projects / linux-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
cfg80211: Configure PMK lifetime and reauth threshold for PMKSA entries
[linux-block.git] / net / wireless / nl80211.c
CommitLineData
457c8996 1// SPDX-License-Identifier: GPL-2.0-only
55682965
JB		 2/*
3 * This is the new netlink-based wireless configuration interface.
4 *
026331c4 5 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
2740f0cf 6 * Copyright 2013-2014 Intel Mobile Communications GmbH
66cd794e 7 * Copyright 2015-2017 Intel Deutschland GmbH
7e8d6f12 8 * Copyright (C) 2018-2020 Intel Corporation
55682965
JB		 9 */
10
11#include <linux/if.h>
12#include <linux/module.h>
13#include <linux/err.h>
5a0e3ad6 14#include <linux/slab.h>
55682965
JB		 15#include <linux/list.h>
16#include <linux/if_ether.h>
17#include <linux/ieee80211.h>
18#include <linux/nl80211.h>
19#include <linux/rtnetlink.h>
20#include <linux/netlink.h>
259d8c1e 21#include <linux/nospec.h>
2a519311 22#include <linux/etherdevice.h>
e3ae39ed 23#include <linux/if_vlan.h>
463d0183 24#include <net/net_namespace.h>
55682965
JB		 25#include <net/genetlink.h>
26#include <net/cfg80211.h>
463d0183 27#include <net/sock.h>
2a0e047e 28#include <net/inet_connection_sock.h>
55682965
JB		 29#include "core.h"
30#include "nl80211.h"
b2e1b302 31#include "reg.h"
e35e4d28 32#include "rdev-ops.h"
55682965 33
5fb628e9
JM		 34static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
35 struct genl_info *info,
36 struct cfg80211_crypto_settings *settings,
37 int cipher_limit);
38
55682965 39/* the netlink family */
489111e5 40static struct genl_family nl80211_fam;
55682965 41
2a94fe48
JB		 42/* multicast groups */
43enum nl80211_multicast_groups {
44 NL80211_MCGRP_CONFIG,
45 NL80211_MCGRP_SCAN,
46 NL80211_MCGRP_REGULATORY,
47 NL80211_MCGRP_MLME,
567ffc35 48 NL80211_MCGRP_VENDOR,
50bcd31d 49 NL80211_MCGRP_NAN,
2a94fe48
JB		 50 NL80211_MCGRP_TESTMODE /* keep last - ifdef! */
51};
52
53static const struct genl_multicast_group nl80211_mcgrps[] = {
71b836ec
JB		 54 [NL80211_MCGRP_CONFIG] = { .name = NL80211_MULTICAST_GROUP_CONFIG },
55 [NL80211_MCGRP_SCAN] = { .name = NL80211_MULTICAST_GROUP_SCAN },
56 [NL80211_MCGRP_REGULATORY] = { .name = NL80211_MULTICAST_GROUP_REG },
57 [NL80211_MCGRP_MLME] = { .name = NL80211_MULTICAST_GROUP_MLME },
58 [NL80211_MCGRP_VENDOR] = { .name = NL80211_MULTICAST_GROUP_VENDOR },
50bcd31d 59 [NL80211_MCGRP_NAN] = { .name = NL80211_MULTICAST_GROUP_NAN },
2a94fe48 60#ifdef CONFIG_NL80211_TESTMODE
71b836ec 61 [NL80211_MCGRP_TESTMODE] = { .name = NL80211_MULTICAST_GROUP_TESTMODE }
2a94fe48
JB		 62#endif
63};
64
89a54e48
JB		 65/* returns ERR_PTR values */
66static struct wireless_dev *
67__cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
55682965 68{
89a54e48
JB		 69 struct cfg80211_registered_device *rdev;
70 struct wireless_dev *result = NULL;
71 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
72 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
73 u64 wdev_id;
74 int wiphy_idx = -1;
75 int ifidx = -1;
55682965 76
5fe231e8 77 ASSERT_RTNL();
55682965 78
89a54e48
JB		 79 if (!have_ifidx && !have_wdev_id)
80 return ERR_PTR(-EINVAL);
55682965 81
89a54e48
JB		 82 if (have_ifidx)
83 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
84 if (have_wdev_id) {
85 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
86 wiphy_idx = wdev_id >> 32;
55682965
JB		 87 }
88
89a54e48
JB		 89 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
90 struct wireless_dev *wdev;
91
92 if (wiphy_net(&rdev->wiphy) != netns)
93 continue;
94
95 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
96 continue;
97
53873f13 98 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
89a54e48
JB		 99 if (have_ifidx && wdev->netdev &&
100 wdev->netdev->ifindex == ifidx) {
101 result = wdev;
102 break;
103 }
104 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
105 result = wdev;
106 break;
107 }
108 }
89a54e48
JB		 109
110 if (result)
111 break;
112 }
113
114 if (result)
115 return result;
116 return ERR_PTR(-ENODEV);
55682965
JB		 117}
118
a9455408 119static struct cfg80211_registered_device *
878d9ec7 120__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 121{
7fee4778
JB		 122 struct cfg80211_registered_device *rdev = NULL, *tmp;
123 struct net_device *netdev;
a9455408 124
5fe231e8 125 ASSERT_RTNL();
a9455408 126
878d9ec7 127 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 128 !attrs[NL80211_ATTR_IFINDEX] &&
129 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 130 return ERR_PTR(-EINVAL);
131
878d9ec7 132 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 133 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 134 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 135
89a54e48
JB		 136 if (attrs[NL80211_ATTR_WDEV]) {
137 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
138 struct wireless_dev *wdev;
139 bool found = false;
140
141 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
142 if (tmp) {
143 /* make sure wdev exists */
53873f13 144 list_for_each_entry(wdev, &tmp->wiphy.wdev_list, list) {
89a54e48
JB		 145 if (wdev->identifier != (u32)wdev_id)
146 continue;
147 found = true;
148 break;
149 }
89a54e48
JB		 150
151 if (!found)
152 tmp = NULL;
153
154 if (rdev && tmp != rdev)
155 return ERR_PTR(-EINVAL);
156 rdev = tmp;
157 }
158 }
159
878d9ec7
JB		 160 if (attrs[NL80211_ATTR_IFINDEX]) {
161 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
7a087e74 162
7f2b8562 163 netdev = __dev_get_by_index(netns, ifindex);
7fee4778
JB		 164 if (netdev) {
165 if (netdev->ieee80211_ptr)
f26cbf40
ZG		 166 tmp = wiphy_to_rdev(
167 netdev->ieee80211_ptr->wiphy);
7fee4778
JB		 168 else
169 tmp = NULL;
170
7fee4778
JB		 171 /* not wireless device -- return error */
172 if (!tmp)
173 return ERR_PTR(-EINVAL);
174
175 /* mismatch -- return error */
176 if (rdev && tmp != rdev)
177 return ERR_PTR(-EINVAL);
178
179 rdev = tmp;
a9455408 180 }
a9455408 181 }
a9455408 182
4f7eff10
JB		 183 if (!rdev)
184 return ERR_PTR(-ENODEV);
a9455408 185
4f7eff10
JB		 186 if (netns != wiphy_net(&rdev->wiphy))
187 return ERR_PTR(-ENODEV);
188
189 return rdev;
a9455408
JB		 190}
191
192/*
193 * This function returns a pointer to the driver
194 * that the genl_info item that is passed refers to.
a9455408
JB		 195 *
196 * The result of this can be a PTR_ERR and hence must
197 * be checked with IS_ERR() for errors.
198 */
199static struct cfg80211_registered_device *
4f7eff10 200cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408 201{
5fe231e8 202 return __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 203}
204
f88eb7c0
JB		 205static int validate_beacon_head(const struct nlattr *attr,
206 struct netlink_ext_ack *extack)
207{
208 const u8 *data = nla_data(attr);
209 unsigned int len = nla_len(attr);
210 const struct element *elem;
211 const struct ieee80211_mgmt *mgmt = (void *)data;
212 unsigned int fixedlen = offsetof(struct ieee80211_mgmt,
213 u.beacon.variable);
214
215 if (len < fixedlen)
216 goto err;
217
218 if (ieee80211_hdrlen(mgmt->frame_control) !=
219 offsetof(struct ieee80211_mgmt, u.beacon))
220 goto err;
221
222 data += fixedlen;
223 len -= fixedlen;
224
225 for_each_element(elem, data, len) {
226 /* nothing */
227 }
228
229 if (for_each_element_completed(elem, data, len))
230 return 0;
231
232err:
233 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed beacon head");
234 return -EINVAL;
235}
236
3d7af878
JB		 237static int validate_ie_attr(const struct nlattr *attr,
238 struct netlink_ext_ack *extack)
239{
9f308616
JB		 240 const u8 *data = nla_data(attr);
241 unsigned int len = nla_len(attr);
7388afe0 242 const struct element *elem;
3d7af878 243
9f308616
JB		 244 for_each_element(elem, data, len) {
245 /* nothing */
3d7af878
JB		 246 }
247
9f308616
JB		 248 if (for_each_element_completed(elem, data, len))
249 return 0;
250
3d7af878
JB		 251 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed information elements");
252 return -EINVAL;
253}
254
55682965 255/* policy for the attributes */
81e54d08
PKC		 256static const struct nla_policy
257nl80211_ftm_responder_policy[NL80211_FTM_RESP_ATTR_MAX + 1] = {
258 [NL80211_FTM_RESP_ATTR_ENABLED] = { .type = NLA_FLAG, },
259 [NL80211_FTM_RESP_ATTR_LCI] = { .type = NLA_BINARY,
260 .len = U8_MAX },
261 [NL80211_FTM_RESP_ATTR_CIVICLOC] = { .type = NLA_BINARY,
262 .len = U8_MAX },
263};
264
9bb7e0f2
JB		 265static const struct nla_policy
266nl80211_pmsr_ftm_req_attr_policy[NL80211_PMSR_FTM_REQ_ATTR_MAX + 1] = {
267 [NL80211_PMSR_FTM_REQ_ATTR_ASAP] = { .type = NLA_FLAG },
268 [NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE] = { .type = NLA_U32 },
269 [NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP] =
270 NLA_POLICY_MAX(NLA_U8, 15),
271 [NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD] = { .type = NLA_U16 },
272 [NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION] =
273 NLA_POLICY_MAX(NLA_U8, 15),
274 [NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST] =
ea18709a 275 NLA_POLICY_MAX(NLA_U8, 31),
9bb7e0f2
JB		 276 [NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES] = { .type = NLA_U8 },
277 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI] = { .type = NLA_FLAG },
278 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC] = { .type = NLA_FLAG },
efb5520d
AS		 279 [NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED] = { .type = NLA_FLAG },
280 [NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED] = { .type = NLA_FLAG },
9bb7e0f2
JB		 281};
282
283static const struct nla_policy
284nl80211_pmsr_req_data_policy[NL80211_PMSR_TYPE_MAX + 1] = {
285 [NL80211_PMSR_TYPE_FTM] =
23323289 286 NLA_POLICY_NESTED(nl80211_pmsr_ftm_req_attr_policy),
9bb7e0f2
JB		 287};
288
289static const struct nla_policy
290nl80211_pmsr_req_attr_policy[NL80211_PMSR_REQ_ATTR_MAX + 1] = {
291 [NL80211_PMSR_REQ_ATTR_DATA] =
23323289 292 NLA_POLICY_NESTED(nl80211_pmsr_req_data_policy),
9bb7e0f2
JB		 293 [NL80211_PMSR_REQ_ATTR_GET_AP_TSF] = { .type = NLA_FLAG },
294};
295
296static const struct nla_policy
297nl80211_psmr_peer_attr_policy[NL80211_PMSR_PEER_ATTR_MAX + 1] = {
298 [NL80211_PMSR_PEER_ATTR_ADDR] = NLA_POLICY_ETH_ADDR,
299 /*
300 * we could specify this again to be the top-level policy,
301 * but that would open us up to recursion problems ...
302 */
303 [NL80211_PMSR_PEER_ATTR_CHAN] = { .type = NLA_NESTED },
304 [NL80211_PMSR_PEER_ATTR_REQ] =
23323289 305 NLA_POLICY_NESTED(nl80211_pmsr_req_attr_policy),
9bb7e0f2
JB		 306 [NL80211_PMSR_PEER_ATTR_RESP] = { .type = NLA_REJECT },
307};
308
309static const struct nla_policy
310nl80211_pmsr_attr_policy[NL80211_PMSR_ATTR_MAX + 1] = {
311 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_REJECT },
312 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_REJECT },
313 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_REJECT },
314 [NL80211_PMSR_ATTR_TYPE_CAPA] = { .type = NLA_REJECT },
315 [NL80211_PMSR_ATTR_PEERS] =
23323289 316 NLA_POLICY_NESTED_ARRAY(nl80211_psmr_peer_attr_policy),
9bb7e0f2
JB		 317};
318
796e90f4
JC		 319static const struct nla_policy
320he_obss_pd_policy[NL80211_HE_OBSS_PD_ATTR_MAX + 1] = {
321 [NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] =
322 NLA_POLICY_RANGE(NLA_U8, 1, 20),
323 [NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET] =
324 NLA_POLICY_RANGE(NLA_U8, 1, 20),
325};
326
5c5e52d1
JC		 327static const struct nla_policy
328he_bss_color_policy[NL80211_HE_BSS_COLOR_ATTR_MAX + 1] = {
329 [NL80211_HE_BSS_COLOR_ATTR_COLOR] = NLA_POLICY_RANGE(NLA_U8, 1, 63),
330 [NL80211_HE_BSS_COLOR_ATTR_DISABLED] = { .type = NLA_FLAG },
331 [NL80211_HE_BSS_COLOR_ATTR_PARTIAL] = { .type = NLA_FLAG },
332};
333
77f576de
T		 334static const struct nla_policy
335nl80211_tid_config_attr_policy[NL80211_TID_CONFIG_ATTR_MAX + 1] = {
3710a8a6
JB		 336 [NL80211_TID_CONFIG_ATTR_VIF_SUPP] = { .type = NLA_U64 },
337 [NL80211_TID_CONFIG_ATTR_PEER_SUPP] = { .type = NLA_U64 },
77f576de 338 [NL80211_TID_CONFIG_ATTR_OVERRIDE] = { .type = NLA_FLAG },
3710a8a6 339 [NL80211_TID_CONFIG_ATTR_TIDS] = NLA_POLICY_RANGE(NLA_U16, 1, 0xff),
77f576de
T		 340 [NL80211_TID_CONFIG_ATTR_NOACK] =
341 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
6a21d16c
T		 342 [NL80211_TID_CONFIG_ATTR_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
343 [NL80211_TID_CONFIG_ATTR_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
ade274b2
T		 344 [NL80211_TID_CONFIG_ATTR_AMPDU_CTRL] =
345 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
04f7d142
T		 346 [NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL] =
347 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
77f576de
T		 348};
349
9bb7e0f2 350const struct nla_policy nl80211_policy[NUM_NL80211_ATTR] = {
6d4dd4ef 351 [0] = { .strict_start_type = NL80211_ATTR_HE_OBSS_PD },
55682965
JB		 352 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
353 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 354 .len = 20-1 },
31888487 355 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
3d9d1d66 356
72bdcf34 357 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 358 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
2a38075c
AAL		 359 [NL80211_ATTR_WIPHY_EDMG_CHANNELS] = NLA_POLICY_RANGE(NLA_U8,
360 NL80211_EDMG_CHANNELS_MIN,
361 NL80211_EDMG_CHANNELS_MAX),
362 [NL80211_ATTR_WIPHY_EDMG_BW_CONFIG] = NLA_POLICY_RANGE(NLA_U8,
363 NL80211_EDMG_BW_CONFIG_MIN,
364 NL80211_EDMG_BW_CONFIG_MAX),
365
3d9d1d66
JB		 366 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
367 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
368 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
369
ab0d76f6
JB		 370 [NL80211_ATTR_WIPHY_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
371 [NL80211_ATTR_WIPHY_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
b9a5f8ca
JM		 372 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
373 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 374 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
3057dbfd 375 [NL80211_ATTR_WIPHY_DYN_ACK] = { .type = NLA_FLAG },
55682965 376
ab0d76f6 377 [NL80211_ATTR_IFTYPE] = NLA_POLICY_MAX(NLA_U32, NL80211_IFTYPE_MAX),
55682965
JB		 378 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
379 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 380
1a28ed21
JB		 381 [NL80211_ATTR_MAC] = { .type = NLA_EXACT_LEN_WARN, .len = ETH_ALEN },
382 [NL80211_ATTR_PREV_BSSID] = {
383 .type = NLA_EXACT_LEN_WARN,
384 .len = ETH_ALEN
385 },
41ade00f 386
b9454e83 387 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 388 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
389 .len = WLAN_MAX_KEY_LEN },
56be393f 390 [NL80211_ATTR_KEY_IDX] = NLA_POLICY_MAX(NLA_U8, 7),
41ade00f
JB		 391 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
392 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 393 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
ab0d76f6
JB		 394 [NL80211_ATTR_KEY_TYPE] =
395 NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES),
ed1b6cc7
JB		 396
397 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
398 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
f88eb7c0
JB		 399 [NL80211_ATTR_BEACON_HEAD] =
400 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_beacon_head,
401 IEEE80211_MAX_DATA_LEN),
3d7af878
JB		 402 [NL80211_ATTR_BEACON_TAIL] =
403 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
404 IEEE80211_MAX_DATA_LEN),
ab0d76f6
JB		 405 [NL80211_ATTR_STA_AID] =
406 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
5727ef1b
JB		 407 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
408 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
409 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
410 .len = NL80211_MAX_SUPP_RATES },
ab0d76f6
JB		 411 [NL80211_ATTR_STA_PLINK_ACTION] =
412 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_ACTIONS - 1),
e96d1cd2
ARN		 413 [NL80211_ATTR_STA_TX_POWER_SETTING] =
414 NLA_POLICY_RANGE(NLA_U8,
415 NL80211_TX_POWER_AUTOMATIC,
416 NL80211_TX_POWER_FIXED),
417 [NL80211_ATTR_STA_TX_POWER] = { .type = NLA_S16 },
5727ef1b 418 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 419 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 420 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 421 .len = IEEE80211_MAX_MESH_ID_LEN },
1fab1b89 422 [NL80211_ATTR_MPATH_NEXT_HOP] = NLA_POLICY_ETH_ADDR_COMPAT,
9f1ba906 423
b2e1b302
LR		 424 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
425 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
426
9f1ba906
JM		 427 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
428 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
429 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 430 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
431 .len = NL80211_MAX_SUPP_RATES },
50b12f59 432 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 433
24bdd9f4 434 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 435 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 436
1a28ed21
JB		 437 [NL80211_ATTR_HT_CAPABILITY] = {
438 .type = NLA_EXACT_LEN_WARN,
439 .len = NL80211_HT_CAPABILITY_LEN
440 },
9aed3cc1
JM		 441
442 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
3d7af878
JB		 443 [NL80211_ATTR_IE] = NLA_POLICY_VALIDATE_FN(NLA_BINARY,
444 validate_ie_attr,
445 IEEE80211_MAX_DATA_LEN),
2a519311
JB		 446 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
447 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 448
449 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
450 .len = IEEE80211_MAX_SSID_LEN },
451 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
452 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 453 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 454 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
ab0d76f6
JB		 455 [NL80211_ATTR_USE_MFP] = NLA_POLICY_RANGE(NLA_U32,
456 NL80211_MFP_NO,
457 NL80211_MFP_OPTIONAL),
eccb8e8f
JB		 458 [NL80211_ATTR_STA_FLAGS2] = {
459 .len = sizeof(struct nl80211_sta_flag_update),
460 },
3f77316c 461 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 462 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
463 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
64bf3d4b 464 [NL80211_ATTR_CONTROL_PORT_OVER_NL80211] = { .type = NLA_FLAG },
b23aa676 465 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
ea750801 466 [NL80211_ATTR_STATUS_CODE] = { .type = NLA_U16 },
b23aa676
SO		 467 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
468 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 469 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 470 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
1a28ed21
JB		 471 [NL80211_ATTR_PMKID] = {
472 .type = NLA_EXACT_LEN_WARN,
473 .len = WLAN_PMKID_LEN
474 },
9588bbd5
JM		 475 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
476 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 477 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 478 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
479 .len = IEEE80211_MAX_DATA_LEN },
480 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ab0d76f6
JB		 481 [NL80211_ATTR_PS_STATE] = NLA_POLICY_RANGE(NLA_U32,
482 NL80211_PS_DISABLED,
483 NL80211_PS_ENABLED),
d6dc1a38 484 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 485 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 486 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 487 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
488 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 489 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 490 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
491 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 492 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 493 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 494 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 495 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
ab0d76f6
JB		 496 [NL80211_ATTR_STA_PLINK_STATE] =
497 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_STATES - 1),
056e9375
JK		 498 [NL80211_ATTR_MEASUREMENT_DURATION] = { .type = NLA_U16 },
499 [NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY] = { .type = NLA_FLAG },
ab0d76f6
JB		 500 [NL80211_ATTR_MESH_PEER_AID] =
501 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
bbe6ad6d 502 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 503 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 504 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
ab0d76f6
JB		 505 [NL80211_ATTR_HIDDEN_SSID] =
506 NLA_POLICY_RANGE(NLA_U32,
507 NL80211_HIDDEN_SSID_NOT_IN_USE,
508 NL80211_HIDDEN_SSID_ZERO_CONTENTS),
3d7af878
JB		 509 [NL80211_ATTR_IE_PROBE_RESP] =
510 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
511 IEEE80211_MAX_DATA_LEN),
512 [NL80211_ATTR_IE_ASSOC_RESP] =
513 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
514 IEEE80211_MAX_DATA_LEN),
f4b34b55 515 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 516 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 517 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 518 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
519 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
520 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
521 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
522 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
31fa97c5 523 [NL80211_ATTR_TDLS_INITIATOR] = { .type = NLA_FLAG },
e247bd90 524 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 525 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
526 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 527 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 528 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
529 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
530 .len = NL80211_HT_CAPABILITY_LEN
531 },
1d9d9213 532 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 533 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 534 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 535 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 536 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
11b6b5a4 537 [NL80211_ATTR_AUTH_DATA] = { .type = NLA_BINARY, },
1a28ed21
JB		 538 [NL80211_ATTR_VHT_CAPABILITY] = {
539 .type = NLA_EXACT_LEN_WARN,
540 .len = NL80211_VHT_CAPABILITY_LEN
541 },
ed473771 542 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
ab0d76f6
JB		 543 [NL80211_ATTR_P2P_CTWINDOW] = NLA_POLICY_MAX(NLA_U8, 127),
544 [NL80211_ATTR_P2P_OPPPS] = NLA_POLICY_MAX(NLA_U8, 1),
545 [NL80211_ATTR_LOCAL_MESH_POWER_MODE] =
546 NLA_POLICY_RANGE(NLA_U32,
547 NL80211_MESH_POWER_UNKNOWN + 1,
548 NL80211_MESH_POWER_MAX),
77765eaf
VT		 549 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
550 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
9d62a986
JM		 551 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
552 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
3713b4e3 553 [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
ee2aca34
JB		 554 [NL80211_ATTR_DISABLE_VHT] = { .type = NLA_FLAG },
555 [NL80211_ATTR_VHT_CAPABILITY_MASK] = {
556 .len = NL80211_VHT_CAPABILITY_LEN,
557 },
355199e0
JM		 558 [NL80211_ATTR_MDID] = { .type = NLA_U16 },
559 [NL80211_ATTR_IE_RIC] = { .type = NLA_BINARY,
560 .len = IEEE80211_MAX_DATA_LEN },
0e1a1d85
JK		 561 [NL80211_ATTR_CRIT_PROT_ID] = { .type = NLA_U16 },
562 [NL80211_ATTR_MAX_CRIT_PROT_DURATION] = { .type = NLA_U16 },
ab0d76f6
JB		 563 [NL80211_ATTR_PEER_AID] =
564 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
16ef1fe2
SW		 565 [NL80211_ATTR_CH_SWITCH_COUNT] = { .type = NLA_U32 },
566 [NL80211_ATTR_CH_SWITCH_BLOCK_TX] = { .type = NLA_FLAG },
567 [NL80211_ATTR_CSA_IES] = { .type = NLA_NESTED },
9a774c78
AO		 568 [NL80211_ATTR_CSA_C_OFF_BEACON] = { .type = NLA_BINARY },
569 [NL80211_ATTR_CSA_C_OFF_PRESP] = { .type = NLA_BINARY },
c01fc9ad
SD		 570 [NL80211_ATTR_STA_SUPPORTED_CHANNELS] = { .type = NLA_BINARY },
571 [NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES] = { .type = NLA_BINARY },
5336fa88 572 [NL80211_ATTR_HANDLE_DFS] = { .type = NLA_FLAG },
60f4a7b1 573 [NL80211_ATTR_OPMODE_NOTIF] = { .type = NLA_U8 },
ad7e718c
JB		 574 [NL80211_ATTR_VENDOR_ID] = { .type = NLA_U32 },
575 [NL80211_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
576 [NL80211_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
fa9ffc74
KP		 577 [NL80211_ATTR_QOS_MAP] = { .type = NLA_BINARY,
578 .len = IEEE80211_QOS_MAP_LEN_MAX },
1a28ed21
JB		 579 [NL80211_ATTR_MAC_HINT] = {
580 .type = NLA_EXACT_LEN_WARN,
581 .len = ETH_ALEN
582 },
1df4a510 583 [NL80211_ATTR_WIPHY_FREQ_HINT] = { .type = NLA_U32 },
df942e7b 584 [NL80211_ATTR_TDLS_PEER_CAPABILITY] = { .type = NLA_U32 },
18e5ca65 585 [NL80211_ATTR_SOCKET_OWNER] = { .type = NLA_FLAG },
34d22ce2 586 [NL80211_ATTR_CSA_C_OFFSETS_TX] = { .type = NLA_BINARY },
bab5ab7d 587 [NL80211_ATTR_USE_RRM] = { .type = NLA_FLAG },
ab0d76f6
JB		 588 [NL80211_ATTR_TSID] = NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_TIDS - 1),
589 [NL80211_ATTR_USER_PRIO] =
590 NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_UPS - 1),
960d01ac 591 [NL80211_ATTR_ADMITTED_TIME] = { .type = NLA_U16 },
18998c38 592 [NL80211_ATTR_SMPS_MODE] = { .type = NLA_U8 },
5cde05c6 593 [NL80211_ATTR_OPER_CLASS] = { .type = NLA_U8 },
1a28ed21
JB		 594 [NL80211_ATTR_MAC_MASK] = {
595 .type = NLA_EXACT_LEN_WARN,
596 .len = ETH_ALEN
597 },
1bdd716c 598 [NL80211_ATTR_WIPHY_SELF_MANAGED_REG] = { .type = NLA_FLAG },
4b681c82 599 [NL80211_ATTR_NETNS_FD] = { .type = NLA_U32 },
9c748934 600 [NL80211_ATTR_SCHED_SCAN_DELAY] = { .type = NLA_U32 },
05050753 601 [NL80211_ATTR_REG_INDOOR] = { .type = NLA_FLAG },
34d50519 602 [NL80211_ATTR_PBSS] = { .type = NLA_FLAG },
38de03d2 603 [NL80211_ATTR_BSS_SELECT] = { .type = NLA_NESTED },
ab0d76f6
JB		 604 [NL80211_ATTR_STA_SUPPORT_P2P_PS] =
605 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_P2P_PS_STATUS - 1),
c6e6a0c8
AE		 606 [NL80211_ATTR_MU_MIMO_GROUP_DATA] = {
607 .len = VHT_MUMIMO_GROUPS_DATA_LEN
608 },
1a28ed21
JB		 609 [NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR] = {
610 .type = NLA_EXACT_LEN_WARN,
611 .len = ETH_ALEN
612 },
ab0d76f6 613 [NL80211_ATTR_NAN_MASTER_PREF] = NLA_POLICY_MIN(NLA_U8, 1),
8585989d 614 [NL80211_ATTR_BANDS] = { .type = NLA_U32 },
a442b761 615 [NL80211_ATTR_NAN_FUNC] = { .type = NLA_NESTED },
348bd456
JM		 616 [NL80211_ATTR_FILS_KEK] = { .type = NLA_BINARY,
617 .len = FILS_MAX_KEK_LEN },
1a28ed21
JB		 618 [NL80211_ATTR_FILS_NONCES] = {
619 .type = NLA_EXACT_LEN_WARN,
620 .len = 2 * FILS_NONCE_LEN
621 },
ce0ce13a 622 [NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED] = { .type = NLA_FLAG, },
1a28ed21 623 [NL80211_ATTR_BSSID] = { .type = NLA_EXACT_LEN_WARN, .len = ETH_ALEN },
bf95ecdb 624 [NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] = { .type = NLA_S8 },
625 [NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST] = {
626 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
627 },
3093ebbe 628 [NL80211_ATTR_TIMEOUT_REASON] = { .type = NLA_U32 },
a3caf744
VK		 629 [NL80211_ATTR_FILS_ERP_USERNAME] = { .type = NLA_BINARY,
630 .len = FILS_ERP_MAX_USERNAME_LEN },
631 [NL80211_ATTR_FILS_ERP_REALM] = { .type = NLA_BINARY,
632 .len = FILS_ERP_MAX_REALM_LEN },
633 [NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] = { .type = NLA_U16 },
634 [NL80211_ATTR_FILS_ERP_RRK] = { .type = NLA_BINARY,
635 .len = FILS_ERP_MAX_RRK_LEN },
1a28ed21 636 [NL80211_ATTR_FILS_CACHE_ID] = { .type = NLA_EXACT_LEN_WARN, .len = 2 },
a3caf744 637 [NL80211_ATTR_PMK] = { .type = NLA_BINARY, .len = PMK_MAX_LEN },
ca986ad9 638 [NL80211_ATTR_SCHED_SCAN_MULTI] = { .type = NLA_FLAG },
40cbfa90 639 [NL80211_ATTR_EXTERNAL_AUTH_SUPPORT] = { .type = NLA_FLAG },
52539ca8
THJ		 640
641 [NL80211_ATTR_TXQ_LIMIT] = { .type = NLA_U32 },
642 [NL80211_ATTR_TXQ_MEMORY_LIMIT] = { .type = NLA_U32 },
643 [NL80211_ATTR_TXQ_QUANTUM] = { .type = NLA_U32 },
c4cbaf79
LC		 644 [NL80211_ATTR_HE_CAPABILITY] = { .type = NLA_BINARY,
645 .len = NL80211_HE_MAX_CAPABILITY_LEN },
81e54d08
PKC		 646
647 [NL80211_ATTR_FTM_RESPONDER] = {
648 .type = NLA_NESTED,
649 .validation_data = nl80211_ftm_responder_policy,
650 },
9bb7e0f2
JB		 651 [NL80211_ATTR_TIMEOUT] = NLA_POLICY_MIN(NLA_U32, 1),
652 [NL80211_ATTR_PEER_MEASUREMENTS] =
23323289 653 NLA_POLICY_NESTED(nl80211_pmsr_attr_policy),
36647055 654 [NL80211_ATTR_AIRTIME_WEIGHT] = NLA_POLICY_MIN(NLA_U16, 1),
26f7044e
CHH		 655 [NL80211_ATTR_SAE_PASSWORD] = { .type = NLA_BINARY,
656 .len = SAE_PASSWORD_MAX_LEN },
a0de1ca3 657 [NL80211_ATTR_TWT_RESPONDER] = { .type = NLA_FLAG },
796e90f4 658 [NL80211_ATTR_HE_OBSS_PD] = NLA_POLICY_NESTED(he_obss_pd_policy),
14f34e36 659 [NL80211_ATTR_VLAN_ID] = NLA_POLICY_RANGE(NLA_U16, 1, VLAN_N_VID - 2),
5c5e52d1 660 [NL80211_ATTR_HE_BSS_COLOR] = NLA_POLICY_NESTED(he_bss_color_policy),
77f576de
T		 661 [NL80211_ATTR_TID_CONFIG] =
662 NLA_POLICY_NESTED_ARRAY(nl80211_tid_config_attr_policy),
5631d96a 663 [NL80211_ATTR_CONTROL_PORT_NO_PREAUTH] = { .type = NLA_FLAG },
7fc82af8
VJ		 664 [NL80211_ATTR_PMK_LIFETIME] = NLA_POLICY_MIN(NLA_U32, 1),
665 [NL80211_ATTR_PMK_REAUTH_THRESHOLD] = NLA_POLICY_RANGE(NLA_U8, 1, 100),
55682965
JB		 666};
667
e31b8213 668/* policy for the key attributes */
b54452b0 669static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 670 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 671 [NL80211_KEY_IDX] = { .type = NLA_U8 },
672 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 673 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 674 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
675 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
ab0d76f6 676 [NL80211_KEY_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES - 1),
dbd2fd65 677 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
6cdd3979 678 [NL80211_KEY_MODE] = NLA_POLICY_RANGE(NLA_U8, 0, NL80211_KEY_SET_TX),
dbd2fd65
JB		 679};
680
681/* policy for the key default flags */
682static const struct nla_policy
683nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
684 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
685 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 686};
687
f83ace3b 688#ifdef CONFIG_PM
ff1b6e69
JB		 689/* policy for WoWLAN attributes */
690static const struct nla_policy
691nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
692 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
693 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
694 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
695 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 696 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
697 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
698 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
699 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
2a0e047e 700 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
8cd4d456 701 [NL80211_WOWLAN_TRIG_NET_DETECT] = { .type = NLA_NESTED },
2a0e047e
JB		 702};
703
704static const struct nla_policy
705nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
706 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
707 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
1a28ed21
JB		 708 [NL80211_WOWLAN_TCP_DST_MAC] = {
709 .type = NLA_EXACT_LEN_WARN,
710 .len = ETH_ALEN
711 },
2a0e047e
JB		 712 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
713 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
1a28ed21 714 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = { .type = NLA_MIN_LEN, .len = 1 },
2a0e047e
JB		 715 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
716 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
717 },
718 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
719 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
720 },
721 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
1a28ed21
JB		 722 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = { .type = NLA_MIN_LEN, .len = 1 },
723 [NL80211_WOWLAN_TCP_WAKE_MASK] = { .type = NLA_MIN_LEN, .len = 1 },
ff1b6e69 724};
f83ace3b 725#endif /* CONFIG_PM */
ff1b6e69 726
be29b99a
AK		 727/* policy for coalesce rule attributes */
728static const struct nla_policy
729nl80211_coalesce_policy[NUM_NL80211_ATTR_COALESCE_RULE] = {
730 [NL80211_ATTR_COALESCE_RULE_DELAY] = { .type = NLA_U32 },
ab0d76f6
JB		 731 [NL80211_ATTR_COALESCE_RULE_CONDITION] =
732 NLA_POLICY_RANGE(NLA_U32,
733 NL80211_COALESCE_CONDITION_MATCH,
734 NL80211_COALESCE_CONDITION_NO_MATCH),
be29b99a
AK		 735 [NL80211_ATTR_COALESCE_RULE_PKT_PATTERN] = { .type = NLA_NESTED },
736};
737
e5497d76
JB		 738/* policy for GTK rekey offload attributes */
739static const struct nla_policy
740nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
180aa422
JB		 741 [NL80211_REKEY_DATA_KEK] = {
742 .type = NLA_EXACT_LEN_WARN,
743 .len = NL80211_KEK_LEN,
744 },
745 [NL80211_REKEY_DATA_KCK] = {
746 .type = NLA_EXACT_LEN_WARN,
747 .len = NL80211_KCK_LEN,
748 },
1a28ed21
JB		 749 [NL80211_REKEY_DATA_REPLAY_CTR] = {
750 .type = NLA_EXACT_LEN_WARN,
751 .len = NL80211_REPLAY_CTR_LEN
752 },
e5497d76
JB		 753};
754
1e1b11b6 755static const struct nla_policy
756nl80211_match_band_rssi_policy[NUM_NL80211_BANDS] = {
757 [NL80211_BAND_2GHZ] = { .type = NLA_S32 },
758 [NL80211_BAND_5GHZ] = { .type = NLA_S32 },
e548a1c3 759 [NL80211_BAND_6GHZ] = { .type = NLA_S32 },
1e1b11b6 760 [NL80211_BAND_60GHZ] = { .type = NLA_S32 },
761};
762
a1f1c21c
LC		 763static const struct nla_policy
764nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 765 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 766 .len = IEEE80211_MAX_SSID_LEN },
1a28ed21
JB		 767 [NL80211_SCHED_SCAN_MATCH_ATTR_BSSID] = {
768 .type = NLA_EXACT_LEN_WARN,
769 .len = ETH_ALEN
770 },
88e920b4 771 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
1e1b11b6 772 [NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI] =
773 NLA_POLICY_NESTED(nl80211_match_band_rssi_policy),
a1f1c21c
LC		 774};
775
3b06d277
AS		 776static const struct nla_policy
777nl80211_plan_policy[NL80211_SCHED_SCAN_PLAN_MAX + 1] = {
778 [NL80211_SCHED_SCAN_PLAN_INTERVAL] = { .type = NLA_U32 },
779 [NL80211_SCHED_SCAN_PLAN_ITERATIONS] = { .type = NLA_U32 },
780};
781
38de03d2
AS		 782static const struct nla_policy
783nl80211_bss_select_policy[NL80211_BSS_SELECT_ATTR_MAX + 1] = {
784 [NL80211_BSS_SELECT_ATTR_RSSI] = { .type = NLA_FLAG },
785 [NL80211_BSS_SELECT_ATTR_BAND_PREF] = { .type = NLA_U32 },
786 [NL80211_BSS_SELECT_ATTR_RSSI_ADJUST] = {
787 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
788 },
789};
790
a442b761
AB		 791/* policy for NAN function attributes */
792static const struct nla_policy
793nl80211_nan_func_policy[NL80211_NAN_FUNC_ATTR_MAX + 1] = {
794 [NL80211_NAN_FUNC_TYPE] = { .type = NLA_U8 },
0a27844c 795 [NL80211_NAN_FUNC_SERVICE_ID] = {
a442b761
AB		 796 .len = NL80211_NAN_FUNC_SERVICE_ID_LEN },
797 [NL80211_NAN_FUNC_PUBLISH_TYPE] = { .type = NLA_U8 },
798 [NL80211_NAN_FUNC_PUBLISH_BCAST] = { .type = NLA_FLAG },
799 [NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE] = { .type = NLA_FLAG },
800 [NL80211_NAN_FUNC_FOLLOW_UP_ID] = { .type = NLA_U8 },
801 [NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] = { .type = NLA_U8 },
1a28ed21
JB		 802 [NL80211_NAN_FUNC_FOLLOW_UP_DEST] = {
803 .type = NLA_EXACT_LEN_WARN,
804 .len = ETH_ALEN
805 },
a442b761
AB		 806 [NL80211_NAN_FUNC_CLOSE_RANGE] = { .type = NLA_FLAG },
807 [NL80211_NAN_FUNC_TTL] = { .type = NLA_U32 },
808 [NL80211_NAN_FUNC_SERVICE_INFO] = { .type = NLA_BINARY,
809 .len = NL80211_NAN_FUNC_SERVICE_SPEC_INFO_MAX_LEN },
810 [NL80211_NAN_FUNC_SRF] = { .type = NLA_NESTED },
811 [NL80211_NAN_FUNC_RX_MATCH_FILTER] = { .type = NLA_NESTED },
812 [NL80211_NAN_FUNC_TX_MATCH_FILTER] = { .type = NLA_NESTED },
813 [NL80211_NAN_FUNC_INSTANCE_ID] = { .type = NLA_U8 },
814 [NL80211_NAN_FUNC_TERM_REASON] = { .type = NLA_U8 },
815};
816
817/* policy for Service Response Filter attributes */
818static const struct nla_policy
819nl80211_nan_srf_policy[NL80211_NAN_SRF_ATTR_MAX + 1] = {
820 [NL80211_NAN_SRF_INCLUDE] = { .type = NLA_FLAG },
821 [NL80211_NAN_SRF_BF] = { .type = NLA_BINARY,
822 .len = NL80211_NAN_FUNC_SRF_MAX_LEN },
823 [NL80211_NAN_SRF_BF_IDX] = { .type = NLA_U8 },
824 [NL80211_NAN_SRF_MAC_ADDRS] = { .type = NLA_NESTED },
825};
826
ad670233
PX		 827/* policy for packet pattern attributes */
828static const struct nla_policy
829nl80211_packet_pattern_policy[MAX_NL80211_PKTPAT + 1] = {
830 [NL80211_PKTPAT_MASK] = { .type = NLA_BINARY, },
831 [NL80211_PKTPAT_PATTERN] = { .type = NLA_BINARY, },
832 [NL80211_PKTPAT_OFFSET] = { .type = NLA_U32 },
833};
834
9bb7e0f2
JB		 835int nl80211_prepare_wdev_dump(struct netlink_callback *cb,
836 struct cfg80211_registered_device **rdev,
837 struct wireless_dev **wdev)
a043897a 838{
97990a06 839 int err;
a043897a 840
97990a06 841 if (!cb->args[0]) {
50508d94
JB		 842 struct nlattr **attrbuf;
843
844 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
845 GFP_KERNEL);
846 if (!attrbuf)
847 return -ENOMEM;
848
8cb08174
JB		 849 err = nlmsg_parse_deprecated(cb->nlh,
850 GENL_HDRLEN + nl80211_fam.hdrsize,
50508d94 851 attrbuf, nl80211_fam.maxattr,
8cb08174 852 nl80211_policy, NULL);
50508d94
JB		 853 if (err) {
854 kfree(attrbuf);
ea90e0dc 855 return err;
50508d94 856 }
67748893 857
50508d94
JB		 858 *wdev = __cfg80211_wdev_from_attrs(sock_net(cb->skb->sk),
859 attrbuf);
860 kfree(attrbuf);
ea90e0dc
JB		 861 if (IS_ERR(*wdev))
862 return PTR_ERR(*wdev);
f26cbf40 863 *rdev = wiphy_to_rdev((*wdev)->wiphy);
c319d50b
JB		 864 /* 0 is the first index - add 1 to parse only once */
865 cb->args[0] = (*rdev)->wiphy_idx + 1;
97990a06
JB		 866 cb->args[1] = (*wdev)->identifier;
867 } else {
c319d50b
JB		 868 /* subtract the 1 again here */
869 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
97990a06 870 struct wireless_dev *tmp;
67748893 871
ea90e0dc
JB		 872 if (!wiphy)
873 return -ENODEV;
f26cbf40 874 *rdev = wiphy_to_rdev(wiphy);
97990a06 875 *wdev = NULL;
67748893 876
53873f13 877 list_for_each_entry(tmp, &(*rdev)->wiphy.wdev_list, list) {
97990a06
JB		 878 if (tmp->identifier == cb->args[1]) {
879 *wdev = tmp;
880 break;
881 }
882 }
67748893 883
ea90e0dc
JB		 884 if (!*wdev)
885 return -ENODEV;
67748893
JB		 886 }
887
67748893 888 return 0;
67748893
JB		 889}
890
55682965 891/* message building helper */
9bb7e0f2
JB		 892void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
893 int flags, u8 cmd)
55682965
JB		 894{
895 /* since there is no private header just add the generic one */
15e47304 896 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 897}
898
50f32718
HD		 899static int nl80211_msg_put_wmm_rules(struct sk_buff *msg,
900 const struct ieee80211_reg_rule *rule)
901{
902 int j;
903 struct nlattr *nl_wmm_rules =
ae0be8de 904 nla_nest_start_noflag(msg, NL80211_FREQUENCY_ATTR_WMM);
50f32718
HD		 905
906 if (!nl_wmm_rules)
907 goto nla_put_failure;
908
909 for (j = 0; j < IEEE80211_NUM_ACS; j++) {
ae0be8de 910 struct nlattr *nl_wmm_rule = nla_nest_start_noflag(msg, j);
50f32718
HD		 911
912 if (!nl_wmm_rule)
913 goto nla_put_failure;
914
915 if (nla_put_u16(msg, NL80211_WMMR_CW_MIN,
38cb87ee 916 rule->wmm_rule.client[j].cw_min) ||
50f32718 917 nla_put_u16(msg, NL80211_WMMR_CW_MAX,
38cb87ee 918 rule->wmm_rule.client[j].cw_max) ||
50f32718 919 nla_put_u8(msg, NL80211_WMMR_AIFSN,
38cb87ee 920 rule->wmm_rule.client[j].aifsn) ||
d3c89bbc
HD		 921 nla_put_u16(msg, NL80211_WMMR_TXOP,
922 rule->wmm_rule.client[j].cot))
50f32718
HD		 923 goto nla_put_failure;
924
925 nla_nest_end(msg, nl_wmm_rule);
926 }
927 nla_nest_end(msg, nl_wmm_rules);
928
929 return 0;
930
931nla_put_failure:
932 return -ENOBUFS;
933}
934
935static int nl80211_msg_put_channel(struct sk_buff *msg, struct wiphy *wiphy,
cdc89b97
JB		 936 struct ieee80211_channel *chan,
937 bool large)
5dab3b8a 938{
ea077c1c
RL		 939 /* Some channels must be completely excluded from the
940 * list to protect old user-space tools from breaking
941 */
942 if (!large && chan->flags &
943 (IEEE80211_CHAN_NO_10MHZ | IEEE80211_CHAN_NO_20MHZ))
944 return 0;
945
9360ffd1
DM		 946 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
947 chan->center_freq))
948 goto nla_put_failure;
5dab3b8a 949
9360ffd1
DM		 950 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
951 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
952 goto nla_put_failure;
8fe02e16
LR		 953 if (chan->flags & IEEE80211_CHAN_NO_IR) {
954 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IR))
955 goto nla_put_failure;
956 if (nla_put_flag(msg, __NL80211_FREQUENCY_ATTR_NO_IBSS))
957 goto nla_put_failure;
958 }
cdc89b97
JB		 959 if (chan->flags & IEEE80211_CHAN_RADAR) {
960 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
961 goto nla_put_failure;
962 if (large) {
963 u32 time;
964
965 time = elapsed_jiffies_msecs(chan->dfs_state_entered);
966
967 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
968 chan->dfs_state))
969 goto nla_put_failure;
970 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
971 time))
972 goto nla_put_failure;
089027e5
JD		 973 if (nla_put_u32(msg,
974 NL80211_FREQUENCY_ATTR_DFS_CAC_TIME,
975 chan->dfs_cac_ms))
976 goto nla_put_failure;
cdc89b97
JB		 977 }
978 }
5dab3b8a 979
fe1abafd
JB		 980 if (large) {
981 if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
982 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
983 goto nla_put_failure;
984 if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
985 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
986 goto nla_put_failure;
987 if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
988 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
989 goto nla_put_failure;
990 if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
991 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
992 goto nla_put_failure;
570dbde1
DS		 993 if ((chan->flags & IEEE80211_CHAN_INDOOR_ONLY) &&
994 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_INDOOR_ONLY))
995 goto nla_put_failure;
06f207fc
AN		 996 if ((chan->flags & IEEE80211_CHAN_IR_CONCURRENT) &&
997 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_IR_CONCURRENT))
570dbde1 998 goto nla_put_failure;
ea077c1c
RL		 999 if ((chan->flags & IEEE80211_CHAN_NO_20MHZ) &&
1000 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_20MHZ))
1001 goto nla_put_failure;
1002 if ((chan->flags & IEEE80211_CHAN_NO_10MHZ) &&
1003 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_10MHZ))
1004 goto nla_put_failure;
1e61d82c
HD		 1005 if ((chan->flags & IEEE80211_CHAN_NO_HE) &&
1006 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HE))
1007 goto nla_put_failure;
fe1abafd
JB		 1008 }
1009
9360ffd1
DM		 1010 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
1011 DBM_TO_MBM(chan->max_power)))
1012 goto nla_put_failure;
5dab3b8a 1013
50f32718
HD		 1014 if (large) {
1015 const struct ieee80211_reg_rule *rule =
b88d26d9 1016 freq_reg_info(wiphy, MHZ_TO_KHZ(chan->center_freq));
50f32718 1017
38cb87ee 1018 if (!IS_ERR_OR_NULL(rule) && rule->has_wmm) {
50f32718
HD		 1019 if (nl80211_msg_put_wmm_rules(msg, rule))
1020 goto nla_put_failure;
1021 }
1022 }
1023
5dab3b8a
LR		 1024 return 0;
1025
1026 nla_put_failure:
1027 return -ENOBUFS;
1028}
1029
52539ca8
THJ		 1030static bool nl80211_put_txq_stats(struct sk_buff *msg,
1031 struct cfg80211_txq_stats *txqstats,
1032 int attrtype)
1033{
1034 struct nlattr *txqattr;
1035
1036#define PUT_TXQVAL_U32(attr, memb) do { \
1037 if (txqstats->filled & BIT(NL80211_TXQ_STATS_ ## attr) && \
1038 nla_put_u32(msg, NL80211_TXQ_STATS_ ## attr, txqstats->memb)) \
1039 return false; \
1040 } while (0)
1041
ae0be8de 1042 txqattr = nla_nest_start_noflag(msg, attrtype);
52539ca8
THJ		 1043 if (!txqattr)
1044 return false;
1045
1046 PUT_TXQVAL_U32(BACKLOG_BYTES, backlog_bytes);
1047 PUT_TXQVAL_U32(BACKLOG_PACKETS, backlog_packets);
1048 PUT_TXQVAL_U32(FLOWS, flows);
1049 PUT_TXQVAL_U32(DROPS, drops);
1050 PUT_TXQVAL_U32(ECN_MARKS, ecn_marks);
1051 PUT_TXQVAL_U32(OVERLIMIT, overlimit);
1052 PUT_TXQVAL_U32(OVERMEMORY, overmemory);
1053 PUT_TXQVAL_U32(COLLISIONS, collisions);
1054 PUT_TXQVAL_U32(TX_BYTES, tx_bytes);
1055 PUT_TXQVAL_U32(TX_PACKETS, tx_packets);
1056 PUT_TXQVAL_U32(MAX_FLOWS, max_flows);
1057 nla_nest_end(msg, txqattr);
1058
1059#undef PUT_TXQVAL_U32
1060 return true;
1061}
1062
55682965
JB		 1063/* netlink command implementations */
1064
b9454e83
JB		 1065struct key_parse {
1066 struct key_params p;
1067 int idx;
e31b8213 1068 int type;
56be393f 1069 bool def, defmgmt, defbeacon;
dbd2fd65 1070 bool def_uni, def_multi;
b9454e83
JB		 1071};
1072
768075eb
JB		 1073static int nl80211_parse_key_new(struct genl_info *info, struct nlattr *key,
1074 struct key_parse *k)
b9454e83
JB		 1075{
1076 struct nlattr *tb[NL80211_KEY_MAX + 1];
8cb08174
JB		 1077 int err = nla_parse_nested_deprecated(tb, NL80211_KEY_MAX, key,
1078 nl80211_key_policy,
1079 info->extack);
b9454e83
JB		 1080 if (err)
1081 return err;
1082
1083 k->def = !!tb[NL80211_KEY_DEFAULT];
1084 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
56be393f 1085 k->defbeacon = !!tb[NL80211_KEY_DEFAULT_BEACON];
b9454e83 1086
dbd2fd65
JB		 1087 if (k->def) {
1088 k->def_uni = true;
1089 k->def_multi = true;
1090 }
56be393f 1091 if (k->defmgmt || k->defbeacon)
dbd2fd65
JB		 1092 k->def_multi = true;
1093
b9454e83
JB		 1094 if (tb[NL80211_KEY_IDX])
1095 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
1096
1097 if (tb[NL80211_KEY_DATA]) {
1098 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
1099 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
1100 }
1101
1102 if (tb[NL80211_KEY_SEQ]) {
1103 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
1104 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
1105 }
1106
1107 if (tb[NL80211_KEY_CIPHER])
1108 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
1109
ab0d76f6 1110 if (tb[NL80211_KEY_TYPE])
e31b8213 1111 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
e31b8213 1112
dbd2fd65
JB		 1113 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
1114 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
7a087e74 1115
8cb08174
JB		 1116 err = nla_parse_nested_deprecated(kdt,
1117 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1118 tb[NL80211_KEY_DEFAULT_TYPES],
1119 nl80211_key_default_policy,
1120 info->extack);
dbd2fd65
JB		 1121 if (err)
1122 return err;
1123
1124 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1125 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1126 }
1127
6cdd3979
AW		 1128 if (tb[NL80211_KEY_MODE])
1129 k->p.mode = nla_get_u8(tb[NL80211_KEY_MODE]);
1130
b9454e83
JB		 1131 return 0;
1132}
1133
1134static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
1135{
1136 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
1137 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
1138 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
1139 }
1140
1141 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
1142 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
1143 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
1144 }
1145
1146 if (info->attrs[NL80211_ATTR_KEY_IDX])
1147 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1148
1149 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
1150 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
1151
1152 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
1153 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
1154
dbd2fd65
JB		 1155 if (k->def) {
1156 k->def_uni = true;
1157 k->def_multi = true;
1158 }
1159 if (k->defmgmt)
1160 k->def_multi = true;
1161
ab0d76f6 1162 if (info->attrs[NL80211_ATTR_KEY_TYPE])
e31b8213 1163 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
e31b8213 1164
dbd2fd65
JB		 1165 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
1166 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
8cb08174
JB		 1167 int err = nla_parse_nested_deprecated(kdt,
1168 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1169 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
1170 nl80211_key_default_policy,
1171 info->extack);
dbd2fd65
JB		 1172 if (err)
1173 return err;
1174
1175 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1176 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1177 }
1178
b9454e83
JB		 1179 return 0;
1180}
1181
1182static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
1183{
1184 int err;
1185
1186 memset(k, 0, sizeof(*k));
1187 k->idx = -1;
e31b8213 1188 k->type = -1;
b9454e83
JB		 1189
1190 if (info->attrs[NL80211_ATTR_KEY])
768075eb 1191 err = nl80211_parse_key_new(info, info->attrs[NL80211_ATTR_KEY], k);
b9454e83
JB		 1192 else
1193 err = nl80211_parse_key_old(info, k);
1194
1195 if (err)
1196 return err;
1197
56be393f
JM		 1198 if ((k->def ? 1 : 0) + (k->defmgmt ? 1 : 0) +
1199 (k->defbeacon ? 1 : 0) > 1) {
1200 GENL_SET_ERR_MSG(info,
1201 "key with multiple default flags is invalid");
b9454e83 1202 return -EINVAL;
768075eb 1203 }
b9454e83 1204
56be393f 1205 if (k->defmgmt || k->defbeacon) {
768075eb 1206 if (k->def_uni || !k->def_multi) {
56be393f
JM		 1207 GENL_SET_ERR_MSG(info,
1208 "defmgmt/defbeacon key must be mcast");
dbd2fd65 1209 return -EINVAL;
768075eb 1210 }
dbd2fd65
JB		 1211 }
1212
b9454e83
JB		 1213 if (k->idx != -1) {
1214 if (k->defmgmt) {
768075eb
JB		 1215 if (k->idx < 4 || k->idx > 5) {
1216 GENL_SET_ERR_MSG(info,
1217 "defmgmt key idx not 4 or 5");
b9454e83 1218 return -EINVAL;
768075eb 1219 }
56be393f
JM		 1220 } else if (k->defbeacon) {
1221 if (k->idx < 6 || k->idx > 7) {
1222 GENL_SET_ERR_MSG(info,
1223 "defbeacon key idx not 6 or 7");
1224 return -EINVAL;
1225 }
b9454e83 1226 } else if (k->def) {
768075eb
JB		 1227 if (k->idx < 0 || k->idx > 3) {
1228 GENL_SET_ERR_MSG(info, "def key idx not 0-3");
b9454e83 1229 return -EINVAL;
768075eb 1230 }
b9454e83 1231 } else {
56be393f
JM		 1232 if (k->idx < 0 || k->idx > 7) {
1233 GENL_SET_ERR_MSG(info, "key idx not 0-7");
b9454e83 1234 return -EINVAL;
768075eb 1235 }
b9454e83
JB		 1236 }
1237 }
1238
1239 return 0;
1240}
1241
fffd0934
JB		 1242static struct cfg80211_cached_keys *
1243nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
768075eb 1244 struct genl_info *info, bool *no_ht)
fffd0934 1245{
768075eb 1246 struct nlattr *keys = info->attrs[NL80211_ATTR_KEYS];
fffd0934
JB		 1247 struct key_parse parse;
1248 struct nlattr *key;
1249 struct cfg80211_cached_keys *result;
1250 int rem, err, def = 0;
f1c1f17a
JB		 1251 bool have_key = false;
1252
1253 nla_for_each_nested(key, keys, rem) {
1254 have_key = true;
1255 break;
1256 }
1257
1258 if (!have_key)
1259 return NULL;
fffd0934
JB		 1260
1261 result = kzalloc(sizeof(*result), GFP_KERNEL);
1262 if (!result)
1263 return ERR_PTR(-ENOMEM);
1264
1265 result->def = -1;
fffd0934
JB		 1266
1267 nla_for_each_nested(key, keys, rem) {
1268 memset(&parse, 0, sizeof(parse));
1269 parse.idx = -1;
1270
768075eb 1271 err = nl80211_parse_key_new(info, key, &parse);
fffd0934
JB		 1272 if (err)
1273 goto error;
1274 err = -EINVAL;
1275 if (!parse.p.key)
1276 goto error;
768075eb
JB		 1277 if (parse.idx < 0 || parse.idx > 3) {
1278 GENL_SET_ERR_MSG(info, "key index out of range [0-3]");
fffd0934 1279 goto error;
768075eb 1280 }
fffd0934 1281 if (parse.def) {
768075eb
JB		 1282 if (def) {
1283 GENL_SET_ERR_MSG(info,
1284 "only one key can be default");
fffd0934 1285 goto error;
768075eb 1286 }
fffd0934
JB		 1287 def = 1;
1288 result->def = parse.idx;
dbd2fd65
JB		 1289 if (!parse.def_uni || !parse.def_multi)
1290 goto error;
fffd0934
JB		 1291 } else if (parse.defmgmt)
1292 goto error;
1293 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 1294 parse.idx, false, NULL);
fffd0934
JB		 1295 if (err)
1296 goto error;
386b1f27
JB		 1297 if (parse.p.cipher != WLAN_CIPHER_SUITE_WEP40 &&
1298 parse.p.cipher != WLAN_CIPHER_SUITE_WEP104) {
768075eb 1299 GENL_SET_ERR_MSG(info, "connect key must be WEP");
386b1f27
JB		 1300 err = -EINVAL;
1301 goto error;
1302 }
fffd0934
JB		 1303 result->params[parse.idx].cipher = parse.p.cipher;
1304 result->params[parse.idx].key_len = parse.p.key_len;
1305 result->params[parse.idx].key = result->data[parse.idx];
1306 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee 1307
386b1f27
JB		 1308 /* must be WEP key if we got here */
1309 if (no_ht)
1310 *no_ht = true;
fffd0934
JB		 1311 }
1312
f1c1f17a
JB		 1313 if (result->def < 0) {
1314 err = -EINVAL;
768075eb 1315 GENL_SET_ERR_MSG(info, "need a default/TX key");
f1c1f17a
JB		 1316 goto error;
1317 }
1318
fffd0934
JB		 1319 return result;
1320 error:
1321 kfree(result);
1322 return ERR_PTR(err);
1323}
1324
1325static int nl80211_key_allowed(struct wireless_dev *wdev)
1326{
1327 ASSERT_WDEV_LOCK(wdev);
1328
fffd0934
JB		 1329 switch (wdev->iftype) {
1330 case NL80211_IFTYPE_AP:
1331 case NL80211_IFTYPE_AP_VLAN:
074ac8df 1332 case NL80211_IFTYPE_P2P_GO:
ff973af7 1333 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 1334 break;
1335 case NL80211_IFTYPE_ADHOC:
fffd0934 1336 case NL80211_IFTYPE_STATION:
074ac8df 1337 case NL80211_IFTYPE_P2P_CLIENT:
ceca7b71 1338 if (!wdev->current_bss)
fffd0934
JB		 1339 return -ENOLINK;
1340 break;
de4fcbad 1341 case NL80211_IFTYPE_UNSPECIFIED:
6e0bd6c3 1342 case NL80211_IFTYPE_OCB:
de4fcbad 1343 case NL80211_IFTYPE_MONITOR:
cb3b7d87 1344 case NL80211_IFTYPE_NAN:
de4fcbad
JB		 1345 case NL80211_IFTYPE_P2P_DEVICE:
1346 case NL80211_IFTYPE_WDS:
1347 case NUM_NL80211_IFTYPES:
fffd0934
JB		 1348 return -EINVAL;
1349 }
1350
1351 return 0;
1352}
1353
664834de
JM		 1354static struct ieee80211_channel *nl80211_get_valid_chan(struct wiphy *wiphy,
1355 struct nlattr *tb)
1356{
1357 struct ieee80211_channel *chan;
1358
1359 if (tb == NULL)
1360 return NULL;
1361 chan = ieee80211_get_channel(wiphy, nla_get_u32(tb));
1362 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
1363 return NULL;
1364 return chan;
1365}
1366
7527a782
JB		 1367static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
1368{
ae0be8de 1369 struct nlattr *nl_modes = nla_nest_start_noflag(msg, attr);
7527a782
JB		 1370 int i;
1371
1372 if (!nl_modes)
1373 goto nla_put_failure;
1374
1375 i = 0;
1376 while (ifmodes) {
9360ffd1
DM		 1377 if ((ifmodes & 1) && nla_put_flag(msg, i))
1378 goto nla_put_failure;
7527a782
JB		 1379 ifmodes >>= 1;
1380 i++;
1381 }
1382
1383 nla_nest_end(msg, nl_modes);
1384 return 0;
1385
1386nla_put_failure:
1387 return -ENOBUFS;
1388}
1389
1390static int nl80211_put_iface_combinations(struct wiphy *wiphy,
cdc89b97
JB		 1391 struct sk_buff *msg,
1392 bool large)
7527a782
JB		 1393{
1394 struct nlattr *nl_combis;
1395 int i, j;
1396
ae0be8de
MK		 1397 nl_combis = nla_nest_start_noflag(msg,
1398 NL80211_ATTR_INTERFACE_COMBINATIONS);
7527a782
JB		 1399 if (!nl_combis)
1400 goto nla_put_failure;
1401
1402 for (i = 0; i < wiphy->n_iface_combinations; i++) {
1403 const struct ieee80211_iface_combination *c;
1404 struct nlattr *nl_combi, *nl_limits;
1405
1406 c = &wiphy->iface_combinations[i];
1407
ae0be8de 1408 nl_combi = nla_nest_start_noflag(msg, i + 1);
7527a782
JB		 1409 if (!nl_combi)
1410 goto nla_put_failure;
1411
ae0be8de
MK		 1412 nl_limits = nla_nest_start_noflag(msg,
1413 NL80211_IFACE_COMB_LIMITS);
7527a782
JB		 1414 if (!nl_limits)
1415 goto nla_put_failure;
1416
1417 for (j = 0; j < c->n_limits; j++) {
1418 struct nlattr *nl_limit;
1419
ae0be8de 1420 nl_limit = nla_nest_start_noflag(msg, j + 1);
7527a782
JB		 1421 if (!nl_limit)
1422 goto nla_put_failure;
9360ffd1
DM		 1423 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
1424 c->limits[j].max))
1425 goto nla_put_failure;
7527a782
JB		 1426 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
1427 c->limits[j].types))
1428 goto nla_put_failure;
1429 nla_nest_end(msg, nl_limit);
1430 }
1431
1432 nla_nest_end(msg, nl_limits);
1433
9360ffd1
DM		 1434 if (c->beacon_int_infra_match &&
1435 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
1436 goto nla_put_failure;
1437 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
1438 c->num_different_channels) ||
1439 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
1440 c->max_interfaces))
1441 goto nla_put_failure;
cdc89b97 1442 if (large &&
8c48b50a
FF		 1443 (nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
1444 c->radar_detect_widths) ||
1445 nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_REGIONS,
1446 c->radar_detect_regions)))
cdc89b97 1447 goto nla_put_failure;
0c317a02
PK		 1448 if (c->beacon_int_min_gcd &&
1449 nla_put_u32(msg, NL80211_IFACE_COMB_BI_MIN_GCD,
1450 c->beacon_int_min_gcd))
1451 goto nla_put_failure;
7527a782
JB		 1452
1453 nla_nest_end(msg, nl_combi);
1454 }
1455
1456 nla_nest_end(msg, nl_combis);
1457
1458 return 0;
1459nla_put_failure:
1460 return -ENOBUFS;
1461}
1462
3713b4e3 1463#ifdef CONFIG_PM
b56cf720
JB		 1464static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
1465 struct sk_buff *msg)
1466{
964dc9e2 1467 const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan->tcp;
b56cf720
JB		 1468 struct nlattr *nl_tcp;
1469
1470 if (!tcp)
1471 return 0;
1472
ae0be8de
MK		 1473 nl_tcp = nla_nest_start_noflag(msg,
1474 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
b56cf720
JB		 1475 if (!nl_tcp)
1476 return -ENOBUFS;
1477
1478 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1479 tcp->data_payload_max))
1480 return -ENOBUFS;
1481
1482 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1483 tcp->data_payload_max))
1484 return -ENOBUFS;
1485
1486 if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
1487 return -ENOBUFS;
1488
1489 if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
1490 sizeof(*tcp->tok), tcp->tok))
1491 return -ENOBUFS;
1492
1493 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
1494 tcp->data_interval_max))
1495 return -ENOBUFS;
1496
1497 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
1498 tcp->wake_payload_max))
1499 return -ENOBUFS;
1500
1501 nla_nest_end(msg, nl_tcp);
1502 return 0;
1503}
1504
3713b4e3 1505static int nl80211_send_wowlan(struct sk_buff *msg,
1b8ec87a 1506 struct cfg80211_registered_device *rdev,
b56cf720 1507 bool large)
55682965 1508{
3713b4e3 1509 struct nlattr *nl_wowlan;
55682965 1510
1b8ec87a 1511 if (!rdev->wiphy.wowlan)
3713b4e3 1512 return 0;
55682965 1513
ae0be8de
MK		 1514 nl_wowlan = nla_nest_start_noflag(msg,
1515 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
3713b4e3
JB		 1516 if (!nl_wowlan)
1517 return -ENOBUFS;
9360ffd1 1518
1b8ec87a 1519 if (((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_ANY) &&
3713b4e3 1520 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1b8ec87a 1521 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_DISCONNECT) &&
3713b4e3 1522 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1b8ec87a 1523 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT) &&
3713b4e3 1524 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1b8ec87a 1525 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
3713b4e3 1526 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1b8ec87a 1527 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
3713b4e3 1528 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1b8ec87a 1529 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
3713b4e3 1530 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1b8ec87a 1531 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
3713b4e3 1532 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1b8ec87a 1533 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
3713b4e3
JB		 1534 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1535 return -ENOBUFS;
9360ffd1 1536
1b8ec87a 1537 if (rdev->wiphy.wowlan->n_patterns) {
50ac6607 1538 struct nl80211_pattern_support pat = {
1b8ec87a
ZG		 1539 .max_patterns = rdev->wiphy.wowlan->n_patterns,
1540 .min_pattern_len = rdev->wiphy.wowlan->pattern_min_len,
1541 .max_pattern_len = rdev->wiphy.wowlan->pattern_max_len,
1542 .max_pkt_offset = rdev->wiphy.wowlan->max_pkt_offset,
3713b4e3 1543 };
9360ffd1 1544
3713b4e3
JB		 1545 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1546 sizeof(pat), &pat))
1547 return -ENOBUFS;
1548 }
9360ffd1 1549
75453ccb
LC		 1550 if ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_NET_DETECT) &&
1551 nla_put_u32(msg, NL80211_WOWLAN_TRIG_NET_DETECT,
1552 rdev->wiphy.wowlan->max_nd_match_sets))
1553 return -ENOBUFS;
1554
1b8ec87a 1555 if (large && nl80211_send_wowlan_tcp_caps(rdev, msg))
b56cf720
JB		 1556 return -ENOBUFS;
1557
3713b4e3 1558 nla_nest_end(msg, nl_wowlan);
9360ffd1 1559
3713b4e3
JB		 1560 return 0;
1561}
1562#endif
9360ffd1 1563
be29b99a 1564static int nl80211_send_coalesce(struct sk_buff *msg,
1b8ec87a 1565 struct cfg80211_registered_device *rdev)
be29b99a
AK		 1566{
1567 struct nl80211_coalesce_rule_support rule;
1568
1b8ec87a 1569 if (!rdev->wiphy.coalesce)
be29b99a
AK		 1570 return 0;
1571
1b8ec87a
ZG		 1572 rule.max_rules = rdev->wiphy.coalesce->n_rules;
1573 rule.max_delay = rdev->wiphy.coalesce->max_delay;
1574 rule.pat.max_patterns = rdev->wiphy.coalesce->n_patterns;
1575 rule.pat.min_pattern_len = rdev->wiphy.coalesce->pattern_min_len;
1576 rule.pat.max_pattern_len = rdev->wiphy.coalesce->pattern_max_len;
1577 rule.pat.max_pkt_offset = rdev->wiphy.coalesce->max_pkt_offset;
be29b99a
AK		 1578
1579 if (nla_put(msg, NL80211_ATTR_COALESCE_RULE, sizeof(rule), &rule))
1580 return -ENOBUFS;
1581
1582 return 0;
1583}
1584
c4cbaf79
LC		 1585static int
1586nl80211_send_iftype_data(struct sk_buff *msg,
1587 const struct ieee80211_sband_iftype_data *iftdata)
1588{
1589 const struct ieee80211_sta_he_cap *he_cap = &iftdata->he_cap;
1590
1591 if (nl80211_put_iftypes(msg, NL80211_BAND_IFTYPE_ATTR_IFTYPES,
1592 iftdata->types_mask))
1593 return -ENOBUFS;
1594
1595 if (he_cap->has_he) {
1596 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MAC,
1597 sizeof(he_cap->he_cap_elem.mac_cap_info),
1598 he_cap->he_cap_elem.mac_cap_info) ||
1599 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PHY,
1600 sizeof(he_cap->he_cap_elem.phy_cap_info),
1601 he_cap->he_cap_elem.phy_cap_info) ||
1602 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET,
1603 sizeof(he_cap->he_mcs_nss_supp),
1604 &he_cap->he_mcs_nss_supp) ||
1605 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PPE,
1606 sizeof(he_cap->ppe_thres), he_cap->ppe_thres))
1607 return -ENOBUFS;
1608 }
1609
1610 return 0;
1611}
1612
3713b4e3
JB		 1613static int nl80211_send_band_rateinfo(struct sk_buff *msg,
1614 struct ieee80211_supported_band *sband)
1615{
1616 struct nlattr *nl_rates, *nl_rate;
1617 struct ieee80211_rate *rate;
1618 int i;
87bbbe22 1619
3713b4e3
JB		 1620 /* add HT info */
1621 if (sband->ht_cap.ht_supported &&
1622 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1623 sizeof(sband->ht_cap.mcs),
1624 &sband->ht_cap.mcs) ||
1625 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1626 sband->ht_cap.cap) ||
1627 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1628 sband->ht_cap.ampdu_factor) ||
1629 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1630 sband->ht_cap.ampdu_density)))
1631 return -ENOBUFS;
afe0cbf8 1632
3713b4e3
JB		 1633 /* add VHT info */
1634 if (sband->vht_cap.vht_supported &&
1635 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1636 sizeof(sband->vht_cap.vht_mcs),
1637 &sband->vht_cap.vht_mcs) ||
1638 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1639 sband->vht_cap.cap)))
1640 return -ENOBUFS;
f59ac048 1641
c4cbaf79
LC		 1642 if (sband->n_iftype_data) {
1643 struct nlattr *nl_iftype_data =
ae0be8de
MK		 1644 nla_nest_start_noflag(msg,
1645 NL80211_BAND_ATTR_IFTYPE_DATA);
c4cbaf79
LC		 1646 int err;
1647
1648 if (!nl_iftype_data)
1649 return -ENOBUFS;
1650
1651 for (i = 0; i < sband->n_iftype_data; i++) {
1652 struct nlattr *iftdata;
1653
ae0be8de 1654 iftdata = nla_nest_start_noflag(msg, i + 1);
c4cbaf79
LC		 1655 if (!iftdata)
1656 return -ENOBUFS;
1657
1658 err = nl80211_send_iftype_data(msg,
1659 &sband->iftype_data[i]);
1660 if (err)
1661 return err;
1662
1663 nla_nest_end(msg, iftdata);
1664 }
1665
1666 nla_nest_end(msg, nl_iftype_data);
1667 }
1668
2a38075c
AAL		 1669 /* add EDMG info */
1670 if (sband->edmg_cap.channels &&
1671 (nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_CHANNELS,
1672 sband->edmg_cap.channels) ||
1673 nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_BW_CONFIG,
1674 sband->edmg_cap.bw_config)))
1675
1676 return -ENOBUFS;
1677
3713b4e3 1678 /* add bitrates */
ae0be8de 1679 nl_rates = nla_nest_start_noflag(msg, NL80211_BAND_ATTR_RATES);
3713b4e3
JB		 1680 if (!nl_rates)
1681 return -ENOBUFS;
ee688b00 1682
3713b4e3 1683 for (i = 0; i < sband->n_bitrates; i++) {
ae0be8de 1684 nl_rate = nla_nest_start_noflag(msg, i);
3713b4e3
JB		 1685 if (!nl_rate)
1686 return -ENOBUFS;
ee688b00 1687
3713b4e3
JB		 1688 rate = &sband->bitrates[i];
1689 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1690 rate->bitrate))
1691 return -ENOBUFS;
1692 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1693 nla_put_flag(msg,
1694 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1695 return -ENOBUFS;
ee688b00 1696
3713b4e3
JB		 1697 nla_nest_end(msg, nl_rate);
1698 }
d51626df 1699
3713b4e3 1700 nla_nest_end(msg, nl_rates);
bf0c111e 1701
3713b4e3
JB		 1702 return 0;
1703}
ee688b00 1704
3713b4e3
JB		 1705static int
1706nl80211_send_mgmt_stypes(struct sk_buff *msg,
1707 const struct ieee80211_txrx_stypes *mgmt_stypes)
1708{
1709 u16 stypes;
1710 struct nlattr *nl_ftypes, *nl_ifs;
1711 enum nl80211_iftype ift;
1712 int i;
ee688b00 1713
3713b4e3
JB		 1714 if (!mgmt_stypes)
1715 return 0;
5dab3b8a 1716
ae0be8de 1717 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_TX_FRAME_TYPES);
3713b4e3
JB		 1718 if (!nl_ifs)
1719 return -ENOBUFS;
e2f367f2 1720
3713b4e3 1721 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1722 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1723 if (!nl_ftypes)
1724 return -ENOBUFS;
1725 i = 0;
1726 stypes = mgmt_stypes[ift].tx;
1727 while (stypes) {
1728 if ((stypes & 1) &&
1729 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1730 (i << 4) | IEEE80211_FTYPE_MGMT))
1731 return -ENOBUFS;
1732 stypes >>= 1;
1733 i++;
ee688b00 1734 }
3713b4e3
JB		 1735 nla_nest_end(msg, nl_ftypes);
1736 }
ee688b00 1737
3713b4e3 1738 nla_nest_end(msg, nl_ifs);
ee688b00 1739
ae0be8de 1740 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_RX_FRAME_TYPES);
3713b4e3
JB		 1741 if (!nl_ifs)
1742 return -ENOBUFS;
ee688b00 1743
3713b4e3 1744 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1745 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1746 if (!nl_ftypes)
1747 return -ENOBUFS;
1748 i = 0;
1749 stypes = mgmt_stypes[ift].rx;
1750 while (stypes) {
1751 if ((stypes & 1) &&
1752 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1753 (i << 4) | IEEE80211_FTYPE_MGMT))
1754 return -ENOBUFS;
1755 stypes >>= 1;
1756 i++;
1757 }
1758 nla_nest_end(msg, nl_ftypes);
1759 }
1760 nla_nest_end(msg, nl_ifs);
ee688b00 1761
3713b4e3
JB		 1762 return 0;
1763}
ee688b00 1764
1794899e
JB		 1765#define CMD(op, n) \
1766 do { \
1767 if (rdev->ops->op) { \
1768 i++; \
1769 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1770 goto nla_put_failure; \
1771 } \
1772 } while (0)
1773
1774static int nl80211_add_commands_unsplit(struct cfg80211_registered_device *rdev,
1775 struct sk_buff *msg)
1776{
1777 int i = 0;
1778
1779 /*
1780 * do *NOT* add anything into this function, new things need to be
1781 * advertised only to new versions of userspace that can deal with
1782 * the split (and they can't possibly care about new features...
1783 */
1784 CMD(add_virtual_intf, NEW_INTERFACE);
1785 CMD(change_virtual_intf, SET_INTERFACE);
1786 CMD(add_key, NEW_KEY);
1787 CMD(start_ap, START_AP);
1788 CMD(add_station, NEW_STATION);
1789 CMD(add_mpath, NEW_MPATH);
1790 CMD(update_mesh_config, SET_MESH_CONFIG);
1791 CMD(change_bss, SET_BSS);
1792 CMD(auth, AUTHENTICATE);
1793 CMD(assoc, ASSOCIATE);
1794 CMD(deauth, DEAUTHENTICATE);
1795 CMD(disassoc, DISASSOCIATE);
1796 CMD(join_ibss, JOIN_IBSS);
1797 CMD(join_mesh, JOIN_MESH);
1798 CMD(set_pmksa, SET_PMKSA);
1799 CMD(del_pmksa, DEL_PMKSA);
1800 CMD(flush_pmksa, FLUSH_PMKSA);
1801 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1802 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
1803 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
1804 CMD(mgmt_tx, FRAME);
1805 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
1806 if (rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
1807 i++;
1808 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
1809 goto nla_put_failure;
1810 }
1811 if (rdev->ops->set_monitor_channel || rdev->ops->start_ap ||
1812 rdev->ops->join_mesh) {
1813 i++;
1814 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1815 goto nla_put_failure;
1816 }
1817 CMD(set_wds_peer, SET_WDS_PEER);
1818 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1819 CMD(tdls_mgmt, TDLS_MGMT);
1820 CMD(tdls_oper, TDLS_OPER);
1821 }
ca986ad9 1822 if (rdev->wiphy.max_sched_scan_reqs)
1794899e
JB		 1823 CMD(sched_scan_start, START_SCHED_SCAN);
1824 CMD(probe_client, PROBE_CLIENT);
1825 CMD(set_noack_map, SET_NOACK_MAP);
1826 if (rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1827 i++;
1828 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1829 goto nla_put_failure;
1830 }
1831 CMD(start_p2p_device, START_P2P_DEVICE);
1832 CMD(set_mcast_rate, SET_MCAST_RATE);
1833#ifdef CONFIG_NL80211_TESTMODE
1834 CMD(testmode_cmd, TESTMODE);
1835#endif
1836
1837 if (rdev->ops->connect || rdev->ops->auth) {
1838 i++;
1839 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
1840 goto nla_put_failure;
1841 }
1842
1843 if (rdev->ops->disconnect || rdev->ops->deauth) {
1844 i++;
1845 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1846 goto nla_put_failure;
1847 }
1848
1849 return i;
1850 nla_put_failure:
1851 return -ENOBUFS;
1852}
1853
9bb7e0f2
JB		 1854static int
1855nl80211_send_pmsr_ftm_capa(const struct cfg80211_pmsr_capabilities *cap,
1856 struct sk_buff *msg)
1857{
1858 struct nlattr *ftm;
1859
1860 if (!cap->ftm.supported)
1861 return 0;
1862
ae0be8de 1863 ftm = nla_nest_start_noflag(msg, NL80211_PMSR_TYPE_FTM);
9bb7e0f2
JB		 1864 if (!ftm)
1865 return -ENOBUFS;
1866
1867 if (cap->ftm.asap && nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_ASAP))
1868 return -ENOBUFS;
1869 if (cap->ftm.non_asap &&
1870 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP))
1871 return -ENOBUFS;
1872 if (cap->ftm.request_lci &&
1873 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI))
1874 return -ENOBUFS;
1875 if (cap->ftm.request_civicloc &&
1876 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC))
1877 return -ENOBUFS;
1878 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES,
1879 cap->ftm.preambles))
1880 return -ENOBUFS;
1881 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS,
1882 cap->ftm.bandwidths))
1883 return -ENOBUFS;
1884 if (cap->ftm.max_bursts_exponent >= 0 &&
1885 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT,
1886 cap->ftm.max_bursts_exponent))
1887 return -ENOBUFS;
1888 if (cap->ftm.max_ftms_per_burst &&
1889 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST,
1890 cap->ftm.max_ftms_per_burst))
1891 return -ENOBUFS;
efb5520d
AS		 1892 if (cap->ftm.trigger_based &&
1893 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED))
1894 return -ENOBUFS;
1895 if (cap->ftm.non_trigger_based &&
1896 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED))
1897 return -ENOBUFS;
9bb7e0f2
JB		 1898
1899 nla_nest_end(msg, ftm);
1900 return 0;
1901}
1902
1903static int nl80211_send_pmsr_capa(struct cfg80211_registered_device *rdev,
1904 struct sk_buff *msg)
1905{
1906 const struct cfg80211_pmsr_capabilities *cap = rdev->wiphy.pmsr_capa;
1907 struct nlattr *pmsr, *caps;
1908
1909 if (!cap)
1910 return 0;
1911
1912 /*
1913 * we don't need to clean up anything here since the caller
1914 * will genlmsg_cancel() if we fail
1915 */
1916
ae0be8de 1917 pmsr = nla_nest_start_noflag(msg, NL80211_ATTR_PEER_MEASUREMENTS);
9bb7e0f2
JB		 1918 if (!pmsr)
1919 return -ENOBUFS;
1920
1921 if (nla_put_u32(msg, NL80211_PMSR_ATTR_MAX_PEERS, cap->max_peers))
1922 return -ENOBUFS;
1923
1924 if (cap->report_ap_tsf &&
1925 nla_put_flag(msg, NL80211_PMSR_ATTR_REPORT_AP_TSF))
1926 return -ENOBUFS;
1927
1928 if (cap->randomize_mac_addr &&
1929 nla_put_flag(msg, NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR))
1930 return -ENOBUFS;
1931
ae0be8de 1932 caps = nla_nest_start_noflag(msg, NL80211_PMSR_ATTR_TYPE_CAPA);
9bb7e0f2
JB		 1933 if (!caps)
1934 return -ENOBUFS;
1935
1936 if (nl80211_send_pmsr_ftm_capa(cap, msg))
1937 return -ENOBUFS;
1938
1939 nla_nest_end(msg, caps);
1940 nla_nest_end(msg, pmsr);
1941
1942 return 0;
1943}
1944
d6039a34
VJ		 1945static int
1946nl80211_put_iftype_akm_suites(struct cfg80211_registered_device *rdev,
1947 struct sk_buff *msg)
1948{
1949 int i;
1950 struct nlattr *nested, *nested_akms;
1951 const struct wiphy_iftype_akm_suites *iftype_akms;
1952
1953 if (!rdev->wiphy.num_iftype_akm_suites ||
1954 !rdev->wiphy.iftype_akm_suites)
1955 return 0;
1956
1957 nested = nla_nest_start(msg, NL80211_ATTR_IFTYPE_AKM_SUITES);
1958 if (!nested)
1959 return -ENOBUFS;
1960
1961 for (i = 0; i < rdev->wiphy.num_iftype_akm_suites; i++) {
1962 nested_akms = nla_nest_start(msg, i + 1);
1963 if (!nested_akms)
1964 return -ENOBUFS;
1965
1966 iftype_akms = &rdev->wiphy.iftype_akm_suites[i];
1967
1968 if (nl80211_put_iftypes(msg, NL80211_IFTYPE_AKM_ATTR_IFTYPES,
1969 iftype_akms->iftypes_mask))
1970 return -ENOBUFS;
1971
1972 if (nla_put(msg, NL80211_IFTYPE_AKM_ATTR_SUITES,
1973 sizeof(u32) * iftype_akms->n_akm_suites,
1974 iftype_akms->akm_suites)) {
1975 return -ENOBUFS;
1976 }
1977 nla_nest_end(msg, nested_akms);
1978 }
1979
1980 nla_nest_end(msg, nested);
1981
1982 return 0;
1983}
1984
3710a8a6
JB		 1985static int
1986nl80211_put_tid_config_support(struct cfg80211_registered_device *rdev,
1987 struct sk_buff *msg)
1988{
1989 struct nlattr *supp;
1990
1991 if (!rdev->wiphy.tid_config_support.vif &&
1992 !rdev->wiphy.tid_config_support.peer)
1993 return 0;
1994
1995 supp = nla_nest_start(msg, NL80211_ATTR_TID_CONFIG);
1996 if (!supp)
1997 return -ENOSPC;
1998
1999 if (rdev->wiphy.tid_config_support.vif &&
2000 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_VIF_SUPP,
2001 rdev->wiphy.tid_config_support.vif,
2002 NL80211_TID_CONFIG_ATTR_PAD))
2003 goto fail;
2004
2005 if (rdev->wiphy.tid_config_support.peer &&
2006 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_PEER_SUPP,
2007 rdev->wiphy.tid_config_support.peer,
2008 NL80211_TID_CONFIG_ATTR_PAD))
2009 goto fail;
2010
6a21d16c
T		 2011 /* for now we just use the same value ... makes more sense */
2012 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_SHORT,
2013 rdev->wiphy.tid_config_support.max_retry))
2014 goto fail;
2015 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_LONG,
2016 rdev->wiphy.tid_config_support.max_retry))
2017 goto fail;
2018
3710a8a6
JB		 2019 nla_nest_end(msg, supp);
2020
2021 return 0;
2022fail:
2023 nla_nest_cancel(msg, supp);
2024 return -ENOBUFS;
2025}
2026
86e8cf98
JB		 2027struct nl80211_dump_wiphy_state {
2028 s64 filter_wiphy;
2029 long start;
019ae3a9 2030 long split_start, band_start, chan_start, capa_start;
86e8cf98
JB		 2031 bool split;
2032};
2033
1b8ec87a 2034static int nl80211_send_wiphy(struct cfg80211_registered_device *rdev,
3bb20556 2035 enum nl80211_commands cmd,
3713b4e3 2036 struct sk_buff *msg, u32 portid, u32 seq,
86e8cf98 2037 int flags, struct nl80211_dump_wiphy_state *state)
3713b4e3
JB		 2038{
2039 void *hdr;
2040 struct nlattr *nl_bands, *nl_band;
2041 struct nlattr *nl_freqs, *nl_freq;
2042 struct nlattr *nl_cmds;
57fbcce3 2043 enum nl80211_band band;
3713b4e3
JB		 2044 struct ieee80211_channel *chan;
2045 int i;
2046 const struct ieee80211_txrx_stypes *mgmt_stypes =
1b8ec87a 2047 rdev->wiphy.mgmt_stypes;
fe1abafd 2048 u32 features;
ee688b00 2049
3bb20556 2050 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
3713b4e3
JB		 2051 if (!hdr)
2052 return -ENOBUFS;
ee688b00 2053
86e8cf98
JB		 2054 if (WARN_ON(!state))
2055 return -EINVAL;
ee688b00 2056
1b8ec87a 2057 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3713b4e3 2058 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
1b8ec87a 2059 wiphy_name(&rdev->wiphy)) ||
3713b4e3
JB		 2060 nla_put_u32(msg, NL80211_ATTR_GENERATION,
2061 cfg80211_rdev_list_generation))
8fdc621d
JB		 2062 goto nla_put_failure;
2063
3bb20556
JB		 2064 if (cmd != NL80211_CMD_NEW_WIPHY)
2065 goto finish;
2066
86e8cf98 2067 switch (state->split_start) {
3713b4e3
JB		 2068 case 0:
2069 if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
1b8ec87a 2070 rdev->wiphy.retry_short) ||
3713b4e3 2071 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
1b8ec87a 2072 rdev->wiphy.retry_long) ||
3713b4e3 2073 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
1b8ec87a 2074 rdev->wiphy.frag_threshold) ||
3713b4e3 2075 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
1b8ec87a 2076 rdev->wiphy.rts_threshold) ||
3713b4e3 2077 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
1b8ec87a 2078 rdev->wiphy.coverage_class) ||
3713b4e3 2079 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
1b8ec87a 2080 rdev->wiphy.max_scan_ssids) ||
3713b4e3 2081 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
1b8ec87a 2082 rdev->wiphy.max_sched_scan_ssids) ||
3713b4e3 2083 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
1b8ec87a 2084 rdev->wiphy.max_scan_ie_len) ||
3713b4e3 2085 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
1b8ec87a 2086 rdev->wiphy.max_sched_scan_ie_len) ||
3713b4e3 2087 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
3b06d277
AS		 2088 rdev->wiphy.max_match_sets) ||
2089 nla_put_u32(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_PLANS,
2090 rdev->wiphy.max_sched_scan_plans) ||
2091 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_INTERVAL,
2092 rdev->wiphy.max_sched_scan_plan_interval) ||
2093 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_ITERATIONS,
2094 rdev->wiphy.max_sched_scan_plan_iterations))
9360ffd1 2095 goto nla_put_failure;
3713b4e3 2096
1b8ec87a 2097 if ((rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
3713b4e3 2098 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
aa430da4 2099 goto nla_put_failure;
1b8ec87a 2100 if ((rdev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
3713b4e3
JB		 2101 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
2102 goto nla_put_failure;
1b8ec87a 2103 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3713b4e3
JB		 2104 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
2105 goto nla_put_failure;
1b8ec87a 2106 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
3713b4e3
JB		 2107 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
2108 goto nla_put_failure;
1b8ec87a 2109 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
3713b4e3
JB		 2110 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
2111 goto nla_put_failure;
1b8ec87a 2112 if ((rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
3713b4e3 2113 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
9360ffd1 2114 goto nla_put_failure;
86e8cf98
JB		 2115 state->split_start++;
2116 if (state->split)
3713b4e3 2117 break;
925b5978 2118 /* fall through */
3713b4e3
JB		 2119 case 1:
2120 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
1b8ec87a
ZG		 2121 sizeof(u32) * rdev->wiphy.n_cipher_suites,
2122 rdev->wiphy.cipher_suites))
3713b4e3 2123 goto nla_put_failure;
4745fc09 2124
3713b4e3 2125 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
1b8ec87a 2126 rdev->wiphy.max_num_pmkids))
3713b4e3 2127 goto nla_put_failure;
b23aa676 2128
1b8ec87a 2129 if ((rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
3713b4e3 2130 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
9360ffd1 2131 goto nla_put_failure;
b23aa676 2132
3713b4e3 2133 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
1b8ec87a 2134 rdev->wiphy.available_antennas_tx) ||
3713b4e3 2135 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
1b8ec87a 2136 rdev->wiphy.available_antennas_rx))
9360ffd1 2137 goto nla_put_failure;
b23aa676 2138
1b8ec87a 2139 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
3713b4e3 2140 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
1b8ec87a 2141 rdev->wiphy.probe_resp_offload))
3713b4e3 2142 goto nla_put_failure;
8fdc621d 2143
1b8ec87a
ZG		 2144 if ((rdev->wiphy.available_antennas_tx ||
2145 rdev->wiphy.available_antennas_rx) &&
2146 rdev->ops->get_antenna) {
3713b4e3
JB		 2147 u32 tx_ant = 0, rx_ant = 0;
2148 int res;
7a087e74 2149
1b8ec87a 2150 res = rdev_get_antenna(rdev, &tx_ant, &rx_ant);
3713b4e3
JB		 2151 if (!res) {
2152 if (nla_put_u32(msg,
2153 NL80211_ATTR_WIPHY_ANTENNA_TX,
2154 tx_ant) ||
2155 nla_put_u32(msg,
2156 NL80211_ATTR_WIPHY_ANTENNA_RX,
2157 rx_ant))
2158 goto nla_put_failure;
2159 }
2160 }
a293911d 2161
86e8cf98
JB		 2162 state->split_start++;
2163 if (state->split)
3713b4e3 2164 break;
925b5978 2165 /* fall through */
3713b4e3
JB		 2166 case 2:
2167 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1b8ec87a 2168 rdev->wiphy.interface_modes))
3713b4e3 2169 goto nla_put_failure;
86e8cf98
JB		 2170 state->split_start++;
2171 if (state->split)
3713b4e3 2172 break;
925b5978 2173 /* fall through */
3713b4e3 2174 case 3:
ae0be8de
MK		 2175 nl_bands = nla_nest_start_noflag(msg,
2176 NL80211_ATTR_WIPHY_BANDS);
3713b4e3
JB		 2177 if (!nl_bands)
2178 goto nla_put_failure;
f7ca38df 2179
86e8cf98 2180 for (band = state->band_start;
57fbcce3 2181 band < NUM_NL80211_BANDS; band++) {
3713b4e3 2182 struct ieee80211_supported_band *sband;
2e161f78 2183
1b8ec87a 2184 sband = rdev->wiphy.bands[band];
2e161f78 2185
3713b4e3
JB		 2186 if (!sband)
2187 continue;
2188
ae0be8de 2189 nl_band = nla_nest_start_noflag(msg, band);
3713b4e3 2190 if (!nl_band)
2e161f78 2191 goto nla_put_failure;
3713b4e3 2192
86e8cf98 2193 switch (state->chan_start) {
3713b4e3
JB		 2194 case 0:
2195 if (nl80211_send_band_rateinfo(msg, sband))
9360ffd1 2196 goto nla_put_failure;
86e8cf98
JB		 2197 state->chan_start++;
2198 if (state->split)
3713b4e3 2199 break;
925b5978 2200 /* fall through */
3713b4e3
JB		 2201 default:
2202 /* add frequencies */
ae0be8de
MK		 2203 nl_freqs = nla_nest_start_noflag(msg,
2204 NL80211_BAND_ATTR_FREQS);
3713b4e3
JB		 2205 if (!nl_freqs)
2206 goto nla_put_failure;
2207
86e8cf98 2208 for (i = state->chan_start - 1;
3713b4e3
JB		 2209 i < sband->n_channels;
2210 i++) {
ae0be8de
MK		 2211 nl_freq = nla_nest_start_noflag(msg,
2212 i);
3713b4e3
JB		 2213 if (!nl_freq)
2214 goto nla_put_failure;
2215
2216 chan = &sband->channels[i];
2217
86e8cf98 2218 if (nl80211_msg_put_channel(
50f32718 2219 msg, &rdev->wiphy, chan,
86e8cf98 2220 state->split))
3713b4e3
JB		 2221 goto nla_put_failure;
2222
2223 nla_nest_end(msg, nl_freq);
86e8cf98 2224 if (state->split)
3713b4e3
JB		 2225 break;
2226 }
2227 if (i < sband->n_channels)
86e8cf98 2228 state->chan_start = i + 2;
3713b4e3 2229 else
86e8cf98 2230 state->chan_start = 0;
3713b4e3
JB		 2231 nla_nest_end(msg, nl_freqs);
2232 }
2233
2234 nla_nest_end(msg, nl_band);
2235
86e8cf98 2236 if (state->split) {
3713b4e3 2237 /* start again here */
86e8cf98 2238 if (state->chan_start)
3713b4e3
JB		 2239 band--;
2240 break;
2e161f78 2241 }
2e161f78 2242 }
3713b4e3 2243 nla_nest_end(msg, nl_bands);
2e161f78 2244
57fbcce3 2245 if (band < NUM_NL80211_BANDS)
86e8cf98 2246 state->band_start = band + 1;
3713b4e3 2247 else
86e8cf98 2248 state->band_start = 0;
74b70a4e 2249
3713b4e3 2250 /* if bands & channels are done, continue outside */
86e8cf98
JB		 2251 if (state->band_start == 0 && state->chan_start == 0)
2252 state->split_start++;
2253 if (state->split)
3713b4e3 2254 break;
925b5978 2255 /* fall through */
3713b4e3 2256 case 4:
ae0be8de
MK		 2257 nl_cmds = nla_nest_start_noflag(msg,
2258 NL80211_ATTR_SUPPORTED_COMMANDS);
3713b4e3 2259 if (!nl_cmds)
2e161f78
JB		 2260 goto nla_put_failure;
2261
1794899e
JB		 2262 i = nl80211_add_commands_unsplit(rdev, msg);
2263 if (i < 0)
2264 goto nla_put_failure;
86e8cf98 2265 if (state->split) {
5de17984
AS		 2266 CMD(crit_proto_start, CRIT_PROTOCOL_START);
2267 CMD(crit_proto_stop, CRIT_PROTOCOL_STOP);
1b8ec87a 2268 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH)
16ef1fe2 2269 CMD(channel_switch, CHANNEL_SWITCH);
02df00eb 2270 CMD(set_qos_map, SET_QOS_MAP);
723e73ac
JB		 2271 if (rdev->wiphy.features &
2272 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION)
960d01ac 2273 CMD(add_tx_ts, ADD_TX_TS);
ce0ce13a 2274 CMD(set_multicast_to_unicast, SET_MULTICAST_TO_UNICAST);
088e8df8 2275 CMD(update_connect_params, UPDATE_CONNECT_PARAMS);
7010998c 2276 CMD(update_ft_ies, UPDATE_FT_IES);
5de17984 2277 }
3713b4e3 2278#undef CMD
ff1b6e69 2279
3713b4e3 2280 nla_nest_end(msg, nl_cmds);
86e8cf98
JB		 2281 state->split_start++;
2282 if (state->split)
3713b4e3 2283 break;
925b5978 2284 /* fall through */
3713b4e3 2285 case 5:
1b8ec87a
ZG		 2286 if (rdev->ops->remain_on_channel &&
2287 (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
3713b4e3
JB		 2288 nla_put_u32(msg,
2289 NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1b8ec87a 2290 rdev->wiphy.max_remain_on_channel_duration))
3713b4e3
JB		 2291 goto nla_put_failure;
2292
1b8ec87a 2293 if ((rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
3713b4e3
JB		 2294 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
2295 goto nla_put_failure;
2296
2297 if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
2298 goto nla_put_failure;
86e8cf98
JB		 2299 state->split_start++;
2300 if (state->split)
3713b4e3 2301 break;
925b5978 2302 /* fall through */
3713b4e3
JB		 2303 case 6:
2304#ifdef CONFIG_PM
1b8ec87a 2305 if (nl80211_send_wowlan(msg, rdev, state->split))
3713b4e3 2306 goto nla_put_failure;
86e8cf98
JB		 2307 state->split_start++;
2308 if (state->split)
3713b4e3
JB		 2309 break;
2310#else
86e8cf98 2311 state->split_start++;
dfb89c56 2312#endif
925b5978 2313 /* fall through */
3713b4e3
JB		 2314 case 7:
2315 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1b8ec87a 2316 rdev->wiphy.software_iftypes))
3713b4e3 2317 goto nla_put_failure;
ff1b6e69 2318
1b8ec87a 2319 if (nl80211_put_iface_combinations(&rdev->wiphy, msg,
86e8cf98 2320 state->split))
3713b4e3 2321 goto nla_put_failure;
7527a782 2322
86e8cf98
JB		 2323 state->split_start++;
2324 if (state->split)
3713b4e3 2325 break;
925b5978 2326 /* fall through */
3713b4e3 2327 case 8:
1b8ec87a 2328 if ((rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
3713b4e3 2329 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1b8ec87a 2330 rdev->wiphy.ap_sme_capa))
3713b4e3 2331 goto nla_put_failure;
7527a782 2332
1b8ec87a 2333 features = rdev->wiphy.features;
fe1abafd
JB		 2334 /*
2335 * We can only add the per-channel limit information if the
2336 * dump is split, otherwise it makes it too big. Therefore
2337 * only advertise it in that case.
2338 */
86e8cf98 2339 if (state->split)
fe1abafd
JB		 2340 features |= NL80211_FEATURE_ADVERTISE_CHAN_LIMITS;
2341 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS, features))
3713b4e3 2342 goto nla_put_failure;
562a7480 2343
1b8ec87a 2344 if (rdev->wiphy.ht_capa_mod_mask &&
3713b4e3 2345 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1b8ec87a
ZG		 2346 sizeof(*rdev->wiphy.ht_capa_mod_mask),
2347 rdev->wiphy.ht_capa_mod_mask))
3713b4e3 2348 goto nla_put_failure;
1f074bd8 2349
1b8ec87a
ZG		 2350 if (rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
2351 rdev->wiphy.max_acl_mac_addrs &&
3713b4e3 2352 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1b8ec87a 2353 rdev->wiphy.max_acl_mac_addrs))
3713b4e3 2354 goto nla_put_failure;
7e7c8926 2355
3713b4e3
JB		 2356 /*
2357 * Any information below this point is only available to
2358 * applications that can deal with it being split. This
2359 * helps ensure that newly added capabilities don't break
2360 * older tools by overrunning their buffers.
2361 *
2362 * We still increment split_start so that in the split
2363 * case we'll continue with more data in the next round,
2364 * but break unconditionally so unsplit data stops here.
2365 */
86e8cf98 2366 state->split_start++;
3713b4e3
JB		 2367 break;
2368 case 9:
1b8ec87a 2369 if (rdev->wiphy.extended_capabilities &&
fe1abafd 2370 (nla_put(msg, NL80211_ATTR_EXT_CAPA,
1b8ec87a
ZG		 2371 rdev->wiphy.extended_capabilities_len,
2372 rdev->wiphy.extended_capabilities) ||
fe1abafd 2373 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
1b8ec87a
ZG		 2374 rdev->wiphy.extended_capabilities_len,
2375 rdev->wiphy.extended_capabilities_mask)))
fe1abafd 2376 goto nla_put_failure;
a50df0c4 2377
1b8ec87a 2378 if (rdev->wiphy.vht_capa_mod_mask &&
ee2aca34 2379 nla_put(msg, NL80211_ATTR_VHT_CAPABILITY_MASK,
1b8ec87a
ZG		 2380 sizeof(*rdev->wiphy.vht_capa_mod_mask),
2381 rdev->wiphy.vht_capa_mod_mask))
ee2aca34
JB		 2382 goto nla_put_failure;
2383
ae6fa4d5
DK		 2384 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
2385 rdev->wiphy.perm_addr))
2386 goto nla_put_failure;
2387
2388 if (!is_zero_ether_addr(rdev->wiphy.addr_mask) &&
2389 nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN,
2390 rdev->wiphy.addr_mask))
2391 goto nla_put_failure;
2392
2393 if (rdev->wiphy.n_addresses > 1) {
2394 void *attr;
2395
2396 attr = nla_nest_start(msg, NL80211_ATTR_MAC_ADDRS);
2397 if (!attr)
2398 goto nla_put_failure;
2399
2400 for (i = 0; i < rdev->wiphy.n_addresses; i++)
2401 if (nla_put(msg, i + 1, ETH_ALEN,
2402 rdev->wiphy.addresses[i].addr))
2403 goto nla_put_failure;
2404
2405 nla_nest_end(msg, attr);
2406 }
2407
be29b99a
AK		 2408 state->split_start++;
2409 break;
2410 case 10:
1b8ec87a 2411 if (nl80211_send_coalesce(msg, rdev))
be29b99a
AK		 2412 goto nla_put_failure;
2413
1b8ec87a 2414 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ) &&
01e0daa4
FF		 2415 (nla_put_flag(msg, NL80211_ATTR_SUPPORT_5_MHZ) ||
2416 nla_put_flag(msg, NL80211_ATTR_SUPPORT_10_MHZ)))
2417 goto nla_put_failure;
b43504cf 2418
1b8ec87a 2419 if (rdev->wiphy.max_ap_assoc_sta &&
b43504cf 2420 nla_put_u32(msg, NL80211_ATTR_MAX_AP_ASSOC_STA,
1b8ec87a 2421 rdev->wiphy.max_ap_assoc_sta))
b43504cf
JM		 2422 goto nla_put_failure;
2423
ad7e718c
JB		 2424 state->split_start++;
2425 break;
2426 case 11:
1b8ec87a 2427 if (rdev->wiphy.n_vendor_commands) {
567ffc35
JB		 2428 const struct nl80211_vendor_cmd_info *info;
2429 struct nlattr *nested;
2430
ae0be8de
MK		 2431 nested = nla_nest_start_noflag(msg,
2432 NL80211_ATTR_VENDOR_DATA);
567ffc35
JB		 2433 if (!nested)
2434 goto nla_put_failure;
2435
1b8ec87a
ZG		 2436 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
2437 info = &rdev->wiphy.vendor_commands[i].info;
567ffc35
JB		 2438 if (nla_put(msg, i + 1, sizeof(*info), info))
2439 goto nla_put_failure;
2440 }
2441 nla_nest_end(msg, nested);
2442 }
2443
1b8ec87a 2444 if (rdev->wiphy.n_vendor_events) {
567ffc35
JB		 2445 const struct nl80211_vendor_cmd_info *info;
2446 struct nlattr *nested;
ad7e718c 2447
ae0be8de
MK		 2448 nested = nla_nest_start_noflag(msg,
2449 NL80211_ATTR_VENDOR_EVENTS);
567ffc35 2450 if (!nested)
ad7e718c 2451 goto nla_put_failure;
567ffc35 2452
1b8ec87a
ZG		 2453 for (i = 0; i < rdev->wiphy.n_vendor_events; i++) {
2454 info = &rdev->wiphy.vendor_events[i];
567ffc35
JB		 2455 if (nla_put(msg, i + 1, sizeof(*info), info))
2456 goto nla_put_failure;
2457 }
2458 nla_nest_end(msg, nested);
2459 }
9a774c78
AO		 2460 state->split_start++;
2461 break;
2462 case 12:
2463 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH &&
2464 nla_put_u8(msg, NL80211_ATTR_MAX_CSA_COUNTERS,
2465 rdev->wiphy.max_num_csa_counters))
2466 goto nla_put_failure;
01e0daa4 2467
1bdd716c
AN		 2468 if (rdev->wiphy.regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
2469 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
2470 goto nla_put_failure;
2471
ca986ad9
AVS		 2472 if (rdev->wiphy.max_sched_scan_reqs &&
2473 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_MAX_REQS,
2474 rdev->wiphy.max_sched_scan_reqs))
2475 goto nla_put_failure;
2476
d75bb06b
GKS		 2477 if (nla_put(msg, NL80211_ATTR_EXT_FEATURES,
2478 sizeof(rdev->wiphy.ext_features),
2479 rdev->wiphy.ext_features))
2480 goto nla_put_failure;
2481
38de03d2
AS		 2482 if (rdev->wiphy.bss_select_support) {
2483 struct nlattr *nested;
2484 u32 bss_select_support = rdev->wiphy.bss_select_support;
2485
ae0be8de
MK		 2486 nested = nla_nest_start_noflag(msg,
2487 NL80211_ATTR_BSS_SELECT);
38de03d2
AS		 2488 if (!nested)
2489 goto nla_put_failure;
2490
2491 i = 0;
2492 while (bss_select_support) {
2493 if ((bss_select_support & 1) &&
2494 nla_put_flag(msg, i))
2495 goto nla_put_failure;
2496 i++;
2497 bss_select_support >>= 1;
2498 }
2499 nla_nest_end(msg, nested);
2500 }
2501
019ae3a9
KV		 2502 state->split_start++;
2503 break;
2504 case 13:
2505 if (rdev->wiphy.num_iftype_ext_capab &&
2506 rdev->wiphy.iftype_ext_capab) {
2507 struct nlattr *nested_ext_capab, *nested;
2508
ae0be8de
MK		 2509 nested = nla_nest_start_noflag(msg,
2510 NL80211_ATTR_IFTYPE_EXT_CAPA);
019ae3a9
KV		 2511 if (!nested)
2512 goto nla_put_failure;
2513
2514 for (i = state->capa_start;
2515 i < rdev->wiphy.num_iftype_ext_capab; i++) {
2516 const struct wiphy_iftype_ext_capab *capab;
2517
2518 capab = &rdev->wiphy.iftype_ext_capab[i];
2519
ae0be8de
MK		 2520 nested_ext_capab = nla_nest_start_noflag(msg,
2521 i);
019ae3a9
KV		 2522 if (!nested_ext_capab ||
2523 nla_put_u32(msg, NL80211_ATTR_IFTYPE,
2524 capab->iftype) ||
2525 nla_put(msg, NL80211_ATTR_EXT_CAPA,
2526 capab->extended_capabilities_len,
2527 capab->extended_capabilities) ||
2528 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
2529 capab->extended_capabilities_len,
2530 capab->extended_capabilities_mask))
2531 goto nla_put_failure;
2532
2533 nla_nest_end(msg, nested_ext_capab);
2534 if (state->split)
2535 break;
2536 }
2537 nla_nest_end(msg, nested);
2538 if (i < rdev->wiphy.num_iftype_ext_capab) {
2539 state->capa_start = i + 1;
2540 break;
2541 }
2542 }
2543
8585989d
LC		 2544 if (nla_put_u32(msg, NL80211_ATTR_BANDS,
2545 rdev->wiphy.nan_supported_bands))
2546 goto nla_put_failure;
2547
52539ca8
THJ		 2548 if (wiphy_ext_feature_isset(&rdev->wiphy,
2549 NL80211_EXT_FEATURE_TXQS)) {
2550 struct cfg80211_txq_stats txqstats = {};
2551 int res;
2552
2553 res = rdev_get_txq_stats(rdev, NULL, &txqstats);
2554 if (!res &&
2555 !nl80211_put_txq_stats(msg, &txqstats,
2556 NL80211_ATTR_TXQ_STATS))
2557 goto nla_put_failure;
2558
2559 if (nla_put_u32(msg, NL80211_ATTR_TXQ_LIMIT,
2560 rdev->wiphy.txq_limit))
2561 goto nla_put_failure;
2562 if (nla_put_u32(msg, NL80211_ATTR_TXQ_MEMORY_LIMIT,
2563 rdev->wiphy.txq_memory_limit))
2564 goto nla_put_failure;
2565 if (nla_put_u32(msg, NL80211_ATTR_TXQ_QUANTUM,
2566 rdev->wiphy.txq_quantum))
2567 goto nla_put_failure;
2568 }
2569
9bb7e0f2
JB		 2570 state->split_start++;
2571 break;
2572 case 14:
2573 if (nl80211_send_pmsr_capa(rdev, msg))
2574 goto nla_put_failure;
2575
ab4dfa20
VJ		 2576 state->split_start++;
2577 break;
2578 case 15:
2579 if (rdev->wiphy.akm_suites &&
2580 nla_put(msg, NL80211_ATTR_AKM_SUITES,
2581 sizeof(u32) * rdev->wiphy.n_akm_suites,
2582 rdev->wiphy.akm_suites))
2583 goto nla_put_failure;
2584
d6039a34
VJ		 2585 if (nl80211_put_iftype_akm_suites(rdev, msg))
2586 goto nla_put_failure;
2587
3710a8a6
JB		 2588 if (nl80211_put_tid_config_support(rdev, msg))
2589 goto nla_put_failure;
2590
3713b4e3 2591 /* done */
86e8cf98 2592 state->split_start = 0;
3713b4e3
JB		 2593 break;
2594 }
3bb20556 2595 finish:
053c095a
JB		 2596 genlmsg_end(msg, hdr);
2597 return 0;
55682965
JB		 2598
2599 nla_put_failure:
bc3ed28c
TG		 2600 genlmsg_cancel(msg, hdr);
2601 return -EMSGSIZE;
55682965
JB		 2602}
2603
86e8cf98
JB		 2604static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
2605 struct netlink_callback *cb,
2606 struct nl80211_dump_wiphy_state *state)
2607{
50508d94
JB		 2608 struct nlattr **tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
2609 int ret;
2610
2611 if (!tb)
2612 return -ENOMEM;
2613
2614 ret = nlmsg_parse_deprecated(cb->nlh,
2615 GENL_HDRLEN + nl80211_fam.hdrsize,
2616 tb, nl80211_fam.maxattr,
2617 nl80211_policy, NULL);
86e8cf98 2618 /* ignore parse errors for backward compatibility */
50508d94
JB		 2619 if (ret) {
2620 ret = 0;
2621 goto out;
2622 }
86e8cf98
JB		 2623
2624 state->split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
2625 if (tb[NL80211_ATTR_WIPHY])
2626 state->filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
2627 if (tb[NL80211_ATTR_WDEV])
2628 state->filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
2629 if (tb[NL80211_ATTR_IFINDEX]) {
2630 struct net_device *netdev;
2631 struct cfg80211_registered_device *rdev;
2632 int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
2633
7f2b8562 2634 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
50508d94
JB		 2635 if (!netdev) {
2636 ret = -ENODEV;
2637 goto out;
2638 }
86e8cf98 2639 if (netdev->ieee80211_ptr) {
f26cbf40 2640 rdev = wiphy_to_rdev(
86e8cf98
JB		 2641 netdev->ieee80211_ptr->wiphy);
2642 state->filter_wiphy = rdev->wiphy_idx;
2643 }
86e8cf98
JB		 2644 }
2645
50508d94
JB		 2646 ret = 0;
2647out:
2648 kfree(tb);
2649 return ret;
86e8cf98
JB		 2650}
2651
55682965
JB		 2652static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
2653{
645e77de 2654 int idx = 0, ret;
86e8cf98 2655 struct nl80211_dump_wiphy_state *state = (void *)cb->args[0];
1b8ec87a 2656 struct cfg80211_registered_device *rdev;
3a5a423b 2657
5fe231e8 2658 rtnl_lock();
86e8cf98
JB		 2659 if (!state) {
2660 state = kzalloc(sizeof(*state), GFP_KERNEL);
57ed5cd6
JL		 2661 if (!state) {
2662 rtnl_unlock();
86e8cf98 2663 return -ENOMEM;
3713b4e3 2664 }
86e8cf98
JB		 2665 state->filter_wiphy = -1;
2666 ret = nl80211_dump_wiphy_parse(skb, cb, state);
2667 if (ret) {
2668 kfree(state);
2669 rtnl_unlock();
2670 return ret;
3713b4e3 2671 }
86e8cf98 2672 cb->args[0] = (long)state;
3713b4e3
JB		 2673 }
2674
1b8ec87a
ZG		 2675 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
2676 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 2677 continue;
86e8cf98 2678 if (++idx <= state->start)
55682965 2679 continue;
86e8cf98 2680 if (state->filter_wiphy != -1 &&
1b8ec87a 2681 state->filter_wiphy != rdev->wiphy_idx)
3713b4e3
JB		 2682 continue;
2683 /* attempt to fit multiple wiphy data chunks into the skb */
2684 do {
3bb20556
JB		 2685 ret = nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY,
2686 skb,
3713b4e3
JB		 2687 NETLINK_CB(cb->skb).portid,
2688 cb->nlh->nlmsg_seq,
86e8cf98 2689 NLM_F_MULTI, state);
3713b4e3
JB		 2690 if (ret < 0) {
2691 /*
2692 * If sending the wiphy data didn't fit (ENOBUFS
2693 * or EMSGSIZE returned), this SKB is still
2694 * empty (so it's not too big because another
2695 * wiphy dataset is already in the skb) and
2696 * we've not tried to adjust the dump allocation
2697 * yet ... then adjust the alloc size to be
2698 * bigger, and return 1 but with the empty skb.
2699 * This results in an empty message being RX'ed
2700 * in userspace, but that is ignored.
2701 *
2702 * We can then retry with the larger buffer.
2703 */
2704 if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
f12cb289 2705 !skb->len && !state->split &&
3713b4e3
JB		 2706 cb->min_dump_alloc < 4096) {
2707 cb->min_dump_alloc = 4096;
f12cb289 2708 state->split_start = 0;
d98cae64 2709 rtnl_unlock();
3713b4e3
JB		 2710 return 1;
2711 }
2712 idx--;
2713 break;
645e77de 2714 }
86e8cf98 2715 } while (state->split_start > 0);
3713b4e3 2716 break;
55682965 2717 }
5fe231e8 2718 rtnl_unlock();
55682965 2719
86e8cf98 2720 state->start = idx;
55682965
JB		 2721
2722 return skb->len;
2723}
2724
86e8cf98
JB		 2725static int nl80211_dump_wiphy_done(struct netlink_callback *cb)
2726{
2727 kfree((void *)cb->args[0]);
2728 return 0;
2729}
2730
55682965
JB		 2731static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
2732{
2733 struct sk_buff *msg;
1b8ec87a 2734 struct cfg80211_registered_device *rdev = info->user_ptr[0];
86e8cf98 2735 struct nl80211_dump_wiphy_state state = {};
55682965 2736
645e77de 2737 msg = nlmsg_new(4096, GFP_KERNEL);
55682965 2738 if (!msg)
4c476991 2739 return -ENOMEM;
55682965 2740
3bb20556
JB		 2741 if (nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY, msg,
2742 info->snd_portid, info->snd_seq, 0,
86e8cf98 2743 &state) < 0) {
4c476991
JB		 2744 nlmsg_free(msg);
2745 return -ENOBUFS;
2746 }
55682965 2747
134e6375 2748 return genlmsg_reply(msg, info);
55682965
JB		 2749}
2750
31888487
JM		 2751static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
2752 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
2753 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
2754 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
2755 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
2756 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
2757};
2758
2759static int parse_txq_params(struct nlattr *tb[],
2760 struct ieee80211_txq_params *txq_params)
2761{
259d8c1e
DW		 2762 u8 ac;
2763
a3304b0a 2764 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 2765 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
2766 !tb[NL80211_TXQ_ATTR_AIFS])
2767 return -EINVAL;
2768
259d8c1e 2769 ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 2770 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
2771 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
2772 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
2773 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
2774
259d8c1e 2775 if (ac >= NL80211_NUM_ACS)
a3304b0a 2776 return -EINVAL;
259d8c1e 2777 txq_params->ac = array_index_nospec(ac, NL80211_NUM_ACS);
31888487
JM		 2778 return 0;
2779}
2780
f444de05
JB		 2781static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
2782{
2783 /*
cc1d2806
JB		 2784 * You can only set the channel explicitly for WDS interfaces,
2785 * all others have their channel managed via their respective
2786 * "establish a connection" command (connect, join, ...)
2787 *
2788 * For AP/GO and mesh mode, the channel can be set with the
2789 * channel userspace API, but is only stored and passed to the
2790 * low-level driver when the AP starts or the mesh is joined.
2791 * This is for backward compatibility, userspace can also give
2792 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 2793 *
2794 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 2795 * whatever else is going on, so they have their own special
2796 * operation to set the monitor channel if possible.
f444de05
JB		 2797 */
2798 return !wdev ||
2799 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 2800 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 2801 wdev->iftype == NL80211_IFTYPE_MONITOR ||
2802 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 2803}
2804
9bb7e0f2
JB		 2805int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
2806 struct genl_info *info,
2807 struct cfg80211_chan_def *chandef)
683b6d3b 2808{
49f9cf0e
JB		 2809 struct netlink_ext_ack *extack = info->extack;
2810 struct nlattr **attrs = info->attrs;
dbeca2ea 2811 u32 control_freq;
683b6d3b 2812
49f9cf0e 2813 if (!attrs[NL80211_ATTR_WIPHY_FREQ])
683b6d3b
JB		 2814 return -EINVAL;
2815
49f9cf0e 2816 control_freq = nla_get_u32(attrs[NL80211_ATTR_WIPHY_FREQ]);
683b6d3b 2817
f43e5210
JB		 2818 memset(chandef, 0, sizeof(*chandef));
2819
683b6d3b 2820 chandef->chan = ieee80211_get_channel(&rdev->wiphy, control_freq);
3d9d1d66
JB		 2821 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
2822 chandef->center_freq1 = control_freq;
2823 chandef->center_freq2 = 0;
683b6d3b
JB		 2824
2825 /* Primary channel not allowed */
49f9cf0e
JB		 2826 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED) {
2827 NL_SET_ERR_MSG_ATTR(extack, attrs[NL80211_ATTR_WIPHY_FREQ],
2828 "Channel is disabled");
683b6d3b 2829 return -EINVAL;
49f9cf0e 2830 }
683b6d3b 2831
49f9cf0e 2832 if (attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
3d9d1d66
JB		 2833 enum nl80211_channel_type chantype;
2834
49f9cf0e 2835 chantype = nla_get_u32(attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
3d9d1d66
JB		 2836
2837 switch (chantype) {
2838 case NL80211_CHAN_NO_HT:
2839 case NL80211_CHAN_HT20:
2840 case NL80211_CHAN_HT40PLUS:
2841 case NL80211_CHAN_HT40MINUS:
2842 cfg80211_chandef_create(chandef, chandef->chan,
2843 chantype);
ffa4629e 2844 /* user input for center_freq is incorrect */
49f9cf0e
JB		 2845 if (attrs[NL80211_ATTR_CENTER_FREQ1] &&
2846 chandef->center_freq1 != nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1])) {
2847 NL_SET_ERR_MSG_ATTR(extack,
2848 attrs[NL80211_ATTR_CENTER_FREQ1],
2849 "bad center frequency 1");
ffa4629e 2850 return -EINVAL;
49f9cf0e 2851 }
ffa4629e 2852 /* center_freq2 must be zero */
49f9cf0e
JB		 2853 if (attrs[NL80211_ATTR_CENTER_FREQ2] &&
2854 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2])) {
2855 NL_SET_ERR_MSG_ATTR(extack,
2856 attrs[NL80211_ATTR_CENTER_FREQ2],
2857 "center frequency 2 can't be used");
ffa4629e 2858 return -EINVAL;
49f9cf0e 2859 }
3d9d1d66
JB		 2860 break;
2861 default:
49f9cf0e
JB		 2862 NL_SET_ERR_MSG_ATTR(extack,
2863 attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
2864 "invalid channel type");
3d9d1d66
JB		 2865 return -EINVAL;
2866 }
49f9cf0e 2867 } else if (attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
3d9d1d66 2868 chandef->width =
49f9cf0e
JB		 2869 nla_get_u32(attrs[NL80211_ATTR_CHANNEL_WIDTH]);
2870 if (attrs[NL80211_ATTR_CENTER_FREQ1])
3d9d1d66 2871 chandef->center_freq1 =
49f9cf0e
JB		 2872 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1]);
2873 if (attrs[NL80211_ATTR_CENTER_FREQ2])
3d9d1d66 2874 chandef->center_freq2 =
49f9cf0e 2875 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2]);
3d9d1d66
JB		 2876 }
2877
2a38075c
AAL		 2878 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
2879 chandef->edmg.channels =
2880 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
2881
2882 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
2883 chandef->edmg.bw_config =
2884 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
2885 } else {
2886 chandef->edmg.bw_config = 0;
2887 chandef->edmg.channels = 0;
2888 }
2889
49f9cf0e
JB		 2890 if (!cfg80211_chandef_valid(chandef)) {
2891 NL_SET_ERR_MSG(extack, "invalid channel definition");
3d9d1d66 2892 return -EINVAL;
49f9cf0e 2893 }
3d9d1d66 2894
9f5e8f6e 2895 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
49f9cf0e
JB		 2896 IEEE80211_CHAN_DISABLED)) {
2897 NL_SET_ERR_MSG(extack, "(extension) channel is disabled");
3d9d1d66 2898 return -EINVAL;
49f9cf0e 2899 }
3d9d1d66 2900
2f301ab2
SW		 2901 if ((chandef->width == NL80211_CHAN_WIDTH_5 ||
2902 chandef->width == NL80211_CHAN_WIDTH_10) &&
49f9cf0e
JB		 2903 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ)) {
2904 NL_SET_ERR_MSG(extack, "5/10 MHz not supported");
2f301ab2 2905 return -EINVAL;
49f9cf0e 2906 }
2f301ab2 2907
683b6d3b
JB		 2908 return 0;
2909}
2910
f444de05 2911static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
e16821bc 2912 struct net_device *dev,
f444de05
JB		 2913 struct genl_info *info)
2914{
683b6d3b 2915 struct cfg80211_chan_def chandef;
f444de05 2916 int result;
e8c9bd5b 2917 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
e16821bc 2918 struct wireless_dev *wdev = NULL;
e8c9bd5b 2919
e16821bc
JM		 2920 if (dev)
2921 wdev = dev->ieee80211_ptr;
f444de05
JB		 2922 if (!nl80211_can_set_dev_channel(wdev))
2923 return -EOPNOTSUPP;
e16821bc
JM		 2924 if (wdev)
2925 iftype = wdev->iftype;
f444de05 2926
683b6d3b
JB		 2927 result = nl80211_parse_chandef(rdev, info, &chandef);
2928 if (result)
2929 return result;
f444de05 2930
e8c9bd5b 2931 switch (iftype) {
aa430da4
JB		 2932 case NL80211_IFTYPE_AP:
2933 case NL80211_IFTYPE_P2P_GO:
923b352f
AN		 2934 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
2935 iftype)) {
aa430da4
JB		 2936 result = -EINVAL;
2937 break;
2938 }
e16821bc
JM		 2939 if (wdev->beacon_interval) {
2940 if (!dev || !rdev->ops->set_ap_chanwidth ||
2941 !(rdev->wiphy.features &
2942 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE)) {
2943 result = -EBUSY;
2944 break;
2945 }
2946
2947 /* Only allow dynamic channel width changes */
2948 if (chandef.chan != wdev->preset_chandef.chan) {
2949 result = -EBUSY;
2950 break;
2951 }
2952 result = rdev_set_ap_chanwidth(rdev, dev, &chandef);
2953 if (result)
2954 break;
2955 }
683b6d3b 2956 wdev->preset_chandef = chandef;
aa430da4
JB		 2957 result = 0;
2958 break;
cc1d2806 2959 case NL80211_IFTYPE_MESH_POINT:
683b6d3b 2960 result = cfg80211_set_mesh_channel(rdev, wdev, &chandef);
cc1d2806 2961 break;
e8c9bd5b 2962 case NL80211_IFTYPE_MONITOR:
683b6d3b 2963 result = cfg80211_set_monitor_channel(rdev, &chandef);
e8c9bd5b 2964 break;
aa430da4 2965 default:
e8c9bd5b 2966 result = -EINVAL;
f444de05 2967 }
f444de05
JB		 2968
2969 return result;
2970}
2971
2972static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
2973{
4c476991
JB		 2974 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2975 struct net_device *netdev = info->user_ptr[1];
f444de05 2976
e16821bc 2977 return __nl80211_set_channel(rdev, netdev, info);
f444de05
JB		 2978}
2979
e8347eba
BJ		 2980static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
2981{
43b19952
JB		 2982 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2983 struct net_device *dev = info->user_ptr[1];
2984 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 2985 const u8 *bssid;
e8347eba
BJ		 2986
2987 if (!info->attrs[NL80211_ATTR_MAC])
2988 return -EINVAL;
2989
43b19952
JB		 2990 if (netif_running(dev))
2991 return -EBUSY;
e8347eba 2992
43b19952
JB		 2993 if (!rdev->ops->set_wds_peer)
2994 return -EOPNOTSUPP;
e8347eba 2995
43b19952
JB		 2996 if (wdev->iftype != NL80211_IFTYPE_WDS)
2997 return -EOPNOTSUPP;
e8347eba
BJ		 2998
2999 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
e35e4d28 3000 return rdev_set_wds_peer(rdev, dev, bssid);
e8347eba
BJ		 3001}
3002
55682965
JB		 3003static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
3004{
3005 struct cfg80211_registered_device *rdev;
f444de05
JB		 3006 struct net_device *netdev = NULL;
3007 struct wireless_dev *wdev;
a1e567c8 3008 int result = 0, rem_txq_params = 0;
31888487 3009 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 3010 u32 changed;
3011 u8 retry_short = 0, retry_long = 0;
3012 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 3013 u8 coverage_class = 0;
52539ca8 3014 u32 txq_limit = 0, txq_memory_limit = 0, txq_quantum = 0;
55682965 3015
5fe231e8
JB		 3016 ASSERT_RTNL();
3017
f444de05
JB		 3018 /*
3019 * Try to find the wiphy and netdev. Normally this
3020 * function shouldn't need the netdev, but this is
3021 * done for backward compatibility -- previously
3022 * setting the channel was done per wiphy, but now
3023 * it is per netdev. Previous userland like hostapd
3024 * also passed a netdev to set_wiphy, so that it is
3025 * possible to let that go to the right netdev!
3026 */
4bbf4d56 3027
f444de05
JB		 3028 if (info->attrs[NL80211_ATTR_IFINDEX]) {
3029 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
3030
7f2b8562 3031 netdev = __dev_get_by_index(genl_info_net(info), ifindex);
5fe231e8 3032 if (netdev && netdev->ieee80211_ptr)
f26cbf40 3033 rdev = wiphy_to_rdev(netdev->ieee80211_ptr->wiphy);
5fe231e8 3034 else
f444de05 3035 netdev = NULL;
4bbf4d56
JB		 3036 }
3037
f444de05 3038 if (!netdev) {
878d9ec7
JB		 3039 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
3040 info->attrs);
5fe231e8 3041 if (IS_ERR(rdev))
4c476991 3042 return PTR_ERR(rdev);
f444de05
JB		 3043 wdev = NULL;
3044 netdev = NULL;
3045 result = 0;
71fe96bf 3046 } else
f444de05 3047 wdev = netdev->ieee80211_ptr;
f444de05
JB		 3048
3049 /*
3050 * end workaround code, by now the rdev is available
3051 * and locked, and wdev may or may not be NULL.
3052 */
4bbf4d56
JB		 3053
3054 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 3055 result = cfg80211_dev_rename(
3056 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56 3057
4bbf4d56 3058 if (result)
7f2b8562 3059 return result;
31888487
JM		 3060
3061 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
3062 struct ieee80211_txq_params txq_params;
3063 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
3064
7f2b8562
YX		 3065 if (!rdev->ops->set_txq_params)
3066 return -EOPNOTSUPP;
31888487 3067
7f2b8562
YX		 3068 if (!netdev)
3069 return -EINVAL;
f70f01c2 3070
133a3ff2 3071 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
7f2b8562
YX		 3072 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3073 return -EINVAL;
133a3ff2 3074
7f2b8562
YX		 3075 if (!netif_running(netdev))
3076 return -ENETDOWN;
2b5f8b0b 3077
31888487
JM		 3078 nla_for_each_nested(nl_txq_params,
3079 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
3080 rem_txq_params) {
8cb08174
JB		 3081 result = nla_parse_nested_deprecated(tb,
3082 NL80211_TXQ_ATTR_MAX,
3083 nl_txq_params,
3084 txq_params_policy,
3085 info->extack);
ae811e21
JB		 3086 if (result)
3087 return result;
31888487
JM		 3088 result = parse_txq_params(tb, &txq_params);
3089 if (result)
7f2b8562 3090 return result;
31888487 3091
e35e4d28
HG		 3092 result = rdev_set_txq_params(rdev, netdev,
3093 &txq_params);
31888487 3094 if (result)
7f2b8562 3095 return result;
31888487
JM		 3096 }
3097 }
55682965 3098
72bdcf34 3099 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
e16821bc
JM		 3100 result = __nl80211_set_channel(
3101 rdev,
3102 nl80211_can_set_dev_channel(wdev) ? netdev : NULL,
3103 info);
72bdcf34 3104 if (result)
7f2b8562 3105 return result;
72bdcf34
JM		 3106 }
3107
98d2ff8b 3108 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 3109 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 3110 enum nl80211_tx_power_setting type;
3111 int idx, mbm = 0;
3112
c8442118
JB		 3113 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
3114 txp_wdev = NULL;
3115
7f2b8562
YX		 3116 if (!rdev->ops->set_tx_power)
3117 return -EOPNOTSUPP;
98d2ff8b
JO		 3118
3119 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
3120 type = nla_get_u32(info->attrs[idx]);
3121
3122 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
7f2b8562
YX		 3123 (type != NL80211_TX_POWER_AUTOMATIC))
3124 return -EINVAL;
98d2ff8b
JO		 3125
3126 if (type != NL80211_TX_POWER_AUTOMATIC) {
3127 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
3128 mbm = nla_get_u32(info->attrs[idx]);
3129 }
3130
c8442118 3131 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b 3132 if (result)
7f2b8562 3133 return result;
98d2ff8b
JO		 3134 }
3135
afe0cbf8
BR		 3136 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
3137 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
3138 u32 tx_ant, rx_ant;
7a087e74 3139
7f531e03
BR		 3140 if ((!rdev->wiphy.available_antennas_tx &&
3141 !rdev->wiphy.available_antennas_rx) ||
7f2b8562
YX		 3142 !rdev->ops->set_antenna)
3143 return -EOPNOTSUPP;
afe0cbf8
BR		 3144
3145 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
3146 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
3147
a7ffac95 3148 /* reject antenna configurations which don't match the
7f531e03
BR		 3149 * available antenna masks, except for the "all" mask */
3150 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
7f2b8562
YX		 3151 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx)))
3152 return -EINVAL;
a7ffac95 3153
7f531e03
BR		 3154 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
3155 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 3156
e35e4d28 3157 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8 3158 if (result)
7f2b8562 3159 return result;
afe0cbf8
BR		 3160 }
3161
b9a5f8ca
JM		 3162 changed = 0;
3163
3164 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
3165 retry_short = nla_get_u8(
3166 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
7f2b8562 3167
b9a5f8ca
JM		 3168 changed |= WIPHY_PARAM_RETRY_SHORT;
3169 }
3170
3171 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
3172 retry_long = nla_get_u8(
3173 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
7f2b8562 3174
b9a5f8ca
JM		 3175 changed |= WIPHY_PARAM_RETRY_LONG;
3176 }
3177
3178 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
3179 frag_threshold = nla_get_u32(
3180 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
7f2b8562
YX		 3181 if (frag_threshold < 256)
3182 return -EINVAL;
3183
b9a5f8ca
JM		 3184 if (frag_threshold != (u32) -1) {
3185 /*
3186 * Fragments (apart from the last one) are required to
3187 * have even length. Make the fragmentation code
3188 * simpler by stripping LSB should someone try to use
3189 * odd threshold value.
3190 */
3191 frag_threshold &= ~0x1;
3192 }
3193 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
3194 }
3195
3196 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
3197 rts_threshold = nla_get_u32(
3198 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
3199 changed |= WIPHY_PARAM_RTS_THRESHOLD;
3200 }
3201
81077e82 3202 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
3057dbfd
LB		 3203 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK])
3204 return -EINVAL;
3205
81077e82
LT		 3206 coverage_class = nla_get_u8(
3207 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
3208 changed |= WIPHY_PARAM_COVERAGE_CLASS;
3209 }
3210
3057dbfd
LB		 3211 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
3212 if (!(rdev->wiphy.features & NL80211_FEATURE_ACKTO_ESTIMATION))
3213 return -EOPNOTSUPP;
3214
3215 changed |= WIPHY_PARAM_DYN_ACK;
81077e82
LT		 3216 }
3217
52539ca8
THJ		 3218 if (info->attrs[NL80211_ATTR_TXQ_LIMIT]) {
3219 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3220 NL80211_EXT_FEATURE_TXQS))
3221 return -EOPNOTSUPP;
3222 txq_limit = nla_get_u32(
3223 info->attrs[NL80211_ATTR_TXQ_LIMIT]);
3224 changed |= WIPHY_PARAM_TXQ_LIMIT;
3225 }
3226
3227 if (info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]) {
3228 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3229 NL80211_EXT_FEATURE_TXQS))
3230 return -EOPNOTSUPP;
3231 txq_memory_limit = nla_get_u32(
3232 info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]);
3233 changed |= WIPHY_PARAM_TXQ_MEMORY_LIMIT;
3234 }
3235
3236 if (info->attrs[NL80211_ATTR_TXQ_QUANTUM]) {
3237 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3238 NL80211_EXT_FEATURE_TXQS))
3239 return -EOPNOTSUPP;
3240 txq_quantum = nla_get_u32(
3241 info->attrs[NL80211_ATTR_TXQ_QUANTUM]);
3242 changed |= WIPHY_PARAM_TXQ_QUANTUM;
3243 }
3244
b9a5f8ca
JM		 3245 if (changed) {
3246 u8 old_retry_short, old_retry_long;
3247 u32 old_frag_threshold, old_rts_threshold;
81077e82 3248 u8 old_coverage_class;
52539ca8 3249 u32 old_txq_limit, old_txq_memory_limit, old_txq_quantum;
b9a5f8ca 3250
7f2b8562
YX		 3251 if (!rdev->ops->set_wiphy_params)
3252 return -EOPNOTSUPP;
b9a5f8ca
JM		 3253
3254 old_retry_short = rdev->wiphy.retry_short;
3255 old_retry_long = rdev->wiphy.retry_long;
3256 old_frag_threshold = rdev->wiphy.frag_threshold;
3257 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 3258 old_coverage_class = rdev->wiphy.coverage_class;
52539ca8
THJ		 3259 old_txq_limit = rdev->wiphy.txq_limit;
3260 old_txq_memory_limit = rdev->wiphy.txq_memory_limit;
3261 old_txq_quantum = rdev->wiphy.txq_quantum;
b9a5f8ca
JM		 3262
3263 if (changed & WIPHY_PARAM_RETRY_SHORT)
3264 rdev->wiphy.retry_short = retry_short;
3265 if (changed & WIPHY_PARAM_RETRY_LONG)
3266 rdev->wiphy.retry_long = retry_long;
3267 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
3268 rdev->wiphy.frag_threshold = frag_threshold;
3269 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
3270 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 3271 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
3272 rdev->wiphy.coverage_class = coverage_class;
52539ca8
THJ		 3273 if (changed & WIPHY_PARAM_TXQ_LIMIT)
3274 rdev->wiphy.txq_limit = txq_limit;
3275 if (changed & WIPHY_PARAM_TXQ_MEMORY_LIMIT)
3276 rdev->wiphy.txq_memory_limit = txq_memory_limit;
3277 if (changed & WIPHY_PARAM_TXQ_QUANTUM)
3278 rdev->wiphy.txq_quantum = txq_quantum;
b9a5f8ca 3279
e35e4d28 3280 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 3281 if (result) {
3282 rdev->wiphy.retry_short = old_retry_short;
3283 rdev->wiphy.retry_long = old_retry_long;
3284 rdev->wiphy.frag_threshold = old_frag_threshold;
3285 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 3286 rdev->wiphy.coverage_class = old_coverage_class;
52539ca8
THJ		 3287 rdev->wiphy.txq_limit = old_txq_limit;
3288 rdev->wiphy.txq_memory_limit = old_txq_memory_limit;
3289 rdev->wiphy.txq_quantum = old_txq_quantum;
9189ee31 3290 return result;
b9a5f8ca
JM		 3291 }
3292 }
7f2b8562 3293 return 0;
55682965
JB		 3294}
3295
683b6d3b 3296static int nl80211_send_chandef(struct sk_buff *msg,
d2859df5 3297 const struct cfg80211_chan_def *chandef)
683b6d3b 3298{
601555cd
JB		 3299 if (WARN_ON(!cfg80211_chandef_valid(chandef)))
3300 return -EINVAL;
3d9d1d66 3301
683b6d3b
JB		 3302 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
3303 chandef->chan->center_freq))
3304 return -ENOBUFS;
3d9d1d66
JB		 3305 switch (chandef->width) {
3306 case NL80211_CHAN_WIDTH_20_NOHT:
3307 case NL80211_CHAN_WIDTH_20:
3308 case NL80211_CHAN_WIDTH_40:
3309 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
3310 cfg80211_get_chandef_type(chandef)))
3311 return -ENOBUFS;
3312 break;
3313 default:
3314 break;
3315 }
3316 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
3317 return -ENOBUFS;
3318 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
3319 return -ENOBUFS;
3320 if (chandef->center_freq2 &&
3321 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
683b6d3b
JB		 3322 return -ENOBUFS;
3323 return 0;
3324}
3325
15e47304 3326static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 3327 struct cfg80211_registered_device *rdev,
3d1a5bbf
AZ		 3328 struct wireless_dev *wdev,
3329 enum nl80211_commands cmd)
55682965 3330{
72fb2abc 3331 struct net_device *dev = wdev->netdev;
55682965
JB		 3332 void *hdr;
3333
3d1a5bbf
AZ		 3334 WARN_ON(cmd != NL80211_CMD_NEW_INTERFACE &&
3335 cmd != NL80211_CMD_DEL_INTERFACE &&
3336 cmd != NL80211_CMD_SET_INTERFACE);
8f894be2
TB		 3337
3338 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
55682965
JB		 3339 if (!hdr)
3340 return -1;
3341
72fb2abc
JB		 3342 if (dev &&
3343 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 3344 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 3345 goto nla_put_failure;
3346
3347 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3348 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
2dad624e
ND		 3349 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
3350 NL80211_ATTR_PAD) ||
98104fde 3351 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 3352 nla_put_u32(msg, NL80211_ATTR_GENERATION,
3353 rdev->devlist_generation ^
446faa15
AQ		 3354 (cfg80211_rdev_list_generation << 2)) ||
3355 nla_put_u8(msg, NL80211_ATTR_4ADDR, wdev->use_4addr))
9360ffd1 3356 goto nla_put_failure;
f5ea9120 3357
5b7ccaf3 3358 if (rdev->ops->get_channel) {
683b6d3b 3359 int ret;
f43e5210 3360 struct cfg80211_chan_def chandef = {};
683b6d3b
JB		 3361
3362 ret = rdev_get_channel(rdev, wdev, &chandef);
3363 if (ret == 0) {
3364 if (nl80211_send_chandef(msg, &chandef))
3365 goto nla_put_failure;
3366 }
d91df0e3
PF		 3367 }
3368
d55d0d59
RM		 3369 if (rdev->ops->get_tx_power) {
3370 int dbm, ret;
3371
3372 ret = rdev_get_tx_power(rdev, wdev, &dbm);
3373 if (ret == 0 &&
3374 nla_put_u32(msg, NL80211_ATTR_WIPHY_TX_POWER_LEVEL,
3375 DBM_TO_MBM(dbm)))
3376 goto nla_put_failure;
3377 }
3378
44905265
JB		 3379 wdev_lock(wdev);
3380 switch (wdev->iftype) {
3381 case NL80211_IFTYPE_AP:
3382 if (wdev->ssid_len &&
3383 nla_put(msg, NL80211_ATTR_SSID, wdev->ssid_len, wdev->ssid))
4564b187 3384 goto nla_put_failure_locked;
44905265
JB		 3385 break;
3386 case NL80211_IFTYPE_STATION:
3387 case NL80211_IFTYPE_P2P_CLIENT:
3388 case NL80211_IFTYPE_ADHOC: {
3389 const u8 *ssid_ie;
3390 if (!wdev->current_bss)
3391 break;
7a94b8c2 3392 rcu_read_lock();
44905265
JB		 3393 ssid_ie = ieee80211_bss_get_ie(&wdev->current_bss->pub,
3394 WLAN_EID_SSID);
7a94b8c2
DB		 3395 if (ssid_ie &&
3396 nla_put(msg, NL80211_ATTR_SSID, ssid_ie[1], ssid_ie + 2))
3397 goto nla_put_failure_rcu_locked;
3398 rcu_read_unlock();
44905265
JB		 3399 break;
3400 }
3401 default:
3402 /* nothing */
3403 break;
b84e7a05 3404 }
44905265 3405 wdev_unlock(wdev);
b84e7a05 3406
52539ca8
THJ		 3407 if (rdev->ops->get_txq_stats) {
3408 struct cfg80211_txq_stats txqstats = {};
3409 int ret = rdev_get_txq_stats(rdev, wdev, &txqstats);
3410
3411 if (ret == 0 &&
3412 !nl80211_put_txq_stats(msg, &txqstats,
3413 NL80211_ATTR_TXQ_STATS))
3414 goto nla_put_failure;
3415 }
3416
053c095a
JB		 3417 genlmsg_end(msg, hdr);
3418 return 0;
55682965 3419
7a94b8c2
DB		 3420 nla_put_failure_rcu_locked:
3421 rcu_read_unlock();
4564b187
JB		 3422 nla_put_failure_locked:
3423 wdev_unlock(wdev);
55682965 3424 nla_put_failure:
bc3ed28c
TG		 3425 genlmsg_cancel(msg, hdr);
3426 return -EMSGSIZE;
55682965
JB		 3427}
3428
3429static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
3430{
3431 int wp_idx = 0;
3432 int if_idx = 0;
3433 int wp_start = cb->args[0];
3434 int if_start = cb->args[1];
b7fb44da 3435 int filter_wiphy = -1;
f5ea9120 3436 struct cfg80211_registered_device *rdev;
55682965 3437 struct wireless_dev *wdev;
ea90e0dc 3438 int ret;
55682965 3439
5fe231e8 3440 rtnl_lock();
b7fb44da
DK		 3441 if (!cb->args[2]) {
3442 struct nl80211_dump_wiphy_state state = {
3443 .filter_wiphy = -1,
3444 };
b7fb44da
DK		 3445
3446 ret = nl80211_dump_wiphy_parse(skb, cb, &state);
3447 if (ret)
ea90e0dc 3448 goto out_unlock;
b7fb44da
DK		 3449
3450 filter_wiphy = state.filter_wiphy;
3451
3452 /*
3453 * if filtering, set cb->args[2] to +1 since 0 is the default
3454 * value needed to determine that parsing is necessary.
3455 */
3456 if (filter_wiphy >= 0)
3457 cb->args[2] = filter_wiphy + 1;
3458 else
3459 cb->args[2] = -1;
3460 } else if (cb->args[2] > 0) {
3461 filter_wiphy = cb->args[2] - 1;
3462 }
3463
f5ea9120
JB		 3464 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3465 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3466 continue;
bba95fef
JB		 3467 if (wp_idx < wp_start) {
3468 wp_idx++;
55682965 3469 continue;
bba95fef 3470 }
b7fb44da
DK		 3471
3472 if (filter_wiphy >= 0 && filter_wiphy != rdev->wiphy_idx)
3473 continue;
3474
55682965
JB		 3475 if_idx = 0;
3476
53873f13 3477 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
bba95fef
JB		 3478 if (if_idx < if_start) {
3479 if_idx++;
55682965 3480 continue;
bba95fef 3481 }
15e47304 3482 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 3483 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3d1a5bbf
AZ		 3484 rdev, wdev,
3485 NL80211_CMD_NEW_INTERFACE) < 0) {
bba95fef
JB		 3486 goto out;
3487 }
3488 if_idx++;
55682965 3489 }
bba95fef
JB		 3490
3491 wp_idx++;
55682965 3492 }
bba95fef 3493 out:
55682965
JB		 3494 cb->args[0] = wp_idx;
3495 cb->args[1] = if_idx;
3496
ea90e0dc
JB		 3497 ret = skb->len;
3498 out_unlock:
3499 rtnl_unlock();
3500
3501 return ret;
55682965
JB		 3502}
3503
3504static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
3505{
3506 struct sk_buff *msg;
1b8ec87a 3507 struct cfg80211_registered_device *rdev = info->user_ptr[0];
72fb2abc 3508 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3509
fd2120ca 3510 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 3511 if (!msg)
4c476991 3512 return -ENOMEM;
55682965 3513
15e47304 3514 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3515 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
4c476991
JB		 3516 nlmsg_free(msg);
3517 return -ENOBUFS;
3518 }
55682965 3519
134e6375 3520 return genlmsg_reply(msg, info);
55682965
JB		 3521}
3522
66f7ac50
MW		 3523static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
3524 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
3525 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
3526 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
3527 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
3528 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
e057d3c3 3529 [NL80211_MNTR_FLAG_ACTIVE] = { .type = NLA_FLAG },
66f7ac50
MW		 3530};
3531
3532static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
3533{
3534 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
3535 int flag;
3536
3537 *mntrflags = 0;
3538
3539 if (!nla)
3540 return -EINVAL;
3541
8cb08174 3542 if (nla_parse_nested_deprecated(flags, NL80211_MNTR_FLAG_MAX, nla, mntr_flags_policy, NULL))
66f7ac50
MW		 3543 return -EINVAL;
3544
3545 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
3546 if (flags[flag])
3547 *mntrflags |= (1<<flag);
3548
818a986e
JB		 3549 *mntrflags |= MONITOR_FLAG_CHANGED;
3550
66f7ac50
MW		 3551 return 0;
3552}
3553
1db77596
JB		 3554static int nl80211_parse_mon_options(struct cfg80211_registered_device *rdev,
3555 enum nl80211_iftype type,
3556 struct genl_info *info,
3557 struct vif_params *params)
3558{
3559 bool change = false;
3560 int err;
3561
3562 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
3563 if (type != NL80211_IFTYPE_MONITOR)
3564 return -EINVAL;
3565
3566 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
3567 &params->flags);
3568 if (err)
3569 return err;
3570
3571 change = true;
3572 }
3573
3574 if (params->flags & MONITOR_FLAG_ACTIVE &&
3575 !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
3576 return -EOPNOTSUPP;
3577
3578 if (info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]) {
3579 const u8 *mumimo_groups;
3580 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
3581
3582 if (type != NL80211_IFTYPE_MONITOR)
3583 return -EINVAL;
3584
3585 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
3586 return -EOPNOTSUPP;
3587
3588 mumimo_groups =
3589 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]);
3590
3591 /* bits 0 and 63 are reserved and must be zero */
4954601f
JB		 3592 if ((mumimo_groups[0] & BIT(0)) ||
3593 (mumimo_groups[VHT_MUMIMO_GROUPS_DATA_LEN - 1] & BIT(7)))
1db77596
JB		 3594 return -EINVAL;
3595
3596 params->vht_mumimo_groups = mumimo_groups;
3597 change = true;
3598 }
3599
3600 if (info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]) {
3601 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
3602
3603 if (type != NL80211_IFTYPE_MONITOR)
3604 return -EINVAL;
3605
3606 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
3607 return -EOPNOTSUPP;
3608
3609 params->vht_mumimo_follow_addr =
3610 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]);
3611 change = true;
3612 }
3613
3614 return change ? 1 : 0;
3615}
3616
9bc383de 3617static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 3618 struct net_device *netdev, u8 use_4addr,
3619 enum nl80211_iftype iftype)
9bc383de 3620{
ad4bb6f8 3621 if (!use_4addr) {
2e92a2d0 3622 if (netdev && netif_is_bridge_port(netdev))
ad4bb6f8 3623 return -EBUSY;
9bc383de 3624 return 0;
ad4bb6f8 3625 }
9bc383de
JB		 3626
3627 switch (iftype) {
3628 case NL80211_IFTYPE_AP_VLAN:
3629 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
3630 return 0;
3631 break;
3632 case NL80211_IFTYPE_STATION:
3633 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
3634 return 0;
3635 break;
3636 default:
3637 break;
3638 }
3639
3640 return -EOPNOTSUPP;
3641}
3642
55682965
JB		 3643static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
3644{
4c476991 3645 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3646 struct vif_params params;
e36d56b6 3647 int err;
04a773ad 3648 enum nl80211_iftype otype, ntype;
4c476991 3649 struct net_device *dev = info->user_ptr[1];
ac7f9cfa 3650 bool change = false;
55682965 3651
2ec600d6
LCC		 3652 memset(&params, 0, sizeof(params));
3653
04a773ad 3654 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 3655
723b038d 3656 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 3657 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 3658 if (otype != ntype)
ac7f9cfa 3659 change = true;
723b038d
JB		 3660 }
3661
92ffe055 3662 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 3663 struct wireless_dev *wdev = dev->ieee80211_ptr;
3664
4c476991
JB		 3665 if (ntype != NL80211_IFTYPE_MESH_POINT)
3666 return -EINVAL;
29cbe68c
JB		 3667 if (netif_running(dev))
3668 return -EBUSY;
3669
3670 wdev_lock(wdev);
3671 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
3672 IEEE80211_MAX_MESH_ID_LEN);
3673 wdev->mesh_id_up_len =
3674 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
3675 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
3676 wdev->mesh_id_up_len);
3677 wdev_unlock(wdev);
2ec600d6
LCC		 3678 }
3679
8b787643
FF		 3680 if (info->attrs[NL80211_ATTR_4ADDR]) {
3681 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
3682 change = true;
ad4bb6f8 3683 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 3684 if (err)
4c476991 3685 return err;
8b787643
FF		 3686 } else {
3687 params.use_4addr = -1;
3688 }
3689
1db77596
JB		 3690 err = nl80211_parse_mon_options(rdev, ntype, info, &params);
3691 if (err < 0)
3692 return err;
3693 if (err > 0)
c6e6a0c8 3694 change = true;
e057d3c3 3695
ac7f9cfa 3696 if (change)
818a986e 3697 err = cfg80211_change_iface(rdev, dev, ntype, &params);
ac7f9cfa
JB		 3698 else
3699 err = 0;
60719ffd 3700
9bc383de
JB		 3701 if (!err && params.use_4addr != -1)
3702 dev->ieee80211_ptr->use_4addr = params.use_4addr;
3703
3d1a5bbf
AZ		 3704 if (change && !err) {
3705 struct wireless_dev *wdev = dev->ieee80211_ptr;
3706
3707 nl80211_notify_iface(rdev, wdev, NL80211_CMD_SET_INTERFACE);
3708 }
3709
55682965
JB		 3710 return err;
3711}
3712
3713static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
3714{
4c476991 3715 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3716 struct vif_params params;
84efbb84 3717 struct wireless_dev *wdev;
896ff063 3718 struct sk_buff *msg;
55682965
JB		 3719 int err;
3720 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
3721
78f22b6a
JB		 3722 /* to avoid failing a new interface creation due to pending removal */
3723 cfg80211_destroy_ifaces(rdev);
3724
2ec600d6
LCC		 3725 memset(&params, 0, sizeof(params));
3726
55682965
JB		 3727 if (!info->attrs[NL80211_ATTR_IFNAME])
3728 return -EINVAL;
3729
ab0d76f6 3730 if (info->attrs[NL80211_ATTR_IFTYPE])
55682965 3731 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
55682965 3732
33d915d9 3733 if (!rdev->ops->add_virtual_intf)
4c476991 3734 return -EOPNOTSUPP;
55682965 3735
cb3b7d87 3736 if ((type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN ||
e8f479b1
BG		 3737 rdev->wiphy.features & NL80211_FEATURE_MAC_ON_CREATE) &&
3738 info->attrs[NL80211_ATTR_MAC]) {
1c18f145
AS		 3739 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
3740 ETH_ALEN);
3741 if (!is_valid_ether_addr(params.macaddr))
3742 return -EADDRNOTAVAIL;
3743 }
3744
9bc383de 3745 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 3746 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 3747 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 3748 if (err)
4c476991 3749 return err;
9bc383de 3750 }
8b787643 3751
e6f40511 3752 if (!cfg80211_iftype_allowed(&rdev->wiphy, type, params.use_4addr, 0))
33d915d9
MP		 3753 return -EOPNOTSUPP;
3754
1db77596
JB		 3755 err = nl80211_parse_mon_options(rdev, type, info, &params);
3756 if (err < 0)
3757 return err;
e057d3c3 3758
a18c7192
JB		 3759 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
3760 if (!msg)
3761 return -ENOMEM;
3762
e35e4d28
HG		 3763 wdev = rdev_add_virtual_intf(rdev,
3764 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
818a986e 3765 NET_NAME_USER, type, &params);
d687cbb7
RM		 3766 if (WARN_ON(!wdev)) {
3767 nlmsg_free(msg);
3768 return -EPROTO;
3769 } else if (IS_ERR(wdev)) {
1c90f9d4 3770 nlmsg_free(msg);
84efbb84 3771 return PTR_ERR(wdev);
1c90f9d4 3772 }
2ec600d6 3773
18e5ca65 3774 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
78f22b6a
JB		 3775 wdev->owner_nlportid = info->snd_portid;
3776
98104fde
JB		 3777 switch (type) {
3778 case NL80211_IFTYPE_MESH_POINT:
3779 if (!info->attrs[NL80211_ATTR_MESH_ID])
3780 break;
29cbe68c
JB		 3781 wdev_lock(wdev);
3782 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
3783 IEEE80211_MAX_MESH_ID_LEN);
3784 wdev->mesh_id_up_len =
3785 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
3786 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
3787 wdev->mesh_id_up_len);
3788 wdev_unlock(wdev);
98104fde 3789 break;
cb3b7d87 3790 case NL80211_IFTYPE_NAN:
98104fde
JB		 3791 case NL80211_IFTYPE_P2P_DEVICE:
3792 /*
cb3b7d87 3793 * P2P Device and NAN do not have a netdev, so don't go
98104fde
JB		 3794 * through the netdev notifier and must be added here
3795 */
e4d4216e 3796 cfg80211_init_wdev(rdev, wdev);
98104fde
JB		 3797 break;
3798 default:
3799 break;
29cbe68c
JB		 3800 }
3801
15e47304 3802 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3803 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
1c90f9d4
JB		 3804 nlmsg_free(msg);
3805 return -ENOBUFS;
3806 }
3807
3808 return genlmsg_reply(msg, info);
55682965
JB		 3809}
3810
3811static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
3812{
4c476991 3813 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 3814 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3815
4c476991
JB		 3816 if (!rdev->ops->del_virtual_intf)
3817 return -EOPNOTSUPP;
55682965 3818
84efbb84
JB		 3819 /*
3820 * If we remove a wireless device without a netdev then clear
3821 * user_ptr[1] so that nl80211_post_doit won't dereference it
3822 * to check if it needs to do dev_put(). Otherwise it crashes
3823 * since the wdev has been freed, unlike with a netdev where
3824 * we need the dev_put() for the netdev to really be freed.
3825 */
3826 if (!wdev->netdev)
3827 info->user_ptr[1] = NULL;
3828
7f8ed01e 3829 return rdev_del_virtual_intf(rdev, wdev);
55682965
JB		 3830}
3831
1d9d9213
SW		 3832static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
3833{
3834 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3835 struct net_device *dev = info->user_ptr[1];
3836 u16 noack_map;
3837
3838 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
3839 return -EINVAL;
3840
3841 if (!rdev->ops->set_noack_map)
3842 return -EOPNOTSUPP;
3843
3844 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
3845
e35e4d28 3846 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 3847}
3848
41ade00f
JB		 3849struct get_key_cookie {
3850 struct sk_buff *msg;
3851 int error;
b9454e83 3852 int idx;
41ade00f
JB		 3853};
3854
3855static void get_key_callback(void *c, struct key_params *params)
3856{
b9454e83 3857 struct nlattr *key;
41ade00f
JB		 3858 struct get_key_cookie *cookie = c;
3859
9360ffd1
DM		 3860 if ((params->key &&
3861 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
3862 params->key_len, params->key)) ||
3863 (params->seq &&
3864 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
3865 params->seq_len, params->seq)) ||
3866 (params->cipher &&
3867 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
3868 params->cipher)))
3869 goto nla_put_failure;
41ade00f 3870
ae0be8de 3871 key = nla_nest_start_noflag(cookie->msg, NL80211_ATTR_KEY);
b9454e83
JB		 3872 if (!key)
3873 goto nla_put_failure;
3874
9360ffd1
DM		 3875 if ((params->key &&
3876 nla_put(cookie->msg, NL80211_KEY_DATA,
3877 params->key_len, params->key)) ||
3878 (params->seq &&
3879 nla_put(cookie->msg, NL80211_KEY_SEQ,
3880 params->seq_len, params->seq)) ||
3881 (params->cipher &&
3882 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
3883 params->cipher)))
3884 goto nla_put_failure;
b9454e83 3885
efdfce72 3886 if (nla_put_u8(cookie->msg, NL80211_KEY_IDX, cookie->idx))
9360ffd1 3887 goto nla_put_failure;
b9454e83
JB		 3888
3889 nla_nest_end(cookie->msg, key);
3890
41ade00f
JB		 3891 return;
3892 nla_put_failure:
3893 cookie->error = 1;
3894}
3895
3896static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
3897{
4c476991 3898 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 3899 int err;
4c476991 3900 struct net_device *dev = info->user_ptr[1];
41ade00f 3901 u8 key_idx = 0;
e31b8213
JB		 3902 const u8 *mac_addr = NULL;
3903 bool pairwise;
41ade00f
JB		 3904 struct get_key_cookie cookie = {
3905 .error = 0,
3906 };
3907 void *hdr;
3908 struct sk_buff *msg;
3909
56be393f 3910 if (info->attrs[NL80211_ATTR_KEY_IDX]) {
41ade00f 3911 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
56be393f
JM		 3912 if (key_idx > 5 &&
3913 !wiphy_ext_feature_isset(
3914 &rdev->wiphy,
3915 NL80211_EXT_FEATURE_BEACON_PROTECTION))
3916 return -EINVAL;
3917 }
41ade00f 3918
41ade00f
JB		 3919 if (info->attrs[NL80211_ATTR_MAC])
3920 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3921
e31b8213
JB		 3922 pairwise = !!mac_addr;
3923 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
3924 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
7a087e74 3925
e31b8213
JB		 3926 if (kt != NL80211_KEYTYPE_GROUP &&
3927 kt != NL80211_KEYTYPE_PAIRWISE)
3928 return -EINVAL;
3929 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
3930 }
3931
4c476991
JB		 3932 if (!rdev->ops->get_key)
3933 return -EOPNOTSUPP;
41ade00f 3934
0fa7b391
JB		 3935 if (!pairwise && mac_addr && !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
3936 return -ENOENT;
3937
fd2120ca 3938 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 3939 if (!msg)
3940 return -ENOMEM;
41ade00f 3941
15e47304 3942 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 3943 NL80211_CMD_NEW_KEY);
cb35fba3 3944 if (!hdr)
9fe271af 3945 goto nla_put_failure;
41ade00f
JB		 3946
3947 cookie.msg = msg;
b9454e83 3948 cookie.idx = key_idx;
41ade00f 3949
9360ffd1
DM		 3950 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3951 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
3952 goto nla_put_failure;
3953 if (mac_addr &&
3954 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
3955 goto nla_put_failure;
41ade00f 3956
e35e4d28
HG		 3957 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
3958 get_key_callback);
41ade00f
JB		 3959
3960 if (err)
6c95e2a2 3961 goto free_msg;
41ade00f
JB		 3962
3963 if (cookie.error)
3964 goto nla_put_failure;
3965
3966 genlmsg_end(msg, hdr);
4c476991 3967 return genlmsg_reply(msg, info);
41ade00f
JB		 3968
3969 nla_put_failure:
3970 err = -ENOBUFS;
6c95e2a2 3971 free_msg:
41ade00f 3972 nlmsg_free(msg);
41ade00f
JB		 3973 return err;
3974}
3975
3976static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
3977{
4c476991 3978 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 3979 struct key_parse key;
41ade00f 3980 int err;
4c476991 3981 struct net_device *dev = info->user_ptr[1];
41ade00f 3982
b9454e83
JB		 3983 err = nl80211_parse_key(info, &key);
3984 if (err)
3985 return err;
41ade00f 3986
b9454e83 3987 if (key.idx < 0)
41ade00f
JB		 3988 return -EINVAL;
3989
6cdd3979
AW		 3990 /* Only support setting default key and
3991 * Extended Key ID action NL80211_KEY_SET_TX.
3992 */
56be393f 3993 if (!key.def && !key.defmgmt && !key.defbeacon &&
6cdd3979 3994 !(key.p.mode == NL80211_KEY_SET_TX))
41ade00f
JB		 3995 return -EINVAL;
3996
dbd2fd65 3997 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 3998
dbd2fd65
JB		 3999 if (key.def) {
4000 if (!rdev->ops->set_default_key) {
4001 err = -EOPNOTSUPP;
4002 goto out;
4003 }
41ade00f 4004
dbd2fd65
JB		 4005 err = nl80211_key_allowed(dev->ieee80211_ptr);
4006 if (err)
4007 goto out;
4008
e35e4d28 4009 err = rdev_set_default_key(rdev, dev, key.idx,
dbd2fd65
JB		 4010 key.def_uni, key.def_multi);
4011
4012 if (err)
4013 goto out;
fffd0934 4014
3d23e349 4015#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 4016 dev->ieee80211_ptr->wext.default_key = key.idx;
4017#endif
6cdd3979 4018 } else if (key.defmgmt) {
dbd2fd65
JB		 4019 if (key.def_uni || !key.def_multi) {
4020 err = -EINVAL;
4021 goto out;
4022 }
4023
4024 if (!rdev->ops->set_default_mgmt_key) {
4025 err = -EOPNOTSUPP;
4026 goto out;
4027 }
4028
4029 err = nl80211_key_allowed(dev->ieee80211_ptr);
4030 if (err)
4031 goto out;
4032
e35e4d28 4033 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
dbd2fd65
JB		 4034 if (err)
4035 goto out;
4036
4037#ifdef CONFIG_CFG80211_WEXT
4038 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 4039#endif
56be393f
JM		 4040 } else if (key.defbeacon) {
4041 if (key.def_uni || !key.def_multi) {
4042 err = -EINVAL;
4043 goto out;
4044 }
4045
4046 if (!rdev->ops->set_default_beacon_key) {
4047 err = -EOPNOTSUPP;
4048 goto out;
4049 }
4050
4051 err = nl80211_key_allowed(dev->ieee80211_ptr);
4052 if (err)
4053 goto out;
4054
4055 err = rdev_set_default_beacon_key(rdev, dev, key.idx);
4056 if (err)
4057 goto out;
6cdd3979
AW		 4058 } else if (key.p.mode == NL80211_KEY_SET_TX &&
4059 wiphy_ext_feature_isset(&rdev->wiphy,
4060 NL80211_EXT_FEATURE_EXT_KEY_ID)) {
4061 u8 *mac_addr = NULL;
4062
4063 if (info->attrs[NL80211_ATTR_MAC])
4064 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4065
4066 if (!mac_addr || key.idx < 0 || key.idx > 1) {
4067 err = -EINVAL;
4068 goto out;
4069 }
dbd2fd65 4070
6cdd3979
AW		 4071 err = rdev_add_key(rdev, dev, key.idx,
4072 NL80211_KEYTYPE_PAIRWISE,
4073 mac_addr, &key.p);
4074 } else {
4075 err = -EINVAL;
4076 }
dbd2fd65 4077 out:
fffd0934 4078 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4079
41ade00f
JB		 4080 return err;
4081}
4082
4083static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
4084{
4c476991 4085 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 4086 int err;
4c476991 4087 struct net_device *dev = info->user_ptr[1];
b9454e83 4088 struct key_parse key;
e31b8213 4089 const u8 *mac_addr = NULL;
41ade00f 4090
b9454e83
JB		 4091 err = nl80211_parse_key(info, &key);
4092 if (err)
4093 return err;
41ade00f 4094
f8af764b
JM		 4095 if (!key.p.key) {
4096 GENL_SET_ERR_MSG(info, "no key");
41ade00f 4097 return -EINVAL;
f8af764b 4098 }
41ade00f 4099
41ade00f
JB		 4100 if (info->attrs[NL80211_ATTR_MAC])
4101 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4102
e31b8213
JB		 4103 if (key.type == -1) {
4104 if (mac_addr)
4105 key.type = NL80211_KEYTYPE_PAIRWISE;
4106 else
4107 key.type = NL80211_KEYTYPE_GROUP;
4108 }
4109
4110 /* for now */
4111 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
f8af764b
JM		 4112 key.type != NL80211_KEYTYPE_GROUP) {
4113 GENL_SET_ERR_MSG(info, "key type not pairwise or group");
e31b8213 4114 return -EINVAL;
f8af764b 4115 }
e31b8213 4116
14f34e36
GG		 4117 if (key.type == NL80211_KEYTYPE_GROUP &&
4118 info->attrs[NL80211_ATTR_VLAN_ID])
4119 key.p.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
4120
4c476991
JB		 4121 if (!rdev->ops->add_key)
4122 return -EOPNOTSUPP;
25e47c18 4123
e31b8213
JB		 4124 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
4125 key.type == NL80211_KEYTYPE_PAIRWISE,
f8af764b
JM		 4126 mac_addr)) {
4127 GENL_SET_ERR_MSG(info, "key setting validation failed");
4c476991 4128 return -EINVAL;
f8af764b 4129 }
41ade00f 4130
fffd0934
JB		 4131 wdev_lock(dev->ieee80211_ptr);
4132 err = nl80211_key_allowed(dev->ieee80211_ptr);
f8af764b
JM		 4133 if (err)
4134 GENL_SET_ERR_MSG(info, "key not allowed");
4135 if (!err) {
e35e4d28
HG		 4136 err = rdev_add_key(rdev, dev, key.idx,
4137 key.type == NL80211_KEYTYPE_PAIRWISE,
4138 mac_addr, &key.p);
f8af764b
JM		 4139 if (err)
4140 GENL_SET_ERR_MSG(info, "key addition failed");
4141 }
fffd0934 4142 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4143
41ade00f
JB		 4144 return err;
4145}
4146
4147static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
4148{
4c476991 4149 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4150 int err;
4c476991 4151 struct net_device *dev = info->user_ptr[1];
41ade00f 4152 u8 *mac_addr = NULL;
b9454e83 4153 struct key_parse key;
41ade00f 4154
b9454e83
JB		 4155 err = nl80211_parse_key(info, &key);
4156 if (err)
4157 return err;
41ade00f
JB		 4158
4159 if (info->attrs[NL80211_ATTR_MAC])
4160 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4161
e31b8213
JB		 4162 if (key.type == -1) {
4163 if (mac_addr)
4164 key.type = NL80211_KEYTYPE_PAIRWISE;
4165 else
4166 key.type = NL80211_KEYTYPE_GROUP;
4167 }
4168
4169 /* for now */
4170 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
4171 key.type != NL80211_KEYTYPE_GROUP)
4172 return -EINVAL;
4173
4c476991
JB		 4174 if (!rdev->ops->del_key)
4175 return -EOPNOTSUPP;
41ade00f 4176
fffd0934
JB		 4177 wdev_lock(dev->ieee80211_ptr);
4178 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213 4179
0fa7b391 4180 if (key.type == NL80211_KEYTYPE_GROUP && mac_addr &&
e31b8213
JB		 4181 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4182 err = -ENOENT;
4183
fffd0934 4184 if (!err)
e35e4d28
HG		 4185 err = rdev_del_key(rdev, dev, key.idx,
4186 key.type == NL80211_KEYTYPE_PAIRWISE,
4187 mac_addr);
41ade00f 4188
3d23e349 4189#ifdef CONFIG_CFG80211_WEXT
08645126 4190 if (!err) {
b9454e83 4191 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 4192 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 4193 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 4194 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
4195 }
4196#endif
fffd0934 4197 wdev_unlock(dev->ieee80211_ptr);
08645126 4198
41ade00f
JB		 4199 return err;
4200}
4201
77765eaf
VT		 4202/* This function returns an error or the number of nested attributes */
4203static int validate_acl_mac_addrs(struct nlattr *nl_attr)
4204{
4205 struct nlattr *attr;
4206 int n_entries = 0, tmp;
4207
4208 nla_for_each_nested(attr, nl_attr, tmp) {
4209 if (nla_len(attr) != ETH_ALEN)
4210 return -EINVAL;
4211
4212 n_entries++;
4213 }
4214
4215 return n_entries;
4216}
4217
4218/*
4219 * This function parses ACL information and allocates memory for ACL data.
4220 * On successful return, the calling function is responsible to free the
4221 * ACL buffer returned by this function.
4222 */
4223static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
4224 struct genl_info *info)
4225{
4226 enum nl80211_acl_policy acl_policy;
4227 struct nlattr *attr;
4228 struct cfg80211_acl_data *acl;
4229 int i = 0, n_entries, tmp;
4230
4231 if (!wiphy->max_acl_mac_addrs)
4232 return ERR_PTR(-EOPNOTSUPP);
4233
4234 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
4235 return ERR_PTR(-EINVAL);
4236
4237 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
4238 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
4239 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
4240 return ERR_PTR(-EINVAL);
4241
4242 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
4243 return ERR_PTR(-EINVAL);
4244
4245 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
4246 if (n_entries < 0)
4247 return ERR_PTR(n_entries);
4248
4249 if (n_entries > wiphy->max_acl_mac_addrs)
4250 return ERR_PTR(-ENOTSUPP);
4251
391d132c 4252 acl = kzalloc(struct_size(acl, mac_addrs, n_entries), GFP_KERNEL);
77765eaf
VT		 4253 if (!acl)
4254 return ERR_PTR(-ENOMEM);
4255
4256 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
4257 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
4258 i++;
4259 }
4260
4261 acl->n_acl_entries = n_entries;
4262 acl->acl_policy = acl_policy;
4263
4264 return acl;
4265}
4266
4267static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
4268{
4269 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4270 struct net_device *dev = info->user_ptr[1];
4271 struct cfg80211_acl_data *acl;
4272 int err;
4273
4274 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4275 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4276 return -EOPNOTSUPP;
4277
4278 if (!dev->ieee80211_ptr->beacon_interval)
4279 return -EINVAL;
4280
4281 acl = parse_acl_data(&rdev->wiphy, info);
4282 if (IS_ERR(acl))
4283 return PTR_ERR(acl);
4284
4285 err = rdev_set_mac_acl(rdev, dev, acl);
4286
4287 kfree(acl);
4288
4289 return err;
4290}
4291
a7c7fbff
PK		 4292static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4293 u8 *rates, u8 rates_len)
4294{
4295 u8 i;
4296 u32 mask = 0;
4297
4298 for (i = 0; i < rates_len; i++) {
4299 int rate = (rates[i] & 0x7f) * 5;
4300 int ridx;
4301
4302 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
4303 struct ieee80211_rate *srate =
4304 &sband->bitrates[ridx];
4305 if (rate == srate->bitrate) {
4306 mask |= 1 << ridx;
4307 break;
4308 }
4309 }
4310 if (ridx == sband->n_bitrates)
4311 return 0; /* rate not found */
4312 }
4313
4314 return mask;
4315}
4316
4317static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
4318 u8 *rates, u8 rates_len,
4319 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
4320{
4321 u8 i;
4322
4323 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
4324
4325 for (i = 0; i < rates_len; i++) {
4326 int ridx, rbit;
4327
4328 ridx = rates[i] / 8;
4329 rbit = BIT(rates[i] % 8);
4330
4331 /* check validity */
4332 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
4333 return false;
4334
4335 /* check availability */
30fe6d50 4336 ridx = array_index_nospec(ridx, IEEE80211_HT_MCS_MASK_LEN);
a7c7fbff
PK		 4337 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
4338 mcs[ridx] |= rbit;
4339 else
4340 return false;
4341 }
4342
4343 return true;
4344}
4345
4346static u16 vht_mcs_map_to_mcs_mask(u8 vht_mcs_map)
4347{
4348 u16 mcs_mask = 0;
4349
4350 switch (vht_mcs_map) {
4351 case IEEE80211_VHT_MCS_NOT_SUPPORTED:
4352 break;
4353 case IEEE80211_VHT_MCS_SUPPORT_0_7:
4354 mcs_mask = 0x00FF;
4355 break;
4356 case IEEE80211_VHT_MCS_SUPPORT_0_8:
4357 mcs_mask = 0x01FF;
4358 break;
4359 case IEEE80211_VHT_MCS_SUPPORT_0_9:
4360 mcs_mask = 0x03FF;
4361 break;
4362 default:
4363 break;
4364 }
4365
4366 return mcs_mask;
4367}
4368
4369static void vht_build_mcs_mask(u16 vht_mcs_map,
4370 u16 vht_mcs_mask[NL80211_VHT_NSS_MAX])
4371{
4372 u8 nss;
4373
4374 for (nss = 0; nss < NL80211_VHT_NSS_MAX; nss++) {
4375 vht_mcs_mask[nss] = vht_mcs_map_to_mcs_mask(vht_mcs_map & 0x03);
4376 vht_mcs_map >>= 2;
4377 }
4378}
4379
4380static bool vht_set_mcs_mask(struct ieee80211_supported_band *sband,
4381 struct nl80211_txrate_vht *txrate,
4382 u16 mcs[NL80211_VHT_NSS_MAX])
4383{
4384 u16 tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4385 u16 tx_mcs_mask[NL80211_VHT_NSS_MAX] = {};
4386 u8 i;
4387
4388 if (!sband->vht_cap.vht_supported)
4389 return false;
4390
4391 memset(mcs, 0, sizeof(u16) * NL80211_VHT_NSS_MAX);
4392
4393 /* Build vht_mcs_mask from VHT capabilities */
4394 vht_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4395
4396 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
4397 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4398 mcs[i] = txrate->mcs[i];
4399 else
4400 return false;
4401 }
4402
4403 return true;
4404}
4405
4406static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
4407 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
4408 .len = NL80211_MAX_SUPP_RATES },
4409 [NL80211_TXRATE_HT] = { .type = NLA_BINARY,
4410 .len = NL80211_MAX_SUPP_HT_RATES },
180aa422
JB		 4411 [NL80211_TXRATE_VHT] = {
4412 .type = NLA_EXACT_LEN_WARN,
4413 .len = sizeof(struct nl80211_txrate_vht),
4414 },
a7c7fbff
PK		 4415 [NL80211_TXRATE_GI] = { .type = NLA_U8 },
4416};
4417
4418static int nl80211_parse_tx_bitrate_mask(struct genl_info *info,
4419 struct cfg80211_bitrate_mask *mask)
4420{
4421 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4422 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4423 int rem, i;
4424 struct nlattr *tx_rates;
4425 struct ieee80211_supported_band *sband;
4426 u16 vht_tx_mcs_map;
4427
4428 memset(mask, 0, sizeof(*mask));
4429 /* Default to all rates enabled */
4430 for (i = 0; i < NUM_NL80211_BANDS; i++) {
4431 sband = rdev->wiphy.bands[i];
4432
4433 if (!sband)
4434 continue;
4435
4436 mask->control[i].legacy = (1 << sband->n_bitrates) - 1;
4437 memcpy(mask->control[i].ht_mcs,
4438 sband->ht_cap.mcs.rx_mask,
4439 sizeof(mask->control[i].ht_mcs));
4440
4441 if (!sband->vht_cap.vht_supported)
4442 continue;
4443
4444 vht_tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4445 vht_build_mcs_mask(vht_tx_mcs_map, mask->control[i].vht_mcs);
4446 }
4447
4448 /* if no rates are given set it back to the defaults */
4449 if (!info->attrs[NL80211_ATTR_TX_RATES])
4450 goto out;
4451
4452 /* The nested attribute uses enum nl80211_band as the index. This maps
4453 * directly to the enum nl80211_band values used in cfg80211.
4454 */
4455 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
4456 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem) {
4457 enum nl80211_band band = nla_type(tx_rates);
4458 int err;
4459
4460 if (band < 0 || band >= NUM_NL80211_BANDS)
4461 return -EINVAL;
4462 sband = rdev->wiphy.bands[band];
4463 if (sband == NULL)
4464 return -EINVAL;
8cb08174
JB		 4465 err = nla_parse_nested_deprecated(tb, NL80211_TXRATE_MAX,
4466 tx_rates,
4467 nl80211_txattr_policy,
4468 info->extack);
a7c7fbff
PK		 4469 if (err)
4470 return err;
4471 if (tb[NL80211_TXRATE_LEGACY]) {
4472 mask->control[band].legacy = rateset_to_mask(
4473 sband,
4474 nla_data(tb[NL80211_TXRATE_LEGACY]),
4475 nla_len(tb[NL80211_TXRATE_LEGACY]));
4476 if ((mask->control[band].legacy == 0) &&
4477 nla_len(tb[NL80211_TXRATE_LEGACY]))
4478 return -EINVAL;
4479 }
4480 if (tb[NL80211_TXRATE_HT]) {
4481 if (!ht_rateset_to_mask(
4482 sband,
4483 nla_data(tb[NL80211_TXRATE_HT]),
4484 nla_len(tb[NL80211_TXRATE_HT]),
4485 mask->control[band].ht_mcs))
4486 return -EINVAL;
4487 }
4488 if (tb[NL80211_TXRATE_VHT]) {
4489 if (!vht_set_mcs_mask(
4490 sband,
4491 nla_data(tb[NL80211_TXRATE_VHT]),
4492 mask->control[band].vht_mcs))
4493 return -EINVAL;
4494 }
4495 if (tb[NL80211_TXRATE_GI]) {
4496 mask->control[band].gi =
4497 nla_get_u8(tb[NL80211_TXRATE_GI]);
4498 if (mask->control[band].gi > NL80211_TXRATE_FORCE_LGI)
4499 return -EINVAL;
4500 }
4501
4502 if (mask->control[band].legacy == 0) {
4503 /* don't allow empty legacy rates if HT or VHT
4504 * are not even supported.
4505 */
4506 if (!(rdev->wiphy.bands[band]->ht_cap.ht_supported ||
4507 rdev->wiphy.bands[band]->vht_cap.vht_supported))
4508 return -EINVAL;
4509
4510 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
4511 if (mask->control[band].ht_mcs[i])
4512 goto out;
4513
4514 for (i = 0; i < NL80211_VHT_NSS_MAX; i++)
4515 if (mask->control[band].vht_mcs[i])
4516 goto out;
4517
4518 /* legacy and mcs rates may not be both empty */
4519 return -EINVAL;
4520 }
4521 }
4522
4523out:
4524 return 0;
4525}
4526
8564e382
JB		 4527static int validate_beacon_tx_rate(struct cfg80211_registered_device *rdev,
4528 enum nl80211_band band,
4529 struct cfg80211_bitrate_mask *beacon_rate)
a7c7fbff 4530{
8564e382
JB		 4531 u32 count_ht, count_vht, i;
4532 u32 rate = beacon_rate->control[band].legacy;
a7c7fbff
PK		 4533
4534 /* Allow only one rate */
4535 if (hweight32(rate) > 1)
4536 return -EINVAL;
4537
4538 count_ht = 0;
4539 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
8564e382 4540 if (hweight8(beacon_rate->control[band].ht_mcs[i]) > 1) {
a7c7fbff 4541 return -EINVAL;
8564e382 4542 } else if (beacon_rate->control[band].ht_mcs[i]) {
a7c7fbff
PK		 4543 count_ht++;
4544 if (count_ht > 1)
4545 return -EINVAL;
4546 }
4547 if (count_ht && rate)
4548 return -EINVAL;
4549 }
4550
4551 count_vht = 0;
4552 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
8564e382 4553 if (hweight16(beacon_rate->control[band].vht_mcs[i]) > 1) {
a7c7fbff 4554 return -EINVAL;
8564e382 4555 } else if (beacon_rate->control[band].vht_mcs[i]) {
a7c7fbff
PK		 4556 count_vht++;
4557 if (count_vht > 1)
4558 return -EINVAL;
4559 }
4560 if (count_vht && rate)
4561 return -EINVAL;
4562 }
4563
4564 if ((count_ht && count_vht) || (!rate && !count_ht && !count_vht))
4565 return -EINVAL;
4566
8564e382
JB		 4567 if (rate &&
4568 !wiphy_ext_feature_isset(&rdev->wiphy,
4569 NL80211_EXT_FEATURE_BEACON_RATE_LEGACY))
4570 return -EINVAL;
4571 if (count_ht &&
4572 !wiphy_ext_feature_isset(&rdev->wiphy,
4573 NL80211_EXT_FEATURE_BEACON_RATE_HT))
4574 return -EINVAL;
4575 if (count_vht &&
4576 !wiphy_ext_feature_isset(&rdev->wiphy,
4577 NL80211_EXT_FEATURE_BEACON_RATE_VHT))
4578 return -EINVAL;
4579
a7c7fbff
PK		 4580 return 0;
4581}
4582
81e54d08
PKC		 4583static int nl80211_parse_beacon(struct cfg80211_registered_device *rdev,
4584 struct nlattr *attrs[],
8860020e 4585 struct cfg80211_beacon_data *bcn)
ed1b6cc7 4586{
8860020e 4587 bool haveinfo = false;
81e54d08 4588 int err;
ed1b6cc7 4589
8860020e 4590 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 4591
a1193be8
SW		 4592 if (attrs[NL80211_ATTR_BEACON_HEAD]) {
4593 bcn->head = nla_data(attrs[NL80211_ATTR_BEACON_HEAD]);
4594 bcn->head_len = nla_len(attrs[NL80211_ATTR_BEACON_HEAD]);
8860020e
JB		 4595 if (!bcn->head_len)
4596 return -EINVAL;
4597 haveinfo = true;
ed1b6cc7
JB		 4598 }
4599
a1193be8
SW		 4600 if (attrs[NL80211_ATTR_BEACON_TAIL]) {
4601 bcn->tail = nla_data(attrs[NL80211_ATTR_BEACON_TAIL]);
4602 bcn->tail_len = nla_len(attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 4603 haveinfo = true;
ed1b6cc7
JB		 4604 }
4605
4c476991
JB		 4606 if (!haveinfo)
4607 return -EINVAL;
3b85875a 4608
a1193be8
SW		 4609 if (attrs[NL80211_ATTR_IE]) {
4610 bcn->beacon_ies = nla_data(attrs[NL80211_ATTR_IE]);
4611 bcn->beacon_ies_len = nla_len(attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 4612 }
4613
a1193be8 4614 if (attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 4615 bcn->proberesp_ies =
a1193be8 4616 nla_data(attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 4617 bcn->proberesp_ies_len =
a1193be8 4618 nla_len(attrs[NL80211_ATTR_IE_PROBE_RESP]);
9946ecfb
JM		 4619 }
4620
a1193be8 4621 if (attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 4622 bcn->assocresp_ies =
a1193be8 4623 nla_data(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 4624 bcn->assocresp_ies_len =
a1193be8 4625 nla_len(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
9946ecfb
JM		 4626 }
4627
a1193be8
SW		 4628 if (attrs[NL80211_ATTR_PROBE_RESP]) {
4629 bcn->probe_resp = nla_data(attrs[NL80211_ATTR_PROBE_RESP]);
4630 bcn->probe_resp_len = nla_len(attrs[NL80211_ATTR_PROBE_RESP]);
00f740e1
AN		 4631 }
4632
81e54d08
PKC		 4633 if (attrs[NL80211_ATTR_FTM_RESPONDER]) {
4634 struct nlattr *tb[NL80211_FTM_RESP_ATTR_MAX + 1];
4635
8cb08174
JB		 4636 err = nla_parse_nested_deprecated(tb,
4637 NL80211_FTM_RESP_ATTR_MAX,
4638 attrs[NL80211_ATTR_FTM_RESPONDER],
4639 NULL, NULL);
81e54d08
PKC		 4640 if (err)
4641 return err;
4642
4643 if (tb[NL80211_FTM_RESP_ATTR_ENABLED] &&
4644 wiphy_ext_feature_isset(&rdev->wiphy,
4645 NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER))
4646 bcn->ftm_responder = 1;
4647 else
4648 return -EOPNOTSUPP;
4649
4650 if (tb[NL80211_FTM_RESP_ATTR_LCI]) {
4651 bcn->lci = nla_data(tb[NL80211_FTM_RESP_ATTR_LCI]);
4652 bcn->lci_len = nla_len(tb[NL80211_FTM_RESP_ATTR_LCI]);
4653 }
4654
4655 if (tb[NL80211_FTM_RESP_ATTR_CIVICLOC]) {
4656 bcn->civicloc = nla_data(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
4657 bcn->civicloc_len = nla_len(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
4658 }
4659 } else {
4660 bcn->ftm_responder = -1;
4661 }
4662
8860020e
JB		 4663 return 0;
4664}
4665
796e90f4
JC		 4666static int nl80211_parse_he_obss_pd(struct nlattr *attrs,
4667 struct ieee80211_he_obss_pd *he_obss_pd)
4668{
4669 struct nlattr *tb[NL80211_HE_OBSS_PD_ATTR_MAX + 1];
4670 int err;
4671
4672 err = nla_parse_nested(tb, NL80211_HE_OBSS_PD_ATTR_MAX, attrs,
4673 he_obss_pd_policy, NULL);
4674 if (err)
4675 return err;
4676
4677 if (!tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] ||
4678 !tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET])
4679 return -EINVAL;
4680
4681 he_obss_pd->min_offset =
4682 nla_get_u32(tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET]);
4683 he_obss_pd->max_offset =
4684 nla_get_u32(tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET]);
4685
4686 if (he_obss_pd->min_offset >= he_obss_pd->max_offset)
4687 return -EINVAL;
4688
4689 he_obss_pd->enable = true;
4690
4691 return 0;
4692}
4693
5c5e52d1
JC		 4694static int nl80211_parse_he_bss_color(struct nlattr *attrs,
4695 struct cfg80211_he_bss_color *he_bss_color)
4696{
4697 struct nlattr *tb[NL80211_HE_BSS_COLOR_ATTR_MAX + 1];
4698 int err;
4699
4700 err = nla_parse_nested(tb, NL80211_HE_BSS_COLOR_ATTR_MAX, attrs,
4701 he_bss_color_policy, NULL);
4702 if (err)
4703 return err;
4704
4705 if (!tb[NL80211_HE_BSS_COLOR_ATTR_COLOR])
4706 return -EINVAL;
4707
4708 he_bss_color->color =
4709 nla_get_u8(tb[NL80211_HE_BSS_COLOR_ATTR_COLOR]);
4710 he_bss_color->disabled =
4711 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_DISABLED]);
4712 he_bss_color->partial =
4713 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_PARTIAL]);
4714
4715 return 0;
4716}
4717
66cd794e
JB		 4718static void nl80211_check_ap_rate_selectors(struct cfg80211_ap_settings *params,
4719 const u8 *rates)
4720{
4721 int i;
4722
4723 if (!rates)
4724 return;
4725
4726 for (i = 0; i < rates[1]; i++) {
4727 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
4728 params->ht_required = true;
4729 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_VHT_PHY)
4730 params->vht_required = true;
4731 }
4732}
4733
4734/*
4735 * Since the nl80211 API didn't include, from the beginning, attributes about
4736 * HT/VHT requirements/capabilities, we parse them out of the IEs for the
4737 * benefit of drivers that rebuild IEs in the firmware.
4738 */
4739static void nl80211_calculate_ap_params(struct cfg80211_ap_settings *params)
4740{
4741 const struct cfg80211_beacon_data *bcn = &params->beacon;
ba83bfb1
IM		 4742 size_t ies_len = bcn->tail_len;
4743 const u8 *ies = bcn->tail;
66cd794e
JB		 4744 const u8 *rates;
4745 const u8 *cap;
4746
4747 rates = cfg80211_find_ie(WLAN_EID_SUPP_RATES, ies, ies_len);
4748 nl80211_check_ap_rate_selectors(params, rates);
4749
4750 rates = cfg80211_find_ie(WLAN_EID_EXT_SUPP_RATES, ies, ies_len);
4751 nl80211_check_ap_rate_selectors(params, rates);
4752
4753 cap = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, ies, ies_len);
4754 if (cap && cap[1] >= sizeof(*params->ht_cap))
4755 params->ht_cap = (void *)(cap + 2);
4756 cap = cfg80211_find_ie(WLAN_EID_VHT_CAPABILITY, ies, ies_len);
4757 if (cap && cap[1] >= sizeof(*params->vht_cap))
4758 params->vht_cap = (void *)(cap + 2);
244eb9ae
ST		 4759 cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_CAPABILITY, ies, ies_len);
4760 if (cap && cap[1] >= sizeof(*params->he_cap) + 1)
4761 params->he_cap = (void *)(cap + 3);
7e8d6f12
ST		 4762 cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_OPERATION, ies, ies_len);
4763 if (cap && cap[1] >= sizeof(*params->he_oper) + 1)
4764 params->he_oper = (void *)(cap + 3);
66cd794e
JB		 4765}
4766
46c1dd0c
FF		 4767static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
4768 struct cfg80211_ap_settings *params)
4769{
4770 struct wireless_dev *wdev;
4771 bool ret = false;
4772
53873f13 4773 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
46c1dd0c
FF		 4774 if (wdev->iftype != NL80211_IFTYPE_AP &&
4775 wdev->iftype != NL80211_IFTYPE_P2P_GO)
4776 continue;
4777
683b6d3b 4778 if (!wdev->preset_chandef.chan)
46c1dd0c
FF		 4779 continue;
4780
683b6d3b 4781 params->chandef = wdev->preset_chandef;
46c1dd0c
FF		 4782 ret = true;
4783 break;
4784 }
4785
46c1dd0c
FF		 4786 return ret;
4787}
4788
e39e5b5e
JM		 4789static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
4790 enum nl80211_auth_type auth_type,
4791 enum nl80211_commands cmd)
4792{
4793 if (auth_type > NL80211_AUTHTYPE_MAX)
4794 return false;
4795
4796 switch (cmd) {
4797 case NL80211_CMD_AUTHENTICATE:
4798 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
4799 auth_type == NL80211_AUTHTYPE_SAE)
4800 return false;
63181060
JM		 4801 if (!wiphy_ext_feature_isset(&rdev->wiphy,
4802 NL80211_EXT_FEATURE_FILS_STA) &&
4803 (auth_type == NL80211_AUTHTYPE_FILS_SK ||
4804 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
4805 auth_type == NL80211_AUTHTYPE_FILS_PK))
4806 return false;
e39e5b5e
JM		 4807 return true;
4808 case NL80211_CMD_CONNECT:
10773a7c 4809 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
26f7044e
CHH		 4810 !wiphy_ext_feature_isset(&rdev->wiphy,
4811 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10773a7c 4812 auth_type == NL80211_AUTHTYPE_SAE)
a3caf744 4813 return false;
10773a7c 4814
a3caf744
VK		 4815 /* FILS with SK PFS or PK not supported yet */
4816 if (auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
4817 auth_type == NL80211_AUTHTYPE_FILS_PK)
4818 return false;
4819 if (!wiphy_ext_feature_isset(
4820 &rdev->wiphy,
4821 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
4822 auth_type == NL80211_AUTHTYPE_FILS_SK)
4823 return false;
4824 return true;
e39e5b5e
JM		 4825 case NL80211_CMD_START_AP:
4826 /* SAE not supported yet */
4827 if (auth_type == NL80211_AUTHTYPE_SAE)
4828 return false;
63181060
JM		 4829 /* FILS not supported yet */
4830 if (auth_type == NL80211_AUTHTYPE_FILS_SK ||
4831 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
4832 auth_type == NL80211_AUTHTYPE_FILS_PK)
4833 return false;
e39e5b5e
JM		 4834 return true;
4835 default:
4836 return false;
4837 }
4838}
4839
8860020e
JB		 4840static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
4841{
4842 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4843 struct net_device *dev = info->user_ptr[1];
4844 struct wireless_dev *wdev = dev->ieee80211_ptr;
4845 struct cfg80211_ap_settings params;
4846 int err;
4847
4848 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4849 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4850 return -EOPNOTSUPP;
4851
4852 if (!rdev->ops->start_ap)
4853 return -EOPNOTSUPP;
4854
4855 if (wdev->beacon_interval)
4856 return -EALREADY;
4857
4858 memset(&params, 0, sizeof(params));
4859
4860 /* these are required for START_AP */
4861 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
4862 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
4863 !info->attrs[NL80211_ATTR_BEACON_HEAD])
4864 return -EINVAL;
4865
81e54d08 4866 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon);
8860020e
JB		 4867 if (err)
4868 return err;
4869
4870 params.beacon_interval =
4871 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
4872 params.dtim_period =
4873 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
4874
0c317a02
PK		 4875 err = cfg80211_validate_beacon_int(rdev, dev->ieee80211_ptr->iftype,
4876 params.beacon_interval);
8860020e
JB		 4877 if (err)
4878 return err;
4879
4880 /*
4881 * In theory, some of these attributes should be required here
4882 * but since they were not used when the command was originally
4883 * added, keep them optional for old user space programs to let
4884 * them continue to work with drivers that do not need the
4885 * additional information -- drivers must check!
4886 */
4887 if (info->attrs[NL80211_ATTR_SSID]) {
4888 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4889 params.ssid_len =
4890 nla_len(info->attrs[NL80211_ATTR_SSID]);
4891 if (params.ssid_len == 0 ||
4892 params.ssid_len > IEEE80211_MAX_SSID_LEN)
4893 return -EINVAL;
4894 }
4895
ab0d76f6 4896 if (info->attrs[NL80211_ATTR_HIDDEN_SSID])
8860020e
JB		 4897 params.hidden_ssid = nla_get_u32(
4898 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
8860020e
JB		 4899
4900 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
4901
4902 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
4903 params.auth_type = nla_get_u32(
4904 info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 4905 if (!nl80211_valid_auth_type(rdev, params.auth_type,
4906 NL80211_CMD_START_AP))
8860020e
JB		 4907 return -EINVAL;
4908 } else
4909 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
4910
4911 err = nl80211_crypto_settings(rdev, info, &params.crypto,
4912 NL80211_MAX_NR_CIPHER_SUITES);
4913 if (err)
4914 return err;
4915
1b658f11
VT		 4916 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
4917 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
4918 return -EOPNOTSUPP;
4919 params.inactivity_timeout = nla_get_u16(
4920 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
4921 }
4922
53cabad7
JB		 4923 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
4924 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4925 return -EINVAL;
4926 params.p2p_ctwindow =
4927 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 4928 if (params.p2p_ctwindow != 0 &&
4929 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
4930 return -EINVAL;
4931 }
4932
4933 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
4934 u8 tmp;
4935
4936 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4937 return -EINVAL;
4938 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 4939 params.p2p_opp_ps = tmp;
4940 if (params.p2p_opp_ps != 0 &&
4941 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
4942 return -EINVAL;
4943 }
4944
aa430da4 4945 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 4946 err = nl80211_parse_chandef(rdev, info, &params.chandef);
4947 if (err)
4948 return err;
4949 } else if (wdev->preset_chandef.chan) {
4950 params.chandef = wdev->preset_chandef;
46c1dd0c 4951 } else if (!nl80211_get_ap_channel(rdev, &params))
aa430da4
JB		 4952 return -EINVAL;
4953
923b352f
AN		 4954 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
4955 wdev->iftype))
aa430da4
JB		 4956 return -EINVAL;
4957
a7c7fbff
PK		 4958 if (info->attrs[NL80211_ATTR_TX_RATES]) {
4959 err = nl80211_parse_tx_bitrate_mask(info, &params.beacon_rate);
4960 if (err)
4961 return err;
4962
8564e382
JB		 4963 err = validate_beacon_tx_rate(rdev, params.chandef.chan->band,
4964 &params.beacon_rate);
a7c7fbff
PK		 4965 if (err)
4966 return err;
4967 }
4968
18998c38
EP		 4969 if (info->attrs[NL80211_ATTR_SMPS_MODE]) {
4970 params.smps_mode =
4971 nla_get_u8(info->attrs[NL80211_ATTR_SMPS_MODE]);
4972 switch (params.smps_mode) {
4973 case NL80211_SMPS_OFF:
4974 break;
4975 case NL80211_SMPS_STATIC:
4976 if (!(rdev->wiphy.features &
4977 NL80211_FEATURE_STATIC_SMPS))
4978 return -EINVAL;
4979 break;
4980 case NL80211_SMPS_DYNAMIC:
4981 if (!(rdev->wiphy.features &
4982 NL80211_FEATURE_DYNAMIC_SMPS))
4983 return -EINVAL;
4984 break;
4985 default:
4986 return -EINVAL;
4987 }
4988 } else {
4989 params.smps_mode = NL80211_SMPS_OFF;
4990 }
4991
6e8ef842
PK		 4992 params.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
4993 if (params.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ])
4994 return -EOPNOTSUPP;
4995
4baf6bea
OO		 4996 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
4997 params.acl = parse_acl_data(&rdev->wiphy, info);
4998 if (IS_ERR(params.acl))
4999 return PTR_ERR(params.acl);
5000 }
5001
a0de1ca3
JC		 5002 params.twt_responder =
5003 nla_get_flag(info->attrs[NL80211_ATTR_TWT_RESPONDER]);
5004
796e90f4
JC		 5005 if (info->attrs[NL80211_ATTR_HE_OBSS_PD]) {
5006 err = nl80211_parse_he_obss_pd(
5007 info->attrs[NL80211_ATTR_HE_OBSS_PD],
5008 &params.he_obss_pd);
9951ebfc 5009 goto out;
796e90f4
JC		 5010 }
5011
5c5e52d1
JC		 5012 if (info->attrs[NL80211_ATTR_HE_BSS_COLOR]) {
5013 err = nl80211_parse_he_bss_color(
5014 info->attrs[NL80211_ATTR_HE_BSS_COLOR],
5015 &params.he_bss_color);
5016 if (err)
5017 return err;
5018 }
5019
66cd794e
JB		 5020 nl80211_calculate_ap_params(&params);
5021
fe494370
SD		 5022 if (info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])
5023 params.flags |= AP_SETTINGS_EXTERNAL_AUTH_SUPPORT;
5024
c56589ed 5025 wdev_lock(wdev);
e35e4d28 5026 err = rdev_start_ap(rdev, dev, &params);
46c1dd0c 5027 if (!err) {
683b6d3b 5028 wdev->preset_chandef = params.chandef;
8860020e 5029 wdev->beacon_interval = params.beacon_interval;
9e0e2961 5030 wdev->chandef = params.chandef;
06e191e2
AQ		 5031 wdev->ssid_len = params.ssid_len;
5032 memcpy(wdev->ssid, params.ssid, wdev->ssid_len);
466a3061
DK		 5033
5034 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
5035 wdev->conn_owner_nlportid = info->snd_portid;
46c1dd0c 5036 }
c56589ed 5037 wdev_unlock(wdev);
77765eaf 5038
9951ebfc 5039out:
77765eaf
VT		 5040 kfree(params.acl);
5041
56d1893d 5042 return err;
ed1b6cc7
JB		 5043}
5044
8860020e
JB		 5045static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
5046{
5047 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5048 struct net_device *dev = info->user_ptr[1];
5049 struct wireless_dev *wdev = dev->ieee80211_ptr;
5050 struct cfg80211_beacon_data params;
5051 int err;
5052
5053 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5054 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5055 return -EOPNOTSUPP;
5056
5057 if (!rdev->ops->change_beacon)
5058 return -EOPNOTSUPP;
5059
5060 if (!wdev->beacon_interval)
5061 return -EINVAL;
5062
81e54d08 5063 err = nl80211_parse_beacon(rdev, info->attrs, &params);
8860020e
JB		 5064 if (err)
5065 return err;
5066
c56589ed
SW		 5067 wdev_lock(wdev);
5068 err = rdev_change_beacon(rdev, dev, &params);
5069 wdev_unlock(wdev);
5070
5071 return err;
8860020e
JB		 5072}
5073
5074static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 5075{
4c476991
JB		 5076 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5077 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 5078
7c8d5e03 5079 return cfg80211_stop_ap(rdev, dev, false);
ed1b6cc7
JB		 5080}
5081
5727ef1b
JB		 5082static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
5083 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
5084 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
5085 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 5086 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 5087 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 5088 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 5089};
5090
eccb8e8f 5091static int parse_station_flags(struct genl_info *info,
bdd3ae3d 5092 enum nl80211_iftype iftype,
eccb8e8f 5093 struct station_parameters *params)
5727ef1b
JB		 5094{
5095 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 5096 struct nlattr *nla;
5727ef1b
JB		 5097 int flag;
5098
eccb8e8f
JB		 5099 /*
5100 * Try parsing the new attribute first so userspace
5101 * can specify both for older kernels.
5102 */
5103 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
5104 if (nla) {
5105 struct nl80211_sta_flag_update *sta_flags;
5106
5107 sta_flags = nla_data(nla);
5108 params->sta_flags_mask = sta_flags->mask;
5109 params->sta_flags_set = sta_flags->set;
77ee7c89 5110 params->sta_flags_set &= params->sta_flags_mask;
eccb8e8f
JB		 5111 if ((params->sta_flags_mask |
5112 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
5113 return -EINVAL;
5114 return 0;
5115 }
5116
5117 /* if present, parse the old attribute */
5727ef1b 5118
eccb8e8f 5119 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 5120 if (!nla)
5121 return 0;
5122
8cb08174 5123 if (nla_parse_nested_deprecated(flags, NL80211_STA_FLAG_MAX, nla, sta_flags_policy, info->extack))
5727ef1b
JB		 5124 return -EINVAL;
5125
bdd3ae3d
JB		 5126 /*
5127 * Only allow certain flags for interface types so that
5128 * other attributes are silently ignored. Remember that
5129 * this is backward compatibility code with old userspace
5130 * and shouldn't be hit in other cases anyway.
5131 */
5132 switch (iftype) {
5133 case NL80211_IFTYPE_AP:
5134 case NL80211_IFTYPE_AP_VLAN:
5135 case NL80211_IFTYPE_P2P_GO:
5136 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
5137 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
5138 BIT(NL80211_STA_FLAG_WME) |
5139 BIT(NL80211_STA_FLAG_MFP);
5140 break;
5141 case NL80211_IFTYPE_P2P_CLIENT:
5142 case NL80211_IFTYPE_STATION:
5143 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
5144 BIT(NL80211_STA_FLAG_TDLS_PEER);
5145 break;
5146 case NL80211_IFTYPE_MESH_POINT:
5147 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5148 BIT(NL80211_STA_FLAG_MFP) |
5149 BIT(NL80211_STA_FLAG_AUTHORIZED);
5cf3006c 5150 break;
bdd3ae3d
JB		 5151 default:
5152 return -EINVAL;
5153 }
5727ef1b 5154
3383b5a6
JB		 5155 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
5156 if (flags[flag]) {
eccb8e8f 5157 params->sta_flags_set |= (1<<flag);
5727ef1b 5158
3383b5a6
JB		 5159 /* no longer support new API additions in old API */
5160 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
5161 return -EINVAL;
5162 }
5163 }
5164
5727ef1b
JB		 5165 return 0;
5166}
5167
9bb7e0f2 5168bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info, int attr)
c8dcfd8a
FF		 5169{
5170 struct nlattr *rate;
8eb41c8d
VK		 5171 u32 bitrate;
5172 u16 bitrate_compat;
bbf67e45 5173 enum nl80211_rate_info rate_flg;
c8dcfd8a 5174
ae0be8de 5175 rate = nla_nest_start_noflag(msg, attr);
c8dcfd8a 5176 if (!rate)
db9c64cf 5177 return false;
c8dcfd8a
FF		 5178
5179 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
5180 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 5181 /* report 16-bit bitrate only if we can */
5182 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
db9c64cf
JB		 5183 if (bitrate > 0 &&
5184 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
5185 return false;
5186 if (bitrate_compat > 0 &&
5187 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
5188 return false;
5189
b51f3bee
JB		 5190 switch (info->bw) {
5191 case RATE_INFO_BW_5:
5192 rate_flg = NL80211_RATE_INFO_5_MHZ_WIDTH;
5193 break;
5194 case RATE_INFO_BW_10:
5195 rate_flg = NL80211_RATE_INFO_10_MHZ_WIDTH;
5196 break;
5197 default:
5198 WARN_ON(1);
5199 /* fall through */
5200 case RATE_INFO_BW_20:
5201 rate_flg = 0;
5202 break;
5203 case RATE_INFO_BW_40:
5204 rate_flg = NL80211_RATE_INFO_40_MHZ_WIDTH;
5205 break;
5206 case RATE_INFO_BW_80:
5207 rate_flg = NL80211_RATE_INFO_80_MHZ_WIDTH;
5208 break;
5209 case RATE_INFO_BW_160:
5210 rate_flg = NL80211_RATE_INFO_160_MHZ_WIDTH;
5211 break;
c4cbaf79
LC		 5212 case RATE_INFO_BW_HE_RU:
5213 rate_flg = 0;
5214 WARN_ON(!(info->flags & RATE_INFO_FLAGS_HE_MCS));
b51f3bee
JB		 5215 }
5216
5217 if (rate_flg && nla_put_flag(msg, rate_flg))
5218 return false;
5219
db9c64cf
JB		 5220 if (info->flags & RATE_INFO_FLAGS_MCS) {
5221 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
5222 return false;
db9c64cf
JB		 5223 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
5224 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
5225 return false;
5226 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
5227 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
5228 return false;
5229 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
5230 return false;
db9c64cf
JB		 5231 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
5232 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
5233 return false;
c4cbaf79
LC		 5234 } else if (info->flags & RATE_INFO_FLAGS_HE_MCS) {
5235 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_MCS, info->mcs))
5236 return false;
5237 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_NSS, info->nss))
5238 return false;
5239 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_GI, info->he_gi))
5240 return false;
5241 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_DCM, info->he_dcm))
5242 return false;
5243 if (info->bw == RATE_INFO_BW_HE_RU &&
5244 nla_put_u8(msg, NL80211_RATE_INFO_HE_RU_ALLOC,
5245 info->he_ru_alloc))
5246 return false;
db9c64cf 5247 }
c8dcfd8a
FF		 5248
5249 nla_nest_end(msg, rate);
5250 return true;
c8dcfd8a
FF		 5251}
5252
119363c7
FF		 5253static bool nl80211_put_signal(struct sk_buff *msg, u8 mask, s8 *signal,
5254 int id)
5255{
5256 void *attr;
5257 int i = 0;
5258
5259 if (!mask)
5260 return true;
5261
ae0be8de 5262 attr = nla_nest_start_noflag(msg, id);
119363c7
FF		 5263 if (!attr)
5264 return false;
5265
5266 for (i = 0; i < IEEE80211_MAX_CHAINS; i++) {
5267 if (!(mask & BIT(i)))
5268 continue;
5269
5270 if (nla_put_u8(msg, i, signal[i]))
5271 return false;
5272 }
5273
5274 nla_nest_end(msg, attr);
5275
5276 return true;
5277}
5278
cf5ead82
JB		 5279static int nl80211_send_station(struct sk_buff *msg, u32 cmd, u32 portid,
5280 u32 seq, int flags,
66266b3a
JL		 5281 struct cfg80211_registered_device *rdev,
5282 struct net_device *dev,
98b62183 5283 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 5284{
5285 void *hdr;
f4263c98 5286 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 5287
cf5ead82 5288 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
f77bf486
AS		 5289 if (!hdr) {
5290 cfg80211_sinfo_release_content(sinfo);
fd5b74dc 5291 return -1;
f77bf486 5292 }
fd5b74dc 5293
9360ffd1
DM		 5294 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
5295 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
5296 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
5297 goto nla_put_failure;
f5ea9120 5298
ae0be8de 5299 sinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_STA_INFO);
2ec600d6 5300 if (!sinfoattr)
fd5b74dc 5301 goto nla_put_failure;
319090bf
JB		 5302
5303#define PUT_SINFO(attr, memb, type) do { \
d686b920 5304 BUILD_BUG_ON(sizeof(type) == sizeof(u64)); \
397c657a 5305 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
319090bf
JB		 5306 nla_put_ ## type(msg, NL80211_STA_INFO_ ## attr, \
5307 sinfo->memb)) \
5308 goto nla_put_failure; \
5309 } while (0)
d686b920 5310#define PUT_SINFO_U64(attr, memb) do { \
397c657a 5311 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
d686b920
JB		 5312 nla_put_u64_64bit(msg, NL80211_STA_INFO_ ## attr, \
5313 sinfo->memb, NL80211_STA_INFO_PAD)) \
5314 goto nla_put_failure; \
5315 } while (0)
319090bf
JB		 5316
5317 PUT_SINFO(CONNECTED_TIME, connected_time, u32);
5318 PUT_SINFO(INACTIVE_TIME, inactive_time, u32);
6c7a0033 5319 PUT_SINFO_U64(ASSOC_AT_BOOTTIME, assoc_at);
319090bf 5320
397c657a
OE		 5321 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_RX_BYTES) |
5322 BIT_ULL(NL80211_STA_INFO_RX_BYTES64)) &&
9360ffd1 5323 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
42745e03 5324 (u32)sinfo->rx_bytes))
9360ffd1 5325 goto nla_put_failure;
319090bf 5326
397c657a
OE		 5327 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_TX_BYTES) |
5328 BIT_ULL(NL80211_STA_INFO_TX_BYTES64)) &&
9360ffd1 5329 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
42745e03
VK		 5330 (u32)sinfo->tx_bytes))
5331 goto nla_put_failure;
319090bf 5332
d686b920
JB		 5333 PUT_SINFO_U64(RX_BYTES64, rx_bytes);
5334 PUT_SINFO_U64(TX_BYTES64, tx_bytes);
319090bf
JB		 5335 PUT_SINFO(LLID, llid, u16);
5336 PUT_SINFO(PLID, plid, u16);
5337 PUT_SINFO(PLINK_STATE, plink_state, u8);
d686b920 5338 PUT_SINFO_U64(RX_DURATION, rx_duration);
36647055
THJ		 5339 PUT_SINFO_U64(TX_DURATION, tx_duration);
5340
5341 if (wiphy_ext_feature_isset(&rdev->wiphy,
5342 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
5343 PUT_SINFO(AIRTIME_WEIGHT, airtime_weight, u16);
319090bf 5344
66266b3a
JL		 5345 switch (rdev->wiphy.signal_type) {
5346 case CFG80211_SIGNAL_TYPE_MBM:
319090bf
JB		 5347 PUT_SINFO(SIGNAL, signal, u8);
5348 PUT_SINFO(SIGNAL_AVG, signal_avg, u8);
66266b3a
JL		 5349 break;
5350 default:
5351 break;
5352 }
397c657a 5353 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL)) {
119363c7
FF		 5354 if (!nl80211_put_signal(msg, sinfo->chains,
5355 sinfo->chain_signal,
5356 NL80211_STA_INFO_CHAIN_SIGNAL))
5357 goto nla_put_failure;
5358 }
397c657a 5359 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)) {
119363c7
FF		 5360 if (!nl80211_put_signal(msg, sinfo->chains,
5361 sinfo->chain_signal_avg,
5362 NL80211_STA_INFO_CHAIN_SIGNAL_AVG))
5363 goto nla_put_failure;
5364 }
397c657a 5365 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_TX_BITRATE)) {
c8dcfd8a
FF		 5366 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
5367 NL80211_STA_INFO_TX_BITRATE))
5368 goto nla_put_failure;
5369 }
397c657a 5370 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_RX_BITRATE)) {
c8dcfd8a
FF		 5371 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
5372 NL80211_STA_INFO_RX_BITRATE))
420e7fab 5373 goto nla_put_failure;
420e7fab 5374 }
319090bf
JB		 5375
5376 PUT_SINFO(RX_PACKETS, rx_packets, u32);
5377 PUT_SINFO(TX_PACKETS, tx_packets, u32);
5378 PUT_SINFO(TX_RETRIES, tx_retries, u32);
5379 PUT_SINFO(TX_FAILED, tx_failed, u32);
5380 PUT_SINFO(EXPECTED_THROUGHPUT, expected_throughput, u32);
ab60633c 5381 PUT_SINFO(AIRTIME_LINK_METRIC, airtime_link_metric, u32);
319090bf
JB		 5382 PUT_SINFO(BEACON_LOSS, beacon_loss_count, u32);
5383 PUT_SINFO(LOCAL_PM, local_pm, u32);
5384 PUT_SINFO(PEER_PM, peer_pm, u32);
5385 PUT_SINFO(NONPEER_PM, nonpeer_pm, u32);
dbdaee7a 5386 PUT_SINFO(CONNECTED_TO_GATE, connected_to_gate, u8);
319090bf 5387
397c657a 5388 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_BSS_PARAM)) {
ae0be8de
MK		 5389 bss_param = nla_nest_start_noflag(msg,
5390 NL80211_STA_INFO_BSS_PARAM);
f4263c98
PS		 5391 if (!bss_param)
5392 goto nla_put_failure;
5393
9360ffd1
DM		 5394 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
5395 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
5396 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
5397 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
5398 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
5399 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
5400 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
5401 sinfo->bss_param.dtim_period) ||
5402 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
5403 sinfo->bss_param.beacon_interval))
5404 goto nla_put_failure;
f4263c98
PS		 5405
5406 nla_nest_end(msg, bss_param);
5407 }
397c657a 5408 if ((sinfo->filled & BIT_ULL(NL80211_STA_INFO_STA_FLAGS)) &&
9360ffd1
DM		 5409 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
5410 sizeof(struct nl80211_sta_flag_update),
5411 &sinfo->sta_flags))
5412 goto nla_put_failure;
319090bf 5413
d686b920
JB		 5414 PUT_SINFO_U64(T_OFFSET, t_offset);
5415 PUT_SINFO_U64(RX_DROP_MISC, rx_dropped_misc);
5416 PUT_SINFO_U64(BEACON_RX, rx_beacon);
a76b1942 5417 PUT_SINFO(BEACON_SIGNAL_AVG, rx_beacon_signal_avg, u8);
0d4e14a3
AB		 5418 PUT_SINFO(RX_MPDUS, rx_mpdu_count, u32);
5419 PUT_SINFO(FCS_ERROR_COUNT, fcs_err_count, u32);
81d5439d 5420 if (wiphy_ext_feature_isset(&rdev->wiphy,
9c06602b
BP		 5421 NL80211_EXT_FEATURE_ACK_SIGNAL_SUPPORT)) {
5422 PUT_SINFO(ACK_SIGNAL, ack_signal, u8);
5423 PUT_SINFO(ACK_SIGNAL_AVG, avg_ack_signal, s8);
5424 }
319090bf
JB		 5425
5426#undef PUT_SINFO
d686b920 5427#undef PUT_SINFO_U64
6de39808 5428
8689c051 5429 if (sinfo->pertid) {
6de39808
JB		 5430 struct nlattr *tidsattr;
5431 int tid;
5432
ae0be8de
MK		 5433 tidsattr = nla_nest_start_noflag(msg,
5434 NL80211_STA_INFO_TID_STATS);
6de39808
JB		 5435 if (!tidsattr)
5436 goto nla_put_failure;
5437
5438 for (tid = 0; tid < IEEE80211_NUM_TIDS + 1; tid++) {
5439 struct cfg80211_tid_stats *tidstats;
5440 struct nlattr *tidattr;
5441
5442 tidstats = &sinfo->pertid[tid];
5443
5444 if (!tidstats->filled)
5445 continue;
5446
ae0be8de 5447 tidattr = nla_nest_start_noflag(msg, tid + 1);
6de39808
JB		 5448 if (!tidattr)
5449 goto nla_put_failure;
5450
d686b920 5451#define PUT_TIDVAL_U64(attr, memb) do { \
6de39808 5452 if (tidstats->filled & BIT(NL80211_TID_STATS_ ## attr) && \
d686b920
JB		 5453 nla_put_u64_64bit(msg, NL80211_TID_STATS_ ## attr, \
5454 tidstats->memb, NL80211_TID_STATS_PAD)) \
6de39808
JB		 5455 goto nla_put_failure; \
5456 } while (0)
5457
d686b920
JB		 5458 PUT_TIDVAL_U64(RX_MSDU, rx_msdu);
5459 PUT_TIDVAL_U64(TX_MSDU, tx_msdu);
5460 PUT_TIDVAL_U64(TX_MSDU_RETRIES, tx_msdu_retries);
5461 PUT_TIDVAL_U64(TX_MSDU_FAILED, tx_msdu_failed);
6de39808 5462
d686b920 5463#undef PUT_TIDVAL_U64
52539ca8
THJ		 5464 if ((tidstats->filled &
5465 BIT(NL80211_TID_STATS_TXQ_STATS)) &&
5466 !nl80211_put_txq_stats(msg, &tidstats->txq_stats,
5467 NL80211_TID_STATS_TXQ_STATS))
5468 goto nla_put_failure;
5469
6de39808
JB		 5470 nla_nest_end(msg, tidattr);
5471 }
5472
5473 nla_nest_end(msg, tidsattr);
5474 }
5475
2ec600d6 5476 nla_nest_end(msg, sinfoattr);
fd5b74dc 5477
319090bf 5478 if (sinfo->assoc_req_ies_len &&
9360ffd1
DM		 5479 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
5480 sinfo->assoc_req_ies))
5481 goto nla_put_failure;
50d3dfb7 5482
7ea3e110 5483 cfg80211_sinfo_release_content(sinfo);
053c095a
JB		 5484 genlmsg_end(msg, hdr);
5485 return 0;
fd5b74dc
JB		 5486
5487 nla_put_failure:
7ea3e110 5488 cfg80211_sinfo_release_content(sinfo);
bc3ed28c
TG		 5489 genlmsg_cancel(msg, hdr);
5490 return -EMSGSIZE;
fd5b74dc
JB		 5491}
5492
2ec600d6 5493static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 5494 struct netlink_callback *cb)
2ec600d6 5495{
73887fd9 5496 struct station_info sinfo;
1b8ec87a 5497 struct cfg80211_registered_device *rdev;
97990a06 5498 struct wireless_dev *wdev;
2ec600d6 5499 u8 mac_addr[ETH_ALEN];
97990a06 5500 int sta_idx = cb->args[2];
2ec600d6 5501 int err;
2ec600d6 5502
ea90e0dc 5503 rtnl_lock();
5297c65c 5504 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 5505 if (err)
ea90e0dc 5506 goto out_err;
bba95fef 5507
97990a06
JB		 5508 if (!wdev->netdev) {
5509 err = -EINVAL;
5510 goto out_err;
5511 }
5512
1b8ec87a 5513 if (!rdev->ops->dump_station) {
eec60b03 5514 err = -EOPNOTSUPP;
bba95fef
JB		 5515 goto out_err;
5516 }
5517
bba95fef 5518 while (1) {
73887fd9 5519 memset(&sinfo, 0, sizeof(sinfo));
1b8ec87a 5520 err = rdev_dump_station(rdev, wdev->netdev, sta_idx,
73887fd9 5521 mac_addr, &sinfo);
bba95fef
JB		 5522 if (err == -ENOENT)
5523 break;
5524 if (err)
3b85875a 5525 goto out_err;
bba95fef 5526
cf5ead82 5527 if (nl80211_send_station(skb, NL80211_CMD_NEW_STATION,
15e47304 5528 NETLINK_CB(cb->skb).portid,
bba95fef 5529 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1b8ec87a 5530 rdev, wdev->netdev, mac_addr,
73887fd9 5531 &sinfo) < 0)
bba95fef
JB		 5532 goto out;
5533
5534 sta_idx++;
5535 }
5536
bba95fef 5537 out:
97990a06 5538 cb->args[2] = sta_idx;
bba95fef 5539 err = skb->len;
bba95fef 5540 out_err:
ea90e0dc 5541 rtnl_unlock();
bba95fef
JB		 5542
5543 return err;
2ec600d6 5544}
fd5b74dc 5545
5727ef1b
JB		 5546static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
5547{
4c476991
JB		 5548 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5549 struct net_device *dev = info->user_ptr[1];
73887fd9 5550 struct station_info sinfo;
fd5b74dc
JB		 5551 struct sk_buff *msg;
5552 u8 *mac_addr = NULL;
4c476991 5553 int err;
fd5b74dc 5554
73887fd9 5555 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc 5556
73887fd9
JB		 5557 if (!info->attrs[NL80211_ATTR_MAC])
5558 return -EINVAL;
fd5b74dc
JB		 5559
5560 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
5561
73887fd9
JB		 5562 if (!rdev->ops->get_station)
5563 return -EOPNOTSUPP;
3b85875a 5564
73887fd9 5565 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 5566 if (err)
73887fd9 5567 return err;
2ec600d6 5568
fd2120ca 5569 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7ea3e110 5570 if (!msg) {
ba8f566a 5571 cfg80211_sinfo_release_content(&sinfo);
73887fd9 5572 return -ENOMEM;
7ea3e110 5573 }
fd5b74dc 5574
cf5ead82
JB		 5575 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION,
5576 info->snd_portid, info->snd_seq, 0,
73887fd9 5577 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991 5578 nlmsg_free(msg);
73887fd9 5579 return -ENOBUFS;
4c476991 5580 }
3b85875a 5581
73887fd9 5582 return genlmsg_reply(msg, info);
5727ef1b
JB		 5583}
5584
77ee7c89
JB		 5585int cfg80211_check_station_change(struct wiphy *wiphy,
5586 struct station_parameters *params,
5587 enum cfg80211_station_type statype)
5588{
e4208427
AB		 5589 if (params->listen_interval != -1 &&
5590 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89 5591 return -EINVAL;
e4208427 5592
17b94247
AB		 5593 if (params->support_p2p_ps != -1 &&
5594 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
5595 return -EINVAL;
5596
c72e1140 5597 if (params->aid &&
e4208427
AB		 5598 !(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) &&
5599 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89
JB		 5600 return -EINVAL;
5601
5602 /* When you run into this, adjust the code below for the new flag */
5603 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
5604
5605 switch (statype) {
eef941e6
TP		 5606 case CFG80211_STA_MESH_PEER_KERNEL:
5607 case CFG80211_STA_MESH_PEER_USER:
77ee7c89
JB		 5608 /*
5609 * No ignoring the TDLS flag here -- the userspace mesh
5610 * code doesn't have the bug of including TDLS in the
5611 * mask everywhere.
5612 */
5613 if (params->sta_flags_mask &
5614 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5615 BIT(NL80211_STA_FLAG_MFP) |
5616 BIT(NL80211_STA_FLAG_AUTHORIZED)))
5617 return -EINVAL;
5618 break;
5619 case CFG80211_STA_TDLS_PEER_SETUP:
5620 case CFG80211_STA_TDLS_PEER_ACTIVE:
5621 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
5622 return -EINVAL;
5623 /* ignore since it can't change */
5624 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
5625 break;
5626 default:
5627 /* disallow mesh-specific things */
5628 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
5629 return -EINVAL;
5630 if (params->local_pm)
5631 return -EINVAL;
5632 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
5633 return -EINVAL;
5634 }
5635
5636 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
5637 statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
5638 /* TDLS can't be set, ... */
5639 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
5640 return -EINVAL;
5641 /*
5642 * ... but don't bother the driver with it. This works around
5643 * a hostapd/wpa_supplicant issue -- it always includes the
5644 * TLDS_PEER flag in the mask even for AP mode.
5645 */
5646 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
5647 }
5648
47edb11b
AB		 5649 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
5650 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 5651 /* reject other things that can't change */
5652 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
5653 return -EINVAL;
5654 if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
5655 return -EINVAL;
5656 if (params->supported_rates)
5657 return -EINVAL;
c4cbaf79
LC		 5658 if (params->ext_capab || params->ht_capa || params->vht_capa ||
5659 params->he_capa)
77ee7c89
JB		 5660 return -EINVAL;
5661 }
5662
47edb11b
AB		 5663 if (statype != CFG80211_STA_AP_CLIENT &&
5664 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 5665 if (params->vlan)
5666 return -EINVAL;
5667 }
5668
5669 switch (statype) {
5670 case CFG80211_STA_AP_MLME_CLIENT:
5671 /* Use this only for authorizing/unauthorizing a station */
5672 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
5673 return -EOPNOTSUPP;
5674 break;
5675 case CFG80211_STA_AP_CLIENT:
47edb11b 5676 case CFG80211_STA_AP_CLIENT_UNASSOC:
77ee7c89
JB		 5677 /* accept only the listed bits */
5678 if (params->sta_flags_mask &
5679 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
5680 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5681 BIT(NL80211_STA_FLAG_ASSOCIATED) |
5682 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
5683 BIT(NL80211_STA_FLAG_WME) |
5684 BIT(NL80211_STA_FLAG_MFP)))
5685 return -EINVAL;
5686
5687 /* but authenticated/associated only if driver handles it */
5688 if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
5689 params->sta_flags_mask &
5690 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5691 BIT(NL80211_STA_FLAG_ASSOCIATED)))
5692 return -EINVAL;
5693 break;
5694 case CFG80211_STA_IBSS:
5695 case CFG80211_STA_AP_STA:
5696 /* reject any changes other than AUTHORIZED */
5697 if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
5698 return -EINVAL;
5699 break;
5700 case CFG80211_STA_TDLS_PEER_SETUP:
5701 /* reject any changes other than AUTHORIZED or WME */
5702 if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
5703 BIT(NL80211_STA_FLAG_WME)))
5704 return -EINVAL;
5705 /* force (at least) rates when authorizing */
5706 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
5707 !params->supported_rates)
5708 return -EINVAL;
5709 break;
5710 case CFG80211_STA_TDLS_PEER_ACTIVE:
5711 /* reject any changes */
5712 return -EINVAL;
eef941e6 5713 case CFG80211_STA_MESH_PEER_KERNEL:
77ee7c89
JB		 5714 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
5715 return -EINVAL;
5716 break;
eef941e6 5717 case CFG80211_STA_MESH_PEER_USER:
42925040
CYY		 5718 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION &&
5719 params->plink_action != NL80211_PLINK_ACTION_BLOCK)
77ee7c89
JB		 5720 return -EINVAL;
5721 break;
5722 }
5723
06f7c88c
BL		 5724 /*
5725 * Older kernel versions ignored this attribute entirely, so don't
5726 * reject attempts to update it but mark it as unused instead so the
5727 * driver won't look at the data.
5728 */
5729 if (statype != CFG80211_STA_AP_CLIENT_UNASSOC &&
5730 statype != CFG80211_STA_TDLS_PEER_SETUP)
5731 params->opmode_notif_used = false;
5732
77ee7c89
JB		 5733 return 0;
5734}
5735EXPORT_SYMBOL(cfg80211_check_station_change);
5736
5727ef1b 5737/*
c258d2de 5738 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 5739 */
80b99899
JB		 5740static struct net_device *get_vlan(struct genl_info *info,
5741 struct cfg80211_registered_device *rdev)
5727ef1b 5742{
463d0183 5743 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 5744 struct net_device *v;
5745 int ret;
5746
5747 if (!vlanattr)
5748 return NULL;
5749
5750 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
5751 if (!v)
5752 return ERR_PTR(-ENODEV);
5753
5754 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
5755 ret = -EINVAL;
5756 goto error;
5727ef1b 5757 }
80b99899 5758
77ee7c89
JB		 5759 if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
5760 v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5761 v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
5762 ret = -EINVAL;
5763 goto error;
5764 }
5765
80b99899
JB		 5766 if (!netif_running(v)) {
5767 ret = -ENETDOWN;
5768 goto error;
5769 }
5770
5771 return v;
5772 error:
5773 dev_put(v);
5774 return ERR_PTR(ret);
5727ef1b
JB		 5775}
5776
94e860f1
JB		 5777static const struct nla_policy
5778nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] = {
df881293
JM		 5779 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
5780 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
5781};
5782
ff276691
JB		 5783static int nl80211_parse_sta_wme(struct genl_info *info,
5784 struct station_parameters *params)
df881293 5785{
df881293
JM		 5786 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
5787 struct nlattr *nla;
5788 int err;
5789
df881293
JM		 5790 /* parse WME attributes if present */
5791 if (!info->attrs[NL80211_ATTR_STA_WME])
5792 return 0;
5793
5794 nla = info->attrs[NL80211_ATTR_STA_WME];
8cb08174
JB		 5795 err = nla_parse_nested_deprecated(tb, NL80211_STA_WME_MAX, nla,
5796 nl80211_sta_wme_policy,
5797 info->extack);
df881293
JM		 5798 if (err)
5799 return err;
5800
5801 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
5802 params->uapsd_queues = nla_get_u8(
5803 tb[NL80211_STA_WME_UAPSD_QUEUES]);
5804 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
5805 return -EINVAL;
5806
5807 if (tb[NL80211_STA_WME_MAX_SP])
5808 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
5809
5810 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
5811 return -EINVAL;
5812
5813 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
5814
5815 return 0;
5816}
5817
c01fc9ad
SD		 5818static int nl80211_parse_sta_channel_info(struct genl_info *info,
5819 struct station_parameters *params)
5820{
5821 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]) {
5822 params->supported_channels =
5823 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
5824 params->supported_channels_len =
5825 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
5826 /*
5827 * Need to include at least one (first channel, number of
5828 * channels) tuple for each subband, and must have proper
5829 * tuples for the rest of the data as well.
5830 */
5831 if (params->supported_channels_len < 2)
5832 return -EINVAL;
5833 if (params->supported_channels_len % 2)
5834 return -EINVAL;
5835 }
5836
5837 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]) {
5838 params->supported_oper_classes =
5839 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
5840 params->supported_oper_classes_len =
5841 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
5842 /*
5843 * The value of the Length field of the Supported Operating
5844 * Classes element is between 2 and 253.
5845 */
5846 if (params->supported_oper_classes_len < 2 ||
5847 params->supported_oper_classes_len > 253)
5848 return -EINVAL;
5849 }
5850 return 0;
5851}
5852
ff276691
JB		 5853static int nl80211_set_station_tdls(struct genl_info *info,
5854 struct station_parameters *params)
5855{
c01fc9ad 5856 int err;
ff276691 5857 /* Dummy STA entry gets updated once the peer capabilities are known */
5e4b6f56
JM		 5858 if (info->attrs[NL80211_ATTR_PEER_AID])
5859 params->aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
ff276691
JB		 5860 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
5861 params->ht_capa =
5862 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5863 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
5864 params->vht_capa =
5865 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
c4cbaf79
LC		 5866 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
5867 params->he_capa =
5868 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
5869 params->he_capa_len =
5870 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
5871
5872 if (params->he_capa_len < NL80211_HE_MIN_CAPABILITY_LEN)
5873 return -EINVAL;
5874 }
ff276691 5875
c01fc9ad
SD		 5876 err = nl80211_parse_sta_channel_info(info, params);
5877 if (err)
5878 return err;
5879
ff276691
JB		 5880 return nl80211_parse_sta_wme(info, params);
5881}
5882
e96d1cd2
ARN		 5883static int nl80211_parse_sta_txpower_setting(struct genl_info *info,
5884 struct station_parameters *params)
5885{
5886 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5887 int idx;
5888
5889 if (info->attrs[NL80211_ATTR_STA_TX_POWER_SETTING]) {
5890 if (!rdev->ops->set_tx_power ||
5891 !wiphy_ext_feature_isset(&rdev->wiphy,
5892 NL80211_EXT_FEATURE_STA_TX_PWR))
5893 return -EOPNOTSUPP;
5894
5895 idx = NL80211_ATTR_STA_TX_POWER_SETTING;
5896 params->txpwr.type = nla_get_u8(info->attrs[idx]);
5897
5898 if (params->txpwr.type == NL80211_TX_POWER_LIMITED) {
5899 idx = NL80211_ATTR_STA_TX_POWER;
5900
5901 if (info->attrs[idx])
5902 params->txpwr.power =
5903 nla_get_s16(info->attrs[idx]);
5904 else
5905 return -EINVAL;
5906 }
5907 params->sta_modify_mask |= STATION_PARAM_APPLY_STA_TXPOWER;
5908 }
5909
5910 return 0;
5911}
5912
5727ef1b
JB		 5913static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
5914{
4c476991 5915 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 5916 struct net_device *dev = info->user_ptr[1];
5727ef1b 5917 struct station_parameters params;
77ee7c89
JB		 5918 u8 *mac_addr;
5919 int err;
5727ef1b
JB		 5920
5921 memset(&params, 0, sizeof(params));
5922
77ee7c89
JB		 5923 if (!rdev->ops->change_station)
5924 return -EOPNOTSUPP;
5925
e4208427
AB		 5926 /*
5927 * AID and listen_interval properties can be set only for unassociated
5928 * station. Include these parameters here and will check them in
5929 * cfg80211_check_station_change().
5930 */
a9bc31e4
AB		 5931 if (info->attrs[NL80211_ATTR_STA_AID])
5932 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
e4208427 5933
14f34e36
GG		 5934 if (info->attrs[NL80211_ATTR_VLAN_ID])
5935 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
5936
e4208427
AB		 5937 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
5938 params.listen_interval =
5939 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
5940 else
5941 params.listen_interval = -1;
5727ef1b 5942
ab0d76f6
JB		 5943 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS])
5944 params.support_p2p_ps =
5945 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
5946 else
17b94247 5947 params.support_p2p_ps = -1;
17b94247 5948
5727ef1b
JB		 5949 if (!info->attrs[NL80211_ATTR_MAC])
5950 return -EINVAL;
5951
5952 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
5953
5954 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
5955 params.supported_rates =
5956 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
5957 params.supported_rates_len =
5958 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
5959 }
5960
9d62a986
JM		 5961 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
5962 params.capability =
5963 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
5964 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
5965 }
5966
5967 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
5968 params.ext_capab =
5969 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
5970 params.ext_capab_len =
5971 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
5972 }
5973
bdd3ae3d 5974 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 5975 return -EINVAL;
5976
ab0d76f6 5977 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2ec600d6 5978 params.plink_action =
f8bacc21 5979 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2ec600d6 5980
f8bacc21 5981 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
9c3990aa 5982 params.plink_state =
f8bacc21 5983 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
ab0d76f6 5984 if (info->attrs[NL80211_ATTR_MESH_PEER_AID])
7d27a0ba
MH		 5985 params.peer_aid = nla_get_u16(
5986 info->attrs[NL80211_ATTR_MESH_PEER_AID]);
f8bacc21
JB		 5987 params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
5988 }
9c3990aa 5989
ab0d76f6
JB		 5990 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE])
5991 params.local_pm = nla_get_u32(
3b1c5a53
MP		 5992 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
5993
06f7c88c
BL		 5994 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
5995 params.opmode_notif_used = true;
5996 params.opmode_notif =
5997 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
5998 }
5999
36647055
THJ		 6000 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6001 params.airtime_weight =
6002 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6003
6004 if (params.airtime_weight &&
6005 !wiphy_ext_feature_isset(&rdev->wiphy,
6006 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6007 return -EOPNOTSUPP;
6008
e96d1cd2
ARN		 6009 err = nl80211_parse_sta_txpower_setting(info, &params);
6010 if (err)
6011 return err;
6012
77ee7c89
JB		 6013 /* Include parameters for TDLS peer (will check later) */
6014 err = nl80211_set_station_tdls(info, &params);
6015 if (err)
6016 return err;
6017
6018 params.vlan = get_vlan(info, rdev);
6019 if (IS_ERR(params.vlan))
6020 return PTR_ERR(params.vlan);
6021
a97f4424
JB		 6022 switch (dev->ieee80211_ptr->iftype) {
6023 case NL80211_IFTYPE_AP:
6024 case NL80211_IFTYPE_AP_VLAN:
074ac8df 6025 case NL80211_IFTYPE_P2P_GO:
074ac8df 6026 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 6027 case NL80211_IFTYPE_STATION:
267335d6 6028 case NL80211_IFTYPE_ADHOC:
a97f4424 6029 case NL80211_IFTYPE_MESH_POINT:
a97f4424
JB		 6030 break;
6031 default:
77ee7c89
JB		 6032 err = -EOPNOTSUPP;
6033 goto out_put_vlan;
034d655e
JB		 6034 }
6035
77ee7c89 6036 /* driver will call cfg80211_check_station_change() */
e35e4d28 6037 err = rdev_change_station(rdev, dev, mac_addr, &params);
5727ef1b 6038
77ee7c89 6039 out_put_vlan:
5727ef1b
JB		 6040 if (params.vlan)
6041 dev_put(params.vlan);
3b85875a 6042
5727ef1b
JB		 6043 return err;
6044}
6045
6046static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
6047{
4c476991 6048 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 6049 int err;
4c476991 6050 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 6051 struct station_parameters params;
6052 u8 *mac_addr = NULL;
bda95eb1
JB		 6053 u32 auth_assoc = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6054 BIT(NL80211_STA_FLAG_ASSOCIATED);
5727ef1b
JB		 6055
6056 memset(&params, 0, sizeof(params));
6057
984c311b
JB		 6058 if (!rdev->ops->add_station)
6059 return -EOPNOTSUPP;
6060
5727ef1b
JB		 6061 if (!info->attrs[NL80211_ATTR_MAC])
6062 return -EINVAL;
6063
5727ef1b
JB		 6064 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6065 return -EINVAL;
6066
6067 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
6068 return -EINVAL;
6069
5e4b6f56
JM		 6070 if (!info->attrs[NL80211_ATTR_STA_AID] &&
6071 !info->attrs[NL80211_ATTR_PEER_AID])
0e956c13
TLSC		 6072 return -EINVAL;
6073
5727ef1b
JB		 6074 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6075 params.supported_rates =
6076 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6077 params.supported_rates_len =
6078 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6079 params.listen_interval =
6080 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 6081
14f34e36
GG		 6082 if (info->attrs[NL80211_ATTR_VLAN_ID])
6083 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6084
17b94247 6085 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]) {
ab0d76f6
JB		 6086 params.support_p2p_ps =
6087 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
17b94247
AB		 6088 } else {
6089 /*
6090 * if not specified, assume it's supported for P2P GO interface,
6091 * and is NOT supported for AP interface
6092 */
6093 params.support_p2p_ps =
6094 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO;
6095 }
6096
3d124ea2 6097 if (info->attrs[NL80211_ATTR_PEER_AID])
5e4b6f56 6098 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
3d124ea2
JM		 6099 else
6100 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
51b50fbe 6101
9d62a986
JM		 6102 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
6103 params.capability =
6104 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
6105 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
6106 }
6107
6108 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
6109 params.ext_capab =
6110 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6111 params.ext_capab_len =
6112 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6113 }
6114
36aedc90
JM		 6115 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
6116 params.ht_capa =
6117 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 6118
f461be3e
MP		 6119 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
6120 params.vht_capa =
6121 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
6122
c4cbaf79
LC		 6123 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
6124 params.he_capa =
6125 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6126 params.he_capa_len =
6127 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6128
6129 /* max len is validated in nla policy */
6130 if (params.he_capa_len < NL80211_HE_MIN_CAPABILITY_LEN)
6131 return -EINVAL;
6132 }
6133
60f4a7b1
MK		 6134 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
6135 params.opmode_notif_used = true;
6136 params.opmode_notif =
6137 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6138 }
6139
ab0d76f6 6140 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
96b78dff 6141 params.plink_action =
f8bacc21 6142 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
96b78dff 6143
36647055
THJ		 6144 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6145 params.airtime_weight =
6146 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6147
6148 if (params.airtime_weight &&
6149 !wiphy_ext_feature_isset(&rdev->wiphy,
6150 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6151 return -EOPNOTSUPP;
6152
e96d1cd2
ARN		 6153 err = nl80211_parse_sta_txpower_setting(info, &params);
6154 if (err)
6155 return err;
6156
c01fc9ad
SD		 6157 err = nl80211_parse_sta_channel_info(info, &params);
6158 if (err)
6159 return err;
6160
ff276691
JB		 6161 err = nl80211_parse_sta_wme(info, &params);
6162 if (err)
6163 return err;
bdd90d5e 6164
bdd3ae3d 6165 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 6166 return -EINVAL;
6167
496fcc29
JB		 6168 /* HT/VHT requires QoS, but if we don't have that just ignore HT/VHT
6169 * as userspace might just pass through the capabilities from the IEs
6170 * directly, rather than enforcing this restriction and returning an
6171 * error in this case.
6172 */
6173 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME))) {
6174 params.ht_capa = NULL;
6175 params.vht_capa = NULL;
c4cbaf79
LC		 6176
6177 /* HE requires WME */
6178 if (params.he_capa_len)
6179 return -EINVAL;
496fcc29
JB		 6180 }
6181
77ee7c89
JB		 6182 /* When you run into this, adjust the code below for the new flag */
6183 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
6184
bdd90d5e
JB		 6185 switch (dev->ieee80211_ptr->iftype) {
6186 case NL80211_IFTYPE_AP:
6187 case NL80211_IFTYPE_AP_VLAN:
6188 case NL80211_IFTYPE_P2P_GO:
984c311b
JB		 6189 /* ignore WME attributes if iface/sta is not capable */
6190 if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
6191 !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
6192 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
c75786c9 6193
bdd90d5e 6194 /* TDLS peers cannot be added */
3d124ea2
JM		 6195 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
6196 info->attrs[NL80211_ATTR_PEER_AID])
4319e193 6197 return -EINVAL;
bdd90d5e
JB		 6198 /* but don't bother the driver with it */
6199 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 6200
d582cffb
JB		 6201 /* allow authenticated/associated only if driver handles it */
6202 if (!(rdev->wiphy.features &
6203 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
bda95eb1 6204 params.sta_flags_mask & auth_assoc)
d582cffb
JB		 6205 return -EINVAL;
6206
bda95eb1
JB		 6207 /* Older userspace, or userspace wanting to be compatible with
6208 * !NL80211_FEATURE_FULL_AP_CLIENT_STATE, will not set the auth
6209 * and assoc flags in the mask, but assumes the station will be
6210 * added as associated anyway since this was the required driver
6211 * behaviour before NL80211_FEATURE_FULL_AP_CLIENT_STATE was
6212 * introduced.
6213 * In order to not bother drivers with this quirk in the API
6214 * set the flags in both the mask and set for new stations in
6215 * this case.
6216 */
6217 if (!(params.sta_flags_mask & auth_assoc)) {
6218 params.sta_flags_mask |= auth_assoc;
6219 params.sta_flags_set |= auth_assoc;
6220 }
6221
bdd90d5e
JB		 6222 /* must be last in here for error handling */
6223 params.vlan = get_vlan(info, rdev);
6224 if (IS_ERR(params.vlan))
6225 return PTR_ERR(params.vlan);
6226 break;
6227 case NL80211_IFTYPE_MESH_POINT:
984c311b
JB		 6228 /* ignore uAPSD data */
6229 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
6230
d582cffb
JB		 6231 /* associated is disallowed */
6232 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
6233 return -EINVAL;
bdd90d5e 6234 /* TDLS peers cannot be added */
3d124ea2
JM		 6235 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
6236 info->attrs[NL80211_ATTR_PEER_AID])
bdd90d5e
JB		 6237 return -EINVAL;
6238 break;
6239 case NL80211_IFTYPE_STATION:
93d08f0b 6240 case NL80211_IFTYPE_P2P_CLIENT:
984c311b
JB		 6241 /* ignore uAPSD data */
6242 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
6243
77ee7c89
JB		 6244 /* these are disallowed */
6245 if (params.sta_flags_mask &
6246 (BIT(NL80211_STA_FLAG_ASSOCIATED) |
6247 BIT(NL80211_STA_FLAG_AUTHENTICATED)))
d582cffb 6248 return -EINVAL;
bdd90d5e
JB		 6249 /* Only TDLS peers can be added */
6250 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6251 return -EINVAL;
6252 /* Can only add if TDLS ... */
6253 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
6254 return -EOPNOTSUPP;
6255 /* ... with external setup is supported */
6256 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
6257 return -EOPNOTSUPP;
77ee7c89
JB		 6258 /*
6259 * Older wpa_supplicant versions always mark the TDLS peer
6260 * as authorized, but it shouldn't yet be.
6261 */
6262 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
bdd90d5e
JB		 6263 break;
6264 default:
6265 return -EOPNOTSUPP;
c75786c9
EP		 6266 }
6267
bdd90d5e 6268 /* be aware of params.vlan when changing code here */
5727ef1b 6269
e35e4d28 6270 err = rdev_add_station(rdev, dev, mac_addr, &params);
5727ef1b 6271
5727ef1b
JB		 6272 if (params.vlan)
6273 dev_put(params.vlan);
5727ef1b
JB		 6274 return err;
6275}
6276
6277static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
6278{
4c476991
JB		 6279 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6280 struct net_device *dev = info->user_ptr[1];
89c771e5
JM		 6281 struct station_del_parameters params;
6282
6283 memset(&params, 0, sizeof(params));
5727ef1b
JB		 6284
6285 if (info->attrs[NL80211_ATTR_MAC])
89c771e5 6286 params.mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
5727ef1b 6287
e80cf853 6288 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 6289 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 6290 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
edafcf42
NC		 6291 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO &&
6292 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
6293 return -EINVAL;
6294 if (dev->ieee80211_ptr->iftype == NL80211_IFTYPE_ADHOC &&
6295 !wiphy_ext_feature_isset(&rdev->wiphy,
6296 NL80211_EXT_FEATURE_DEL_IBSS_STA))
4c476991 6297 return -EINVAL;
5727ef1b 6298
4c476991
JB		 6299 if (!rdev->ops->del_station)
6300 return -EOPNOTSUPP;
3b85875a 6301
98856866
JM		 6302 if (info->attrs[NL80211_ATTR_MGMT_SUBTYPE]) {
6303 params.subtype =
6304 nla_get_u8(info->attrs[NL80211_ATTR_MGMT_SUBTYPE]);
6305 if (params.subtype != IEEE80211_STYPE_DISASSOC >> 4 &&
6306 params.subtype != IEEE80211_STYPE_DEAUTH >> 4)
6307 return -EINVAL;
6308 } else {
6309 /* Default to Deauthentication frame */
6310 params.subtype = IEEE80211_STYPE_DEAUTH >> 4;
6311 }
6312
6313 if (info->attrs[NL80211_ATTR_REASON_CODE]) {
6314 params.reason_code =
6315 nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
6316 if (params.reason_code == 0)
6317 return -EINVAL; /* 0 is reserved */
6318 } else {
6319 /* Default to reason code 2 */
6320 params.reason_code = WLAN_REASON_PREV_AUTH_NOT_VALID;
6321 }
6322
89c771e5 6323 return rdev_del_station(rdev, dev, &params);
5727ef1b
JB		 6324}
6325
15e47304 6326static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 6327 int flags, struct net_device *dev,
6328 u8 *dst, u8 *next_hop,
6329 struct mpath_info *pinfo)
6330{
6331 void *hdr;
6332 struct nlattr *pinfoattr;
6333
1ef4c850 6334 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_MPATH);
2ec600d6
LCC		 6335 if (!hdr)
6336 return -1;
6337
9360ffd1
DM		 6338 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6339 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
6340 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
6341 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
6342 goto nla_put_failure;
f5ea9120 6343
ae0be8de 6344 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MPATH_INFO);
2ec600d6
LCC		 6345 if (!pinfoattr)
6346 goto nla_put_failure;
9360ffd1
DM		 6347 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
6348 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
6349 pinfo->frame_qlen))
6350 goto nla_put_failure;
6351 if (((pinfo->filled & MPATH_INFO_SN) &&
6352 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
6353 ((pinfo->filled & MPATH_INFO_METRIC) &&
6354 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
6355 pinfo->metric)) ||
6356 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
6357 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
6358 pinfo->exptime)) ||
6359 ((pinfo->filled & MPATH_INFO_FLAGS) &&
6360 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
6361 pinfo->flags)) ||
6362 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
6363 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
6364 pinfo->discovery_timeout)) ||
6365 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
6366 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
cc241636
JH		 6367 pinfo->discovery_retries)) ||
6368 ((pinfo->filled & MPATH_INFO_HOP_COUNT) &&
6369 nla_put_u8(msg, NL80211_MPATH_INFO_HOP_COUNT,
540bbcb9
JH		 6370 pinfo->hop_count)) ||
6371 ((pinfo->filled & MPATH_INFO_PATH_CHANGE) &&
6372 nla_put_u32(msg, NL80211_MPATH_INFO_PATH_CHANGE,
6373 pinfo->path_change_count)))
9360ffd1 6374 goto nla_put_failure;
2ec600d6
LCC		 6375
6376 nla_nest_end(msg, pinfoattr);
6377
053c095a
JB		 6378 genlmsg_end(msg, hdr);
6379 return 0;
2ec600d6
LCC		 6380
6381 nla_put_failure:
bc3ed28c
TG		 6382 genlmsg_cancel(msg, hdr);
6383 return -EMSGSIZE;
2ec600d6
LCC		 6384}
6385
6386static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 6387 struct netlink_callback *cb)
2ec600d6 6388{
2ec600d6 6389 struct mpath_info pinfo;
1b8ec87a 6390 struct cfg80211_registered_device *rdev;
97990a06 6391 struct wireless_dev *wdev;
2ec600d6
LCC		 6392 u8 dst[ETH_ALEN];
6393 u8 next_hop[ETH_ALEN];
97990a06 6394 int path_idx = cb->args[2];
2ec600d6 6395 int err;
2ec600d6 6396
ea90e0dc 6397 rtnl_lock();
5297c65c 6398 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 6399 if (err)
ea90e0dc 6400 goto out_err;
bba95fef 6401
1b8ec87a 6402 if (!rdev->ops->dump_mpath) {
eec60b03 6403 err = -EOPNOTSUPP;
bba95fef
JB		 6404 goto out_err;
6405 }
6406
97990a06 6407 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
eec60b03 6408 err = -EOPNOTSUPP;
0448b5fc 6409 goto out_err;
eec60b03
JM		 6410 }
6411
bba95fef 6412 while (1) {
1b8ec87a 6413 err = rdev_dump_mpath(rdev, wdev->netdev, path_idx, dst,
97990a06 6414 next_hop, &pinfo);
bba95fef 6415 if (err == -ENOENT)
2ec600d6 6416 break;
bba95fef 6417 if (err)
3b85875a 6418 goto out_err;
2ec600d6 6419
15e47304 6420 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef 6421 cb->nlh->nlmsg_seq, NLM_F_MULTI,
97990a06 6422 wdev->netdev, dst, next_hop,
bba95fef
JB		 6423 &pinfo) < 0)
6424 goto out;
2ec600d6 6425
bba95fef 6426 path_idx++;
2ec600d6 6427 }
2ec600d6 6428
bba95fef 6429 out:
97990a06 6430 cb->args[2] = path_idx;
bba95fef 6431 err = skb->len;
bba95fef 6432 out_err:
ea90e0dc 6433 rtnl_unlock();
bba95fef 6434 return err;
2ec600d6
LCC		 6435}
6436
6437static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
6438{
4c476991 6439 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 6440 int err;
4c476991 6441 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6442 struct mpath_info pinfo;
6443 struct sk_buff *msg;
6444 u8 *dst = NULL;
6445 u8 next_hop[ETH_ALEN];
6446
6447 memset(&pinfo, 0, sizeof(pinfo));
6448
6449 if (!info->attrs[NL80211_ATTR_MAC])
6450 return -EINVAL;
6451
6452 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6453
4c476991
JB		 6454 if (!rdev->ops->get_mpath)
6455 return -EOPNOTSUPP;
2ec600d6 6456
4c476991
JB		 6457 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6458 return -EOPNOTSUPP;
eec60b03 6459
e35e4d28 6460 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 6461 if (err)
4c476991 6462 return err;
2ec600d6 6463
fd2120ca 6464 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 6465 if (!msg)
4c476991 6466 return -ENOMEM;
2ec600d6 6467
15e47304 6468 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 6469 dev, dst, next_hop, &pinfo) < 0) {
6470 nlmsg_free(msg);
6471 return -ENOBUFS;
6472 }
3b85875a 6473
4c476991 6474 return genlmsg_reply(msg, info);
2ec600d6
LCC		 6475}
6476
6477static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
6478{
4c476991
JB		 6479 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6480 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6481 u8 *dst = NULL;
6482 u8 *next_hop = NULL;
6483
6484 if (!info->attrs[NL80211_ATTR_MAC])
6485 return -EINVAL;
6486
6487 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
6488 return -EINVAL;
6489
6490 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6491 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
6492
4c476991
JB		 6493 if (!rdev->ops->change_mpath)
6494 return -EOPNOTSUPP;
35a8efe1 6495
4c476991
JB		 6496 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6497 return -EOPNOTSUPP;
2ec600d6 6498
e35e4d28 6499 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 6500}
4c476991 6501
2ec600d6
LCC		 6502static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
6503{
4c476991
JB		 6504 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6505 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6506 u8 *dst = NULL;
6507 u8 *next_hop = NULL;
6508
6509 if (!info->attrs[NL80211_ATTR_MAC])
6510 return -EINVAL;
6511
6512 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
6513 return -EINVAL;
6514
6515 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6516 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
6517
4c476991
JB		 6518 if (!rdev->ops->add_mpath)
6519 return -EOPNOTSUPP;
35a8efe1 6520
4c476991
JB		 6521 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6522 return -EOPNOTSUPP;
2ec600d6 6523
e35e4d28 6524 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 6525}
6526
6527static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
6528{
4c476991
JB		 6529 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6530 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6531 u8 *dst = NULL;
6532
6533 if (info->attrs[NL80211_ATTR_MAC])
6534 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6535
4c476991
JB		 6536 if (!rdev->ops->del_mpath)
6537 return -EOPNOTSUPP;
3b85875a 6538
b501426c
MP		 6539 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6540 return -EOPNOTSUPP;
6541
e35e4d28 6542 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 6543}
6544
66be7d2b
HR		 6545static int nl80211_get_mpp(struct sk_buff *skb, struct genl_info *info)
6546{
6547 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6548 int err;
6549 struct net_device *dev = info->user_ptr[1];
6550 struct mpath_info pinfo;
6551 struct sk_buff *msg;
6552 u8 *dst = NULL;
6553 u8 mpp[ETH_ALEN];
6554
6555 memset(&pinfo, 0, sizeof(pinfo));
6556
6557 if (!info->attrs[NL80211_ATTR_MAC])
6558 return -EINVAL;
6559
6560 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6561
6562 if (!rdev->ops->get_mpp)
6563 return -EOPNOTSUPP;
6564
6565 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6566 return -EOPNOTSUPP;
6567
6568 err = rdev_get_mpp(rdev, dev, dst, mpp, &pinfo);
6569 if (err)
6570 return err;
6571
6572 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6573 if (!msg)
6574 return -ENOMEM;
6575
6576 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
6577 dev, dst, mpp, &pinfo) < 0) {
6578 nlmsg_free(msg);
6579 return -ENOBUFS;
6580 }
6581
6582 return genlmsg_reply(msg, info);
6583}
6584
6585static int nl80211_dump_mpp(struct sk_buff *skb,
6586 struct netlink_callback *cb)
6587{
6588 struct mpath_info pinfo;
6589 struct cfg80211_registered_device *rdev;
6590 struct wireless_dev *wdev;
6591 u8 dst[ETH_ALEN];
6592 u8 mpp[ETH_ALEN];
6593 int path_idx = cb->args[2];
6594 int err;
6595
ea90e0dc 6596 rtnl_lock();
5297c65c 6597 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
66be7d2b 6598 if (err)
ea90e0dc 6599 goto out_err;
66be7d2b
HR		 6600
6601 if (!rdev->ops->dump_mpp) {
6602 err = -EOPNOTSUPP;
6603 goto out_err;
6604 }
6605
6606 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
6607 err = -EOPNOTSUPP;
6608 goto out_err;
6609 }
6610
6611 while (1) {
6612 err = rdev_dump_mpp(rdev, wdev->netdev, path_idx, dst,
6613 mpp, &pinfo);
6614 if (err == -ENOENT)
6615 break;
6616 if (err)
6617 goto out_err;
6618
6619 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
6620 cb->nlh->nlmsg_seq, NLM_F_MULTI,
6621 wdev->netdev, dst, mpp,
6622 &pinfo) < 0)
6623 goto out;
6624
6625 path_idx++;
6626 }
6627
6628 out:
6629 cb->args[2] = path_idx;
6630 err = skb->len;
6631 out_err:
ea90e0dc 6632 rtnl_unlock();
66be7d2b
HR		 6633 return err;
6634}
6635
9f1ba906
JM		 6636static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
6637{
4c476991
JB		 6638 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6639 struct net_device *dev = info->user_ptr[1];
c56589ed 6640 struct wireless_dev *wdev = dev->ieee80211_ptr;
9f1ba906 6641 struct bss_parameters params;
c56589ed 6642 int err;
9f1ba906
JM		 6643
6644 memset(&params, 0, sizeof(params));
6645 /* default to not changing parameters */
6646 params.use_cts_prot = -1;
6647 params.use_short_preamble = -1;
6648 params.use_short_slot_time = -1;
fd8aaaf3 6649 params.ap_isolate = -1;
50b12f59 6650 params.ht_opmode = -1;
53cabad7
JB		 6651 params.p2p_ctwindow = -1;
6652 params.p2p_opp_ps = -1;
9f1ba906
JM		 6653
6654 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
6655 params.use_cts_prot =
6656 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
6657 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
6658 params.use_short_preamble =
6659 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
6660 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
6661 params.use_short_slot_time =
6662 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 6663 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
6664 params.basic_rates =
6665 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
6666 params.basic_rates_len =
6667 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
6668 }
fd8aaaf3
FF		 6669 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
6670 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 6671 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
6672 params.ht_opmode =
6673 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 6674
53cabad7
JB		 6675 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
6676 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
6677 return -EINVAL;
6678 params.p2p_ctwindow =
ab0d76f6 6679 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 6680 if (params.p2p_ctwindow != 0 &&
6681 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
6682 return -EINVAL;
6683 }
6684
6685 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
6686 u8 tmp;
6687
6688 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
6689 return -EINVAL;
6690 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 6691 params.p2p_opp_ps = tmp;
6692 if (params.p2p_opp_ps &&
6693 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
6694 return -EINVAL;
6695 }
6696
4c476991
JB		 6697 if (!rdev->ops->change_bss)
6698 return -EOPNOTSUPP;
9f1ba906 6699
074ac8df 6700 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 6701 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
6702 return -EOPNOTSUPP;
3b85875a 6703
c56589ed
SW		 6704 wdev_lock(wdev);
6705 err = rdev_change_bss(rdev, dev, &params);
6706 wdev_unlock(wdev);
6707
6708 return err;
9f1ba906
JM		 6709}
6710
b2e1b302
LR		 6711static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
6712{
b2e1b302 6713 char *data = NULL;
05050753 6714 bool is_indoor;
57b5ce07 6715 enum nl80211_user_reg_hint_type user_reg_hint_type;
05050753
I		 6716 u32 owner_nlportid;
6717
80778f18
LR		 6718 /*
6719 * You should only get this when cfg80211 hasn't yet initialized
6720 * completely when built-in to the kernel right between the time
6721 * window between nl80211_init() and regulatory_init(), if that is
6722 * even possible.
6723 */
458f4f9e 6724 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
fe33eb39 6725 return -EINPROGRESS;
80778f18 6726
57b5ce07
LR		 6727 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
6728 user_reg_hint_type =
6729 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
6730 else
6731 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
6732
6733 switch (user_reg_hint_type) {
6734 case NL80211_USER_REG_HINT_USER:
6735 case NL80211_USER_REG_HINT_CELL_BASE:
52616f2b
IP		 6736 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
6737 return -EINVAL;
6738
6739 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
6740 return regulatory_hint_user(data, user_reg_hint_type);
6741 case NL80211_USER_REG_HINT_INDOOR:
05050753
I		 6742 if (info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
6743 owner_nlportid = info->snd_portid;
6744 is_indoor = !!info->attrs[NL80211_ATTR_REG_INDOOR];
6745 } else {
6746 owner_nlportid = 0;
6747 is_indoor = true;
6748 }
6749
6750 return regulatory_hint_indoor(is_indoor, owner_nlportid);
57b5ce07
LR		 6751 default:
6752 return -EINVAL;
6753 }
b2e1b302
LR		 6754}
6755
1ea4ff3e
JB		 6756static int nl80211_reload_regdb(struct sk_buff *skb, struct genl_info *info)
6757{
6758 return reg_reload_regdb();
6759}
6760
24bdd9f4 6761static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 6762 struct genl_info *info)
93da9cc1 6763{
4c476991 6764 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 6765 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 6766 struct wireless_dev *wdev = dev->ieee80211_ptr;
6767 struct mesh_config cur_params;
6768 int err = 0;
93da9cc1 6769 void *hdr;
6770 struct nlattr *pinfoattr;
6771 struct sk_buff *msg;
6772
29cbe68c
JB		 6773 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
6774 return -EOPNOTSUPP;
6775
24bdd9f4 6776 if (!rdev->ops->get_mesh_config)
4c476991 6777 return -EOPNOTSUPP;
f3f92586 6778
29cbe68c
JB		 6779 wdev_lock(wdev);
6780 /* If not connected, get default parameters */
6781 if (!wdev->mesh_id_len)
6782 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
6783 else
e35e4d28 6784 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 6785 wdev_unlock(wdev);
6786
93da9cc1 6787 if (err)
4c476991 6788 return err;
93da9cc1 6789
6790 /* Draw up a netlink message to send back */
fd2120ca 6791 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 6792 if (!msg)
6793 return -ENOMEM;
15e47304 6794 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 6795 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 6796 if (!hdr)
efe1cf0c 6797 goto out;
ae0be8de 6798 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 6799 if (!pinfoattr)
6800 goto nla_put_failure;
9360ffd1
DM		 6801 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6802 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
6803 cur_params.dot11MeshRetryTimeout) ||
6804 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
6805 cur_params.dot11MeshConfirmTimeout) ||
6806 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
6807 cur_params.dot11MeshHoldingTimeout) ||
6808 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
6809 cur_params.dot11MeshMaxPeerLinks) ||
6810 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
6811 cur_params.dot11MeshMaxRetries) ||
6812 nla_put_u8(msg, NL80211_MESHCONF_TTL,
6813 cur_params.dot11MeshTTL) ||
6814 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
6815 cur_params.element_ttl) ||
6816 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
6817 cur_params.auto_open_plinks) ||
7eab0f64
JL		 6818 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
6819 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 6820 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
6821 cur_params.dot11MeshHWMPmaxPREQretries) ||
6822 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
6823 cur_params.path_refresh_time) ||
6824 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
6825 cur_params.min_discovery_timeout) ||
6826 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
6827 cur_params.dot11MeshHWMPactivePathTimeout) ||
6828 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
6829 cur_params.dot11MeshHWMPpreqMinInterval) ||
6830 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
6831 cur_params.dot11MeshHWMPperrMinInterval) ||
6832 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
6833 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
6834 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
6835 cur_params.dot11MeshHWMPRootMode) ||
6836 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
6837 cur_params.dot11MeshHWMPRannInterval) ||
6838 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
6839 cur_params.dot11MeshGateAnnouncementProtocol) ||
6840 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
6841 cur_params.dot11MeshForwarding) ||
335d5349 6842 nla_put_s32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 6843 cur_params.rssi_threshold) ||
6844 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 6845 cur_params.ht_opmode) ||
6846 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
6847 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
6848 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 6849 cur_params.dot11MeshHWMProotInterval) ||
6850 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3b1c5a53
MP		 6851 cur_params.dot11MeshHWMPconfirmationInterval) ||
6852 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
6853 cur_params.power_mode) ||
6854 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
8e7c0538
CT		 6855 cur_params.dot11MeshAwakeWindowDuration) ||
6856 nla_put_u32(msg, NL80211_MESHCONF_PLINK_TIMEOUT,
01d66fbd
BC		 6857 cur_params.plink_timeout) ||
6858 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_GATE,
6859 cur_params.dot11MeshConnectedToMeshGate))
9360ffd1 6860 goto nla_put_failure;
93da9cc1 6861 nla_nest_end(msg, pinfoattr);
6862 genlmsg_end(msg, hdr);
4c476991 6863 return genlmsg_reply(msg, info);
93da9cc1 6864
3b85875a 6865 nla_put_failure:
efe1cf0c 6866 out:
d080e275 6867 nlmsg_free(msg);
4c476991 6868 return -ENOBUFS;
93da9cc1 6869}
6870
ab0d76f6
JB		 6871static const struct nla_policy
6872nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
6873 [NL80211_MESHCONF_RETRY_TIMEOUT] =
6874 NLA_POLICY_RANGE(NLA_U16, 1, 255),
6875 [NL80211_MESHCONF_CONFIRM_TIMEOUT] =
6876 NLA_POLICY_RANGE(NLA_U16, 1, 255),
6877 [NL80211_MESHCONF_HOLDING_TIMEOUT] =
6878 NLA_POLICY_RANGE(NLA_U16, 1, 255),
6879 [NL80211_MESHCONF_MAX_PEER_LINKS] =
6880 NLA_POLICY_RANGE(NLA_U16, 0, 255),
6881 [NL80211_MESHCONF_MAX_RETRIES] = NLA_POLICY_MAX(NLA_U8, 16),
6882 [NL80211_MESHCONF_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
6883 [NL80211_MESHCONF_ELEMENT_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
6884 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = NLA_POLICY_MAX(NLA_U8, 1),
6885 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] =
6886 NLA_POLICY_RANGE(NLA_U32, 1, 255),
93da9cc1 6887 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
6888 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
ab0d76f6 6889 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = NLA_POLICY_MIN(NLA_U16, 1),
93da9cc1 6890 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 6891 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] =
6892 NLA_POLICY_MIN(NLA_U16, 1),
6893 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] =
6894 NLA_POLICY_MIN(NLA_U16, 1),
6895 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] =
6896 NLA_POLICY_MIN(NLA_U16, 1),
6897 [NL80211_MESHCONF_HWMP_ROOTMODE] = NLA_POLICY_MAX(NLA_U8, 4),
6898 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] =
6899 NLA_POLICY_MIN(NLA_U16, 1),
6900 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = NLA_POLICY_MAX(NLA_U8, 1),
6901 [NL80211_MESHCONF_FORWARDING] = NLA_POLICY_MAX(NLA_U8, 1),
6902 [NL80211_MESHCONF_RSSI_THRESHOLD] =
6903 NLA_POLICY_RANGE(NLA_S32, -255, 0),
a4f606ea 6904 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6 6905 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 6906 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] =
6907 NLA_POLICY_MIN(NLA_U16, 1),
6908 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] =
6909 NLA_POLICY_MIN(NLA_U16, 1),
6910 [NL80211_MESHCONF_POWER_MODE] =
6911 NLA_POLICY_RANGE(NLA_U32,
6912 NL80211_MESH_POWER_ACTIVE,
6913 NL80211_MESH_POWER_MAX),
3b1c5a53 6914 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
8e7c0538 6915 [NL80211_MESHCONF_PLINK_TIMEOUT] = { .type = NLA_U32 },
01d66fbd 6916 [NL80211_MESHCONF_CONNECTED_TO_GATE] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
93da9cc1 6917};
6918
c80d545d
JC		 6919static const struct nla_policy
6920 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 6921 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 6922 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
6923 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 6924 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
6e16d90b 6925 [NL80211_MESH_SETUP_AUTH_PROTOCOL] = { .type = NLA_U8 },
bb2798d4 6926 [NL80211_MESH_SETUP_USERSPACE_MPM] = { .type = NLA_FLAG },
3d7af878
JB		 6927 [NL80211_MESH_SETUP_IE] =
6928 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
6929 IEEE80211_MAX_DATA_LEN),
b130e5ce 6930 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 6931};
6932
24bdd9f4 6933static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 6934 struct mesh_config *cfg,
6935 u32 *mask_out)
93da9cc1 6936{
93da9cc1 6937 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 6938 u32 mask = 0;
9757235f 6939 u16 ht_opmode;
93da9cc1 6940
ab0d76f6
JB		 6941#define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, mask, attr, fn) \
6942do { \
6943 if (tb[attr]) { \
6944 cfg->param = fn(tb[attr]); \
6945 mask |= BIT((attr) - 1); \
6946 } \
ea54fba2 6947} while (0)
bd90fdcc 6948
24bdd9f4 6949 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 6950 return -EINVAL;
8cb08174 6951 if (nla_parse_nested_deprecated(tb, NL80211_MESHCONF_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_CONFIG], nl80211_meshconf_params_policy, info->extack))
93da9cc1 6952 return -EINVAL;
6953
93da9cc1 6954 /* This makes sure that there aren't more than 32 mesh config
6955 * parameters (otherwise our bitfield scheme would not work.) */
6956 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
6957
6958 /* Fill in the params struct */
ab0d76f6
JB		 6959 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, mask,
6960 NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
6961 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, mask,
6962 NL80211_MESHCONF_CONFIRM_TIMEOUT,
6963 nla_get_u16);
6964 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, mask,
6965 NL80211_MESHCONF_HOLDING_TIMEOUT,
6966 nla_get_u16);
6967 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, mask,
6968 NL80211_MESHCONF_MAX_PEER_LINKS,
6969 nla_get_u16);
6970 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, mask,
6971 NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
6972 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, mask,
6973 NL80211_MESHCONF_TTL, nla_get_u8);
6974 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, mask,
6975 NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
6976 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, mask,
6977 NL80211_MESHCONF_AUTO_OPEN_PLINKS,
6978 nla_get_u8);
ea54fba2 6979 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
ab0d76f6 6980 mask,
a4f606ea 6981 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
ab0d76f6
JB		 6982 nla_get_u32);
6983 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, mask,
6984 NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
6985 nla_get_u8);
6986 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, mask,
6987 NL80211_MESHCONF_PATH_REFRESH_TIME,
6988 nla_get_u32);
6989 if (mask & BIT(NL80211_MESHCONF_PATH_REFRESH_TIME) &&
6990 (cfg->path_refresh_time < 1 || cfg->path_refresh_time > 65535))
6991 return -EINVAL;
6992 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, mask,
6993 NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
6994 nla_get_u16);
ea54fba2 6995 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
ab0d76f6 6996 mask,
a4f606ea 6997 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
ab0d76f6
JB		 6998 nla_get_u32);
6999 if (mask & BIT(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT) &&
7000 (cfg->dot11MeshHWMPactivePathTimeout < 1 ||
7001 cfg->dot11MeshHWMPactivePathTimeout > 65535))
7002 return -EINVAL;
7003 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval, mask,
ea54fba2 7004 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
ab0d76f6
JB		 7005 nla_get_u16);
7006 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval, mask,
ea54fba2 7007 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
ab0d76f6 7008 nla_get_u16);
93da9cc1 7009 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6 7010 dot11MeshHWMPnetDiameterTraversalTime, mask,
a4f606ea 7011 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
ab0d76f6
JB		 7012 nla_get_u16);
7013 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
7014 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
7015 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
7016 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7017 nla_get_u16);
7018 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshGateAnnouncementProtocol,
ea54fba2 7019 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
ab0d76f6
JB		 7020 nla_get_u8);
7021 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, mask,
7022 NL80211_MESHCONF_FORWARDING, nla_get_u8);
7023 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, mask,
7024 NL80211_MESHCONF_RSSI_THRESHOLD,
7025 nla_get_s32);
01d66fbd
BC		 7026 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToMeshGate, mask,
7027 NL80211_MESHCONF_CONNECTED_TO_GATE,
7028 nla_get_u8);
9757235f
MH		 7029 /*
7030 * Check HT operation mode based on
188f60ab 7031 * IEEE 802.11-2016 9.4.2.57 HT Operation element.
9757235f
MH		 7032 */
7033 if (tb[NL80211_MESHCONF_HT_OPMODE]) {
7034 ht_opmode = nla_get_u16(tb[NL80211_MESHCONF_HT_OPMODE]);
7035
7036 if (ht_opmode & ~(IEEE80211_HT_OP_MODE_PROTECTION |
7037 IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT |
7038 IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT))
7039 return -EINVAL;
7040
188f60ab
BC		 7041 /* NON_HT_STA bit is reserved, but some programs set it */
7042 ht_opmode &= ~IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
9757235f 7043
9757235f 7044 cfg->ht_opmode = ht_opmode;
fd551bac 7045 mask |= (1 << (NL80211_MESHCONF_HT_OPMODE - 1));
9757235f 7046 }
728b19e5 7047 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6
JB		 7048 dot11MeshHWMPactivePathToRootTimeout, mask,
7049 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7050 nla_get_u32);
7051 if (mask & BIT(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT) &&
7052 (cfg->dot11MeshHWMPactivePathToRootTimeout < 1 ||
7053 cfg->dot11MeshHWMPactivePathToRootTimeout > 65535))
7054 return -EINVAL;
7055 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, mask,
7056 NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
7057 nla_get_u16);
7058 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPconfirmationInterval,
7059 mask,
728b19e5 7060 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
ab0d76f6
JB		 7061 nla_get_u16);
7062 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode, mask,
7063 NL80211_MESHCONF_POWER_MODE, nla_get_u32);
7064 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration, mask,
7065 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
7066 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, plink_timeout, mask,
7067 NL80211_MESHCONF_PLINK_TIMEOUT, nla_get_u32);
bd90fdcc
JB		 7068 if (mask_out)
7069 *mask_out = mask;
c80d545d 7070
bd90fdcc
JB		 7071 return 0;
7072
7073#undef FILL_IN_MESH_PARAM_IF_SET
7074}
7075
c80d545d
JC		 7076static int nl80211_parse_mesh_setup(struct genl_info *info,
7077 struct mesh_setup *setup)
7078{
bb2798d4 7079 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c80d545d
JC		 7080 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
7081
7082 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
7083 return -EINVAL;
8cb08174 7084 if (nla_parse_nested_deprecated(tb, NL80211_MESH_SETUP_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_SETUP], nl80211_mesh_setup_params_policy, info->extack))
c80d545d
JC		 7085 return -EINVAL;
7086
d299a1f2
JC		 7087 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
7088 setup->sync_method =
7089 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
7090 IEEE80211_SYNC_METHOD_VENDOR :
7091 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
7092
c80d545d
JC		 7093 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
7094 setup->path_sel_proto =
7095 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
7096 IEEE80211_PATH_PROTOCOL_VENDOR :
7097 IEEE80211_PATH_PROTOCOL_HWMP;
7098
7099 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
7100 setup->path_metric =
7101 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
7102 IEEE80211_PATH_METRIC_VENDOR :
7103 IEEE80211_PATH_METRIC_AIRTIME;
7104
581a8b0f 7105 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 7106 struct nlattr *ieattr =
581a8b0f 7107 tb[NL80211_MESH_SETUP_IE];
581a8b0f
JC		 7108 setup->ie = nla_data(ieattr);
7109 setup->ie_len = nla_len(ieattr);
c80d545d 7110 }
bb2798d4
TP		 7111 if (tb[NL80211_MESH_SETUP_USERSPACE_MPM] &&
7112 !(rdev->wiphy.features & NL80211_FEATURE_USERSPACE_MPM))
7113 return -EINVAL;
7114 setup->user_mpm = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_MPM]);
b130e5ce
JC		 7115 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
7116 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
bb2798d4
TP		 7117 if (setup->is_secure)
7118 setup->user_mpm = true;
c80d545d 7119
6e16d90b
CT		 7120 if (tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]) {
7121 if (!setup->user_mpm)
7122 return -EINVAL;
7123 setup->auth_id =
7124 nla_get_u8(tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]);
7125 }
7126
c80d545d
JC		 7127 return 0;
7128}
7129
24bdd9f4 7130static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 7131 struct genl_info *info)
bd90fdcc
JB		 7132{
7133 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7134 struct net_device *dev = info->user_ptr[1];
29cbe68c 7135 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 7136 struct mesh_config cfg;
7137 u32 mask;
7138 int err;
7139
29cbe68c
JB		 7140 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7141 return -EOPNOTSUPP;
7142
24bdd9f4 7143 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 7144 return -EOPNOTSUPP;
7145
24bdd9f4 7146 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 7147 if (err)
7148 return err;
7149
29cbe68c
JB		 7150 wdev_lock(wdev);
7151 if (!wdev->mesh_id_len)
7152 err = -ENOLINK;
7153
7154 if (!err)
e35e4d28 7155 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 7156
7157 wdev_unlock(wdev);
7158
7159 return err;
93da9cc1 7160}
7161
ad30ca2c
AN		 7162static int nl80211_put_regdom(const struct ieee80211_regdomain *regdom,
7163 struct sk_buff *msg)
f130347c 7164{
f130347c
LR		 7165 struct nlattr *nl_reg_rules;
7166 unsigned int i;
f130347c 7167
458f4f9e
JB		 7168 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
7169 (regdom->dfs_region &&
7170 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
ad30ca2c 7171 goto nla_put_failure;
458f4f9e 7172
ae0be8de 7173 nl_reg_rules = nla_nest_start_noflag(msg, NL80211_ATTR_REG_RULES);
f130347c 7174 if (!nl_reg_rules)
ad30ca2c 7175 goto nla_put_failure;
f130347c 7176
458f4f9e 7177 for (i = 0; i < regdom->n_reg_rules; i++) {
f130347c
LR		 7178 struct nlattr *nl_reg_rule;
7179 const struct ieee80211_reg_rule *reg_rule;
7180 const struct ieee80211_freq_range *freq_range;
7181 const struct ieee80211_power_rule *power_rule;
97524820 7182 unsigned int max_bandwidth_khz;
f130347c 7183
458f4f9e 7184 reg_rule = &regdom->reg_rules[i];
f130347c
LR		 7185 freq_range = &reg_rule->freq_range;
7186 power_rule = &reg_rule->power_rule;
7187
ae0be8de 7188 nl_reg_rule = nla_nest_start_noflag(msg, i);
f130347c 7189 if (!nl_reg_rule)
ad30ca2c 7190 goto nla_put_failure;
f130347c 7191
97524820
JD		 7192 max_bandwidth_khz = freq_range->max_bandwidth_khz;
7193 if (!max_bandwidth_khz)
7194 max_bandwidth_khz = reg_get_max_bandwidth(regdom,
7195 reg_rule);
7196
9360ffd1
DM		 7197 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
7198 reg_rule->flags) ||
7199 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
7200 freq_range->start_freq_khz) ||
7201 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
7202 freq_range->end_freq_khz) ||
7203 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
97524820 7204 max_bandwidth_khz) ||
9360ffd1
DM		 7205 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
7206 power_rule->max_antenna_gain) ||
7207 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
089027e5
JD		 7208 power_rule->max_eirp) ||
7209 nla_put_u32(msg, NL80211_ATTR_DFS_CAC_TIME,
7210 reg_rule->dfs_cac_ms))
ad30ca2c 7211 goto nla_put_failure;
f130347c
LR		 7212
7213 nla_nest_end(msg, nl_reg_rule);
7214 }
7215
7216 nla_nest_end(msg, nl_reg_rules);
ad30ca2c
AN		 7217 return 0;
7218
7219nla_put_failure:
7220 return -EMSGSIZE;
7221}
7222
7223static int nl80211_get_reg_do(struct sk_buff *skb, struct genl_info *info)
7224{
7225 const struct ieee80211_regdomain *regdom = NULL;
7226 struct cfg80211_registered_device *rdev;
7227 struct wiphy *wiphy = NULL;
7228 struct sk_buff *msg;
7229 void *hdr;
7230
7231 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7232 if (!msg)
7233 return -ENOBUFS;
7234
7235 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7236 NL80211_CMD_GET_REG);
7237 if (!hdr)
7238 goto put_failure;
7239
7240 if (info->attrs[NL80211_ATTR_WIPHY]) {
1bdd716c
AN		 7241 bool self_managed;
7242
ad30ca2c
AN		 7243 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
7244 if (IS_ERR(rdev)) {
7245 nlmsg_free(msg);
7246 return PTR_ERR(rdev);
7247 }
7248
7249 wiphy = &rdev->wiphy;
1bdd716c
AN		 7250 self_managed = wiphy->regulatory_flags &
7251 REGULATORY_WIPHY_SELF_MANAGED;
ad30ca2c
AN		 7252 regdom = get_wiphy_regdom(wiphy);
7253
1bdd716c
AN		 7254 /* a self-managed-reg device must have a private regdom */
7255 if (WARN_ON(!regdom && self_managed)) {
7256 nlmsg_free(msg);
7257 return -EINVAL;
7258 }
7259
ad30ca2c
AN		 7260 if (regdom &&
7261 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7262 goto nla_put_failure;
7263 }
7264
7265 if (!wiphy && reg_last_request_cell_base() &&
7266 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
7267 NL80211_USER_REG_HINT_CELL_BASE))
7268 goto nla_put_failure;
7269
7270 rcu_read_lock();
7271
7272 if (!regdom)
7273 regdom = rcu_dereference(cfg80211_regdomain);
7274
7275 if (nl80211_put_regdom(regdom, msg))
7276 goto nla_put_failure_rcu;
7277
7278 rcu_read_unlock();
f130347c
LR		 7279
7280 genlmsg_end(msg, hdr);
5fe231e8 7281 return genlmsg_reply(msg, info);
f130347c 7282
458f4f9e
JB		 7283nla_put_failure_rcu:
7284 rcu_read_unlock();
f130347c 7285nla_put_failure:
efe1cf0c 7286put_failure:
d080e275 7287 nlmsg_free(msg);
5fe231e8 7288 return -EMSGSIZE;
f130347c
LR		 7289}
7290
ad30ca2c
AN		 7291static int nl80211_send_regdom(struct sk_buff *msg, struct netlink_callback *cb,
7292 u32 seq, int flags, struct wiphy *wiphy,
7293 const struct ieee80211_regdomain *regdom)
7294{
7295 void *hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
7296 NL80211_CMD_GET_REG);
7297
7298 if (!hdr)
7299 return -1;
7300
0a833c29 7301 genl_dump_check_consistent(cb, hdr);
ad30ca2c
AN		 7302
7303 if (nl80211_put_regdom(regdom, msg))
7304 goto nla_put_failure;
7305
7306 if (!wiphy && reg_last_request_cell_base() &&
7307 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
7308 NL80211_USER_REG_HINT_CELL_BASE))
7309 goto nla_put_failure;
7310
7311 if (wiphy &&
7312 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7313 goto nla_put_failure;
7314
1bdd716c
AN		 7315 if (wiphy && wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
7316 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
7317 goto nla_put_failure;
7318
053c095a
JB		 7319 genlmsg_end(msg, hdr);
7320 return 0;
ad30ca2c
AN		 7321
7322nla_put_failure:
7323 genlmsg_cancel(msg, hdr);
7324 return -EMSGSIZE;
7325}
7326
7327static int nl80211_get_reg_dump(struct sk_buff *skb,
7328 struct netlink_callback *cb)
7329{
7330 const struct ieee80211_regdomain *regdom = NULL;
7331 struct cfg80211_registered_device *rdev;
7332 int err, reg_idx, start = cb->args[2];
7333
7334 rtnl_lock();
7335
7336 if (cfg80211_regdomain && start == 0) {
7337 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
7338 NLM_F_MULTI, NULL,
7339 rtnl_dereference(cfg80211_regdomain));
7340 if (err < 0)
7341 goto out_err;
7342 }
7343
7344 /* the global regdom is idx 0 */
7345 reg_idx = 1;
7346 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
7347 regdom = get_wiphy_regdom(&rdev->wiphy);
7348 if (!regdom)
7349 continue;
7350
7351 if (++reg_idx <= start)
7352 continue;
7353
7354 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
7355 NLM_F_MULTI, &rdev->wiphy, regdom);
7356 if (err < 0) {
7357 reg_idx--;
7358 break;
7359 }
7360 }
7361
7362 cb->args[2] = reg_idx;
7363 err = skb->len;
7364out_err:
7365 rtnl_unlock();
7366 return err;
7367}
7368
b6863036
JB		 7369#ifdef CONFIG_CFG80211_CRDA_SUPPORT
7370static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
7371 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
7372 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
7373 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
7374 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
7375 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
7376 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
7377 [NL80211_ATTR_DFS_CAC_TIME] = { .type = NLA_U32 },
7378};
7379
7380static int parse_reg_rule(struct nlattr *tb[],
7381 struct ieee80211_reg_rule *reg_rule)
7382{
7383 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
7384 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
7385
7386 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
7387 return -EINVAL;
7388 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
7389 return -EINVAL;
7390 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
7391 return -EINVAL;
7392 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
7393 return -EINVAL;
7394 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
7395 return -EINVAL;
7396
7397 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
7398
7399 freq_range->start_freq_khz =
7400 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
7401 freq_range->end_freq_khz =
7402 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
7403 freq_range->max_bandwidth_khz =
7404 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
7405
7406 power_rule->max_eirp =
7407 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
7408
7409 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
7410 power_rule->max_antenna_gain =
7411 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
7412
7413 if (tb[NL80211_ATTR_DFS_CAC_TIME])
7414 reg_rule->dfs_cac_ms =
7415 nla_get_u32(tb[NL80211_ATTR_DFS_CAC_TIME]);
7416
7417 return 0;
7418}
7419
b2e1b302
LR		 7420static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
7421{
7422 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
7423 struct nlattr *nl_reg_rule;
ea372c54
JB		 7424 char *alpha2;
7425 int rem_reg_rules, r;
391d132c 7426 u32 num_rules = 0, rule_idx = 0;
4c7d3982 7427 enum nl80211_dfs_regions dfs_region = NL80211_DFS_UNSET;
ea372c54 7428 struct ieee80211_regdomain *rd;
b2e1b302
LR		 7429
7430 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7431 return -EINVAL;
7432
7433 if (!info->attrs[NL80211_ATTR_REG_RULES])
7434 return -EINVAL;
7435
7436 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7437
8b60b078
LR		 7438 if (info->attrs[NL80211_ATTR_DFS_REGION])
7439 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
7440
b2e1b302 7441 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 7442 rem_reg_rules) {
b2e1b302
LR		 7443 num_rules++;
7444 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 7445 return -EINVAL;
b2e1b302
LR		 7446 }
7447
e438768f
LR		 7448 if (!reg_is_valid_request(alpha2))
7449 return -EINVAL;
7450
391d132c 7451 rd = kzalloc(struct_size(rd, reg_rules, num_rules), GFP_KERNEL);
6913b49a
JB		 7452 if (!rd)
7453 return -ENOMEM;
b2e1b302
LR		 7454
7455 rd->n_reg_rules = num_rules;
7456 rd->alpha2[0] = alpha2[0];
7457 rd->alpha2[1] = alpha2[1];
7458
8b60b078
LR		 7459 /*
7460 * Disable DFS master mode if the DFS region was
7461 * not supported or known on this kernel.
7462 */
7463 if (reg_supported_dfs_region(dfs_region))
7464 rd->dfs_region = dfs_region;
7465
b2e1b302 7466 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 7467 rem_reg_rules) {
8cb08174
JB		 7468 r = nla_parse_nested_deprecated(tb, NL80211_REG_RULE_ATTR_MAX,
7469 nl_reg_rule, reg_rule_policy,
7470 info->extack);
ae811e21
JB		 7471 if (r)
7472 goto bad_reg;
b2e1b302
LR		 7473 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
7474 if (r)
7475 goto bad_reg;
7476
7477 rule_idx++;
7478
d0e18f83
LR		 7479 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
7480 r = -EINVAL;
b2e1b302 7481 goto bad_reg;
d0e18f83 7482 }
b2e1b302
LR		 7483 }
7484
06627990
JB		 7485 /* set_regdom takes ownership of rd */
7486 return set_regdom(rd, REGD_SOURCE_CRDA);
d2372b31 7487 bad_reg:
b2e1b302 7488 kfree(rd);
d0e18f83 7489 return r;
b2e1b302 7490}
b6863036 7491#endif /* CONFIG_CFG80211_CRDA_SUPPORT */
b2e1b302 7492
83f5e2cf
JB		 7493static int validate_scan_freqs(struct nlattr *freqs)
7494{
7495 struct nlattr *attr1, *attr2;
7496 int n_channels = 0, tmp1, tmp2;
7497
d7f13f74
SD		 7498 nla_for_each_nested(attr1, freqs, tmp1)
7499 if (nla_len(attr1) != sizeof(u32))
7500 return 0;
7501
83f5e2cf
JB		 7502 nla_for_each_nested(attr1, freqs, tmp1) {
7503 n_channels++;
7504 /*
7505 * Some hardware has a limited channel list for
7506 * scanning, and it is pretty much nonsensical
7507 * to scan for a channel twice, so disallow that
7508 * and don't require drivers to check that the
7509 * channel list they get isn't longer than what
7510 * they can scan, as long as they can scan all
7511 * the channels they registered at once.
7512 */
7513 nla_for_each_nested(attr2, freqs, tmp2)
7514 if (attr1 != attr2 &&
7515 nla_get_u32(attr1) == nla_get_u32(attr2))
7516 return 0;
7517 }
7518
7519 return n_channels;
7520}
7521
57fbcce3 7522static bool is_band_valid(struct wiphy *wiphy, enum nl80211_band b)
38de03d2 7523{
57fbcce3 7524 return b < NUM_NL80211_BANDS && wiphy->bands[b];
38de03d2
AS		 7525}
7526
7527static int parse_bss_select(struct nlattr *nla, struct wiphy *wiphy,
7528 struct cfg80211_bss_selection *bss_select)
7529{
7530 struct nlattr *attr[NL80211_BSS_SELECT_ATTR_MAX + 1];
7531 struct nlattr *nest;
7532 int err;
7533 bool found = false;
7534 int i;
7535
7536 /* only process one nested attribute */
7537 nest = nla_data(nla);
7538 if (!nla_ok(nest, nla_len(nest)))
7539 return -EINVAL;
7540
8cb08174
JB		 7541 err = nla_parse_nested_deprecated(attr, NL80211_BSS_SELECT_ATTR_MAX,
7542 nest, nl80211_bss_select_policy,
7543 NULL);
38de03d2
AS		 7544 if (err)
7545 return err;
7546
7547 /* only one attribute may be given */
7548 for (i = 0; i <= NL80211_BSS_SELECT_ATTR_MAX; i++) {
7549 if (attr[i]) {
7550 if (found)
7551 return -EINVAL;
7552 found = true;
7553 }
7554 }
7555
7556 bss_select->behaviour = __NL80211_BSS_SELECT_ATTR_INVALID;
7557
7558 if (attr[NL80211_BSS_SELECT_ATTR_RSSI])
7559 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI;
7560
7561 if (attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]) {
7562 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_BAND_PREF;
7563 bss_select->param.band_pref =
7564 nla_get_u32(attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]);
7565 if (!is_band_valid(wiphy, bss_select->param.band_pref))
7566 return -EINVAL;
7567 }
7568
7569 if (attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]) {
7570 struct nl80211_bss_select_rssi_adjust *adj_param;
7571
7572 adj_param = nla_data(attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]);
7573 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI_ADJUST;
7574 bss_select->param.adjust.band = adj_param->band;
7575 bss_select->param.adjust.delta = adj_param->delta;
7576 if (!is_band_valid(wiphy, bss_select->param.adjust.band))
7577 return -EINVAL;
7578 }
7579
7580 /* user-space did not provide behaviour attribute */
7581 if (bss_select->behaviour == __NL80211_BSS_SELECT_ATTR_INVALID)
7582 return -EINVAL;
7583
7584 if (!(wiphy->bss_select_support & BIT(bss_select->behaviour)))
7585 return -EINVAL;
7586
7587 return 0;
7588}
7589
9bb7e0f2
JB		 7590int nl80211_parse_random_mac(struct nlattr **attrs,
7591 u8 *mac_addr, u8 *mac_addr_mask)
ad2b26ab
JB		 7592{
7593 int i;
7594
7595 if (!attrs[NL80211_ATTR_MAC] && !attrs[NL80211_ATTR_MAC_MASK]) {
d2beae10
JP		 7596 eth_zero_addr(mac_addr);
7597 eth_zero_addr(mac_addr_mask);
ad2b26ab
JB		 7598 mac_addr[0] = 0x2;
7599 mac_addr_mask[0] = 0x3;
7600
7601 return 0;
7602 }
7603
7604 /* need both or none */
7605 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_MAC_MASK])
7606 return -EINVAL;
7607
7608 memcpy(mac_addr, nla_data(attrs[NL80211_ATTR_MAC]), ETH_ALEN);
7609 memcpy(mac_addr_mask, nla_data(attrs[NL80211_ATTR_MAC_MASK]), ETH_ALEN);
7610
7611 /* don't allow or configure an mcast address */
7612 if (!is_multicast_ether_addr(mac_addr_mask) ||
7613 is_multicast_ether_addr(mac_addr))
7614 return -EINVAL;
7615
7616 /*
7617 * allow users to pass a MAC address that has bits set outside
7618 * of the mask, but don't bother drivers with having to deal
7619 * with such bits
7620 */
7621 for (i = 0; i < ETH_ALEN; i++)
7622 mac_addr[i] &= mac_addr_mask[i];
7623
7624 return 0;
7625}
7626
34373d12
VT		 7627static bool cfg80211_off_channel_oper_allowed(struct wireless_dev *wdev)
7628{
7629 ASSERT_WDEV_LOCK(wdev);
7630
7631 if (!cfg80211_beaconing_iface_active(wdev))
7632 return true;
7633
7634 if (!(wdev->chandef.chan->flags & IEEE80211_CHAN_RADAR))
7635 return true;
7636
7637 return regulatory_pre_cac_allowed(wdev->wiphy);
7638}
7639
db0a4ad8
JB		 7640static bool nl80211_check_scan_feat(struct wiphy *wiphy, u32 flags, u32 flag,
7641 enum nl80211_ext_feature_index feat)
7642{
7643 if (!(flags & flag))
7644 return true;
7645 if (wiphy_ext_feature_isset(wiphy, feat))
7646 return true;
7647 return false;
7648}
7649
2d23d073
RZ		 7650static int
7651nl80211_check_scan_flags(struct wiphy *wiphy, struct wireless_dev *wdev,
7652 void *request, struct nlattr **attrs,
7653 bool is_sched_scan)
7654{
7655 u8 *mac_addr, *mac_addr_mask;
7656 u32 *flags;
7657 enum nl80211_feature_flags randomness_flag;
7658
7659 if (!attrs[NL80211_ATTR_SCAN_FLAGS])
7660 return 0;
7661
7662 if (is_sched_scan) {
7663 struct cfg80211_sched_scan_request *req = request;
7664
7665 randomness_flag = wdev ?
7666 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR :
7667 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
7668 flags = &req->flags;
7669 mac_addr = req->mac_addr;
7670 mac_addr_mask = req->mac_addr_mask;
7671 } else {
7672 struct cfg80211_scan_request *req = request;
7673
7674 randomness_flag = NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
7675 flags = &req->flags;
7676 mac_addr = req->mac_addr;
7677 mac_addr_mask = req->mac_addr_mask;
7678 }
7679
7680 *flags = nla_get_u32(attrs[NL80211_ATTR_SCAN_FLAGS]);
7681
5037a009
SD		 7682 if (((*flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
7683 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
db0a4ad8
JB		 7684 !nl80211_check_scan_feat(wiphy, *flags,
7685 NL80211_SCAN_FLAG_LOW_SPAN,
7686 NL80211_EXT_FEATURE_LOW_SPAN_SCAN) ||
7687 !nl80211_check_scan_feat(wiphy, *flags,
7688 NL80211_SCAN_FLAG_LOW_POWER,
7689 NL80211_EXT_FEATURE_LOW_POWER_SCAN) ||
7690 !nl80211_check_scan_feat(wiphy, *flags,
7691 NL80211_SCAN_FLAG_HIGH_ACCURACY,
7692 NL80211_EXT_FEATURE_HIGH_ACCURACY_SCAN) ||
7693 !nl80211_check_scan_feat(wiphy, *flags,
7694 NL80211_SCAN_FLAG_FILS_MAX_CHANNEL_TIME,
7695 NL80211_EXT_FEATURE_FILS_MAX_CHANNEL_TIME) ||
7696 !nl80211_check_scan_feat(wiphy, *flags,
7697 NL80211_SCAN_FLAG_ACCEPT_BCAST_PROBE_RESP,
7698 NL80211_EXT_FEATURE_ACCEPT_BCAST_PROBE_RESP) ||
7699 !nl80211_check_scan_feat(wiphy, *flags,
7700 NL80211_SCAN_FLAG_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION,
7701 NL80211_EXT_FEATURE_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION) ||
7702 !nl80211_check_scan_feat(wiphy, *flags,
7703 NL80211_SCAN_FLAG_OCE_PROBE_REQ_HIGH_TX_RATE,
2e076f19
JB		 7704 NL80211_EXT_FEATURE_OCE_PROBE_REQ_HIGH_TX_RATE) ||
7705 !nl80211_check_scan_feat(wiphy, *flags,
7706 NL80211_SCAN_FLAG_RANDOM_SN,
7707 NL80211_EXT_FEATURE_SCAN_RANDOM_SN) ||
7708 !nl80211_check_scan_feat(wiphy, *flags,
7709 NL80211_SCAN_FLAG_MIN_PREQ_CONTENT,
7710 NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT))
2d23d073
RZ		 7711 return -EOPNOTSUPP;
7712
7713 if (*flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
7714 int err;
7715
7716 if (!(wiphy->features & randomness_flag) ||
7717 (wdev && wdev->current_bss))
7718 return -EOPNOTSUPP;
7719
7720 err = nl80211_parse_random_mac(attrs, mac_addr, mac_addr_mask);
7721 if (err)
7722 return err;
7723 }
7724
2d23d073
RZ		 7725 return 0;
7726}
7727
2a519311
JB		 7728static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
7729{
4c476991 7730 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 7731 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 7732 struct cfg80211_scan_request *request;
2a519311
JB		 7733 struct nlattr *attr;
7734 struct wiphy *wiphy;
83f5e2cf 7735 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 7736 size_t ie_len;
2a519311 7737
79c97e97 7738 wiphy = &rdev->wiphy;
2a519311 7739
cb3b7d87
AB		 7740 if (wdev->iftype == NL80211_IFTYPE_NAN)
7741 return -EOPNOTSUPP;
7742
4c476991
JB		 7743 if (!rdev->ops->scan)
7744 return -EOPNOTSUPP;
2a519311 7745
f9d15d16 7746 if (rdev->scan_req || rdev->scan_msg) {
f9f47529
JB		 7747 err = -EBUSY;
7748 goto unlock;
7749 }
2a519311
JB		 7750
7751 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 7752 n_channels = validate_scan_freqs(
7753 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
f9f47529
JB		 7754 if (!n_channels) {
7755 err = -EINVAL;
7756 goto unlock;
7757 }
2a519311 7758 } else {
bdfbec2d 7759 n_channels = ieee80211_get_num_supported_channels(wiphy);
2a519311
JB		 7760 }
7761
7762 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
7763 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
7764 n_ssids++;
7765
f9f47529
JB		 7766 if (n_ssids > wiphy->max_scan_ssids) {
7767 err = -EINVAL;
7768 goto unlock;
7769 }
2a519311 7770
70692ad2
JM		 7771 if (info->attrs[NL80211_ATTR_IE])
7772 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
7773 else
7774 ie_len = 0;
7775
f9f47529
JB		 7776 if (ie_len > wiphy->max_scan_ie_len) {
7777 err = -EINVAL;
7778 goto unlock;
7779 }
18a83659 7780
2a519311 7781 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 7782 + sizeof(*request->ssids) * n_ssids
7783 + sizeof(*request->channels) * n_channels
70692ad2 7784 + ie_len, GFP_KERNEL);
f9f47529
JB		 7785 if (!request) {
7786 err = -ENOMEM;
7787 goto unlock;
7788 }
2a519311 7789
2a519311 7790 if (n_ssids)
5ba63533 7791 request->ssids = (void *)&request->channels[n_channels];
2a519311 7792 request->n_ssids = n_ssids;
70692ad2 7793 if (ie_len) {
13874e4b 7794 if (n_ssids)
70692ad2
JM		 7795 request->ie = (void *)(request->ssids + n_ssids);
7796 else
7797 request->ie = (void *)(request->channels + n_channels);
7798 }
2a519311 7799
584991dc 7800 i = 0;
2a519311
JB		 7801 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
7802 /* user specified, bail out if channel not found */
2a519311 7803 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 7804 struct ieee80211_channel *chan;
7805
7806 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
7807
7808 if (!chan) {
2a519311
JB		 7809 err = -EINVAL;
7810 goto out_free;
7811 }
584991dc
JB		 7812
7813 /* ignore disabled channels */
7814 if (chan->flags & IEEE80211_CHAN_DISABLED)
7815 continue;
7816
7817 request->channels[i] = chan;
2a519311
JB		 7818 i++;
7819 }
7820 } else {
57fbcce3 7821 enum nl80211_band band;
34850ab2 7822
2a519311 7823 /* all channels */
57fbcce3 7824 for (band = 0; band < NUM_NL80211_BANDS; band++) {
2a519311 7825 int j;
7a087e74 7826
2a519311
JB		 7827 if (!wiphy->bands[band])
7828 continue;
7829 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 7830 struct ieee80211_channel *chan;
7831
7832 chan = &wiphy->bands[band]->channels[j];
7833
7834 if (chan->flags & IEEE80211_CHAN_DISABLED)
7835 continue;
7836
7837 request->channels[i] = chan;
2a519311
JB		 7838 i++;
7839 }
7840 }
7841 }
7842
584991dc
JB		 7843 if (!i) {
7844 err = -EINVAL;
7845 goto out_free;
7846 }
7847
7848 request->n_channels = i;
7849
34373d12
VT		 7850 wdev_lock(wdev);
7851 if (!cfg80211_off_channel_oper_allowed(wdev)) {
7852 struct ieee80211_channel *chan;
7853
7854 if (request->n_channels != 1) {
7855 wdev_unlock(wdev);
7856 err = -EBUSY;
7857 goto out_free;
7858 }
7859
7860 chan = request->channels[0];
7861 if (chan->center_freq != wdev->chandef.chan->center_freq) {
7862 wdev_unlock(wdev);
7863 err = -EBUSY;
7864 goto out_free;
7865 }
7866 }
7867 wdev_unlock(wdev);
7868
2a519311 7869 i = 0;
13874e4b 7870 if (n_ssids) {
2a519311 7871 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 7872 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 7873 err = -EINVAL;
7874 goto out_free;
7875 }
57a27e1d 7876 request->ssids[i].ssid_len = nla_len(attr);
2a519311 7877 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 7878 i++;
7879 }
7880 }
7881
70692ad2
JM		 7882 if (info->attrs[NL80211_ATTR_IE]) {
7883 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 7884 memcpy((void *)request->ie,
7885 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 7886 request->ie_len);
7887 }
7888
57fbcce3 7889 for (i = 0; i < NUM_NL80211_BANDS; i++)
a401d2bb
JB		 7890 if (wiphy->bands[i])
7891 request->rates[i] =
7892 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 7893
7894 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
7895 nla_for_each_nested(attr,
7896 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
7897 tmp) {
57fbcce3 7898 enum nl80211_band band = nla_type(attr);
34850ab2 7899
57fbcce3 7900 if (band < 0 || band >= NUM_NL80211_BANDS) {
34850ab2
JB		 7901 err = -EINVAL;
7902 goto out_free;
7903 }
1b09cd82
FF		 7904
7905 if (!wiphy->bands[band])
7906 continue;
7907
34850ab2
JB		 7908 err = ieee80211_get_ratemask(wiphy->bands[band],
7909 nla_data(attr),
7910 nla_len(attr),
7911 &request->rates[band]);
7912 if (err)
7913 goto out_free;
7914 }
7915 }
7916
1d76250b
AS		 7917 if (info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]) {
7918 if (!wiphy_ext_feature_isset(wiphy,
7919 NL80211_EXT_FEATURE_SET_SCAN_DWELL)) {
7920 err = -EOPNOTSUPP;
7921 goto out_free;
7922 }
7923
7924 request->duration =
7925 nla_get_u16(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]);
7926 request->duration_mandatory =
7927 nla_get_flag(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY]);
7928 }
7929
2d23d073
RZ		 7930 err = nl80211_check_scan_flags(wiphy, wdev, request, info->attrs,
7931 false);
7932 if (err)
7933 goto out_free;
ed473771 7934
e9f935e3
RM		 7935 request->no_cck =
7936 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
7937
2fa436b3
VK		 7938 /* Initial implementation used NL80211_ATTR_MAC to set the specific
7939 * BSSID to scan for. This was problematic because that same attribute
7940 * was already used for another purpose (local random MAC address). The
7941 * NL80211_ATTR_BSSID attribute was added to fix this. For backwards
7942 * compatibility with older userspace components, also use the
7943 * NL80211_ATTR_MAC value here if it can be determined to be used for
7944 * the specific BSSID use case instead of the random MAC address
7945 * (NL80211_ATTR_SCAN_FLAGS is used to enable random MAC address use).
7946 */
7947 if (info->attrs[NL80211_ATTR_BSSID])
7948 memcpy(request->bssid,
7949 nla_data(info->attrs[NL80211_ATTR_BSSID]), ETH_ALEN);
7950 else if (!(request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) &&
7951 info->attrs[NL80211_ATTR_MAC])
818965d3
JM		 7952 memcpy(request->bssid, nla_data(info->attrs[NL80211_ATTR_MAC]),
7953 ETH_ALEN);
7954 else
7955 eth_broadcast_addr(request->bssid);
7956
fd014284 7957 request->wdev = wdev;
79c97e97 7958 request->wiphy = &rdev->wiphy;
15d6030b 7959 request->scan_start = jiffies;
2a519311 7960
79c97e97 7961 rdev->scan_req = request;
e35e4d28 7962 err = rdev_scan(rdev, request);
2a519311 7963
463d0183 7964 if (!err) {
fd014284
JB		 7965 nl80211_send_scan_start(rdev, wdev);
7966 if (wdev->netdev)
7967 dev_hold(wdev->netdev);
4c476991 7968 } else {
2a519311 7969 out_free:
79c97e97 7970 rdev->scan_req = NULL;
2a519311
JB		 7971 kfree(request);
7972 }
3b85875a 7973
f9f47529 7974 unlock:
2a519311
JB		 7975 return err;
7976}
7977
91d3ab46
VK		 7978static int nl80211_abort_scan(struct sk_buff *skb, struct genl_info *info)
7979{
7980 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7981 struct wireless_dev *wdev = info->user_ptr[1];
7982
7983 if (!rdev->ops->abort_scan)
7984 return -EOPNOTSUPP;
7985
7986 if (rdev->scan_msg)
7987 return 0;
7988
7989 if (!rdev->scan_req)
7990 return -ENOENT;
7991
7992 rdev_abort_scan(rdev, wdev);
7993 return 0;
7994}
7995
3b06d277
AS		 7996static int
7997nl80211_parse_sched_scan_plans(struct wiphy *wiphy, int n_plans,
7998 struct cfg80211_sched_scan_request *request,
7999 struct nlattr **attrs)
8000{
8001 int tmp, err, i = 0;
8002 struct nlattr *attr;
8003
8004 if (!attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
8005 u32 interval;
8006
8007 /*
8008 * If scan plans are not specified,
5a88de53 8009 * %NL80211_ATTR_SCHED_SCAN_INTERVAL will be specified. In this
3b06d277
AS		 8010 * case one scan plan will be set with the specified scan
8011 * interval and infinite number of iterations.
8012 */
3b06d277
AS		 8013 interval = nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
8014 if (!interval)
8015 return -EINVAL;
8016
8017 request->scan_plans[0].interval =
8018 DIV_ROUND_UP(interval, MSEC_PER_SEC);
8019 if (!request->scan_plans[0].interval)
8020 return -EINVAL;
8021
8022 if (request->scan_plans[0].interval >
8023 wiphy->max_sched_scan_plan_interval)
8024 request->scan_plans[0].interval =
8025 wiphy->max_sched_scan_plan_interval;
8026
8027 return 0;
8028 }
8029
8030 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp) {
8031 struct nlattr *plan[NL80211_SCHED_SCAN_PLAN_MAX + 1];
8032
8033 if (WARN_ON(i >= n_plans))
8034 return -EINVAL;
8035
8cb08174
JB		 8036 err = nla_parse_nested_deprecated(plan,
8037 NL80211_SCHED_SCAN_PLAN_MAX,
8038 attr, nl80211_plan_policy,
8039 NULL);
3b06d277
AS		 8040 if (err)
8041 return err;
8042
8043 if (!plan[NL80211_SCHED_SCAN_PLAN_INTERVAL])
8044 return -EINVAL;
8045
8046 request->scan_plans[i].interval =
8047 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_INTERVAL]);
8048 if (!request->scan_plans[i].interval ||
8049 request->scan_plans[i].interval >
8050 wiphy->max_sched_scan_plan_interval)
8051 return -EINVAL;
8052
8053 if (plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]) {
8054 request->scan_plans[i].iterations =
8055 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]);
8056 if (!request->scan_plans[i].iterations ||
8057 (request->scan_plans[i].iterations >
8058 wiphy->max_sched_scan_plan_iterations))
8059 return -EINVAL;
8060 } else if (i < n_plans - 1) {
8061 /*
8062 * All scan plans but the last one must specify
8063 * a finite number of iterations
8064 */
8065 return -EINVAL;
8066 }
8067
8068 i++;
8069 }
8070
8071 /*
8072 * The last scan plan must not specify the number of
8073 * iterations, it is supposed to run infinitely
8074 */
8075 if (request->scan_plans[n_plans - 1].iterations)
8076 return -EINVAL;
8077
8078 return 0;
8079}
8080
1e1b11b6 8081static int
8082nl80211_parse_sched_scan_per_band_rssi(struct wiphy *wiphy,
8083 struct cfg80211_match_set *match_sets,
8084 struct nlattr *tb_band_rssi,
8085 s32 rssi_thold)
8086{
8087 struct nlattr *attr;
8088 int i, tmp, ret = 0;
8089
8090 if (!wiphy_ext_feature_isset(wiphy,
8091 NL80211_EXT_FEATURE_SCHED_SCAN_BAND_SPECIFIC_RSSI_THOLD)) {
8092 if (tb_band_rssi)
8093 ret = -EOPNOTSUPP;
8094 else
8095 for (i = 0; i < NUM_NL80211_BANDS; i++)
8096 match_sets->per_band_rssi_thold[i] =
8097 NL80211_SCAN_RSSI_THOLD_OFF;
8098 return ret;
8099 }
8100
8101 for (i = 0; i < NUM_NL80211_BANDS; i++)
8102 match_sets->per_band_rssi_thold[i] = rssi_thold;
8103
8104 nla_for_each_nested(attr, tb_band_rssi, tmp) {
8105 enum nl80211_band band = nla_type(attr);
8106
8107 if (band < 0 || band >= NUM_NL80211_BANDS)
8108 return -EINVAL;
8109
8110 match_sets->per_band_rssi_thold[band] = nla_get_s32(attr);
8111 }
8112
8113 return 0;
8114}
8115
256da02d 8116static struct cfg80211_sched_scan_request *
ad2b26ab 8117nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
aad1e812 8118 struct nlattr **attrs, int max_match_sets)
807f8a8c
LC		 8119{
8120 struct cfg80211_sched_scan_request *request;
807f8a8c 8121 struct nlattr *attr;
3b06d277 8122 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i, n_plans = 0;
57fbcce3 8123 enum nl80211_band band;
807f8a8c 8124 size_t ie_len;
a1f1c21c 8125 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
ea73cbce 8126 s32 default_match_rssi = NL80211_SCAN_RSSI_THOLD_OFF;
807f8a8c 8127
256da02d 8128 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c 8129 n_channels = validate_scan_freqs(
256da02d 8130 attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
807f8a8c 8131 if (!n_channels)
256da02d 8132 return ERR_PTR(-EINVAL);
807f8a8c 8133 } else {
bdfbec2d 8134 n_channels = ieee80211_get_num_supported_channels(wiphy);
807f8a8c
LC		 8135 }
8136
256da02d
LC		 8137 if (attrs[NL80211_ATTR_SCAN_SSIDS])
8138 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c
LC		 8139 tmp)
8140 n_ssids++;
8141
93b6aa69 8142 if (n_ssids > wiphy->max_sched_scan_ssids)
256da02d 8143 return ERR_PTR(-EINVAL);
807f8a8c 8144
ea73cbce
JB		 8145 /*
8146 * First, count the number of 'real' matchsets. Due to an issue with
8147 * the old implementation, matchsets containing only the RSSI attribute
8148 * (NL80211_SCHED_SCAN_MATCH_ATTR_RSSI) are considered as the 'default'
8149 * RSSI for all matchsets, rather than their own matchset for reporting
8150 * all APs with a strong RSSI. This is needed to be compatible with
8151 * older userspace that treated a matchset with only the RSSI as the
8152 * global RSSI for all other matchsets - if there are other matchsets.
8153 */
256da02d 8154 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 8155 nla_for_each_nested(attr,
256da02d 8156 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
ea73cbce
JB		 8157 tmp) {
8158 struct nlattr *rssi;
8159
8cb08174
JB		 8160 err = nla_parse_nested_deprecated(tb,
8161 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
8162 attr,
8163 nl80211_match_policy,
8164 NULL);
ea73cbce 8165 if (err)
256da02d 8166 return ERR_PTR(err);
3007e352
AVS		 8167
8168 /* SSID and BSSID are mutually exclusive */
8169 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] &&
8170 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID])
8171 return ERR_PTR(-EINVAL);
8172
ea73cbce 8173 /* add other standalone attributes here */
3007e352
AVS		 8174 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] ||
8175 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID]) {
ea73cbce
JB		 8176 n_match_sets++;
8177 continue;
8178 }
8179 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
8180 if (rssi)
8181 default_match_rssi = nla_get_s32(rssi);
8182 }
8183 }
8184
8185 /* However, if there's no other matchset, add the RSSI one */
8186 if (!n_match_sets && default_match_rssi != NL80211_SCAN_RSSI_THOLD_OFF)
8187 n_match_sets = 1;
a1f1c21c 8188
aad1e812 8189 if (n_match_sets > max_match_sets)
256da02d 8190 return ERR_PTR(-EINVAL);
a1f1c21c 8191
256da02d
LC		 8192 if (attrs[NL80211_ATTR_IE])
8193 ie_len = nla_len(attrs[NL80211_ATTR_IE]);
807f8a8c
LC		 8194 else
8195 ie_len = 0;
8196
5a865bad 8197 if (ie_len > wiphy->max_sched_scan_ie_len)
256da02d 8198 return ERR_PTR(-EINVAL);
c10841ca 8199
3b06d277
AS		 8200 if (attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
8201 /*
8202 * NL80211_ATTR_SCHED_SCAN_INTERVAL must not be specified since
8203 * each scan plan already specifies its own interval
8204 */
8205 if (attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
8206 return ERR_PTR(-EINVAL);
8207
8208 nla_for_each_nested(attr,
8209 attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp)
8210 n_plans++;
8211 } else {
8212 /*
8213 * The scan interval attribute is kept for backward
8214 * compatibility. If no scan plans are specified and sched scan
8215 * interval is specified, one scan plan will be set with this
8216 * scan interval and infinite number of iterations.
8217 */
8218 if (!attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
8219 return ERR_PTR(-EINVAL);
8220
8221 n_plans = 1;
8222 }
8223
8224 if (!n_plans || n_plans > wiphy->max_sched_scan_plans)
8225 return ERR_PTR(-EINVAL);
8226
bf95ecdb 8227 if (!wiphy_ext_feature_isset(
8228 wiphy, NL80211_EXT_FEATURE_SCHED_SCAN_RELATIVE_RSSI) &&
8229 (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] ||
8230 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]))
8231 return ERR_PTR(-EINVAL);
8232
807f8a8c 8233 request = kzalloc(sizeof(*request)
a2cd43c5 8234 + sizeof(*request->ssids) * n_ssids
a1f1c21c 8235 + sizeof(*request->match_sets) * n_match_sets
3b06d277 8236 + sizeof(*request->scan_plans) * n_plans
a2cd43c5 8237 + sizeof(*request->channels) * n_channels
807f8a8c 8238 + ie_len, GFP_KERNEL);
256da02d
LC		 8239 if (!request)
8240 return ERR_PTR(-ENOMEM);
807f8a8c
LC		 8241
8242 if (n_ssids)
8243 request->ssids = (void *)&request->channels[n_channels];
8244 request->n_ssids = n_ssids;
8245 if (ie_len) {
13874e4b 8246 if (n_ssids)
807f8a8c
LC		 8247 request->ie = (void *)(request->ssids + n_ssids);
8248 else
8249 request->ie = (void *)(request->channels + n_channels);
8250 }
8251
a1f1c21c
LC		 8252 if (n_match_sets) {
8253 if (request->ie)
8254 request->match_sets = (void *)(request->ie + ie_len);
13874e4b 8255 else if (n_ssids)
a1f1c21c
LC		 8256 request->match_sets =
8257 (void *)(request->ssids + n_ssids);
8258 else
8259 request->match_sets =
8260 (void *)(request->channels + n_channels);
8261 }
8262 request->n_match_sets = n_match_sets;
8263
3b06d277
AS		 8264 if (n_match_sets)
8265 request->scan_plans = (void *)(request->match_sets +
8266 n_match_sets);
8267 else if (request->ie)
8268 request->scan_plans = (void *)(request->ie + ie_len);
8269 else if (n_ssids)
8270 request->scan_plans = (void *)(request->ssids + n_ssids);
8271 else
8272 request->scan_plans = (void *)(request->channels + n_channels);
8273
8274 request->n_scan_plans = n_plans;
8275
807f8a8c 8276 i = 0;
256da02d 8277 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c
LC		 8278 /* user specified, bail out if channel not found */
8279 nla_for_each_nested(attr,
256da02d 8280 attrs[NL80211_ATTR_SCAN_FREQUENCIES],
807f8a8c
LC		 8281 tmp) {
8282 struct ieee80211_channel *chan;
8283
8284 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
8285
8286 if (!chan) {
8287 err = -EINVAL;
8288 goto out_free;
8289 }
8290
8291 /* ignore disabled channels */
8292 if (chan->flags & IEEE80211_CHAN_DISABLED)
8293 continue;
8294
8295 request->channels[i] = chan;
8296 i++;
8297 }
8298 } else {
8299 /* all channels */
57fbcce3 8300 for (band = 0; band < NUM_NL80211_BANDS; band++) {
807f8a8c 8301 int j;
7a087e74 8302
807f8a8c
LC		 8303 if (!wiphy->bands[band])
8304 continue;
8305 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
8306 struct ieee80211_channel *chan;
8307
8308 chan = &wiphy->bands[band]->channels[j];
8309
8310 if (chan->flags & IEEE80211_CHAN_DISABLED)
8311 continue;
8312
8313 request->channels[i] = chan;
8314 i++;
8315 }
8316 }
8317 }
8318
8319 if (!i) {
8320 err = -EINVAL;
8321 goto out_free;
8322 }
8323
8324 request->n_channels = i;
8325
8326 i = 0;
13874e4b 8327 if (n_ssids) {
256da02d 8328 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c 8329 tmp) {
57a27e1d 8330 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 8331 err = -EINVAL;
8332 goto out_free;
8333 }
57a27e1d 8334 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 8335 memcpy(request->ssids[i].ssid, nla_data(attr),
8336 nla_len(attr));
807f8a8c
LC		 8337 i++;
8338 }
8339 }
8340
a1f1c21c 8341 i = 0;
256da02d 8342 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 8343 nla_for_each_nested(attr,
256da02d 8344 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
a1f1c21c 8345 tmp) {
3007e352 8346 struct nlattr *ssid, *bssid, *rssi;
a1f1c21c 8347
8cb08174
JB		 8348 err = nla_parse_nested_deprecated(tb,
8349 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
8350 attr,
8351 nl80211_match_policy,
8352 NULL);
ae811e21
JB		 8353 if (err)
8354 goto out_free;
4a4ab0d7 8355 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
3007e352 8356 bssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID];
d39f3b4f
JB		 8357
8358 if (!ssid && !bssid) {
8359 i++;
8360 continue;
8361 }
8362
8363 if (WARN_ON(i >= n_match_sets)) {
8364 /* this indicates a programming error,
8365 * the loop above should have verified
8366 * things properly
8367 */
8368 err = -EINVAL;
8369 goto out_free;
8370 }
8371
8372 if (ssid) {
8373 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
ea73cbce
JB		 8374 err = -EINVAL;
8375 goto out_free;
8376 }
d39f3b4f
JB		 8377 memcpy(request->match_sets[i].ssid.ssid,
8378 nla_data(ssid), nla_len(ssid));
8379 request->match_sets[i].ssid.ssid_len =
8380 nla_len(ssid);
8381 }
8382 if (bssid) {
8383 if (nla_len(bssid) != ETH_ALEN) {
8384 err = -EINVAL;
8385 goto out_free;
a1f1c21c 8386 }
d39f3b4f
JB		 8387 memcpy(request->match_sets[i].bssid,
8388 nla_data(bssid), ETH_ALEN);
8389 }
3007e352 8390
d39f3b4f
JB		 8391 /* special attribute - old implementation w/a */
8392 request->match_sets[i].rssi_thold = default_match_rssi;
8393 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
8394 if (rssi)
ea73cbce 8395 request->match_sets[i].rssi_thold =
d39f3b4f 8396 nla_get_s32(rssi);
1e1b11b6 8397
8398 /* Parse per band RSSI attribute */
8399 err = nl80211_parse_sched_scan_per_band_rssi(wiphy,
8400 &request->match_sets[i],
8401 tb[NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI],
8402 request->match_sets[i].rssi_thold);
8403 if (err)
8404 goto out_free;
8405
a1f1c21c
LC		 8406 i++;
8407 }
ea73cbce
JB		 8408
8409 /* there was no other matchset, so the RSSI one is alone */
f89f46cf 8410 if (i == 0 && n_match_sets)
ea73cbce
JB		 8411 request->match_sets[0].rssi_thold = default_match_rssi;
8412
8413 request->min_rssi_thold = INT_MAX;
8414 for (i = 0; i < n_match_sets; i++)
8415 request->min_rssi_thold =
8416 min(request->match_sets[i].rssi_thold,
8417 request->min_rssi_thold);
8418 } else {
8419 request->min_rssi_thold = NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 8420 }
8421
9900e484
JB		 8422 if (ie_len) {
8423 request->ie_len = ie_len;
807f8a8c 8424 memcpy((void *)request->ie,
256da02d 8425 nla_data(attrs[NL80211_ATTR_IE]),
807f8a8c
LC		 8426 request->ie_len);
8427 }
8428
2d23d073
RZ		 8429 err = nl80211_check_scan_flags(wiphy, wdev, request, attrs, true);
8430 if (err)
8431 goto out_free;
ed473771 8432
9c748934
LC		 8433 if (attrs[NL80211_ATTR_SCHED_SCAN_DELAY])
8434 request->delay =
8435 nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_DELAY]);
8436
bf95ecdb 8437 if (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]) {
8438 request->relative_rssi = nla_get_s8(
8439 attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]);
8440 request->relative_rssi_set = true;
8441 }
8442
8443 if (request->relative_rssi_set &&
8444 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]) {
8445 struct nl80211_bss_select_rssi_adjust *rssi_adjust;
8446
8447 rssi_adjust = nla_data(
8448 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]);
8449 request->rssi_adjust.band = rssi_adjust->band;
8450 request->rssi_adjust.delta = rssi_adjust->delta;
8451 if (!is_band_valid(wiphy, request->rssi_adjust.band)) {
8452 err = -EINVAL;
8453 goto out_free;
8454 }
8455 }
8456
3b06d277
AS		 8457 err = nl80211_parse_sched_scan_plans(wiphy, n_plans, request, attrs);
8458 if (err)
8459 goto out_free;
8460
15d6030b 8461 request->scan_start = jiffies;
807f8a8c 8462
256da02d 8463 return request;
807f8a8c
LC		 8464
8465out_free:
8466 kfree(request);
256da02d
LC		 8467 return ERR_PTR(err);
8468}
8469
8470static int nl80211_start_sched_scan(struct sk_buff *skb,
8471 struct genl_info *info)
8472{
8473 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8474 struct net_device *dev = info->user_ptr[1];
ad2b26ab 8475 struct wireless_dev *wdev = dev->ieee80211_ptr;
31a60ed1 8476 struct cfg80211_sched_scan_request *sched_scan_req;
ca986ad9 8477 bool want_multi;
256da02d
LC		 8478 int err;
8479
ca986ad9 8480 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_start)
256da02d
LC		 8481 return -EOPNOTSUPP;
8482
ca986ad9
AVS		 8483 want_multi = info->attrs[NL80211_ATTR_SCHED_SCAN_MULTI];
8484 err = cfg80211_sched_scan_req_possible(rdev, want_multi);
8485 if (err)
8486 return err;
256da02d 8487
31a60ed1 8488 sched_scan_req = nl80211_parse_sched_scan(&rdev->wiphy, wdev,
aad1e812
AVS		 8489 info->attrs,
8490 rdev->wiphy.max_match_sets);
31a60ed1
JR		 8491
8492 err = PTR_ERR_OR_ZERO(sched_scan_req);
256da02d
LC		 8493 if (err)
8494 goto out_err;
8495
ca986ad9
AVS		 8496 /* leave request id zero for legacy request
8497 * or if driver does not support multi-scheduled scan
8498 */
2fd351a8
DK		 8499 if (want_multi && rdev->wiphy.max_sched_scan_reqs > 1)
8500 sched_scan_req->reqid = cfg80211_assign_cookie(rdev);
ca986ad9 8501
31a60ed1 8502 err = rdev_sched_scan_start(rdev, dev, sched_scan_req);
256da02d
LC		 8503 if (err)
8504 goto out_free;
8505
31a60ed1
JR		 8506 sched_scan_req->dev = dev;
8507 sched_scan_req->wiphy = &rdev->wiphy;
8508
93a1e86c
JR		 8509 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
8510 sched_scan_req->owner_nlportid = info->snd_portid;
8511
ca986ad9 8512 cfg80211_add_sched_scan_req(rdev, sched_scan_req);
256da02d 8513
96b08fd6 8514 nl80211_send_sched_scan(sched_scan_req, NL80211_CMD_START_SCHED_SCAN);
256da02d
LC		 8515 return 0;
8516
8517out_free:
31a60ed1 8518 kfree(sched_scan_req);
256da02d 8519out_err:
807f8a8c
LC		 8520 return err;
8521}
8522
8523static int nl80211_stop_sched_scan(struct sk_buff *skb,
8524 struct genl_info *info)
8525{
ca986ad9 8526 struct cfg80211_sched_scan_request *req;
807f8a8c 8527 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ca986ad9 8528 u64 cookie;
807f8a8c 8529
ca986ad9 8530 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_stop)
807f8a8c
LC		 8531 return -EOPNOTSUPP;
8532
ca986ad9
AVS		 8533 if (info->attrs[NL80211_ATTR_COOKIE]) {
8534 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
8535 return __cfg80211_stop_sched_scan(rdev, cookie, false);
8536 }
8537
8538 req = list_first_or_null_rcu(&rdev->sched_scan_req_list,
8539 struct cfg80211_sched_scan_request,
8540 list);
8541 if (!req || req->reqid ||
8542 (req->owner_nlportid &&
8543 req->owner_nlportid != info->snd_portid))
8544 return -ENOENT;
8545
8546 return cfg80211_stop_sched_scan_req(rdev, req, false);
807f8a8c
LC		 8547}
8548
04f39047
SW		 8549static int nl80211_start_radar_detection(struct sk_buff *skb,
8550 struct genl_info *info)
8551{
8552 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8553 struct net_device *dev = info->user_ptr[1];
8554 struct wireless_dev *wdev = dev->ieee80211_ptr;
13cf6dec 8555 struct wiphy *wiphy = wdev->wiphy;
04f39047 8556 struct cfg80211_chan_def chandef;
55f7435c 8557 enum nl80211_dfs_regions dfs_region;
31559f35 8558 unsigned int cac_time_ms;
04f39047
SW		 8559 int err;
8560
13cf6dec 8561 dfs_region = reg_get_dfs_region(wiphy);
55f7435c
LR		 8562 if (dfs_region == NL80211_DFS_UNSET)
8563 return -EINVAL;
8564
04f39047
SW		 8565 err = nl80211_parse_chandef(rdev, info, &chandef);
8566 if (err)
8567 return err;
8568
ff311bc1
SW		 8569 if (netif_carrier_ok(dev))
8570 return -EBUSY;
8571
04f39047
SW		 8572 if (wdev->cac_started)
8573 return -EBUSY;
8574
13cf6dec 8575 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
04f39047
SW		 8576 if (err < 0)
8577 return err;
8578
8579 if (err == 0)
8580 return -EINVAL;
8581
13cf6dec 8582 if (!cfg80211_chandef_dfs_usable(wiphy, &chandef))
04f39047
SW		 8583 return -EINVAL;
8584
13cf6dec
DL		 8585 /* CAC start is offloaded to HW and can't be started manually */
8586 if (wiphy_ext_feature_isset(wiphy, NL80211_EXT_FEATURE_DFS_OFFLOAD))
8587 return -EOPNOTSUPP;
8588
04f39047
SW		 8589 if (!rdev->ops->start_radar_detection)
8590 return -EOPNOTSUPP;
8591
31559f35
JD		 8592 cac_time_ms = cfg80211_chandef_dfs_cac_time(&rdev->wiphy, &chandef);
8593 if (WARN_ON(!cac_time_ms))
8594 cac_time_ms = IEEE80211_DFS_MIN_CAC_TIME_MS;
8595
a1056b1b 8596 err = rdev_start_radar_detection(rdev, dev, &chandef, cac_time_ms);
04f39047 8597 if (!err) {
9e0e2961 8598 wdev->chandef = chandef;
04f39047
SW		 8599 wdev->cac_started = true;
8600 wdev->cac_start_time = jiffies;
31559f35 8601 wdev->cac_time_ms = cac_time_ms;
04f39047 8602 }
04f39047
SW		 8603 return err;
8604}
8605
30c63115
S		 8606static int nl80211_notify_radar_detection(struct sk_buff *skb,
8607 struct genl_info *info)
8608{
8609 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8610 struct net_device *dev = info->user_ptr[1];
8611 struct wireless_dev *wdev = dev->ieee80211_ptr;
8612 struct wiphy *wiphy = wdev->wiphy;
8613 struct cfg80211_chan_def chandef;
8614 enum nl80211_dfs_regions dfs_region;
8615 int err;
8616
8617 dfs_region = reg_get_dfs_region(wiphy);
8618 if (dfs_region == NL80211_DFS_UNSET) {
8619 GENL_SET_ERR_MSG(info,
8620 "DFS Region is not set. Unexpected Radar indication");
8621 return -EINVAL;
8622 }
8623
8624 err = nl80211_parse_chandef(rdev, info, &chandef);
8625 if (err) {
8626 GENL_SET_ERR_MSG(info, "Unable to extract chandef info");
8627 return err;
8628 }
8629
8630 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
8631 if (err < 0) {
8632 GENL_SET_ERR_MSG(info, "chandef is invalid");
8633 return err;
8634 }
8635
8636 if (err == 0) {
8637 GENL_SET_ERR_MSG(info,
8638 "Unexpected Radar indication for chandef/iftype");
8639 return -EINVAL;
8640 }
8641
8642 /* Do not process this notification if radar is already detected
8643 * by kernel on this channel, and return success.
8644 */
8645 if (chandef.chan->dfs_state == NL80211_DFS_UNAVAILABLE)
8646 return 0;
8647
8648 cfg80211_set_dfs_state(wiphy, &chandef, NL80211_DFS_UNAVAILABLE);
8649
8650 cfg80211_sched_dfs_chan_update(rdev);
8651
a680fe46 8652 rdev->radar_chandef = chandef;
30c63115
S		 8653
8654 /* Propagate this notification to other radios as well */
8655 queue_work(cfg80211_wq, &rdev->propagate_radar_detect_wk);
8656
8657 return 0;
8658}
8659
16ef1fe2
SW		 8660static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
8661{
8662 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8663 struct net_device *dev = info->user_ptr[1];
8664 struct wireless_dev *wdev = dev->ieee80211_ptr;
8665 struct cfg80211_csa_settings params;
8666 /* csa_attrs is defined static to avoid waste of stack size - this
8667 * function is called under RTNL lock, so this should not be a problem.
8668 */
8669 static struct nlattr *csa_attrs[NL80211_ATTR_MAX+1];
16ef1fe2 8670 int err;
ee4bc9e7 8671 bool need_new_beacon = false;
8d9de16f 8672 bool need_handle_dfs_flag = true;
9a774c78 8673 int len, i;
252e07ca 8674 u32 cs_count;
16ef1fe2
SW		 8675
8676 if (!rdev->ops->channel_switch ||
8677 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH))
8678 return -EOPNOTSUPP;
8679
ee4bc9e7
SW		 8680 switch (dev->ieee80211_ptr->iftype) {
8681 case NL80211_IFTYPE_AP:
8682 case NL80211_IFTYPE_P2P_GO:
8683 need_new_beacon = true;
8d9de16f
BB		 8684 /* For all modes except AP the handle_dfs flag needs to be
8685 * supplied to tell the kernel that userspace will handle radar
8686 * events when they happen. Otherwise a switch to a channel
8687 * requiring DFS will be rejected.
8688 */
8689 need_handle_dfs_flag = false;
ee4bc9e7
SW		 8690
8691 /* useless if AP is not running */
8692 if (!wdev->beacon_interval)
1ff79dfa 8693 return -ENOTCONN;
ee4bc9e7
SW		 8694 break;
8695 case NL80211_IFTYPE_ADHOC:
1ff79dfa
JB		 8696 if (!wdev->ssid_len)
8697 return -ENOTCONN;
8698 break;
c6da674a 8699 case NL80211_IFTYPE_MESH_POINT:
1ff79dfa
JB		 8700 if (!wdev->mesh_id_len)
8701 return -ENOTCONN;
ee4bc9e7
SW		 8702 break;
8703 default:
16ef1fe2 8704 return -EOPNOTSUPP;
ee4bc9e7 8705 }
16ef1fe2
SW		 8706
8707 memset(&params, 0, sizeof(params));
c177db2d 8708 params.beacon_csa.ftm_responder = -1;
16ef1fe2
SW		 8709
8710 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
8711 !info->attrs[NL80211_ATTR_CH_SWITCH_COUNT])
8712 return -EINVAL;
8713
8714 /* only important for AP, IBSS and mesh create IEs internally */
d0a361a5 8715 if (need_new_beacon && !info->attrs[NL80211_ATTR_CSA_IES])
16ef1fe2
SW		 8716 return -EINVAL;
8717
252e07ca
LC		 8718 /* Even though the attribute is u32, the specification says
8719 * u8, so let's make sure we don't overflow.
8720 */
8721 cs_count = nla_get_u32(info->attrs[NL80211_ATTR_CH_SWITCH_COUNT]);
8722 if (cs_count > 255)
8723 return -EINVAL;
8724
8725 params.count = cs_count;
16ef1fe2 8726
ee4bc9e7
SW		 8727 if (!need_new_beacon)
8728 goto skip_beacons;
8729
81e54d08 8730 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_after);
16ef1fe2
SW		 8731 if (err)
8732 return err;
8733
8cb08174
JB		 8734 err = nla_parse_nested_deprecated(csa_attrs, NL80211_ATTR_MAX,
8735 info->attrs[NL80211_ATTR_CSA_IES],
8736 nl80211_policy, info->extack);
16ef1fe2
SW		 8737 if (err)
8738 return err;
8739
81e54d08 8740 err = nl80211_parse_beacon(rdev, csa_attrs, &params.beacon_csa);
16ef1fe2
SW		 8741 if (err)
8742 return err;
8743
8744 if (!csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON])
8745 return -EINVAL;
8746
9a774c78
AO		 8747 len = nla_len(csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON]);
8748 if (!len || (len % sizeof(u16)))
16ef1fe2
SW		 8749 return -EINVAL;
8750
9a774c78
AO		 8751 params.n_counter_offsets_beacon = len / sizeof(u16);
8752 if (rdev->wiphy.max_num_csa_counters &&
8753 (params.n_counter_offsets_beacon >
8754 rdev->wiphy.max_num_csa_counters))
16ef1fe2
SW		 8755 return -EINVAL;
8756
9a774c78
AO		 8757 params.counter_offsets_beacon =
8758 nla_data(csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON]);
8759
8760 /* sanity checks - counters should fit and be the same */
8761 for (i = 0; i < params.n_counter_offsets_beacon; i++) {
8762 u16 offset = params.counter_offsets_beacon[i];
8763
8764 if (offset >= params.beacon_csa.tail_len)
8765 return -EINVAL;
8766
8767 if (params.beacon_csa.tail[offset] != params.count)
8768 return -EINVAL;
8769 }
8770
16ef1fe2 8771 if (csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]) {
9a774c78
AO		 8772 len = nla_len(csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]);
8773 if (!len || (len % sizeof(u16)))
16ef1fe2
SW		 8774 return -EINVAL;
8775
9a774c78
AO		 8776 params.n_counter_offsets_presp = len / sizeof(u16);
8777 if (rdev->wiphy.max_num_csa_counters &&
ad5987b4 8778 (params.n_counter_offsets_presp >
9a774c78 8779 rdev->wiphy.max_num_csa_counters))
16ef1fe2 8780 return -EINVAL;
9a774c78
AO		 8781
8782 params.counter_offsets_presp =
8783 nla_data(csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]);
8784
8785 /* sanity checks - counters should fit and be the same */
8786 for (i = 0; i < params.n_counter_offsets_presp; i++) {
8787 u16 offset = params.counter_offsets_presp[i];
8788
8789 if (offset >= params.beacon_csa.probe_resp_len)
8790 return -EINVAL;
8791
8792 if (params.beacon_csa.probe_resp[offset] !=
8793 params.count)
8794 return -EINVAL;
8795 }
16ef1fe2
SW		 8796 }
8797
ee4bc9e7 8798skip_beacons:
16ef1fe2
SW		 8799 err = nl80211_parse_chandef(rdev, info, &params.chandef);
8800 if (err)
8801 return err;
8802
923b352f
AN		 8803 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
8804 wdev->iftype))
16ef1fe2
SW		 8805 return -EINVAL;
8806
2beb6dab
LC		 8807 err = cfg80211_chandef_dfs_required(wdev->wiphy,
8808 &params.chandef,
8809 wdev->iftype);
8810 if (err < 0)
8811 return err;
8812
8d9de16f 8813 if (err > 0) {
2beb6dab 8814 params.radar_required = true;
8d9de16f
BB		 8815 if (need_handle_dfs_flag &&
8816 !nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS])) {
8817 return -EINVAL;
8818 }
8819 }
16ef1fe2 8820
16ef1fe2
SW		 8821 if (info->attrs[NL80211_ATTR_CH_SWITCH_BLOCK_TX])
8822 params.block_tx = true;
8823
c56589ed
SW		 8824 wdev_lock(wdev);
8825 err = rdev_channel_switch(rdev, dev, &params);
8826 wdev_unlock(wdev);
8827
8828 return err;
16ef1fe2
SW		 8829}
8830
9720bb3a
JB		 8831static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
8832 u32 seq, int flags,
2a519311 8833 struct cfg80211_registered_device *rdev,
48ab905d
JB		 8834 struct wireless_dev *wdev,
8835 struct cfg80211_internal_bss *intbss)
2a519311 8836{
48ab905d 8837 struct cfg80211_bss *res = &intbss->pub;
9caf0364 8838 const struct cfg80211_bss_ies *ies;
2a519311
JB		 8839 void *hdr;
8840 struct nlattr *bss;
48ab905d
JB		 8841
8842 ASSERT_WDEV_LOCK(wdev);
2a519311 8843
15e47304 8844 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 8845 NL80211_CMD_NEW_SCAN_RESULTS);
8846 if (!hdr)
8847 return -1;
8848
0a833c29 8849 genl_dump_check_consistent(cb, hdr);
9720bb3a 8850
97990a06
JB		 8851 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation))
8852 goto nla_put_failure;
8853 if (wdev->netdev &&
9360ffd1
DM		 8854 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
8855 goto nla_put_failure;
2dad624e
ND		 8856 if (nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
8857 NL80211_ATTR_PAD))
97990a06 8858 goto nla_put_failure;
2a519311 8859
ae0be8de 8860 bss = nla_nest_start_noflag(msg, NL80211_ATTR_BSS);
2a519311
JB		 8861 if (!bss)
8862 goto nla_put_failure;
9360ffd1 8863 if ((!is_zero_ether_addr(res->bssid) &&
9caf0364 8864 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
9360ffd1 8865 goto nla_put_failure;
9caf0364
JB		 8866
8867 rcu_read_lock();
0e227084
JB		 8868 /* indicate whether we have probe response data or not */
8869 if (rcu_access_pointer(res->proberesp_ies) &&
8870 nla_put_flag(msg, NL80211_BSS_PRESP_DATA))
8871 goto fail_unlock_rcu;
8872
8873 /* this pointer prefers to be pointed to probe response data
8874 * but is always valid
8875 */
9caf0364 8876 ies = rcu_dereference(res->ies);
8cef2c9d 8877 if (ies) {
2dad624e
ND		 8878 if (nla_put_u64_64bit(msg, NL80211_BSS_TSF, ies->tsf,
8879 NL80211_BSS_PAD))
8cef2c9d 8880 goto fail_unlock_rcu;
8cef2c9d
JB		 8881 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
8882 ies->len, ies->data))
8883 goto fail_unlock_rcu;
9caf0364 8884 }
0e227084
JB		 8885
8886 /* and this pointer is always (unless driver didn't know) beacon data */
9caf0364 8887 ies = rcu_dereference(res->beacon_ies);
0e227084 8888 if (ies && ies->from_beacon) {
2dad624e
ND		 8889 if (nla_put_u64_64bit(msg, NL80211_BSS_BEACON_TSF, ies->tsf,
8890 NL80211_BSS_PAD))
8cef2c9d
JB		 8891 goto fail_unlock_rcu;
8892 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
8893 ies->len, ies->data))
8894 goto fail_unlock_rcu;
9caf0364
JB		 8895 }
8896 rcu_read_unlock();
8897
9360ffd1
DM		 8898 if (res->beacon_interval &&
8899 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
8900 goto nla_put_failure;
8901 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
8902 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
dcd6eac1 8903 nla_put_u32(msg, NL80211_BSS_CHAN_WIDTH, res->scan_width) ||
9360ffd1
DM		 8904 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
8905 jiffies_to_msecs(jiffies - intbss->ts)))
8906 goto nla_put_failure;
2a519311 8907
1d76250b
AS		 8908 if (intbss->parent_tsf &&
8909 (nla_put_u64_64bit(msg, NL80211_BSS_PARENT_TSF,
8910 intbss->parent_tsf, NL80211_BSS_PAD) ||
8911 nla_put(msg, NL80211_BSS_PARENT_BSSID, ETH_ALEN,
8912 intbss->parent_bssid)))
8913 goto nla_put_failure;
8914
6e19bc4b 8915 if (intbss->ts_boottime &&
2dad624e
ND		 8916 nla_put_u64_64bit(msg, NL80211_BSS_LAST_SEEN_BOOTTIME,
8917 intbss->ts_boottime, NL80211_BSS_PAD))
6e19bc4b
DS		 8918 goto nla_put_failure;
8919
983dafaa
SD		 8920 if (!nl80211_put_signal(msg, intbss->pub.chains,
8921 intbss->pub.chain_signal,
8922 NL80211_BSS_CHAIN_SIGNAL))
8923 goto nla_put_failure;
8924
77965c97 8925 switch (rdev->wiphy.signal_type) {
2a519311 8926 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 8927 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
8928 goto nla_put_failure;
2a519311
JB		 8929 break;
8930 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 8931 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
8932 goto nla_put_failure;
2a519311
JB		 8933 break;
8934 default:
8935 break;
8936 }
8937
48ab905d 8938 switch (wdev->iftype) {
074ac8df 8939 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 8940 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 8941 if (intbss == wdev->current_bss &&
8942 nla_put_u32(msg, NL80211_BSS_STATUS,
8943 NL80211_BSS_STATUS_ASSOCIATED))
8944 goto nla_put_failure;
48ab905d
JB		 8945 break;
8946 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 8947 if (intbss == wdev->current_bss &&
8948 nla_put_u32(msg, NL80211_BSS_STATUS,
8949 NL80211_BSS_STATUS_IBSS_JOINED))
8950 goto nla_put_failure;
48ab905d
JB		 8951 break;
8952 default:
8953 break;
8954 }
8955
2a519311
JB		 8956 nla_nest_end(msg, bss);
8957
053c095a
JB		 8958 genlmsg_end(msg, hdr);
8959 return 0;
2a519311 8960
8cef2c9d
JB		 8961 fail_unlock_rcu:
8962 rcu_read_unlock();
2a519311
JB		 8963 nla_put_failure:
8964 genlmsg_cancel(msg, hdr);
8965 return -EMSGSIZE;
8966}
8967
97990a06 8968static int nl80211_dump_scan(struct sk_buff *skb, struct netlink_callback *cb)
2a519311 8969{
48ab905d 8970 struct cfg80211_registered_device *rdev;
2a519311 8971 struct cfg80211_internal_bss *scan;
48ab905d 8972 struct wireless_dev *wdev;
97990a06 8973 int start = cb->args[2], idx = 0;
2a519311
JB		 8974 int err;
8975
ea90e0dc 8976 rtnl_lock();
5297c65c 8977 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
ea90e0dc
JB		 8978 if (err) {
8979 rtnl_unlock();
67748893 8980 return err;
ea90e0dc 8981 }
2a519311 8982
48ab905d
JB		 8983 wdev_lock(wdev);
8984 spin_lock_bh(&rdev->bss_lock);
d1e23c94
DK		 8985
8986 /*
8987 * dump_scan will be called multiple times to break up the scan results
8988 * into multiple messages. It is unlikely that any more bss-es will be
8989 * expired after the first call, so only call only call this on the
8990 * first dump_scan invocation.
8991 */
8992 if (start == 0)
8993 cfg80211_bss_expire(rdev);
48ab905d 8994
9720bb3a
JB		 8995 cb->seq = rdev->bss_generation;
8996
48ab905d 8997 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 8998 if (++idx <= start)
8999 continue;
9720bb3a 9000 if (nl80211_send_bss(skb, cb,
2a519311 9001 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 9002 rdev, wdev, scan) < 0) {
2a519311 9003 idx--;
67748893 9004 break;
2a519311
JB		 9005 }
9006 }
9007
48ab905d
JB		 9008 spin_unlock_bh(&rdev->bss_lock);
9009 wdev_unlock(wdev);
2a519311 9010
97990a06 9011 cb->args[2] = idx;
ea90e0dc 9012 rtnl_unlock();
2a519311 9013
67748893 9014 return skb->len;
2a519311
JB		 9015}
9016
15e47304 9017static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
11f78ac3
JB		 9018 int flags, struct net_device *dev,
9019 bool allow_radio_stats,
9020 struct survey_info *survey)
61fa713c
HS		 9021{
9022 void *hdr;
9023 struct nlattr *infoattr;
9024
11f78ac3
JB		 9025 /* skip radio stats if userspace didn't request them */
9026 if (!survey->channel && !allow_radio_stats)
9027 return 0;
9028
15e47304 9029 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 9030 NL80211_CMD_NEW_SURVEY_RESULTS);
9031 if (!hdr)
9032 return -ENOMEM;
9033
9360ffd1
DM		 9034 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9035 goto nla_put_failure;
61fa713c 9036
ae0be8de 9037 infoattr = nla_nest_start_noflag(msg, NL80211_ATTR_SURVEY_INFO);
61fa713c
HS		 9038 if (!infoattr)
9039 goto nla_put_failure;
9040
11f78ac3
JB		 9041 if (survey->channel &&
9042 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
9360ffd1
DM		 9043 survey->channel->center_freq))
9044 goto nla_put_failure;
9045
9046 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
9047 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
9048 goto nla_put_failure;
9049 if ((survey->filled & SURVEY_INFO_IN_USE) &&
9050 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
9051 goto nla_put_failure;
4ed20beb 9052 if ((survey->filled & SURVEY_INFO_TIME) &&
2dad624e
ND		 9053 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME,
9054 survey->time, NL80211_SURVEY_INFO_PAD))
9360ffd1 9055 goto nla_put_failure;
4ed20beb 9056 if ((survey->filled & SURVEY_INFO_TIME_BUSY) &&
2dad624e
ND		 9057 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BUSY,
9058 survey->time_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 9059 goto nla_put_failure;
4ed20beb 9060 if ((survey->filled & SURVEY_INFO_TIME_EXT_BUSY) &&
2dad624e
ND		 9061 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_EXT_BUSY,
9062 survey->time_ext_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 9063 goto nla_put_failure;
4ed20beb 9064 if ((survey->filled & SURVEY_INFO_TIME_RX) &&
2dad624e
ND		 9065 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_RX,
9066 survey->time_rx, NL80211_SURVEY_INFO_PAD))
9360ffd1 9067 goto nla_put_failure;
4ed20beb 9068 if ((survey->filled & SURVEY_INFO_TIME_TX) &&
2dad624e
ND		 9069 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_TX,
9070 survey->time_tx, NL80211_SURVEY_INFO_PAD))
9360ffd1 9071 goto nla_put_failure;
052536ab 9072 if ((survey->filled & SURVEY_INFO_TIME_SCAN) &&
2dad624e
ND		 9073 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_SCAN,
9074 survey->time_scan, NL80211_SURVEY_INFO_PAD))
052536ab 9075 goto nla_put_failure;
c8cd6e7f
FF		 9076 if ((survey->filled & SURVEY_INFO_TIME_BSS_RX) &&
9077 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BSS_RX,
9078 survey->time_bss_rx, NL80211_SURVEY_INFO_PAD))
9079 goto nla_put_failure;
61fa713c
HS		 9080
9081 nla_nest_end(msg, infoattr);
9082
053c095a
JB		 9083 genlmsg_end(msg, hdr);
9084 return 0;
61fa713c
HS		 9085
9086 nla_put_failure:
9087 genlmsg_cancel(msg, hdr);
9088 return -EMSGSIZE;
9089}
9090
11f78ac3 9091static int nl80211_dump_survey(struct sk_buff *skb, struct netlink_callback *cb)
61fa713c 9092{
50508d94 9093 struct nlattr **attrbuf;
61fa713c 9094 struct survey_info survey;
1b8ec87a 9095 struct cfg80211_registered_device *rdev;
97990a06
JB		 9096 struct wireless_dev *wdev;
9097 int survey_idx = cb->args[2];
61fa713c 9098 int res;
11f78ac3 9099 bool radio_stats;
61fa713c 9100
50508d94
JB		 9101 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
9102 if (!attrbuf)
9103 return -ENOMEM;
9104
ea90e0dc 9105 rtnl_lock();
5297c65c 9106 res = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 9107 if (res)
ea90e0dc 9108 goto out_err;
61fa713c 9109
11f78ac3 9110 /* prepare_wdev_dump parsed the attributes */
c90c39da 9111 radio_stats = attrbuf[NL80211_ATTR_SURVEY_RADIO_STATS];
11f78ac3 9112
97990a06
JB		 9113 if (!wdev->netdev) {
9114 res = -EINVAL;
9115 goto out_err;
9116 }
9117
1b8ec87a 9118 if (!rdev->ops->dump_survey) {
61fa713c
HS		 9119 res = -EOPNOTSUPP;
9120 goto out_err;
9121 }
9122
9123 while (1) {
1b8ec87a 9124 res = rdev_dump_survey(rdev, wdev->netdev, survey_idx, &survey);
61fa713c
HS		 9125 if (res == -ENOENT)
9126 break;
9127 if (res)
9128 goto out_err;
9129
11f78ac3
JB		 9130 /* don't send disabled channels, but do send non-channel data */
9131 if (survey.channel &&
9132 survey.channel->flags & IEEE80211_CHAN_DISABLED) {
180cdc79
LR		 9133 survey_idx++;
9134 continue;
9135 }
9136
61fa713c 9137 if (nl80211_send_survey(skb,
15e47304 9138 NETLINK_CB(cb->skb).portid,
61fa713c 9139 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11f78ac3 9140 wdev->netdev, radio_stats, &survey) < 0)
61fa713c
HS		 9141 goto out;
9142 survey_idx++;
9143 }
9144
9145 out:
97990a06 9146 cb->args[2] = survey_idx;
61fa713c
HS		 9147 res = skb->len;
9148 out_err:
50508d94 9149 kfree(attrbuf);
ea90e0dc 9150 rtnl_unlock();
61fa713c
HS		 9151 return res;
9152}
9153
b23aa676
SO		 9154static bool nl80211_valid_wpa_versions(u32 wpa_versions)
9155{
9156 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
cc3e14c2
CHH		 9157 NL80211_WPA_VERSION_2 |
9158 NL80211_WPA_VERSION_3));
b23aa676
SO		 9159}
9160
636a5d36
JM		 9161static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
9162{
4c476991
JB		 9163 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9164 struct net_device *dev = info->user_ptr[1];
19957bb3 9165 struct ieee80211_channel *chan;
11b6b5a4
JM		 9166 const u8 *bssid, *ssid, *ie = NULL, *auth_data = NULL;
9167 int err, ssid_len, ie_len = 0, auth_data_len = 0;
19957bb3 9168 enum nl80211_auth_type auth_type;
fffd0934 9169 struct key_parse key;
d5cdfacb 9170 bool local_state_change;
636a5d36 9171
f4a11bb0
JB		 9172 if (!info->attrs[NL80211_ATTR_MAC])
9173 return -EINVAL;
9174
1778092e
JM		 9175 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
9176 return -EINVAL;
9177
19957bb3
JB		 9178 if (!info->attrs[NL80211_ATTR_SSID])
9179 return -EINVAL;
9180
9181 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
9182 return -EINVAL;
9183
fffd0934
JB		 9184 err = nl80211_parse_key(info, &key);
9185 if (err)
9186 return err;
9187
9188 if (key.idx >= 0) {
e31b8213
JB		 9189 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
9190 return -EINVAL;
fffd0934
JB		 9191 if (!key.p.key || !key.p.key_len)
9192 return -EINVAL;
9193 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
9194 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
9195 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
9196 key.p.key_len != WLAN_KEY_LEN_WEP104))
9197 return -EINVAL;
b6b5555b 9198 if (key.idx > 3)
fffd0934
JB		 9199 return -EINVAL;
9200 } else {
9201 key.p.key_len = 0;
9202 key.p.key = NULL;
9203 }
9204
afea0b7a
JB		 9205 if (key.idx >= 0) {
9206 int i;
9207 bool ok = false;
7a087e74 9208
afea0b7a
JB		 9209 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
9210 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
9211 ok = true;
9212 break;
9213 }
9214 }
4c476991
JB		 9215 if (!ok)
9216 return -EINVAL;
afea0b7a
JB		 9217 }
9218
4c476991
JB		 9219 if (!rdev->ops->auth)
9220 return -EOPNOTSUPP;
636a5d36 9221
074ac8df 9222 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9223 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9224 return -EOPNOTSUPP;
eec60b03 9225
19957bb3 9226 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
664834de
JM		 9227 chan = nl80211_get_valid_chan(&rdev->wiphy,
9228 info->attrs[NL80211_ATTR_WIPHY_FREQ]);
9229 if (!chan)
4c476991 9230 return -EINVAL;
636a5d36 9231
19957bb3
JB		 9232 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9233 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 9234
9235 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9236 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9237 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9238 }
9239
19957bb3 9240 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 9241 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 9242 return -EINVAL;
636a5d36 9243
63181060
JM		 9244 if ((auth_type == NL80211_AUTHTYPE_SAE ||
9245 auth_type == NL80211_AUTHTYPE_FILS_SK ||
9246 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
9247 auth_type == NL80211_AUTHTYPE_FILS_PK) &&
11b6b5a4 9248 !info->attrs[NL80211_ATTR_AUTH_DATA])
e39e5b5e
JM		 9249 return -EINVAL;
9250
11b6b5a4 9251 if (info->attrs[NL80211_ATTR_AUTH_DATA]) {
63181060
JM		 9252 if (auth_type != NL80211_AUTHTYPE_SAE &&
9253 auth_type != NL80211_AUTHTYPE_FILS_SK &&
9254 auth_type != NL80211_AUTHTYPE_FILS_SK_PFS &&
9255 auth_type != NL80211_AUTHTYPE_FILS_PK)
e39e5b5e 9256 return -EINVAL;
11b6b5a4
JM		 9257 auth_data = nla_data(info->attrs[NL80211_ATTR_AUTH_DATA]);
9258 auth_data_len = nla_len(info->attrs[NL80211_ATTR_AUTH_DATA]);
e39e5b5e 9259 /* need to include at least Auth Transaction and Status Code */
11b6b5a4 9260 if (auth_data_len < 4)
e39e5b5e
JM		 9261 return -EINVAL;
9262 }
9263
d5cdfacb
JM		 9264 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
9265
95de817b
JB		 9266 /*
9267 * Since we no longer track auth state, ignore
9268 * requests to only change local state.
9269 */
9270 if (local_state_change)
9271 return 0;
9272
91bf9b26
JB		 9273 wdev_lock(dev->ieee80211_ptr);
9274 err = cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
9275 ssid, ssid_len, ie, ie_len,
9276 key.p.key, key.p.key_len, key.idx,
11b6b5a4 9277 auth_data, auth_data_len);
91bf9b26
JB		 9278 wdev_unlock(dev->ieee80211_ptr);
9279 return err;
636a5d36
JM		 9280}
9281
64bf3d4b
DK		 9282static int validate_pae_over_nl80211(struct cfg80211_registered_device *rdev,
9283 struct genl_info *info)
9284{
9285 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
9286 GENL_SET_ERR_MSG(info, "SOCKET_OWNER not set");
9287 return -EINVAL;
9288 }
9289
9290 if (!rdev->ops->tx_control_port ||
9291 !wiphy_ext_feature_isset(&rdev->wiphy,
9292 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
9293 return -EOPNOTSUPP;
9294
9295 return 0;
9296}
9297
c0692b8f
JB		 9298static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
9299 struct genl_info *info,
3dc27d25
JB		 9300 struct cfg80211_crypto_settings *settings,
9301 int cipher_limit)
b23aa676 9302{
c0b2bbd8
JB		 9303 memset(settings, 0, sizeof(*settings));
9304
b23aa676
SO		 9305 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
9306
c0692b8f
JB		 9307 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
9308 u16 proto;
7a087e74 9309
c0692b8f
JB		 9310 proto = nla_get_u16(
9311 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
9312 settings->control_port_ethertype = cpu_to_be16(proto);
9313 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
9314 proto != ETH_P_PAE)
9315 return -EINVAL;
9316 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
9317 settings->control_port_no_encrypt = true;
9318 } else
9319 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
9320
64bf3d4b
DK		 9321 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
9322 int r = validate_pae_over_nl80211(rdev, info);
9323
9324 if (r < 0)
9325 return r;
9326
9327 settings->control_port_over_nl80211 = true;
7f3f96ce
MT		 9328
9329 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_PREAUTH])
9330 settings->control_port_no_preauth = true;
64bf3d4b
DK		 9331 }
9332
b23aa676
SO		 9333 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
9334 void *data;
9335 int len, i;
9336
9337 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
9338 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
9339 settings->n_ciphers_pairwise = len / sizeof(u32);
9340
9341 if (len % sizeof(u32))
9342 return -EINVAL;
9343
3dc27d25 9344 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 9345 return -EINVAL;
9346
9347 memcpy(settings->ciphers_pairwise, data, len);
9348
9349 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 9350 if (!cfg80211_supported_cipher_suite(
9351 &rdev->wiphy,
b23aa676
SO		 9352 settings->ciphers_pairwise[i]))
9353 return -EINVAL;
9354 }
9355
9356 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
9357 settings->cipher_group =
9358 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 9359 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
9360 settings->cipher_group))
b23aa676
SO		 9361 return -EINVAL;
9362 }
9363
9364 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
9365 settings->wpa_versions =
9366 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
9367 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
9368 return -EINVAL;
9369 }
9370
9371 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
9372 void *data;
6d30240e 9373 int len;
b23aa676
SO		 9374
9375 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
9376 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
9377 settings->n_akm_suites = len / sizeof(u32);
9378
9379 if (len % sizeof(u32))
9380 return -EINVAL;
9381
1b9ca027
JM		 9382 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
9383 return -EINVAL;
9384
b23aa676 9385 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 9386 }
9387
91b5ab62
EP		 9388 if (info->attrs[NL80211_ATTR_PMK]) {
9389 if (nla_len(info->attrs[NL80211_ATTR_PMK]) != WLAN_PMK_LEN)
9390 return -EINVAL;
9391 if (!wiphy_ext_feature_isset(&rdev->wiphy,
9392 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_PSK))
9393 return -EINVAL;
9394 settings->psk = nla_data(info->attrs[NL80211_ATTR_PMK]);
9395 }
9396
26f7044e
CHH		 9397 if (info->attrs[NL80211_ATTR_SAE_PASSWORD]) {
9398 if (!wiphy_ext_feature_isset(&rdev->wiphy,
9399 NL80211_EXT_FEATURE_SAE_OFFLOAD))
9400 return -EINVAL;
9401 settings->sae_pwd =
9402 nla_data(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
9403 settings->sae_pwd_len =
9404 nla_len(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
9405 }
9406
b23aa676
SO		 9407 return 0;
9408}
9409
636a5d36
JM		 9410static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
9411{
4c476991
JB		 9412 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9413 struct net_device *dev = info->user_ptr[1];
f444de05 9414 struct ieee80211_channel *chan;
f62fab73
JB		 9415 struct cfg80211_assoc_request req = {};
9416 const u8 *bssid, *ssid;
9417 int err, ssid_len = 0;
636a5d36 9418
bad29297
AZ		 9419 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9420 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9421 return -EPERM;
9422
f4a11bb0 9423 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 9424 !info->attrs[NL80211_ATTR_SSID] ||
9425 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 9426 return -EINVAL;
9427
4c476991
JB		 9428 if (!rdev->ops->assoc)
9429 return -EOPNOTSUPP;
636a5d36 9430
074ac8df 9431 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9432 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9433 return -EOPNOTSUPP;
eec60b03 9434
19957bb3 9435 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9436
664834de
JM		 9437 chan = nl80211_get_valid_chan(&rdev->wiphy,
9438 info->attrs[NL80211_ATTR_WIPHY_FREQ]);
9439 if (!chan)
4c476991 9440 return -EINVAL;
636a5d36 9441
19957bb3
JB		 9442 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9443 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 9444
9445 if (info->attrs[NL80211_ATTR_IE]) {
f62fab73
JB		 9446 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9447 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9448 }
9449
dc6382ce 9450 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 9451 enum nl80211_mfp mfp =
dc6382ce 9452 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 9453 if (mfp == NL80211_MFP_REQUIRED)
f62fab73 9454 req.use_mfp = true;
4c476991
JB		 9455 else if (mfp != NL80211_MFP_NO)
9456 return -EINVAL;
dc6382ce
JM		 9457 }
9458
3e5d7649 9459 if (info->attrs[NL80211_ATTR_PREV_BSSID])
f62fab73 9460 req.prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3e5d7649 9461
7e7c8926 9462 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
f62fab73 9463 req.flags |= ASSOC_REQ_DISABLE_HT;
7e7c8926
BG		 9464
9465 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
f62fab73
JB		 9466 memcpy(&req.ht_capa_mask,
9467 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
9468 sizeof(req.ht_capa_mask));
7e7c8926
BG		 9469
9470 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
f62fab73 9471 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
7e7c8926 9472 return -EINVAL;
f62fab73
JB		 9473 memcpy(&req.ht_capa,
9474 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
9475 sizeof(req.ht_capa));
7e7c8926
BG		 9476 }
9477
ee2aca34 9478 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
f62fab73 9479 req.flags |= ASSOC_REQ_DISABLE_VHT;
ee2aca34
JB		 9480
9481 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
f62fab73
JB		 9482 memcpy(&req.vht_capa_mask,
9483 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
9484 sizeof(req.vht_capa_mask));
ee2aca34
JB		 9485
9486 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
f62fab73 9487 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
ee2aca34 9488 return -EINVAL;
f62fab73
JB		 9489 memcpy(&req.vht_capa,
9490 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
9491 sizeof(req.vht_capa));
ee2aca34
JB		 9492 }
9493
bab5ab7d 9494 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 9495 if (!((rdev->wiphy.features &
9496 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
9497 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
9498 !wiphy_ext_feature_isset(&rdev->wiphy,
9499 NL80211_EXT_FEATURE_RRM))
bab5ab7d
AK		 9500 return -EINVAL;
9501 req.flags |= ASSOC_REQ_USE_RRM;
9502 }
9503
348bd456
JM		 9504 if (info->attrs[NL80211_ATTR_FILS_KEK]) {
9505 req.fils_kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
9506 req.fils_kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
9507 if (!info->attrs[NL80211_ATTR_FILS_NONCES])
9508 return -EINVAL;
9509 req.fils_nonces =
9510 nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
9511 }
9512
f62fab73 9513 err = nl80211_crypto_settings(rdev, info, &req.crypto, 1);
91bf9b26
JB		 9514 if (!err) {
9515 wdev_lock(dev->ieee80211_ptr);
bd2522b1 9516
f62fab73
JB		 9517 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid,
9518 ssid, ssid_len, &req);
bd2522b1
AZ		 9519
9520 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
9521 dev->ieee80211_ptr->conn_owner_nlportid =
9522 info->snd_portid;
9523 memcpy(dev->ieee80211_ptr->disconnect_bssid,
9524 bssid, ETH_ALEN);
9525 }
9526
91bf9b26
JB		 9527 wdev_unlock(dev->ieee80211_ptr);
9528 }
636a5d36 9529
636a5d36
JM		 9530 return err;
9531}
9532
9533static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
9534{
4c476991
JB		 9535 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9536 struct net_device *dev = info->user_ptr[1];
19957bb3 9537 const u8 *ie = NULL, *bssid;
91bf9b26 9538 int ie_len = 0, err;
19957bb3 9539 u16 reason_code;
d5cdfacb 9540 bool local_state_change;
636a5d36 9541
bad29297
AZ		 9542 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9543 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9544 return -EPERM;
9545
f4a11bb0
JB		 9546 if (!info->attrs[NL80211_ATTR_MAC])
9547 return -EINVAL;
9548
9549 if (!info->attrs[NL80211_ATTR_REASON_CODE])
9550 return -EINVAL;
9551
4c476991
JB		 9552 if (!rdev->ops->deauth)
9553 return -EOPNOTSUPP;
636a5d36 9554
074ac8df 9555 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9556 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9557 return -EOPNOTSUPP;
eec60b03 9558
19957bb3 9559 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9560
19957bb3
JB		 9561 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
9562 if (reason_code == 0) {
f4a11bb0 9563 /* Reason Code 0 is reserved */
4c476991 9564 return -EINVAL;
255e737e 9565 }
636a5d36
JM		 9566
9567 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9568 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9569 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9570 }
9571
d5cdfacb
JM		 9572 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
9573
91bf9b26
JB		 9574 wdev_lock(dev->ieee80211_ptr);
9575 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
9576 local_state_change);
9577 wdev_unlock(dev->ieee80211_ptr);
9578 return err;
636a5d36
JM		 9579}
9580
9581static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
9582{
4c476991
JB		 9583 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9584 struct net_device *dev = info->user_ptr[1];
19957bb3 9585 const u8 *ie = NULL, *bssid;
91bf9b26 9586 int ie_len = 0, err;
19957bb3 9587 u16 reason_code;
d5cdfacb 9588 bool local_state_change;
636a5d36 9589
bad29297
AZ		 9590 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9591 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9592 return -EPERM;
9593
f4a11bb0
JB		 9594 if (!info->attrs[NL80211_ATTR_MAC])
9595 return -EINVAL;
9596
9597 if (!info->attrs[NL80211_ATTR_REASON_CODE])
9598 return -EINVAL;
9599
4c476991
JB		 9600 if (!rdev->ops->disassoc)
9601 return -EOPNOTSUPP;
636a5d36 9602
074ac8df 9603 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9604 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9605 return -EOPNOTSUPP;
eec60b03 9606
19957bb3 9607 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9608
19957bb3
JB		 9609 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
9610 if (reason_code == 0) {
f4a11bb0 9611 /* Reason Code 0 is reserved */
4c476991 9612 return -EINVAL;
255e737e 9613 }
636a5d36
JM		 9614
9615 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9616 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9617 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9618 }
9619
d5cdfacb
JM		 9620 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
9621
91bf9b26
JB		 9622 wdev_lock(dev->ieee80211_ptr);
9623 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
9624 local_state_change);
9625 wdev_unlock(dev->ieee80211_ptr);
9626 return err;
636a5d36
JM		 9627}
9628
dd5b4cc7
FF		 9629static bool
9630nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
57fbcce3 9631 int mcast_rate[NUM_NL80211_BANDS],
dd5b4cc7
FF		 9632 int rateval)
9633{
9634 struct wiphy *wiphy = &rdev->wiphy;
9635 bool found = false;
9636 int band, i;
9637
57fbcce3 9638 for (band = 0; band < NUM_NL80211_BANDS; band++) {
dd5b4cc7
FF		 9639 struct ieee80211_supported_band *sband;
9640
9641 sband = wiphy->bands[band];
9642 if (!sband)
9643 continue;
9644
9645 for (i = 0; i < sband->n_bitrates; i++) {
9646 if (sband->bitrates[i].bitrate == rateval) {
9647 mcast_rate[band] = i + 1;
9648 found = true;
9649 break;
9650 }
9651 }
9652 }
9653
9654 return found;
9655}
9656
04a773ad
JB		 9657static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
9658{
4c476991
JB		 9659 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9660 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 9661 struct cfg80211_ibss_params ibss;
9662 struct wiphy *wiphy;
fffd0934 9663 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 9664 int err;
9665
8e30bc55
JB		 9666 memset(&ibss, 0, sizeof(ibss));
9667
683b6d3b 9668 if (!info->attrs[NL80211_ATTR_SSID] ||
04a773ad
JB		 9669 !nla_len(info->attrs[NL80211_ATTR_SSID]))
9670 return -EINVAL;
9671
8e30bc55
JB		 9672 ibss.beacon_interval = 100;
9673
12d20fc9 9674 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL])
8e30bc55
JB		 9675 ibss.beacon_interval =
9676 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 9677
0c317a02
PK		 9678 err = cfg80211_validate_beacon_int(rdev, NL80211_IFTYPE_ADHOC,
9679 ibss.beacon_interval);
12d20fc9
PK		 9680 if (err)
9681 return err;
8e30bc55 9682
4c476991
JB		 9683 if (!rdev->ops->join_ibss)
9684 return -EOPNOTSUPP;
04a773ad 9685
4c476991
JB		 9686 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
9687 return -EOPNOTSUPP;
04a773ad 9688
79c97e97 9689 wiphy = &rdev->wiphy;
04a773ad 9690
39193498 9691 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 9692 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 9693
9694 if (!is_valid_ether_addr(ibss.bssid))
9695 return -EINVAL;
9696 }
04a773ad
JB		 9697 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9698 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
9699
9700 if (info->attrs[NL80211_ATTR_IE]) {
9701 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9702 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
9703 }
9704
683b6d3b
JB		 9705 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
9706 if (err)
9707 return err;
04a773ad 9708
174e0cd2
IP		 9709 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef,
9710 NL80211_IFTYPE_ADHOC))
54858ee5
AS		 9711 return -EINVAL;
9712
2f301ab2 9713 switch (ibss.chandef.width) {
bf372645
SW		 9714 case NL80211_CHAN_WIDTH_5:
9715 case NL80211_CHAN_WIDTH_10:
2f301ab2
SW		 9716 case NL80211_CHAN_WIDTH_20_NOHT:
9717 break;
9718 case NL80211_CHAN_WIDTH_20:
9719 case NL80211_CHAN_WIDTH_40:
ffc11991
JD		 9720 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
9721 return -EINVAL;
9722 break;
9723 case NL80211_CHAN_WIDTH_80:
9724 case NL80211_CHAN_WIDTH_80P80:
9725 case NL80211_CHAN_WIDTH_160:
9726 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
9727 return -EINVAL;
9728 if (!wiphy_ext_feature_isset(&rdev->wiphy,
9729 NL80211_EXT_FEATURE_VHT_IBSS))
9730 return -EINVAL;
9731 break;
2f301ab2 9732 default:
c04d6150 9733 return -EINVAL;
2f301ab2 9734 }
db9c64cf 9735
04a773ad 9736 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 9737 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
9738
fbd2c8dc
TP		 9739 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
9740 u8 *rates =
9741 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
9742 int n_rates =
9743 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
9744 struct ieee80211_supported_band *sband =
683b6d3b 9745 wiphy->bands[ibss.chandef.chan->band];
fbd2c8dc 9746
34850ab2
JB		 9747 err = ieee80211_get_ratemask(sband, rates, n_rates,
9748 &ibss.basic_rates);
9749 if (err)
9750 return err;
fbd2c8dc 9751 }
dd5b4cc7 9752
803768f5
SW		 9753 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
9754 memcpy(&ibss.ht_capa_mask,
9755 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
9756 sizeof(ibss.ht_capa_mask));
9757
9758 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
9759 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
9760 return -EINVAL;
9761 memcpy(&ibss.ht_capa,
9762 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
9763 sizeof(ibss.ht_capa));
9764 }
9765
dd5b4cc7
FF		 9766 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
9767 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
9768 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
9769 return -EINVAL;
fbd2c8dc 9770
4c476991 9771 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 9772 bool no_ht = false;
9773
768075eb 9774 connkeys = nl80211_parse_connkeys(rdev, info, &no_ht);
4c476991
JB		 9775 if (IS_ERR(connkeys))
9776 return PTR_ERR(connkeys);
de7044ee 9777
3d9d1d66
JB		 9778 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
9779 no_ht) {
5e950a78 9780 kzfree(connkeys);
de7044ee
SM		 9781 return -EINVAL;
9782 }
4c476991 9783 }
04a773ad 9784
267335d6
AQ		 9785 ibss.control_port =
9786 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
9787
c3bfe1f6
DK		 9788 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
9789 int r = validate_pae_over_nl80211(rdev, info);
9790
d350a0f4
JB		 9791 if (r < 0) {
9792 kzfree(connkeys);
c3bfe1f6 9793 return r;
d350a0f4 9794 }
c3bfe1f6
DK		 9795
9796 ibss.control_port_over_nl80211 = true;
9797 }
9798
5336fa88
SW		 9799 ibss.userspace_handles_dfs =
9800 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
9801
f8d16d3e
DK		 9802 wdev_lock(dev->ieee80211_ptr);
9803 err = __cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934 9804 if (err)
b47f610b 9805 kzfree(connkeys);
f8d16d3e
DK		 9806 else if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
9807 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
9808 wdev_unlock(dev->ieee80211_ptr);
9809
04a773ad
JB		 9810 return err;
9811}
9812
9813static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
9814{
4c476991
JB		 9815 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9816 struct net_device *dev = info->user_ptr[1];
04a773ad 9817
4c476991
JB		 9818 if (!rdev->ops->leave_ibss)
9819 return -EOPNOTSUPP;
04a773ad 9820
4c476991
JB		 9821 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
9822 return -EOPNOTSUPP;
04a773ad 9823
4c476991 9824 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 9825}
9826
f4e583c8
AQ		 9827static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
9828{
9829 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9830 struct net_device *dev = info->user_ptr[1];
57fbcce3 9831 int mcast_rate[NUM_NL80211_BANDS];
f4e583c8
AQ		 9832 u32 nla_rate;
9833 int err;
9834
9835 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
876dc930
BVB		 9836 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
9837 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_OCB)
f4e583c8
AQ		 9838 return -EOPNOTSUPP;
9839
9840 if (!rdev->ops->set_mcast_rate)
9841 return -EOPNOTSUPP;
9842
9843 memset(mcast_rate, 0, sizeof(mcast_rate));
9844
9845 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
9846 return -EINVAL;
9847
9848 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
9849 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
9850 return -EINVAL;
9851
a1056b1b 9852 err = rdev_set_mcast_rate(rdev, dev, mcast_rate);
f4e583c8
AQ		 9853
9854 return err;
9855}
9856
ad7e718c
JB		 9857static struct sk_buff *
9858__cfg80211_alloc_vendor_skb(struct cfg80211_registered_device *rdev,
6c09e791
AK		 9859 struct wireless_dev *wdev, int approxlen,
9860 u32 portid, u32 seq, enum nl80211_commands cmd,
567ffc35
JB		 9861 enum nl80211_attrs attr,
9862 const struct nl80211_vendor_cmd_info *info,
9863 gfp_t gfp)
ad7e718c
JB		 9864{
9865 struct sk_buff *skb;
9866 void *hdr;
9867 struct nlattr *data;
9868
9869 skb = nlmsg_new(approxlen + 100, gfp);
9870 if (!skb)
9871 return NULL;
9872
9873 hdr = nl80211hdr_put(skb, portid, seq, 0, cmd);
9874 if (!hdr) {
9875 kfree_skb(skb);
9876 return NULL;
9877 }
9878
9879 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
9880 goto nla_put_failure;
567ffc35
JB		 9881
9882 if (info) {
9883 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_ID,
9884 info->vendor_id))
9885 goto nla_put_failure;
9886 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_SUBCMD,
9887 info->subcmd))
9888 goto nla_put_failure;
9889 }
9890
6c09e791 9891 if (wdev) {
2dad624e
ND		 9892 if (nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
9893 wdev_id(wdev), NL80211_ATTR_PAD))
6c09e791
AK		 9894 goto nla_put_failure;
9895 if (wdev->netdev &&
9896 nla_put_u32(skb, NL80211_ATTR_IFINDEX,
9897 wdev->netdev->ifindex))
9898 goto nla_put_failure;
9899 }
9900
ae0be8de 9901 data = nla_nest_start_noflag(skb, attr);
76e1fb4b
JB		 9902 if (!data)
9903 goto nla_put_failure;
ad7e718c
JB		 9904
9905 ((void **)skb->cb)[0] = rdev;
9906 ((void **)skb->cb)[1] = hdr;
9907 ((void **)skb->cb)[2] = data;
9908
9909 return skb;
9910
9911 nla_put_failure:
9912 kfree_skb(skb);
9913 return NULL;
9914}
f4e583c8 9915
e03ad6ea 9916struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
6c09e791 9917 struct wireless_dev *wdev,
e03ad6ea
JB		 9918 enum nl80211_commands cmd,
9919 enum nl80211_attrs attr,
55c1fdf0 9920 unsigned int portid,
e03ad6ea
JB		 9921 int vendor_event_idx,
9922 int approxlen, gfp_t gfp)
9923{
f26cbf40 9924 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
e03ad6ea
JB		 9925 const struct nl80211_vendor_cmd_info *info;
9926
9927 switch (cmd) {
9928 case NL80211_CMD_TESTMODE:
9929 if (WARN_ON(vendor_event_idx != -1))
9930 return NULL;
9931 info = NULL;
9932 break;
9933 case NL80211_CMD_VENDOR:
9934 if (WARN_ON(vendor_event_idx < 0 ||
9935 vendor_event_idx >= wiphy->n_vendor_events))
9936 return NULL;
9937 info = &wiphy->vendor_events[vendor_event_idx];
9938 break;
9939 default:
9940 WARN_ON(1);
9941 return NULL;
9942 }
9943
55c1fdf0 9944 return __cfg80211_alloc_vendor_skb(rdev, wdev, approxlen, portid, 0,
e03ad6ea
JB		 9945 cmd, attr, info, gfp);
9946}
9947EXPORT_SYMBOL(__cfg80211_alloc_event_skb);
9948
9949void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp)
9950{
9951 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
9952 void *hdr = ((void **)skb->cb)[1];
55c1fdf0 9953 struct nlmsghdr *nlhdr = nlmsg_hdr(skb);
e03ad6ea
JB		 9954 struct nlattr *data = ((void **)skb->cb)[2];
9955 enum nl80211_multicast_groups mcgrp = NL80211_MCGRP_TESTMODE;
9956
bd8c78e7
JB		 9957 /* clear CB data for netlink core to own from now on */
9958 memset(skb->cb, 0, sizeof(skb->cb));
9959
e03ad6ea
JB		 9960 nla_nest_end(skb, data);
9961 genlmsg_end(skb, hdr);
9962
55c1fdf0
JB		 9963 if (nlhdr->nlmsg_pid) {
9964 genlmsg_unicast(wiphy_net(&rdev->wiphy), skb,
9965 nlhdr->nlmsg_pid);
9966 } else {
9967 if (data->nla_type == NL80211_ATTR_VENDOR_DATA)
9968 mcgrp = NL80211_MCGRP_VENDOR;
e03ad6ea 9969
55c1fdf0
JB		 9970 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
9971 skb, 0, mcgrp, gfp);
9972 }
e03ad6ea
JB		 9973}
9974EXPORT_SYMBOL(__cfg80211_send_event_skb);
9975
aff89a9b 9976#ifdef CONFIG_NL80211_TESTMODE
aff89a9b
JB		 9977static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
9978{
4c476991 9979 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fc73f11f
DS		 9980 struct wireless_dev *wdev =
9981 __cfg80211_wdev_from_attrs(genl_info_net(info), info->attrs);
aff89a9b
JB		 9982 int err;
9983
fc73f11f
DS		 9984 if (!rdev->ops->testmode_cmd)
9985 return -EOPNOTSUPP;
9986
9987 if (IS_ERR(wdev)) {
9988 err = PTR_ERR(wdev);
9989 if (err != -EINVAL)
9990 return err;
9991 wdev = NULL;
9992 } else if (wdev->wiphy != &rdev->wiphy) {
9993 return -EINVAL;
9994 }
9995
aff89a9b
JB		 9996 if (!info->attrs[NL80211_ATTR_TESTDATA])
9997 return -EINVAL;
9998
ad7e718c 9999 rdev->cur_cmd_info = info;
fc73f11f 10000 err = rdev_testmode_cmd(rdev, wdev,
aff89a9b
JB		 10001 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
10002 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
ad7e718c 10003 rdev->cur_cmd_info = NULL;
aff89a9b 10004
aff89a9b
JB		 10005 return err;
10006}
10007
71063f0e
WYG		 10008static int nl80211_testmode_dump(struct sk_buff *skb,
10009 struct netlink_callback *cb)
10010{
00918d33 10011 struct cfg80211_registered_device *rdev;
50508d94 10012 struct nlattr **attrbuf = NULL;
71063f0e
WYG		 10013 int err;
10014 long phy_idx;
10015 void *data = NULL;
10016 int data_len = 0;
10017
5fe231e8
JB		 10018 rtnl_lock();
10019
71063f0e
WYG		 10020 if (cb->args[0]) {
10021 /*
10022 * 0 is a valid index, but not valid for args[0],
10023 * so we need to offset by 1.
10024 */
10025 phy_idx = cb->args[0] - 1;
a4956dca
LC		 10026
10027 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
10028 if (!rdev) {
10029 err = -ENOENT;
10030 goto out_err;
10031 }
71063f0e 10032 } else {
50508d94
JB		 10033 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
10034 GFP_KERNEL);
10035 if (!attrbuf) {
10036 err = -ENOMEM;
10037 goto out_err;
10038 }
c90c39da 10039
8cb08174
JB		 10040 err = nlmsg_parse_deprecated(cb->nlh,
10041 GENL_HDRLEN + nl80211_fam.hdrsize,
10042 attrbuf, nl80211_fam.maxattr,
10043 nl80211_policy, NULL);
71063f0e 10044 if (err)
5fe231e8 10045 goto out_err;
00918d33 10046
c90c39da 10047 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
2bd7e35d 10048 if (IS_ERR(rdev)) {
5fe231e8
JB		 10049 err = PTR_ERR(rdev);
10050 goto out_err;
00918d33 10051 }
2bd7e35d 10052 phy_idx = rdev->wiphy_idx;
2bd7e35d 10053
c90c39da
JB		 10054 if (attrbuf[NL80211_ATTR_TESTDATA])
10055 cb->args[1] = (long)attrbuf[NL80211_ATTR_TESTDATA];
71063f0e
WYG		 10056 }
10057
10058 if (cb->args[1]) {
10059 data = nla_data((void *)cb->args[1]);
10060 data_len = nla_len((void *)cb->args[1]);
10061 }
10062
00918d33 10063 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 10064 err = -EOPNOTSUPP;
10065 goto out_err;
10066 }
10067
10068 while (1) {
15e47304 10069 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 10070 cb->nlh->nlmsg_seq, NLM_F_MULTI,
10071 NL80211_CMD_TESTMODE);
10072 struct nlattr *tmdata;
10073
cb35fba3
DC		 10074 if (!hdr)
10075 break;
10076
9360ffd1 10077 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 10078 genlmsg_cancel(skb, hdr);
10079 break;
10080 }
10081
ae0be8de 10082 tmdata = nla_nest_start_noflag(skb, NL80211_ATTR_TESTDATA);
71063f0e
WYG		 10083 if (!tmdata) {
10084 genlmsg_cancel(skb, hdr);
10085 break;
10086 }
e35e4d28 10087 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 10088 nla_nest_end(skb, tmdata);
10089
10090 if (err == -ENOBUFS || err == -ENOENT) {
10091 genlmsg_cancel(skb, hdr);
10092 break;
10093 } else if (err) {
10094 genlmsg_cancel(skb, hdr);
10095 goto out_err;
10096 }
10097
10098 genlmsg_end(skb, hdr);
10099 }
10100
10101 err = skb->len;
10102 /* see above */
10103 cb->args[0] = phy_idx + 1;
10104 out_err:
50508d94 10105 kfree(attrbuf);
5fe231e8 10106 rtnl_unlock();
71063f0e
WYG		 10107 return err;
10108}
aff89a9b
JB		 10109#endif
10110
b23aa676
SO		 10111static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
10112{
4c476991
JB		 10113 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10114 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 10115 struct cfg80211_connect_params connect;
10116 struct wiphy *wiphy;
fffd0934 10117 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 10118 int err;
10119
10120 memset(&connect, 0, sizeof(connect));
10121
b23aa676
SO		 10122 if (!info->attrs[NL80211_ATTR_SSID] ||
10123 !nla_len(info->attrs[NL80211_ATTR_SSID]))
10124 return -EINVAL;
10125
10126 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
10127 connect.auth_type =
10128 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 10129 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
10130 NL80211_CMD_CONNECT))
b23aa676
SO		 10131 return -EINVAL;
10132 } else
10133 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
10134
10135 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
10136
3a00df57
AS		 10137 if (info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS] &&
10138 !wiphy_ext_feature_isset(&rdev->wiphy,
10139 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
10140 return -EINVAL;
10141 connect.want_1x = info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS];
10142
c0692b8f 10143 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 10144 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 10145 if (err)
10146 return err;
b23aa676 10147
074ac8df 10148 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10149 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10150 return -EOPNOTSUPP;
b23aa676 10151
79c97e97 10152 wiphy = &rdev->wiphy;
b23aa676 10153
4486ea98
BS		 10154 connect.bg_scan_period = -1;
10155 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
10156 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
10157 connect.bg_scan_period =
10158 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
10159 }
10160
b23aa676
SO		 10161 if (info->attrs[NL80211_ATTR_MAC])
10162 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
1df4a510
JM		 10163 else if (info->attrs[NL80211_ATTR_MAC_HINT])
10164 connect.bssid_hint =
10165 nla_data(info->attrs[NL80211_ATTR_MAC_HINT]);
b23aa676
SO		 10166 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10167 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10168
10169 if (info->attrs[NL80211_ATTR_IE]) {
10170 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10171 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10172 }
10173
cee00a95
JM		 10174 if (info->attrs[NL80211_ATTR_USE_MFP]) {
10175 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
65026002
EG		 10176 if (connect.mfp == NL80211_MFP_OPTIONAL &&
10177 !wiphy_ext_feature_isset(&rdev->wiphy,
10178 NL80211_EXT_FEATURE_MFP_OPTIONAL))
10179 return -EOPNOTSUPP;
cee00a95
JM		 10180 } else {
10181 connect.mfp = NL80211_MFP_NO;
10182 }
10183
ba6fbacf
JM		 10184 if (info->attrs[NL80211_ATTR_PREV_BSSID])
10185 connect.prev_bssid =
10186 nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
10187
b23aa676 10188 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
664834de
JM		 10189 connect.channel = nl80211_get_valid_chan(
10190 wiphy, info->attrs[NL80211_ATTR_WIPHY_FREQ]);
10191 if (!connect.channel)
1df4a510
JM		 10192 return -EINVAL;
10193 } else if (info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]) {
664834de
JM		 10194 connect.channel_hint = nl80211_get_valid_chan(
10195 wiphy, info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]);
10196 if (!connect.channel_hint)
4c476991 10197 return -EINVAL;
b23aa676
SO		 10198 }
10199
2a38075c
AAL		 10200 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
10201 connect.edmg.channels =
10202 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
10203
10204 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
10205 connect.edmg.bw_config =
10206 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
10207 }
10208
fffd0934 10209 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
768075eb 10210 connkeys = nl80211_parse_connkeys(rdev, info, NULL);
4c476991
JB		 10211 if (IS_ERR(connkeys))
10212 return PTR_ERR(connkeys);
fffd0934
JB		 10213 }
10214
7e7c8926
BG		 10215 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
10216 connect.flags |= ASSOC_REQ_DISABLE_HT;
10217
10218 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
10219 memcpy(&connect.ht_capa_mask,
10220 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10221 sizeof(connect.ht_capa_mask));
10222
10223 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e 10224 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
b47f610b 10225 kzfree(connkeys);
7e7c8926 10226 return -EINVAL;
b4e4f47e 10227 }
7e7c8926
BG		 10228 memcpy(&connect.ht_capa,
10229 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10230 sizeof(connect.ht_capa));
10231 }
10232
ee2aca34
JB		 10233 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
10234 connect.flags |= ASSOC_REQ_DISABLE_VHT;
10235
10236 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
10237 memcpy(&connect.vht_capa_mask,
10238 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
10239 sizeof(connect.vht_capa_mask));
10240
10241 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
10242 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]) {
b47f610b 10243 kzfree(connkeys);
ee2aca34
JB		 10244 return -EINVAL;
10245 }
10246 memcpy(&connect.vht_capa,
10247 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
10248 sizeof(connect.vht_capa));
10249 }
10250
bab5ab7d 10251 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 10252 if (!((rdev->wiphy.features &
10253 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
10254 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
10255 !wiphy_ext_feature_isset(&rdev->wiphy,
10256 NL80211_EXT_FEATURE_RRM)) {
707554b4 10257 kzfree(connkeys);
bab5ab7d 10258 return -EINVAL;
707554b4 10259 }
bab5ab7d
AK		 10260 connect.flags |= ASSOC_REQ_USE_RRM;
10261 }
10262
34d50519 10263 connect.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
57fbcce3 10264 if (connect.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
34d50519
LD		 10265 kzfree(connkeys);
10266 return -EOPNOTSUPP;
10267 }
10268
38de03d2
AS		 10269 if (info->attrs[NL80211_ATTR_BSS_SELECT]) {
10270 /* bss selection makes no sense if bssid is set */
10271 if (connect.bssid) {
10272 kzfree(connkeys);
10273 return -EINVAL;
10274 }
10275
10276 err = parse_bss_select(info->attrs[NL80211_ATTR_BSS_SELECT],
10277 wiphy, &connect.bss_select);
10278 if (err) {
10279 kzfree(connkeys);
10280 return err;
10281 }
10282 }
10283
a3caf744
VK		 10284 if (wiphy_ext_feature_isset(&rdev->wiphy,
10285 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
10286 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
10287 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
10288 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
10289 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10290 connect.fils_erp_username =
10291 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10292 connect.fils_erp_username_len =
10293 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10294 connect.fils_erp_realm =
10295 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10296 connect.fils_erp_realm_len =
10297 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10298 connect.fils_erp_next_seq_num =
10299 nla_get_u16(
10300 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
10301 connect.fils_erp_rrk =
10302 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10303 connect.fils_erp_rrk_len =
10304 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10305 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
10306 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
10307 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
10308 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10309 kzfree(connkeys);
10310 return -EINVAL;
10311 }
10312
40cbfa90
SD		 10313 if (nla_get_flag(info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])) {
10314 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
2f0605a6 10315 kzfree(connkeys);
40cbfa90
SD		 10316 GENL_SET_ERR_MSG(info,
10317 "external auth requires connection ownership");
10318 return -EINVAL;
10319 }
10320 connect.flags |= CONNECT_REQ_EXTERNAL_AUTH_SUPPORT;
10321 }
10322
83739b03 10323 wdev_lock(dev->ieee80211_ptr);
bd2522b1 10324
4ce2bd9c
JM		 10325 err = cfg80211_connect(rdev, dev, &connect, connkeys,
10326 connect.prev_bssid);
fffd0934 10327 if (err)
b47f610b 10328 kzfree(connkeys);
bd2522b1
AZ		 10329
10330 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10331 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
10332 if (connect.bssid)
10333 memcpy(dev->ieee80211_ptr->disconnect_bssid,
10334 connect.bssid, ETH_ALEN);
10335 else
10336 memset(dev->ieee80211_ptr->disconnect_bssid,
10337 0, ETH_ALEN);
10338 }
10339
10340 wdev_unlock(dev->ieee80211_ptr);
10341
b23aa676
SO		 10342 return err;
10343}
10344
088e8df8 10345static int nl80211_update_connect_params(struct sk_buff *skb,
10346 struct genl_info *info)
10347{
10348 struct cfg80211_connect_params connect = {};
10349 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10350 struct net_device *dev = info->user_ptr[1];
10351 struct wireless_dev *wdev = dev->ieee80211_ptr;
7f9a3e15
VK		 10352 bool fils_sk_offload;
10353 u32 auth_type;
088e8df8 10354 u32 changed = 0;
10355 int ret;
10356
10357 if (!rdev->ops->update_connect_params)
10358 return -EOPNOTSUPP;
10359
10360 if (info->attrs[NL80211_ATTR_IE]) {
088e8df8 10361 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10362 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10363 changed |= UPDATE_ASSOC_IES;
10364 }
10365
7f9a3e15
VK		 10366 fils_sk_offload = wiphy_ext_feature_isset(&rdev->wiphy,
10367 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD);
10368
10369 /*
10370 * when driver supports fils-sk offload all attributes must be
10371 * provided. So the else covers "fils-sk-not-all" and
10372 * "no-fils-sk-any".
10373 */
10374 if (fils_sk_offload &&
10375 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
10376 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
10377 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
10378 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10379 connect.fils_erp_username =
10380 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10381 connect.fils_erp_username_len =
10382 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10383 connect.fils_erp_realm =
10384 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10385 connect.fils_erp_realm_len =
10386 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10387 connect.fils_erp_next_seq_num =
10388 nla_get_u16(
10389 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
10390 connect.fils_erp_rrk =
10391 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10392 connect.fils_erp_rrk_len =
10393 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10394 changed |= UPDATE_FILS_ERP_INFO;
10395 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
10396 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
10397 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
10398 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10399 return -EINVAL;
10400 }
10401
10402 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
10403 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
10404 if (!nl80211_valid_auth_type(rdev, auth_type,
10405 NL80211_CMD_CONNECT))
10406 return -EINVAL;
10407
10408 if (auth_type == NL80211_AUTHTYPE_FILS_SK &&
10409 fils_sk_offload && !(changed & UPDATE_FILS_ERP_INFO))
10410 return -EINVAL;
10411
10412 connect.auth_type = auth_type;
10413 changed |= UPDATE_AUTH_TYPE;
10414 }
10415
088e8df8 10416 wdev_lock(dev->ieee80211_ptr);
10417 if (!wdev->current_bss)
10418 ret = -ENOLINK;
10419 else
10420 ret = rdev_update_connect_params(rdev, dev, &connect, changed);
10421 wdev_unlock(dev->ieee80211_ptr);
10422
10423 return ret;
10424}
10425
b23aa676
SO		 10426static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
10427{
4c476991
JB		 10428 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10429 struct net_device *dev = info->user_ptr[1];
b23aa676 10430 u16 reason;
83739b03 10431 int ret;
b23aa676 10432
bad29297
AZ		 10433 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10434 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10435 return -EPERM;
10436
b23aa676
SO		 10437 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10438 reason = WLAN_REASON_DEAUTH_LEAVING;
10439 else
10440 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10441
10442 if (reason == 0)
10443 return -EINVAL;
10444
074ac8df 10445 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10446 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10447 return -EOPNOTSUPP;
b23aa676 10448
83739b03
JB		 10449 wdev_lock(dev->ieee80211_ptr);
10450 ret = cfg80211_disconnect(rdev, dev, reason, true);
10451 wdev_unlock(dev->ieee80211_ptr);
10452 return ret;
b23aa676
SO		 10453}
10454
463d0183
JB		 10455static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
10456{
4c476991 10457 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 10458 struct net *net;
10459 int err;
463d0183 10460
4b681c82
VK		 10461 if (info->attrs[NL80211_ATTR_PID]) {
10462 u32 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
10463
10464 net = get_net_ns_by_pid(pid);
10465 } else if (info->attrs[NL80211_ATTR_NETNS_FD]) {
10466 u32 fd = nla_get_u32(info->attrs[NL80211_ATTR_NETNS_FD]);
463d0183 10467
4b681c82
VK		 10468 net = get_net_ns_by_fd(fd);
10469 } else {
10470 return -EINVAL;
10471 }
463d0183 10472
4c476991
JB		 10473 if (IS_ERR(net))
10474 return PTR_ERR(net);
463d0183
JB		 10475
10476 err = 0;
10477
10478 /* check if anything to do */
4c476991
JB		 10479 if (!net_eq(wiphy_net(&rdev->wiphy), net))
10480 err = cfg80211_switch_netns(rdev, net);
463d0183 10481
463d0183 10482 put_net(net);
463d0183
JB		 10483 return err;
10484}
10485
67fbb16b
SO		 10486static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
10487{
4c476991 10488 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 10489 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
10490 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 10491 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 10492 struct cfg80211_pmksa pmksa;
10493
10494 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
10495
67fbb16b
SO		 10496 if (!info->attrs[NL80211_ATTR_PMKID])
10497 return -EINVAL;
10498
67fbb16b 10499 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
a3caf744
VK		 10500
10501 if (info->attrs[NL80211_ATTR_MAC]) {
10502 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
10503 } else if (info->attrs[NL80211_ATTR_SSID] &&
10504 info->attrs[NL80211_ATTR_FILS_CACHE_ID] &&
10505 (info->genlhdr->cmd == NL80211_CMD_DEL_PMKSA ||
10506 info->attrs[NL80211_ATTR_PMK])) {
10507 pmksa.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10508 pmksa.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10509 pmksa.cache_id =
10510 nla_data(info->attrs[NL80211_ATTR_FILS_CACHE_ID]);
10511 } else {
10512 return -EINVAL;
10513 }
10514 if (info->attrs[NL80211_ATTR_PMK]) {
10515 pmksa.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
10516 pmksa.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
10517 }
67fbb16b 10518
7fc82af8
VJ		 10519 if (info->attrs[NL80211_ATTR_PMK_LIFETIME])
10520 pmksa.pmk_lifetime =
10521 nla_get_u32(info->attrs[NL80211_ATTR_PMK_LIFETIME]);
10522
10523 if (info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD])
10524 pmksa.pmk_reauth_threshold =
10525 nla_get_u8(
10526 info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD]);
10527
074ac8df 10528 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6c900360
LD		 10529 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
10530 !(dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP &&
10531 wiphy_ext_feature_isset(&rdev->wiphy,
10532 NL80211_EXT_FEATURE_AP_PMKSA_CACHING)))
4c476991 10533 return -EOPNOTSUPP;
67fbb16b
SO		 10534
10535 switch (info->genlhdr->cmd) {
10536 case NL80211_CMD_SET_PMKSA:
10537 rdev_ops = rdev->ops->set_pmksa;
10538 break;
10539 case NL80211_CMD_DEL_PMKSA:
10540 rdev_ops = rdev->ops->del_pmksa;
10541 break;
10542 default:
10543 WARN_ON(1);
10544 break;
10545 }
10546
4c476991
JB		 10547 if (!rdev_ops)
10548 return -EOPNOTSUPP;
67fbb16b 10549
4c476991 10550 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 10551}
10552
10553static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
10554{
4c476991
JB		 10555 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10556 struct net_device *dev = info->user_ptr[1];
67fbb16b 10557
074ac8df 10558 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10559 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10560 return -EOPNOTSUPP;
67fbb16b 10561
4c476991
JB		 10562 if (!rdev->ops->flush_pmksa)
10563 return -EOPNOTSUPP;
67fbb16b 10564
e35e4d28 10565 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 10566}
10567
109086ce
AN		 10568static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
10569{
10570 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10571 struct net_device *dev = info->user_ptr[1];
10572 u8 action_code, dialog_token;
df942e7b 10573 u32 peer_capability = 0;
109086ce
AN		 10574 u16 status_code;
10575 u8 *peer;
31fa97c5 10576 bool initiator;
109086ce
AN		 10577
10578 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
10579 !rdev->ops->tdls_mgmt)
10580 return -EOPNOTSUPP;
10581
10582 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
10583 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
10584 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
10585 !info->attrs[NL80211_ATTR_IE] ||
10586 !info->attrs[NL80211_ATTR_MAC])
10587 return -EINVAL;
10588
10589 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
10590 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
10591 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
10592 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
31fa97c5 10593 initiator = nla_get_flag(info->attrs[NL80211_ATTR_TDLS_INITIATOR]);
df942e7b
SDU		 10594 if (info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY])
10595 peer_capability =
10596 nla_get_u32(info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY]);
109086ce 10597
e35e4d28 10598 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
df942e7b 10599 dialog_token, status_code, peer_capability,
31fa97c5 10600 initiator,
e35e4d28
HG		 10601 nla_data(info->attrs[NL80211_ATTR_IE]),
10602 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 10603}
10604
10605static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
10606{
10607 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10608 struct net_device *dev = info->user_ptr[1];
10609 enum nl80211_tdls_operation operation;
10610 u8 *peer;
10611
10612 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
10613 !rdev->ops->tdls_oper)
10614 return -EOPNOTSUPP;
10615
10616 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
10617 !info->attrs[NL80211_ATTR_MAC])
10618 return -EINVAL;
10619
10620 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
10621 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
10622
e35e4d28 10623 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 10624}
10625
9588bbd5
JM		 10626static int nl80211_remain_on_channel(struct sk_buff *skb,
10627 struct genl_info *info)
10628{
4c476991 10629 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10630 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 10631 struct cfg80211_chan_def chandef;
34373d12 10632 const struct cfg80211_chan_def *compat_chandef;
9588bbd5
JM		 10633 struct sk_buff *msg;
10634 void *hdr;
10635 u64 cookie;
683b6d3b 10636 u32 duration;
9588bbd5
JM		 10637 int err;
10638
10639 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
10640 !info->attrs[NL80211_ATTR_DURATION])
10641 return -EINVAL;
10642
10643 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
10644
ebf348fc
JB		 10645 if (!rdev->ops->remain_on_channel ||
10646 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
10647 return -EOPNOTSUPP;
10648
9588bbd5 10649 /*
ebf348fc
JB		 10650 * We should be on that channel for at least a minimum amount of
10651 * time (10ms) but no longer than the driver supports.
9588bbd5 10652 */
ebf348fc 10653 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 10654 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 10655 return -EINVAL;
10656
683b6d3b
JB		 10657 err = nl80211_parse_chandef(rdev, info, &chandef);
10658 if (err)
10659 return err;
9588bbd5 10660
34373d12
VT		 10661 wdev_lock(wdev);
10662 if (!cfg80211_off_channel_oper_allowed(wdev) &&
10663 !cfg80211_chandef_identical(&wdev->chandef, &chandef)) {
10664 compat_chandef = cfg80211_chandef_compatible(&wdev->chandef,
10665 &chandef);
10666 if (compat_chandef != &chandef) {
10667 wdev_unlock(wdev);
10668 return -EBUSY;
10669 }
10670 }
10671 wdev_unlock(wdev);
10672
9588bbd5 10673 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 10674 if (!msg)
10675 return -ENOMEM;
9588bbd5 10676
15e47304 10677 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5 10678 NL80211_CMD_REMAIN_ON_CHANNEL);
cb35fba3
DC		 10679 if (!hdr) {
10680 err = -ENOBUFS;
9588bbd5
JM		 10681 goto free_msg;
10682 }
10683
683b6d3b
JB		 10684 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
10685 duration, &cookie);
9588bbd5
JM		 10686
10687 if (err)
10688 goto free_msg;
10689
2dad624e
ND		 10690 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
10691 NL80211_ATTR_PAD))
9360ffd1 10692 goto nla_put_failure;
9588bbd5
JM		 10693
10694 genlmsg_end(msg, hdr);
4c476991
JB		 10695
10696 return genlmsg_reply(msg, info);
9588bbd5
JM		 10697
10698 nla_put_failure:
10699 err = -ENOBUFS;
10700 free_msg:
10701 nlmsg_free(msg);
9588bbd5
JM		 10702 return err;
10703}
10704
10705static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
10706 struct genl_info *info)
10707{
4c476991 10708 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10709 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 10710 u64 cookie;
9588bbd5
JM		 10711
10712 if (!info->attrs[NL80211_ATTR_COOKIE])
10713 return -EINVAL;
10714
4c476991
JB		 10715 if (!rdev->ops->cancel_remain_on_channel)
10716 return -EOPNOTSUPP;
9588bbd5 10717
9588bbd5
JM		 10718 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
10719
e35e4d28 10720 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 10721}
10722
13ae75b1
JM		 10723static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
10724 struct genl_info *info)
10725{
13ae75b1 10726 struct cfg80211_bitrate_mask mask;
a7c7fbff 10727 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 10728 struct net_device *dev = info->user_ptr[1];
a7c7fbff 10729 int err;
13ae75b1 10730
4c476991
JB		 10731 if (!rdev->ops->set_bitrate_mask)
10732 return -EOPNOTSUPP;
13ae75b1 10733
a7c7fbff
PK		 10734 err = nl80211_parse_tx_bitrate_mask(info, &mask);
10735 if (err)
10736 return err;
13ae75b1 10737
e35e4d28 10738 return rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
13ae75b1
JM		 10739}
10740
2e161f78 10741static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 10742{
4c476991 10743 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10744 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 10745 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 10746
10747 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
10748 return -EINVAL;
10749
2e161f78
JB		 10750 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
10751 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 10752
71bbc994
JB		 10753 switch (wdev->iftype) {
10754 case NL80211_IFTYPE_STATION:
10755 case NL80211_IFTYPE_ADHOC:
10756 case NL80211_IFTYPE_P2P_CLIENT:
10757 case NL80211_IFTYPE_AP:
10758 case NL80211_IFTYPE_AP_VLAN:
10759 case NL80211_IFTYPE_MESH_POINT:
10760 case NL80211_IFTYPE_P2P_GO:
98104fde 10761 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 10762 break;
cb3b7d87 10763 case NL80211_IFTYPE_NAN:
71bbc994 10764 default:
4c476991 10765 return -EOPNOTSUPP;
71bbc994 10766 }
026331c4
JM		 10767
10768 /* not much point in registering if we can't reply */
4c476991
JB		 10769 if (!rdev->ops->mgmt_tx)
10770 return -EOPNOTSUPP;
026331c4 10771
15e47304 10772 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
ff74c51e
IP		 10773 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
10774 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]),
10775 info->extack);
026331c4
JM		 10776}
10777
2e161f78 10778static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 10779{
4c476991 10780 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10781 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 10782 struct cfg80211_chan_def chandef;
026331c4 10783 int err;
d64d373f 10784 void *hdr = NULL;
026331c4 10785 u64 cookie;
e247bd90 10786 struct sk_buff *msg = NULL;
b176e629
AO		 10787 struct cfg80211_mgmt_tx_params params = {
10788 .dont_wait_for_ack =
10789 info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK],
10790 };
026331c4 10791
683b6d3b 10792 if (!info->attrs[NL80211_ATTR_FRAME])
026331c4
JM		 10793 return -EINVAL;
10794
4c476991
JB		 10795 if (!rdev->ops->mgmt_tx)
10796 return -EOPNOTSUPP;
026331c4 10797
71bbc994 10798 switch (wdev->iftype) {
ea141b75
AQ		 10799 case NL80211_IFTYPE_P2P_DEVICE:
10800 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
10801 return -EINVAL;
71bbc994
JB		 10802 case NL80211_IFTYPE_STATION:
10803 case NL80211_IFTYPE_ADHOC:
10804 case NL80211_IFTYPE_P2P_CLIENT:
10805 case NL80211_IFTYPE_AP:
10806 case NL80211_IFTYPE_AP_VLAN:
10807 case NL80211_IFTYPE_MESH_POINT:
10808 case NL80211_IFTYPE_P2P_GO:
10809 break;
cb3b7d87 10810 case NL80211_IFTYPE_NAN:
71bbc994 10811 default:
4c476991 10812 return -EOPNOTSUPP;
71bbc994 10813 }
026331c4 10814
f7ca38df 10815 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 10816 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df 10817 return -EINVAL;
b176e629 10818 params.wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 10819
10820 /*
10821 * We should wait on the channel for at least a minimum amount
10822 * of time (10ms) but no longer than the driver supports.
10823 */
b176e629
AO		 10824 if (params.wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
10825 params.wait > rdev->wiphy.max_remain_on_channel_duration)
ebf348fc 10826 return -EINVAL;
f7ca38df
JB		 10827 }
10828
b176e629 10829 params.offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
f7ca38df 10830
b176e629 10831 if (params.offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
7c4ef712
JB		 10832 return -EINVAL;
10833
b176e629 10834 params.no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
e9f935e3 10835
ea141b75
AQ		 10836 /* get the channel if any has been specified, otherwise pass NULL to
10837 * the driver. The latter will use the current one
10838 */
10839 chandef.chan = NULL;
10840 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
10841 err = nl80211_parse_chandef(rdev, info, &chandef);
10842 if (err)
10843 return err;
10844 }
10845
b176e629 10846 if (!chandef.chan && params.offchan)
ea141b75 10847 return -EINVAL;
026331c4 10848
34373d12
VT		 10849 wdev_lock(wdev);
10850 if (params.offchan && !cfg80211_off_channel_oper_allowed(wdev)) {
10851 wdev_unlock(wdev);
10852 return -EBUSY;
10853 }
10854 wdev_unlock(wdev);
10855
34d22ce2
AO		 10856 params.buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
10857 params.len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
10858
10859 if (info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]) {
10860 int len = nla_len(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
10861 int i;
10862
10863 if (len % sizeof(u16))
10864 return -EINVAL;
10865
10866 params.n_csa_offsets = len / sizeof(u16);
10867 params.csa_offsets =
10868 nla_data(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
10869
10870 /* check that all the offsets fit the frame */
10871 for (i = 0; i < params.n_csa_offsets; i++) {
10872 if (params.csa_offsets[i] >= params.len)
10873 return -EINVAL;
10874 }
10875 }
10876
b176e629 10877 if (!params.dont_wait_for_ack) {
e247bd90
JB		 10878 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
10879 if (!msg)
10880 return -ENOMEM;
026331c4 10881
15e47304 10882 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 10883 NL80211_CMD_FRAME);
cb35fba3
DC		 10884 if (!hdr) {
10885 err = -ENOBUFS;
e247bd90
JB		 10886 goto free_msg;
10887 }
026331c4 10888 }
e247bd90 10889
b176e629
AO		 10890 params.chan = chandef.chan;
10891 err = cfg80211_mlme_mgmt_tx(rdev, wdev, &params, &cookie);
026331c4
JM		 10892 if (err)
10893 goto free_msg;
10894
e247bd90 10895 if (msg) {
2dad624e
ND		 10896 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
10897 NL80211_ATTR_PAD))
9360ffd1 10898 goto nla_put_failure;
026331c4 10899
e247bd90
JB		 10900 genlmsg_end(msg, hdr);
10901 return genlmsg_reply(msg, info);
10902 }
10903
10904 return 0;
026331c4
JM		 10905
10906 nla_put_failure:
10907 err = -ENOBUFS;
10908 free_msg:
10909 nlmsg_free(msg);
026331c4
JM		 10910 return err;
10911}
10912
f7ca38df
JB		 10913static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
10914{
10915 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10916 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 10917 u64 cookie;
10918
10919 if (!info->attrs[NL80211_ATTR_COOKIE])
10920 return -EINVAL;
10921
10922 if (!rdev->ops->mgmt_tx_cancel_wait)
10923 return -EOPNOTSUPP;
10924
71bbc994
JB		 10925 switch (wdev->iftype) {
10926 case NL80211_IFTYPE_STATION:
10927 case NL80211_IFTYPE_ADHOC:
10928 case NL80211_IFTYPE_P2P_CLIENT:
10929 case NL80211_IFTYPE_AP:
10930 case NL80211_IFTYPE_AP_VLAN:
10931 case NL80211_IFTYPE_P2P_GO:
98104fde 10932 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 10933 break;
cb3b7d87 10934 case NL80211_IFTYPE_NAN:
71bbc994 10935 default:
f7ca38df 10936 return -EOPNOTSUPP;
71bbc994 10937 }
f7ca38df
JB		 10938
10939 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
10940
e35e4d28 10941 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 10942}
10943
ffb9eb3d
KV		 10944static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
10945{
4c476991 10946 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 10947 struct wireless_dev *wdev;
4c476991 10948 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 10949 u8 ps_state;
10950 bool state;
10951 int err;
10952
4c476991
JB		 10953 if (!info->attrs[NL80211_ATTR_PS_STATE])
10954 return -EINVAL;
ffb9eb3d
KV		 10955
10956 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
10957
ffb9eb3d
KV		 10958 wdev = dev->ieee80211_ptr;
10959
4c476991
JB		 10960 if (!rdev->ops->set_power_mgmt)
10961 return -EOPNOTSUPP;
ffb9eb3d
KV		 10962
10963 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
10964
10965 if (state == wdev->ps)
4c476991 10966 return 0;
ffb9eb3d 10967
e35e4d28 10968 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 10969 if (!err)
10970 wdev->ps = state;
ffb9eb3d
KV		 10971 return err;
10972}
10973
10974static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
10975{
4c476991 10976 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 10977 enum nl80211_ps_state ps_state;
10978 struct wireless_dev *wdev;
4c476991 10979 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 10980 struct sk_buff *msg;
10981 void *hdr;
10982 int err;
10983
ffb9eb3d
KV		 10984 wdev = dev->ieee80211_ptr;
10985
4c476991
JB		 10986 if (!rdev->ops->set_power_mgmt)
10987 return -EOPNOTSUPP;
ffb9eb3d
KV		 10988
10989 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 10990 if (!msg)
10991 return -ENOMEM;
ffb9eb3d 10992
15e47304 10993 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 10994 NL80211_CMD_GET_POWER_SAVE);
10995 if (!hdr) {
4c476991 10996 err = -ENOBUFS;
ffb9eb3d
KV		 10997 goto free_msg;
10998 }
10999
11000 if (wdev->ps)
11001 ps_state = NL80211_PS_ENABLED;
11002 else
11003 ps_state = NL80211_PS_DISABLED;
11004
9360ffd1
DM		 11005 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
11006 goto nla_put_failure;
ffb9eb3d
KV		 11007
11008 genlmsg_end(msg, hdr);
4c476991 11009 return genlmsg_reply(msg, info);
ffb9eb3d 11010
4c476991 11011 nla_put_failure:
ffb9eb3d 11012 err = -ENOBUFS;
4c476991 11013 free_msg:
ffb9eb3d 11014 nlmsg_free(msg);
ffb9eb3d
KV		 11015 return err;
11016}
11017
94e860f1
JB		 11018static const struct nla_policy
11019nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
4a4b8169 11020 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_BINARY },
d6dc1a38
JO		 11021 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
11022 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 11023 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
11024 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
11025 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
bee427b8 11026 [NL80211_ATTR_CQM_RSSI_LEVEL] = { .type = NLA_S32 },
d6dc1a38
JO		 11027};
11028
84f10708 11029static int nl80211_set_cqm_txe(struct genl_info *info,
d9d8b019 11030 u32 rate, u32 pkts, u32 intvl)
84f10708
TP		 11031{
11032 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84f10708 11033 struct net_device *dev = info->user_ptr[1];
1da5fcc8 11034 struct wireless_dev *wdev = dev->ieee80211_ptr;
84f10708 11035
d9d8b019 11036 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
84f10708
TP		 11037 return -EINVAL;
11038
84f10708
TP		 11039 if (!rdev->ops->set_cqm_txe_config)
11040 return -EOPNOTSUPP;
11041
11042 if (wdev->iftype != NL80211_IFTYPE_STATION &&
11043 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
11044 return -EOPNOTSUPP;
11045
e35e4d28 11046 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 11047}
11048
4a4b8169
AZ		 11049static int cfg80211_cqm_rssi_update(struct cfg80211_registered_device *rdev,
11050 struct net_device *dev)
11051{
11052 struct wireless_dev *wdev = dev->ieee80211_ptr;
11053 s32 last, low, high;
11054 u32 hyst;
1222a160 11055 int i, n, low_index;
4a4b8169
AZ		 11056 int err;
11057
11058 /* RSSI reporting disabled? */
11059 if (!wdev->cqm_config)
11060 return rdev_set_cqm_rssi_range_config(rdev, dev, 0, 0);
11061
11062 /*
11063 * Obtain current RSSI value if possible, if not and no RSSI threshold
11064 * event has been received yet, we should receive an event after a
11065 * connection is established and enough beacons received to calculate
11066 * the average.
11067 */
11068 if (!wdev->cqm_config->last_rssi_event_value && wdev->current_bss &&
11069 rdev->ops->get_station) {
73887fd9 11070 struct station_info sinfo = {};
4a4b8169
AZ		 11071 u8 *mac_addr;
11072
11073 mac_addr = wdev->current_bss->pub.bssid;
11074
73887fd9
JB		 11075 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
11076 if (err)
4a4b8169
AZ		 11077 return err;
11078
df16737d 11079 cfg80211_sinfo_release_content(&sinfo);
397c657a 11080 if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_BEACON_SIGNAL_AVG))
4a4b8169 11081 wdev->cqm_config->last_rssi_event_value =
73887fd9 11082 (s8) sinfo.rx_beacon_signal_avg;
4a4b8169
AZ		 11083 }
11084
11085 last = wdev->cqm_config->last_rssi_event_value;
11086 hyst = wdev->cqm_config->rssi_hyst;
11087 n = wdev->cqm_config->n_rssi_thresholds;
11088
4b2c5a14
MH		 11089 for (i = 0; i < n; i++) {
11090 i = array_index_nospec(i, n);
4a4b8169
AZ		 11091 if (last < wdev->cqm_config->rssi_thresholds[i])
11092 break;
4b2c5a14 11093 }
4a4b8169 11094
1222a160
MH		 11095 low_index = i - 1;
11096 if (low_index >= 0) {
11097 low_index = array_index_nospec(low_index, n);
11098 low = wdev->cqm_config->rssi_thresholds[low_index] - hyst;
11099 } else {
11100 low = S32_MIN;
11101 }
11102 if (i < n) {
11103 i = array_index_nospec(i, n);
11104 high = wdev->cqm_config->rssi_thresholds[i] + hyst - 1;
11105 } else {
11106 high = S32_MAX;
11107 }
4a4b8169
AZ		 11108
11109 return rdev_set_cqm_rssi_range_config(rdev, dev, low, high);
11110}
11111
d6dc1a38 11112static int nl80211_set_cqm_rssi(struct genl_info *info,
4a4b8169
AZ		 11113 const s32 *thresholds, int n_thresholds,
11114 u32 hysteresis)
d6dc1a38 11115{
4c476991 11116 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 11117 struct net_device *dev = info->user_ptr[1];
1da5fcc8 11118 struct wireless_dev *wdev = dev->ieee80211_ptr;
4a4b8169
AZ		 11119 int i, err;
11120 s32 prev = S32_MIN;
d6dc1a38 11121
4a4b8169
AZ		 11122 /* Check all values negative and sorted */
11123 for (i = 0; i < n_thresholds; i++) {
11124 if (thresholds[i] > 0 || thresholds[i] <= prev)
11125 return -EINVAL;
d6dc1a38 11126
4a4b8169
AZ		 11127 prev = thresholds[i];
11128 }
d6dc1a38 11129
074ac8df 11130 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11131 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
11132 return -EOPNOTSUPP;
d6dc1a38 11133
4a4b8169
AZ		 11134 wdev_lock(wdev);
11135 cfg80211_cqm_config_free(wdev);
11136 wdev_unlock(wdev);
11137
11138 if (n_thresholds <= 1 && rdev->ops->set_cqm_rssi_config) {
11139 if (n_thresholds == 0 || thresholds[0] == 0) /* Disabling */
11140 return rdev_set_cqm_rssi_config(rdev, dev, 0, 0);
11141
11142 return rdev_set_cqm_rssi_config(rdev, dev,
11143 thresholds[0], hysteresis);
11144 }
11145
11146 if (!wiphy_ext_feature_isset(&rdev->wiphy,
11147 NL80211_EXT_FEATURE_CQM_RSSI_LIST))
11148 return -EOPNOTSUPP;
11149
11150 if (n_thresholds == 1 && thresholds[0] == 0) /* Disabling */
11151 n_thresholds = 0;
11152
11153 wdev_lock(wdev);
11154 if (n_thresholds) {
11155 struct cfg80211_cqm_config *cqm_config;
11156
11157 cqm_config = kzalloc(sizeof(struct cfg80211_cqm_config) +
11158 n_thresholds * sizeof(s32), GFP_KERNEL);
11159 if (!cqm_config) {
11160 err = -ENOMEM;
11161 goto unlock;
11162 }
11163
11164 cqm_config->rssi_hyst = hysteresis;
11165 cqm_config->n_rssi_thresholds = n_thresholds;
11166 memcpy(cqm_config->rssi_thresholds, thresholds,
11167 n_thresholds * sizeof(s32));
11168
11169 wdev->cqm_config = cqm_config;
11170 }
11171
11172 err = cfg80211_cqm_rssi_update(rdev, dev);
11173
11174unlock:
11175 wdev_unlock(wdev);
11176
11177 return err;
d6dc1a38
JO		 11178}
11179
11180static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
11181{
11182 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
11183 struct nlattr *cqm;
11184 int err;
11185
11186 cqm = info->attrs[NL80211_ATTR_CQM];
1da5fcc8
JB		 11187 if (!cqm)
11188 return -EINVAL;
d6dc1a38 11189
8cb08174
JB		 11190 err = nla_parse_nested_deprecated(attrs, NL80211_ATTR_CQM_MAX, cqm,
11191 nl80211_attr_cqm_policy,
11192 info->extack);
d6dc1a38 11193 if (err)
1da5fcc8 11194 return err;
d6dc1a38
JO		 11195
11196 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
11197 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
4a4b8169
AZ		 11198 const s32 *thresholds =
11199 nla_data(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
11200 int len = nla_len(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
1da5fcc8 11201 u32 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
d6dc1a38 11202
4a4b8169
AZ		 11203 if (len % 4)
11204 return -EINVAL;
11205
11206 return nl80211_set_cqm_rssi(info, thresholds, len / 4,
11207 hysteresis);
1da5fcc8
JB		 11208 }
11209
11210 if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
11211 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
11212 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
11213 u32 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
11214 u32 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
11215 u32 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
11216
11217 return nl80211_set_cqm_txe(info, rate, pkts, intvl);
11218 }
11219
11220 return -EINVAL;
d6dc1a38
JO		 11221}
11222
6e0bd6c3
RL		 11223static int nl80211_join_ocb(struct sk_buff *skb, struct genl_info *info)
11224{
11225 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11226 struct net_device *dev = info->user_ptr[1];
11227 struct ocb_setup setup = {};
11228 int err;
11229
11230 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
11231 if (err)
11232 return err;
11233
11234 return cfg80211_join_ocb(rdev, dev, &setup);
11235}
11236
11237static int nl80211_leave_ocb(struct sk_buff *skb, struct genl_info *info)
11238{
11239 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11240 struct net_device *dev = info->user_ptr[1];
11241
11242 return cfg80211_leave_ocb(rdev, dev);
11243}
11244
29cbe68c
JB		 11245static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
11246{
11247 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11248 struct net_device *dev = info->user_ptr[1];
11249 struct mesh_config cfg;
c80d545d 11250 struct mesh_setup setup;
29cbe68c
JB		 11251 int err;
11252
11253 /* start with default */
11254 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 11255 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 11256
24bdd9f4 11257 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 11258 /* and parse parameters if given */
24bdd9f4 11259 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 11260 if (err)
11261 return err;
11262 }
11263
11264 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
11265 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
11266 return -EINVAL;
11267
c80d545d
JC		 11268 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
11269 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
11270
4bb62344
CYY		 11271 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
11272 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
11273 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
11274 return -EINVAL;
11275
9bdbf04d
MP		 11276 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
11277 setup.beacon_interval =
11278 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 11279
0c317a02
PK		 11280 err = cfg80211_validate_beacon_int(rdev,
11281 NL80211_IFTYPE_MESH_POINT,
11282 setup.beacon_interval);
12d20fc9
PK		 11283 if (err)
11284 return err;
9bdbf04d
MP		 11285 }
11286
11287 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
11288 setup.dtim_period =
11289 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
11290 if (setup.dtim_period < 1 || setup.dtim_period > 100)
11291 return -EINVAL;
11292 }
11293
c80d545d
JC		 11294 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
11295 /* parse additional setup parameters if given */
11296 err = nl80211_parse_mesh_setup(info, &setup);
11297 if (err)
11298 return err;
11299 }
11300
d37bb18a
TP		 11301 if (setup.user_mpm)
11302 cfg.auto_open_plinks = false;
11303
cc1d2806 11304 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 11305 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
11306 if (err)
11307 return err;
cc1d2806 11308 } else {
188c1b3c 11309 /* __cfg80211_join_mesh() will sort it out */
683b6d3b 11310 setup.chandef.chan = NULL;
cc1d2806
JB		 11311 }
11312
ffb3cf30
AN		 11313 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
11314 u8 *rates = nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11315 int n_rates =
11316 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11317 struct ieee80211_supported_band *sband;
11318
11319 if (!setup.chandef.chan)
11320 return -EINVAL;
11321
11322 sband = rdev->wiphy.bands[setup.chandef.chan->band];
11323
11324 err = ieee80211_get_ratemask(sband, rates, n_rates,
11325 &setup.basic_rates);
11326 if (err)
11327 return err;
11328 }
11329
8564e382
JB		 11330 if (info->attrs[NL80211_ATTR_TX_RATES]) {
11331 err = nl80211_parse_tx_bitrate_mask(info, &setup.beacon_rate);
11332 if (err)
11333 return err;
11334
265698d7
JB		 11335 if (!setup.chandef.chan)
11336 return -EINVAL;
11337
8564e382
JB		 11338 err = validate_beacon_tx_rate(rdev, setup.chandef.chan->band,
11339 &setup.beacon_rate);
11340 if (err)
11341 return err;
11342 }
11343
d37d49c2
BB		 11344 setup.userspace_handles_dfs =
11345 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
11346
1224f583
DK		 11347 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
11348 int r = validate_pae_over_nl80211(rdev, info);
11349
11350 if (r < 0)
11351 return r;
11352
11353 setup.control_port_over_nl80211 = true;
11354 }
11355
188c1b3c
DK		 11356 wdev_lock(dev->ieee80211_ptr);
11357 err = __cfg80211_join_mesh(rdev, dev, &setup, &cfg);
11358 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER])
11359 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11360 wdev_unlock(dev->ieee80211_ptr);
11361
11362 return err;
29cbe68c
JB		 11363}
11364
11365static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
11366{
11367 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11368 struct net_device *dev = info->user_ptr[1];
11369
11370 return cfg80211_leave_mesh(rdev, dev);
11371}
11372
dfb89c56 11373#ifdef CONFIG_PM
bb92d199
AK		 11374static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
11375 struct cfg80211_registered_device *rdev)
11376{
6abb9cb9 11377 struct cfg80211_wowlan *wowlan = rdev->wiphy.wowlan_config;
bb92d199
AK		 11378 struct nlattr *nl_pats, *nl_pat;
11379 int i, pat_len;
11380
6abb9cb9 11381 if (!wowlan->n_patterns)
bb92d199
AK		 11382 return 0;
11383
ae0be8de 11384 nl_pats = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
bb92d199
AK		 11385 if (!nl_pats)
11386 return -ENOBUFS;
11387
6abb9cb9 11388 for (i = 0; i < wowlan->n_patterns; i++) {
ae0be8de 11389 nl_pat = nla_nest_start_noflag(msg, i + 1);
bb92d199
AK		 11390 if (!nl_pat)
11391 return -ENOBUFS;
6abb9cb9 11392 pat_len = wowlan->patterns[i].pattern_len;
50ac6607 11393 if (nla_put(msg, NL80211_PKTPAT_MASK, DIV_ROUND_UP(pat_len, 8),
6abb9cb9 11394 wowlan->patterns[i].mask) ||
50ac6607
AK		 11395 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
11396 wowlan->patterns[i].pattern) ||
11397 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
6abb9cb9 11398 wowlan->patterns[i].pkt_offset))
bb92d199
AK		 11399 return -ENOBUFS;
11400 nla_nest_end(msg, nl_pat);
11401 }
11402 nla_nest_end(msg, nl_pats);
11403
11404 return 0;
11405}
11406
2a0e047e
JB		 11407static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
11408 struct cfg80211_wowlan_tcp *tcp)
11409{
11410 struct nlattr *nl_tcp;
11411
11412 if (!tcp)
11413 return 0;
11414
ae0be8de
MK		 11415 nl_tcp = nla_nest_start_noflag(msg,
11416 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
2a0e047e
JB		 11417 if (!nl_tcp)
11418 return -ENOBUFS;
11419
930345ea
JB		 11420 if (nla_put_in_addr(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
11421 nla_put_in_addr(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
2a0e047e
JB		 11422 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
11423 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
11424 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
11425 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
11426 tcp->payload_len, tcp->payload) ||
11427 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
11428 tcp->data_interval) ||
11429 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
11430 tcp->wake_len, tcp->wake_data) ||
11431 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
11432 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
11433 return -ENOBUFS;
11434
11435 if (tcp->payload_seq.len &&
11436 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
11437 sizeof(tcp->payload_seq), &tcp->payload_seq))
11438 return -ENOBUFS;
11439
11440 if (tcp->payload_tok.len &&
11441 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
11442 sizeof(tcp->payload_tok) + tcp->tokens_size,
11443 &tcp->payload_tok))
11444 return -ENOBUFS;
11445
e248ad30
JB		 11446 nla_nest_end(msg, nl_tcp);
11447
2a0e047e
JB		 11448 return 0;
11449}
11450
75453ccb
LC		 11451static int nl80211_send_wowlan_nd(struct sk_buff *msg,
11452 struct cfg80211_sched_scan_request *req)
11453{
3b06d277 11454 struct nlattr *nd, *freqs, *matches, *match, *scan_plans, *scan_plan;
75453ccb
LC		 11455 int i;
11456
11457 if (!req)
11458 return 0;
11459
ae0be8de 11460 nd = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_NET_DETECT);
75453ccb
LC		 11461 if (!nd)
11462 return -ENOBUFS;
11463
3b06d277
AS		 11464 if (req->n_scan_plans == 1 &&
11465 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_INTERVAL,
11466 req->scan_plans[0].interval * 1000))
75453ccb
LC		 11467 return -ENOBUFS;
11468
21fea567
LC		 11469 if (nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_DELAY, req->delay))
11470 return -ENOBUFS;
11471
bf95ecdb 11472 if (req->relative_rssi_set) {
11473 struct nl80211_bss_select_rssi_adjust rssi_adjust;
11474
11475 if (nla_put_s8(msg, NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI,
11476 req->relative_rssi))
11477 return -ENOBUFS;
11478
11479 rssi_adjust.band = req->rssi_adjust.band;
11480 rssi_adjust.delta = req->rssi_adjust.delta;
11481 if (nla_put(msg, NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST,
11482 sizeof(rssi_adjust), &rssi_adjust))
11483 return -ENOBUFS;
11484 }
11485
ae0be8de 11486 freqs = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_FREQUENCIES);
75453ccb
LC		 11487 if (!freqs)
11488 return -ENOBUFS;
11489
53b18980
JB		 11490 for (i = 0; i < req->n_channels; i++) {
11491 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
11492 return -ENOBUFS;
11493 }
75453ccb
LC		 11494
11495 nla_nest_end(msg, freqs);
11496
11497 if (req->n_match_sets) {
ae0be8de
MK		 11498 matches = nla_nest_start_noflag(msg,
11499 NL80211_ATTR_SCHED_SCAN_MATCH);
76e1fb4b
JB		 11500 if (!matches)
11501 return -ENOBUFS;
11502
75453ccb 11503 for (i = 0; i < req->n_match_sets; i++) {
ae0be8de 11504 match = nla_nest_start_noflag(msg, i);
76e1fb4b
JB		 11505 if (!match)
11506 return -ENOBUFS;
11507
53b18980
JB		 11508 if (nla_put(msg, NL80211_SCHED_SCAN_MATCH_ATTR_SSID,
11509 req->match_sets[i].ssid.ssid_len,
11510 req->match_sets[i].ssid.ssid))
11511 return -ENOBUFS;
75453ccb
LC		 11512 nla_nest_end(msg, match);
11513 }
11514 nla_nest_end(msg, matches);
11515 }
11516
ae0be8de 11517 scan_plans = nla_nest_start_noflag(msg, NL80211_ATTR_SCHED_SCAN_PLANS);
3b06d277
AS		 11518 if (!scan_plans)
11519 return -ENOBUFS;
11520
11521 for (i = 0; i < req->n_scan_plans; i++) {
ae0be8de 11522 scan_plan = nla_nest_start_noflag(msg, i + 1);
76e1fb4b
JB		 11523 if (!scan_plan)
11524 return -ENOBUFS;
11525
67626964 11526 if (nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_INTERVAL,
3b06d277
AS		 11527 req->scan_plans[i].interval) ||
11528 (req->scan_plans[i].iterations &&
11529 nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_ITERATIONS,
11530 req->scan_plans[i].iterations)))
11531 return -ENOBUFS;
11532 nla_nest_end(msg, scan_plan);
11533 }
11534 nla_nest_end(msg, scan_plans);
11535
75453ccb
LC		 11536 nla_nest_end(msg, nd);
11537
11538 return 0;
11539}
11540
ff1b6e69
JB		 11541static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
11542{
11543 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11544 struct sk_buff *msg;
11545 void *hdr;
2a0e047e 11546 u32 size = NLMSG_DEFAULT_SIZE;
ff1b6e69 11547
964dc9e2 11548 if (!rdev->wiphy.wowlan)
ff1b6e69
JB		 11549 return -EOPNOTSUPP;
11550
6abb9cb9 11551 if (rdev->wiphy.wowlan_config && rdev->wiphy.wowlan_config->tcp) {
2a0e047e 11552 /* adjust size to have room for all the data */
6abb9cb9
JB		 11553 size += rdev->wiphy.wowlan_config->tcp->tokens_size +
11554 rdev->wiphy.wowlan_config->tcp->payload_len +
11555 rdev->wiphy.wowlan_config->tcp->wake_len +
11556 rdev->wiphy.wowlan_config->tcp->wake_len / 8;
2a0e047e
JB		 11557 }
11558
11559 msg = nlmsg_new(size, GFP_KERNEL);
ff1b6e69
JB		 11560 if (!msg)
11561 return -ENOMEM;
11562
15e47304 11563 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 11564 NL80211_CMD_GET_WOWLAN);
11565 if (!hdr)
11566 goto nla_put_failure;
11567
6abb9cb9 11568 if (rdev->wiphy.wowlan_config) {
ff1b6e69
JB		 11569 struct nlattr *nl_wowlan;
11570
ae0be8de
MK		 11571 nl_wowlan = nla_nest_start_noflag(msg,
11572 NL80211_ATTR_WOWLAN_TRIGGERS);
ff1b6e69
JB		 11573 if (!nl_wowlan)
11574 goto nla_put_failure;
11575
6abb9cb9 11576 if ((rdev->wiphy.wowlan_config->any &&
9360ffd1 11577 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6abb9cb9 11578 (rdev->wiphy.wowlan_config->disconnect &&
9360ffd1 11579 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6abb9cb9 11580 (rdev->wiphy.wowlan_config->magic_pkt &&
9360ffd1 11581 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6abb9cb9 11582 (rdev->wiphy.wowlan_config->gtk_rekey_failure &&
9360ffd1 11583 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6abb9cb9 11584 (rdev->wiphy.wowlan_config->eap_identity_req &&
9360ffd1 11585 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6abb9cb9 11586 (rdev->wiphy.wowlan_config->four_way_handshake &&
9360ffd1 11587 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6abb9cb9 11588 (rdev->wiphy.wowlan_config->rfkill_release &&
9360ffd1
DM		 11589 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
11590 goto nla_put_failure;
2a0e047e 11591
bb92d199
AK		 11592 if (nl80211_send_wowlan_patterns(msg, rdev))
11593 goto nla_put_failure;
2a0e047e 11594
6abb9cb9
JB		 11595 if (nl80211_send_wowlan_tcp(msg,
11596 rdev->wiphy.wowlan_config->tcp))
2a0e047e 11597 goto nla_put_failure;
75453ccb
LC		 11598
11599 if (nl80211_send_wowlan_nd(
11600 msg,
11601 rdev->wiphy.wowlan_config->nd_config))
11602 goto nla_put_failure;
2a0e047e 11603
ff1b6e69
JB		 11604 nla_nest_end(msg, nl_wowlan);
11605 }
11606
11607 genlmsg_end(msg, hdr);
11608 return genlmsg_reply(msg, info);
11609
11610nla_put_failure:
11611 nlmsg_free(msg);
11612 return -ENOBUFS;
11613}
11614
2a0e047e
JB		 11615static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
11616 struct nlattr *attr,
11617 struct cfg80211_wowlan *trig)
11618{
11619 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
11620 struct cfg80211_wowlan_tcp *cfg;
11621 struct nl80211_wowlan_tcp_data_token *tok = NULL;
11622 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
11623 u32 size;
11624 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
11625 int err, port;
11626
964dc9e2 11627 if (!rdev->wiphy.wowlan->tcp)
2a0e047e
JB		 11628 return -EINVAL;
11629
8cb08174
JB		 11630 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TCP, attr,
11631 nl80211_wowlan_tcp_policy, NULL);
2a0e047e
JB		 11632 if (err)
11633 return err;
11634
11635 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
11636 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
11637 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
11638 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
11639 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
11640 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
11641 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
11642 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
11643 return -EINVAL;
11644
11645 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
964dc9e2 11646 if (data_size > rdev->wiphy.wowlan->tcp->data_payload_max)
2a0e047e
JB		 11647 return -EINVAL;
11648
11649 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
964dc9e2 11650 rdev->wiphy.wowlan->tcp->data_interval_max ||
723d568a 11651 nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) == 0)
2a0e047e
JB		 11652 return -EINVAL;
11653
11654 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
964dc9e2 11655 if (wake_size > rdev->wiphy.wowlan->tcp->wake_payload_max)
2a0e047e
JB		 11656 return -EINVAL;
11657
11658 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
11659 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
11660 return -EINVAL;
11661
11662 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
11663 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
11664
11665 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
11666 tokens_size = tokln - sizeof(*tok);
11667
11668 if (!tok->len || tokens_size % tok->len)
11669 return -EINVAL;
964dc9e2 11670 if (!rdev->wiphy.wowlan->tcp->tok)
2a0e047e 11671 return -EINVAL;
964dc9e2 11672 if (tok->len > rdev->wiphy.wowlan->tcp->tok->max_len)
2a0e047e 11673 return -EINVAL;
964dc9e2 11674 if (tok->len < rdev->wiphy.wowlan->tcp->tok->min_len)
2a0e047e 11675 return -EINVAL;
964dc9e2 11676 if (tokens_size > rdev->wiphy.wowlan->tcp->tok->bufsize)
2a0e047e
JB		 11677 return -EINVAL;
11678 if (tok->offset + tok->len > data_size)
11679 return -EINVAL;
11680 }
11681
11682 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
11683 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
964dc9e2 11684 if (!rdev->wiphy.wowlan->tcp->seq)
2a0e047e
JB		 11685 return -EINVAL;
11686 if (seq->len == 0 || seq->len > 4)
11687 return -EINVAL;
11688 if (seq->len + seq->offset > data_size)
11689 return -EINVAL;
11690 }
11691
11692 size = sizeof(*cfg);
11693 size += data_size;
11694 size += wake_size + wake_mask_size;
11695 size += tokens_size;
11696
11697 cfg = kzalloc(size, GFP_KERNEL);
11698 if (!cfg)
11699 return -ENOMEM;
67b61f6c
JB		 11700 cfg->src = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
11701 cfg->dst = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
2a0e047e
JB		 11702 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
11703 ETH_ALEN);
11704 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
11705 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
11706 else
11707 port = 0;
11708#ifdef CONFIG_INET
11709 /* allocate a socket and port for it and use it */
11710 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
11711 IPPROTO_TCP, &cfg->sock, 1);
11712 if (err) {
11713 kfree(cfg);
11714 return err;
11715 }
11716 if (inet_csk_get_port(cfg->sock->sk, port)) {
11717 sock_release(cfg->sock);
11718 kfree(cfg);
11719 return -EADDRINUSE;
11720 }
11721 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
11722#else
11723 if (!port) {
11724 kfree(cfg);
11725 return -EINVAL;
11726 }
11727 cfg->src_port = port;
11728#endif
11729
11730 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
11731 cfg->payload_len = data_size;
11732 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
11733 memcpy((void *)cfg->payload,
11734 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
11735 data_size);
11736 if (seq)
11737 cfg->payload_seq = *seq;
11738 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
11739 cfg->wake_len = wake_size;
11740 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
11741 memcpy((void *)cfg->wake_data,
11742 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
11743 wake_size);
11744 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
11745 data_size + wake_size;
11746 memcpy((void *)cfg->wake_mask,
11747 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
11748 wake_mask_size);
11749 if (tok) {
11750 cfg->tokens_size = tokens_size;
11751 memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
11752 }
11753
11754 trig->tcp = cfg;
11755
11756 return 0;
11757}
11758
8cd4d456
LC		 11759static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
11760 const struct wiphy_wowlan_support *wowlan,
11761 struct nlattr *attr,
11762 struct cfg80211_wowlan *trig)
11763{
11764 struct nlattr **tb;
11765 int err;
11766
6396bb22 11767 tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
8cd4d456
LC		 11768 if (!tb)
11769 return -ENOMEM;
11770
11771 if (!(wowlan->flags & WIPHY_WOWLAN_NET_DETECT)) {
11772 err = -EOPNOTSUPP;
11773 goto out;
11774 }
11775
8cb08174
JB		 11776 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_MAX, attr,
11777 nl80211_policy, NULL);
8cd4d456
LC		 11778 if (err)
11779 goto out;
11780
aad1e812
AVS		 11781 trig->nd_config = nl80211_parse_sched_scan(&rdev->wiphy, NULL, tb,
11782 wowlan->max_nd_match_sets);
8cd4d456
LC		 11783 err = PTR_ERR_OR_ZERO(trig->nd_config);
11784 if (err)
11785 trig->nd_config = NULL;
11786
11787out:
11788 kfree(tb);
11789 return err;
11790}
11791
ff1b6e69
JB		 11792static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
11793{
11794 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11795 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 11796 struct cfg80211_wowlan new_triggers = {};
ae33bd81 11797 struct cfg80211_wowlan *ntrig;
964dc9e2 11798 const struct wiphy_wowlan_support *wowlan = rdev->wiphy.wowlan;
ff1b6e69 11799 int err, i;
6abb9cb9 11800 bool prev_enabled = rdev->wiphy.wowlan_config;
98fc4386 11801 bool regular = false;
ff1b6e69 11802
964dc9e2 11803 if (!wowlan)
ff1b6e69
JB		 11804 return -EOPNOTSUPP;
11805
ae33bd81
JB		 11806 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
11807 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 11808 rdev->wiphy.wowlan_config = NULL;
ae33bd81
JB		 11809 goto set_wakeup;
11810 }
ff1b6e69 11811
8cb08174
JB		 11812 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TRIG,
11813 info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS],
11814 nl80211_wowlan_policy, info->extack);
ff1b6e69
JB		 11815 if (err)
11816 return err;
11817
11818 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
11819 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
11820 return -EINVAL;
11821 new_triggers.any = true;
11822 }
11823
11824 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
11825 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
11826 return -EINVAL;
11827 new_triggers.disconnect = true;
98fc4386 11828 regular = true;
ff1b6e69
JB		 11829 }
11830
11831 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
11832 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
11833 return -EINVAL;
11834 new_triggers.magic_pkt = true;
98fc4386 11835 regular = true;
ff1b6e69
JB		 11836 }
11837
77dbbb13
JB		 11838 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
11839 return -EINVAL;
11840
11841 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
11842 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
11843 return -EINVAL;
11844 new_triggers.gtk_rekey_failure = true;
98fc4386 11845 regular = true;
77dbbb13
JB		 11846 }
11847
11848 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
11849 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
11850 return -EINVAL;
11851 new_triggers.eap_identity_req = true;
98fc4386 11852 regular = true;
77dbbb13
JB		 11853 }
11854
11855 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
11856 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
11857 return -EINVAL;
11858 new_triggers.four_way_handshake = true;
98fc4386 11859 regular = true;
77dbbb13
JB		 11860 }
11861
11862 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
11863 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
11864 return -EINVAL;
11865 new_triggers.rfkill_release = true;
98fc4386 11866 regular = true;
77dbbb13
JB		 11867 }
11868
ff1b6e69
JB		 11869 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
11870 struct nlattr *pat;
11871 int n_patterns = 0;
bb92d199 11872 int rem, pat_len, mask_len, pkt_offset;
50ac6607 11873 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
ff1b6e69 11874
98fc4386
JB		 11875 regular = true;
11876
ff1b6e69
JB		 11877 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
11878 rem)
11879 n_patterns++;
11880 if (n_patterns > wowlan->n_patterns)
11881 return -EINVAL;
11882
11883 new_triggers.patterns = kcalloc(n_patterns,
11884 sizeof(new_triggers.patterns[0]),
11885 GFP_KERNEL);
11886 if (!new_triggers.patterns)
11887 return -ENOMEM;
11888
11889 new_triggers.n_patterns = n_patterns;
11890 i = 0;
11891
11892 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
11893 rem) {
922bd80f
JB		 11894 u8 *mask_pat;
11895
8cb08174
JB		 11896 err = nla_parse_nested_deprecated(pat_tb,
11897 MAX_NL80211_PKTPAT,
11898 pat,
11899 nl80211_packet_pattern_policy,
11900 info->extack);
95bca62f
JB		 11901 if (err)
11902 goto error;
11903
ff1b6e69 11904 err = -EINVAL;
50ac6607
AK		 11905 if (!pat_tb[NL80211_PKTPAT_MASK] ||
11906 !pat_tb[NL80211_PKTPAT_PATTERN])
ff1b6e69 11907 goto error;
50ac6607 11908 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
ff1b6e69 11909 mask_len = DIV_ROUND_UP(pat_len, 8);
50ac6607 11910 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
ff1b6e69
JB		 11911 goto error;
11912 if (pat_len > wowlan->pattern_max_len ||
11913 pat_len < wowlan->pattern_min_len)
11914 goto error;
11915
50ac6607 11916 if (!pat_tb[NL80211_PKTPAT_OFFSET])
bb92d199
AK		 11917 pkt_offset = 0;
11918 else
11919 pkt_offset = nla_get_u32(
50ac6607 11920 pat_tb[NL80211_PKTPAT_OFFSET]);
bb92d199
AK		 11921 if (pkt_offset > wowlan->max_pkt_offset)
11922 goto error;
11923 new_triggers.patterns[i].pkt_offset = pkt_offset;
11924
922bd80f
JB		 11925 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
11926 if (!mask_pat) {
ff1b6e69
JB		 11927 err = -ENOMEM;
11928 goto error;
11929 }
922bd80f
JB		 11930 new_triggers.patterns[i].mask = mask_pat;
11931 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
ff1b6e69 11932 mask_len);
922bd80f
JB		 11933 mask_pat += mask_len;
11934 new_triggers.patterns[i].pattern = mask_pat;
ff1b6e69 11935 new_triggers.patterns[i].pattern_len = pat_len;
922bd80f 11936 memcpy(mask_pat,
50ac6607 11937 nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
ff1b6e69
JB		 11938 pat_len);
11939 i++;
11940 }
11941 }
11942
2a0e047e 11943 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
98fc4386 11944 regular = true;
2a0e047e
JB		 11945 err = nl80211_parse_wowlan_tcp(
11946 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
11947 &new_triggers);
11948 if (err)
11949 goto error;
11950 }
11951
8cd4d456 11952 if (tb[NL80211_WOWLAN_TRIG_NET_DETECT]) {
98fc4386 11953 regular = true;
8cd4d456
LC		 11954 err = nl80211_parse_wowlan_nd(
11955 rdev, wowlan, tb[NL80211_WOWLAN_TRIG_NET_DETECT],
11956 &new_triggers);
11957 if (err)
11958 goto error;
11959 }
11960
98fc4386
JB		 11961 /* The 'any' trigger means the device continues operating more or less
11962 * as in its normal operation mode and wakes up the host on most of the
11963 * normal interrupts (like packet RX, ...)
11964 * It therefore makes little sense to combine with the more constrained
11965 * wakeup trigger modes.
11966 */
11967 if (new_triggers.any && regular) {
11968 err = -EINVAL;
11969 goto error;
11970 }
11971
ae33bd81
JB		 11972 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
11973 if (!ntrig) {
11974 err = -ENOMEM;
11975 goto error;
ff1b6e69 11976 }
ae33bd81 11977 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 11978 rdev->wiphy.wowlan_config = ntrig;
ff1b6e69 11979
ae33bd81 11980 set_wakeup:
6abb9cb9
JB		 11981 if (rdev->ops->set_wakeup &&
11982 prev_enabled != !!rdev->wiphy.wowlan_config)
11983 rdev_set_wakeup(rdev, rdev->wiphy.wowlan_config);
6d52563f 11984
ff1b6e69
JB		 11985 return 0;
11986 error:
11987 for (i = 0; i < new_triggers.n_patterns; i++)
11988 kfree(new_triggers.patterns[i].mask);
11989 kfree(new_triggers.patterns);
2a0e047e
JB		 11990 if (new_triggers.tcp && new_triggers.tcp->sock)
11991 sock_release(new_triggers.tcp->sock);
11992 kfree(new_triggers.tcp);
e5dbe070 11993 kfree(new_triggers.nd_config);
ff1b6e69
JB		 11994 return err;
11995}
dfb89c56 11996#endif
ff1b6e69 11997
be29b99a
AK		 11998static int nl80211_send_coalesce_rules(struct sk_buff *msg,
11999 struct cfg80211_registered_device *rdev)
12000{
12001 struct nlattr *nl_pats, *nl_pat, *nl_rule, *nl_rules;
12002 int i, j, pat_len;
12003 struct cfg80211_coalesce_rules *rule;
12004
12005 if (!rdev->coalesce->n_rules)
12006 return 0;
12007
ae0be8de 12008 nl_rules = nla_nest_start_noflag(msg, NL80211_ATTR_COALESCE_RULE);
be29b99a
AK		 12009 if (!nl_rules)
12010 return -ENOBUFS;
12011
12012 for (i = 0; i < rdev->coalesce->n_rules; i++) {
ae0be8de 12013 nl_rule = nla_nest_start_noflag(msg, i + 1);
be29b99a
AK		 12014 if (!nl_rule)
12015 return -ENOBUFS;
12016
12017 rule = &rdev->coalesce->rules[i];
12018 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_DELAY,
12019 rule->delay))
12020 return -ENOBUFS;
12021
12022 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_CONDITION,
12023 rule->condition))
12024 return -ENOBUFS;
12025
ae0be8de
MK		 12026 nl_pats = nla_nest_start_noflag(msg,
12027 NL80211_ATTR_COALESCE_RULE_PKT_PATTERN);
be29b99a
AK		 12028 if (!nl_pats)
12029 return -ENOBUFS;
12030
12031 for (j = 0; j < rule->n_patterns; j++) {
ae0be8de 12032 nl_pat = nla_nest_start_noflag(msg, j + 1);
be29b99a
AK		 12033 if (!nl_pat)
12034 return -ENOBUFS;
12035 pat_len = rule->patterns[j].pattern_len;
12036 if (nla_put(msg, NL80211_PKTPAT_MASK,
12037 DIV_ROUND_UP(pat_len, 8),
12038 rule->patterns[j].mask) ||
12039 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
12040 rule->patterns[j].pattern) ||
12041 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
12042 rule->patterns[j].pkt_offset))
12043 return -ENOBUFS;
12044 nla_nest_end(msg, nl_pat);
12045 }
12046 nla_nest_end(msg, nl_pats);
12047 nla_nest_end(msg, nl_rule);
12048 }
12049 nla_nest_end(msg, nl_rules);
12050
12051 return 0;
12052}
12053
12054static int nl80211_get_coalesce(struct sk_buff *skb, struct genl_info *info)
12055{
12056 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12057 struct sk_buff *msg;
12058 void *hdr;
12059
12060 if (!rdev->wiphy.coalesce)
12061 return -EOPNOTSUPP;
12062
12063 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12064 if (!msg)
12065 return -ENOMEM;
12066
12067 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
12068 NL80211_CMD_GET_COALESCE);
12069 if (!hdr)
12070 goto nla_put_failure;
12071
12072 if (rdev->coalesce && nl80211_send_coalesce_rules(msg, rdev))
12073 goto nla_put_failure;
12074
12075 genlmsg_end(msg, hdr);
12076 return genlmsg_reply(msg, info);
12077
12078nla_put_failure:
12079 nlmsg_free(msg);
12080 return -ENOBUFS;
12081}
12082
12083void cfg80211_rdev_free_coalesce(struct cfg80211_registered_device *rdev)
12084{
12085 struct cfg80211_coalesce *coalesce = rdev->coalesce;
12086 int i, j;
12087 struct cfg80211_coalesce_rules *rule;
12088
12089 if (!coalesce)
12090 return;
12091
12092 for (i = 0; i < coalesce->n_rules; i++) {
12093 rule = &coalesce->rules[i];
12094 for (j = 0; j < rule->n_patterns; j++)
12095 kfree(rule->patterns[j].mask);
12096 kfree(rule->patterns);
12097 }
12098 kfree(coalesce->rules);
12099 kfree(coalesce);
12100 rdev->coalesce = NULL;
12101}
12102
12103static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
12104 struct nlattr *rule,
12105 struct cfg80211_coalesce_rules *new_rule)
12106{
12107 int err, i;
12108 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
12109 struct nlattr *tb[NUM_NL80211_ATTR_COALESCE_RULE], *pat;
12110 int rem, pat_len, mask_len, pkt_offset, n_patterns = 0;
12111 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
12112
8cb08174
JB		 12113 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_COALESCE_RULE_MAX,
12114 rule, nl80211_coalesce_policy, NULL);
be29b99a
AK		 12115 if (err)
12116 return err;
12117
12118 if (tb[NL80211_ATTR_COALESCE_RULE_DELAY])
12119 new_rule->delay =
12120 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_DELAY]);
12121 if (new_rule->delay > coalesce->max_delay)
12122 return -EINVAL;
12123
12124 if (tb[NL80211_ATTR_COALESCE_RULE_CONDITION])
12125 new_rule->condition =
12126 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_CONDITION]);
be29b99a
AK		 12127
12128 if (!tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN])
12129 return -EINVAL;
12130
12131 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
12132 rem)
12133 n_patterns++;
12134 if (n_patterns > coalesce->n_patterns)
12135 return -EINVAL;
12136
12137 new_rule->patterns = kcalloc(n_patterns, sizeof(new_rule->patterns[0]),
12138 GFP_KERNEL);
12139 if (!new_rule->patterns)
12140 return -ENOMEM;
12141
12142 new_rule->n_patterns = n_patterns;
12143 i = 0;
12144
12145 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
12146 rem) {
922bd80f
JB		 12147 u8 *mask_pat;
12148
8cb08174
JB		 12149 err = nla_parse_nested_deprecated(pat_tb, MAX_NL80211_PKTPAT,
12150 pat,
12151 nl80211_packet_pattern_policy,
12152 NULL);
95bca62f
JB		 12153 if (err)
12154 return err;
12155
be29b99a
AK		 12156 if (!pat_tb[NL80211_PKTPAT_MASK] ||
12157 !pat_tb[NL80211_PKTPAT_PATTERN])
12158 return -EINVAL;
12159 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
12160 mask_len = DIV_ROUND_UP(pat_len, 8);
12161 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
12162 return -EINVAL;
12163 if (pat_len > coalesce->pattern_max_len ||
12164 pat_len < coalesce->pattern_min_len)
12165 return -EINVAL;
12166
12167 if (!pat_tb[NL80211_PKTPAT_OFFSET])
12168 pkt_offset = 0;
12169 else
12170 pkt_offset = nla_get_u32(pat_tb[NL80211_PKTPAT_OFFSET]);
12171 if (pkt_offset > coalesce->max_pkt_offset)
12172 return -EINVAL;
12173 new_rule->patterns[i].pkt_offset = pkt_offset;
12174
922bd80f
JB		 12175 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
12176 if (!mask_pat)
be29b99a 12177 return -ENOMEM;
922bd80f
JB		 12178
12179 new_rule->patterns[i].mask = mask_pat;
12180 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
12181 mask_len);
12182
12183 mask_pat += mask_len;
12184 new_rule->patterns[i].pattern = mask_pat;
be29b99a 12185 new_rule->patterns[i].pattern_len = pat_len;
922bd80f
JB		 12186 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
12187 pat_len);
be29b99a
AK		 12188 i++;
12189 }
12190
12191 return 0;
12192}
12193
12194static int nl80211_set_coalesce(struct sk_buff *skb, struct genl_info *info)
12195{
12196 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12197 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
12198 struct cfg80211_coalesce new_coalesce = {};
12199 struct cfg80211_coalesce *n_coalesce;
12200 int err, rem_rule, n_rules = 0, i, j;
12201 struct nlattr *rule;
12202 struct cfg80211_coalesce_rules *tmp_rule;
12203
12204 if (!rdev->wiphy.coalesce || !rdev->ops->set_coalesce)
12205 return -EOPNOTSUPP;
12206
12207 if (!info->attrs[NL80211_ATTR_COALESCE_RULE]) {
12208 cfg80211_rdev_free_coalesce(rdev);
a1056b1b 12209 rdev_set_coalesce(rdev, NULL);
be29b99a
AK		 12210 return 0;
12211 }
12212
12213 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
12214 rem_rule)
12215 n_rules++;
12216 if (n_rules > coalesce->n_rules)
12217 return -EINVAL;
12218
12219 new_coalesce.rules = kcalloc(n_rules, sizeof(new_coalesce.rules[0]),
12220 GFP_KERNEL);
12221 if (!new_coalesce.rules)
12222 return -ENOMEM;
12223
12224 new_coalesce.n_rules = n_rules;
12225 i = 0;
12226
12227 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
12228 rem_rule) {
12229 err = nl80211_parse_coalesce_rule(rdev, rule,
12230 &new_coalesce.rules[i]);
12231 if (err)
12232 goto error;
12233
12234 i++;
12235 }
12236
a1056b1b 12237 err = rdev_set_coalesce(rdev, &new_coalesce);
be29b99a
AK		 12238 if (err)
12239 goto error;
12240
12241 n_coalesce = kmemdup(&new_coalesce, sizeof(new_coalesce), GFP_KERNEL);
12242 if (!n_coalesce) {
12243 err = -ENOMEM;
12244 goto error;
12245 }
12246 cfg80211_rdev_free_coalesce(rdev);
12247 rdev->coalesce = n_coalesce;
12248
12249 return 0;
12250error:
12251 for (i = 0; i < new_coalesce.n_rules; i++) {
12252 tmp_rule = &new_coalesce.rules[i];
12253 for (j = 0; j < tmp_rule->n_patterns; j++)
12254 kfree(tmp_rule->patterns[j].mask);
12255 kfree(tmp_rule->patterns);
12256 }
12257 kfree(new_coalesce.rules);
12258
12259 return err;
12260}
12261
e5497d76
JB		 12262static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
12263{
12264 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12265 struct net_device *dev = info->user_ptr[1];
12266 struct wireless_dev *wdev = dev->ieee80211_ptr;
12267 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
12268 struct cfg80211_gtk_rekey_data rekey_data;
12269 int err;
12270
12271 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
12272 return -EINVAL;
12273
8cb08174
JB		 12274 err = nla_parse_nested_deprecated(tb, MAX_NL80211_REKEY_DATA,
12275 info->attrs[NL80211_ATTR_REKEY_DATA],
12276 nl80211_rekey_policy, info->extack);
e5497d76
JB		 12277 if (err)
12278 return err;
12279
e785fa0a
VD		 12280 if (!tb[NL80211_REKEY_DATA_REPLAY_CTR] || !tb[NL80211_REKEY_DATA_KEK] ||
12281 !tb[NL80211_REKEY_DATA_KCK])
12282 return -EINVAL;
e5497d76
JB		 12283 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
12284 return -ERANGE;
12285 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
12286 return -ERANGE;
12287 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
12288 return -ERANGE;
12289
78f686ca
JB		 12290 rekey_data.kek = nla_data(tb[NL80211_REKEY_DATA_KEK]);
12291 rekey_data.kck = nla_data(tb[NL80211_REKEY_DATA_KCK]);
12292 rekey_data.replay_ctr = nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]);
e5497d76
JB		 12293
12294 wdev_lock(wdev);
12295 if (!wdev->current_bss) {
12296 err = -ENOTCONN;
12297 goto out;
12298 }
12299
12300 if (!rdev->ops->set_rekey_data) {
12301 err = -EOPNOTSUPP;
12302 goto out;
12303 }
12304
e35e4d28 12305 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 12306 out:
12307 wdev_unlock(wdev);
12308 return err;
12309}
12310
28946da7
JB		 12311static int nl80211_register_unexpected_frame(struct sk_buff *skb,
12312 struct genl_info *info)
12313{
12314 struct net_device *dev = info->user_ptr[1];
12315 struct wireless_dev *wdev = dev->ieee80211_ptr;
12316
12317 if (wdev->iftype != NL80211_IFTYPE_AP &&
12318 wdev->iftype != NL80211_IFTYPE_P2P_GO)
12319 return -EINVAL;
12320
15e47304 12321 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 12322 return -EBUSY;
12323
15e47304 12324 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 12325 return 0;
12326}
12327
7f6cf311
JB		 12328static int nl80211_probe_client(struct sk_buff *skb,
12329 struct genl_info *info)
12330{
12331 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12332 struct net_device *dev = info->user_ptr[1];
12333 struct wireless_dev *wdev = dev->ieee80211_ptr;
12334 struct sk_buff *msg;
12335 void *hdr;
12336 const u8 *addr;
12337 u64 cookie;
12338 int err;
12339
12340 if (wdev->iftype != NL80211_IFTYPE_AP &&
12341 wdev->iftype != NL80211_IFTYPE_P2P_GO)
12342 return -EOPNOTSUPP;
12343
12344 if (!info->attrs[NL80211_ATTR_MAC])
12345 return -EINVAL;
12346
12347 if (!rdev->ops->probe_client)
12348 return -EOPNOTSUPP;
12349
12350 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12351 if (!msg)
12352 return -ENOMEM;
12353
15e47304 12354 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311 12355 NL80211_CMD_PROBE_CLIENT);
cb35fba3
DC		 12356 if (!hdr) {
12357 err = -ENOBUFS;
7f6cf311
JB		 12358 goto free_msg;
12359 }
12360
12361 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
12362
e35e4d28 12363 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 12364 if (err)
12365 goto free_msg;
12366
2dad624e
ND		 12367 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12368 NL80211_ATTR_PAD))
9360ffd1 12369 goto nla_put_failure;
7f6cf311
JB		 12370
12371 genlmsg_end(msg, hdr);
12372
12373 return genlmsg_reply(msg, info);
12374
12375 nla_put_failure:
12376 err = -ENOBUFS;
12377 free_msg:
12378 nlmsg_free(msg);
12379 return err;
12380}
12381
5e760230
JB		 12382static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
12383{
12384 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 12385 struct cfg80211_beacon_registration *reg, *nreg;
12386 int rv;
5e760230
JB		 12387
12388 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
12389 return -EOPNOTSUPP;
12390
37c73b5f
BG		 12391 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
12392 if (!nreg)
12393 return -ENOMEM;
12394
12395 /* First, check if already registered. */
12396 spin_lock_bh(&rdev->beacon_registrations_lock);
12397 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
12398 if (reg->nlportid == info->snd_portid) {
12399 rv = -EALREADY;
12400 goto out_err;
12401 }
12402 }
12403 /* Add it to the list */
12404 nreg->nlportid = info->snd_portid;
12405 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 12406
37c73b5f 12407 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 12408
12409 return 0;
37c73b5f
BG		 12410out_err:
12411 spin_unlock_bh(&rdev->beacon_registrations_lock);
12412 kfree(nreg);
12413 return rv;
5e760230
JB		 12414}
12415
98104fde
JB		 12416static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
12417{
12418 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12419 struct wireless_dev *wdev = info->user_ptr[1];
12420 int err;
12421
12422 if (!rdev->ops->start_p2p_device)
12423 return -EOPNOTSUPP;
12424
12425 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
12426 return -EOPNOTSUPP;
12427
73c7da3d 12428 if (wdev_running(wdev))
98104fde
JB		 12429 return 0;
12430
b6a55015
LC		 12431 if (rfkill_blocked(rdev->rfkill))
12432 return -ERFKILL;
98104fde 12433
eeb126e9 12434 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 12435 if (err)
12436 return err;
12437
73c7da3d 12438 wdev->is_running = true;
98104fde 12439 rdev->opencount++;
98104fde
JB		 12440
12441 return 0;
12442}
12443
12444static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
12445{
12446 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12447 struct wireless_dev *wdev = info->user_ptr[1];
12448
12449 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
12450 return -EOPNOTSUPP;
12451
12452 if (!rdev->ops->stop_p2p_device)
12453 return -EOPNOTSUPP;
12454
f9f47529 12455 cfg80211_stop_p2p_device(rdev, wdev);
98104fde
JB		 12456
12457 return 0;
12458}
12459
cb3b7d87
AB		 12460static int nl80211_start_nan(struct sk_buff *skb, struct genl_info *info)
12461{
12462 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12463 struct wireless_dev *wdev = info->user_ptr[1];
12464 struct cfg80211_nan_conf conf = {};
12465 int err;
12466
12467 if (wdev->iftype != NL80211_IFTYPE_NAN)
12468 return -EOPNOTSUPP;
12469
eeb04a96 12470 if (wdev_running(wdev))
cb3b7d87
AB		 12471 return -EEXIST;
12472
12473 if (rfkill_blocked(rdev->rfkill))
12474 return -ERFKILL;
12475
12476 if (!info->attrs[NL80211_ATTR_NAN_MASTER_PREF])
12477 return -EINVAL;
12478
cb3b7d87
AB		 12479 conf.master_pref =
12480 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
cb3b7d87 12481
8585989d
LC		 12482 if (info->attrs[NL80211_ATTR_BANDS]) {
12483 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
12484
12485 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
12486 return -EOPNOTSUPP;
12487
12488 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
12489 return -EINVAL;
12490
12491 conf.bands = bands;
12492 }
cb3b7d87
AB		 12493
12494 err = rdev_start_nan(rdev, wdev, &conf);
12495 if (err)
12496 return err;
12497
73c7da3d 12498 wdev->is_running = true;
cb3b7d87
AB		 12499 rdev->opencount++;
12500
12501 return 0;
12502}
12503
12504static int nl80211_stop_nan(struct sk_buff *skb, struct genl_info *info)
12505{
12506 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12507 struct wireless_dev *wdev = info->user_ptr[1];
12508
12509 if (wdev->iftype != NL80211_IFTYPE_NAN)
12510 return -EOPNOTSUPP;
12511
12512 cfg80211_stop_nan(rdev, wdev);
12513
12514 return 0;
12515}
12516
a442b761
AB		 12517static int validate_nan_filter(struct nlattr *filter_attr)
12518{
12519 struct nlattr *attr;
12520 int len = 0, n_entries = 0, rem;
12521
12522 nla_for_each_nested(attr, filter_attr, rem) {
12523 len += nla_len(attr);
12524 n_entries++;
12525 }
12526
12527 if (len >= U8_MAX)
12528 return -EINVAL;
12529
12530 return n_entries;
12531}
12532
12533static int handle_nan_filter(struct nlattr *attr_filter,
12534 struct cfg80211_nan_func *func,
12535 bool tx)
12536{
12537 struct nlattr *attr;
12538 int n_entries, rem, i;
12539 struct cfg80211_nan_func_filter *filter;
12540
12541 n_entries = validate_nan_filter(attr_filter);
12542 if (n_entries < 0)
12543 return n_entries;
12544
12545 BUILD_BUG_ON(sizeof(*func->rx_filters) != sizeof(*func->tx_filters));
12546
12547 filter = kcalloc(n_entries, sizeof(*func->rx_filters), GFP_KERNEL);
12548 if (!filter)
12549 return -ENOMEM;
12550
12551 i = 0;
12552 nla_for_each_nested(attr, attr_filter, rem) {
b15ca182 12553 filter[i].filter = nla_memdup(attr, GFP_KERNEL);
a442b761
AB		 12554 filter[i].len = nla_len(attr);
12555 i++;
12556 }
12557 if (tx) {
12558 func->num_tx_filters = n_entries;
12559 func->tx_filters = filter;
12560 } else {
12561 func->num_rx_filters = n_entries;
12562 func->rx_filters = filter;
12563 }
12564
12565 return 0;
12566}
12567
12568static int nl80211_nan_add_func(struct sk_buff *skb,
12569 struct genl_info *info)
12570{
12571 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12572 struct wireless_dev *wdev = info->user_ptr[1];
12573 struct nlattr *tb[NUM_NL80211_NAN_FUNC_ATTR], *func_attr;
12574 struct cfg80211_nan_func *func;
12575 struct sk_buff *msg = NULL;
12576 void *hdr = NULL;
12577 int err = 0;
12578
12579 if (wdev->iftype != NL80211_IFTYPE_NAN)
12580 return -EOPNOTSUPP;
12581
73c7da3d 12582 if (!wdev_running(wdev))
a442b761
AB		 12583 return -ENOTCONN;
12584
12585 if (!info->attrs[NL80211_ATTR_NAN_FUNC])
12586 return -EINVAL;
12587
8cb08174
JB		 12588 err = nla_parse_nested_deprecated(tb, NL80211_NAN_FUNC_ATTR_MAX,
12589 info->attrs[NL80211_ATTR_NAN_FUNC],
12590 nl80211_nan_func_policy,
12591 info->extack);
a442b761
AB		 12592 if (err)
12593 return err;
12594
12595 func = kzalloc(sizeof(*func), GFP_KERNEL);
12596 if (!func)
12597 return -ENOMEM;
12598
b60ad348 12599 func->cookie = cfg80211_assign_cookie(rdev);
a442b761
AB		 12600
12601 if (!tb[NL80211_NAN_FUNC_TYPE] ||
12602 nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]) > NL80211_NAN_FUNC_MAX_TYPE) {
12603 err = -EINVAL;
12604 goto out;
12605 }
12606
12607
12608 func->type = nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]);
12609
12610 if (!tb[NL80211_NAN_FUNC_SERVICE_ID]) {
12611 err = -EINVAL;
12612 goto out;
12613 }
12614
12615 memcpy(func->service_id, nla_data(tb[NL80211_NAN_FUNC_SERVICE_ID]),
12616 sizeof(func->service_id));
12617
12618 func->close_range =
12619 nla_get_flag(tb[NL80211_NAN_FUNC_CLOSE_RANGE]);
12620
12621 if (tb[NL80211_NAN_FUNC_SERVICE_INFO]) {
12622 func->serv_spec_info_len =
12623 nla_len(tb[NL80211_NAN_FUNC_SERVICE_INFO]);
12624 func->serv_spec_info =
12625 kmemdup(nla_data(tb[NL80211_NAN_FUNC_SERVICE_INFO]),
12626 func->serv_spec_info_len,
12627 GFP_KERNEL);
12628 if (!func->serv_spec_info) {
12629 err = -ENOMEM;
12630 goto out;
12631 }
12632 }
12633
12634 if (tb[NL80211_NAN_FUNC_TTL])
12635 func->ttl = nla_get_u32(tb[NL80211_NAN_FUNC_TTL]);
12636
12637 switch (func->type) {
12638 case NL80211_NAN_FUNC_PUBLISH:
12639 if (!tb[NL80211_NAN_FUNC_PUBLISH_TYPE]) {
12640 err = -EINVAL;
12641 goto out;
12642 }
12643
12644 func->publish_type =
12645 nla_get_u8(tb[NL80211_NAN_FUNC_PUBLISH_TYPE]);
12646 func->publish_bcast =
12647 nla_get_flag(tb[NL80211_NAN_FUNC_PUBLISH_BCAST]);
12648
12649 if ((!(func->publish_type & NL80211_NAN_SOLICITED_PUBLISH)) &&
12650 func->publish_bcast) {
12651 err = -EINVAL;
12652 goto out;
12653 }
12654 break;
12655 case NL80211_NAN_FUNC_SUBSCRIBE:
12656 func->subscribe_active =
12657 nla_get_flag(tb[NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE]);
12658 break;
12659 case NL80211_NAN_FUNC_FOLLOW_UP:
12660 if (!tb[NL80211_NAN_FUNC_FOLLOW_UP_ID] ||
3ea15452
HC		 12661 !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] ||
12662 !tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]) {
a442b761
AB		 12663 err = -EINVAL;
12664 goto out;
12665 }
12666
12667 func->followup_id =
12668 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_ID]);
12669 func->followup_reqid =
12670 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID]);
12671 memcpy(func->followup_dest.addr,
12672 nla_data(tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]),
12673 sizeof(func->followup_dest.addr));
12674 if (func->ttl) {
12675 err = -EINVAL;
12676 goto out;
12677 }
12678 break;
12679 default:
12680 err = -EINVAL;
12681 goto out;
12682 }
12683
12684 if (tb[NL80211_NAN_FUNC_SRF]) {
12685 struct nlattr *srf_tb[NUM_NL80211_NAN_SRF_ATTR];
12686
8cb08174
JB		 12687 err = nla_parse_nested_deprecated(srf_tb,
12688 NL80211_NAN_SRF_ATTR_MAX,
12689 tb[NL80211_NAN_FUNC_SRF],
12690 nl80211_nan_srf_policy,
12691 info->extack);
a442b761
AB		 12692 if (err)
12693 goto out;
12694
12695 func->srf_include =
12696 nla_get_flag(srf_tb[NL80211_NAN_SRF_INCLUDE]);
12697
12698 if (srf_tb[NL80211_NAN_SRF_BF]) {
12699 if (srf_tb[NL80211_NAN_SRF_MAC_ADDRS] ||
12700 !srf_tb[NL80211_NAN_SRF_BF_IDX]) {
12701 err = -EINVAL;
12702 goto out;
12703 }
12704
12705 func->srf_bf_len =
12706 nla_len(srf_tb[NL80211_NAN_SRF_BF]);
12707 func->srf_bf =
12708 kmemdup(nla_data(srf_tb[NL80211_NAN_SRF_BF]),
12709 func->srf_bf_len, GFP_KERNEL);
12710 if (!func->srf_bf) {
12711 err = -ENOMEM;
12712 goto out;
12713 }
12714
12715 func->srf_bf_idx =
12716 nla_get_u8(srf_tb[NL80211_NAN_SRF_BF_IDX]);
12717 } else {
12718 struct nlattr *attr, *mac_attr =
12719 srf_tb[NL80211_NAN_SRF_MAC_ADDRS];
12720 int n_entries, rem, i = 0;
12721
12722 if (!mac_attr) {
12723 err = -EINVAL;
12724 goto out;
12725 }
12726
12727 n_entries = validate_acl_mac_addrs(mac_attr);
12728 if (n_entries <= 0) {
12729 err = -EINVAL;
12730 goto out;
12731 }
12732
12733 func->srf_num_macs = n_entries;
12734 func->srf_macs =
6396bb22 12735 kcalloc(n_entries, sizeof(*func->srf_macs),
a442b761
AB		 12736 GFP_KERNEL);
12737 if (!func->srf_macs) {
12738 err = -ENOMEM;
12739 goto out;
12740 }
12741
12742 nla_for_each_nested(attr, mac_attr, rem)
12743 memcpy(func->srf_macs[i++].addr, nla_data(attr),
12744 sizeof(*func->srf_macs));
12745 }
12746 }
12747
12748 if (tb[NL80211_NAN_FUNC_TX_MATCH_FILTER]) {
12749 err = handle_nan_filter(tb[NL80211_NAN_FUNC_TX_MATCH_FILTER],
12750 func, true);
12751 if (err)
12752 goto out;
12753 }
12754
12755 if (tb[NL80211_NAN_FUNC_RX_MATCH_FILTER]) {
12756 err = handle_nan_filter(tb[NL80211_NAN_FUNC_RX_MATCH_FILTER],
12757 func, false);
12758 if (err)
12759 goto out;
12760 }
12761
12762 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12763 if (!msg) {
12764 err = -ENOMEM;
12765 goto out;
12766 }
12767
12768 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
12769 NL80211_CMD_ADD_NAN_FUNCTION);
12770 /* This can't really happen - we just allocated 4KB */
12771 if (WARN_ON(!hdr)) {
12772 err = -ENOMEM;
12773 goto out;
12774 }
12775
12776 err = rdev_add_nan_func(rdev, wdev, func);
12777out:
12778 if (err < 0) {
12779 cfg80211_free_nan_func(func);
12780 nlmsg_free(msg);
12781 return err;
12782 }
12783
12784 /* propagate the instance id and cookie to userspace */
12785 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, func->cookie,
12786 NL80211_ATTR_PAD))
12787 goto nla_put_failure;
12788
ae0be8de 12789 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
a442b761
AB		 12790 if (!func_attr)
12791 goto nla_put_failure;
12792
12793 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID,
12794 func->instance_id))
12795 goto nla_put_failure;
12796
12797 nla_nest_end(msg, func_attr);
12798
12799 genlmsg_end(msg, hdr);
12800 return genlmsg_reply(msg, info);
12801
12802nla_put_failure:
12803 nlmsg_free(msg);
12804 return -ENOBUFS;
12805}
12806
12807static int nl80211_nan_del_func(struct sk_buff *skb,
12808 struct genl_info *info)
12809{
12810 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12811 struct wireless_dev *wdev = info->user_ptr[1];
12812 u64 cookie;
12813
12814 if (wdev->iftype != NL80211_IFTYPE_NAN)
12815 return -EOPNOTSUPP;
12816
73c7da3d 12817 if (!wdev_running(wdev))
a442b761
AB		 12818 return -ENOTCONN;
12819
12820 if (!info->attrs[NL80211_ATTR_COOKIE])
12821 return -EINVAL;
12822
a442b761
AB		 12823 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
12824
12825 rdev_del_nan_func(rdev, wdev, cookie);
12826
12827 return 0;
12828}
12829
a5a9dcf2
AB		 12830static int nl80211_nan_change_config(struct sk_buff *skb,
12831 struct genl_info *info)
12832{
12833 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12834 struct wireless_dev *wdev = info->user_ptr[1];
12835 struct cfg80211_nan_conf conf = {};
12836 u32 changed = 0;
12837
12838 if (wdev->iftype != NL80211_IFTYPE_NAN)
12839 return -EOPNOTSUPP;
12840
73c7da3d 12841 if (!wdev_running(wdev))
a5a9dcf2
AB		 12842 return -ENOTCONN;
12843
12844 if (info->attrs[NL80211_ATTR_NAN_MASTER_PREF]) {
12845 conf.master_pref =
12846 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
12847 if (conf.master_pref <= 1 || conf.master_pref == 255)
12848 return -EINVAL;
12849
12850 changed |= CFG80211_NAN_CONF_CHANGED_PREF;
12851 }
12852
8585989d
LC		 12853 if (info->attrs[NL80211_ATTR_BANDS]) {
12854 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
12855
12856 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
12857 return -EOPNOTSUPP;
12858
12859 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
12860 return -EINVAL;
12861
12862 conf.bands = bands;
12863 changed |= CFG80211_NAN_CONF_CHANGED_BANDS;
a5a9dcf2
AB		 12864 }
12865
12866 if (!changed)
12867 return -EINVAL;
12868
12869 return rdev_nan_change_conf(rdev, wdev, &conf, changed);
12870}
12871
50bcd31d
AB		 12872void cfg80211_nan_match(struct wireless_dev *wdev,
12873 struct cfg80211_nan_match_params *match, gfp_t gfp)
12874{
12875 struct wiphy *wiphy = wdev->wiphy;
12876 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
12877 struct nlattr *match_attr, *local_func_attr, *peer_func_attr;
12878 struct sk_buff *msg;
12879 void *hdr;
12880
12881 if (WARN_ON(!match->inst_id || !match->peer_inst_id || !match->addr))
12882 return;
12883
12884 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
12885 if (!msg)
12886 return;
12887
12888 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NAN_MATCH);
12889 if (!hdr) {
12890 nlmsg_free(msg);
12891 return;
12892 }
12893
12894 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
12895 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
12896 wdev->netdev->ifindex)) ||
12897 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
12898 NL80211_ATTR_PAD))
12899 goto nla_put_failure;
12900
12901 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, match->cookie,
12902 NL80211_ATTR_PAD) ||
12903 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, match->addr))
12904 goto nla_put_failure;
12905
ae0be8de 12906 match_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_MATCH);
50bcd31d
AB		 12907 if (!match_attr)
12908 goto nla_put_failure;
12909
ae0be8de
MK		 12910 local_func_attr = nla_nest_start_noflag(msg,
12911 NL80211_NAN_MATCH_FUNC_LOCAL);
50bcd31d
AB		 12912 if (!local_func_attr)
12913 goto nla_put_failure;
12914
12915 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->inst_id))
12916 goto nla_put_failure;
12917
12918 nla_nest_end(msg, local_func_attr);
12919
ae0be8de
MK		 12920 peer_func_attr = nla_nest_start_noflag(msg,
12921 NL80211_NAN_MATCH_FUNC_PEER);
50bcd31d
AB		 12922 if (!peer_func_attr)
12923 goto nla_put_failure;
12924
12925 if (nla_put_u8(msg, NL80211_NAN_FUNC_TYPE, match->type) ||
12926 nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->peer_inst_id))
12927 goto nla_put_failure;
12928
12929 if (match->info && match->info_len &&
12930 nla_put(msg, NL80211_NAN_FUNC_SERVICE_INFO, match->info_len,
12931 match->info))
12932 goto nla_put_failure;
12933
12934 nla_nest_end(msg, peer_func_attr);
12935 nla_nest_end(msg, match_attr);
12936 genlmsg_end(msg, hdr);
12937
12938 if (!wdev->owner_nlportid)
12939 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
12940 msg, 0, NL80211_MCGRP_NAN, gfp);
12941 else
12942 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
12943 wdev->owner_nlportid);
12944
12945 return;
12946
12947nla_put_failure:
12948 nlmsg_free(msg);
12949}
12950EXPORT_SYMBOL(cfg80211_nan_match);
12951
368e5a7b
AB		 12952void cfg80211_nan_func_terminated(struct wireless_dev *wdev,
12953 u8 inst_id,
12954 enum nl80211_nan_func_term_reason reason,
12955 u64 cookie, gfp_t gfp)
12956{
12957 struct wiphy *wiphy = wdev->wiphy;
12958 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
12959 struct sk_buff *msg;
12960 struct nlattr *func_attr;
12961 void *hdr;
12962
12963 if (WARN_ON(!inst_id))
12964 return;
12965
12966 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
12967 if (!msg)
12968 return;
12969
12970 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_NAN_FUNCTION);
12971 if (!hdr) {
12972 nlmsg_free(msg);
12973 return;
12974 }
12975
12976 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
12977 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
12978 wdev->netdev->ifindex)) ||
12979 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
12980 NL80211_ATTR_PAD))
12981 goto nla_put_failure;
12982
12983 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12984 NL80211_ATTR_PAD))
12985 goto nla_put_failure;
12986
ae0be8de 12987 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
368e5a7b
AB		 12988 if (!func_attr)
12989 goto nla_put_failure;
12990
12991 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, inst_id) ||
12992 nla_put_u8(msg, NL80211_NAN_FUNC_TERM_REASON, reason))
12993 goto nla_put_failure;
12994
12995 nla_nest_end(msg, func_attr);
12996 genlmsg_end(msg, hdr);
12997
12998 if (!wdev->owner_nlportid)
12999 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
13000 msg, 0, NL80211_MCGRP_NAN, gfp);
13001 else
13002 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
13003 wdev->owner_nlportid);
13004
13005 return;
13006
13007nla_put_failure:
13008 nlmsg_free(msg);
13009}
13010EXPORT_SYMBOL(cfg80211_nan_func_terminated);
13011
3713b4e3
JB		 13012static int nl80211_get_protocol_features(struct sk_buff *skb,
13013 struct genl_info *info)
13014{
13015 void *hdr;
13016 struct sk_buff *msg;
13017
13018 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13019 if (!msg)
13020 return -ENOMEM;
13021
13022 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13023 NL80211_CMD_GET_PROTOCOL_FEATURES);
13024 if (!hdr)
13025 goto nla_put_failure;
13026
13027 if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
13028 NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
13029 goto nla_put_failure;
13030
13031 genlmsg_end(msg, hdr);
13032 return genlmsg_reply(msg, info);
13033
13034 nla_put_failure:
13035 kfree_skb(msg);
13036 return -ENOBUFS;
13037}
13038
355199e0
JM		 13039static int nl80211_update_ft_ies(struct sk_buff *skb, struct genl_info *info)
13040{
13041 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13042 struct cfg80211_update_ft_ies_params ft_params;
13043 struct net_device *dev = info->user_ptr[1];
13044
13045 if (!rdev->ops->update_ft_ies)
13046 return -EOPNOTSUPP;
13047
13048 if (!info->attrs[NL80211_ATTR_MDID] ||
3d7af878 13049 !info->attrs[NL80211_ATTR_IE])
355199e0
JM		 13050 return -EINVAL;
13051
13052 memset(&ft_params, 0, sizeof(ft_params));
13053 ft_params.md = nla_get_u16(info->attrs[NL80211_ATTR_MDID]);
13054 ft_params.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
13055 ft_params.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
13056
13057 return rdev_update_ft_ies(rdev, dev, &ft_params);
13058}
13059
5de17984
AS		 13060static int nl80211_crit_protocol_start(struct sk_buff *skb,
13061 struct genl_info *info)
13062{
13063 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13064 struct wireless_dev *wdev = info->user_ptr[1];
13065 enum nl80211_crit_proto_id proto = NL80211_CRIT_PROTO_UNSPEC;
13066 u16 duration;
13067 int ret;
13068
13069 if (!rdev->ops->crit_proto_start)
13070 return -EOPNOTSUPP;
13071
13072 if (WARN_ON(!rdev->ops->crit_proto_stop))
13073 return -EINVAL;
13074
13075 if (rdev->crit_proto_nlportid)
13076 return -EBUSY;
13077
13078 /* determine protocol if provided */
13079 if (info->attrs[NL80211_ATTR_CRIT_PROT_ID])
13080 proto = nla_get_u16(info->attrs[NL80211_ATTR_CRIT_PROT_ID]);
13081
13082 if (proto >= NUM_NL80211_CRIT_PROTO)
13083 return -EINVAL;
13084
13085 /* timeout must be provided */
13086 if (!info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION])
13087 return -EINVAL;
13088
13089 duration =
13090 nla_get_u16(info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION]);
13091
13092 if (duration > NL80211_CRIT_PROTO_MAX_DURATION)
13093 return -ERANGE;
13094
13095 ret = rdev_crit_proto_start(rdev, wdev, proto, duration);
13096 if (!ret)
13097 rdev->crit_proto_nlportid = info->snd_portid;
13098
13099 return ret;
13100}
13101
13102static int nl80211_crit_protocol_stop(struct sk_buff *skb,
13103 struct genl_info *info)
13104{
13105 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13106 struct wireless_dev *wdev = info->user_ptr[1];
13107
13108 if (!rdev->ops->crit_proto_stop)
13109 return -EOPNOTSUPP;
13110
13111 if (rdev->crit_proto_nlportid) {
13112 rdev->crit_proto_nlportid = 0;
13113 rdev_crit_proto_stop(rdev, wdev);
13114 }
13115 return 0;
13116}
13117
901bb989
JB		 13118static int nl80211_vendor_check_policy(const struct wiphy_vendor_command *vcmd,
13119 struct nlattr *attr,
13120 struct netlink_ext_ack *extack)
13121{
13122 if (vcmd->policy == VENDOR_CMD_RAW_DATA) {
13123 if (attr->nla_type & NLA_F_NESTED) {
13124 NL_SET_ERR_MSG_ATTR(extack, attr,
13125 "unexpected nested data");
13126 return -EINVAL;
13127 }
13128
13129 return 0;
13130 }
13131
13132 if (!(attr->nla_type & NLA_F_NESTED)) {
13133 NL_SET_ERR_MSG_ATTR(extack, attr, "expected nested data");
13134 return -EINVAL;
13135 }
13136
32d5109a 13137 return nla_validate_nested(attr, vcmd->maxattr, vcmd->policy, extack);
901bb989
JB		 13138}
13139
ad7e718c
JB		 13140static int nl80211_vendor_cmd(struct sk_buff *skb, struct genl_info *info)
13141{
13142 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13143 struct wireless_dev *wdev =
13144 __cfg80211_wdev_from_attrs(genl_info_net(info), info->attrs);
13145 int i, err;
13146 u32 vid, subcmd;
13147
13148 if (!rdev->wiphy.vendor_commands)
13149 return -EOPNOTSUPP;
13150
13151 if (IS_ERR(wdev)) {
13152 err = PTR_ERR(wdev);
13153 if (err != -EINVAL)
13154 return err;
13155 wdev = NULL;
13156 } else if (wdev->wiphy != &rdev->wiphy) {
13157 return -EINVAL;
13158 }
13159
13160 if (!info->attrs[NL80211_ATTR_VENDOR_ID] ||
13161 !info->attrs[NL80211_ATTR_VENDOR_SUBCMD])
13162 return -EINVAL;
13163
13164 vid = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_ID]);
13165 subcmd = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_SUBCMD]);
13166 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
13167 const struct wiphy_vendor_command *vcmd;
13168 void *data = NULL;
13169 int len = 0;
13170
13171 vcmd = &rdev->wiphy.vendor_commands[i];
13172
13173 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
13174 continue;
13175
13176 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
13177 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
13178 if (!wdev)
13179 return -EINVAL;
13180 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
13181 !wdev->netdev)
13182 return -EINVAL;
13183
13184 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
73c7da3d 13185 if (!wdev_running(wdev))
ad7e718c
JB		 13186 return -ENETDOWN;
13187 }
7bdbe400
JB		 13188
13189 if (!vcmd->doit)
13190 return -EOPNOTSUPP;
ad7e718c
JB		 13191 } else {
13192 wdev = NULL;
13193 }
13194
13195 if (info->attrs[NL80211_ATTR_VENDOR_DATA]) {
13196 data = nla_data(info->attrs[NL80211_ATTR_VENDOR_DATA]);
13197 len = nla_len(info->attrs[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 13198
13199 err = nl80211_vendor_check_policy(vcmd,
13200 info->attrs[NL80211_ATTR_VENDOR_DATA],
13201 info->extack);
13202 if (err)
13203 return err;
ad7e718c
JB		 13204 }
13205
13206 rdev->cur_cmd_info = info;
901bb989 13207 err = vcmd->doit(&rdev->wiphy, wdev, data, len);
ad7e718c
JB		 13208 rdev->cur_cmd_info = NULL;
13209 return err;
13210 }
13211
13212 return -EOPNOTSUPP;
13213}
13214
7bdbe400
JB		 13215static int nl80211_prepare_vendor_dump(struct sk_buff *skb,
13216 struct netlink_callback *cb,
13217 struct cfg80211_registered_device **rdev,
13218 struct wireless_dev **wdev)
13219{
50508d94 13220 struct nlattr **attrbuf;
7bdbe400
JB		 13221 u32 vid, subcmd;
13222 unsigned int i;
13223 int vcmd_idx = -1;
13224 int err;
13225 void *data = NULL;
13226 unsigned int data_len = 0;
13227
7bdbe400
JB		 13228 if (cb->args[0]) {
13229 /* subtract the 1 again here */
13230 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
13231 struct wireless_dev *tmp;
13232
ea90e0dc
JB		 13233 if (!wiphy)
13234 return -ENODEV;
7bdbe400
JB		 13235 *rdev = wiphy_to_rdev(wiphy);
13236 *wdev = NULL;
13237
13238 if (cb->args[1]) {
53873f13 13239 list_for_each_entry(tmp, &wiphy->wdev_list, list) {
7bdbe400
JB		 13240 if (tmp->identifier == cb->args[1] - 1) {
13241 *wdev = tmp;
13242 break;
13243 }
13244 }
13245 }
13246
13247 /* keep rtnl locked in successful case */
13248 return 0;
13249 }
13250
50508d94
JB		 13251 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
13252 if (!attrbuf)
13253 return -ENOMEM;
13254
8cb08174
JB		 13255 err = nlmsg_parse_deprecated(cb->nlh,
13256 GENL_HDRLEN + nl80211_fam.hdrsize,
13257 attrbuf, nl80211_fam.maxattr,
13258 nl80211_policy, NULL);
7bdbe400 13259 if (err)
50508d94 13260 goto out;
7bdbe400 13261
c90c39da 13262 if (!attrbuf[NL80211_ATTR_VENDOR_ID] ||
50508d94
JB		 13263 !attrbuf[NL80211_ATTR_VENDOR_SUBCMD]) {
13264 err = -EINVAL;
13265 goto out;
13266 }
7bdbe400 13267
c90c39da 13268 *wdev = __cfg80211_wdev_from_attrs(sock_net(skb->sk), attrbuf);
7bdbe400
JB		 13269 if (IS_ERR(*wdev))
13270 *wdev = NULL;
13271
c90c39da 13272 *rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
50508d94
JB		 13273 if (IS_ERR(*rdev)) {
13274 err = PTR_ERR(*rdev);
13275 goto out;
13276 }
7bdbe400 13277
c90c39da
JB		 13278 vid = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_ID]);
13279 subcmd = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_SUBCMD]);
7bdbe400
JB		 13280
13281 for (i = 0; i < (*rdev)->wiphy.n_vendor_commands; i++) {
13282 const struct wiphy_vendor_command *vcmd;
13283
13284 vcmd = &(*rdev)->wiphy.vendor_commands[i];
13285
13286 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
13287 continue;
13288
50508d94
JB		 13289 if (!vcmd->dumpit) {
13290 err = -EOPNOTSUPP;
13291 goto out;
13292 }
7bdbe400
JB		 13293
13294 vcmd_idx = i;
13295 break;
13296 }
13297
50508d94
JB		 13298 if (vcmd_idx < 0) {
13299 err = -EOPNOTSUPP;
13300 goto out;
13301 }
7bdbe400 13302
c90c39da
JB		 13303 if (attrbuf[NL80211_ATTR_VENDOR_DATA]) {
13304 data = nla_data(attrbuf[NL80211_ATTR_VENDOR_DATA]);
13305 data_len = nla_len(attrbuf[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 13306
13307 err = nl80211_vendor_check_policy(
13308 &(*rdev)->wiphy.vendor_commands[vcmd_idx],
13309 attrbuf[NL80211_ATTR_VENDOR_DATA],
13310 cb->extack);
13311 if (err)
50508d94 13312 goto out;
7bdbe400
JB		 13313 }
13314
13315 /* 0 is the first index - add 1 to parse only once */
13316 cb->args[0] = (*rdev)->wiphy_idx + 1;
13317 /* add 1 to know if it was NULL */
13318 cb->args[1] = *wdev ? (*wdev)->identifier + 1 : 0;
13319 cb->args[2] = vcmd_idx;
13320 cb->args[3] = (unsigned long)data;
13321 cb->args[4] = data_len;
13322
13323 /* keep rtnl locked in successful case */
50508d94
JB		 13324 err = 0;
13325out:
13326 kfree(attrbuf);
13327 return err;
7bdbe400
JB		 13328}
13329
13330static int nl80211_vendor_cmd_dump(struct sk_buff *skb,
13331 struct netlink_callback *cb)
13332{
13333 struct cfg80211_registered_device *rdev;
13334 struct wireless_dev *wdev;
13335 unsigned int vcmd_idx;
13336 const struct wiphy_vendor_command *vcmd;
13337 void *data;
13338 int data_len;
13339 int err;
13340 struct nlattr *vendor_data;
13341
ea90e0dc 13342 rtnl_lock();
7bdbe400
JB		 13343 err = nl80211_prepare_vendor_dump(skb, cb, &rdev, &wdev);
13344 if (err)
ea90e0dc 13345 goto out;
7bdbe400
JB		 13346
13347 vcmd_idx = cb->args[2];
13348 data = (void *)cb->args[3];
13349 data_len = cb->args[4];
13350 vcmd = &rdev->wiphy.vendor_commands[vcmd_idx];
13351
13352 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
13353 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
ea90e0dc
JB		 13354 if (!wdev) {
13355 err = -EINVAL;
13356 goto out;
13357 }
7bdbe400 13358 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
ea90e0dc
JB		 13359 !wdev->netdev) {
13360 err = -EINVAL;
13361 goto out;
13362 }
7bdbe400
JB		 13363
13364 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
ea90e0dc
JB		 13365 if (!wdev_running(wdev)) {
13366 err = -ENETDOWN;
13367 goto out;
13368 }
7bdbe400
JB		 13369 }
13370 }
13371
13372 while (1) {
13373 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
13374 cb->nlh->nlmsg_seq, NLM_F_MULTI,
13375 NL80211_CMD_VENDOR);
13376 if (!hdr)
13377 break;
13378
13379 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 13380 (wdev && nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
13381 wdev_id(wdev),
13382 NL80211_ATTR_PAD))) {
7bdbe400
JB		 13383 genlmsg_cancel(skb, hdr);
13384 break;
13385 }
13386
ae0be8de
MK		 13387 vendor_data = nla_nest_start_noflag(skb,
13388 NL80211_ATTR_VENDOR_DATA);
7bdbe400
JB		 13389 if (!vendor_data) {
13390 genlmsg_cancel(skb, hdr);
13391 break;
13392 }
13393
13394 err = vcmd->dumpit(&rdev->wiphy, wdev, skb, data, data_len,
13395 (unsigned long *)&cb->args[5]);
13396 nla_nest_end(skb, vendor_data);
13397
13398 if (err == -ENOBUFS || err == -ENOENT) {
13399 genlmsg_cancel(skb, hdr);
13400 break;
13401 } else if (err) {
13402 genlmsg_cancel(skb, hdr);
13403 goto out;
13404 }
13405
13406 genlmsg_end(skb, hdr);
13407 }
13408
13409 err = skb->len;
13410 out:
13411 rtnl_unlock();
13412 return err;
13413}
13414
ad7e718c
JB		 13415struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
13416 enum nl80211_commands cmd,
13417 enum nl80211_attrs attr,
13418 int approxlen)
13419{
f26cbf40 13420 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ad7e718c
JB		 13421
13422 if (WARN_ON(!rdev->cur_cmd_info))
13423 return NULL;
13424
6c09e791 13425 return __cfg80211_alloc_vendor_skb(rdev, NULL, approxlen,
ad7e718c
JB		 13426 rdev->cur_cmd_info->snd_portid,
13427 rdev->cur_cmd_info->snd_seq,
567ffc35 13428 cmd, attr, NULL, GFP_KERNEL);
ad7e718c
JB		 13429}
13430EXPORT_SYMBOL(__cfg80211_alloc_reply_skb);
13431
13432int cfg80211_vendor_cmd_reply(struct sk_buff *skb)
13433{
13434 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
13435 void *hdr = ((void **)skb->cb)[1];
13436 struct nlattr *data = ((void **)skb->cb)[2];
13437
bd8c78e7
JB		 13438 /* clear CB data for netlink core to own from now on */
13439 memset(skb->cb, 0, sizeof(skb->cb));
13440
ad7e718c
JB		 13441 if (WARN_ON(!rdev->cur_cmd_info)) {
13442 kfree_skb(skb);
13443 return -EINVAL;
13444 }
13445
13446 nla_nest_end(skb, data);
13447 genlmsg_end(skb, hdr);
13448 return genlmsg_reply(skb, rdev->cur_cmd_info);
13449}
13450EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_reply);
13451
55c1fdf0
JB		 13452unsigned int cfg80211_vendor_cmd_get_sender(struct wiphy *wiphy)
13453{
13454 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
13455
13456 if (WARN_ON(!rdev->cur_cmd_info))
13457 return 0;
13458
13459 return rdev->cur_cmd_info->snd_portid;
13460}
13461EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_get_sender);
13462
fa9ffc74
KP		 13463static int nl80211_set_qos_map(struct sk_buff *skb,
13464 struct genl_info *info)
13465{
13466 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13467 struct cfg80211_qos_map *qos_map = NULL;
13468 struct net_device *dev = info->user_ptr[1];
13469 u8 *pos, len, num_des, des_len, des;
13470 int ret;
13471
13472 if (!rdev->ops->set_qos_map)
13473 return -EOPNOTSUPP;
13474
13475 if (info->attrs[NL80211_ATTR_QOS_MAP]) {
13476 pos = nla_data(info->attrs[NL80211_ATTR_QOS_MAP]);
13477 len = nla_len(info->attrs[NL80211_ATTR_QOS_MAP]);
13478
13479 if (len % 2 || len < IEEE80211_QOS_MAP_LEN_MIN ||
13480 len > IEEE80211_QOS_MAP_LEN_MAX)
13481 return -EINVAL;
13482
13483 qos_map = kzalloc(sizeof(struct cfg80211_qos_map), GFP_KERNEL);
13484 if (!qos_map)
13485 return -ENOMEM;
13486
13487 num_des = (len - IEEE80211_QOS_MAP_LEN_MIN) >> 1;
13488 if (num_des) {
13489 des_len = num_des *
13490 sizeof(struct cfg80211_dscp_exception);
13491 memcpy(qos_map->dscp_exception, pos, des_len);
13492 qos_map->num_des = num_des;
13493 for (des = 0; des < num_des; des++) {
13494 if (qos_map->dscp_exception[des].up > 7) {
13495 kfree(qos_map);
13496 return -EINVAL;
13497 }
13498 }
13499 pos += des_len;
13500 }
13501 memcpy(qos_map->up, pos, IEEE80211_QOS_MAP_LEN_MIN);
13502 }
13503
13504 wdev_lock(dev->ieee80211_ptr);
13505 ret = nl80211_key_allowed(dev->ieee80211_ptr);
13506 if (!ret)
13507 ret = rdev_set_qos_map(rdev, dev, qos_map);
13508 wdev_unlock(dev->ieee80211_ptr);
13509
13510 kfree(qos_map);
13511 return ret;
13512}
13513
960d01ac
JB		 13514static int nl80211_add_tx_ts(struct sk_buff *skb, struct genl_info *info)
13515{
13516 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13517 struct net_device *dev = info->user_ptr[1];
13518 struct wireless_dev *wdev = dev->ieee80211_ptr;
13519 const u8 *peer;
13520 u8 tsid, up;
13521 u16 admitted_time = 0;
13522 int err;
13523
723e73ac 13524 if (!(rdev->wiphy.features & NL80211_FEATURE_SUPPORTS_WMM_ADMISSION))
960d01ac
JB		 13525 return -EOPNOTSUPP;
13526
13527 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC] ||
13528 !info->attrs[NL80211_ATTR_USER_PRIO])
13529 return -EINVAL;
13530
13531 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
960d01ac 13532 up = nla_get_u8(info->attrs[NL80211_ATTR_USER_PRIO]);
960d01ac
JB		 13533
13534 /* WMM uses TIDs 0-7 even for TSPEC */
723e73ac 13535 if (tsid >= IEEE80211_FIRST_TSPEC_TSID) {
960d01ac 13536 /* TODO: handle 802.11 TSPEC/admission control
723e73ac
JB		 13537 * need more attributes for that (e.g. BA session requirement);
13538 * change the WMM adminssion test above to allow both then
960d01ac
JB		 13539 */
13540 return -EINVAL;
13541 }
13542
13543 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
13544
13545 if (info->attrs[NL80211_ATTR_ADMITTED_TIME]) {
13546 admitted_time =
13547 nla_get_u16(info->attrs[NL80211_ATTR_ADMITTED_TIME]);
13548 if (!admitted_time)
13549 return -EINVAL;
13550 }
13551
13552 wdev_lock(wdev);
13553 switch (wdev->iftype) {
13554 case NL80211_IFTYPE_STATION:
13555 case NL80211_IFTYPE_P2P_CLIENT:
13556 if (wdev->current_bss)
13557 break;
13558 err = -ENOTCONN;
13559 goto out;
13560 default:
13561 err = -EOPNOTSUPP;
13562 goto out;
13563 }
13564
13565 err = rdev_add_tx_ts(rdev, dev, tsid, peer, up, admitted_time);
13566
13567 out:
13568 wdev_unlock(wdev);
13569 return err;
13570}
13571
13572static int nl80211_del_tx_ts(struct sk_buff *skb, struct genl_info *info)
13573{
13574 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13575 struct net_device *dev = info->user_ptr[1];
13576 struct wireless_dev *wdev = dev->ieee80211_ptr;
13577 const u8 *peer;
13578 u8 tsid;
13579 int err;
13580
13581 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC])
13582 return -EINVAL;
13583
13584 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
13585 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
13586
13587 wdev_lock(wdev);
13588 err = rdev_del_tx_ts(rdev, dev, tsid, peer);
13589 wdev_unlock(wdev);
13590
13591 return err;
13592}
13593
1057d35e
AN		 13594static int nl80211_tdls_channel_switch(struct sk_buff *skb,
13595 struct genl_info *info)
13596{
13597 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13598 struct net_device *dev = info->user_ptr[1];
13599 struct wireless_dev *wdev = dev->ieee80211_ptr;
13600 struct cfg80211_chan_def chandef = {};
13601 const u8 *addr;
13602 u8 oper_class;
13603 int err;
13604
13605 if (!rdev->ops->tdls_channel_switch ||
13606 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
13607 return -EOPNOTSUPP;
13608
13609 switch (dev->ieee80211_ptr->iftype) {
13610 case NL80211_IFTYPE_STATION:
13611 case NL80211_IFTYPE_P2P_CLIENT:
13612 break;
13613 default:
13614 return -EOPNOTSUPP;
13615 }
13616
13617 if (!info->attrs[NL80211_ATTR_MAC] ||
13618 !info->attrs[NL80211_ATTR_OPER_CLASS])
13619 return -EINVAL;
13620
13621 err = nl80211_parse_chandef(rdev, info, &chandef);
13622 if (err)
13623 return err;
13624
13625 /*
13626 * Don't allow wide channels on the 2.4Ghz band, as per IEEE802.11-2012
13627 * section 10.22.6.2.1. Disallow 5/10Mhz channels as well for now, the
13628 * specification is not defined for them.
13629 */
57fbcce3 13630 if (chandef.chan->band == NL80211_BAND_2GHZ &&
1057d35e
AN		 13631 chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
13632 chandef.width != NL80211_CHAN_WIDTH_20)
13633 return -EINVAL;
13634
13635 /* we will be active on the TDLS link */
923b352f
AN		 13636 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
13637 wdev->iftype))
1057d35e
AN		 13638 return -EINVAL;
13639
13640 /* don't allow switching to DFS channels */
13641 if (cfg80211_chandef_dfs_required(wdev->wiphy, &chandef, wdev->iftype))
13642 return -EINVAL;
13643
13644 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
13645 oper_class = nla_get_u8(info->attrs[NL80211_ATTR_OPER_CLASS]);
13646
13647 wdev_lock(wdev);
13648 err = rdev_tdls_channel_switch(rdev, dev, addr, oper_class, &chandef);
13649 wdev_unlock(wdev);
13650
13651 return err;
13652}
13653
13654static int nl80211_tdls_cancel_channel_switch(struct sk_buff *skb,
13655 struct genl_info *info)
13656{
13657 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13658 struct net_device *dev = info->user_ptr[1];
13659 struct wireless_dev *wdev = dev->ieee80211_ptr;
13660 const u8 *addr;
13661
13662 if (!rdev->ops->tdls_channel_switch ||
13663 !rdev->ops->tdls_cancel_channel_switch ||
13664 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
13665 return -EOPNOTSUPP;
13666
13667 switch (dev->ieee80211_ptr->iftype) {
13668 case NL80211_IFTYPE_STATION:
13669 case NL80211_IFTYPE_P2P_CLIENT:
13670 break;
13671 default:
13672 return -EOPNOTSUPP;
13673 }
13674
13675 if (!info->attrs[NL80211_ATTR_MAC])
13676 return -EINVAL;
13677
13678 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
13679
13680 wdev_lock(wdev);
13681 rdev_tdls_cancel_channel_switch(rdev, dev, addr);
13682 wdev_unlock(wdev);
13683
13684 return 0;
13685}
13686
ce0ce13a
MB		 13687static int nl80211_set_multicast_to_unicast(struct sk_buff *skb,
13688 struct genl_info *info)
13689{
13690 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13691 struct net_device *dev = info->user_ptr[1];
13692 struct wireless_dev *wdev = dev->ieee80211_ptr;
13693 const struct nlattr *nla;
13694 bool enabled;
13695
ce0ce13a
MB		 13696 if (!rdev->ops->set_multicast_to_unicast)
13697 return -EOPNOTSUPP;
13698
13699 if (wdev->iftype != NL80211_IFTYPE_AP &&
13700 wdev->iftype != NL80211_IFTYPE_P2P_GO)
13701 return -EOPNOTSUPP;
13702
13703 nla = info->attrs[NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED];
13704 enabled = nla_get_flag(nla);
13705
13706 return rdev_set_multicast_to_unicast(rdev, dev, enabled);
13707}
13708
3a00df57
AS		 13709static int nl80211_set_pmk(struct sk_buff *skb, struct genl_info *info)
13710{
13711 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13712 struct net_device *dev = info->user_ptr[1];
13713 struct wireless_dev *wdev = dev->ieee80211_ptr;
13714 struct cfg80211_pmk_conf pmk_conf = {};
13715 int ret;
13716
13717 if (wdev->iftype != NL80211_IFTYPE_STATION &&
13718 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
13719 return -EOPNOTSUPP;
13720
13721 if (!wiphy_ext_feature_isset(&rdev->wiphy,
13722 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
13723 return -EOPNOTSUPP;
13724
13725 if (!info->attrs[NL80211_ATTR_MAC] || !info->attrs[NL80211_ATTR_PMK])
13726 return -EINVAL;
13727
13728 wdev_lock(wdev);
13729 if (!wdev->current_bss) {
13730 ret = -ENOTCONN;
13731 goto out;
13732 }
13733
13734 pmk_conf.aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
13735 if (memcmp(pmk_conf.aa, wdev->current_bss->pub.bssid, ETH_ALEN)) {
13736 ret = -EINVAL;
13737 goto out;
13738 }
13739
13740 pmk_conf.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
13741 pmk_conf.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
13742 if (pmk_conf.pmk_len != WLAN_PMK_LEN &&
13743 pmk_conf.pmk_len != WLAN_PMK_LEN_SUITE_B_192) {
13744 ret = -EINVAL;
13745 goto out;
13746 }
13747
13748 if (info->attrs[NL80211_ATTR_PMKR0_NAME]) {
13749 int r0_name_len = nla_len(info->attrs[NL80211_ATTR_PMKR0_NAME]);
13750
13751 if (r0_name_len != WLAN_PMK_NAME_LEN) {
13752 ret = -EINVAL;
13753 goto out;
13754 }
13755
13756 pmk_conf.pmk_r0_name =
13757 nla_data(info->attrs[NL80211_ATTR_PMKR0_NAME]);
13758 }
13759
13760 ret = rdev_set_pmk(rdev, dev, &pmk_conf);
13761out:
13762 wdev_unlock(wdev);
13763 return ret;
13764}
13765
13766static int nl80211_del_pmk(struct sk_buff *skb, struct genl_info *info)
13767{
13768 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13769 struct net_device *dev = info->user_ptr[1];
13770 struct wireless_dev *wdev = dev->ieee80211_ptr;
13771 const u8 *aa;
13772 int ret;
13773
13774 if (wdev->iftype != NL80211_IFTYPE_STATION &&
13775 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
13776 return -EOPNOTSUPP;
13777
13778 if (!wiphy_ext_feature_isset(&rdev->wiphy,
13779 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
13780 return -EOPNOTSUPP;
13781
13782 if (!info->attrs[NL80211_ATTR_MAC])
13783 return -EINVAL;
13784
13785 wdev_lock(wdev);
13786 aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
13787 ret = rdev_del_pmk(rdev, dev, aa);
13788 wdev_unlock(wdev);
13789
13790 return ret;
13791}
13792
40cbfa90
SD		 13793static int nl80211_external_auth(struct sk_buff *skb, struct genl_info *info)
13794{
13795 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13796 struct net_device *dev = info->user_ptr[1];
13797 struct cfg80211_external_auth_params params;
13798
db8d93a7 13799 if (!rdev->ops->external_auth)
40cbfa90
SD		 13800 return -EOPNOTSUPP;
13801
fe494370
SD		 13802 if (!info->attrs[NL80211_ATTR_SSID] &&
13803 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
13804 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
40cbfa90
SD		 13805 return -EINVAL;
13806
13807 if (!info->attrs[NL80211_ATTR_BSSID])
13808 return -EINVAL;
13809
13810 if (!info->attrs[NL80211_ATTR_STATUS_CODE])
13811 return -EINVAL;
13812
13813 memset(&params, 0, sizeof(params));
13814
fe494370
SD		 13815 if (info->attrs[NL80211_ATTR_SSID]) {
13816 params.ssid.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
13817 if (params.ssid.ssid_len == 0 ||
13818 params.ssid.ssid_len > IEEE80211_MAX_SSID_LEN)
13819 return -EINVAL;
13820 memcpy(params.ssid.ssid,
13821 nla_data(info->attrs[NL80211_ATTR_SSID]),
13822 params.ssid.ssid_len);
13823 }
40cbfa90
SD		 13824
13825 memcpy(params.bssid, nla_data(info->attrs[NL80211_ATTR_BSSID]),
13826 ETH_ALEN);
13827
13828 params.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
13829
fe494370
SD		 13830 if (info->attrs[NL80211_ATTR_PMKID])
13831 params.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
13832
40cbfa90
SD		 13833 return rdev_external_auth(rdev, dev, &params);
13834}
13835
2576a9ac
DK		 13836static int nl80211_tx_control_port(struct sk_buff *skb, struct genl_info *info)
13837{
13838 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13839 struct net_device *dev = info->user_ptr[1];
13840 struct wireless_dev *wdev = dev->ieee80211_ptr;
13841 const u8 *buf;
13842 size_t len;
13843 u8 *dest;
13844 u16 proto;
13845 bool noencrypt;
13846 int err;
13847
13848 if (!wiphy_ext_feature_isset(&rdev->wiphy,
13849 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
13850 return -EOPNOTSUPP;
13851
13852 if (!rdev->ops->tx_control_port)
13853 return -EOPNOTSUPP;
13854
13855 if (!info->attrs[NL80211_ATTR_FRAME] ||
13856 !info->attrs[NL80211_ATTR_MAC] ||
13857 !info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
13858 GENL_SET_ERR_MSG(info, "Frame, MAC or ethertype missing");
13859 return -EINVAL;
13860 }
13861
13862 wdev_lock(wdev);
13863
13864 switch (wdev->iftype) {
13865 case NL80211_IFTYPE_AP:
13866 case NL80211_IFTYPE_P2P_GO:
13867 case NL80211_IFTYPE_MESH_POINT:
13868 break;
13869 case NL80211_IFTYPE_ADHOC:
13870 case NL80211_IFTYPE_STATION:
13871 case NL80211_IFTYPE_P2P_CLIENT:
13872 if (wdev->current_bss)
13873 break;
13874 err = -ENOTCONN;
13875 goto out;
13876 default:
13877 err = -EOPNOTSUPP;
13878 goto out;
13879 }
13880
13881 wdev_unlock(wdev);
13882
13883 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
13884 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
13885 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
13886 proto = nla_get_u16(info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
13887 noencrypt =
13888 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]);
13889
13890 return rdev_tx_control_port(rdev, dev, buf, len,
8d74a623 13891 dest, cpu_to_be16(proto), noencrypt);
2576a9ac
DK		 13892
13893 out:
13894 wdev_unlock(wdev);
13895 return err;
13896}
13897
81e54d08
PKC		 13898static int nl80211_get_ftm_responder_stats(struct sk_buff *skb,
13899 struct genl_info *info)
13900{
13901 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13902 struct net_device *dev = info->user_ptr[1];
13903 struct wireless_dev *wdev = dev->ieee80211_ptr;
13904 struct cfg80211_ftm_responder_stats ftm_stats = {};
13905 struct sk_buff *msg;
13906 void *hdr;
13907 struct nlattr *ftm_stats_attr;
13908 int err;
13909
13910 if (wdev->iftype != NL80211_IFTYPE_AP || !wdev->beacon_interval)
13911 return -EOPNOTSUPP;
13912
13913 err = rdev_get_ftm_responder_stats(rdev, dev, &ftm_stats);
13914 if (err)
13915 return err;
13916
13917 if (!ftm_stats.filled)
13918 return -ENODATA;
13919
13920 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13921 if (!msg)
13922 return -ENOMEM;
13923
13924 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13925 NL80211_CMD_GET_FTM_RESPONDER_STATS);
13926 if (!hdr)
1399c59f 13927 goto nla_put_failure;
81e54d08
PKC		 13928
13929 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
13930 goto nla_put_failure;
13931
ae0be8de
MK		 13932 ftm_stats_attr = nla_nest_start_noflag(msg,
13933 NL80211_ATTR_FTM_RESPONDER_STATS);
81e54d08
PKC		 13934 if (!ftm_stats_attr)
13935 goto nla_put_failure;
13936
13937#define SET_FTM(field, name, type) \
13938 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
13939 nla_put_ ## type(msg, NL80211_FTM_STATS_ ## name, \
13940 ftm_stats.field)) \
13941 goto nla_put_failure; } while (0)
13942#define SET_FTM_U64(field, name) \
13943 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
13944 nla_put_u64_64bit(msg, NL80211_FTM_STATS_ ## name, \
13945 ftm_stats.field, NL80211_FTM_STATS_PAD)) \
13946 goto nla_put_failure; } while (0)
13947
13948 SET_FTM(success_num, SUCCESS_NUM, u32);
13949 SET_FTM(partial_num, PARTIAL_NUM, u32);
13950 SET_FTM(failed_num, FAILED_NUM, u32);
13951 SET_FTM(asap_num, ASAP_NUM, u32);
13952 SET_FTM(non_asap_num, NON_ASAP_NUM, u32);
13953 SET_FTM_U64(total_duration_ms, TOTAL_DURATION_MSEC);
13954 SET_FTM(unknown_triggers_num, UNKNOWN_TRIGGERS_NUM, u32);
13955 SET_FTM(reschedule_requests_num, RESCHEDULE_REQUESTS_NUM, u32);
13956 SET_FTM(out_of_window_triggers_num, OUT_OF_WINDOW_TRIGGERS_NUM, u32);
13957#undef SET_FTM
13958
13959 nla_nest_end(msg, ftm_stats_attr);
13960
13961 genlmsg_end(msg, hdr);
13962 return genlmsg_reply(msg, info);
13963
13964nla_put_failure:
13965 nlmsg_free(msg);
13966 return -ENOBUFS;
13967}
13968
cb74e977
SD		 13969static int nl80211_update_owe_info(struct sk_buff *skb, struct genl_info *info)
13970{
13971 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13972 struct cfg80211_update_owe_info owe_info;
13973 struct net_device *dev = info->user_ptr[1];
13974
13975 if (!rdev->ops->update_owe_info)
13976 return -EOPNOTSUPP;
13977
13978 if (!info->attrs[NL80211_ATTR_STATUS_CODE] ||
13979 !info->attrs[NL80211_ATTR_MAC])
13980 return -EINVAL;
13981
13982 memset(&owe_info, 0, sizeof(owe_info));
13983 owe_info.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
13984 nla_memcpy(owe_info.peer, info->attrs[NL80211_ATTR_MAC], ETH_ALEN);
13985
13986 if (info->attrs[NL80211_ATTR_IE]) {
13987 owe_info.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
13988 owe_info.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
13989 }
13990
13991 return rdev_update_owe_info(rdev, dev, &owe_info);
13992}
13993
5ab92e7f
RM		 13994static int nl80211_probe_mesh_link(struct sk_buff *skb, struct genl_info *info)
13995{
13996 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13997 struct net_device *dev = info->user_ptr[1];
13998 struct wireless_dev *wdev = dev->ieee80211_ptr;
13999 struct station_info sinfo = {};
14000 const u8 *buf;
14001 size_t len;
14002 u8 *dest;
14003 int err;
14004
14005 if (!rdev->ops->probe_mesh_link || !rdev->ops->get_station)
14006 return -EOPNOTSUPP;
14007
14008 if (!info->attrs[NL80211_ATTR_MAC] ||
14009 !info->attrs[NL80211_ATTR_FRAME]) {
14010 GENL_SET_ERR_MSG(info, "Frame or MAC missing");
14011 return -EINVAL;
14012 }
14013
14014 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
14015 return -EOPNOTSUPP;
14016
14017 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
14018 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
14019 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
14020
14021 if (len < sizeof(struct ethhdr))
14022 return -EINVAL;
14023
14024 if (!ether_addr_equal(buf, dest) || is_multicast_ether_addr(buf) ||
14025 !ether_addr_equal(buf + ETH_ALEN, dev->dev_addr))
14026 return -EINVAL;
14027
14028 err = rdev_get_station(rdev, dev, dest, &sinfo);
14029 if (err)
14030 return err;
14031
2a279b34
FF		 14032 cfg80211_sinfo_release_content(&sinfo);
14033
5ab92e7f
RM		 14034 return rdev_probe_mesh_link(rdev, dev, dest, buf, len);
14035}
14036
77f576de
T		 14037static int parse_tid_conf(struct cfg80211_registered_device *rdev,
14038 struct nlattr *attrs[], struct net_device *dev,
3710a8a6 14039 struct cfg80211_tid_cfg *tid_conf,
77f576de
T		 14040 struct genl_info *info, const u8 *peer)
14041{
14042 struct netlink_ext_ack *extack = info->extack;
3710a8a6 14043 u64 mask;
77f576de
T		 14044 int err;
14045
14046 if (!attrs[NL80211_TID_CONFIG_ATTR_TIDS])
14047 return -EINVAL;
14048
14049 tid_conf->config_override =
14050 nla_get_flag(attrs[NL80211_TID_CONFIG_ATTR_OVERRIDE]);
3710a8a6 14051 tid_conf->tids = nla_get_u16(attrs[NL80211_TID_CONFIG_ATTR_TIDS]);
77f576de
T		 14052
14053 if (tid_conf->config_override) {
14054 if (rdev->ops->reset_tid_config) {
14055 err = rdev_reset_tid_config(rdev, dev, peer,
3710a8a6 14056 tid_conf->tids);
77f576de
T		 14057 /* If peer is there no other configuration will be
14058 * allowed
14059 */
14060 if (err || peer)
14061 return err;
14062 } else {
14063 return -EINVAL;
14064 }
14065 }
14066
14067 if (attrs[NL80211_TID_CONFIG_ATTR_NOACK]) {
3710a8a6 14068 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_NOACK);
77f576de
T		 14069 tid_conf->noack =
14070 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_NOACK]);
14071 }
14072
6a21d16c
T		 14073 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]) {
14074 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_SHORT);
14075 tid_conf->retry_short =
14076 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]);
14077
14078 if (tid_conf->retry_short > rdev->wiphy.max_data_retry_count)
14079 return -EINVAL;
14080 }
14081
14082 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]) {
14083 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_LONG);
14084 tid_conf->retry_long =
14085 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]);
14086
14087 if (tid_conf->retry_long > rdev->wiphy.max_data_retry_count)
14088 return -EINVAL;
14089 }
14090
ade274b2
T		 14091 if (attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]) {
14092 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMPDU_CTRL);
14093 tid_conf->ampdu =
14094 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]);
14095 }
14096
04f7d142
T		 14097 if (attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]) {
14098 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL);
14099 tid_conf->rtscts =
14100 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]);
14101 }
14102
3710a8a6
JB		 14103 if (peer)
14104 mask = rdev->wiphy.tid_config_support.peer;
14105 else
14106 mask = rdev->wiphy.tid_config_support.vif;
14107
14108 if (tid_conf->mask & ~mask) {
14109 NL_SET_ERR_MSG(extack, "unsupported TID configuration");
14110 return -ENOTSUPP;
14111 }
14112
77f576de
T		 14113 return 0;
14114}
14115
14116static int nl80211_set_tid_config(struct sk_buff *skb,
14117 struct genl_info *info)
14118{
14119 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14120 struct nlattr *attrs[NL80211_TID_CONFIG_ATTR_MAX + 1];
14121 struct net_device *dev = info->user_ptr[1];
3710a8a6 14122 struct cfg80211_tid_config *tid_config;
77f576de
T		 14123 struct nlattr *tid;
14124 int conf_idx = 0, rem_conf;
14125 int ret = -EINVAL;
14126 u32 num_conf = 0;
14127
14128 if (!info->attrs[NL80211_ATTR_TID_CONFIG])
14129 return -EINVAL;
14130
14131 if (!rdev->ops->set_tid_config)
14132 return -EOPNOTSUPP;
14133
14134 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
14135 rem_conf)
14136 num_conf++;
14137
14138 tid_config = kzalloc(struct_size(tid_config, tid_conf, num_conf),
14139 GFP_KERNEL);
14140 if (!tid_config)
14141 return -ENOMEM;
14142
14143 tid_config->n_tid_conf = num_conf;
14144
14145 if (info->attrs[NL80211_ATTR_MAC])
14146 tid_config->peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14147
14148 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
14149 rem_conf) {
14150 ret = nla_parse_nested(attrs, NL80211_TID_CONFIG_ATTR_MAX,
14151 tid, NULL, NULL);
14152
14153 if (ret)
14154 goto bad_tid_conf;
14155
14156 ret = parse_tid_conf(rdev, attrs, dev,
14157 &tid_config->tid_conf[conf_idx],
14158 info, tid_config->peer);
14159 if (ret)
14160 goto bad_tid_conf;
14161
14162 conf_idx++;
14163 }
14164
14165 ret = rdev_set_tid_config(rdev, dev, tid_config);
14166
14167bad_tid_conf:
14168 kfree(tid_config);
14169 return ret;
14170}
14171
4c476991
JB		 14172#define NL80211_FLAG_NEED_WIPHY 0x01
14173#define NL80211_FLAG_NEED_NETDEV 0x02
14174#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 14175#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
14176#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
14177 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 14178#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 14179/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 14180#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
14181 NL80211_FLAG_CHECK_NETDEV_UP)
5393b917 14182#define NL80211_FLAG_CLEAR_SKB 0x20
4c476991 14183
f84f771d 14184static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 14185 struct genl_info *info)
14186{
14187 struct cfg80211_registered_device *rdev;
89a54e48 14188 struct wireless_dev *wdev;
4c476991 14189 struct net_device *dev;
4c476991
JB		 14190 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
14191
14192 if (rtnl)
14193 rtnl_lock();
14194
14195 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 14196 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991
JB		 14197 if (IS_ERR(rdev)) {
14198 if (rtnl)
14199 rtnl_unlock();
14200 return PTR_ERR(rdev);
14201 }
14202 info->user_ptr[0] = rdev;
1bf614ef
JB		 14203 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
14204 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
5fe231e8
JB		 14205 ASSERT_RTNL();
14206
89a54e48
JB		 14207 wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
14208 info->attrs);
14209 if (IS_ERR(wdev)) {
4c476991
JB		 14210 if (rtnl)
14211 rtnl_unlock();
89a54e48 14212 return PTR_ERR(wdev);
4c476991 14213 }
89a54e48 14214
89a54e48 14215 dev = wdev->netdev;
f26cbf40 14216 rdev = wiphy_to_rdev(wdev->wiphy);
89a54e48 14217
1bf614ef
JB		 14218 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
14219 if (!dev) {
1bf614ef
JB		 14220 if (rtnl)
14221 rtnl_unlock();
14222 return -EINVAL;
14223 }
14224
14225 info->user_ptr[1] = dev;
14226 } else {
14227 info->user_ptr[1] = wdev;
41265714 14228 }
1bf614ef 14229
73c7da3d
AVS		 14230 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
14231 !wdev_running(wdev)) {
14232 if (rtnl)
14233 rtnl_unlock();
14234 return -ENETDOWN;
14235 }
1bf614ef 14236
73c7da3d 14237 if (dev)
1bf614ef 14238 dev_hold(dev);
89a54e48 14239
4c476991 14240 info->user_ptr[0] = rdev;
4c476991
JB		 14241 }
14242
14243 return 0;
14244}
14245
f84f771d 14246static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 14247 struct genl_info *info)
14248{
1bf614ef
JB		 14249 if (info->user_ptr[1]) {
14250 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
14251 struct wireless_dev *wdev = info->user_ptr[1];
14252
14253 if (wdev->netdev)
14254 dev_put(wdev->netdev);
14255 } else {
14256 dev_put(info->user_ptr[1]);
14257 }
14258 }
5393b917 14259
4c476991
JB		 14260 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
14261 rtnl_unlock();
5393b917
JB		 14262
14263 /* If needed, clear the netlink message payload from the SKB
14264 * as it might contain key data that shouldn't stick around on
14265 * the heap after the SKB is freed. The netlink message header
14266 * is still needed for further processing, so leave it intact.
14267 */
14268 if (ops->internal_flags & NL80211_FLAG_CLEAR_SKB) {
14269 struct nlmsghdr *nlh = nlmsg_hdr(skb);
14270
14271 memset(nlmsg_data(nlh), 0, nlmsg_len(nlh));
14272 }
4c476991
JB		 14273}
14274
4534de83 14275static const struct genl_ops nl80211_ops[] = {
55682965
JB		 14276 {
14277 .cmd = NL80211_CMD_GET_WIPHY,
ef6243ac 14278 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 14279 .doit = nl80211_get_wiphy,
14280 .dumpit = nl80211_dump_wiphy,
86e8cf98 14281 .done = nl80211_dump_wiphy_done,
55682965 14282 /* can be retrieved by unprivileged users */
5fe231e8
JB		 14283 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14284 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14285 },
14286 {
14287 .cmd = NL80211_CMD_SET_WIPHY,
ef6243ac 14288 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14289 .doit = nl80211_set_wiphy,
5617c6cd 14290 .flags = GENL_UNS_ADMIN_PERM,
4c476991 14291 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 14292 },
14293 {
14294 .cmd = NL80211_CMD_GET_INTERFACE,
ef6243ac 14295 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 14296 .doit = nl80211_get_interface,
14297 .dumpit = nl80211_dump_interface,
55682965 14298 /* can be retrieved by unprivileged users */
5fe231e8
JB		 14299 .internal_flags = NL80211_FLAG_NEED_WDEV |
14300 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14301 },
14302 {
14303 .cmd = NL80211_CMD_SET_INTERFACE,
ef6243ac 14304 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14305 .doit = nl80211_set_interface,
5617c6cd 14306 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14307 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14308 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14309 },
14310 {
14311 .cmd = NL80211_CMD_NEW_INTERFACE,
ef6243ac 14312 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14313 .doit = nl80211_new_interface,
5617c6cd 14314 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14315 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14316 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14317 },
14318 {
14319 .cmd = NL80211_CMD_DEL_INTERFACE,
ef6243ac 14320 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14321 .doit = nl80211_del_interface,
5617c6cd 14322 .flags = GENL_UNS_ADMIN_PERM,
84efbb84 14323 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 14324 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 14325 },
14326 {
14327 .cmd = NL80211_CMD_GET_KEY,
ef6243ac 14328 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14329 .doit = nl80211_get_key,
5617c6cd 14330 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14331 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14332 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 14333 },
14334 {
14335 .cmd = NL80211_CMD_SET_KEY,
ef6243ac 14336 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14337 .doit = nl80211_set_key,
5617c6cd 14338 .flags = GENL_UNS_ADMIN_PERM,
41265714 14339 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14340 NL80211_FLAG_NEED_RTNL |
14341 NL80211_FLAG_CLEAR_SKB,
41ade00f
JB		 14342 },
14343 {
14344 .cmd = NL80211_CMD_NEW_KEY,
ef6243ac 14345 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14346 .doit = nl80211_new_key,
5617c6cd 14347 .flags = GENL_UNS_ADMIN_PERM,
41265714 14348 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14349 NL80211_FLAG_NEED_RTNL |
14350 NL80211_FLAG_CLEAR_SKB,
41ade00f
JB		 14351 },
14352 {
14353 .cmd = NL80211_CMD_DEL_KEY,
ef6243ac 14354 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14355 .doit = nl80211_del_key,
5617c6cd 14356 .flags = GENL_UNS_ADMIN_PERM,
41265714 14357 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14358 NL80211_FLAG_NEED_RTNL,
55682965 14359 },
ed1b6cc7
JB		 14360 {
14361 .cmd = NL80211_CMD_SET_BEACON,
ef6243ac 14362 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14363 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14364 .doit = nl80211_set_beacon,
2b5f8b0b 14365 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14366 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 14367 },
14368 {
8860020e 14369 .cmd = NL80211_CMD_START_AP,
ef6243ac 14370 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14371 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14372 .doit = nl80211_start_ap,
2b5f8b0b 14373 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14374 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 14375 },
14376 {
8860020e 14377 .cmd = NL80211_CMD_STOP_AP,
ef6243ac 14378 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14379 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14380 .doit = nl80211_stop_ap,
2b5f8b0b 14381 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14382 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 14383 },
5727ef1b
JB		 14384 {
14385 .cmd = NL80211_CMD_GET_STATION,
ef6243ac 14386 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14387 .doit = nl80211_get_station,
2ec600d6 14388 .dumpit = nl80211_dump_station,
4c476991
JB		 14389 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14390 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14391 },
14392 {
14393 .cmd = NL80211_CMD_SET_STATION,
ef6243ac 14394 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14395 .doit = nl80211_set_station,
5617c6cd 14396 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14397 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14398 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14399 },
14400 {
14401 .cmd = NL80211_CMD_NEW_STATION,
ef6243ac 14402 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14403 .doit = nl80211_new_station,
5617c6cd 14404 .flags = GENL_UNS_ADMIN_PERM,
41265714 14405 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14406 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14407 },
14408 {
14409 .cmd = NL80211_CMD_DEL_STATION,
ef6243ac 14410 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14411 .doit = nl80211_del_station,
5617c6cd 14412 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14413 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14414 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 14415 },
14416 {
14417 .cmd = NL80211_CMD_GET_MPATH,
ef6243ac 14418 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6
LCC		 14419 .doit = nl80211_get_mpath,
14420 .dumpit = nl80211_dump_mpath,
5617c6cd 14421 .flags = GENL_UNS_ADMIN_PERM,
41265714 14422 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14423 NL80211_FLAG_NEED_RTNL,
2ec600d6 14424 },
66be7d2b
HR		 14425 {
14426 .cmd = NL80211_CMD_GET_MPP,
ef6243ac 14427 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
66be7d2b
HR		 14428 .doit = nl80211_get_mpp,
14429 .dumpit = nl80211_dump_mpp,
5617c6cd 14430 .flags = GENL_UNS_ADMIN_PERM,
66be7d2b
HR		 14431 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14432 NL80211_FLAG_NEED_RTNL,
14433 },
2ec600d6
LCC		 14434 {
14435 .cmd = NL80211_CMD_SET_MPATH,
ef6243ac 14436 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 14437 .doit = nl80211_set_mpath,
5617c6cd 14438 .flags = GENL_UNS_ADMIN_PERM,
41265714 14439 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14440 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 14441 },
14442 {
14443 .cmd = NL80211_CMD_NEW_MPATH,
ef6243ac 14444 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 14445 .doit = nl80211_new_mpath,
5617c6cd 14446 .flags = GENL_UNS_ADMIN_PERM,
41265714 14447 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14448 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 14449 },
14450 {
14451 .cmd = NL80211_CMD_DEL_MPATH,
ef6243ac 14452 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 14453 .doit = nl80211_del_mpath,
5617c6cd 14454 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14455 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14456 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 14457 },
14458 {
14459 .cmd = NL80211_CMD_SET_BSS,
ef6243ac 14460 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9f1ba906 14461 .doit = nl80211_set_bss,
5617c6cd 14462 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14463 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14464 NL80211_FLAG_NEED_RTNL,
b2e1b302 14465 },
f130347c
LR		 14466 {
14467 .cmd = NL80211_CMD_GET_REG,
ef6243ac 14468 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad30ca2c
AN		 14469 .doit = nl80211_get_reg_do,
14470 .dumpit = nl80211_get_reg_dump,
5fe231e8 14471 .internal_flags = NL80211_FLAG_NEED_RTNL,
f130347c
LR		 14472 /* can be retrieved by unprivileged users */
14473 },
b6863036 14474#ifdef CONFIG_CFG80211_CRDA_SUPPORT
b2e1b302
LR		 14475 {
14476 .cmd = NL80211_CMD_SET_REG,
ef6243ac 14477 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 14478 .doit = nl80211_set_reg,
b2e1b302 14479 .flags = GENL_ADMIN_PERM,
5fe231e8 14480 .internal_flags = NL80211_FLAG_NEED_RTNL,
b2e1b302 14481 },
b6863036 14482#endif
b2e1b302
LR		 14483 {
14484 .cmd = NL80211_CMD_REQ_SET_REG,
ef6243ac 14485 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 14486 .doit = nl80211_req_set_reg,
93da9cc1 14487 .flags = GENL_ADMIN_PERM,
14488 },
1ea4ff3e
JB		 14489 {
14490 .cmd = NL80211_CMD_RELOAD_REGDB,
ef6243ac 14491 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1ea4ff3e 14492 .doit = nl80211_reload_regdb,
1ea4ff3e
JB		 14493 .flags = GENL_ADMIN_PERM,
14494 },
93da9cc1 14495 {
24bdd9f4 14496 .cmd = NL80211_CMD_GET_MESH_CONFIG,
ef6243ac 14497 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 14498 .doit = nl80211_get_mesh_config,
93da9cc1 14499 /* can be retrieved by unprivileged users */
2b5f8b0b 14500 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14501 NL80211_FLAG_NEED_RTNL,
93da9cc1 14502 },
14503 {
24bdd9f4 14504 .cmd = NL80211_CMD_SET_MESH_CONFIG,
ef6243ac 14505 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 14506 .doit = nl80211_update_mesh_config,
5617c6cd 14507 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c 14508 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14509 NL80211_FLAG_NEED_RTNL,
9aed3cc1 14510 },
2a519311
JB		 14511 {
14512 .cmd = NL80211_CMD_TRIGGER_SCAN,
ef6243ac 14513 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311 14514 .doit = nl80211_trigger_scan,
5617c6cd 14515 .flags = GENL_UNS_ADMIN_PERM,
fd014284 14516 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 14517 NL80211_FLAG_NEED_RTNL,
2a519311 14518 },
91d3ab46
VK		 14519 {
14520 .cmd = NL80211_CMD_ABORT_SCAN,
ef6243ac 14521 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
91d3ab46 14522 .doit = nl80211_abort_scan,
5617c6cd 14523 .flags = GENL_UNS_ADMIN_PERM,
91d3ab46
VK		 14524 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14525 NL80211_FLAG_NEED_RTNL,
14526 },
2a519311
JB		 14527 {
14528 .cmd = NL80211_CMD_GET_SCAN,
ef6243ac 14529 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311
JB		 14530 .dumpit = nl80211_dump_scan,
14531 },
807f8a8c
LC		 14532 {
14533 .cmd = NL80211_CMD_START_SCHED_SCAN,
ef6243ac 14534 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 14535 .doit = nl80211_start_sched_scan,
5617c6cd 14536 .flags = GENL_UNS_ADMIN_PERM,
807f8a8c
LC		 14537 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14538 NL80211_FLAG_NEED_RTNL,
14539 },
14540 {
14541 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
ef6243ac 14542 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 14543 .doit = nl80211_stop_sched_scan,
5617c6cd 14544 .flags = GENL_UNS_ADMIN_PERM,
807f8a8c
LC		 14545 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14546 NL80211_FLAG_NEED_RTNL,
14547 },
636a5d36
JM		 14548 {
14549 .cmd = NL80211_CMD_AUTHENTICATE,
ef6243ac 14550 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 14551 .doit = nl80211_authenticate,
5617c6cd 14552 .flags = GENL_UNS_ADMIN_PERM,
41265714 14553 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14554 NL80211_FLAG_NEED_RTNL |
14555 NL80211_FLAG_CLEAR_SKB,
636a5d36
JM		 14556 },
14557 {
14558 .cmd = NL80211_CMD_ASSOCIATE,
ef6243ac 14559 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 14560 .doit = nl80211_associate,
5617c6cd 14561 .flags = GENL_UNS_ADMIN_PERM,
41265714 14562 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 14563 NL80211_FLAG_NEED_RTNL |
14564 NL80211_FLAG_CLEAR_SKB,
636a5d36
JM		 14565 },
14566 {
14567 .cmd = NL80211_CMD_DEAUTHENTICATE,
ef6243ac 14568 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 14569 .doit = nl80211_deauthenticate,
5617c6cd 14570 .flags = GENL_UNS_ADMIN_PERM,
41265714 14571 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14572 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 14573 },
14574 {
14575 .cmd = NL80211_CMD_DISASSOCIATE,
ef6243ac 14576 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 14577 .doit = nl80211_disassociate,
5617c6cd 14578 .flags = GENL_UNS_ADMIN_PERM,
41265714 14579 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14580 NL80211_FLAG_NEED_RTNL,
636a5d36 14581 },
04a773ad
JB		 14582 {
14583 .cmd = NL80211_CMD_JOIN_IBSS,
ef6243ac 14584 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 14585 .doit = nl80211_join_ibss,
5617c6cd 14586 .flags = GENL_UNS_ADMIN_PERM,
41265714 14587 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14588 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 14589 },
14590 {
14591 .cmd = NL80211_CMD_LEAVE_IBSS,
ef6243ac 14592 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 14593 .doit = nl80211_leave_ibss,
5617c6cd 14594 .flags = GENL_UNS_ADMIN_PERM,
41265714 14595 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14596 NL80211_FLAG_NEED_RTNL,
04a773ad 14597 },
aff89a9b
JB		 14598#ifdef CONFIG_NL80211_TESTMODE
14599 {
14600 .cmd = NL80211_CMD_TESTMODE,
ef6243ac 14601 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
aff89a9b 14602 .doit = nl80211_testmode_do,
71063f0e 14603 .dumpit = nl80211_testmode_dump,
5617c6cd 14604 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14605 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14606 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 14607 },
14608#endif
b23aa676
SO		 14609 {
14610 .cmd = NL80211_CMD_CONNECT,
ef6243ac 14611 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 14612 .doit = nl80211_connect,
5617c6cd 14613 .flags = GENL_UNS_ADMIN_PERM,
41265714 14614 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 14615 NL80211_FLAG_NEED_RTNL |
14616 NL80211_FLAG_CLEAR_SKB,
b23aa676 14617 },
088e8df8 14618 {
14619 .cmd = NL80211_CMD_UPDATE_CONNECT_PARAMS,
ef6243ac 14620 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
088e8df8 14621 .doit = nl80211_update_connect_params,
088e8df8 14622 .flags = GENL_ADMIN_PERM,
14623 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 14624 NL80211_FLAG_NEED_RTNL |
14625 NL80211_FLAG_CLEAR_SKB,
088e8df8 14626 },
b23aa676
SO		 14627 {
14628 .cmd = NL80211_CMD_DISCONNECT,
ef6243ac 14629 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 14630 .doit = nl80211_disconnect,
5617c6cd 14631 .flags = GENL_UNS_ADMIN_PERM,
41265714 14632 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14633 NL80211_FLAG_NEED_RTNL,
b23aa676 14634 },
463d0183
JB		 14635 {
14636 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
ef6243ac 14637 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
463d0183 14638 .doit = nl80211_wiphy_netns,
5617c6cd 14639 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14640 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14641 NL80211_FLAG_NEED_RTNL,
463d0183 14642 },
61fa713c
HS		 14643 {
14644 .cmd = NL80211_CMD_GET_SURVEY,
ef6243ac 14645 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
61fa713c
HS		 14646 .dumpit = nl80211_dump_survey,
14647 },
67fbb16b
SO		 14648 {
14649 .cmd = NL80211_CMD_SET_PMKSA,
ef6243ac 14650 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 14651 .doit = nl80211_setdel_pmksa,
5617c6cd 14652 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14653 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 14654 NL80211_FLAG_NEED_RTNL |
14655 NL80211_FLAG_CLEAR_SKB,
67fbb16b
SO		 14656 },
14657 {
14658 .cmd = NL80211_CMD_DEL_PMKSA,
ef6243ac 14659 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 14660 .doit = nl80211_setdel_pmksa,
5617c6cd 14661 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14662 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14663 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 14664 },
14665 {
14666 .cmd = NL80211_CMD_FLUSH_PMKSA,
ef6243ac 14667 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 14668 .doit = nl80211_flush_pmksa,
5617c6cd 14669 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14670 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14671 NL80211_FLAG_NEED_RTNL,
67fbb16b 14672 },
9588bbd5
JM		 14673 {
14674 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
ef6243ac 14675 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 14676 .doit = nl80211_remain_on_channel,
5617c6cd 14677 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14678 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 14679 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 14680 },
14681 {
14682 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
ef6243ac 14683 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 14684 .doit = nl80211_cancel_remain_on_channel,
5617c6cd 14685 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14686 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 14687 NL80211_FLAG_NEED_RTNL,
9588bbd5 14688 },
13ae75b1
JM		 14689 {
14690 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
ef6243ac 14691 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
13ae75b1 14692 .doit = nl80211_set_tx_bitrate_mask,
5617c6cd 14693 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14694 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14695 NL80211_FLAG_NEED_RTNL,
13ae75b1 14696 },
026331c4 14697 {
2e161f78 14698 .cmd = NL80211_CMD_REGISTER_FRAME,
ef6243ac 14699 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 14700 .doit = nl80211_register_mgmt,
5617c6cd 14701 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14702 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 14703 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 14704 },
14705 {
2e161f78 14706 .cmd = NL80211_CMD_FRAME,
ef6243ac 14707 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 14708 .doit = nl80211_tx_mgmt,
5617c6cd 14709 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14710 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
f7ca38df
JB		 14711 NL80211_FLAG_NEED_RTNL,
14712 },
14713 {
14714 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
ef6243ac 14715 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f7ca38df 14716 .doit = nl80211_tx_mgmt_cancel_wait,
5617c6cd 14717 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14718 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 14719 NL80211_FLAG_NEED_RTNL,
026331c4 14720 },
ffb9eb3d
KV		 14721 {
14722 .cmd = NL80211_CMD_SET_POWER_SAVE,
ef6243ac 14723 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 14724 .doit = nl80211_set_power_save,
5617c6cd 14725 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14726 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14727 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 14728 },
14729 {
14730 .cmd = NL80211_CMD_GET_POWER_SAVE,
ef6243ac 14731 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 14732 .doit = nl80211_get_power_save,
ffb9eb3d 14733 /* can be retrieved by unprivileged users */
4c476991
JB		 14734 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14735 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 14736 },
d6dc1a38
JO		 14737 {
14738 .cmd = NL80211_CMD_SET_CQM,
ef6243ac 14739 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
d6dc1a38 14740 .doit = nl80211_set_cqm,
5617c6cd 14741 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14742 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14743 NL80211_FLAG_NEED_RTNL,
d6dc1a38 14744 },
f444de05
JB		 14745 {
14746 .cmd = NL80211_CMD_SET_CHANNEL,
ef6243ac 14747 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f444de05 14748 .doit = nl80211_set_channel,
5617c6cd 14749 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14750 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14751 NL80211_FLAG_NEED_RTNL,
f444de05 14752 },
e8347eba
BJ		 14753 {
14754 .cmd = NL80211_CMD_SET_WDS_PEER,
ef6243ac 14755 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e8347eba 14756 .doit = nl80211_set_wds_peer,
5617c6cd 14757 .flags = GENL_UNS_ADMIN_PERM,
43b19952
JB		 14758 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14759 NL80211_FLAG_NEED_RTNL,
e8347eba 14760 },
29cbe68c
JB		 14761 {
14762 .cmd = NL80211_CMD_JOIN_MESH,
ef6243ac 14763 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 14764 .doit = nl80211_join_mesh,
5617c6cd 14765 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c
JB		 14766 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14767 NL80211_FLAG_NEED_RTNL,
14768 },
14769 {
14770 .cmd = NL80211_CMD_LEAVE_MESH,
ef6243ac 14771 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 14772 .doit = nl80211_leave_mesh,
5617c6cd 14773 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c
JB		 14774 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14775 NL80211_FLAG_NEED_RTNL,
14776 },
6e0bd6c3
RL		 14777 {
14778 .cmd = NL80211_CMD_JOIN_OCB,
ef6243ac 14779 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 14780 .doit = nl80211_join_ocb,
5617c6cd 14781 .flags = GENL_UNS_ADMIN_PERM,
6e0bd6c3
RL		 14782 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14783 NL80211_FLAG_NEED_RTNL,
14784 },
14785 {
14786 .cmd = NL80211_CMD_LEAVE_OCB,
ef6243ac 14787 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 14788 .doit = nl80211_leave_ocb,
5617c6cd 14789 .flags = GENL_UNS_ADMIN_PERM,
6e0bd6c3
RL		 14790 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14791 NL80211_FLAG_NEED_RTNL,
14792 },
dfb89c56 14793#ifdef CONFIG_PM
ff1b6e69
JB		 14794 {
14795 .cmd = NL80211_CMD_GET_WOWLAN,
ef6243ac 14796 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 14797 .doit = nl80211_get_wowlan,
ff1b6e69
JB		 14798 /* can be retrieved by unprivileged users */
14799 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14800 NL80211_FLAG_NEED_RTNL,
14801 },
14802 {
14803 .cmd = NL80211_CMD_SET_WOWLAN,
ef6243ac 14804 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 14805 .doit = nl80211_set_wowlan,
5617c6cd 14806 .flags = GENL_UNS_ADMIN_PERM,
ff1b6e69
JB		 14807 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14808 NL80211_FLAG_NEED_RTNL,
14809 },
dfb89c56 14810#endif
e5497d76
JB		 14811 {
14812 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
ef6243ac 14813 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e5497d76 14814 .doit = nl80211_set_rekey_data,
5617c6cd 14815 .flags = GENL_UNS_ADMIN_PERM,
e5497d76 14816 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14817 NL80211_FLAG_NEED_RTNL |
14818 NL80211_FLAG_CLEAR_SKB,
e5497d76 14819 },
109086ce
AN		 14820 {
14821 .cmd = NL80211_CMD_TDLS_MGMT,
ef6243ac 14822 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 14823 .doit = nl80211_tdls_mgmt,
5617c6cd 14824 .flags = GENL_UNS_ADMIN_PERM,
109086ce
AN		 14825 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14826 NL80211_FLAG_NEED_RTNL,
14827 },
14828 {
14829 .cmd = NL80211_CMD_TDLS_OPER,
ef6243ac 14830 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 14831 .doit = nl80211_tdls_oper,
5617c6cd 14832 .flags = GENL_UNS_ADMIN_PERM,
109086ce
AN		 14833 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14834 NL80211_FLAG_NEED_RTNL,
14835 },
28946da7
JB		 14836 {
14837 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
ef6243ac 14838 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
28946da7 14839 .doit = nl80211_register_unexpected_frame,
5617c6cd 14840 .flags = GENL_UNS_ADMIN_PERM,
28946da7
JB		 14841 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14842 NL80211_FLAG_NEED_RTNL,
14843 },
7f6cf311
JB		 14844 {
14845 .cmd = NL80211_CMD_PROBE_CLIENT,
ef6243ac 14846 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
7f6cf311 14847 .doit = nl80211_probe_client,
5617c6cd 14848 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14849 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7f6cf311
JB		 14850 NL80211_FLAG_NEED_RTNL,
14851 },
5e760230
JB		 14852 {
14853 .cmd = NL80211_CMD_REGISTER_BEACONS,
ef6243ac 14854 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5e760230 14855 .doit = nl80211_register_beacons,
5617c6cd 14856 .flags = GENL_UNS_ADMIN_PERM,
5e760230
JB		 14857 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14858 NL80211_FLAG_NEED_RTNL,
14859 },
1d9d9213
SW		 14860 {
14861 .cmd = NL80211_CMD_SET_NOACK_MAP,
ef6243ac 14862 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1d9d9213 14863 .doit = nl80211_set_noack_map,
5617c6cd 14864 .flags = GENL_UNS_ADMIN_PERM,
1d9d9213
SW		 14865 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14866 NL80211_FLAG_NEED_RTNL,
14867 },
98104fde
JB		 14868 {
14869 .cmd = NL80211_CMD_START_P2P_DEVICE,
ef6243ac 14870 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 14871 .doit = nl80211_start_p2p_device,
5617c6cd 14872 .flags = GENL_UNS_ADMIN_PERM,
98104fde
JB		 14873 .internal_flags = NL80211_FLAG_NEED_WDEV |
14874 NL80211_FLAG_NEED_RTNL,
14875 },
14876 {
14877 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
ef6243ac 14878 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 14879 .doit = nl80211_stop_p2p_device,
5617c6cd 14880 .flags = GENL_UNS_ADMIN_PERM,
98104fde
JB		 14881 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14882 NL80211_FLAG_NEED_RTNL,
cb3b7d87
AB		 14883 },
14884 {
14885 .cmd = NL80211_CMD_START_NAN,
ef6243ac 14886 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 14887 .doit = nl80211_start_nan,
cb3b7d87
AB		 14888 .flags = GENL_ADMIN_PERM,
14889 .internal_flags = NL80211_FLAG_NEED_WDEV |
14890 NL80211_FLAG_NEED_RTNL,
14891 },
14892 {
14893 .cmd = NL80211_CMD_STOP_NAN,
ef6243ac 14894 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 14895 .doit = nl80211_stop_nan,
cb3b7d87
AB		 14896 .flags = GENL_ADMIN_PERM,
14897 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14898 NL80211_FLAG_NEED_RTNL,
a442b761
AB		 14899 },
14900 {
14901 .cmd = NL80211_CMD_ADD_NAN_FUNCTION,
ef6243ac 14902 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 14903 .doit = nl80211_nan_add_func,
a442b761
AB		 14904 .flags = GENL_ADMIN_PERM,
14905 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14906 NL80211_FLAG_NEED_RTNL,
14907 },
14908 {
14909 .cmd = NL80211_CMD_DEL_NAN_FUNCTION,
ef6243ac 14910 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 14911 .doit = nl80211_nan_del_func,
a442b761
AB		 14912 .flags = GENL_ADMIN_PERM,
14913 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14914 NL80211_FLAG_NEED_RTNL,
a5a9dcf2
AB		 14915 },
14916 {
14917 .cmd = NL80211_CMD_CHANGE_NAN_CONFIG,
ef6243ac 14918 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a5a9dcf2 14919 .doit = nl80211_nan_change_config,
a5a9dcf2
AB		 14920 .flags = GENL_ADMIN_PERM,
14921 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14922 NL80211_FLAG_NEED_RTNL,
98104fde 14923 },
f4e583c8
AQ		 14924 {
14925 .cmd = NL80211_CMD_SET_MCAST_RATE,
ef6243ac 14926 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f4e583c8 14927 .doit = nl80211_set_mcast_rate,
5617c6cd 14928 .flags = GENL_UNS_ADMIN_PERM,
77765eaf
VT		 14929 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14930 NL80211_FLAG_NEED_RTNL,
14931 },
14932 {
14933 .cmd = NL80211_CMD_SET_MAC_ACL,
ef6243ac 14934 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
77765eaf 14935 .doit = nl80211_set_mac_acl,
5617c6cd 14936 .flags = GENL_UNS_ADMIN_PERM,
f4e583c8
AQ		 14937 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14938 NL80211_FLAG_NEED_RTNL,
14939 },
04f39047
SW		 14940 {
14941 .cmd = NL80211_CMD_RADAR_DETECT,
ef6243ac 14942 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04f39047 14943 .doit = nl80211_start_radar_detection,
5617c6cd 14944 .flags = GENL_UNS_ADMIN_PERM,
04f39047
SW		 14945 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14946 NL80211_FLAG_NEED_RTNL,
14947 },
3713b4e3
JB		 14948 {
14949 .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
ef6243ac 14950 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3713b4e3 14951 .doit = nl80211_get_protocol_features,
3713b4e3 14952 },
355199e0
JM		 14953 {
14954 .cmd = NL80211_CMD_UPDATE_FT_IES,
ef6243ac 14955 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
355199e0 14956 .doit = nl80211_update_ft_ies,
5617c6cd 14957 .flags = GENL_UNS_ADMIN_PERM,
355199e0
JM		 14958 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14959 NL80211_FLAG_NEED_RTNL,
14960 },
5de17984
AS		 14961 {
14962 .cmd = NL80211_CMD_CRIT_PROTOCOL_START,
ef6243ac 14963 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 14964 .doit = nl80211_crit_protocol_start,
5617c6cd 14965 .flags = GENL_UNS_ADMIN_PERM,
5de17984
AS		 14966 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14967 NL80211_FLAG_NEED_RTNL,
14968 },
14969 {
14970 .cmd = NL80211_CMD_CRIT_PROTOCOL_STOP,
ef6243ac 14971 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 14972 .doit = nl80211_crit_protocol_stop,
5617c6cd 14973 .flags = GENL_UNS_ADMIN_PERM,
5de17984
AS		 14974 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14975 NL80211_FLAG_NEED_RTNL,
be29b99a
AK		 14976 },
14977 {
14978 .cmd = NL80211_CMD_GET_COALESCE,
ef6243ac 14979 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 14980 .doit = nl80211_get_coalesce,
be29b99a
AK		 14981 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14982 NL80211_FLAG_NEED_RTNL,
14983 },
14984 {
14985 .cmd = NL80211_CMD_SET_COALESCE,
ef6243ac 14986 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 14987 .doit = nl80211_set_coalesce,
5617c6cd 14988 .flags = GENL_UNS_ADMIN_PERM,
be29b99a
AK		 14989 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14990 NL80211_FLAG_NEED_RTNL,
16ef1fe2
SW		 14991 },
14992 {
14993 .cmd = NL80211_CMD_CHANNEL_SWITCH,
ef6243ac 14994 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
16ef1fe2 14995 .doit = nl80211_channel_switch,
5617c6cd 14996 .flags = GENL_UNS_ADMIN_PERM,
16ef1fe2
SW		 14997 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14998 NL80211_FLAG_NEED_RTNL,
14999 },
ad7e718c
JB		 15000 {
15001 .cmd = NL80211_CMD_VENDOR,
ef6243ac 15002 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad7e718c 15003 .doit = nl80211_vendor_cmd,
7bdbe400 15004 .dumpit = nl80211_vendor_cmd_dump,
5617c6cd 15005 .flags = GENL_UNS_ADMIN_PERM,
ad7e718c 15006 .internal_flags = NL80211_FLAG_NEED_WIPHY |
d6db02a8
SD		 15007 NL80211_FLAG_NEED_RTNL |
15008 NL80211_FLAG_CLEAR_SKB,
ad7e718c 15009 },
fa9ffc74
KP		 15010 {
15011 .cmd = NL80211_CMD_SET_QOS_MAP,
ef6243ac 15012 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
fa9ffc74 15013 .doit = nl80211_set_qos_map,
5617c6cd 15014 .flags = GENL_UNS_ADMIN_PERM,
fa9ffc74
KP		 15015 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15016 NL80211_FLAG_NEED_RTNL,
15017 },
960d01ac
JB		 15018 {
15019 .cmd = NL80211_CMD_ADD_TX_TS,
ef6243ac 15020 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 15021 .doit = nl80211_add_tx_ts,
5617c6cd 15022 .flags = GENL_UNS_ADMIN_PERM,
960d01ac
JB		 15023 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15024 NL80211_FLAG_NEED_RTNL,
15025 },
15026 {
15027 .cmd = NL80211_CMD_DEL_TX_TS,
ef6243ac 15028 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 15029 .doit = nl80211_del_tx_ts,
5617c6cd 15030 .flags = GENL_UNS_ADMIN_PERM,
960d01ac
JB		 15031 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15032 NL80211_FLAG_NEED_RTNL,
15033 },
1057d35e
AN		 15034 {
15035 .cmd = NL80211_CMD_TDLS_CHANNEL_SWITCH,
ef6243ac 15036 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 15037 .doit = nl80211_tdls_channel_switch,
5617c6cd 15038 .flags = GENL_UNS_ADMIN_PERM,
1057d35e
AN		 15039 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15040 NL80211_FLAG_NEED_RTNL,
15041 },
15042 {
15043 .cmd = NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH,
ef6243ac 15044 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 15045 .doit = nl80211_tdls_cancel_channel_switch,
5617c6cd 15046 .flags = GENL_UNS_ADMIN_PERM,
1057d35e
AN		 15047 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15048 NL80211_FLAG_NEED_RTNL,
15049 },
ce0ce13a
MB		 15050 {
15051 .cmd = NL80211_CMD_SET_MULTICAST_TO_UNICAST,
ef6243ac 15052 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ce0ce13a 15053 .doit = nl80211_set_multicast_to_unicast,
ce0ce13a
MB		 15054 .flags = GENL_UNS_ADMIN_PERM,
15055 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15056 NL80211_FLAG_NEED_RTNL,
15057 },
3a00df57
AS		 15058 {
15059 .cmd = NL80211_CMD_SET_PMK,
ef6243ac 15060 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 15061 .doit = nl80211_set_pmk,
3a00df57 15062 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 15063 NL80211_FLAG_NEED_RTNL |
15064 NL80211_FLAG_CLEAR_SKB,
3a00df57
AS		 15065 },
15066 {
15067 .cmd = NL80211_CMD_DEL_PMK,
ef6243ac 15068 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 15069 .doit = nl80211_del_pmk,
3a00df57
AS		 15070 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15071 NL80211_FLAG_NEED_RTNL,
15072 },
40cbfa90
SD		 15073 {
15074 .cmd = NL80211_CMD_EXTERNAL_AUTH,
ef6243ac 15075 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
40cbfa90 15076 .doit = nl80211_external_auth,
40cbfa90
SD		 15077 .flags = GENL_ADMIN_PERM,
15078 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15079 NL80211_FLAG_NEED_RTNL,
15080 },
2576a9ac
DK		 15081 {
15082 .cmd = NL80211_CMD_CONTROL_PORT_FRAME,
ef6243ac 15083 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2576a9ac 15084 .doit = nl80211_tx_control_port,
2576a9ac
DK		 15085 .flags = GENL_UNS_ADMIN_PERM,
15086 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15087 NL80211_FLAG_NEED_RTNL,
15088 },
81e54d08
PKC		 15089 {
15090 .cmd = NL80211_CMD_GET_FTM_RESPONDER_STATS,
ef6243ac 15091 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
81e54d08 15092 .doit = nl80211_get_ftm_responder_stats,
81e54d08
PKC		 15093 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15094 NL80211_FLAG_NEED_RTNL,
15095 },
9bb7e0f2
JB		 15096 {
15097 .cmd = NL80211_CMD_PEER_MEASUREMENT_START,
ef6243ac 15098 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9bb7e0f2 15099 .doit = nl80211_pmsr_start,
9bb7e0f2
JB		 15100 .flags = GENL_UNS_ADMIN_PERM,
15101 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15102 NL80211_FLAG_NEED_RTNL,
15103 },
30c63115
S		 15104 {
15105 .cmd = NL80211_CMD_NOTIFY_RADAR,
ef6243ac 15106 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
30c63115 15107 .doit = nl80211_notify_radar_detection,
30c63115
S		 15108 .flags = GENL_UNS_ADMIN_PERM,
15109 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15110 NL80211_FLAG_NEED_RTNL,
15111 },
cb74e977
SD		 15112 {
15113 .cmd = NL80211_CMD_UPDATE_OWE_INFO,
15114 .doit = nl80211_update_owe_info,
15115 .flags = GENL_ADMIN_PERM,
5ab92e7f
RM		 15116 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15117 NL80211_FLAG_NEED_RTNL,
15118 },
15119 {
15120 .cmd = NL80211_CMD_PROBE_MESH_LINK,
15121 .doit = nl80211_probe_mesh_link,
15122 .flags = GENL_UNS_ADMIN_PERM,
cb74e977
SD		 15123 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15124 NL80211_FLAG_NEED_RTNL,
15125 },
77f576de
T		 15126 {
15127 .cmd = NL80211_CMD_SET_TID_CONFIG,
15128 .doit = nl80211_set_tid_config,
15129 .flags = GENL_UNS_ADMIN_PERM,
15130 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15131 NL80211_FLAG_NEED_RTNL,
15132 },
55682965 15133};
9588bbd5 15134
56989f6d 15135static struct genl_family nl80211_fam __ro_after_init = {
489111e5
JB		 15136 .name = NL80211_GENL_NAME, /* have users key off the name instead */
15137 .hdrsize = 0, /* no private header */
15138 .version = 1, /* no particular meaning now */
15139 .maxattr = NL80211_ATTR_MAX,
3b0f31f2 15140 .policy = nl80211_policy,
489111e5
JB		 15141 .netnsok = true,
15142 .pre_doit = nl80211_pre_doit,
15143 .post_doit = nl80211_post_doit,
15144 .module = THIS_MODULE,
15145 .ops = nl80211_ops,
15146 .n_ops = ARRAY_SIZE(nl80211_ops),
15147 .mcgrps = nl80211_mcgrps,
15148 .n_mcgrps = ARRAY_SIZE(nl80211_mcgrps),
50508d94 15149 .parallel_ops = true,
489111e5
JB		 15150};
15151
55682965
JB		 15152/* notification functions */
15153
3bb20556
JB		 15154void nl80211_notify_wiphy(struct cfg80211_registered_device *rdev,
15155 enum nl80211_commands cmd)
55682965
JB		 15156{
15157 struct sk_buff *msg;
86e8cf98 15158 struct nl80211_dump_wiphy_state state = {};
55682965 15159
3bb20556
JB		 15160 WARN_ON(cmd != NL80211_CMD_NEW_WIPHY &&
15161 cmd != NL80211_CMD_DEL_WIPHY);
15162
fd2120ca 15163 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 15164 if (!msg)
15165 return;
15166
3bb20556 15167 if (nl80211_send_wiphy(rdev, cmd, msg, 0, 0, 0, &state) < 0) {
55682965
JB		 15168 nlmsg_free(msg);
15169 return;
15170 }
15171
68eb5503 15172 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15173 NL80211_MCGRP_CONFIG, GFP_KERNEL);
55682965
JB		 15174}
15175
896ff063
DK		 15176void nl80211_notify_iface(struct cfg80211_registered_device *rdev,
15177 struct wireless_dev *wdev,
15178 enum nl80211_commands cmd)
15179{
15180 struct sk_buff *msg;
15181
896ff063
DK		 15182 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15183 if (!msg)
15184 return;
15185
3d1a5bbf 15186 if (nl80211_send_iface(msg, 0, 0, 0, rdev, wdev, cmd) < 0) {
896ff063
DK		 15187 nlmsg_free(msg);
15188 return;
15189 }
15190
15191 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
15192 NL80211_MCGRP_CONFIG, GFP_KERNEL);
15193}
15194
362a415d
JB		 15195static int nl80211_add_scan_req(struct sk_buff *msg,
15196 struct cfg80211_registered_device *rdev)
15197{
15198 struct cfg80211_scan_request *req = rdev->scan_req;
15199 struct nlattr *nest;
15200 int i;
15201
15202 if (WARN_ON(!req))
15203 return 0;
15204
ae0be8de 15205 nest = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_SSIDS);
362a415d
JB		 15206 if (!nest)
15207 goto nla_put_failure;
9360ffd1
DM		 15208 for (i = 0; i < req->n_ssids; i++) {
15209 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
15210 goto nla_put_failure;
15211 }
362a415d
JB		 15212 nla_nest_end(msg, nest);
15213
ae0be8de 15214 nest = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_FREQUENCIES);
362a415d
JB		 15215 if (!nest)
15216 goto nla_put_failure;
9360ffd1
DM		 15217 for (i = 0; i < req->n_channels; i++) {
15218 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
15219 goto nla_put_failure;
15220 }
362a415d
JB		 15221 nla_nest_end(msg, nest);
15222
9360ffd1
DM		 15223 if (req->ie &&
15224 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
15225 goto nla_put_failure;
362a415d 15226
ae917c9f
JB		 15227 if (req->flags &&
15228 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags))
15229 goto nla_put_failure;
ed473771 15230
1d76250b
AS		 15231 if (req->info.scan_start_tsf &&
15232 (nla_put_u64_64bit(msg, NL80211_ATTR_SCAN_START_TIME_TSF,
15233 req->info.scan_start_tsf, NL80211_BSS_PAD) ||
15234 nla_put(msg, NL80211_ATTR_SCAN_START_TIME_TSF_BSSID, ETH_ALEN,
15235 req->info.tsf_bssid)))
15236 goto nla_put_failure;
15237
362a415d
JB		 15238 return 0;
15239 nla_put_failure:
15240 return -ENOBUFS;
15241}
15242
505a2e88 15243static int nl80211_prep_scan_msg(struct sk_buff *msg,
a538e2d5 15244 struct cfg80211_registered_device *rdev,
fd014284 15245 struct wireless_dev *wdev,
15e47304 15246 u32 portid, u32 seq, int flags,
a538e2d5 15247 u32 cmd)
2a519311
JB		 15248{
15249 void *hdr;
15250
15e47304 15251 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 15252 if (!hdr)
15253 return -1;
15254
9360ffd1 15255 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 15256 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
15257 wdev->netdev->ifindex)) ||
2dad624e
ND		 15258 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
15259 NL80211_ATTR_PAD))
9360ffd1 15260 goto nla_put_failure;
2a519311 15261
362a415d
JB		 15262 /* ignore errors and send incomplete event anyway */
15263 nl80211_add_scan_req(msg, rdev);
2a519311 15264
053c095a
JB		 15265 genlmsg_end(msg, hdr);
15266 return 0;
2a519311
JB		 15267
15268 nla_put_failure:
15269 genlmsg_cancel(msg, hdr);
15270 return -EMSGSIZE;
15271}
15272
807f8a8c 15273static int
505a2e88 15274nl80211_prep_sched_scan_msg(struct sk_buff *msg,
96b08fd6 15275 struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 15276{
15277 void *hdr;
15278
96b08fd6 15279 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
807f8a8c
LC		 15280 if (!hdr)
15281 return -1;
15282
96b08fd6
AVS		 15283 if (nla_put_u32(msg, NL80211_ATTR_WIPHY,
15284 wiphy_to_rdev(req->wiphy)->wiphy_idx) ||
15285 nla_put_u32(msg, NL80211_ATTR_IFINDEX, req->dev->ifindex) ||
15286 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, req->reqid,
15287 NL80211_ATTR_PAD))
9360ffd1 15288 goto nla_put_failure;
807f8a8c 15289
053c095a
JB		 15290 genlmsg_end(msg, hdr);
15291 return 0;
807f8a8c
LC		 15292
15293 nla_put_failure:
15294 genlmsg_cancel(msg, hdr);
15295 return -EMSGSIZE;
15296}
15297
a538e2d5 15298void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 15299 struct wireless_dev *wdev)
a538e2d5
JB		 15300{
15301 struct sk_buff *msg;
15302
58050fce 15303 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 15304 if (!msg)
15305 return;
15306
505a2e88 15307 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 15308 NL80211_CMD_TRIGGER_SCAN) < 0) {
15309 nlmsg_free(msg);
15310 return;
15311 }
15312
68eb5503 15313 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15314 NL80211_MCGRP_SCAN, GFP_KERNEL);
a538e2d5
JB		 15315}
15316
f9d15d16
JB		 15317struct sk_buff *nl80211_build_scan_msg(struct cfg80211_registered_device *rdev,
15318 struct wireless_dev *wdev, bool aborted)
2a519311
JB		 15319{
15320 struct sk_buff *msg;
15321
fd2120ca 15322 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311 15323 if (!msg)
f9d15d16 15324 return NULL;
2a519311 15325
505a2e88 15326 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
f9d15d16
JB		 15327 aborted ? NL80211_CMD_SCAN_ABORTED :
15328 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311 15329 nlmsg_free(msg);
f9d15d16 15330 return NULL;
2a519311
JB		 15331 }
15332
f9d15d16 15333 return msg;
2a519311
JB		 15334}
15335
505a2e88
AVS		 15336/* send message created by nl80211_build_scan_msg() */
15337void nl80211_send_scan_msg(struct cfg80211_registered_device *rdev,
15338 struct sk_buff *msg)
807f8a8c 15339{
807f8a8c
LC		 15340 if (!msg)
15341 return;
15342
68eb5503 15343 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15344 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 15345}
15346
96b08fd6 15347void nl80211_send_sched_scan(struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 15348{
15349 struct sk_buff *msg;
15350
58050fce 15351 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 15352 if (!msg)
15353 return;
15354
96b08fd6 15355 if (nl80211_prep_sched_scan_msg(msg, req, cmd) < 0) {
807f8a8c
LC		 15356 nlmsg_free(msg);
15357 return;
15358 }
15359
96b08fd6 15360 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(req->wiphy), msg, 0,
2a94fe48 15361 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 15362}
15363
b0d7aa59
JD		 15364static bool nl80211_reg_change_event_fill(struct sk_buff *msg,
15365 struct regulatory_request *request)
73d54c9e 15366{
73d54c9e 15367 /* Userspace can always count this one always being set */
9360ffd1
DM		 15368 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
15369 goto nla_put_failure;
15370
15371 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
15372 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15373 NL80211_REGDOM_TYPE_WORLD))
15374 goto nla_put_failure;
15375 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
15376 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15377 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
15378 goto nla_put_failure;
15379 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
15380 request->intersect) {
15381 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15382 NL80211_REGDOM_TYPE_INTERSECTION))
15383 goto nla_put_failure;
15384 } else {
15385 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15386 NL80211_REGDOM_TYPE_COUNTRY) ||
15387 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
15388 request->alpha2))
15389 goto nla_put_failure;
15390 }
15391
ad30ca2c
AN		 15392 if (request->wiphy_idx != WIPHY_IDX_INVALID) {
15393 struct wiphy *wiphy = wiphy_idx_to_wiphy(request->wiphy_idx);
15394
15395 if (wiphy &&
15396 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
15397 goto nla_put_failure;
1bdd716c
AN		 15398
15399 if (wiphy &&
15400 wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
15401 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
15402 goto nla_put_failure;
ad30ca2c 15403 }
73d54c9e 15404
b0d7aa59
JD		 15405 return true;
15406
15407nla_put_failure:
15408 return false;
15409}
15410
15411/*
15412 * This can happen on global regulatory changes or device specific settings
15413 * based on custom regulatory domains.
15414 */
15415void nl80211_common_reg_change_event(enum nl80211_commands cmd_id,
15416 struct regulatory_request *request)
15417{
15418 struct sk_buff *msg;
15419 void *hdr;
15420
15421 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15422 if (!msg)
15423 return;
15424
15425 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd_id);
24f6d765 15426 if (!hdr)
15427 goto nla_put_failure;
b0d7aa59 15428
24f6d765 15429 if (!nl80211_reg_change_event_fill(msg, request))
b0d7aa59
JD		 15430 goto nla_put_failure;
15431
3b7b72ee 15432 genlmsg_end(msg, hdr);
73d54c9e 15433
bc43b28c 15434 rcu_read_lock();
68eb5503 15435 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 15436 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
bc43b28c 15437 rcu_read_unlock();
73d54c9e
LR		 15438
15439 return;
15440
15441nla_put_failure:
73d54c9e
LR		 15442 nlmsg_free(msg);
15443}
15444
6039f6d2
JM		 15445static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
15446 struct net_device *netdev,
15447 const u8 *buf, size_t len,
b0b6aa2c 15448 enum nl80211_commands cmd, gfp_t gfp,
4d9ec73d
JM		 15449 int uapsd_queues, const u8 *req_ies,
15450 size_t req_ies_len)
6039f6d2
JM		 15451{
15452 struct sk_buff *msg;
15453 void *hdr;
15454
4d9ec73d 15455 msg = nlmsg_new(100 + len + req_ies_len, gfp);
6039f6d2
JM		 15456 if (!msg)
15457 return;
15458
15459 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
15460 if (!hdr) {
15461 nlmsg_free(msg);
15462 return;
15463 }
15464
9360ffd1
DM		 15465 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15466 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
4d9ec73d
JM		 15467 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
15468 (req_ies &&
15469 nla_put(msg, NL80211_ATTR_REQ_IE, req_ies_len, req_ies)))
9360ffd1 15470 goto nla_put_failure;
6039f6d2 15471
b0b6aa2c
EP		 15472 if (uapsd_queues >= 0) {
15473 struct nlattr *nla_wmm =
ae0be8de 15474 nla_nest_start_noflag(msg, NL80211_ATTR_STA_WME);
b0b6aa2c
EP		 15475 if (!nla_wmm)
15476 goto nla_put_failure;
15477
15478 if (nla_put_u8(msg, NL80211_STA_WME_UAPSD_QUEUES,
15479 uapsd_queues))
15480 goto nla_put_failure;
15481
15482 nla_nest_end(msg, nla_wmm);
15483 }
15484
3b7b72ee 15485 genlmsg_end(msg, hdr);
6039f6d2 15486
68eb5503 15487 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15488 NL80211_MCGRP_MLME, gfp);
6039f6d2
JM		 15489 return;
15490
15491 nla_put_failure:
6039f6d2
JM		 15492 nlmsg_free(msg);
15493}
15494
15495void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 15496 struct net_device *netdev, const u8 *buf,
15497 size_t len, gfp_t gfp)
6039f6d2
JM		 15498{
15499 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d 15500 NL80211_CMD_AUTHENTICATE, gfp, -1, NULL, 0);
6039f6d2
JM		 15501}
15502
15503void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
15504 struct net_device *netdev, const u8 *buf,
4d9ec73d
JM		 15505 size_t len, gfp_t gfp, int uapsd_queues,
15506 const u8 *req_ies, size_t req_ies_len)
6039f6d2 15507{
e6d6e342 15508 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d
JM		 15509 NL80211_CMD_ASSOCIATE, gfp, uapsd_queues,
15510 req_ies, req_ies_len);
6039f6d2
JM		 15511}
15512
53b46b84 15513void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 15514 struct net_device *netdev, const u8 *buf,
15515 size_t len, gfp_t gfp)
6039f6d2
JM		 15516{
15517 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d 15518 NL80211_CMD_DEAUTHENTICATE, gfp, -1, NULL, 0);
6039f6d2
JM		 15519}
15520
53b46b84
JM		 15521void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
15522 struct net_device *netdev, const u8 *buf,
e6d6e342 15523 size_t len, gfp_t gfp)
6039f6d2
JM		 15524{
15525 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d 15526 NL80211_CMD_DISASSOCIATE, gfp, -1, NULL, 0);
6039f6d2
JM		 15527}
15528
6ff57cf8
JB		 15529void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev, const u8 *buf,
15530 size_t len)
cf4e594e 15531{
947add36
JB		 15532 struct wireless_dev *wdev = dev->ieee80211_ptr;
15533 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 15534 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
6ff57cf8
JB		 15535 const struct ieee80211_mgmt *mgmt = (void *)buf;
15536 u32 cmd;
947add36 15537
6ff57cf8
JB		 15538 if (WARN_ON(len < 2))
15539 return;
cf4e594e 15540
6ff57cf8
JB		 15541 if (ieee80211_is_deauth(mgmt->frame_control))
15542 cmd = NL80211_CMD_UNPROT_DEAUTHENTICATE;
15543 else
15544 cmd = NL80211_CMD_UNPROT_DISASSOCIATE;
947add36 15545
6ff57cf8 15546 trace_cfg80211_rx_unprot_mlme_mgmt(dev, buf, len);
4d9ec73d
JM		 15547 nl80211_send_mlme_event(rdev, dev, buf, len, cmd, GFP_ATOMIC, -1,
15548 NULL, 0);
cf4e594e 15549}
6ff57cf8 15550EXPORT_SYMBOL(cfg80211_rx_unprot_mlme_mgmt);
cf4e594e 15551
1b06bb40
LR		 15552static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
15553 struct net_device *netdev, int cmd,
e6d6e342 15554 const u8 *addr, gfp_t gfp)
1965c853
JM		 15555{
15556 struct sk_buff *msg;
15557 void *hdr;
15558
e6d6e342 15559 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 15560 if (!msg)
15561 return;
15562
15563 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
15564 if (!hdr) {
15565 nlmsg_free(msg);
15566 return;
15567 }
15568
9360ffd1
DM		 15569 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15570 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15571 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
15572 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
15573 goto nla_put_failure;
1965c853 15574
3b7b72ee 15575 genlmsg_end(msg, hdr);
1965c853 15576
68eb5503 15577 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15578 NL80211_MCGRP_MLME, gfp);
1965c853
JM		 15579 return;
15580
15581 nla_put_failure:
1965c853
JM		 15582 nlmsg_free(msg);
15583}
15584
15585void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 15586 struct net_device *netdev, const u8 *addr,
15587 gfp_t gfp)
1965c853
JM		 15588{
15589 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 15590 addr, gfp);
1965c853
JM		 15591}
15592
15593void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 15594 struct net_device *netdev, const u8 *addr,
15595 gfp_t gfp)
1965c853 15596{
e6d6e342
JB		 15597 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
15598 addr, gfp);
1965c853
JM		 15599}
15600
b23aa676 15601void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
5349a0f7
VK		 15602 struct net_device *netdev,
15603 struct cfg80211_connect_resp_params *cr,
3093ebbe 15604 gfp_t gfp)
b23aa676
SO		 15605{
15606 struct sk_buff *msg;
15607 void *hdr;
15608
a3caf744 15609 msg = nlmsg_new(100 + cr->req_ie_len + cr->resp_ie_len +
76804d28
AVS		 15610 cr->fils.kek_len + cr->fils.pmk_len +
15611 (cr->fils.pmkid ? WLAN_PMKID_LEN : 0), gfp);
b23aa676
SO		 15612 if (!msg)
15613 return;
15614
15615 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
15616 if (!hdr) {
15617 nlmsg_free(msg);
15618 return;
15619 }
15620
9360ffd1
DM		 15621 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15622 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
5349a0f7
VK		 15623 (cr->bssid &&
15624 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, cr->bssid)) ||
bf1ecd21 15625 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE,
5349a0f7
VK		 15626 cr->status < 0 ? WLAN_STATUS_UNSPECIFIED_FAILURE :
15627 cr->status) ||
15628 (cr->status < 0 &&
3093ebbe 15629 (nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
5349a0f7
VK		 15630 nla_put_u32(msg, NL80211_ATTR_TIMEOUT_REASON,
15631 cr->timeout_reason))) ||
15632 (cr->req_ie &&
15633 nla_put(msg, NL80211_ATTR_REQ_IE, cr->req_ie_len, cr->req_ie)) ||
15634 (cr->resp_ie &&
15635 nla_put(msg, NL80211_ATTR_RESP_IE, cr->resp_ie_len,
a3caf744 15636 cr->resp_ie)) ||
76804d28 15637 (cr->fils.update_erp_next_seq_num &&
a3caf744 15638 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
76804d28 15639 cr->fils.erp_next_seq_num)) ||
a3caf744 15640 (cr->status == WLAN_STATUS_SUCCESS &&
76804d28
AVS		 15641 ((cr->fils.kek &&
15642 nla_put(msg, NL80211_ATTR_FILS_KEK, cr->fils.kek_len,
15643 cr->fils.kek)) ||
15644 (cr->fils.pmk &&
15645 nla_put(msg, NL80211_ATTR_PMK, cr->fils.pmk_len, cr->fils.pmk)) ||
15646 (cr->fils.pmkid &&
15647 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, cr->fils.pmkid)))))
9360ffd1 15648 goto nla_put_failure;
b23aa676 15649
3b7b72ee 15650 genlmsg_end(msg, hdr);
b23aa676 15651
68eb5503 15652 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15653 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 15654 return;
15655
15656 nla_put_failure:
b23aa676 15657 nlmsg_free(msg);
b23aa676
SO		 15658}
15659
15660void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
29ce6ecb
AS		 15661 struct net_device *netdev,
15662 struct cfg80211_roam_info *info, gfp_t gfp)
b23aa676
SO		 15663{
15664 struct sk_buff *msg;
15665 void *hdr;
29ce6ecb 15666 const u8 *bssid = info->bss ? info->bss->bssid : info->bssid;
b23aa676 15667
e841b7b1
AVS		 15668 msg = nlmsg_new(100 + info->req_ie_len + info->resp_ie_len +
15669 info->fils.kek_len + info->fils.pmk_len +
15670 (info->fils.pmkid ? WLAN_PMKID_LEN : 0), gfp);
b23aa676
SO		 15671 if (!msg)
15672 return;
15673
15674 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
15675 if (!hdr) {
15676 nlmsg_free(msg);
15677 return;
15678 }
15679
9360ffd1
DM		 15680 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15681 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15682 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
29ce6ecb
AS		 15683 (info->req_ie &&
15684 nla_put(msg, NL80211_ATTR_REQ_IE, info->req_ie_len,
15685 info->req_ie)) ||
15686 (info->resp_ie &&
15687 nla_put(msg, NL80211_ATTR_RESP_IE, info->resp_ie_len,
e841b7b1
AVS		 15688 info->resp_ie)) ||
15689 (info->fils.update_erp_next_seq_num &&
15690 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
15691 info->fils.erp_next_seq_num)) ||
15692 (info->fils.kek &&
15693 nla_put(msg, NL80211_ATTR_FILS_KEK, info->fils.kek_len,
15694 info->fils.kek)) ||
15695 (info->fils.pmk &&
15696 nla_put(msg, NL80211_ATTR_PMK, info->fils.pmk_len, info->fils.pmk)) ||
15697 (info->fils.pmkid &&
15698 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, info->fils.pmkid)))
9360ffd1 15699 goto nla_put_failure;
b23aa676 15700
3b7b72ee 15701 genlmsg_end(msg, hdr);
b23aa676 15702
68eb5503 15703 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15704 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 15705 return;
15706
503c1fb9 15707 nla_put_failure:
503c1fb9
AS		 15708 nlmsg_free(msg);
15709}
15710
15711void nl80211_send_port_authorized(struct cfg80211_registered_device *rdev,
15712 struct net_device *netdev, const u8 *bssid)
15713{
15714 struct sk_buff *msg;
15715 void *hdr;
15716
15717 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15718 if (!msg)
15719 return;
15720
15721 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PORT_AUTHORIZED);
15722 if (!hdr) {
15723 nlmsg_free(msg);
15724 return;
15725 }
15726
f4d75993
CHH		 15727 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15728 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15729 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
503c1fb9
AS		 15730 goto nla_put_failure;
15731
15732 genlmsg_end(msg, hdr);
15733
15734 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
15735 NL80211_MCGRP_MLME, GFP_KERNEL);
15736 return;
15737
b23aa676 15738 nla_put_failure:
b23aa676 15739 nlmsg_free(msg);
b23aa676
SO		 15740}
15741
15742void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
15743 struct net_device *netdev, u16 reason,
667503dd 15744 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 15745{
15746 struct sk_buff *msg;
15747 void *hdr;
15748
4ef8c1c9 15749 msg = nlmsg_new(100 + ie_len, GFP_KERNEL);
b23aa676
SO		 15750 if (!msg)
15751 return;
15752
15753 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
15754 if (!hdr) {
15755 nlmsg_free(msg);
15756 return;
15757 }
15758
9360ffd1
DM		 15759 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15760 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
86b6c465 15761 (reason &&
9360ffd1
DM		 15762 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
15763 (from_ap &&
15764 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
15765 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
15766 goto nla_put_failure;
b23aa676 15767
3b7b72ee 15768 genlmsg_end(msg, hdr);
b23aa676 15769
68eb5503 15770 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15771 NL80211_MCGRP_MLME, GFP_KERNEL);
b23aa676
SO		 15772 return;
15773
15774 nla_put_failure:
b23aa676 15775 nlmsg_free(msg);
b23aa676
SO		 15776}
15777
04a773ad
JB		 15778void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
15779 struct net_device *netdev, const u8 *bssid,
15780 gfp_t gfp)
15781{
15782 struct sk_buff *msg;
15783 void *hdr;
15784
fd2120ca 15785 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 15786 if (!msg)
15787 return;
15788
15789 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
15790 if (!hdr) {
15791 nlmsg_free(msg);
15792 return;
15793 }
15794
9360ffd1
DM		 15795 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15796 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15797 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
15798 goto nla_put_failure;
04a773ad 15799
3b7b72ee 15800 genlmsg_end(msg, hdr);
04a773ad 15801
68eb5503 15802 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15803 NL80211_MCGRP_MLME, gfp);
04a773ad
JB		 15804 return;
15805
15806 nla_put_failure:
04a773ad
JB		 15807 nlmsg_free(msg);
15808}
15809
947add36 15810void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
ecbc12ad
BC		 15811 const u8 *ie, u8 ie_len,
15812 int sig_dbm, gfp_t gfp)
c93b5e71 15813{
947add36 15814 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 15815 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
c93b5e71
JC		 15816 struct sk_buff *msg;
15817 void *hdr;
15818
947add36
JB		 15819 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_MESH_POINT))
15820 return;
15821
15822 trace_cfg80211_notify_new_peer_candidate(dev, addr);
15823
4ef8c1c9 15824 msg = nlmsg_new(100 + ie_len, gfp);
c93b5e71
JC		 15825 if (!msg)
15826 return;
15827
15828 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
15829 if (!hdr) {
15830 nlmsg_free(msg);
15831 return;
15832 }
15833
9360ffd1 15834 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36
JB		 15835 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
15836 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
9360ffd1 15837 (ie_len && ie &&
ecbc12ad
BC		 15838 nla_put(msg, NL80211_ATTR_IE, ie_len, ie)) ||
15839 (sig_dbm &&
15840 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)))
9360ffd1 15841 goto nla_put_failure;
c93b5e71 15842
3b7b72ee 15843 genlmsg_end(msg, hdr);
c93b5e71 15844
68eb5503 15845 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15846 NL80211_MCGRP_MLME, gfp);
c93b5e71
JC		 15847 return;
15848
15849 nla_put_failure:
c93b5e71
JC		 15850 nlmsg_free(msg);
15851}
947add36 15852EXPORT_SYMBOL(cfg80211_notify_new_peer_candidate);
c93b5e71 15853
a3b8b056
JM		 15854void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
15855 struct net_device *netdev, const u8 *addr,
15856 enum nl80211_key_type key_type, int key_id,
e6d6e342 15857 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 15858{
15859 struct sk_buff *msg;
15860 void *hdr;
15861
e6d6e342 15862 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 15863 if (!msg)
15864 return;
15865
15866 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
15867 if (!hdr) {
15868 nlmsg_free(msg);
15869 return;
15870 }
15871
9360ffd1
DM		 15872 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15873 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15874 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
15875 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
15876 (key_id != -1 &&
15877 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
15878 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
15879 goto nla_put_failure;
a3b8b056 15880
3b7b72ee 15881 genlmsg_end(msg, hdr);
a3b8b056 15882
68eb5503 15883 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15884 NL80211_MCGRP_MLME, gfp);
a3b8b056
JM		 15885 return;
15886
15887 nla_put_failure:
a3b8b056
JM		 15888 nlmsg_free(msg);
15889}
15890
6bad8766
LR		 15891void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
15892 struct ieee80211_channel *channel_before,
15893 struct ieee80211_channel *channel_after)
15894{
15895 struct sk_buff *msg;
15896 void *hdr;
15897 struct nlattr *nl_freq;
15898
fd2120ca 15899 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 15900 if (!msg)
15901 return;
15902
15903 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
15904 if (!hdr) {
15905 nlmsg_free(msg);
15906 return;
15907 }
15908
15909 /*
15910 * Since we are applying the beacon hint to a wiphy we know its
15911 * wiphy_idx is valid
15912 */
9360ffd1
DM		 15913 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
15914 goto nla_put_failure;
6bad8766
LR		 15915
15916 /* Before */
ae0be8de 15917 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_BEFORE);
6bad8766
LR		 15918 if (!nl_freq)
15919 goto nla_put_failure;
50f32718
HD		 15920
15921 if (nl80211_msg_put_channel(msg, wiphy, channel_before, false))
6bad8766
LR		 15922 goto nla_put_failure;
15923 nla_nest_end(msg, nl_freq);
15924
15925 /* After */
ae0be8de 15926 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_AFTER);
6bad8766
LR		 15927 if (!nl_freq)
15928 goto nla_put_failure;
50f32718
HD		 15929
15930 if (nl80211_msg_put_channel(msg, wiphy, channel_after, false))
6bad8766
LR		 15931 goto nla_put_failure;
15932 nla_nest_end(msg, nl_freq);
15933
3b7b72ee 15934 genlmsg_end(msg, hdr);
6bad8766 15935
463d0183 15936 rcu_read_lock();
68eb5503 15937 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 15938 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
463d0183 15939 rcu_read_unlock();
6bad8766
LR		 15940
15941 return;
15942
15943nla_put_failure:
6bad8766
LR		 15944 nlmsg_free(msg);
15945}
15946
9588bbd5
JM		 15947static void nl80211_send_remain_on_chan_event(
15948 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 15949 struct wireless_dev *wdev, u64 cookie,
9588bbd5 15950 struct ieee80211_channel *chan,
9588bbd5
JM		 15951 unsigned int duration, gfp_t gfp)
15952{
15953 struct sk_buff *msg;
15954 void *hdr;
15955
15956 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
15957 if (!msg)
15958 return;
15959
15960 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
15961 if (!hdr) {
15962 nlmsg_free(msg);
15963 return;
15964 }
15965
9360ffd1 15966 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 15967 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
15968 wdev->netdev->ifindex)) ||
2dad624e
ND		 15969 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
15970 NL80211_ATTR_PAD) ||
9360ffd1 15971 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
42d97a59
JB		 15972 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
15973 NL80211_CHAN_NO_HT) ||
2dad624e
ND		 15974 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
15975 NL80211_ATTR_PAD))
9360ffd1 15976 goto nla_put_failure;
9588bbd5 15977
9360ffd1
DM		 15978 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
15979 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
15980 goto nla_put_failure;
9588bbd5 15981
3b7b72ee 15982 genlmsg_end(msg, hdr);
9588bbd5 15983
68eb5503 15984 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15985 NL80211_MCGRP_MLME, gfp);
9588bbd5
JM		 15986 return;
15987
15988 nla_put_failure:
9588bbd5
JM		 15989 nlmsg_free(msg);
15990}
15991
947add36
JB		 15992void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
15993 struct ieee80211_channel *chan,
15994 unsigned int duration, gfp_t gfp)
9588bbd5 15995{
947add36 15996 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 15997 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 15998
15999 trace_cfg80211_ready_on_channel(wdev, cookie, chan, duration);
9588bbd5 16000 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 16001 rdev, wdev, cookie, chan,
42d97a59 16002 duration, gfp);
9588bbd5 16003}
947add36 16004EXPORT_SYMBOL(cfg80211_ready_on_channel);
9588bbd5 16005
947add36
JB		 16006void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
16007 struct ieee80211_channel *chan,
16008 gfp_t gfp)
9588bbd5 16009{
947add36 16010 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16011 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16012
16013 trace_cfg80211_ready_on_channel_expired(wdev, cookie, chan);
9588bbd5 16014 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
42d97a59 16015 rdev, wdev, cookie, chan, 0, gfp);
9588bbd5 16016}
947add36 16017EXPORT_SYMBOL(cfg80211_remain_on_channel_expired);
9588bbd5 16018
1c38c7f2
JP		 16019void cfg80211_tx_mgmt_expired(struct wireless_dev *wdev, u64 cookie,
16020 struct ieee80211_channel *chan,
16021 gfp_t gfp)
16022{
16023 struct wiphy *wiphy = wdev->wiphy;
16024 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
16025
16026 trace_cfg80211_tx_mgmt_expired(wdev, cookie, chan);
16027 nl80211_send_remain_on_chan_event(NL80211_CMD_FRAME_WAIT_CANCEL,
16028 rdev, wdev, cookie, chan, 0, gfp);
16029}
16030EXPORT_SYMBOL(cfg80211_tx_mgmt_expired);
16031
947add36
JB		 16032void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
16033 struct station_info *sinfo, gfp_t gfp)
98b62183 16034{
947add36 16035 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16036 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
98b62183
JB		 16037 struct sk_buff *msg;
16038
947add36
JB		 16039 trace_cfg80211_new_sta(dev, mac_addr, sinfo);
16040
58050fce 16041 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 16042 if (!msg)
16043 return;
16044
cf5ead82 16045 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION, 0, 0, 0,
66266b3a 16046 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 16047 nlmsg_free(msg);
16048 return;
16049 }
16050
68eb5503 16051 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16052 NL80211_MCGRP_MLME, gfp);
98b62183 16053}
947add36 16054EXPORT_SYMBOL(cfg80211_new_sta);
98b62183 16055
cf5ead82
JB		 16056void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
16057 struct station_info *sinfo, gfp_t gfp)
ec15e68b 16058{
947add36 16059 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16060 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ec15e68b 16061 struct sk_buff *msg;
73887fd9 16062 struct station_info empty_sinfo = {};
cf5ead82 16063
73887fd9
JB		 16064 if (!sinfo)
16065 sinfo = &empty_sinfo;
ec15e68b 16066
947add36
JB		 16067 trace_cfg80211_del_sta(dev, mac_addr);
16068
58050fce 16069 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7ea3e110
JB		 16070 if (!msg) {
16071 cfg80211_sinfo_release_content(sinfo);
73887fd9 16072 return;
7ea3e110 16073 }
ec15e68b 16074
cf5ead82 16075 if (nl80211_send_station(msg, NL80211_CMD_DEL_STATION, 0, 0, 0,
57007121 16076 rdev, dev, mac_addr, sinfo) < 0) {
ec15e68b 16077 nlmsg_free(msg);
73887fd9 16078 return;
ec15e68b
JM		 16079 }
16080
68eb5503 16081 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16082 NL80211_MCGRP_MLME, gfp);
ec15e68b 16083}
cf5ead82 16084EXPORT_SYMBOL(cfg80211_del_sta_sinfo);
ec15e68b 16085
947add36
JB		 16086void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
16087 enum nl80211_connect_failed_reason reason,
16088 gfp_t gfp)
ed44a951 16089{
947add36 16090 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16091 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ed44a951
PP		 16092 struct sk_buff *msg;
16093 void *hdr;
16094
16095 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
16096 if (!msg)
16097 return;
16098
16099 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
16100 if (!hdr) {
16101 nlmsg_free(msg);
16102 return;
16103 }
16104
16105 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16106 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
16107 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
16108 goto nla_put_failure;
16109
16110 genlmsg_end(msg, hdr);
16111
68eb5503 16112 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16113 NL80211_MCGRP_MLME, gfp);
ed44a951
PP		 16114 return;
16115
16116 nla_put_failure:
ed44a951
PP		 16117 nlmsg_free(msg);
16118}
947add36 16119EXPORT_SYMBOL(cfg80211_conn_failed);
ed44a951 16120
b92ab5d8
JB		 16121static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
16122 const u8 *addr, gfp_t gfp)
28946da7
JB		 16123{
16124 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 16125 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
28946da7
JB		 16126 struct sk_buff *msg;
16127 void *hdr;
6aa7de05 16128 u32 nlportid = READ_ONCE(wdev->ap_unexpected_nlportid);
28946da7 16129
15e47304 16130 if (!nlportid)
28946da7
JB		 16131 return false;
16132
16133 msg = nlmsg_new(100, gfp);
16134 if (!msg)
16135 return true;
16136
b92ab5d8 16137 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 16138 if (!hdr) {
16139 nlmsg_free(msg);
16140 return true;
16141 }
16142
9360ffd1
DM		 16143 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16144 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16145 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
16146 goto nla_put_failure;
28946da7 16147
9c90a9f6 16148 genlmsg_end(msg, hdr);
15e47304 16149 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 16150 return true;
16151
16152 nla_put_failure:
28946da7
JB		 16153 nlmsg_free(msg);
16154 return true;
16155}
16156
947add36
JB		 16157bool cfg80211_rx_spurious_frame(struct net_device *dev,
16158 const u8 *addr, gfp_t gfp)
b92ab5d8 16159{
947add36
JB		 16160 struct wireless_dev *wdev = dev->ieee80211_ptr;
16161 bool ret;
16162
16163 trace_cfg80211_rx_spurious_frame(dev, addr);
16164
16165 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
16166 wdev->iftype != NL80211_IFTYPE_P2P_GO)) {
16167 trace_cfg80211_return_bool(false);
16168 return false;
16169 }
16170 ret = __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
16171 addr, gfp);
16172 trace_cfg80211_return_bool(ret);
16173 return ret;
b92ab5d8 16174}
947add36 16175EXPORT_SYMBOL(cfg80211_rx_spurious_frame);
b92ab5d8 16176
947add36
JB		 16177bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
16178 const u8 *addr, gfp_t gfp)
b92ab5d8 16179{
947add36
JB		 16180 struct wireless_dev *wdev = dev->ieee80211_ptr;
16181 bool ret;
16182
16183 trace_cfg80211_rx_unexpected_4addr_frame(dev, addr);
16184
16185 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
16186 wdev->iftype != NL80211_IFTYPE_P2P_GO &&
16187 wdev->iftype != NL80211_IFTYPE_AP_VLAN)) {
16188 trace_cfg80211_return_bool(false);
16189 return false;
16190 }
16191 ret = __nl80211_unexpected_frame(dev,
16192 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
16193 addr, gfp);
16194 trace_cfg80211_return_bool(ret);
16195 return ret;
b92ab5d8 16196}
947add36 16197EXPORT_SYMBOL(cfg80211_rx_unexpected_4addr_frame);
b92ab5d8 16198
2e161f78 16199int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 16200 struct wireless_dev *wdev, u32 nlportid,
804483e9 16201 int freq, int sig_dbm,
19504cf5 16202 const u8 *buf, size_t len, u32 flags, gfp_t gfp)
026331c4 16203{
71bbc994 16204 struct net_device *netdev = wdev->netdev;
026331c4
JM		 16205 struct sk_buff *msg;
16206 void *hdr;
026331c4 16207
4ef8c1c9 16208 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 16209 if (!msg)
16210 return -ENOMEM;
16211
2e161f78 16212 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 16213 if (!hdr) {
16214 nlmsg_free(msg);
16215 return -ENOMEM;
16216 }
16217
9360ffd1 16218 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16219 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16220 netdev->ifindex)) ||
2dad624e
ND		 16221 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16222 NL80211_ATTR_PAD) ||
9360ffd1
DM		 16223 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
16224 (sig_dbm &&
16225 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
19504cf5
VK		 16226 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
16227 (flags &&
16228 nla_put_u32(msg, NL80211_ATTR_RXMGMT_FLAGS, flags)))
9360ffd1 16229 goto nla_put_failure;
026331c4 16230
3b7b72ee 16231 genlmsg_end(msg, hdr);
026331c4 16232
15e47304 16233 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 16234
16235 nla_put_failure:
026331c4
JM		 16236 nlmsg_free(msg);
16237 return -ENOBUFS;
16238}
16239
947add36
JB		 16240void cfg80211_mgmt_tx_status(struct wireless_dev *wdev, u64 cookie,
16241 const u8 *buf, size_t len, bool ack, gfp_t gfp)
026331c4 16242{
947add36 16243 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16244 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
71bbc994 16245 struct net_device *netdev = wdev->netdev;
026331c4
JM		 16246 struct sk_buff *msg;
16247 void *hdr;
16248
947add36
JB		 16249 trace_cfg80211_mgmt_tx_status(wdev, cookie, ack);
16250
4ef8c1c9 16251 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 16252 if (!msg)
16253 return;
16254
2e161f78 16255 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 16256 if (!hdr) {
16257 nlmsg_free(msg);
16258 return;
16259 }
16260
9360ffd1 16261 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16262 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16263 netdev->ifindex)) ||
2dad624e
ND		 16264 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16265 NL80211_ATTR_PAD) ||
9360ffd1 16266 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
2dad624e
ND		 16267 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16268 NL80211_ATTR_PAD) ||
9360ffd1
DM		 16269 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
16270 goto nla_put_failure;
026331c4 16271
3b7b72ee 16272 genlmsg_end(msg, hdr);
026331c4 16273
68eb5503 16274 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16275 NL80211_MCGRP_MLME, gfp);
026331c4
JM		 16276 return;
16277
16278 nla_put_failure:
026331c4
JM		 16279 nlmsg_free(msg);
16280}
947add36 16281EXPORT_SYMBOL(cfg80211_mgmt_tx_status);
026331c4 16282
6a671a50 16283static int __nl80211_rx_control_port(struct net_device *dev,
a948f713 16284 struct sk_buff *skb,
6a671a50
DK		 16285 bool unencrypted, gfp_t gfp)
16286{
16287 struct wireless_dev *wdev = dev->ieee80211_ptr;
16288 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
a948f713 16289 struct ethhdr *ehdr = eth_hdr(skb);
8d74a623 16290 const u8 *addr = ehdr->h_source;
a948f713 16291 u16 proto = be16_to_cpu(skb->protocol);
6a671a50
DK		 16292 struct sk_buff *msg;
16293 void *hdr;
a948f713
DK		 16294 struct nlattr *frame;
16295
6a671a50
DK		 16296 u32 nlportid = READ_ONCE(wdev->conn_owner_nlportid);
16297
16298 if (!nlportid)
16299 return -ENOENT;
16300
a948f713 16301 msg = nlmsg_new(100 + skb->len, gfp);
6a671a50
DK		 16302 if (!msg)
16303 return -ENOMEM;
16304
16305 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONTROL_PORT_FRAME);
16306 if (!hdr) {
16307 nlmsg_free(msg);
16308 return -ENOBUFS;
16309 }
16310
16311 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16312 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16313 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16314 NL80211_ATTR_PAD) ||
8d74a623 16315 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
6a671a50
DK		 16316 nla_put_u16(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE, proto) ||
16317 (unencrypted && nla_put_flag(msg,
16318 NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT)))
16319 goto nla_put_failure;
16320
a948f713
DK		 16321 frame = nla_reserve(msg, NL80211_ATTR_FRAME, skb->len);
16322 if (!frame)
16323 goto nla_put_failure;
16324
16325 skb_copy_bits(skb, 0, nla_data(frame), skb->len);
6a671a50
DK		 16326 genlmsg_end(msg, hdr);
16327
16328 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
16329
16330 nla_put_failure:
16331 nlmsg_free(msg);
16332 return -ENOBUFS;
16333}
16334
16335bool cfg80211_rx_control_port(struct net_device *dev,
a948f713 16336 struct sk_buff *skb, bool unencrypted)
6a671a50
DK		 16337{
16338 int ret;
16339
a948f713
DK		 16340 trace_cfg80211_rx_control_port(dev, skb, unencrypted);
16341 ret = __nl80211_rx_control_port(dev, skb, unencrypted, GFP_ATOMIC);
6a671a50
DK		 16342 trace_cfg80211_return_bool(ret == 0);
16343 return ret == 0;
16344}
16345EXPORT_SYMBOL(cfg80211_rx_control_port);
16346
5b97f49d
JB		 16347static struct sk_buff *cfg80211_prepare_cqm(struct net_device *dev,
16348 const char *mac, gfp_t gfp)
d6dc1a38 16349{
947add36 16350 struct wireless_dev *wdev = dev->ieee80211_ptr;
5b97f49d
JB		 16351 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
16352 struct sk_buff *msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16353 void **cb;
947add36 16354
d6dc1a38 16355 if (!msg)
5b97f49d 16356 return NULL;
d6dc1a38 16357
5b97f49d
JB		 16358 cb = (void **)msg->cb;
16359
16360 cb[0] = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
16361 if (!cb[0]) {
d6dc1a38 16362 nlmsg_free(msg);
5b97f49d 16363 return NULL;
d6dc1a38
JO		 16364 }
16365
9360ffd1 16366 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36 16367 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9360ffd1 16368 goto nla_put_failure;
d6dc1a38 16369
5b97f49d 16370 if (mac && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
d6dc1a38
JO		 16371 goto nla_put_failure;
16372
ae0be8de 16373 cb[1] = nla_nest_start_noflag(msg, NL80211_ATTR_CQM);
5b97f49d 16374 if (!cb[1])
9360ffd1 16375 goto nla_put_failure;
d6dc1a38 16376
5b97f49d 16377 cb[2] = rdev;
d6dc1a38 16378
5b97f49d
JB		 16379 return msg;
16380 nla_put_failure:
16381 nlmsg_free(msg);
16382 return NULL;
16383}
16384
16385static void cfg80211_send_cqm(struct sk_buff *msg, gfp_t gfp)
16386{
16387 void **cb = (void **)msg->cb;
16388 struct cfg80211_registered_device *rdev = cb[2];
16389
16390 nla_nest_end(msg, cb[1]);
16391 genlmsg_end(msg, cb[0]);
16392
16393 memset(msg->cb, 0, sizeof(msg->cb));
d6dc1a38 16394
68eb5503 16395 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16396 NL80211_MCGRP_MLME, gfp);
5b97f49d
JB		 16397}
16398
16399void cfg80211_cqm_rssi_notify(struct net_device *dev,
16400 enum nl80211_cqm_rssi_threshold_event rssi_event,
bee427b8 16401 s32 rssi_level, gfp_t gfp)
5b97f49d
JB		 16402{
16403 struct sk_buff *msg;
4a4b8169
AZ		 16404 struct wireless_dev *wdev = dev->ieee80211_ptr;
16405 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
5b97f49d 16406
bee427b8 16407 trace_cfg80211_cqm_rssi_notify(dev, rssi_event, rssi_level);
5b97f49d 16408
98f03342
JB		 16409 if (WARN_ON(rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW &&
16410 rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH))
16411 return;
16412
4a4b8169
AZ		 16413 if (wdev->cqm_config) {
16414 wdev->cqm_config->last_rssi_event_value = rssi_level;
16415
16416 cfg80211_cqm_rssi_update(rdev, dev);
16417
16418 if (rssi_level == 0)
16419 rssi_level = wdev->cqm_config->last_rssi_event_value;
16420 }
16421
5b97f49d
JB		 16422 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
16423 if (!msg)
16424 return;
16425
16426 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
16427 rssi_event))
16428 goto nla_put_failure;
16429
bee427b8
AZ		 16430 if (rssi_level && nla_put_s32(msg, NL80211_ATTR_CQM_RSSI_LEVEL,
16431 rssi_level))
16432 goto nla_put_failure;
16433
5b97f49d
JB		 16434 cfg80211_send_cqm(msg, gfp);
16435
d6dc1a38
JO		 16436 return;
16437
16438 nla_put_failure:
d6dc1a38
JO		 16439 nlmsg_free(msg);
16440}
947add36 16441EXPORT_SYMBOL(cfg80211_cqm_rssi_notify);
d6dc1a38 16442
5b97f49d
JB		 16443void cfg80211_cqm_txe_notify(struct net_device *dev,
16444 const u8 *peer, u32 num_packets,
16445 u32 rate, u32 intvl, gfp_t gfp)
16446{
16447 struct sk_buff *msg;
16448
16449 msg = cfg80211_prepare_cqm(dev, peer, gfp);
16450 if (!msg)
16451 return;
16452
16453 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
16454 goto nla_put_failure;
16455
16456 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
16457 goto nla_put_failure;
16458
16459 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
16460 goto nla_put_failure;
16461
16462 cfg80211_send_cqm(msg, gfp);
16463 return;
16464
16465 nla_put_failure:
16466 nlmsg_free(msg);
16467}
16468EXPORT_SYMBOL(cfg80211_cqm_txe_notify);
16469
16470void cfg80211_cqm_pktloss_notify(struct net_device *dev,
16471 const u8 *peer, u32 num_packets, gfp_t gfp)
16472{
16473 struct sk_buff *msg;
16474
16475 trace_cfg80211_cqm_pktloss_notify(dev, peer, num_packets);
16476
16477 msg = cfg80211_prepare_cqm(dev, peer, gfp);
16478 if (!msg)
16479 return;
16480
16481 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
16482 goto nla_put_failure;
16483
16484 cfg80211_send_cqm(msg, gfp);
16485 return;
16486
16487 nla_put_failure:
16488 nlmsg_free(msg);
16489}
16490EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify);
16491
98f03342
JB		 16492void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp)
16493{
16494 struct sk_buff *msg;
16495
16496 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
16497 if (!msg)
16498 return;
16499
16500 if (nla_put_flag(msg, NL80211_ATTR_CQM_BEACON_LOSS_EVENT))
16501 goto nla_put_failure;
16502
16503 cfg80211_send_cqm(msg, gfp);
16504 return;
16505
16506 nla_put_failure:
16507 nlmsg_free(msg);
16508}
16509EXPORT_SYMBOL(cfg80211_cqm_beacon_loss_notify);
16510
947add36
JB		 16511static void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
16512 struct net_device *netdev, const u8 *bssid,
16513 const u8 *replay_ctr, gfp_t gfp)
e5497d76
JB		 16514{
16515 struct sk_buff *msg;
16516 struct nlattr *rekey_attr;
16517 void *hdr;
16518
58050fce 16519 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 16520 if (!msg)
16521 return;
16522
16523 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
16524 if (!hdr) {
16525 nlmsg_free(msg);
16526 return;
16527 }
16528
9360ffd1
DM		 16529 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16530 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16531 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
16532 goto nla_put_failure;
e5497d76 16533
ae0be8de 16534 rekey_attr = nla_nest_start_noflag(msg, NL80211_ATTR_REKEY_DATA);
e5497d76
JB		 16535 if (!rekey_attr)
16536 goto nla_put_failure;
16537
9360ffd1
DM		 16538 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
16539 NL80211_REPLAY_CTR_LEN, replay_ctr))
16540 goto nla_put_failure;
e5497d76
JB		 16541
16542 nla_nest_end(msg, rekey_attr);
16543
3b7b72ee 16544 genlmsg_end(msg, hdr);
e5497d76 16545
68eb5503 16546 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16547 NL80211_MCGRP_MLME, gfp);
e5497d76
JB		 16548 return;
16549
16550 nla_put_failure:
e5497d76
JB		 16551 nlmsg_free(msg);
16552}
16553
947add36
JB		 16554void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
16555 const u8 *replay_ctr, gfp_t gfp)
16556{
16557 struct wireless_dev *wdev = dev->ieee80211_ptr;
16558 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16559 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16560
16561 trace_cfg80211_gtk_rekey_notify(dev, bssid);
16562 nl80211_gtk_rekey_notify(rdev, dev, bssid, replay_ctr, gfp);
16563}
16564EXPORT_SYMBOL(cfg80211_gtk_rekey_notify);
16565
16566static void
16567nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
16568 struct net_device *netdev, int index,
16569 const u8 *bssid, bool preauth, gfp_t gfp)
c9df56b4
JM		 16570{
16571 struct sk_buff *msg;
16572 struct nlattr *attr;
16573 void *hdr;
16574
58050fce 16575 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 16576 if (!msg)
16577 return;
16578
16579 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
16580 if (!hdr) {
16581 nlmsg_free(msg);
16582 return;
16583 }
16584
9360ffd1
DM		 16585 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16586 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
16587 goto nla_put_failure;
c9df56b4 16588
ae0be8de 16589 attr = nla_nest_start_noflag(msg, NL80211_ATTR_PMKSA_CANDIDATE);
c9df56b4
JM		 16590 if (!attr)
16591 goto nla_put_failure;
16592
9360ffd1
DM		 16593 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
16594 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
16595 (preauth &&
16596 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
16597 goto nla_put_failure;
c9df56b4
JM		 16598
16599 nla_nest_end(msg, attr);
16600
3b7b72ee 16601 genlmsg_end(msg, hdr);
c9df56b4 16602
68eb5503 16603 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16604 NL80211_MCGRP_MLME, gfp);
c9df56b4
JM		 16605 return;
16606
16607 nla_put_failure:
c9df56b4
JM		 16608 nlmsg_free(msg);
16609}
16610
947add36
JB		 16611void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
16612 const u8 *bssid, bool preauth, gfp_t gfp)
16613{
16614 struct wireless_dev *wdev = dev->ieee80211_ptr;
16615 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16616 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16617
16618 trace_cfg80211_pmksa_candidate_notify(dev, index, bssid, preauth);
16619 nl80211_pmksa_candidate_notify(rdev, dev, index, bssid, preauth, gfp);
16620}
16621EXPORT_SYMBOL(cfg80211_pmksa_candidate_notify);
16622
16623static void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
16624 struct net_device *netdev,
16625 struct cfg80211_chan_def *chandef,
f8d7552e
LC		 16626 gfp_t gfp,
16627 enum nl80211_commands notif,
16628 u8 count)
5314526b
TP		 16629{
16630 struct sk_buff *msg;
16631 void *hdr;
16632
58050fce 16633 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 16634 if (!msg)
16635 return;
16636
f8d7552e 16637 hdr = nl80211hdr_put(msg, 0, 0, 0, notif);
5314526b
TP		 16638 if (!hdr) {
16639 nlmsg_free(msg);
16640 return;
16641 }
16642
683b6d3b
JB		 16643 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
16644 goto nla_put_failure;
16645
16646 if (nl80211_send_chandef(msg, chandef))
7eab0f64 16647 goto nla_put_failure;
5314526b 16648
f8d7552e
LC		 16649 if ((notif == NL80211_CMD_CH_SWITCH_STARTED_NOTIFY) &&
16650 (nla_put_u32(msg, NL80211_ATTR_CH_SWITCH_COUNT, count)))
16651 goto nla_put_failure;
16652
5314526b
TP		 16653 genlmsg_end(msg, hdr);
16654
68eb5503 16655 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16656 NL80211_MCGRP_MLME, gfp);
5314526b
TP		 16657 return;
16658
16659 nla_put_failure:
5314526b
TP		 16660 nlmsg_free(msg);
16661}
16662
947add36
JB		 16663void cfg80211_ch_switch_notify(struct net_device *dev,
16664 struct cfg80211_chan_def *chandef)
84f10708 16665{
947add36
JB		 16666 struct wireless_dev *wdev = dev->ieee80211_ptr;
16667 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16668 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36 16669
e487eaeb 16670 ASSERT_WDEV_LOCK(wdev);
947add36 16671
e487eaeb 16672 trace_cfg80211_ch_switch_notify(dev, chandef);
947add36 16673
9e0e2961 16674 wdev->chandef = *chandef;
96f55f12 16675 wdev->preset_chandef = *chandef;
5dc8cdce
SM		 16676
16677 if (wdev->iftype == NL80211_IFTYPE_STATION &&
16678 !WARN_ON(!wdev->current_bss))
0afd425b 16679 cfg80211_update_assoc_bss_entry(wdev, chandef->chan);
5dc8cdce 16680
d34990bb
MV		 16681 cfg80211_sched_dfs_chan_update(rdev);
16682
f8d7552e
LC		 16683 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
16684 NL80211_CMD_CH_SWITCH_NOTIFY, 0);
947add36
JB		 16685}
16686EXPORT_SYMBOL(cfg80211_ch_switch_notify);
16687
f8d7552e
LC		 16688void cfg80211_ch_switch_started_notify(struct net_device *dev,
16689 struct cfg80211_chan_def *chandef,
16690 u8 count)
16691{
16692 struct wireless_dev *wdev = dev->ieee80211_ptr;
16693 struct wiphy *wiphy = wdev->wiphy;
16694 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
16695
16696 trace_cfg80211_ch_switch_started_notify(dev, chandef);
16697
16698 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
16699 NL80211_CMD_CH_SWITCH_STARTED_NOTIFY, count);
16700}
16701EXPORT_SYMBOL(cfg80211_ch_switch_started_notify);
16702
04f39047
SW		 16703void
16704nl80211_radar_notify(struct cfg80211_registered_device *rdev,
d2859df5 16705 const struct cfg80211_chan_def *chandef,
04f39047
SW		 16706 enum nl80211_radar_event event,
16707 struct net_device *netdev, gfp_t gfp)
16708{
16709 struct sk_buff *msg;
16710 void *hdr;
16711
16712 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16713 if (!msg)
16714 return;
16715
16716 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
16717 if (!hdr) {
16718 nlmsg_free(msg);
16719 return;
16720 }
16721
16722 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
16723 goto nla_put_failure;
16724
16725 /* NOP and radar events don't need a netdev parameter */
16726 if (netdev) {
16727 struct wireless_dev *wdev = netdev->ieee80211_ptr;
16728
16729 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
2dad624e
ND		 16730 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16731 NL80211_ATTR_PAD))
04f39047
SW		 16732 goto nla_put_failure;
16733 }
16734
16735 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
16736 goto nla_put_failure;
16737
16738 if (nl80211_send_chandef(msg, chandef))
16739 goto nla_put_failure;
16740
9c90a9f6 16741 genlmsg_end(msg, hdr);
04f39047 16742
68eb5503 16743 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16744 NL80211_MCGRP_MLME, gfp);
04f39047
SW		 16745 return;
16746
16747 nla_put_failure:
04f39047
SW		 16748 nlmsg_free(msg);
16749}
16750
466b9936 16751void cfg80211_sta_opmode_change_notify(struct net_device *dev, const u8 *mac,
16752 struct sta_opmode_info *sta_opmode,
16753 gfp_t gfp)
16754{
16755 struct sk_buff *msg;
16756 struct wireless_dev *wdev = dev->ieee80211_ptr;
16757 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
16758 void *hdr;
16759
16760 if (WARN_ON(!mac))
16761 return;
16762
16763 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16764 if (!msg)
16765 return;
16766
16767 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STA_OPMODE_CHANGED);
16768 if (!hdr) {
16769 nlmsg_free(msg);
16770 return;
16771 }
16772
16773 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
16774 goto nla_put_failure;
16775
16776 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
16777 goto nla_put_failure;
16778
16779 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
16780 goto nla_put_failure;
16781
16782 if ((sta_opmode->changed & STA_OPMODE_SMPS_MODE_CHANGED) &&
16783 nla_put_u8(msg, NL80211_ATTR_SMPS_MODE, sta_opmode->smps_mode))
16784 goto nla_put_failure;
16785
16786 if ((sta_opmode->changed & STA_OPMODE_MAX_BW_CHANGED) &&
16787 nla_put_u8(msg, NL80211_ATTR_CHANNEL_WIDTH, sta_opmode->bw))
16788 goto nla_put_failure;
16789
16790 if ((sta_opmode->changed & STA_OPMODE_N_SS_CHANGED) &&
16791 nla_put_u8(msg, NL80211_ATTR_NSS, sta_opmode->rx_nss))
16792 goto nla_put_failure;
16793
16794 genlmsg_end(msg, hdr);
16795
16796 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
16797 NL80211_MCGRP_MLME, gfp);
16798
16799 return;
16800
16801nla_put_failure:
16802 nlmsg_free(msg);
16803}
16804EXPORT_SYMBOL(cfg80211_sta_opmode_change_notify);
16805
7f6cf311 16806void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
c4b50cd3
VN		 16807 u64 cookie, bool acked, s32 ack_signal,
16808 bool is_valid_ack_signal, gfp_t gfp)
7f6cf311
JB		 16809{
16810 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 16811 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
7f6cf311
JB		 16812 struct sk_buff *msg;
16813 void *hdr;
7f6cf311 16814
4ee3e063
BL		 16815 trace_cfg80211_probe_status(dev, addr, cookie, acked);
16816
58050fce 16817 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 16818
7f6cf311
JB		 16819 if (!msg)
16820 return;
16821
16822 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
16823 if (!hdr) {
16824 nlmsg_free(msg);
16825 return;
16826 }
16827
9360ffd1
DM		 16828 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16829 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16830 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
2dad624e
ND		 16831 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16832 NL80211_ATTR_PAD) ||
c4b50cd3
VN		 16833 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
16834 (is_valid_ack_signal && nla_put_s32(msg, NL80211_ATTR_ACK_SIGNAL,
16835 ack_signal)))
9360ffd1 16836 goto nla_put_failure;
7f6cf311 16837
9c90a9f6 16838 genlmsg_end(msg, hdr);
7f6cf311 16839
68eb5503 16840 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16841 NL80211_MCGRP_MLME, gfp);
7f6cf311
JB		 16842 return;
16843
16844 nla_put_failure:
7f6cf311
JB		 16845 nlmsg_free(msg);
16846}
16847EXPORT_SYMBOL(cfg80211_probe_status);
16848
5e760230
JB		 16849void cfg80211_report_obss_beacon(struct wiphy *wiphy,
16850 const u8 *frame, size_t len,
37c73b5f 16851 int freq, int sig_dbm)
5e760230 16852{
f26cbf40 16853 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
5e760230
JB		 16854 struct sk_buff *msg;
16855 void *hdr;
37c73b5f 16856 struct cfg80211_beacon_registration *reg;
5e760230 16857
4ee3e063
BL		 16858 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
16859
37c73b5f
BG		 16860 spin_lock_bh(&rdev->beacon_registrations_lock);
16861 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
16862 msg = nlmsg_new(len + 100, GFP_ATOMIC);
16863 if (!msg) {
16864 spin_unlock_bh(&rdev->beacon_registrations_lock);
16865 return;
16866 }
5e760230 16867
37c73b5f
BG		 16868 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
16869 if (!hdr)
16870 goto nla_put_failure;
5e760230 16871
37c73b5f
BG		 16872 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16873 (freq &&
16874 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq)) ||
16875 (sig_dbm &&
16876 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
16877 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
16878 goto nla_put_failure;
5e760230 16879
37c73b5f 16880 genlmsg_end(msg, hdr);
5e760230 16881
37c73b5f
BG		 16882 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
16883 }
16884 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 16885 return;
16886
16887 nla_put_failure:
37c73b5f 16888 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 16889 nlmsg_free(msg);
16890}
16891EXPORT_SYMBOL(cfg80211_report_obss_beacon);
16892
cd8f7cb4 16893#ifdef CONFIG_PM
8cd4d456
LC		 16894static int cfg80211_net_detect_results(struct sk_buff *msg,
16895 struct cfg80211_wowlan_wakeup *wakeup)
16896{
16897 struct cfg80211_wowlan_nd_info *nd = wakeup->net_detect;
16898 struct nlattr *nl_results, *nl_match, *nl_freqs;
16899 int i, j;
16900
ae0be8de
MK		 16901 nl_results = nla_nest_start_noflag(msg,
16902 NL80211_WOWLAN_TRIG_NET_DETECT_RESULTS);
8cd4d456
LC		 16903 if (!nl_results)
16904 return -EMSGSIZE;
16905
16906 for (i = 0; i < nd->n_matches; i++) {
16907 struct cfg80211_wowlan_nd_match *match = nd->matches[i];
16908
ae0be8de 16909 nl_match = nla_nest_start_noflag(msg, i);
8cd4d456
LC		 16910 if (!nl_match)
16911 break;
16912
16913 /* The SSID attribute is optional in nl80211, but for
16914 * simplicity reasons it's always present in the
16915 * cfg80211 structure. If a driver can't pass the
16916 * SSID, that needs to be changed. A zero length SSID
16917 * is still a valid SSID (wildcard), so it cannot be
16918 * used for this purpose.
16919 */
16920 if (nla_put(msg, NL80211_ATTR_SSID, match->ssid.ssid_len,
16921 match->ssid.ssid)) {
16922 nla_nest_cancel(msg, nl_match);
16923 goto out;
16924 }
16925
16926 if (match->n_channels) {
ae0be8de
MK		 16927 nl_freqs = nla_nest_start_noflag(msg,
16928 NL80211_ATTR_SCAN_FREQUENCIES);
8cd4d456
LC		 16929 if (!nl_freqs) {
16930 nla_nest_cancel(msg, nl_match);
16931 goto out;
16932 }
16933
16934 for (j = 0; j < match->n_channels; j++) {
5528fae8 16935 if (nla_put_u32(msg, j, match->channels[j])) {
8cd4d456
LC		 16936 nla_nest_cancel(msg, nl_freqs);
16937 nla_nest_cancel(msg, nl_match);
16938 goto out;
16939 }
16940 }
16941
16942 nla_nest_end(msg, nl_freqs);
16943 }
16944
16945 nla_nest_end(msg, nl_match);
16946 }
16947
16948out:
16949 nla_nest_end(msg, nl_results);
16950 return 0;
16951}
16952
cd8f7cb4
JB		 16953void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
16954 struct cfg80211_wowlan_wakeup *wakeup,
16955 gfp_t gfp)
16956{
f26cbf40 16957 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
cd8f7cb4
JB		 16958 struct sk_buff *msg;
16959 void *hdr;
9c90a9f6 16960 int size = 200;
cd8f7cb4
JB		 16961
16962 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
16963
16964 if (wakeup)
16965 size += wakeup->packet_present_len;
16966
16967 msg = nlmsg_new(size, gfp);
16968 if (!msg)
16969 return;
16970
16971 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
16972 if (!hdr)
16973 goto free_msg;
16974
16975 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 16976 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16977 NL80211_ATTR_PAD))
cd8f7cb4
JB		 16978 goto free_msg;
16979
16980 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16981 wdev->netdev->ifindex))
16982 goto free_msg;
16983
16984 if (wakeup) {
16985 struct nlattr *reasons;
16986
ae0be8de
MK		 16987 reasons = nla_nest_start_noflag(msg,
16988 NL80211_ATTR_WOWLAN_TRIGGERS);
7fa322c8
JB		 16989 if (!reasons)
16990 goto free_msg;
cd8f7cb4
JB		 16991
16992 if (wakeup->disconnect &&
16993 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
16994 goto free_msg;
16995 if (wakeup->magic_pkt &&
16996 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
16997 goto free_msg;
16998 if (wakeup->gtk_rekey_failure &&
16999 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
17000 goto free_msg;
17001 if (wakeup->eap_identity_req &&
17002 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
17003 goto free_msg;
17004 if (wakeup->four_way_handshake &&
17005 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
17006 goto free_msg;
17007 if (wakeup->rfkill_release &&
17008 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
17009 goto free_msg;
17010
17011 if (wakeup->pattern_idx >= 0 &&
17012 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
17013 wakeup->pattern_idx))
17014 goto free_msg;
17015
ae917c9f
JB		 17016 if (wakeup->tcp_match &&
17017 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH))
17018 goto free_msg;
2a0e047e 17019
ae917c9f
JB		 17020 if (wakeup->tcp_connlost &&
17021 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST))
17022 goto free_msg;
2a0e047e 17023
ae917c9f
JB		 17024 if (wakeup->tcp_nomoretokens &&
17025 nla_put_flag(msg,
17026 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS))
17027 goto free_msg;
2a0e047e 17028
cd8f7cb4
JB		 17029 if (wakeup->packet) {
17030 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
17031 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
17032
17033 if (!wakeup->packet_80211) {
17034 pkt_attr =
17035 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
17036 len_attr =
17037 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
17038 }
17039
17040 if (wakeup->packet_len &&
17041 nla_put_u32(msg, len_attr, wakeup->packet_len))
17042 goto free_msg;
17043
17044 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
17045 wakeup->packet))
17046 goto free_msg;
17047 }
17048
8cd4d456
LC		 17049 if (wakeup->net_detect &&
17050 cfg80211_net_detect_results(msg, wakeup))
17051 goto free_msg;
17052
cd8f7cb4
JB		 17053 nla_nest_end(msg, reasons);
17054 }
17055
9c90a9f6 17056 genlmsg_end(msg, hdr);
cd8f7cb4 17057
68eb5503 17058 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17059 NL80211_MCGRP_MLME, gfp);
cd8f7cb4
JB		 17060 return;
17061
17062 free_msg:
17063 nlmsg_free(msg);
17064}
17065EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
17066#endif
17067
3475b094
JM		 17068void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
17069 enum nl80211_tdls_operation oper,
17070 u16 reason_code, gfp_t gfp)
17071{
17072 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 17073 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
3475b094
JM		 17074 struct sk_buff *msg;
17075 void *hdr;
3475b094
JM		 17076
17077 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
17078 reason_code);
17079
17080 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17081 if (!msg)
17082 return;
17083
17084 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
17085 if (!hdr) {
17086 nlmsg_free(msg);
17087 return;
17088 }
17089
17090 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17091 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17092 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
17093 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
17094 (reason_code > 0 &&
17095 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
17096 goto nla_put_failure;
17097
9c90a9f6 17098 genlmsg_end(msg, hdr);
3475b094 17099
68eb5503 17100 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17101 NL80211_MCGRP_MLME, gfp);
3475b094
JM		 17102 return;
17103
17104 nla_put_failure:
3475b094
JM		 17105 nlmsg_free(msg);
17106}
17107EXPORT_SYMBOL(cfg80211_tdls_oper_request);
17108
026331c4
JM		 17109static int nl80211_netlink_notify(struct notifier_block * nb,
17110 unsigned long state,
17111 void *_notify)
17112{
17113 struct netlink_notify *notify = _notify;
17114 struct cfg80211_registered_device *rdev;
17115 struct wireless_dev *wdev;
37c73b5f 17116 struct cfg80211_beacon_registration *reg, *tmp;
026331c4 17117
8f815cdd 17118 if (state != NETLINK_URELEASE || notify->protocol != NETLINK_GENERIC)
026331c4
JM		 17119 return NOTIFY_DONE;
17120
17121 rcu_read_lock();
17122
5e760230 17123 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ca986ad9 17124 struct cfg80211_sched_scan_request *sched_scan_req;
753aacfd 17125
ca986ad9
AVS		 17126 list_for_each_entry_rcu(sched_scan_req,
17127 &rdev->sched_scan_req_list,
17128 list) {
17129 if (sched_scan_req->owner_nlportid == notify->portid) {
17130 sched_scan_req->nl_owner_dead = true;
753aacfd 17131 schedule_work(&rdev->sched_scan_stop_wk);
ca986ad9 17132 }
753aacfd 17133 }
78f22b6a 17134
53873f13 17135 list_for_each_entry_rcu(wdev, &rdev->wiphy.wdev_list, list) {
15e47304 17136 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f 17137
ab81007a
JB		 17138 if (wdev->owner_nlportid == notify->portid) {
17139 wdev->nl_owner_dead = true;
17140 schedule_work(&rdev->destroy_work);
17141 } else if (wdev->conn_owner_nlportid == notify->portid) {
bd2522b1 17142 schedule_work(&wdev->disconnect_wk);
ab81007a 17143 }
9bb7e0f2
JB		 17144
17145 cfg80211_release_pmsr(wdev, notify->portid);
78f22b6a
JB		 17146 }
17147
37c73b5f
BG		 17148 spin_lock_bh(&rdev->beacon_registrations_lock);
17149 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
17150 list) {
17151 if (reg->nlportid == notify->portid) {
17152 list_del(&reg->list);
17153 kfree(reg);
17154 break;
17155 }
17156 }
17157 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 17158 }
026331c4
JM		 17159
17160 rcu_read_unlock();
17161
05050753
I		 17162 /*
17163 * It is possible that the user space process that is controlling the
17164 * indoor setting disappeared, so notify the regulatory core.
17165 */
17166 regulatory_netlink_notify(notify->portid);
6784c7db 17167 return NOTIFY_OK;
026331c4
JM		 17168}
17169
17170static struct notifier_block nl80211_netlink_notifier = {
17171 .notifier_call = nl80211_netlink_notify,
17172};
17173
355199e0
JM		 17174void cfg80211_ft_event(struct net_device *netdev,
17175 struct cfg80211_ft_event_params *ft_event)
17176{
17177 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
f26cbf40 17178 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
355199e0
JM		 17179 struct sk_buff *msg;
17180 void *hdr;
355199e0
JM		 17181
17182 trace_cfg80211_ft_event(wiphy, netdev, ft_event);
17183
17184 if (!ft_event->target_ap)
17185 return;
17186
1039d081
DL		 17187 msg = nlmsg_new(100 + ft_event->ies_len + ft_event->ric_ies_len,
17188 GFP_KERNEL);
355199e0
JM		 17189 if (!msg)
17190 return;
17191
17192 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FT_EVENT);
ae917c9f
JB		 17193 if (!hdr)
17194 goto out;
355199e0 17195
ae917c9f
JB		 17196 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17197 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17198 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ft_event->target_ap))
17199 goto out;
355199e0 17200
ae917c9f
JB		 17201 if (ft_event->ies &&
17202 nla_put(msg, NL80211_ATTR_IE, ft_event->ies_len, ft_event->ies))
17203 goto out;
17204 if (ft_event->ric_ies &&
17205 nla_put(msg, NL80211_ATTR_IE_RIC, ft_event->ric_ies_len,
17206 ft_event->ric_ies))
17207 goto out;
355199e0 17208
9c90a9f6 17209 genlmsg_end(msg, hdr);
355199e0 17210
68eb5503 17211 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17212 NL80211_MCGRP_MLME, GFP_KERNEL);
ae917c9f
JB		 17213 return;
17214 out:
17215 nlmsg_free(msg);
355199e0
JM		 17216}
17217EXPORT_SYMBOL(cfg80211_ft_event);
17218
5de17984
AS		 17219void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp)
17220{
17221 struct cfg80211_registered_device *rdev;
17222 struct sk_buff *msg;
17223 void *hdr;
17224 u32 nlportid;
17225
f26cbf40 17226 rdev = wiphy_to_rdev(wdev->wiphy);
5de17984
AS		 17227 if (!rdev->crit_proto_nlportid)
17228 return;
17229
17230 nlportid = rdev->crit_proto_nlportid;
17231 rdev->crit_proto_nlportid = 0;
17232
17233 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17234 if (!msg)
17235 return;
17236
17237 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CRIT_PROTOCOL_STOP);
17238 if (!hdr)
17239 goto nla_put_failure;
17240
17241 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 17242 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17243 NL80211_ATTR_PAD))
5de17984
AS		 17244 goto nla_put_failure;
17245
17246 genlmsg_end(msg, hdr);
17247
17248 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
17249 return;
17250
17251 nla_put_failure:
5de17984 17252 nlmsg_free(msg);
5de17984
AS		 17253}
17254EXPORT_SYMBOL(cfg80211_crit_proto_stopped);
17255
348baf0e
JB		 17256void nl80211_send_ap_stopped(struct wireless_dev *wdev)
17257{
17258 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17259 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
348baf0e
JB		 17260 struct sk_buff *msg;
17261 void *hdr;
17262
17263 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17264 if (!msg)
17265 return;
17266
17267 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STOP_AP);
17268 if (!hdr)
17269 goto out;
17270
17271 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17272 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex) ||
2dad624e
ND		 17273 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17274 NL80211_ATTR_PAD))
348baf0e
JB		 17275 goto out;
17276
17277 genlmsg_end(msg, hdr);
17278
17279 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(wiphy), msg, 0,
17280 NL80211_MCGRP_MLME, GFP_KERNEL);
17281 return;
17282 out:
17283 nlmsg_free(msg);
17284}
17285
40cbfa90
SD		 17286int cfg80211_external_auth_request(struct net_device *dev,
17287 struct cfg80211_external_auth_params *params,
17288 gfp_t gfp)
17289{
17290 struct wireless_dev *wdev = dev->ieee80211_ptr;
17291 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
17292 struct sk_buff *msg;
17293 void *hdr;
17294
17295 if (!wdev->conn_owner_nlportid)
17296 return -EINVAL;
17297
17298 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17299 if (!msg)
17300 return -ENOMEM;
17301
17302 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_EXTERNAL_AUTH);
17303 if (!hdr)
17304 goto nla_put_failure;
17305
17306 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17307 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17308 nla_put_u32(msg, NL80211_ATTR_AKM_SUITES, params->key_mgmt_suite) ||
17309 nla_put_u32(msg, NL80211_ATTR_EXTERNAL_AUTH_ACTION,
17310 params->action) ||
17311 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, params->bssid) ||
17312 nla_put(msg, NL80211_ATTR_SSID, params->ssid.ssid_len,
17313 params->ssid.ssid))
17314 goto nla_put_failure;
17315
17316 genlmsg_end(msg, hdr);
17317 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
17318 wdev->conn_owner_nlportid);
17319 return 0;
17320
17321 nla_put_failure:
17322 nlmsg_free(msg);
17323 return -ENOBUFS;
17324}
17325EXPORT_SYMBOL(cfg80211_external_auth_request);
17326
cb74e977
SD		 17327void cfg80211_update_owe_info_event(struct net_device *netdev,
17328 struct cfg80211_update_owe_info *owe_info,
17329 gfp_t gfp)
17330{
17331 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
17332 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
17333 struct sk_buff *msg;
17334 void *hdr;
17335
17336 trace_cfg80211_update_owe_info_event(wiphy, netdev, owe_info);
17337
17338 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17339 if (!msg)
17340 return;
17341
17342 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_UPDATE_OWE_INFO);
17343 if (!hdr)
17344 goto nla_put_failure;
17345
17346 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17347 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17348 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, owe_info->peer))
17349 goto nla_put_failure;
17350
17351 if (!owe_info->ie_len ||
17352 nla_put(msg, NL80211_ATTR_IE, owe_info->ie_len, owe_info->ie))
17353 goto nla_put_failure;
17354
17355 genlmsg_end(msg, hdr);
17356
17357 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17358 NL80211_MCGRP_MLME, gfp);
17359 return;
17360
17361nla_put_failure:
17362 genlmsg_cancel(msg, hdr);
17363 nlmsg_free(msg);
17364}
17365EXPORT_SYMBOL(cfg80211_update_owe_info_event);
17366
55682965
JB		 17367/* initialisation/exit functions */
17368
56989f6d 17369int __init nl80211_init(void)
55682965 17370{
0d63cbb5 17371 int err;
55682965 17372
489111e5 17373 err = genl_register_family(&nl80211_fam);
55682965
JB		 17374 if (err)
17375 return err;
17376
026331c4
JM		 17377 err = netlink_register_notifier(&nl80211_netlink_notifier);
17378 if (err)
17379 goto err_out;
17380
55682965
JB		 17381 return 0;
17382 err_out:
17383 genl_unregister_family(&nl80211_fam);
17384 return err;
17385}
17386
17387void nl80211_exit(void)
17388{
026331c4 17389 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 17390 genl_unregister_family(&nl80211_fam);
17391}
Linux 6.x block layer and io_uring tree(s)