params, &cookie);
026331c4
JM		 12404 if (err)
12405 goto free_msg;
12406
e247bd90 12407 if (msg) {
2dad624e
ND		 12408 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12409 NL80211_ATTR_PAD))
9360ffd1 12410 goto nla_put_failure;
026331c4 12411
e247bd90
JB		 12412 genlmsg_end(msg, hdr);
12413 return genlmsg_reply(msg, info);
12414 }
12415
12416 return 0;
026331c4
JM		 12417
12418 nla_put_failure:
12419 err = -ENOBUFS;
12420 free_msg:
12421 nlmsg_free(msg);
026331c4
JM		 12422 return err;
12423}
12424
f7ca38df
JB		 12425static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
12426{
12427 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12428 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 12429 u64 cookie;
12430
12431 if (!info->attrs[NL80211_ATTR_COOKIE])
12432 return -EINVAL;
12433
12434 if (!rdev->ops->mgmt_tx_cancel_wait)
12435 return -EOPNOTSUPP;
12436
71bbc994
JB		 12437 switch (wdev->iftype) {
12438 case NL80211_IFTYPE_STATION:
12439 case NL80211_IFTYPE_ADHOC:
12440 case NL80211_IFTYPE_P2P_CLIENT:
12441 case NL80211_IFTYPE_AP:
12442 case NL80211_IFTYPE_AP_VLAN:
12443 case NL80211_IFTYPE_P2P_GO:
98104fde 12444 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 12445 break;
cb3b7d87 12446 case NL80211_IFTYPE_NAN:
71bbc994 12447 default:
f7ca38df 12448 return -EOPNOTSUPP;
71bbc994 12449 }
f7ca38df
JB		 12450
12451 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
12452
e35e4d28 12453 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 12454}
12455
ffb9eb3d
KV		 12456static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
12457{
4c476991 12458 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 12459 struct wireless_dev *wdev;
4c476991 12460 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 12461 u8 ps_state;
12462 bool state;
12463 int err;
12464
4c476991
JB		 12465 if (!info->attrs[NL80211_ATTR_PS_STATE])
12466 return -EINVAL;
ffb9eb3d
KV		 12467
12468 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
12469
ffb9eb3d
KV		 12470 wdev = dev->ieee80211_ptr;
12471
4c476991
JB		 12472 if (!rdev->ops->set_power_mgmt)
12473 return -EOPNOTSUPP;
ffb9eb3d
KV		 12474
12475 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
12476
12477 if (state == wdev->ps)
4c476991 12478 return 0;
ffb9eb3d 12479
e35e4d28 12480 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 12481 if (!err)
12482 wdev->ps = state;
ffb9eb3d
KV		 12483 return err;
12484}
12485
12486static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
12487{
4c476991 12488 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 12489 enum nl80211_ps_state ps_state;
12490 struct wireless_dev *wdev;
4c476991 12491 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 12492 struct sk_buff *msg;
12493 void *hdr;
12494 int err;
12495
ffb9eb3d
KV		 12496 wdev = dev->ieee80211_ptr;
12497
4c476991
JB		 12498 if (!rdev->ops->set_power_mgmt)
12499 return -EOPNOTSUPP;
ffb9eb3d
KV		 12500
12501 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 12502 if (!msg)
12503 return -ENOMEM;
ffb9eb3d 12504
15e47304 12505 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 12506 NL80211_CMD_GET_POWER_SAVE);
12507 if (!hdr) {
4c476991 12508 err = -ENOBUFS;
ffb9eb3d
KV		 12509 goto free_msg;
12510 }
12511
12512 if (wdev->ps)
12513 ps_state = NL80211_PS_ENABLED;
12514 else
12515 ps_state = NL80211_PS_DISABLED;
12516
9360ffd1
DM		 12517 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
12518 goto nla_put_failure;
ffb9eb3d
KV		 12519
12520 genlmsg_end(msg, hdr);
4c476991 12521 return genlmsg_reply(msg, info);
ffb9eb3d 12522
4c476991 12523 nla_put_failure:
ffb9eb3d 12524 err = -ENOBUFS;
4c476991 12525 free_msg:
ffb9eb3d 12526 nlmsg_free(msg);
ffb9eb3d
KV		 12527 return err;
12528}
12529
94e860f1
JB		 12530static const struct nla_policy
12531nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
4a4b8169 12532 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_BINARY },
d6dc1a38
JO		 12533 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
12534 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 12535 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
12536 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
12537 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
bee427b8 12538 [NL80211_ATTR_CQM_RSSI_LEVEL] = { .type = NLA_S32 },
d6dc1a38
JO		 12539};
12540
84f10708 12541static int nl80211_set_cqm_txe(struct genl_info *info,
d9d8b019 12542 u32 rate, u32 pkts, u32 intvl)
84f10708
TP		 12543{
12544 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84f10708 12545 struct net_device *dev = info->user_ptr[1];
1da5fcc8 12546 struct wireless_dev *wdev = dev->ieee80211_ptr;
84f10708 12547
d9d8b019 12548 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
84f10708
TP		 12549 return -EINVAL;
12550
84f10708
TP		 12551 if (!rdev->ops->set_cqm_txe_config)
12552 return -EOPNOTSUPP;
12553
12554 if (wdev->iftype != NL80211_IFTYPE_STATION &&
12555 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
12556 return -EOPNOTSUPP;
12557
e35e4d28 12558 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 12559}
12560
4a4b8169
AZ		 12561static int cfg80211_cqm_rssi_update(struct cfg80211_registered_device *rdev,
12562 struct net_device *dev)
12563{
12564 struct wireless_dev *wdev = dev->ieee80211_ptr;
12565 s32 last, low, high;
12566 u32 hyst;
1222a160 12567 int i, n, low_index;
4a4b8169
AZ		 12568 int err;
12569
12570 /* RSSI reporting disabled? */
12571 if (!wdev->cqm_config)
12572 return rdev_set_cqm_rssi_range_config(rdev, dev, 0, 0);
12573
12574 /*
12575 * Obtain current RSSI value if possible, if not and no RSSI threshold
12576 * event has been received yet, we should receive an event after a
12577 * connection is established and enough beacons received to calculate
12578 * the average.
12579 */
7b0a0e3c
JB		 12580 if (!wdev->cqm_config->last_rssi_event_value &&
12581 wdev->links[0].client.current_bss &&
4a4b8169 12582 rdev->ops->get_station) {
73887fd9 12583 struct station_info sinfo = {};
4a4b8169
AZ		 12584 u8 *mac_addr;
12585
7b0a0e3c 12586 mac_addr = wdev->links[0].client.current_bss->pub.bssid;
4a4b8169 12587
73887fd9
JB		 12588 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
12589 if (err)
4a4b8169
AZ		 12590 return err;
12591
df16737d 12592 cfg80211_sinfo_release_content(&sinfo);
397c657a 12593 if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_BEACON_SIGNAL_AVG))
4a4b8169 12594 wdev->cqm_config->last_rssi_event_value =
73887fd9 12595 (s8) sinfo.rx_beacon_signal_avg;
4a4b8169
AZ		 12596 }
12597
12598 last = wdev->cqm_config->last_rssi_event_value;
12599 hyst = wdev->cqm_config->rssi_hyst;
12600 n = wdev->cqm_config->n_rssi_thresholds;
12601
4b2c5a14
MH		 12602 for (i = 0; i < n; i++) {
12603 i = array_index_nospec(i, n);
4a4b8169
AZ		 12604 if (last < wdev->cqm_config->rssi_thresholds[i])
12605 break;
4b2c5a14 12606 }
4a4b8169 12607
1222a160
MH		 12608 low_index = i - 1;
12609 if (low_index >= 0) {
12610 low_index = array_index_nospec(low_index, n);
12611 low = wdev->cqm_config->rssi_thresholds[low_index] - hyst;
12612 } else {
12613 low = S32_MIN;
12614 }
12615 if (i < n) {
12616 i = array_index_nospec(i, n);
12617 high = wdev->cqm_config->rssi_thresholds[i] + hyst - 1;
12618 } else {
12619 high = S32_MAX;
12620 }
4a4b8169
AZ		 12621
12622 return rdev_set_cqm_rssi_range_config(rdev, dev, low, high);
12623}
12624
d6dc1a38 12625static int nl80211_set_cqm_rssi(struct genl_info *info,
4a4b8169
AZ		 12626 const s32 *thresholds, int n_thresholds,
12627 u32 hysteresis)
d6dc1a38 12628{
4c476991 12629 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 12630 struct net_device *dev = info->user_ptr[1];
1da5fcc8 12631 struct wireless_dev *wdev = dev->ieee80211_ptr;
4a4b8169
AZ		 12632 int i, err;
12633 s32 prev = S32_MIN;
d6dc1a38 12634
4a4b8169
AZ		 12635 /* Check all values negative and sorted */
12636 for (i = 0; i < n_thresholds; i++) {
12637 if (thresholds[i] > 0 || thresholds[i] <= prev)
12638 return -EINVAL;
d6dc1a38 12639
4a4b8169
AZ		 12640 prev = thresholds[i];
12641 }
d6dc1a38 12642
074ac8df 12643 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 12644 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
12645 return -EOPNOTSUPP;
d6dc1a38 12646
4a4b8169
AZ		 12647 wdev_lock(wdev);
12648 cfg80211_cqm_config_free(wdev);
12649 wdev_unlock(wdev);
12650
12651 if (n_thresholds <= 1 && rdev->ops->set_cqm_rssi_config) {
12652 if (n_thresholds == 0 || thresholds[0] == 0) /* Disabling */
12653 return rdev_set_cqm_rssi_config(rdev, dev, 0, 0);
12654
12655 return rdev_set_cqm_rssi_config(rdev, dev,
12656 thresholds[0], hysteresis);
12657 }
12658
12659 if (!wiphy_ext_feature_isset(&rdev->wiphy,
12660 NL80211_EXT_FEATURE_CQM_RSSI_LIST))
12661 return -EOPNOTSUPP;
12662
12663 if (n_thresholds == 1 && thresholds[0] == 0) /* Disabling */
12664 n_thresholds = 0;
12665
12666 wdev_lock(wdev);
12667 if (n_thresholds) {
12668 struct cfg80211_cqm_config *cqm_config;
12669
40f231e7
LB		 12670 cqm_config = kzalloc(struct_size(cqm_config, rssi_thresholds,
12671 n_thresholds),
12672 GFP_KERNEL);
4a4b8169
AZ		 12673 if (!cqm_config) {
12674 err = -ENOMEM;
12675 goto unlock;
12676 }
12677
12678 cqm_config->rssi_hyst = hysteresis;
12679 cqm_config->n_rssi_thresholds = n_thresholds;
12680 memcpy(cqm_config->rssi_thresholds, thresholds,
40f231e7
LB		 12681 flex_array_size(cqm_config, rssi_thresholds,
12682 n_thresholds));
4a4b8169
AZ		 12683
12684 wdev->cqm_config = cqm_config;
12685 }
12686
12687 err = cfg80211_cqm_rssi_update(rdev, dev);
12688
12689unlock:
12690 wdev_unlock(wdev);
12691
12692 return err;
d6dc1a38
JO		 12693}
12694
12695static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
12696{
12697 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
12698 struct nlattr *cqm;
12699 int err;
12700
12701 cqm = info->attrs[NL80211_ATTR_CQM];
1da5fcc8
JB		 12702 if (!cqm)
12703 return -EINVAL;
d6dc1a38 12704
8cb08174
JB		 12705 err = nla_parse_nested_deprecated(attrs, NL80211_ATTR_CQM_MAX, cqm,
12706 nl80211_attr_cqm_policy,
12707 info->extack);
d6dc1a38 12708 if (err)
1da5fcc8 12709 return err;
d6dc1a38
JO		 12710
12711 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
12712 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
4a4b8169
AZ		 12713 const s32 *thresholds =
12714 nla_data(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
12715 int len = nla_len(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
1da5fcc8 12716 u32 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
d6dc1a38 12717
4a4b8169
AZ		 12718 if (len % 4)
12719 return -EINVAL;
12720
12721 return nl80211_set_cqm_rssi(info, thresholds, len / 4,
12722 hysteresis);
1da5fcc8
JB		 12723 }
12724
12725 if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
12726 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
12727 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
12728 u32 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
12729 u32 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
12730 u32 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
12731
12732 return nl80211_set_cqm_txe(info, rate, pkts, intvl);
12733 }
12734
12735 return -EINVAL;
d6dc1a38
JO		 12736}
12737
6e0bd6c3
RL		 12738static int nl80211_join_ocb(struct sk_buff *skb, struct genl_info *info)
12739{
12740 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12741 struct net_device *dev = info->user_ptr[1];
12742 struct ocb_setup setup = {};
12743 int err;
12744
12745 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
12746 if (err)
12747 return err;
12748
12749 return cfg80211_join_ocb(rdev, dev, &setup);
12750}
12751
12752static int nl80211_leave_ocb(struct sk_buff *skb, struct genl_info *info)
12753{
12754 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12755 struct net_device *dev = info->user_ptr[1];
12756
12757 return cfg80211_leave_ocb(rdev, dev);
12758}
12759
29cbe68c
JB		 12760static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
12761{
12762 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12763 struct net_device *dev = info->user_ptr[1];
12764 struct mesh_config cfg;
c80d545d 12765 struct mesh_setup setup;
29cbe68c
JB		 12766 int err;
12767
12768 /* start with default */
12769 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 12770 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 12771
24bdd9f4 12772 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 12773 /* and parse parameters if given */
24bdd9f4 12774 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 12775 if (err)
12776 return err;
12777 }
12778
12779 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
12780 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
12781 return -EINVAL;
12782
c80d545d
JC		 12783 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
12784 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
12785
4bb62344
CYY		 12786 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
12787 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
12788 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
12789 return -EINVAL;
12790
9bdbf04d
MP		 12791 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
12792 setup.beacon_interval =
12793 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 12794
0c317a02
PK		 12795 err = cfg80211_validate_beacon_int(rdev,
12796 NL80211_IFTYPE_MESH_POINT,
12797 setup.beacon_interval);
12d20fc9
PK		 12798 if (err)
12799 return err;
9bdbf04d
MP		 12800 }
12801
12802 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
12803 setup.dtim_period =
12804 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
12805 if (setup.dtim_period < 1 || setup.dtim_period > 100)
12806 return -EINVAL;
12807 }
12808
c80d545d
JC		 12809 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
12810 /* parse additional setup parameters if given */
12811 err = nl80211_parse_mesh_setup(info, &setup);
12812 if (err)
12813 return err;
12814 }
12815
d37bb18a
TP		 12816 if (setup.user_mpm)
12817 cfg.auto_open_plinks = false;
12818
cc1d2806 12819 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 12820 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
12821 if (err)
12822 return err;
cc1d2806 12823 } else {
188c1b3c 12824 /* __cfg80211_join_mesh() will sort it out */
683b6d3b 12825 setup.chandef.chan = NULL;
cc1d2806
JB		 12826 }
12827
ffb3cf30
AN		 12828 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
12829 u8 *rates = nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
12830 int n_rates =
12831 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
12832 struct ieee80211_supported_band *sband;
12833
12834 if (!setup.chandef.chan)
12835 return -EINVAL;
12836
12837 sband = rdev->wiphy.bands[setup.chandef.chan->band];
12838
12839 err = ieee80211_get_ratemask(sband, rates, n_rates,
12840 &setup.basic_rates);
12841 if (err)
12842 return err;
12843 }
12844
8564e382 12845 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 12846 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
12847 NL80211_ATTR_TX_RATES,
eb89a6a6 12848 &setup.beacon_rate,
7b0a0e3c 12849 dev, false, 0);
8564e382
JB		 12850 if (err)
12851 return err;
12852
265698d7
JB		 12853 if (!setup.chandef.chan)
12854 return -EINVAL;
12855
8564e382
JB		 12856 err = validate_beacon_tx_rate(rdev, setup.chandef.chan->band,
12857 &setup.beacon_rate);
12858 if (err)
12859 return err;
12860 }
12861
d37d49c2
BB		 12862 setup.userspace_handles_dfs =
12863 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
12864
1224f583
DK		 12865 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
12866 int r = validate_pae_over_nl80211(rdev, info);
12867
12868 if (r < 0)
12869 return r;
12870
12871 setup.control_port_over_nl80211 = true;
12872 }
12873
188c1b3c
DK		 12874 wdev_lock(dev->ieee80211_ptr);
12875 err = __cfg80211_join_mesh(rdev, dev, &setup, &cfg);
12876 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER])
12877 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
12878 wdev_unlock(dev->ieee80211_ptr);
12879
12880 return err;
29cbe68c
JB		 12881}
12882
12883static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
12884{
12885 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12886 struct net_device *dev = info->user_ptr[1];
12887
12888 return cfg80211_leave_mesh(rdev, dev);
12889}
12890
dfb89c56 12891#ifdef CONFIG_PM
bb92d199
AK		 12892static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
12893 struct cfg80211_registered_device *rdev)
12894{
6abb9cb9 12895 struct cfg80211_wowlan *wowlan = rdev->wiphy.wowlan_config;
bb92d199
AK		 12896 struct nlattr *nl_pats, *nl_pat;
12897 int i, pat_len;
12898
6abb9cb9 12899 if (!wowlan->n_patterns)
bb92d199
AK		 12900 return 0;
12901
ae0be8de 12902 nl_pats = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
bb92d199
AK		 12903 if (!nl_pats)
12904 return -ENOBUFS;
12905
6abb9cb9 12906 for (i = 0; i < wowlan->n_patterns; i++) {
ae0be8de 12907 nl_pat = nla_nest_start_noflag(msg, i + 1);
bb92d199
AK		 12908 if (!nl_pat)
12909 return -ENOBUFS;
6abb9cb9 12910 pat_len = wowlan->patterns[i].pattern_len;
50ac6607 12911 if (nla_put(msg, NL80211_PKTPAT_MASK, DIV_ROUND_UP(pat_len, 8),
6abb9cb9 12912 wowlan->patterns[i].mask) ||
50ac6607
AK		 12913 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
12914 wowlan->patterns[i].pattern) ||
12915 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
6abb9cb9 12916 wowlan->patterns[i].pkt_offset))
bb92d199
AK		 12917 return -ENOBUFS;
12918 nla_nest_end(msg, nl_pat);
12919 }
12920 nla_nest_end(msg, nl_pats);
12921
12922 return 0;
12923}
12924
2a0e047e
JB		 12925static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
12926 struct cfg80211_wowlan_tcp *tcp)
12927{
12928 struct nlattr *nl_tcp;
12929
12930 if (!tcp)
12931 return 0;
12932
ae0be8de
MK		 12933 nl_tcp = nla_nest_start_noflag(msg,
12934 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
2a0e047e
JB		 12935 if (!nl_tcp)
12936 return -ENOBUFS;
12937
930345ea
JB		 12938 if (nla_put_in_addr(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
12939 nla_put_in_addr(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
2a0e047e
JB		 12940 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
12941 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
12942 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
12943 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
12944 tcp->payload_len, tcp->payload) ||
12945 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
12946 tcp->data_interval) ||
12947 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
12948 tcp->wake_len, tcp->wake_data) ||
12949 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
12950 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
12951 return -ENOBUFS;
12952
12953 if (tcp->payload_seq.len &&
12954 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
12955 sizeof(tcp->payload_seq), &tcp->payload_seq))
12956 return -ENOBUFS;
12957
12958 if (tcp->payload_tok.len &&
12959 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
12960 sizeof(tcp->payload_tok) + tcp->tokens_size,
12961 &tcp->payload_tok))
12962 return -ENOBUFS;
12963
e248ad30
JB		 12964 nla_nest_end(msg, nl_tcp);
12965
2a0e047e
JB		 12966 return 0;
12967}
12968
75453ccb
LC		 12969static int nl80211_send_wowlan_nd(struct sk_buff *msg,
12970 struct cfg80211_sched_scan_request *req)
12971{
3b06d277 12972 struct nlattr *nd, *freqs, *matches, *match, *scan_plans, *scan_plan;
75453ccb
LC		 12973 int i;
12974
12975 if (!req)
12976 return 0;
12977
ae0be8de 12978 nd = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_NET_DETECT);
75453ccb
LC		 12979 if (!nd)
12980 return -ENOBUFS;
12981
3b06d277
AS		 12982 if (req->n_scan_plans == 1 &&
12983 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_INTERVAL,
12984 req->scan_plans[0].interval * 1000))
75453ccb
LC		 12985 return -ENOBUFS;
12986
21fea567
LC		 12987 if (nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_DELAY, req->delay))
12988 return -ENOBUFS;
12989
bf95ecdb 12990 if (req->relative_rssi_set) {
12991 struct nl80211_bss_select_rssi_adjust rssi_adjust;
12992
12993 if (nla_put_s8(msg, NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI,
12994 req->relative_rssi))
12995 return -ENOBUFS;
12996
12997 rssi_adjust.band = req->rssi_adjust.band;
12998 rssi_adjust.delta = req->rssi_adjust.delta;
12999 if (nla_put(msg, NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST,
13000 sizeof(rssi_adjust), &rssi_adjust))
13001 return -ENOBUFS;
13002 }
13003
ae0be8de 13004 freqs = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_FREQUENCIES);
75453ccb
LC		 13005 if (!freqs)
13006 return -ENOBUFS;
13007
53b18980
JB		 13008 for (i = 0; i < req->n_channels; i++) {
13009 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
13010 return -ENOBUFS;
13011 }
75453ccb
LC		 13012
13013 nla_nest_end(msg, freqs);
13014
13015 if (req->n_match_sets) {
ae0be8de
MK		 13016 matches = nla_nest_start_noflag(msg,
13017 NL80211_ATTR_SCHED_SCAN_MATCH);
76e1fb4b
JB		 13018 if (!matches)
13019 return -ENOBUFS;
13020
75453ccb 13021 for (i = 0; i < req->n_match_sets; i++) {
ae0be8de 13022 match = nla_nest_start_noflag(msg, i);
76e1fb4b
JB		 13023 if (!match)
13024 return -ENOBUFS;
13025
53b18980
JB		 13026 if (nla_put(msg, NL80211_SCHED_SCAN_MATCH_ATTR_SSID,
13027 req->match_sets[i].ssid.ssid_len,
13028 req->match_sets[i].ssid.ssid))
13029 return -ENOBUFS;
75453ccb
LC		 13030 nla_nest_end(msg, match);
13031 }
13032 nla_nest_end(msg, matches);
13033 }
13034
ae0be8de 13035 scan_plans = nla_nest_start_noflag(msg, NL80211_ATTR_SCHED_SCAN_PLANS);
3b06d277
AS		 13036 if (!scan_plans)
13037 return -ENOBUFS;
13038
13039 for (i = 0; i < req->n_scan_plans; i++) {
ae0be8de 13040 scan_plan = nla_nest_start_noflag(msg, i + 1);
76e1fb4b
JB		 13041 if (!scan_plan)
13042 return -ENOBUFS;
13043
67626964 13044 if (nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_INTERVAL,
3b06d277
AS		 13045 req->scan_plans[i].interval) ||
13046 (req->scan_plans[i].iterations &&
13047 nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_ITERATIONS,
13048 req->scan_plans[i].iterations)))
13049 return -ENOBUFS;
13050 nla_nest_end(msg, scan_plan);
13051 }
13052 nla_nest_end(msg, scan_plans);
13053
75453ccb
LC		 13054 nla_nest_end(msg, nd);
13055
13056 return 0;
13057}
13058
ff1b6e69
JB		 13059static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
13060{
13061 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13062 struct sk_buff *msg;
13063 void *hdr;
2a0e047e 13064 u32 size = NLMSG_DEFAULT_SIZE;
ff1b6e69 13065
964dc9e2 13066 if (!rdev->wiphy.wowlan)
ff1b6e69
JB		 13067 return -EOPNOTSUPP;
13068
6abb9cb9 13069 if (rdev->wiphy.wowlan_config && rdev->wiphy.wowlan_config->tcp) {
2a0e047e 13070 /* adjust size to have room for all the data */
6abb9cb9
JB		 13071 size += rdev->wiphy.wowlan_config->tcp->tokens_size +
13072 rdev->wiphy.wowlan_config->tcp->payload_len +
13073 rdev->wiphy.wowlan_config->tcp->wake_len +
13074 rdev->wiphy.wowlan_config->tcp->wake_len / 8;
2a0e047e
JB		 13075 }
13076
13077 msg = nlmsg_new(size, GFP_KERNEL);
ff1b6e69
JB		 13078 if (!msg)
13079 return -ENOMEM;
13080
15e47304 13081 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 13082 NL80211_CMD_GET_WOWLAN);
13083 if (!hdr)
13084 goto nla_put_failure;
13085
6abb9cb9 13086 if (rdev->wiphy.wowlan_config) {
ff1b6e69
JB		 13087 struct nlattr *nl_wowlan;
13088
ae0be8de
MK		 13089 nl_wowlan = nla_nest_start_noflag(msg,
13090 NL80211_ATTR_WOWLAN_TRIGGERS);
ff1b6e69
JB		 13091 if (!nl_wowlan)
13092 goto nla_put_failure;
13093
6abb9cb9 13094 if ((rdev->wiphy.wowlan_config->any &&
9360ffd1 13095 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6abb9cb9 13096 (rdev->wiphy.wowlan_config->disconnect &&
9360ffd1 13097 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6abb9cb9 13098 (rdev->wiphy.wowlan_config->magic_pkt &&
9360ffd1 13099 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6abb9cb9 13100 (rdev->wiphy.wowlan_config->gtk_rekey_failure &&
9360ffd1 13101 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6abb9cb9 13102 (rdev->wiphy.wowlan_config->eap_identity_req &&
9360ffd1 13103 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6abb9cb9 13104 (rdev->wiphy.wowlan_config->four_way_handshake &&
9360ffd1 13105 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6abb9cb9 13106 (rdev->wiphy.wowlan_config->rfkill_release &&
9360ffd1
DM		 13107 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
13108 goto nla_put_failure;
2a0e047e 13109
bb92d199
AK		 13110 if (nl80211_send_wowlan_patterns(msg, rdev))
13111 goto nla_put_failure;
2a0e047e 13112
6abb9cb9
JB		 13113 if (nl80211_send_wowlan_tcp(msg,
13114 rdev->wiphy.wowlan_config->tcp))
2a0e047e 13115 goto nla_put_failure;
75453ccb
LC		 13116
13117 if (nl80211_send_wowlan_nd(
13118 msg,
13119 rdev->wiphy.wowlan_config->nd_config))
13120 goto nla_put_failure;
2a0e047e 13121
ff1b6e69
JB		 13122 nla_nest_end(msg, nl_wowlan);
13123 }
13124
13125 genlmsg_end(msg, hdr);
13126 return genlmsg_reply(msg, info);
13127
13128nla_put_failure:
13129 nlmsg_free(msg);
13130 return -ENOBUFS;
13131}
13132
2a0e047e
JB		 13133static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
13134 struct nlattr *attr,
13135 struct cfg80211_wowlan *trig)
13136{
13137 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
13138 struct cfg80211_wowlan_tcp *cfg;
13139 struct nl80211_wowlan_tcp_data_token *tok = NULL;
13140 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
13141 u32 size;
13142 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
13143 int err, port;
13144
964dc9e2 13145 if (!rdev->wiphy.wowlan->tcp)
2a0e047e
JB		 13146 return -EINVAL;
13147
8cb08174
JB		 13148 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TCP, attr,
13149 nl80211_wowlan_tcp_policy, NULL);
2a0e047e
JB		 13150 if (err)
13151 return err;
13152
13153 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
13154 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
13155 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
13156 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
13157 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
13158 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
13159 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
13160 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
13161 return -EINVAL;
13162
13163 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
964dc9e2 13164 if (data_size > rdev->wiphy.wowlan->tcp->data_payload_max)
2a0e047e
JB		 13165 return -EINVAL;
13166
13167 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
964dc9e2 13168 rdev->wiphy.wowlan->tcp->data_interval_max ||
723d568a 13169 nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) == 0)
2a0e047e
JB		 13170 return -EINVAL;
13171
13172 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
964dc9e2 13173 if (wake_size > rdev->wiphy.wowlan->tcp->wake_payload_max)
2a0e047e
JB		 13174 return -EINVAL;
13175
13176 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
13177 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
13178 return -EINVAL;
13179
13180 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
13181 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
13182
13183 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
13184 tokens_size = tokln - sizeof(*tok);
13185
13186 if (!tok->len || tokens_size % tok->len)
13187 return -EINVAL;
964dc9e2 13188 if (!rdev->wiphy.wowlan->tcp->tok)
2a0e047e 13189 return -EINVAL;
964dc9e2 13190 if (tok->len > rdev->wiphy.wowlan->tcp->tok->max_len)
2a0e047e 13191 return -EINVAL;
964dc9e2 13192 if (tok->len < rdev->wiphy.wowlan->tcp->tok->min_len)
2a0e047e 13193 return -EINVAL;
964dc9e2 13194 if (tokens_size > rdev->wiphy.wowlan->tcp->tok->bufsize)
2a0e047e
JB		 13195 return -EINVAL;
13196 if (tok->offset + tok->len > data_size)
13197 return -EINVAL;
13198 }
13199
13200 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
13201 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
964dc9e2 13202 if (!rdev->wiphy.wowlan->tcp->seq)
2a0e047e
JB		 13203 return -EINVAL;
13204 if (seq->len == 0 || seq->len > 4)
13205 return -EINVAL;
13206 if (seq->len + seq->offset > data_size)
13207 return -EINVAL;
13208 }
13209
13210 size = sizeof(*cfg);
13211 size += data_size;
13212 size += wake_size + wake_mask_size;
13213 size += tokens_size;
13214
13215 cfg = kzalloc(size, GFP_KERNEL);
13216 if (!cfg)
13217 return -ENOMEM;
67b61f6c
JB		 13218 cfg->src = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
13219 cfg->dst = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
2a0e047e
JB		 13220 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
13221 ETH_ALEN);
13222 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
13223 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
13224 else
13225 port = 0;
13226#ifdef CONFIG_INET
13227 /* allocate a socket and port for it and use it */
13228 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
13229 IPPROTO_TCP, &cfg->sock, 1);
13230 if (err) {
13231 kfree(cfg);
13232 return err;
13233 }
13234 if (inet_csk_get_port(cfg->sock->sk, port)) {
13235 sock_release(cfg->sock);
13236 kfree(cfg);
13237 return -EADDRINUSE;
13238 }
13239 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
13240#else
13241 if (!port) {
13242 kfree(cfg);
13243 return -EINVAL;
13244 }
13245 cfg->src_port = port;
13246#endif
13247
13248 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
13249 cfg->payload_len = data_size;
13250 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
13251 memcpy((void *)cfg->payload,
13252 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
13253 data_size);
13254 if (seq)
13255 cfg->payload_seq = *seq;
13256 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
13257 cfg->wake_len = wake_size;
13258 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
13259 memcpy((void *)cfg->wake_data,
13260 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
13261 wake_size);
13262 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
13263 data_size + wake_size;
13264 memcpy((void *)cfg->wake_mask,
13265 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
13266 wake_mask_size);
13267 if (tok) {
13268 cfg->tokens_size = tokens_size;
10d5ea5a
KC		 13269 cfg->payload_tok = *tok;
13270 memcpy(cfg->payload_tok.token_stream, tok->token_stream,
13271 tokens_size);
2a0e047e
JB		 13272 }
13273
13274 trig->tcp = cfg;
13275
13276 return 0;
13277}
13278
8cd4d456
LC		 13279static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
13280 const struct wiphy_wowlan_support *wowlan,
13281 struct nlattr *attr,
13282 struct cfg80211_wowlan *trig)
13283{
13284 struct nlattr **tb;
13285 int err;
13286
6396bb22 13287 tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
8cd4d456
LC		 13288 if (!tb)
13289 return -ENOMEM;
13290
13291 if (!(wowlan->flags & WIPHY_WOWLAN_NET_DETECT)) {
13292 err = -EOPNOTSUPP;
13293 goto out;
13294 }
13295
8cb08174
JB		 13296 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_MAX, attr,
13297 nl80211_policy, NULL);
8cd4d456
LC		 13298 if (err)
13299 goto out;
13300
aad1e812
AVS		 13301 trig->nd_config = nl80211_parse_sched_scan(&rdev->wiphy, NULL, tb,
13302 wowlan->max_nd_match_sets);
8cd4d456
LC		 13303 err = PTR_ERR_OR_ZERO(trig->nd_config);
13304 if (err)
13305 trig->nd_config = NULL;
13306
13307out:
13308 kfree(tb);
13309 return err;
13310}
13311
ff1b6e69
JB		 13312static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
13313{
13314 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13315 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 13316 struct cfg80211_wowlan new_triggers = {};
ae33bd81 13317 struct cfg80211_wowlan *ntrig;
964dc9e2 13318 const struct wiphy_wowlan_support *wowlan = rdev->wiphy.wowlan;
ff1b6e69 13319 int err, i;
6abb9cb9 13320 bool prev_enabled = rdev->wiphy.wowlan_config;
98fc4386 13321 bool regular = false;
ff1b6e69 13322
964dc9e2 13323 if (!wowlan)
ff1b6e69
JB		 13324 return -EOPNOTSUPP;
13325
ae33bd81
JB		 13326 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
13327 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 13328 rdev->wiphy.wowlan_config = NULL;
ae33bd81
JB		 13329 goto set_wakeup;
13330 }
ff1b6e69 13331
8cb08174
JB		 13332 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TRIG,
13333 info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS],
13334 nl80211_wowlan_policy, info->extack);
ff1b6e69
JB		 13335 if (err)
13336 return err;
13337
13338 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
13339 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
13340 return -EINVAL;
13341 new_triggers.any = true;
13342 }
13343
13344 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
13345 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
13346 return -EINVAL;
13347 new_triggers.disconnect = true;
98fc4386 13348 regular = true;
ff1b6e69
JB		 13349 }
13350
13351 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
13352 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
13353 return -EINVAL;
13354 new_triggers.magic_pkt = true;
98fc4386 13355 regular = true;
ff1b6e69
JB		 13356 }
13357
77dbbb13
JB		 13358 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
13359 return -EINVAL;
13360
13361 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
13362 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
13363 return -EINVAL;
13364 new_triggers.gtk_rekey_failure = true;
98fc4386 13365 regular = true;
77dbbb13
JB		 13366 }
13367
13368 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
13369 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
13370 return -EINVAL;
13371 new_triggers.eap_identity_req = true;
98fc4386 13372 regular = true;
77dbbb13
JB		 13373 }
13374
13375 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
13376 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
13377 return -EINVAL;
13378 new_triggers.four_way_handshake = true;
98fc4386 13379 regular = true;
77dbbb13
JB		 13380 }
13381
13382 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
13383 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
13384 return -EINVAL;
13385 new_triggers.rfkill_release = true;
98fc4386 13386 regular = true;
77dbbb13
JB		 13387 }
13388
ff1b6e69
JB		 13389 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
13390 struct nlattr *pat;
13391 int n_patterns = 0;
bb92d199 13392 int rem, pat_len, mask_len, pkt_offset;
50ac6607 13393 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
ff1b6e69 13394
98fc4386
JB		 13395 regular = true;
13396
ff1b6e69
JB		 13397 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
13398 rem)
13399 n_patterns++;
13400 if (n_patterns > wowlan->n_patterns)
13401 return -EINVAL;
13402
13403 new_triggers.patterns = kcalloc(n_patterns,
13404 sizeof(new_triggers.patterns[0]),
13405 GFP_KERNEL);
13406 if (!new_triggers.patterns)
13407 return -ENOMEM;
13408
13409 new_triggers.n_patterns = n_patterns;
13410 i = 0;
13411
13412 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
13413 rem) {
922bd80f
JB		 13414 u8 *mask_pat;
13415
8cb08174
JB		 13416 err = nla_parse_nested_deprecated(pat_tb,
13417 MAX_NL80211_PKTPAT,
13418 pat,
13419 nl80211_packet_pattern_policy,
13420 info->extack);
95bca62f
JB		 13421 if (err)
13422 goto error;
13423
ff1b6e69 13424 err = -EINVAL;
50ac6607
AK		 13425 if (!pat_tb[NL80211_PKTPAT_MASK] ||
13426 !pat_tb[NL80211_PKTPAT_PATTERN])
ff1b6e69 13427 goto error;
50ac6607 13428 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
ff1b6e69 13429 mask_len = DIV_ROUND_UP(pat_len, 8);
50ac6607 13430 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
ff1b6e69
JB		 13431 goto error;
13432 if (pat_len > wowlan->pattern_max_len ||
13433 pat_len < wowlan->pattern_min_len)
13434 goto error;
13435
50ac6607 13436 if (!pat_tb[NL80211_PKTPAT_OFFSET])
bb92d199
AK		 13437 pkt_offset = 0;
13438 else
13439 pkt_offset = nla_get_u32(
50ac6607 13440 pat_tb[NL80211_PKTPAT_OFFSET]);
bb92d199
AK		 13441 if (pkt_offset > wowlan->max_pkt_offset)
13442 goto error;
13443 new_triggers.patterns[i].pkt_offset = pkt_offset;
13444
922bd80f
JB		 13445 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
13446 if (!mask_pat) {
ff1b6e69
JB		 13447 err = -ENOMEM;
13448 goto error;
13449 }
922bd80f
JB		 13450 new_triggers.patterns[i].mask = mask_pat;
13451 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
ff1b6e69 13452 mask_len);
922bd80f
JB		 13453 mask_pat += mask_len;
13454 new_triggers.patterns[i].pattern = mask_pat;
ff1b6e69 13455 new_triggers.patterns[i].pattern_len = pat_len;
922bd80f 13456 memcpy(mask_pat,
50ac6607 13457 nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
ff1b6e69
JB		 13458 pat_len);
13459 i++;
13460 }
13461 }
13462
2a0e047e 13463 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
98fc4386 13464 regular = true;
2a0e047e
JB		 13465 err = nl80211_parse_wowlan_tcp(
13466 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
13467 &new_triggers);
13468 if (err)
13469 goto error;
13470 }
13471
8cd4d456 13472 if (tb[NL80211_WOWLAN_TRIG_NET_DETECT]) {
98fc4386 13473 regular = true;
8cd4d456
LC		 13474 err = nl80211_parse_wowlan_nd(
13475 rdev, wowlan, tb[NL80211_WOWLAN_TRIG_NET_DETECT],
13476 &new_triggers);
13477 if (err)
13478 goto error;
13479 }
13480
98fc4386
JB		 13481 /* The 'any' trigger means the device continues operating more or less
13482 * as in its normal operation mode and wakes up the host on most of the
13483 * normal interrupts (like packet RX, ...)
13484 * It therefore makes little sense to combine with the more constrained
13485 * wakeup trigger modes.
13486 */
13487 if (new_triggers.any && regular) {
13488 err = -EINVAL;
13489 goto error;
13490 }
13491
ae33bd81
JB		 13492 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
13493 if (!ntrig) {
13494 err = -ENOMEM;
13495 goto error;
ff1b6e69 13496 }
ae33bd81 13497 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 13498 rdev->wiphy.wowlan_config = ntrig;
ff1b6e69 13499
ae33bd81 13500 set_wakeup:
6abb9cb9
JB		 13501 if (rdev->ops->set_wakeup &&
13502 prev_enabled != !!rdev->wiphy.wowlan_config)
13503 rdev_set_wakeup(rdev, rdev->wiphy.wowlan_config);
6d52563f 13504
ff1b6e69
JB		 13505 return 0;
13506 error:
13507 for (i = 0; i < new_triggers.n_patterns; i++)
13508 kfree(new_triggers.patterns[i].mask);
13509 kfree(new_triggers.patterns);
2a0e047e
JB		 13510 if (new_triggers.tcp && new_triggers.tcp->sock)
13511 sock_release(new_triggers.tcp->sock);
13512 kfree(new_triggers.tcp);
e5dbe070 13513 kfree(new_triggers.nd_config);
ff1b6e69
JB		 13514 return err;
13515}
dfb89c56 13516#endif
ff1b6e69 13517
be29b99a
AK		 13518static int nl80211_send_coalesce_rules(struct sk_buff *msg,
13519 struct cfg80211_registered_device *rdev)
13520{
13521 struct nlattr *nl_pats, *nl_pat, *nl_rule, *nl_rules;
13522 int i, j, pat_len;
13523 struct cfg80211_coalesce_rules *rule;
13524
13525 if (!rdev->coalesce->n_rules)
13526 return 0;
13527
ae0be8de 13528 nl_rules = nla_nest_start_noflag(msg, NL80211_ATTR_COALESCE_RULE);
be29b99a
AK		 13529 if (!nl_rules)
13530 return -ENOBUFS;
13531
13532 for (i = 0; i < rdev->coalesce->n_rules; i++) {
ae0be8de 13533 nl_rule = nla_nest_start_noflag(msg, i + 1);
be29b99a
AK		 13534 if (!nl_rule)
13535 return -ENOBUFS;
13536
13537 rule = &rdev->coalesce->rules[i];
13538 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_DELAY,
13539 rule->delay))
13540 return -ENOBUFS;
13541
13542 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_CONDITION,
13543 rule->condition))
13544 return -ENOBUFS;
13545
ae0be8de
MK		 13546 nl_pats = nla_nest_start_noflag(msg,
13547 NL80211_ATTR_COALESCE_RULE_PKT_PATTERN);
be29b99a
AK		 13548 if (!nl_pats)
13549 return -ENOBUFS;
13550
13551 for (j = 0; j < rule->n_patterns; j++) {
ae0be8de 13552 nl_pat = nla_nest_start_noflag(msg, j + 1);
be29b99a
AK		 13553 if (!nl_pat)
13554 return -ENOBUFS;
13555 pat_len = rule->patterns[j].pattern_len;
13556 if (nla_put(msg, NL80211_PKTPAT_MASK,
13557 DIV_ROUND_UP(pat_len, 8),
13558 rule->patterns[j].mask) ||
13559 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
13560 rule->patterns[j].pattern) ||
13561 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
13562 rule->patterns[j].pkt_offset))
13563 return -ENOBUFS;
13564 nla_nest_end(msg, nl_pat);
13565 }
13566 nla_nest_end(msg, nl_pats);
13567 nla_nest_end(msg, nl_rule);
13568 }
13569 nla_nest_end(msg, nl_rules);
13570
13571 return 0;
13572}
13573
13574static int nl80211_get_coalesce(struct sk_buff *skb, struct genl_info *info)
13575{
13576 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13577 struct sk_buff *msg;
13578 void *hdr;
13579
13580 if (!rdev->wiphy.coalesce)
13581 return -EOPNOTSUPP;
13582
13583 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13584 if (!msg)
13585 return -ENOMEM;
13586
13587 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13588 NL80211_CMD_GET_COALESCE);
13589 if (!hdr)
13590 goto nla_put_failure;
13591
13592 if (rdev->coalesce && nl80211_send_coalesce_rules(msg, rdev))
13593 goto nla_put_failure;
13594
13595 genlmsg_end(msg, hdr);
13596 return genlmsg_reply(msg, info);
13597
13598nla_put_failure:
13599 nlmsg_free(msg);
13600 return -ENOBUFS;
13601}
13602
13603void cfg80211_rdev_free_coalesce(struct cfg80211_registered_device *rdev)
13604{
13605 struct cfg80211_coalesce *coalesce = rdev->coalesce;
13606 int i, j;
13607 struct cfg80211_coalesce_rules *rule;
13608
13609 if (!coalesce)
13610 return;
13611
13612 for (i = 0; i < coalesce->n_rules; i++) {
13613 rule = &coalesce->rules[i];
13614 for (j = 0; j < rule->n_patterns; j++)
13615 kfree(rule->patterns[j].mask);
13616 kfree(rule->patterns);
13617 }
13618 kfree(coalesce->rules);
13619 kfree(coalesce);
13620 rdev->coalesce = NULL;
13621}
13622
13623static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
13624 struct nlattr *rule,
13625 struct cfg80211_coalesce_rules *new_rule)
13626{
13627 int err, i;
13628 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
13629 struct nlattr *tb[NUM_NL80211_ATTR_COALESCE_RULE], *pat;
13630 int rem, pat_len, mask_len, pkt_offset, n_patterns = 0;
13631 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
13632
8cb08174
JB		 13633 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_COALESCE_RULE_MAX,
13634 rule, nl80211_coalesce_policy, NULL);
be29b99a
AK		 13635 if (err)
13636 return err;
13637
13638 if (tb[NL80211_ATTR_COALESCE_RULE_DELAY])
13639 new_rule->delay =
13640 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_DELAY]);
13641 if (new_rule->delay > coalesce->max_delay)
13642 return -EINVAL;
13643
13644 if (tb[NL80211_ATTR_COALESCE_RULE_CONDITION])
13645 new_rule->condition =
13646 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_CONDITION]);
be29b99a
AK		 13647
13648 if (!tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN])
13649 return -EINVAL;
13650
13651 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
13652 rem)
13653 n_patterns++;
13654 if (n_patterns > coalesce->n_patterns)
13655 return -EINVAL;
13656
13657 new_rule->patterns = kcalloc(n_patterns, sizeof(new_rule->patterns[0]),
13658 GFP_KERNEL);
13659 if (!new_rule->patterns)
13660 return -ENOMEM;
13661
13662 new_rule->n_patterns = n_patterns;
13663 i = 0;
13664
13665 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
13666 rem) {
922bd80f
JB		 13667 u8 *mask_pat;
13668
8cb08174
JB		 13669 err = nla_parse_nested_deprecated(pat_tb, MAX_NL80211_PKTPAT,
13670 pat,
13671 nl80211_packet_pattern_policy,
13672 NULL);
95bca62f
JB		 13673 if (err)
13674 return err;
13675
be29b99a
AK		 13676 if (!pat_tb[NL80211_PKTPAT_MASK] ||
13677 !pat_tb[NL80211_PKTPAT_PATTERN])
13678 return -EINVAL;
13679 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
13680 mask_len = DIV_ROUND_UP(pat_len, 8);
13681 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
13682 return -EINVAL;
13683 if (pat_len > coalesce->pattern_max_len ||
13684 pat_len < coalesce->pattern_min_len)
13685 return -EINVAL;
13686
13687 if (!pat_tb[NL80211_PKTPAT_OFFSET])
13688 pkt_offset = 0;
13689 else
13690 pkt_offset = nla_get_u32(pat_tb[NL80211_PKTPAT_OFFSET]);
13691 if (pkt_offset > coalesce->max_pkt_offset)
13692 return -EINVAL;
13693 new_rule->patterns[i].pkt_offset = pkt_offset;
13694
922bd80f
JB		 13695 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
13696 if (!mask_pat)
be29b99a 13697 return -ENOMEM;
922bd80f
JB		 13698
13699 new_rule->patterns[i].mask = mask_pat;
13700 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
13701 mask_len);
13702
13703 mask_pat += mask_len;
13704 new_rule->patterns[i].pattern = mask_pat;
be29b99a 13705 new_rule->patterns[i].pattern_len = pat_len;
922bd80f
JB		 13706 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
13707 pat_len);
be29b99a
AK		 13708 i++;
13709 }
13710
13711 return 0;
13712}
13713
13714static int nl80211_set_coalesce(struct sk_buff *skb, struct genl_info *info)
13715{
13716 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13717 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
13718 struct cfg80211_coalesce new_coalesce = {};
13719 struct cfg80211_coalesce *n_coalesce;
13720 int err, rem_rule, n_rules = 0, i, j;
13721 struct nlattr *rule;
13722 struct cfg80211_coalesce_rules *tmp_rule;
13723
13724 if (!rdev->wiphy.coalesce || !rdev->ops->set_coalesce)
13725 return -EOPNOTSUPP;
13726
13727 if (!info->attrs[NL80211_ATTR_COALESCE_RULE]) {
13728 cfg80211_rdev_free_coalesce(rdev);
a1056b1b 13729 rdev_set_coalesce(rdev, NULL);
be29b99a
AK		 13730 return 0;
13731 }
13732
13733 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
13734 rem_rule)
13735 n_rules++;
13736 if (n_rules > coalesce->n_rules)
13737 return -EINVAL;
13738
13739 new_coalesce.rules = kcalloc(n_rules, sizeof(new_coalesce.rules[0]),
13740 GFP_KERNEL);
13741 if (!new_coalesce.rules)
13742 return -ENOMEM;
13743
13744 new_coalesce.n_rules = n_rules;
13745 i = 0;
13746
13747 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
13748 rem_rule) {
13749 err = nl80211_parse_coalesce_rule(rdev, rule,
13750 &new_coalesce.rules[i]);
13751 if (err)
13752 goto error;
13753
13754 i++;
13755 }
13756
a1056b1b 13757 err = rdev_set_coalesce(rdev, &new_coalesce);
be29b99a
AK		 13758 if (err)
13759 goto error;
13760
13761 n_coalesce = kmemdup(&new_coalesce, sizeof(new_coalesce), GFP_KERNEL);
13762 if (!n_coalesce) {
13763 err = -ENOMEM;
13764 goto error;
13765 }
13766 cfg80211_rdev_free_coalesce(rdev);
13767 rdev->coalesce = n_coalesce;
13768
13769 return 0;
13770error:
13771 for (i = 0; i < new_coalesce.n_rules; i++) {
13772 tmp_rule = &new_coalesce.rules[i];
13773 for (j = 0; j < tmp_rule->n_patterns; j++)
13774 kfree(tmp_rule->patterns[j].mask);
13775 kfree(tmp_rule->patterns);
13776 }
13777 kfree(new_coalesce.rules);
13778
13779 return err;
13780}
13781
e5497d76
JB		 13782static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
13783{
13784 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13785 struct net_device *dev = info->user_ptr[1];
13786 struct wireless_dev *wdev = dev->ieee80211_ptr;
13787 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
f495acd8 13788 struct cfg80211_gtk_rekey_data rekey_data = {};
e5497d76
JB		 13789 int err;
13790
13791 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
13792 return -EINVAL;
13793
8cb08174
JB		 13794 err = nla_parse_nested_deprecated(tb, MAX_NL80211_REKEY_DATA,
13795 info->attrs[NL80211_ATTR_REKEY_DATA],
13796 nl80211_rekey_policy, info->extack);
e5497d76
JB		 13797 if (err)
13798 return err;
13799
e785fa0a
VD		 13800 if (!tb[NL80211_REKEY_DATA_REPLAY_CTR] || !tb[NL80211_REKEY_DATA_KEK] ||
13801 !tb[NL80211_REKEY_DATA_KCK])
13802 return -EINVAL;
093a48d2
NE		 13803 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN &&
13804 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
13805 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KEK_EXT_LEN))
e5497d76 13806 return -ERANGE;
093a48d2
NE		 13807 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN &&
13808 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
13809 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KCK_EXT_LEN))
e5497d76
JB		 13810 return -ERANGE;
13811
78f686ca
JB		 13812 rekey_data.kek = nla_data(tb[NL80211_REKEY_DATA_KEK]);
13813 rekey_data.kck = nla_data(tb[NL80211_REKEY_DATA_KCK]);
13814 rekey_data.replay_ctr = nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]);
093a48d2
NE		 13815 rekey_data.kek_len = nla_len(tb[NL80211_REKEY_DATA_KEK]);
13816 rekey_data.kck_len = nla_len(tb[NL80211_REKEY_DATA_KCK]);
13817 if (tb[NL80211_REKEY_DATA_AKM])
13818 rekey_data.akm = nla_get_u32(tb[NL80211_REKEY_DATA_AKM]);
e5497d76
JB		 13819
13820 wdev_lock(wdev);
7b0a0e3c 13821 if (!wdev->connected) {
e5497d76
JB		 13822 err = -ENOTCONN;
13823 goto out;
13824 }
13825
13826 if (!rdev->ops->set_rekey_data) {
13827 err = -EOPNOTSUPP;
13828 goto out;
13829 }
13830
e35e4d28 13831 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 13832 out:
13833 wdev_unlock(wdev);
13834 return err;
13835}
13836
28946da7
JB		 13837static int nl80211_register_unexpected_frame(struct sk_buff *skb,
13838 struct genl_info *info)
13839{
13840 struct net_device *dev = info->user_ptr[1];
13841 struct wireless_dev *wdev = dev->ieee80211_ptr;
13842
13843 if (wdev->iftype != NL80211_IFTYPE_AP &&
13844 wdev->iftype != NL80211_IFTYPE_P2P_GO)
13845 return -EINVAL;
13846
15e47304 13847 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 13848 return -EBUSY;
13849
15e47304 13850 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 13851 return 0;
13852}
13853
7f6cf311
JB		 13854static int nl80211_probe_client(struct sk_buff *skb,
13855 struct genl_info *info)
13856{
13857 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13858 struct net_device *dev = info->user_ptr[1];
13859 struct wireless_dev *wdev = dev->ieee80211_ptr;
13860 struct sk_buff *msg;
13861 void *hdr;
13862 const u8 *addr;
13863 u64 cookie;
13864 int err;
13865
13866 if (wdev->iftype != NL80211_IFTYPE_AP &&
13867 wdev->iftype != NL80211_IFTYPE_P2P_GO)
13868 return -EOPNOTSUPP;
13869
13870 if (!info->attrs[NL80211_ATTR_MAC])
13871 return -EINVAL;
13872
13873 if (!rdev->ops->probe_client)
13874 return -EOPNOTSUPP;
13875
13876 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13877 if (!msg)
13878 return -ENOMEM;
13879
15e47304 13880 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311 13881 NL80211_CMD_PROBE_CLIENT);
cb35fba3
DC		 13882 if (!hdr) {
13883 err = -ENOBUFS;
7f6cf311
JB		 13884 goto free_msg;
13885 }
13886
13887 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
13888
e35e4d28 13889 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 13890 if (err)
13891 goto free_msg;
13892
2dad624e
ND		 13893 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
13894 NL80211_ATTR_PAD))
9360ffd1 13895 goto nla_put_failure;
7f6cf311
JB		 13896
13897 genlmsg_end(msg, hdr);
13898
13899 return genlmsg_reply(msg, info);
13900
13901 nla_put_failure:
13902 err = -ENOBUFS;
13903 free_msg:
13904 nlmsg_free(msg);
13905 return err;
13906}
13907
5e760230
JB		 13908static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
13909{
13910 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 13911 struct cfg80211_beacon_registration *reg, *nreg;
13912 int rv;
5e760230
JB		 13913
13914 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
13915 return -EOPNOTSUPP;
13916
37c73b5f
BG		 13917 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
13918 if (!nreg)
13919 return -ENOMEM;
13920
13921 /* First, check if already registered. */
13922 spin_lock_bh(&rdev->beacon_registrations_lock);
13923 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
13924 if (reg->nlportid == info->snd_portid) {
13925 rv = -EALREADY;
13926 goto out_err;
13927 }
13928 }
13929 /* Add it to the list */
13930 nreg->nlportid = info->snd_portid;
13931 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 13932
37c73b5f 13933 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 13934
13935 return 0;
37c73b5f
BG		 13936out_err:
13937 spin_unlock_bh(&rdev->beacon_registrations_lock);
13938 kfree(nreg);
13939 return rv;
5e760230
JB		 13940}
13941
98104fde
JB		 13942static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
13943{
13944 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13945 struct wireless_dev *wdev = info->user_ptr[1];
13946 int err;
13947
13948 if (!rdev->ops->start_p2p_device)
13949 return -EOPNOTSUPP;
13950
13951 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
13952 return -EOPNOTSUPP;
13953
73c7da3d 13954 if (wdev_running(wdev))
98104fde
JB		 13955 return 0;
13956
358ae888 13957 if (rfkill_blocked(rdev->wiphy.rfkill))
b6a55015 13958 return -ERFKILL;
98104fde 13959
eeb126e9 13960 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 13961 if (err)
13962 return err;
13963
73c7da3d 13964 wdev->is_running = true;
98104fde 13965 rdev->opencount++;
98104fde
JB		 13966
13967 return 0;
13968}
13969
13970static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
13971{
13972 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13973 struct wireless_dev *wdev = info->user_ptr[1];
13974
13975 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
13976 return -EOPNOTSUPP;
13977
13978 if (!rdev->ops->stop_p2p_device)
13979 return -EOPNOTSUPP;
13980
f9f47529 13981 cfg80211_stop_p2p_device(rdev, wdev);
98104fde
JB		 13982
13983 return 0;
13984}
13985
cb3b7d87
AB		 13986static int nl80211_start_nan(struct sk_buff *skb, struct genl_info *info)
13987{
13988 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13989 struct wireless_dev *wdev = info->user_ptr[1];
13990 struct cfg80211_nan_conf conf = {};
13991 int err;
13992
13993 if (wdev->iftype != NL80211_IFTYPE_NAN)
13994 return -EOPNOTSUPP;
13995
eeb04a96 13996 if (wdev_running(wdev))
cb3b7d87
AB		 13997 return -EEXIST;
13998
358ae888 13999 if (rfkill_blocked(rdev->wiphy.rfkill))
cb3b7d87
AB		 14000 return -ERFKILL;
14001
14002 if (!info->attrs[NL80211_ATTR_NAN_MASTER_PREF])
14003 return -EINVAL;
14004
cb3b7d87
AB		 14005 conf.master_pref =
14006 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
cb3b7d87 14007
8585989d
LC		 14008 if (info->attrs[NL80211_ATTR_BANDS]) {
14009 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
14010
14011 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
14012 return -EOPNOTSUPP;
14013
14014 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
14015 return -EINVAL;
14016
14017 conf.bands = bands;
14018 }
cb3b7d87
AB		 14019
14020 err = rdev_start_nan(rdev, wdev, &conf);
14021 if (err)
14022 return err;
14023
73c7da3d 14024 wdev->is_running = true;
cb3b7d87
AB		 14025 rdev->opencount++;
14026
14027 return 0;
14028}
14029
14030static int nl80211_stop_nan(struct sk_buff *skb, struct genl_info *info)
14031{
14032 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14033 struct wireless_dev *wdev = info->user_ptr[1];
14034
14035 if (wdev->iftype != NL80211_IFTYPE_NAN)
14036 return -EOPNOTSUPP;
14037
14038 cfg80211_stop_nan(rdev, wdev);
14039
14040 return 0;
14041}
14042
a442b761
AB		 14043static int validate_nan_filter(struct nlattr *filter_attr)
14044{
14045 struct nlattr *attr;
14046 int len = 0, n_entries = 0, rem;
14047
14048 nla_for_each_nested(attr, filter_attr, rem) {
14049 len += nla_len(attr);
14050 n_entries++;
14051 }
14052
14053 if (len >= U8_MAX)
14054 return -EINVAL;
14055
14056 return n_entries;
14057}
14058
14059static int handle_nan_filter(struct nlattr *attr_filter,
14060 struct cfg80211_nan_func *func,
14061 bool tx)
14062{
14063 struct nlattr *attr;
14064 int n_entries, rem, i;
14065 struct cfg80211_nan_func_filter *filter;
14066
14067 n_entries = validate_nan_filter(attr_filter);
14068 if (n_entries < 0)
14069 return n_entries;
14070
14071 BUILD_BUG_ON(sizeof(*func->rx_filters) != sizeof(*func->tx_filters));
14072
14073 filter = kcalloc(n_entries, sizeof(*func->rx_filters), GFP_KERNEL);
14074 if (!filter)
14075 return -ENOMEM;
14076
14077 i = 0;
14078 nla_for_each_nested(attr, attr_filter, rem) {
b15ca182 14079 filter[i].filter = nla_memdup(attr, GFP_KERNEL);
6ad27f52
JJ		 14080 if (!filter[i].filter)
14081 goto err;
14082
a442b761
AB		 14083 filter[i].len = nla_len(attr);
14084 i++;
14085 }
14086 if (tx) {
14087 func->num_tx_filters = n_entries;
14088 func->tx_filters = filter;
14089 } else {
14090 func->num_rx_filters = n_entries;
14091 func->rx_filters = filter;
14092 }
14093
14094 return 0;
6ad27f52
JJ		 14095
14096err:
14097 i = 0;
14098 nla_for_each_nested(attr, attr_filter, rem) {
14099 kfree(filter[i].filter);
14100 i++;
14101 }
14102 kfree(filter);
14103 return -ENOMEM;
a442b761
AB		 14104}
14105
14106static int nl80211_nan_add_func(struct sk_buff *skb,
14107 struct genl_info *info)
14108{
14109 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14110 struct wireless_dev *wdev = info->user_ptr[1];
14111 struct nlattr *tb[NUM_NL80211_NAN_FUNC_ATTR], *func_attr;
14112 struct cfg80211_nan_func *func;
14113 struct sk_buff *msg = NULL;
14114 void *hdr = NULL;
14115 int err = 0;
14116
14117 if (wdev->iftype != NL80211_IFTYPE_NAN)
14118 return -EOPNOTSUPP;
14119
73c7da3d 14120 if (!wdev_running(wdev))
a442b761
AB		 14121 return -ENOTCONN;
14122
14123 if (!info->attrs[NL80211_ATTR_NAN_FUNC])
14124 return -EINVAL;
14125
8cb08174
JB		 14126 err = nla_parse_nested_deprecated(tb, NL80211_NAN_FUNC_ATTR_MAX,
14127 info->attrs[NL80211_ATTR_NAN_FUNC],
14128 nl80211_nan_func_policy,
14129 info->extack);
a442b761
AB		 14130 if (err)
14131 return err;
14132
14133 func = kzalloc(sizeof(*func), GFP_KERNEL);
14134 if (!func)
14135 return -ENOMEM;
14136
b60ad348 14137 func->cookie = cfg80211_assign_cookie(rdev);
a442b761 14138
cb9abd48 14139 if (!tb[NL80211_NAN_FUNC_TYPE]) {
a442b761
AB		 14140 err = -EINVAL;
14141 goto out;
14142 }
14143
14144
14145 func->type = nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]);
14146
14147 if (!tb[NL80211_NAN_FUNC_SERVICE_ID]) {
14148 err = -EINVAL;
14149 goto out;
14150 }
14151
14152 memcpy(func->service_id, nla_data(tb[NL80211_NAN_FUNC_SERVICE_ID]),
14153 sizeof(func->service_id));
14154
14155 func->close_range =
14156 nla_get_flag(tb[NL80211_NAN_FUNC_CLOSE_RANGE]);
14157
14158 if (tb[NL80211_NAN_FUNC_SERVICE_INFO]) {
14159 func->serv_spec_info_len =
14160 nla_len(tb[NL80211_NAN_FUNC_SERVICE_INFO]);
14161 func->serv_spec_info =
14162 kmemdup(nla_data(tb[NL80211_NAN_FUNC_SERVICE_INFO]),
14163 func->serv_spec_info_len,
14164 GFP_KERNEL);
14165 if (!func->serv_spec_info) {
14166 err = -ENOMEM;
14167 goto out;
14168 }
14169 }
14170
14171 if (tb[NL80211_NAN_FUNC_TTL])
14172 func->ttl = nla_get_u32(tb[NL80211_NAN_FUNC_TTL]);
14173
14174 switch (func->type) {
14175 case NL80211_NAN_FUNC_PUBLISH:
14176 if (!tb[NL80211_NAN_FUNC_PUBLISH_TYPE]) {
14177 err = -EINVAL;
14178 goto out;
14179 }
14180
14181 func->publish_type =
14182 nla_get_u8(tb[NL80211_NAN_FUNC_PUBLISH_TYPE]);
14183 func->publish_bcast =
14184 nla_get_flag(tb[NL80211_NAN_FUNC_PUBLISH_BCAST]);
14185
14186 if ((!(func->publish_type & NL80211_NAN_SOLICITED_PUBLISH)) &&
14187 func->publish_bcast) {
14188 err = -EINVAL;
14189 goto out;
14190 }
14191 break;
14192 case NL80211_NAN_FUNC_SUBSCRIBE:
14193 func->subscribe_active =
14194 nla_get_flag(tb[NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE]);
14195 break;
14196 case NL80211_NAN_FUNC_FOLLOW_UP:
14197 if (!tb[NL80211_NAN_FUNC_FOLLOW_UP_ID] ||
3ea15452
HC		 14198 !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] ||
14199 !tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]) {
a442b761
AB		 14200 err = -EINVAL;
14201 goto out;
14202 }
14203
14204 func->followup_id =
14205 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_ID]);
14206 func->followup_reqid =
14207 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID]);
14208 memcpy(func->followup_dest.addr,
14209 nla_data(tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]),
14210 sizeof(func->followup_dest.addr));
14211 if (func->ttl) {
14212 err = -EINVAL;
14213 goto out;
14214 }
14215 break;
14216 default:
14217 err = -EINVAL;
14218 goto out;
14219 }
14220
14221 if (tb[NL80211_NAN_FUNC_SRF]) {
14222 struct nlattr *srf_tb[NUM_NL80211_NAN_SRF_ATTR];
14223
8cb08174
JB		 14224 err = nla_parse_nested_deprecated(srf_tb,
14225 NL80211_NAN_SRF_ATTR_MAX,
14226 tb[NL80211_NAN_FUNC_SRF],
14227 nl80211_nan_srf_policy,
14228 info->extack);
a442b761
AB		 14229 if (err)
14230 goto out;
14231
14232 func->srf_include =
14233 nla_get_flag(srf_tb[NL80211_NAN_SRF_INCLUDE]);
14234
14235 if (srf_tb[NL80211_NAN_SRF_BF]) {
14236 if (srf_tb[NL80211_NAN_SRF_MAC_ADDRS] ||
14237 !srf_tb[NL80211_NAN_SRF_BF_IDX]) {
14238 err = -EINVAL;
14239 goto out;
14240 }
14241
14242 func->srf_bf_len =
14243 nla_len(srf_tb[NL80211_NAN_SRF_BF]);
14244 func->srf_bf =
14245 kmemdup(nla_data(srf_tb[NL80211_NAN_SRF_BF]),
14246 func->srf_bf_len, GFP_KERNEL);
14247 if (!func->srf_bf) {
14248 err = -ENOMEM;
14249 goto out;
14250 }
14251
14252 func->srf_bf_idx =
14253 nla_get_u8(srf_tb[NL80211_NAN_SRF_BF_IDX]);
14254 } else {
14255 struct nlattr *attr, *mac_attr =
14256 srf_tb[NL80211_NAN_SRF_MAC_ADDRS];
14257 int n_entries, rem, i = 0;
14258
14259 if (!mac_attr) {
14260 err = -EINVAL;
14261 goto out;
14262 }
14263
14264 n_entries = validate_acl_mac_addrs(mac_attr);
14265 if (n_entries <= 0) {
14266 err = -EINVAL;
14267 goto out;
14268 }
14269
14270 func->srf_num_macs = n_entries;
14271 func->srf_macs =
6396bb22 14272 kcalloc(n_entries, sizeof(*func->srf_macs),
a442b761
AB		 14273 GFP_KERNEL);
14274 if (!func->srf_macs) {
14275 err = -ENOMEM;
14276 goto out;
14277 }
14278
14279 nla_for_each_nested(attr, mac_attr, rem)
14280 memcpy(func->srf_macs[i++].addr, nla_data(attr),
14281 sizeof(*func->srf_macs));
14282 }
14283 }
14284
14285 if (tb[NL80211_NAN_FUNC_TX_MATCH_FILTER]) {
14286 err = handle_nan_filter(tb[NL80211_NAN_FUNC_TX_MATCH_FILTER],
14287 func, true);
14288 if (err)
14289 goto out;
14290 }
14291
14292 if (tb[NL80211_NAN_FUNC_RX_MATCH_FILTER]) {
14293 err = handle_nan_filter(tb[NL80211_NAN_FUNC_RX_MATCH_FILTER],
14294 func, false);
14295 if (err)
14296 goto out;
14297 }
14298
14299 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14300 if (!msg) {
14301 err = -ENOMEM;
14302 goto out;
14303 }
14304
14305 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14306 NL80211_CMD_ADD_NAN_FUNCTION);
14307 /* This can't really happen - we just allocated 4KB */
14308 if (WARN_ON(!hdr)) {
14309 err = -ENOMEM;
14310 goto out;
14311 }
14312
14313 err = rdev_add_nan_func(rdev, wdev, func);
14314out:
14315 if (err < 0) {
14316 cfg80211_free_nan_func(func);
14317 nlmsg_free(msg);
14318 return err;
14319 }
14320
14321 /* propagate the instance id and cookie to userspace */
14322 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, func->cookie,
14323 NL80211_ATTR_PAD))
14324 goto nla_put_failure;
14325
ae0be8de 14326 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
a442b761
AB		 14327 if (!func_attr)
14328 goto nla_put_failure;
14329
14330 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID,
14331 func->instance_id))
14332 goto nla_put_failure;
14333
14334 nla_nest_end(msg, func_attr);
14335
14336 genlmsg_end(msg, hdr);
14337 return genlmsg_reply(msg, info);
14338
14339nla_put_failure:
14340 nlmsg_free(msg);
14341 return -ENOBUFS;
14342}
14343
14344static int nl80211_nan_del_func(struct sk_buff *skb,
14345 struct genl_info *info)
14346{
14347 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14348 struct wireless_dev *wdev = info->user_ptr[1];
14349 u64 cookie;
14350
14351 if (wdev->iftype != NL80211_IFTYPE_NAN)
14352 return -EOPNOTSUPP;
14353
73c7da3d 14354 if (!wdev_running(wdev))
a442b761
AB		 14355 return -ENOTCONN;
14356
14357 if (!info->attrs[NL80211_ATTR_COOKIE])
14358 return -EINVAL;
14359
a442b761
AB		 14360 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
14361
14362 rdev_del_nan_func(rdev, wdev, cookie);
14363
14364 return 0;
14365}
14366
a5a9dcf2
AB		 14367static int nl80211_nan_change_config(struct sk_buff *skb,
14368 struct genl_info *info)
14369{
14370 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14371 struct wireless_dev *wdev = info->user_ptr[1];
14372 struct cfg80211_nan_conf conf = {};
14373 u32 changed = 0;
14374
14375 if (wdev->iftype != NL80211_IFTYPE_NAN)
14376 return -EOPNOTSUPP;
14377
73c7da3d 14378 if (!wdev_running(wdev))
a5a9dcf2
AB		 14379 return -ENOTCONN;
14380
14381 if (info->attrs[NL80211_ATTR_NAN_MASTER_PREF]) {
14382 conf.master_pref =
14383 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
14384 if (conf.master_pref <= 1 || conf.master_pref == 255)
14385 return -EINVAL;
14386
14387 changed |= CFG80211_NAN_CONF_CHANGED_PREF;
14388 }
14389
8585989d
LC		 14390 if (info->attrs[NL80211_ATTR_BANDS]) {
14391 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
14392
14393 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
14394 return -EOPNOTSUPP;
14395
14396 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
14397 return -EINVAL;
14398
14399 conf.bands = bands;
14400 changed |= CFG80211_NAN_CONF_CHANGED_BANDS;
a5a9dcf2
AB		 14401 }
14402
14403 if (!changed)
14404 return -EINVAL;
14405
14406 return rdev_nan_change_conf(rdev, wdev, &conf, changed);
14407}
14408
50bcd31d
AB		 14409void cfg80211_nan_match(struct wireless_dev *wdev,
14410 struct cfg80211_nan_match_params *match, gfp_t gfp)
14411{
14412 struct wiphy *wiphy = wdev->wiphy;
14413 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14414 struct nlattr *match_attr, *local_func_attr, *peer_func_attr;
14415 struct sk_buff *msg;
14416 void *hdr;
14417
14418 if (WARN_ON(!match->inst_id || !match->peer_inst_id || !match->addr))
14419 return;
14420
14421 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
14422 if (!msg)
14423 return;
14424
14425 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NAN_MATCH);
14426 if (!hdr) {
14427 nlmsg_free(msg);
14428 return;
14429 }
14430
14431 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
14432 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
14433 wdev->netdev->ifindex)) ||
14434 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
14435 NL80211_ATTR_PAD))
14436 goto nla_put_failure;
14437
14438 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, match->cookie,
14439 NL80211_ATTR_PAD) ||
14440 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, match->addr))
14441 goto nla_put_failure;
14442
ae0be8de 14443 match_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_MATCH);
50bcd31d
AB		 14444 if (!match_attr)
14445 goto nla_put_failure;
14446
ae0be8de
MK		 14447 local_func_attr = nla_nest_start_noflag(msg,
14448 NL80211_NAN_MATCH_FUNC_LOCAL);
50bcd31d
AB		 14449 if (!local_func_attr)
14450 goto nla_put_failure;
14451
14452 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->inst_id))
14453 goto nla_put_failure;
14454
14455 nla_nest_end(msg, local_func_attr);
14456
ae0be8de
MK		 14457 peer_func_attr = nla_nest_start_noflag(msg,
14458 NL80211_NAN_MATCH_FUNC_PEER);
50bcd31d
AB		 14459 if (!peer_func_attr)
14460 goto nla_put_failure;
14461
14462 if (nla_put_u8(msg, NL80211_NAN_FUNC_TYPE, match->type) ||
14463 nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->peer_inst_id))
14464 goto nla_put_failure;
14465
14466 if (match->info && match->info_len &&
14467 nla_put(msg, NL80211_NAN_FUNC_SERVICE_INFO, match->info_len,
14468 match->info))
14469 goto nla_put_failure;
14470
14471 nla_nest_end(msg, peer_func_attr);
14472 nla_nest_end(msg, match_attr);
14473 genlmsg_end(msg, hdr);
14474
14475 if (!wdev->owner_nlportid)
14476 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
14477 msg, 0, NL80211_MCGRP_NAN, gfp);
14478 else
14479 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
14480 wdev->owner_nlportid);
14481
14482 return;
14483
14484nla_put_failure:
14485 nlmsg_free(msg);
14486}
14487EXPORT_SYMBOL(cfg80211_nan_match);
14488
368e5a7b
AB		 14489void cfg80211_nan_func_terminated(struct wireless_dev *wdev,
14490 u8 inst_id,
14491 enum nl80211_nan_func_term_reason reason,
14492 u64 cookie, gfp_t gfp)
14493{
14494 struct wiphy *wiphy = wdev->wiphy;
14495 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14496 struct sk_buff *msg;
14497 struct nlattr *func_attr;
14498 void *hdr;
14499
14500 if (WARN_ON(!inst_id))
14501 return;
14502
14503 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
14504 if (!msg)
14505 return;
14506
14507 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_NAN_FUNCTION);
14508 if (!hdr) {
14509 nlmsg_free(msg);
14510 return;
14511 }
14512
14513 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
14514 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
14515 wdev->netdev->ifindex)) ||
14516 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
14517 NL80211_ATTR_PAD))
14518 goto nla_put_failure;
14519
14520 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
14521 NL80211_ATTR_PAD))
14522 goto nla_put_failure;
14523
ae0be8de 14524 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
368e5a7b
AB		 14525 if (!func_attr)
14526 goto nla_put_failure;
14527
14528 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, inst_id) ||
14529 nla_put_u8(msg, NL80211_NAN_FUNC_TERM_REASON, reason))
14530 goto nla_put_failure;
14531
14532 nla_nest_end(msg, func_attr);
14533 genlmsg_end(msg, hdr);
14534
14535 if (!wdev->owner_nlportid)
14536 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
14537 msg, 0, NL80211_MCGRP_NAN, gfp);
14538 else
14539 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
14540 wdev->owner_nlportid);
14541
14542 return;
14543
14544nla_put_failure:
14545 nlmsg_free(msg);
14546}
14547EXPORT_SYMBOL(cfg80211_nan_func_terminated);
14548
3713b4e3
JB		 14549static int nl80211_get_protocol_features(struct sk_buff *skb,
14550 struct genl_info *info)
14551{
14552 void *hdr;
14553 struct sk_buff *msg;
14554
14555 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14556 if (!msg)
14557 return -ENOMEM;
14558
14559 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14560 NL80211_CMD_GET_PROTOCOL_FEATURES);
14561 if (!hdr)
14562 goto nla_put_failure;
14563
14564 if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
14565 NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
14566 goto nla_put_failure;
14567
14568 genlmsg_end(msg, hdr);
14569 return genlmsg_reply(msg, info);
14570
14571 nla_put_failure:
14572 kfree_skb(msg);
14573 return -ENOBUFS;
14574}
14575
355199e0
JM		 14576static int nl80211_update_ft_ies(struct sk_buff *skb, struct genl_info *info)
14577{
14578 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14579 struct cfg80211_update_ft_ies_params ft_params;
14580 struct net_device *dev = info->user_ptr[1];
14581
14582 if (!rdev->ops->update_ft_ies)
14583 return -EOPNOTSUPP;
14584
14585 if (!info->attrs[NL80211_ATTR_MDID] ||
3d7af878 14586 !info->attrs[NL80211_ATTR_IE])
355199e0
JM		 14587 return -EINVAL;
14588
14589 memset(&ft_params, 0, sizeof(ft_params));
14590 ft_params.md = nla_get_u16(info->attrs[NL80211_ATTR_MDID]);
14591 ft_params.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
14592 ft_params.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
14593
14594 return rdev_update_ft_ies(rdev, dev, &ft_params);
14595}
14596
5de17984
AS		 14597static int nl80211_crit_protocol_start(struct sk_buff *skb,
14598 struct genl_info *info)
14599{
14600 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14601 struct wireless_dev *wdev = info->user_ptr[1];
14602 enum nl80211_crit_proto_id proto = NL80211_CRIT_PROTO_UNSPEC;
14603 u16 duration;
14604 int ret;
14605
14606 if (!rdev->ops->crit_proto_start)
14607 return -EOPNOTSUPP;
14608
14609 if (WARN_ON(!rdev->ops->crit_proto_stop))
14610 return -EINVAL;
14611
14612 if (rdev->crit_proto_nlportid)
14613 return -EBUSY;
14614
14615 /* determine protocol if provided */
14616 if (info->attrs[NL80211_ATTR_CRIT_PROT_ID])
14617 proto = nla_get_u16(info->attrs[NL80211_ATTR_CRIT_PROT_ID]);
14618
14619 if (proto >= NUM_NL80211_CRIT_PROTO)
14620 return -EINVAL;
14621
14622 /* timeout must be provided */
14623 if (!info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION])
14624 return -EINVAL;
14625
14626 duration =
14627 nla_get_u16(info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION]);
14628
5de17984
AS		 14629 ret = rdev_crit_proto_start(rdev, wdev, proto, duration);
14630 if (!ret)
14631 rdev->crit_proto_nlportid = info->snd_portid;
14632
14633 return ret;
14634}
14635
14636static int nl80211_crit_protocol_stop(struct sk_buff *skb,
14637 struct genl_info *info)
14638{
14639 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14640 struct wireless_dev *wdev = info->user_ptr[1];
14641
14642 if (!rdev->ops->crit_proto_stop)
14643 return -EOPNOTSUPP;
14644
14645 if (rdev->crit_proto_nlportid) {
14646 rdev->crit_proto_nlportid = 0;
14647 rdev_crit_proto_stop(rdev, wdev);
14648 }
14649 return 0;
14650}
14651
901bb989
JB		 14652static int nl80211_vendor_check_policy(const struct wiphy_vendor_command *vcmd,
14653 struct nlattr *attr,
14654 struct netlink_ext_ack *extack)
14655{
14656 if (vcmd->policy == VENDOR_CMD_RAW_DATA) {
14657 if (attr->nla_type & NLA_F_NESTED) {
14658 NL_SET_ERR_MSG_ATTR(extack, attr,
14659 "unexpected nested data");
14660 return -EINVAL;
14661 }
14662
14663 return 0;
14664 }
14665
14666 if (!(attr->nla_type & NLA_F_NESTED)) {
14667 NL_SET_ERR_MSG_ATTR(extack, attr, "expected nested data");
14668 return -EINVAL;
14669 }
14670
32d5109a 14671 return nla_validate_nested(attr, vcmd->maxattr, vcmd->policy, extack);
901bb989
JB		 14672}
14673
ad7e718c
JB		 14674static int nl80211_vendor_cmd(struct sk_buff *skb, struct genl_info *info)
14675{
14676 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14677 struct wireless_dev *wdev =
a05829a7
JB		 14678 __cfg80211_wdev_from_attrs(rdev, genl_info_net(info),
14679 info->attrs);
ad7e718c
JB		 14680 int i, err;
14681 u32 vid, subcmd;
14682
14683 if (!rdev->wiphy.vendor_commands)
14684 return -EOPNOTSUPP;
14685
14686 if (IS_ERR(wdev)) {
14687 err = PTR_ERR(wdev);
14688 if (err != -EINVAL)
14689 return err;
14690 wdev = NULL;
14691 } else if (wdev->wiphy != &rdev->wiphy) {
14692 return -EINVAL;
14693 }
14694
14695 if (!info->attrs[NL80211_ATTR_VENDOR_ID] ||
14696 !info->attrs[NL80211_ATTR_VENDOR_SUBCMD])
14697 return -EINVAL;
14698
14699 vid = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_ID]);
14700 subcmd = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_SUBCMD]);
14701 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
14702 const struct wiphy_vendor_command *vcmd;
14703 void *data = NULL;
14704 int len = 0;
14705
14706 vcmd = &rdev->wiphy.vendor_commands[i];
14707
14708 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
14709 continue;
14710
14711 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
14712 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
14713 if (!wdev)
14714 return -EINVAL;
14715 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
14716 !wdev->netdev)
14717 return -EINVAL;
14718
14719 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
73c7da3d 14720 if (!wdev_running(wdev))
ad7e718c
JB		 14721 return -ENETDOWN;
14722 }
14723 } else {
14724 wdev = NULL;
14725 }
14726
4052d3d2
JS		 14727 if (!vcmd->doit)
14728 return -EOPNOTSUPP;
14729
ad7e718c
JB		 14730 if (info->attrs[NL80211_ATTR_VENDOR_DATA]) {
14731 data = nla_data(info->attrs[NL80211_ATTR_VENDOR_DATA]);
14732 len = nla_len(info->attrs[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 14733
14734 err = nl80211_vendor_check_policy(vcmd,
14735 info->attrs[NL80211_ATTR_VENDOR_DATA],
14736 info->extack);
14737 if (err)
14738 return err;
ad7e718c
JB		 14739 }
14740
14741 rdev->cur_cmd_info = info;
901bb989 14742 err = vcmd->doit(&rdev->wiphy, wdev, data, len);
ad7e718c
JB		 14743 rdev->cur_cmd_info = NULL;
14744 return err;
14745 }
14746
14747 return -EOPNOTSUPP;
14748}
14749
7bdbe400
JB		 14750static int nl80211_prepare_vendor_dump(struct sk_buff *skb,
14751 struct netlink_callback *cb,
14752 struct cfg80211_registered_device **rdev,
14753 struct wireless_dev **wdev)
14754{
50508d94 14755 struct nlattr **attrbuf;
7bdbe400
JB		 14756 u32 vid, subcmd;
14757 unsigned int i;
14758 int vcmd_idx = -1;
14759 int err;
14760 void *data = NULL;
14761 unsigned int data_len = 0;
14762
7bdbe400
JB		 14763 if (cb->args[0]) {
14764 /* subtract the 1 again here */
14765 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
14766 struct wireless_dev *tmp;
14767
ea90e0dc
JB		 14768 if (!wiphy)
14769 return -ENODEV;
7bdbe400
JB		 14770 *rdev = wiphy_to_rdev(wiphy);
14771 *wdev = NULL;
14772
14773 if (cb->args[1]) {
53873f13 14774 list_for_each_entry(tmp, &wiphy->wdev_list, list) {
7bdbe400
JB		 14775 if (tmp->identifier == cb->args[1] - 1) {
14776 *wdev = tmp;
14777 break;
14778 }
14779 }
14780 }
14781
14782 /* keep rtnl locked in successful case */
14783 return 0;
14784 }
14785
50508d94
JB		 14786 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
14787 if (!attrbuf)
14788 return -ENOMEM;
14789
8cb08174
JB		 14790 err = nlmsg_parse_deprecated(cb->nlh,
14791 GENL_HDRLEN + nl80211_fam.hdrsize,
14792 attrbuf, nl80211_fam.maxattr,
14793 nl80211_policy, NULL);
7bdbe400 14794 if (err)
50508d94 14795 goto out;
7bdbe400 14796
c90c39da 14797 if (!attrbuf[NL80211_ATTR_VENDOR_ID] ||
50508d94
JB		 14798 !attrbuf[NL80211_ATTR_VENDOR_SUBCMD]) {
14799 err = -EINVAL;
14800 goto out;
14801 }
7bdbe400 14802
a05829a7 14803 *wdev = __cfg80211_wdev_from_attrs(NULL, sock_net(skb->sk), attrbuf);
7bdbe400
JB		 14804 if (IS_ERR(*wdev))
14805 *wdev = NULL;
14806
c90c39da 14807 *rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
50508d94
JB		 14808 if (IS_ERR(*rdev)) {
14809 err = PTR_ERR(*rdev);
14810 goto out;
14811 }
7bdbe400 14812
c90c39da
JB		 14813 vid = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_ID]);
14814 subcmd = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_SUBCMD]);
7bdbe400
JB		 14815
14816 for (i = 0; i < (*rdev)->wiphy.n_vendor_commands; i++) {
14817 const struct wiphy_vendor_command *vcmd;
14818
14819 vcmd = &(*rdev)->wiphy.vendor_commands[i];
14820
14821 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
14822 continue;
14823
50508d94
JB		 14824 if (!vcmd->dumpit) {
14825 err = -EOPNOTSUPP;
14826 goto out;
14827 }
7bdbe400
JB		 14828
14829 vcmd_idx = i;
14830 break;
14831 }
14832
50508d94
JB		 14833 if (vcmd_idx < 0) {
14834 err = -EOPNOTSUPP;
14835 goto out;
14836 }
7bdbe400 14837
c90c39da
JB		 14838 if (attrbuf[NL80211_ATTR_VENDOR_DATA]) {
14839 data = nla_data(attrbuf[NL80211_ATTR_VENDOR_DATA]);
14840 data_len = nla_len(attrbuf[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 14841
14842 err = nl80211_vendor_check_policy(
14843 &(*rdev)->wiphy.vendor_commands[vcmd_idx],
14844 attrbuf[NL80211_ATTR_VENDOR_DATA],
14845 cb->extack);
14846 if (err)
50508d94 14847 goto out;
7bdbe400
JB		 14848 }
14849
14850 /* 0 is the first index - add 1 to parse only once */
14851 cb->args[0] = (*rdev)->wiphy_idx + 1;
14852 /* add 1 to know if it was NULL */
14853 cb->args[1] = *wdev ? (*wdev)->identifier + 1 : 0;
14854 cb->args[2] = vcmd_idx;
14855 cb->args[3] = (unsigned long)data;
14856 cb->args[4] = data_len;
14857
14858 /* keep rtnl locked in successful case */
50508d94
JB		 14859 err = 0;
14860out:
14861 kfree(attrbuf);
14862 return err;
7bdbe400
JB		 14863}
14864
14865static int nl80211_vendor_cmd_dump(struct sk_buff *skb,
14866 struct netlink_callback *cb)
14867{
14868 struct cfg80211_registered_device *rdev;
14869 struct wireless_dev *wdev;
14870 unsigned int vcmd_idx;
14871 const struct wiphy_vendor_command *vcmd;
14872 void *data;
14873 int data_len;
14874 int err;
14875 struct nlattr *vendor_data;
14876
ea90e0dc 14877 rtnl_lock();
7bdbe400
JB		 14878 err = nl80211_prepare_vendor_dump(skb, cb, &rdev, &wdev);
14879 if (err)
ea90e0dc 14880 goto out;
7bdbe400
JB		 14881
14882 vcmd_idx = cb->args[2];
14883 data = (void *)cb->args[3];
14884 data_len = cb->args[4];
14885 vcmd = &rdev->wiphy.vendor_commands[vcmd_idx];
14886
14887 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
14888 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
ea90e0dc
JB		 14889 if (!wdev) {
14890 err = -EINVAL;
14891 goto out;
14892 }
7bdbe400 14893 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
ea90e0dc
JB		 14894 !wdev->netdev) {
14895 err = -EINVAL;
14896 goto out;
14897 }
7bdbe400
JB		 14898
14899 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
ea90e0dc
JB		 14900 if (!wdev_running(wdev)) {
14901 err = -ENETDOWN;
14902 goto out;
14903 }
7bdbe400
JB		 14904 }
14905 }
14906
14907 while (1) {
14908 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
14909 cb->nlh->nlmsg_seq, NLM_F_MULTI,
14910 NL80211_CMD_VENDOR);
14911 if (!hdr)
14912 break;
14913
14914 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 14915 (wdev && nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
14916 wdev_id(wdev),
14917 NL80211_ATTR_PAD))) {
7bdbe400
JB		 14918 genlmsg_cancel(skb, hdr);
14919 break;
14920 }
14921
ae0be8de
MK		 14922 vendor_data = nla_nest_start_noflag(skb,
14923 NL80211_ATTR_VENDOR_DATA);
7bdbe400
JB		 14924 if (!vendor_data) {
14925 genlmsg_cancel(skb, hdr);
14926 break;
14927 }
14928
14929 err = vcmd->dumpit(&rdev->wiphy, wdev, skb, data, data_len,
14930 (unsigned long *)&cb->args[5]);
14931 nla_nest_end(skb, vendor_data);
14932
14933 if (err == -ENOBUFS || err == -ENOENT) {
14934 genlmsg_cancel(skb, hdr);
14935 break;
9c167b2d 14936 } else if (err <= 0) {
7bdbe400
JB		 14937 genlmsg_cancel(skb, hdr);
14938 goto out;
14939 }
14940
14941 genlmsg_end(skb, hdr);
14942 }
14943
14944 err = skb->len;
14945 out:
14946 rtnl_unlock();
14947 return err;
14948}
14949
ad7e718c
JB		 14950struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
14951 enum nl80211_commands cmd,
14952 enum nl80211_attrs attr,
14953 int approxlen)
14954{
f26cbf40 14955 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ad7e718c
JB		 14956
14957 if (WARN_ON(!rdev->cur_cmd_info))
14958 return NULL;
14959
6c09e791 14960 return __cfg80211_alloc_vendor_skb(rdev, NULL, approxlen,
ad7e718c
JB		 14961 rdev->cur_cmd_info->snd_portid,
14962 rdev->cur_cmd_info->snd_seq,
567ffc35 14963 cmd, attr, NULL, GFP_KERNEL);
ad7e718c
JB		 14964}
14965EXPORT_SYMBOL(__cfg80211_alloc_reply_skb);
14966
14967int cfg80211_vendor_cmd_reply(struct sk_buff *skb)
14968{
14969 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
14970 void *hdr = ((void **)skb->cb)[1];
14971 struct nlattr *data = ((void **)skb->cb)[2];
14972
bd8c78e7
JB		 14973 /* clear CB data for netlink core to own from now on */
14974 memset(skb->cb, 0, sizeof(skb->cb));
14975
ad7e718c
JB		 14976 if (WARN_ON(!rdev->cur_cmd_info)) {
14977 kfree_skb(skb);
14978 return -EINVAL;
14979 }
14980
14981 nla_nest_end(skb, data);
14982 genlmsg_end(skb, hdr);
14983 return genlmsg_reply(skb, rdev->cur_cmd_info);
14984}
14985EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_reply);
14986
55c1fdf0
JB		 14987unsigned int cfg80211_vendor_cmd_get_sender(struct wiphy *wiphy)
14988{
14989 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14990
14991 if (WARN_ON(!rdev->cur_cmd_info))
14992 return 0;
14993
14994 return rdev->cur_cmd_info->snd_portid;
14995}
14996EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_get_sender);
14997
fa9ffc74
KP		 14998static int nl80211_set_qos_map(struct sk_buff *skb,
14999 struct genl_info *info)
15000{
15001 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15002 struct cfg80211_qos_map *qos_map = NULL;
15003 struct net_device *dev = info->user_ptr[1];
15004 u8 *pos, len, num_des, des_len, des;
15005 int ret;
15006
15007 if (!rdev->ops->set_qos_map)
15008 return -EOPNOTSUPP;
15009
15010 if (info->attrs[NL80211_ATTR_QOS_MAP]) {
15011 pos = nla_data(info->attrs[NL80211_ATTR_QOS_MAP]);
15012 len = nla_len(info->attrs[NL80211_ATTR_QOS_MAP]);
15013
c8b82802 15014 if (len % 2)
fa9ffc74
KP		 15015 return -EINVAL;
15016
15017 qos_map = kzalloc(sizeof(struct cfg80211_qos_map), GFP_KERNEL);
15018 if (!qos_map)
15019 return -ENOMEM;
15020
15021 num_des = (len - IEEE80211_QOS_MAP_LEN_MIN) >> 1;
15022 if (num_des) {
15023 des_len = num_des *
15024 sizeof(struct cfg80211_dscp_exception);
15025 memcpy(qos_map->dscp_exception, pos, des_len);
15026 qos_map->num_des = num_des;
15027 for (des = 0; des < num_des; des++) {
15028 if (qos_map->dscp_exception[des].up > 7) {
15029 kfree(qos_map);
15030 return -EINVAL;
15031 }
15032 }
15033 pos += des_len;
15034 }
15035 memcpy(qos_map->up, pos, IEEE80211_QOS_MAP_LEN_MIN);
15036 }
15037
15038 wdev_lock(dev->ieee80211_ptr);
15039 ret = nl80211_key_allowed(dev->ieee80211_ptr);
15040 if (!ret)
15041 ret = rdev_set_qos_map(rdev, dev, qos_map);
15042 wdev_unlock(dev->ieee80211_ptr);
15043
15044 kfree(qos_map);
15045 return ret;
15046}
15047
960d01ac
JB		 15048static int nl80211_add_tx_ts(struct sk_buff *skb, struct genl_info *info)
15049{
15050 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15051 struct net_device *dev = info->user_ptr[1];
15052 struct wireless_dev *wdev = dev->ieee80211_ptr;
15053 const u8 *peer;
15054 u8 tsid, up;
15055 u16 admitted_time = 0;
15056 int err;
15057
723e73ac 15058 if (!(rdev->wiphy.features & NL80211_FEATURE_SUPPORTS_WMM_ADMISSION))
960d01ac
JB		 15059 return -EOPNOTSUPP;
15060
15061 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC] ||
15062 !info->attrs[NL80211_ATTR_USER_PRIO])
15063 return -EINVAL;
15064
15065 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
960d01ac 15066 up = nla_get_u8(info->attrs[NL80211_ATTR_USER_PRIO]);
960d01ac
JB		 15067
15068 /* WMM uses TIDs 0-7 even for TSPEC */
723e73ac 15069 if (tsid >= IEEE80211_FIRST_TSPEC_TSID) {
960d01ac 15070 /* TODO: handle 802.11 TSPEC/admission control
723e73ac
JB		 15071 * need more attributes for that (e.g. BA session requirement);
15072 * change the WMM adminssion test above to allow both then
960d01ac
JB		 15073 */
15074 return -EINVAL;
15075 }
15076
15077 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
15078
15079 if (info->attrs[NL80211_ATTR_ADMITTED_TIME]) {
15080 admitted_time =
15081 nla_get_u16(info->attrs[NL80211_ATTR_ADMITTED_TIME]);
15082 if (!admitted_time)
15083 return -EINVAL;
15084 }
15085
15086 wdev_lock(wdev);
15087 switch (wdev->iftype) {
15088 case NL80211_IFTYPE_STATION:
15089 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c 15090 if (wdev->connected)
960d01ac
JB		 15091 break;
15092 err = -ENOTCONN;
15093 goto out;
15094 default:
15095 err = -EOPNOTSUPP;
15096 goto out;
15097 }
15098
15099 err = rdev_add_tx_ts(rdev, dev, tsid, peer, up, admitted_time);
15100
15101 out:
15102 wdev_unlock(wdev);
15103 return err;
15104}
15105
15106static int nl80211_del_tx_ts(struct sk_buff *skb, struct genl_info *info)
15107{
15108 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15109 struct net_device *dev = info->user_ptr[1];
15110 struct wireless_dev *wdev = dev->ieee80211_ptr;
15111 const u8 *peer;
15112 u8 tsid;
15113 int err;
15114
15115 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC])
15116 return -EINVAL;
15117
15118 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
15119 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
15120
15121 wdev_lock(wdev);
15122 err = rdev_del_tx_ts(rdev, dev, tsid, peer);
15123 wdev_unlock(wdev);
15124
15125 return err;
15126}
15127
1057d35e
AN		 15128static int nl80211_tdls_channel_switch(struct sk_buff *skb,
15129 struct genl_info *info)
15130{
15131 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15132 struct net_device *dev = info->user_ptr[1];
15133 struct wireless_dev *wdev = dev->ieee80211_ptr;
15134 struct cfg80211_chan_def chandef = {};
15135 const u8 *addr;
15136 u8 oper_class;
15137 int err;
15138
15139 if (!rdev->ops->tdls_channel_switch ||
15140 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
15141 return -EOPNOTSUPP;
15142
15143 switch (dev->ieee80211_ptr->iftype) {
15144 case NL80211_IFTYPE_STATION:
15145 case NL80211_IFTYPE_P2P_CLIENT:
15146 break;
15147 default:
15148 return -EOPNOTSUPP;
15149 }
15150
15151 if (!info->attrs[NL80211_ATTR_MAC] ||
15152 !info->attrs[NL80211_ATTR_OPER_CLASS])
15153 return -EINVAL;
15154
15155 err = nl80211_parse_chandef(rdev, info, &chandef);
15156 if (err)
15157 return err;
15158
15159 /*
15160 * Don't allow wide channels on the 2.4Ghz band, as per IEEE802.11-2012
15161 * section 10.22.6.2.1. Disallow 5/10Mhz channels as well for now, the
15162 * specification is not defined for them.
15163 */
57fbcce3 15164 if (chandef.chan->band == NL80211_BAND_2GHZ &&
1057d35e
AN		 15165 chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
15166 chandef.width != NL80211_CHAN_WIDTH_20)
15167 return -EINVAL;
15168
15169 /* we will be active on the TDLS link */
923b352f
AN		 15170 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
15171 wdev->iftype))
1057d35e
AN		 15172 return -EINVAL;
15173
15174 /* don't allow switching to DFS channels */
15175 if (cfg80211_chandef_dfs_required(wdev->wiphy, &chandef, wdev->iftype))
15176 return -EINVAL;
15177
15178 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15179 oper_class = nla_get_u8(info->attrs[NL80211_ATTR_OPER_CLASS]);
15180
15181 wdev_lock(wdev);
15182 err = rdev_tdls_channel_switch(rdev, dev, addr, oper_class, &chandef);
15183 wdev_unlock(wdev);
15184
15185 return err;
15186}
15187
15188static int nl80211_tdls_cancel_channel_switch(struct sk_buff *skb,
15189 struct genl_info *info)
15190{
15191 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15192 struct net_device *dev = info->user_ptr[1];
15193 struct wireless_dev *wdev = dev->ieee80211_ptr;
15194 const u8 *addr;
15195
15196 if (!rdev->ops->tdls_channel_switch ||
15197 !rdev->ops->tdls_cancel_channel_switch ||
15198 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
15199 return -EOPNOTSUPP;
15200
15201 switch (dev->ieee80211_ptr->iftype) {
15202 case NL80211_IFTYPE_STATION:
15203 case NL80211_IFTYPE_P2P_CLIENT:
15204 break;
15205 default:
15206 return -EOPNOTSUPP;
15207 }
15208
15209 if (!info->attrs[NL80211_ATTR_MAC])
15210 return -EINVAL;
15211
15212 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15213
15214 wdev_lock(wdev);
15215 rdev_tdls_cancel_channel_switch(rdev, dev, addr);
15216 wdev_unlock(wdev);
15217
15218 return 0;
15219}
15220
ce0ce13a
MB		 15221static int nl80211_set_multicast_to_unicast(struct sk_buff *skb,
15222 struct genl_info *info)
15223{
15224 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15225 struct net_device *dev = info->user_ptr[1];
15226 struct wireless_dev *wdev = dev->ieee80211_ptr;
15227 const struct nlattr *nla;
15228 bool enabled;
15229
ce0ce13a
MB		 15230 if (!rdev->ops->set_multicast_to_unicast)
15231 return -EOPNOTSUPP;
15232
15233 if (wdev->iftype != NL80211_IFTYPE_AP &&
15234 wdev->iftype != NL80211_IFTYPE_P2P_GO)
15235 return -EOPNOTSUPP;
15236
15237 nla = info->attrs[NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED];
15238 enabled = nla_get_flag(nla);
15239
15240 return rdev_set_multicast_to_unicast(rdev, dev, enabled);
15241}
15242
3a00df57
AS		 15243static int nl80211_set_pmk(struct sk_buff *skb, struct genl_info *info)
15244{
15245 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15246 struct net_device *dev = info->user_ptr[1];
15247 struct wireless_dev *wdev = dev->ieee80211_ptr;
15248 struct cfg80211_pmk_conf pmk_conf = {};
15249 int ret;
15250
15251 if (wdev->iftype != NL80211_IFTYPE_STATION &&
15252 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
15253 return -EOPNOTSUPP;
15254
15255 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15256 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
15257 return -EOPNOTSUPP;
15258
15259 if (!info->attrs[NL80211_ATTR_MAC] || !info->attrs[NL80211_ATTR_PMK])
15260 return -EINVAL;
15261
15262 wdev_lock(wdev);
7b0a0e3c 15263 if (!wdev->connected) {
3a00df57
AS		 15264 ret = -ENOTCONN;
15265 goto out;
15266 }
15267
15268 pmk_conf.aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
7b0a0e3c 15269 if (memcmp(pmk_conf.aa, wdev->u.client.connected_addr, ETH_ALEN)) {
3a00df57
AS		 15270 ret = -EINVAL;
15271 goto out;
15272 }
15273
15274 pmk_conf.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
15275 pmk_conf.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
15276 if (pmk_conf.pmk_len != WLAN_PMK_LEN &&
15277 pmk_conf.pmk_len != WLAN_PMK_LEN_SUITE_B_192) {
15278 ret = -EINVAL;
15279 goto out;
15280 }
15281
cb9abd48 15282 if (info->attrs[NL80211_ATTR_PMKR0_NAME])
3a00df57
AS		 15283 pmk_conf.pmk_r0_name =
15284 nla_data(info->attrs[NL80211_ATTR_PMKR0_NAME]);
3a00df57
AS		 15285
15286 ret = rdev_set_pmk(rdev, dev, &pmk_conf);
15287out:
15288 wdev_unlock(wdev);
15289 return ret;
15290}
15291
15292static int nl80211_del_pmk(struct sk_buff *skb, struct genl_info *info)
15293{
15294 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15295 struct net_device *dev = info->user_ptr[1];
15296 struct wireless_dev *wdev = dev->ieee80211_ptr;
15297 const u8 *aa;
15298 int ret;
15299
15300 if (wdev->iftype != NL80211_IFTYPE_STATION &&
15301 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
15302 return -EOPNOTSUPP;
15303
15304 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15305 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
15306 return -EOPNOTSUPP;
15307
15308 if (!info->attrs[NL80211_ATTR_MAC])
15309 return -EINVAL;
15310
15311 wdev_lock(wdev);
15312 aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
15313 ret = rdev_del_pmk(rdev, dev, aa);
15314 wdev_unlock(wdev);
15315
15316 return ret;
15317}
15318
40cbfa90
SD		 15319static int nl80211_external_auth(struct sk_buff *skb, struct genl_info *info)
15320{
15321 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15322 struct net_device *dev = info->user_ptr[1];
15323 struct cfg80211_external_auth_params params;
15324
db8d93a7 15325 if (!rdev->ops->external_auth)
40cbfa90
SD		 15326 return -EOPNOTSUPP;
15327
fe494370
SD		 15328 if (!info->attrs[NL80211_ATTR_SSID] &&
15329 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
15330 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
40cbfa90
SD		 15331 return -EINVAL;
15332
15333 if (!info->attrs[NL80211_ATTR_BSSID])
15334 return -EINVAL;
15335
15336 if (!info->attrs[NL80211_ATTR_STATUS_CODE])
15337 return -EINVAL;
15338
15339 memset(&params, 0, sizeof(params));
15340
fe494370
SD		 15341 if (info->attrs[NL80211_ATTR_SSID]) {
15342 params.ssid.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
cb9abd48 15343 if (params.ssid.ssid_len == 0)
fe494370
SD		 15344 return -EINVAL;
15345 memcpy(params.ssid.ssid,
15346 nla_data(info->attrs[NL80211_ATTR_SSID]),
15347 params.ssid.ssid_len);
15348 }
40cbfa90
SD		 15349
15350 memcpy(params.bssid, nla_data(info->attrs[NL80211_ATTR_BSSID]),
15351 ETH_ALEN);
15352
15353 params.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
15354
fe494370
SD		 15355 if (info->attrs[NL80211_ATTR_PMKID])
15356 params.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
15357
40cbfa90
SD		 15358 return rdev_external_auth(rdev, dev, &params);
15359}
15360
2576a9ac
DK		 15361static int nl80211_tx_control_port(struct sk_buff *skb, struct genl_info *info)
15362{
dca9ca2d 15363 bool dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
2576a9ac
DK		 15364 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15365 struct net_device *dev = info->user_ptr[1];
15366 struct wireless_dev *wdev = dev->ieee80211_ptr;
15367 const u8 *buf;
15368 size_t len;
15369 u8 *dest;
15370 u16 proto;
15371 bool noencrypt;
dca9ca2d 15372 u64 cookie = 0;
67207bab 15373 int link_id;
2576a9ac
DK		 15374 int err;
15375
15376 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15377 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
15378 return -EOPNOTSUPP;
15379
15380 if (!rdev->ops->tx_control_port)
15381 return -EOPNOTSUPP;
15382
15383 if (!info->attrs[NL80211_ATTR_FRAME] ||
15384 !info->attrs[NL80211_ATTR_MAC] ||
15385 !info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
15386 GENL_SET_ERR_MSG(info, "Frame, MAC or ethertype missing");
15387 return -EINVAL;
15388 }
15389
15390 wdev_lock(wdev);
15391
15392 switch (wdev->iftype) {
15393 case NL80211_IFTYPE_AP:
15394 case NL80211_IFTYPE_P2P_GO:
15395 case NL80211_IFTYPE_MESH_POINT:
15396 break;
15397 case NL80211_IFTYPE_ADHOC:
7b0a0e3c
JB		 15398 if (wdev->u.ibss.current_bss)
15399 break;
15400 err = -ENOTCONN;
15401 goto out;
2576a9ac
DK		 15402 case NL80211_IFTYPE_STATION:
15403 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c 15404 if (wdev->connected)
2576a9ac
DK		 15405 break;
15406 err = -ENOTCONN;
15407 goto out;
15408 default:
15409 err = -EOPNOTSUPP;
15410 goto out;
15411 }
15412
15413 wdev_unlock(wdev);
15414
15415 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
15416 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
15417 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
15418 proto = nla_get_u16(info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
15419 noencrypt =
15420 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]);
15421
67207bab
AO		 15422 link_id = nl80211_link_id_or_invalid(info->attrs);
15423
dca9ca2d 15424 err = rdev_tx_control_port(rdev, dev, buf, len,
67207bab 15425 dest, cpu_to_be16(proto), noencrypt, link_id,
dca9ca2d
MT		 15426 dont_wait_for_ack ? NULL : &cookie);
15427 if (!err && !dont_wait_for_ack)
15428 nl_set_extack_cookie_u64(info->extack, cookie);
15429 return err;
2576a9ac
DK		 15430 out:
15431 wdev_unlock(wdev);
15432 return err;
15433}
15434
81e54d08
PKC		 15435static int nl80211_get_ftm_responder_stats(struct sk_buff *skb,
15436 struct genl_info *info)
15437{
15438 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15439 struct net_device *dev = info->user_ptr[1];
15440 struct wireless_dev *wdev = dev->ieee80211_ptr;
15441 struct cfg80211_ftm_responder_stats ftm_stats = {};
7b0a0e3c 15442 unsigned int link_id = nl80211_link_id(info->attrs);
81e54d08
PKC		 15443 struct sk_buff *msg;
15444 void *hdr;
15445 struct nlattr *ftm_stats_attr;
15446 int err;
15447
7b0a0e3c
JB		 15448 if (wdev->iftype != NL80211_IFTYPE_AP ||
15449 !wdev->links[link_id].ap.beacon_interval)
81e54d08
PKC		 15450 return -EOPNOTSUPP;
15451
15452 err = rdev_get_ftm_responder_stats(rdev, dev, &ftm_stats);
15453 if (err)
15454 return err;
15455
15456 if (!ftm_stats.filled)
15457 return -ENODATA;
15458
15459 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15460 if (!msg)
15461 return -ENOMEM;
15462
15463 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
15464 NL80211_CMD_GET_FTM_RESPONDER_STATS);
15465 if (!hdr)
1399c59f 15466 goto nla_put_failure;
81e54d08
PKC		 15467
15468 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
15469 goto nla_put_failure;
15470
ae0be8de
MK		 15471 ftm_stats_attr = nla_nest_start_noflag(msg,
15472 NL80211_ATTR_FTM_RESPONDER_STATS);
81e54d08
PKC		 15473 if (!ftm_stats_attr)
15474 goto nla_put_failure;
15475
15476#define SET_FTM(field, name, type) \
15477 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
15478 nla_put_ ## type(msg, NL80211_FTM_STATS_ ## name, \
15479 ftm_stats.field)) \
15480 goto nla_put_failure; } while (0)
15481#define SET_FTM_U64(field, name) \
15482 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
15483 nla_put_u64_64bit(msg, NL80211_FTM_STATS_ ## name, \
15484 ftm_stats.field, NL80211_FTM_STATS_PAD)) \
15485 goto nla_put_failure; } while (0)
15486
15487 SET_FTM(success_num, SUCCESS_NUM, u32);
15488 SET_FTM(partial_num, PARTIAL_NUM, u32);
15489 SET_FTM(failed_num, FAILED_NUM, u32);
15490 SET_FTM(asap_num, ASAP_NUM, u32);
15491 SET_FTM(non_asap_num, NON_ASAP_NUM, u32);
15492 SET_FTM_U64(total_duration_ms, TOTAL_DURATION_MSEC);
15493 SET_FTM(unknown_triggers_num, UNKNOWN_TRIGGERS_NUM, u32);
15494 SET_FTM(reschedule_requests_num, RESCHEDULE_REQUESTS_NUM, u32);
15495 SET_FTM(out_of_window_triggers_num, OUT_OF_WINDOW_TRIGGERS_NUM, u32);
15496#undef SET_FTM
15497
15498 nla_nest_end(msg, ftm_stats_attr);
15499
15500 genlmsg_end(msg, hdr);
15501 return genlmsg_reply(msg, info);
15502
15503nla_put_failure:
15504 nlmsg_free(msg);
15505 return -ENOBUFS;
15506}
15507
cb74e977
SD		 15508static int nl80211_update_owe_info(struct sk_buff *skb, struct genl_info *info)
15509{
15510 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15511 struct cfg80211_update_owe_info owe_info;
15512 struct net_device *dev = info->user_ptr[1];
15513
15514 if (!rdev->ops->update_owe_info)
15515 return -EOPNOTSUPP;
15516
15517 if (!info->attrs[NL80211_ATTR_STATUS_CODE] ||
15518 !info->attrs[NL80211_ATTR_MAC])
15519 return -EINVAL;
15520
15521 memset(&owe_info, 0, sizeof(owe_info));
15522 owe_info.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
15523 nla_memcpy(owe_info.peer, info->attrs[NL80211_ATTR_MAC], ETH_ALEN);
15524
15525 if (info->attrs[NL80211_ATTR_IE]) {
15526 owe_info.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
15527 owe_info.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
15528 }
15529
15530 return rdev_update_owe_info(rdev, dev, &owe_info);
15531}
15532
5ab92e7f
RM		 15533static int nl80211_probe_mesh_link(struct sk_buff *skb, struct genl_info *info)
15534{
15535 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15536 struct net_device *dev = info->user_ptr[1];
15537 struct wireless_dev *wdev = dev->ieee80211_ptr;
15538 struct station_info sinfo = {};
15539 const u8 *buf;
15540 size_t len;
15541 u8 *dest;
15542 int err;
15543
15544 if (!rdev->ops->probe_mesh_link || !rdev->ops->get_station)
15545 return -EOPNOTSUPP;
15546
15547 if (!info->attrs[NL80211_ATTR_MAC] ||
15548 !info->attrs[NL80211_ATTR_FRAME]) {
15549 GENL_SET_ERR_MSG(info, "Frame or MAC missing");
15550 return -EINVAL;
15551 }
15552
15553 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
15554 return -EOPNOTSUPP;
15555
15556 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
15557 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
15558 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
15559
15560 if (len < sizeof(struct ethhdr))
15561 return -EINVAL;
15562
15563 if (!ether_addr_equal(buf, dest) || is_multicast_ether_addr(buf) ||
15564 !ether_addr_equal(buf + ETH_ALEN, dev->dev_addr))
15565 return -EINVAL;
15566
15567 err = rdev_get_station(rdev, dev, dest, &sinfo);
15568 if (err)
15569 return err;
15570
2a279b34
FF		 15571 cfg80211_sinfo_release_content(&sinfo);
15572
5ab92e7f
RM		 15573 return rdev_probe_mesh_link(rdev, dev, dest, buf, len);
15574}
15575
77f576de
T		 15576static int parse_tid_conf(struct cfg80211_registered_device *rdev,
15577 struct nlattr *attrs[], struct net_device *dev,
3710a8a6 15578 struct cfg80211_tid_cfg *tid_conf,
7b0a0e3c
JB		 15579 struct genl_info *info, const u8 *peer,
15580 unsigned int link_id)
77f576de
T		 15581{
15582 struct netlink_ext_ack *extack = info->extack;
3710a8a6 15583 u64 mask;
77f576de
T		 15584 int err;
15585
15586 if (!attrs[NL80211_TID_CONFIG_ATTR_TIDS])
15587 return -EINVAL;
15588
15589 tid_conf->config_override =
15590 nla_get_flag(attrs[NL80211_TID_CONFIG_ATTR_OVERRIDE]);
3710a8a6 15591 tid_conf->tids = nla_get_u16(attrs[NL80211_TID_CONFIG_ATTR_TIDS]);
77f576de
T		 15592
15593 if (tid_conf->config_override) {
15594 if (rdev->ops->reset_tid_config) {
15595 err = rdev_reset_tid_config(rdev, dev, peer,
3710a8a6 15596 tid_conf->tids);
c0336955 15597 if (err)
77f576de
T		 15598 return err;
15599 } else {
15600 return -EINVAL;
15601 }
15602 }
15603
15604 if (attrs[NL80211_TID_CONFIG_ATTR_NOACK]) {
3710a8a6 15605 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_NOACK);
77f576de
T		 15606 tid_conf->noack =
15607 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_NOACK]);
15608 }
15609
6a21d16c
T		 15610 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]) {
15611 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_SHORT);
15612 tid_conf->retry_short =
15613 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]);
15614
15615 if (tid_conf->retry_short > rdev->wiphy.max_data_retry_count)
15616 return -EINVAL;
15617 }
15618
15619 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]) {
15620 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_LONG);
15621 tid_conf->retry_long =
15622 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]);
15623
15624 if (tid_conf->retry_long > rdev->wiphy.max_data_retry_count)
15625 return -EINVAL;
15626 }
15627
ade274b2
T		 15628 if (attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]) {
15629 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMPDU_CTRL);
15630 tid_conf->ampdu =
15631 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]);
15632 }
15633
04f7d142
T		 15634 if (attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]) {
15635 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL);
15636 tid_conf->rtscts =
15637 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]);
15638 }
15639
33462e68
SM		 15640 if (attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]) {
15641 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMSDU_CTRL);
15642 tid_conf->amsdu =
15643 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]);
15644 }
15645
9a5f6488
TC		 15646 if (attrs[NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE]) {
15647 u32 idx = NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE, attr;
15648
15649 tid_conf->txrate_type = nla_get_u8(attrs[idx]);
15650
15651 if (tid_conf->txrate_type != NL80211_TX_RATE_AUTOMATIC) {
15652 attr = NL80211_TID_CONFIG_ATTR_TX_RATE;
15653 err = nl80211_parse_tx_bitrate_mask(info, attrs, attr,
857b34c4 15654 &tid_conf->txrate_mask, dev,
7b0a0e3c 15655 true, link_id);
9a5f6488
TC		 15656 if (err)
15657 return err;
15658
15659 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE);
15660 }
15661 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE);
15662 }
15663
3710a8a6
JB		 15664 if (peer)
15665 mask = rdev->wiphy.tid_config_support.peer;
15666 else
15667 mask = rdev->wiphy.tid_config_support.vif;
15668
15669 if (tid_conf->mask & ~mask) {
15670 NL_SET_ERR_MSG(extack, "unsupported TID configuration");
15671 return -ENOTSUPP;
15672 }
15673
77f576de
T		 15674 return 0;
15675}
15676
15677static int nl80211_set_tid_config(struct sk_buff *skb,
15678 struct genl_info *info)
15679{
15680 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15681 struct nlattr *attrs[NL80211_TID_CONFIG_ATTR_MAX + 1];
7b0a0e3c 15682 unsigned int link_id = nl80211_link_id(info->attrs);
77f576de 15683 struct net_device *dev = info->user_ptr[1];
3710a8a6 15684 struct cfg80211_tid_config *tid_config;
77f576de
T		 15685 struct nlattr *tid;
15686 int conf_idx = 0, rem_conf;
15687 int ret = -EINVAL;
15688 u32 num_conf = 0;
15689
15690 if (!info->attrs[NL80211_ATTR_TID_CONFIG])
15691 return -EINVAL;
15692
15693 if (!rdev->ops->set_tid_config)
15694 return -EOPNOTSUPP;
15695
15696 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
15697 rem_conf)
15698 num_conf++;
15699
15700 tid_config = kzalloc(struct_size(tid_config, tid_conf, num_conf),
15701 GFP_KERNEL);
15702 if (!tid_config)
15703 return -ENOMEM;
15704
15705 tid_config->n_tid_conf = num_conf;
15706
15707 if (info->attrs[NL80211_ATTR_MAC])
15708 tid_config->peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
15709
206bbcf7
JB		 15710 wdev_lock(dev->ieee80211_ptr);
15711
77f576de
T		 15712 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
15713 rem_conf) {
15714 ret = nla_parse_nested(attrs, NL80211_TID_CONFIG_ATTR_MAX,
15715 tid, NULL, NULL);
15716
15717 if (ret)
15718 goto bad_tid_conf;
15719
15720 ret = parse_tid_conf(rdev, attrs, dev,
15721 &tid_config->tid_conf[conf_idx],
7b0a0e3c 15722 info, tid_config->peer, link_id);
77f576de
T		 15723 if (ret)
15724 goto bad_tid_conf;
15725
15726 conf_idx++;
15727 }
15728
15729 ret = rdev_set_tid_config(rdev, dev, tid_config);
15730
15731bad_tid_conf:
15732 kfree(tid_config);
206bbcf7 15733 wdev_unlock(dev->ieee80211_ptr);
77f576de
T		 15734 return ret;
15735}
15736
0d2ab3ae
JC		 15737static int nl80211_color_change(struct sk_buff *skb, struct genl_info *info)
15738{
15739 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15740 struct cfg80211_color_change_settings params = {};
15741 struct net_device *dev = info->user_ptr[1];
15742 struct wireless_dev *wdev = dev->ieee80211_ptr;
15743 struct nlattr **tb;
15744 u16 offset;
15745 int err;
15746
15747 if (!rdev->ops->color_change)
15748 return -EOPNOTSUPP;
15749
15750 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15751 NL80211_EXT_FEATURE_BSS_COLOR))
15752 return -EOPNOTSUPP;
15753
15754 if (wdev->iftype != NL80211_IFTYPE_AP)
15755 return -EOPNOTSUPP;
15756
15757 if (!info->attrs[NL80211_ATTR_COLOR_CHANGE_COUNT] ||
15758 !info->attrs[NL80211_ATTR_COLOR_CHANGE_COLOR] ||
15759 !info->attrs[NL80211_ATTR_COLOR_CHANGE_ELEMS])
15760 return -EINVAL;
15761
15762 params.count = nla_get_u8(info->attrs[NL80211_ATTR_COLOR_CHANGE_COUNT]);
15763 params.color = nla_get_u8(info->attrs[NL80211_ATTR_COLOR_CHANGE_COLOR]);
15764
15765 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_next);
15766 if (err)
15767 return err;
15768
15769 tb = kcalloc(NL80211_ATTR_MAX + 1, sizeof(*tb), GFP_KERNEL);
15770 if (!tb)
15771 return -ENOMEM;
15772
15773 err = nla_parse_nested(tb, NL80211_ATTR_MAX,
15774 info->attrs[NL80211_ATTR_COLOR_CHANGE_ELEMS],
15775 nl80211_policy, info->extack);
15776 if (err)
15777 goto out;
15778
15779 err = nl80211_parse_beacon(rdev, tb, &params.beacon_color_change);
15780 if (err)
15781 goto out;
15782
15783 if (!tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]) {
15784 err = -EINVAL;
15785 goto out;
15786 }
15787
15788 if (nla_len(tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]) != sizeof(u16)) {
15789 err = -EINVAL;
15790 goto out;
15791 }
15792
15793 offset = nla_get_u16(tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
15794 if (offset >= params.beacon_color_change.tail_len) {
15795 err = -EINVAL;
15796 goto out;
15797 }
15798
15799 if (params.beacon_color_change.tail[offset] != params.count) {
15800 err = -EINVAL;
15801 goto out;
15802 }
15803
15804 params.counter_offset_beacon = offset;
15805
15806 if (tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]) {
15807 if (nla_len(tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]) !=
15808 sizeof(u16)) {
15809 err = -EINVAL;
15810 goto out;
15811 }
15812
15813 offset = nla_get_u16(tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
15814 if (offset >= params.beacon_color_change.probe_resp_len) {
15815 err = -EINVAL;
15816 goto out;
15817 }
15818
15819 if (params.beacon_color_change.probe_resp[offset] !=
15820 params.count) {
15821 err = -EINVAL;
15822 goto out;
15823 }
15824
15825 params.counter_offset_presp = offset;
15826 }
15827
15828 wdev_lock(wdev);
15829 err = rdev_color_change(rdev, dev, &params);
15830 wdev_unlock(wdev);
15831
15832out:
dc1e3cb8
JC		 15833 kfree(params.beacon_next.mbssid_ies);
15834 kfree(params.beacon_color_change.mbssid_ies);
0d2ab3ae
JC		 15835 kfree(tb);
15836 return err;
15837}
15838
e306784a
SM		 15839static int nl80211_set_fils_aad(struct sk_buff *skb,
15840 struct genl_info *info)
15841{
15842 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15843 struct net_device *dev = info->user_ptr[1];
15844 struct cfg80211_fils_aad fils_aad = {};
15845 u8 *nonces;
15846
15847 if (!info->attrs[NL80211_ATTR_MAC] ||
15848 !info->attrs[NL80211_ATTR_FILS_KEK] ||
15849 !info->attrs[NL80211_ATTR_FILS_NONCES])
15850 return -EINVAL;
15851
15852 fils_aad.macaddr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15853 fils_aad.kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
15854 fils_aad.kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
15855 nonces = nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
15856 fils_aad.snonce = nonces;
15857 fils_aad.anonce = nonces + FILS_NONCE_LEN;
15858
15859 return rdev_set_fils_aad(rdev, dev, &fils_aad);
15860}
15861
7b0a0e3c
JB		 15862static int nl80211_add_link(struct sk_buff *skb, struct genl_info *info)
15863{
f2a0290b 15864 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c
JB		 15865 unsigned int link_id = nl80211_link_id(info->attrs);
15866 struct net_device *dev = info->user_ptr[1];
15867 struct wireless_dev *wdev = dev->ieee80211_ptr;
f2a0290b 15868 int ret;
7b0a0e3c
JB		 15869
15870 if (!(wdev->wiphy->flags & WIPHY_FLAG_SUPPORTS_MLO))
15871 return -EINVAL;
15872
15873 switch (wdev->iftype) {
15874 case NL80211_IFTYPE_AP:
15875 break;
15876 default:
15877 return -EINVAL;
15878 }
15879
15880 if (!info->attrs[NL80211_ATTR_MAC] ||
15881 !is_valid_ether_addr(nla_data(info->attrs[NL80211_ATTR_MAC])))
15882 return -EINVAL;
15883
15884 wdev_lock(wdev);
15885 wdev->valid_links |= BIT(link_id);
15886 ether_addr_copy(wdev->links[link_id].addr,
15887 nla_data(info->attrs[NL80211_ATTR_MAC]));
f2a0290b
JB		 15888
15889 ret = rdev_add_intf_link(rdev, wdev, link_id);
15890 if (ret) {
15891 wdev->valid_links &= ~BIT(link_id);
15892 eth_zero_addr(wdev->links[link_id].addr);
15893 }
7b0a0e3c
JB		 15894 wdev_unlock(wdev);
15895
f2a0290b 15896 return ret;
7b0a0e3c
JB		 15897}
15898
15899static int nl80211_remove_link(struct sk_buff *skb, struct genl_info *info)
15900{
15901 unsigned int link_id = nl80211_link_id(info->attrs);
15902 struct net_device *dev = info->user_ptr[1];
15903 struct wireless_dev *wdev = dev->ieee80211_ptr;
15904
15905 /* cannot remove if there's no link */
15906 if (!info->attrs[NL80211_ATTR_MLO_LINK_ID])
15907 return -EINVAL;
15908
15909 switch (wdev->iftype) {
15910 case NL80211_IFTYPE_AP:
15911 break;
15912 default:
15913 return -EINVAL;
15914 }
15915
7b0a0e3c 15916 wdev_lock(wdev);
cdf0a0a8 15917 cfg80211_remove_link(wdev, link_id);
7b0a0e3c
JB		 15918 wdev_unlock(wdev);
15919
15920 return 0;
15921}
15922
577e5b8c
ST		 15923static int
15924nl80211_add_mod_link_station(struct sk_buff *skb, struct genl_info *info,
15925 bool add)
15926{
15927 struct link_station_parameters params = {};
15928 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15929 struct net_device *dev = info->user_ptr[1];
15930 int err;
15931
15932 if ((add && !rdev->ops->add_link_station) ||
15933 (!add && !rdev->ops->mod_link_station))
15934 return -EOPNOTSUPP;
15935
15936 if (add && !info->attrs[NL80211_ATTR_MAC])
15937 return -EINVAL;
15938
8876c67e 15939 if (!info->attrs[NL80211_ATTR_MLD_ADDR])
577e5b8c
ST		 15940 return -EINVAL;
15941
15942 if (add && !info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
15943 return -EINVAL;
15944
8876c67e 15945 params.mld_mac = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
577e5b8c
ST		 15946
15947 if (info->attrs[NL80211_ATTR_MAC]) {
15948 params.link_mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
15949 if (!is_valid_ether_addr(params.link_mac))
15950 return -EINVAL;
15951 }
15952
15953 if (!info->attrs[NL80211_ATTR_MLO_LINK_ID])
15954 return -EINVAL;
15955
15956 params.link_id = nla_get_u8(info->attrs[NL80211_ATTR_MLO_LINK_ID]);
15957
15958 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
15959 params.supported_rates =
15960 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
15961 params.supported_rates_len =
15962 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
15963 }
15964
15965 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
15966 params.ht_capa =
15967 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
15968
15969 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
15970 params.vht_capa =
15971 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
15972
15973 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
15974 params.he_capa =
15975 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
15976 params.he_capa_len =
15977 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
15978
15979 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
15980 params.eht_capa =
15981 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
15982 params.eht_capa_len =
15983 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
15984
15985 if (!ieee80211_eht_capa_size_ok((const u8 *)params.he_capa,
15986 (const u8 *)params.eht_capa,
ea5cba26
JB		 15987 params.eht_capa_len,
15988 false))
577e5b8c
ST		 15989 return -EINVAL;
15990 }
15991 }
15992
15993 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
15994 params.he_6ghz_capa =
15995 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
15996
15997 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
15998 params.opmode_notif_used = true;
15999 params.opmode_notif =
16000 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
16001 }
16002
16003 err = nl80211_parse_sta_txpower_setting(info, &params.txpwr,
16004 &params.txpwr_set);
16005 if (err)
16006 return err;
16007
858fd188 16008 wdev_lock(dev->ieee80211_ptr);
577e5b8c 16009 if (add)
858fd188
JB		 16010 err = rdev_add_link_station(rdev, dev, &params);
16011 else
16012 err = rdev_mod_link_station(rdev, dev, &params);
16013 wdev_unlock(dev->ieee80211_ptr);
16014
16015 return err;
577e5b8c
ST		 16016}
16017
16018static int
16019nl80211_add_link_station(struct sk_buff *skb, struct genl_info *info)
16020{
16021 return nl80211_add_mod_link_station(skb, info, true);
16022}
16023
16024static int
16025nl80211_modify_link_station(struct sk_buff *skb, struct genl_info *info)
16026{
16027 return nl80211_add_mod_link_station(skb, info, false);
16028}
16029
16030static int
16031nl80211_remove_link_station(struct sk_buff *skb, struct genl_info *info)
16032{
16033 struct link_station_del_parameters params = {};
16034 struct cfg80211_registered_device *rdev = info->user_ptr[0];
16035 struct net_device *dev = info->user_ptr[1];
858fd188 16036 int ret;
577e5b8c
ST		 16037
16038 if (!rdev->ops->del_link_station)
16039 return -EOPNOTSUPP;
16040
16041 if (!info->attrs[NL80211_ATTR_MLD_ADDR] ||
16042 !info->attrs[NL80211_ATTR_MLO_LINK_ID])
16043 return -EINVAL;
16044
16045 params.mld_mac = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
16046 params.link_id = nla_get_u8(info->attrs[NL80211_ATTR_MLO_LINK_ID]);
16047
858fd188
JB		 16048 wdev_lock(dev->ieee80211_ptr);
16049 ret = rdev_del_link_station(rdev, dev, &params);
16050 wdev_unlock(dev->ieee80211_ptr);
16051
16052 return ret;
577e5b8c
ST		 16053}
16054
4c476991
JB		 16055#define NL80211_FLAG_NEED_WIPHY 0x01
16056#define NL80211_FLAG_NEED_NETDEV 0x02
16057#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 16058#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
16059#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
16060 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 16061#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 16062/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 16063#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
16064 NL80211_FLAG_CHECK_NETDEV_UP)
5393b917 16065#define NL80211_FLAG_CLEAR_SKB 0x20
77cbf790 16066#define NL80211_FLAG_NO_WIPHY_MTX 0x40
7b0a0e3c
JB		 16067#define NL80211_FLAG_MLO_VALID_LINK_ID 0x80
16068#define NL80211_FLAG_MLO_UNSUPPORTED 0x100
4c476991 16069
2182db91
JB		 16070#define INTERNAL_FLAG_SELECTORS(__sel) \
16071 SELECTOR(__sel, NONE, 0) /* must be first */ \
16072 SELECTOR(__sel, WIPHY, \
16073 NL80211_FLAG_NEED_WIPHY) \
16074 SELECTOR(__sel, WDEV, \
16075 NL80211_FLAG_NEED_WDEV) \
16076 SELECTOR(__sel, NETDEV, \
16077 NL80211_FLAG_NEED_NETDEV) \
7b0a0e3c
JB		 16078 SELECTOR(__sel, NETDEV_LINK, \
16079 NL80211_FLAG_NEED_NETDEV | \
16080 NL80211_FLAG_MLO_VALID_LINK_ID) \
16081 SELECTOR(__sel, NETDEV_NO_MLO, \
16082 NL80211_FLAG_NEED_NETDEV | \
16083 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 16084 SELECTOR(__sel, WIPHY_RTNL, \
16085 NL80211_FLAG_NEED_WIPHY | \
16086 NL80211_FLAG_NEED_RTNL) \
16087 SELECTOR(__sel, WIPHY_RTNL_NOMTX, \
16088 NL80211_FLAG_NEED_WIPHY | \
16089 NL80211_FLAG_NEED_RTNL | \
16090 NL80211_FLAG_NO_WIPHY_MTX) \
16091 SELECTOR(__sel, WDEV_RTNL, \
16092 NL80211_FLAG_NEED_WDEV | \
16093 NL80211_FLAG_NEED_RTNL) \
16094 SELECTOR(__sel, NETDEV_RTNL, \
16095 NL80211_FLAG_NEED_NETDEV | \
16096 NL80211_FLAG_NEED_RTNL) \
16097 SELECTOR(__sel, NETDEV_UP, \
16098 NL80211_FLAG_NEED_NETDEV_UP) \
7b0a0e3c
JB		 16099 SELECTOR(__sel, NETDEV_UP_LINK, \
16100 NL80211_FLAG_NEED_NETDEV_UP | \
16101 NL80211_FLAG_MLO_VALID_LINK_ID) \
16102 SELECTOR(__sel, NETDEV_UP_NO_MLO, \
16103 NL80211_FLAG_NEED_NETDEV_UP | \
16104 NL80211_FLAG_MLO_UNSUPPORTED) \
16105 SELECTOR(__sel, NETDEV_UP_NO_MLO_CLEAR, \
16106 NL80211_FLAG_NEED_NETDEV_UP | \
16107 NL80211_FLAG_CLEAR_SKB | \
16108 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 16109 SELECTOR(__sel, NETDEV_UP_NOTMX, \
16110 NL80211_FLAG_NEED_NETDEV_UP | \
16111 NL80211_FLAG_NO_WIPHY_MTX) \
7b0a0e3c
JB		 16112 SELECTOR(__sel, NETDEV_UP_NOTMX_NOMLO, \
16113 NL80211_FLAG_NEED_NETDEV_UP | \
16114 NL80211_FLAG_NO_WIPHY_MTX | \
16115 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 16116 SELECTOR(__sel, NETDEV_UP_CLEAR, \
16117 NL80211_FLAG_NEED_NETDEV_UP | \
16118 NL80211_FLAG_CLEAR_SKB) \
16119 SELECTOR(__sel, WDEV_UP, \
16120 NL80211_FLAG_NEED_WDEV_UP) \
7b0a0e3c
JB		 16121 SELECTOR(__sel, WDEV_UP_LINK, \
16122 NL80211_FLAG_NEED_WDEV_UP | \
16123 NL80211_FLAG_MLO_VALID_LINK_ID) \
2182db91
JB		 16124 SELECTOR(__sel, WDEV_UP_RTNL, \
16125 NL80211_FLAG_NEED_WDEV_UP | \
16126 NL80211_FLAG_NEED_RTNL) \
16127 SELECTOR(__sel, WIPHY_CLEAR, \
16128 NL80211_FLAG_NEED_WIPHY | \
16129 NL80211_FLAG_CLEAR_SKB)
16130
16131enum nl80211_internal_flags_selector {
16132#define SELECTOR(_, name, value) NL80211_IFL_SEL_##name,
16133 INTERNAL_FLAG_SELECTORS(_)
16134#undef SELECTOR
16135};
16136
16137static u32 nl80211_internal_flags[] = {
16138#define SELECTOR(_, name, value) [NL80211_IFL_SEL_##name] = value,
16139 INTERNAL_FLAG_SELECTORS(_)
16140#undef SELECTOR
16141};
16142
f84f771d 16143static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 16144 struct genl_info *info)
16145{
a05829a7 16146 struct cfg80211_registered_device *rdev = NULL;
7b0a0e3c
JB		 16147 struct wireless_dev *wdev = NULL;
16148 struct net_device *dev = NULL;
2182db91 16149 u32 internal_flags;
7b0a0e3c 16150 int err;
2182db91
JB		 16151
16152 if (WARN_ON(ops->internal_flags >= ARRAY_SIZE(nl80211_internal_flags)))
16153 return -EINVAL;
16154
16155 internal_flags = nl80211_internal_flags[ops->internal_flags];
4c476991 16156
a05829a7 16157 rtnl_lock();
2182db91 16158 if (internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 16159 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991 16160 if (IS_ERR(rdev)) {
7b0a0e3c
JB		 16161 err = PTR_ERR(rdev);
16162 goto out_unlock;
4c476991
JB		 16163 }
16164 info->user_ptr[0] = rdev;
2182db91
JB		 16165 } else if (internal_flags & NL80211_FLAG_NEED_NETDEV ||
16166 internal_flags & NL80211_FLAG_NEED_WDEV) {
a05829a7 16167 wdev = __cfg80211_wdev_from_attrs(NULL, genl_info_net(info),
89a54e48
JB		 16168 info->attrs);
16169 if (IS_ERR(wdev)) {
7b0a0e3c
JB		 16170 err = PTR_ERR(wdev);
16171 goto out_unlock;
4c476991 16172 }
89a54e48 16173
89a54e48 16174 dev = wdev->netdev;
7b0a0e3c 16175 dev_hold(dev);
f26cbf40 16176 rdev = wiphy_to_rdev(wdev->wiphy);
89a54e48 16177
2182db91 16178 if (internal_flags & NL80211_FLAG_NEED_NETDEV) {
1bf614ef 16179 if (!dev) {
7b0a0e3c
JB		 16180 err = -EINVAL;
16181 goto out_unlock;
1bf614ef
JB		 16182 }
16183
16184 info->user_ptr[1] = dev;
16185 } else {
16186 info->user_ptr[1] = wdev;
41265714 16187 }
1bf614ef 16188
2182db91 16189 if (internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
73c7da3d 16190 !wdev_running(wdev)) {
7b0a0e3c
JB		 16191 err = -ENETDOWN;
16192 goto out_unlock;
73c7da3d 16193 }
1bf614ef 16194
4c476991 16195 info->user_ptr[0] = rdev;
4c476991
JB		 16196 }
16197
7b0a0e3c
JB		 16198 if (internal_flags & NL80211_FLAG_MLO_VALID_LINK_ID) {
16199 struct nlattr *link_id = info->attrs[NL80211_ATTR_MLO_LINK_ID];
16200
16201 if (!wdev) {
16202 err = -EINVAL;
16203 goto out_unlock;
16204 }
16205
16206 /* MLO -> require valid link ID */
16207 if (wdev->valid_links &&
16208 (!link_id ||
ff3821bc 16209 !(wdev->valid_links & BIT(nla_get_u8(link_id))))) {
7b0a0e3c
JB		 16210 err = -EINVAL;
16211 goto out_unlock;
16212 }
16213
16214 /* non-MLO -> no link ID attribute accepted */
16215 if (!wdev->valid_links && link_id) {
16216 err = -EINVAL;
16217 goto out_unlock;
16218 }
16219 }
16220
16221 if (internal_flags & NL80211_FLAG_MLO_UNSUPPORTED) {
16222 if (info->attrs[NL80211_ATTR_MLO_LINK_ID] ||
16223 (wdev && wdev->valid_links)) {
16224 err = -EINVAL;
16225 goto out_unlock;
16226 }
16227 }
16228
2182db91 16229 if (rdev && !(internal_flags & NL80211_FLAG_NO_WIPHY_MTX)) {
a05829a7
JB		 16230 wiphy_lock(&rdev->wiphy);
16231 /* we keep the mutex locked until post_doit */
16232 __release(&rdev->wiphy.mtx);
16233 }
2182db91 16234 if (!(internal_flags & NL80211_FLAG_NEED_RTNL))
a05829a7
JB		 16235 rtnl_unlock();
16236
4c476991 16237 return 0;
7b0a0e3c
JB		 16238out_unlock:
16239 rtnl_unlock();
16240 dev_put(dev);
16241 return err;
4c476991
JB		 16242}
16243
f84f771d 16244static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 16245 struct genl_info *info)
16246{
2182db91
JB		 16247 u32 internal_flags = nl80211_internal_flags[ops->internal_flags];
16248
1bf614ef 16249 if (info->user_ptr[1]) {
2182db91 16250 if (internal_flags & NL80211_FLAG_NEED_WDEV) {
1bf614ef
JB		 16251 struct wireless_dev *wdev = info->user_ptr[1];
16252
1160dfa1 16253 dev_put(wdev->netdev);
1bf614ef
JB		 16254 } else {
16255 dev_put(info->user_ptr[1]);
16256 }
16257 }
5393b917 16258
77cbf790 16259 if (info->user_ptr[0] &&
2182db91 16260 !(internal_flags & NL80211_FLAG_NO_WIPHY_MTX)) {
a05829a7
JB		 16261 struct cfg80211_registered_device *rdev = info->user_ptr[0];
16262
16263 /* we kept the mutex locked since pre_doit */
16264 __acquire(&rdev->wiphy.mtx);
16265 wiphy_unlock(&rdev->wiphy);
16266 }
16267
2182db91 16268 if (internal_flags & NL80211_FLAG_NEED_RTNL)
4c476991 16269 rtnl_unlock();
5393b917
JB		 16270
16271 /* If needed, clear the netlink message payload from the SKB
16272 * as it might contain key data that shouldn't stick around on
16273 * the heap after the SKB is freed. The netlink message header
16274 * is still needed for further processing, so leave it intact.
16275 */
2182db91 16276 if (internal_flags & NL80211_FLAG_CLEAR_SKB) {
5393b917
JB		 16277 struct nlmsghdr *nlh = nlmsg_hdr(skb);
16278
16279 memset(nlmsg_data(nlh), 0, nlmsg_len(nlh));
16280 }
4c476991
JB		 16281}
16282
6bdb68ce
CH		 16283static int nl80211_set_sar_sub_specs(struct cfg80211_registered_device *rdev,
16284 struct cfg80211_sar_specs *sar_specs,
16285 struct nlattr *spec[], int index)
16286{
16287 u32 range_index, i;
16288
16289 if (!sar_specs || !spec)
16290 return -EINVAL;
16291
16292 if (!spec[NL80211_SAR_ATTR_SPECS_POWER] ||
16293 !spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX])
16294 return -EINVAL;
16295
16296 range_index = nla_get_u32(spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX]);
16297
16298 /* check if range_index exceeds num_freq_ranges */
16299 if (range_index >= rdev->wiphy.sar_capa->num_freq_ranges)
16300 return -EINVAL;
16301
16302 /* check if range_index duplicates */
16303 for (i = 0; i < index; i++) {
16304 if (sar_specs->sub_specs[i].freq_range_index == range_index)
16305 return -EINVAL;
16306 }
16307
16308 sar_specs->sub_specs[index].power =
16309 nla_get_s32(spec[NL80211_SAR_ATTR_SPECS_POWER]);
16310
16311 sar_specs->sub_specs[index].freq_range_index = range_index;
16312
16313 return 0;
16314}
16315
16316static int nl80211_set_sar_specs(struct sk_buff *skb, struct genl_info *info)
16317{
16318 struct cfg80211_registered_device *rdev = info->user_ptr[0];
16319 struct nlattr *spec[NL80211_SAR_ATTR_SPECS_MAX + 1];
16320 struct nlattr *tb[NL80211_SAR_ATTR_MAX + 1];
16321 struct cfg80211_sar_specs *sar_spec;
16322 enum nl80211_sar_type type;
16323 struct nlattr *spec_list;
16324 u32 specs;
16325 int rem, err;
16326
16327 if (!rdev->wiphy.sar_capa || !rdev->ops->set_sar_specs)
16328 return -EOPNOTSUPP;
16329
16330 if (!info->attrs[NL80211_ATTR_SAR_SPEC])
16331 return -EINVAL;
16332
16333 nla_parse_nested(tb, NL80211_SAR_ATTR_MAX,
16334 info->attrs[NL80211_ATTR_SAR_SPEC],
16335 NULL, NULL);
16336
16337 if (!tb[NL80211_SAR_ATTR_TYPE] || !tb[NL80211_SAR_ATTR_SPECS])
16338 return -EINVAL;
16339
16340 type = nla_get_u32(tb[NL80211_SAR_ATTR_TYPE]);
16341 if (type != rdev->wiphy.sar_capa->type)
16342 return -EINVAL;
16343
16344 specs = 0;
16345 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem)
16346 specs++;
16347
16348 if (specs > rdev->wiphy.sar_capa->num_freq_ranges)
16349 return -EINVAL;
16350
40f231e7 16351 sar_spec = kzalloc(struct_size(sar_spec, sub_specs, specs), GFP_KERNEL);
6bdb68ce
CH		 16352 if (!sar_spec)
16353 return -ENOMEM;
16354
16355 sar_spec->type = type;
16356 specs = 0;
16357 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem) {
16358 nla_parse_nested(spec, NL80211_SAR_ATTR_SPECS_MAX,
16359 spec_list, NULL, NULL);
16360
16361 switch (type) {
16362 case NL80211_SAR_TYPE_POWER:
16363 if (nl80211_set_sar_sub_specs(rdev, sar_spec,
16364 spec, specs)) {
16365 err = -EINVAL;
16366 goto error;
16367 }
16368 break;
16369 default:
16370 err = -EINVAL;
16371 goto error;
16372 }
16373 specs++;
16374 }
16375
16376 sar_spec->num_sub_specs = specs;
16377
16378 rdev->cur_cmd_info = info;
16379 err = rdev_set_sar_specs(rdev, sar_spec);
16380 rdev->cur_cmd_info = NULL;
16381error:
16382 kfree(sar_spec);
16383 return err;
16384}
16385
2182db91
JB		 16386#define SELECTOR(__sel, name, value) \
16387 ((__sel) == (value)) ? NL80211_IFL_SEL_##name :
16388int __missing_selector(void);
16389#define IFLAGS(__val) INTERNAL_FLAG_SELECTORS(__val) __missing_selector()
16390
4534de83 16391static const struct genl_ops nl80211_ops[] = {
55682965
JB		 16392 {
16393 .cmd = NL80211_CMD_GET_WIPHY,
ef6243ac 16394 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 16395 .doit = nl80211_get_wiphy,
16396 .dumpit = nl80211_dump_wiphy,
86e8cf98 16397 .done = nl80211_dump_wiphy_done,
55682965 16398 /* can be retrieved by unprivileged users */
2182db91 16399 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
55682965 16400 },
66a9b928
JK		 16401};
16402
16403static const struct genl_small_ops nl80211_small_ops[] = {
55682965
JB		 16404 {
16405 .cmd = NL80211_CMD_SET_WIPHY,
ef6243ac 16406 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16407 .doit = nl80211_set_wiphy,
5617c6cd 16408 .flags = GENL_UNS_ADMIN_PERM,
55682965
JB		 16409 },
16410 {
16411 .cmd = NL80211_CMD_GET_INTERFACE,
ef6243ac 16412 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 16413 .doit = nl80211_get_interface,
16414 .dumpit = nl80211_dump_interface,
55682965 16415 /* can be retrieved by unprivileged users */
2182db91 16416 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV),
55682965
JB		 16417 },
16418 {
16419 .cmd = NL80211_CMD_SET_INTERFACE,
ef6243ac 16420 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16421 .doit = nl80211_set_interface,
5617c6cd 16422 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16423 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16424 NL80211_FLAG_NEED_RTNL),
55682965
JB		 16425 },
16426 {
16427 .cmd = NL80211_CMD_NEW_INTERFACE,
ef6243ac 16428 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16429 .doit = nl80211_new_interface,
5617c6cd 16430 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16431 .internal_flags =
16432 IFLAGS(NL80211_FLAG_NEED_WIPHY |
16433 NL80211_FLAG_NEED_RTNL |
16434 /* we take the wiphy mutex later ourselves */
16435 NL80211_FLAG_NO_WIPHY_MTX),
55682965
JB		 16436 },
16437 {
16438 .cmd = NL80211_CMD_DEL_INTERFACE,
ef6243ac 16439 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16440 .doit = nl80211_del_interface,
5617c6cd 16441 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16442 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16443 NL80211_FLAG_NEED_RTNL),
41ade00f
JB		 16444 },
16445 {
16446 .cmd = NL80211_CMD_GET_KEY,
ef6243ac 16447 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16448 .doit = nl80211_get_key,
5617c6cd 16449 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16450 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
41ade00f
JB		 16451 },
16452 {
16453 .cmd = NL80211_CMD_SET_KEY,
ef6243ac 16454 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16455 .doit = nl80211_set_key,
5617c6cd 16456 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c 16457 /* cannot use NL80211_FLAG_MLO_VALID_LINK_ID, depends on key */
2182db91
JB		 16458 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16459 NL80211_FLAG_CLEAR_SKB),
41ade00f
JB		 16460 },
16461 {
16462 .cmd = NL80211_CMD_NEW_KEY,
ef6243ac 16463 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16464 .doit = nl80211_new_key,
5617c6cd 16465 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16466 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16467 NL80211_FLAG_CLEAR_SKB),
41ade00f
JB		 16468 },
16469 {
16470 .cmd = NL80211_CMD_DEL_KEY,
ef6243ac 16471 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16472 .doit = nl80211_del_key,
5617c6cd 16473 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16474 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
55682965 16475 },
ed1b6cc7
JB		 16476 {
16477 .cmd = NL80211_CMD_SET_BEACON,
ef6243ac 16478 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16479 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16480 .doit = nl80211_set_beacon,
7b0a0e3c
JB		 16481 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16482 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7
JB		 16483 },
16484 {
8860020e 16485 .cmd = NL80211_CMD_START_AP,
ef6243ac 16486 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16487 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16488 .doit = nl80211_start_ap,
7b0a0e3c
JB		 16489 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16490 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7
JB		 16491 },
16492 {
8860020e 16493 .cmd = NL80211_CMD_STOP_AP,
ef6243ac 16494 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16495 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16496 .doit = nl80211_stop_ap,
7b0a0e3c
JB		 16497 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16498 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7 16499 },
5727ef1b
JB		 16500 {
16501 .cmd = NL80211_CMD_GET_STATION,
ef6243ac 16502 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16503 .doit = nl80211_get_station,
2ec600d6 16504 .dumpit = nl80211_dump_station,
2182db91 16505 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
5727ef1b
JB		 16506 },
16507 {
16508 .cmd = NL80211_CMD_SET_STATION,
ef6243ac 16509 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16510 .doit = nl80211_set_station,
5617c6cd 16511 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16512 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5727ef1b
JB		 16513 },
16514 {
16515 .cmd = NL80211_CMD_NEW_STATION,
ef6243ac 16516 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16517 .doit = nl80211_new_station,
5617c6cd 16518 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16519 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5727ef1b
JB		 16520 },
16521 {
16522 .cmd = NL80211_CMD_DEL_STATION,
ef6243ac 16523 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16524 .doit = nl80211_del_station,
5617c6cd 16525 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16526 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16527 },
16528 {
16529 .cmd = NL80211_CMD_GET_MPATH,
ef6243ac 16530 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6
LCC		 16531 .doit = nl80211_get_mpath,
16532 .dumpit = nl80211_dump_mpath,
5617c6cd 16533 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16534 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6 16535 },
66be7d2b
HR		 16536 {
16537 .cmd = NL80211_CMD_GET_MPP,
ef6243ac 16538 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
66be7d2b
HR		 16539 .doit = nl80211_get_mpp,
16540 .dumpit = nl80211_dump_mpp,
5617c6cd 16541 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16542 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
66be7d2b 16543 },
2ec600d6
LCC		 16544 {
16545 .cmd = NL80211_CMD_SET_MPATH,
ef6243ac 16546 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16547 .doit = nl80211_set_mpath,
5617c6cd 16548 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16549 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16550 },
16551 {
16552 .cmd = NL80211_CMD_NEW_MPATH,
ef6243ac 16553 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16554 .doit = nl80211_new_mpath,
5617c6cd 16555 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16556 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16557 },
16558 {
16559 .cmd = NL80211_CMD_DEL_MPATH,
ef6243ac 16560 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16561 .doit = nl80211_del_mpath,
5617c6cd 16562 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16563 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
9f1ba906
JM		 16564 },
16565 {
16566 .cmd = NL80211_CMD_SET_BSS,
ef6243ac 16567 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9f1ba906 16568 .doit = nl80211_set_bss,
5617c6cd 16569 .flags = GENL_UNS_ADMIN_PERM,
1e0f8cc9
JB		 16570 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16571 NL80211_FLAG_MLO_VALID_LINK_ID),
b2e1b302 16572 },
f130347c
LR		 16573 {
16574 .cmd = NL80211_CMD_GET_REG,
ef6243ac 16575 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad30ca2c
AN		 16576 .doit = nl80211_get_reg_do,
16577 .dumpit = nl80211_get_reg_dump,
f130347c
LR		 16578 /* can be retrieved by unprivileged users */
16579 },
b6863036 16580#ifdef CONFIG_CFG80211_CRDA_SUPPORT
b2e1b302
LR		 16581 {
16582 .cmd = NL80211_CMD_SET_REG,
ef6243ac 16583 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 16584 .doit = nl80211_set_reg,
b2e1b302
LR		 16585 .flags = GENL_ADMIN_PERM,
16586 },
b6863036 16587#endif
b2e1b302
LR		 16588 {
16589 .cmd = NL80211_CMD_REQ_SET_REG,
ef6243ac 16590 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 16591 .doit = nl80211_req_set_reg,
93da9cc1 16592 .flags = GENL_ADMIN_PERM,
16593 },
1ea4ff3e
JB		 16594 {
16595 .cmd = NL80211_CMD_RELOAD_REGDB,
ef6243ac 16596 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1ea4ff3e 16597 .doit = nl80211_reload_regdb,
1ea4ff3e
JB		 16598 .flags = GENL_ADMIN_PERM,
16599 },
93da9cc1 16600 {
24bdd9f4 16601 .cmd = NL80211_CMD_GET_MESH_CONFIG,
ef6243ac 16602 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 16603 .doit = nl80211_get_mesh_config,
93da9cc1 16604 /* can be retrieved by unprivileged users */
2182db91 16605 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
93da9cc1 16606 },
16607 {
24bdd9f4 16608 .cmd = NL80211_CMD_SET_MESH_CONFIG,
ef6243ac 16609 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 16610 .doit = nl80211_update_mesh_config,
5617c6cd 16611 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16612 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
9aed3cc1 16613 },
2a519311
JB		 16614 {
16615 .cmd = NL80211_CMD_TRIGGER_SCAN,
ef6243ac 16616 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311 16617 .doit = nl80211_trigger_scan,
5617c6cd 16618 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16619 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
2a519311 16620 },
91d3ab46
VK		 16621 {
16622 .cmd = NL80211_CMD_ABORT_SCAN,
ef6243ac 16623 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
91d3ab46 16624 .doit = nl80211_abort_scan,
5617c6cd 16625 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16626 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
91d3ab46 16627 },
2a519311
JB		 16628 {
16629 .cmd = NL80211_CMD_GET_SCAN,
ef6243ac 16630 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311
JB		 16631 .dumpit = nl80211_dump_scan,
16632 },
807f8a8c
LC		 16633 {
16634 .cmd = NL80211_CMD_START_SCHED_SCAN,
ef6243ac 16635 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 16636 .doit = nl80211_start_sched_scan,
5617c6cd 16637 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16638 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
807f8a8c
LC		 16639 },
16640 {
16641 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
ef6243ac 16642 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 16643 .doit = nl80211_stop_sched_scan,
5617c6cd 16644 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16645 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
807f8a8c 16646 },
636a5d36
JM		 16647 {
16648 .cmd = NL80211_CMD_AUTHENTICATE,
ef6243ac 16649 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16650 .doit = nl80211_authenticate,
5617c6cd 16651 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16652 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16653 NL80211_FLAG_CLEAR_SKB),
636a5d36
JM		 16654 },
16655 {
16656 .cmd = NL80211_CMD_ASSOCIATE,
ef6243ac 16657 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16658 .doit = nl80211_associate,
5617c6cd 16659 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16660 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16661 NL80211_FLAG_CLEAR_SKB),
636a5d36
JM		 16662 },
16663 {
16664 .cmd = NL80211_CMD_DEAUTHENTICATE,
ef6243ac 16665 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16666 .doit = nl80211_deauthenticate,
5617c6cd 16667 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16668 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
636a5d36
JM		 16669 },
16670 {
16671 .cmd = NL80211_CMD_DISASSOCIATE,
ef6243ac 16672 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16673 .doit = nl80211_disassociate,
5617c6cd 16674 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16675 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
636a5d36 16676 },
04a773ad
JB		 16677 {
16678 .cmd = NL80211_CMD_JOIN_IBSS,
ef6243ac 16679 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 16680 .doit = nl80211_join_ibss,
5617c6cd 16681 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16682 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
04a773ad
JB		 16683 },
16684 {
16685 .cmd = NL80211_CMD_LEAVE_IBSS,
ef6243ac 16686 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 16687 .doit = nl80211_leave_ibss,
5617c6cd 16688 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16689 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
04a773ad 16690 },
aff89a9b
JB		 16691#ifdef CONFIG_NL80211_TESTMODE
16692 {
16693 .cmd = NL80211_CMD_TESTMODE,
ef6243ac 16694 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
aff89a9b 16695 .doit = nl80211_testmode_do,
71063f0e 16696 .dumpit = nl80211_testmode_dump,
5617c6cd 16697 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16698 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
aff89a9b
JB		 16699 },
16700#endif
b23aa676
SO		 16701 {
16702 .cmd = NL80211_CMD_CONNECT,
ef6243ac 16703 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 16704 .doit = nl80211_connect,
5617c6cd 16705 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16706 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16707 NL80211_FLAG_CLEAR_SKB),
b23aa676 16708 },
088e8df8 16709 {
16710 .cmd = NL80211_CMD_UPDATE_CONNECT_PARAMS,
ef6243ac 16711 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
088e8df8 16712 .doit = nl80211_update_connect_params,
088e8df8 16713 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16714 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16715 NL80211_FLAG_CLEAR_SKB),
088e8df8 16716 },
b23aa676
SO		 16717 {
16718 .cmd = NL80211_CMD_DISCONNECT,
ef6243ac 16719 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 16720 .doit = nl80211_disconnect,
5617c6cd 16721 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16722 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
b23aa676 16723 },
463d0183
JB		 16724 {
16725 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
ef6243ac 16726 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
463d0183 16727 .doit = nl80211_wiphy_netns,
5617c6cd 16728 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16729 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
16730 NL80211_FLAG_NEED_RTNL |
16731 NL80211_FLAG_NO_WIPHY_MTX),
463d0183 16732 },
61fa713c
HS		 16733 {
16734 .cmd = NL80211_CMD_GET_SURVEY,
ef6243ac 16735 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
61fa713c
HS		 16736 .dumpit = nl80211_dump_survey,
16737 },
67fbb16b
SO		 16738 {
16739 .cmd = NL80211_CMD_SET_PMKSA,
ef6243ac 16740 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16741 .doit = nl80211_setdel_pmksa,
5617c6cd 16742 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16743 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16744 NL80211_FLAG_CLEAR_SKB),
67fbb16b
SO		 16745 },
16746 {
16747 .cmd = NL80211_CMD_DEL_PMKSA,
ef6243ac 16748 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16749 .doit = nl80211_setdel_pmksa,
5617c6cd 16750 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16751 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
67fbb16b
SO		 16752 },
16753 {
16754 .cmd = NL80211_CMD_FLUSH_PMKSA,
ef6243ac 16755 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16756 .doit = nl80211_flush_pmksa,
5617c6cd 16757 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16758 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
67fbb16b 16759 },
9588bbd5
JM		 16760 {
16761 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
ef6243ac 16762 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 16763 .doit = nl80211_remain_on_channel,
5617c6cd 16764 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16765 /* FIXME: requiring a link ID here is probably not good */
16766 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16767 NL80211_FLAG_MLO_VALID_LINK_ID),
9588bbd5
JM		 16768 },
16769 {
16770 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
ef6243ac 16771 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 16772 .doit = nl80211_cancel_remain_on_channel,
5617c6cd 16773 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16774 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
9588bbd5 16775 },
13ae75b1
JM		 16776 {
16777 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
ef6243ac 16778 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
13ae75b1 16779 .doit = nl80211_set_tx_bitrate_mask,
5617c6cd 16780 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16781 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16782 NL80211_FLAG_MLO_VALID_LINK_ID),
13ae75b1 16783 },
026331c4 16784 {
2e161f78 16785 .cmd = NL80211_CMD_REGISTER_FRAME,
ef6243ac 16786 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 16787 .doit = nl80211_register_mgmt,
5617c6cd 16788 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16789 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV),
026331c4
JM		 16790 },
16791 {
2e161f78 16792 .cmd = NL80211_CMD_FRAME,
ef6243ac 16793 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 16794 .doit = nl80211_tx_mgmt,
5617c6cd 16795 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16796 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
f7ca38df
JB		 16797 },
16798 {
16799 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
ef6243ac 16800 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f7ca38df 16801 .doit = nl80211_tx_mgmt_cancel_wait,
5617c6cd 16802 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16803 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
026331c4 16804 },
ffb9eb3d
KV		 16805 {
16806 .cmd = NL80211_CMD_SET_POWER_SAVE,
ef6243ac 16807 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 16808 .doit = nl80211_set_power_save,
5617c6cd 16809 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16810 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ffb9eb3d
KV		 16811 },
16812 {
16813 .cmd = NL80211_CMD_GET_POWER_SAVE,
ef6243ac 16814 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 16815 .doit = nl80211_get_power_save,
ffb9eb3d 16816 /* can be retrieved by unprivileged users */
2182db91 16817 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ffb9eb3d 16818 },
d6dc1a38
JO		 16819 {
16820 .cmd = NL80211_CMD_SET_CQM,
ef6243ac 16821 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
d6dc1a38 16822 .doit = nl80211_set_cqm,
5617c6cd 16823 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16824 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
d6dc1a38 16825 },
f444de05
JB		 16826 {
16827 .cmd = NL80211_CMD_SET_CHANNEL,
ef6243ac 16828 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f444de05 16829 .doit = nl80211_set_channel,
5617c6cd 16830 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16831 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16832 NL80211_FLAG_MLO_VALID_LINK_ID),
f444de05 16833 },
29cbe68c
JB		 16834 {
16835 .cmd = NL80211_CMD_JOIN_MESH,
ef6243ac 16836 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 16837 .doit = nl80211_join_mesh,
5617c6cd 16838 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16839 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
29cbe68c
JB		 16840 },
16841 {
16842 .cmd = NL80211_CMD_LEAVE_MESH,
ef6243ac 16843 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 16844 .doit = nl80211_leave_mesh,
5617c6cd 16845 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16846 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
29cbe68c 16847 },
6e0bd6c3
RL		 16848 {
16849 .cmd = NL80211_CMD_JOIN_OCB,
ef6243ac 16850 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 16851 .doit = nl80211_join_ocb,
5617c6cd 16852 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16853 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
6e0bd6c3
RL		 16854 },
16855 {
16856 .cmd = NL80211_CMD_LEAVE_OCB,
ef6243ac 16857 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 16858 .doit = nl80211_leave_ocb,
5617c6cd 16859 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16860 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
6e0bd6c3 16861 },
dfb89c56 16862#ifdef CONFIG_PM
ff1b6e69
JB		 16863 {
16864 .cmd = NL80211_CMD_GET_WOWLAN,
ef6243ac 16865 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 16866 .doit = nl80211_get_wowlan,
ff1b6e69 16867 /* can be retrieved by unprivileged users */
2182db91 16868 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
ff1b6e69
JB		 16869 },
16870 {
16871 .cmd = NL80211_CMD_SET_WOWLAN,
ef6243ac 16872 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 16873 .doit = nl80211_set_wowlan,
5617c6cd 16874 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16875 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
ff1b6e69 16876 },
dfb89c56 16877#endif
e5497d76
JB		 16878 {
16879 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
ef6243ac 16880 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e5497d76 16881 .doit = nl80211_set_rekey_data,
5617c6cd 16882 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16883 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16884 NL80211_FLAG_CLEAR_SKB),
e5497d76 16885 },
109086ce
AN		 16886 {
16887 .cmd = NL80211_CMD_TDLS_MGMT,
ef6243ac 16888 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 16889 .doit = nl80211_tdls_mgmt,
5617c6cd 16890 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16891 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
109086ce
AN		 16892 },
16893 {
16894 .cmd = NL80211_CMD_TDLS_OPER,
ef6243ac 16895 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 16896 .doit = nl80211_tdls_oper,
5617c6cd 16897 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16898 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
109086ce 16899 },
28946da7
JB		 16900 {
16901 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
ef6243ac 16902 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
28946da7 16903 .doit = nl80211_register_unexpected_frame,
5617c6cd 16904 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16905 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
28946da7 16906 },
7f6cf311
JB		 16907 {
16908 .cmd = NL80211_CMD_PROBE_CLIENT,
ef6243ac 16909 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
7f6cf311 16910 .doit = nl80211_probe_client,
5617c6cd 16911 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16912 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
7f6cf311 16913 },
5e760230
JB		 16914 {
16915 .cmd = NL80211_CMD_REGISTER_BEACONS,
ef6243ac 16916 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5e760230 16917 .doit = nl80211_register_beacons,
5617c6cd 16918 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16919 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
5e760230 16920 },
1d9d9213
SW		 16921 {
16922 .cmd = NL80211_CMD_SET_NOACK_MAP,
ef6243ac 16923 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1d9d9213 16924 .doit = nl80211_set_noack_map,
5617c6cd 16925 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16926 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
1d9d9213 16927 },
98104fde
JB		 16928 {
16929 .cmd = NL80211_CMD_START_P2P_DEVICE,
ef6243ac 16930 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 16931 .doit = nl80211_start_p2p_device,
5617c6cd 16932 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16933 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16934 NL80211_FLAG_NEED_RTNL),
98104fde
JB		 16935 },
16936 {
16937 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
ef6243ac 16938 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 16939 .doit = nl80211_stop_p2p_device,
5617c6cd 16940 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16941 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16942 NL80211_FLAG_NEED_RTNL),
cb3b7d87
AB		 16943 },
16944 {
16945 .cmd = NL80211_CMD_START_NAN,
ef6243ac 16946 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 16947 .doit = nl80211_start_nan,
cb3b7d87 16948 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16949 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16950 NL80211_FLAG_NEED_RTNL),
cb3b7d87
AB		 16951 },
16952 {
16953 .cmd = NL80211_CMD_STOP_NAN,
ef6243ac 16954 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 16955 .doit = nl80211_stop_nan,
cb3b7d87 16956 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16957 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16958 NL80211_FLAG_NEED_RTNL),
a442b761
AB		 16959 },
16960 {
16961 .cmd = NL80211_CMD_ADD_NAN_FUNCTION,
ef6243ac 16962 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 16963 .doit = nl80211_nan_add_func,
a442b761 16964 .flags = GENL_ADMIN_PERM,
2182db91 16965 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
a442b761
AB		 16966 },
16967 {
16968 .cmd = NL80211_CMD_DEL_NAN_FUNCTION,
ef6243ac 16969 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 16970 .doit = nl80211_nan_del_func,
a442b761 16971 .flags = GENL_ADMIN_PERM,
2182db91 16972 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
a5a9dcf2
AB		 16973 },
16974 {
16975 .cmd = NL80211_CMD_CHANGE_NAN_CONFIG,
ef6243ac 16976 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a5a9dcf2 16977 .doit = nl80211_nan_change_config,
a5a9dcf2 16978 .flags = GENL_ADMIN_PERM,
2182db91 16979 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
98104fde 16980 },
f4e583c8
AQ		 16981 {
16982 .cmd = NL80211_CMD_SET_MCAST_RATE,
ef6243ac 16983 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f4e583c8 16984 .doit = nl80211_set_mcast_rate,
5617c6cd 16985 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16986 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
77765eaf
VT		 16987 },
16988 {
16989 .cmd = NL80211_CMD_SET_MAC_ACL,
ef6243ac 16990 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
77765eaf 16991 .doit = nl80211_set_mac_acl,
5617c6cd 16992 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16993 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16994 NL80211_FLAG_MLO_UNSUPPORTED),
f4e583c8 16995 },
04f39047
SW		 16996 {
16997 .cmd = NL80211_CMD_RADAR_DETECT,
ef6243ac 16998 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04f39047 16999 .doit = nl80211_start_radar_detection,
5617c6cd 17000 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17001 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
7b0a0e3c
JB		 17002 NL80211_FLAG_NO_WIPHY_MTX |
17003 NL80211_FLAG_MLO_UNSUPPORTED),
04f39047 17004 },
3713b4e3
JB		 17005 {
17006 .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
ef6243ac 17007 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3713b4e3 17008 .doit = nl80211_get_protocol_features,
3713b4e3 17009 },
355199e0
JM		 17010 {
17011 .cmd = NL80211_CMD_UPDATE_FT_IES,
ef6243ac 17012 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
355199e0 17013 .doit = nl80211_update_ft_ies,
5617c6cd 17014 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17015 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
355199e0 17016 },
5de17984
AS		 17017 {
17018 .cmd = NL80211_CMD_CRIT_PROTOCOL_START,
ef6243ac 17019 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 17020 .doit = nl80211_crit_protocol_start,
5617c6cd 17021 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17022 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
5de17984
AS		 17023 },
17024 {
17025 .cmd = NL80211_CMD_CRIT_PROTOCOL_STOP,
ef6243ac 17026 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 17027 .doit = nl80211_crit_protocol_stop,
5617c6cd 17028 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17029 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
be29b99a
AK		 17030 },
17031 {
17032 .cmd = NL80211_CMD_GET_COALESCE,
ef6243ac 17033 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 17034 .doit = nl80211_get_coalesce,
2182db91 17035 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
be29b99a
AK		 17036 },
17037 {
17038 .cmd = NL80211_CMD_SET_COALESCE,
ef6243ac 17039 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 17040 .doit = nl80211_set_coalesce,
5617c6cd 17041 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17042 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
16ef1fe2
SW		 17043 },
17044 {
17045 .cmd = NL80211_CMD_CHANNEL_SWITCH,
ef6243ac 17046 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
16ef1fe2 17047 .doit = nl80211_channel_switch,
5617c6cd 17048 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 17049 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17050 NL80211_FLAG_MLO_VALID_LINK_ID),
16ef1fe2 17051 },
ad7e718c
JB		 17052 {
17053 .cmd = NL80211_CMD_VENDOR,
ef6243ac 17054 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad7e718c 17055 .doit = nl80211_vendor_cmd,
7bdbe400 17056 .dumpit = nl80211_vendor_cmd_dump,
5617c6cd 17057 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 17058 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
17059 NL80211_FLAG_CLEAR_SKB),
ad7e718c 17060 },
fa9ffc74
KP		 17061 {
17062 .cmd = NL80211_CMD_SET_QOS_MAP,
ef6243ac 17063 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
fa9ffc74 17064 .doit = nl80211_set_qos_map,
5617c6cd 17065 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17066 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
fa9ffc74 17067 },
960d01ac
JB		 17068 {
17069 .cmd = NL80211_CMD_ADD_TX_TS,
ef6243ac 17070 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 17071 .doit = nl80211_add_tx_ts,
5617c6cd 17072 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 17073 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17074 NL80211_FLAG_MLO_UNSUPPORTED),
960d01ac
JB		 17075 },
17076 {
17077 .cmd = NL80211_CMD_DEL_TX_TS,
ef6243ac 17078 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 17079 .doit = nl80211_del_tx_ts,
5617c6cd 17080 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17081 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
960d01ac 17082 },
1057d35e
AN		 17083 {
17084 .cmd = NL80211_CMD_TDLS_CHANNEL_SWITCH,
ef6243ac 17085 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 17086 .doit = nl80211_tdls_channel_switch,
5617c6cd 17087 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17088 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
1057d35e
AN		 17089 },
17090 {
17091 .cmd = NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH,
ef6243ac 17092 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 17093 .doit = nl80211_tdls_cancel_channel_switch,
5617c6cd 17094 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17095 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
1057d35e 17096 },
ce0ce13a
MB		 17097 {
17098 .cmd = NL80211_CMD_SET_MULTICAST_TO_UNICAST,
ef6243ac 17099 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ce0ce13a 17100 .doit = nl80211_set_multicast_to_unicast,
ce0ce13a 17101 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17102 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ce0ce13a 17103 },
3a00df57
AS		 17104 {
17105 .cmd = NL80211_CMD_SET_PMK,
ef6243ac 17106 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 17107 .doit = nl80211_set_pmk,
2182db91
JB		 17108 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17109 NL80211_FLAG_CLEAR_SKB),
3a00df57
AS		 17110 },
17111 {
17112 .cmd = NL80211_CMD_DEL_PMK,
ef6243ac 17113 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 17114 .doit = nl80211_del_pmk,
2182db91 17115 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
3a00df57 17116 },
40cbfa90
SD		 17117 {
17118 .cmd = NL80211_CMD_EXTERNAL_AUTH,
ef6243ac 17119 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
40cbfa90 17120 .doit = nl80211_external_auth,
40cbfa90 17121 .flags = GENL_ADMIN_PERM,
2182db91 17122 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
40cbfa90 17123 },
2576a9ac
DK		 17124 {
17125 .cmd = NL80211_CMD_CONTROL_PORT_FRAME,
ef6243ac 17126 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2576a9ac 17127 .doit = nl80211_tx_control_port,
2576a9ac 17128 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17129 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2576a9ac 17130 },
81e54d08
PKC		 17131 {
17132 .cmd = NL80211_CMD_GET_FTM_RESPONDER_STATS,
ef6243ac 17133 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
81e54d08 17134 .doit = nl80211_get_ftm_responder_stats,
7b0a0e3c
JB		 17135 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
17136 NL80211_FLAG_MLO_VALID_LINK_ID),
81e54d08 17137 },
9bb7e0f2
JB		 17138 {
17139 .cmd = NL80211_CMD_PEER_MEASUREMENT_START,
ef6243ac 17140 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9bb7e0f2 17141 .doit = nl80211_pmsr_start,
9bb7e0f2 17142 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17143 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
9bb7e0f2 17144 },
30c63115
S		 17145 {
17146 .cmd = NL80211_CMD_NOTIFY_RADAR,
ef6243ac 17147 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
30c63115 17148 .doit = nl80211_notify_radar_detection,
30c63115 17149 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17150 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
30c63115 17151 },
cb74e977
SD		 17152 {
17153 .cmd = NL80211_CMD_UPDATE_OWE_INFO,
17154 .doit = nl80211_update_owe_info,
17155 .flags = GENL_ADMIN_PERM,
2182db91 17156 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5ab92e7f
RM		 17157 },
17158 {
17159 .cmd = NL80211_CMD_PROBE_MESH_LINK,
17160 .doit = nl80211_probe_mesh_link,
17161 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17162 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
cb74e977 17163 },
77f576de
T		 17164 {
17165 .cmd = NL80211_CMD_SET_TID_CONFIG,
17166 .doit = nl80211_set_tid_config,
17167 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 17168 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
17169 NL80211_FLAG_MLO_VALID_LINK_ID),
77f576de 17170 },
6bdb68ce
CH		 17171 {
17172 .cmd = NL80211_CMD_SET_SAR_SPECS,
17173 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17174 .doit = nl80211_set_sar_specs,
17175 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 17176 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
17177 NL80211_FLAG_NEED_RTNL),
6bdb68ce 17178 },
0d2ab3ae
JC		 17179 {
17180 .cmd = NL80211_CMD_COLOR_CHANGE_REQUEST,
17181 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17182 .doit = nl80211_color_change,
17183 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17184 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
0d2ab3ae 17185 },
e306784a
SM		 17186 {
17187 .cmd = NL80211_CMD_SET_FILS_AAD,
17188 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17189 .doit = nl80211_set_fils_aad,
17190 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17191 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
e306784a 17192 },
7b0a0e3c
JB		 17193 {
17194 .cmd = NL80211_CMD_ADD_LINK,
17195 .doit = nl80211_add_link,
17196 .flags = GENL_UNS_ADMIN_PERM,
17197 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
17198 },
17199 {
17200 .cmd = NL80211_CMD_REMOVE_LINK,
17201 .doit = nl80211_remove_link,
17202 .flags = GENL_UNS_ADMIN_PERM,
577e5b8c
ST		 17203 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17204 NL80211_FLAG_MLO_VALID_LINK_ID),
17205 },
17206 {
17207 .cmd = NL80211_CMD_ADD_LINK_STA,
17208 .doit = nl80211_add_link_station,
17209 .flags = GENL_UNS_ADMIN_PERM,
17210 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17211 NL80211_FLAG_MLO_VALID_LINK_ID),
17212 },
17213 {
17214 .cmd = NL80211_CMD_MODIFY_LINK_STA,
17215 .doit = nl80211_modify_link_station,
17216 .flags = GENL_UNS_ADMIN_PERM,
17217 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17218 NL80211_FLAG_MLO_VALID_LINK_ID),
17219 },
17220 {
17221 .cmd = NL80211_CMD_REMOVE_LINK_STA,
17222 .doit = nl80211_remove_link_station,
17223 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 17224 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17225 NL80211_FLAG_MLO_VALID_LINK_ID),
17226 },
55682965 17227};
9588bbd5 17228
56989f6d 17229static struct genl_family nl80211_fam __ro_after_init = {
489111e5
JB		 17230 .name = NL80211_GENL_NAME, /* have users key off the name instead */
17231 .hdrsize = 0, /* no private header */
17232 .version = 1, /* no particular meaning now */
17233 .maxattr = NL80211_ATTR_MAX,
3b0f31f2 17234 .policy = nl80211_policy,
489111e5
JB		 17235 .netnsok = true,
17236 .pre_doit = nl80211_pre_doit,
17237 .post_doit = nl80211_post_doit,
17238 .module = THIS_MODULE,
17239 .ops = nl80211_ops,
17240 .n_ops = ARRAY_SIZE(nl80211_ops),
66a9b928
JK		 17241 .small_ops = nl80211_small_ops,
17242 .n_small_ops = ARRAY_SIZE(nl80211_small_ops),
9c5d03d3 17243 .resv_start_op = NL80211_CMD_REMOVE_LINK_STA + 1,
489111e5
JB		 17244 .mcgrps = nl80211_mcgrps,
17245 .n_mcgrps = ARRAY_SIZE(nl80211_mcgrps),
50508d94 17246 .parallel_ops = true,
489111e5
JB		 17247};
17248
55682965
JB		 17249/* notification functions */
17250
3bb20556
JB		 17251void nl80211_notify_wiphy(struct cfg80211_registered_device *rdev,
17252 enum nl80211_commands cmd)
55682965
JB		 17253{
17254 struct sk_buff *msg;
86e8cf98 17255 struct nl80211_dump_wiphy_state state = {};
55682965 17256
3bb20556
JB		 17257 WARN_ON(cmd != NL80211_CMD_NEW_WIPHY &&
17258 cmd != NL80211_CMD_DEL_WIPHY);
17259
fd2120ca 17260 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 17261 if (!msg)
17262 return;
17263
3bb20556 17264 if (nl80211_send_wiphy(rdev, cmd, msg, 0, 0, 0, &state) < 0) {
55682965
JB		 17265 nlmsg_free(msg);
17266 return;
17267 }
17268
68eb5503 17269 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17270 NL80211_MCGRP_CONFIG, GFP_KERNEL);
55682965
JB		 17271}
17272
896ff063
DK		 17273void nl80211_notify_iface(struct cfg80211_registered_device *rdev,
17274 struct wireless_dev *wdev,
17275 enum nl80211_commands cmd)
17276{
17277 struct sk_buff *msg;
17278
896ff063
DK		 17279 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17280 if (!msg)
17281 return;
17282
3d1a5bbf 17283 if (nl80211_send_iface(msg, 0, 0, 0, rdev, wdev, cmd) < 0) {
896ff063
DK		 17284 nlmsg_free(msg);
17285 return;
17286 }
17287
17288 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17289 NL80211_MCGRP_CONFIG, GFP_KERNEL);
17290}
17291
362a415d
JB		 17292static int nl80211_add_scan_req(struct sk_buff *msg,
17293 struct cfg80211_registered_device *rdev)
17294{
17295 struct cfg80211_scan_request *req = rdev->scan_req;
17296 struct nlattr *nest;
17297 int i;
c8cb5b85 17298 struct cfg80211_scan_info *info;
362a415d
JB		 17299
17300 if (WARN_ON(!req))
17301 return 0;
17302
ae0be8de 17303 nest = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_SSIDS);
362a415d
JB		 17304 if (!nest)
17305 goto nla_put_failure;
9360ffd1
DM		 17306 for (i = 0; i < req->n_ssids; i++) {
17307 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
17308 goto nla_put_failure;
17309 }
362a415d
JB		 17310 nla_nest_end(msg, nest);
17311
2032f3b2
TP		 17312 if (req->flags & NL80211_SCAN_FLAG_FREQ_KHZ) {
17313 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQ_KHZ);
17314 if (!nest)
17315 goto nla_put_failure;
17316 for (i = 0; i < req->n_channels; i++) {
17317 if (nla_put_u32(msg, i,
17318 ieee80211_channel_to_khz(req->channels[i])))
17319 goto nla_put_failure;
17320 }
17321 nla_nest_end(msg, nest);
17322 } else {
17323 nest = nla_nest_start_noflag(msg,
17324 NL80211_ATTR_SCAN_FREQUENCIES);
17325 if (!nest)
9360ffd1 17326 goto nla_put_failure;
2032f3b2
TP		 17327 for (i = 0; i < req->n_channels; i++) {
17328 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
17329 goto nla_put_failure;
17330 }
17331 nla_nest_end(msg, nest);
9360ffd1 17332 }
362a415d 17333
9360ffd1
DM		 17334 if (req->ie &&
17335 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
17336 goto nla_put_failure;
362a415d 17337
ae917c9f
JB		 17338 if (req->flags &&
17339 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags))
17340 goto nla_put_failure;
ed473771 17341
c8cb5b85
TM		 17342 info = rdev->int_scan_req ? &rdev->int_scan_req->info :
17343 &rdev->scan_req->info;
17344 if (info->scan_start_tsf &&
1d76250b 17345 (nla_put_u64_64bit(msg, NL80211_ATTR_SCAN_START_TIME_TSF,
c8cb5b85 17346 info->scan_start_tsf, NL80211_BSS_PAD) ||
1d76250b 17347 nla_put(msg, NL80211_ATTR_SCAN_START_TIME_TSF_BSSID, ETH_ALEN,
c8cb5b85 17348 info->tsf_bssid)))
1d76250b
AS		 17349 goto nla_put_failure;
17350
362a415d
JB		 17351 return 0;
17352 nla_put_failure:
17353 return -ENOBUFS;
17354}
17355
505a2e88 17356static int nl80211_prep_scan_msg(struct sk_buff *msg,
a538e2d5 17357 struct cfg80211_registered_device *rdev,
fd014284 17358 struct wireless_dev *wdev,
15e47304 17359 u32 portid, u32 seq, int flags,
a538e2d5 17360 u32 cmd)
2a519311
JB		 17361{
17362 void *hdr;
17363
15e47304 17364 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 17365 if (!hdr)
17366 return -1;
17367
9360ffd1 17368 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 17369 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
17370 wdev->netdev->ifindex)) ||
2dad624e
ND		 17371 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17372 NL80211_ATTR_PAD))
9360ffd1 17373 goto nla_put_failure;
2a519311 17374
362a415d
JB		 17375 /* ignore errors and send incomplete event anyway */
17376 nl80211_add_scan_req(msg, rdev);
2a519311 17377
053c095a
JB		 17378 genlmsg_end(msg, hdr);
17379 return 0;
2a519311
JB		 17380
17381 nla_put_failure:
17382 genlmsg_cancel(msg, hdr);
17383 return -EMSGSIZE;
17384}
17385
807f8a8c 17386static int
505a2e88 17387nl80211_prep_sched_scan_msg(struct sk_buff *msg,
96b08fd6 17388 struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 17389{
17390 void *hdr;
17391
96b08fd6 17392 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
807f8a8c
LC		 17393 if (!hdr)
17394 return -1;
17395
96b08fd6
AVS		 17396 if (nla_put_u32(msg, NL80211_ATTR_WIPHY,
17397 wiphy_to_rdev(req->wiphy)->wiphy_idx) ||
17398 nla_put_u32(msg, NL80211_ATTR_IFINDEX, req->dev->ifindex) ||
17399 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, req->reqid,
17400 NL80211_ATTR_PAD))
9360ffd1 17401 goto nla_put_failure;
807f8a8c 17402
053c095a
JB		 17403 genlmsg_end(msg, hdr);
17404 return 0;
807f8a8c
LC		 17405
17406 nla_put_failure:
17407 genlmsg_cancel(msg, hdr);
17408 return -EMSGSIZE;
17409}
17410
a538e2d5 17411void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 17412 struct wireless_dev *wdev)
a538e2d5
JB		 17413{
17414 struct sk_buff *msg;
17415
58050fce 17416 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 17417 if (!msg)
17418 return;
17419
505a2e88 17420 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 17421 NL80211_CMD_TRIGGER_SCAN) < 0) {
17422 nlmsg_free(msg);
17423 return;
17424 }
17425
68eb5503 17426 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17427 NL80211_MCGRP_SCAN, GFP_KERNEL);
a538e2d5
JB		 17428}
17429
f9d15d16
JB		 17430struct sk_buff *nl80211_build_scan_msg(struct cfg80211_registered_device *rdev,
17431 struct wireless_dev *wdev, bool aborted)
2a519311
JB		 17432{
17433 struct sk_buff *msg;
17434
fd2120ca 17435 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311 17436 if (!msg)
f9d15d16 17437 return NULL;
2a519311 17438
505a2e88 17439 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
f9d15d16
JB		 17440 aborted ? NL80211_CMD_SCAN_ABORTED :
17441 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311 17442 nlmsg_free(msg);
f9d15d16 17443 return NULL;
2a519311
JB		 17444 }
17445
f9d15d16 17446 return msg;
2a519311
JB		 17447}
17448
505a2e88
AVS		 17449/* send message created by nl80211_build_scan_msg() */
17450void nl80211_send_scan_msg(struct cfg80211_registered_device *rdev,
17451 struct sk_buff *msg)
807f8a8c 17452{
807f8a8c
LC		 17453 if (!msg)
17454 return;
17455
68eb5503 17456 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17457 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 17458}
17459
96b08fd6 17460void nl80211_send_sched_scan(struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 17461{
17462 struct sk_buff *msg;
17463
58050fce 17464 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 17465 if (!msg)
17466 return;
17467
96b08fd6 17468 if (nl80211_prep_sched_scan_msg(msg, req, cmd) < 0) {
807f8a8c
LC		 17469 nlmsg_free(msg);
17470 return;
17471 }
17472
96b08fd6 17473 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(req->wiphy), msg, 0,
2a94fe48 17474 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 17475}
17476
b0d7aa59
JD		 17477static bool nl80211_reg_change_event_fill(struct sk_buff *msg,
17478 struct regulatory_request *request)
73d54c9e 17479{
73d54c9e 17480 /* Userspace can always count this one always being set */
9360ffd1
DM		 17481 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
17482 goto nla_put_failure;
17483
17484 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
17485 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17486 NL80211_REGDOM_TYPE_WORLD))
17487 goto nla_put_failure;
17488 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
17489 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17490 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
17491 goto nla_put_failure;
17492 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
17493 request->intersect) {
17494 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17495 NL80211_REGDOM_TYPE_INTERSECTION))
17496 goto nla_put_failure;
17497 } else {
17498 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17499 NL80211_REGDOM_TYPE_COUNTRY) ||
17500 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
17501 request->alpha2))
17502 goto nla_put_failure;
17503 }
17504
ad30ca2c
AN		 17505 if (request->wiphy_idx != WIPHY_IDX_INVALID) {
17506 struct wiphy *wiphy = wiphy_idx_to_wiphy(request->wiphy_idx);
17507
17508 if (wiphy &&
17509 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
17510 goto nla_put_failure;
1bdd716c
AN		 17511
17512 if (wiphy &&
17513 wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
17514 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
17515 goto nla_put_failure;
ad30ca2c 17516 }
73d54c9e 17517
b0d7aa59
JD		 17518 return true;
17519
17520nla_put_failure:
17521 return false;
17522}
17523
17524/*
17525 * This can happen on global regulatory changes or device specific settings
17526 * based on custom regulatory domains.
17527 */
17528void nl80211_common_reg_change_event(enum nl80211_commands cmd_id,
17529 struct regulatory_request *request)
17530{
17531 struct sk_buff *msg;
17532 void *hdr;
17533
17534 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17535 if (!msg)
17536 return;
17537
17538 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd_id);
24f6d765 17539 if (!hdr)
17540 goto nla_put_failure;
b0d7aa59 17541
24f6d765 17542 if (!nl80211_reg_change_event_fill(msg, request))
b0d7aa59
JD		 17543 goto nla_put_failure;
17544
3b7b72ee 17545 genlmsg_end(msg, hdr);
73d54c9e 17546
bc43b28c 17547 rcu_read_lock();
68eb5503 17548 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 17549 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
bc43b28c 17550 rcu_read_unlock();
73d54c9e
LR		 17551
17552 return;
17553
17554nla_put_failure:
73d54c9e
LR		 17555 nlmsg_free(msg);
17556}
17557
6039f6d2
JM		 17558static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
17559 struct net_device *netdev,
17560 const u8 *buf, size_t len,
b0b6aa2c 17561 enum nl80211_commands cmd, gfp_t gfp,
4d9ec73d 17562 int uapsd_queues, const u8 *req_ies,
3bb02143 17563 size_t req_ies_len, bool reconnect)
6039f6d2
JM		 17564{
17565 struct sk_buff *msg;
17566 void *hdr;
17567
4d9ec73d 17568 msg = nlmsg_new(100 + len + req_ies_len, gfp);
6039f6d2
JM		 17569 if (!msg)
17570 return;
17571
17572 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
17573 if (!hdr) {
17574 nlmsg_free(msg);
17575 return;
17576 }
17577
9360ffd1
DM		 17578 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17579 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
4d9ec73d
JM		 17580 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
17581 (req_ies &&
17582 nla_put(msg, NL80211_ATTR_REQ_IE, req_ies_len, req_ies)))
9360ffd1 17583 goto nla_put_failure;
6039f6d2 17584
3bb02143
JB		 17585 if (reconnect && nla_put_flag(msg, NL80211_ATTR_RECONNECT_REQUESTED))
17586 goto nla_put_failure;
17587
b0b6aa2c
EP		 17588 if (uapsd_queues >= 0) {
17589 struct nlattr *nla_wmm =
ae0be8de 17590 nla_nest_start_noflag(msg, NL80211_ATTR_STA_WME);
b0b6aa2c
EP		 17591 if (!nla_wmm)
17592 goto nla_put_failure;
17593
17594 if (nla_put_u8(msg, NL80211_STA_WME_UAPSD_QUEUES,
17595 uapsd_queues))
17596 goto nla_put_failure;
17597
17598 nla_nest_end(msg, nla_wmm);
17599 }
17600
3b7b72ee 17601 genlmsg_end(msg, hdr);
6039f6d2 17602
68eb5503 17603 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17604 NL80211_MCGRP_MLME, gfp);
6039f6d2
JM		 17605 return;
17606
17607 nla_put_failure:
6039f6d2
JM		 17608 nlmsg_free(msg);
17609}
17610
17611void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17612 struct net_device *netdev, const u8 *buf,
17613 size_t len, gfp_t gfp)
6039f6d2
JM		 17614{
17615 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17616 NL80211_CMD_AUTHENTICATE, gfp, -1, NULL, 0,
17617 false);
6039f6d2
JM		 17618}
17619
17620void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
cd47c0f5
JB		 17621 struct net_device *netdev,
17622 struct cfg80211_rx_assoc_resp *data)
6039f6d2 17623{
cd47c0f5
JB		 17624 nl80211_send_mlme_event(rdev, netdev, data->buf, data->len,
17625 NL80211_CMD_ASSOCIATE, GFP_KERNEL,
17626 data->uapsd_queues,
17627 data->req_ies, data->req_ies_len, false);
6039f6d2
JM		 17628}
17629
53b46b84 17630void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342 17631 struct net_device *netdev, const u8 *buf,
3bb02143 17632 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 17633{
17634 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17635 NL80211_CMD_DEAUTHENTICATE, gfp, -1, NULL, 0,
17636 reconnect);
6039f6d2
JM		 17637}
17638
53b46b84
JM		 17639void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
17640 struct net_device *netdev, const u8 *buf,
3bb02143 17641 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 17642{
17643 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17644 NL80211_CMD_DISASSOCIATE, gfp, -1, NULL, 0,
17645 reconnect);
6039f6d2
JM		 17646}
17647
6ff57cf8
JB		 17648void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev, const u8 *buf,
17649 size_t len)
cf4e594e 17650{
947add36
JB		 17651 struct wireless_dev *wdev = dev->ieee80211_ptr;
17652 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17653 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
6ff57cf8
JB		 17654 const struct ieee80211_mgmt *mgmt = (void *)buf;
17655 u32 cmd;
947add36 17656
6ff57cf8
JB		 17657 if (WARN_ON(len < 2))
17658 return;
cf4e594e 17659
4d797fce 17660 if (ieee80211_is_deauth(mgmt->frame_control)) {
6ff57cf8 17661 cmd = NL80211_CMD_UNPROT_DEAUTHENTICATE;
4d797fce 17662 } else if (ieee80211_is_disassoc(mgmt->frame_control)) {
6ff57cf8 17663 cmd = NL80211_CMD_UNPROT_DISASSOCIATE;
4d797fce
JM		 17664 } else if (ieee80211_is_beacon(mgmt->frame_control)) {
17665 if (wdev->unprot_beacon_reported &&
17666 elapsed_jiffies_msecs(wdev->unprot_beacon_reported) < 10000)
17667 return;
17668 cmd = NL80211_CMD_UNPROT_BEACON;
17669 wdev->unprot_beacon_reported = jiffies;
17670 } else {
17671 return;
17672 }
947add36 17673
6ff57cf8 17674 trace_cfg80211_rx_unprot_mlme_mgmt(dev, buf, len);
4d9ec73d 17675 nl80211_send_mlme_event(rdev, dev, buf, len, cmd, GFP_ATOMIC, -1,
3bb02143 17676 NULL, 0, false);
cf4e594e 17677}
6ff57cf8 17678EXPORT_SYMBOL(cfg80211_rx_unprot_mlme_mgmt);
cf4e594e 17679
1b06bb40
LR		 17680static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
17681 struct net_device *netdev, int cmd,
e6d6e342 17682 const u8 *addr, gfp_t gfp)
1965c853
JM		 17683{
17684 struct sk_buff *msg;
17685 void *hdr;
17686
e6d6e342 17687 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 17688 if (!msg)
17689 return;
17690
17691 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
17692 if (!hdr) {
17693 nlmsg_free(msg);
17694 return;
17695 }
17696
9360ffd1
DM		 17697 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17698 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17699 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
17700 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
17701 goto nla_put_failure;
1965c853 17702
3b7b72ee 17703 genlmsg_end(msg, hdr);
1965c853 17704
68eb5503 17705 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17706 NL80211_MCGRP_MLME, gfp);
1965c853
JM		 17707 return;
17708
17709 nla_put_failure:
1965c853
JM		 17710 nlmsg_free(msg);
17711}
17712
17713void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17714 struct net_device *netdev, const u8 *addr,
17715 gfp_t gfp)
1965c853
JM		 17716{
17717 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 17718 addr, gfp);
1965c853
JM		 17719}
17720
17721void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17722 struct net_device *netdev, const u8 *addr,
17723 gfp_t gfp)
1965c853 17724{
e6d6e342
JB		 17725 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
17726 addr, gfp);
1965c853
JM		 17727}
17728
b23aa676 17729void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
5349a0f7
VK		 17730 struct net_device *netdev,
17731 struct cfg80211_connect_resp_params *cr,
3093ebbe 17732 gfp_t gfp)
b23aa676
SO		 17733{
17734 struct sk_buff *msg;
17735 void *hdr;
efbabc11
VJ		 17736 unsigned int link;
17737 size_t link_info_size = 0;
17738 const u8 *connected_addr = cr->valid_links ?
17739 cr->ap_mld_addr : cr->links[0].bssid;
17740
17741 if (cr->valid_links) {
17742 for_each_valid_link(cr, link) {
17743 /* Nested attribute header */
17744 link_info_size += NLA_HDRLEN;
17745 /* Link ID */
17746 link_info_size += nla_total_size(sizeof(u8));
17747 link_info_size += cr->links[link].addr ?
17748 nla_total_size(ETH_ALEN) : 0;
17749 link_info_size += (cr->links[link].bssid ||
17750 cr->links[link].bss) ?
17751 nla_total_size(ETH_ALEN) : 0;
53ad07e9 17752 link_info_size += nla_total_size(sizeof(u16));
efbabc11
VJ		 17753 }
17754 }
b23aa676 17755
a3caf744 17756 msg = nlmsg_new(100 + cr->req_ie_len + cr->resp_ie_len +
76804d28 17757 cr->fils.kek_len + cr->fils.pmk_len +
efbabc11
VJ		 17758 (cr->fils.pmkid ? WLAN_PMKID_LEN : 0) + link_info_size,
17759 gfp);
b23aa676
SO		 17760 if (!msg)
17761 return;
17762
17763 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
17764 if (!hdr) {
17765 nlmsg_free(msg);
17766 return;
17767 }
17768
9360ffd1
DM		 17769 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17770 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
efbabc11
VJ		 17771 (connected_addr &&
17772 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, connected_addr)) ||
bf1ecd21 17773 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE,
5349a0f7
VK		 17774 cr->status < 0 ? WLAN_STATUS_UNSPECIFIED_FAILURE :
17775 cr->status) ||
17776 (cr->status < 0 &&
3093ebbe 17777 (nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
5349a0f7
VK		 17778 nla_put_u32(msg, NL80211_ATTR_TIMEOUT_REASON,
17779 cr->timeout_reason))) ||
17780 (cr->req_ie &&
17781 nla_put(msg, NL80211_ATTR_REQ_IE, cr->req_ie_len, cr->req_ie)) ||
17782 (cr->resp_ie &&
17783 nla_put(msg, NL80211_ATTR_RESP_IE, cr->resp_ie_len,
a3caf744 17784 cr->resp_ie)) ||
76804d28 17785 (cr->fils.update_erp_next_seq_num &&
a3caf744 17786 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
76804d28 17787 cr->fils.erp_next_seq_num)) ||
a3caf744 17788 (cr->status == WLAN_STATUS_SUCCESS &&
76804d28
AVS		 17789 ((cr->fils.kek &&
17790 nla_put(msg, NL80211_ATTR_FILS_KEK, cr->fils.kek_len,
17791 cr->fils.kek)) ||
17792 (cr->fils.pmk &&
17793 nla_put(msg, NL80211_ATTR_PMK, cr->fils.pmk_len, cr->fils.pmk)) ||
17794 (cr->fils.pmkid &&
17795 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, cr->fils.pmkid)))))
9360ffd1 17796 goto nla_put_failure;
b23aa676 17797
efbabc11
VJ		 17798 if (cr->valid_links) {
17799 int i = 1;
17800 struct nlattr *nested;
17801
17802 nested = nla_nest_start(msg, NL80211_ATTR_MLO_LINKS);
17803 if (!nested)
17804 goto nla_put_failure;
17805
17806 for_each_valid_link(cr, link) {
17807 struct nlattr *nested_mlo_links;
17808 const u8 *bssid = cr->links[link].bss ?
17809 cr->links[link].bss->bssid :
17810 cr->links[link].bssid;
17811
17812 nested_mlo_links = nla_nest_start(msg, i);
17813 if (!nested_mlo_links)
17814 goto nla_put_failure;
17815
17816 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link) ||
17817 (bssid &&
17818 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, bssid)) ||
17819 (cr->links[link].addr &&
17820 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
53ad07e9
JB		 17821 cr->links[link].addr)) ||
17822 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE,
17823 cr->links[link].status))
efbabc11
VJ		 17824 goto nla_put_failure;
17825
17826 nla_nest_end(msg, nested_mlo_links);
17827 i++;
17828 }
17829 nla_nest_end(msg, nested);
17830 }
17831
3b7b72ee 17832 genlmsg_end(msg, hdr);
b23aa676 17833
68eb5503 17834 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17835 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 17836 return;
17837
17838 nla_put_failure:
b23aa676 17839 nlmsg_free(msg);
b23aa676
SO		 17840}
17841
17842void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
29ce6ecb
AS		 17843 struct net_device *netdev,
17844 struct cfg80211_roam_info *info, gfp_t gfp)
b23aa676
SO		 17845{
17846 struct sk_buff *msg;
17847 void *hdr;
efbabc11
VJ		 17848 size_t link_info_size = 0;
17849 unsigned int link;
17850 const u8 *connected_addr = info->ap_mld_addr ?
17851 info->ap_mld_addr :
17852 (info->links[0].bss ?
17853 info->links[0].bss->bssid :
17854 info->links[0].bssid);
17855
17856 if (info->valid_links) {
17857 for_each_valid_link(info, link) {
17858 /* Nested attribute header */
17859 link_info_size += NLA_HDRLEN;
17860 /* Link ID */
17861 link_info_size += nla_total_size(sizeof(u8));
17862 link_info_size += info->links[link].addr ?
17863 nla_total_size(ETH_ALEN) : 0;
17864 link_info_size += (info->links[link].bssid ||
17865 info->links[link].bss) ?
17866 nla_total_size(ETH_ALEN) : 0;
17867 }
17868 }
b23aa676 17869
e841b7b1
AVS		 17870 msg = nlmsg_new(100 + info->req_ie_len + info->resp_ie_len +
17871 info->fils.kek_len + info->fils.pmk_len +
efbabc11
VJ		 17872 (info->fils.pmkid ? WLAN_PMKID_LEN : 0) +
17873 link_info_size, gfp);
b23aa676
SO		 17874 if (!msg)
17875 return;
17876
17877 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
17878 if (!hdr) {
17879 nlmsg_free(msg);
17880 return;
17881 }
17882
9360ffd1
DM		 17883 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17884 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
efbabc11 17885 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, connected_addr) ||
29ce6ecb
AS		 17886 (info->req_ie &&
17887 nla_put(msg, NL80211_ATTR_REQ_IE, info->req_ie_len,
17888 info->req_ie)) ||
17889 (info->resp_ie &&
17890 nla_put(msg, NL80211_ATTR_RESP_IE, info->resp_ie_len,
e841b7b1
AVS		 17891 info->resp_ie)) ||
17892 (info->fils.update_erp_next_seq_num &&
17893 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
17894 info->fils.erp_next_seq_num)) ||
17895 (info->fils.kek &&
17896 nla_put(msg, NL80211_ATTR_FILS_KEK, info->fils.kek_len,
17897 info->fils.kek)) ||
17898 (info->fils.pmk &&
17899 nla_put(msg, NL80211_ATTR_PMK, info->fils.pmk_len, info->fils.pmk)) ||
17900 (info->fils.pmkid &&
17901 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, info->fils.pmkid)))
9360ffd1 17902 goto nla_put_failure;
b23aa676 17903
efbabc11
VJ		 17904 if (info->valid_links) {
17905 int i = 1;
17906 struct nlattr *nested;
17907
17908 nested = nla_nest_start(msg, NL80211_ATTR_MLO_LINKS);
17909 if (!nested)
17910 goto nla_put_failure;
17911
17912 for_each_valid_link(info, link) {
17913 struct nlattr *nested_mlo_links;
17914 const u8 *bssid = info->links[link].bss ?
17915 info->links[link].bss->bssid :
17916 info->links[link].bssid;
17917
17918 nested_mlo_links = nla_nest_start(msg, i);
17919 if (!nested_mlo_links)
17920 goto nla_put_failure;
17921
17922 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link) ||
17923 (bssid &&
17924 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, bssid)) ||
17925 (info->links[link].addr &&
17926 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
17927 info->links[link].addr)))
17928 goto nla_put_failure;
17929
17930 nla_nest_end(msg, nested_mlo_links);
17931 i++;
17932 }
17933 nla_nest_end(msg, nested);
17934 }
17935
3b7b72ee 17936 genlmsg_end(msg, hdr);
b23aa676 17937
68eb5503 17938 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17939 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 17940 return;
17941
503c1fb9 17942 nla_put_failure:
503c1fb9
AS		 17943 nlmsg_free(msg);
17944}
17945
17946void nl80211_send_port_authorized(struct cfg80211_registered_device *rdev,
0ff57171
VY		 17947 struct net_device *netdev, const u8 *bssid,
17948 const u8 *td_bitmap, u8 td_bitmap_len)
503c1fb9
AS		 17949{
17950 struct sk_buff *msg;
17951 void *hdr;
17952
17953 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17954 if (!msg)
17955 return;
17956
17957 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PORT_AUTHORIZED);
17958 if (!hdr) {
17959 nlmsg_free(msg);
17960 return;
17961 }
17962
f4d75993
CHH		 17963 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17964 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17965 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
503c1fb9
AS		 17966 goto nla_put_failure;
17967
0ff57171
VY		 17968 if ((td_bitmap_len > 0) && td_bitmap)
17969 if (nla_put(msg, NL80211_ATTR_TD_BITMAP,
17970 td_bitmap_len, td_bitmap))
17971 goto nla_put_failure;
17972
503c1fb9
AS		 17973 genlmsg_end(msg, hdr);
17974
17975 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17976 NL80211_MCGRP_MLME, GFP_KERNEL);
17977 return;
17978
b23aa676 17979 nla_put_failure:
b23aa676 17980 nlmsg_free(msg);
b23aa676
SO		 17981}
17982
17983void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
17984 struct net_device *netdev, u16 reason,
667503dd 17985 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 17986{
17987 struct sk_buff *msg;
17988 void *hdr;
17989
4ef8c1c9 17990 msg = nlmsg_new(100 + ie_len, GFP_KERNEL);
b23aa676
SO		 17991 if (!msg)
17992 return;
17993
17994 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
17995 if (!hdr) {
17996 nlmsg_free(msg);
17997 return;
17998 }
17999
9360ffd1
DM		 18000 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18001 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
86b6c465 18002 (reason &&
9360ffd1
DM		 18003 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
18004 (from_ap &&
18005 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
18006 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
18007 goto nla_put_failure;
b23aa676 18008
3b7b72ee 18009 genlmsg_end(msg, hdr);
b23aa676 18010
68eb5503 18011 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18012 NL80211_MCGRP_MLME, GFP_KERNEL);
b23aa676
SO		 18013 return;
18014
18015 nla_put_failure:
b23aa676 18016 nlmsg_free(msg);
b23aa676
SO		 18017}
18018
04a773ad
JB		 18019void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
18020 struct net_device *netdev, const u8 *bssid,
18021 gfp_t gfp)
18022{
18023 struct sk_buff *msg;
18024 void *hdr;
18025
fd2120ca 18026 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 18027 if (!msg)
18028 return;
18029
18030 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
18031 if (!hdr) {
18032 nlmsg_free(msg);
18033 return;
18034 }
18035
9360ffd1
DM		 18036 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18037 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
18038 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
18039 goto nla_put_failure;
04a773ad 18040
3b7b72ee 18041 genlmsg_end(msg, hdr);
04a773ad 18042
68eb5503 18043 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18044 NL80211_MCGRP_MLME, gfp);
04a773ad
JB		 18045 return;
18046
18047 nla_put_failure:
04a773ad
JB		 18048 nlmsg_free(msg);
18049}
18050
947add36 18051void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
ecbc12ad
BC		 18052 const u8 *ie, u8 ie_len,
18053 int sig_dbm, gfp_t gfp)
c93b5e71 18054{
947add36 18055 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 18056 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
c93b5e71
JC		 18057 struct sk_buff *msg;
18058 void *hdr;
18059
947add36
JB		 18060 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_MESH_POINT))
18061 return;
18062
18063 trace_cfg80211_notify_new_peer_candidate(dev, addr);
18064
4ef8c1c9 18065 msg = nlmsg_new(100 + ie_len, gfp);
c93b5e71
JC		 18066 if (!msg)
18067 return;
18068
18069 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
18070 if (!hdr) {
18071 nlmsg_free(msg);
18072 return;
18073 }
18074
9360ffd1 18075 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36
JB		 18076 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18077 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
9360ffd1 18078 (ie_len && ie &&
ecbc12ad
BC		 18079 nla_put(msg, NL80211_ATTR_IE, ie_len, ie)) ||
18080 (sig_dbm &&
18081 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)))
9360ffd1 18082 goto nla_put_failure;
c93b5e71 18083
3b7b72ee 18084 genlmsg_end(msg, hdr);
c93b5e71 18085
68eb5503 18086 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18087 NL80211_MCGRP_MLME, gfp);
c93b5e71
JC		 18088 return;
18089
18090 nla_put_failure:
c93b5e71
JC		 18091 nlmsg_free(msg);
18092}
947add36 18093EXPORT_SYMBOL(cfg80211_notify_new_peer_candidate);
c93b5e71 18094
a3b8b056
JM		 18095void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
18096 struct net_device *netdev, const u8 *addr,
18097 enum nl80211_key_type key_type, int key_id,
e6d6e342 18098 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 18099{
18100 struct sk_buff *msg;
18101 void *hdr;
18102
e6d6e342 18103 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 18104 if (!msg)
18105 return;
18106
18107 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
18108 if (!hdr) {
18109 nlmsg_free(msg);
18110 return;
18111 }
18112
9360ffd1
DM		 18113 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18114 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
18115 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
18116 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
18117 (key_id != -1 &&
18118 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
18119 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
18120 goto nla_put_failure;
a3b8b056 18121
3b7b72ee 18122 genlmsg_end(msg, hdr);
a3b8b056 18123
68eb5503 18124 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18125 NL80211_MCGRP_MLME, gfp);
a3b8b056
JM		 18126 return;
18127
18128 nla_put_failure:
a3b8b056
JM		 18129 nlmsg_free(msg);
18130}
18131
6bad8766
LR		 18132void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
18133 struct ieee80211_channel *channel_before,
18134 struct ieee80211_channel *channel_after)
18135{
18136 struct sk_buff *msg;
18137 void *hdr;
18138 struct nlattr *nl_freq;
18139
fd2120ca 18140 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 18141 if (!msg)
18142 return;
18143
18144 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
18145 if (!hdr) {
18146 nlmsg_free(msg);
18147 return;
18148 }
18149
18150 /*
18151 * Since we are applying the beacon hint to a wiphy we know its
18152 * wiphy_idx is valid
18153 */
9360ffd1
DM		 18154 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
18155 goto nla_put_failure;
6bad8766
LR		 18156
18157 /* Before */
ae0be8de 18158 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_BEFORE);
6bad8766
LR		 18159 if (!nl_freq)
18160 goto nla_put_failure;
50f32718
HD		 18161
18162 if (nl80211_msg_put_channel(msg, wiphy, channel_before, false))
6bad8766
LR		 18163 goto nla_put_failure;
18164 nla_nest_end(msg, nl_freq);
18165
18166 /* After */
ae0be8de 18167 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_AFTER);
6bad8766
LR		 18168 if (!nl_freq)
18169 goto nla_put_failure;
50f32718
HD		 18170
18171 if (nl80211_msg_put_channel(msg, wiphy, channel_after, false))
6bad8766
LR		 18172 goto nla_put_failure;
18173 nla_nest_end(msg, nl_freq);
18174
3b7b72ee 18175 genlmsg_end(msg, hdr);
6bad8766 18176
463d0183 18177 rcu_read_lock();
68eb5503 18178 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 18179 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
463d0183 18180 rcu_read_unlock();
6bad8766
LR		 18181
18182 return;
18183
18184nla_put_failure:
6bad8766
LR		 18185 nlmsg_free(msg);
18186}
18187
9588bbd5
JM		 18188static void nl80211_send_remain_on_chan_event(
18189 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 18190 struct wireless_dev *wdev, u64 cookie,
9588bbd5 18191 struct ieee80211_channel *chan,
9588bbd5
JM		 18192 unsigned int duration, gfp_t gfp)
18193{
18194 struct sk_buff *msg;
18195 void *hdr;
18196
18197 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18198 if (!msg)
18199 return;
18200
18201 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
18202 if (!hdr) {
18203 nlmsg_free(msg);
18204 return;
18205 }
18206
9360ffd1 18207 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18208 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18209 wdev->netdev->ifindex)) ||
2dad624e
ND		 18210 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18211 NL80211_ATTR_PAD) ||
9360ffd1 18212 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
42d97a59
JB		 18213 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
18214 NL80211_CHAN_NO_HT) ||
2dad624e
ND		 18215 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
18216 NL80211_ATTR_PAD))
9360ffd1 18217 goto nla_put_failure;
9588bbd5 18218
9360ffd1
DM		 18219 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
18220 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
18221 goto nla_put_failure;
9588bbd5 18222
3b7b72ee 18223 genlmsg_end(msg, hdr);
9588bbd5 18224
68eb5503 18225 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18226 NL80211_MCGRP_MLME, gfp);
9588bbd5
JM		 18227 return;
18228
18229 nla_put_failure:
9588bbd5
JM		 18230 nlmsg_free(msg);
18231}
18232
a083ee8a 18233void cfg80211_assoc_comeback(struct net_device *netdev,
e69dac88 18234 const u8 *ap_addr, u32 timeout)
a083ee8a
IP		 18235{
18236 struct wireless_dev *wdev = netdev->ieee80211_ptr;
18237 struct wiphy *wiphy = wdev->wiphy;
18238 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18239 struct sk_buff *msg;
18240 void *hdr;
18241
e69dac88 18242 trace_cfg80211_assoc_comeback(wdev, ap_addr, timeout);
a083ee8a
IP		 18243
18244 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
18245 if (!msg)
18246 return;
18247
18248 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ASSOC_COMEBACK);
18249 if (!hdr) {
18250 nlmsg_free(msg);
18251 return;
18252 }
18253
18254 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18255 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
e69dac88 18256 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ap_addr) ||
a083ee8a
IP		 18257 nla_put_u32(msg, NL80211_ATTR_TIMEOUT, timeout))
18258 goto nla_put_failure;
18259
18260 genlmsg_end(msg, hdr);
18261
18262 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
18263 NL80211_MCGRP_MLME, GFP_KERNEL);
18264 return;
18265
18266 nla_put_failure:
18267 nlmsg_free(msg);
18268}
18269EXPORT_SYMBOL(cfg80211_assoc_comeback);
18270
947add36
JB		 18271void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
18272 struct ieee80211_channel *chan,
18273 unsigned int duration, gfp_t gfp)
9588bbd5 18274{
947add36 18275 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18276 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18277
18278 trace_cfg80211_ready_on_channel(wdev, cookie, chan, duration);
9588bbd5 18279 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 18280 rdev, wdev, cookie, chan,
42d97a59 18281 duration, gfp);
9588bbd5 18282}
947add36 18283EXPORT_SYMBOL(cfg80211_ready_on_channel);
9588bbd5 18284
947add36
JB		 18285void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
18286 struct ieee80211_channel *chan,
18287 gfp_t gfp)
9588bbd5 18288{
947add36 18289 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18290 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18291
18292 trace_cfg80211_ready_on_channel_expired(wdev, cookie, chan);
9588bbd5 18293 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
42d97a59 18294 rdev, wdev, cookie, chan, 0, gfp);
9588bbd5 18295}
947add36 18296EXPORT_SYMBOL(cfg80211_remain_on_channel_expired);
9588bbd5 18297
1c38c7f2
JP		 18298void cfg80211_tx_mgmt_expired(struct wireless_dev *wdev, u64 cookie,
18299 struct ieee80211_channel *chan,
18300 gfp_t gfp)
18301{
18302 struct wiphy *wiphy = wdev->wiphy;
18303 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18304
18305 trace_cfg80211_tx_mgmt_expired(wdev, cookie, chan);
18306 nl80211_send_remain_on_chan_event(NL80211_CMD_FRAME_WAIT_CANCEL,
18307 rdev, wdev, cookie, chan, 0, gfp);
18308}
18309EXPORT_SYMBOL(cfg80211_tx_mgmt_expired);
18310
947add36
JB		 18311void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
18312 struct station_info *sinfo, gfp_t gfp)
98b62183 18313{
947add36 18314 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18315 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
98b62183
JB		 18316 struct sk_buff *msg;
18317
947add36
JB		 18318 trace_cfg80211_new_sta(dev, mac_addr, sinfo);
18319
58050fce 18320 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 18321 if (!msg)
18322 return;
18323
cf5ead82 18324 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION, 0, 0, 0,
66266b3a 18325 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 18326 nlmsg_free(msg);
18327 return;
18328 }
18329
68eb5503 18330 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18331 NL80211_MCGRP_MLME, gfp);
98b62183 18332}
947add36 18333EXPORT_SYMBOL(cfg80211_new_sta);
98b62183 18334
cf5ead82
JB		 18335void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
18336 struct station_info *sinfo, gfp_t gfp)
ec15e68b 18337{
947add36 18338 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18339 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ec15e68b 18340 struct sk_buff *msg;
73887fd9 18341 struct station_info empty_sinfo = {};
cf5ead82 18342
73887fd9
JB		 18343 if (!sinfo)
18344 sinfo = &empty_sinfo;
ec15e68b 18345
947add36
JB		 18346 trace_cfg80211_del_sta(dev, mac_addr);
18347
58050fce 18348 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7ea3e110
JB		 18349 if (!msg) {
18350 cfg80211_sinfo_release_content(sinfo);
73887fd9 18351 return;
7ea3e110 18352 }
ec15e68b 18353
cf5ead82 18354 if (nl80211_send_station(msg, NL80211_CMD_DEL_STATION, 0, 0, 0,
57007121 18355 rdev, dev, mac_addr, sinfo) < 0) {
ec15e68b 18356 nlmsg_free(msg);
73887fd9 18357 return;
ec15e68b
JM		 18358 }
18359
68eb5503 18360 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18361 NL80211_MCGRP_MLME, gfp);
ec15e68b 18362}
cf5ead82 18363EXPORT_SYMBOL(cfg80211_del_sta_sinfo);
ec15e68b 18364
947add36
JB		 18365void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
18366 enum nl80211_connect_failed_reason reason,
18367 gfp_t gfp)
ed44a951 18368{
947add36 18369 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18370 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ed44a951
PP		 18371 struct sk_buff *msg;
18372 void *hdr;
18373
18374 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
18375 if (!msg)
18376 return;
18377
18378 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
18379 if (!hdr) {
18380 nlmsg_free(msg);
18381 return;
18382 }
18383
18384 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18385 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
18386 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
18387 goto nla_put_failure;
18388
18389 genlmsg_end(msg, hdr);
18390
68eb5503 18391 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18392 NL80211_MCGRP_MLME, gfp);
ed44a951
PP		 18393 return;
18394
18395 nla_put_failure:
ed44a951
PP		 18396 nlmsg_free(msg);
18397}
947add36 18398EXPORT_SYMBOL(cfg80211_conn_failed);
ed44a951 18399
b92ab5d8
JB		 18400static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
18401 const u8 *addr, gfp_t gfp)
28946da7
JB		 18402{
18403 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 18404 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
28946da7
JB		 18405 struct sk_buff *msg;
18406 void *hdr;
6aa7de05 18407 u32 nlportid = READ_ONCE(wdev->ap_unexpected_nlportid);
28946da7 18408
15e47304 18409 if (!nlportid)
28946da7
JB		 18410 return false;
18411
18412 msg = nlmsg_new(100, gfp);
18413 if (!msg)
18414 return true;
18415
b92ab5d8 18416 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 18417 if (!hdr) {
18418 nlmsg_free(msg);
18419 return true;
18420 }
18421
9360ffd1
DM		 18422 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18423 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18424 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
18425 goto nla_put_failure;
28946da7 18426
9c90a9f6 18427 genlmsg_end(msg, hdr);
15e47304 18428 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 18429 return true;
18430
18431 nla_put_failure:
28946da7
JB		 18432 nlmsg_free(msg);
18433 return true;
18434}
18435
947add36
JB		 18436bool cfg80211_rx_spurious_frame(struct net_device *dev,
18437 const u8 *addr, gfp_t gfp)
b92ab5d8 18438{
947add36
JB		 18439 struct wireless_dev *wdev = dev->ieee80211_ptr;
18440 bool ret;
18441
18442 trace_cfg80211_rx_spurious_frame(dev, addr);
18443
18444 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
18445 wdev->iftype != NL80211_IFTYPE_P2P_GO)) {
18446 trace_cfg80211_return_bool(false);
18447 return false;
18448 }
18449 ret = __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
18450 addr, gfp);
18451 trace_cfg80211_return_bool(ret);
18452 return ret;
b92ab5d8 18453}
947add36 18454EXPORT_SYMBOL(cfg80211_rx_spurious_frame);
b92ab5d8 18455
947add36
JB		 18456bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
18457 const u8 *addr, gfp_t gfp)
b92ab5d8 18458{
947add36
JB		 18459 struct wireless_dev *wdev = dev->ieee80211_ptr;
18460 bool ret;
18461
18462 trace_cfg80211_rx_unexpected_4addr_frame(dev, addr);
18463
18464 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
18465 wdev->iftype != NL80211_IFTYPE_P2P_GO &&
18466 wdev->iftype != NL80211_IFTYPE_AP_VLAN)) {
18467 trace_cfg80211_return_bool(false);
18468 return false;
18469 }
18470 ret = __nl80211_unexpected_frame(dev,
18471 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
18472 addr, gfp);
18473 trace_cfg80211_return_bool(ret);
18474 return ret;
b92ab5d8 18475}
947add36 18476EXPORT_SYMBOL(cfg80211_rx_unexpected_4addr_frame);
b92ab5d8 18477
2e161f78 18478int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 18479 struct wireless_dev *wdev, u32 nlportid,
00b3d840 18480 struct cfg80211_rx_info *info, gfp_t gfp)
026331c4 18481{
71bbc994 18482 struct net_device *netdev = wdev->netdev;
026331c4
JM		 18483 struct sk_buff *msg;
18484 void *hdr;
026331c4 18485
00b3d840 18486 msg = nlmsg_new(100 + info->len, gfp);
026331c4
JM		 18487 if (!msg)
18488 return -ENOMEM;
18489
2e161f78 18490 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 18491 if (!hdr) {
18492 nlmsg_free(msg);
18493 return -ENOMEM;
18494 }
18495
9360ffd1 18496 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18497 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18498 netdev->ifindex)) ||
2dad624e
ND		 18499 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18500 NL80211_ATTR_PAD) ||
6074c9e5
JB		 18501 (info->have_link_id &&
18502 nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, info->link_id)) ||
00b3d840
AS		 18503 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, KHZ_TO_MHZ(info->freq)) ||
18504 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET, info->freq % 1000) ||
18505 (info->sig_dbm &&
18506 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, info->sig_dbm)) ||
18507 nla_put(msg, NL80211_ATTR_FRAME, info->len, info->buf) ||
18508 (info->flags &&
1ff715ff
AS		 18509 nla_put_u32(msg, NL80211_ATTR_RXMGMT_FLAGS, info->flags)) ||
18510 (info->rx_tstamp && nla_put_u64_64bit(msg,
18511 NL80211_ATTR_RX_HW_TIMESTAMP,
18512 info->rx_tstamp,
18513 NL80211_ATTR_PAD)) ||
18514 (info->ack_tstamp && nla_put_u64_64bit(msg,
18515 NL80211_ATTR_TX_HW_TIMESTAMP,
18516 info->ack_tstamp,
18517 NL80211_ATTR_PAD)))
9360ffd1 18518 goto nla_put_failure;
026331c4 18519
3b7b72ee 18520 genlmsg_end(msg, hdr);
026331c4 18521
15e47304 18522 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 18523
18524 nla_put_failure:
026331c4
JM		 18525 nlmsg_free(msg);
18526 return -ENOBUFS;
18527}
18528
ea7d50c9
AS		 18529static void nl80211_frame_tx_status(struct wireless_dev *wdev,
18530 struct cfg80211_tx_status *status,
dca9ca2d 18531 gfp_t gfp, enum nl80211_commands command)
026331c4 18532{
947add36 18533 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18534 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
71bbc994 18535 struct net_device *netdev = wdev->netdev;
026331c4
JM		 18536 struct sk_buff *msg;
18537 void *hdr;
18538
dca9ca2d 18539 if (command == NL80211_CMD_FRAME_TX_STATUS)
ea7d50c9
AS		 18540 trace_cfg80211_mgmt_tx_status(wdev, status->cookie,
18541 status->ack);
dca9ca2d 18542 else
ea7d50c9
AS		 18543 trace_cfg80211_control_port_tx_status(wdev, status->cookie,
18544 status->ack);
947add36 18545
ea7d50c9 18546 msg = nlmsg_new(100 + status->len, gfp);
026331c4
JM		 18547 if (!msg)
18548 return;
18549
dca9ca2d 18550 hdr = nl80211hdr_put(msg, 0, 0, 0, command);
026331c4
JM		 18551 if (!hdr) {
18552 nlmsg_free(msg);
18553 return;
18554 }
18555
9360ffd1 18556 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18557 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18558 netdev->ifindex)) ||
2dad624e
ND		 18559 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18560 NL80211_ATTR_PAD) ||
ea7d50c9
AS		 18561 nla_put(msg, NL80211_ATTR_FRAME, status->len, status->buf) ||
18562 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, status->cookie,
2dad624e 18563 NL80211_ATTR_PAD) ||
ea7d50c9
AS		 18564 (status->ack && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
18565 (status->tx_tstamp &&
18566 nla_put_u64_64bit(msg, NL80211_ATTR_TX_HW_TIMESTAMP,
18567 status->tx_tstamp, NL80211_ATTR_PAD)) ||
18568 (status->ack_tstamp &&
18569 nla_put_u64_64bit(msg, NL80211_ATTR_RX_HW_TIMESTAMP,
18570 status->ack_tstamp, NL80211_ATTR_PAD)))
9360ffd1 18571 goto nla_put_failure;
026331c4 18572
3b7b72ee 18573 genlmsg_end(msg, hdr);
026331c4 18574
68eb5503 18575 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18576 NL80211_MCGRP_MLME, gfp);
026331c4
JM		 18577 return;
18578
dca9ca2d 18579nla_put_failure:
026331c4
JM		 18580 nlmsg_free(msg);
18581}
dca9ca2d
MT		 18582
18583void cfg80211_control_port_tx_status(struct wireless_dev *wdev, u64 cookie,
18584 const u8 *buf, size_t len, bool ack,
18585 gfp_t gfp)
18586{
ea7d50c9
AS		 18587 struct cfg80211_tx_status status = {
18588 .cookie = cookie,
18589 .buf = buf,
18590 .len = len,
18591 .ack = ack
18592 };
18593
18594 nl80211_frame_tx_status(wdev, &status, gfp,
dca9ca2d
MT		 18595 NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS);
18596}
18597EXPORT_SYMBOL(cfg80211_control_port_tx_status);
18598
ea7d50c9
AS		 18599void cfg80211_mgmt_tx_status_ext(struct wireless_dev *wdev,
18600 struct cfg80211_tx_status *status, gfp_t gfp)
dca9ca2d 18601{
ea7d50c9 18602 nl80211_frame_tx_status(wdev, status, gfp, NL80211_CMD_FRAME_TX_STATUS);
dca9ca2d 18603}
ea7d50c9 18604EXPORT_SYMBOL(cfg80211_mgmt_tx_status_ext);
026331c4 18605
6a671a50 18606static int __nl80211_rx_control_port(struct net_device *dev,
a948f713 18607 struct sk_buff *skb,
6a671a50
DK		 18608 bool unencrypted, gfp_t gfp)
18609{
18610 struct wireless_dev *wdev = dev->ieee80211_ptr;
18611 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
a948f713 18612 struct ethhdr *ehdr = eth_hdr(skb);
8d74a623 18613 const u8 *addr = ehdr->h_source;
a948f713 18614 u16 proto = be16_to_cpu(skb->protocol);
6a671a50
DK		 18615 struct sk_buff *msg;
18616 void *hdr;
a948f713
DK		 18617 struct nlattr *frame;
18618
6a671a50
DK		 18619 u32 nlportid = READ_ONCE(wdev->conn_owner_nlportid);
18620
18621 if (!nlportid)
18622 return -ENOENT;
18623
a948f713 18624 msg = nlmsg_new(100 + skb->len, gfp);
6a671a50
DK		 18625 if (!msg)
18626 return -ENOMEM;
18627
18628 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONTROL_PORT_FRAME);
18629 if (!hdr) {
18630 nlmsg_free(msg);
18631 return -ENOBUFS;
18632 }
18633
18634 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18635 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18636 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18637 NL80211_ATTR_PAD) ||
8d74a623 18638 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
6a671a50
DK		 18639 nla_put_u16(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE, proto) ||
18640 (unencrypted && nla_put_flag(msg,
18641 NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT)))
18642 goto nla_put_failure;
18643
a948f713
DK		 18644 frame = nla_reserve(msg, NL80211_ATTR_FRAME, skb->len);
18645 if (!frame)
18646 goto nla_put_failure;
18647
18648 skb_copy_bits(skb, 0, nla_data(frame), skb->len);
6a671a50
DK		 18649 genlmsg_end(msg, hdr);
18650
18651 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
18652
18653 nla_put_failure:
18654 nlmsg_free(msg);
18655 return -ENOBUFS;
18656}
18657
18658bool cfg80211_rx_control_port(struct net_device *dev,
a948f713 18659 struct sk_buff *skb, bool unencrypted)
6a671a50
DK		 18660{
18661 int ret;
18662
a948f713
DK		 18663 trace_cfg80211_rx_control_port(dev, skb, unencrypted);
18664 ret = __nl80211_rx_control_port(dev, skb, unencrypted, GFP_ATOMIC);
6a671a50
DK		 18665 trace_cfg80211_return_bool(ret == 0);
18666 return ret == 0;
18667}
18668EXPORT_SYMBOL(cfg80211_rx_control_port);
18669
5b97f49d
JB		 18670static struct sk_buff *cfg80211_prepare_cqm(struct net_device *dev,
18671 const char *mac, gfp_t gfp)
d6dc1a38 18672{
947add36 18673 struct wireless_dev *wdev = dev->ieee80211_ptr;
5b97f49d
JB		 18674 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
18675 struct sk_buff *msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18676 void **cb;
947add36 18677
d6dc1a38 18678 if (!msg)
5b97f49d 18679 return NULL;
d6dc1a38 18680
5b97f49d
JB		 18681 cb = (void **)msg->cb;
18682
18683 cb[0] = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
18684 if (!cb[0]) {
d6dc1a38 18685 nlmsg_free(msg);
5b97f49d 18686 return NULL;
d6dc1a38
JO		 18687 }
18688
9360ffd1 18689 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36 18690 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9360ffd1 18691 goto nla_put_failure;
d6dc1a38 18692
5b97f49d 18693 if (mac && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
d6dc1a38
JO		 18694 goto nla_put_failure;
18695
ae0be8de 18696 cb[1] = nla_nest_start_noflag(msg, NL80211_ATTR_CQM);
5b97f49d 18697 if (!cb[1])
9360ffd1 18698 goto nla_put_failure;
d6dc1a38 18699
5b97f49d 18700 cb[2] = rdev;
d6dc1a38 18701
5b97f49d
JB		 18702 return msg;
18703 nla_put_failure:
18704 nlmsg_free(msg);
18705 return NULL;
18706}
18707
18708static void cfg80211_send_cqm(struct sk_buff *msg, gfp_t gfp)
18709{
18710 void **cb = (void **)msg->cb;
18711 struct cfg80211_registered_device *rdev = cb[2];
18712
18713 nla_nest_end(msg, cb[1]);
18714 genlmsg_end(msg, cb[0]);
18715
18716 memset(msg->cb, 0, sizeof(msg->cb));
d6dc1a38 18717
68eb5503 18718 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18719 NL80211_MCGRP_MLME, gfp);
5b97f49d
JB		 18720}
18721
18722void cfg80211_cqm_rssi_notify(struct net_device *dev,
18723 enum nl80211_cqm_rssi_threshold_event rssi_event,
bee427b8 18724 s32 rssi_level, gfp_t gfp)
5b97f49d
JB		 18725{
18726 struct sk_buff *msg;
4a4b8169
AZ		 18727 struct wireless_dev *wdev = dev->ieee80211_ptr;
18728 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
5b97f49d 18729
bee427b8 18730 trace_cfg80211_cqm_rssi_notify(dev, rssi_event, rssi_level);
5b97f49d 18731
98f03342
JB		 18732 if (WARN_ON(rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW &&
18733 rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH))
18734 return;
18735
4a4b8169
AZ		 18736 if (wdev->cqm_config) {
18737 wdev->cqm_config->last_rssi_event_value = rssi_level;
18738
18739 cfg80211_cqm_rssi_update(rdev, dev);
18740
18741 if (rssi_level == 0)
18742 rssi_level = wdev->cqm_config->last_rssi_event_value;
18743 }
18744
5b97f49d
JB		 18745 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
18746 if (!msg)
18747 return;
18748
18749 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
18750 rssi_event))
18751 goto nla_put_failure;
18752
bee427b8
AZ		 18753 if (rssi_level && nla_put_s32(msg, NL80211_ATTR_CQM_RSSI_LEVEL,
18754 rssi_level))
18755 goto nla_put_failure;
18756
5b97f49d
JB		 18757 cfg80211_send_cqm(msg, gfp);
18758
d6dc1a38
JO		 18759 return;
18760
18761 nla_put_failure:
d6dc1a38
JO		 18762 nlmsg_free(msg);
18763}
947add36 18764EXPORT_SYMBOL(cfg80211_cqm_rssi_notify);
d6dc1a38 18765
5b97f49d
JB		 18766void cfg80211_cqm_txe_notify(struct net_device *dev,
18767 const u8 *peer, u32 num_packets,
18768 u32 rate, u32 intvl, gfp_t gfp)
18769{
18770 struct sk_buff *msg;
18771
18772 msg = cfg80211_prepare_cqm(dev, peer, gfp);
18773 if (!msg)
18774 return;
18775
18776 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
18777 goto nla_put_failure;
18778
18779 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
18780 goto nla_put_failure;
18781
18782 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
18783 goto nla_put_failure;
18784
18785 cfg80211_send_cqm(msg, gfp);
18786 return;
18787
18788 nla_put_failure:
18789 nlmsg_free(msg);
18790}
18791EXPORT_SYMBOL(cfg80211_cqm_txe_notify);
18792
18793void cfg80211_cqm_pktloss_notify(struct net_device *dev,
18794 const u8 *peer, u32 num_packets, gfp_t gfp)
18795{
18796 struct sk_buff *msg;
18797
18798 trace_cfg80211_cqm_pktloss_notify(dev, peer, num_packets);
18799
18800 msg = cfg80211_prepare_cqm(dev, peer, gfp);
18801 if (!msg)
18802 return;
18803
18804 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
18805 goto nla_put_failure;
18806
18807 cfg80211_send_cqm(msg, gfp);
18808 return;
18809
18810 nla_put_failure:
18811 nlmsg_free(msg);
18812}
18813EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify);
18814
98f03342
JB		 18815void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp)
18816{
18817 struct sk_buff *msg;
18818
18819 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
18820 if (!msg)
18821 return;
18822
18823 if (nla_put_flag(msg, NL80211_ATTR_CQM_BEACON_LOSS_EVENT))
18824 goto nla_put_failure;
18825
18826 cfg80211_send_cqm(msg, gfp);
18827 return;
18828
18829 nla_put_failure:
18830 nlmsg_free(msg);
18831}
18832EXPORT_SYMBOL(cfg80211_cqm_beacon_loss_notify);
18833
947add36
JB		 18834static void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
18835 struct net_device *netdev, const u8 *bssid,
18836 const u8 *replay_ctr, gfp_t gfp)
e5497d76
JB		 18837{
18838 struct sk_buff *msg;
18839 struct nlattr *rekey_attr;
18840 void *hdr;
18841
58050fce 18842 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 18843 if (!msg)
18844 return;
18845
18846 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
18847 if (!hdr) {
18848 nlmsg_free(msg);
18849 return;
18850 }
18851
9360ffd1
DM		 18852 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18853 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
18854 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
18855 goto nla_put_failure;
e5497d76 18856
ae0be8de 18857 rekey_attr = nla_nest_start_noflag(msg, NL80211_ATTR_REKEY_DATA);
e5497d76
JB		 18858 if (!rekey_attr)
18859 goto nla_put_failure;
18860
9360ffd1
DM		 18861 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
18862 NL80211_REPLAY_CTR_LEN, replay_ctr))
18863 goto nla_put_failure;
e5497d76
JB		 18864
18865 nla_nest_end(msg, rekey_attr);
18866
3b7b72ee 18867 genlmsg_end(msg, hdr);
e5497d76 18868
68eb5503 18869 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18870 NL80211_MCGRP_MLME, gfp);
e5497d76
JB		 18871 return;
18872
18873 nla_put_failure:
e5497d76
JB		 18874 nlmsg_free(msg);
18875}
18876
947add36
JB		 18877void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
18878 const u8 *replay_ctr, gfp_t gfp)
18879{
18880 struct wireless_dev *wdev = dev->ieee80211_ptr;
18881 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18882 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18883
18884 trace_cfg80211_gtk_rekey_notify(dev, bssid);
18885 nl80211_gtk_rekey_notify(rdev, dev, bssid, replay_ctr, gfp);
18886}
18887EXPORT_SYMBOL(cfg80211_gtk_rekey_notify);
18888
18889static void
18890nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
18891 struct net_device *netdev, int index,
18892 const u8 *bssid, bool preauth, gfp_t gfp)
c9df56b4
JM		 18893{
18894 struct sk_buff *msg;
18895 struct nlattr *attr;
18896 void *hdr;
18897
58050fce 18898 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 18899 if (!msg)
18900 return;
18901
18902 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
18903 if (!hdr) {
18904 nlmsg_free(msg);
18905 return;
18906 }
18907
9360ffd1
DM		 18908 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18909 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
18910 goto nla_put_failure;
c9df56b4 18911
ae0be8de 18912 attr = nla_nest_start_noflag(msg, NL80211_ATTR_PMKSA_CANDIDATE);
c9df56b4
JM		 18913 if (!attr)
18914 goto nla_put_failure;
18915
9360ffd1
DM		 18916 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
18917 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
18918 (preauth &&
18919 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
18920 goto nla_put_failure;
c9df56b4
JM		 18921
18922 nla_nest_end(msg, attr);
18923
3b7b72ee 18924 genlmsg_end(msg, hdr);
c9df56b4 18925
68eb5503 18926 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18927 NL80211_MCGRP_MLME, gfp);
c9df56b4
JM		 18928 return;
18929
18930 nla_put_failure:
c9df56b4
JM		 18931 nlmsg_free(msg);
18932}
18933
947add36
JB		 18934void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
18935 const u8 *bssid, bool preauth, gfp_t gfp)
18936{
18937 struct wireless_dev *wdev = dev->ieee80211_ptr;
18938 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18939 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18940
18941 trace_cfg80211_pmksa_candidate_notify(dev, index, bssid, preauth);
18942 nl80211_pmksa_candidate_notify(rdev, dev, index, bssid, preauth, gfp);
18943}
18944EXPORT_SYMBOL(cfg80211_pmksa_candidate_notify);
18945
18946static void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
18947 struct net_device *netdev,
b8c9024e 18948 unsigned int link_id,
947add36 18949 struct cfg80211_chan_def *chandef,
f8d7552e
LC		 18950 gfp_t gfp,
18951 enum nl80211_commands notif,
669b8413 18952 u8 count, bool quiet)
5314526b 18953{
b8c9024e 18954 struct wireless_dev *wdev = netdev->ieee80211_ptr;
5314526b
TP		 18955 struct sk_buff *msg;
18956 void *hdr;
18957
58050fce 18958 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 18959 if (!msg)
18960 return;
18961
f8d7552e 18962 hdr = nl80211hdr_put(msg, 0, 0, 0, notif);
5314526b
TP		 18963 if (!hdr) {
18964 nlmsg_free(msg);
18965 return;
18966 }
18967
683b6d3b
JB		 18968 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
18969 goto nla_put_failure;
18970
b8c9024e
VJ		 18971 if (wdev->valid_links &&
18972 nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link_id))
18973 goto nla_put_failure;
18974
683b6d3b 18975 if (nl80211_send_chandef(msg, chandef))
7eab0f64 18976 goto nla_put_failure;
5314526b 18977
669b8413
JB		 18978 if (notif == NL80211_CMD_CH_SWITCH_STARTED_NOTIFY) {
18979 if (nla_put_u32(msg, NL80211_ATTR_CH_SWITCH_COUNT, count))
f8d7552e 18980 goto nla_put_failure;
669b8413
JB		 18981 if (quiet &&
18982 nla_put_flag(msg, NL80211_ATTR_CH_SWITCH_BLOCK_TX))
f8d7552e 18983 goto nla_put_failure;
669b8413 18984 }
f8d7552e 18985
5314526b
TP		 18986 genlmsg_end(msg, hdr);
18987
68eb5503 18988 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18989 NL80211_MCGRP_MLME, gfp);
5314526b
TP		 18990 return;
18991
18992 nla_put_failure:
5314526b
TP		 18993 nlmsg_free(msg);
18994}
18995
947add36 18996void cfg80211_ch_switch_notify(struct net_device *dev,
7b0a0e3c
JB		 18997 struct cfg80211_chan_def *chandef,
18998 unsigned int link_id)
84f10708 18999{
947add36
JB		 19000 struct wireless_dev *wdev = dev->ieee80211_ptr;
19001 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 19002 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36 19003
e487eaeb 19004 ASSERT_WDEV_LOCK(wdev);
7b0a0e3c 19005 WARN_INVALID_LINK_ID(wdev, link_id);
947add36 19006
7b0a0e3c 19007 trace_cfg80211_ch_switch_notify(dev, chandef, link_id);
5dc8cdce 19008
7b0a0e3c
JB		 19009 switch (wdev->iftype) {
19010 case NL80211_IFTYPE_STATION:
19011 case NL80211_IFTYPE_P2P_CLIENT:
19012 if (!WARN_ON(!wdev->links[link_id].client.current_bss))
19013 cfg80211_update_assoc_bss_entry(wdev, link_id,
19014 chandef->chan);
19015 break;
19016 case NL80211_IFTYPE_MESH_POINT:
19017 wdev->u.mesh.chandef = *chandef;
19018 wdev->u.mesh.preset_chandef = *chandef;
19019 break;
19020 case NL80211_IFTYPE_AP:
19021 case NL80211_IFTYPE_P2P_GO:
19022 wdev->links[link_id].ap.chandef = *chandef;
19023 break;
77e7b6ba
JB		 19024 case NL80211_IFTYPE_ADHOC:
19025 wdev->u.ibss.chandef = *chandef;
19026 break;
7b0a0e3c
JB		 19027 default:
19028 WARN_ON(1);
19029 break;
19030 }
5dc8cdce 19031
d34990bb
MV		 19032 cfg80211_sched_dfs_chan_update(rdev);
19033
b8c9024e 19034 nl80211_ch_switch_notify(rdev, dev, link_id, chandef, GFP_KERNEL,
669b8413 19035 NL80211_CMD_CH_SWITCH_NOTIFY, 0, false);
947add36
JB		 19036}
19037EXPORT_SYMBOL(cfg80211_ch_switch_notify);
19038
f8d7552e
LC		 19039void cfg80211_ch_switch_started_notify(struct net_device *dev,
19040 struct cfg80211_chan_def *chandef,
b8c9024e
VJ		 19041 unsigned int link_id, u8 count,
19042 bool quiet)
f8d7552e
LC		 19043{
19044 struct wireless_dev *wdev = dev->ieee80211_ptr;
19045 struct wiphy *wiphy = wdev->wiphy;
19046 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
19047
b8c9024e
VJ		 19048 ASSERT_WDEV_LOCK(wdev);
19049 WARN_INVALID_LINK_ID(wdev, link_id);
19050
19051 trace_cfg80211_ch_switch_started_notify(dev, chandef, link_id);
f8d7552e 19052
b8c9024e 19053 nl80211_ch_switch_notify(rdev, dev, link_id, chandef, GFP_KERNEL,
669b8413
JB		 19054 NL80211_CMD_CH_SWITCH_STARTED_NOTIFY,
19055 count, quiet);
f8d7552e
LC		 19056}
19057EXPORT_SYMBOL(cfg80211_ch_switch_started_notify);
19058
0d2ab3ae
JC		 19059int cfg80211_bss_color_notify(struct net_device *dev, gfp_t gfp,
19060 enum nl80211_commands cmd, u8 count,
19061 u64 color_bitmap)
19062{
19063 struct wireless_dev *wdev = dev->ieee80211_ptr;
19064 struct wiphy *wiphy = wdev->wiphy;
19065 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
19066 struct sk_buff *msg;
19067 void *hdr;
19068
19069 ASSERT_WDEV_LOCK(wdev);
19070
19071 trace_cfg80211_bss_color_notify(dev, cmd, count, color_bitmap);
19072
19073 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19074 if (!msg)
19075 return -ENOMEM;
19076
19077 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
19078 if (!hdr)
19079 goto nla_put_failure;
19080
19081 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
19082 goto nla_put_failure;
19083
19084 if (cmd == NL80211_CMD_COLOR_CHANGE_STARTED &&
19085 nla_put_u32(msg, NL80211_ATTR_COLOR_CHANGE_COUNT, count))
19086 goto nla_put_failure;
19087
19088 if (cmd == NL80211_CMD_OBSS_COLOR_COLLISION &&
19089 nla_put_u64_64bit(msg, NL80211_ATTR_OBSS_COLOR_BITMAP,
19090 color_bitmap, NL80211_ATTR_PAD))
19091 goto nla_put_failure;
19092
19093 genlmsg_end(msg, hdr);
19094
19095 return genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
19096 msg, 0, NL80211_MCGRP_MLME, gfp);
19097
19098nla_put_failure:
19099 nlmsg_free(msg);
19100 return -EINVAL;
19101}
19102EXPORT_SYMBOL(cfg80211_bss_color_notify);
19103
04f39047
SW		 19104void
19105nl80211_radar_notify(struct cfg80211_registered_device *rdev,
d2859df5 19106 const struct cfg80211_chan_def *chandef,
04f39047
SW		 19107 enum nl80211_radar_event event,
19108 struct net_device *netdev, gfp_t gfp)
19109{
19110 struct sk_buff *msg;
19111 void *hdr;
19112
19113 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19114 if (!msg)
19115 return;
19116
19117 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
19118 if (!hdr) {
19119 nlmsg_free(msg);
19120 return;
19121 }
19122
19123 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
19124 goto nla_put_failure;
19125
19126 /* NOP and radar events don't need a netdev parameter */
19127 if (netdev) {
19128 struct wireless_dev *wdev = netdev->ieee80211_ptr;
19129
19130 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
2dad624e
ND		 19131 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19132 NL80211_ATTR_PAD))
04f39047
SW		 19133 goto nla_put_failure;
19134 }
19135
19136 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
19137 goto nla_put_failure;
19138
19139 if (nl80211_send_chandef(msg, chandef))
19140 goto nla_put_failure;
19141
9c90a9f6 19142 genlmsg_end(msg, hdr);
04f39047 19143
68eb5503 19144 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19145 NL80211_MCGRP_MLME, gfp);
04f39047
SW		 19146 return;
19147
19148 nla_put_failure:
04f39047
SW		 19149 nlmsg_free(msg);
19150}
19151
466b9936 19152void cfg80211_sta_opmode_change_notify(struct net_device *dev, const u8 *mac,
19153 struct sta_opmode_info *sta_opmode,
19154 gfp_t gfp)
19155{
19156 struct sk_buff *msg;
19157 struct wireless_dev *wdev = dev->ieee80211_ptr;
19158 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
19159 void *hdr;
19160
19161 if (WARN_ON(!mac))
19162 return;
19163
19164 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19165 if (!msg)
19166 return;
19167
19168 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STA_OPMODE_CHANGED);
19169 if (!hdr) {
19170 nlmsg_free(msg);
19171 return;
19172 }
19173
19174 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
19175 goto nla_put_failure;
19176
19177 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
19178 goto nla_put_failure;
19179
19180 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
19181 goto nla_put_failure;
19182
19183 if ((sta_opmode->changed & STA_OPMODE_SMPS_MODE_CHANGED) &&
19184 nla_put_u8(msg, NL80211_ATTR_SMPS_MODE, sta_opmode->smps_mode))
19185 goto nla_put_failure;
19186
19187 if ((sta_opmode->changed & STA_OPMODE_MAX_BW_CHANGED) &&
0016d320 19188 nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, sta_opmode->bw))
466b9936 19189 goto nla_put_failure;
19190
19191 if ((sta_opmode->changed & STA_OPMODE_N_SS_CHANGED) &&
19192 nla_put_u8(msg, NL80211_ATTR_NSS, sta_opmode->rx_nss))
19193 goto nla_put_failure;
19194
19195 genlmsg_end(msg, hdr);
19196
19197 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
19198 NL80211_MCGRP_MLME, gfp);
19199
19200 return;
19201
19202nla_put_failure:
19203 nlmsg_free(msg);
19204}
19205EXPORT_SYMBOL(cfg80211_sta_opmode_change_notify);
19206
7f6cf311 19207void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
c4b50cd3
VN		 19208 u64 cookie, bool acked, s32 ack_signal,
19209 bool is_valid_ack_signal, gfp_t gfp)
7f6cf311
JB		 19210{
19211 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 19212 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
7f6cf311
JB		 19213 struct sk_buff *msg;
19214 void *hdr;
7f6cf311 19215
4ee3e063
BL		 19216 trace_cfg80211_probe_status(dev, addr, cookie, acked);
19217
58050fce 19218 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 19219
7f6cf311
JB		 19220 if (!msg)
19221 return;
19222
19223 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
19224 if (!hdr) {
19225 nlmsg_free(msg);
19226 return;
19227 }
19228
9360ffd1
DM		 19229 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19230 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19231 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
2dad624e
ND		 19232 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
19233 NL80211_ATTR_PAD) ||
c4b50cd3
VN		 19234 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
19235 (is_valid_ack_signal && nla_put_s32(msg, NL80211_ATTR_ACK_SIGNAL,
19236 ack_signal)))
9360ffd1 19237 goto nla_put_failure;
7f6cf311 19238
9c90a9f6 19239 genlmsg_end(msg, hdr);
7f6cf311 19240
68eb5503 19241 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19242 NL80211_MCGRP_MLME, gfp);
7f6cf311
JB		 19243 return;
19244
19245 nla_put_failure:
7f6cf311
JB		 19246 nlmsg_free(msg);
19247}
19248EXPORT_SYMBOL(cfg80211_probe_status);
19249
e76fede8
TP		 19250void cfg80211_report_obss_beacon_khz(struct wiphy *wiphy, const u8 *frame,
19251 size_t len, int freq, int sig_dbm)
5e760230 19252{
f26cbf40 19253 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
5e760230
JB		 19254 struct sk_buff *msg;
19255 void *hdr;
37c73b5f 19256 struct cfg80211_beacon_registration *reg;
5e760230 19257
4ee3e063
BL		 19258 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
19259
37c73b5f
BG		 19260 spin_lock_bh(&rdev->beacon_registrations_lock);
19261 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
19262 msg = nlmsg_new(len + 100, GFP_ATOMIC);
19263 if (!msg) {
19264 spin_unlock_bh(&rdev->beacon_registrations_lock);
19265 return;
19266 }
5e760230 19267
37c73b5f
BG		 19268 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
19269 if (!hdr)
19270 goto nla_put_failure;
5e760230 19271
37c73b5f
BG		 19272 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19273 (freq &&
942ba88b
TP		 19274 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
19275 KHZ_TO_MHZ(freq)) ||
19276 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
19277 freq % 1000))) ||
37c73b5f
BG		 19278 (sig_dbm &&
19279 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
19280 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
19281 goto nla_put_failure;
5e760230 19282
37c73b5f 19283 genlmsg_end(msg, hdr);
5e760230 19284
37c73b5f
BG		 19285 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
19286 }
19287 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 19288 return;
19289
19290 nla_put_failure:
37c73b5f 19291 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 19292 nlmsg_free(msg);
19293}
e76fede8 19294EXPORT_SYMBOL(cfg80211_report_obss_beacon_khz);
5e760230 19295
cd8f7cb4 19296#ifdef CONFIG_PM
8cd4d456
LC		 19297static int cfg80211_net_detect_results(struct sk_buff *msg,
19298 struct cfg80211_wowlan_wakeup *wakeup)
19299{
19300 struct cfg80211_wowlan_nd_info *nd = wakeup->net_detect;
19301 struct nlattr *nl_results, *nl_match, *nl_freqs;
19302 int i, j;
19303
ae0be8de
MK		 19304 nl_results = nla_nest_start_noflag(msg,
19305 NL80211_WOWLAN_TRIG_NET_DETECT_RESULTS);
8cd4d456
LC		 19306 if (!nl_results)
19307 return -EMSGSIZE;
19308
19309 for (i = 0; i < nd->n_matches; i++) {
19310 struct cfg80211_wowlan_nd_match *match = nd->matches[i];
19311
ae0be8de 19312 nl_match = nla_nest_start_noflag(msg, i);
8cd4d456
LC		 19313 if (!nl_match)
19314 break;
19315
19316 /* The SSID attribute is optional in nl80211, but for
19317 * simplicity reasons it's always present in the
19318 * cfg80211 structure. If a driver can't pass the
19319 * SSID, that needs to be changed. A zero length SSID
19320 * is still a valid SSID (wildcard), so it cannot be
19321 * used for this purpose.
19322 */
19323 if (nla_put(msg, NL80211_ATTR_SSID, match->ssid.ssid_len,
19324 match->ssid.ssid)) {
19325 nla_nest_cancel(msg, nl_match);
19326 goto out;
19327 }
19328
19329 if (match->n_channels) {
ae0be8de
MK		 19330 nl_freqs = nla_nest_start_noflag(msg,
19331 NL80211_ATTR_SCAN_FREQUENCIES);
8cd4d456
LC		 19332 if (!nl_freqs) {
19333 nla_nest_cancel(msg, nl_match);
19334 goto out;
19335 }
19336
19337 for (j = 0; j < match->n_channels; j++) {
5528fae8 19338 if (nla_put_u32(msg, j, match->channels[j])) {
8cd4d456
LC		 19339 nla_nest_cancel(msg, nl_freqs);
19340 nla_nest_cancel(msg, nl_match);
19341 goto out;
19342 }
19343 }
19344
19345 nla_nest_end(msg, nl_freqs);
19346 }
19347
19348 nla_nest_end(msg, nl_match);
19349 }
19350
19351out:
19352 nla_nest_end(msg, nl_results);
19353 return 0;
19354}
19355
cd8f7cb4
JB		 19356void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
19357 struct cfg80211_wowlan_wakeup *wakeup,
19358 gfp_t gfp)
19359{
f26cbf40 19360 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
cd8f7cb4
JB		 19361 struct sk_buff *msg;
19362 void *hdr;
9c90a9f6 19363 int size = 200;
cd8f7cb4
JB		 19364
19365 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
19366
19367 if (wakeup)
19368 size += wakeup->packet_present_len;
19369
19370 msg = nlmsg_new(size, gfp);
19371 if (!msg)
19372 return;
19373
19374 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
19375 if (!hdr)
19376 goto free_msg;
19377
19378 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 19379 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19380 NL80211_ATTR_PAD))
cd8f7cb4
JB		 19381 goto free_msg;
19382
19383 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
19384 wdev->netdev->ifindex))
19385 goto free_msg;
19386
19387 if (wakeup) {
19388 struct nlattr *reasons;
19389
ae0be8de
MK		 19390 reasons = nla_nest_start_noflag(msg,
19391 NL80211_ATTR_WOWLAN_TRIGGERS);
7fa322c8
JB		 19392 if (!reasons)
19393 goto free_msg;
cd8f7cb4
JB		 19394
19395 if (wakeup->disconnect &&
19396 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
19397 goto free_msg;
19398 if (wakeup->magic_pkt &&
19399 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
19400 goto free_msg;
19401 if (wakeup->gtk_rekey_failure &&
19402 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
19403 goto free_msg;
19404 if (wakeup->eap_identity_req &&
19405 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
19406 goto free_msg;
19407 if (wakeup->four_way_handshake &&
19408 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
19409 goto free_msg;
19410 if (wakeup->rfkill_release &&
19411 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
19412 goto free_msg;
19413
19414 if (wakeup->pattern_idx >= 0 &&
19415 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
19416 wakeup->pattern_idx))
19417 goto free_msg;
19418
ae917c9f
JB		 19419 if (wakeup->tcp_match &&
19420 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH))
19421 goto free_msg;
2a0e047e 19422
ae917c9f
JB		 19423 if (wakeup->tcp_connlost &&
19424 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST))
19425 goto free_msg;
2a0e047e 19426
ae917c9f
JB		 19427 if (wakeup->tcp_nomoretokens &&
19428 nla_put_flag(msg,
19429 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS))
19430 goto free_msg;
2a0e047e 19431
cd8f7cb4
JB		 19432 if (wakeup->packet) {
19433 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
19434 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
19435
19436 if (!wakeup->packet_80211) {
19437 pkt_attr =
19438 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
19439 len_attr =
19440 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
19441 }
19442
19443 if (wakeup->packet_len &&
19444 nla_put_u32(msg, len_attr, wakeup->packet_len))
19445 goto free_msg;
19446
19447 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
19448 wakeup->packet))
19449 goto free_msg;
19450 }
19451
8cd4d456
LC		 19452 if (wakeup->net_detect &&
19453 cfg80211_net_detect_results(msg, wakeup))
19454 goto free_msg;
19455
cd8f7cb4
JB		 19456 nla_nest_end(msg, reasons);
19457 }
19458
9c90a9f6 19459 genlmsg_end(msg, hdr);
cd8f7cb4 19460
68eb5503 19461 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19462 NL80211_MCGRP_MLME, gfp);
cd8f7cb4
JB		 19463 return;
19464
19465 free_msg:
19466 nlmsg_free(msg);
19467}
19468EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
19469#endif
19470
3475b094
JM		 19471void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
19472 enum nl80211_tdls_operation oper,
19473 u16 reason_code, gfp_t gfp)
19474{
19475 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 19476 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
3475b094
JM		 19477 struct sk_buff *msg;
19478 void *hdr;
3475b094
JM		 19479
19480 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
19481 reason_code);
19482
19483 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19484 if (!msg)
19485 return;
19486
19487 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
19488 if (!hdr) {
19489 nlmsg_free(msg);
19490 return;
19491 }
19492
19493 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19494 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19495 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
19496 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
19497 (reason_code > 0 &&
19498 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
19499 goto nla_put_failure;
19500
9c90a9f6 19501 genlmsg_end(msg, hdr);
3475b094 19502
68eb5503 19503 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19504 NL80211_MCGRP_MLME, gfp);
3475b094
JM		 19505 return;
19506
19507 nla_put_failure:
3475b094
JM		 19508 nlmsg_free(msg);
19509}
19510EXPORT_SYMBOL(cfg80211_tdls_oper_request);
19511
026331c4
JM		 19512static int nl80211_netlink_notify(struct notifier_block * nb,
19513 unsigned long state,
19514 void *_notify)
19515{
19516 struct netlink_notify *notify = _notify;
19517 struct cfg80211_registered_device *rdev;
19518 struct wireless_dev *wdev;
37c73b5f 19519 struct cfg80211_beacon_registration *reg, *tmp;
026331c4 19520
8f815cdd 19521 if (state != NETLINK_URELEASE || notify->protocol != NETLINK_GENERIC)
026331c4
JM		 19522 return NOTIFY_DONE;
19523
19524 rcu_read_lock();
19525
5e760230 19526 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ca986ad9 19527 struct cfg80211_sched_scan_request *sched_scan_req;
753aacfd 19528
ca986ad9
AVS		 19529 list_for_each_entry_rcu(sched_scan_req,
19530 &rdev->sched_scan_req_list,
19531 list) {
19532 if (sched_scan_req->owner_nlportid == notify->portid) {
19533 sched_scan_req->nl_owner_dead = true;
753aacfd 19534 schedule_work(&rdev->sched_scan_stop_wk);
ca986ad9 19535 }
753aacfd 19536 }
78f22b6a 19537
53873f13 19538 list_for_each_entry_rcu(wdev, &rdev->wiphy.wdev_list, list) {
15e47304 19539 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f 19540
ab81007a
JB		 19541 if (wdev->owner_nlportid == notify->portid) {
19542 wdev->nl_owner_dead = true;
19543 schedule_work(&rdev->destroy_work);
19544 } else if (wdev->conn_owner_nlportid == notify->portid) {
bd2522b1 19545 schedule_work(&wdev->disconnect_wk);
ab81007a 19546 }
9bb7e0f2
JB		 19547
19548 cfg80211_release_pmsr(wdev, notify->portid);
78f22b6a
JB		 19549 }
19550
37c73b5f
BG		 19551 spin_lock_bh(&rdev->beacon_registrations_lock);
19552 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
19553 list) {
19554 if (reg->nlportid == notify->portid) {
19555 list_del(&reg->list);
19556 kfree(reg);
19557 break;
19558 }
19559 }
19560 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 19561 }
026331c4
JM		 19562
19563 rcu_read_unlock();
19564
05050753
I		 19565 /*
19566 * It is possible that the user space process that is controlling the
19567 * indoor setting disappeared, so notify the regulatory core.
19568 */
19569 regulatory_netlink_notify(notify->portid);
6784c7db 19570 return NOTIFY_OK;
026331c4
JM		 19571}
19572
19573static struct notifier_block nl80211_netlink_notifier = {
19574 .notifier_call = nl80211_netlink_notify,
19575};
19576
355199e0
JM		 19577void cfg80211_ft_event(struct net_device *netdev,
19578 struct cfg80211_ft_event_params *ft_event)
19579{
19580 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
f26cbf40 19581 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
355199e0
JM		 19582 struct sk_buff *msg;
19583 void *hdr;
355199e0
JM		 19584
19585 trace_cfg80211_ft_event(wiphy, netdev, ft_event);
19586
19587 if (!ft_event->target_ap)
19588 return;
19589
1039d081
DL		 19590 msg = nlmsg_new(100 + ft_event->ies_len + ft_event->ric_ies_len,
19591 GFP_KERNEL);
355199e0
JM		 19592 if (!msg)
19593 return;
19594
19595 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FT_EVENT);
ae917c9f
JB		 19596 if (!hdr)
19597 goto out;
355199e0 19598
ae917c9f
JB		 19599 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19600 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
19601 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ft_event->target_ap))
19602 goto out;
355199e0 19603
ae917c9f
JB		 19604 if (ft_event->ies &&
19605 nla_put(msg, NL80211_ATTR_IE, ft_event->ies_len, ft_event->ies))
19606 goto out;
19607 if (ft_event->ric_ies &&
19608 nla_put(msg, NL80211_ATTR_IE_RIC, ft_event->ric_ies_len,
19609 ft_event->ric_ies))
19610 goto out;
355199e0 19611
9c90a9f6 19612 genlmsg_end(msg, hdr);
355199e0 19613
68eb5503 19614 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19615 NL80211_MCGRP_MLME, GFP_KERNEL);
ae917c9f
JB		 19616 return;
19617 out:
19618 nlmsg_free(msg);
355199e0
JM		 19619}
19620EXPORT_SYMBOL(cfg80211_ft_event);
19621
5de17984
AS		 19622void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp)
19623{
19624 struct cfg80211_registered_device *rdev;
19625 struct sk_buff *msg;
19626 void *hdr;
19627 u32 nlportid;
19628
f26cbf40 19629 rdev = wiphy_to_rdev(wdev->wiphy);
5de17984
AS		 19630 if (!rdev->crit_proto_nlportid)
19631 return;
19632
19633 nlportid = rdev->crit_proto_nlportid;
19634 rdev->crit_proto_nlportid = 0;
19635
19636 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19637 if (!msg)
19638 return;
19639
19640 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CRIT_PROTOCOL_STOP);
19641 if (!hdr)
19642 goto nla_put_failure;
19643
19644 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 19645 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19646 NL80211_ATTR_PAD))
5de17984
AS		 19647 goto nla_put_failure;
19648
19649 genlmsg_end(msg, hdr);
19650
19651 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
19652 return;
19653
19654 nla_put_failure:
5de17984 19655 nlmsg_free(msg);
5de17984
AS		 19656}
19657EXPORT_SYMBOL(cfg80211_crit_proto_stopped);
19658
348baf0e
JB		 19659void nl80211_send_ap_stopped(struct wireless_dev *wdev)
19660{
19661 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 19662 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
348baf0e
JB		 19663 struct sk_buff *msg;
19664 void *hdr;
19665
19666 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
19667 if (!msg)
19668 return;
19669
19670 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STOP_AP);
19671 if (!hdr)
19672 goto out;
19673
19674 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19675 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex) ||
2dad624e
ND		 19676 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19677 NL80211_ATTR_PAD))
348baf0e
JB		 19678 goto out;
19679
19680 genlmsg_end(msg, hdr);
19681
19682 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(wiphy), msg, 0,
19683 NL80211_MCGRP_MLME, GFP_KERNEL);
19684 return;
19685 out:
19686 nlmsg_free(msg);
19687}
19688
40cbfa90
SD		 19689int cfg80211_external_auth_request(struct net_device *dev,
19690 struct cfg80211_external_auth_params *params,
19691 gfp_t gfp)
19692{
19693 struct wireless_dev *wdev = dev->ieee80211_ptr;
19694 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
19695 struct sk_buff *msg;
19696 void *hdr;
19697
19698 if (!wdev->conn_owner_nlportid)
19699 return -EINVAL;
19700
19701 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19702 if (!msg)
19703 return -ENOMEM;
19704
19705 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_EXTERNAL_AUTH);
19706 if (!hdr)
19707 goto nla_put_failure;
19708
19709 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19710 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19711 nla_put_u32(msg, NL80211_ATTR_AKM_SUITES, params->key_mgmt_suite) ||
19712 nla_put_u32(msg, NL80211_ATTR_EXTERNAL_AUTH_ACTION,
19713 params->action) ||
19714 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, params->bssid) ||
19715 nla_put(msg, NL80211_ATTR_SSID, params->ssid.ssid_len,
19716 params->ssid.ssid))
19717 goto nla_put_failure;
19718
19719 genlmsg_end(msg, hdr);
19720 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
19721 wdev->conn_owner_nlportid);
19722 return 0;
19723
19724 nla_put_failure:
19725 nlmsg_free(msg);
19726 return -ENOBUFS;
19727}
19728EXPORT_SYMBOL(cfg80211_external_auth_request);
19729
cb74e977
SD		 19730void cfg80211_update_owe_info_event(struct net_device *netdev,
19731 struct cfg80211_update_owe_info *owe_info,
19732 gfp_t gfp)
19733{
19734 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
19735 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
19736 struct sk_buff *msg;
19737 void *hdr;
19738
19739 trace_cfg80211_update_owe_info_event(wiphy, netdev, owe_info);
19740
19741 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19742 if (!msg)
19743 return;
19744
19745 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_UPDATE_OWE_INFO);
19746 if (!hdr)
19747 goto nla_put_failure;
19748
19749 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19750 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
19751 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, owe_info->peer))
19752 goto nla_put_failure;
19753
19754 if (!owe_info->ie_len ||
19755 nla_put(msg, NL80211_ATTR_IE, owe_info->ie_len, owe_info->ie))
19756 goto nla_put_failure;
19757
19758 genlmsg_end(msg, hdr);
19759
19760 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
19761 NL80211_MCGRP_MLME, gfp);
19762 return;
19763
19764nla_put_failure:
19765 genlmsg_cancel(msg, hdr);
19766 nlmsg_free(msg);
19767}
19768EXPORT_SYMBOL(cfg80211_update_owe_info_event);
19769
55682965
JB		 19770/* initialisation/exit functions */
19771
56989f6d 19772int __init nl80211_init(void)
55682965 19773{
0d63cbb5 19774 int err;
55682965 19775
489111e5 19776 err = genl_register_family(&nl80211_fam);
55682965
JB		 19777 if (err)
19778 return err;
19779
026331c4
JM		 19780 err = netlink_register_notifier(&nl80211_netlink_notifier);
19781 if (err)
19782 goto err_out;
19783
55682965
JB		 19784 return 0;
19785 err_out:
19786 genl_unregister_family(&nl80211_fam);
19787 return err;
19788}
19789
19790void nl80211_exit(void)
19791{
026331c4 19792 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 19793 genl_unregister_family(&nl80211_fam);
19794}
Linux 6.x block layer and io_uring tree(s)