projects / linux-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
nl80211: don't return err unconditionally in nl80211_start_ap()
[linux-block.git] / net / wireless / nl80211.c
CommitLineData
457c8996 1// SPDX-License-Identifier: GPL-2.0-only
55682965
JB		 2/*
3 * This is the new netlink-based wireless configuration interface.
4 *
026331c4 5 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
2740f0cf 6 * Copyright 2013-2014 Intel Mobile Communications GmbH
66cd794e 7 * Copyright 2015-2017 Intel Deutschland GmbH
7e8d6f12 8 * Copyright (C) 2018-2020 Intel Corporation
55682965
JB		 9 */
10
11#include <linux/if.h>
12#include <linux/module.h>
13#include <linux/err.h>
5a0e3ad6 14#include <linux/slab.h>
55682965
JB		 15#include <linux/list.h>
16#include <linux/if_ether.h>
17#include <linux/ieee80211.h>
18#include <linux/nl80211.h>
19#include <linux/rtnetlink.h>
20#include <linux/netlink.h>
259d8c1e 21#include <linux/nospec.h>
2a519311 22#include <linux/etherdevice.h>
e3ae39ed 23#include <linux/if_vlan.h>
463d0183 24#include <net/net_namespace.h>
55682965
JB		 25#include <net/genetlink.h>
26#include <net/cfg80211.h>
463d0183 27#include <net/sock.h>
2a0e047e 28#include <net/inet_connection_sock.h>
55682965
JB		 29#include "core.h"
30#include "nl80211.h"
b2e1b302 31#include "reg.h"
e35e4d28 32#include "rdev-ops.h"
55682965 33
5fb628e9
JM		 34static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
35 struct genl_info *info,
36 struct cfg80211_crypto_settings *settings,
37 int cipher_limit);
38
55682965 39/* the netlink family */
489111e5 40static struct genl_family nl80211_fam;
55682965 41
2a94fe48
JB		 42/* multicast groups */
43enum nl80211_multicast_groups {
44 NL80211_MCGRP_CONFIG,
45 NL80211_MCGRP_SCAN,
46 NL80211_MCGRP_REGULATORY,
47 NL80211_MCGRP_MLME,
567ffc35 48 NL80211_MCGRP_VENDOR,
50bcd31d 49 NL80211_MCGRP_NAN,
2a94fe48
JB		 50 NL80211_MCGRP_TESTMODE /* keep last - ifdef! */
51};
52
53static const struct genl_multicast_group nl80211_mcgrps[] = {
71b836ec
JB		 54 [NL80211_MCGRP_CONFIG] = { .name = NL80211_MULTICAST_GROUP_CONFIG },
55 [NL80211_MCGRP_SCAN] = { .name = NL80211_MULTICAST_GROUP_SCAN },
56 [NL80211_MCGRP_REGULATORY] = { .name = NL80211_MULTICAST_GROUP_REG },
57 [NL80211_MCGRP_MLME] = { .name = NL80211_MULTICAST_GROUP_MLME },
58 [NL80211_MCGRP_VENDOR] = { .name = NL80211_MULTICAST_GROUP_VENDOR },
50bcd31d 59 [NL80211_MCGRP_NAN] = { .name = NL80211_MULTICAST_GROUP_NAN },
2a94fe48 60#ifdef CONFIG_NL80211_TESTMODE
71b836ec 61 [NL80211_MCGRP_TESTMODE] = { .name = NL80211_MULTICAST_GROUP_TESTMODE }
2a94fe48
JB		 62#endif
63};
64
89a54e48
JB		 65/* returns ERR_PTR values */
66static struct wireless_dev *
67__cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
55682965 68{
89a54e48
JB		 69 struct cfg80211_registered_device *rdev;
70 struct wireless_dev *result = NULL;
71 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
72 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
73 u64 wdev_id;
74 int wiphy_idx = -1;
75 int ifidx = -1;
55682965 76
5fe231e8 77 ASSERT_RTNL();
55682965 78
89a54e48
JB		 79 if (!have_ifidx && !have_wdev_id)
80 return ERR_PTR(-EINVAL);
55682965 81
89a54e48
JB		 82 if (have_ifidx)
83 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
84 if (have_wdev_id) {
85 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
86 wiphy_idx = wdev_id >> 32;
55682965
JB		 87 }
88
89a54e48
JB		 89 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
90 struct wireless_dev *wdev;
91
92 if (wiphy_net(&rdev->wiphy) != netns)
93 continue;
94
95 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
96 continue;
97
53873f13 98 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
89a54e48
JB		 99 if (have_ifidx && wdev->netdev &&
100 wdev->netdev->ifindex == ifidx) {
101 result = wdev;
102 break;
103 }
104 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
105 result = wdev;
106 break;
107 }
108 }
89a54e48
JB		 109
110 if (result)
111 break;
112 }
113
114 if (result)
115 return result;
116 return ERR_PTR(-ENODEV);
55682965
JB		 117}
118
a9455408 119static struct cfg80211_registered_device *
878d9ec7 120__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 121{
7fee4778
JB		 122 struct cfg80211_registered_device *rdev = NULL, *tmp;
123 struct net_device *netdev;
a9455408 124
5fe231e8 125 ASSERT_RTNL();
a9455408 126
878d9ec7 127 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 128 !attrs[NL80211_ATTR_IFINDEX] &&
129 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 130 return ERR_PTR(-EINVAL);
131
878d9ec7 132 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 133 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 134 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 135
89a54e48
JB		 136 if (attrs[NL80211_ATTR_WDEV]) {
137 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
138 struct wireless_dev *wdev;
139 bool found = false;
140
141 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
142 if (tmp) {
143 /* make sure wdev exists */
53873f13 144 list_for_each_entry(wdev, &tmp->wiphy.wdev_list, list) {
89a54e48
JB		 145 if (wdev->identifier != (u32)wdev_id)
146 continue;
147 found = true;
148 break;
149 }
89a54e48
JB		 150
151 if (!found)
152 tmp = NULL;
153
154 if (rdev && tmp != rdev)
155 return ERR_PTR(-EINVAL);
156 rdev = tmp;
157 }
158 }
159
878d9ec7
JB		 160 if (attrs[NL80211_ATTR_IFINDEX]) {
161 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
7a087e74 162
7f2b8562 163 netdev = __dev_get_by_index(netns, ifindex);
7fee4778
JB		 164 if (netdev) {
165 if (netdev->ieee80211_ptr)
f26cbf40
ZG		 166 tmp = wiphy_to_rdev(
167 netdev->ieee80211_ptr->wiphy);
7fee4778
JB		 168 else
169 tmp = NULL;
170
7fee4778
JB		 171 /* not wireless device -- return error */
172 if (!tmp)
173 return ERR_PTR(-EINVAL);
174
175 /* mismatch -- return error */
176 if (rdev && tmp != rdev)
177 return ERR_PTR(-EINVAL);
178
179 rdev = tmp;
a9455408 180 }
a9455408 181 }
a9455408 182
4f7eff10
JB		 183 if (!rdev)
184 return ERR_PTR(-ENODEV);
a9455408 185
4f7eff10
JB		 186 if (netns != wiphy_net(&rdev->wiphy))
187 return ERR_PTR(-ENODEV);
188
189 return rdev;
a9455408
JB		 190}
191
192/*
193 * This function returns a pointer to the driver
194 * that the genl_info item that is passed refers to.
a9455408
JB		 195 *
196 * The result of this can be a PTR_ERR and hence must
197 * be checked with IS_ERR() for errors.
198 */
199static struct cfg80211_registered_device *
4f7eff10 200cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408 201{
5fe231e8 202 return __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 203}
204
f88eb7c0
JB		 205static int validate_beacon_head(const struct nlattr *attr,
206 struct netlink_ext_ack *extack)
207{
208 const u8 *data = nla_data(attr);
209 unsigned int len = nla_len(attr);
210 const struct element *elem;
211 const struct ieee80211_mgmt *mgmt = (void *)data;
212 unsigned int fixedlen = offsetof(struct ieee80211_mgmt,
213 u.beacon.variable);
214
215 if (len < fixedlen)
216 goto err;
217
218 if (ieee80211_hdrlen(mgmt->frame_control) !=
219 offsetof(struct ieee80211_mgmt, u.beacon))
220 goto err;
221
222 data += fixedlen;
223 len -= fixedlen;
224
225 for_each_element(elem, data, len) {
226 /* nothing */
227 }
228
229 if (for_each_element_completed(elem, data, len))
230 return 0;
231
232err:
233 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed beacon head");
234 return -EINVAL;
235}
236
3d7af878
JB		 237static int validate_ie_attr(const struct nlattr *attr,
238 struct netlink_ext_ack *extack)
239{
9f308616
JB		 240 const u8 *data = nla_data(attr);
241 unsigned int len = nla_len(attr);
7388afe0 242 const struct element *elem;
3d7af878 243
9f308616
JB		 244 for_each_element(elem, data, len) {
245 /* nothing */
3d7af878
JB		 246 }
247
9f308616
JB		 248 if (for_each_element_completed(elem, data, len))
249 return 0;
250
3d7af878
JB		 251 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed information elements");
252 return -EINVAL;
253}
254
55682965 255/* policy for the attributes */
d15da2a2
JB		 256static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR];
257
81e54d08
PKC		 258static const struct nla_policy
259nl80211_ftm_responder_policy[NL80211_FTM_RESP_ATTR_MAX + 1] = {
260 [NL80211_FTM_RESP_ATTR_ENABLED] = { .type = NLA_FLAG, },
261 [NL80211_FTM_RESP_ATTR_LCI] = { .type = NLA_BINARY,
262 .len = U8_MAX },
263 [NL80211_FTM_RESP_ATTR_CIVICLOC] = { .type = NLA_BINARY,
264 .len = U8_MAX },
265};
266
9bb7e0f2
JB		 267static const struct nla_policy
268nl80211_pmsr_ftm_req_attr_policy[NL80211_PMSR_FTM_REQ_ATTR_MAX + 1] = {
269 [NL80211_PMSR_FTM_REQ_ATTR_ASAP] = { .type = NLA_FLAG },
270 [NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE] = { .type = NLA_U32 },
271 [NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP] =
272 NLA_POLICY_MAX(NLA_U8, 15),
273 [NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD] = { .type = NLA_U16 },
274 [NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION] =
275 NLA_POLICY_MAX(NLA_U8, 15),
276 [NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST] =
ea18709a 277 NLA_POLICY_MAX(NLA_U8, 31),
9bb7e0f2
JB		 278 [NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES] = { .type = NLA_U8 },
279 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI] = { .type = NLA_FLAG },
280 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC] = { .type = NLA_FLAG },
efb5520d
AS		 281 [NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED] = { .type = NLA_FLAG },
282 [NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED] = { .type = NLA_FLAG },
9bb7e0f2
JB		 283};
284
285static const struct nla_policy
286nl80211_pmsr_req_data_policy[NL80211_PMSR_TYPE_MAX + 1] = {
287 [NL80211_PMSR_TYPE_FTM] =
23323289 288 NLA_POLICY_NESTED(nl80211_pmsr_ftm_req_attr_policy),
9bb7e0f2
JB		 289};
290
291static const struct nla_policy
292nl80211_pmsr_req_attr_policy[NL80211_PMSR_REQ_ATTR_MAX + 1] = {
293 [NL80211_PMSR_REQ_ATTR_DATA] =
23323289 294 NLA_POLICY_NESTED(nl80211_pmsr_req_data_policy),
9bb7e0f2
JB		 295 [NL80211_PMSR_REQ_ATTR_GET_AP_TSF] = { .type = NLA_FLAG },
296};
297
298static const struct nla_policy
299nl80211_psmr_peer_attr_policy[NL80211_PMSR_PEER_ATTR_MAX + 1] = {
300 [NL80211_PMSR_PEER_ATTR_ADDR] = NLA_POLICY_ETH_ADDR,
d15da2a2 301 [NL80211_PMSR_PEER_ATTR_CHAN] = NLA_POLICY_NESTED(nl80211_policy),
9bb7e0f2 302 [NL80211_PMSR_PEER_ATTR_REQ] =
23323289 303 NLA_POLICY_NESTED(nl80211_pmsr_req_attr_policy),
9bb7e0f2
JB		 304 [NL80211_PMSR_PEER_ATTR_RESP] = { .type = NLA_REJECT },
305};
306
307static const struct nla_policy
308nl80211_pmsr_attr_policy[NL80211_PMSR_ATTR_MAX + 1] = {
309 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_REJECT },
310 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_REJECT },
311 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_REJECT },
312 [NL80211_PMSR_ATTR_TYPE_CAPA] = { .type = NLA_REJECT },
313 [NL80211_PMSR_ATTR_PEERS] =
23323289 314 NLA_POLICY_NESTED_ARRAY(nl80211_psmr_peer_attr_policy),
9bb7e0f2
JB		 315};
316
796e90f4
JC		 317static const struct nla_policy
318he_obss_pd_policy[NL80211_HE_OBSS_PD_ATTR_MAX + 1] = {
319 [NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] =
320 NLA_POLICY_RANGE(NLA_U8, 1, 20),
321 [NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET] =
322 NLA_POLICY_RANGE(NLA_U8, 1, 20),
323};
324
5c5e52d1
JC		 325static const struct nla_policy
326he_bss_color_policy[NL80211_HE_BSS_COLOR_ATTR_MAX + 1] = {
327 [NL80211_HE_BSS_COLOR_ATTR_COLOR] = NLA_POLICY_RANGE(NLA_U8, 1, 63),
328 [NL80211_HE_BSS_COLOR_ATTR_DISABLED] = { .type = NLA_FLAG },
329 [NL80211_HE_BSS_COLOR_ATTR_PARTIAL] = { .type = NLA_FLAG },
330};
331
9a5f6488
TC		 332static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
333 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
334 .len = NL80211_MAX_SUPP_RATES },
335 [NL80211_TXRATE_HT] = { .type = NLA_BINARY,
336 .len = NL80211_MAX_SUPP_HT_RATES },
337 [NL80211_TXRATE_VHT] = NLA_POLICY_EXACT_LEN_WARN(sizeof(struct nl80211_txrate_vht)),
338 [NL80211_TXRATE_GI] = { .type = NLA_U8 },
339};
340
77f576de
T		 341static const struct nla_policy
342nl80211_tid_config_attr_policy[NL80211_TID_CONFIG_ATTR_MAX + 1] = {
3710a8a6
JB		 343 [NL80211_TID_CONFIG_ATTR_VIF_SUPP] = { .type = NLA_U64 },
344 [NL80211_TID_CONFIG_ATTR_PEER_SUPP] = { .type = NLA_U64 },
77f576de 345 [NL80211_TID_CONFIG_ATTR_OVERRIDE] = { .type = NLA_FLAG },
3710a8a6 346 [NL80211_TID_CONFIG_ATTR_TIDS] = NLA_POLICY_RANGE(NLA_U16, 1, 0xff),
77f576de
T		 347 [NL80211_TID_CONFIG_ATTR_NOACK] =
348 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
6a21d16c
T		 349 [NL80211_TID_CONFIG_ATTR_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
350 [NL80211_TID_CONFIG_ATTR_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
ade274b2
T		 351 [NL80211_TID_CONFIG_ATTR_AMPDU_CTRL] =
352 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
04f7d142
T		 353 [NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL] =
354 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
33462e68
SM		 355 [NL80211_TID_CONFIG_ATTR_AMSDU_CTRL] =
356 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
9a5f6488
TC		 357 [NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE] =
358 NLA_POLICY_MAX(NLA_U8, NL80211_TX_RATE_FIXED),
359 [NL80211_TID_CONFIG_ATTR_TX_RATE] =
360 NLA_POLICY_NESTED(nl80211_txattr_policy),
77f576de
T		 361};
362
d15da2a2 363static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR] = {
6d4dd4ef 364 [0] = { .strict_start_type = NL80211_ATTR_HE_OBSS_PD },
55682965
JB		 365 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
366 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 367 .len = 20-1 },
31888487 368 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
3d9d1d66 369
72bdcf34 370 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 371 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
2a38075c
AAL		 372 [NL80211_ATTR_WIPHY_EDMG_CHANNELS] = NLA_POLICY_RANGE(NLA_U8,
373 NL80211_EDMG_CHANNELS_MIN,
374 NL80211_EDMG_CHANNELS_MAX),
375 [NL80211_ATTR_WIPHY_EDMG_BW_CONFIG] = NLA_POLICY_RANGE(NLA_U8,
376 NL80211_EDMG_BW_CONFIG_MIN,
377 NL80211_EDMG_BW_CONFIG_MAX),
378
3d9d1d66
JB		 379 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
380 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
942ba88b 381 [NL80211_ATTR_CENTER_FREQ1_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
3d9d1d66
JB		 382 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
383
ab0d76f6
JB		 384 [NL80211_ATTR_WIPHY_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
385 [NL80211_ATTR_WIPHY_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
b9a5f8ca
JM		 386 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
387 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 388 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
3057dbfd 389 [NL80211_ATTR_WIPHY_DYN_ACK] = { .type = NLA_FLAG },
55682965 390
ab0d76f6 391 [NL80211_ATTR_IFTYPE] = NLA_POLICY_MAX(NLA_U32, NL80211_IFTYPE_MAX),
55682965
JB		 392 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
393 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 394
c7721c05
JB		 395 [NL80211_ATTR_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
396 [NL80211_ATTR_PREV_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
41ade00f 397
b9454e83 398 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 399 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
400 .len = WLAN_MAX_KEY_LEN },
56be393f 401 [NL80211_ATTR_KEY_IDX] = NLA_POLICY_MAX(NLA_U8, 7),
41ade00f
JB		 402 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
403 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 404 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
ab0d76f6
JB		 405 [NL80211_ATTR_KEY_TYPE] =
406 NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES),
ed1b6cc7
JB		 407
408 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
409 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
f88eb7c0
JB		 410 [NL80211_ATTR_BEACON_HEAD] =
411 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_beacon_head,
412 IEEE80211_MAX_DATA_LEN),
3d7af878
JB		 413 [NL80211_ATTR_BEACON_TAIL] =
414 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
415 IEEE80211_MAX_DATA_LEN),
ab0d76f6
JB		 416 [NL80211_ATTR_STA_AID] =
417 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
5727ef1b
JB		 418 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
419 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
420 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
421 .len = NL80211_MAX_SUPP_RATES },
ab0d76f6
JB		 422 [NL80211_ATTR_STA_PLINK_ACTION] =
423 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_ACTIONS - 1),
e96d1cd2
ARN		 424 [NL80211_ATTR_STA_TX_POWER_SETTING] =
425 NLA_POLICY_RANGE(NLA_U8,
426 NL80211_TX_POWER_AUTOMATIC,
427 NL80211_TX_POWER_FIXED),
428 [NL80211_ATTR_STA_TX_POWER] = { .type = NLA_S16 },
5727ef1b 429 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 430 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 431 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 432 .len = IEEE80211_MAX_MESH_ID_LEN },
1fab1b89 433 [NL80211_ATTR_MPATH_NEXT_HOP] = NLA_POLICY_ETH_ADDR_COMPAT,
9f1ba906 434
b2e1b302
LR		 435 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
436 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
437
9f1ba906
JM		 438 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
439 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
440 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 441 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
442 .len = NL80211_MAX_SUPP_RATES },
50b12f59 443 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 444
24bdd9f4 445 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 446 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 447
c7721c05 448 [NL80211_ATTR_HT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_HT_CAPABILITY_LEN),
9aed3cc1
JM		 449
450 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
3d7af878
JB		 451 [NL80211_ATTR_IE] = NLA_POLICY_VALIDATE_FN(NLA_BINARY,
452 validate_ie_attr,
453 IEEE80211_MAX_DATA_LEN),
2a519311
JB		 454 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
455 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 456
457 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
458 .len = IEEE80211_MAX_SSID_LEN },
459 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
460 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 461 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 462 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
ab0d76f6
JB		 463 [NL80211_ATTR_USE_MFP] = NLA_POLICY_RANGE(NLA_U32,
464 NL80211_MFP_NO,
465 NL80211_MFP_OPTIONAL),
eccb8e8f
JB		 466 [NL80211_ATTR_STA_FLAGS2] = {
467 .len = sizeof(struct nl80211_sta_flag_update),
468 },
3f77316c 469 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 470 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
471 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
64bf3d4b 472 [NL80211_ATTR_CONTROL_PORT_OVER_NL80211] = { .type = NLA_FLAG },
b23aa676 473 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
ea750801 474 [NL80211_ATTR_STATUS_CODE] = { .type = NLA_U16 },
b23aa676
SO		 475 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
476 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 477 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 478 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
c7721c05 479 [NL80211_ATTR_PMKID] = NLA_POLICY_EXACT_LEN_WARN(WLAN_PMKID_LEN),
9588bbd5
JM		 480 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
481 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 482 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 483 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
484 .len = IEEE80211_MAX_DATA_LEN },
485 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ab0d76f6
JB		 486 [NL80211_ATTR_PS_STATE] = NLA_POLICY_RANGE(NLA_U32,
487 NL80211_PS_DISABLED,
488 NL80211_PS_ENABLED),
d6dc1a38 489 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 490 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 491 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 492 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
493 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 494 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 495 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
496 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 497 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 498 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 499 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 500 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
ab0d76f6
JB		 501 [NL80211_ATTR_STA_PLINK_STATE] =
502 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_STATES - 1),
056e9375
JK		 503 [NL80211_ATTR_MEASUREMENT_DURATION] = { .type = NLA_U16 },
504 [NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY] = { .type = NLA_FLAG },
ab0d76f6
JB		 505 [NL80211_ATTR_MESH_PEER_AID] =
506 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
bbe6ad6d 507 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 508 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 509 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
ab0d76f6
JB		 510 [NL80211_ATTR_HIDDEN_SSID] =
511 NLA_POLICY_RANGE(NLA_U32,
512 NL80211_HIDDEN_SSID_NOT_IN_USE,
513 NL80211_HIDDEN_SSID_ZERO_CONTENTS),
3d7af878
JB		 514 [NL80211_ATTR_IE_PROBE_RESP] =
515 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
516 IEEE80211_MAX_DATA_LEN),
517 [NL80211_ATTR_IE_ASSOC_RESP] =
518 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
519 IEEE80211_MAX_DATA_LEN),
f4b34b55 520 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 521 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 522 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 523 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
524 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
525 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
526 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
527 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
31fa97c5 528 [NL80211_ATTR_TDLS_INITIATOR] = { .type = NLA_FLAG },
e247bd90 529 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 530 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
531 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 532 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 533 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
534 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
535 .len = NL80211_HT_CAPABILITY_LEN
536 },
1d9d9213 537 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 538 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 539 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 540 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 541 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
11b6b5a4 542 [NL80211_ATTR_AUTH_DATA] = { .type = NLA_BINARY, },
c7721c05 543 [NL80211_ATTR_VHT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_VHT_CAPABILITY_LEN),
ed473771 544 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
ab0d76f6
JB		 545 [NL80211_ATTR_P2P_CTWINDOW] = NLA_POLICY_MAX(NLA_U8, 127),
546 [NL80211_ATTR_P2P_OPPPS] = NLA_POLICY_MAX(NLA_U8, 1),
547 [NL80211_ATTR_LOCAL_MESH_POWER_MODE] =
548 NLA_POLICY_RANGE(NLA_U32,
549 NL80211_MESH_POWER_UNKNOWN + 1,
550 NL80211_MESH_POWER_MAX),
77765eaf
VT		 551 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
552 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
9d62a986
JM		 553 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
554 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
3713b4e3 555 [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
ee2aca34
JB		 556 [NL80211_ATTR_DISABLE_VHT] = { .type = NLA_FLAG },
557 [NL80211_ATTR_VHT_CAPABILITY_MASK] = {
558 .len = NL80211_VHT_CAPABILITY_LEN,
559 },
355199e0
JM		 560 [NL80211_ATTR_MDID] = { .type = NLA_U16 },
561 [NL80211_ATTR_IE_RIC] = { .type = NLA_BINARY,
562 .len = IEEE80211_MAX_DATA_LEN },
0e1a1d85
JK		 563 [NL80211_ATTR_CRIT_PROT_ID] = { .type = NLA_U16 },
564 [NL80211_ATTR_MAX_CRIT_PROT_DURATION] = { .type = NLA_U16 },
ab0d76f6
JB		 565 [NL80211_ATTR_PEER_AID] =
566 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
16ef1fe2
SW		 567 [NL80211_ATTR_CH_SWITCH_COUNT] = { .type = NLA_U32 },
568 [NL80211_ATTR_CH_SWITCH_BLOCK_TX] = { .type = NLA_FLAG },
569 [NL80211_ATTR_CSA_IES] = { .type = NLA_NESTED },
9a774c78
AO		 570 [NL80211_ATTR_CSA_C_OFF_BEACON] = { .type = NLA_BINARY },
571 [NL80211_ATTR_CSA_C_OFF_PRESP] = { .type = NLA_BINARY },
c01fc9ad
SD		 572 [NL80211_ATTR_STA_SUPPORTED_CHANNELS] = { .type = NLA_BINARY },
573 [NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES] = { .type = NLA_BINARY },
5336fa88 574 [NL80211_ATTR_HANDLE_DFS] = { .type = NLA_FLAG },
60f4a7b1 575 [NL80211_ATTR_OPMODE_NOTIF] = { .type = NLA_U8 },
ad7e718c
JB		 576 [NL80211_ATTR_VENDOR_ID] = { .type = NLA_U32 },
577 [NL80211_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
578 [NL80211_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
fa9ffc74
KP		 579 [NL80211_ATTR_QOS_MAP] = { .type = NLA_BINARY,
580 .len = IEEE80211_QOS_MAP_LEN_MAX },
c7721c05 581 [NL80211_ATTR_MAC_HINT] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1df4a510 582 [NL80211_ATTR_WIPHY_FREQ_HINT] = { .type = NLA_U32 },
df942e7b 583 [NL80211_ATTR_TDLS_PEER_CAPABILITY] = { .type = NLA_U32 },
18e5ca65 584 [NL80211_ATTR_SOCKET_OWNER] = { .type = NLA_FLAG },
34d22ce2 585 [NL80211_ATTR_CSA_C_OFFSETS_TX] = { .type = NLA_BINARY },
bab5ab7d 586 [NL80211_ATTR_USE_RRM] = { .type = NLA_FLAG },
ab0d76f6
JB		 587 [NL80211_ATTR_TSID] = NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_TIDS - 1),
588 [NL80211_ATTR_USER_PRIO] =
589 NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_UPS - 1),
960d01ac 590 [NL80211_ATTR_ADMITTED_TIME] = { .type = NLA_U16 },
18998c38 591 [NL80211_ATTR_SMPS_MODE] = { .type = NLA_U8 },
5cde05c6 592 [NL80211_ATTR_OPER_CLASS] = { .type = NLA_U8 },
c7721c05 593 [NL80211_ATTR_MAC_MASK] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1bdd716c 594 [NL80211_ATTR_WIPHY_SELF_MANAGED_REG] = { .type = NLA_FLAG },
4b681c82 595 [NL80211_ATTR_NETNS_FD] = { .type = NLA_U32 },
9c748934 596 [NL80211_ATTR_SCHED_SCAN_DELAY] = { .type = NLA_U32 },
05050753 597 [NL80211_ATTR_REG_INDOOR] = { .type = NLA_FLAG },
34d50519 598 [NL80211_ATTR_PBSS] = { .type = NLA_FLAG },
38de03d2 599 [NL80211_ATTR_BSS_SELECT] = { .type = NLA_NESTED },
ab0d76f6
JB		 600 [NL80211_ATTR_STA_SUPPORT_P2P_PS] =
601 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_P2P_PS_STATUS - 1),
c6e6a0c8
AE		 602 [NL80211_ATTR_MU_MIMO_GROUP_DATA] = {
603 .len = VHT_MUMIMO_GROUPS_DATA_LEN
604 },
c7721c05 605 [NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
ab0d76f6 606 [NL80211_ATTR_NAN_MASTER_PREF] = NLA_POLICY_MIN(NLA_U8, 1),
8585989d 607 [NL80211_ATTR_BANDS] = { .type = NLA_U32 },
a442b761 608 [NL80211_ATTR_NAN_FUNC] = { .type = NLA_NESTED },
348bd456
JM		 609 [NL80211_ATTR_FILS_KEK] = { .type = NLA_BINARY,
610 .len = FILS_MAX_KEK_LEN },
c7721c05 611 [NL80211_ATTR_FILS_NONCES] = NLA_POLICY_EXACT_LEN_WARN(2 * FILS_NONCE_LEN),
ce0ce13a 612 [NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED] = { .type = NLA_FLAG, },
c7721c05 613 [NL80211_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
bf95ecdb 614 [NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] = { .type = NLA_S8 },
615 [NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST] = {
616 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
617 },
3093ebbe 618 [NL80211_ATTR_TIMEOUT_REASON] = { .type = NLA_U32 },
a3caf744
VK		 619 [NL80211_ATTR_FILS_ERP_USERNAME] = { .type = NLA_BINARY,
620 .len = FILS_ERP_MAX_USERNAME_LEN },
621 [NL80211_ATTR_FILS_ERP_REALM] = { .type = NLA_BINARY,
622 .len = FILS_ERP_MAX_REALM_LEN },
623 [NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] = { .type = NLA_U16 },
624 [NL80211_ATTR_FILS_ERP_RRK] = { .type = NLA_BINARY,
625 .len = FILS_ERP_MAX_RRK_LEN },
c7721c05 626 [NL80211_ATTR_FILS_CACHE_ID] = NLA_POLICY_EXACT_LEN_WARN(2),
a3caf744 627 [NL80211_ATTR_PMK] = { .type = NLA_BINARY, .len = PMK_MAX_LEN },
ca986ad9 628 [NL80211_ATTR_SCHED_SCAN_MULTI] = { .type = NLA_FLAG },
40cbfa90 629 [NL80211_ATTR_EXTERNAL_AUTH_SUPPORT] = { .type = NLA_FLAG },
52539ca8
THJ		 630
631 [NL80211_ATTR_TXQ_LIMIT] = { .type = NLA_U32 },
632 [NL80211_ATTR_TXQ_MEMORY_LIMIT] = { .type = NLA_U32 },
633 [NL80211_ATTR_TXQ_QUANTUM] = { .type = NLA_U32 },
c4cbaf79
LC		 634 [NL80211_ATTR_HE_CAPABILITY] = { .type = NLA_BINARY,
635 .len = NL80211_HE_MAX_CAPABILITY_LEN },
81e54d08 636
0e012b4e
JB		 637 [NL80211_ATTR_FTM_RESPONDER] =
638 NLA_POLICY_NESTED(nl80211_ftm_responder_policy),
9bb7e0f2
JB		 639 [NL80211_ATTR_TIMEOUT] = NLA_POLICY_MIN(NLA_U32, 1),
640 [NL80211_ATTR_PEER_MEASUREMENTS] =
23323289 641 NLA_POLICY_NESTED(nl80211_pmsr_attr_policy),
36647055 642 [NL80211_ATTR_AIRTIME_WEIGHT] = NLA_POLICY_MIN(NLA_U16, 1),
26f7044e
CHH		 643 [NL80211_ATTR_SAE_PASSWORD] = { .type = NLA_BINARY,
644 .len = SAE_PASSWORD_MAX_LEN },
a0de1ca3 645 [NL80211_ATTR_TWT_RESPONDER] = { .type = NLA_FLAG },
796e90f4 646 [NL80211_ATTR_HE_OBSS_PD] = NLA_POLICY_NESTED(he_obss_pd_policy),
14f34e36 647 [NL80211_ATTR_VLAN_ID] = NLA_POLICY_RANGE(NLA_U16, 1, VLAN_N_VID - 2),
5c5e52d1 648 [NL80211_ATTR_HE_BSS_COLOR] = NLA_POLICY_NESTED(he_bss_color_policy),
77f576de
T		 649 [NL80211_ATTR_TID_CONFIG] =
650 NLA_POLICY_NESTED_ARRAY(nl80211_tid_config_attr_policy),
5631d96a 651 [NL80211_ATTR_CONTROL_PORT_NO_PREAUTH] = { .type = NLA_FLAG },
7fc82af8
VJ		 652 [NL80211_ATTR_PMK_LIFETIME] = NLA_POLICY_MIN(NLA_U32, 1),
653 [NL80211_ATTR_PMK_REAUTH_THRESHOLD] = NLA_POLICY_RANGE(NLA_U8, 1, 100),
9dba48a6 654 [NL80211_ATTR_RECEIVE_MULTICAST] = { .type = NLA_FLAG },
942ba88b 655 [NL80211_ATTR_WIPHY_FREQ_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
2032f3b2 656 [NL80211_ATTR_SCAN_FREQ_KHZ] = { .type = NLA_NESTED },
43e64bf3
RM		 657 [NL80211_ATTR_HE_6GHZ_CAPABILITY] = {
658 .type = NLA_EXACT_LEN,
659 .len = sizeof(struct ieee80211_he_6ghz_capa),
660 },
55682965
JB		 661};
662
e31b8213 663/* policy for the key attributes */
b54452b0 664static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 665 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 666 [NL80211_KEY_IDX] = { .type = NLA_U8 },
667 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 668 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 669 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
670 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
ab0d76f6 671 [NL80211_KEY_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES - 1),
dbd2fd65 672 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
6cdd3979 673 [NL80211_KEY_MODE] = NLA_POLICY_RANGE(NLA_U8, 0, NL80211_KEY_SET_TX),
dbd2fd65
JB		 674};
675
676/* policy for the key default flags */
677static const struct nla_policy
678nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
679 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
680 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 681};
682
f83ace3b 683#ifdef CONFIG_PM
ff1b6e69
JB		 684/* policy for WoWLAN attributes */
685static const struct nla_policy
686nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
687 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
688 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
689 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
690 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 691 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
692 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
693 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
694 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
2a0e047e 695 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
8cd4d456 696 [NL80211_WOWLAN_TRIG_NET_DETECT] = { .type = NLA_NESTED },
2a0e047e
JB		 697};
698
699static const struct nla_policy
700nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
701 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
702 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
c7721c05 703 [NL80211_WOWLAN_TCP_DST_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
2a0e047e
JB		 704 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
705 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
1a28ed21 706 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = { .type = NLA_MIN_LEN, .len = 1 },
2a0e047e
JB		 707 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
708 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
709 },
710 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
711 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
712 },
713 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
1a28ed21
JB		 714 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = { .type = NLA_MIN_LEN, .len = 1 },
715 [NL80211_WOWLAN_TCP_WAKE_MASK] = { .type = NLA_MIN_LEN, .len = 1 },
ff1b6e69 716};
f83ace3b 717#endif /* CONFIG_PM */
ff1b6e69 718
be29b99a
AK		 719/* policy for coalesce rule attributes */
720static const struct nla_policy
721nl80211_coalesce_policy[NUM_NL80211_ATTR_COALESCE_RULE] = {
722 [NL80211_ATTR_COALESCE_RULE_DELAY] = { .type = NLA_U32 },
ab0d76f6
JB		 723 [NL80211_ATTR_COALESCE_RULE_CONDITION] =
724 NLA_POLICY_RANGE(NLA_U32,
725 NL80211_COALESCE_CONDITION_MATCH,
726 NL80211_COALESCE_CONDITION_NO_MATCH),
be29b99a
AK		 727 [NL80211_ATTR_COALESCE_RULE_PKT_PATTERN] = { .type = NLA_NESTED },
728};
729
e5497d76
JB		 730/* policy for GTK rekey offload attributes */
731static const struct nla_policy
732nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
093a48d2
NE		 733 [NL80211_REKEY_DATA_KEK] = {
734 .type = NLA_BINARY,
735 .len = NL80211_KEK_EXT_LEN
736 },
737 [NL80211_REKEY_DATA_KCK] = {
738 .type = NLA_BINARY,
739 .len = NL80211_KCK_EXT_LEN
740 },
c7721c05 741 [NL80211_REKEY_DATA_REPLAY_CTR] = NLA_POLICY_EXACT_LEN_WARN(NL80211_REPLAY_CTR_LEN),
093a48d2 742 [NL80211_REKEY_DATA_AKM] = { .type = NLA_U32 },
e5497d76
JB		 743};
744
1e1b11b6 745static const struct nla_policy
746nl80211_match_band_rssi_policy[NUM_NL80211_BANDS] = {
747 [NL80211_BAND_2GHZ] = { .type = NLA_S32 },
748 [NL80211_BAND_5GHZ] = { .type = NLA_S32 },
e548a1c3 749 [NL80211_BAND_6GHZ] = { .type = NLA_S32 },
1e1b11b6 750 [NL80211_BAND_60GHZ] = { .type = NLA_S32 },
751};
752
a1f1c21c
LC		 753static const struct nla_policy
754nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 755 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 756 .len = IEEE80211_MAX_SSID_LEN },
c7721c05 757 [NL80211_SCHED_SCAN_MATCH_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
88e920b4 758 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
1e1b11b6 759 [NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI] =
760 NLA_POLICY_NESTED(nl80211_match_band_rssi_policy),
a1f1c21c
LC		 761};
762
3b06d277
AS		 763static const struct nla_policy
764nl80211_plan_policy[NL80211_SCHED_SCAN_PLAN_MAX + 1] = {
765 [NL80211_SCHED_SCAN_PLAN_INTERVAL] = { .type = NLA_U32 },
766 [NL80211_SCHED_SCAN_PLAN_ITERATIONS] = { .type = NLA_U32 },
767};
768
38de03d2
AS		 769static const struct nla_policy
770nl80211_bss_select_policy[NL80211_BSS_SELECT_ATTR_MAX + 1] = {
771 [NL80211_BSS_SELECT_ATTR_RSSI] = { .type = NLA_FLAG },
772 [NL80211_BSS_SELECT_ATTR_BAND_PREF] = { .type = NLA_U32 },
773 [NL80211_BSS_SELECT_ATTR_RSSI_ADJUST] = {
774 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
775 },
776};
777
a442b761
AB		 778/* policy for NAN function attributes */
779static const struct nla_policy
780nl80211_nan_func_policy[NL80211_NAN_FUNC_ATTR_MAX + 1] = {
781 [NL80211_NAN_FUNC_TYPE] = { .type = NLA_U8 },
0a27844c 782 [NL80211_NAN_FUNC_SERVICE_ID] = {
a442b761
AB		 783 .len = NL80211_NAN_FUNC_SERVICE_ID_LEN },
784 [NL80211_NAN_FUNC_PUBLISH_TYPE] = { .type = NLA_U8 },
785 [NL80211_NAN_FUNC_PUBLISH_BCAST] = { .type = NLA_FLAG },
786 [NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE] = { .type = NLA_FLAG },
787 [NL80211_NAN_FUNC_FOLLOW_UP_ID] = { .type = NLA_U8 },
788 [NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] = { .type = NLA_U8 },
c7721c05 789 [NL80211_NAN_FUNC_FOLLOW_UP_DEST] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
a442b761
AB		 790 [NL80211_NAN_FUNC_CLOSE_RANGE] = { .type = NLA_FLAG },
791 [NL80211_NAN_FUNC_TTL] = { .type = NLA_U32 },
792 [NL80211_NAN_FUNC_SERVICE_INFO] = { .type = NLA_BINARY,
793 .len = NL80211_NAN_FUNC_SERVICE_SPEC_INFO_MAX_LEN },
794 [NL80211_NAN_FUNC_SRF] = { .type = NLA_NESTED },
795 [NL80211_NAN_FUNC_RX_MATCH_FILTER] = { .type = NLA_NESTED },
796 [NL80211_NAN_FUNC_TX_MATCH_FILTER] = { .type = NLA_NESTED },
797 [NL80211_NAN_FUNC_INSTANCE_ID] = { .type = NLA_U8 },
798 [NL80211_NAN_FUNC_TERM_REASON] = { .type = NLA_U8 },
799};
800
801/* policy for Service Response Filter attributes */
802static const struct nla_policy
803nl80211_nan_srf_policy[NL80211_NAN_SRF_ATTR_MAX + 1] = {
804 [NL80211_NAN_SRF_INCLUDE] = { .type = NLA_FLAG },
805 [NL80211_NAN_SRF_BF] = { .type = NLA_BINARY,
806 .len = NL80211_NAN_FUNC_SRF_MAX_LEN },
807 [NL80211_NAN_SRF_BF_IDX] = { .type = NLA_U8 },
808 [NL80211_NAN_SRF_MAC_ADDRS] = { .type = NLA_NESTED },
809};
810
ad670233
PX		 811/* policy for packet pattern attributes */
812static const struct nla_policy
813nl80211_packet_pattern_policy[MAX_NL80211_PKTPAT + 1] = {
814 [NL80211_PKTPAT_MASK] = { .type = NLA_BINARY, },
815 [NL80211_PKTPAT_PATTERN] = { .type = NLA_BINARY, },
816 [NL80211_PKTPAT_OFFSET] = { .type = NLA_U32 },
817};
818
9bb7e0f2
JB		 819int nl80211_prepare_wdev_dump(struct netlink_callback *cb,
820 struct cfg80211_registered_device **rdev,
821 struct wireless_dev **wdev)
a043897a 822{
97990a06 823 int err;
a043897a 824
97990a06 825 if (!cb->args[0]) {
50508d94
JB		 826 struct nlattr **attrbuf;
827
828 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
829 GFP_KERNEL);
830 if (!attrbuf)
831 return -ENOMEM;
832
8cb08174
JB		 833 err = nlmsg_parse_deprecated(cb->nlh,
834 GENL_HDRLEN + nl80211_fam.hdrsize,
50508d94 835 attrbuf, nl80211_fam.maxattr,
8cb08174 836 nl80211_policy, NULL);
50508d94
JB		 837 if (err) {
838 kfree(attrbuf);
ea90e0dc 839 return err;
50508d94 840 }
67748893 841
50508d94
JB		 842 *wdev = __cfg80211_wdev_from_attrs(sock_net(cb->skb->sk),
843 attrbuf);
844 kfree(attrbuf);
ea90e0dc
JB		 845 if (IS_ERR(*wdev))
846 return PTR_ERR(*wdev);
f26cbf40 847 *rdev = wiphy_to_rdev((*wdev)->wiphy);
c319d50b
JB		 848 /* 0 is the first index - add 1 to parse only once */
849 cb->args[0] = (*rdev)->wiphy_idx + 1;
97990a06
JB		 850 cb->args[1] = (*wdev)->identifier;
851 } else {
c319d50b
JB		 852 /* subtract the 1 again here */
853 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
97990a06 854 struct wireless_dev *tmp;
67748893 855
ea90e0dc
JB		 856 if (!wiphy)
857 return -ENODEV;
f26cbf40 858 *rdev = wiphy_to_rdev(wiphy);
97990a06 859 *wdev = NULL;
67748893 860
53873f13 861 list_for_each_entry(tmp, &(*rdev)->wiphy.wdev_list, list) {
97990a06
JB		 862 if (tmp->identifier == cb->args[1]) {
863 *wdev = tmp;
864 break;
865 }
866 }
67748893 867
ea90e0dc
JB		 868 if (!*wdev)
869 return -ENODEV;
67748893
JB		 870 }
871
67748893 872 return 0;
67748893
JB		 873}
874
55682965 875/* message building helper */
9bb7e0f2
JB		 876void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
877 int flags, u8 cmd)
55682965
JB		 878{
879 /* since there is no private header just add the generic one */
15e47304 880 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 881}
882
50f32718
HD		 883static int nl80211_msg_put_wmm_rules(struct sk_buff *msg,
884 const struct ieee80211_reg_rule *rule)
885{
886 int j;
887 struct nlattr *nl_wmm_rules =
ae0be8de 888 nla_nest_start_noflag(msg, NL80211_FREQUENCY_ATTR_WMM);
50f32718
HD		 889
890 if (!nl_wmm_rules)
891 goto nla_put_failure;
892
893 for (j = 0; j < IEEE80211_NUM_ACS; j++) {
ae0be8de 894 struct nlattr *nl_wmm_rule = nla_nest_start_noflag(msg, j);
50f32718
HD		 895
896 if (!nl_wmm_rule)
897 goto nla_put_failure;
898
899 if (nla_put_u16(msg, NL80211_WMMR_CW_MIN,
38cb87ee 900 rule->wmm_rule.client[j].cw_min) ||
50f32718 901 nla_put_u16(msg, NL80211_WMMR_CW_MAX,
38cb87ee 902 rule->wmm_rule.client[j].cw_max) ||
50f32718 903 nla_put_u8(msg, NL80211_WMMR_AIFSN,
38cb87ee 904 rule->wmm_rule.client[j].aifsn) ||
d3c89bbc
HD		 905 nla_put_u16(msg, NL80211_WMMR_TXOP,
906 rule->wmm_rule.client[j].cot))
50f32718
HD		 907 goto nla_put_failure;
908
909 nla_nest_end(msg, nl_wmm_rule);
910 }
911 nla_nest_end(msg, nl_wmm_rules);
912
913 return 0;
914
915nla_put_failure:
916 return -ENOBUFS;
917}
918
919static int nl80211_msg_put_channel(struct sk_buff *msg, struct wiphy *wiphy,
cdc89b97
JB		 920 struct ieee80211_channel *chan,
921 bool large)
5dab3b8a 922{
ea077c1c
RL		 923 /* Some channels must be completely excluded from the
924 * list to protect old user-space tools from breaking
925 */
926 if (!large && chan->flags &
927 (IEEE80211_CHAN_NO_10MHZ | IEEE80211_CHAN_NO_20MHZ))
928 return 0;
929
9360ffd1
DM		 930 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
931 chan->center_freq))
932 goto nla_put_failure;
5dab3b8a 933
942ba88b
TP		 934 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_OFFSET, chan->freq_offset))
935 goto nla_put_failure;
936
9360ffd1
DM		 937 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
938 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
939 goto nla_put_failure;
8fe02e16
LR		 940 if (chan->flags & IEEE80211_CHAN_NO_IR) {
941 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IR))
942 goto nla_put_failure;
943 if (nla_put_flag(msg, __NL80211_FREQUENCY_ATTR_NO_IBSS))
944 goto nla_put_failure;
945 }
cdc89b97
JB		 946 if (chan->flags & IEEE80211_CHAN_RADAR) {
947 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
948 goto nla_put_failure;
949 if (large) {
950 u32 time;
951
952 time = elapsed_jiffies_msecs(chan->dfs_state_entered);
953
954 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
955 chan->dfs_state))
956 goto nla_put_failure;
957 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
958 time))
959 goto nla_put_failure;
089027e5
JD		 960 if (nla_put_u32(msg,
961 NL80211_FREQUENCY_ATTR_DFS_CAC_TIME,
962 chan->dfs_cac_ms))
963 goto nla_put_failure;
cdc89b97
JB		 964 }
965 }
5dab3b8a 966
fe1abafd
JB		 967 if (large) {
968 if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
969 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
970 goto nla_put_failure;
971 if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
972 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
973 goto nla_put_failure;
974 if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
975 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
976 goto nla_put_failure;
977 if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
978 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
979 goto nla_put_failure;
570dbde1
DS		 980 if ((chan->flags & IEEE80211_CHAN_INDOOR_ONLY) &&
981 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_INDOOR_ONLY))
982 goto nla_put_failure;
06f207fc
AN		 983 if ((chan->flags & IEEE80211_CHAN_IR_CONCURRENT) &&
984 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_IR_CONCURRENT))
570dbde1 985 goto nla_put_failure;
ea077c1c
RL		 986 if ((chan->flags & IEEE80211_CHAN_NO_20MHZ) &&
987 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_20MHZ))
988 goto nla_put_failure;
989 if ((chan->flags & IEEE80211_CHAN_NO_10MHZ) &&
990 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_10MHZ))
991 goto nla_put_failure;
1e61d82c
HD		 992 if ((chan->flags & IEEE80211_CHAN_NO_HE) &&
993 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HE))
994 goto nla_put_failure;
fe1abafd
JB		 995 }
996
9360ffd1
DM		 997 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
998 DBM_TO_MBM(chan->max_power)))
999 goto nla_put_failure;
5dab3b8a 1000
50f32718
HD		 1001 if (large) {
1002 const struct ieee80211_reg_rule *rule =
b88d26d9 1003 freq_reg_info(wiphy, MHZ_TO_KHZ(chan->center_freq));
50f32718 1004
38cb87ee 1005 if (!IS_ERR_OR_NULL(rule) && rule->has_wmm) {
50f32718
HD		 1006 if (nl80211_msg_put_wmm_rules(msg, rule))
1007 goto nla_put_failure;
1008 }
1009 }
1010
5dab3b8a
LR		 1011 return 0;
1012
1013 nla_put_failure:
1014 return -ENOBUFS;
1015}
1016
52539ca8
THJ		 1017static bool nl80211_put_txq_stats(struct sk_buff *msg,
1018 struct cfg80211_txq_stats *txqstats,
1019 int attrtype)
1020{
1021 struct nlattr *txqattr;
1022
1023#define PUT_TXQVAL_U32(attr, memb) do { \
1024 if (txqstats->filled & BIT(NL80211_TXQ_STATS_ ## attr) && \
1025 nla_put_u32(msg, NL80211_TXQ_STATS_ ## attr, txqstats->memb)) \
1026 return false; \
1027 } while (0)
1028
ae0be8de 1029 txqattr = nla_nest_start_noflag(msg, attrtype);
52539ca8
THJ		 1030 if (!txqattr)
1031 return false;
1032
1033 PUT_TXQVAL_U32(BACKLOG_BYTES, backlog_bytes);
1034 PUT_TXQVAL_U32(BACKLOG_PACKETS, backlog_packets);
1035 PUT_TXQVAL_U32(FLOWS, flows);
1036 PUT_TXQVAL_U32(DROPS, drops);
1037 PUT_TXQVAL_U32(ECN_MARKS, ecn_marks);
1038 PUT_TXQVAL_U32(OVERLIMIT, overlimit);
1039 PUT_TXQVAL_U32(OVERMEMORY, overmemory);
1040 PUT_TXQVAL_U32(COLLISIONS, collisions);
1041 PUT_TXQVAL_U32(TX_BYTES, tx_bytes);
1042 PUT_TXQVAL_U32(TX_PACKETS, tx_packets);
1043 PUT_TXQVAL_U32(MAX_FLOWS, max_flows);
1044 nla_nest_end(msg, txqattr);
1045
1046#undef PUT_TXQVAL_U32
1047 return true;
1048}
1049
55682965
JB		 1050/* netlink command implementations */
1051
b9454e83
JB		 1052struct key_parse {
1053 struct key_params p;
1054 int idx;
e31b8213 1055 int type;
56be393f 1056 bool def, defmgmt, defbeacon;
dbd2fd65 1057 bool def_uni, def_multi;
b9454e83
JB		 1058};
1059
768075eb
JB		 1060static int nl80211_parse_key_new(struct genl_info *info, struct nlattr *key,
1061 struct key_parse *k)
b9454e83
JB		 1062{
1063 struct nlattr *tb[NL80211_KEY_MAX + 1];
8cb08174
JB		 1064 int err = nla_parse_nested_deprecated(tb, NL80211_KEY_MAX, key,
1065 nl80211_key_policy,
1066 info->extack);
b9454e83
JB		 1067 if (err)
1068 return err;
1069
1070 k->def = !!tb[NL80211_KEY_DEFAULT];
1071 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
56be393f 1072 k->defbeacon = !!tb[NL80211_KEY_DEFAULT_BEACON];
b9454e83 1073
dbd2fd65
JB		 1074 if (k->def) {
1075 k->def_uni = true;
1076 k->def_multi = true;
1077 }
56be393f 1078 if (k->defmgmt || k->defbeacon)
dbd2fd65
JB		 1079 k->def_multi = true;
1080
b9454e83
JB		 1081 if (tb[NL80211_KEY_IDX])
1082 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
1083
1084 if (tb[NL80211_KEY_DATA]) {
1085 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
1086 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
1087 }
1088
1089 if (tb[NL80211_KEY_SEQ]) {
1090 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
1091 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
1092 }
1093
1094 if (tb[NL80211_KEY_CIPHER])
1095 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
1096
ab0d76f6 1097 if (tb[NL80211_KEY_TYPE])
e31b8213 1098 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
e31b8213 1099
dbd2fd65
JB		 1100 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
1101 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
7a087e74 1102
8cb08174
JB		 1103 err = nla_parse_nested_deprecated(kdt,
1104 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1105 tb[NL80211_KEY_DEFAULT_TYPES],
1106 nl80211_key_default_policy,
1107 info->extack);
dbd2fd65
JB		 1108 if (err)
1109 return err;
1110
1111 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1112 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1113 }
1114
6cdd3979
AW		 1115 if (tb[NL80211_KEY_MODE])
1116 k->p.mode = nla_get_u8(tb[NL80211_KEY_MODE]);
1117
b9454e83
JB		 1118 return 0;
1119}
1120
1121static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
1122{
1123 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
1124 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
1125 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
1126 }
1127
1128 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
1129 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
1130 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
1131 }
1132
1133 if (info->attrs[NL80211_ATTR_KEY_IDX])
1134 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1135
1136 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
1137 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
1138
1139 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
1140 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
1141
dbd2fd65
JB		 1142 if (k->def) {
1143 k->def_uni = true;
1144 k->def_multi = true;
1145 }
1146 if (k->defmgmt)
1147 k->def_multi = true;
1148
ab0d76f6 1149 if (info->attrs[NL80211_ATTR_KEY_TYPE])
e31b8213 1150 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
e31b8213 1151
dbd2fd65
JB		 1152 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
1153 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
8cb08174
JB		 1154 int err = nla_parse_nested_deprecated(kdt,
1155 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1156 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
1157 nl80211_key_default_policy,
1158 info->extack);
dbd2fd65
JB		 1159 if (err)
1160 return err;
1161
1162 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1163 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1164 }
1165
b9454e83
JB		 1166 return 0;
1167}
1168
1169static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
1170{
1171 int err;
1172
1173 memset(k, 0, sizeof(*k));
1174 k->idx = -1;
e31b8213 1175 k->type = -1;
b9454e83
JB		 1176
1177 if (info->attrs[NL80211_ATTR_KEY])
768075eb 1178 err = nl80211_parse_key_new(info, info->attrs[NL80211_ATTR_KEY], k);
b9454e83
JB		 1179 else
1180 err = nl80211_parse_key_old(info, k);
1181
1182 if (err)
1183 return err;
1184
56be393f
JM		 1185 if ((k->def ? 1 : 0) + (k->defmgmt ? 1 : 0) +
1186 (k->defbeacon ? 1 : 0) > 1) {
1187 GENL_SET_ERR_MSG(info,
1188 "key with multiple default flags is invalid");
b9454e83 1189 return -EINVAL;
768075eb 1190 }
b9454e83 1191
56be393f 1192 if (k->defmgmt || k->defbeacon) {
768075eb 1193 if (k->def_uni || !k->def_multi) {
56be393f
JM		 1194 GENL_SET_ERR_MSG(info,
1195 "defmgmt/defbeacon key must be mcast");
dbd2fd65 1196 return -EINVAL;
768075eb 1197 }
dbd2fd65
JB		 1198 }
1199
b9454e83
JB		 1200 if (k->idx != -1) {
1201 if (k->defmgmt) {
768075eb
JB		 1202 if (k->idx < 4 || k->idx > 5) {
1203 GENL_SET_ERR_MSG(info,
1204 "defmgmt key idx not 4 or 5");
b9454e83 1205 return -EINVAL;
768075eb 1206 }
56be393f
JM		 1207 } else if (k->defbeacon) {
1208 if (k->idx < 6 || k->idx > 7) {
1209 GENL_SET_ERR_MSG(info,
1210 "defbeacon key idx not 6 or 7");
1211 return -EINVAL;
1212 }
b9454e83 1213 } else if (k->def) {
768075eb
JB		 1214 if (k->idx < 0 || k->idx > 3) {
1215 GENL_SET_ERR_MSG(info, "def key idx not 0-3");
b9454e83 1216 return -EINVAL;
768075eb 1217 }
b9454e83 1218 } else {
56be393f
JM		 1219 if (k->idx < 0 || k->idx > 7) {
1220 GENL_SET_ERR_MSG(info, "key idx not 0-7");
b9454e83 1221 return -EINVAL;
768075eb 1222 }
b9454e83
JB		 1223 }
1224 }
1225
1226 return 0;
1227}
1228
fffd0934
JB		 1229static struct cfg80211_cached_keys *
1230nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
768075eb 1231 struct genl_info *info, bool *no_ht)
fffd0934 1232{
768075eb 1233 struct nlattr *keys = info->attrs[NL80211_ATTR_KEYS];
fffd0934
JB		 1234 struct key_parse parse;
1235 struct nlattr *key;
1236 struct cfg80211_cached_keys *result;
1237 int rem, err, def = 0;
f1c1f17a
JB		 1238 bool have_key = false;
1239
1240 nla_for_each_nested(key, keys, rem) {
1241 have_key = true;
1242 break;
1243 }
1244
1245 if (!have_key)
1246 return NULL;
fffd0934
JB		 1247
1248 result = kzalloc(sizeof(*result), GFP_KERNEL);
1249 if (!result)
1250 return ERR_PTR(-ENOMEM);
1251
1252 result->def = -1;
fffd0934
JB		 1253
1254 nla_for_each_nested(key, keys, rem) {
1255 memset(&parse, 0, sizeof(parse));
1256 parse.idx = -1;
1257
768075eb 1258 err = nl80211_parse_key_new(info, key, &parse);
fffd0934
JB		 1259 if (err)
1260 goto error;
1261 err = -EINVAL;
1262 if (!parse.p.key)
1263 goto error;
768075eb
JB		 1264 if (parse.idx < 0 || parse.idx > 3) {
1265 GENL_SET_ERR_MSG(info, "key index out of range [0-3]");
fffd0934 1266 goto error;
768075eb 1267 }
fffd0934 1268 if (parse.def) {
768075eb
JB		 1269 if (def) {
1270 GENL_SET_ERR_MSG(info,
1271 "only one key can be default");
fffd0934 1272 goto error;
768075eb 1273 }
fffd0934
JB		 1274 def = 1;
1275 result->def = parse.idx;
dbd2fd65
JB		 1276 if (!parse.def_uni || !parse.def_multi)
1277 goto error;
fffd0934
JB		 1278 } else if (parse.defmgmt)
1279 goto error;
1280 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 1281 parse.idx, false, NULL);
fffd0934
JB		 1282 if (err)
1283 goto error;
386b1f27
JB		 1284 if (parse.p.cipher != WLAN_CIPHER_SUITE_WEP40 &&
1285 parse.p.cipher != WLAN_CIPHER_SUITE_WEP104) {
768075eb 1286 GENL_SET_ERR_MSG(info, "connect key must be WEP");
386b1f27
JB		 1287 err = -EINVAL;
1288 goto error;
1289 }
fffd0934
JB		 1290 result->params[parse.idx].cipher = parse.p.cipher;
1291 result->params[parse.idx].key_len = parse.p.key_len;
1292 result->params[parse.idx].key = result->data[parse.idx];
1293 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee 1294
386b1f27
JB		 1295 /* must be WEP key if we got here */
1296 if (no_ht)
1297 *no_ht = true;
fffd0934
JB		 1298 }
1299
f1c1f17a
JB		 1300 if (result->def < 0) {
1301 err = -EINVAL;
768075eb 1302 GENL_SET_ERR_MSG(info, "need a default/TX key");
f1c1f17a
JB		 1303 goto error;
1304 }
1305
fffd0934
JB		 1306 return result;
1307 error:
1308 kfree(result);
1309 return ERR_PTR(err);
1310}
1311
1312static int nl80211_key_allowed(struct wireless_dev *wdev)
1313{
1314 ASSERT_WDEV_LOCK(wdev);
1315
fffd0934
JB		 1316 switch (wdev->iftype) {
1317 case NL80211_IFTYPE_AP:
1318 case NL80211_IFTYPE_AP_VLAN:
074ac8df 1319 case NL80211_IFTYPE_P2P_GO:
ff973af7 1320 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 1321 break;
1322 case NL80211_IFTYPE_ADHOC:
fffd0934 1323 case NL80211_IFTYPE_STATION:
074ac8df 1324 case NL80211_IFTYPE_P2P_CLIENT:
ceca7b71 1325 if (!wdev->current_bss)
fffd0934
JB		 1326 return -ENOLINK;
1327 break;
de4fcbad 1328 case NL80211_IFTYPE_UNSPECIFIED:
6e0bd6c3 1329 case NL80211_IFTYPE_OCB:
de4fcbad 1330 case NL80211_IFTYPE_MONITOR:
cb3b7d87 1331 case NL80211_IFTYPE_NAN:
de4fcbad
JB		 1332 case NL80211_IFTYPE_P2P_DEVICE:
1333 case NL80211_IFTYPE_WDS:
1334 case NUM_NL80211_IFTYPES:
fffd0934
JB		 1335 return -EINVAL;
1336 }
1337
1338 return 0;
1339}
1340
664834de 1341static struct ieee80211_channel *nl80211_get_valid_chan(struct wiphy *wiphy,
942ba88b 1342 u32 freq)
664834de
JM		 1343{
1344 struct ieee80211_channel *chan;
1345
942ba88b 1346 chan = ieee80211_get_channel_khz(wiphy, freq);
664834de
JM		 1347 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
1348 return NULL;
1349 return chan;
1350}
1351
7527a782
JB		 1352static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
1353{
ae0be8de 1354 struct nlattr *nl_modes = nla_nest_start_noflag(msg, attr);
7527a782
JB		 1355 int i;
1356
1357 if (!nl_modes)
1358 goto nla_put_failure;
1359
1360 i = 0;
1361 while (ifmodes) {
9360ffd1
DM		 1362 if ((ifmodes & 1) && nla_put_flag(msg, i))
1363 goto nla_put_failure;
7527a782
JB		 1364 ifmodes >>= 1;
1365 i++;
1366 }
1367
1368 nla_nest_end(msg, nl_modes);
1369 return 0;
1370
1371nla_put_failure:
1372 return -ENOBUFS;
1373}
1374
1375static int nl80211_put_iface_combinations(struct wiphy *wiphy,
cdc89b97
JB		 1376 struct sk_buff *msg,
1377 bool large)
7527a782
JB		 1378{
1379 struct nlattr *nl_combis;
1380 int i, j;
1381
ae0be8de
MK		 1382 nl_combis = nla_nest_start_noflag(msg,
1383 NL80211_ATTR_INTERFACE_COMBINATIONS);
7527a782
JB		 1384 if (!nl_combis)
1385 goto nla_put_failure;
1386
1387 for (i = 0; i < wiphy->n_iface_combinations; i++) {
1388 const struct ieee80211_iface_combination *c;
1389 struct nlattr *nl_combi, *nl_limits;
1390
1391 c = &wiphy->iface_combinations[i];
1392
ae0be8de 1393 nl_combi = nla_nest_start_noflag(msg, i + 1);
7527a782
JB		 1394 if (!nl_combi)
1395 goto nla_put_failure;
1396
ae0be8de
MK		 1397 nl_limits = nla_nest_start_noflag(msg,
1398 NL80211_IFACE_COMB_LIMITS);
7527a782
JB		 1399 if (!nl_limits)
1400 goto nla_put_failure;
1401
1402 for (j = 0; j < c->n_limits; j++) {
1403 struct nlattr *nl_limit;
1404
ae0be8de 1405 nl_limit = nla_nest_start_noflag(msg, j + 1);
7527a782
JB		 1406 if (!nl_limit)
1407 goto nla_put_failure;
9360ffd1
DM		 1408 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
1409 c->limits[j].max))
1410 goto nla_put_failure;
7527a782
JB		 1411 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
1412 c->limits[j].types))
1413 goto nla_put_failure;
1414 nla_nest_end(msg, nl_limit);
1415 }
1416
1417 nla_nest_end(msg, nl_limits);
1418
9360ffd1
DM		 1419 if (c->beacon_int_infra_match &&
1420 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
1421 goto nla_put_failure;
1422 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
1423 c->num_different_channels) ||
1424 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
1425 c->max_interfaces))
1426 goto nla_put_failure;
cdc89b97 1427 if (large &&
8c48b50a
FF		 1428 (nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
1429 c->radar_detect_widths) ||
1430 nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_REGIONS,
1431 c->radar_detect_regions)))
cdc89b97 1432 goto nla_put_failure;
0c317a02
PK		 1433 if (c->beacon_int_min_gcd &&
1434 nla_put_u32(msg, NL80211_IFACE_COMB_BI_MIN_GCD,
1435 c->beacon_int_min_gcd))
1436 goto nla_put_failure;
7527a782
JB		 1437
1438 nla_nest_end(msg, nl_combi);
1439 }
1440
1441 nla_nest_end(msg, nl_combis);
1442
1443 return 0;
1444nla_put_failure:
1445 return -ENOBUFS;
1446}
1447
3713b4e3 1448#ifdef CONFIG_PM
b56cf720
JB		 1449static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
1450 struct sk_buff *msg)
1451{
964dc9e2 1452 const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan->tcp;
b56cf720
JB		 1453 struct nlattr *nl_tcp;
1454
1455 if (!tcp)
1456 return 0;
1457
ae0be8de
MK		 1458 nl_tcp = nla_nest_start_noflag(msg,
1459 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
b56cf720
JB		 1460 if (!nl_tcp)
1461 return -ENOBUFS;
1462
1463 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1464 tcp->data_payload_max))
1465 return -ENOBUFS;
1466
1467 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1468 tcp->data_payload_max))
1469 return -ENOBUFS;
1470
1471 if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
1472 return -ENOBUFS;
1473
1474 if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
1475 sizeof(*tcp->tok), tcp->tok))
1476 return -ENOBUFS;
1477
1478 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
1479 tcp->data_interval_max))
1480 return -ENOBUFS;
1481
1482 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
1483 tcp->wake_payload_max))
1484 return -ENOBUFS;
1485
1486 nla_nest_end(msg, nl_tcp);
1487 return 0;
1488}
1489
3713b4e3 1490static int nl80211_send_wowlan(struct sk_buff *msg,
1b8ec87a 1491 struct cfg80211_registered_device *rdev,
b56cf720 1492 bool large)
55682965 1493{
3713b4e3 1494 struct nlattr *nl_wowlan;
55682965 1495
1b8ec87a 1496 if (!rdev->wiphy.wowlan)
3713b4e3 1497 return 0;
55682965 1498
ae0be8de
MK		 1499 nl_wowlan = nla_nest_start_noflag(msg,
1500 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
3713b4e3
JB		 1501 if (!nl_wowlan)
1502 return -ENOBUFS;
9360ffd1 1503
1b8ec87a 1504 if (((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_ANY) &&
3713b4e3 1505 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1b8ec87a 1506 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_DISCONNECT) &&
3713b4e3 1507 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1b8ec87a 1508 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT) &&
3713b4e3 1509 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1b8ec87a 1510 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
3713b4e3 1511 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1b8ec87a 1512 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
3713b4e3 1513 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1b8ec87a 1514 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
3713b4e3 1515 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1b8ec87a 1516 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
3713b4e3 1517 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1b8ec87a 1518 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
3713b4e3
JB		 1519 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1520 return -ENOBUFS;
9360ffd1 1521
1b8ec87a 1522 if (rdev->wiphy.wowlan->n_patterns) {
50ac6607 1523 struct nl80211_pattern_support pat = {
1b8ec87a
ZG		 1524 .max_patterns = rdev->wiphy.wowlan->n_patterns,
1525 .min_pattern_len = rdev->wiphy.wowlan->pattern_min_len,
1526 .max_pattern_len = rdev->wiphy.wowlan->pattern_max_len,
1527 .max_pkt_offset = rdev->wiphy.wowlan->max_pkt_offset,
3713b4e3 1528 };
9360ffd1 1529
3713b4e3
JB		 1530 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1531 sizeof(pat), &pat))
1532 return -ENOBUFS;
1533 }
9360ffd1 1534
75453ccb
LC		 1535 if ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_NET_DETECT) &&
1536 nla_put_u32(msg, NL80211_WOWLAN_TRIG_NET_DETECT,
1537 rdev->wiphy.wowlan->max_nd_match_sets))
1538 return -ENOBUFS;
1539
1b8ec87a 1540 if (large && nl80211_send_wowlan_tcp_caps(rdev, msg))
b56cf720
JB		 1541 return -ENOBUFS;
1542
3713b4e3 1543 nla_nest_end(msg, nl_wowlan);
9360ffd1 1544
3713b4e3
JB		 1545 return 0;
1546}
1547#endif
9360ffd1 1548
be29b99a 1549static int nl80211_send_coalesce(struct sk_buff *msg,
1b8ec87a 1550 struct cfg80211_registered_device *rdev)
be29b99a
AK		 1551{
1552 struct nl80211_coalesce_rule_support rule;
1553
1b8ec87a 1554 if (!rdev->wiphy.coalesce)
be29b99a
AK		 1555 return 0;
1556
1b8ec87a
ZG		 1557 rule.max_rules = rdev->wiphy.coalesce->n_rules;
1558 rule.max_delay = rdev->wiphy.coalesce->max_delay;
1559 rule.pat.max_patterns = rdev->wiphy.coalesce->n_patterns;
1560 rule.pat.min_pattern_len = rdev->wiphy.coalesce->pattern_min_len;
1561 rule.pat.max_pattern_len = rdev->wiphy.coalesce->pattern_max_len;
1562 rule.pat.max_pkt_offset = rdev->wiphy.coalesce->max_pkt_offset;
be29b99a
AK		 1563
1564 if (nla_put(msg, NL80211_ATTR_COALESCE_RULE, sizeof(rule), &rule))
1565 return -ENOBUFS;
1566
1567 return 0;
1568}
1569
c4cbaf79
LC		 1570static int
1571nl80211_send_iftype_data(struct sk_buff *msg,
22395217 1572 const struct ieee80211_supported_band *sband,
c4cbaf79
LC		 1573 const struct ieee80211_sband_iftype_data *iftdata)
1574{
1575 const struct ieee80211_sta_he_cap *he_cap = &iftdata->he_cap;
1576
1577 if (nl80211_put_iftypes(msg, NL80211_BAND_IFTYPE_ATTR_IFTYPES,
1578 iftdata->types_mask))
1579 return -ENOBUFS;
1580
1581 if (he_cap->has_he) {
1582 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MAC,
1583 sizeof(he_cap->he_cap_elem.mac_cap_info),
1584 he_cap->he_cap_elem.mac_cap_info) ||
1585 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PHY,
1586 sizeof(he_cap->he_cap_elem.phy_cap_info),
1587 he_cap->he_cap_elem.phy_cap_info) ||
1588 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET,
1589 sizeof(he_cap->he_mcs_nss_supp),
1590 &he_cap->he_mcs_nss_supp) ||
1591 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PPE,
1592 sizeof(he_cap->ppe_thres), he_cap->ppe_thres))
1593 return -ENOBUFS;
1594 }
1595
22395217
JB		 1596 if (sband->band == NL80211_BAND_6GHZ &&
1597 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_6GHZ_CAPA,
1598 sizeof(iftdata->he_6ghz_capa),
1599 &iftdata->he_6ghz_capa))
1600 return -ENOBUFS;
1601
c4cbaf79
LC		 1602 return 0;
1603}
1604
3713b4e3
JB		 1605static int nl80211_send_band_rateinfo(struct sk_buff *msg,
1606 struct ieee80211_supported_band *sband)
1607{
1608 struct nlattr *nl_rates, *nl_rate;
1609 struct ieee80211_rate *rate;
1610 int i;
87bbbe22 1611
3713b4e3
JB		 1612 /* add HT info */
1613 if (sband->ht_cap.ht_supported &&
1614 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1615 sizeof(sband->ht_cap.mcs),
1616 &sband->ht_cap.mcs) ||
1617 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1618 sband->ht_cap.cap) ||
1619 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1620 sband->ht_cap.ampdu_factor) ||
1621 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1622 sband->ht_cap.ampdu_density)))
1623 return -ENOBUFS;
afe0cbf8 1624
3713b4e3
JB		 1625 /* add VHT info */
1626 if (sband->vht_cap.vht_supported &&
1627 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1628 sizeof(sband->vht_cap.vht_mcs),
1629 &sband->vht_cap.vht_mcs) ||
1630 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1631 sband->vht_cap.cap)))
1632 return -ENOBUFS;
f59ac048 1633
c4cbaf79
LC		 1634 if (sband->n_iftype_data) {
1635 struct nlattr *nl_iftype_data =
ae0be8de
MK		 1636 nla_nest_start_noflag(msg,
1637 NL80211_BAND_ATTR_IFTYPE_DATA);
c4cbaf79
LC		 1638 int err;
1639
1640 if (!nl_iftype_data)
1641 return -ENOBUFS;
1642
1643 for (i = 0; i < sband->n_iftype_data; i++) {
1644 struct nlattr *iftdata;
1645
ae0be8de 1646 iftdata = nla_nest_start_noflag(msg, i + 1);
c4cbaf79
LC		 1647 if (!iftdata)
1648 return -ENOBUFS;
1649
22395217 1650 err = nl80211_send_iftype_data(msg, sband,
c4cbaf79
LC		 1651 &sband->iftype_data[i]);
1652 if (err)
1653 return err;
1654
1655 nla_nest_end(msg, iftdata);
1656 }
1657
1658 nla_nest_end(msg, nl_iftype_data);
1659 }
1660
2a38075c
AAL		 1661 /* add EDMG info */
1662 if (sband->edmg_cap.channels &&
1663 (nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_CHANNELS,
1664 sband->edmg_cap.channels) ||
1665 nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_BW_CONFIG,
1666 sband->edmg_cap.bw_config)))
1667
1668 return -ENOBUFS;
1669
3713b4e3 1670 /* add bitrates */
ae0be8de 1671 nl_rates = nla_nest_start_noflag(msg, NL80211_BAND_ATTR_RATES);
3713b4e3
JB		 1672 if (!nl_rates)
1673 return -ENOBUFS;
ee688b00 1674
3713b4e3 1675 for (i = 0; i < sband->n_bitrates; i++) {
ae0be8de 1676 nl_rate = nla_nest_start_noflag(msg, i);
3713b4e3
JB		 1677 if (!nl_rate)
1678 return -ENOBUFS;
ee688b00 1679
3713b4e3
JB		 1680 rate = &sband->bitrates[i];
1681 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1682 rate->bitrate))
1683 return -ENOBUFS;
1684 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1685 nla_put_flag(msg,
1686 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1687 return -ENOBUFS;
ee688b00 1688
3713b4e3
JB		 1689 nla_nest_end(msg, nl_rate);
1690 }
d51626df 1691
3713b4e3 1692 nla_nest_end(msg, nl_rates);
bf0c111e 1693
3713b4e3
JB		 1694 return 0;
1695}
ee688b00 1696
3713b4e3
JB		 1697static int
1698nl80211_send_mgmt_stypes(struct sk_buff *msg,
1699 const struct ieee80211_txrx_stypes *mgmt_stypes)
1700{
1701 u16 stypes;
1702 struct nlattr *nl_ftypes, *nl_ifs;
1703 enum nl80211_iftype ift;
1704 int i;
ee688b00 1705
3713b4e3
JB		 1706 if (!mgmt_stypes)
1707 return 0;
5dab3b8a 1708
ae0be8de 1709 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_TX_FRAME_TYPES);
3713b4e3
JB		 1710 if (!nl_ifs)
1711 return -ENOBUFS;
e2f367f2 1712
3713b4e3 1713 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1714 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1715 if (!nl_ftypes)
1716 return -ENOBUFS;
1717 i = 0;
1718 stypes = mgmt_stypes[ift].tx;
1719 while (stypes) {
1720 if ((stypes & 1) &&
1721 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1722 (i << 4) | IEEE80211_FTYPE_MGMT))
1723 return -ENOBUFS;
1724 stypes >>= 1;
1725 i++;
ee688b00 1726 }
3713b4e3
JB		 1727 nla_nest_end(msg, nl_ftypes);
1728 }
ee688b00 1729
3713b4e3 1730 nla_nest_end(msg, nl_ifs);
ee688b00 1731
ae0be8de 1732 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_RX_FRAME_TYPES);
3713b4e3
JB		 1733 if (!nl_ifs)
1734 return -ENOBUFS;
ee688b00 1735
3713b4e3 1736 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1737 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1738 if (!nl_ftypes)
1739 return -ENOBUFS;
1740 i = 0;
1741 stypes = mgmt_stypes[ift].rx;
1742 while (stypes) {
1743 if ((stypes & 1) &&
1744 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1745 (i << 4) | IEEE80211_FTYPE_MGMT))
1746 return -ENOBUFS;
1747 stypes >>= 1;
1748 i++;
1749 }
1750 nla_nest_end(msg, nl_ftypes);
1751 }
1752 nla_nest_end(msg, nl_ifs);
ee688b00 1753
3713b4e3
JB		 1754 return 0;
1755}
ee688b00 1756
1794899e
JB		 1757#define CMD(op, n) \
1758 do { \
1759 if (rdev->ops->op) { \
1760 i++; \
1761 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1762 goto nla_put_failure; \
1763 } \
1764 } while (0)
1765
1766static int nl80211_add_commands_unsplit(struct cfg80211_registered_device *rdev,
1767 struct sk_buff *msg)
1768{
1769 int i = 0;
1770
1771 /*
1772 * do *NOT* add anything into this function, new things need to be
1773 * advertised only to new versions of userspace that can deal with
1774 * the split (and they can't possibly care about new features...
1775 */
1776 CMD(add_virtual_intf, NEW_INTERFACE);
1777 CMD(change_virtual_intf, SET_INTERFACE);
1778 CMD(add_key, NEW_KEY);
1779 CMD(start_ap, START_AP);
1780 CMD(add_station, NEW_STATION);
1781 CMD(add_mpath, NEW_MPATH);
1782 CMD(update_mesh_config, SET_MESH_CONFIG);
1783 CMD(change_bss, SET_BSS);
1784 CMD(auth, AUTHENTICATE);
1785 CMD(assoc, ASSOCIATE);
1786 CMD(deauth, DEAUTHENTICATE);
1787 CMD(disassoc, DISASSOCIATE);
1788 CMD(join_ibss, JOIN_IBSS);
1789 CMD(join_mesh, JOIN_MESH);
1790 CMD(set_pmksa, SET_PMKSA);
1791 CMD(del_pmksa, DEL_PMKSA);
1792 CMD(flush_pmksa, FLUSH_PMKSA);
1793 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1794 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
1795 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
1796 CMD(mgmt_tx, FRAME);
1797 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
1798 if (rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
1799 i++;
1800 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
1801 goto nla_put_failure;
1802 }
1803 if (rdev->ops->set_monitor_channel || rdev->ops->start_ap ||
1804 rdev->ops->join_mesh) {
1805 i++;
1806 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1807 goto nla_put_failure;
1808 }
1809 CMD(set_wds_peer, SET_WDS_PEER);
1810 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1811 CMD(tdls_mgmt, TDLS_MGMT);
1812 CMD(tdls_oper, TDLS_OPER);
1813 }
ca986ad9 1814 if (rdev->wiphy.max_sched_scan_reqs)
1794899e
JB		 1815 CMD(sched_scan_start, START_SCHED_SCAN);
1816 CMD(probe_client, PROBE_CLIENT);
1817 CMD(set_noack_map, SET_NOACK_MAP);
1818 if (rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1819 i++;
1820 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1821 goto nla_put_failure;
1822 }
1823 CMD(start_p2p_device, START_P2P_DEVICE);
1824 CMD(set_mcast_rate, SET_MCAST_RATE);
1825#ifdef CONFIG_NL80211_TESTMODE
1826 CMD(testmode_cmd, TESTMODE);
1827#endif
1828
1829 if (rdev->ops->connect || rdev->ops->auth) {
1830 i++;
1831 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
1832 goto nla_put_failure;
1833 }
1834
1835 if (rdev->ops->disconnect || rdev->ops->deauth) {
1836 i++;
1837 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1838 goto nla_put_failure;
1839 }
1840
1841 return i;
1842 nla_put_failure:
1843 return -ENOBUFS;
1844}
1845
9bb7e0f2
JB		 1846static int
1847nl80211_send_pmsr_ftm_capa(const struct cfg80211_pmsr_capabilities *cap,
1848 struct sk_buff *msg)
1849{
1850 struct nlattr *ftm;
1851
1852 if (!cap->ftm.supported)
1853 return 0;
1854
ae0be8de 1855 ftm = nla_nest_start_noflag(msg, NL80211_PMSR_TYPE_FTM);
9bb7e0f2
JB		 1856 if (!ftm)
1857 return -ENOBUFS;
1858
1859 if (cap->ftm.asap && nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_ASAP))
1860 return -ENOBUFS;
1861 if (cap->ftm.non_asap &&
1862 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP))
1863 return -ENOBUFS;
1864 if (cap->ftm.request_lci &&
1865 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI))
1866 return -ENOBUFS;
1867 if (cap->ftm.request_civicloc &&
1868 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC))
1869 return -ENOBUFS;
1870 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES,
1871 cap->ftm.preambles))
1872 return -ENOBUFS;
1873 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS,
1874 cap->ftm.bandwidths))
1875 return -ENOBUFS;
1876 if (cap->ftm.max_bursts_exponent >= 0 &&
1877 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT,
1878 cap->ftm.max_bursts_exponent))
1879 return -ENOBUFS;
1880 if (cap->ftm.max_ftms_per_burst &&
1881 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST,
1882 cap->ftm.max_ftms_per_burst))
1883 return -ENOBUFS;
efb5520d
AS		 1884 if (cap->ftm.trigger_based &&
1885 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED))
1886 return -ENOBUFS;
1887 if (cap->ftm.non_trigger_based &&
1888 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED))
1889 return -ENOBUFS;
9bb7e0f2
JB		 1890
1891 nla_nest_end(msg, ftm);
1892 return 0;
1893}
1894
1895static int nl80211_send_pmsr_capa(struct cfg80211_registered_device *rdev,
1896 struct sk_buff *msg)
1897{
1898 const struct cfg80211_pmsr_capabilities *cap = rdev->wiphy.pmsr_capa;
1899 struct nlattr *pmsr, *caps;
1900
1901 if (!cap)
1902 return 0;
1903
1904 /*
1905 * we don't need to clean up anything here since the caller
1906 * will genlmsg_cancel() if we fail
1907 */
1908
ae0be8de 1909 pmsr = nla_nest_start_noflag(msg, NL80211_ATTR_PEER_MEASUREMENTS);
9bb7e0f2
JB		 1910 if (!pmsr)
1911 return -ENOBUFS;
1912
1913 if (nla_put_u32(msg, NL80211_PMSR_ATTR_MAX_PEERS, cap->max_peers))
1914 return -ENOBUFS;
1915
1916 if (cap->report_ap_tsf &&
1917 nla_put_flag(msg, NL80211_PMSR_ATTR_REPORT_AP_TSF))
1918 return -ENOBUFS;
1919
1920 if (cap->randomize_mac_addr &&
1921 nla_put_flag(msg, NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR))
1922 return -ENOBUFS;
1923
ae0be8de 1924 caps = nla_nest_start_noflag(msg, NL80211_PMSR_ATTR_TYPE_CAPA);
9bb7e0f2
JB		 1925 if (!caps)
1926 return -ENOBUFS;
1927
1928 if (nl80211_send_pmsr_ftm_capa(cap, msg))
1929 return -ENOBUFS;
1930
1931 nla_nest_end(msg, caps);
1932 nla_nest_end(msg, pmsr);
1933
1934 return 0;
1935}
1936
d6039a34
VJ		 1937static int
1938nl80211_put_iftype_akm_suites(struct cfg80211_registered_device *rdev,
1939 struct sk_buff *msg)
1940{
1941 int i;
1942 struct nlattr *nested, *nested_akms;
1943 const struct wiphy_iftype_akm_suites *iftype_akms;
1944
1945 if (!rdev->wiphy.num_iftype_akm_suites ||
1946 !rdev->wiphy.iftype_akm_suites)
1947 return 0;
1948
1949 nested = nla_nest_start(msg, NL80211_ATTR_IFTYPE_AKM_SUITES);
1950 if (!nested)
1951 return -ENOBUFS;
1952
1953 for (i = 0; i < rdev->wiphy.num_iftype_akm_suites; i++) {
1954 nested_akms = nla_nest_start(msg, i + 1);
1955 if (!nested_akms)
1956 return -ENOBUFS;
1957
1958 iftype_akms = &rdev->wiphy.iftype_akm_suites[i];
1959
1960 if (nl80211_put_iftypes(msg, NL80211_IFTYPE_AKM_ATTR_IFTYPES,
1961 iftype_akms->iftypes_mask))
1962 return -ENOBUFS;
1963
1964 if (nla_put(msg, NL80211_IFTYPE_AKM_ATTR_SUITES,
1965 sizeof(u32) * iftype_akms->n_akm_suites,
1966 iftype_akms->akm_suites)) {
1967 return -ENOBUFS;
1968 }
1969 nla_nest_end(msg, nested_akms);
1970 }
1971
1972 nla_nest_end(msg, nested);
1973
1974 return 0;
1975}
1976
3710a8a6
JB		 1977static int
1978nl80211_put_tid_config_support(struct cfg80211_registered_device *rdev,
1979 struct sk_buff *msg)
1980{
1981 struct nlattr *supp;
1982
1983 if (!rdev->wiphy.tid_config_support.vif &&
1984 !rdev->wiphy.tid_config_support.peer)
1985 return 0;
1986
1987 supp = nla_nest_start(msg, NL80211_ATTR_TID_CONFIG);
1988 if (!supp)
1989 return -ENOSPC;
1990
1991 if (rdev->wiphy.tid_config_support.vif &&
1992 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_VIF_SUPP,
1993 rdev->wiphy.tid_config_support.vif,
1994 NL80211_TID_CONFIG_ATTR_PAD))
1995 goto fail;
1996
1997 if (rdev->wiphy.tid_config_support.peer &&
1998 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_PEER_SUPP,
1999 rdev->wiphy.tid_config_support.peer,
2000 NL80211_TID_CONFIG_ATTR_PAD))
2001 goto fail;
2002
6a21d16c
T		 2003 /* for now we just use the same value ... makes more sense */
2004 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_SHORT,
2005 rdev->wiphy.tid_config_support.max_retry))
2006 goto fail;
2007 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_LONG,
2008 rdev->wiphy.tid_config_support.max_retry))
2009 goto fail;
2010
3710a8a6
JB		 2011 nla_nest_end(msg, supp);
2012
2013 return 0;
2014fail:
2015 nla_nest_cancel(msg, supp);
2016 return -ENOBUFS;
2017}
2018
86e8cf98
JB		 2019struct nl80211_dump_wiphy_state {
2020 s64 filter_wiphy;
2021 long start;
019ae3a9 2022 long split_start, band_start, chan_start, capa_start;
86e8cf98
JB		 2023 bool split;
2024};
2025
1b8ec87a 2026static int nl80211_send_wiphy(struct cfg80211_registered_device *rdev,
3bb20556 2027 enum nl80211_commands cmd,
3713b4e3 2028 struct sk_buff *msg, u32 portid, u32 seq,
86e8cf98 2029 int flags, struct nl80211_dump_wiphy_state *state)
3713b4e3
JB		 2030{
2031 void *hdr;
2032 struct nlattr *nl_bands, *nl_band;
2033 struct nlattr *nl_freqs, *nl_freq;
2034 struct nlattr *nl_cmds;
57fbcce3 2035 enum nl80211_band band;
3713b4e3
JB		 2036 struct ieee80211_channel *chan;
2037 int i;
2038 const struct ieee80211_txrx_stypes *mgmt_stypes =
1b8ec87a 2039 rdev->wiphy.mgmt_stypes;
fe1abafd 2040 u32 features;
ee688b00 2041
3bb20556 2042 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
3713b4e3
JB		 2043 if (!hdr)
2044 return -ENOBUFS;
ee688b00 2045
86e8cf98
JB		 2046 if (WARN_ON(!state))
2047 return -EINVAL;
ee688b00 2048
1b8ec87a 2049 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3713b4e3 2050 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
1b8ec87a 2051 wiphy_name(&rdev->wiphy)) ||
3713b4e3
JB		 2052 nla_put_u32(msg, NL80211_ATTR_GENERATION,
2053 cfg80211_rdev_list_generation))
8fdc621d
JB		 2054 goto nla_put_failure;
2055
3bb20556
JB		 2056 if (cmd != NL80211_CMD_NEW_WIPHY)
2057 goto finish;
2058
86e8cf98 2059 switch (state->split_start) {
3713b4e3
JB		 2060 case 0:
2061 if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
1b8ec87a 2062 rdev->wiphy.retry_short) ||
3713b4e3 2063 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
1b8ec87a 2064 rdev->wiphy.retry_long) ||
3713b4e3 2065 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
1b8ec87a 2066 rdev->wiphy.frag_threshold) ||
3713b4e3 2067 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
1b8ec87a 2068 rdev->wiphy.rts_threshold) ||
3713b4e3 2069 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
1b8ec87a 2070 rdev->wiphy.coverage_class) ||
3713b4e3 2071 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
1b8ec87a 2072 rdev->wiphy.max_scan_ssids) ||
3713b4e3 2073 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
1b8ec87a 2074 rdev->wiphy.max_sched_scan_ssids) ||
3713b4e3 2075 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
1b8ec87a 2076 rdev->wiphy.max_scan_ie_len) ||
3713b4e3 2077 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
1b8ec87a 2078 rdev->wiphy.max_sched_scan_ie_len) ||
3713b4e3 2079 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
3b06d277
AS		 2080 rdev->wiphy.max_match_sets) ||
2081 nla_put_u32(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_PLANS,
2082 rdev->wiphy.max_sched_scan_plans) ||
2083 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_INTERVAL,
2084 rdev->wiphy.max_sched_scan_plan_interval) ||
2085 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_ITERATIONS,
2086 rdev->wiphy.max_sched_scan_plan_iterations))
9360ffd1 2087 goto nla_put_failure;
3713b4e3 2088
1b8ec87a 2089 if ((rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
3713b4e3 2090 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
aa430da4 2091 goto nla_put_failure;
1b8ec87a 2092 if ((rdev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
3713b4e3
JB		 2093 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
2094 goto nla_put_failure;
1b8ec87a 2095 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3713b4e3
JB		 2096 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
2097 goto nla_put_failure;
1b8ec87a 2098 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
3713b4e3
JB		 2099 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
2100 goto nla_put_failure;
1b8ec87a 2101 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
3713b4e3
JB		 2102 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
2103 goto nla_put_failure;
1b8ec87a 2104 if ((rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
3713b4e3 2105 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
9360ffd1 2106 goto nla_put_failure;
86e8cf98
JB		 2107 state->split_start++;
2108 if (state->split)
3713b4e3 2109 break;
925b5978 2110 /* fall through */
3713b4e3
JB		 2111 case 1:
2112 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
1b8ec87a
ZG		 2113 sizeof(u32) * rdev->wiphy.n_cipher_suites,
2114 rdev->wiphy.cipher_suites))
3713b4e3 2115 goto nla_put_failure;
4745fc09 2116
3713b4e3 2117 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
1b8ec87a 2118 rdev->wiphy.max_num_pmkids))
3713b4e3 2119 goto nla_put_failure;
b23aa676 2120
1b8ec87a 2121 if ((rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
3713b4e3 2122 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
9360ffd1 2123 goto nla_put_failure;
b23aa676 2124
3713b4e3 2125 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
1b8ec87a 2126 rdev->wiphy.available_antennas_tx) ||
3713b4e3 2127 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
1b8ec87a 2128 rdev->wiphy.available_antennas_rx))
9360ffd1 2129 goto nla_put_failure;
b23aa676 2130
1b8ec87a 2131 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
3713b4e3 2132 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
1b8ec87a 2133 rdev->wiphy.probe_resp_offload))
3713b4e3 2134 goto nla_put_failure;
8fdc621d 2135
1b8ec87a
ZG		 2136 if ((rdev->wiphy.available_antennas_tx ||
2137 rdev->wiphy.available_antennas_rx) &&
2138 rdev->ops->get_antenna) {
3713b4e3
JB		 2139 u32 tx_ant = 0, rx_ant = 0;
2140 int res;
7a087e74 2141
1b8ec87a 2142 res = rdev_get_antenna(rdev, &tx_ant, &rx_ant);
3713b4e3
JB		 2143 if (!res) {
2144 if (nla_put_u32(msg,
2145 NL80211_ATTR_WIPHY_ANTENNA_TX,
2146 tx_ant) ||
2147 nla_put_u32(msg,
2148 NL80211_ATTR_WIPHY_ANTENNA_RX,
2149 rx_ant))
2150 goto nla_put_failure;
2151 }
2152 }
a293911d 2153
86e8cf98
JB		 2154 state->split_start++;
2155 if (state->split)
3713b4e3 2156 break;
925b5978 2157 /* fall through */
3713b4e3
JB		 2158 case 2:
2159 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1b8ec87a 2160 rdev->wiphy.interface_modes))
3713b4e3 2161 goto nla_put_failure;
86e8cf98
JB		 2162 state->split_start++;
2163 if (state->split)
3713b4e3 2164 break;
925b5978 2165 /* fall through */
3713b4e3 2166 case 3:
ae0be8de
MK		 2167 nl_bands = nla_nest_start_noflag(msg,
2168 NL80211_ATTR_WIPHY_BANDS);
3713b4e3
JB		 2169 if (!nl_bands)
2170 goto nla_put_failure;
f7ca38df 2171
86e8cf98 2172 for (band = state->band_start;
57fbcce3 2173 band < NUM_NL80211_BANDS; band++) {
3713b4e3 2174 struct ieee80211_supported_band *sband;
2e161f78 2175
1b8ec87a 2176 sband = rdev->wiphy.bands[band];
2e161f78 2177
3713b4e3
JB		 2178 if (!sband)
2179 continue;
2180
ae0be8de 2181 nl_band = nla_nest_start_noflag(msg, band);
3713b4e3 2182 if (!nl_band)
2e161f78 2183 goto nla_put_failure;
3713b4e3 2184
86e8cf98 2185 switch (state->chan_start) {
3713b4e3
JB		 2186 case 0:
2187 if (nl80211_send_band_rateinfo(msg, sband))
9360ffd1 2188 goto nla_put_failure;
86e8cf98
JB		 2189 state->chan_start++;
2190 if (state->split)
3713b4e3 2191 break;
925b5978 2192 /* fall through */
3713b4e3
JB		 2193 default:
2194 /* add frequencies */
ae0be8de
MK		 2195 nl_freqs = nla_nest_start_noflag(msg,
2196 NL80211_BAND_ATTR_FREQS);
3713b4e3
JB		 2197 if (!nl_freqs)
2198 goto nla_put_failure;
2199
86e8cf98 2200 for (i = state->chan_start - 1;
3713b4e3
JB		 2201 i < sband->n_channels;
2202 i++) {
ae0be8de
MK		 2203 nl_freq = nla_nest_start_noflag(msg,
2204 i);
3713b4e3
JB		 2205 if (!nl_freq)
2206 goto nla_put_failure;
2207
2208 chan = &sband->channels[i];
2209
86e8cf98 2210 if (nl80211_msg_put_channel(
50f32718 2211 msg, &rdev->wiphy, chan,
86e8cf98 2212 state->split))
3713b4e3
JB		 2213 goto nla_put_failure;
2214
2215 nla_nest_end(msg, nl_freq);
86e8cf98 2216 if (state->split)
3713b4e3
JB		 2217 break;
2218 }
2219 if (i < sband->n_channels)
86e8cf98 2220 state->chan_start = i + 2;
3713b4e3 2221 else
86e8cf98 2222 state->chan_start = 0;
3713b4e3
JB		 2223 nla_nest_end(msg, nl_freqs);
2224 }
2225
2226 nla_nest_end(msg, nl_band);
2227
86e8cf98 2228 if (state->split) {
3713b4e3 2229 /* start again here */
86e8cf98 2230 if (state->chan_start)
3713b4e3
JB		 2231 band--;
2232 break;
2e161f78 2233 }
2e161f78 2234 }
3713b4e3 2235 nla_nest_end(msg, nl_bands);
2e161f78 2236
57fbcce3 2237 if (band < NUM_NL80211_BANDS)
86e8cf98 2238 state->band_start = band + 1;
3713b4e3 2239 else
86e8cf98 2240 state->band_start = 0;
74b70a4e 2241
3713b4e3 2242 /* if bands & channels are done, continue outside */
86e8cf98
JB		 2243 if (state->band_start == 0 && state->chan_start == 0)
2244 state->split_start++;
2245 if (state->split)
3713b4e3 2246 break;
925b5978 2247 /* fall through */
3713b4e3 2248 case 4:
ae0be8de
MK		 2249 nl_cmds = nla_nest_start_noflag(msg,
2250 NL80211_ATTR_SUPPORTED_COMMANDS);
3713b4e3 2251 if (!nl_cmds)
2e161f78
JB		 2252 goto nla_put_failure;
2253
1794899e
JB		 2254 i = nl80211_add_commands_unsplit(rdev, msg);
2255 if (i < 0)
2256 goto nla_put_failure;
86e8cf98 2257 if (state->split) {
5de17984
AS		 2258 CMD(crit_proto_start, CRIT_PROTOCOL_START);
2259 CMD(crit_proto_stop, CRIT_PROTOCOL_STOP);
1b8ec87a 2260 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH)
16ef1fe2 2261 CMD(channel_switch, CHANNEL_SWITCH);
02df00eb 2262 CMD(set_qos_map, SET_QOS_MAP);
723e73ac
JB		 2263 if (rdev->wiphy.features &
2264 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION)
960d01ac 2265 CMD(add_tx_ts, ADD_TX_TS);
ce0ce13a 2266 CMD(set_multicast_to_unicast, SET_MULTICAST_TO_UNICAST);
088e8df8 2267 CMD(update_connect_params, UPDATE_CONNECT_PARAMS);
7010998c 2268 CMD(update_ft_ies, UPDATE_FT_IES);
5de17984 2269 }
3713b4e3 2270#undef CMD
ff1b6e69 2271
3713b4e3 2272 nla_nest_end(msg, nl_cmds);
86e8cf98
JB		 2273 state->split_start++;
2274 if (state->split)
3713b4e3 2275 break;
925b5978 2276 /* fall through */
3713b4e3 2277 case 5:
1b8ec87a
ZG		 2278 if (rdev->ops->remain_on_channel &&
2279 (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
3713b4e3
JB		 2280 nla_put_u32(msg,
2281 NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1b8ec87a 2282 rdev->wiphy.max_remain_on_channel_duration))
3713b4e3
JB		 2283 goto nla_put_failure;
2284
1b8ec87a 2285 if ((rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
3713b4e3
JB		 2286 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
2287 goto nla_put_failure;
2288
2289 if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
2290 goto nla_put_failure;
86e8cf98
JB		 2291 state->split_start++;
2292 if (state->split)
3713b4e3 2293 break;
925b5978 2294 /* fall through */
3713b4e3
JB		 2295 case 6:
2296#ifdef CONFIG_PM
1b8ec87a 2297 if (nl80211_send_wowlan(msg, rdev, state->split))
3713b4e3 2298 goto nla_put_failure;
86e8cf98
JB		 2299 state->split_start++;
2300 if (state->split)
3713b4e3
JB		 2301 break;
2302#else
86e8cf98 2303 state->split_start++;
dfb89c56 2304#endif
925b5978 2305 /* fall through */
3713b4e3
JB		 2306 case 7:
2307 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1b8ec87a 2308 rdev->wiphy.software_iftypes))
3713b4e3 2309 goto nla_put_failure;
ff1b6e69 2310
1b8ec87a 2311 if (nl80211_put_iface_combinations(&rdev->wiphy, msg,
86e8cf98 2312 state->split))
3713b4e3 2313 goto nla_put_failure;
7527a782 2314
86e8cf98
JB		 2315 state->split_start++;
2316 if (state->split)
3713b4e3 2317 break;
925b5978 2318 /* fall through */
3713b4e3 2319 case 8:
1b8ec87a 2320 if ((rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
3713b4e3 2321 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1b8ec87a 2322 rdev->wiphy.ap_sme_capa))
3713b4e3 2323 goto nla_put_failure;
7527a782 2324
1b8ec87a 2325 features = rdev->wiphy.features;
fe1abafd
JB		 2326 /*
2327 * We can only add the per-channel limit information if the
2328 * dump is split, otherwise it makes it too big. Therefore
2329 * only advertise it in that case.
2330 */
86e8cf98 2331 if (state->split)
fe1abafd
JB		 2332 features |= NL80211_FEATURE_ADVERTISE_CHAN_LIMITS;
2333 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS, features))
3713b4e3 2334 goto nla_put_failure;
562a7480 2335
1b8ec87a 2336 if (rdev->wiphy.ht_capa_mod_mask &&
3713b4e3 2337 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1b8ec87a
ZG		 2338 sizeof(*rdev->wiphy.ht_capa_mod_mask),
2339 rdev->wiphy.ht_capa_mod_mask))
3713b4e3 2340 goto nla_put_failure;
1f074bd8 2341
1b8ec87a
ZG		 2342 if (rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
2343 rdev->wiphy.max_acl_mac_addrs &&
3713b4e3 2344 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1b8ec87a 2345 rdev->wiphy.max_acl_mac_addrs))
3713b4e3 2346 goto nla_put_failure;
7e7c8926 2347
3713b4e3
JB		 2348 /*
2349 * Any information below this point is only available to
2350 * applications that can deal with it being split. This
2351 * helps ensure that newly added capabilities don't break
2352 * older tools by overrunning their buffers.
2353 *
2354 * We still increment split_start so that in the split
2355 * case we'll continue with more data in the next round,
2356 * but break unconditionally so unsplit data stops here.
2357 */
86e8cf98 2358 state->split_start++;
3713b4e3
JB		 2359 break;
2360 case 9:
1b8ec87a 2361 if (rdev->wiphy.extended_capabilities &&
fe1abafd 2362 (nla_put(msg, NL80211_ATTR_EXT_CAPA,
1b8ec87a
ZG		 2363 rdev->wiphy.extended_capabilities_len,
2364 rdev->wiphy.extended_capabilities) ||
fe1abafd 2365 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
1b8ec87a
ZG		 2366 rdev->wiphy.extended_capabilities_len,
2367 rdev->wiphy.extended_capabilities_mask)))
fe1abafd 2368 goto nla_put_failure;
a50df0c4 2369
1b8ec87a 2370 if (rdev->wiphy.vht_capa_mod_mask &&
ee2aca34 2371 nla_put(msg, NL80211_ATTR_VHT_CAPABILITY_MASK,
1b8ec87a
ZG		 2372 sizeof(*rdev->wiphy.vht_capa_mod_mask),
2373 rdev->wiphy.vht_capa_mod_mask))
ee2aca34
JB		 2374 goto nla_put_failure;
2375
ae6fa4d5
DK		 2376 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
2377 rdev->wiphy.perm_addr))
2378 goto nla_put_failure;
2379
2380 if (!is_zero_ether_addr(rdev->wiphy.addr_mask) &&
2381 nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN,
2382 rdev->wiphy.addr_mask))
2383 goto nla_put_failure;
2384
2385 if (rdev->wiphy.n_addresses > 1) {
2386 void *attr;
2387
2388 attr = nla_nest_start(msg, NL80211_ATTR_MAC_ADDRS);
2389 if (!attr)
2390 goto nla_put_failure;
2391
2392 for (i = 0; i < rdev->wiphy.n_addresses; i++)
2393 if (nla_put(msg, i + 1, ETH_ALEN,
2394 rdev->wiphy.addresses[i].addr))
2395 goto nla_put_failure;
2396
2397 nla_nest_end(msg, attr);
2398 }
2399
be29b99a
AK		 2400 state->split_start++;
2401 break;
2402 case 10:
1b8ec87a 2403 if (nl80211_send_coalesce(msg, rdev))
be29b99a
AK		 2404 goto nla_put_failure;
2405
1b8ec87a 2406 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ) &&
01e0daa4
FF		 2407 (nla_put_flag(msg, NL80211_ATTR_SUPPORT_5_MHZ) ||
2408 nla_put_flag(msg, NL80211_ATTR_SUPPORT_10_MHZ)))
2409 goto nla_put_failure;
b43504cf 2410
1b8ec87a 2411 if (rdev->wiphy.max_ap_assoc_sta &&
b43504cf 2412 nla_put_u32(msg, NL80211_ATTR_MAX_AP_ASSOC_STA,
1b8ec87a 2413 rdev->wiphy.max_ap_assoc_sta))
b43504cf
JM		 2414 goto nla_put_failure;
2415
ad7e718c
JB		 2416 state->split_start++;
2417 break;
2418 case 11:
1b8ec87a 2419 if (rdev->wiphy.n_vendor_commands) {
567ffc35
JB		 2420 const struct nl80211_vendor_cmd_info *info;
2421 struct nlattr *nested;
2422
ae0be8de
MK		 2423 nested = nla_nest_start_noflag(msg,
2424 NL80211_ATTR_VENDOR_DATA);
567ffc35
JB		 2425 if (!nested)
2426 goto nla_put_failure;
2427
1b8ec87a
ZG		 2428 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
2429 info = &rdev->wiphy.vendor_commands[i].info;
567ffc35
JB		 2430 if (nla_put(msg, i + 1, sizeof(*info), info))
2431 goto nla_put_failure;
2432 }
2433 nla_nest_end(msg, nested);
2434 }
2435
1b8ec87a 2436 if (rdev->wiphy.n_vendor_events) {
567ffc35
JB		 2437 const struct nl80211_vendor_cmd_info *info;
2438 struct nlattr *nested;
ad7e718c 2439
ae0be8de
MK		 2440 nested = nla_nest_start_noflag(msg,
2441 NL80211_ATTR_VENDOR_EVENTS);
567ffc35 2442 if (!nested)
ad7e718c 2443 goto nla_put_failure;
567ffc35 2444
1b8ec87a
ZG		 2445 for (i = 0; i < rdev->wiphy.n_vendor_events; i++) {
2446 info = &rdev->wiphy.vendor_events[i];
567ffc35
JB		 2447 if (nla_put(msg, i + 1, sizeof(*info), info))
2448 goto nla_put_failure;
2449 }
2450 nla_nest_end(msg, nested);
2451 }
9a774c78
AO		 2452 state->split_start++;
2453 break;
2454 case 12:
2455 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH &&
2456 nla_put_u8(msg, NL80211_ATTR_MAX_CSA_COUNTERS,
2457 rdev->wiphy.max_num_csa_counters))
2458 goto nla_put_failure;
01e0daa4 2459
1bdd716c
AN		 2460 if (rdev->wiphy.regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
2461 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
2462 goto nla_put_failure;
2463
ca986ad9
AVS		 2464 if (rdev->wiphy.max_sched_scan_reqs &&
2465 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_MAX_REQS,
2466 rdev->wiphy.max_sched_scan_reqs))
2467 goto nla_put_failure;
2468
d75bb06b
GKS		 2469 if (nla_put(msg, NL80211_ATTR_EXT_FEATURES,
2470 sizeof(rdev->wiphy.ext_features),
2471 rdev->wiphy.ext_features))
2472 goto nla_put_failure;
2473
38de03d2
AS		 2474 if (rdev->wiphy.bss_select_support) {
2475 struct nlattr *nested;
2476 u32 bss_select_support = rdev->wiphy.bss_select_support;
2477
ae0be8de
MK		 2478 nested = nla_nest_start_noflag(msg,
2479 NL80211_ATTR_BSS_SELECT);
38de03d2
AS		 2480 if (!nested)
2481 goto nla_put_failure;
2482
2483 i = 0;
2484 while (bss_select_support) {
2485 if ((bss_select_support & 1) &&
2486 nla_put_flag(msg, i))
2487 goto nla_put_failure;
2488 i++;
2489 bss_select_support >>= 1;
2490 }
2491 nla_nest_end(msg, nested);
2492 }
2493
019ae3a9
KV		 2494 state->split_start++;
2495 break;
2496 case 13:
2497 if (rdev->wiphy.num_iftype_ext_capab &&
2498 rdev->wiphy.iftype_ext_capab) {
2499 struct nlattr *nested_ext_capab, *nested;
2500
ae0be8de
MK		 2501 nested = nla_nest_start_noflag(msg,
2502 NL80211_ATTR_IFTYPE_EXT_CAPA);
019ae3a9
KV		 2503 if (!nested)
2504 goto nla_put_failure;
2505
2506 for (i = state->capa_start;
2507 i < rdev->wiphy.num_iftype_ext_capab; i++) {
2508 const struct wiphy_iftype_ext_capab *capab;
2509
2510 capab = &rdev->wiphy.iftype_ext_capab[i];
2511
ae0be8de
MK		 2512 nested_ext_capab = nla_nest_start_noflag(msg,
2513 i);
019ae3a9
KV		 2514 if (!nested_ext_capab ||
2515 nla_put_u32(msg, NL80211_ATTR_IFTYPE,
2516 capab->iftype) ||
2517 nla_put(msg, NL80211_ATTR_EXT_CAPA,
2518 capab->extended_capabilities_len,
2519 capab->extended_capabilities) ||
2520 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
2521 capab->extended_capabilities_len,
2522 capab->extended_capabilities_mask))
2523 goto nla_put_failure;
2524
2525 nla_nest_end(msg, nested_ext_capab);
2526 if (state->split)
2527 break;
2528 }
2529 nla_nest_end(msg, nested);
2530 if (i < rdev->wiphy.num_iftype_ext_capab) {
2531 state->capa_start = i + 1;
2532 break;
2533 }
2534 }
2535
8585989d
LC		 2536 if (nla_put_u32(msg, NL80211_ATTR_BANDS,
2537 rdev->wiphy.nan_supported_bands))
2538 goto nla_put_failure;
2539
52539ca8
THJ		 2540 if (wiphy_ext_feature_isset(&rdev->wiphy,
2541 NL80211_EXT_FEATURE_TXQS)) {
2542 struct cfg80211_txq_stats txqstats = {};
2543 int res;
2544
2545 res = rdev_get_txq_stats(rdev, NULL, &txqstats);
2546 if (!res &&
2547 !nl80211_put_txq_stats(msg, &txqstats,
2548 NL80211_ATTR_TXQ_STATS))
2549 goto nla_put_failure;
2550
2551 if (nla_put_u32(msg, NL80211_ATTR_TXQ_LIMIT,
2552 rdev->wiphy.txq_limit))
2553 goto nla_put_failure;
2554 if (nla_put_u32(msg, NL80211_ATTR_TXQ_MEMORY_LIMIT,
2555 rdev->wiphy.txq_memory_limit))
2556 goto nla_put_failure;
2557 if (nla_put_u32(msg, NL80211_ATTR_TXQ_QUANTUM,
2558 rdev->wiphy.txq_quantum))
2559 goto nla_put_failure;
2560 }
2561
9bb7e0f2
JB		 2562 state->split_start++;
2563 break;
2564 case 14:
2565 if (nl80211_send_pmsr_capa(rdev, msg))
2566 goto nla_put_failure;
2567
ab4dfa20
VJ		 2568 state->split_start++;
2569 break;
2570 case 15:
2571 if (rdev->wiphy.akm_suites &&
2572 nla_put(msg, NL80211_ATTR_AKM_SUITES,
2573 sizeof(u32) * rdev->wiphy.n_akm_suites,
2574 rdev->wiphy.akm_suites))
2575 goto nla_put_failure;
2576
d6039a34
VJ		 2577 if (nl80211_put_iftype_akm_suites(rdev, msg))
2578 goto nla_put_failure;
2579
3710a8a6
JB		 2580 if (nl80211_put_tid_config_support(rdev, msg))
2581 goto nla_put_failure;
2582
3713b4e3 2583 /* done */
86e8cf98 2584 state->split_start = 0;
3713b4e3
JB		 2585 break;
2586 }
3bb20556 2587 finish:
053c095a
JB		 2588 genlmsg_end(msg, hdr);
2589 return 0;
55682965
JB		 2590
2591 nla_put_failure:
bc3ed28c
TG		 2592 genlmsg_cancel(msg, hdr);
2593 return -EMSGSIZE;
55682965
JB		 2594}
2595
86e8cf98
JB		 2596static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
2597 struct netlink_callback *cb,
2598 struct nl80211_dump_wiphy_state *state)
2599{
50508d94
JB		 2600 struct nlattr **tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
2601 int ret;
2602
2603 if (!tb)
2604 return -ENOMEM;
2605
2606 ret = nlmsg_parse_deprecated(cb->nlh,
2607 GENL_HDRLEN + nl80211_fam.hdrsize,
2608 tb, nl80211_fam.maxattr,
2609 nl80211_policy, NULL);
86e8cf98 2610 /* ignore parse errors for backward compatibility */
50508d94
JB		 2611 if (ret) {
2612 ret = 0;
2613 goto out;
2614 }
86e8cf98
JB		 2615
2616 state->split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
2617 if (tb[NL80211_ATTR_WIPHY])
2618 state->filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
2619 if (tb[NL80211_ATTR_WDEV])
2620 state->filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
2621 if (tb[NL80211_ATTR_IFINDEX]) {
2622 struct net_device *netdev;
2623 struct cfg80211_registered_device *rdev;
2624 int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
2625
7f2b8562 2626 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
50508d94
JB		 2627 if (!netdev) {
2628 ret = -ENODEV;
2629 goto out;
2630 }
86e8cf98 2631 if (netdev->ieee80211_ptr) {
f26cbf40 2632 rdev = wiphy_to_rdev(
86e8cf98
JB		 2633 netdev->ieee80211_ptr->wiphy);
2634 state->filter_wiphy = rdev->wiphy_idx;
2635 }
86e8cf98
JB		 2636 }
2637
50508d94
JB		 2638 ret = 0;
2639out:
2640 kfree(tb);
2641 return ret;
86e8cf98
JB		 2642}
2643
55682965
JB		 2644static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
2645{
645e77de 2646 int idx = 0, ret;
86e8cf98 2647 struct nl80211_dump_wiphy_state *state = (void *)cb->args[0];
1b8ec87a 2648 struct cfg80211_registered_device *rdev;
3a5a423b 2649
5fe231e8 2650 rtnl_lock();
86e8cf98
JB		 2651 if (!state) {
2652 state = kzalloc(sizeof(*state), GFP_KERNEL);
57ed5cd6
JL		 2653 if (!state) {
2654 rtnl_unlock();
86e8cf98 2655 return -ENOMEM;
3713b4e3 2656 }
86e8cf98
JB		 2657 state->filter_wiphy = -1;
2658 ret = nl80211_dump_wiphy_parse(skb, cb, state);
2659 if (ret) {
2660 kfree(state);
2661 rtnl_unlock();
2662 return ret;
3713b4e3 2663 }
86e8cf98 2664 cb->args[0] = (long)state;
3713b4e3
JB		 2665 }
2666
1b8ec87a
ZG		 2667 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
2668 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 2669 continue;
86e8cf98 2670 if (++idx <= state->start)
55682965 2671 continue;
86e8cf98 2672 if (state->filter_wiphy != -1 &&
1b8ec87a 2673 state->filter_wiphy != rdev->wiphy_idx)
3713b4e3
JB		 2674 continue;
2675 /* attempt to fit multiple wiphy data chunks into the skb */
2676 do {
3bb20556
JB		 2677 ret = nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY,
2678 skb,
3713b4e3
JB		 2679 NETLINK_CB(cb->skb).portid,
2680 cb->nlh->nlmsg_seq,
86e8cf98 2681 NLM_F_MULTI, state);
3713b4e3
JB		 2682 if (ret < 0) {
2683 /*
2684 * If sending the wiphy data didn't fit (ENOBUFS
2685 * or EMSGSIZE returned), this SKB is still
2686 * empty (so it's not too big because another
2687 * wiphy dataset is already in the skb) and
2688 * we've not tried to adjust the dump allocation
2689 * yet ... then adjust the alloc size to be
2690 * bigger, and return 1 but with the empty skb.
2691 * This results in an empty message being RX'ed
2692 * in userspace, but that is ignored.
2693 *
2694 * We can then retry with the larger buffer.
2695 */
2696 if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
f12cb289 2697 !skb->len && !state->split &&
3713b4e3
JB		 2698 cb->min_dump_alloc < 4096) {
2699 cb->min_dump_alloc = 4096;
f12cb289 2700 state->split_start = 0;
d98cae64 2701 rtnl_unlock();
3713b4e3
JB		 2702 return 1;
2703 }
2704 idx--;
2705 break;
645e77de 2706 }
86e8cf98 2707 } while (state->split_start > 0);
3713b4e3 2708 break;
55682965 2709 }
5fe231e8 2710 rtnl_unlock();
55682965 2711
86e8cf98 2712 state->start = idx;
55682965
JB		 2713
2714 return skb->len;
2715}
2716
86e8cf98
JB		 2717static int nl80211_dump_wiphy_done(struct netlink_callback *cb)
2718{
2719 kfree((void *)cb->args[0]);
2720 return 0;
2721}
2722
55682965
JB		 2723static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
2724{
2725 struct sk_buff *msg;
1b8ec87a 2726 struct cfg80211_registered_device *rdev = info->user_ptr[0];
86e8cf98 2727 struct nl80211_dump_wiphy_state state = {};
55682965 2728
645e77de 2729 msg = nlmsg_new(4096, GFP_KERNEL);
55682965 2730 if (!msg)
4c476991 2731 return -ENOMEM;
55682965 2732
3bb20556
JB		 2733 if (nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY, msg,
2734 info->snd_portid, info->snd_seq, 0,
86e8cf98 2735 &state) < 0) {
4c476991
JB		 2736 nlmsg_free(msg);
2737 return -ENOBUFS;
2738 }
55682965 2739
134e6375 2740 return genlmsg_reply(msg, info);
55682965
JB		 2741}
2742
31888487
JM		 2743static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
2744 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
2745 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
2746 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
2747 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
2748 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
2749};
2750
2751static int parse_txq_params(struct nlattr *tb[],
2752 struct ieee80211_txq_params *txq_params)
2753{
259d8c1e
DW		 2754 u8 ac;
2755
a3304b0a 2756 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 2757 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
2758 !tb[NL80211_TXQ_ATTR_AIFS])
2759 return -EINVAL;
2760
259d8c1e 2761 ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 2762 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
2763 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
2764 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
2765 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
2766
259d8c1e 2767 if (ac >= NL80211_NUM_ACS)
a3304b0a 2768 return -EINVAL;
259d8c1e 2769 txq_params->ac = array_index_nospec(ac, NL80211_NUM_ACS);
31888487
JM		 2770 return 0;
2771}
2772
f444de05
JB		 2773static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
2774{
2775 /*
cc1d2806
JB		 2776 * You can only set the channel explicitly for WDS interfaces,
2777 * all others have their channel managed via their respective
2778 * "establish a connection" command (connect, join, ...)
2779 *
2780 * For AP/GO and mesh mode, the channel can be set with the
2781 * channel userspace API, but is only stored and passed to the
2782 * low-level driver when the AP starts or the mesh is joined.
2783 * This is for backward compatibility, userspace can also give
2784 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 2785 *
2786 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 2787 * whatever else is going on, so they have their own special
2788 * operation to set the monitor channel if possible.
f444de05
JB		 2789 */
2790 return !wdev ||
2791 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 2792 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 2793 wdev->iftype == NL80211_IFTYPE_MONITOR ||
2794 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 2795}
2796
9bb7e0f2
JB		 2797int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
2798 struct genl_info *info,
2799 struct cfg80211_chan_def *chandef)
683b6d3b 2800{
49f9cf0e
JB		 2801 struct netlink_ext_ack *extack = info->extack;
2802 struct nlattr **attrs = info->attrs;
dbeca2ea 2803 u32 control_freq;
683b6d3b 2804
49f9cf0e 2805 if (!attrs[NL80211_ATTR_WIPHY_FREQ])
683b6d3b
JB		 2806 return -EINVAL;
2807
942ba88b
TP		 2808 control_freq = MHZ_TO_KHZ(
2809 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
2810 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
2811 control_freq +=
2812 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
683b6d3b 2813
f43e5210 2814 memset(chandef, 0, sizeof(*chandef));
942ba88b 2815 chandef->chan = ieee80211_get_channel_khz(&rdev->wiphy, control_freq);
3d9d1d66 2816 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
942ba88b
TP		 2817 chandef->center_freq1 = KHZ_TO_MHZ(control_freq);
2818 chandef->freq1_offset = control_freq % 1000;
3d9d1d66 2819 chandef->center_freq2 = 0;
683b6d3b
JB		 2820
2821 /* Primary channel not allowed */
49f9cf0e
JB		 2822 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED) {
2823 NL_SET_ERR_MSG_ATTR(extack, attrs[NL80211_ATTR_WIPHY_FREQ],
2824 "Channel is disabled");
683b6d3b 2825 return -EINVAL;
49f9cf0e 2826 }
683b6d3b 2827
49f9cf0e 2828 if (attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
3d9d1d66
JB		 2829 enum nl80211_channel_type chantype;
2830
49f9cf0e 2831 chantype = nla_get_u32(attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
3d9d1d66
JB		 2832
2833 switch (chantype) {
2834 case NL80211_CHAN_NO_HT:
2835 case NL80211_CHAN_HT20:
2836 case NL80211_CHAN_HT40PLUS:
2837 case NL80211_CHAN_HT40MINUS:
2838 cfg80211_chandef_create(chandef, chandef->chan,
2839 chantype);
ffa4629e 2840 /* user input for center_freq is incorrect */
49f9cf0e
JB		 2841 if (attrs[NL80211_ATTR_CENTER_FREQ1] &&
2842 chandef->center_freq1 != nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1])) {
2843 NL_SET_ERR_MSG_ATTR(extack,
2844 attrs[NL80211_ATTR_CENTER_FREQ1],
2845 "bad center frequency 1");
ffa4629e 2846 return -EINVAL;
49f9cf0e 2847 }
ffa4629e 2848 /* center_freq2 must be zero */
49f9cf0e
JB		 2849 if (attrs[NL80211_ATTR_CENTER_FREQ2] &&
2850 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2])) {
2851 NL_SET_ERR_MSG_ATTR(extack,
2852 attrs[NL80211_ATTR_CENTER_FREQ2],
2853 "center frequency 2 can't be used");
ffa4629e 2854 return -EINVAL;
49f9cf0e 2855 }
3d9d1d66
JB		 2856 break;
2857 default:
49f9cf0e
JB		 2858 NL_SET_ERR_MSG_ATTR(extack,
2859 attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
2860 "invalid channel type");
3d9d1d66
JB		 2861 return -EINVAL;
2862 }
49f9cf0e 2863 } else if (attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
3d9d1d66 2864 chandef->width =
49f9cf0e 2865 nla_get_u32(attrs[NL80211_ATTR_CHANNEL_WIDTH]);
942ba88b 2866 if (attrs[NL80211_ATTR_CENTER_FREQ1]) {
3d9d1d66 2867 chandef->center_freq1 =
49f9cf0e 2868 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1]);
942ba88b
TP		 2869 if (attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET])
2870 chandef->freq1_offset = nla_get_u32(
2871 attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET]);
2872 else
2873 chandef->freq1_offset = 0;
2874 }
49f9cf0e 2875 if (attrs[NL80211_ATTR_CENTER_FREQ2])
3d9d1d66 2876 chandef->center_freq2 =
49f9cf0e 2877 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2]);
3d9d1d66
JB		 2878 }
2879
2a38075c
AAL		 2880 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
2881 chandef->edmg.channels =
2882 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
2883
2884 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
2885 chandef->edmg.bw_config =
2886 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
2887 } else {
2888 chandef->edmg.bw_config = 0;
2889 chandef->edmg.channels = 0;
2890 }
2891
49f9cf0e
JB		 2892 if (!cfg80211_chandef_valid(chandef)) {
2893 NL_SET_ERR_MSG(extack, "invalid channel definition");
3d9d1d66 2894 return -EINVAL;
49f9cf0e 2895 }
3d9d1d66 2896
9f5e8f6e 2897 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
49f9cf0e
JB		 2898 IEEE80211_CHAN_DISABLED)) {
2899 NL_SET_ERR_MSG(extack, "(extension) channel is disabled");
3d9d1d66 2900 return -EINVAL;
49f9cf0e 2901 }
3d9d1d66 2902
2f301ab2
SW		 2903 if ((chandef->width == NL80211_CHAN_WIDTH_5 ||
2904 chandef->width == NL80211_CHAN_WIDTH_10) &&
49f9cf0e
JB		 2905 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ)) {
2906 NL_SET_ERR_MSG(extack, "5/10 MHz not supported");
2f301ab2 2907 return -EINVAL;
49f9cf0e 2908 }
2f301ab2 2909
683b6d3b
JB		 2910 return 0;
2911}
2912
f444de05 2913static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
e16821bc 2914 struct net_device *dev,
f444de05
JB		 2915 struct genl_info *info)
2916{
683b6d3b 2917 struct cfg80211_chan_def chandef;
f444de05 2918 int result;
e8c9bd5b 2919 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
e16821bc 2920 struct wireless_dev *wdev = NULL;
e8c9bd5b 2921
e16821bc
JM		 2922 if (dev)
2923 wdev = dev->ieee80211_ptr;
f444de05
JB		 2924 if (!nl80211_can_set_dev_channel(wdev))
2925 return -EOPNOTSUPP;
e16821bc
JM		 2926 if (wdev)
2927 iftype = wdev->iftype;
f444de05 2928
683b6d3b
JB		 2929 result = nl80211_parse_chandef(rdev, info, &chandef);
2930 if (result)
2931 return result;
f444de05 2932
e8c9bd5b 2933 switch (iftype) {
aa430da4
JB		 2934 case NL80211_IFTYPE_AP:
2935 case NL80211_IFTYPE_P2P_GO:
923b352f
AN		 2936 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
2937 iftype)) {
aa430da4
JB		 2938 result = -EINVAL;
2939 break;
2940 }
e16821bc
JM		 2941 if (wdev->beacon_interval) {
2942 if (!dev || !rdev->ops->set_ap_chanwidth ||
2943 !(rdev->wiphy.features &
2944 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE)) {
2945 result = -EBUSY;
2946 break;
2947 }
2948
2949 /* Only allow dynamic channel width changes */
2950 if (chandef.chan != wdev->preset_chandef.chan) {
2951 result = -EBUSY;
2952 break;
2953 }
2954 result = rdev_set_ap_chanwidth(rdev, dev, &chandef);
2955 if (result)
2956 break;
2957 }
683b6d3b 2958 wdev->preset_chandef = chandef;
aa430da4
JB		 2959 result = 0;
2960 break;
cc1d2806 2961 case NL80211_IFTYPE_MESH_POINT:
683b6d3b 2962 result = cfg80211_set_mesh_channel(rdev, wdev, &chandef);
cc1d2806 2963 break;
e8c9bd5b 2964 case NL80211_IFTYPE_MONITOR:
683b6d3b 2965 result = cfg80211_set_monitor_channel(rdev, &chandef);
e8c9bd5b 2966 break;
aa430da4 2967 default:
e8c9bd5b 2968 result = -EINVAL;
f444de05 2969 }
f444de05
JB		 2970
2971 return result;
2972}
2973
2974static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
2975{
4c476991
JB		 2976 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2977 struct net_device *netdev = info->user_ptr[1];
f444de05 2978
e16821bc 2979 return __nl80211_set_channel(rdev, netdev, info);
f444de05
JB		 2980}
2981
e8347eba
BJ		 2982static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
2983{
43b19952
JB		 2984 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2985 struct net_device *dev = info->user_ptr[1];
2986 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 2987 const u8 *bssid;
e8347eba
BJ		 2988
2989 if (!info->attrs[NL80211_ATTR_MAC])
2990 return -EINVAL;
2991
43b19952
JB		 2992 if (netif_running(dev))
2993 return -EBUSY;
e8347eba 2994
43b19952
JB		 2995 if (!rdev->ops->set_wds_peer)
2996 return -EOPNOTSUPP;
e8347eba 2997
43b19952
JB		 2998 if (wdev->iftype != NL80211_IFTYPE_WDS)
2999 return -EOPNOTSUPP;
e8347eba
BJ		 3000
3001 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
e35e4d28 3002 return rdev_set_wds_peer(rdev, dev, bssid);
e8347eba
BJ		 3003}
3004
55682965
JB		 3005static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
3006{
3007 struct cfg80211_registered_device *rdev;
f444de05
JB		 3008 struct net_device *netdev = NULL;
3009 struct wireless_dev *wdev;
a1e567c8 3010 int result = 0, rem_txq_params = 0;
31888487 3011 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 3012 u32 changed;
3013 u8 retry_short = 0, retry_long = 0;
3014 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 3015 u8 coverage_class = 0;
52539ca8 3016 u32 txq_limit = 0, txq_memory_limit = 0, txq_quantum = 0;
55682965 3017
5fe231e8
JB		 3018 ASSERT_RTNL();
3019
f444de05
JB		 3020 /*
3021 * Try to find the wiphy and netdev. Normally this
3022 * function shouldn't need the netdev, but this is
3023 * done for backward compatibility -- previously
3024 * setting the channel was done per wiphy, but now
3025 * it is per netdev. Previous userland like hostapd
3026 * also passed a netdev to set_wiphy, so that it is
3027 * possible to let that go to the right netdev!
3028 */
4bbf4d56 3029
f444de05
JB		 3030 if (info->attrs[NL80211_ATTR_IFINDEX]) {
3031 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
3032
7f2b8562 3033 netdev = __dev_get_by_index(genl_info_net(info), ifindex);
5fe231e8 3034 if (netdev && netdev->ieee80211_ptr)
f26cbf40 3035 rdev = wiphy_to_rdev(netdev->ieee80211_ptr->wiphy);
5fe231e8 3036 else
f444de05 3037 netdev = NULL;
4bbf4d56
JB		 3038 }
3039
f444de05 3040 if (!netdev) {
878d9ec7
JB		 3041 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
3042 info->attrs);
5fe231e8 3043 if (IS_ERR(rdev))
4c476991 3044 return PTR_ERR(rdev);
f444de05
JB		 3045 wdev = NULL;
3046 netdev = NULL;
3047 result = 0;
71fe96bf 3048 } else
f444de05 3049 wdev = netdev->ieee80211_ptr;
f444de05
JB		 3050
3051 /*
3052 * end workaround code, by now the rdev is available
3053 * and locked, and wdev may or may not be NULL.
3054 */
4bbf4d56
JB		 3055
3056 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 3057 result = cfg80211_dev_rename(
3058 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56 3059
4bbf4d56 3060 if (result)
7f2b8562 3061 return result;
31888487
JM		 3062
3063 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
3064 struct ieee80211_txq_params txq_params;
3065 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
3066
7f2b8562
YX		 3067 if (!rdev->ops->set_txq_params)
3068 return -EOPNOTSUPP;
31888487 3069
7f2b8562
YX		 3070 if (!netdev)
3071 return -EINVAL;
f70f01c2 3072
133a3ff2 3073 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
7f2b8562
YX		 3074 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3075 return -EINVAL;
133a3ff2 3076
7f2b8562
YX		 3077 if (!netif_running(netdev))
3078 return -ENETDOWN;
2b5f8b0b 3079
31888487
JM		 3080 nla_for_each_nested(nl_txq_params,
3081 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
3082 rem_txq_params) {
8cb08174
JB		 3083 result = nla_parse_nested_deprecated(tb,
3084 NL80211_TXQ_ATTR_MAX,
3085 nl_txq_params,
3086 txq_params_policy,
3087 info->extack);
ae811e21
JB		 3088 if (result)
3089 return result;
31888487
JM		 3090 result = parse_txq_params(tb, &txq_params);
3091 if (result)
7f2b8562 3092 return result;
31888487 3093
e35e4d28
HG		 3094 result = rdev_set_txq_params(rdev, netdev,
3095 &txq_params);
31888487 3096 if (result)
7f2b8562 3097 return result;
31888487
JM		 3098 }
3099 }
55682965 3100
72bdcf34 3101 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
e16821bc
JM		 3102 result = __nl80211_set_channel(
3103 rdev,
3104 nl80211_can_set_dev_channel(wdev) ? netdev : NULL,
3105 info);
72bdcf34 3106 if (result)
7f2b8562 3107 return result;
72bdcf34
JM		 3108 }
3109
98d2ff8b 3110 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 3111 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 3112 enum nl80211_tx_power_setting type;
3113 int idx, mbm = 0;
3114
c8442118
JB		 3115 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
3116 txp_wdev = NULL;
3117
7f2b8562
YX		 3118 if (!rdev->ops->set_tx_power)
3119 return -EOPNOTSUPP;
98d2ff8b
JO		 3120
3121 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
3122 type = nla_get_u32(info->attrs[idx]);
3123
3124 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
7f2b8562
YX		 3125 (type != NL80211_TX_POWER_AUTOMATIC))
3126 return -EINVAL;
98d2ff8b
JO		 3127
3128 if (type != NL80211_TX_POWER_AUTOMATIC) {
3129 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
3130 mbm = nla_get_u32(info->attrs[idx]);
3131 }
3132
c8442118 3133 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b 3134 if (result)
7f2b8562 3135 return result;
98d2ff8b
JO		 3136 }
3137
afe0cbf8
BR		 3138 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
3139 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
3140 u32 tx_ant, rx_ant;
7a087e74 3141
7f531e03
BR		 3142 if ((!rdev->wiphy.available_antennas_tx &&
3143 !rdev->wiphy.available_antennas_rx) ||
7f2b8562
YX		 3144 !rdev->ops->set_antenna)
3145 return -EOPNOTSUPP;
afe0cbf8
BR		 3146
3147 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
3148 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
3149
a7ffac95 3150 /* reject antenna configurations which don't match the
7f531e03
BR		 3151 * available antenna masks, except for the "all" mask */
3152 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
7f2b8562
YX		 3153 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx)))
3154 return -EINVAL;
a7ffac95 3155
7f531e03
BR		 3156 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
3157 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 3158
e35e4d28 3159 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8 3160 if (result)
7f2b8562 3161 return result;
afe0cbf8
BR		 3162 }
3163
b9a5f8ca
JM		 3164 changed = 0;
3165
3166 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
3167 retry_short = nla_get_u8(
3168 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
7f2b8562 3169
b9a5f8ca
JM		 3170 changed |= WIPHY_PARAM_RETRY_SHORT;
3171 }
3172
3173 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
3174 retry_long = nla_get_u8(
3175 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
7f2b8562 3176
b9a5f8ca
JM		 3177 changed |= WIPHY_PARAM_RETRY_LONG;
3178 }
3179
3180 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
3181 frag_threshold = nla_get_u32(
3182 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
7f2b8562
YX		 3183 if (frag_threshold < 256)
3184 return -EINVAL;
3185
b9a5f8ca
JM		 3186 if (frag_threshold != (u32) -1) {
3187 /*
3188 * Fragments (apart from the last one) are required to
3189 * have even length. Make the fragmentation code
3190 * simpler by stripping LSB should someone try to use
3191 * odd threshold value.
3192 */
3193 frag_threshold &= ~0x1;
3194 }
3195 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
3196 }
3197
3198 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
3199 rts_threshold = nla_get_u32(
3200 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
3201 changed |= WIPHY_PARAM_RTS_THRESHOLD;
3202 }
3203
81077e82 3204 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
3057dbfd
LB		 3205 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK])
3206 return -EINVAL;
3207
81077e82
LT		 3208 coverage_class = nla_get_u8(
3209 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
3210 changed |= WIPHY_PARAM_COVERAGE_CLASS;
3211 }
3212
3057dbfd
LB		 3213 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
3214 if (!(rdev->wiphy.features & NL80211_FEATURE_ACKTO_ESTIMATION))
3215 return -EOPNOTSUPP;
3216
3217 changed |= WIPHY_PARAM_DYN_ACK;
81077e82
LT		 3218 }
3219
52539ca8
THJ		 3220 if (info->attrs[NL80211_ATTR_TXQ_LIMIT]) {
3221 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3222 NL80211_EXT_FEATURE_TXQS))
3223 return -EOPNOTSUPP;
3224 txq_limit = nla_get_u32(
3225 info->attrs[NL80211_ATTR_TXQ_LIMIT]);
3226 changed |= WIPHY_PARAM_TXQ_LIMIT;
3227 }
3228
3229 if (info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]) {
3230 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3231 NL80211_EXT_FEATURE_TXQS))
3232 return -EOPNOTSUPP;
3233 txq_memory_limit = nla_get_u32(
3234 info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]);
3235 changed |= WIPHY_PARAM_TXQ_MEMORY_LIMIT;
3236 }
3237
3238 if (info->attrs[NL80211_ATTR_TXQ_QUANTUM]) {
3239 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3240 NL80211_EXT_FEATURE_TXQS))
3241 return -EOPNOTSUPP;
3242 txq_quantum = nla_get_u32(
3243 info->attrs[NL80211_ATTR_TXQ_QUANTUM]);
3244 changed |= WIPHY_PARAM_TXQ_QUANTUM;
3245 }
3246
b9a5f8ca
JM		 3247 if (changed) {
3248 u8 old_retry_short, old_retry_long;
3249 u32 old_frag_threshold, old_rts_threshold;
81077e82 3250 u8 old_coverage_class;
52539ca8 3251 u32 old_txq_limit, old_txq_memory_limit, old_txq_quantum;
b9a5f8ca 3252
7f2b8562
YX		 3253 if (!rdev->ops->set_wiphy_params)
3254 return -EOPNOTSUPP;
b9a5f8ca
JM		 3255
3256 old_retry_short = rdev->wiphy.retry_short;
3257 old_retry_long = rdev->wiphy.retry_long;
3258 old_frag_threshold = rdev->wiphy.frag_threshold;
3259 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 3260 old_coverage_class = rdev->wiphy.coverage_class;
52539ca8
THJ		 3261 old_txq_limit = rdev->wiphy.txq_limit;
3262 old_txq_memory_limit = rdev->wiphy.txq_memory_limit;
3263 old_txq_quantum = rdev->wiphy.txq_quantum;
b9a5f8ca
JM		 3264
3265 if (changed & WIPHY_PARAM_RETRY_SHORT)
3266 rdev->wiphy.retry_short = retry_short;
3267 if (changed & WIPHY_PARAM_RETRY_LONG)
3268 rdev->wiphy.retry_long = retry_long;
3269 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
3270 rdev->wiphy.frag_threshold = frag_threshold;
3271 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
3272 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 3273 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
3274 rdev->wiphy.coverage_class = coverage_class;
52539ca8
THJ		 3275 if (changed & WIPHY_PARAM_TXQ_LIMIT)
3276 rdev->wiphy.txq_limit = txq_limit;
3277 if (changed & WIPHY_PARAM_TXQ_MEMORY_LIMIT)
3278 rdev->wiphy.txq_memory_limit = txq_memory_limit;
3279 if (changed & WIPHY_PARAM_TXQ_QUANTUM)
3280 rdev->wiphy.txq_quantum = txq_quantum;
b9a5f8ca 3281
e35e4d28 3282 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 3283 if (result) {
3284 rdev->wiphy.retry_short = old_retry_short;
3285 rdev->wiphy.retry_long = old_retry_long;
3286 rdev->wiphy.frag_threshold = old_frag_threshold;
3287 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 3288 rdev->wiphy.coverage_class = old_coverage_class;
52539ca8
THJ		 3289 rdev->wiphy.txq_limit = old_txq_limit;
3290 rdev->wiphy.txq_memory_limit = old_txq_memory_limit;
3291 rdev->wiphy.txq_quantum = old_txq_quantum;
9189ee31 3292 return result;
b9a5f8ca
JM		 3293 }
3294 }
7f2b8562 3295 return 0;
55682965
JB		 3296}
3297
683b6d3b 3298static int nl80211_send_chandef(struct sk_buff *msg,
d2859df5 3299 const struct cfg80211_chan_def *chandef)
683b6d3b 3300{
601555cd
JB		 3301 if (WARN_ON(!cfg80211_chandef_valid(chandef)))
3302 return -EINVAL;
3d9d1d66 3303
683b6d3b
JB		 3304 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
3305 chandef->chan->center_freq))
3306 return -ENOBUFS;
942ba88b
TP		 3307 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
3308 chandef->chan->freq_offset))
3309 return -ENOBUFS;
3d9d1d66
JB		 3310 switch (chandef->width) {
3311 case NL80211_CHAN_WIDTH_20_NOHT:
3312 case NL80211_CHAN_WIDTH_20:
3313 case NL80211_CHAN_WIDTH_40:
3314 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
3315 cfg80211_get_chandef_type(chandef)))
3316 return -ENOBUFS;
3317 break;
3318 default:
3319 break;
3320 }
3321 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
3322 return -ENOBUFS;
3323 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
3324 return -ENOBUFS;
3325 if (chandef->center_freq2 &&
3326 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
683b6d3b
JB		 3327 return -ENOBUFS;
3328 return 0;
3329}
3330
15e47304 3331static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 3332 struct cfg80211_registered_device *rdev,
3d1a5bbf
AZ		 3333 struct wireless_dev *wdev,
3334 enum nl80211_commands cmd)
55682965 3335{
72fb2abc 3336 struct net_device *dev = wdev->netdev;
55682965
JB		 3337 void *hdr;
3338
3d1a5bbf
AZ		 3339 WARN_ON(cmd != NL80211_CMD_NEW_INTERFACE &&
3340 cmd != NL80211_CMD_DEL_INTERFACE &&
3341 cmd != NL80211_CMD_SET_INTERFACE);
8f894be2
TB		 3342
3343 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
55682965
JB		 3344 if (!hdr)
3345 return -1;
3346
72fb2abc
JB		 3347 if (dev &&
3348 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 3349 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 3350 goto nla_put_failure;
3351
3352 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3353 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
2dad624e
ND		 3354 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
3355 NL80211_ATTR_PAD) ||
98104fde 3356 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 3357 nla_put_u32(msg, NL80211_ATTR_GENERATION,
3358 rdev->devlist_generation ^
446faa15
AQ		 3359 (cfg80211_rdev_list_generation << 2)) ||
3360 nla_put_u8(msg, NL80211_ATTR_4ADDR, wdev->use_4addr))
9360ffd1 3361 goto nla_put_failure;
f5ea9120 3362
5b7ccaf3 3363 if (rdev->ops->get_channel) {
683b6d3b 3364 int ret;
f43e5210 3365 struct cfg80211_chan_def chandef = {};
683b6d3b
JB		 3366
3367 ret = rdev_get_channel(rdev, wdev, &chandef);
3368 if (ret == 0) {
3369 if (nl80211_send_chandef(msg, &chandef))
3370 goto nla_put_failure;
3371 }
d91df0e3
PF		 3372 }
3373
d55d0d59
RM		 3374 if (rdev->ops->get_tx_power) {
3375 int dbm, ret;
3376
3377 ret = rdev_get_tx_power(rdev, wdev, &dbm);
3378 if (ret == 0 &&
3379 nla_put_u32(msg, NL80211_ATTR_WIPHY_TX_POWER_LEVEL,
3380 DBM_TO_MBM(dbm)))
3381 goto nla_put_failure;
3382 }
3383
44905265
JB		 3384 wdev_lock(wdev);
3385 switch (wdev->iftype) {
3386 case NL80211_IFTYPE_AP:
3387 if (wdev->ssid_len &&
3388 nla_put(msg, NL80211_ATTR_SSID, wdev->ssid_len, wdev->ssid))
4564b187 3389 goto nla_put_failure_locked;
44905265
JB		 3390 break;
3391 case NL80211_IFTYPE_STATION:
3392 case NL80211_IFTYPE_P2P_CLIENT:
3393 case NL80211_IFTYPE_ADHOC: {
3394 const u8 *ssid_ie;
3395 if (!wdev->current_bss)
3396 break;
7a94b8c2 3397 rcu_read_lock();
44905265
JB		 3398 ssid_ie = ieee80211_bss_get_ie(&wdev->current_bss->pub,
3399 WLAN_EID_SSID);
7a94b8c2
DB		 3400 if (ssid_ie &&
3401 nla_put(msg, NL80211_ATTR_SSID, ssid_ie[1], ssid_ie + 2))
3402 goto nla_put_failure_rcu_locked;
3403 rcu_read_unlock();
44905265
JB		 3404 break;
3405 }
3406 default:
3407 /* nothing */
3408 break;
b84e7a05 3409 }
44905265 3410 wdev_unlock(wdev);
b84e7a05 3411
52539ca8
THJ		 3412 if (rdev->ops->get_txq_stats) {
3413 struct cfg80211_txq_stats txqstats = {};
3414 int ret = rdev_get_txq_stats(rdev, wdev, &txqstats);
3415
3416 if (ret == 0 &&
3417 !nl80211_put_txq_stats(msg, &txqstats,
3418 NL80211_ATTR_TXQ_STATS))
3419 goto nla_put_failure;
3420 }
3421
053c095a
JB		 3422 genlmsg_end(msg, hdr);
3423 return 0;
55682965 3424
7a94b8c2
DB		 3425 nla_put_failure_rcu_locked:
3426 rcu_read_unlock();
4564b187
JB		 3427 nla_put_failure_locked:
3428 wdev_unlock(wdev);
55682965 3429 nla_put_failure:
bc3ed28c
TG		 3430 genlmsg_cancel(msg, hdr);
3431 return -EMSGSIZE;
55682965
JB		 3432}
3433
3434static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
3435{
3436 int wp_idx = 0;
3437 int if_idx = 0;
3438 int wp_start = cb->args[0];
3439 int if_start = cb->args[1];
b7fb44da 3440 int filter_wiphy = -1;
f5ea9120 3441 struct cfg80211_registered_device *rdev;
55682965 3442 struct wireless_dev *wdev;
ea90e0dc 3443 int ret;
55682965 3444
5fe231e8 3445 rtnl_lock();
b7fb44da
DK		 3446 if (!cb->args[2]) {
3447 struct nl80211_dump_wiphy_state state = {
3448 .filter_wiphy = -1,
3449 };
b7fb44da
DK		 3450
3451 ret = nl80211_dump_wiphy_parse(skb, cb, &state);
3452 if (ret)
ea90e0dc 3453 goto out_unlock;
b7fb44da
DK		 3454
3455 filter_wiphy = state.filter_wiphy;
3456
3457 /*
3458 * if filtering, set cb->args[2] to +1 since 0 is the default
3459 * value needed to determine that parsing is necessary.
3460 */
3461 if (filter_wiphy >= 0)
3462 cb->args[2] = filter_wiphy + 1;
3463 else
3464 cb->args[2] = -1;
3465 } else if (cb->args[2] > 0) {
3466 filter_wiphy = cb->args[2] - 1;
3467 }
3468
f5ea9120
JB		 3469 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3470 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3471 continue;
bba95fef
JB		 3472 if (wp_idx < wp_start) {
3473 wp_idx++;
55682965 3474 continue;
bba95fef 3475 }
b7fb44da
DK		 3476
3477 if (filter_wiphy >= 0 && filter_wiphy != rdev->wiphy_idx)
3478 continue;
3479
55682965
JB		 3480 if_idx = 0;
3481
53873f13 3482 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
bba95fef
JB		 3483 if (if_idx < if_start) {
3484 if_idx++;
55682965 3485 continue;
bba95fef 3486 }
15e47304 3487 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 3488 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3d1a5bbf
AZ		 3489 rdev, wdev,
3490 NL80211_CMD_NEW_INTERFACE) < 0) {
bba95fef
JB		 3491 goto out;
3492 }
3493 if_idx++;
55682965 3494 }
bba95fef
JB		 3495
3496 wp_idx++;
55682965 3497 }
bba95fef 3498 out:
55682965
JB		 3499 cb->args[0] = wp_idx;
3500 cb->args[1] = if_idx;
3501
ea90e0dc
JB		 3502 ret = skb->len;
3503 out_unlock:
3504 rtnl_unlock();
3505
3506 return ret;
55682965
JB		 3507}
3508
3509static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
3510{
3511 struct sk_buff *msg;
1b8ec87a 3512 struct cfg80211_registered_device *rdev = info->user_ptr[0];
72fb2abc 3513 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3514
fd2120ca 3515 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 3516 if (!msg)
4c476991 3517 return -ENOMEM;
55682965 3518
15e47304 3519 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3520 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
4c476991
JB		 3521 nlmsg_free(msg);
3522 return -ENOBUFS;
3523 }
55682965 3524
134e6375 3525 return genlmsg_reply(msg, info);
55682965
JB		 3526}
3527
66f7ac50
MW		 3528static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
3529 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
3530 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
3531 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
3532 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
3533 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
e057d3c3 3534 [NL80211_MNTR_FLAG_ACTIVE] = { .type = NLA_FLAG },
66f7ac50
MW		 3535};
3536
3537static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
3538{
3539 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
3540 int flag;
3541
3542 *mntrflags = 0;
3543
3544 if (!nla)
3545 return -EINVAL;
3546
8cb08174 3547 if (nla_parse_nested_deprecated(flags, NL80211_MNTR_FLAG_MAX, nla, mntr_flags_policy, NULL))
66f7ac50
MW		 3548 return -EINVAL;
3549
3550 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
3551 if (flags[flag])
3552 *mntrflags |= (1<<flag);
3553
818a986e
JB		 3554 *mntrflags |= MONITOR_FLAG_CHANGED;
3555
66f7ac50
MW		 3556 return 0;
3557}
3558
1db77596
JB		 3559static int nl80211_parse_mon_options(struct cfg80211_registered_device *rdev,
3560 enum nl80211_iftype type,
3561 struct genl_info *info,
3562 struct vif_params *params)
3563{
3564 bool change = false;
3565 int err;
3566
3567 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
3568 if (type != NL80211_IFTYPE_MONITOR)
3569 return -EINVAL;
3570
3571 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
3572 &params->flags);
3573 if (err)
3574 return err;
3575
3576 change = true;
3577 }
3578
3579 if (params->flags & MONITOR_FLAG_ACTIVE &&
3580 !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
3581 return -EOPNOTSUPP;
3582
3583 if (info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]) {
3584 const u8 *mumimo_groups;
3585 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
3586
3587 if (type != NL80211_IFTYPE_MONITOR)
3588 return -EINVAL;
3589
3590 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
3591 return -EOPNOTSUPP;
3592
3593 mumimo_groups =
3594 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]);
3595
3596 /* bits 0 and 63 are reserved and must be zero */
4954601f
JB		 3597 if ((mumimo_groups[0] & BIT(0)) ||
3598 (mumimo_groups[VHT_MUMIMO_GROUPS_DATA_LEN - 1] & BIT(7)))
1db77596
JB		 3599 return -EINVAL;
3600
3601 params->vht_mumimo_groups = mumimo_groups;
3602 change = true;
3603 }
3604
3605 if (info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]) {
3606 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
3607
3608 if (type != NL80211_IFTYPE_MONITOR)
3609 return -EINVAL;
3610
3611 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
3612 return -EOPNOTSUPP;
3613
3614 params->vht_mumimo_follow_addr =
3615 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]);
3616 change = true;
3617 }
3618
3619 return change ? 1 : 0;
3620}
3621
9bc383de 3622static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 3623 struct net_device *netdev, u8 use_4addr,
3624 enum nl80211_iftype iftype)
9bc383de 3625{
ad4bb6f8 3626 if (!use_4addr) {
2e92a2d0 3627 if (netdev && netif_is_bridge_port(netdev))
ad4bb6f8 3628 return -EBUSY;
9bc383de 3629 return 0;
ad4bb6f8 3630 }
9bc383de
JB		 3631
3632 switch (iftype) {
3633 case NL80211_IFTYPE_AP_VLAN:
3634 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
3635 return 0;
3636 break;
3637 case NL80211_IFTYPE_STATION:
3638 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
3639 return 0;
3640 break;
3641 default:
3642 break;
3643 }
3644
3645 return -EOPNOTSUPP;
3646}
3647
55682965
JB		 3648static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
3649{
4c476991 3650 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3651 struct vif_params params;
e36d56b6 3652 int err;
04a773ad 3653 enum nl80211_iftype otype, ntype;
4c476991 3654 struct net_device *dev = info->user_ptr[1];
ac7f9cfa 3655 bool change = false;
55682965 3656
2ec600d6
LCC		 3657 memset(&params, 0, sizeof(params));
3658
04a773ad 3659 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 3660
723b038d 3661 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 3662 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 3663 if (otype != ntype)
ac7f9cfa 3664 change = true;
723b038d
JB		 3665 }
3666
92ffe055 3667 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 3668 struct wireless_dev *wdev = dev->ieee80211_ptr;
3669
4c476991
JB		 3670 if (ntype != NL80211_IFTYPE_MESH_POINT)
3671 return -EINVAL;
29cbe68c
JB		 3672 if (netif_running(dev))
3673 return -EBUSY;
3674
3675 wdev_lock(wdev);
3676 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
3677 IEEE80211_MAX_MESH_ID_LEN);
3678 wdev->mesh_id_up_len =
3679 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
3680 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
3681 wdev->mesh_id_up_len);
3682 wdev_unlock(wdev);
2ec600d6
LCC		 3683 }
3684
8b787643
FF		 3685 if (info->attrs[NL80211_ATTR_4ADDR]) {
3686 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
3687 change = true;
ad4bb6f8 3688 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 3689 if (err)
4c476991 3690 return err;
8b787643
FF		 3691 } else {
3692 params.use_4addr = -1;
3693 }
3694
1db77596
JB		 3695 err = nl80211_parse_mon_options(rdev, ntype, info, &params);
3696 if (err < 0)
3697 return err;
3698 if (err > 0)
c6e6a0c8 3699 change = true;
e057d3c3 3700
ac7f9cfa 3701 if (change)
818a986e 3702 err = cfg80211_change_iface(rdev, dev, ntype, &params);
ac7f9cfa
JB		 3703 else
3704 err = 0;
60719ffd 3705
9bc383de
JB		 3706 if (!err && params.use_4addr != -1)
3707 dev->ieee80211_ptr->use_4addr = params.use_4addr;
3708
3d1a5bbf
AZ		 3709 if (change && !err) {
3710 struct wireless_dev *wdev = dev->ieee80211_ptr;
3711
3712 nl80211_notify_iface(rdev, wdev, NL80211_CMD_SET_INTERFACE);
3713 }
3714
55682965
JB		 3715 return err;
3716}
3717
3718static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
3719{
4c476991 3720 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3721 struct vif_params params;
84efbb84 3722 struct wireless_dev *wdev;
896ff063 3723 struct sk_buff *msg;
55682965
JB		 3724 int err;
3725 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
3726
78f22b6a
JB		 3727 /* to avoid failing a new interface creation due to pending removal */
3728 cfg80211_destroy_ifaces(rdev);
3729
2ec600d6
LCC		 3730 memset(&params, 0, sizeof(params));
3731
55682965
JB		 3732 if (!info->attrs[NL80211_ATTR_IFNAME])
3733 return -EINVAL;
3734
ab0d76f6 3735 if (info->attrs[NL80211_ATTR_IFTYPE])
55682965 3736 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
55682965 3737
33d915d9 3738 if (!rdev->ops->add_virtual_intf)
4c476991 3739 return -EOPNOTSUPP;
55682965 3740
cb3b7d87 3741 if ((type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN ||
e8f479b1
BG		 3742 rdev->wiphy.features & NL80211_FEATURE_MAC_ON_CREATE) &&
3743 info->attrs[NL80211_ATTR_MAC]) {
1c18f145
AS		 3744 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
3745 ETH_ALEN);
3746 if (!is_valid_ether_addr(params.macaddr))
3747 return -EADDRNOTAVAIL;
3748 }
3749
9bc383de 3750 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 3751 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 3752 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 3753 if (err)
4c476991 3754 return err;
9bc383de 3755 }
8b787643 3756
e6f40511 3757 if (!cfg80211_iftype_allowed(&rdev->wiphy, type, params.use_4addr, 0))
33d915d9
MP		 3758 return -EOPNOTSUPP;
3759
1db77596
JB		 3760 err = nl80211_parse_mon_options(rdev, type, info, &params);
3761 if (err < 0)
3762 return err;
e057d3c3 3763
a18c7192
JB		 3764 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
3765 if (!msg)
3766 return -ENOMEM;
3767
e35e4d28
HG		 3768 wdev = rdev_add_virtual_intf(rdev,
3769 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
818a986e 3770 NET_NAME_USER, type, &params);
d687cbb7
RM		 3771 if (WARN_ON(!wdev)) {
3772 nlmsg_free(msg);
3773 return -EPROTO;
3774 } else if (IS_ERR(wdev)) {
1c90f9d4 3775 nlmsg_free(msg);
84efbb84 3776 return PTR_ERR(wdev);
1c90f9d4 3777 }
2ec600d6 3778
18e5ca65 3779 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
78f22b6a
JB		 3780 wdev->owner_nlportid = info->snd_portid;
3781
98104fde
JB		 3782 switch (type) {
3783 case NL80211_IFTYPE_MESH_POINT:
3784 if (!info->attrs[NL80211_ATTR_MESH_ID])
3785 break;
29cbe68c
JB		 3786 wdev_lock(wdev);
3787 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
3788 IEEE80211_MAX_MESH_ID_LEN);
3789 wdev->mesh_id_up_len =
3790 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
3791 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
3792 wdev->mesh_id_up_len);
3793 wdev_unlock(wdev);
98104fde 3794 break;
cb3b7d87 3795 case NL80211_IFTYPE_NAN:
98104fde
JB		 3796 case NL80211_IFTYPE_P2P_DEVICE:
3797 /*
cb3b7d87 3798 * P2P Device and NAN do not have a netdev, so don't go
98104fde
JB		 3799 * through the netdev notifier and must be added here
3800 */
e4d4216e 3801 cfg80211_init_wdev(rdev, wdev);
98104fde
JB		 3802 break;
3803 default:
3804 break;
29cbe68c
JB		 3805 }
3806
15e47304 3807 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3808 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
1c90f9d4
JB		 3809 nlmsg_free(msg);
3810 return -ENOBUFS;
3811 }
3812
3813 return genlmsg_reply(msg, info);
55682965
JB		 3814}
3815
3816static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
3817{
4c476991 3818 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 3819 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3820
4c476991
JB		 3821 if (!rdev->ops->del_virtual_intf)
3822 return -EOPNOTSUPP;
55682965 3823
84efbb84
JB		 3824 /*
3825 * If we remove a wireless device without a netdev then clear
3826 * user_ptr[1] so that nl80211_post_doit won't dereference it
3827 * to check if it needs to do dev_put(). Otherwise it crashes
3828 * since the wdev has been freed, unlike with a netdev where
3829 * we need the dev_put() for the netdev to really be freed.
3830 */
3831 if (!wdev->netdev)
3832 info->user_ptr[1] = NULL;
3833
7f8ed01e 3834 return rdev_del_virtual_intf(rdev, wdev);
55682965
JB		 3835}
3836
1d9d9213
SW		 3837static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
3838{
3839 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3840 struct net_device *dev = info->user_ptr[1];
3841 u16 noack_map;
3842
3843 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
3844 return -EINVAL;
3845
3846 if (!rdev->ops->set_noack_map)
3847 return -EOPNOTSUPP;
3848
3849 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
3850
e35e4d28 3851 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 3852}
3853
41ade00f
JB		 3854struct get_key_cookie {
3855 struct sk_buff *msg;
3856 int error;
b9454e83 3857 int idx;
41ade00f
JB		 3858};
3859
3860static void get_key_callback(void *c, struct key_params *params)
3861{
b9454e83 3862 struct nlattr *key;
41ade00f
JB		 3863 struct get_key_cookie *cookie = c;
3864
9360ffd1
DM		 3865 if ((params->key &&
3866 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
3867 params->key_len, params->key)) ||
3868 (params->seq &&
3869 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
3870 params->seq_len, params->seq)) ||
3871 (params->cipher &&
3872 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
3873 params->cipher)))
3874 goto nla_put_failure;
41ade00f 3875
ae0be8de 3876 key = nla_nest_start_noflag(cookie->msg, NL80211_ATTR_KEY);
b9454e83
JB		 3877 if (!key)
3878 goto nla_put_failure;
3879
9360ffd1
DM		 3880 if ((params->key &&
3881 nla_put(cookie->msg, NL80211_KEY_DATA,
3882 params->key_len, params->key)) ||
3883 (params->seq &&
3884 nla_put(cookie->msg, NL80211_KEY_SEQ,
3885 params->seq_len, params->seq)) ||
3886 (params->cipher &&
3887 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
3888 params->cipher)))
3889 goto nla_put_failure;
b9454e83 3890
efdfce72 3891 if (nla_put_u8(cookie->msg, NL80211_KEY_IDX, cookie->idx))
9360ffd1 3892 goto nla_put_failure;
b9454e83
JB		 3893
3894 nla_nest_end(cookie->msg, key);
3895
41ade00f
JB		 3896 return;
3897 nla_put_failure:
3898 cookie->error = 1;
3899}
3900
3901static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
3902{
4c476991 3903 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 3904 int err;
4c476991 3905 struct net_device *dev = info->user_ptr[1];
41ade00f 3906 u8 key_idx = 0;
e31b8213
JB		 3907 const u8 *mac_addr = NULL;
3908 bool pairwise;
41ade00f
JB		 3909 struct get_key_cookie cookie = {
3910 .error = 0,
3911 };
3912 void *hdr;
3913 struct sk_buff *msg;
155d7c73
JB		 3914 bool bigtk_support = false;
3915
3916 if (wiphy_ext_feature_isset(&rdev->wiphy,
3917 NL80211_EXT_FEATURE_BEACON_PROTECTION))
3918 bigtk_support = true;
3919
3920 if ((dev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION ||
3921 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
3922 wiphy_ext_feature_isset(&rdev->wiphy,
3923 NL80211_EXT_FEATURE_BEACON_PROTECTION_CLIENT))
3924 bigtk_support = true;
41ade00f 3925
56be393f 3926 if (info->attrs[NL80211_ATTR_KEY_IDX]) {
41ade00f 3927 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
155d7c73
JB		 3928
3929 if (key_idx >= 6 && key_idx <= 7 && !bigtk_support) {
3930 GENL_SET_ERR_MSG(info, "BIGTK not supported");
56be393f 3931 return -EINVAL;
155d7c73 3932 }
56be393f 3933 }
41ade00f 3934
41ade00f
JB		 3935 if (info->attrs[NL80211_ATTR_MAC])
3936 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3937
e31b8213
JB		 3938 pairwise = !!mac_addr;
3939 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
3940 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
7a087e74 3941
e31b8213
JB		 3942 if (kt != NL80211_KEYTYPE_GROUP &&
3943 kt != NL80211_KEYTYPE_PAIRWISE)
3944 return -EINVAL;
3945 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
3946 }
3947
4c476991
JB		 3948 if (!rdev->ops->get_key)
3949 return -EOPNOTSUPP;
41ade00f 3950
0fa7b391
JB		 3951 if (!pairwise && mac_addr && !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
3952 return -ENOENT;
3953
fd2120ca 3954 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 3955 if (!msg)
3956 return -ENOMEM;
41ade00f 3957
15e47304 3958 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 3959 NL80211_CMD_NEW_KEY);
cb35fba3 3960 if (!hdr)
9fe271af 3961 goto nla_put_failure;
41ade00f
JB		 3962
3963 cookie.msg = msg;
b9454e83 3964 cookie.idx = key_idx;
41ade00f 3965
9360ffd1
DM		 3966 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3967 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
3968 goto nla_put_failure;
3969 if (mac_addr &&
3970 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
3971 goto nla_put_failure;
41ade00f 3972
e35e4d28
HG		 3973 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
3974 get_key_callback);
41ade00f
JB		 3975
3976 if (err)
6c95e2a2 3977 goto free_msg;
41ade00f
JB		 3978
3979 if (cookie.error)
3980 goto nla_put_failure;
3981
3982 genlmsg_end(msg, hdr);
4c476991 3983 return genlmsg_reply(msg, info);
41ade00f
JB		 3984
3985 nla_put_failure:
3986 err = -ENOBUFS;
6c95e2a2 3987 free_msg:
41ade00f 3988 nlmsg_free(msg);
41ade00f
JB		 3989 return err;
3990}
3991
3992static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
3993{
4c476991 3994 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 3995 struct key_parse key;
41ade00f 3996 int err;
4c476991 3997 struct net_device *dev = info->user_ptr[1];
41ade00f 3998
b9454e83
JB		 3999 err = nl80211_parse_key(info, &key);
4000 if (err)
4001 return err;
41ade00f 4002
b9454e83 4003 if (key.idx < 0)
41ade00f
JB		 4004 return -EINVAL;
4005
6cdd3979
AW		 4006 /* Only support setting default key and
4007 * Extended Key ID action NL80211_KEY_SET_TX.
4008 */
56be393f 4009 if (!key.def && !key.defmgmt && !key.defbeacon &&
6cdd3979 4010 !(key.p.mode == NL80211_KEY_SET_TX))
41ade00f
JB		 4011 return -EINVAL;
4012
dbd2fd65 4013 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 4014
dbd2fd65
JB		 4015 if (key.def) {
4016 if (!rdev->ops->set_default_key) {
4017 err = -EOPNOTSUPP;
4018 goto out;
4019 }
41ade00f 4020
dbd2fd65
JB		 4021 err = nl80211_key_allowed(dev->ieee80211_ptr);
4022 if (err)
4023 goto out;
4024
e35e4d28 4025 err = rdev_set_default_key(rdev, dev, key.idx,
dbd2fd65
JB		 4026 key.def_uni, key.def_multi);
4027
4028 if (err)
4029 goto out;
fffd0934 4030
3d23e349 4031#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 4032 dev->ieee80211_ptr->wext.default_key = key.idx;
4033#endif
6cdd3979 4034 } else if (key.defmgmt) {
dbd2fd65
JB		 4035 if (key.def_uni || !key.def_multi) {
4036 err = -EINVAL;
4037 goto out;
4038 }
4039
4040 if (!rdev->ops->set_default_mgmt_key) {
4041 err = -EOPNOTSUPP;
4042 goto out;
4043 }
4044
4045 err = nl80211_key_allowed(dev->ieee80211_ptr);
4046 if (err)
4047 goto out;
4048
e35e4d28 4049 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
dbd2fd65
JB		 4050 if (err)
4051 goto out;
4052
4053#ifdef CONFIG_CFG80211_WEXT
4054 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 4055#endif
56be393f
JM		 4056 } else if (key.defbeacon) {
4057 if (key.def_uni || !key.def_multi) {
4058 err = -EINVAL;
4059 goto out;
4060 }
4061
4062 if (!rdev->ops->set_default_beacon_key) {
4063 err = -EOPNOTSUPP;
4064 goto out;
4065 }
4066
4067 err = nl80211_key_allowed(dev->ieee80211_ptr);
4068 if (err)
4069 goto out;
4070
4071 err = rdev_set_default_beacon_key(rdev, dev, key.idx);
4072 if (err)
4073 goto out;
6cdd3979
AW		 4074 } else if (key.p.mode == NL80211_KEY_SET_TX &&
4075 wiphy_ext_feature_isset(&rdev->wiphy,
4076 NL80211_EXT_FEATURE_EXT_KEY_ID)) {
4077 u8 *mac_addr = NULL;
4078
4079 if (info->attrs[NL80211_ATTR_MAC])
4080 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4081
4082 if (!mac_addr || key.idx < 0 || key.idx > 1) {
4083 err = -EINVAL;
4084 goto out;
4085 }
dbd2fd65 4086
6cdd3979
AW		 4087 err = rdev_add_key(rdev, dev, key.idx,
4088 NL80211_KEYTYPE_PAIRWISE,
4089 mac_addr, &key.p);
4090 } else {
4091 err = -EINVAL;
4092 }
dbd2fd65 4093 out:
fffd0934 4094 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4095
41ade00f
JB		 4096 return err;
4097}
4098
4099static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
4100{
4c476991 4101 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 4102 int err;
4c476991 4103 struct net_device *dev = info->user_ptr[1];
b9454e83 4104 struct key_parse key;
e31b8213 4105 const u8 *mac_addr = NULL;
41ade00f 4106
b9454e83
JB		 4107 err = nl80211_parse_key(info, &key);
4108 if (err)
4109 return err;
41ade00f 4110
f8af764b
JM		 4111 if (!key.p.key) {
4112 GENL_SET_ERR_MSG(info, "no key");
41ade00f 4113 return -EINVAL;
f8af764b 4114 }
41ade00f 4115
41ade00f
JB		 4116 if (info->attrs[NL80211_ATTR_MAC])
4117 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4118
e31b8213
JB		 4119 if (key.type == -1) {
4120 if (mac_addr)
4121 key.type = NL80211_KEYTYPE_PAIRWISE;
4122 else
4123 key.type = NL80211_KEYTYPE_GROUP;
4124 }
4125
4126 /* for now */
4127 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
f8af764b
JM		 4128 key.type != NL80211_KEYTYPE_GROUP) {
4129 GENL_SET_ERR_MSG(info, "key type not pairwise or group");
e31b8213 4130 return -EINVAL;
f8af764b 4131 }
e31b8213 4132
14f34e36
GG		 4133 if (key.type == NL80211_KEYTYPE_GROUP &&
4134 info->attrs[NL80211_ATTR_VLAN_ID])
4135 key.p.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
4136
4c476991
JB		 4137 if (!rdev->ops->add_key)
4138 return -EOPNOTSUPP;
25e47c18 4139
e31b8213
JB		 4140 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
4141 key.type == NL80211_KEYTYPE_PAIRWISE,
f8af764b
JM		 4142 mac_addr)) {
4143 GENL_SET_ERR_MSG(info, "key setting validation failed");
4c476991 4144 return -EINVAL;
f8af764b 4145 }
41ade00f 4146
fffd0934
JB		 4147 wdev_lock(dev->ieee80211_ptr);
4148 err = nl80211_key_allowed(dev->ieee80211_ptr);
f8af764b
JM		 4149 if (err)
4150 GENL_SET_ERR_MSG(info, "key not allowed");
4151 if (!err) {
e35e4d28
HG		 4152 err = rdev_add_key(rdev, dev, key.idx,
4153 key.type == NL80211_KEYTYPE_PAIRWISE,
4154 mac_addr, &key.p);
f8af764b
JM		 4155 if (err)
4156 GENL_SET_ERR_MSG(info, "key addition failed");
4157 }
fffd0934 4158 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4159
41ade00f
JB		 4160 return err;
4161}
4162
4163static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
4164{
4c476991 4165 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4166 int err;
4c476991 4167 struct net_device *dev = info->user_ptr[1];
41ade00f 4168 u8 *mac_addr = NULL;
b9454e83 4169 struct key_parse key;
41ade00f 4170
b9454e83
JB		 4171 err = nl80211_parse_key(info, &key);
4172 if (err)
4173 return err;
41ade00f
JB		 4174
4175 if (info->attrs[NL80211_ATTR_MAC])
4176 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4177
e31b8213
JB		 4178 if (key.type == -1) {
4179 if (mac_addr)
4180 key.type = NL80211_KEYTYPE_PAIRWISE;
4181 else
4182 key.type = NL80211_KEYTYPE_GROUP;
4183 }
4184
4185 /* for now */
4186 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
4187 key.type != NL80211_KEYTYPE_GROUP)
4188 return -EINVAL;
4189
4c476991
JB		 4190 if (!rdev->ops->del_key)
4191 return -EOPNOTSUPP;
41ade00f 4192
fffd0934
JB		 4193 wdev_lock(dev->ieee80211_ptr);
4194 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213 4195
0fa7b391 4196 if (key.type == NL80211_KEYTYPE_GROUP && mac_addr &&
e31b8213
JB		 4197 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4198 err = -ENOENT;
4199
fffd0934 4200 if (!err)
e35e4d28
HG		 4201 err = rdev_del_key(rdev, dev, key.idx,
4202 key.type == NL80211_KEYTYPE_PAIRWISE,
4203 mac_addr);
41ade00f 4204
3d23e349 4205#ifdef CONFIG_CFG80211_WEXT
08645126 4206 if (!err) {
b9454e83 4207 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 4208 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 4209 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 4210 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
4211 }
4212#endif
fffd0934 4213 wdev_unlock(dev->ieee80211_ptr);
08645126 4214
41ade00f
JB		 4215 return err;
4216}
4217
77765eaf
VT		 4218/* This function returns an error or the number of nested attributes */
4219static int validate_acl_mac_addrs(struct nlattr *nl_attr)
4220{
4221 struct nlattr *attr;
4222 int n_entries = 0, tmp;
4223
4224 nla_for_each_nested(attr, nl_attr, tmp) {
4225 if (nla_len(attr) != ETH_ALEN)
4226 return -EINVAL;
4227
4228 n_entries++;
4229 }
4230
4231 return n_entries;
4232}
4233
4234/*
4235 * This function parses ACL information and allocates memory for ACL data.
4236 * On successful return, the calling function is responsible to free the
4237 * ACL buffer returned by this function.
4238 */
4239static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
4240 struct genl_info *info)
4241{
4242 enum nl80211_acl_policy acl_policy;
4243 struct nlattr *attr;
4244 struct cfg80211_acl_data *acl;
4245 int i = 0, n_entries, tmp;
4246
4247 if (!wiphy->max_acl_mac_addrs)
4248 return ERR_PTR(-EOPNOTSUPP);
4249
4250 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
4251 return ERR_PTR(-EINVAL);
4252
4253 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
4254 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
4255 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
4256 return ERR_PTR(-EINVAL);
4257
4258 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
4259 return ERR_PTR(-EINVAL);
4260
4261 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
4262 if (n_entries < 0)
4263 return ERR_PTR(n_entries);
4264
4265 if (n_entries > wiphy->max_acl_mac_addrs)
4266 return ERR_PTR(-ENOTSUPP);
4267
391d132c 4268 acl = kzalloc(struct_size(acl, mac_addrs, n_entries), GFP_KERNEL);
77765eaf
VT		 4269 if (!acl)
4270 return ERR_PTR(-ENOMEM);
4271
4272 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
4273 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
4274 i++;
4275 }
4276
4277 acl->n_acl_entries = n_entries;
4278 acl->acl_policy = acl_policy;
4279
4280 return acl;
4281}
4282
4283static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
4284{
4285 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4286 struct net_device *dev = info->user_ptr[1];
4287 struct cfg80211_acl_data *acl;
4288 int err;
4289
4290 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4291 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4292 return -EOPNOTSUPP;
4293
4294 if (!dev->ieee80211_ptr->beacon_interval)
4295 return -EINVAL;
4296
4297 acl = parse_acl_data(&rdev->wiphy, info);
4298 if (IS_ERR(acl))
4299 return PTR_ERR(acl);
4300
4301 err = rdev_set_mac_acl(rdev, dev, acl);
4302
4303 kfree(acl);
4304
4305 return err;
4306}
4307
a7c7fbff
PK		 4308static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4309 u8 *rates, u8 rates_len)
4310{
4311 u8 i;
4312 u32 mask = 0;
4313
4314 for (i = 0; i < rates_len; i++) {
4315 int rate = (rates[i] & 0x7f) * 5;
4316 int ridx;
4317
4318 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
4319 struct ieee80211_rate *srate =
4320 &sband->bitrates[ridx];
4321 if (rate == srate->bitrate) {
4322 mask |= 1 << ridx;
4323 break;
4324 }
4325 }
4326 if (ridx == sband->n_bitrates)
4327 return 0; /* rate not found */
4328 }
4329
4330 return mask;
4331}
4332
4333static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
4334 u8 *rates, u8 rates_len,
4335 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
4336{
4337 u8 i;
4338
4339 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
4340
4341 for (i = 0; i < rates_len; i++) {
4342 int ridx, rbit;
4343
4344 ridx = rates[i] / 8;
4345 rbit = BIT(rates[i] % 8);
4346
4347 /* check validity */
4348 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
4349 return false;
4350
4351 /* check availability */
30fe6d50 4352 ridx = array_index_nospec(ridx, IEEE80211_HT_MCS_MASK_LEN);
a7c7fbff
PK		 4353 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
4354 mcs[ridx] |= rbit;
4355 else
4356 return false;
4357 }
4358
4359 return true;
4360}
4361
4362static u16 vht_mcs_map_to_mcs_mask(u8 vht_mcs_map)
4363{
4364 u16 mcs_mask = 0;
4365
4366 switch (vht_mcs_map) {
4367 case IEEE80211_VHT_MCS_NOT_SUPPORTED:
4368 break;
4369 case IEEE80211_VHT_MCS_SUPPORT_0_7:
4370 mcs_mask = 0x00FF;
4371 break;
4372 case IEEE80211_VHT_MCS_SUPPORT_0_8:
4373 mcs_mask = 0x01FF;
4374 break;
4375 case IEEE80211_VHT_MCS_SUPPORT_0_9:
4376 mcs_mask = 0x03FF;
4377 break;
4378 default:
4379 break;
4380 }
4381
4382 return mcs_mask;
4383}
4384
4385static void vht_build_mcs_mask(u16 vht_mcs_map,
4386 u16 vht_mcs_mask[NL80211_VHT_NSS_MAX])
4387{
4388 u8 nss;
4389
4390 for (nss = 0; nss < NL80211_VHT_NSS_MAX; nss++) {
4391 vht_mcs_mask[nss] = vht_mcs_map_to_mcs_mask(vht_mcs_map & 0x03);
4392 vht_mcs_map >>= 2;
4393 }
4394}
4395
4396static bool vht_set_mcs_mask(struct ieee80211_supported_band *sband,
4397 struct nl80211_txrate_vht *txrate,
4398 u16 mcs[NL80211_VHT_NSS_MAX])
4399{
4400 u16 tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4401 u16 tx_mcs_mask[NL80211_VHT_NSS_MAX] = {};
4402 u8 i;
4403
4404 if (!sband->vht_cap.vht_supported)
4405 return false;
4406
4407 memset(mcs, 0, sizeof(u16) * NL80211_VHT_NSS_MAX);
4408
4409 /* Build vht_mcs_mask from VHT capabilities */
4410 vht_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4411
4412 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
4413 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4414 mcs[i] = txrate->mcs[i];
4415 else
4416 return false;
4417 }
4418
4419 return true;
4420}
4421
a7c7fbff 4422static int nl80211_parse_tx_bitrate_mask(struct genl_info *info,
9a5f6488
TC		 4423 struct nlattr *attrs[],
4424 enum nl80211_attrs attr,
a7c7fbff
PK		 4425 struct cfg80211_bitrate_mask *mask)
4426{
4427 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4428 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4429 int rem, i;
4430 struct nlattr *tx_rates;
4431 struct ieee80211_supported_band *sband;
4432 u16 vht_tx_mcs_map;
4433
4434 memset(mask, 0, sizeof(*mask));
4435 /* Default to all rates enabled */
4436 for (i = 0; i < NUM_NL80211_BANDS; i++) {
4437 sband = rdev->wiphy.bands[i];
4438
4439 if (!sband)
4440 continue;
4441
4442 mask->control[i].legacy = (1 << sband->n_bitrates) - 1;
4443 memcpy(mask->control[i].ht_mcs,
4444 sband->ht_cap.mcs.rx_mask,
4445 sizeof(mask->control[i].ht_mcs));
4446
4447 if (!sband->vht_cap.vht_supported)
4448 continue;
4449
4450 vht_tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4451 vht_build_mcs_mask(vht_tx_mcs_map, mask->control[i].vht_mcs);
4452 }
4453
4454 /* if no rates are given set it back to the defaults */
9a5f6488 4455 if (!attrs[attr])
a7c7fbff
PK		 4456 goto out;
4457
4458 /* The nested attribute uses enum nl80211_band as the index. This maps
4459 * directly to the enum nl80211_band values used in cfg80211.
4460 */
4461 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
9a5f6488 4462 nla_for_each_nested(tx_rates, attrs[attr], rem) {
a7c7fbff
PK		 4463 enum nl80211_band band = nla_type(tx_rates);
4464 int err;
4465
4466 if (band < 0 || band >= NUM_NL80211_BANDS)
4467 return -EINVAL;
4468 sband = rdev->wiphy.bands[band];
4469 if (sband == NULL)
4470 return -EINVAL;
8cb08174
JB		 4471 err = nla_parse_nested_deprecated(tb, NL80211_TXRATE_MAX,
4472 tx_rates,
4473 nl80211_txattr_policy,
4474 info->extack);
a7c7fbff
PK		 4475 if (err)
4476 return err;
4477 if (tb[NL80211_TXRATE_LEGACY]) {
4478 mask->control[band].legacy = rateset_to_mask(
4479 sband,
4480 nla_data(tb[NL80211_TXRATE_LEGACY]),
4481 nla_len(tb[NL80211_TXRATE_LEGACY]));
4482 if ((mask->control[band].legacy == 0) &&
4483 nla_len(tb[NL80211_TXRATE_LEGACY]))
4484 return -EINVAL;
4485 }
4486 if (tb[NL80211_TXRATE_HT]) {
4487 if (!ht_rateset_to_mask(
4488 sband,
4489 nla_data(tb[NL80211_TXRATE_HT]),
4490 nla_len(tb[NL80211_TXRATE_HT]),
4491 mask->control[band].ht_mcs))
4492 return -EINVAL;
4493 }
4494 if (tb[NL80211_TXRATE_VHT]) {
4495 if (!vht_set_mcs_mask(
4496 sband,
4497 nla_data(tb[NL80211_TXRATE_VHT]),
4498 mask->control[band].vht_mcs))
4499 return -EINVAL;
4500 }
4501 if (tb[NL80211_TXRATE_GI]) {
4502 mask->control[band].gi =
4503 nla_get_u8(tb[NL80211_TXRATE_GI]);
4504 if (mask->control[band].gi > NL80211_TXRATE_FORCE_LGI)
4505 return -EINVAL;
4506 }
4507
4508 if (mask->control[band].legacy == 0) {
4509 /* don't allow empty legacy rates if HT or VHT
4510 * are not even supported.
4511 */
4512 if (!(rdev->wiphy.bands[band]->ht_cap.ht_supported ||
4513 rdev->wiphy.bands[band]->vht_cap.vht_supported))
4514 return -EINVAL;
4515
4516 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
4517 if (mask->control[band].ht_mcs[i])
4518 goto out;
4519
4520 for (i = 0; i < NL80211_VHT_NSS_MAX; i++)
4521 if (mask->control[band].vht_mcs[i])
4522 goto out;
4523
4524 /* legacy and mcs rates may not be both empty */
4525 return -EINVAL;
4526 }
4527 }
4528
4529out:
4530 return 0;
4531}
4532
8564e382
JB		 4533static int validate_beacon_tx_rate(struct cfg80211_registered_device *rdev,
4534 enum nl80211_band band,
4535 struct cfg80211_bitrate_mask *beacon_rate)
a7c7fbff 4536{
8564e382
JB		 4537 u32 count_ht, count_vht, i;
4538 u32 rate = beacon_rate->control[band].legacy;
a7c7fbff
PK		 4539
4540 /* Allow only one rate */
4541 if (hweight32(rate) > 1)
4542 return -EINVAL;
4543
4544 count_ht = 0;
4545 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
8564e382 4546 if (hweight8(beacon_rate->control[band].ht_mcs[i]) > 1) {
a7c7fbff 4547 return -EINVAL;
8564e382 4548 } else if (beacon_rate->control[band].ht_mcs[i]) {
a7c7fbff
PK		 4549 count_ht++;
4550 if (count_ht > 1)
4551 return -EINVAL;
4552 }
4553 if (count_ht && rate)
4554 return -EINVAL;
4555 }
4556
4557 count_vht = 0;
4558 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
8564e382 4559 if (hweight16(beacon_rate->control[band].vht_mcs[i]) > 1) {
a7c7fbff 4560 return -EINVAL;
8564e382 4561 } else if (beacon_rate->control[band].vht_mcs[i]) {
a7c7fbff
PK		 4562 count_vht++;
4563 if (count_vht > 1)
4564 return -EINVAL;
4565 }
4566 if (count_vht && rate)
4567 return -EINVAL;
4568 }
4569
4570 if ((count_ht && count_vht) || (!rate && !count_ht && !count_vht))
4571 return -EINVAL;
4572
8564e382
JB		 4573 if (rate &&
4574 !wiphy_ext_feature_isset(&rdev->wiphy,
4575 NL80211_EXT_FEATURE_BEACON_RATE_LEGACY))
4576 return -EINVAL;
4577 if (count_ht &&
4578 !wiphy_ext_feature_isset(&rdev->wiphy,
4579 NL80211_EXT_FEATURE_BEACON_RATE_HT))
4580 return -EINVAL;
4581 if (count_vht &&
4582 !wiphy_ext_feature_isset(&rdev->wiphy,
4583 NL80211_EXT_FEATURE_BEACON_RATE_VHT))
4584 return -EINVAL;
4585
a7c7fbff
PK		 4586 return 0;
4587}
4588
81e54d08
PKC		 4589static int nl80211_parse_beacon(struct cfg80211_registered_device *rdev,
4590 struct nlattr *attrs[],
8860020e 4591 struct cfg80211_beacon_data *bcn)
ed1b6cc7 4592{
8860020e 4593 bool haveinfo = false;
81e54d08 4594 int err;
ed1b6cc7 4595
8860020e 4596 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 4597
a1193be8
SW		 4598 if (attrs[NL80211_ATTR_BEACON_HEAD]) {
4599 bcn->head = nla_data(attrs[NL80211_ATTR_BEACON_HEAD]);
4600 bcn->head_len = nla_len(attrs[NL80211_ATTR_BEACON_HEAD]);
8860020e
JB		 4601 if (!bcn->head_len)
4602 return -EINVAL;
4603 haveinfo = true;
ed1b6cc7
JB		 4604 }
4605
a1193be8
SW		 4606 if (attrs[NL80211_ATTR_BEACON_TAIL]) {
4607 bcn->tail = nla_data(attrs[NL80211_ATTR_BEACON_TAIL]);
4608 bcn->tail_len = nla_len(attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 4609 haveinfo = true;
ed1b6cc7
JB		 4610 }
4611
4c476991
JB		 4612 if (!haveinfo)
4613 return -EINVAL;
3b85875a 4614
a1193be8
SW		 4615 if (attrs[NL80211_ATTR_IE]) {
4616 bcn->beacon_ies = nla_data(attrs[NL80211_ATTR_IE]);
4617 bcn->beacon_ies_len = nla_len(attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 4618 }
4619
a1193be8 4620 if (attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 4621 bcn->proberesp_ies =
a1193be8 4622 nla_data(attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 4623 bcn->proberesp_ies_len =
a1193be8 4624 nla_len(attrs[NL80211_ATTR_IE_PROBE_RESP]);
9946ecfb
JM		 4625 }
4626
a1193be8 4627 if (attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 4628 bcn->assocresp_ies =
a1193be8 4629 nla_data(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 4630 bcn->assocresp_ies_len =
a1193be8 4631 nla_len(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
9946ecfb
JM		 4632 }
4633
a1193be8
SW		 4634 if (attrs[NL80211_ATTR_PROBE_RESP]) {
4635 bcn->probe_resp = nla_data(attrs[NL80211_ATTR_PROBE_RESP]);
4636 bcn->probe_resp_len = nla_len(attrs[NL80211_ATTR_PROBE_RESP]);
00f740e1
AN		 4637 }
4638
81e54d08
PKC		 4639 if (attrs[NL80211_ATTR_FTM_RESPONDER]) {
4640 struct nlattr *tb[NL80211_FTM_RESP_ATTR_MAX + 1];
4641
8cb08174
JB		 4642 err = nla_parse_nested_deprecated(tb,
4643 NL80211_FTM_RESP_ATTR_MAX,
4644 attrs[NL80211_ATTR_FTM_RESPONDER],
4645 NULL, NULL);
81e54d08
PKC		 4646 if (err)
4647 return err;
4648
4649 if (tb[NL80211_FTM_RESP_ATTR_ENABLED] &&
4650 wiphy_ext_feature_isset(&rdev->wiphy,
4651 NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER))
4652 bcn->ftm_responder = 1;
4653 else
4654 return -EOPNOTSUPP;
4655
4656 if (tb[NL80211_FTM_RESP_ATTR_LCI]) {
4657 bcn->lci = nla_data(tb[NL80211_FTM_RESP_ATTR_LCI]);
4658 bcn->lci_len = nla_len(tb[NL80211_FTM_RESP_ATTR_LCI]);
4659 }
4660
4661 if (tb[NL80211_FTM_RESP_ATTR_CIVICLOC]) {
4662 bcn->civicloc = nla_data(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
4663 bcn->civicloc_len = nla_len(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
4664 }
4665 } else {
4666 bcn->ftm_responder = -1;
4667 }
4668
8860020e
JB		 4669 return 0;
4670}
4671
796e90f4
JC		 4672static int nl80211_parse_he_obss_pd(struct nlattr *attrs,
4673 struct ieee80211_he_obss_pd *he_obss_pd)
4674{
4675 struct nlattr *tb[NL80211_HE_OBSS_PD_ATTR_MAX + 1];
4676 int err;
4677
4678 err = nla_parse_nested(tb, NL80211_HE_OBSS_PD_ATTR_MAX, attrs,
4679 he_obss_pd_policy, NULL);
4680 if (err)
4681 return err;
4682
4683 if (!tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] ||
4684 !tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET])
4685 return -EINVAL;
4686
4687 he_obss_pd->min_offset =
4688 nla_get_u32(tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET]);
4689 he_obss_pd->max_offset =
4690 nla_get_u32(tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET]);
4691
4692 if (he_obss_pd->min_offset >= he_obss_pd->max_offset)
4693 return -EINVAL;
4694
4695 he_obss_pd->enable = true;
4696
4697 return 0;
4698}
4699
5c5e52d1
JC		 4700static int nl80211_parse_he_bss_color(struct nlattr *attrs,
4701 struct cfg80211_he_bss_color *he_bss_color)
4702{
4703 struct nlattr *tb[NL80211_HE_BSS_COLOR_ATTR_MAX + 1];
4704 int err;
4705
4706 err = nla_parse_nested(tb, NL80211_HE_BSS_COLOR_ATTR_MAX, attrs,
4707 he_bss_color_policy, NULL);
4708 if (err)
4709 return err;
4710
4711 if (!tb[NL80211_HE_BSS_COLOR_ATTR_COLOR])
4712 return -EINVAL;
4713
4714 he_bss_color->color =
4715 nla_get_u8(tb[NL80211_HE_BSS_COLOR_ATTR_COLOR]);
4716 he_bss_color->disabled =
4717 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_DISABLED]);
4718 he_bss_color->partial =
4719 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_PARTIAL]);
4720
4721 return 0;
4722}
4723
66cd794e
JB		 4724static void nl80211_check_ap_rate_selectors(struct cfg80211_ap_settings *params,
4725 const u8 *rates)
4726{
4727 int i;
4728
4729 if (!rates)
4730 return;
4731
4732 for (i = 0; i < rates[1]; i++) {
4733 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
4734 params->ht_required = true;
4735 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_VHT_PHY)
4736 params->vht_required = true;
2a392596
IP		 4737 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_HE_PHY)
4738 params->he_required = true;
66cd794e
JB		 4739 }
4740}
4741
4742/*
4743 * Since the nl80211 API didn't include, from the beginning, attributes about
4744 * HT/VHT requirements/capabilities, we parse them out of the IEs for the
4745 * benefit of drivers that rebuild IEs in the firmware.
4746 */
4747static void nl80211_calculate_ap_params(struct cfg80211_ap_settings *params)
4748{
4749 const struct cfg80211_beacon_data *bcn = &params->beacon;
ba83bfb1
IM		 4750 size_t ies_len = bcn->tail_len;
4751 const u8 *ies = bcn->tail;
66cd794e
JB		 4752 const u8 *rates;
4753 const u8 *cap;
4754
4755 rates = cfg80211_find_ie(WLAN_EID_SUPP_RATES, ies, ies_len);
4756 nl80211_check_ap_rate_selectors(params, rates);
4757
4758 rates = cfg80211_find_ie(WLAN_EID_EXT_SUPP_RATES, ies, ies_len);
4759 nl80211_check_ap_rate_selectors(params, rates);
4760
4761 cap = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, ies, ies_len);
4762 if (cap && cap[1] >= sizeof(*params->ht_cap))
4763 params->ht_cap = (void *)(cap + 2);
4764 cap = cfg80211_find_ie(WLAN_EID_VHT_CAPABILITY, ies, ies_len);
4765 if (cap && cap[1] >= sizeof(*params->vht_cap))
4766 params->vht_cap = (void *)(cap + 2);
244eb9ae
ST		 4767 cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_CAPABILITY, ies, ies_len);
4768 if (cap && cap[1] >= sizeof(*params->he_cap) + 1)
4769 params->he_cap = (void *)(cap + 3);
7e8d6f12
ST		 4770 cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_OPERATION, ies, ies_len);
4771 if (cap && cap[1] >= sizeof(*params->he_oper) + 1)
4772 params->he_oper = (void *)(cap + 3);
66cd794e
JB		 4773}
4774
46c1dd0c
FF		 4775static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
4776 struct cfg80211_ap_settings *params)
4777{
4778 struct wireless_dev *wdev;
4779 bool ret = false;
4780
53873f13 4781 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
46c1dd0c
FF		 4782 if (wdev->iftype != NL80211_IFTYPE_AP &&
4783 wdev->iftype != NL80211_IFTYPE_P2P_GO)
4784 continue;
4785
683b6d3b 4786 if (!wdev->preset_chandef.chan)
46c1dd0c
FF		 4787 continue;
4788
683b6d3b 4789 params->chandef = wdev->preset_chandef;
46c1dd0c
FF		 4790 ret = true;
4791 break;
4792 }
4793
46c1dd0c
FF		 4794 return ret;
4795}
4796
e39e5b5e
JM		 4797static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
4798 enum nl80211_auth_type auth_type,
4799 enum nl80211_commands cmd)
4800{
4801 if (auth_type > NL80211_AUTHTYPE_MAX)
4802 return false;
4803
4804 switch (cmd) {
4805 case NL80211_CMD_AUTHENTICATE:
4806 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
4807 auth_type == NL80211_AUTHTYPE_SAE)
4808 return false;
63181060
JM		 4809 if (!wiphy_ext_feature_isset(&rdev->wiphy,
4810 NL80211_EXT_FEATURE_FILS_STA) &&
4811 (auth_type == NL80211_AUTHTYPE_FILS_SK ||
4812 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
4813 auth_type == NL80211_AUTHTYPE_FILS_PK))
4814 return false;
e39e5b5e
JM		 4815 return true;
4816 case NL80211_CMD_CONNECT:
10773a7c 4817 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
26f7044e
CHH		 4818 !wiphy_ext_feature_isset(&rdev->wiphy,
4819 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10773a7c 4820 auth_type == NL80211_AUTHTYPE_SAE)
a3caf744 4821 return false;
10773a7c 4822
a3caf744
VK		 4823 /* FILS with SK PFS or PK not supported yet */
4824 if (auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
4825 auth_type == NL80211_AUTHTYPE_FILS_PK)
4826 return false;
4827 if (!wiphy_ext_feature_isset(
4828 &rdev->wiphy,
4829 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
4830 auth_type == NL80211_AUTHTYPE_FILS_SK)
4831 return false;
4832 return true;
e39e5b5e
JM		 4833 case NL80211_CMD_START_AP:
4834 /* SAE not supported yet */
4835 if (auth_type == NL80211_AUTHTYPE_SAE)
4836 return false;
63181060
JM		 4837 /* FILS not supported yet */
4838 if (auth_type == NL80211_AUTHTYPE_FILS_SK ||
4839 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
4840 auth_type == NL80211_AUTHTYPE_FILS_PK)
4841 return false;
e39e5b5e
JM		 4842 return true;
4843 default:
4844 return false;
4845 }
4846}
4847
8860020e
JB		 4848static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
4849{
4850 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4851 struct net_device *dev = info->user_ptr[1];
4852 struct wireless_dev *wdev = dev->ieee80211_ptr;
4853 struct cfg80211_ap_settings params;
4854 int err;
4855
4856 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4857 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4858 return -EOPNOTSUPP;
4859
4860 if (!rdev->ops->start_ap)
4861 return -EOPNOTSUPP;
4862
4863 if (wdev->beacon_interval)
4864 return -EALREADY;
4865
4866 memset(&params, 0, sizeof(params));
4867
4868 /* these are required for START_AP */
4869 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
4870 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
4871 !info->attrs[NL80211_ATTR_BEACON_HEAD])
4872 return -EINVAL;
4873
81e54d08 4874 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon);
8860020e
JB		 4875 if (err)
4876 return err;
4877
4878 params.beacon_interval =
4879 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
4880 params.dtim_period =
4881 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
4882
0c317a02
PK		 4883 err = cfg80211_validate_beacon_int(rdev, dev->ieee80211_ptr->iftype,
4884 params.beacon_interval);
8860020e
JB		 4885 if (err)
4886 return err;
4887
4888 /*
4889 * In theory, some of these attributes should be required here
4890 * but since they were not used when the command was originally
4891 * added, keep them optional for old user space programs to let
4892 * them continue to work with drivers that do not need the
4893 * additional information -- drivers must check!
4894 */
4895 if (info->attrs[NL80211_ATTR_SSID]) {
4896 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4897 params.ssid_len =
4898 nla_len(info->attrs[NL80211_ATTR_SSID]);
4899 if (params.ssid_len == 0 ||
4900 params.ssid_len > IEEE80211_MAX_SSID_LEN)
4901 return -EINVAL;
4902 }
4903
ab0d76f6 4904 if (info->attrs[NL80211_ATTR_HIDDEN_SSID])
8860020e
JB		 4905 params.hidden_ssid = nla_get_u32(
4906 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
8860020e
JB		 4907
4908 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
4909
4910 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
4911 params.auth_type = nla_get_u32(
4912 info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 4913 if (!nl80211_valid_auth_type(rdev, params.auth_type,
4914 NL80211_CMD_START_AP))
8860020e
JB		 4915 return -EINVAL;
4916 } else
4917 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
4918
4919 err = nl80211_crypto_settings(rdev, info, &params.crypto,
4920 NL80211_MAX_NR_CIPHER_SUITES);
4921 if (err)
4922 return err;
4923
1b658f11
VT		 4924 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
4925 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
4926 return -EOPNOTSUPP;
4927 params.inactivity_timeout = nla_get_u16(
4928 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
4929 }
4930
53cabad7
JB		 4931 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
4932 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4933 return -EINVAL;
4934 params.p2p_ctwindow =
4935 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 4936 if (params.p2p_ctwindow != 0 &&
4937 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
4938 return -EINVAL;
4939 }
4940
4941 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
4942 u8 tmp;
4943
4944 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4945 return -EINVAL;
4946 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 4947 params.p2p_opp_ps = tmp;
4948 if (params.p2p_opp_ps != 0 &&
4949 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
4950 return -EINVAL;
4951 }
4952
aa430da4 4953 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 4954 err = nl80211_parse_chandef(rdev, info, &params.chandef);
4955 if (err)
4956 return err;
4957 } else if (wdev->preset_chandef.chan) {
4958 params.chandef = wdev->preset_chandef;
46c1dd0c 4959 } else if (!nl80211_get_ap_channel(rdev, &params))
aa430da4
JB		 4960 return -EINVAL;
4961
923b352f
AN		 4962 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
4963 wdev->iftype))
aa430da4
JB		 4964 return -EINVAL;
4965
a7c7fbff 4966 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 4967 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
4968 NL80211_ATTR_TX_RATES,
4969 &params.beacon_rate);
a7c7fbff
PK		 4970 if (err)
4971 return err;
4972
8564e382
JB		 4973 err = validate_beacon_tx_rate(rdev, params.chandef.chan->band,
4974 &params.beacon_rate);
a7c7fbff
PK		 4975 if (err)
4976 return err;
4977 }
4978
18998c38
EP		 4979 if (info->attrs[NL80211_ATTR_SMPS_MODE]) {
4980 params.smps_mode =
4981 nla_get_u8(info->attrs[NL80211_ATTR_SMPS_MODE]);
4982 switch (params.smps_mode) {
4983 case NL80211_SMPS_OFF:
4984 break;
4985 case NL80211_SMPS_STATIC:
4986 if (!(rdev->wiphy.features &
4987 NL80211_FEATURE_STATIC_SMPS))
4988 return -EINVAL;
4989 break;
4990 case NL80211_SMPS_DYNAMIC:
4991 if (!(rdev->wiphy.features &
4992 NL80211_FEATURE_DYNAMIC_SMPS))
4993 return -EINVAL;
4994 break;
4995 default:
4996 return -EINVAL;
4997 }
4998 } else {
4999 params.smps_mode = NL80211_SMPS_OFF;
5000 }
5001
6e8ef842
PK		 5002 params.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
5003 if (params.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ])
5004 return -EOPNOTSUPP;
5005
4baf6bea
OO		 5006 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
5007 params.acl = parse_acl_data(&rdev->wiphy, info);
5008 if (IS_ERR(params.acl))
5009 return PTR_ERR(params.acl);
5010 }
5011
a0de1ca3
JC		 5012 params.twt_responder =
5013 nla_get_flag(info->attrs[NL80211_ATTR_TWT_RESPONDER]);
5014
796e90f4
JC		 5015 if (info->attrs[NL80211_ATTR_HE_OBSS_PD]) {
5016 err = nl80211_parse_he_obss_pd(
5017 info->attrs[NL80211_ATTR_HE_OBSS_PD],
5018 &params.he_obss_pd);
bc7a39b4
LC		 5019 if (err)
5020 goto out;
796e90f4
JC		 5021 }
5022
5c5e52d1
JC		 5023 if (info->attrs[NL80211_ATTR_HE_BSS_COLOR]) {
5024 err = nl80211_parse_he_bss_color(
5025 info->attrs[NL80211_ATTR_HE_BSS_COLOR],
5026 &params.he_bss_color);
5027 if (err)
5028 return err;
5029 }
5030
66cd794e
JB		 5031 nl80211_calculate_ap_params(&params);
5032
fe494370
SD		 5033 if (info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])
5034 params.flags |= AP_SETTINGS_EXTERNAL_AUTH_SUPPORT;
5035
c56589ed 5036 wdev_lock(wdev);
e35e4d28 5037 err = rdev_start_ap(rdev, dev, &params);
46c1dd0c 5038 if (!err) {
683b6d3b 5039 wdev->preset_chandef = params.chandef;
8860020e 5040 wdev->beacon_interval = params.beacon_interval;
9e0e2961 5041 wdev->chandef = params.chandef;
06e191e2
AQ		 5042 wdev->ssid_len = params.ssid_len;
5043 memcpy(wdev->ssid, params.ssid, wdev->ssid_len);
466a3061
DK		 5044
5045 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
5046 wdev->conn_owner_nlportid = info->snd_portid;
46c1dd0c 5047 }
c56589ed 5048 wdev_unlock(wdev);
77765eaf 5049
9951ebfc 5050out:
77765eaf
VT		 5051 kfree(params.acl);
5052
56d1893d 5053 return err;
ed1b6cc7
JB		 5054}
5055
8860020e
JB		 5056static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
5057{
5058 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5059 struct net_device *dev = info->user_ptr[1];
5060 struct wireless_dev *wdev = dev->ieee80211_ptr;
5061 struct cfg80211_beacon_data params;
5062 int err;
5063
5064 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5065 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5066 return -EOPNOTSUPP;
5067
5068 if (!rdev->ops->change_beacon)
5069 return -EOPNOTSUPP;
5070
5071 if (!wdev->beacon_interval)
5072 return -EINVAL;
5073
81e54d08 5074 err = nl80211_parse_beacon(rdev, info->attrs, &params);
8860020e
JB		 5075 if (err)
5076 return err;
5077
c56589ed
SW		 5078 wdev_lock(wdev);
5079 err = rdev_change_beacon(rdev, dev, &params);
5080 wdev_unlock(wdev);
5081
5082 return err;
8860020e
JB		 5083}
5084
5085static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 5086{
4c476991
JB		 5087 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5088 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 5089
7c8d5e03 5090 return cfg80211_stop_ap(rdev, dev, false);
ed1b6cc7
JB		 5091}
5092
5727ef1b
JB		 5093static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
5094 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
5095 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
5096 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 5097 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 5098 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 5099 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 5100};
5101
eccb8e8f 5102static int parse_station_flags(struct genl_info *info,
bdd3ae3d 5103 enum nl80211_iftype iftype,
eccb8e8f 5104 struct station_parameters *params)
5727ef1b
JB		 5105{
5106 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 5107 struct nlattr *nla;
5727ef1b
JB		 5108 int flag;
5109
eccb8e8f
JB		 5110 /*
5111 * Try parsing the new attribute first so userspace
5112 * can specify both for older kernels.
5113 */
5114 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
5115 if (nla) {
5116 struct nl80211_sta_flag_update *sta_flags;
5117
5118 sta_flags = nla_data(nla);
5119 params->sta_flags_mask = sta_flags->mask;
5120 params->sta_flags_set = sta_flags->set;
77ee7c89 5121 params->sta_flags_set &= params->sta_flags_mask;
eccb8e8f
JB		 5122 if ((params->sta_flags_mask |
5123 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
5124 return -EINVAL;
5125 return 0;
5126 }
5127
5128 /* if present, parse the old attribute */
5727ef1b 5129
eccb8e8f 5130 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 5131 if (!nla)
5132 return 0;
5133
8cb08174 5134 if (nla_parse_nested_deprecated(flags, NL80211_STA_FLAG_MAX, nla, sta_flags_policy, info->extack))
5727ef1b
JB		 5135 return -EINVAL;
5136
bdd3ae3d
JB		 5137 /*
5138 * Only allow certain flags for interface types so that
5139 * other attributes are silently ignored. Remember that
5140 * this is backward compatibility code with old userspace
5141 * and shouldn't be hit in other cases anyway.
5142 */
5143 switch (iftype) {
5144 case NL80211_IFTYPE_AP:
5145 case NL80211_IFTYPE_AP_VLAN:
5146 case NL80211_IFTYPE_P2P_GO:
5147 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
5148 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
5149 BIT(NL80211_STA_FLAG_WME) |
5150 BIT(NL80211_STA_FLAG_MFP);
5151 break;
5152 case NL80211_IFTYPE_P2P_CLIENT:
5153 case NL80211_IFTYPE_STATION:
5154 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
5155 BIT(NL80211_STA_FLAG_TDLS_PEER);
5156 break;
5157 case NL80211_IFTYPE_MESH_POINT:
5158 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5159 BIT(NL80211_STA_FLAG_MFP) |
5160 BIT(NL80211_STA_FLAG_AUTHORIZED);
5cf3006c 5161 break;
bdd3ae3d
JB		 5162 default:
5163 return -EINVAL;
5164 }
5727ef1b 5165
3383b5a6
JB		 5166 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
5167 if (flags[flag]) {
eccb8e8f 5168 params->sta_flags_set |= (1<<flag);
5727ef1b 5169
3383b5a6
JB		 5170 /* no longer support new API additions in old API */
5171 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
5172 return -EINVAL;
5173 }
5174 }
5175
5727ef1b
JB		 5176 return 0;
5177}
5178
9bb7e0f2 5179bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info, int attr)
c8dcfd8a
FF		 5180{
5181 struct nlattr *rate;
8eb41c8d
VK		 5182 u32 bitrate;
5183 u16 bitrate_compat;
bbf67e45 5184 enum nl80211_rate_info rate_flg;
c8dcfd8a 5185
ae0be8de 5186 rate = nla_nest_start_noflag(msg, attr);
c8dcfd8a 5187 if (!rate)
db9c64cf 5188 return false;
c8dcfd8a
FF		 5189
5190 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
5191 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 5192 /* report 16-bit bitrate only if we can */
5193 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
db9c64cf
JB		 5194 if (bitrate > 0 &&
5195 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
5196 return false;
5197 if (bitrate_compat > 0 &&
5198 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
5199 return false;
5200
b51f3bee
JB		 5201 switch (info->bw) {
5202 case RATE_INFO_BW_5:
5203 rate_flg = NL80211_RATE_INFO_5_MHZ_WIDTH;
5204 break;
5205 case RATE_INFO_BW_10:
5206 rate_flg = NL80211_RATE_INFO_10_MHZ_WIDTH;
5207 break;
5208 default:
5209 WARN_ON(1);
5210 /* fall through */
5211 case RATE_INFO_BW_20:
5212 rate_flg = 0;
5213 break;
5214 case RATE_INFO_BW_40:
5215 rate_flg = NL80211_RATE_INFO_40_MHZ_WIDTH;
5216 break;
5217 case RATE_INFO_BW_80:
5218 rate_flg = NL80211_RATE_INFO_80_MHZ_WIDTH;
5219 break;
5220 case RATE_INFO_BW_160:
5221 rate_flg = NL80211_RATE_INFO_160_MHZ_WIDTH;
5222 break;
c4cbaf79
LC		 5223 case RATE_INFO_BW_HE_RU:
5224 rate_flg = 0;
5225 WARN_ON(!(info->flags & RATE_INFO_FLAGS_HE_MCS));
b51f3bee
JB		 5226 }
5227
5228 if (rate_flg && nla_put_flag(msg, rate_flg))
5229 return false;
5230
db9c64cf
JB		 5231 if (info->flags & RATE_INFO_FLAGS_MCS) {
5232 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
5233 return false;
db9c64cf
JB		 5234 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
5235 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
5236 return false;
5237 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
5238 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
5239 return false;
5240 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
5241 return false;
db9c64cf
JB		 5242 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
5243 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
5244 return false;
c4cbaf79
LC		 5245 } else if (info->flags & RATE_INFO_FLAGS_HE_MCS) {
5246 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_MCS, info->mcs))
5247 return false;
5248 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_NSS, info->nss))
5249 return false;
5250 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_GI, info->he_gi))
5251 return false;
5252 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_DCM, info->he_dcm))
5253 return false;
5254 if (info->bw == RATE_INFO_BW_HE_RU &&
5255 nla_put_u8(msg, NL80211_RATE_INFO_HE_RU_ALLOC,
5256 info->he_ru_alloc))
5257 return false;
db9c64cf 5258 }
c8dcfd8a
FF		 5259
5260 nla_nest_end(msg, rate);
5261 return true;
c8dcfd8a
FF		 5262}
5263
119363c7
FF		 5264static bool nl80211_put_signal(struct sk_buff *msg, u8 mask, s8 *signal,
5265 int id)
5266{
5267 void *attr;
5268 int i = 0;
5269
5270 if (!mask)
5271 return true;
5272
ae0be8de 5273 attr = nla_nest_start_noflag(msg, id);
119363c7
FF		 5274 if (!attr)
5275 return false;
5276
5277 for (i = 0; i < IEEE80211_MAX_CHAINS; i++) {
5278 if (!(mask & BIT(i)))
5279 continue;
5280
5281 if (nla_put_u8(msg, i, signal[i]))
5282 return false;
5283 }
5284
5285 nla_nest_end(msg, attr);
5286
5287 return true;
5288}
5289
cf5ead82
JB		 5290static int nl80211_send_station(struct sk_buff *msg, u32 cmd, u32 portid,
5291 u32 seq, int flags,
66266b3a
JL		 5292 struct cfg80211_registered_device *rdev,
5293 struct net_device *dev,
98b62183 5294 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 5295{
5296 void *hdr;
f4263c98 5297 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 5298
cf5ead82 5299 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
f77bf486
AS		 5300 if (!hdr) {
5301 cfg80211_sinfo_release_content(sinfo);
fd5b74dc 5302 return -1;
f77bf486 5303 }
fd5b74dc 5304
9360ffd1
DM		 5305 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
5306 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
5307 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
5308 goto nla_put_failure;
f5ea9120 5309
ae0be8de 5310 sinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_STA_INFO);
2ec600d6 5311 if (!sinfoattr)
fd5b74dc 5312 goto nla_put_failure;
319090bf
JB		 5313
5314#define PUT_SINFO(attr, memb, type) do { \
d686b920 5315 BUILD_BUG_ON(sizeof(type) == sizeof(u64)); \
397c657a 5316 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
319090bf
JB		 5317 nla_put_ ## type(msg, NL80211_STA_INFO_ ## attr, \
5318 sinfo->memb)) \
5319 goto nla_put_failure; \
5320 } while (0)
d686b920 5321#define PUT_SINFO_U64(attr, memb) do { \
397c657a 5322 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
d686b920
JB		 5323 nla_put_u64_64bit(msg, NL80211_STA_INFO_ ## attr, \
5324 sinfo->memb, NL80211_STA_INFO_PAD)) \
5325 goto nla_put_failure; \
5326 } while (0)
319090bf
JB		 5327
5328 PUT_SINFO(CONNECTED_TIME, connected_time, u32);
5329 PUT_SINFO(INACTIVE_TIME, inactive_time, u32);
6c7a0033 5330 PUT_SINFO_U64(ASSOC_AT_BOOTTIME, assoc_at);
319090bf 5331
397c657a
OE		 5332 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_RX_BYTES) |
5333 BIT_ULL(NL80211_STA_INFO_RX_BYTES64)) &&
9360ffd1 5334 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
42745e03 5335 (u32)sinfo->rx_bytes))
9360ffd1 5336 goto nla_put_failure;
319090bf 5337
397c657a
OE		 5338 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_TX_BYTES) |
5339 BIT_ULL(NL80211_STA_INFO_TX_BYTES64)) &&
9360ffd1 5340 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
42745e03
VK		 5341 (u32)sinfo->tx_bytes))
5342 goto nla_put_failure;
319090bf 5343
d686b920
JB		 5344 PUT_SINFO_U64(RX_BYTES64, rx_bytes);
5345 PUT_SINFO_U64(TX_BYTES64, tx_bytes);
319090bf
JB		 5346 PUT_SINFO(LLID, llid, u16);
5347 PUT_SINFO(PLID, plid, u16);
5348 PUT_SINFO(PLINK_STATE, plink_state, u8);
d686b920 5349 PUT_SINFO_U64(RX_DURATION, rx_duration);
36647055
THJ		 5350 PUT_SINFO_U64(TX_DURATION, tx_duration);
5351
5352 if (wiphy_ext_feature_isset(&rdev->wiphy,
5353 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
5354 PUT_SINFO(AIRTIME_WEIGHT, airtime_weight, u16);
319090bf 5355
66266b3a
JL		 5356 switch (rdev->wiphy.signal_type) {
5357 case CFG80211_SIGNAL_TYPE_MBM:
319090bf
JB		 5358 PUT_SINFO(SIGNAL, signal, u8);
5359 PUT_SINFO(SIGNAL_AVG, signal_avg, u8);
66266b3a
JL		 5360 break;
5361 default:
5362 break;
5363 }
397c657a 5364 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL)) {
119363c7
FF		 5365 if (!nl80211_put_signal(msg, sinfo->chains,
5366 sinfo->chain_signal,
5367 NL80211_STA_INFO_CHAIN_SIGNAL))
5368 goto nla_put_failure;
5369 }
397c657a 5370 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)) {
119363c7
FF		 5371 if (!nl80211_put_signal(msg, sinfo->chains,
5372 sinfo->chain_signal_avg,
5373 NL80211_STA_INFO_CHAIN_SIGNAL_AVG))
5374 goto nla_put_failure;
5375 }
397c657a 5376 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_TX_BITRATE)) {
c8dcfd8a
FF		 5377 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
5378 NL80211_STA_INFO_TX_BITRATE))
5379 goto nla_put_failure;
5380 }
397c657a 5381 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_RX_BITRATE)) {
c8dcfd8a
FF		 5382 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
5383 NL80211_STA_INFO_RX_BITRATE))
420e7fab 5384 goto nla_put_failure;
420e7fab 5385 }
319090bf
JB		 5386
5387 PUT_SINFO(RX_PACKETS, rx_packets, u32);
5388 PUT_SINFO(TX_PACKETS, tx_packets, u32);
5389 PUT_SINFO(TX_RETRIES, tx_retries, u32);
5390 PUT_SINFO(TX_FAILED, tx_failed, u32);
5391 PUT_SINFO(EXPECTED_THROUGHPUT, expected_throughput, u32);
ab60633c 5392 PUT_SINFO(AIRTIME_LINK_METRIC, airtime_link_metric, u32);
319090bf
JB		 5393 PUT_SINFO(BEACON_LOSS, beacon_loss_count, u32);
5394 PUT_SINFO(LOCAL_PM, local_pm, u32);
5395 PUT_SINFO(PEER_PM, peer_pm, u32);
5396 PUT_SINFO(NONPEER_PM, nonpeer_pm, u32);
dbdaee7a 5397 PUT_SINFO(CONNECTED_TO_GATE, connected_to_gate, u8);
319090bf 5398
397c657a 5399 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_BSS_PARAM)) {
ae0be8de
MK		 5400 bss_param = nla_nest_start_noflag(msg,
5401 NL80211_STA_INFO_BSS_PARAM);
f4263c98
PS		 5402 if (!bss_param)
5403 goto nla_put_failure;
5404
9360ffd1
DM		 5405 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
5406 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
5407 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
5408 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
5409 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
5410 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
5411 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
5412 sinfo->bss_param.dtim_period) ||
5413 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
5414 sinfo->bss_param.beacon_interval))
5415 goto nla_put_failure;
f4263c98
PS		 5416
5417 nla_nest_end(msg, bss_param);
5418 }
397c657a 5419 if ((sinfo->filled & BIT_ULL(NL80211_STA_INFO_STA_FLAGS)) &&
9360ffd1
DM		 5420 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
5421 sizeof(struct nl80211_sta_flag_update),
5422 &sinfo->sta_flags))
5423 goto nla_put_failure;
319090bf 5424
d686b920
JB		 5425 PUT_SINFO_U64(T_OFFSET, t_offset);
5426 PUT_SINFO_U64(RX_DROP_MISC, rx_dropped_misc);
5427 PUT_SINFO_U64(BEACON_RX, rx_beacon);
a76b1942 5428 PUT_SINFO(BEACON_SIGNAL_AVG, rx_beacon_signal_avg, u8);
0d4e14a3
AB		 5429 PUT_SINFO(RX_MPDUS, rx_mpdu_count, u32);
5430 PUT_SINFO(FCS_ERROR_COUNT, fcs_err_count, u32);
81d5439d 5431 if (wiphy_ext_feature_isset(&rdev->wiphy,
9c06602b
BP		 5432 NL80211_EXT_FEATURE_ACK_SIGNAL_SUPPORT)) {
5433 PUT_SINFO(ACK_SIGNAL, ack_signal, u8);
5434 PUT_SINFO(ACK_SIGNAL_AVG, avg_ack_signal, s8);
5435 }
319090bf
JB		 5436
5437#undef PUT_SINFO
d686b920 5438#undef PUT_SINFO_U64
6de39808 5439
8689c051 5440 if (sinfo->pertid) {
6de39808
JB		 5441 struct nlattr *tidsattr;
5442 int tid;
5443
ae0be8de
MK		 5444 tidsattr = nla_nest_start_noflag(msg,
5445 NL80211_STA_INFO_TID_STATS);
6de39808
JB		 5446 if (!tidsattr)
5447 goto nla_put_failure;
5448
5449 for (tid = 0; tid < IEEE80211_NUM_TIDS + 1; tid++) {
5450 struct cfg80211_tid_stats *tidstats;
5451 struct nlattr *tidattr;
5452
5453 tidstats = &sinfo->pertid[tid];
5454
5455 if (!tidstats->filled)
5456 continue;
5457
ae0be8de 5458 tidattr = nla_nest_start_noflag(msg, tid + 1);
6de39808
JB		 5459 if (!tidattr)
5460 goto nla_put_failure;
5461
d686b920 5462#define PUT_TIDVAL_U64(attr, memb) do { \
6de39808 5463 if (tidstats->filled & BIT(NL80211_TID_STATS_ ## attr) && \
d686b920
JB		 5464 nla_put_u64_64bit(msg, NL80211_TID_STATS_ ## attr, \
5465 tidstats->memb, NL80211_TID_STATS_PAD)) \
6de39808
JB		 5466 goto nla_put_failure; \
5467 } while (0)
5468
d686b920
JB		 5469 PUT_TIDVAL_U64(RX_MSDU, rx_msdu);
5470 PUT_TIDVAL_U64(TX_MSDU, tx_msdu);
5471 PUT_TIDVAL_U64(TX_MSDU_RETRIES, tx_msdu_retries);
5472 PUT_TIDVAL_U64(TX_MSDU_FAILED, tx_msdu_failed);
6de39808 5473
d686b920 5474#undef PUT_TIDVAL_U64
52539ca8
THJ		 5475 if ((tidstats->filled &
5476 BIT(NL80211_TID_STATS_TXQ_STATS)) &&
5477 !nl80211_put_txq_stats(msg, &tidstats->txq_stats,
5478 NL80211_TID_STATS_TXQ_STATS))
5479 goto nla_put_failure;
5480
6de39808
JB		 5481 nla_nest_end(msg, tidattr);
5482 }
5483
5484 nla_nest_end(msg, tidsattr);
5485 }
5486
2ec600d6 5487 nla_nest_end(msg, sinfoattr);
fd5b74dc 5488
319090bf 5489 if (sinfo->assoc_req_ies_len &&
9360ffd1
DM		 5490 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
5491 sinfo->assoc_req_ies))
5492 goto nla_put_failure;
50d3dfb7 5493
7ea3e110 5494 cfg80211_sinfo_release_content(sinfo);
053c095a
JB		 5495 genlmsg_end(msg, hdr);
5496 return 0;
fd5b74dc
JB		 5497
5498 nla_put_failure:
7ea3e110 5499 cfg80211_sinfo_release_content(sinfo);
bc3ed28c
TG		 5500 genlmsg_cancel(msg, hdr);
5501 return -EMSGSIZE;
fd5b74dc
JB		 5502}
5503
2ec600d6 5504static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 5505 struct netlink_callback *cb)
2ec600d6 5506{
73887fd9 5507 struct station_info sinfo;
1b8ec87a 5508 struct cfg80211_registered_device *rdev;
97990a06 5509 struct wireless_dev *wdev;
2ec600d6 5510 u8 mac_addr[ETH_ALEN];
97990a06 5511 int sta_idx = cb->args[2];
2ec600d6 5512 int err;
2ec600d6 5513
ea90e0dc 5514 rtnl_lock();
5297c65c 5515 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 5516 if (err)
ea90e0dc 5517 goto out_err;
bba95fef 5518
97990a06
JB		 5519 if (!wdev->netdev) {
5520 err = -EINVAL;
5521 goto out_err;
5522 }
5523
1b8ec87a 5524 if (!rdev->ops->dump_station) {
eec60b03 5525 err = -EOPNOTSUPP;
bba95fef
JB		 5526 goto out_err;
5527 }
5528
bba95fef 5529 while (1) {
73887fd9 5530 memset(&sinfo, 0, sizeof(sinfo));
1b8ec87a 5531 err = rdev_dump_station(rdev, wdev->netdev, sta_idx,
73887fd9 5532 mac_addr, &sinfo);
bba95fef
JB		 5533 if (err == -ENOENT)
5534 break;
5535 if (err)
3b85875a 5536 goto out_err;
bba95fef 5537
cf5ead82 5538 if (nl80211_send_station(skb, NL80211_CMD_NEW_STATION,
15e47304 5539 NETLINK_CB(cb->skb).portid,
bba95fef 5540 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1b8ec87a 5541 rdev, wdev->netdev, mac_addr,
73887fd9 5542 &sinfo) < 0)
bba95fef
JB		 5543 goto out;
5544
5545 sta_idx++;
5546 }
5547
bba95fef 5548 out:
97990a06 5549 cb->args[2] = sta_idx;
bba95fef 5550 err = skb->len;
bba95fef 5551 out_err:
ea90e0dc 5552 rtnl_unlock();
bba95fef
JB		 5553
5554 return err;
2ec600d6 5555}
fd5b74dc 5556
5727ef1b
JB		 5557static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
5558{
4c476991
JB		 5559 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5560 struct net_device *dev = info->user_ptr[1];
73887fd9 5561 struct station_info sinfo;
fd5b74dc
JB		 5562 struct sk_buff *msg;
5563 u8 *mac_addr = NULL;
4c476991 5564 int err;
fd5b74dc 5565
73887fd9 5566 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc 5567
73887fd9
JB		 5568 if (!info->attrs[NL80211_ATTR_MAC])
5569 return -EINVAL;
fd5b74dc
JB		 5570
5571 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
5572
73887fd9
JB		 5573 if (!rdev->ops->get_station)
5574 return -EOPNOTSUPP;
3b85875a 5575
73887fd9 5576 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 5577 if (err)
73887fd9 5578 return err;
2ec600d6 5579
fd2120ca 5580 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7ea3e110 5581 if (!msg) {
ba8f566a 5582 cfg80211_sinfo_release_content(&sinfo);
73887fd9 5583 return -ENOMEM;
7ea3e110 5584 }
fd5b74dc 5585
cf5ead82
JB		 5586 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION,
5587 info->snd_portid, info->snd_seq, 0,
73887fd9 5588 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991 5589 nlmsg_free(msg);
73887fd9 5590 return -ENOBUFS;
4c476991 5591 }
3b85875a 5592
73887fd9 5593 return genlmsg_reply(msg, info);
5727ef1b
JB		 5594}
5595
77ee7c89
JB		 5596int cfg80211_check_station_change(struct wiphy *wiphy,
5597 struct station_parameters *params,
5598 enum cfg80211_station_type statype)
5599{
e4208427
AB		 5600 if (params->listen_interval != -1 &&
5601 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89 5602 return -EINVAL;
e4208427 5603
17b94247
AB		 5604 if (params->support_p2p_ps != -1 &&
5605 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
5606 return -EINVAL;
5607
c72e1140 5608 if (params->aid &&
e4208427
AB		 5609 !(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) &&
5610 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89
JB		 5611 return -EINVAL;
5612
5613 /* When you run into this, adjust the code below for the new flag */
5614 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
5615
5616 switch (statype) {
eef941e6
TP		 5617 case CFG80211_STA_MESH_PEER_KERNEL:
5618 case CFG80211_STA_MESH_PEER_USER:
77ee7c89
JB		 5619 /*
5620 * No ignoring the TDLS flag here -- the userspace mesh
5621 * code doesn't have the bug of including TDLS in the
5622 * mask everywhere.
5623 */
5624 if (params->sta_flags_mask &
5625 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5626 BIT(NL80211_STA_FLAG_MFP) |
5627 BIT(NL80211_STA_FLAG_AUTHORIZED)))
5628 return -EINVAL;
5629 break;
5630 case CFG80211_STA_TDLS_PEER_SETUP:
5631 case CFG80211_STA_TDLS_PEER_ACTIVE:
5632 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
5633 return -EINVAL;
5634 /* ignore since it can't change */
5635 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
5636 break;
5637 default:
5638 /* disallow mesh-specific things */
5639 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
5640 return -EINVAL;
5641 if (params->local_pm)
5642 return -EINVAL;
5643 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
5644 return -EINVAL;
5645 }
5646
5647 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
5648 statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
5649 /* TDLS can't be set, ... */
5650 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
5651 return -EINVAL;
5652 /*
5653 * ... but don't bother the driver with it. This works around
5654 * a hostapd/wpa_supplicant issue -- it always includes the
5655 * TLDS_PEER flag in the mask even for AP mode.
5656 */
5657 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
5658 }
5659
47edb11b
AB		 5660 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
5661 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 5662 /* reject other things that can't change */
5663 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
5664 return -EINVAL;
5665 if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
5666 return -EINVAL;
5667 if (params->supported_rates)
5668 return -EINVAL;
c4cbaf79
LC		 5669 if (params->ext_capab || params->ht_capa || params->vht_capa ||
5670 params->he_capa)
77ee7c89
JB		 5671 return -EINVAL;
5672 }
5673
47edb11b
AB		 5674 if (statype != CFG80211_STA_AP_CLIENT &&
5675 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 5676 if (params->vlan)
5677 return -EINVAL;
5678 }
5679
5680 switch (statype) {
5681 case CFG80211_STA_AP_MLME_CLIENT:
5682 /* Use this only for authorizing/unauthorizing a station */
5683 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
5684 return -EOPNOTSUPP;
5685 break;
5686 case CFG80211_STA_AP_CLIENT:
47edb11b 5687 case CFG80211_STA_AP_CLIENT_UNASSOC:
77ee7c89
JB		 5688 /* accept only the listed bits */
5689 if (params->sta_flags_mask &
5690 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
5691 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5692 BIT(NL80211_STA_FLAG_ASSOCIATED) |
5693 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
5694 BIT(NL80211_STA_FLAG_WME) |
5695 BIT(NL80211_STA_FLAG_MFP)))
5696 return -EINVAL;
5697
5698 /* but authenticated/associated only if driver handles it */
5699 if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
5700 params->sta_flags_mask &
5701 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5702 BIT(NL80211_STA_FLAG_ASSOCIATED)))
5703 return -EINVAL;
5704 break;
5705 case CFG80211_STA_IBSS:
5706 case CFG80211_STA_AP_STA:
5707 /* reject any changes other than AUTHORIZED */
5708 if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
5709 return -EINVAL;
5710 break;
5711 case CFG80211_STA_TDLS_PEER_SETUP:
5712 /* reject any changes other than AUTHORIZED or WME */
5713 if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
5714 BIT(NL80211_STA_FLAG_WME)))
5715 return -EINVAL;
5716 /* force (at least) rates when authorizing */
5717 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
5718 !params->supported_rates)
5719 return -EINVAL;
5720 break;
5721 case CFG80211_STA_TDLS_PEER_ACTIVE:
5722 /* reject any changes */
5723 return -EINVAL;
eef941e6 5724 case CFG80211_STA_MESH_PEER_KERNEL:
77ee7c89
JB		 5725 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
5726 return -EINVAL;
5727 break;
eef941e6 5728 case CFG80211_STA_MESH_PEER_USER:
42925040
CYY		 5729 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION &&
5730 params->plink_action != NL80211_PLINK_ACTION_BLOCK)
77ee7c89
JB		 5731 return -EINVAL;
5732 break;
5733 }
5734
06f7c88c
BL		 5735 /*
5736 * Older kernel versions ignored this attribute entirely, so don't
5737 * reject attempts to update it but mark it as unused instead so the
5738 * driver won't look at the data.
5739 */
5740 if (statype != CFG80211_STA_AP_CLIENT_UNASSOC &&
5741 statype != CFG80211_STA_TDLS_PEER_SETUP)
5742 params->opmode_notif_used = false;
5743
77ee7c89
JB		 5744 return 0;
5745}
5746EXPORT_SYMBOL(cfg80211_check_station_change);
5747
5727ef1b 5748/*
c258d2de 5749 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 5750 */
80b99899
JB		 5751static struct net_device *get_vlan(struct genl_info *info,
5752 struct cfg80211_registered_device *rdev)
5727ef1b 5753{
463d0183 5754 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 5755 struct net_device *v;
5756 int ret;
5757
5758 if (!vlanattr)
5759 return NULL;
5760
5761 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
5762 if (!v)
5763 return ERR_PTR(-ENODEV);
5764
5765 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
5766 ret = -EINVAL;
5767 goto error;
5727ef1b 5768 }
80b99899 5769
77ee7c89
JB		 5770 if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
5771 v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5772 v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
5773 ret = -EINVAL;
5774 goto error;
5775 }
5776
80b99899
JB		 5777 if (!netif_running(v)) {
5778 ret = -ENETDOWN;
5779 goto error;
5780 }
5781
5782 return v;
5783 error:
5784 dev_put(v);
5785 return ERR_PTR(ret);
5727ef1b
JB		 5786}
5787
94e860f1
JB		 5788static const struct nla_policy
5789nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] = {
df881293
JM		 5790 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
5791 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
5792};
5793
ff276691
JB		 5794static int nl80211_parse_sta_wme(struct genl_info *info,
5795 struct station_parameters *params)
df881293 5796{
df881293
JM		 5797 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
5798 struct nlattr *nla;
5799 int err;
5800
df881293
JM		 5801 /* parse WME attributes if present */
5802 if (!info->attrs[NL80211_ATTR_STA_WME])
5803 return 0;
5804
5805 nla = info->attrs[NL80211_ATTR_STA_WME];
8cb08174
JB		 5806 err = nla_parse_nested_deprecated(tb, NL80211_STA_WME_MAX, nla,
5807 nl80211_sta_wme_policy,
5808 info->extack);
df881293
JM		 5809 if (err)
5810 return err;
5811
5812 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
5813 params->uapsd_queues = nla_get_u8(
5814 tb[NL80211_STA_WME_UAPSD_QUEUES]);
5815 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
5816 return -EINVAL;
5817
5818 if (tb[NL80211_STA_WME_MAX_SP])
5819 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
5820
5821 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
5822 return -EINVAL;
5823
5824 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
5825
5826 return 0;
5827}
5828
c01fc9ad
SD		 5829static int nl80211_parse_sta_channel_info(struct genl_info *info,
5830 struct station_parameters *params)
5831{
5832 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]) {
5833 params->supported_channels =
5834 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
5835 params->supported_channels_len =
5836 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
5837 /*
5838 * Need to include at least one (first channel, number of
5839 * channels) tuple for each subband, and must have proper
5840 * tuples for the rest of the data as well.
5841 */
5842 if (params->supported_channels_len < 2)
5843 return -EINVAL;
5844 if (params->supported_channels_len % 2)
5845 return -EINVAL;
5846 }
5847
5848 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]) {
5849 params->supported_oper_classes =
5850 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
5851 params->supported_oper_classes_len =
5852 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
5853 /*
5854 * The value of the Length field of the Supported Operating
5855 * Classes element is between 2 and 253.
5856 */
5857 if (params->supported_oper_classes_len < 2 ||
5858 params->supported_oper_classes_len > 253)
5859 return -EINVAL;
5860 }
5861 return 0;
5862}
5863
ff276691
JB		 5864static int nl80211_set_station_tdls(struct genl_info *info,
5865 struct station_parameters *params)
5866{
c01fc9ad 5867 int err;
ff276691 5868 /* Dummy STA entry gets updated once the peer capabilities are known */
5e4b6f56
JM		 5869 if (info->attrs[NL80211_ATTR_PEER_AID])
5870 params->aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
ff276691
JB		 5871 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
5872 params->ht_capa =
5873 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5874 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
5875 params->vht_capa =
5876 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
c4cbaf79
LC		 5877 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
5878 params->he_capa =
5879 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
5880 params->he_capa_len =
5881 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
5882
5883 if (params->he_capa_len < NL80211_HE_MIN_CAPABILITY_LEN)
5884 return -EINVAL;
5885 }
ff276691 5886
c01fc9ad
SD		 5887 err = nl80211_parse_sta_channel_info(info, params);
5888 if (err)
5889 return err;
5890
ff276691
JB		 5891 return nl80211_parse_sta_wme(info, params);
5892}
5893
e96d1cd2
ARN		 5894static int nl80211_parse_sta_txpower_setting(struct genl_info *info,
5895 struct station_parameters *params)
5896{
5897 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5898 int idx;
5899
5900 if (info->attrs[NL80211_ATTR_STA_TX_POWER_SETTING]) {
5901 if (!rdev->ops->set_tx_power ||
5902 !wiphy_ext_feature_isset(&rdev->wiphy,
5903 NL80211_EXT_FEATURE_STA_TX_PWR))
5904 return -EOPNOTSUPP;
5905
5906 idx = NL80211_ATTR_STA_TX_POWER_SETTING;
5907 params->txpwr.type = nla_get_u8(info->attrs[idx]);
5908
5909 if (params->txpwr.type == NL80211_TX_POWER_LIMITED) {
5910 idx = NL80211_ATTR_STA_TX_POWER;
5911
5912 if (info->attrs[idx])
5913 params->txpwr.power =
5914 nla_get_s16(info->attrs[idx]);
5915 else
5916 return -EINVAL;
5917 }
5918 params->sta_modify_mask |= STATION_PARAM_APPLY_STA_TXPOWER;
5919 }
5920
5921 return 0;
5922}
5923
5727ef1b
JB		 5924static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
5925{
4c476991 5926 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 5927 struct net_device *dev = info->user_ptr[1];
5727ef1b 5928 struct station_parameters params;
77ee7c89
JB		 5929 u8 *mac_addr;
5930 int err;
5727ef1b
JB		 5931
5932 memset(&params, 0, sizeof(params));
5933
77ee7c89
JB		 5934 if (!rdev->ops->change_station)
5935 return -EOPNOTSUPP;
5936
e4208427
AB		 5937 /*
5938 * AID and listen_interval properties can be set only for unassociated
5939 * station. Include these parameters here and will check them in
5940 * cfg80211_check_station_change().
5941 */
a9bc31e4
AB		 5942 if (info->attrs[NL80211_ATTR_STA_AID])
5943 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
e4208427 5944
14f34e36
GG		 5945 if (info->attrs[NL80211_ATTR_VLAN_ID])
5946 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
5947
e4208427
AB		 5948 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
5949 params.listen_interval =
5950 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
5951 else
5952 params.listen_interval = -1;
5727ef1b 5953
ab0d76f6
JB		 5954 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS])
5955 params.support_p2p_ps =
5956 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
5957 else
17b94247 5958 params.support_p2p_ps = -1;
17b94247 5959
5727ef1b
JB		 5960 if (!info->attrs[NL80211_ATTR_MAC])
5961 return -EINVAL;
5962
5963 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
5964
5965 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
5966 params.supported_rates =
5967 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
5968 params.supported_rates_len =
5969 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
5970 }
5971
9d62a986
JM		 5972 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
5973 params.capability =
5974 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
5975 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
5976 }
5977
5978 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
5979 params.ext_capab =
5980 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
5981 params.ext_capab_len =
5982 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
5983 }
5984
bdd3ae3d 5985 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 5986 return -EINVAL;
5987
ab0d76f6 5988 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2ec600d6 5989 params.plink_action =
f8bacc21 5990 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2ec600d6 5991
f8bacc21 5992 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
9c3990aa 5993 params.plink_state =
f8bacc21 5994 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
ab0d76f6 5995 if (info->attrs[NL80211_ATTR_MESH_PEER_AID])
7d27a0ba
MH		 5996 params.peer_aid = nla_get_u16(
5997 info->attrs[NL80211_ATTR_MESH_PEER_AID]);
f8bacc21
JB		 5998 params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
5999 }
9c3990aa 6000
ab0d76f6
JB		 6001 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE])
6002 params.local_pm = nla_get_u32(
3b1c5a53
MP		 6003 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
6004
06f7c88c
BL		 6005 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
6006 params.opmode_notif_used = true;
6007 params.opmode_notif =
6008 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6009 }
6010
43e64bf3
RM		 6011 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
6012 params.he_6ghz_capa =
6013 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6014
36647055
THJ		 6015 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6016 params.airtime_weight =
6017 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6018
6019 if (params.airtime_weight &&
6020 !wiphy_ext_feature_isset(&rdev->wiphy,
6021 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6022 return -EOPNOTSUPP;
6023
e96d1cd2
ARN		 6024 err = nl80211_parse_sta_txpower_setting(info, &params);
6025 if (err)
6026 return err;
6027
77ee7c89
JB		 6028 /* Include parameters for TDLS peer (will check later) */
6029 err = nl80211_set_station_tdls(info, &params);
6030 if (err)
6031 return err;
6032
6033 params.vlan = get_vlan(info, rdev);
6034 if (IS_ERR(params.vlan))
6035 return PTR_ERR(params.vlan);
6036
a97f4424
JB		 6037 switch (dev->ieee80211_ptr->iftype) {
6038 case NL80211_IFTYPE_AP:
6039 case NL80211_IFTYPE_AP_VLAN:
074ac8df 6040 case NL80211_IFTYPE_P2P_GO:
074ac8df 6041 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 6042 case NL80211_IFTYPE_STATION:
267335d6 6043 case NL80211_IFTYPE_ADHOC:
a97f4424 6044 case NL80211_IFTYPE_MESH_POINT:
a97f4424
JB		 6045 break;
6046 default:
77ee7c89
JB		 6047 err = -EOPNOTSUPP;
6048 goto out_put_vlan;
034d655e
JB		 6049 }
6050
77ee7c89 6051 /* driver will call cfg80211_check_station_change() */
e35e4d28 6052 err = rdev_change_station(rdev, dev, mac_addr, &params);
5727ef1b 6053
77ee7c89 6054 out_put_vlan:
5727ef1b
JB		 6055 if (params.vlan)
6056 dev_put(params.vlan);
3b85875a 6057
5727ef1b
JB		 6058 return err;
6059}
6060
6061static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
6062{
4c476991 6063 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 6064 int err;
4c476991 6065 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 6066 struct station_parameters params;
6067 u8 *mac_addr = NULL;
bda95eb1
JB		 6068 u32 auth_assoc = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6069 BIT(NL80211_STA_FLAG_ASSOCIATED);
5727ef1b
JB		 6070
6071 memset(&params, 0, sizeof(params));
6072
984c311b
JB		 6073 if (!rdev->ops->add_station)
6074 return -EOPNOTSUPP;
6075
5727ef1b
JB		 6076 if (!info->attrs[NL80211_ATTR_MAC])
6077 return -EINVAL;
6078
5727ef1b
JB		 6079 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6080 return -EINVAL;
6081
6082 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
6083 return -EINVAL;
6084
5e4b6f56
JM		 6085 if (!info->attrs[NL80211_ATTR_STA_AID] &&
6086 !info->attrs[NL80211_ATTR_PEER_AID])
0e956c13
TLSC		 6087 return -EINVAL;
6088
5727ef1b
JB		 6089 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6090 params.supported_rates =
6091 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6092 params.supported_rates_len =
6093 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6094 params.listen_interval =
6095 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 6096
14f34e36
GG		 6097 if (info->attrs[NL80211_ATTR_VLAN_ID])
6098 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6099
17b94247 6100 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]) {
ab0d76f6
JB		 6101 params.support_p2p_ps =
6102 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
17b94247
AB		 6103 } else {
6104 /*
6105 * if not specified, assume it's supported for P2P GO interface,
6106 * and is NOT supported for AP interface
6107 */
6108 params.support_p2p_ps =
6109 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO;
6110 }
6111
3d124ea2 6112 if (info->attrs[NL80211_ATTR_PEER_AID])
5e4b6f56 6113 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
3d124ea2
JM		 6114 else
6115 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
51b50fbe 6116
9d62a986
JM		 6117 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
6118 params.capability =
6119 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
6120 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
6121 }
6122
6123 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
6124 params.ext_capab =
6125 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6126 params.ext_capab_len =
6127 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6128 }
6129
36aedc90
JM		 6130 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
6131 params.ht_capa =
6132 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 6133
f461be3e
MP		 6134 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
6135 params.vht_capa =
6136 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
6137
c4cbaf79
LC		 6138 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
6139 params.he_capa =
6140 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6141 params.he_capa_len =
6142 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6143
6144 /* max len is validated in nla policy */
6145 if (params.he_capa_len < NL80211_HE_MIN_CAPABILITY_LEN)
6146 return -EINVAL;
6147 }
6148
43e64bf3
RM		 6149 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
6150 params.he_6ghz_capa =
6151 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
6152
60f4a7b1
MK		 6153 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
6154 params.opmode_notif_used = true;
6155 params.opmode_notif =
6156 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6157 }
6158
ab0d76f6 6159 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
96b78dff 6160 params.plink_action =
f8bacc21 6161 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
96b78dff 6162
36647055
THJ		 6163 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6164 params.airtime_weight =
6165 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6166
6167 if (params.airtime_weight &&
6168 !wiphy_ext_feature_isset(&rdev->wiphy,
6169 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6170 return -EOPNOTSUPP;
6171
e96d1cd2
ARN		 6172 err = nl80211_parse_sta_txpower_setting(info, &params);
6173 if (err)
6174 return err;
6175
c01fc9ad
SD		 6176 err = nl80211_parse_sta_channel_info(info, &params);
6177 if (err)
6178 return err;
6179
ff276691
JB		 6180 err = nl80211_parse_sta_wme(info, &params);
6181 if (err)
6182 return err;
bdd90d5e 6183
bdd3ae3d 6184 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 6185 return -EINVAL;
6186
496fcc29
JB		 6187 /* HT/VHT requires QoS, but if we don't have that just ignore HT/VHT
6188 * as userspace might just pass through the capabilities from the IEs
6189 * directly, rather than enforcing this restriction and returning an
6190 * error in this case.
6191 */
6192 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME))) {
6193 params.ht_capa = NULL;
6194 params.vht_capa = NULL;
c4cbaf79
LC		 6195
6196 /* HE requires WME */
43e64bf3 6197 if (params.he_capa_len || params.he_6ghz_capa)
c4cbaf79 6198 return -EINVAL;
496fcc29
JB		 6199 }
6200
43e64bf3
RM		 6201 /* Ensure that HT/VHT capabilities are not set for 6 GHz HE STA */
6202 if (params.he_6ghz_capa && (params.ht_capa || params.vht_capa))
6203 return -EINVAL;
6204
77ee7c89
JB		 6205 /* When you run into this, adjust the code below for the new flag */
6206 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
6207
bdd90d5e
JB		 6208 switch (dev->ieee80211_ptr->iftype) {
6209 case NL80211_IFTYPE_AP:
6210 case NL80211_IFTYPE_AP_VLAN:
6211 case NL80211_IFTYPE_P2P_GO:
984c311b
JB		 6212 /* ignore WME attributes if iface/sta is not capable */
6213 if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
6214 !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
6215 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
c75786c9 6216
bdd90d5e 6217 /* TDLS peers cannot be added */
3d124ea2
JM		 6218 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
6219 info->attrs[NL80211_ATTR_PEER_AID])
4319e193 6220 return -EINVAL;
bdd90d5e
JB		 6221 /* but don't bother the driver with it */
6222 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 6223
d582cffb
JB		 6224 /* allow authenticated/associated only if driver handles it */
6225 if (!(rdev->wiphy.features &
6226 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
bda95eb1 6227 params.sta_flags_mask & auth_assoc)
d582cffb
JB		 6228 return -EINVAL;
6229
bda95eb1
JB		 6230 /* Older userspace, or userspace wanting to be compatible with
6231 * !NL80211_FEATURE_FULL_AP_CLIENT_STATE, will not set the auth
6232 * and assoc flags in the mask, but assumes the station will be
6233 * added as associated anyway since this was the required driver
6234 * behaviour before NL80211_FEATURE_FULL_AP_CLIENT_STATE was
6235 * introduced.
6236 * In order to not bother drivers with this quirk in the API
6237 * set the flags in both the mask and set for new stations in
6238 * this case.
6239 */
6240 if (!(params.sta_flags_mask & auth_assoc)) {
6241 params.sta_flags_mask |= auth_assoc;
6242 params.sta_flags_set |= auth_assoc;
6243 }
6244
bdd90d5e
JB		 6245 /* must be last in here for error handling */
6246 params.vlan = get_vlan(info, rdev);
6247 if (IS_ERR(params.vlan))
6248 return PTR_ERR(params.vlan);
6249 break;
6250 case NL80211_IFTYPE_MESH_POINT:
984c311b
JB		 6251 /* ignore uAPSD data */
6252 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
6253
d582cffb
JB		 6254 /* associated is disallowed */
6255 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
6256 return -EINVAL;
bdd90d5e 6257 /* TDLS peers cannot be added */
3d124ea2
JM		 6258 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
6259 info->attrs[NL80211_ATTR_PEER_AID])
bdd90d5e
JB		 6260 return -EINVAL;
6261 break;
6262 case NL80211_IFTYPE_STATION:
93d08f0b 6263 case NL80211_IFTYPE_P2P_CLIENT:
984c311b
JB		 6264 /* ignore uAPSD data */
6265 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
6266
77ee7c89
JB		 6267 /* these are disallowed */
6268 if (params.sta_flags_mask &
6269 (BIT(NL80211_STA_FLAG_ASSOCIATED) |
6270 BIT(NL80211_STA_FLAG_AUTHENTICATED)))
d582cffb 6271 return -EINVAL;
bdd90d5e
JB		 6272 /* Only TDLS peers can be added */
6273 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6274 return -EINVAL;
6275 /* Can only add if TDLS ... */
6276 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
6277 return -EOPNOTSUPP;
6278 /* ... with external setup is supported */
6279 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
6280 return -EOPNOTSUPP;
77ee7c89
JB		 6281 /*
6282 * Older wpa_supplicant versions always mark the TDLS peer
6283 * as authorized, but it shouldn't yet be.
6284 */
6285 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
bdd90d5e
JB		 6286 break;
6287 default:
6288 return -EOPNOTSUPP;
c75786c9
EP		 6289 }
6290
bdd90d5e 6291 /* be aware of params.vlan when changing code here */
5727ef1b 6292
e35e4d28 6293 err = rdev_add_station(rdev, dev, mac_addr, &params);
5727ef1b 6294
5727ef1b
JB		 6295 if (params.vlan)
6296 dev_put(params.vlan);
5727ef1b
JB		 6297 return err;
6298}
6299
6300static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
6301{
4c476991
JB		 6302 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6303 struct net_device *dev = info->user_ptr[1];
89c771e5
JM		 6304 struct station_del_parameters params;
6305
6306 memset(&params, 0, sizeof(params));
5727ef1b
JB		 6307
6308 if (info->attrs[NL80211_ATTR_MAC])
89c771e5 6309 params.mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
5727ef1b 6310
306b79ea
JB		 6311 switch (dev->ieee80211_ptr->iftype) {
6312 case NL80211_IFTYPE_AP:
6313 case NL80211_IFTYPE_AP_VLAN:
6314 case NL80211_IFTYPE_MESH_POINT:
6315 case NL80211_IFTYPE_P2P_GO:
6316 /* always accept these */
6317 break;
6318 case NL80211_IFTYPE_ADHOC:
6319 /* conditionally accept */
6320 if (wiphy_ext_feature_isset(&rdev->wiphy,
6321 NL80211_EXT_FEATURE_DEL_IBSS_STA))
6322 break;
edafcf42 6323 return -EINVAL;
306b79ea 6324 default:
4c476991 6325 return -EINVAL;
306b79ea 6326 }
5727ef1b 6327
4c476991
JB		 6328 if (!rdev->ops->del_station)
6329 return -EOPNOTSUPP;
3b85875a 6330
98856866
JM		 6331 if (info->attrs[NL80211_ATTR_MGMT_SUBTYPE]) {
6332 params.subtype =
6333 nla_get_u8(info->attrs[NL80211_ATTR_MGMT_SUBTYPE]);
6334 if (params.subtype != IEEE80211_STYPE_DISASSOC >> 4 &&
6335 params.subtype != IEEE80211_STYPE_DEAUTH >> 4)
6336 return -EINVAL;
6337 } else {
6338 /* Default to Deauthentication frame */
6339 params.subtype = IEEE80211_STYPE_DEAUTH >> 4;
6340 }
6341
6342 if (info->attrs[NL80211_ATTR_REASON_CODE]) {
6343 params.reason_code =
6344 nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
6345 if (params.reason_code == 0)
6346 return -EINVAL; /* 0 is reserved */
6347 } else {
6348 /* Default to reason code 2 */
6349 params.reason_code = WLAN_REASON_PREV_AUTH_NOT_VALID;
6350 }
6351
89c771e5 6352 return rdev_del_station(rdev, dev, &params);
5727ef1b
JB		 6353}
6354
15e47304 6355static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 6356 int flags, struct net_device *dev,
6357 u8 *dst, u8 *next_hop,
6358 struct mpath_info *pinfo)
6359{
6360 void *hdr;
6361 struct nlattr *pinfoattr;
6362
1ef4c850 6363 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_MPATH);
2ec600d6
LCC		 6364 if (!hdr)
6365 return -1;
6366
9360ffd1
DM		 6367 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6368 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
6369 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
6370 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
6371 goto nla_put_failure;
f5ea9120 6372
ae0be8de 6373 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MPATH_INFO);
2ec600d6
LCC		 6374 if (!pinfoattr)
6375 goto nla_put_failure;
9360ffd1
DM		 6376 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
6377 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
6378 pinfo->frame_qlen))
6379 goto nla_put_failure;
6380 if (((pinfo->filled & MPATH_INFO_SN) &&
6381 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
6382 ((pinfo->filled & MPATH_INFO_METRIC) &&
6383 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
6384 pinfo->metric)) ||
6385 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
6386 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
6387 pinfo->exptime)) ||
6388 ((pinfo->filled & MPATH_INFO_FLAGS) &&
6389 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
6390 pinfo->flags)) ||
6391 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
6392 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
6393 pinfo->discovery_timeout)) ||
6394 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
6395 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
cc241636
JH		 6396 pinfo->discovery_retries)) ||
6397 ((pinfo->filled & MPATH_INFO_HOP_COUNT) &&
6398 nla_put_u8(msg, NL80211_MPATH_INFO_HOP_COUNT,
540bbcb9
JH		 6399 pinfo->hop_count)) ||
6400 ((pinfo->filled & MPATH_INFO_PATH_CHANGE) &&
6401 nla_put_u32(msg, NL80211_MPATH_INFO_PATH_CHANGE,
6402 pinfo->path_change_count)))
9360ffd1 6403 goto nla_put_failure;
2ec600d6
LCC		 6404
6405 nla_nest_end(msg, pinfoattr);
6406
053c095a
JB		 6407 genlmsg_end(msg, hdr);
6408 return 0;
2ec600d6
LCC		 6409
6410 nla_put_failure:
bc3ed28c
TG		 6411 genlmsg_cancel(msg, hdr);
6412 return -EMSGSIZE;
2ec600d6
LCC		 6413}
6414
6415static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 6416 struct netlink_callback *cb)
2ec600d6 6417{
2ec600d6 6418 struct mpath_info pinfo;
1b8ec87a 6419 struct cfg80211_registered_device *rdev;
97990a06 6420 struct wireless_dev *wdev;
2ec600d6
LCC		 6421 u8 dst[ETH_ALEN];
6422 u8 next_hop[ETH_ALEN];
97990a06 6423 int path_idx = cb->args[2];
2ec600d6 6424 int err;
2ec600d6 6425
ea90e0dc 6426 rtnl_lock();
5297c65c 6427 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 6428 if (err)
ea90e0dc 6429 goto out_err;
bba95fef 6430
1b8ec87a 6431 if (!rdev->ops->dump_mpath) {
eec60b03 6432 err = -EOPNOTSUPP;
bba95fef
JB		 6433 goto out_err;
6434 }
6435
97990a06 6436 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
eec60b03 6437 err = -EOPNOTSUPP;
0448b5fc 6438 goto out_err;
eec60b03
JM		 6439 }
6440
bba95fef 6441 while (1) {
1b8ec87a 6442 err = rdev_dump_mpath(rdev, wdev->netdev, path_idx, dst,
97990a06 6443 next_hop, &pinfo);
bba95fef 6444 if (err == -ENOENT)
2ec600d6 6445 break;
bba95fef 6446 if (err)
3b85875a 6447 goto out_err;
2ec600d6 6448
15e47304 6449 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef 6450 cb->nlh->nlmsg_seq, NLM_F_MULTI,
97990a06 6451 wdev->netdev, dst, next_hop,
bba95fef
JB		 6452 &pinfo) < 0)
6453 goto out;
2ec600d6 6454
bba95fef 6455 path_idx++;
2ec600d6 6456 }
2ec600d6 6457
bba95fef 6458 out:
97990a06 6459 cb->args[2] = path_idx;
bba95fef 6460 err = skb->len;
bba95fef 6461 out_err:
ea90e0dc 6462 rtnl_unlock();
bba95fef 6463 return err;
2ec600d6
LCC		 6464}
6465
6466static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
6467{
4c476991 6468 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 6469 int err;
4c476991 6470 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6471 struct mpath_info pinfo;
6472 struct sk_buff *msg;
6473 u8 *dst = NULL;
6474 u8 next_hop[ETH_ALEN];
6475
6476 memset(&pinfo, 0, sizeof(pinfo));
6477
6478 if (!info->attrs[NL80211_ATTR_MAC])
6479 return -EINVAL;
6480
6481 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6482
4c476991
JB		 6483 if (!rdev->ops->get_mpath)
6484 return -EOPNOTSUPP;
2ec600d6 6485
4c476991
JB		 6486 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6487 return -EOPNOTSUPP;
eec60b03 6488
e35e4d28 6489 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 6490 if (err)
4c476991 6491 return err;
2ec600d6 6492
fd2120ca 6493 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 6494 if (!msg)
4c476991 6495 return -ENOMEM;
2ec600d6 6496
15e47304 6497 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 6498 dev, dst, next_hop, &pinfo) < 0) {
6499 nlmsg_free(msg);
6500 return -ENOBUFS;
6501 }
3b85875a 6502
4c476991 6503 return genlmsg_reply(msg, info);
2ec600d6
LCC		 6504}
6505
6506static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
6507{
4c476991
JB		 6508 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6509 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6510 u8 *dst = NULL;
6511 u8 *next_hop = NULL;
6512
6513 if (!info->attrs[NL80211_ATTR_MAC])
6514 return -EINVAL;
6515
6516 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
6517 return -EINVAL;
6518
6519 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6520 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
6521
4c476991
JB		 6522 if (!rdev->ops->change_mpath)
6523 return -EOPNOTSUPP;
35a8efe1 6524
4c476991
JB		 6525 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6526 return -EOPNOTSUPP;
2ec600d6 6527
e35e4d28 6528 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 6529}
4c476991 6530
2ec600d6
LCC		 6531static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
6532{
4c476991
JB		 6533 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6534 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6535 u8 *dst = NULL;
6536 u8 *next_hop = NULL;
6537
6538 if (!info->attrs[NL80211_ATTR_MAC])
6539 return -EINVAL;
6540
6541 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
6542 return -EINVAL;
6543
6544 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6545 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
6546
4c476991
JB		 6547 if (!rdev->ops->add_mpath)
6548 return -EOPNOTSUPP;
35a8efe1 6549
4c476991
JB		 6550 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6551 return -EOPNOTSUPP;
2ec600d6 6552
e35e4d28 6553 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 6554}
6555
6556static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
6557{
4c476991
JB		 6558 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6559 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6560 u8 *dst = NULL;
6561
6562 if (info->attrs[NL80211_ATTR_MAC])
6563 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6564
4c476991
JB		 6565 if (!rdev->ops->del_mpath)
6566 return -EOPNOTSUPP;
3b85875a 6567
b501426c
MP		 6568 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6569 return -EOPNOTSUPP;
6570
e35e4d28 6571 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 6572}
6573
66be7d2b
HR		 6574static int nl80211_get_mpp(struct sk_buff *skb, struct genl_info *info)
6575{
6576 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6577 int err;
6578 struct net_device *dev = info->user_ptr[1];
6579 struct mpath_info pinfo;
6580 struct sk_buff *msg;
6581 u8 *dst = NULL;
6582 u8 mpp[ETH_ALEN];
6583
6584 memset(&pinfo, 0, sizeof(pinfo));
6585
6586 if (!info->attrs[NL80211_ATTR_MAC])
6587 return -EINVAL;
6588
6589 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6590
6591 if (!rdev->ops->get_mpp)
6592 return -EOPNOTSUPP;
6593
6594 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6595 return -EOPNOTSUPP;
6596
6597 err = rdev_get_mpp(rdev, dev, dst, mpp, &pinfo);
6598 if (err)
6599 return err;
6600
6601 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6602 if (!msg)
6603 return -ENOMEM;
6604
6605 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
6606 dev, dst, mpp, &pinfo) < 0) {
6607 nlmsg_free(msg);
6608 return -ENOBUFS;
6609 }
6610
6611 return genlmsg_reply(msg, info);
6612}
6613
6614static int nl80211_dump_mpp(struct sk_buff *skb,
6615 struct netlink_callback *cb)
6616{
6617 struct mpath_info pinfo;
6618 struct cfg80211_registered_device *rdev;
6619 struct wireless_dev *wdev;
6620 u8 dst[ETH_ALEN];
6621 u8 mpp[ETH_ALEN];
6622 int path_idx = cb->args[2];
6623 int err;
6624
ea90e0dc 6625 rtnl_lock();
5297c65c 6626 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
66be7d2b 6627 if (err)
ea90e0dc 6628 goto out_err;
66be7d2b
HR		 6629
6630 if (!rdev->ops->dump_mpp) {
6631 err = -EOPNOTSUPP;
6632 goto out_err;
6633 }
6634
6635 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
6636 err = -EOPNOTSUPP;
6637 goto out_err;
6638 }
6639
6640 while (1) {
6641 err = rdev_dump_mpp(rdev, wdev->netdev, path_idx, dst,
6642 mpp, &pinfo);
6643 if (err == -ENOENT)
6644 break;
6645 if (err)
6646 goto out_err;
6647
6648 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
6649 cb->nlh->nlmsg_seq, NLM_F_MULTI,
6650 wdev->netdev, dst, mpp,
6651 &pinfo) < 0)
6652 goto out;
6653
6654 path_idx++;
6655 }
6656
6657 out:
6658 cb->args[2] = path_idx;
6659 err = skb->len;
6660 out_err:
ea90e0dc 6661 rtnl_unlock();
66be7d2b
HR		 6662 return err;
6663}
6664
9f1ba906
JM		 6665static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
6666{
4c476991
JB		 6667 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6668 struct net_device *dev = info->user_ptr[1];
c56589ed 6669 struct wireless_dev *wdev = dev->ieee80211_ptr;
9f1ba906 6670 struct bss_parameters params;
c56589ed 6671 int err;
9f1ba906
JM		 6672
6673 memset(&params, 0, sizeof(params));
6674 /* default to not changing parameters */
6675 params.use_cts_prot = -1;
6676 params.use_short_preamble = -1;
6677 params.use_short_slot_time = -1;
fd8aaaf3 6678 params.ap_isolate = -1;
50b12f59 6679 params.ht_opmode = -1;
53cabad7
JB		 6680 params.p2p_ctwindow = -1;
6681 params.p2p_opp_ps = -1;
9f1ba906
JM		 6682
6683 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
6684 params.use_cts_prot =
6685 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
6686 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
6687 params.use_short_preamble =
6688 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
6689 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
6690 params.use_short_slot_time =
6691 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 6692 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
6693 params.basic_rates =
6694 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
6695 params.basic_rates_len =
6696 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
6697 }
fd8aaaf3
FF		 6698 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
6699 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 6700 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
6701 params.ht_opmode =
6702 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 6703
53cabad7
JB		 6704 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
6705 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
6706 return -EINVAL;
6707 params.p2p_ctwindow =
ab0d76f6 6708 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 6709 if (params.p2p_ctwindow != 0 &&
6710 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
6711 return -EINVAL;
6712 }
6713
6714 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
6715 u8 tmp;
6716
6717 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
6718 return -EINVAL;
6719 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 6720 params.p2p_opp_ps = tmp;
6721 if (params.p2p_opp_ps &&
6722 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
6723 return -EINVAL;
6724 }
6725
4c476991
JB		 6726 if (!rdev->ops->change_bss)
6727 return -EOPNOTSUPP;
9f1ba906 6728
074ac8df 6729 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 6730 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
6731 return -EOPNOTSUPP;
3b85875a 6732
c56589ed
SW		 6733 wdev_lock(wdev);
6734 err = rdev_change_bss(rdev, dev, &params);
6735 wdev_unlock(wdev);
6736
6737 return err;
9f1ba906
JM		 6738}
6739
b2e1b302
LR		 6740static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
6741{
b2e1b302 6742 char *data = NULL;
05050753 6743 bool is_indoor;
57b5ce07 6744 enum nl80211_user_reg_hint_type user_reg_hint_type;
05050753
I		 6745 u32 owner_nlportid;
6746
80778f18
LR		 6747 /*
6748 * You should only get this when cfg80211 hasn't yet initialized
6749 * completely when built-in to the kernel right between the time
6750 * window between nl80211_init() and regulatory_init(), if that is
6751 * even possible.
6752 */
458f4f9e 6753 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
fe33eb39 6754 return -EINPROGRESS;
80778f18 6755
57b5ce07
LR		 6756 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
6757 user_reg_hint_type =
6758 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
6759 else
6760 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
6761
6762 switch (user_reg_hint_type) {
6763 case NL80211_USER_REG_HINT_USER:
6764 case NL80211_USER_REG_HINT_CELL_BASE:
52616f2b
IP		 6765 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
6766 return -EINVAL;
6767
6768 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
6769 return regulatory_hint_user(data, user_reg_hint_type);
6770 case NL80211_USER_REG_HINT_INDOOR:
05050753
I		 6771 if (info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
6772 owner_nlportid = info->snd_portid;
6773 is_indoor = !!info->attrs[NL80211_ATTR_REG_INDOOR];
6774 } else {
6775 owner_nlportid = 0;
6776 is_indoor = true;
6777 }
6778
6779 return regulatory_hint_indoor(is_indoor, owner_nlportid);
57b5ce07
LR		 6780 default:
6781 return -EINVAL;
6782 }
b2e1b302
LR		 6783}
6784
1ea4ff3e
JB		 6785static int nl80211_reload_regdb(struct sk_buff *skb, struct genl_info *info)
6786{
6787 return reg_reload_regdb();
6788}
6789
24bdd9f4 6790static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 6791 struct genl_info *info)
93da9cc1 6792{
4c476991 6793 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 6794 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 6795 struct wireless_dev *wdev = dev->ieee80211_ptr;
6796 struct mesh_config cur_params;
6797 int err = 0;
93da9cc1 6798 void *hdr;
6799 struct nlattr *pinfoattr;
6800 struct sk_buff *msg;
6801
29cbe68c
JB		 6802 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
6803 return -EOPNOTSUPP;
6804
24bdd9f4 6805 if (!rdev->ops->get_mesh_config)
4c476991 6806 return -EOPNOTSUPP;
f3f92586 6807
29cbe68c
JB		 6808 wdev_lock(wdev);
6809 /* If not connected, get default parameters */
6810 if (!wdev->mesh_id_len)
6811 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
6812 else
e35e4d28 6813 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 6814 wdev_unlock(wdev);
6815
93da9cc1 6816 if (err)
4c476991 6817 return err;
93da9cc1 6818
6819 /* Draw up a netlink message to send back */
fd2120ca 6820 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 6821 if (!msg)
6822 return -ENOMEM;
15e47304 6823 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 6824 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 6825 if (!hdr)
efe1cf0c 6826 goto out;
ae0be8de 6827 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 6828 if (!pinfoattr)
6829 goto nla_put_failure;
9360ffd1
DM		 6830 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6831 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
6832 cur_params.dot11MeshRetryTimeout) ||
6833 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
6834 cur_params.dot11MeshConfirmTimeout) ||
6835 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
6836 cur_params.dot11MeshHoldingTimeout) ||
6837 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
6838 cur_params.dot11MeshMaxPeerLinks) ||
6839 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
6840 cur_params.dot11MeshMaxRetries) ||
6841 nla_put_u8(msg, NL80211_MESHCONF_TTL,
6842 cur_params.dot11MeshTTL) ||
6843 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
6844 cur_params.element_ttl) ||
6845 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
6846 cur_params.auto_open_plinks) ||
7eab0f64
JL		 6847 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
6848 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 6849 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
6850 cur_params.dot11MeshHWMPmaxPREQretries) ||
6851 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
6852 cur_params.path_refresh_time) ||
6853 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
6854 cur_params.min_discovery_timeout) ||
6855 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
6856 cur_params.dot11MeshHWMPactivePathTimeout) ||
6857 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
6858 cur_params.dot11MeshHWMPpreqMinInterval) ||
6859 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
6860 cur_params.dot11MeshHWMPperrMinInterval) ||
6861 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
6862 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
6863 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
6864 cur_params.dot11MeshHWMPRootMode) ||
6865 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
6866 cur_params.dot11MeshHWMPRannInterval) ||
6867 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
6868 cur_params.dot11MeshGateAnnouncementProtocol) ||
6869 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
6870 cur_params.dot11MeshForwarding) ||
335d5349 6871 nla_put_s32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 6872 cur_params.rssi_threshold) ||
6873 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 6874 cur_params.ht_opmode) ||
6875 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
6876 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
6877 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 6878 cur_params.dot11MeshHWMProotInterval) ||
6879 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3b1c5a53
MP		 6880 cur_params.dot11MeshHWMPconfirmationInterval) ||
6881 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
6882 cur_params.power_mode) ||
6883 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
8e7c0538
CT		 6884 cur_params.dot11MeshAwakeWindowDuration) ||
6885 nla_put_u32(msg, NL80211_MESHCONF_PLINK_TIMEOUT,
01d66fbd
BC		 6886 cur_params.plink_timeout) ||
6887 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_GATE,
6888 cur_params.dot11MeshConnectedToMeshGate))
9360ffd1 6889 goto nla_put_failure;
93da9cc1 6890 nla_nest_end(msg, pinfoattr);
6891 genlmsg_end(msg, hdr);
4c476991 6892 return genlmsg_reply(msg, info);
93da9cc1 6893
3b85875a 6894 nla_put_failure:
efe1cf0c 6895 out:
d080e275 6896 nlmsg_free(msg);
4c476991 6897 return -ENOBUFS;
93da9cc1 6898}
6899
ab0d76f6
JB		 6900static const struct nla_policy
6901nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
6902 [NL80211_MESHCONF_RETRY_TIMEOUT] =
6903 NLA_POLICY_RANGE(NLA_U16, 1, 255),
6904 [NL80211_MESHCONF_CONFIRM_TIMEOUT] =
6905 NLA_POLICY_RANGE(NLA_U16, 1, 255),
6906 [NL80211_MESHCONF_HOLDING_TIMEOUT] =
6907 NLA_POLICY_RANGE(NLA_U16, 1, 255),
6908 [NL80211_MESHCONF_MAX_PEER_LINKS] =
6909 NLA_POLICY_RANGE(NLA_U16, 0, 255),
6910 [NL80211_MESHCONF_MAX_RETRIES] = NLA_POLICY_MAX(NLA_U8, 16),
6911 [NL80211_MESHCONF_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
6912 [NL80211_MESHCONF_ELEMENT_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
6913 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = NLA_POLICY_MAX(NLA_U8, 1),
6914 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] =
6915 NLA_POLICY_RANGE(NLA_U32, 1, 255),
93da9cc1 6916 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
6917 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
ab0d76f6 6918 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = NLA_POLICY_MIN(NLA_U16, 1),
93da9cc1 6919 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 6920 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] =
6921 NLA_POLICY_MIN(NLA_U16, 1),
6922 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] =
6923 NLA_POLICY_MIN(NLA_U16, 1),
6924 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] =
6925 NLA_POLICY_MIN(NLA_U16, 1),
6926 [NL80211_MESHCONF_HWMP_ROOTMODE] = NLA_POLICY_MAX(NLA_U8, 4),
6927 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] =
6928 NLA_POLICY_MIN(NLA_U16, 1),
6929 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = NLA_POLICY_MAX(NLA_U8, 1),
6930 [NL80211_MESHCONF_FORWARDING] = NLA_POLICY_MAX(NLA_U8, 1),
6931 [NL80211_MESHCONF_RSSI_THRESHOLD] =
6932 NLA_POLICY_RANGE(NLA_S32, -255, 0),
a4f606ea 6933 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6 6934 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 6935 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] =
6936 NLA_POLICY_MIN(NLA_U16, 1),
6937 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] =
6938 NLA_POLICY_MIN(NLA_U16, 1),
6939 [NL80211_MESHCONF_POWER_MODE] =
6940 NLA_POLICY_RANGE(NLA_U32,
6941 NL80211_MESH_POWER_ACTIVE,
6942 NL80211_MESH_POWER_MAX),
3b1c5a53 6943 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
8e7c0538 6944 [NL80211_MESHCONF_PLINK_TIMEOUT] = { .type = NLA_U32 },
01d66fbd 6945 [NL80211_MESHCONF_CONNECTED_TO_GATE] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
93da9cc1 6946};
6947
c80d545d
JC		 6948static const struct nla_policy
6949 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 6950 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 6951 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
6952 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 6953 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
6e16d90b 6954 [NL80211_MESH_SETUP_AUTH_PROTOCOL] = { .type = NLA_U8 },
bb2798d4 6955 [NL80211_MESH_SETUP_USERSPACE_MPM] = { .type = NLA_FLAG },
3d7af878
JB		 6956 [NL80211_MESH_SETUP_IE] =
6957 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
6958 IEEE80211_MAX_DATA_LEN),
b130e5ce 6959 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 6960};
6961
24bdd9f4 6962static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 6963 struct mesh_config *cfg,
6964 u32 *mask_out)
93da9cc1 6965{
93da9cc1 6966 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 6967 u32 mask = 0;
9757235f 6968 u16 ht_opmode;
93da9cc1 6969
ab0d76f6
JB		 6970#define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, mask, attr, fn) \
6971do { \
6972 if (tb[attr]) { \
6973 cfg->param = fn(tb[attr]); \
6974 mask |= BIT((attr) - 1); \
6975 } \
ea54fba2 6976} while (0)
bd90fdcc 6977
24bdd9f4 6978 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 6979 return -EINVAL;
8cb08174 6980 if (nla_parse_nested_deprecated(tb, NL80211_MESHCONF_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_CONFIG], nl80211_meshconf_params_policy, info->extack))
93da9cc1 6981 return -EINVAL;
6982
93da9cc1 6983 /* This makes sure that there aren't more than 32 mesh config
6984 * parameters (otherwise our bitfield scheme would not work.) */
6985 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
6986
6987 /* Fill in the params struct */
ab0d76f6
JB		 6988 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, mask,
6989 NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
6990 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, mask,
6991 NL80211_MESHCONF_CONFIRM_TIMEOUT,
6992 nla_get_u16);
6993 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, mask,
6994 NL80211_MESHCONF_HOLDING_TIMEOUT,
6995 nla_get_u16);
6996 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, mask,
6997 NL80211_MESHCONF_MAX_PEER_LINKS,
6998 nla_get_u16);
6999 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, mask,
7000 NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
7001 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, mask,
7002 NL80211_MESHCONF_TTL, nla_get_u8);
7003 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, mask,
7004 NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
7005 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, mask,
7006 NL80211_MESHCONF_AUTO_OPEN_PLINKS,
7007 nla_get_u8);
ea54fba2 7008 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
ab0d76f6 7009 mask,
a4f606ea 7010 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
ab0d76f6
JB		 7011 nla_get_u32);
7012 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, mask,
7013 NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
7014 nla_get_u8);
7015 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, mask,
7016 NL80211_MESHCONF_PATH_REFRESH_TIME,
7017 nla_get_u32);
7018 if (mask & BIT(NL80211_MESHCONF_PATH_REFRESH_TIME) &&
7019 (cfg->path_refresh_time < 1 || cfg->path_refresh_time > 65535))
7020 return -EINVAL;
7021 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, mask,
7022 NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
7023 nla_get_u16);
ea54fba2 7024 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
ab0d76f6 7025 mask,
a4f606ea 7026 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
ab0d76f6
JB		 7027 nla_get_u32);
7028 if (mask & BIT(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT) &&
7029 (cfg->dot11MeshHWMPactivePathTimeout < 1 ||
7030 cfg->dot11MeshHWMPactivePathTimeout > 65535))
7031 return -EINVAL;
7032 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval, mask,
ea54fba2 7033 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
ab0d76f6
JB		 7034 nla_get_u16);
7035 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval, mask,
ea54fba2 7036 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
ab0d76f6 7037 nla_get_u16);
93da9cc1 7038 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6 7039 dot11MeshHWMPnetDiameterTraversalTime, mask,
a4f606ea 7040 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
ab0d76f6
JB		 7041 nla_get_u16);
7042 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
7043 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
7044 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
7045 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7046 nla_get_u16);
7047 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshGateAnnouncementProtocol,
ea54fba2 7048 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
ab0d76f6
JB		 7049 nla_get_u8);
7050 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, mask,
7051 NL80211_MESHCONF_FORWARDING, nla_get_u8);
7052 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, mask,
7053 NL80211_MESHCONF_RSSI_THRESHOLD,
7054 nla_get_s32);
01d66fbd
BC		 7055 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToMeshGate, mask,
7056 NL80211_MESHCONF_CONNECTED_TO_GATE,
7057 nla_get_u8);
9757235f
MH		 7058 /*
7059 * Check HT operation mode based on
188f60ab 7060 * IEEE 802.11-2016 9.4.2.57 HT Operation element.
9757235f
MH		 7061 */
7062 if (tb[NL80211_MESHCONF_HT_OPMODE]) {
7063 ht_opmode = nla_get_u16(tb[NL80211_MESHCONF_HT_OPMODE]);
7064
7065 if (ht_opmode & ~(IEEE80211_HT_OP_MODE_PROTECTION |
7066 IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT |
7067 IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT))
7068 return -EINVAL;
7069
188f60ab
BC		 7070 /* NON_HT_STA bit is reserved, but some programs set it */
7071 ht_opmode &= ~IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
9757235f 7072
9757235f 7073 cfg->ht_opmode = ht_opmode;
fd551bac 7074 mask |= (1 << (NL80211_MESHCONF_HT_OPMODE - 1));
9757235f 7075 }
728b19e5 7076 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6
JB		 7077 dot11MeshHWMPactivePathToRootTimeout, mask,
7078 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7079 nla_get_u32);
7080 if (mask & BIT(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT) &&
7081 (cfg->dot11MeshHWMPactivePathToRootTimeout < 1 ||
7082 cfg->dot11MeshHWMPactivePathToRootTimeout > 65535))
7083 return -EINVAL;
7084 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, mask,
7085 NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
7086 nla_get_u16);
7087 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPconfirmationInterval,
7088 mask,
728b19e5 7089 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
ab0d76f6
JB		 7090 nla_get_u16);
7091 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode, mask,
7092 NL80211_MESHCONF_POWER_MODE, nla_get_u32);
7093 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration, mask,
7094 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
7095 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, plink_timeout, mask,
7096 NL80211_MESHCONF_PLINK_TIMEOUT, nla_get_u32);
bd90fdcc
JB		 7097 if (mask_out)
7098 *mask_out = mask;
c80d545d 7099
bd90fdcc
JB		 7100 return 0;
7101
7102#undef FILL_IN_MESH_PARAM_IF_SET
7103}
7104
c80d545d
JC		 7105static int nl80211_parse_mesh_setup(struct genl_info *info,
7106 struct mesh_setup *setup)
7107{
bb2798d4 7108 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c80d545d
JC		 7109 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
7110
7111 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
7112 return -EINVAL;
8cb08174 7113 if (nla_parse_nested_deprecated(tb, NL80211_MESH_SETUP_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_SETUP], nl80211_mesh_setup_params_policy, info->extack))
c80d545d
JC		 7114 return -EINVAL;
7115
d299a1f2
JC		 7116 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
7117 setup->sync_method =
7118 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
7119 IEEE80211_SYNC_METHOD_VENDOR :
7120 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
7121
c80d545d
JC		 7122 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
7123 setup->path_sel_proto =
7124 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
7125 IEEE80211_PATH_PROTOCOL_VENDOR :
7126 IEEE80211_PATH_PROTOCOL_HWMP;
7127
7128 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
7129 setup->path_metric =
7130 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
7131 IEEE80211_PATH_METRIC_VENDOR :
7132 IEEE80211_PATH_METRIC_AIRTIME;
7133
581a8b0f 7134 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 7135 struct nlattr *ieattr =
581a8b0f 7136 tb[NL80211_MESH_SETUP_IE];
581a8b0f
JC		 7137 setup->ie = nla_data(ieattr);
7138 setup->ie_len = nla_len(ieattr);
c80d545d 7139 }
bb2798d4
TP		 7140 if (tb[NL80211_MESH_SETUP_USERSPACE_MPM] &&
7141 !(rdev->wiphy.features & NL80211_FEATURE_USERSPACE_MPM))
7142 return -EINVAL;
7143 setup->user_mpm = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_MPM]);
b130e5ce
JC		 7144 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
7145 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
bb2798d4
TP		 7146 if (setup->is_secure)
7147 setup->user_mpm = true;
c80d545d 7148
6e16d90b
CT		 7149 if (tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]) {
7150 if (!setup->user_mpm)
7151 return -EINVAL;
7152 setup->auth_id =
7153 nla_get_u8(tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]);
7154 }
7155
c80d545d
JC		 7156 return 0;
7157}
7158
24bdd9f4 7159static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 7160 struct genl_info *info)
bd90fdcc
JB		 7161{
7162 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7163 struct net_device *dev = info->user_ptr[1];
29cbe68c 7164 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 7165 struct mesh_config cfg;
7166 u32 mask;
7167 int err;
7168
29cbe68c
JB		 7169 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7170 return -EOPNOTSUPP;
7171
24bdd9f4 7172 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 7173 return -EOPNOTSUPP;
7174
24bdd9f4 7175 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 7176 if (err)
7177 return err;
7178
29cbe68c
JB		 7179 wdev_lock(wdev);
7180 if (!wdev->mesh_id_len)
7181 err = -ENOLINK;
7182
7183 if (!err)
e35e4d28 7184 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 7185
7186 wdev_unlock(wdev);
7187
7188 return err;
93da9cc1 7189}
7190
ad30ca2c
AN		 7191static int nl80211_put_regdom(const struct ieee80211_regdomain *regdom,
7192 struct sk_buff *msg)
f130347c 7193{
f130347c
LR		 7194 struct nlattr *nl_reg_rules;
7195 unsigned int i;
f130347c 7196
458f4f9e
JB		 7197 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
7198 (regdom->dfs_region &&
7199 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
ad30ca2c 7200 goto nla_put_failure;
458f4f9e 7201
ae0be8de 7202 nl_reg_rules = nla_nest_start_noflag(msg, NL80211_ATTR_REG_RULES);
f130347c 7203 if (!nl_reg_rules)
ad30ca2c 7204 goto nla_put_failure;
f130347c 7205
458f4f9e 7206 for (i = 0; i < regdom->n_reg_rules; i++) {
f130347c
LR		 7207 struct nlattr *nl_reg_rule;
7208 const struct ieee80211_reg_rule *reg_rule;
7209 const struct ieee80211_freq_range *freq_range;
7210 const struct ieee80211_power_rule *power_rule;
97524820 7211 unsigned int max_bandwidth_khz;
f130347c 7212
458f4f9e 7213 reg_rule = &regdom->reg_rules[i];
f130347c
LR		 7214 freq_range = &reg_rule->freq_range;
7215 power_rule = &reg_rule->power_rule;
7216
ae0be8de 7217 nl_reg_rule = nla_nest_start_noflag(msg, i);
f130347c 7218 if (!nl_reg_rule)
ad30ca2c 7219 goto nla_put_failure;
f130347c 7220
97524820
JD		 7221 max_bandwidth_khz = freq_range->max_bandwidth_khz;
7222 if (!max_bandwidth_khz)
7223 max_bandwidth_khz = reg_get_max_bandwidth(regdom,
7224 reg_rule);
7225
9360ffd1
DM		 7226 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
7227 reg_rule->flags) ||
7228 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
7229 freq_range->start_freq_khz) ||
7230 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
7231 freq_range->end_freq_khz) ||
7232 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
97524820 7233 max_bandwidth_khz) ||
9360ffd1
DM		 7234 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
7235 power_rule->max_antenna_gain) ||
7236 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
089027e5
JD		 7237 power_rule->max_eirp) ||
7238 nla_put_u32(msg, NL80211_ATTR_DFS_CAC_TIME,
7239 reg_rule->dfs_cac_ms))
ad30ca2c 7240 goto nla_put_failure;
f130347c
LR		 7241
7242 nla_nest_end(msg, nl_reg_rule);
7243 }
7244
7245 nla_nest_end(msg, nl_reg_rules);
ad30ca2c
AN		 7246 return 0;
7247
7248nla_put_failure:
7249 return -EMSGSIZE;
7250}
7251
7252static int nl80211_get_reg_do(struct sk_buff *skb, struct genl_info *info)
7253{
7254 const struct ieee80211_regdomain *regdom = NULL;
7255 struct cfg80211_registered_device *rdev;
7256 struct wiphy *wiphy = NULL;
7257 struct sk_buff *msg;
7258 void *hdr;
7259
7260 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7261 if (!msg)
7262 return -ENOBUFS;
7263
7264 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7265 NL80211_CMD_GET_REG);
7266 if (!hdr)
7267 goto put_failure;
7268
7269 if (info->attrs[NL80211_ATTR_WIPHY]) {
1bdd716c
AN		 7270 bool self_managed;
7271
ad30ca2c
AN		 7272 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
7273 if (IS_ERR(rdev)) {
7274 nlmsg_free(msg);
7275 return PTR_ERR(rdev);
7276 }
7277
7278 wiphy = &rdev->wiphy;
1bdd716c
AN		 7279 self_managed = wiphy->regulatory_flags &
7280 REGULATORY_WIPHY_SELF_MANAGED;
ad30ca2c
AN		 7281 regdom = get_wiphy_regdom(wiphy);
7282
1bdd716c
AN		 7283 /* a self-managed-reg device must have a private regdom */
7284 if (WARN_ON(!regdom && self_managed)) {
7285 nlmsg_free(msg);
7286 return -EINVAL;
7287 }
7288
ad30ca2c
AN		 7289 if (regdom &&
7290 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7291 goto nla_put_failure;
7292 }
7293
7294 if (!wiphy && reg_last_request_cell_base() &&
7295 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
7296 NL80211_USER_REG_HINT_CELL_BASE))
7297 goto nla_put_failure;
7298
7299 rcu_read_lock();
7300
7301 if (!regdom)
7302 regdom = rcu_dereference(cfg80211_regdomain);
7303
7304 if (nl80211_put_regdom(regdom, msg))
7305 goto nla_put_failure_rcu;
7306
7307 rcu_read_unlock();
f130347c
LR		 7308
7309 genlmsg_end(msg, hdr);
5fe231e8 7310 return genlmsg_reply(msg, info);
f130347c 7311
458f4f9e
JB		 7312nla_put_failure_rcu:
7313 rcu_read_unlock();
f130347c 7314nla_put_failure:
efe1cf0c 7315put_failure:
d080e275 7316 nlmsg_free(msg);
5fe231e8 7317 return -EMSGSIZE;
f130347c
LR		 7318}
7319
ad30ca2c
AN		 7320static int nl80211_send_regdom(struct sk_buff *msg, struct netlink_callback *cb,
7321 u32 seq, int flags, struct wiphy *wiphy,
7322 const struct ieee80211_regdomain *regdom)
7323{
7324 void *hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
7325 NL80211_CMD_GET_REG);
7326
7327 if (!hdr)
7328 return -1;
7329
0a833c29 7330 genl_dump_check_consistent(cb, hdr);
ad30ca2c
AN		 7331
7332 if (nl80211_put_regdom(regdom, msg))
7333 goto nla_put_failure;
7334
7335 if (!wiphy && reg_last_request_cell_base() &&
7336 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
7337 NL80211_USER_REG_HINT_CELL_BASE))
7338 goto nla_put_failure;
7339
7340 if (wiphy &&
7341 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7342 goto nla_put_failure;
7343
1bdd716c
AN		 7344 if (wiphy && wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
7345 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
7346 goto nla_put_failure;
7347
053c095a
JB		 7348 genlmsg_end(msg, hdr);
7349 return 0;
ad30ca2c
AN		 7350
7351nla_put_failure:
7352 genlmsg_cancel(msg, hdr);
7353 return -EMSGSIZE;
7354}
7355
7356static int nl80211_get_reg_dump(struct sk_buff *skb,
7357 struct netlink_callback *cb)
7358{
7359 const struct ieee80211_regdomain *regdom = NULL;
7360 struct cfg80211_registered_device *rdev;
7361 int err, reg_idx, start = cb->args[2];
7362
7363 rtnl_lock();
7364
7365 if (cfg80211_regdomain && start == 0) {
7366 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
7367 NLM_F_MULTI, NULL,
7368 rtnl_dereference(cfg80211_regdomain));
7369 if (err < 0)
7370 goto out_err;
7371 }
7372
7373 /* the global regdom is idx 0 */
7374 reg_idx = 1;
7375 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
7376 regdom = get_wiphy_regdom(&rdev->wiphy);
7377 if (!regdom)
7378 continue;
7379
7380 if (++reg_idx <= start)
7381 continue;
7382
7383 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
7384 NLM_F_MULTI, &rdev->wiphy, regdom);
7385 if (err < 0) {
7386 reg_idx--;
7387 break;
7388 }
7389 }
7390
7391 cb->args[2] = reg_idx;
7392 err = skb->len;
7393out_err:
7394 rtnl_unlock();
7395 return err;
7396}
7397
b6863036
JB		 7398#ifdef CONFIG_CFG80211_CRDA_SUPPORT
7399static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
7400 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
7401 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
7402 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
7403 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
7404 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
7405 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
7406 [NL80211_ATTR_DFS_CAC_TIME] = { .type = NLA_U32 },
7407};
7408
7409static int parse_reg_rule(struct nlattr *tb[],
7410 struct ieee80211_reg_rule *reg_rule)
7411{
7412 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
7413 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
7414
7415 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
7416 return -EINVAL;
7417 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
7418 return -EINVAL;
7419 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
7420 return -EINVAL;
7421 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
7422 return -EINVAL;
7423 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
7424 return -EINVAL;
7425
7426 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
7427
7428 freq_range->start_freq_khz =
7429 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
7430 freq_range->end_freq_khz =
7431 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
7432 freq_range->max_bandwidth_khz =
7433 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
7434
7435 power_rule->max_eirp =
7436 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
7437
7438 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
7439 power_rule->max_antenna_gain =
7440 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
7441
7442 if (tb[NL80211_ATTR_DFS_CAC_TIME])
7443 reg_rule->dfs_cac_ms =
7444 nla_get_u32(tb[NL80211_ATTR_DFS_CAC_TIME]);
7445
7446 return 0;
7447}
7448
b2e1b302
LR		 7449static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
7450{
7451 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
7452 struct nlattr *nl_reg_rule;
ea372c54
JB		 7453 char *alpha2;
7454 int rem_reg_rules, r;
391d132c 7455 u32 num_rules = 0, rule_idx = 0;
4c7d3982 7456 enum nl80211_dfs_regions dfs_region = NL80211_DFS_UNSET;
ea372c54 7457 struct ieee80211_regdomain *rd;
b2e1b302
LR		 7458
7459 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7460 return -EINVAL;
7461
7462 if (!info->attrs[NL80211_ATTR_REG_RULES])
7463 return -EINVAL;
7464
7465 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7466
8b60b078
LR		 7467 if (info->attrs[NL80211_ATTR_DFS_REGION])
7468 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
7469
b2e1b302 7470 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 7471 rem_reg_rules) {
b2e1b302
LR		 7472 num_rules++;
7473 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 7474 return -EINVAL;
b2e1b302
LR		 7475 }
7476
e438768f
LR		 7477 if (!reg_is_valid_request(alpha2))
7478 return -EINVAL;
7479
391d132c 7480 rd = kzalloc(struct_size(rd, reg_rules, num_rules), GFP_KERNEL);
6913b49a
JB		 7481 if (!rd)
7482 return -ENOMEM;
b2e1b302
LR		 7483
7484 rd->n_reg_rules = num_rules;
7485 rd->alpha2[0] = alpha2[0];
7486 rd->alpha2[1] = alpha2[1];
7487
8b60b078
LR		 7488 /*
7489 * Disable DFS master mode if the DFS region was
7490 * not supported or known on this kernel.
7491 */
7492 if (reg_supported_dfs_region(dfs_region))
7493 rd->dfs_region = dfs_region;
7494
b2e1b302 7495 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 7496 rem_reg_rules) {
8cb08174
JB		 7497 r = nla_parse_nested_deprecated(tb, NL80211_REG_RULE_ATTR_MAX,
7498 nl_reg_rule, reg_rule_policy,
7499 info->extack);
ae811e21
JB		 7500 if (r)
7501 goto bad_reg;
b2e1b302
LR		 7502 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
7503 if (r)
7504 goto bad_reg;
7505
7506 rule_idx++;
7507
d0e18f83
LR		 7508 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
7509 r = -EINVAL;
b2e1b302 7510 goto bad_reg;
d0e18f83 7511 }
b2e1b302
LR		 7512 }
7513
06627990
JB		 7514 /* set_regdom takes ownership of rd */
7515 return set_regdom(rd, REGD_SOURCE_CRDA);
d2372b31 7516 bad_reg:
b2e1b302 7517 kfree(rd);
d0e18f83 7518 return r;
b2e1b302 7519}
b6863036 7520#endif /* CONFIG_CFG80211_CRDA_SUPPORT */
b2e1b302 7521
83f5e2cf
JB		 7522static int validate_scan_freqs(struct nlattr *freqs)
7523{
7524 struct nlattr *attr1, *attr2;
7525 int n_channels = 0, tmp1, tmp2;
7526
d7f13f74
SD		 7527 nla_for_each_nested(attr1, freqs, tmp1)
7528 if (nla_len(attr1) != sizeof(u32))
7529 return 0;
7530
83f5e2cf
JB		 7531 nla_for_each_nested(attr1, freqs, tmp1) {
7532 n_channels++;
7533 /*
7534 * Some hardware has a limited channel list for
7535 * scanning, and it is pretty much nonsensical
7536 * to scan for a channel twice, so disallow that
7537 * and don't require drivers to check that the
7538 * channel list they get isn't longer than what
7539 * they can scan, as long as they can scan all
7540 * the channels they registered at once.
7541 */
7542 nla_for_each_nested(attr2, freqs, tmp2)
7543 if (attr1 != attr2 &&
7544 nla_get_u32(attr1) == nla_get_u32(attr2))
7545 return 0;
7546 }
7547
7548 return n_channels;
7549}
7550
57fbcce3 7551static bool is_band_valid(struct wiphy *wiphy, enum nl80211_band b)
38de03d2 7552{
57fbcce3 7553 return b < NUM_NL80211_BANDS && wiphy->bands[b];
38de03d2
AS		 7554}
7555
7556static int parse_bss_select(struct nlattr *nla, struct wiphy *wiphy,
7557 struct cfg80211_bss_selection *bss_select)
7558{
7559 struct nlattr *attr[NL80211_BSS_SELECT_ATTR_MAX + 1];
7560 struct nlattr *nest;
7561 int err;
7562 bool found = false;
7563 int i;
7564
7565 /* only process one nested attribute */
7566 nest = nla_data(nla);
7567 if (!nla_ok(nest, nla_len(nest)))
7568 return -EINVAL;
7569
8cb08174
JB		 7570 err = nla_parse_nested_deprecated(attr, NL80211_BSS_SELECT_ATTR_MAX,
7571 nest, nl80211_bss_select_policy,
7572 NULL);
38de03d2
AS		 7573 if (err)
7574 return err;
7575
7576 /* only one attribute may be given */
7577 for (i = 0; i <= NL80211_BSS_SELECT_ATTR_MAX; i++) {
7578 if (attr[i]) {
7579 if (found)
7580 return -EINVAL;
7581 found = true;
7582 }
7583 }
7584
7585 bss_select->behaviour = __NL80211_BSS_SELECT_ATTR_INVALID;
7586
7587 if (attr[NL80211_BSS_SELECT_ATTR_RSSI])
7588 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI;
7589
7590 if (attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]) {
7591 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_BAND_PREF;
7592 bss_select->param.band_pref =
7593 nla_get_u32(attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]);
7594 if (!is_band_valid(wiphy, bss_select->param.band_pref))
7595 return -EINVAL;
7596 }
7597
7598 if (attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]) {
7599 struct nl80211_bss_select_rssi_adjust *adj_param;
7600
7601 adj_param = nla_data(attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]);
7602 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI_ADJUST;
7603 bss_select->param.adjust.band = adj_param->band;
7604 bss_select->param.adjust.delta = adj_param->delta;
7605 if (!is_band_valid(wiphy, bss_select->param.adjust.band))
7606 return -EINVAL;
7607 }
7608
7609 /* user-space did not provide behaviour attribute */
7610 if (bss_select->behaviour == __NL80211_BSS_SELECT_ATTR_INVALID)
7611 return -EINVAL;
7612
7613 if (!(wiphy->bss_select_support & BIT(bss_select->behaviour)))
7614 return -EINVAL;
7615
7616 return 0;
7617}
7618
9bb7e0f2
JB		 7619int nl80211_parse_random_mac(struct nlattr **attrs,
7620 u8 *mac_addr, u8 *mac_addr_mask)
ad2b26ab
JB		 7621{
7622 int i;
7623
7624 if (!attrs[NL80211_ATTR_MAC] && !attrs[NL80211_ATTR_MAC_MASK]) {
d2beae10
JP		 7625 eth_zero_addr(mac_addr);
7626 eth_zero_addr(mac_addr_mask);
ad2b26ab
JB		 7627 mac_addr[0] = 0x2;
7628 mac_addr_mask[0] = 0x3;
7629
7630 return 0;
7631 }
7632
7633 /* need both or none */
7634 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_MAC_MASK])
7635 return -EINVAL;
7636
7637 memcpy(mac_addr, nla_data(attrs[NL80211_ATTR_MAC]), ETH_ALEN);
7638 memcpy(mac_addr_mask, nla_data(attrs[NL80211_ATTR_MAC_MASK]), ETH_ALEN);
7639
7640 /* don't allow or configure an mcast address */
7641 if (!is_multicast_ether_addr(mac_addr_mask) ||
7642 is_multicast_ether_addr(mac_addr))
7643 return -EINVAL;
7644
7645 /*
7646 * allow users to pass a MAC address that has bits set outside
7647 * of the mask, but don't bother drivers with having to deal
7648 * with such bits
7649 */
7650 for (i = 0; i < ETH_ALEN; i++)
7651 mac_addr[i] &= mac_addr_mask[i];
7652
7653 return 0;
7654}
7655
34373d12
VT		 7656static bool cfg80211_off_channel_oper_allowed(struct wireless_dev *wdev)
7657{
7658 ASSERT_WDEV_LOCK(wdev);
7659
7660 if (!cfg80211_beaconing_iface_active(wdev))
7661 return true;
7662
7663 if (!(wdev->chandef.chan->flags & IEEE80211_CHAN_RADAR))
7664 return true;
7665
7666 return regulatory_pre_cac_allowed(wdev->wiphy);
7667}
7668
db0a4ad8
JB		 7669static bool nl80211_check_scan_feat(struct wiphy *wiphy, u32 flags, u32 flag,
7670 enum nl80211_ext_feature_index feat)
7671{
7672 if (!(flags & flag))
7673 return true;
7674 if (wiphy_ext_feature_isset(wiphy, feat))
7675 return true;
7676 return false;
7677}
7678
2d23d073
RZ		 7679static int
7680nl80211_check_scan_flags(struct wiphy *wiphy, struct wireless_dev *wdev,
7681 void *request, struct nlattr **attrs,
7682 bool is_sched_scan)
7683{
7684 u8 *mac_addr, *mac_addr_mask;
7685 u32 *flags;
7686 enum nl80211_feature_flags randomness_flag;
7687
7688 if (!attrs[NL80211_ATTR_SCAN_FLAGS])
7689 return 0;
7690
7691 if (is_sched_scan) {
7692 struct cfg80211_sched_scan_request *req = request;
7693
7694 randomness_flag = wdev ?
7695 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR :
7696 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
7697 flags = &req->flags;
7698 mac_addr = req->mac_addr;
7699 mac_addr_mask = req->mac_addr_mask;
7700 } else {
7701 struct cfg80211_scan_request *req = request;
7702
7703 randomness_flag = NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
7704 flags = &req->flags;
7705 mac_addr = req->mac_addr;
7706 mac_addr_mask = req->mac_addr_mask;
7707 }
7708
7709 *flags = nla_get_u32(attrs[NL80211_ATTR_SCAN_FLAGS]);
7710
5037a009
SD		 7711 if (((*flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
7712 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
db0a4ad8
JB		 7713 !nl80211_check_scan_feat(wiphy, *flags,
7714 NL80211_SCAN_FLAG_LOW_SPAN,
7715 NL80211_EXT_FEATURE_LOW_SPAN_SCAN) ||
7716 !nl80211_check_scan_feat(wiphy, *flags,
7717 NL80211_SCAN_FLAG_LOW_POWER,
7718 NL80211_EXT_FEATURE_LOW_POWER_SCAN) ||
7719 !nl80211_check_scan_feat(wiphy, *flags,
7720 NL80211_SCAN_FLAG_HIGH_ACCURACY,
7721 NL80211_EXT_FEATURE_HIGH_ACCURACY_SCAN) ||
7722 !nl80211_check_scan_feat(wiphy, *flags,
7723 NL80211_SCAN_FLAG_FILS_MAX_CHANNEL_TIME,
7724 NL80211_EXT_FEATURE_FILS_MAX_CHANNEL_TIME) ||
7725 !nl80211_check_scan_feat(wiphy, *flags,
7726 NL80211_SCAN_FLAG_ACCEPT_BCAST_PROBE_RESP,
7727 NL80211_EXT_FEATURE_ACCEPT_BCAST_PROBE_RESP) ||
7728 !nl80211_check_scan_feat(wiphy, *flags,
7729 NL80211_SCAN_FLAG_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION,
7730 NL80211_EXT_FEATURE_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION) ||
7731 !nl80211_check_scan_feat(wiphy, *flags,
7732 NL80211_SCAN_FLAG_OCE_PROBE_REQ_HIGH_TX_RATE,
2e076f19
JB		 7733 NL80211_EXT_FEATURE_OCE_PROBE_REQ_HIGH_TX_RATE) ||
7734 !nl80211_check_scan_feat(wiphy, *flags,
7735 NL80211_SCAN_FLAG_RANDOM_SN,
7736 NL80211_EXT_FEATURE_SCAN_RANDOM_SN) ||
7737 !nl80211_check_scan_feat(wiphy, *flags,
7738 NL80211_SCAN_FLAG_MIN_PREQ_CONTENT,
7739 NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT))
2d23d073
RZ		 7740 return -EOPNOTSUPP;
7741
7742 if (*flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
7743 int err;
7744
7745 if (!(wiphy->features & randomness_flag) ||
7746 (wdev && wdev->current_bss))
7747 return -EOPNOTSUPP;
7748
7749 err = nl80211_parse_random_mac(attrs, mac_addr, mac_addr_mask);
7750 if (err)
7751 return err;
7752 }
7753
2d23d073
RZ		 7754 return 0;
7755}
7756
2a519311
JB		 7757static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
7758{
4c476991 7759 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 7760 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 7761 struct cfg80211_scan_request *request;
2032f3b2
TP		 7762 struct nlattr *scan_freqs = NULL;
7763 bool scan_freqs_khz = false;
2a519311
JB		 7764 struct nlattr *attr;
7765 struct wiphy *wiphy;
83f5e2cf 7766 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 7767 size_t ie_len;
2a519311 7768
79c97e97 7769 wiphy = &rdev->wiphy;
2a519311 7770
cb3b7d87
AB		 7771 if (wdev->iftype == NL80211_IFTYPE_NAN)
7772 return -EOPNOTSUPP;
7773
4c476991
JB		 7774 if (!rdev->ops->scan)
7775 return -EOPNOTSUPP;
2a519311 7776
f9d15d16 7777 if (rdev->scan_req || rdev->scan_msg) {
f9f47529
JB		 7778 err = -EBUSY;
7779 goto unlock;
7780 }
2a519311 7781
2032f3b2
TP		 7782 if (info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ]) {
7783 if (!wiphy_ext_feature_isset(wiphy,
7784 NL80211_EXT_FEATURE_SCAN_FREQ_KHZ))
7785 return -EOPNOTSUPP;
7786 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ];
7787 scan_freqs_khz = true;
7788 } else if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES])
7789 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQUENCIES];
7790
7791 if (scan_freqs) {
7792 n_channels = validate_scan_freqs(scan_freqs);
f9f47529
JB		 7793 if (!n_channels) {
7794 err = -EINVAL;
7795 goto unlock;
7796 }
2a519311 7797 } else {
bdfbec2d 7798 n_channels = ieee80211_get_num_supported_channels(wiphy);
2a519311
JB		 7799 }
7800
7801 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
7802 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
7803 n_ssids++;
7804
f9f47529
JB		 7805 if (n_ssids > wiphy->max_scan_ssids) {
7806 err = -EINVAL;
7807 goto unlock;
7808 }
2a519311 7809
70692ad2
JM		 7810 if (info->attrs[NL80211_ATTR_IE])
7811 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
7812 else
7813 ie_len = 0;
7814
f9f47529
JB		 7815 if (ie_len > wiphy->max_scan_ie_len) {
7816 err = -EINVAL;
7817 goto unlock;
7818 }
18a83659 7819
2a519311 7820 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 7821 + sizeof(*request->ssids) * n_ssids
7822 + sizeof(*request->channels) * n_channels
70692ad2 7823 + ie_len, GFP_KERNEL);
f9f47529
JB		 7824 if (!request) {
7825 err = -ENOMEM;
7826 goto unlock;
7827 }
2a519311 7828
2a519311 7829 if (n_ssids)
5ba63533 7830 request->ssids = (void *)&request->channels[n_channels];
2a519311 7831 request->n_ssids = n_ssids;
70692ad2 7832 if (ie_len) {
13874e4b 7833 if (n_ssids)
70692ad2
JM		 7834 request->ie = (void *)(request->ssids + n_ssids);
7835 else
7836 request->ie = (void *)(request->channels + n_channels);
7837 }
2a519311 7838
584991dc 7839 i = 0;
2032f3b2 7840 if (scan_freqs) {
2a519311 7841 /* user specified, bail out if channel not found */
2032f3b2 7842 nla_for_each_nested(attr, scan_freqs, tmp) {
584991dc 7843 struct ieee80211_channel *chan;
2032f3b2 7844 int freq = nla_get_u32(attr);
584991dc 7845
2032f3b2
TP		 7846 if (!scan_freqs_khz)
7847 freq = MHZ_TO_KHZ(freq);
584991dc 7848
2032f3b2 7849 chan = ieee80211_get_channel_khz(wiphy, freq);
584991dc 7850 if (!chan) {
2a519311
JB		 7851 err = -EINVAL;
7852 goto out_free;
7853 }
584991dc
JB		 7854
7855 /* ignore disabled channels */
7856 if (chan->flags & IEEE80211_CHAN_DISABLED)
7857 continue;
7858
7859 request->channels[i] = chan;
2a519311
JB		 7860 i++;
7861 }
7862 } else {
57fbcce3 7863 enum nl80211_band band;
34850ab2 7864
2a519311 7865 /* all channels */
57fbcce3 7866 for (band = 0; band < NUM_NL80211_BANDS; band++) {
2a519311 7867 int j;
7a087e74 7868
2a519311
JB		 7869 if (!wiphy->bands[band])
7870 continue;
7871 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 7872 struct ieee80211_channel *chan;
7873
7874 chan = &wiphy->bands[band]->channels[j];
7875
7876 if (chan->flags & IEEE80211_CHAN_DISABLED)
7877 continue;
7878
7879 request->channels[i] = chan;
2a519311
JB		 7880 i++;
7881 }
7882 }
7883 }
7884
584991dc
JB		 7885 if (!i) {
7886 err = -EINVAL;
7887 goto out_free;
7888 }
7889
7890 request->n_channels = i;
7891
34373d12
VT		 7892 wdev_lock(wdev);
7893 if (!cfg80211_off_channel_oper_allowed(wdev)) {
7894 struct ieee80211_channel *chan;
7895
7896 if (request->n_channels != 1) {
7897 wdev_unlock(wdev);
7898 err = -EBUSY;
7899 goto out_free;
7900 }
7901
7902 chan = request->channels[0];
7903 if (chan->center_freq != wdev->chandef.chan->center_freq) {
7904 wdev_unlock(wdev);
7905 err = -EBUSY;
7906 goto out_free;
7907 }
7908 }
7909 wdev_unlock(wdev);
7910
2a519311 7911 i = 0;
13874e4b 7912 if (n_ssids) {
2a519311 7913 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 7914 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 7915 err = -EINVAL;
7916 goto out_free;
7917 }
57a27e1d 7918 request->ssids[i].ssid_len = nla_len(attr);
2a519311 7919 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 7920 i++;
7921 }
7922 }
7923
70692ad2
JM		 7924 if (info->attrs[NL80211_ATTR_IE]) {
7925 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 7926 memcpy((void *)request->ie,
7927 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 7928 request->ie_len);
7929 }
7930
57fbcce3 7931 for (i = 0; i < NUM_NL80211_BANDS; i++)
a401d2bb
JB		 7932 if (wiphy->bands[i])
7933 request->rates[i] =
7934 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 7935
7936 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
7937 nla_for_each_nested(attr,
7938 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
7939 tmp) {
57fbcce3 7940 enum nl80211_band band = nla_type(attr);
34850ab2 7941
57fbcce3 7942 if (band < 0 || band >= NUM_NL80211_BANDS) {
34850ab2
JB		 7943 err = -EINVAL;
7944 goto out_free;
7945 }
1b09cd82
FF		 7946
7947 if (!wiphy->bands[band])
7948 continue;
7949
34850ab2
JB		 7950 err = ieee80211_get_ratemask(wiphy->bands[band],
7951 nla_data(attr),
7952 nla_len(attr),
7953 &request->rates[band]);
7954 if (err)
7955 goto out_free;
7956 }
7957 }
7958
1d76250b
AS		 7959 if (info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]) {
7960 if (!wiphy_ext_feature_isset(wiphy,
7961 NL80211_EXT_FEATURE_SET_SCAN_DWELL)) {
7962 err = -EOPNOTSUPP;
7963 goto out_free;
7964 }
7965
7966 request->duration =
7967 nla_get_u16(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]);
7968 request->duration_mandatory =
7969 nla_get_flag(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY]);
7970 }
7971
2d23d073
RZ		 7972 err = nl80211_check_scan_flags(wiphy, wdev, request, info->attrs,
7973 false);
7974 if (err)
7975 goto out_free;
ed473771 7976
e9f935e3
RM		 7977 request->no_cck =
7978 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
7979
2fa436b3
VK		 7980 /* Initial implementation used NL80211_ATTR_MAC to set the specific
7981 * BSSID to scan for. This was problematic because that same attribute
7982 * was already used for another purpose (local random MAC address). The
7983 * NL80211_ATTR_BSSID attribute was added to fix this. For backwards
7984 * compatibility with older userspace components, also use the
7985 * NL80211_ATTR_MAC value here if it can be determined to be used for
7986 * the specific BSSID use case instead of the random MAC address
7987 * (NL80211_ATTR_SCAN_FLAGS is used to enable random MAC address use).
7988 */
7989 if (info->attrs[NL80211_ATTR_BSSID])
7990 memcpy(request->bssid,
7991 nla_data(info->attrs[NL80211_ATTR_BSSID]), ETH_ALEN);
7992 else if (!(request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) &&
7993 info->attrs[NL80211_ATTR_MAC])
818965d3
JM		 7994 memcpy(request->bssid, nla_data(info->attrs[NL80211_ATTR_MAC]),
7995 ETH_ALEN);
7996 else
7997 eth_broadcast_addr(request->bssid);
7998
fd014284 7999 request->wdev = wdev;
79c97e97 8000 request->wiphy = &rdev->wiphy;
15d6030b 8001 request->scan_start = jiffies;
2a519311 8002
79c97e97 8003 rdev->scan_req = request;
e35e4d28 8004 err = rdev_scan(rdev, request);
2a519311 8005
463d0183 8006 if (!err) {
fd014284
JB		 8007 nl80211_send_scan_start(rdev, wdev);
8008 if (wdev->netdev)
8009 dev_hold(wdev->netdev);
4c476991 8010 } else {
2a519311 8011 out_free:
79c97e97 8012 rdev->scan_req = NULL;
2a519311
JB		 8013 kfree(request);
8014 }
3b85875a 8015
f9f47529 8016 unlock:
2a519311
JB		 8017 return err;
8018}
8019
91d3ab46
VK		 8020static int nl80211_abort_scan(struct sk_buff *skb, struct genl_info *info)
8021{
8022 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8023 struct wireless_dev *wdev = info->user_ptr[1];
8024
8025 if (!rdev->ops->abort_scan)
8026 return -EOPNOTSUPP;
8027
8028 if (rdev->scan_msg)
8029 return 0;
8030
8031 if (!rdev->scan_req)
8032 return -ENOENT;
8033
8034 rdev_abort_scan(rdev, wdev);
8035 return 0;
8036}
8037
3b06d277
AS		 8038static int
8039nl80211_parse_sched_scan_plans(struct wiphy *wiphy, int n_plans,
8040 struct cfg80211_sched_scan_request *request,
8041 struct nlattr **attrs)
8042{
8043 int tmp, err, i = 0;
8044 struct nlattr *attr;
8045
8046 if (!attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
8047 u32 interval;
8048
8049 /*
8050 * If scan plans are not specified,
5a88de53 8051 * %NL80211_ATTR_SCHED_SCAN_INTERVAL will be specified. In this
3b06d277
AS		 8052 * case one scan plan will be set with the specified scan
8053 * interval and infinite number of iterations.
8054 */
3b06d277
AS		 8055 interval = nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
8056 if (!interval)
8057 return -EINVAL;
8058
8059 request->scan_plans[0].interval =
8060 DIV_ROUND_UP(interval, MSEC_PER_SEC);
8061 if (!request->scan_plans[0].interval)
8062 return -EINVAL;
8063
8064 if (request->scan_plans[0].interval >
8065 wiphy->max_sched_scan_plan_interval)
8066 request->scan_plans[0].interval =
8067 wiphy->max_sched_scan_plan_interval;
8068
8069 return 0;
8070 }
8071
8072 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp) {
8073 struct nlattr *plan[NL80211_SCHED_SCAN_PLAN_MAX + 1];
8074
8075 if (WARN_ON(i >= n_plans))
8076 return -EINVAL;
8077
8cb08174
JB		 8078 err = nla_parse_nested_deprecated(plan,
8079 NL80211_SCHED_SCAN_PLAN_MAX,
8080 attr, nl80211_plan_policy,
8081 NULL);
3b06d277
AS		 8082 if (err)
8083 return err;
8084
8085 if (!plan[NL80211_SCHED_SCAN_PLAN_INTERVAL])
8086 return -EINVAL;
8087
8088 request->scan_plans[i].interval =
8089 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_INTERVAL]);
8090 if (!request->scan_plans[i].interval ||
8091 request->scan_plans[i].interval >
8092 wiphy->max_sched_scan_plan_interval)
8093 return -EINVAL;
8094
8095 if (plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]) {
8096 request->scan_plans[i].iterations =
8097 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]);
8098 if (!request->scan_plans[i].iterations ||
8099 (request->scan_plans[i].iterations >
8100 wiphy->max_sched_scan_plan_iterations))
8101 return -EINVAL;
8102 } else if (i < n_plans - 1) {
8103 /*
8104 * All scan plans but the last one must specify
8105 * a finite number of iterations
8106 */
8107 return -EINVAL;
8108 }
8109
8110 i++;
8111 }
8112
8113 /*
8114 * The last scan plan must not specify the number of
8115 * iterations, it is supposed to run infinitely
8116 */
8117 if (request->scan_plans[n_plans - 1].iterations)
8118 return -EINVAL;
8119
8120 return 0;
8121}
8122
1e1b11b6 8123static int
8124nl80211_parse_sched_scan_per_band_rssi(struct wiphy *wiphy,
8125 struct cfg80211_match_set *match_sets,
8126 struct nlattr *tb_band_rssi,
8127 s32 rssi_thold)
8128{
8129 struct nlattr *attr;
8130 int i, tmp, ret = 0;
8131
8132 if (!wiphy_ext_feature_isset(wiphy,
8133 NL80211_EXT_FEATURE_SCHED_SCAN_BAND_SPECIFIC_RSSI_THOLD)) {
8134 if (tb_band_rssi)
8135 ret = -EOPNOTSUPP;
8136 else
8137 for (i = 0; i < NUM_NL80211_BANDS; i++)
8138 match_sets->per_band_rssi_thold[i] =
8139 NL80211_SCAN_RSSI_THOLD_OFF;
8140 return ret;
8141 }
8142
8143 for (i = 0; i < NUM_NL80211_BANDS; i++)
8144 match_sets->per_band_rssi_thold[i] = rssi_thold;
8145
8146 nla_for_each_nested(attr, tb_band_rssi, tmp) {
8147 enum nl80211_band band = nla_type(attr);
8148
8149 if (band < 0 || band >= NUM_NL80211_BANDS)
8150 return -EINVAL;
8151
8152 match_sets->per_band_rssi_thold[band] = nla_get_s32(attr);
8153 }
8154
8155 return 0;
8156}
8157
256da02d 8158static struct cfg80211_sched_scan_request *
ad2b26ab 8159nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
aad1e812 8160 struct nlattr **attrs, int max_match_sets)
807f8a8c
LC		 8161{
8162 struct cfg80211_sched_scan_request *request;
807f8a8c 8163 struct nlattr *attr;
3b06d277 8164 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i, n_plans = 0;
57fbcce3 8165 enum nl80211_band band;
807f8a8c 8166 size_t ie_len;
a1f1c21c 8167 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
ea73cbce 8168 s32 default_match_rssi = NL80211_SCAN_RSSI_THOLD_OFF;
807f8a8c 8169
256da02d 8170 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c 8171 n_channels = validate_scan_freqs(
256da02d 8172 attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
807f8a8c 8173 if (!n_channels)
256da02d 8174 return ERR_PTR(-EINVAL);
807f8a8c 8175 } else {
bdfbec2d 8176 n_channels = ieee80211_get_num_supported_channels(wiphy);
807f8a8c
LC		 8177 }
8178
256da02d
LC		 8179 if (attrs[NL80211_ATTR_SCAN_SSIDS])
8180 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c
LC		 8181 tmp)
8182 n_ssids++;
8183
93b6aa69 8184 if (n_ssids > wiphy->max_sched_scan_ssids)
256da02d 8185 return ERR_PTR(-EINVAL);
807f8a8c 8186
ea73cbce
JB		 8187 /*
8188 * First, count the number of 'real' matchsets. Due to an issue with
8189 * the old implementation, matchsets containing only the RSSI attribute
8190 * (NL80211_SCHED_SCAN_MATCH_ATTR_RSSI) are considered as the 'default'
8191 * RSSI for all matchsets, rather than their own matchset for reporting
8192 * all APs with a strong RSSI. This is needed to be compatible with
8193 * older userspace that treated a matchset with only the RSSI as the
8194 * global RSSI for all other matchsets - if there are other matchsets.
8195 */
256da02d 8196 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 8197 nla_for_each_nested(attr,
256da02d 8198 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
ea73cbce
JB		 8199 tmp) {
8200 struct nlattr *rssi;
8201
8cb08174
JB		 8202 err = nla_parse_nested_deprecated(tb,
8203 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
8204 attr,
8205 nl80211_match_policy,
8206 NULL);
ea73cbce 8207 if (err)
256da02d 8208 return ERR_PTR(err);
3007e352
AVS		 8209
8210 /* SSID and BSSID are mutually exclusive */
8211 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] &&
8212 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID])
8213 return ERR_PTR(-EINVAL);
8214
ea73cbce 8215 /* add other standalone attributes here */
3007e352
AVS		 8216 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] ||
8217 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID]) {
ea73cbce
JB		 8218 n_match_sets++;
8219 continue;
8220 }
8221 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
8222 if (rssi)
8223 default_match_rssi = nla_get_s32(rssi);
8224 }
8225 }
8226
8227 /* However, if there's no other matchset, add the RSSI one */
8228 if (!n_match_sets && default_match_rssi != NL80211_SCAN_RSSI_THOLD_OFF)
8229 n_match_sets = 1;
a1f1c21c 8230
aad1e812 8231 if (n_match_sets > max_match_sets)
256da02d 8232 return ERR_PTR(-EINVAL);
a1f1c21c 8233
256da02d
LC		 8234 if (attrs[NL80211_ATTR_IE])
8235 ie_len = nla_len(attrs[NL80211_ATTR_IE]);
807f8a8c
LC		 8236 else
8237 ie_len = 0;
8238
5a865bad 8239 if (ie_len > wiphy->max_sched_scan_ie_len)
256da02d 8240 return ERR_PTR(-EINVAL);
c10841ca 8241
3b06d277
AS		 8242 if (attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
8243 /*
8244 * NL80211_ATTR_SCHED_SCAN_INTERVAL must not be specified since
8245 * each scan plan already specifies its own interval
8246 */
8247 if (attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
8248 return ERR_PTR(-EINVAL);
8249
8250 nla_for_each_nested(attr,
8251 attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp)
8252 n_plans++;
8253 } else {
8254 /*
8255 * The scan interval attribute is kept for backward
8256 * compatibility. If no scan plans are specified and sched scan
8257 * interval is specified, one scan plan will be set with this
8258 * scan interval and infinite number of iterations.
8259 */
8260 if (!attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
8261 return ERR_PTR(-EINVAL);
8262
8263 n_plans = 1;
8264 }
8265
8266 if (!n_plans || n_plans > wiphy->max_sched_scan_plans)
8267 return ERR_PTR(-EINVAL);
8268
bf95ecdb 8269 if (!wiphy_ext_feature_isset(
8270 wiphy, NL80211_EXT_FEATURE_SCHED_SCAN_RELATIVE_RSSI) &&
8271 (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] ||
8272 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]))
8273 return ERR_PTR(-EINVAL);
8274
807f8a8c 8275 request = kzalloc(sizeof(*request)
a2cd43c5 8276 + sizeof(*request->ssids) * n_ssids
a1f1c21c 8277 + sizeof(*request->match_sets) * n_match_sets
3b06d277 8278 + sizeof(*request->scan_plans) * n_plans
a2cd43c5 8279 + sizeof(*request->channels) * n_channels
807f8a8c 8280 + ie_len, GFP_KERNEL);
256da02d
LC		 8281 if (!request)
8282 return ERR_PTR(-ENOMEM);
807f8a8c
LC		 8283
8284 if (n_ssids)
8285 request->ssids = (void *)&request->channels[n_channels];
8286 request->n_ssids = n_ssids;
8287 if (ie_len) {
13874e4b 8288 if (n_ssids)
807f8a8c
LC		 8289 request->ie = (void *)(request->ssids + n_ssids);
8290 else
8291 request->ie = (void *)(request->channels + n_channels);
8292 }
8293
a1f1c21c
LC		 8294 if (n_match_sets) {
8295 if (request->ie)
8296 request->match_sets = (void *)(request->ie + ie_len);
13874e4b 8297 else if (n_ssids)
a1f1c21c
LC		 8298 request->match_sets =
8299 (void *)(request->ssids + n_ssids);
8300 else
8301 request->match_sets =
8302 (void *)(request->channels + n_channels);
8303 }
8304 request->n_match_sets = n_match_sets;
8305
3b06d277
AS		 8306 if (n_match_sets)
8307 request->scan_plans = (void *)(request->match_sets +
8308 n_match_sets);
8309 else if (request->ie)
8310 request->scan_plans = (void *)(request->ie + ie_len);
8311 else if (n_ssids)
8312 request->scan_plans = (void *)(request->ssids + n_ssids);
8313 else
8314 request->scan_plans = (void *)(request->channels + n_channels);
8315
8316 request->n_scan_plans = n_plans;
8317
807f8a8c 8318 i = 0;
256da02d 8319 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c
LC		 8320 /* user specified, bail out if channel not found */
8321 nla_for_each_nested(attr,
256da02d 8322 attrs[NL80211_ATTR_SCAN_FREQUENCIES],
807f8a8c
LC		 8323 tmp) {
8324 struct ieee80211_channel *chan;
8325
8326 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
8327
8328 if (!chan) {
8329 err = -EINVAL;
8330 goto out_free;
8331 }
8332
8333 /* ignore disabled channels */
8334 if (chan->flags & IEEE80211_CHAN_DISABLED)
8335 continue;
8336
8337 request->channels[i] = chan;
8338 i++;
8339 }
8340 } else {
8341 /* all channels */
57fbcce3 8342 for (band = 0; band < NUM_NL80211_BANDS; band++) {
807f8a8c 8343 int j;
7a087e74 8344
807f8a8c
LC		 8345 if (!wiphy->bands[band])
8346 continue;
8347 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
8348 struct ieee80211_channel *chan;
8349
8350 chan = &wiphy->bands[band]->channels[j];
8351
8352 if (chan->flags & IEEE80211_CHAN_DISABLED)
8353 continue;
8354
8355 request->channels[i] = chan;
8356 i++;
8357 }
8358 }
8359 }
8360
8361 if (!i) {
8362 err = -EINVAL;
8363 goto out_free;
8364 }
8365
8366 request->n_channels = i;
8367
8368 i = 0;
13874e4b 8369 if (n_ssids) {
256da02d 8370 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c 8371 tmp) {
57a27e1d 8372 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 8373 err = -EINVAL;
8374 goto out_free;
8375 }
57a27e1d 8376 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 8377 memcpy(request->ssids[i].ssid, nla_data(attr),
8378 nla_len(attr));
807f8a8c
LC		 8379 i++;
8380 }
8381 }
8382
a1f1c21c 8383 i = 0;
256da02d 8384 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 8385 nla_for_each_nested(attr,
256da02d 8386 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
a1f1c21c 8387 tmp) {
3007e352 8388 struct nlattr *ssid, *bssid, *rssi;
a1f1c21c 8389
8cb08174
JB		 8390 err = nla_parse_nested_deprecated(tb,
8391 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
8392 attr,
8393 nl80211_match_policy,
8394 NULL);
ae811e21
JB		 8395 if (err)
8396 goto out_free;
4a4ab0d7 8397 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
3007e352 8398 bssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID];
d39f3b4f
JB		 8399
8400 if (!ssid && !bssid) {
8401 i++;
8402 continue;
8403 }
8404
8405 if (WARN_ON(i >= n_match_sets)) {
8406 /* this indicates a programming error,
8407 * the loop above should have verified
8408 * things properly
8409 */
8410 err = -EINVAL;
8411 goto out_free;
8412 }
8413
8414 if (ssid) {
8415 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
ea73cbce
JB		 8416 err = -EINVAL;
8417 goto out_free;
8418 }
d39f3b4f
JB		 8419 memcpy(request->match_sets[i].ssid.ssid,
8420 nla_data(ssid), nla_len(ssid));
8421 request->match_sets[i].ssid.ssid_len =
8422 nla_len(ssid);
8423 }
8424 if (bssid) {
8425 if (nla_len(bssid) != ETH_ALEN) {
8426 err = -EINVAL;
8427 goto out_free;
a1f1c21c 8428 }
d39f3b4f
JB		 8429 memcpy(request->match_sets[i].bssid,
8430 nla_data(bssid), ETH_ALEN);
8431 }
3007e352 8432
d39f3b4f
JB		 8433 /* special attribute - old implementation w/a */
8434 request->match_sets[i].rssi_thold = default_match_rssi;
8435 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
8436 if (rssi)
ea73cbce 8437 request->match_sets[i].rssi_thold =
d39f3b4f 8438 nla_get_s32(rssi);
1e1b11b6 8439
8440 /* Parse per band RSSI attribute */
8441 err = nl80211_parse_sched_scan_per_band_rssi(wiphy,
8442 &request->match_sets[i],
8443 tb[NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI],
8444 request->match_sets[i].rssi_thold);
8445 if (err)
8446 goto out_free;
8447
a1f1c21c
LC		 8448 i++;
8449 }
ea73cbce
JB		 8450
8451 /* there was no other matchset, so the RSSI one is alone */
f89f46cf 8452 if (i == 0 && n_match_sets)
ea73cbce
JB		 8453 request->match_sets[0].rssi_thold = default_match_rssi;
8454
8455 request->min_rssi_thold = INT_MAX;
8456 for (i = 0; i < n_match_sets; i++)
8457 request->min_rssi_thold =
8458 min(request->match_sets[i].rssi_thold,
8459 request->min_rssi_thold);
8460 } else {
8461 request->min_rssi_thold = NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 8462 }
8463
9900e484
JB		 8464 if (ie_len) {
8465 request->ie_len = ie_len;
807f8a8c 8466 memcpy((void *)request->ie,
256da02d 8467 nla_data(attrs[NL80211_ATTR_IE]),
807f8a8c
LC		 8468 request->ie_len);
8469 }
8470
2d23d073
RZ		 8471 err = nl80211_check_scan_flags(wiphy, wdev, request, attrs, true);
8472 if (err)
8473 goto out_free;
ed473771 8474
9c748934
LC		 8475 if (attrs[NL80211_ATTR_SCHED_SCAN_DELAY])
8476 request->delay =
8477 nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_DELAY]);
8478
bf95ecdb 8479 if (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]) {
8480 request->relative_rssi = nla_get_s8(
8481 attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]);
8482 request->relative_rssi_set = true;
8483 }
8484
8485 if (request->relative_rssi_set &&
8486 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]) {
8487 struct nl80211_bss_select_rssi_adjust *rssi_adjust;
8488
8489 rssi_adjust = nla_data(
8490 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]);
8491 request->rssi_adjust.band = rssi_adjust->band;
8492 request->rssi_adjust.delta = rssi_adjust->delta;
8493 if (!is_band_valid(wiphy, request->rssi_adjust.band)) {
8494 err = -EINVAL;
8495 goto out_free;
8496 }
8497 }
8498
3b06d277
AS		 8499 err = nl80211_parse_sched_scan_plans(wiphy, n_plans, request, attrs);
8500 if (err)
8501 goto out_free;
8502
15d6030b 8503 request->scan_start = jiffies;
807f8a8c 8504
256da02d 8505 return request;
807f8a8c
LC		 8506
8507out_free:
8508 kfree(request);
256da02d
LC		 8509 return ERR_PTR(err);
8510}
8511
8512static int nl80211_start_sched_scan(struct sk_buff *skb,
8513 struct genl_info *info)
8514{
8515 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8516 struct net_device *dev = info->user_ptr[1];
ad2b26ab 8517 struct wireless_dev *wdev = dev->ieee80211_ptr;
31a60ed1 8518 struct cfg80211_sched_scan_request *sched_scan_req;
ca986ad9 8519 bool want_multi;
256da02d
LC		 8520 int err;
8521
ca986ad9 8522 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_start)
256da02d
LC		 8523 return -EOPNOTSUPP;
8524
ca986ad9
AVS		 8525 want_multi = info->attrs[NL80211_ATTR_SCHED_SCAN_MULTI];
8526 err = cfg80211_sched_scan_req_possible(rdev, want_multi);
8527 if (err)
8528 return err;
256da02d 8529
31a60ed1 8530 sched_scan_req = nl80211_parse_sched_scan(&rdev->wiphy, wdev,
aad1e812
AVS		 8531 info->attrs,
8532 rdev->wiphy.max_match_sets);
31a60ed1
JR		 8533
8534 err = PTR_ERR_OR_ZERO(sched_scan_req);
256da02d
LC		 8535 if (err)
8536 goto out_err;
8537
ca986ad9
AVS		 8538 /* leave request id zero for legacy request
8539 * or if driver does not support multi-scheduled scan
8540 */
2fd351a8
DK		 8541 if (want_multi && rdev->wiphy.max_sched_scan_reqs > 1)
8542 sched_scan_req->reqid = cfg80211_assign_cookie(rdev);
ca986ad9 8543
31a60ed1 8544 err = rdev_sched_scan_start(rdev, dev, sched_scan_req);
256da02d
LC		 8545 if (err)
8546 goto out_free;
8547
31a60ed1
JR		 8548 sched_scan_req->dev = dev;
8549 sched_scan_req->wiphy = &rdev->wiphy;
8550
93a1e86c
JR		 8551 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
8552 sched_scan_req->owner_nlportid = info->snd_portid;
8553
ca986ad9 8554 cfg80211_add_sched_scan_req(rdev, sched_scan_req);
256da02d 8555
96b08fd6 8556 nl80211_send_sched_scan(sched_scan_req, NL80211_CMD_START_SCHED_SCAN);
256da02d
LC		 8557 return 0;
8558
8559out_free:
31a60ed1 8560 kfree(sched_scan_req);
256da02d 8561out_err:
807f8a8c
LC		 8562 return err;
8563}
8564
8565static int nl80211_stop_sched_scan(struct sk_buff *skb,
8566 struct genl_info *info)
8567{
ca986ad9 8568 struct cfg80211_sched_scan_request *req;
807f8a8c 8569 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ca986ad9 8570 u64 cookie;
807f8a8c 8571
ca986ad9 8572 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_stop)
807f8a8c
LC		 8573 return -EOPNOTSUPP;
8574
ca986ad9
AVS		 8575 if (info->attrs[NL80211_ATTR_COOKIE]) {
8576 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
8577 return __cfg80211_stop_sched_scan(rdev, cookie, false);
8578 }
8579
8580 req = list_first_or_null_rcu(&rdev->sched_scan_req_list,
8581 struct cfg80211_sched_scan_request,
8582 list);
8583 if (!req || req->reqid ||
8584 (req->owner_nlportid &&
8585 req->owner_nlportid != info->snd_portid))
8586 return -ENOENT;
8587
8588 return cfg80211_stop_sched_scan_req(rdev, req, false);
807f8a8c
LC		 8589}
8590
04f39047
SW		 8591static int nl80211_start_radar_detection(struct sk_buff *skb,
8592 struct genl_info *info)
8593{
8594 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8595 struct net_device *dev = info->user_ptr[1];
8596 struct wireless_dev *wdev = dev->ieee80211_ptr;
13cf6dec 8597 struct wiphy *wiphy = wdev->wiphy;
04f39047 8598 struct cfg80211_chan_def chandef;
55f7435c 8599 enum nl80211_dfs_regions dfs_region;
31559f35 8600 unsigned int cac_time_ms;
04f39047
SW		 8601 int err;
8602
13cf6dec 8603 dfs_region = reg_get_dfs_region(wiphy);
55f7435c
LR		 8604 if (dfs_region == NL80211_DFS_UNSET)
8605 return -EINVAL;
8606
04f39047
SW		 8607 err = nl80211_parse_chandef(rdev, info, &chandef);
8608 if (err)
8609 return err;
8610
ff311bc1
SW		 8611 if (netif_carrier_ok(dev))
8612 return -EBUSY;
8613
04f39047
SW		 8614 if (wdev->cac_started)
8615 return -EBUSY;
8616
13cf6dec 8617 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
04f39047
SW		 8618 if (err < 0)
8619 return err;
8620
8621 if (err == 0)
8622 return -EINVAL;
8623
13cf6dec 8624 if (!cfg80211_chandef_dfs_usable(wiphy, &chandef))
04f39047
SW		 8625 return -EINVAL;
8626
13cf6dec
DL		 8627 /* CAC start is offloaded to HW and can't be started manually */
8628 if (wiphy_ext_feature_isset(wiphy, NL80211_EXT_FEATURE_DFS_OFFLOAD))
8629 return -EOPNOTSUPP;
8630
04f39047
SW		 8631 if (!rdev->ops->start_radar_detection)
8632 return -EOPNOTSUPP;
8633
31559f35
JD		 8634 cac_time_ms = cfg80211_chandef_dfs_cac_time(&rdev->wiphy, &chandef);
8635 if (WARN_ON(!cac_time_ms))
8636 cac_time_ms = IEEE80211_DFS_MIN_CAC_TIME_MS;
8637
a1056b1b 8638 err = rdev_start_radar_detection(rdev, dev, &chandef, cac_time_ms);
04f39047 8639 if (!err) {
9e0e2961 8640 wdev->chandef = chandef;
04f39047
SW		 8641 wdev->cac_started = true;
8642 wdev->cac_start_time = jiffies;
31559f35 8643 wdev->cac_time_ms = cac_time_ms;
04f39047 8644 }
04f39047
SW		 8645 return err;
8646}
8647
30c63115
S		 8648static int nl80211_notify_radar_detection(struct sk_buff *skb,
8649 struct genl_info *info)
8650{
8651 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8652 struct net_device *dev = info->user_ptr[1];
8653 struct wireless_dev *wdev = dev->ieee80211_ptr;
8654 struct wiphy *wiphy = wdev->wiphy;
8655 struct cfg80211_chan_def chandef;
8656 enum nl80211_dfs_regions dfs_region;
8657 int err;
8658
8659 dfs_region = reg_get_dfs_region(wiphy);
8660 if (dfs_region == NL80211_DFS_UNSET) {
8661 GENL_SET_ERR_MSG(info,
8662 "DFS Region is not set. Unexpected Radar indication");
8663 return -EINVAL;
8664 }
8665
8666 err = nl80211_parse_chandef(rdev, info, &chandef);
8667 if (err) {
8668 GENL_SET_ERR_MSG(info, "Unable to extract chandef info");
8669 return err;
8670 }
8671
8672 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
8673 if (err < 0) {
8674 GENL_SET_ERR_MSG(info, "chandef is invalid");
8675 return err;
8676 }
8677
8678 if (err == 0) {
8679 GENL_SET_ERR_MSG(info,
8680 "Unexpected Radar indication for chandef/iftype");
8681 return -EINVAL;
8682 }
8683
8684 /* Do not process this notification if radar is already detected
8685 * by kernel on this channel, and return success.
8686 */
8687 if (chandef.chan->dfs_state == NL80211_DFS_UNAVAILABLE)
8688 return 0;
8689
8690 cfg80211_set_dfs_state(wiphy, &chandef, NL80211_DFS_UNAVAILABLE);
8691
8692 cfg80211_sched_dfs_chan_update(rdev);
8693
a680fe46 8694 rdev->radar_chandef = chandef;
30c63115
S		 8695
8696 /* Propagate this notification to other radios as well */
8697 queue_work(cfg80211_wq, &rdev->propagate_radar_detect_wk);
8698
8699 return 0;
8700}
8701
16ef1fe2
SW		 8702static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
8703{
8704 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8705 struct net_device *dev = info->user_ptr[1];
8706 struct wireless_dev *wdev = dev->ieee80211_ptr;
8707 struct cfg80211_csa_settings params;
8708 /* csa_attrs is defined static to avoid waste of stack size - this
8709 * function is called under RTNL lock, so this should not be a problem.
8710 */
8711 static struct nlattr *csa_attrs[NL80211_ATTR_MAX+1];
16ef1fe2 8712 int err;
ee4bc9e7 8713 bool need_new_beacon = false;
8d9de16f 8714 bool need_handle_dfs_flag = true;
9a774c78 8715 int len, i;
252e07ca 8716 u32 cs_count;
16ef1fe2
SW		 8717
8718 if (!rdev->ops->channel_switch ||
8719 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH))
8720 return -EOPNOTSUPP;
8721
ee4bc9e7
SW		 8722 switch (dev->ieee80211_ptr->iftype) {
8723 case NL80211_IFTYPE_AP:
8724 case NL80211_IFTYPE_P2P_GO:
8725 need_new_beacon = true;
8d9de16f
BB		 8726 /* For all modes except AP the handle_dfs flag needs to be
8727 * supplied to tell the kernel that userspace will handle radar
8728 * events when they happen. Otherwise a switch to a channel
8729 * requiring DFS will be rejected.
8730 */
8731 need_handle_dfs_flag = false;
ee4bc9e7
SW		 8732
8733 /* useless if AP is not running */
8734 if (!wdev->beacon_interval)
1ff79dfa 8735 return -ENOTCONN;
ee4bc9e7
SW		 8736 break;
8737 case NL80211_IFTYPE_ADHOC:
1ff79dfa
JB		 8738 if (!wdev->ssid_len)
8739 return -ENOTCONN;
8740 break;
c6da674a 8741 case NL80211_IFTYPE_MESH_POINT:
1ff79dfa
JB		 8742 if (!wdev->mesh_id_len)
8743 return -ENOTCONN;
ee4bc9e7
SW		 8744 break;
8745 default:
16ef1fe2 8746 return -EOPNOTSUPP;
ee4bc9e7 8747 }
16ef1fe2
SW		 8748
8749 memset(&params, 0, sizeof(params));
c177db2d 8750 params.beacon_csa.ftm_responder = -1;
16ef1fe2
SW		 8751
8752 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
8753 !info->attrs[NL80211_ATTR_CH_SWITCH_COUNT])
8754 return -EINVAL;
8755
8756 /* only important for AP, IBSS and mesh create IEs internally */
d0a361a5 8757 if (need_new_beacon && !info->attrs[NL80211_ATTR_CSA_IES])
16ef1fe2
SW		 8758 return -EINVAL;
8759
252e07ca
LC		 8760 /* Even though the attribute is u32, the specification says
8761 * u8, so let's make sure we don't overflow.
8762 */
8763 cs_count = nla_get_u32(info->attrs[NL80211_ATTR_CH_SWITCH_COUNT]);
8764 if (cs_count > 255)
8765 return -EINVAL;
8766
8767 params.count = cs_count;
16ef1fe2 8768
ee4bc9e7
SW		 8769 if (!need_new_beacon)
8770 goto skip_beacons;
8771
81e54d08 8772 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_after);
16ef1fe2
SW		 8773 if (err)
8774 return err;
8775
8cb08174
JB		 8776 err = nla_parse_nested_deprecated(csa_attrs, NL80211_ATTR_MAX,
8777 info->attrs[NL80211_ATTR_CSA_IES],
8778 nl80211_policy, info->extack);
16ef1fe2
SW		 8779 if (err)
8780 return err;
8781
81e54d08 8782 err = nl80211_parse_beacon(rdev, csa_attrs, &params.beacon_csa);
16ef1fe2
SW		 8783 if (err)
8784 return err;
8785
8786 if (!csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON])
8787 return -EINVAL;
8788
9a774c78
AO		 8789 len = nla_len(csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON]);
8790 if (!len || (len % sizeof(u16)))
16ef1fe2
SW		 8791 return -EINVAL;
8792
9a774c78
AO		 8793 params.n_counter_offsets_beacon = len / sizeof(u16);
8794 if (rdev->wiphy.max_num_csa_counters &&
8795 (params.n_counter_offsets_beacon >
8796 rdev->wiphy.max_num_csa_counters))
16ef1fe2
SW		 8797 return -EINVAL;
8798
9a774c78
AO		 8799 params.counter_offsets_beacon =
8800 nla_data(csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON]);
8801
8802 /* sanity checks - counters should fit and be the same */
8803 for (i = 0; i < params.n_counter_offsets_beacon; i++) {
8804 u16 offset = params.counter_offsets_beacon[i];
8805
8806 if (offset >= params.beacon_csa.tail_len)
8807 return -EINVAL;
8808
8809 if (params.beacon_csa.tail[offset] != params.count)
8810 return -EINVAL;
8811 }
8812
16ef1fe2 8813 if (csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]) {
9a774c78
AO		 8814 len = nla_len(csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]);
8815 if (!len || (len % sizeof(u16)))
16ef1fe2
SW		 8816 return -EINVAL;
8817
9a774c78
AO		 8818 params.n_counter_offsets_presp = len / sizeof(u16);
8819 if (rdev->wiphy.max_num_csa_counters &&
ad5987b4 8820 (params.n_counter_offsets_presp >
9a774c78 8821 rdev->wiphy.max_num_csa_counters))
16ef1fe2 8822 return -EINVAL;
9a774c78
AO		 8823
8824 params.counter_offsets_presp =
8825 nla_data(csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]);
8826
8827 /* sanity checks - counters should fit and be the same */
8828 for (i = 0; i < params.n_counter_offsets_presp; i++) {
8829 u16 offset = params.counter_offsets_presp[i];
8830
8831 if (offset >= params.beacon_csa.probe_resp_len)
8832 return -EINVAL;
8833
8834 if (params.beacon_csa.probe_resp[offset] !=
8835 params.count)
8836 return -EINVAL;
8837 }
16ef1fe2
SW		 8838 }
8839
ee4bc9e7 8840skip_beacons:
16ef1fe2
SW		 8841 err = nl80211_parse_chandef(rdev, info, &params.chandef);
8842 if (err)
8843 return err;
8844
923b352f
AN		 8845 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
8846 wdev->iftype))
16ef1fe2
SW		 8847 return -EINVAL;
8848
2beb6dab
LC		 8849 err = cfg80211_chandef_dfs_required(wdev->wiphy,
8850 &params.chandef,
8851 wdev->iftype);
8852 if (err < 0)
8853 return err;
8854
8d9de16f 8855 if (err > 0) {
2beb6dab 8856 params.radar_required = true;
8d9de16f
BB		 8857 if (need_handle_dfs_flag &&
8858 !nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS])) {
8859 return -EINVAL;
8860 }
8861 }
16ef1fe2 8862
16ef1fe2
SW		 8863 if (info->attrs[NL80211_ATTR_CH_SWITCH_BLOCK_TX])
8864 params.block_tx = true;
8865
c56589ed
SW		 8866 wdev_lock(wdev);
8867 err = rdev_channel_switch(rdev, dev, &params);
8868 wdev_unlock(wdev);
8869
8870 return err;
16ef1fe2
SW		 8871}
8872
9720bb3a
JB		 8873static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
8874 u32 seq, int flags,
2a519311 8875 struct cfg80211_registered_device *rdev,
48ab905d
JB		 8876 struct wireless_dev *wdev,
8877 struct cfg80211_internal_bss *intbss)
2a519311 8878{
48ab905d 8879 struct cfg80211_bss *res = &intbss->pub;
9caf0364 8880 const struct cfg80211_bss_ies *ies;
2a519311
JB		 8881 void *hdr;
8882 struct nlattr *bss;
48ab905d
JB		 8883
8884 ASSERT_WDEV_LOCK(wdev);
2a519311 8885
15e47304 8886 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 8887 NL80211_CMD_NEW_SCAN_RESULTS);
8888 if (!hdr)
8889 return -1;
8890
0a833c29 8891 genl_dump_check_consistent(cb, hdr);
9720bb3a 8892
97990a06
JB		 8893 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation))
8894 goto nla_put_failure;
8895 if (wdev->netdev &&
9360ffd1
DM		 8896 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
8897 goto nla_put_failure;
2dad624e
ND		 8898 if (nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
8899 NL80211_ATTR_PAD))
97990a06 8900 goto nla_put_failure;
2a519311 8901
ae0be8de 8902 bss = nla_nest_start_noflag(msg, NL80211_ATTR_BSS);
2a519311
JB		 8903 if (!bss)
8904 goto nla_put_failure;
9360ffd1 8905 if ((!is_zero_ether_addr(res->bssid) &&
9caf0364 8906 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
9360ffd1 8907 goto nla_put_failure;
9caf0364
JB		 8908
8909 rcu_read_lock();
0e227084
JB		 8910 /* indicate whether we have probe response data or not */
8911 if (rcu_access_pointer(res->proberesp_ies) &&
8912 nla_put_flag(msg, NL80211_BSS_PRESP_DATA))
8913 goto fail_unlock_rcu;
8914
8915 /* this pointer prefers to be pointed to probe response data
8916 * but is always valid
8917 */
9caf0364 8918 ies = rcu_dereference(res->ies);
8cef2c9d 8919 if (ies) {
2dad624e
ND		 8920 if (nla_put_u64_64bit(msg, NL80211_BSS_TSF, ies->tsf,
8921 NL80211_BSS_PAD))
8cef2c9d 8922 goto fail_unlock_rcu;
8cef2c9d
JB		 8923 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
8924 ies->len, ies->data))
8925 goto fail_unlock_rcu;
9caf0364 8926 }
0e227084
JB		 8927
8928 /* and this pointer is always (unless driver didn't know) beacon data */
9caf0364 8929 ies = rcu_dereference(res->beacon_ies);
0e227084 8930 if (ies && ies->from_beacon) {
2dad624e
ND		 8931 if (nla_put_u64_64bit(msg, NL80211_BSS_BEACON_TSF, ies->tsf,
8932 NL80211_BSS_PAD))
8cef2c9d
JB		 8933 goto fail_unlock_rcu;
8934 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
8935 ies->len, ies->data))
8936 goto fail_unlock_rcu;
9caf0364
JB		 8937 }
8938 rcu_read_unlock();
8939
9360ffd1
DM		 8940 if (res->beacon_interval &&
8941 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
8942 goto nla_put_failure;
8943 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
8944 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
942ba88b
TP		 8945 nla_put_u32(msg, NL80211_BSS_FREQUENCY_OFFSET,
8946 res->channel->freq_offset) ||
dcd6eac1 8947 nla_put_u32(msg, NL80211_BSS_CHAN_WIDTH, res->scan_width) ||
9360ffd1
DM		 8948 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
8949 jiffies_to_msecs(jiffies - intbss->ts)))
8950 goto nla_put_failure;
2a519311 8951
1d76250b
AS		 8952 if (intbss->parent_tsf &&
8953 (nla_put_u64_64bit(msg, NL80211_BSS_PARENT_TSF,
8954 intbss->parent_tsf, NL80211_BSS_PAD) ||
8955 nla_put(msg, NL80211_BSS_PARENT_BSSID, ETH_ALEN,
8956 intbss->parent_bssid)))
8957 goto nla_put_failure;
8958
6e19bc4b 8959 if (intbss->ts_boottime &&
2dad624e
ND		 8960 nla_put_u64_64bit(msg, NL80211_BSS_LAST_SEEN_BOOTTIME,
8961 intbss->ts_boottime, NL80211_BSS_PAD))
6e19bc4b
DS		 8962 goto nla_put_failure;
8963
983dafaa
SD		 8964 if (!nl80211_put_signal(msg, intbss->pub.chains,
8965 intbss->pub.chain_signal,
8966 NL80211_BSS_CHAIN_SIGNAL))
8967 goto nla_put_failure;
8968
77965c97 8969 switch (rdev->wiphy.signal_type) {
2a519311 8970 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 8971 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
8972 goto nla_put_failure;
2a519311
JB		 8973 break;
8974 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 8975 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
8976 goto nla_put_failure;
2a519311
JB		 8977 break;
8978 default:
8979 break;
8980 }
8981
48ab905d 8982 switch (wdev->iftype) {
074ac8df 8983 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 8984 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 8985 if (intbss == wdev->current_bss &&
8986 nla_put_u32(msg, NL80211_BSS_STATUS,
8987 NL80211_BSS_STATUS_ASSOCIATED))
8988 goto nla_put_failure;
48ab905d
JB		 8989 break;
8990 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 8991 if (intbss == wdev->current_bss &&
8992 nla_put_u32(msg, NL80211_BSS_STATUS,
8993 NL80211_BSS_STATUS_IBSS_JOINED))
8994 goto nla_put_failure;
48ab905d
JB		 8995 break;
8996 default:
8997 break;
8998 }
8999
2a519311
JB		 9000 nla_nest_end(msg, bss);
9001
053c095a
JB		 9002 genlmsg_end(msg, hdr);
9003 return 0;
2a519311 9004
8cef2c9d
JB		 9005 fail_unlock_rcu:
9006 rcu_read_unlock();
2a519311
JB		 9007 nla_put_failure:
9008 genlmsg_cancel(msg, hdr);
9009 return -EMSGSIZE;
9010}
9011
97990a06 9012static int nl80211_dump_scan(struct sk_buff *skb, struct netlink_callback *cb)
2a519311 9013{
48ab905d 9014 struct cfg80211_registered_device *rdev;
2a519311 9015 struct cfg80211_internal_bss *scan;
48ab905d 9016 struct wireless_dev *wdev;
97990a06 9017 int start = cb->args[2], idx = 0;
2a519311
JB		 9018 int err;
9019
ea90e0dc 9020 rtnl_lock();
5297c65c 9021 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
ea90e0dc
JB		 9022 if (err) {
9023 rtnl_unlock();
67748893 9024 return err;
ea90e0dc 9025 }
2a519311 9026
48ab905d
JB		 9027 wdev_lock(wdev);
9028 spin_lock_bh(&rdev->bss_lock);
d1e23c94
DK		 9029
9030 /*
9031 * dump_scan will be called multiple times to break up the scan results
9032 * into multiple messages. It is unlikely that any more bss-es will be
9033 * expired after the first call, so only call only call this on the
9034 * first dump_scan invocation.
9035 */
9036 if (start == 0)
9037 cfg80211_bss_expire(rdev);
48ab905d 9038
9720bb3a
JB		 9039 cb->seq = rdev->bss_generation;
9040
48ab905d 9041 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 9042 if (++idx <= start)
9043 continue;
9720bb3a 9044 if (nl80211_send_bss(skb, cb,
2a519311 9045 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 9046 rdev, wdev, scan) < 0) {
2a519311 9047 idx--;
67748893 9048 break;
2a519311
JB		 9049 }
9050 }
9051
48ab905d
JB		 9052 spin_unlock_bh(&rdev->bss_lock);
9053 wdev_unlock(wdev);
2a519311 9054
97990a06 9055 cb->args[2] = idx;
ea90e0dc 9056 rtnl_unlock();
2a519311 9057
67748893 9058 return skb->len;
2a519311
JB		 9059}
9060
15e47304 9061static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
11f78ac3
JB		 9062 int flags, struct net_device *dev,
9063 bool allow_radio_stats,
9064 struct survey_info *survey)
61fa713c
HS		 9065{
9066 void *hdr;
9067 struct nlattr *infoattr;
9068
11f78ac3
JB		 9069 /* skip radio stats if userspace didn't request them */
9070 if (!survey->channel && !allow_radio_stats)
9071 return 0;
9072
15e47304 9073 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 9074 NL80211_CMD_NEW_SURVEY_RESULTS);
9075 if (!hdr)
9076 return -ENOMEM;
9077
9360ffd1
DM		 9078 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9079 goto nla_put_failure;
61fa713c 9080
ae0be8de 9081 infoattr = nla_nest_start_noflag(msg, NL80211_ATTR_SURVEY_INFO);
61fa713c
HS		 9082 if (!infoattr)
9083 goto nla_put_failure;
9084
11f78ac3
JB		 9085 if (survey->channel &&
9086 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
9360ffd1
DM		 9087 survey->channel->center_freq))
9088 goto nla_put_failure;
9089
9090 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
9091 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
9092 goto nla_put_failure;
9093 if ((survey->filled & SURVEY_INFO_IN_USE) &&
9094 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
9095 goto nla_put_failure;
4ed20beb 9096 if ((survey->filled & SURVEY_INFO_TIME) &&
2dad624e
ND		 9097 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME,
9098 survey->time, NL80211_SURVEY_INFO_PAD))
9360ffd1 9099 goto nla_put_failure;
4ed20beb 9100 if ((survey->filled & SURVEY_INFO_TIME_BUSY) &&
2dad624e
ND		 9101 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BUSY,
9102 survey->time_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 9103 goto nla_put_failure;
4ed20beb 9104 if ((survey->filled & SURVEY_INFO_TIME_EXT_BUSY) &&
2dad624e
ND		 9105 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_EXT_BUSY,
9106 survey->time_ext_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 9107 goto nla_put_failure;
4ed20beb 9108 if ((survey->filled & SURVEY_INFO_TIME_RX) &&
2dad624e
ND		 9109 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_RX,
9110 survey->time_rx, NL80211_SURVEY_INFO_PAD))
9360ffd1 9111 goto nla_put_failure;
4ed20beb 9112 if ((survey->filled & SURVEY_INFO_TIME_TX) &&
2dad624e
ND		 9113 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_TX,
9114 survey->time_tx, NL80211_SURVEY_INFO_PAD))
9360ffd1 9115 goto nla_put_failure;
052536ab 9116 if ((survey->filled & SURVEY_INFO_TIME_SCAN) &&
2dad624e
ND		 9117 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_SCAN,
9118 survey->time_scan, NL80211_SURVEY_INFO_PAD))
052536ab 9119 goto nla_put_failure;
c8cd6e7f
FF		 9120 if ((survey->filled & SURVEY_INFO_TIME_BSS_RX) &&
9121 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BSS_RX,
9122 survey->time_bss_rx, NL80211_SURVEY_INFO_PAD))
9123 goto nla_put_failure;
61fa713c
HS		 9124
9125 nla_nest_end(msg, infoattr);
9126
053c095a
JB		 9127 genlmsg_end(msg, hdr);
9128 return 0;
61fa713c
HS		 9129
9130 nla_put_failure:
9131 genlmsg_cancel(msg, hdr);
9132 return -EMSGSIZE;
9133}
9134
11f78ac3 9135static int nl80211_dump_survey(struct sk_buff *skb, struct netlink_callback *cb)
61fa713c 9136{
50508d94 9137 struct nlattr **attrbuf;
61fa713c 9138 struct survey_info survey;
1b8ec87a 9139 struct cfg80211_registered_device *rdev;
97990a06
JB		 9140 struct wireless_dev *wdev;
9141 int survey_idx = cb->args[2];
61fa713c 9142 int res;
11f78ac3 9143 bool radio_stats;
61fa713c 9144
50508d94
JB		 9145 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
9146 if (!attrbuf)
9147 return -ENOMEM;
9148
ea90e0dc 9149 rtnl_lock();
5297c65c 9150 res = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 9151 if (res)
ea90e0dc 9152 goto out_err;
61fa713c 9153
11f78ac3 9154 /* prepare_wdev_dump parsed the attributes */
c90c39da 9155 radio_stats = attrbuf[NL80211_ATTR_SURVEY_RADIO_STATS];
11f78ac3 9156
97990a06
JB		 9157 if (!wdev->netdev) {
9158 res = -EINVAL;
9159 goto out_err;
9160 }
9161
1b8ec87a 9162 if (!rdev->ops->dump_survey) {
61fa713c
HS		 9163 res = -EOPNOTSUPP;
9164 goto out_err;
9165 }
9166
9167 while (1) {
1b8ec87a 9168 res = rdev_dump_survey(rdev, wdev->netdev, survey_idx, &survey);
61fa713c
HS		 9169 if (res == -ENOENT)
9170 break;
9171 if (res)
9172 goto out_err;
9173
11f78ac3
JB		 9174 /* don't send disabled channels, but do send non-channel data */
9175 if (survey.channel &&
9176 survey.channel->flags & IEEE80211_CHAN_DISABLED) {
180cdc79
LR		 9177 survey_idx++;
9178 continue;
9179 }
9180
61fa713c 9181 if (nl80211_send_survey(skb,
15e47304 9182 NETLINK_CB(cb->skb).portid,
61fa713c 9183 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11f78ac3 9184 wdev->netdev, radio_stats, &survey) < 0)
61fa713c
HS		 9185 goto out;
9186 survey_idx++;
9187 }
9188
9189 out:
97990a06 9190 cb->args[2] = survey_idx;
61fa713c
HS		 9191 res = skb->len;
9192 out_err:
50508d94 9193 kfree(attrbuf);
ea90e0dc 9194 rtnl_unlock();
61fa713c
HS		 9195 return res;
9196}
9197
b23aa676
SO		 9198static bool nl80211_valid_wpa_versions(u32 wpa_versions)
9199{
9200 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
cc3e14c2
CHH		 9201 NL80211_WPA_VERSION_2 |
9202 NL80211_WPA_VERSION_3));
b23aa676
SO		 9203}
9204
636a5d36
JM		 9205static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
9206{
4c476991
JB		 9207 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9208 struct net_device *dev = info->user_ptr[1];
19957bb3 9209 struct ieee80211_channel *chan;
11b6b5a4
JM		 9210 const u8 *bssid, *ssid, *ie = NULL, *auth_data = NULL;
9211 int err, ssid_len, ie_len = 0, auth_data_len = 0;
19957bb3 9212 enum nl80211_auth_type auth_type;
fffd0934 9213 struct key_parse key;
d5cdfacb 9214 bool local_state_change;
942ba88b 9215 u32 freq;
636a5d36 9216
f4a11bb0
JB		 9217 if (!info->attrs[NL80211_ATTR_MAC])
9218 return -EINVAL;
9219
1778092e
JM		 9220 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
9221 return -EINVAL;
9222
19957bb3
JB		 9223 if (!info->attrs[NL80211_ATTR_SSID])
9224 return -EINVAL;
9225
9226 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
9227 return -EINVAL;
9228
fffd0934
JB		 9229 err = nl80211_parse_key(info, &key);
9230 if (err)
9231 return err;
9232
9233 if (key.idx >= 0) {
e31b8213
JB		 9234 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
9235 return -EINVAL;
fffd0934
JB		 9236 if (!key.p.key || !key.p.key_len)
9237 return -EINVAL;
9238 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
9239 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
9240 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
9241 key.p.key_len != WLAN_KEY_LEN_WEP104))
9242 return -EINVAL;
b6b5555b 9243 if (key.idx > 3)
fffd0934
JB		 9244 return -EINVAL;
9245 } else {
9246 key.p.key_len = 0;
9247 key.p.key = NULL;
9248 }
9249
afea0b7a
JB		 9250 if (key.idx >= 0) {
9251 int i;
9252 bool ok = false;
7a087e74 9253
afea0b7a
JB		 9254 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
9255 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
9256 ok = true;
9257 break;
9258 }
9259 }
4c476991
JB		 9260 if (!ok)
9261 return -EINVAL;
afea0b7a
JB		 9262 }
9263
4c476991
JB		 9264 if (!rdev->ops->auth)
9265 return -EOPNOTSUPP;
636a5d36 9266
074ac8df 9267 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9268 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9269 return -EOPNOTSUPP;
eec60b03 9270
19957bb3 9271 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
942ba88b
TP		 9272 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
9273 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
9274 freq +=
9275 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
9276
9277 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 9278 if (!chan)
4c476991 9279 return -EINVAL;
636a5d36 9280
19957bb3
JB		 9281 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9282 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 9283
9284 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9285 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9286 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9287 }
9288
19957bb3 9289 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 9290 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 9291 return -EINVAL;
636a5d36 9292
63181060
JM		 9293 if ((auth_type == NL80211_AUTHTYPE_SAE ||
9294 auth_type == NL80211_AUTHTYPE_FILS_SK ||
9295 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
9296 auth_type == NL80211_AUTHTYPE_FILS_PK) &&
11b6b5a4 9297 !info->attrs[NL80211_ATTR_AUTH_DATA])
e39e5b5e
JM		 9298 return -EINVAL;
9299
11b6b5a4 9300 if (info->attrs[NL80211_ATTR_AUTH_DATA]) {
63181060
JM		 9301 if (auth_type != NL80211_AUTHTYPE_SAE &&
9302 auth_type != NL80211_AUTHTYPE_FILS_SK &&
9303 auth_type != NL80211_AUTHTYPE_FILS_SK_PFS &&
9304 auth_type != NL80211_AUTHTYPE_FILS_PK)
e39e5b5e 9305 return -EINVAL;
11b6b5a4
JM		 9306 auth_data = nla_data(info->attrs[NL80211_ATTR_AUTH_DATA]);
9307 auth_data_len = nla_len(info->attrs[NL80211_ATTR_AUTH_DATA]);
e39e5b5e 9308 /* need to include at least Auth Transaction and Status Code */
11b6b5a4 9309 if (auth_data_len < 4)
e39e5b5e
JM		 9310 return -EINVAL;
9311 }
9312
d5cdfacb
JM		 9313 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
9314
95de817b
JB		 9315 /*
9316 * Since we no longer track auth state, ignore
9317 * requests to only change local state.
9318 */
9319 if (local_state_change)
9320 return 0;
9321
91bf9b26
JB		 9322 wdev_lock(dev->ieee80211_ptr);
9323 err = cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
9324 ssid, ssid_len, ie, ie_len,
9325 key.p.key, key.p.key_len, key.idx,
11b6b5a4 9326 auth_data, auth_data_len);
91bf9b26
JB		 9327 wdev_unlock(dev->ieee80211_ptr);
9328 return err;
636a5d36
JM		 9329}
9330
64bf3d4b
DK		 9331static int validate_pae_over_nl80211(struct cfg80211_registered_device *rdev,
9332 struct genl_info *info)
9333{
9334 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
9335 GENL_SET_ERR_MSG(info, "SOCKET_OWNER not set");
9336 return -EINVAL;
9337 }
9338
9339 if (!rdev->ops->tx_control_port ||
9340 !wiphy_ext_feature_isset(&rdev->wiphy,
9341 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
9342 return -EOPNOTSUPP;
9343
9344 return 0;
9345}
9346
c0692b8f
JB		 9347static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
9348 struct genl_info *info,
3dc27d25
JB		 9349 struct cfg80211_crypto_settings *settings,
9350 int cipher_limit)
b23aa676 9351{
c0b2bbd8
JB		 9352 memset(settings, 0, sizeof(*settings));
9353
b23aa676
SO		 9354 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
9355
c0692b8f
JB		 9356 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
9357 u16 proto;
7a087e74 9358
c0692b8f
JB		 9359 proto = nla_get_u16(
9360 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
9361 settings->control_port_ethertype = cpu_to_be16(proto);
9362 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
9363 proto != ETH_P_PAE)
9364 return -EINVAL;
9365 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
9366 settings->control_port_no_encrypt = true;
9367 } else
9368 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
9369
64bf3d4b
DK		 9370 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
9371 int r = validate_pae_over_nl80211(rdev, info);
9372
9373 if (r < 0)
9374 return r;
9375
9376 settings->control_port_over_nl80211 = true;
7f3f96ce
MT		 9377
9378 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_PREAUTH])
9379 settings->control_port_no_preauth = true;
64bf3d4b
DK		 9380 }
9381
b23aa676
SO		 9382 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
9383 void *data;
9384 int len, i;
9385
9386 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
9387 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
9388 settings->n_ciphers_pairwise = len / sizeof(u32);
9389
9390 if (len % sizeof(u32))
9391 return -EINVAL;
9392
3dc27d25 9393 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 9394 return -EINVAL;
9395
9396 memcpy(settings->ciphers_pairwise, data, len);
9397
9398 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 9399 if (!cfg80211_supported_cipher_suite(
9400 &rdev->wiphy,
b23aa676
SO		 9401 settings->ciphers_pairwise[i]))
9402 return -EINVAL;
9403 }
9404
9405 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
9406 settings->cipher_group =
9407 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 9408 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
9409 settings->cipher_group))
b23aa676
SO		 9410 return -EINVAL;
9411 }
9412
9413 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
9414 settings->wpa_versions =
9415 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
9416 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
9417 return -EINVAL;
9418 }
9419
9420 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
9421 void *data;
6d30240e 9422 int len;
b23aa676
SO		 9423
9424 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
9425 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
9426 settings->n_akm_suites = len / sizeof(u32);
9427
9428 if (len % sizeof(u32))
9429 return -EINVAL;
9430
1b9ca027
JM		 9431 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
9432 return -EINVAL;
9433
b23aa676 9434 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 9435 }
9436
91b5ab62
EP		 9437 if (info->attrs[NL80211_ATTR_PMK]) {
9438 if (nla_len(info->attrs[NL80211_ATTR_PMK]) != WLAN_PMK_LEN)
9439 return -EINVAL;
9440 if (!wiphy_ext_feature_isset(&rdev->wiphy,
9441 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_PSK))
9442 return -EINVAL;
9443 settings->psk = nla_data(info->attrs[NL80211_ATTR_PMK]);
9444 }
9445
26f7044e
CHH		 9446 if (info->attrs[NL80211_ATTR_SAE_PASSWORD]) {
9447 if (!wiphy_ext_feature_isset(&rdev->wiphy,
9448 NL80211_EXT_FEATURE_SAE_OFFLOAD))
9449 return -EINVAL;
9450 settings->sae_pwd =
9451 nla_data(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
9452 settings->sae_pwd_len =
9453 nla_len(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
9454 }
9455
b23aa676
SO		 9456 return 0;
9457}
9458
636a5d36
JM		 9459static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
9460{
4c476991
JB		 9461 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9462 struct net_device *dev = info->user_ptr[1];
f444de05 9463 struct ieee80211_channel *chan;
f62fab73
JB		 9464 struct cfg80211_assoc_request req = {};
9465 const u8 *bssid, *ssid;
9466 int err, ssid_len = 0;
942ba88b 9467 u32 freq;
636a5d36 9468
bad29297
AZ		 9469 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9470 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9471 return -EPERM;
9472
f4a11bb0 9473 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 9474 !info->attrs[NL80211_ATTR_SSID] ||
9475 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 9476 return -EINVAL;
9477
4c476991
JB		 9478 if (!rdev->ops->assoc)
9479 return -EOPNOTSUPP;
636a5d36 9480
074ac8df 9481 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9482 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9483 return -EOPNOTSUPP;
eec60b03 9484
19957bb3 9485 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9486
942ba88b
TP		 9487 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
9488 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
9489 freq +=
9490 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
9491 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 9492 if (!chan)
4c476991 9493 return -EINVAL;
636a5d36 9494
19957bb3
JB		 9495 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9496 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 9497
9498 if (info->attrs[NL80211_ATTR_IE]) {
f62fab73
JB		 9499 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9500 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9501 }
9502
dc6382ce 9503 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 9504 enum nl80211_mfp mfp =
dc6382ce 9505 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 9506 if (mfp == NL80211_MFP_REQUIRED)
f62fab73 9507 req.use_mfp = true;
4c476991
JB		 9508 else if (mfp != NL80211_MFP_NO)
9509 return -EINVAL;
dc6382ce
JM		 9510 }
9511
3e5d7649 9512 if (info->attrs[NL80211_ATTR_PREV_BSSID])
f62fab73 9513 req.prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3e5d7649 9514
7e7c8926 9515 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
f62fab73 9516 req.flags |= ASSOC_REQ_DISABLE_HT;
7e7c8926
BG		 9517
9518 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
f62fab73
JB		 9519 memcpy(&req.ht_capa_mask,
9520 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
9521 sizeof(req.ht_capa_mask));
7e7c8926
BG		 9522
9523 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
f62fab73 9524 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
7e7c8926 9525 return -EINVAL;
f62fab73
JB		 9526 memcpy(&req.ht_capa,
9527 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
9528 sizeof(req.ht_capa));
7e7c8926
BG		 9529 }
9530
ee2aca34 9531 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
f62fab73 9532 req.flags |= ASSOC_REQ_DISABLE_VHT;
ee2aca34
JB		 9533
9534 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
f62fab73
JB		 9535 memcpy(&req.vht_capa_mask,
9536 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
9537 sizeof(req.vht_capa_mask));
ee2aca34
JB		 9538
9539 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
f62fab73 9540 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
ee2aca34 9541 return -EINVAL;
f62fab73
JB		 9542 memcpy(&req.vht_capa,
9543 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
9544 sizeof(req.vht_capa));
ee2aca34
JB		 9545 }
9546
bab5ab7d 9547 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 9548 if (!((rdev->wiphy.features &
9549 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
9550 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
9551 !wiphy_ext_feature_isset(&rdev->wiphy,
9552 NL80211_EXT_FEATURE_RRM))
bab5ab7d
AK		 9553 return -EINVAL;
9554 req.flags |= ASSOC_REQ_USE_RRM;
9555 }
9556
348bd456
JM		 9557 if (info->attrs[NL80211_ATTR_FILS_KEK]) {
9558 req.fils_kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
9559 req.fils_kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
9560 if (!info->attrs[NL80211_ATTR_FILS_NONCES])
9561 return -EINVAL;
9562 req.fils_nonces =
9563 nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
9564 }
9565
f62fab73 9566 err = nl80211_crypto_settings(rdev, info, &req.crypto, 1);
91bf9b26
JB		 9567 if (!err) {
9568 wdev_lock(dev->ieee80211_ptr);
bd2522b1 9569
f62fab73
JB		 9570 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid,
9571 ssid, ssid_len, &req);
bd2522b1
AZ		 9572
9573 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
9574 dev->ieee80211_ptr->conn_owner_nlportid =
9575 info->snd_portid;
9576 memcpy(dev->ieee80211_ptr->disconnect_bssid,
9577 bssid, ETH_ALEN);
9578 }
9579
91bf9b26
JB		 9580 wdev_unlock(dev->ieee80211_ptr);
9581 }
636a5d36 9582
636a5d36
JM		 9583 return err;
9584}
9585
9586static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
9587{
4c476991
JB		 9588 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9589 struct net_device *dev = info->user_ptr[1];
19957bb3 9590 const u8 *ie = NULL, *bssid;
91bf9b26 9591 int ie_len = 0, err;
19957bb3 9592 u16 reason_code;
d5cdfacb 9593 bool local_state_change;
636a5d36 9594
bad29297
AZ		 9595 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9596 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9597 return -EPERM;
9598
f4a11bb0
JB		 9599 if (!info->attrs[NL80211_ATTR_MAC])
9600 return -EINVAL;
9601
9602 if (!info->attrs[NL80211_ATTR_REASON_CODE])
9603 return -EINVAL;
9604
4c476991
JB		 9605 if (!rdev->ops->deauth)
9606 return -EOPNOTSUPP;
636a5d36 9607
074ac8df 9608 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9609 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9610 return -EOPNOTSUPP;
eec60b03 9611
19957bb3 9612 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9613
19957bb3
JB		 9614 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
9615 if (reason_code == 0) {
f4a11bb0 9616 /* Reason Code 0 is reserved */
4c476991 9617 return -EINVAL;
255e737e 9618 }
636a5d36
JM		 9619
9620 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9621 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9622 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9623 }
9624
d5cdfacb
JM		 9625 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
9626
91bf9b26
JB		 9627 wdev_lock(dev->ieee80211_ptr);
9628 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
9629 local_state_change);
9630 wdev_unlock(dev->ieee80211_ptr);
9631 return err;
636a5d36
JM		 9632}
9633
9634static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
9635{
4c476991
JB		 9636 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9637 struct net_device *dev = info->user_ptr[1];
19957bb3 9638 const u8 *ie = NULL, *bssid;
91bf9b26 9639 int ie_len = 0, err;
19957bb3 9640 u16 reason_code;
d5cdfacb 9641 bool local_state_change;
636a5d36 9642
bad29297
AZ		 9643 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9644 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9645 return -EPERM;
9646
f4a11bb0
JB		 9647 if (!info->attrs[NL80211_ATTR_MAC])
9648 return -EINVAL;
9649
9650 if (!info->attrs[NL80211_ATTR_REASON_CODE])
9651 return -EINVAL;
9652
4c476991
JB		 9653 if (!rdev->ops->disassoc)
9654 return -EOPNOTSUPP;
636a5d36 9655
074ac8df 9656 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9657 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9658 return -EOPNOTSUPP;
eec60b03 9659
19957bb3 9660 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9661
19957bb3
JB		 9662 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
9663 if (reason_code == 0) {
f4a11bb0 9664 /* Reason Code 0 is reserved */
4c476991 9665 return -EINVAL;
255e737e 9666 }
636a5d36
JM		 9667
9668 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9669 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9670 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9671 }
9672
d5cdfacb
JM		 9673 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
9674
91bf9b26
JB		 9675 wdev_lock(dev->ieee80211_ptr);
9676 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
9677 local_state_change);
9678 wdev_unlock(dev->ieee80211_ptr);
9679 return err;
636a5d36
JM		 9680}
9681
dd5b4cc7
FF		 9682static bool
9683nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
57fbcce3 9684 int mcast_rate[NUM_NL80211_BANDS],
dd5b4cc7
FF		 9685 int rateval)
9686{
9687 struct wiphy *wiphy = &rdev->wiphy;
9688 bool found = false;
9689 int band, i;
9690
57fbcce3 9691 for (band = 0; band < NUM_NL80211_BANDS; band++) {
dd5b4cc7
FF		 9692 struct ieee80211_supported_band *sband;
9693
9694 sband = wiphy->bands[band];
9695 if (!sband)
9696 continue;
9697
9698 for (i = 0; i < sband->n_bitrates; i++) {
9699 if (sband->bitrates[i].bitrate == rateval) {
9700 mcast_rate[band] = i + 1;
9701 found = true;
9702 break;
9703 }
9704 }
9705 }
9706
9707 return found;
9708}
9709
04a773ad
JB		 9710static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
9711{
4c476991
JB		 9712 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9713 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 9714 struct cfg80211_ibss_params ibss;
9715 struct wiphy *wiphy;
fffd0934 9716 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 9717 int err;
9718
8e30bc55
JB		 9719 memset(&ibss, 0, sizeof(ibss));
9720
683b6d3b 9721 if (!info->attrs[NL80211_ATTR_SSID] ||
04a773ad
JB		 9722 !nla_len(info->attrs[NL80211_ATTR_SSID]))
9723 return -EINVAL;
9724
8e30bc55
JB		 9725 ibss.beacon_interval = 100;
9726
12d20fc9 9727 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL])
8e30bc55
JB		 9728 ibss.beacon_interval =
9729 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 9730
0c317a02
PK		 9731 err = cfg80211_validate_beacon_int(rdev, NL80211_IFTYPE_ADHOC,
9732 ibss.beacon_interval);
12d20fc9
PK		 9733 if (err)
9734 return err;
8e30bc55 9735
4c476991
JB		 9736 if (!rdev->ops->join_ibss)
9737 return -EOPNOTSUPP;
04a773ad 9738
4c476991
JB		 9739 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
9740 return -EOPNOTSUPP;
04a773ad 9741
79c97e97 9742 wiphy = &rdev->wiphy;
04a773ad 9743
39193498 9744 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 9745 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 9746
9747 if (!is_valid_ether_addr(ibss.bssid))
9748 return -EINVAL;
9749 }
04a773ad
JB		 9750 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9751 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
9752
9753 if (info->attrs[NL80211_ATTR_IE]) {
9754 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9755 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
9756 }
9757
683b6d3b
JB		 9758 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
9759 if (err)
9760 return err;
04a773ad 9761
174e0cd2
IP		 9762 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef,
9763 NL80211_IFTYPE_ADHOC))
54858ee5
AS		 9764 return -EINVAL;
9765
2f301ab2 9766 switch (ibss.chandef.width) {
bf372645
SW		 9767 case NL80211_CHAN_WIDTH_5:
9768 case NL80211_CHAN_WIDTH_10:
2f301ab2
SW		 9769 case NL80211_CHAN_WIDTH_20_NOHT:
9770 break;
9771 case NL80211_CHAN_WIDTH_20:
9772 case NL80211_CHAN_WIDTH_40:
ffc11991
JD		 9773 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
9774 return -EINVAL;
9775 break;
9776 case NL80211_CHAN_WIDTH_80:
9777 case NL80211_CHAN_WIDTH_80P80:
9778 case NL80211_CHAN_WIDTH_160:
9779 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
9780 return -EINVAL;
9781 if (!wiphy_ext_feature_isset(&rdev->wiphy,
9782 NL80211_EXT_FEATURE_VHT_IBSS))
9783 return -EINVAL;
9784 break;
2f301ab2 9785 default:
c04d6150 9786 return -EINVAL;
2f301ab2 9787 }
db9c64cf 9788
04a773ad 9789 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 9790 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
9791
fbd2c8dc
TP		 9792 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
9793 u8 *rates =
9794 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
9795 int n_rates =
9796 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
9797 struct ieee80211_supported_band *sband =
683b6d3b 9798 wiphy->bands[ibss.chandef.chan->band];
fbd2c8dc 9799
34850ab2
JB		 9800 err = ieee80211_get_ratemask(sband, rates, n_rates,
9801 &ibss.basic_rates);
9802 if (err)
9803 return err;
fbd2c8dc 9804 }
dd5b4cc7 9805
803768f5
SW		 9806 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
9807 memcpy(&ibss.ht_capa_mask,
9808 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
9809 sizeof(ibss.ht_capa_mask));
9810
9811 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
9812 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
9813 return -EINVAL;
9814 memcpy(&ibss.ht_capa,
9815 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
9816 sizeof(ibss.ht_capa));
9817 }
9818
dd5b4cc7
FF		 9819 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
9820 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
9821 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
9822 return -EINVAL;
fbd2c8dc 9823
4c476991 9824 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 9825 bool no_ht = false;
9826
768075eb 9827 connkeys = nl80211_parse_connkeys(rdev, info, &no_ht);
4c476991
JB		 9828 if (IS_ERR(connkeys))
9829 return PTR_ERR(connkeys);
de7044ee 9830
3d9d1d66
JB		 9831 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
9832 no_ht) {
5e950a78 9833 kzfree(connkeys);
de7044ee
SM		 9834 return -EINVAL;
9835 }
4c476991 9836 }
04a773ad 9837
267335d6
AQ		 9838 ibss.control_port =
9839 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
9840
c3bfe1f6
DK		 9841 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
9842 int r = validate_pae_over_nl80211(rdev, info);
9843
d350a0f4
JB		 9844 if (r < 0) {
9845 kzfree(connkeys);
c3bfe1f6 9846 return r;
d350a0f4 9847 }
c3bfe1f6
DK		 9848
9849 ibss.control_port_over_nl80211 = true;
9850 }
9851
5336fa88
SW		 9852 ibss.userspace_handles_dfs =
9853 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
9854
f8d16d3e
DK		 9855 wdev_lock(dev->ieee80211_ptr);
9856 err = __cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934 9857 if (err)
b47f610b 9858 kzfree(connkeys);
f8d16d3e
DK		 9859 else if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
9860 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
9861 wdev_unlock(dev->ieee80211_ptr);
9862
04a773ad
JB		 9863 return err;
9864}
9865
9866static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
9867{
4c476991
JB		 9868 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9869 struct net_device *dev = info->user_ptr[1];
04a773ad 9870
4c476991
JB		 9871 if (!rdev->ops->leave_ibss)
9872 return -EOPNOTSUPP;
04a773ad 9873
4c476991
JB		 9874 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
9875 return -EOPNOTSUPP;
04a773ad 9876
4c476991 9877 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 9878}
9879
f4e583c8
AQ		 9880static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
9881{
9882 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9883 struct net_device *dev = info->user_ptr[1];
57fbcce3 9884 int mcast_rate[NUM_NL80211_BANDS];
f4e583c8
AQ		 9885 u32 nla_rate;
9886 int err;
9887
9888 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
876dc930
BVB		 9889 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
9890 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_OCB)
f4e583c8
AQ		 9891 return -EOPNOTSUPP;
9892
9893 if (!rdev->ops->set_mcast_rate)
9894 return -EOPNOTSUPP;
9895
9896 memset(mcast_rate, 0, sizeof(mcast_rate));
9897
9898 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
9899 return -EINVAL;
9900
9901 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
9902 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
9903 return -EINVAL;
9904
a1056b1b 9905 err = rdev_set_mcast_rate(rdev, dev, mcast_rate);
f4e583c8
AQ		 9906
9907 return err;
9908}
9909
ad7e718c
JB		 9910static struct sk_buff *
9911__cfg80211_alloc_vendor_skb(struct cfg80211_registered_device *rdev,
6c09e791
AK		 9912 struct wireless_dev *wdev, int approxlen,
9913 u32 portid, u32 seq, enum nl80211_commands cmd,
567ffc35
JB		 9914 enum nl80211_attrs attr,
9915 const struct nl80211_vendor_cmd_info *info,
9916 gfp_t gfp)
ad7e718c
JB		 9917{
9918 struct sk_buff *skb;
9919 void *hdr;
9920 struct nlattr *data;
9921
9922 skb = nlmsg_new(approxlen + 100, gfp);
9923 if (!skb)
9924 return NULL;
9925
9926 hdr = nl80211hdr_put(skb, portid, seq, 0, cmd);
9927 if (!hdr) {
9928 kfree_skb(skb);
9929 return NULL;
9930 }
9931
9932 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
9933 goto nla_put_failure;
567ffc35
JB		 9934
9935 if (info) {
9936 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_ID,
9937 info->vendor_id))
9938 goto nla_put_failure;
9939 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_SUBCMD,
9940 info->subcmd))
9941 goto nla_put_failure;
9942 }
9943
6c09e791 9944 if (wdev) {
2dad624e
ND		 9945 if (nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
9946 wdev_id(wdev), NL80211_ATTR_PAD))
6c09e791
AK		 9947 goto nla_put_failure;
9948 if (wdev->netdev &&
9949 nla_put_u32(skb, NL80211_ATTR_IFINDEX,
9950 wdev->netdev->ifindex))
9951 goto nla_put_failure;
9952 }
9953
ae0be8de 9954 data = nla_nest_start_noflag(skb, attr);
76e1fb4b
JB		 9955 if (!data)
9956 goto nla_put_failure;
ad7e718c
JB		 9957
9958 ((void **)skb->cb)[0] = rdev;
9959 ((void **)skb->cb)[1] = hdr;
9960 ((void **)skb->cb)[2] = data;
9961
9962 return skb;
9963
9964 nla_put_failure:
9965 kfree_skb(skb);
9966 return NULL;
9967}
f4e583c8 9968
e03ad6ea 9969struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
6c09e791 9970 struct wireless_dev *wdev,
e03ad6ea
JB		 9971 enum nl80211_commands cmd,
9972 enum nl80211_attrs attr,
55c1fdf0 9973 unsigned int portid,
e03ad6ea
JB		 9974 int vendor_event_idx,
9975 int approxlen, gfp_t gfp)
9976{
f26cbf40 9977 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
e03ad6ea
JB		 9978 const struct nl80211_vendor_cmd_info *info;
9979
9980 switch (cmd) {
9981 case NL80211_CMD_TESTMODE:
9982 if (WARN_ON(vendor_event_idx != -1))
9983 return NULL;
9984 info = NULL;
9985 break;
9986 case NL80211_CMD_VENDOR:
9987 if (WARN_ON(vendor_event_idx < 0 ||
9988 vendor_event_idx >= wiphy->n_vendor_events))
9989 return NULL;
9990 info = &wiphy->vendor_events[vendor_event_idx];
9991 break;
9992 default:
9993 WARN_ON(1);
9994 return NULL;
9995 }
9996
55c1fdf0 9997 return __cfg80211_alloc_vendor_skb(rdev, wdev, approxlen, portid, 0,
e03ad6ea
JB		 9998 cmd, attr, info, gfp);
9999}
10000EXPORT_SYMBOL(__cfg80211_alloc_event_skb);
10001
10002void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp)
10003{
10004 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
10005 void *hdr = ((void **)skb->cb)[1];
55c1fdf0 10006 struct nlmsghdr *nlhdr = nlmsg_hdr(skb);
e03ad6ea
JB		 10007 struct nlattr *data = ((void **)skb->cb)[2];
10008 enum nl80211_multicast_groups mcgrp = NL80211_MCGRP_TESTMODE;
10009
bd8c78e7
JB		 10010 /* clear CB data for netlink core to own from now on */
10011 memset(skb->cb, 0, sizeof(skb->cb));
10012
e03ad6ea
JB		 10013 nla_nest_end(skb, data);
10014 genlmsg_end(skb, hdr);
10015
55c1fdf0
JB		 10016 if (nlhdr->nlmsg_pid) {
10017 genlmsg_unicast(wiphy_net(&rdev->wiphy), skb,
10018 nlhdr->nlmsg_pid);
10019 } else {
10020 if (data->nla_type == NL80211_ATTR_VENDOR_DATA)
10021 mcgrp = NL80211_MCGRP_VENDOR;
e03ad6ea 10022
55c1fdf0
JB		 10023 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
10024 skb, 0, mcgrp, gfp);
10025 }
e03ad6ea
JB		 10026}
10027EXPORT_SYMBOL(__cfg80211_send_event_skb);
10028
aff89a9b 10029#ifdef CONFIG_NL80211_TESTMODE
aff89a9b
JB		 10030static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
10031{
4c476991 10032 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fc73f11f
DS		 10033 struct wireless_dev *wdev =
10034 __cfg80211_wdev_from_attrs(genl_info_net(info), info->attrs);
aff89a9b
JB		 10035 int err;
10036
fc73f11f
DS		 10037 if (!rdev->ops->testmode_cmd)
10038 return -EOPNOTSUPP;
10039
10040 if (IS_ERR(wdev)) {
10041 err = PTR_ERR(wdev);
10042 if (err != -EINVAL)
10043 return err;
10044 wdev = NULL;
10045 } else if (wdev->wiphy != &rdev->wiphy) {
10046 return -EINVAL;
10047 }
10048
aff89a9b
JB		 10049 if (!info->attrs[NL80211_ATTR_TESTDATA])
10050 return -EINVAL;
10051
ad7e718c 10052 rdev->cur_cmd_info = info;
fc73f11f 10053 err = rdev_testmode_cmd(rdev, wdev,
aff89a9b
JB		 10054 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
10055 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
ad7e718c 10056 rdev->cur_cmd_info = NULL;
aff89a9b 10057
aff89a9b
JB		 10058 return err;
10059}
10060
71063f0e
WYG		 10061static int nl80211_testmode_dump(struct sk_buff *skb,
10062 struct netlink_callback *cb)
10063{
00918d33 10064 struct cfg80211_registered_device *rdev;
50508d94 10065 struct nlattr **attrbuf = NULL;
71063f0e
WYG		 10066 int err;
10067 long phy_idx;
10068 void *data = NULL;
10069 int data_len = 0;
10070
5fe231e8
JB		 10071 rtnl_lock();
10072
71063f0e
WYG		 10073 if (cb->args[0]) {
10074 /*
10075 * 0 is a valid index, but not valid for args[0],
10076 * so we need to offset by 1.
10077 */
10078 phy_idx = cb->args[0] - 1;
a4956dca
LC		 10079
10080 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
10081 if (!rdev) {
10082 err = -ENOENT;
10083 goto out_err;
10084 }
71063f0e 10085 } else {
50508d94
JB		 10086 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
10087 GFP_KERNEL);
10088 if (!attrbuf) {
10089 err = -ENOMEM;
10090 goto out_err;
10091 }
c90c39da 10092
8cb08174
JB		 10093 err = nlmsg_parse_deprecated(cb->nlh,
10094 GENL_HDRLEN + nl80211_fam.hdrsize,
10095 attrbuf, nl80211_fam.maxattr,
10096 nl80211_policy, NULL);
71063f0e 10097 if (err)
5fe231e8 10098 goto out_err;
00918d33 10099
c90c39da 10100 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
2bd7e35d 10101 if (IS_ERR(rdev)) {
5fe231e8
JB		 10102 err = PTR_ERR(rdev);
10103 goto out_err;
00918d33 10104 }
2bd7e35d 10105 phy_idx = rdev->wiphy_idx;
2bd7e35d 10106
c90c39da
JB		 10107 if (attrbuf[NL80211_ATTR_TESTDATA])
10108 cb->args[1] = (long)attrbuf[NL80211_ATTR_TESTDATA];
71063f0e
WYG		 10109 }
10110
10111 if (cb->args[1]) {
10112 data = nla_data((void *)cb->args[1]);
10113 data_len = nla_len((void *)cb->args[1]);
10114 }
10115
00918d33 10116 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 10117 err = -EOPNOTSUPP;
10118 goto out_err;
10119 }
10120
10121 while (1) {
15e47304 10122 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 10123 cb->nlh->nlmsg_seq, NLM_F_MULTI,
10124 NL80211_CMD_TESTMODE);
10125 struct nlattr *tmdata;
10126
cb35fba3
DC		 10127 if (!hdr)
10128 break;
10129
9360ffd1 10130 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 10131 genlmsg_cancel(skb, hdr);
10132 break;
10133 }
10134
ae0be8de 10135 tmdata = nla_nest_start_noflag(skb, NL80211_ATTR_TESTDATA);
71063f0e
WYG		 10136 if (!tmdata) {
10137 genlmsg_cancel(skb, hdr);
10138 break;
10139 }
e35e4d28 10140 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 10141 nla_nest_end(skb, tmdata);
10142
10143 if (err == -ENOBUFS || err == -ENOENT) {
10144 genlmsg_cancel(skb, hdr);
10145 break;
10146 } else if (err) {
10147 genlmsg_cancel(skb, hdr);
10148 goto out_err;
10149 }
10150
10151 genlmsg_end(skb, hdr);
10152 }
10153
10154 err = skb->len;
10155 /* see above */
10156 cb->args[0] = phy_idx + 1;
10157 out_err:
50508d94 10158 kfree(attrbuf);
5fe231e8 10159 rtnl_unlock();
71063f0e
WYG		 10160 return err;
10161}
aff89a9b
JB		 10162#endif
10163
b23aa676
SO		 10164static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
10165{
4c476991
JB		 10166 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10167 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 10168 struct cfg80211_connect_params connect;
10169 struct wiphy *wiphy;
fffd0934 10170 struct cfg80211_cached_keys *connkeys = NULL;
942ba88b 10171 u32 freq = 0;
b23aa676
SO		 10172 int err;
10173
10174 memset(&connect, 0, sizeof(connect));
10175
b23aa676
SO		 10176 if (!info->attrs[NL80211_ATTR_SSID] ||
10177 !nla_len(info->attrs[NL80211_ATTR_SSID]))
10178 return -EINVAL;
10179
10180 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
10181 connect.auth_type =
10182 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 10183 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
10184 NL80211_CMD_CONNECT))
b23aa676
SO		 10185 return -EINVAL;
10186 } else
10187 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
10188
10189 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
10190
3a00df57
AS		 10191 if (info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS] &&
10192 !wiphy_ext_feature_isset(&rdev->wiphy,
10193 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
10194 return -EINVAL;
10195 connect.want_1x = info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS];
10196
c0692b8f 10197 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 10198 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 10199 if (err)
10200 return err;
b23aa676 10201
074ac8df 10202 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10203 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10204 return -EOPNOTSUPP;
b23aa676 10205
79c97e97 10206 wiphy = &rdev->wiphy;
b23aa676 10207
4486ea98
BS		 10208 connect.bg_scan_period = -1;
10209 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
10210 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
10211 connect.bg_scan_period =
10212 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
10213 }
10214
b23aa676
SO		 10215 if (info->attrs[NL80211_ATTR_MAC])
10216 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
1df4a510
JM		 10217 else if (info->attrs[NL80211_ATTR_MAC_HINT])
10218 connect.bssid_hint =
10219 nla_data(info->attrs[NL80211_ATTR_MAC_HINT]);
b23aa676
SO		 10220 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10221 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10222
10223 if (info->attrs[NL80211_ATTR_IE]) {
10224 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10225 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10226 }
10227
cee00a95
JM		 10228 if (info->attrs[NL80211_ATTR_USE_MFP]) {
10229 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
65026002
EG		 10230 if (connect.mfp == NL80211_MFP_OPTIONAL &&
10231 !wiphy_ext_feature_isset(&rdev->wiphy,
10232 NL80211_EXT_FEATURE_MFP_OPTIONAL))
10233 return -EOPNOTSUPP;
cee00a95
JM		 10234 } else {
10235 connect.mfp = NL80211_MFP_NO;
10236 }
10237
ba6fbacf
JM		 10238 if (info->attrs[NL80211_ATTR_PREV_BSSID])
10239 connect.prev_bssid =
10240 nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
10241
942ba88b
TP		 10242 if (info->attrs[NL80211_ATTR_WIPHY_FREQ])
10243 freq = MHZ_TO_KHZ(nla_get_u32(
10244 info->attrs[NL80211_ATTR_WIPHY_FREQ]));
10245 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10246 freq +=
10247 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10248
10249 if (freq) {
10250 connect.channel = nl80211_get_valid_chan(wiphy, freq);
664834de 10251 if (!connect.channel)
1df4a510
JM		 10252 return -EINVAL;
10253 } else if (info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]) {
942ba88b
TP		 10254 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]);
10255 freq = MHZ_TO_KHZ(freq);
10256 connect.channel_hint = nl80211_get_valid_chan(wiphy, freq);
664834de 10257 if (!connect.channel_hint)
4c476991 10258 return -EINVAL;
b23aa676
SO		 10259 }
10260
2a38075c
AAL		 10261 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
10262 connect.edmg.channels =
10263 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
10264
10265 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
10266 connect.edmg.bw_config =
10267 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
10268 }
10269
fffd0934 10270 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
768075eb 10271 connkeys = nl80211_parse_connkeys(rdev, info, NULL);
4c476991
JB		 10272 if (IS_ERR(connkeys))
10273 return PTR_ERR(connkeys);
fffd0934
JB		 10274 }
10275
7e7c8926
BG		 10276 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
10277 connect.flags |= ASSOC_REQ_DISABLE_HT;
10278
10279 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
10280 memcpy(&connect.ht_capa_mask,
10281 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10282 sizeof(connect.ht_capa_mask));
10283
10284 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e 10285 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
b47f610b 10286 kzfree(connkeys);
7e7c8926 10287 return -EINVAL;
b4e4f47e 10288 }
7e7c8926
BG		 10289 memcpy(&connect.ht_capa,
10290 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10291 sizeof(connect.ht_capa));
10292 }
10293
ee2aca34
JB		 10294 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
10295 connect.flags |= ASSOC_REQ_DISABLE_VHT;
10296
10297 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
10298 memcpy(&connect.vht_capa_mask,
10299 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
10300 sizeof(connect.vht_capa_mask));
10301
10302 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
10303 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]) {
b47f610b 10304 kzfree(connkeys);
ee2aca34
JB		 10305 return -EINVAL;
10306 }
10307 memcpy(&connect.vht_capa,
10308 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
10309 sizeof(connect.vht_capa));
10310 }
10311
bab5ab7d 10312 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 10313 if (!((rdev->wiphy.features &
10314 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
10315 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
10316 !wiphy_ext_feature_isset(&rdev->wiphy,
10317 NL80211_EXT_FEATURE_RRM)) {
707554b4 10318 kzfree(connkeys);
bab5ab7d 10319 return -EINVAL;
707554b4 10320 }
bab5ab7d
AK		 10321 connect.flags |= ASSOC_REQ_USE_RRM;
10322 }
10323
34d50519 10324 connect.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
57fbcce3 10325 if (connect.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
34d50519
LD		 10326 kzfree(connkeys);
10327 return -EOPNOTSUPP;
10328 }
10329
38de03d2
AS		 10330 if (info->attrs[NL80211_ATTR_BSS_SELECT]) {
10331 /* bss selection makes no sense if bssid is set */
10332 if (connect.bssid) {
10333 kzfree(connkeys);
10334 return -EINVAL;
10335 }
10336
10337 err = parse_bss_select(info->attrs[NL80211_ATTR_BSS_SELECT],
10338 wiphy, &connect.bss_select);
10339 if (err) {
10340 kzfree(connkeys);
10341 return err;
10342 }
10343 }
10344
a3caf744
VK		 10345 if (wiphy_ext_feature_isset(&rdev->wiphy,
10346 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
10347 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
10348 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
10349 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
10350 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10351 connect.fils_erp_username =
10352 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10353 connect.fils_erp_username_len =
10354 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10355 connect.fils_erp_realm =
10356 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10357 connect.fils_erp_realm_len =
10358 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10359 connect.fils_erp_next_seq_num =
10360 nla_get_u16(
10361 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
10362 connect.fils_erp_rrk =
10363 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10364 connect.fils_erp_rrk_len =
10365 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10366 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
10367 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
10368 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
10369 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10370 kzfree(connkeys);
10371 return -EINVAL;
10372 }
10373
40cbfa90
SD		 10374 if (nla_get_flag(info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])) {
10375 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
2f0605a6 10376 kzfree(connkeys);
40cbfa90
SD		 10377 GENL_SET_ERR_MSG(info,
10378 "external auth requires connection ownership");
10379 return -EINVAL;
10380 }
10381 connect.flags |= CONNECT_REQ_EXTERNAL_AUTH_SUPPORT;
10382 }
10383
83739b03 10384 wdev_lock(dev->ieee80211_ptr);
bd2522b1 10385
4ce2bd9c
JM		 10386 err = cfg80211_connect(rdev, dev, &connect, connkeys,
10387 connect.prev_bssid);
fffd0934 10388 if (err)
b47f610b 10389 kzfree(connkeys);
bd2522b1
AZ		 10390
10391 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10392 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
10393 if (connect.bssid)
10394 memcpy(dev->ieee80211_ptr->disconnect_bssid,
10395 connect.bssid, ETH_ALEN);
10396 else
10397 memset(dev->ieee80211_ptr->disconnect_bssid,
10398 0, ETH_ALEN);
10399 }
10400
10401 wdev_unlock(dev->ieee80211_ptr);
10402
b23aa676
SO		 10403 return err;
10404}
10405
088e8df8 10406static int nl80211_update_connect_params(struct sk_buff *skb,
10407 struct genl_info *info)
10408{
10409 struct cfg80211_connect_params connect = {};
10410 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10411 struct net_device *dev = info->user_ptr[1];
10412 struct wireless_dev *wdev = dev->ieee80211_ptr;
7f9a3e15
VK		 10413 bool fils_sk_offload;
10414 u32 auth_type;
088e8df8 10415 u32 changed = 0;
10416 int ret;
10417
10418 if (!rdev->ops->update_connect_params)
10419 return -EOPNOTSUPP;
10420
10421 if (info->attrs[NL80211_ATTR_IE]) {
088e8df8 10422 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10423 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10424 changed |= UPDATE_ASSOC_IES;
10425 }
10426
7f9a3e15
VK		 10427 fils_sk_offload = wiphy_ext_feature_isset(&rdev->wiphy,
10428 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD);
10429
10430 /*
10431 * when driver supports fils-sk offload all attributes must be
10432 * provided. So the else covers "fils-sk-not-all" and
10433 * "no-fils-sk-any".
10434 */
10435 if (fils_sk_offload &&
10436 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
10437 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
10438 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
10439 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10440 connect.fils_erp_username =
10441 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10442 connect.fils_erp_username_len =
10443 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10444 connect.fils_erp_realm =
10445 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10446 connect.fils_erp_realm_len =
10447 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10448 connect.fils_erp_next_seq_num =
10449 nla_get_u16(
10450 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
10451 connect.fils_erp_rrk =
10452 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10453 connect.fils_erp_rrk_len =
10454 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10455 changed |= UPDATE_FILS_ERP_INFO;
10456 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
10457 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
10458 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
10459 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10460 return -EINVAL;
10461 }
10462
10463 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
10464 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
10465 if (!nl80211_valid_auth_type(rdev, auth_type,
10466 NL80211_CMD_CONNECT))
10467 return -EINVAL;
10468
10469 if (auth_type == NL80211_AUTHTYPE_FILS_SK &&
10470 fils_sk_offload && !(changed & UPDATE_FILS_ERP_INFO))
10471 return -EINVAL;
10472
10473 connect.auth_type = auth_type;
10474 changed |= UPDATE_AUTH_TYPE;
10475 }
10476
088e8df8 10477 wdev_lock(dev->ieee80211_ptr);
10478 if (!wdev->current_bss)
10479 ret = -ENOLINK;
10480 else
10481 ret = rdev_update_connect_params(rdev, dev, &connect, changed);
10482 wdev_unlock(dev->ieee80211_ptr);
10483
10484 return ret;
10485}
10486
b23aa676
SO		 10487static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
10488{
4c476991
JB		 10489 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10490 struct net_device *dev = info->user_ptr[1];
b23aa676 10491 u16 reason;
83739b03 10492 int ret;
b23aa676 10493
bad29297
AZ		 10494 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10495 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10496 return -EPERM;
10497
b23aa676
SO		 10498 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10499 reason = WLAN_REASON_DEAUTH_LEAVING;
10500 else
10501 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10502
10503 if (reason == 0)
10504 return -EINVAL;
10505
074ac8df 10506 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10507 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10508 return -EOPNOTSUPP;
b23aa676 10509
83739b03
JB		 10510 wdev_lock(dev->ieee80211_ptr);
10511 ret = cfg80211_disconnect(rdev, dev, reason, true);
10512 wdev_unlock(dev->ieee80211_ptr);
10513 return ret;
b23aa676
SO		 10514}
10515
463d0183
JB		 10516static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
10517{
4c476991 10518 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 10519 struct net *net;
10520 int err;
463d0183 10521
4b681c82
VK		 10522 if (info->attrs[NL80211_ATTR_PID]) {
10523 u32 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
10524
10525 net = get_net_ns_by_pid(pid);
10526 } else if (info->attrs[NL80211_ATTR_NETNS_FD]) {
10527 u32 fd = nla_get_u32(info->attrs[NL80211_ATTR_NETNS_FD]);
463d0183 10528
4b681c82
VK		 10529 net = get_net_ns_by_fd(fd);
10530 } else {
10531 return -EINVAL;
10532 }
463d0183 10533
4c476991
JB		 10534 if (IS_ERR(net))
10535 return PTR_ERR(net);
463d0183
JB		 10536
10537 err = 0;
10538
10539 /* check if anything to do */
4c476991
JB		 10540 if (!net_eq(wiphy_net(&rdev->wiphy), net))
10541 err = cfg80211_switch_netns(rdev, net);
463d0183 10542
463d0183 10543 put_net(net);
463d0183
JB		 10544 return err;
10545}
10546
67fbb16b
SO		 10547static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
10548{
4c476991 10549 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 10550 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
10551 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 10552 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 10553 struct cfg80211_pmksa pmksa;
10554
10555 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
10556
67fbb16b
SO		 10557 if (!info->attrs[NL80211_ATTR_PMKID])
10558 return -EINVAL;
10559
67fbb16b 10560 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
a3caf744
VK		 10561
10562 if (info->attrs[NL80211_ATTR_MAC]) {
10563 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
10564 } else if (info->attrs[NL80211_ATTR_SSID] &&
10565 info->attrs[NL80211_ATTR_FILS_CACHE_ID] &&
10566 (info->genlhdr->cmd == NL80211_CMD_DEL_PMKSA ||
10567 info->attrs[NL80211_ATTR_PMK])) {
10568 pmksa.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10569 pmksa.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10570 pmksa.cache_id =
10571 nla_data(info->attrs[NL80211_ATTR_FILS_CACHE_ID]);
10572 } else {
10573 return -EINVAL;
10574 }
10575 if (info->attrs[NL80211_ATTR_PMK]) {
10576 pmksa.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
10577 pmksa.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
10578 }
67fbb16b 10579
7fc82af8
VJ		 10580 if (info->attrs[NL80211_ATTR_PMK_LIFETIME])
10581 pmksa.pmk_lifetime =
10582 nla_get_u32(info->attrs[NL80211_ATTR_PMK_LIFETIME]);
10583
10584 if (info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD])
10585 pmksa.pmk_reauth_threshold =
10586 nla_get_u8(
10587 info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD]);
10588
074ac8df 10589 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6c900360
LD		 10590 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
10591 !(dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP &&
10592 wiphy_ext_feature_isset(&rdev->wiphy,
10593 NL80211_EXT_FEATURE_AP_PMKSA_CACHING)))
4c476991 10594 return -EOPNOTSUPP;
67fbb16b
SO		 10595
10596 switch (info->genlhdr->cmd) {
10597 case NL80211_CMD_SET_PMKSA:
10598 rdev_ops = rdev->ops->set_pmksa;
10599 break;
10600 case NL80211_CMD_DEL_PMKSA:
10601 rdev_ops = rdev->ops->del_pmksa;
10602 break;
10603 default:
10604 WARN_ON(1);
10605 break;
10606 }
10607
4c476991
JB		 10608 if (!rdev_ops)
10609 return -EOPNOTSUPP;
67fbb16b 10610
4c476991 10611 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 10612}
10613
10614static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
10615{
4c476991
JB		 10616 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10617 struct net_device *dev = info->user_ptr[1];
67fbb16b 10618
074ac8df 10619 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10620 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10621 return -EOPNOTSUPP;
67fbb16b 10622
4c476991
JB		 10623 if (!rdev->ops->flush_pmksa)
10624 return -EOPNOTSUPP;
67fbb16b 10625
e35e4d28 10626 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 10627}
10628
109086ce
AN		 10629static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
10630{
10631 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10632 struct net_device *dev = info->user_ptr[1];
10633 u8 action_code, dialog_token;
df942e7b 10634 u32 peer_capability = 0;
109086ce
AN		 10635 u16 status_code;
10636 u8 *peer;
31fa97c5 10637 bool initiator;
109086ce
AN		 10638
10639 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
10640 !rdev->ops->tdls_mgmt)
10641 return -EOPNOTSUPP;
10642
10643 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
10644 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
10645 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
10646 !info->attrs[NL80211_ATTR_IE] ||
10647 !info->attrs[NL80211_ATTR_MAC])
10648 return -EINVAL;
10649
10650 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
10651 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
10652 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
10653 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
31fa97c5 10654 initiator = nla_get_flag(info->attrs[NL80211_ATTR_TDLS_INITIATOR]);
df942e7b
SDU		 10655 if (info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY])
10656 peer_capability =
10657 nla_get_u32(info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY]);
109086ce 10658
e35e4d28 10659 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
df942e7b 10660 dialog_token, status_code, peer_capability,
31fa97c5 10661 initiator,
e35e4d28
HG		 10662 nla_data(info->attrs[NL80211_ATTR_IE]),
10663 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 10664}
10665
10666static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
10667{
10668 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10669 struct net_device *dev = info->user_ptr[1];
10670 enum nl80211_tdls_operation operation;
10671 u8 *peer;
10672
10673 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
10674 !rdev->ops->tdls_oper)
10675 return -EOPNOTSUPP;
10676
10677 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
10678 !info->attrs[NL80211_ATTR_MAC])
10679 return -EINVAL;
10680
10681 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
10682 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
10683
e35e4d28 10684 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 10685}
10686
9588bbd5
JM		 10687static int nl80211_remain_on_channel(struct sk_buff *skb,
10688 struct genl_info *info)
10689{
4c476991 10690 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10691 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 10692 struct cfg80211_chan_def chandef;
34373d12 10693 const struct cfg80211_chan_def *compat_chandef;
9588bbd5
JM		 10694 struct sk_buff *msg;
10695 void *hdr;
10696 u64 cookie;
683b6d3b 10697 u32 duration;
9588bbd5
JM		 10698 int err;
10699
10700 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
10701 !info->attrs[NL80211_ATTR_DURATION])
10702 return -EINVAL;
10703
10704 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
10705
ebf348fc
JB		 10706 if (!rdev->ops->remain_on_channel ||
10707 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
10708 return -EOPNOTSUPP;
10709
9588bbd5 10710 /*
ebf348fc
JB		 10711 * We should be on that channel for at least a minimum amount of
10712 * time (10ms) but no longer than the driver supports.
9588bbd5 10713 */
ebf348fc 10714 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 10715 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 10716 return -EINVAL;
10717
683b6d3b
JB		 10718 err = nl80211_parse_chandef(rdev, info, &chandef);
10719 if (err)
10720 return err;
9588bbd5 10721
34373d12
VT		 10722 wdev_lock(wdev);
10723 if (!cfg80211_off_channel_oper_allowed(wdev) &&
10724 !cfg80211_chandef_identical(&wdev->chandef, &chandef)) {
10725 compat_chandef = cfg80211_chandef_compatible(&wdev->chandef,
10726 &chandef);
10727 if (compat_chandef != &chandef) {
10728 wdev_unlock(wdev);
10729 return -EBUSY;
10730 }
10731 }
10732 wdev_unlock(wdev);
10733
9588bbd5 10734 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 10735 if (!msg)
10736 return -ENOMEM;
9588bbd5 10737
15e47304 10738 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5 10739 NL80211_CMD_REMAIN_ON_CHANNEL);
cb35fba3
DC		 10740 if (!hdr) {
10741 err = -ENOBUFS;
9588bbd5
JM		 10742 goto free_msg;
10743 }
10744
683b6d3b
JB		 10745 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
10746 duration, &cookie);
9588bbd5
JM		 10747
10748 if (err)
10749 goto free_msg;
10750
2dad624e
ND		 10751 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
10752 NL80211_ATTR_PAD))
9360ffd1 10753 goto nla_put_failure;
9588bbd5
JM		 10754
10755 genlmsg_end(msg, hdr);
4c476991
JB		 10756
10757 return genlmsg_reply(msg, info);
9588bbd5
JM		 10758
10759 nla_put_failure:
10760 err = -ENOBUFS;
10761 free_msg:
10762 nlmsg_free(msg);
9588bbd5
JM		 10763 return err;
10764}
10765
10766static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
10767 struct genl_info *info)
10768{
4c476991 10769 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10770 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 10771 u64 cookie;
9588bbd5
JM		 10772
10773 if (!info->attrs[NL80211_ATTR_COOKIE])
10774 return -EINVAL;
10775
4c476991
JB		 10776 if (!rdev->ops->cancel_remain_on_channel)
10777 return -EOPNOTSUPP;
9588bbd5 10778
9588bbd5
JM		 10779 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
10780
e35e4d28 10781 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 10782}
10783
13ae75b1
JM		 10784static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
10785 struct genl_info *info)
10786{
13ae75b1 10787 struct cfg80211_bitrate_mask mask;
a7c7fbff 10788 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 10789 struct net_device *dev = info->user_ptr[1];
a7c7fbff 10790 int err;
13ae75b1 10791
4c476991
JB		 10792 if (!rdev->ops->set_bitrate_mask)
10793 return -EOPNOTSUPP;
13ae75b1 10794
9a5f6488
TC		 10795 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
10796 NL80211_ATTR_TX_RATES, &mask);
a7c7fbff
PK		 10797 if (err)
10798 return err;
13ae75b1 10799
e35e4d28 10800 return rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
13ae75b1
JM		 10801}
10802
2e161f78 10803static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 10804{
4c476991 10805 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10806 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 10807 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 10808
10809 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
10810 return -EINVAL;
10811
2e161f78
JB		 10812 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
10813 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 10814
71bbc994
JB		 10815 switch (wdev->iftype) {
10816 case NL80211_IFTYPE_STATION:
10817 case NL80211_IFTYPE_ADHOC:
10818 case NL80211_IFTYPE_P2P_CLIENT:
10819 case NL80211_IFTYPE_AP:
10820 case NL80211_IFTYPE_AP_VLAN:
10821 case NL80211_IFTYPE_MESH_POINT:
10822 case NL80211_IFTYPE_P2P_GO:
98104fde 10823 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 10824 break;
cb3b7d87 10825 case NL80211_IFTYPE_NAN:
71bbc994 10826 default:
4c476991 10827 return -EOPNOTSUPP;
71bbc994 10828 }
026331c4
JM		 10829
10830 /* not much point in registering if we can't reply */
4c476991
JB		 10831 if (!rdev->ops->mgmt_tx)
10832 return -EOPNOTSUPP;
026331c4 10833
9dba48a6
JB		 10834 if (info->attrs[NL80211_ATTR_RECEIVE_MULTICAST] &&
10835 !wiphy_ext_feature_isset(&rdev->wiphy,
10836 NL80211_EXT_FEATURE_MULTICAST_REGISTRATIONS)) {
10837 GENL_SET_ERR_MSG(info,
10838 "multicast RX registrations are not supported");
10839 return -EOPNOTSUPP;
10840 }
10841
15e47304 10842 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
ff74c51e
IP		 10843 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
10844 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]),
9dba48a6 10845 info->attrs[NL80211_ATTR_RECEIVE_MULTICAST],
ff74c51e 10846 info->extack);
026331c4
JM		 10847}
10848
2e161f78 10849static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 10850{
4c476991 10851 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10852 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 10853 struct cfg80211_chan_def chandef;
026331c4 10854 int err;
d64d373f 10855 void *hdr = NULL;
026331c4 10856 u64 cookie;
e247bd90 10857 struct sk_buff *msg = NULL;
b176e629
AO		 10858 struct cfg80211_mgmt_tx_params params = {
10859 .dont_wait_for_ack =
10860 info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK],
10861 };
026331c4 10862
683b6d3b 10863 if (!info->attrs[NL80211_ATTR_FRAME])
026331c4
JM		 10864 return -EINVAL;
10865
4c476991
JB		 10866 if (!rdev->ops->mgmt_tx)
10867 return -EOPNOTSUPP;
026331c4 10868
71bbc994 10869 switch (wdev->iftype) {
ea141b75
AQ		 10870 case NL80211_IFTYPE_P2P_DEVICE:
10871 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
10872 return -EINVAL;
71bbc994
JB		 10873 case NL80211_IFTYPE_STATION:
10874 case NL80211_IFTYPE_ADHOC:
10875 case NL80211_IFTYPE_P2P_CLIENT:
10876 case NL80211_IFTYPE_AP:
10877 case NL80211_IFTYPE_AP_VLAN:
10878 case NL80211_IFTYPE_MESH_POINT:
10879 case NL80211_IFTYPE_P2P_GO:
10880 break;
cb3b7d87 10881 case NL80211_IFTYPE_NAN:
71bbc994 10882 default:
4c476991 10883 return -EOPNOTSUPP;
71bbc994 10884 }
026331c4 10885
f7ca38df 10886 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 10887 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df 10888 return -EINVAL;
b176e629 10889 params.wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 10890
10891 /*
10892 * We should wait on the channel for at least a minimum amount
10893 * of time (10ms) but no longer than the driver supports.
10894 */
b176e629
AO		 10895 if (params.wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
10896 params.wait > rdev->wiphy.max_remain_on_channel_duration)
ebf348fc 10897 return -EINVAL;
f7ca38df
JB		 10898 }
10899
b176e629 10900 params.offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
f7ca38df 10901
b176e629 10902 if (params.offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
7c4ef712
JB		 10903 return -EINVAL;
10904
b176e629 10905 params.no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
e9f935e3 10906
ea141b75
AQ		 10907 /* get the channel if any has been specified, otherwise pass NULL to
10908 * the driver. The latter will use the current one
10909 */
10910 chandef.chan = NULL;
10911 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
10912 err = nl80211_parse_chandef(rdev, info, &chandef);
10913 if (err)
10914 return err;
10915 }
10916
b176e629 10917 if (!chandef.chan && params.offchan)
ea141b75 10918 return -EINVAL;
026331c4 10919
34373d12
VT		 10920 wdev_lock(wdev);
10921 if (params.offchan && !cfg80211_off_channel_oper_allowed(wdev)) {
10922 wdev_unlock(wdev);
10923 return -EBUSY;
10924 }
10925 wdev_unlock(wdev);
10926
34d22ce2
AO		 10927 params.buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
10928 params.len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
10929
10930 if (info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]) {
10931 int len = nla_len(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
10932 int i;
10933
10934 if (len % sizeof(u16))
10935 return -EINVAL;
10936
10937 params.n_csa_offsets = len / sizeof(u16);
10938 params.csa_offsets =
10939 nla_data(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
10940
10941 /* check that all the offsets fit the frame */
10942 for (i = 0; i < params.n_csa_offsets; i++) {
10943 if (params.csa_offsets[i] >= params.len)
10944 return -EINVAL;
10945 }
10946 }
10947
b176e629 10948 if (!params.dont_wait_for_ack) {
e247bd90
JB		 10949 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
10950 if (!msg)
10951 return -ENOMEM;
026331c4 10952
15e47304 10953 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 10954 NL80211_CMD_FRAME);
cb35fba3
DC		 10955 if (!hdr) {
10956 err = -ENOBUFS;
e247bd90
JB		 10957 goto free_msg;
10958 }
026331c4 10959 }
e247bd90 10960
b176e629
AO		 10961 params.chan = chandef.chan;
10962 err = cfg80211_mlme_mgmt_tx(rdev, wdev, &params, &cookie);
026331c4
JM		 10963 if (err)
10964 goto free_msg;
10965
e247bd90 10966 if (msg) {
2dad624e
ND		 10967 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
10968 NL80211_ATTR_PAD))
9360ffd1 10969 goto nla_put_failure;
026331c4 10970
e247bd90
JB		 10971 genlmsg_end(msg, hdr);
10972 return genlmsg_reply(msg, info);
10973 }
10974
10975 return 0;
026331c4
JM		 10976
10977 nla_put_failure:
10978 err = -ENOBUFS;
10979 free_msg:
10980 nlmsg_free(msg);
026331c4
JM		 10981 return err;
10982}
10983
f7ca38df
JB		 10984static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
10985{
10986 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 10987 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 10988 u64 cookie;
10989
10990 if (!info->attrs[NL80211_ATTR_COOKIE])
10991 return -EINVAL;
10992
10993 if (!rdev->ops->mgmt_tx_cancel_wait)
10994 return -EOPNOTSUPP;
10995
71bbc994
JB		 10996 switch (wdev->iftype) {
10997 case NL80211_IFTYPE_STATION:
10998 case NL80211_IFTYPE_ADHOC:
10999 case NL80211_IFTYPE_P2P_CLIENT:
11000 case NL80211_IFTYPE_AP:
11001 case NL80211_IFTYPE_AP_VLAN:
11002 case NL80211_IFTYPE_P2P_GO:
98104fde 11003 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 11004 break;
cb3b7d87 11005 case NL80211_IFTYPE_NAN:
71bbc994 11006 default:
f7ca38df 11007 return -EOPNOTSUPP;
71bbc994 11008 }
f7ca38df
JB		 11009
11010 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
11011
e35e4d28 11012 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 11013}
11014
ffb9eb3d
KV		 11015static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
11016{
4c476991 11017 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 11018 struct wireless_dev *wdev;
4c476991 11019 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 11020 u8 ps_state;
11021 bool state;
11022 int err;
11023
4c476991
JB		 11024 if (!info->attrs[NL80211_ATTR_PS_STATE])
11025 return -EINVAL;
ffb9eb3d
KV		 11026
11027 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
11028
ffb9eb3d
KV		 11029 wdev = dev->ieee80211_ptr;
11030
4c476991
JB		 11031 if (!rdev->ops->set_power_mgmt)
11032 return -EOPNOTSUPP;
ffb9eb3d
KV		 11033
11034 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
11035
11036 if (state == wdev->ps)
4c476991 11037 return 0;
ffb9eb3d 11038
e35e4d28 11039 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 11040 if (!err)
11041 wdev->ps = state;
ffb9eb3d
KV		 11042 return err;
11043}
11044
11045static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
11046{
4c476991 11047 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 11048 enum nl80211_ps_state ps_state;
11049 struct wireless_dev *wdev;
4c476991 11050 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 11051 struct sk_buff *msg;
11052 void *hdr;
11053 int err;
11054
ffb9eb3d
KV		 11055 wdev = dev->ieee80211_ptr;
11056
4c476991
JB		 11057 if (!rdev->ops->set_power_mgmt)
11058 return -EOPNOTSUPP;
ffb9eb3d
KV		 11059
11060 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 11061 if (!msg)
11062 return -ENOMEM;
ffb9eb3d 11063
15e47304 11064 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 11065 NL80211_CMD_GET_POWER_SAVE);
11066 if (!hdr) {
4c476991 11067 err = -ENOBUFS;
ffb9eb3d
KV		 11068 goto free_msg;
11069 }
11070
11071 if (wdev->ps)
11072 ps_state = NL80211_PS_ENABLED;
11073 else
11074 ps_state = NL80211_PS_DISABLED;
11075
9360ffd1
DM		 11076 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
11077 goto nla_put_failure;
ffb9eb3d
KV		 11078
11079 genlmsg_end(msg, hdr);
4c476991 11080 return genlmsg_reply(msg, info);
ffb9eb3d 11081
4c476991 11082 nla_put_failure:
ffb9eb3d 11083 err = -ENOBUFS;
4c476991 11084 free_msg:
ffb9eb3d 11085 nlmsg_free(msg);
ffb9eb3d
KV		 11086 return err;
11087}
11088
94e860f1
JB		 11089static const struct nla_policy
11090nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
4a4b8169 11091 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_BINARY },
d6dc1a38
JO		 11092 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
11093 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 11094 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
11095 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
11096 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
bee427b8 11097 [NL80211_ATTR_CQM_RSSI_LEVEL] = { .type = NLA_S32 },
d6dc1a38
JO		 11098};
11099
84f10708 11100static int nl80211_set_cqm_txe(struct genl_info *info,
d9d8b019 11101 u32 rate, u32 pkts, u32 intvl)
84f10708
TP		 11102{
11103 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84f10708 11104 struct net_device *dev = info->user_ptr[1];
1da5fcc8 11105 struct wireless_dev *wdev = dev->ieee80211_ptr;
84f10708 11106
d9d8b019 11107 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
84f10708
TP		 11108 return -EINVAL;
11109
84f10708
TP		 11110 if (!rdev->ops->set_cqm_txe_config)
11111 return -EOPNOTSUPP;
11112
11113 if (wdev->iftype != NL80211_IFTYPE_STATION &&
11114 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
11115 return -EOPNOTSUPP;
11116
e35e4d28 11117 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 11118}
11119
4a4b8169
AZ		 11120static int cfg80211_cqm_rssi_update(struct cfg80211_registered_device *rdev,
11121 struct net_device *dev)
11122{
11123 struct wireless_dev *wdev = dev->ieee80211_ptr;
11124 s32 last, low, high;
11125 u32 hyst;
1222a160 11126 int i, n, low_index;
4a4b8169
AZ		 11127 int err;
11128
11129 /* RSSI reporting disabled? */
11130 if (!wdev->cqm_config)
11131 return rdev_set_cqm_rssi_range_config(rdev, dev, 0, 0);
11132
11133 /*
11134 * Obtain current RSSI value if possible, if not and no RSSI threshold
11135 * event has been received yet, we should receive an event after a
11136 * connection is established and enough beacons received to calculate
11137 * the average.
11138 */
11139 if (!wdev->cqm_config->last_rssi_event_value && wdev->current_bss &&
11140 rdev->ops->get_station) {
73887fd9 11141 struct station_info sinfo = {};
4a4b8169
AZ		 11142 u8 *mac_addr;
11143
11144 mac_addr = wdev->current_bss->pub.bssid;
11145
73887fd9
JB		 11146 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
11147 if (err)
4a4b8169
AZ		 11148 return err;
11149
df16737d 11150 cfg80211_sinfo_release_content(&sinfo);
397c657a 11151 if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_BEACON_SIGNAL_AVG))
4a4b8169 11152 wdev->cqm_config->last_rssi_event_value =
73887fd9 11153 (s8) sinfo.rx_beacon_signal_avg;
4a4b8169
AZ		 11154 }
11155
11156 last = wdev->cqm_config->last_rssi_event_value;
11157 hyst = wdev->cqm_config->rssi_hyst;
11158 n = wdev->cqm_config->n_rssi_thresholds;
11159
4b2c5a14
MH		 11160 for (i = 0; i < n; i++) {
11161 i = array_index_nospec(i, n);
4a4b8169
AZ		 11162 if (last < wdev->cqm_config->rssi_thresholds[i])
11163 break;
4b2c5a14 11164 }
4a4b8169 11165
1222a160
MH		 11166 low_index = i - 1;
11167 if (low_index >= 0) {
11168 low_index = array_index_nospec(low_index, n);
11169 low = wdev->cqm_config->rssi_thresholds[low_index] - hyst;
11170 } else {
11171 low = S32_MIN;
11172 }
11173 if (i < n) {
11174 i = array_index_nospec(i, n);
11175 high = wdev->cqm_config->rssi_thresholds[i] + hyst - 1;
11176 } else {
11177 high = S32_MAX;
11178 }
4a4b8169
AZ		 11179
11180 return rdev_set_cqm_rssi_range_config(rdev, dev, low, high);
11181}
11182
d6dc1a38 11183static int nl80211_set_cqm_rssi(struct genl_info *info,
4a4b8169
AZ		 11184 const s32 *thresholds, int n_thresholds,
11185 u32 hysteresis)
d6dc1a38 11186{
4c476991 11187 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 11188 struct net_device *dev = info->user_ptr[1];
1da5fcc8 11189 struct wireless_dev *wdev = dev->ieee80211_ptr;
4a4b8169
AZ		 11190 int i, err;
11191 s32 prev = S32_MIN;
d6dc1a38 11192
4a4b8169
AZ		 11193 /* Check all values negative and sorted */
11194 for (i = 0; i < n_thresholds; i++) {
11195 if (thresholds[i] > 0 || thresholds[i] <= prev)
11196 return -EINVAL;
d6dc1a38 11197
4a4b8169
AZ		 11198 prev = thresholds[i];
11199 }
d6dc1a38 11200
074ac8df 11201 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11202 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
11203 return -EOPNOTSUPP;
d6dc1a38 11204
4a4b8169
AZ		 11205 wdev_lock(wdev);
11206 cfg80211_cqm_config_free(wdev);
11207 wdev_unlock(wdev);
11208
11209 if (n_thresholds <= 1 && rdev->ops->set_cqm_rssi_config) {
11210 if (n_thresholds == 0 || thresholds[0] == 0) /* Disabling */
11211 return rdev_set_cqm_rssi_config(rdev, dev, 0, 0);
11212
11213 return rdev_set_cqm_rssi_config(rdev, dev,
11214 thresholds[0], hysteresis);
11215 }
11216
11217 if (!wiphy_ext_feature_isset(&rdev->wiphy,
11218 NL80211_EXT_FEATURE_CQM_RSSI_LIST))
11219 return -EOPNOTSUPP;
11220
11221 if (n_thresholds == 1 && thresholds[0] == 0) /* Disabling */
11222 n_thresholds = 0;
11223
11224 wdev_lock(wdev);
11225 if (n_thresholds) {
11226 struct cfg80211_cqm_config *cqm_config;
11227
11228 cqm_config = kzalloc(sizeof(struct cfg80211_cqm_config) +
11229 n_thresholds * sizeof(s32), GFP_KERNEL);
11230 if (!cqm_config) {
11231 err = -ENOMEM;
11232 goto unlock;
11233 }
11234
11235 cqm_config->rssi_hyst = hysteresis;
11236 cqm_config->n_rssi_thresholds = n_thresholds;
11237 memcpy(cqm_config->rssi_thresholds, thresholds,
11238 n_thresholds * sizeof(s32));
11239
11240 wdev->cqm_config = cqm_config;
11241 }
11242
11243 err = cfg80211_cqm_rssi_update(rdev, dev);
11244
11245unlock:
11246 wdev_unlock(wdev);
11247
11248 return err;
d6dc1a38
JO		 11249}
11250
11251static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
11252{
11253 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
11254 struct nlattr *cqm;
11255 int err;
11256
11257 cqm = info->attrs[NL80211_ATTR_CQM];
1da5fcc8
JB		 11258 if (!cqm)
11259 return -EINVAL;
d6dc1a38 11260
8cb08174
JB		 11261 err = nla_parse_nested_deprecated(attrs, NL80211_ATTR_CQM_MAX, cqm,
11262 nl80211_attr_cqm_policy,
11263 info->extack);
d6dc1a38 11264 if (err)
1da5fcc8 11265 return err;
d6dc1a38
JO		 11266
11267 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
11268 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
4a4b8169
AZ		 11269 const s32 *thresholds =
11270 nla_data(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
11271 int len = nla_len(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
1da5fcc8 11272 u32 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
d6dc1a38 11273
4a4b8169
AZ		 11274 if (len % 4)
11275 return -EINVAL;
11276
11277 return nl80211_set_cqm_rssi(info, thresholds, len / 4,
11278 hysteresis);
1da5fcc8
JB		 11279 }
11280
11281 if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
11282 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
11283 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
11284 u32 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
11285 u32 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
11286 u32 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
11287
11288 return nl80211_set_cqm_txe(info, rate, pkts, intvl);
11289 }
11290
11291 return -EINVAL;
d6dc1a38
JO		 11292}
11293
6e0bd6c3
RL		 11294static int nl80211_join_ocb(struct sk_buff *skb, struct genl_info *info)
11295{
11296 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11297 struct net_device *dev = info->user_ptr[1];
11298 struct ocb_setup setup = {};
11299 int err;
11300
11301 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
11302 if (err)
11303 return err;
11304
11305 return cfg80211_join_ocb(rdev, dev, &setup);
11306}
11307
11308static int nl80211_leave_ocb(struct sk_buff *skb, struct genl_info *info)
11309{
11310 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11311 struct net_device *dev = info->user_ptr[1];
11312
11313 return cfg80211_leave_ocb(rdev, dev);
11314}
11315
29cbe68c
JB		 11316static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
11317{
11318 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11319 struct net_device *dev = info->user_ptr[1];
11320 struct mesh_config cfg;
c80d545d 11321 struct mesh_setup setup;
29cbe68c
JB		 11322 int err;
11323
11324 /* start with default */
11325 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 11326 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 11327
24bdd9f4 11328 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 11329 /* and parse parameters if given */
24bdd9f4 11330 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 11331 if (err)
11332 return err;
11333 }
11334
11335 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
11336 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
11337 return -EINVAL;
11338
c80d545d
JC		 11339 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
11340 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
11341
4bb62344
CYY		 11342 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
11343 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
11344 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
11345 return -EINVAL;
11346
9bdbf04d
MP		 11347 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
11348 setup.beacon_interval =
11349 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 11350
0c317a02
PK		 11351 err = cfg80211_validate_beacon_int(rdev,
11352 NL80211_IFTYPE_MESH_POINT,
11353 setup.beacon_interval);
12d20fc9
PK		 11354 if (err)
11355 return err;
9bdbf04d
MP		 11356 }
11357
11358 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
11359 setup.dtim_period =
11360 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
11361 if (setup.dtim_period < 1 || setup.dtim_period > 100)
11362 return -EINVAL;
11363 }
11364
c80d545d
JC		 11365 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
11366 /* parse additional setup parameters if given */
11367 err = nl80211_parse_mesh_setup(info, &setup);
11368 if (err)
11369 return err;
11370 }
11371
d37bb18a
TP		 11372 if (setup.user_mpm)
11373 cfg.auto_open_plinks = false;
11374
cc1d2806 11375 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 11376 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
11377 if (err)
11378 return err;
cc1d2806 11379 } else {
188c1b3c 11380 /* __cfg80211_join_mesh() will sort it out */
683b6d3b 11381 setup.chandef.chan = NULL;
cc1d2806
JB		 11382 }
11383
ffb3cf30
AN		 11384 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
11385 u8 *rates = nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11386 int n_rates =
11387 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11388 struct ieee80211_supported_band *sband;
11389
11390 if (!setup.chandef.chan)
11391 return -EINVAL;
11392
11393 sband = rdev->wiphy.bands[setup.chandef.chan->band];
11394
11395 err = ieee80211_get_ratemask(sband, rates, n_rates,
11396 &setup.basic_rates);
11397 if (err)
11398 return err;
11399 }
11400
8564e382 11401 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 11402 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
11403 NL80211_ATTR_TX_RATES,
11404 &setup.beacon_rate);
8564e382
JB		 11405 if (err)
11406 return err;
11407
265698d7
JB		 11408 if (!setup.chandef.chan)
11409 return -EINVAL;
11410
8564e382
JB		 11411 err = validate_beacon_tx_rate(rdev, setup.chandef.chan->band,
11412 &setup.beacon_rate);
11413 if (err)
11414 return err;
11415 }
11416
d37d49c2
BB		 11417 setup.userspace_handles_dfs =
11418 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
11419
1224f583
DK		 11420 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
11421 int r = validate_pae_over_nl80211(rdev, info);
11422
11423 if (r < 0)
11424 return r;
11425
11426 setup.control_port_over_nl80211 = true;
11427 }
11428
188c1b3c
DK		 11429 wdev_lock(dev->ieee80211_ptr);
11430 err = __cfg80211_join_mesh(rdev, dev, &setup, &cfg);
11431 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER])
11432 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11433 wdev_unlock(dev->ieee80211_ptr);
11434
11435 return err;
29cbe68c
JB		 11436}
11437
11438static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
11439{
11440 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11441 struct net_device *dev = info->user_ptr[1];
11442
11443 return cfg80211_leave_mesh(rdev, dev);
11444}
11445
dfb89c56 11446#ifdef CONFIG_PM
bb92d199
AK		 11447static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
11448 struct cfg80211_registered_device *rdev)
11449{
6abb9cb9 11450 struct cfg80211_wowlan *wowlan = rdev->wiphy.wowlan_config;
bb92d199
AK		 11451 struct nlattr *nl_pats, *nl_pat;
11452 int i, pat_len;
11453
6abb9cb9 11454 if (!wowlan->n_patterns)
bb92d199
AK		 11455 return 0;
11456
ae0be8de 11457 nl_pats = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
bb92d199
AK		 11458 if (!nl_pats)
11459 return -ENOBUFS;
11460
6abb9cb9 11461 for (i = 0; i < wowlan->n_patterns; i++) {
ae0be8de 11462 nl_pat = nla_nest_start_noflag(msg, i + 1);
bb92d199
AK		 11463 if (!nl_pat)
11464 return -ENOBUFS;
6abb9cb9 11465 pat_len = wowlan->patterns[i].pattern_len;
50ac6607 11466 if (nla_put(msg, NL80211_PKTPAT_MASK, DIV_ROUND_UP(pat_len, 8),
6abb9cb9 11467 wowlan->patterns[i].mask) ||
50ac6607
AK		 11468 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
11469 wowlan->patterns[i].pattern) ||
11470 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
6abb9cb9 11471 wowlan->patterns[i].pkt_offset))
bb92d199
AK		 11472 return -ENOBUFS;
11473 nla_nest_end(msg, nl_pat);
11474 }
11475 nla_nest_end(msg, nl_pats);
11476
11477 return 0;
11478}
11479
2a0e047e
JB		 11480static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
11481 struct cfg80211_wowlan_tcp *tcp)
11482{
11483 struct nlattr *nl_tcp;
11484
11485 if (!tcp)
11486 return 0;
11487
ae0be8de
MK		 11488 nl_tcp = nla_nest_start_noflag(msg,
11489 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
2a0e047e
JB		 11490 if (!nl_tcp)
11491 return -ENOBUFS;
11492
930345ea
JB		 11493 if (nla_put_in_addr(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
11494 nla_put_in_addr(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
2a0e047e
JB		 11495 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
11496 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
11497 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
11498 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
11499 tcp->payload_len, tcp->payload) ||
11500 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
11501 tcp->data_interval) ||
11502 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
11503 tcp->wake_len, tcp->wake_data) ||
11504 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
11505 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
11506 return -ENOBUFS;
11507
11508 if (tcp->payload_seq.len &&
11509 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
11510 sizeof(tcp->payload_seq), &tcp->payload_seq))
11511 return -ENOBUFS;
11512
11513 if (tcp->payload_tok.len &&
11514 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
11515 sizeof(tcp->payload_tok) + tcp->tokens_size,
11516 &tcp->payload_tok))
11517 return -ENOBUFS;
11518
e248ad30
JB		 11519 nla_nest_end(msg, nl_tcp);
11520
2a0e047e
JB		 11521 return 0;
11522}
11523
75453ccb
LC		 11524static int nl80211_send_wowlan_nd(struct sk_buff *msg,
11525 struct cfg80211_sched_scan_request *req)
11526{
3b06d277 11527 struct nlattr *nd, *freqs, *matches, *match, *scan_plans, *scan_plan;
75453ccb
LC		 11528 int i;
11529
11530 if (!req)
11531 return 0;
11532
ae0be8de 11533 nd = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_NET_DETECT);
75453ccb
LC		 11534 if (!nd)
11535 return -ENOBUFS;
11536
3b06d277
AS		 11537 if (req->n_scan_plans == 1 &&
11538 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_INTERVAL,
11539 req->scan_plans[0].interval * 1000))
75453ccb
LC		 11540 return -ENOBUFS;
11541
21fea567
LC		 11542 if (nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_DELAY, req->delay))
11543 return -ENOBUFS;
11544
bf95ecdb 11545 if (req->relative_rssi_set) {
11546 struct nl80211_bss_select_rssi_adjust rssi_adjust;
11547
11548 if (nla_put_s8(msg, NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI,
11549 req->relative_rssi))
11550 return -ENOBUFS;
11551
11552 rssi_adjust.band = req->rssi_adjust.band;
11553 rssi_adjust.delta = req->rssi_adjust.delta;
11554 if (nla_put(msg, NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST,
11555 sizeof(rssi_adjust), &rssi_adjust))
11556 return -ENOBUFS;
11557 }
11558
ae0be8de 11559 freqs = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_FREQUENCIES);
75453ccb
LC		 11560 if (!freqs)
11561 return -ENOBUFS;
11562
53b18980
JB		 11563 for (i = 0; i < req->n_channels; i++) {
11564 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
11565 return -ENOBUFS;
11566 }
75453ccb
LC		 11567
11568 nla_nest_end(msg, freqs);
11569
11570 if (req->n_match_sets) {
ae0be8de
MK		 11571 matches = nla_nest_start_noflag(msg,
11572 NL80211_ATTR_SCHED_SCAN_MATCH);
76e1fb4b
JB		 11573 if (!matches)
11574 return -ENOBUFS;
11575
75453ccb 11576 for (i = 0; i < req->n_match_sets; i++) {
ae0be8de 11577 match = nla_nest_start_noflag(msg, i);
76e1fb4b
JB		 11578 if (!match)
11579 return -ENOBUFS;
11580
53b18980
JB		 11581 if (nla_put(msg, NL80211_SCHED_SCAN_MATCH_ATTR_SSID,
11582 req->match_sets[i].ssid.ssid_len,
11583 req->match_sets[i].ssid.ssid))
11584 return -ENOBUFS;
75453ccb
LC		 11585 nla_nest_end(msg, match);
11586 }
11587 nla_nest_end(msg, matches);
11588 }
11589
ae0be8de 11590 scan_plans = nla_nest_start_noflag(msg, NL80211_ATTR_SCHED_SCAN_PLANS);
3b06d277
AS		 11591 if (!scan_plans)
11592 return -ENOBUFS;
11593
11594 for (i = 0; i < req->n_scan_plans; i++) {
ae0be8de 11595 scan_plan = nla_nest_start_noflag(msg, i + 1);
76e1fb4b
JB		 11596 if (!scan_plan)
11597 return -ENOBUFS;
11598
67626964 11599 if (nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_INTERVAL,
3b06d277
AS		 11600 req->scan_plans[i].interval) ||
11601 (req->scan_plans[i].iterations &&
11602 nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_ITERATIONS,
11603 req->scan_plans[i].iterations)))
11604 return -ENOBUFS;
11605 nla_nest_end(msg, scan_plan);
11606 }
11607 nla_nest_end(msg, scan_plans);
11608
75453ccb
LC		 11609 nla_nest_end(msg, nd);
11610
11611 return 0;
11612}
11613
ff1b6e69
JB		 11614static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
11615{
11616 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11617 struct sk_buff *msg;
11618 void *hdr;
2a0e047e 11619 u32 size = NLMSG_DEFAULT_SIZE;
ff1b6e69 11620
964dc9e2 11621 if (!rdev->wiphy.wowlan)
ff1b6e69
JB		 11622 return -EOPNOTSUPP;
11623
6abb9cb9 11624 if (rdev->wiphy.wowlan_config && rdev->wiphy.wowlan_config->tcp) {
2a0e047e 11625 /* adjust size to have room for all the data */
6abb9cb9
JB		 11626 size += rdev->wiphy.wowlan_config->tcp->tokens_size +
11627 rdev->wiphy.wowlan_config->tcp->payload_len +
11628 rdev->wiphy.wowlan_config->tcp->wake_len +
11629 rdev->wiphy.wowlan_config->tcp->wake_len / 8;
2a0e047e
JB		 11630 }
11631
11632 msg = nlmsg_new(size, GFP_KERNEL);
ff1b6e69
JB		 11633 if (!msg)
11634 return -ENOMEM;
11635
15e47304 11636 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 11637 NL80211_CMD_GET_WOWLAN);
11638 if (!hdr)
11639 goto nla_put_failure;
11640
6abb9cb9 11641 if (rdev->wiphy.wowlan_config) {
ff1b6e69
JB		 11642 struct nlattr *nl_wowlan;
11643
ae0be8de
MK		 11644 nl_wowlan = nla_nest_start_noflag(msg,
11645 NL80211_ATTR_WOWLAN_TRIGGERS);
ff1b6e69
JB		 11646 if (!nl_wowlan)
11647 goto nla_put_failure;
11648
6abb9cb9 11649 if ((rdev->wiphy.wowlan_config->any &&
9360ffd1 11650 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6abb9cb9 11651 (rdev->wiphy.wowlan_config->disconnect &&
9360ffd1 11652 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6abb9cb9 11653 (rdev->wiphy.wowlan_config->magic_pkt &&
9360ffd1 11654 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6abb9cb9 11655 (rdev->wiphy.wowlan_config->gtk_rekey_failure &&
9360ffd1 11656 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6abb9cb9 11657 (rdev->wiphy.wowlan_config->eap_identity_req &&
9360ffd1 11658 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6abb9cb9 11659 (rdev->wiphy.wowlan_config->four_way_handshake &&
9360ffd1 11660 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6abb9cb9 11661 (rdev->wiphy.wowlan_config->rfkill_release &&
9360ffd1
DM		 11662 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
11663 goto nla_put_failure;
2a0e047e 11664
bb92d199
AK		 11665 if (nl80211_send_wowlan_patterns(msg, rdev))
11666 goto nla_put_failure;
2a0e047e 11667
6abb9cb9
JB		 11668 if (nl80211_send_wowlan_tcp(msg,
11669 rdev->wiphy.wowlan_config->tcp))
2a0e047e 11670 goto nla_put_failure;
75453ccb
LC		 11671
11672 if (nl80211_send_wowlan_nd(
11673 msg,
11674 rdev->wiphy.wowlan_config->nd_config))
11675 goto nla_put_failure;
2a0e047e 11676
ff1b6e69
JB		 11677 nla_nest_end(msg, nl_wowlan);
11678 }
11679
11680 genlmsg_end(msg, hdr);
11681 return genlmsg_reply(msg, info);
11682
11683nla_put_failure:
11684 nlmsg_free(msg);
11685 return -ENOBUFS;
11686}
11687
2a0e047e
JB		 11688static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
11689 struct nlattr *attr,
11690 struct cfg80211_wowlan *trig)
11691{
11692 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
11693 struct cfg80211_wowlan_tcp *cfg;
11694 struct nl80211_wowlan_tcp_data_token *tok = NULL;
11695 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
11696 u32 size;
11697 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
11698 int err, port;
11699
964dc9e2 11700 if (!rdev->wiphy.wowlan->tcp)
2a0e047e
JB		 11701 return -EINVAL;
11702
8cb08174
JB		 11703 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TCP, attr,
11704 nl80211_wowlan_tcp_policy, NULL);
2a0e047e
JB		 11705 if (err)
11706 return err;
11707
11708 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
11709 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
11710 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
11711 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
11712 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
11713 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
11714 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
11715 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
11716 return -EINVAL;
11717
11718 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
964dc9e2 11719 if (data_size > rdev->wiphy.wowlan->tcp->data_payload_max)
2a0e047e
JB		 11720 return -EINVAL;
11721
11722 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
964dc9e2 11723 rdev->wiphy.wowlan->tcp->data_interval_max ||
723d568a 11724 nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) == 0)
2a0e047e
JB		 11725 return -EINVAL;
11726
11727 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
964dc9e2 11728 if (wake_size > rdev->wiphy.wowlan->tcp->wake_payload_max)
2a0e047e
JB		 11729 return -EINVAL;
11730
11731 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
11732 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
11733 return -EINVAL;
11734
11735 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
11736 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
11737
11738 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
11739 tokens_size = tokln - sizeof(*tok);
11740
11741 if (!tok->len || tokens_size % tok->len)
11742 return -EINVAL;
964dc9e2 11743 if (!rdev->wiphy.wowlan->tcp->tok)
2a0e047e 11744 return -EINVAL;
964dc9e2 11745 if (tok->len > rdev->wiphy.wowlan->tcp->tok->max_len)
2a0e047e 11746 return -EINVAL;
964dc9e2 11747 if (tok->len < rdev->wiphy.wowlan->tcp->tok->min_len)
2a0e047e 11748 return -EINVAL;
964dc9e2 11749 if (tokens_size > rdev->wiphy.wowlan->tcp->tok->bufsize)
2a0e047e
JB		 11750 return -EINVAL;
11751 if (tok->offset + tok->len > data_size)
11752 return -EINVAL;
11753 }
11754
11755 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
11756 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
964dc9e2 11757 if (!rdev->wiphy.wowlan->tcp->seq)
2a0e047e
JB		 11758 return -EINVAL;
11759 if (seq->len == 0 || seq->len > 4)
11760 return -EINVAL;
11761 if (seq->len + seq->offset > data_size)
11762 return -EINVAL;
11763 }
11764
11765 size = sizeof(*cfg);
11766 size += data_size;
11767 size += wake_size + wake_mask_size;
11768 size += tokens_size;
11769
11770 cfg = kzalloc(size, GFP_KERNEL);
11771 if (!cfg)
11772 return -ENOMEM;
67b61f6c
JB		 11773 cfg->src = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
11774 cfg->dst = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
2a0e047e
JB		 11775 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
11776 ETH_ALEN);
11777 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
11778 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
11779 else
11780 port = 0;
11781#ifdef CONFIG_INET
11782 /* allocate a socket and port for it and use it */
11783 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
11784 IPPROTO_TCP, &cfg->sock, 1);
11785 if (err) {
11786 kfree(cfg);
11787 return err;
11788 }
11789 if (inet_csk_get_port(cfg->sock->sk, port)) {
11790 sock_release(cfg->sock);
11791 kfree(cfg);
11792 return -EADDRINUSE;
11793 }
11794 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
11795#else
11796 if (!port) {
11797 kfree(cfg);
11798 return -EINVAL;
11799 }
11800 cfg->src_port = port;
11801#endif
11802
11803 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
11804 cfg->payload_len = data_size;
11805 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
11806 memcpy((void *)cfg->payload,
11807 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
11808 data_size);
11809 if (seq)
11810 cfg->payload_seq = *seq;
11811 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
11812 cfg->wake_len = wake_size;
11813 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
11814 memcpy((void *)cfg->wake_data,
11815 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
11816 wake_size);
11817 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
11818 data_size + wake_size;
11819 memcpy((void *)cfg->wake_mask,
11820 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
11821 wake_mask_size);
11822 if (tok) {
11823 cfg->tokens_size = tokens_size;
11824 memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
11825 }
11826
11827 trig->tcp = cfg;
11828
11829 return 0;
11830}
11831
8cd4d456
LC		 11832static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
11833 const struct wiphy_wowlan_support *wowlan,
11834 struct nlattr *attr,
11835 struct cfg80211_wowlan *trig)
11836{
11837 struct nlattr **tb;
11838 int err;
11839
6396bb22 11840 tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
8cd4d456
LC		 11841 if (!tb)
11842 return -ENOMEM;
11843
11844 if (!(wowlan->flags & WIPHY_WOWLAN_NET_DETECT)) {
11845 err = -EOPNOTSUPP;
11846 goto out;
11847 }
11848
8cb08174
JB		 11849 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_MAX, attr,
11850 nl80211_policy, NULL);
8cd4d456
LC		 11851 if (err)
11852 goto out;
11853
aad1e812
AVS		 11854 trig->nd_config = nl80211_parse_sched_scan(&rdev->wiphy, NULL, tb,
11855 wowlan->max_nd_match_sets);
8cd4d456
LC		 11856 err = PTR_ERR_OR_ZERO(trig->nd_config);
11857 if (err)
11858 trig->nd_config = NULL;
11859
11860out:
11861 kfree(tb);
11862 return err;
11863}
11864
ff1b6e69
JB		 11865static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
11866{
11867 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11868 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 11869 struct cfg80211_wowlan new_triggers = {};
ae33bd81 11870 struct cfg80211_wowlan *ntrig;
964dc9e2 11871 const struct wiphy_wowlan_support *wowlan = rdev->wiphy.wowlan;
ff1b6e69 11872 int err, i;
6abb9cb9 11873 bool prev_enabled = rdev->wiphy.wowlan_config;
98fc4386 11874 bool regular = false;
ff1b6e69 11875
964dc9e2 11876 if (!wowlan)
ff1b6e69
JB		 11877 return -EOPNOTSUPP;
11878
ae33bd81
JB		 11879 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
11880 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 11881 rdev->wiphy.wowlan_config = NULL;
ae33bd81
JB		 11882 goto set_wakeup;
11883 }
ff1b6e69 11884
8cb08174
JB		 11885 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TRIG,
11886 info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS],
11887 nl80211_wowlan_policy, info->extack);
ff1b6e69
JB		 11888 if (err)
11889 return err;
11890
11891 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
11892 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
11893 return -EINVAL;
11894 new_triggers.any = true;
11895 }
11896
11897 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
11898 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
11899 return -EINVAL;
11900 new_triggers.disconnect = true;
98fc4386 11901 regular = true;
ff1b6e69
JB		 11902 }
11903
11904 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
11905 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
11906 return -EINVAL;
11907 new_triggers.magic_pkt = true;
98fc4386 11908 regular = true;
ff1b6e69
JB		 11909 }
11910
77dbbb13
JB		 11911 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
11912 return -EINVAL;
11913
11914 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
11915 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
11916 return -EINVAL;
11917 new_triggers.gtk_rekey_failure = true;
98fc4386 11918 regular = true;
77dbbb13
JB		 11919 }
11920
11921 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
11922 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
11923 return -EINVAL;
11924 new_triggers.eap_identity_req = true;
98fc4386 11925 regular = true;
77dbbb13
JB		 11926 }
11927
11928 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
11929 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
11930 return -EINVAL;
11931 new_triggers.four_way_handshake = true;
98fc4386 11932 regular = true;
77dbbb13
JB		 11933 }
11934
11935 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
11936 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
11937 return -EINVAL;
11938 new_triggers.rfkill_release = true;
98fc4386 11939 regular = true;
77dbbb13
JB		 11940 }
11941
ff1b6e69
JB		 11942 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
11943 struct nlattr *pat;
11944 int n_patterns = 0;
bb92d199 11945 int rem, pat_len, mask_len, pkt_offset;
50ac6607 11946 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
ff1b6e69 11947
98fc4386
JB		 11948 regular = true;
11949
ff1b6e69
JB		 11950 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
11951 rem)
11952 n_patterns++;
11953 if (n_patterns > wowlan->n_patterns)
11954 return -EINVAL;
11955
11956 new_triggers.patterns = kcalloc(n_patterns,
11957 sizeof(new_triggers.patterns[0]),
11958 GFP_KERNEL);
11959 if (!new_triggers.patterns)
11960 return -ENOMEM;
11961
11962 new_triggers.n_patterns = n_patterns;
11963 i = 0;
11964
11965 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
11966 rem) {
922bd80f
JB		 11967 u8 *mask_pat;
11968
8cb08174
JB		 11969 err = nla_parse_nested_deprecated(pat_tb,
11970 MAX_NL80211_PKTPAT,
11971 pat,
11972 nl80211_packet_pattern_policy,
11973 info->extack);
95bca62f
JB		 11974 if (err)
11975 goto error;
11976
ff1b6e69 11977 err = -EINVAL;
50ac6607
AK		 11978 if (!pat_tb[NL80211_PKTPAT_MASK] ||
11979 !pat_tb[NL80211_PKTPAT_PATTERN])
ff1b6e69 11980 goto error;
50ac6607 11981 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
ff1b6e69 11982 mask_len = DIV_ROUND_UP(pat_len, 8);
50ac6607 11983 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
ff1b6e69
JB		 11984 goto error;
11985 if (pat_len > wowlan->pattern_max_len ||
11986 pat_len < wowlan->pattern_min_len)
11987 goto error;
11988
50ac6607 11989 if (!pat_tb[NL80211_PKTPAT_OFFSET])
bb92d199
AK		 11990 pkt_offset = 0;
11991 else
11992 pkt_offset = nla_get_u32(
50ac6607 11993 pat_tb[NL80211_PKTPAT_OFFSET]);
bb92d199
AK		 11994 if (pkt_offset > wowlan->max_pkt_offset)
11995 goto error;
11996 new_triggers.patterns[i].pkt_offset = pkt_offset;
11997
922bd80f
JB		 11998 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
11999 if (!mask_pat) {
ff1b6e69
JB		 12000 err = -ENOMEM;
12001 goto error;
12002 }
922bd80f
JB		 12003 new_triggers.patterns[i].mask = mask_pat;
12004 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
ff1b6e69 12005 mask_len);
922bd80f
JB		 12006 mask_pat += mask_len;
12007 new_triggers.patterns[i].pattern = mask_pat;
ff1b6e69 12008 new_triggers.patterns[i].pattern_len = pat_len;
922bd80f 12009 memcpy(mask_pat,
50ac6607 12010 nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
ff1b6e69
JB		 12011 pat_len);
12012 i++;
12013 }
12014 }
12015
2a0e047e 12016 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
98fc4386 12017 regular = true;
2a0e047e
JB		 12018 err = nl80211_parse_wowlan_tcp(
12019 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
12020 &new_triggers);
12021 if (err)
12022 goto error;
12023 }
12024
8cd4d456 12025 if (tb[NL80211_WOWLAN_TRIG_NET_DETECT]) {
98fc4386 12026 regular = true;
8cd4d456
LC		 12027 err = nl80211_parse_wowlan_nd(
12028 rdev, wowlan, tb[NL80211_WOWLAN_TRIG_NET_DETECT],
12029 &new_triggers);
12030 if (err)
12031 goto error;
12032 }
12033
98fc4386
JB		 12034 /* The 'any' trigger means the device continues operating more or less
12035 * as in its normal operation mode and wakes up the host on most of the
12036 * normal interrupts (like packet RX, ...)
12037 * It therefore makes little sense to combine with the more constrained
12038 * wakeup trigger modes.
12039 */
12040 if (new_triggers.any && regular) {
12041 err = -EINVAL;
12042 goto error;
12043 }
12044
ae33bd81
JB		 12045 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
12046 if (!ntrig) {
12047 err = -ENOMEM;
12048 goto error;
ff1b6e69 12049 }
ae33bd81 12050 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 12051 rdev->wiphy.wowlan_config = ntrig;
ff1b6e69 12052
ae33bd81 12053 set_wakeup:
6abb9cb9
JB		 12054 if (rdev->ops->set_wakeup &&
12055 prev_enabled != !!rdev->wiphy.wowlan_config)
12056 rdev_set_wakeup(rdev, rdev->wiphy.wowlan_config);
6d52563f 12057
ff1b6e69
JB		 12058 return 0;
12059 error:
12060 for (i = 0; i < new_triggers.n_patterns; i++)
12061 kfree(new_triggers.patterns[i].mask);
12062 kfree(new_triggers.patterns);
2a0e047e
JB		 12063 if (new_triggers.tcp && new_triggers.tcp->sock)
12064 sock_release(new_triggers.tcp->sock);
12065 kfree(new_triggers.tcp);
e5dbe070 12066 kfree(new_triggers.nd_config);
ff1b6e69
JB		 12067 return err;
12068}
dfb89c56 12069#endif
ff1b6e69 12070
be29b99a
AK		 12071static int nl80211_send_coalesce_rules(struct sk_buff *msg,
12072 struct cfg80211_registered_device *rdev)
12073{
12074 struct nlattr *nl_pats, *nl_pat, *nl_rule, *nl_rules;
12075 int i, j, pat_len;
12076 struct cfg80211_coalesce_rules *rule;
12077
12078 if (!rdev->coalesce->n_rules)
12079 return 0;
12080
ae0be8de 12081 nl_rules = nla_nest_start_noflag(msg, NL80211_ATTR_COALESCE_RULE);
be29b99a
AK		 12082 if (!nl_rules)
12083 return -ENOBUFS;
12084
12085 for (i = 0; i < rdev->coalesce->n_rules; i++) {
ae0be8de 12086 nl_rule = nla_nest_start_noflag(msg, i + 1);
be29b99a
AK		 12087 if (!nl_rule)
12088 return -ENOBUFS;
12089
12090 rule = &rdev->coalesce->rules[i];
12091 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_DELAY,
12092 rule->delay))
12093 return -ENOBUFS;
12094
12095 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_CONDITION,
12096 rule->condition))
12097 return -ENOBUFS;
12098
ae0be8de
MK		 12099 nl_pats = nla_nest_start_noflag(msg,
12100 NL80211_ATTR_COALESCE_RULE_PKT_PATTERN);
be29b99a
AK		 12101 if (!nl_pats)
12102 return -ENOBUFS;
12103
12104 for (j = 0; j < rule->n_patterns; j++) {
ae0be8de 12105 nl_pat = nla_nest_start_noflag(msg, j + 1);
be29b99a
AK		 12106 if (!nl_pat)
12107 return -ENOBUFS;
12108 pat_len = rule->patterns[j].pattern_len;
12109 if (nla_put(msg, NL80211_PKTPAT_MASK,
12110 DIV_ROUND_UP(pat_len, 8),
12111 rule->patterns[j].mask) ||
12112 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
12113 rule->patterns[j].pattern) ||
12114 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
12115 rule->patterns[j].pkt_offset))
12116 return -ENOBUFS;
12117 nla_nest_end(msg, nl_pat);
12118 }
12119 nla_nest_end(msg, nl_pats);
12120 nla_nest_end(msg, nl_rule);
12121 }
12122 nla_nest_end(msg, nl_rules);
12123
12124 return 0;
12125}
12126
12127static int nl80211_get_coalesce(struct sk_buff *skb, struct genl_info *info)
12128{
12129 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12130 struct sk_buff *msg;
12131 void *hdr;
12132
12133 if (!rdev->wiphy.coalesce)
12134 return -EOPNOTSUPP;
12135
12136 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12137 if (!msg)
12138 return -ENOMEM;
12139
12140 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
12141 NL80211_CMD_GET_COALESCE);
12142 if (!hdr)
12143 goto nla_put_failure;
12144
12145 if (rdev->coalesce && nl80211_send_coalesce_rules(msg, rdev))
12146 goto nla_put_failure;
12147
12148 genlmsg_end(msg, hdr);
12149 return genlmsg_reply(msg, info);
12150
12151nla_put_failure:
12152 nlmsg_free(msg);
12153 return -ENOBUFS;
12154}
12155
12156void cfg80211_rdev_free_coalesce(struct cfg80211_registered_device *rdev)
12157{
12158 struct cfg80211_coalesce *coalesce = rdev->coalesce;
12159 int i, j;
12160 struct cfg80211_coalesce_rules *rule;
12161
12162 if (!coalesce)
12163 return;
12164
12165 for (i = 0; i < coalesce->n_rules; i++) {
12166 rule = &coalesce->rules[i];
12167 for (j = 0; j < rule->n_patterns; j++)
12168 kfree(rule->patterns[j].mask);
12169 kfree(rule->patterns);
12170 }
12171 kfree(coalesce->rules);
12172 kfree(coalesce);
12173 rdev->coalesce = NULL;
12174}
12175
12176static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
12177 struct nlattr *rule,
12178 struct cfg80211_coalesce_rules *new_rule)
12179{
12180 int err, i;
12181 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
12182 struct nlattr *tb[NUM_NL80211_ATTR_COALESCE_RULE], *pat;
12183 int rem, pat_len, mask_len, pkt_offset, n_patterns = 0;
12184 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
12185
8cb08174
JB		 12186 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_COALESCE_RULE_MAX,
12187 rule, nl80211_coalesce_policy, NULL);
be29b99a
AK		 12188 if (err)
12189 return err;
12190
12191 if (tb[NL80211_ATTR_COALESCE_RULE_DELAY])
12192 new_rule->delay =
12193 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_DELAY]);
12194 if (new_rule->delay > coalesce->max_delay)
12195 return -EINVAL;
12196
12197 if (tb[NL80211_ATTR_COALESCE_RULE_CONDITION])
12198 new_rule->condition =
12199 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_CONDITION]);
be29b99a
AK		 12200
12201 if (!tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN])
12202 return -EINVAL;
12203
12204 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
12205 rem)
12206 n_patterns++;
12207 if (n_patterns > coalesce->n_patterns)
12208 return -EINVAL;
12209
12210 new_rule->patterns = kcalloc(n_patterns, sizeof(new_rule->patterns[0]),
12211 GFP_KERNEL);
12212 if (!new_rule->patterns)
12213 return -ENOMEM;
12214
12215 new_rule->n_patterns = n_patterns;
12216 i = 0;
12217
12218 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
12219 rem) {
922bd80f
JB		 12220 u8 *mask_pat;
12221
8cb08174
JB		 12222 err = nla_parse_nested_deprecated(pat_tb, MAX_NL80211_PKTPAT,
12223 pat,
12224 nl80211_packet_pattern_policy,
12225 NULL);
95bca62f
JB		 12226 if (err)
12227 return err;
12228
be29b99a
AK		 12229 if (!pat_tb[NL80211_PKTPAT_MASK] ||
12230 !pat_tb[NL80211_PKTPAT_PATTERN])
12231 return -EINVAL;
12232 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
12233 mask_len = DIV_ROUND_UP(pat_len, 8);
12234 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
12235 return -EINVAL;
12236 if (pat_len > coalesce->pattern_max_len ||
12237 pat_len < coalesce->pattern_min_len)
12238 return -EINVAL;
12239
12240 if (!pat_tb[NL80211_PKTPAT_OFFSET])
12241 pkt_offset = 0;
12242 else
12243 pkt_offset = nla_get_u32(pat_tb[NL80211_PKTPAT_OFFSET]);
12244 if (pkt_offset > coalesce->max_pkt_offset)
12245 return -EINVAL;
12246 new_rule->patterns[i].pkt_offset = pkt_offset;
12247
922bd80f
JB		 12248 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
12249 if (!mask_pat)
be29b99a 12250 return -ENOMEM;
922bd80f
JB		 12251
12252 new_rule->patterns[i].mask = mask_pat;
12253 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
12254 mask_len);
12255
12256 mask_pat += mask_len;
12257 new_rule->patterns[i].pattern = mask_pat;
be29b99a 12258 new_rule->patterns[i].pattern_len = pat_len;
922bd80f
JB		 12259 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
12260 pat_len);
be29b99a
AK		 12261 i++;
12262 }
12263
12264 return 0;
12265}
12266
12267static int nl80211_set_coalesce(struct sk_buff *skb, struct genl_info *info)
12268{
12269 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12270 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
12271 struct cfg80211_coalesce new_coalesce = {};
12272 struct cfg80211_coalesce *n_coalesce;
12273 int err, rem_rule, n_rules = 0, i, j;
12274 struct nlattr *rule;
12275 struct cfg80211_coalesce_rules *tmp_rule;
12276
12277 if (!rdev->wiphy.coalesce || !rdev->ops->set_coalesce)
12278 return -EOPNOTSUPP;
12279
12280 if (!info->attrs[NL80211_ATTR_COALESCE_RULE]) {
12281 cfg80211_rdev_free_coalesce(rdev);
a1056b1b 12282 rdev_set_coalesce(rdev, NULL);
be29b99a
AK		 12283 return 0;
12284 }
12285
12286 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
12287 rem_rule)
12288 n_rules++;
12289 if (n_rules > coalesce->n_rules)
12290 return -EINVAL;
12291
12292 new_coalesce.rules = kcalloc(n_rules, sizeof(new_coalesce.rules[0]),
12293 GFP_KERNEL);
12294 if (!new_coalesce.rules)
12295 return -ENOMEM;
12296
12297 new_coalesce.n_rules = n_rules;
12298 i = 0;
12299
12300 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
12301 rem_rule) {
12302 err = nl80211_parse_coalesce_rule(rdev, rule,
12303 &new_coalesce.rules[i]);
12304 if (err)
12305 goto error;
12306
12307 i++;
12308 }
12309
a1056b1b 12310 err = rdev_set_coalesce(rdev, &new_coalesce);
be29b99a
AK		 12311 if (err)
12312 goto error;
12313
12314 n_coalesce = kmemdup(&new_coalesce, sizeof(new_coalesce), GFP_KERNEL);
12315 if (!n_coalesce) {
12316 err = -ENOMEM;
12317 goto error;
12318 }
12319 cfg80211_rdev_free_coalesce(rdev);
12320 rdev->coalesce = n_coalesce;
12321
12322 return 0;
12323error:
12324 for (i = 0; i < new_coalesce.n_rules; i++) {
12325 tmp_rule = &new_coalesce.rules[i];
12326 for (j = 0; j < tmp_rule->n_patterns; j++)
12327 kfree(tmp_rule->patterns[j].mask);
12328 kfree(tmp_rule->patterns);
12329 }
12330 kfree(new_coalesce.rules);
12331
12332 return err;
12333}
12334
e5497d76
JB		 12335static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
12336{
12337 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12338 struct net_device *dev = info->user_ptr[1];
12339 struct wireless_dev *wdev = dev->ieee80211_ptr;
12340 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
12341 struct cfg80211_gtk_rekey_data rekey_data;
12342 int err;
12343
12344 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
12345 return -EINVAL;
12346
8cb08174
JB		 12347 err = nla_parse_nested_deprecated(tb, MAX_NL80211_REKEY_DATA,
12348 info->attrs[NL80211_ATTR_REKEY_DATA],
12349 nl80211_rekey_policy, info->extack);
e5497d76
JB		 12350 if (err)
12351 return err;
12352
e785fa0a
VD		 12353 if (!tb[NL80211_REKEY_DATA_REPLAY_CTR] || !tb[NL80211_REKEY_DATA_KEK] ||
12354 !tb[NL80211_REKEY_DATA_KCK])
12355 return -EINVAL;
e5497d76
JB		 12356 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
12357 return -ERANGE;
093a48d2
NE		 12358 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN &&
12359 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
12360 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KEK_EXT_LEN))
e5497d76 12361 return -ERANGE;
093a48d2
NE		 12362 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN &&
12363 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
12364 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KCK_EXT_LEN))
e5497d76
JB		 12365 return -ERANGE;
12366
78f686ca
JB		 12367 rekey_data.kek = nla_data(tb[NL80211_REKEY_DATA_KEK]);
12368 rekey_data.kck = nla_data(tb[NL80211_REKEY_DATA_KCK]);
12369 rekey_data.replay_ctr = nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]);
093a48d2
NE		 12370 rekey_data.kek_len = nla_len(tb[NL80211_REKEY_DATA_KEK]);
12371 rekey_data.kck_len = nla_len(tb[NL80211_REKEY_DATA_KCK]);
12372 if (tb[NL80211_REKEY_DATA_AKM])
12373 rekey_data.akm = nla_get_u32(tb[NL80211_REKEY_DATA_AKM]);
e5497d76
JB		 12374
12375 wdev_lock(wdev);
12376 if (!wdev->current_bss) {
12377 err = -ENOTCONN;
12378 goto out;
12379 }
12380
12381 if (!rdev->ops->set_rekey_data) {
12382 err = -EOPNOTSUPP;
12383 goto out;
12384 }
12385
e35e4d28 12386 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 12387 out:
12388 wdev_unlock(wdev);
12389 return err;
12390}
12391
28946da7
JB		 12392static int nl80211_register_unexpected_frame(struct sk_buff *skb,
12393 struct genl_info *info)
12394{
12395 struct net_device *dev = info->user_ptr[1];
12396 struct wireless_dev *wdev = dev->ieee80211_ptr;
12397
12398 if (wdev->iftype != NL80211_IFTYPE_AP &&
12399 wdev->iftype != NL80211_IFTYPE_P2P_GO)
12400 return -EINVAL;
12401
15e47304 12402 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 12403 return -EBUSY;
12404
15e47304 12405 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 12406 return 0;
12407}
12408
7f6cf311
JB		 12409static int nl80211_probe_client(struct sk_buff *skb,
12410 struct genl_info *info)
12411{
12412 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12413 struct net_device *dev = info->user_ptr[1];
12414 struct wireless_dev *wdev = dev->ieee80211_ptr;
12415 struct sk_buff *msg;
12416 void *hdr;
12417 const u8 *addr;
12418 u64 cookie;
12419 int err;
12420
12421 if (wdev->iftype != NL80211_IFTYPE_AP &&
12422 wdev->iftype != NL80211_IFTYPE_P2P_GO)
12423 return -EOPNOTSUPP;
12424
12425 if (!info->attrs[NL80211_ATTR_MAC])
12426 return -EINVAL;
12427
12428 if (!rdev->ops->probe_client)
12429 return -EOPNOTSUPP;
12430
12431 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12432 if (!msg)
12433 return -ENOMEM;
12434
15e47304 12435 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311 12436 NL80211_CMD_PROBE_CLIENT);
cb35fba3
DC		 12437 if (!hdr) {
12438 err = -ENOBUFS;
7f6cf311
JB		 12439 goto free_msg;
12440 }
12441
12442 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
12443
e35e4d28 12444 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 12445 if (err)
12446 goto free_msg;
12447
2dad624e
ND		 12448 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12449 NL80211_ATTR_PAD))
9360ffd1 12450 goto nla_put_failure;
7f6cf311
JB		 12451
12452 genlmsg_end(msg, hdr);
12453
12454 return genlmsg_reply(msg, info);
12455
12456 nla_put_failure:
12457 err = -ENOBUFS;
12458 free_msg:
12459 nlmsg_free(msg);
12460 return err;
12461}
12462
5e760230
JB		 12463static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
12464{
12465 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 12466 struct cfg80211_beacon_registration *reg, *nreg;
12467 int rv;
5e760230
JB		 12468
12469 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
12470 return -EOPNOTSUPP;
12471
37c73b5f
BG		 12472 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
12473 if (!nreg)
12474 return -ENOMEM;
12475
12476 /* First, check if already registered. */
12477 spin_lock_bh(&rdev->beacon_registrations_lock);
12478 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
12479 if (reg->nlportid == info->snd_portid) {
12480 rv = -EALREADY;
12481 goto out_err;
12482 }
12483 }
12484 /* Add it to the list */
12485 nreg->nlportid = info->snd_portid;
12486 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 12487
37c73b5f 12488 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 12489
12490 return 0;
37c73b5f
BG		 12491out_err:
12492 spin_unlock_bh(&rdev->beacon_registrations_lock);
12493 kfree(nreg);
12494 return rv;
5e760230
JB		 12495}
12496
98104fde
JB		 12497static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
12498{
12499 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12500 struct wireless_dev *wdev = info->user_ptr[1];
12501 int err;
12502
12503 if (!rdev->ops->start_p2p_device)
12504 return -EOPNOTSUPP;
12505
12506 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
12507 return -EOPNOTSUPP;
12508
73c7da3d 12509 if (wdev_running(wdev))
98104fde
JB		 12510 return 0;
12511
b6a55015
LC		 12512 if (rfkill_blocked(rdev->rfkill))
12513 return -ERFKILL;
98104fde 12514
eeb126e9 12515 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 12516 if (err)
12517 return err;
12518
73c7da3d 12519 wdev->is_running = true;
98104fde 12520 rdev->opencount++;
98104fde
JB		 12521
12522 return 0;
12523}
12524
12525static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
12526{
12527 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12528 struct wireless_dev *wdev = info->user_ptr[1];
12529
12530 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
12531 return -EOPNOTSUPP;
12532
12533 if (!rdev->ops->stop_p2p_device)
12534 return -EOPNOTSUPP;
12535
f9f47529 12536 cfg80211_stop_p2p_device(rdev, wdev);
98104fde
JB		 12537
12538 return 0;
12539}
12540
cb3b7d87
AB		 12541static int nl80211_start_nan(struct sk_buff *skb, struct genl_info *info)
12542{
12543 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12544 struct wireless_dev *wdev = info->user_ptr[1];
12545 struct cfg80211_nan_conf conf = {};
12546 int err;
12547
12548 if (wdev->iftype != NL80211_IFTYPE_NAN)
12549 return -EOPNOTSUPP;
12550
eeb04a96 12551 if (wdev_running(wdev))
cb3b7d87
AB		 12552 return -EEXIST;
12553
12554 if (rfkill_blocked(rdev->rfkill))
12555 return -ERFKILL;
12556
12557 if (!info->attrs[NL80211_ATTR_NAN_MASTER_PREF])
12558 return -EINVAL;
12559
cb3b7d87
AB		 12560 conf.master_pref =
12561 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
cb3b7d87 12562
8585989d
LC		 12563 if (info->attrs[NL80211_ATTR_BANDS]) {
12564 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
12565
12566 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
12567 return -EOPNOTSUPP;
12568
12569 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
12570 return -EINVAL;
12571
12572 conf.bands = bands;
12573 }
cb3b7d87
AB		 12574
12575 err = rdev_start_nan(rdev, wdev, &conf);
12576 if (err)
12577 return err;
12578
73c7da3d 12579 wdev->is_running = true;
cb3b7d87
AB		 12580 rdev->opencount++;
12581
12582 return 0;
12583}
12584
12585static int nl80211_stop_nan(struct sk_buff *skb, struct genl_info *info)
12586{
12587 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12588 struct wireless_dev *wdev = info->user_ptr[1];
12589
12590 if (wdev->iftype != NL80211_IFTYPE_NAN)
12591 return -EOPNOTSUPP;
12592
12593 cfg80211_stop_nan(rdev, wdev);
12594
12595 return 0;
12596}
12597
a442b761
AB		 12598static int validate_nan_filter(struct nlattr *filter_attr)
12599{
12600 struct nlattr *attr;
12601 int len = 0, n_entries = 0, rem;
12602
12603 nla_for_each_nested(attr, filter_attr, rem) {
12604 len += nla_len(attr);
12605 n_entries++;
12606 }
12607
12608 if (len >= U8_MAX)
12609 return -EINVAL;
12610
12611 return n_entries;
12612}
12613
12614static int handle_nan_filter(struct nlattr *attr_filter,
12615 struct cfg80211_nan_func *func,
12616 bool tx)
12617{
12618 struct nlattr *attr;
12619 int n_entries, rem, i;
12620 struct cfg80211_nan_func_filter *filter;
12621
12622 n_entries = validate_nan_filter(attr_filter);
12623 if (n_entries < 0)
12624 return n_entries;
12625
12626 BUILD_BUG_ON(sizeof(*func->rx_filters) != sizeof(*func->tx_filters));
12627
12628 filter = kcalloc(n_entries, sizeof(*func->rx_filters), GFP_KERNEL);
12629 if (!filter)
12630 return -ENOMEM;
12631
12632 i = 0;
12633 nla_for_each_nested(attr, attr_filter, rem) {
b15ca182 12634 filter[i].filter = nla_memdup(attr, GFP_KERNEL);
a442b761
AB		 12635 filter[i].len = nla_len(attr);
12636 i++;
12637 }
12638 if (tx) {
12639 func->num_tx_filters = n_entries;
12640 func->tx_filters = filter;
12641 } else {
12642 func->num_rx_filters = n_entries;
12643 func->rx_filters = filter;
12644 }
12645
12646 return 0;
12647}
12648
12649static int nl80211_nan_add_func(struct sk_buff *skb,
12650 struct genl_info *info)
12651{
12652 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12653 struct wireless_dev *wdev = info->user_ptr[1];
12654 struct nlattr *tb[NUM_NL80211_NAN_FUNC_ATTR], *func_attr;
12655 struct cfg80211_nan_func *func;
12656 struct sk_buff *msg = NULL;
12657 void *hdr = NULL;
12658 int err = 0;
12659
12660 if (wdev->iftype != NL80211_IFTYPE_NAN)
12661 return -EOPNOTSUPP;
12662
73c7da3d 12663 if (!wdev_running(wdev))
a442b761
AB		 12664 return -ENOTCONN;
12665
12666 if (!info->attrs[NL80211_ATTR_NAN_FUNC])
12667 return -EINVAL;
12668
8cb08174
JB		 12669 err = nla_parse_nested_deprecated(tb, NL80211_NAN_FUNC_ATTR_MAX,
12670 info->attrs[NL80211_ATTR_NAN_FUNC],
12671 nl80211_nan_func_policy,
12672 info->extack);
a442b761
AB		 12673 if (err)
12674 return err;
12675
12676 func = kzalloc(sizeof(*func), GFP_KERNEL);
12677 if (!func)
12678 return -ENOMEM;
12679
b60ad348 12680 func->cookie = cfg80211_assign_cookie(rdev);
a442b761
AB		 12681
12682 if (!tb[NL80211_NAN_FUNC_TYPE] ||
12683 nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]) > NL80211_NAN_FUNC_MAX_TYPE) {
12684 err = -EINVAL;
12685 goto out;
12686 }
12687
12688
12689 func->type = nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]);
12690
12691 if (!tb[NL80211_NAN_FUNC_SERVICE_ID]) {
12692 err = -EINVAL;
12693 goto out;
12694 }
12695
12696 memcpy(func->service_id, nla_data(tb[NL80211_NAN_FUNC_SERVICE_ID]),
12697 sizeof(func->service_id));
12698
12699 func->close_range =
12700 nla_get_flag(tb[NL80211_NAN_FUNC_CLOSE_RANGE]);
12701
12702 if (tb[NL80211_NAN_FUNC_SERVICE_INFO]) {
12703 func->serv_spec_info_len =
12704 nla_len(tb[NL80211_NAN_FUNC_SERVICE_INFO]);
12705 func->serv_spec_info =
12706 kmemdup(nla_data(tb[NL80211_NAN_FUNC_SERVICE_INFO]),
12707 func->serv_spec_info_len,
12708 GFP_KERNEL);
12709 if (!func->serv_spec_info) {
12710 err = -ENOMEM;
12711 goto out;
12712 }
12713 }
12714
12715 if (tb[NL80211_NAN_FUNC_TTL])
12716 func->ttl = nla_get_u32(tb[NL80211_NAN_FUNC_TTL]);
12717
12718 switch (func->type) {
12719 case NL80211_NAN_FUNC_PUBLISH:
12720 if (!tb[NL80211_NAN_FUNC_PUBLISH_TYPE]) {
12721 err = -EINVAL;
12722 goto out;
12723 }
12724
12725 func->publish_type =
12726 nla_get_u8(tb[NL80211_NAN_FUNC_PUBLISH_TYPE]);
12727 func->publish_bcast =
12728 nla_get_flag(tb[NL80211_NAN_FUNC_PUBLISH_BCAST]);
12729
12730 if ((!(func->publish_type & NL80211_NAN_SOLICITED_PUBLISH)) &&
12731 func->publish_bcast) {
12732 err = -EINVAL;
12733 goto out;
12734 }
12735 break;
12736 case NL80211_NAN_FUNC_SUBSCRIBE:
12737 func->subscribe_active =
12738 nla_get_flag(tb[NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE]);
12739 break;
12740 case NL80211_NAN_FUNC_FOLLOW_UP:
12741 if (!tb[NL80211_NAN_FUNC_FOLLOW_UP_ID] ||
3ea15452
HC		 12742 !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] ||
12743 !tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]) {
a442b761
AB		 12744 err = -EINVAL;
12745 goto out;
12746 }
12747
12748 func->followup_id =
12749 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_ID]);
12750 func->followup_reqid =
12751 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID]);
12752 memcpy(func->followup_dest.addr,
12753 nla_data(tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]),
12754 sizeof(func->followup_dest.addr));
12755 if (func->ttl) {
12756 err = -EINVAL;
12757 goto out;
12758 }
12759 break;
12760 default:
12761 err = -EINVAL;
12762 goto out;
12763 }
12764
12765 if (tb[NL80211_NAN_FUNC_SRF]) {
12766 struct nlattr *srf_tb[NUM_NL80211_NAN_SRF_ATTR];
12767
8cb08174
JB		 12768 err = nla_parse_nested_deprecated(srf_tb,
12769 NL80211_NAN_SRF_ATTR_MAX,
12770 tb[NL80211_NAN_FUNC_SRF],
12771 nl80211_nan_srf_policy,
12772 info->extack);
a442b761
AB		 12773 if (err)
12774 goto out;
12775
12776 func->srf_include =
12777 nla_get_flag(srf_tb[NL80211_NAN_SRF_INCLUDE]);
12778
12779 if (srf_tb[NL80211_NAN_SRF_BF]) {
12780 if (srf_tb[NL80211_NAN_SRF_MAC_ADDRS] ||
12781 !srf_tb[NL80211_NAN_SRF_BF_IDX]) {
12782 err = -EINVAL;
12783 goto out;
12784 }
12785
12786 func->srf_bf_len =
12787 nla_len(srf_tb[NL80211_NAN_SRF_BF]);
12788 func->srf_bf =
12789 kmemdup(nla_data(srf_tb[NL80211_NAN_SRF_BF]),
12790 func->srf_bf_len, GFP_KERNEL);
12791 if (!func->srf_bf) {
12792 err = -ENOMEM;
12793 goto out;
12794 }
12795
12796 func->srf_bf_idx =
12797 nla_get_u8(srf_tb[NL80211_NAN_SRF_BF_IDX]);
12798 } else {
12799 struct nlattr *attr, *mac_attr =
12800 srf_tb[NL80211_NAN_SRF_MAC_ADDRS];
12801 int n_entries, rem, i = 0;
12802
12803 if (!mac_attr) {
12804 err = -EINVAL;
12805 goto out;
12806 }
12807
12808 n_entries = validate_acl_mac_addrs(mac_attr);
12809 if (n_entries <= 0) {
12810 err = -EINVAL;
12811 goto out;
12812 }
12813
12814 func->srf_num_macs = n_entries;
12815 func->srf_macs =
6396bb22 12816 kcalloc(n_entries, sizeof(*func->srf_macs),
a442b761
AB		 12817 GFP_KERNEL);
12818 if (!func->srf_macs) {
12819 err = -ENOMEM;
12820 goto out;
12821 }
12822
12823 nla_for_each_nested(attr, mac_attr, rem)
12824 memcpy(func->srf_macs[i++].addr, nla_data(attr),
12825 sizeof(*func->srf_macs));
12826 }
12827 }
12828
12829 if (tb[NL80211_NAN_FUNC_TX_MATCH_FILTER]) {
12830 err = handle_nan_filter(tb[NL80211_NAN_FUNC_TX_MATCH_FILTER],
12831 func, true);
12832 if (err)
12833 goto out;
12834 }
12835
12836 if (tb[NL80211_NAN_FUNC_RX_MATCH_FILTER]) {
12837 err = handle_nan_filter(tb[NL80211_NAN_FUNC_RX_MATCH_FILTER],
12838 func, false);
12839 if (err)
12840 goto out;
12841 }
12842
12843 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12844 if (!msg) {
12845 err = -ENOMEM;
12846 goto out;
12847 }
12848
12849 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
12850 NL80211_CMD_ADD_NAN_FUNCTION);
12851 /* This can't really happen - we just allocated 4KB */
12852 if (WARN_ON(!hdr)) {
12853 err = -ENOMEM;
12854 goto out;
12855 }
12856
12857 err = rdev_add_nan_func(rdev, wdev, func);
12858out:
12859 if (err < 0) {
12860 cfg80211_free_nan_func(func);
12861 nlmsg_free(msg);
12862 return err;
12863 }
12864
12865 /* propagate the instance id and cookie to userspace */
12866 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, func->cookie,
12867 NL80211_ATTR_PAD))
12868 goto nla_put_failure;
12869
ae0be8de 12870 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
a442b761
AB		 12871 if (!func_attr)
12872 goto nla_put_failure;
12873
12874 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID,
12875 func->instance_id))
12876 goto nla_put_failure;
12877
12878 nla_nest_end(msg, func_attr);
12879
12880 genlmsg_end(msg, hdr);
12881 return genlmsg_reply(msg, info);
12882
12883nla_put_failure:
12884 nlmsg_free(msg);
12885 return -ENOBUFS;
12886}
12887
12888static int nl80211_nan_del_func(struct sk_buff *skb,
12889 struct genl_info *info)
12890{
12891 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12892 struct wireless_dev *wdev = info->user_ptr[1];
12893 u64 cookie;
12894
12895 if (wdev->iftype != NL80211_IFTYPE_NAN)
12896 return -EOPNOTSUPP;
12897
73c7da3d 12898 if (!wdev_running(wdev))
a442b761
AB		 12899 return -ENOTCONN;
12900
12901 if (!info->attrs[NL80211_ATTR_COOKIE])
12902 return -EINVAL;
12903
a442b761
AB		 12904 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
12905
12906 rdev_del_nan_func(rdev, wdev, cookie);
12907
12908 return 0;
12909}
12910
a5a9dcf2
AB		 12911static int nl80211_nan_change_config(struct sk_buff *skb,
12912 struct genl_info *info)
12913{
12914 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12915 struct wireless_dev *wdev = info->user_ptr[1];
12916 struct cfg80211_nan_conf conf = {};
12917 u32 changed = 0;
12918
12919 if (wdev->iftype != NL80211_IFTYPE_NAN)
12920 return -EOPNOTSUPP;
12921
73c7da3d 12922 if (!wdev_running(wdev))
a5a9dcf2
AB		 12923 return -ENOTCONN;
12924
12925 if (info->attrs[NL80211_ATTR_NAN_MASTER_PREF]) {
12926 conf.master_pref =
12927 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
12928 if (conf.master_pref <= 1 || conf.master_pref == 255)
12929 return -EINVAL;
12930
12931 changed |= CFG80211_NAN_CONF_CHANGED_PREF;
12932 }
12933
8585989d
LC		 12934 if (info->attrs[NL80211_ATTR_BANDS]) {
12935 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
12936
12937 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
12938 return -EOPNOTSUPP;
12939
12940 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
12941 return -EINVAL;
12942
12943 conf.bands = bands;
12944 changed |= CFG80211_NAN_CONF_CHANGED_BANDS;
a5a9dcf2
AB		 12945 }
12946
12947 if (!changed)
12948 return -EINVAL;
12949
12950 return rdev_nan_change_conf(rdev, wdev, &conf, changed);
12951}
12952
50bcd31d
AB		 12953void cfg80211_nan_match(struct wireless_dev *wdev,
12954 struct cfg80211_nan_match_params *match, gfp_t gfp)
12955{
12956 struct wiphy *wiphy = wdev->wiphy;
12957 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
12958 struct nlattr *match_attr, *local_func_attr, *peer_func_attr;
12959 struct sk_buff *msg;
12960 void *hdr;
12961
12962 if (WARN_ON(!match->inst_id || !match->peer_inst_id || !match->addr))
12963 return;
12964
12965 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
12966 if (!msg)
12967 return;
12968
12969 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NAN_MATCH);
12970 if (!hdr) {
12971 nlmsg_free(msg);
12972 return;
12973 }
12974
12975 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
12976 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
12977 wdev->netdev->ifindex)) ||
12978 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
12979 NL80211_ATTR_PAD))
12980 goto nla_put_failure;
12981
12982 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, match->cookie,
12983 NL80211_ATTR_PAD) ||
12984 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, match->addr))
12985 goto nla_put_failure;
12986
ae0be8de 12987 match_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_MATCH);
50bcd31d
AB		 12988 if (!match_attr)
12989 goto nla_put_failure;
12990
ae0be8de
MK		 12991 local_func_attr = nla_nest_start_noflag(msg,
12992 NL80211_NAN_MATCH_FUNC_LOCAL);
50bcd31d
AB		 12993 if (!local_func_attr)
12994 goto nla_put_failure;
12995
12996 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->inst_id))
12997 goto nla_put_failure;
12998
12999 nla_nest_end(msg, local_func_attr);
13000
ae0be8de
MK		 13001 peer_func_attr = nla_nest_start_noflag(msg,
13002 NL80211_NAN_MATCH_FUNC_PEER);
50bcd31d
AB		 13003 if (!peer_func_attr)
13004 goto nla_put_failure;
13005
13006 if (nla_put_u8(msg, NL80211_NAN_FUNC_TYPE, match->type) ||
13007 nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->peer_inst_id))
13008 goto nla_put_failure;
13009
13010 if (match->info && match->info_len &&
13011 nla_put(msg, NL80211_NAN_FUNC_SERVICE_INFO, match->info_len,
13012 match->info))
13013 goto nla_put_failure;
13014
13015 nla_nest_end(msg, peer_func_attr);
13016 nla_nest_end(msg, match_attr);
13017 genlmsg_end(msg, hdr);
13018
13019 if (!wdev->owner_nlportid)
13020 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
13021 msg, 0, NL80211_MCGRP_NAN, gfp);
13022 else
13023 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
13024 wdev->owner_nlportid);
13025
13026 return;
13027
13028nla_put_failure:
13029 nlmsg_free(msg);
13030}
13031EXPORT_SYMBOL(cfg80211_nan_match);
13032
368e5a7b
AB		 13033void cfg80211_nan_func_terminated(struct wireless_dev *wdev,
13034 u8 inst_id,
13035 enum nl80211_nan_func_term_reason reason,
13036 u64 cookie, gfp_t gfp)
13037{
13038 struct wiphy *wiphy = wdev->wiphy;
13039 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
13040 struct sk_buff *msg;
13041 struct nlattr *func_attr;
13042 void *hdr;
13043
13044 if (WARN_ON(!inst_id))
13045 return;
13046
13047 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
13048 if (!msg)
13049 return;
13050
13051 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_NAN_FUNCTION);
13052 if (!hdr) {
13053 nlmsg_free(msg);
13054 return;
13055 }
13056
13057 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
13058 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
13059 wdev->netdev->ifindex)) ||
13060 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
13061 NL80211_ATTR_PAD))
13062 goto nla_put_failure;
13063
13064 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
13065 NL80211_ATTR_PAD))
13066 goto nla_put_failure;
13067
ae0be8de 13068 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
368e5a7b
AB		 13069 if (!func_attr)
13070 goto nla_put_failure;
13071
13072 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, inst_id) ||
13073 nla_put_u8(msg, NL80211_NAN_FUNC_TERM_REASON, reason))
13074 goto nla_put_failure;
13075
13076 nla_nest_end(msg, func_attr);
13077 genlmsg_end(msg, hdr);
13078
13079 if (!wdev->owner_nlportid)
13080 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
13081 msg, 0, NL80211_MCGRP_NAN, gfp);
13082 else
13083 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
13084 wdev->owner_nlportid);
13085
13086 return;
13087
13088nla_put_failure:
13089 nlmsg_free(msg);
13090}
13091EXPORT_SYMBOL(cfg80211_nan_func_terminated);
13092
3713b4e3
JB		 13093static int nl80211_get_protocol_features(struct sk_buff *skb,
13094 struct genl_info *info)
13095{
13096 void *hdr;
13097 struct sk_buff *msg;
13098
13099 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13100 if (!msg)
13101 return -ENOMEM;
13102
13103 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13104 NL80211_CMD_GET_PROTOCOL_FEATURES);
13105 if (!hdr)
13106 goto nla_put_failure;
13107
13108 if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
13109 NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
13110 goto nla_put_failure;
13111
13112 genlmsg_end(msg, hdr);
13113 return genlmsg_reply(msg, info);
13114
13115 nla_put_failure:
13116 kfree_skb(msg);
13117 return -ENOBUFS;
13118}
13119
355199e0
JM		 13120static int nl80211_update_ft_ies(struct sk_buff *skb, struct genl_info *info)
13121{
13122 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13123 struct cfg80211_update_ft_ies_params ft_params;
13124 struct net_device *dev = info->user_ptr[1];
13125
13126 if (!rdev->ops->update_ft_ies)
13127 return -EOPNOTSUPP;
13128
13129 if (!info->attrs[NL80211_ATTR_MDID] ||
3d7af878 13130 !info->attrs[NL80211_ATTR_IE])
355199e0
JM		 13131 return -EINVAL;
13132
13133 memset(&ft_params, 0, sizeof(ft_params));
13134 ft_params.md = nla_get_u16(info->attrs[NL80211_ATTR_MDID]);
13135 ft_params.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
13136 ft_params.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
13137
13138 return rdev_update_ft_ies(rdev, dev, &ft_params);
13139}
13140
5de17984
AS		 13141static int nl80211_crit_protocol_start(struct sk_buff *skb,
13142 struct genl_info *info)
13143{
13144 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13145 struct wireless_dev *wdev = info->user_ptr[1];
13146 enum nl80211_crit_proto_id proto = NL80211_CRIT_PROTO_UNSPEC;
13147 u16 duration;
13148 int ret;
13149
13150 if (!rdev->ops->crit_proto_start)
13151 return -EOPNOTSUPP;
13152
13153 if (WARN_ON(!rdev->ops->crit_proto_stop))
13154 return -EINVAL;
13155
13156 if (rdev->crit_proto_nlportid)
13157 return -EBUSY;
13158
13159 /* determine protocol if provided */
13160 if (info->attrs[NL80211_ATTR_CRIT_PROT_ID])
13161 proto = nla_get_u16(info->attrs[NL80211_ATTR_CRIT_PROT_ID]);
13162
13163 if (proto >= NUM_NL80211_CRIT_PROTO)
13164 return -EINVAL;
13165
13166 /* timeout must be provided */
13167 if (!info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION])
13168 return -EINVAL;
13169
13170 duration =
13171 nla_get_u16(info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION]);
13172
13173 if (duration > NL80211_CRIT_PROTO_MAX_DURATION)
13174 return -ERANGE;
13175
13176 ret = rdev_crit_proto_start(rdev, wdev, proto, duration);
13177 if (!ret)
13178 rdev->crit_proto_nlportid = info->snd_portid;
13179
13180 return ret;
13181}
13182
13183static int nl80211_crit_protocol_stop(struct sk_buff *skb,
13184 struct genl_info *info)
13185{
13186 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13187 struct wireless_dev *wdev = info->user_ptr[1];
13188
13189 if (!rdev->ops->crit_proto_stop)
13190 return -EOPNOTSUPP;
13191
13192 if (rdev->crit_proto_nlportid) {
13193 rdev->crit_proto_nlportid = 0;
13194 rdev_crit_proto_stop(rdev, wdev);
13195 }
13196 return 0;
13197}
13198
901bb989
JB		 13199static int nl80211_vendor_check_policy(const struct wiphy_vendor_command *vcmd,
13200 struct nlattr *attr,
13201 struct netlink_ext_ack *extack)
13202{
13203 if (vcmd->policy == VENDOR_CMD_RAW_DATA) {
13204 if (attr->nla_type & NLA_F_NESTED) {
13205 NL_SET_ERR_MSG_ATTR(extack, attr,
13206 "unexpected nested data");
13207 return -EINVAL;
13208 }
13209
13210 return 0;
13211 }
13212
13213 if (!(attr->nla_type & NLA_F_NESTED)) {
13214 NL_SET_ERR_MSG_ATTR(extack, attr, "expected nested data");
13215 return -EINVAL;
13216 }
13217
32d5109a 13218 return nla_validate_nested(attr, vcmd->maxattr, vcmd->policy, extack);
901bb989
JB		 13219}
13220
ad7e718c
JB		 13221static int nl80211_vendor_cmd(struct sk_buff *skb, struct genl_info *info)
13222{
13223 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13224 struct wireless_dev *wdev =
13225 __cfg80211_wdev_from_attrs(genl_info_net(info), info->attrs);
13226 int i, err;
13227 u32 vid, subcmd;
13228
13229 if (!rdev->wiphy.vendor_commands)
13230 return -EOPNOTSUPP;
13231
13232 if (IS_ERR(wdev)) {
13233 err = PTR_ERR(wdev);
13234 if (err != -EINVAL)
13235 return err;
13236 wdev = NULL;
13237 } else if (wdev->wiphy != &rdev->wiphy) {
13238 return -EINVAL;
13239 }
13240
13241 if (!info->attrs[NL80211_ATTR_VENDOR_ID] ||
13242 !info->attrs[NL80211_ATTR_VENDOR_SUBCMD])
13243 return -EINVAL;
13244
13245 vid = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_ID]);
13246 subcmd = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_SUBCMD]);
13247 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
13248 const struct wiphy_vendor_command *vcmd;
13249 void *data = NULL;
13250 int len = 0;
13251
13252 vcmd = &rdev->wiphy.vendor_commands[i];
13253
13254 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
13255 continue;
13256
13257 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
13258 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
13259 if (!wdev)
13260 return -EINVAL;
13261 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
13262 !wdev->netdev)
13263 return -EINVAL;
13264
13265 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
73c7da3d 13266 if (!wdev_running(wdev))
ad7e718c
JB		 13267 return -ENETDOWN;
13268 }
7bdbe400
JB		 13269
13270 if (!vcmd->doit)
13271 return -EOPNOTSUPP;
ad7e718c
JB		 13272 } else {
13273 wdev = NULL;
13274 }
13275
13276 if (info->attrs[NL80211_ATTR_VENDOR_DATA]) {
13277 data = nla_data(info->attrs[NL80211_ATTR_VENDOR_DATA]);
13278 len = nla_len(info->attrs[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 13279
13280 err = nl80211_vendor_check_policy(vcmd,
13281 info->attrs[NL80211_ATTR_VENDOR_DATA],
13282 info->extack);
13283 if (err)
13284 return err;
ad7e718c
JB		 13285 }
13286
13287 rdev->cur_cmd_info = info;
901bb989 13288 err = vcmd->doit(&rdev->wiphy, wdev, data, len);
ad7e718c
JB		 13289 rdev->cur_cmd_info = NULL;
13290 return err;
13291 }
13292
13293 return -EOPNOTSUPP;
13294}
13295
7bdbe400
JB		 13296static int nl80211_prepare_vendor_dump(struct sk_buff *skb,
13297 struct netlink_callback *cb,
13298 struct cfg80211_registered_device **rdev,
13299 struct wireless_dev **wdev)
13300{
50508d94 13301 struct nlattr **attrbuf;
7bdbe400
JB		 13302 u32 vid, subcmd;
13303 unsigned int i;
13304 int vcmd_idx = -1;
13305 int err;
13306 void *data = NULL;
13307 unsigned int data_len = 0;
13308
7bdbe400
JB		 13309 if (cb->args[0]) {
13310 /* subtract the 1 again here */
13311 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
13312 struct wireless_dev *tmp;
13313
ea90e0dc
JB		 13314 if (!wiphy)
13315 return -ENODEV;
7bdbe400
JB		 13316 *rdev = wiphy_to_rdev(wiphy);
13317 *wdev = NULL;
13318
13319 if (cb->args[1]) {
53873f13 13320 list_for_each_entry(tmp, &wiphy->wdev_list, list) {
7bdbe400
JB		 13321 if (tmp->identifier == cb->args[1] - 1) {
13322 *wdev = tmp;
13323 break;
13324 }
13325 }
13326 }
13327
13328 /* keep rtnl locked in successful case */
13329 return 0;
13330 }
13331
50508d94
JB		 13332 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
13333 if (!attrbuf)
13334 return -ENOMEM;
13335
8cb08174
JB		 13336 err = nlmsg_parse_deprecated(cb->nlh,
13337 GENL_HDRLEN + nl80211_fam.hdrsize,
13338 attrbuf, nl80211_fam.maxattr,
13339 nl80211_policy, NULL);
7bdbe400 13340 if (err)
50508d94 13341 goto out;
7bdbe400 13342
c90c39da 13343 if (!attrbuf[NL80211_ATTR_VENDOR_ID] ||
50508d94
JB		 13344 !attrbuf[NL80211_ATTR_VENDOR_SUBCMD]) {
13345 err = -EINVAL;
13346 goto out;
13347 }
7bdbe400 13348
c90c39da 13349 *wdev = __cfg80211_wdev_from_attrs(sock_net(skb->sk), attrbuf);
7bdbe400
JB		 13350 if (IS_ERR(*wdev))
13351 *wdev = NULL;
13352
c90c39da 13353 *rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
50508d94
JB		 13354 if (IS_ERR(*rdev)) {
13355 err = PTR_ERR(*rdev);
13356 goto out;
13357 }
7bdbe400 13358
c90c39da
JB		 13359 vid = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_ID]);
13360 subcmd = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_SUBCMD]);
7bdbe400
JB		 13361
13362 for (i = 0; i < (*rdev)->wiphy.n_vendor_commands; i++) {
13363 const struct wiphy_vendor_command *vcmd;
13364
13365 vcmd = &(*rdev)->wiphy.vendor_commands[i];
13366
13367 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
13368 continue;
13369
50508d94
JB		 13370 if (!vcmd->dumpit) {
13371 err = -EOPNOTSUPP;
13372 goto out;
13373 }
7bdbe400
JB		 13374
13375 vcmd_idx = i;
13376 break;
13377 }
13378
50508d94
JB		 13379 if (vcmd_idx < 0) {
13380 err = -EOPNOTSUPP;
13381 goto out;
13382 }
7bdbe400 13383
c90c39da
JB		 13384 if (attrbuf[NL80211_ATTR_VENDOR_DATA]) {
13385 data = nla_data(attrbuf[NL80211_ATTR_VENDOR_DATA]);
13386 data_len = nla_len(attrbuf[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 13387
13388 err = nl80211_vendor_check_policy(
13389 &(*rdev)->wiphy.vendor_commands[vcmd_idx],
13390 attrbuf[NL80211_ATTR_VENDOR_DATA],
13391 cb->extack);
13392 if (err)
50508d94 13393 goto out;
7bdbe400
JB		 13394 }
13395
13396 /* 0 is the first index - add 1 to parse only once */
13397 cb->args[0] = (*rdev)->wiphy_idx + 1;
13398 /* add 1 to know if it was NULL */
13399 cb->args[1] = *wdev ? (*wdev)->identifier + 1 : 0;
13400 cb->args[2] = vcmd_idx;
13401 cb->args[3] = (unsigned long)data;
13402 cb->args[4] = data_len;
13403
13404 /* keep rtnl locked in successful case */
50508d94
JB		 13405 err = 0;
13406out:
13407 kfree(attrbuf);
13408 return err;
7bdbe400
JB		 13409}
13410
13411static int nl80211_vendor_cmd_dump(struct sk_buff *skb,
13412 struct netlink_callback *cb)
13413{
13414 struct cfg80211_registered_device *rdev;
13415 struct wireless_dev *wdev;
13416 unsigned int vcmd_idx;
13417 const struct wiphy_vendor_command *vcmd;
13418 void *data;
13419 int data_len;
13420 int err;
13421 struct nlattr *vendor_data;
13422
ea90e0dc 13423 rtnl_lock();
7bdbe400
JB		 13424 err = nl80211_prepare_vendor_dump(skb, cb, &rdev, &wdev);
13425 if (err)
ea90e0dc 13426 goto out;
7bdbe400
JB		 13427
13428 vcmd_idx = cb->args[2];
13429 data = (void *)cb->args[3];
13430 data_len = cb->args[4];
13431 vcmd = &rdev->wiphy.vendor_commands[vcmd_idx];
13432
13433 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
13434 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
ea90e0dc
JB		 13435 if (!wdev) {
13436 err = -EINVAL;
13437 goto out;
13438 }
7bdbe400 13439 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
ea90e0dc
JB		 13440 !wdev->netdev) {
13441 err = -EINVAL;
13442 goto out;
13443 }
7bdbe400
JB		 13444
13445 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
ea90e0dc
JB		 13446 if (!wdev_running(wdev)) {
13447 err = -ENETDOWN;
13448 goto out;
13449 }
7bdbe400
JB		 13450 }
13451 }
13452
13453 while (1) {
13454 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
13455 cb->nlh->nlmsg_seq, NLM_F_MULTI,
13456 NL80211_CMD_VENDOR);
13457 if (!hdr)
13458 break;
13459
13460 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 13461 (wdev && nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
13462 wdev_id(wdev),
13463 NL80211_ATTR_PAD))) {
7bdbe400
JB		 13464 genlmsg_cancel(skb, hdr);
13465 break;
13466 }
13467
ae0be8de
MK		 13468 vendor_data = nla_nest_start_noflag(skb,
13469 NL80211_ATTR_VENDOR_DATA);
7bdbe400
JB		 13470 if (!vendor_data) {
13471 genlmsg_cancel(skb, hdr);
13472 break;
13473 }
13474
13475 err = vcmd->dumpit(&rdev->wiphy, wdev, skb, data, data_len,
13476 (unsigned long *)&cb->args[5]);
13477 nla_nest_end(skb, vendor_data);
13478
13479 if (err == -ENOBUFS || err == -ENOENT) {
13480 genlmsg_cancel(skb, hdr);
13481 break;
13482 } else if (err) {
13483 genlmsg_cancel(skb, hdr);
13484 goto out;
13485 }
13486
13487 genlmsg_end(skb, hdr);
13488 }
13489
13490 err = skb->len;
13491 out:
13492 rtnl_unlock();
13493 return err;
13494}
13495
ad7e718c
JB		 13496struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
13497 enum nl80211_commands cmd,
13498 enum nl80211_attrs attr,
13499 int approxlen)
13500{
f26cbf40 13501 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ad7e718c
JB		 13502
13503 if (WARN_ON(!rdev->cur_cmd_info))
13504 return NULL;
13505
6c09e791 13506 return __cfg80211_alloc_vendor_skb(rdev, NULL, approxlen,
ad7e718c
JB		 13507 rdev->cur_cmd_info->snd_portid,
13508 rdev->cur_cmd_info->snd_seq,
567ffc35 13509 cmd, attr, NULL, GFP_KERNEL);
ad7e718c
JB		 13510}
13511EXPORT_SYMBOL(__cfg80211_alloc_reply_skb);
13512
13513int cfg80211_vendor_cmd_reply(struct sk_buff *skb)
13514{
13515 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
13516 void *hdr = ((void **)skb->cb)[1];
13517 struct nlattr *data = ((void **)skb->cb)[2];
13518
bd8c78e7
JB		 13519 /* clear CB data for netlink core to own from now on */
13520 memset(skb->cb, 0, sizeof(skb->cb));
13521
ad7e718c
JB		 13522 if (WARN_ON(!rdev->cur_cmd_info)) {
13523 kfree_skb(skb);
13524 return -EINVAL;
13525 }
13526
13527 nla_nest_end(skb, data);
13528 genlmsg_end(skb, hdr);
13529 return genlmsg_reply(skb, rdev->cur_cmd_info);
13530}
13531EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_reply);
13532
55c1fdf0
JB		 13533unsigned int cfg80211_vendor_cmd_get_sender(struct wiphy *wiphy)
13534{
13535 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
13536
13537 if (WARN_ON(!rdev->cur_cmd_info))
13538 return 0;
13539
13540 return rdev->cur_cmd_info->snd_portid;
13541}
13542EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_get_sender);
13543
fa9ffc74
KP		 13544static int nl80211_set_qos_map(struct sk_buff *skb,
13545 struct genl_info *info)
13546{
13547 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13548 struct cfg80211_qos_map *qos_map = NULL;
13549 struct net_device *dev = info->user_ptr[1];
13550 u8 *pos, len, num_des, des_len, des;
13551 int ret;
13552
13553 if (!rdev->ops->set_qos_map)
13554 return -EOPNOTSUPP;
13555
13556 if (info->attrs[NL80211_ATTR_QOS_MAP]) {
13557 pos = nla_data(info->attrs[NL80211_ATTR_QOS_MAP]);
13558 len = nla_len(info->attrs[NL80211_ATTR_QOS_MAP]);
13559
13560 if (len % 2 || len < IEEE80211_QOS_MAP_LEN_MIN ||
13561 len > IEEE80211_QOS_MAP_LEN_MAX)
13562 return -EINVAL;
13563
13564 qos_map = kzalloc(sizeof(struct cfg80211_qos_map), GFP_KERNEL);
13565 if (!qos_map)
13566 return -ENOMEM;
13567
13568 num_des = (len - IEEE80211_QOS_MAP_LEN_MIN) >> 1;
13569 if (num_des) {
13570 des_len = num_des *
13571 sizeof(struct cfg80211_dscp_exception);
13572 memcpy(qos_map->dscp_exception, pos, des_len);
13573 qos_map->num_des = num_des;
13574 for (des = 0; des < num_des; des++) {
13575 if (qos_map->dscp_exception[des].up > 7) {
13576 kfree(qos_map);
13577 return -EINVAL;
13578 }
13579 }
13580 pos += des_len;
13581 }
13582 memcpy(qos_map->up, pos, IEEE80211_QOS_MAP_LEN_MIN);
13583 }
13584
13585 wdev_lock(dev->ieee80211_ptr);
13586 ret = nl80211_key_allowed(dev->ieee80211_ptr);
13587 if (!ret)
13588 ret = rdev_set_qos_map(rdev, dev, qos_map);
13589 wdev_unlock(dev->ieee80211_ptr);
13590
13591 kfree(qos_map);
13592 return ret;
13593}
13594
960d01ac
JB		 13595static int nl80211_add_tx_ts(struct sk_buff *skb, struct genl_info *info)
13596{
13597 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13598 struct net_device *dev = info->user_ptr[1];
13599 struct wireless_dev *wdev = dev->ieee80211_ptr;
13600 const u8 *peer;
13601 u8 tsid, up;
13602 u16 admitted_time = 0;
13603 int err;
13604
723e73ac 13605 if (!(rdev->wiphy.features & NL80211_FEATURE_SUPPORTS_WMM_ADMISSION))
960d01ac
JB		 13606 return -EOPNOTSUPP;
13607
13608 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC] ||
13609 !info->attrs[NL80211_ATTR_USER_PRIO])
13610 return -EINVAL;
13611
13612 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
960d01ac 13613 up = nla_get_u8(info->attrs[NL80211_ATTR_USER_PRIO]);
960d01ac
JB		 13614
13615 /* WMM uses TIDs 0-7 even for TSPEC */
723e73ac 13616 if (tsid >= IEEE80211_FIRST_TSPEC_TSID) {
960d01ac 13617 /* TODO: handle 802.11 TSPEC/admission control
723e73ac
JB		 13618 * need more attributes for that (e.g. BA session requirement);
13619 * change the WMM adminssion test above to allow both then
960d01ac
JB		 13620 */
13621 return -EINVAL;
13622 }
13623
13624 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
13625
13626 if (info->attrs[NL80211_ATTR_ADMITTED_TIME]) {
13627 admitted_time =
13628 nla_get_u16(info->attrs[NL80211_ATTR_ADMITTED_TIME]);
13629 if (!admitted_time)
13630 return -EINVAL;
13631 }
13632
13633 wdev_lock(wdev);
13634 switch (wdev->iftype) {
13635 case NL80211_IFTYPE_STATION:
13636 case NL80211_IFTYPE_P2P_CLIENT:
13637 if (wdev->current_bss)
13638 break;
13639 err = -ENOTCONN;
13640 goto out;
13641 default:
13642 err = -EOPNOTSUPP;
13643 goto out;
13644 }
13645
13646 err = rdev_add_tx_ts(rdev, dev, tsid, peer, up, admitted_time);
13647
13648 out:
13649 wdev_unlock(wdev);
13650 return err;
13651}
13652
13653static int nl80211_del_tx_ts(struct sk_buff *skb, struct genl_info *info)
13654{
13655 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13656 struct net_device *dev = info->user_ptr[1];
13657 struct wireless_dev *wdev = dev->ieee80211_ptr;
13658 const u8 *peer;
13659 u8 tsid;
13660 int err;
13661
13662 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC])
13663 return -EINVAL;
13664
13665 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
13666 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
13667
13668 wdev_lock(wdev);
13669 err = rdev_del_tx_ts(rdev, dev, tsid, peer);
13670 wdev_unlock(wdev);
13671
13672 return err;
13673}
13674
1057d35e
AN		 13675static int nl80211_tdls_channel_switch(struct sk_buff *skb,
13676 struct genl_info *info)
13677{
13678 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13679 struct net_device *dev = info->user_ptr[1];
13680 struct wireless_dev *wdev = dev->ieee80211_ptr;
13681 struct cfg80211_chan_def chandef = {};
13682 const u8 *addr;
13683 u8 oper_class;
13684 int err;
13685
13686 if (!rdev->ops->tdls_channel_switch ||
13687 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
13688 return -EOPNOTSUPP;
13689
13690 switch (dev->ieee80211_ptr->iftype) {
13691 case NL80211_IFTYPE_STATION:
13692 case NL80211_IFTYPE_P2P_CLIENT:
13693 break;
13694 default:
13695 return -EOPNOTSUPP;
13696 }
13697
13698 if (!info->attrs[NL80211_ATTR_MAC] ||
13699 !info->attrs[NL80211_ATTR_OPER_CLASS])
13700 return -EINVAL;
13701
13702 err = nl80211_parse_chandef(rdev, info, &chandef);
13703 if (err)
13704 return err;
13705
13706 /*
13707 * Don't allow wide channels on the 2.4Ghz band, as per IEEE802.11-2012
13708 * section 10.22.6.2.1. Disallow 5/10Mhz channels as well for now, the
13709 * specification is not defined for them.
13710 */
57fbcce3 13711 if (chandef.chan->band == NL80211_BAND_2GHZ &&
1057d35e
AN		 13712 chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
13713 chandef.width != NL80211_CHAN_WIDTH_20)
13714 return -EINVAL;
13715
13716 /* we will be active on the TDLS link */
923b352f
AN		 13717 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
13718 wdev->iftype))
1057d35e
AN		 13719 return -EINVAL;
13720
13721 /* don't allow switching to DFS channels */
13722 if (cfg80211_chandef_dfs_required(wdev->wiphy, &chandef, wdev->iftype))
13723 return -EINVAL;
13724
13725 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
13726 oper_class = nla_get_u8(info->attrs[NL80211_ATTR_OPER_CLASS]);
13727
13728 wdev_lock(wdev);
13729 err = rdev_tdls_channel_switch(rdev, dev, addr, oper_class, &chandef);
13730 wdev_unlock(wdev);
13731
13732 return err;
13733}
13734
13735static int nl80211_tdls_cancel_channel_switch(struct sk_buff *skb,
13736 struct genl_info *info)
13737{
13738 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13739 struct net_device *dev = info->user_ptr[1];
13740 struct wireless_dev *wdev = dev->ieee80211_ptr;
13741 const u8 *addr;
13742
13743 if (!rdev->ops->tdls_channel_switch ||
13744 !rdev->ops->tdls_cancel_channel_switch ||
13745 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
13746 return -EOPNOTSUPP;
13747
13748 switch (dev->ieee80211_ptr->iftype) {
13749 case NL80211_IFTYPE_STATION:
13750 case NL80211_IFTYPE_P2P_CLIENT:
13751 break;
13752 default:
13753 return -EOPNOTSUPP;
13754 }
13755
13756 if (!info->attrs[NL80211_ATTR_MAC])
13757 return -EINVAL;
13758
13759 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
13760
13761 wdev_lock(wdev);
13762 rdev_tdls_cancel_channel_switch(rdev, dev, addr);
13763 wdev_unlock(wdev);
13764
13765 return 0;
13766}
13767
ce0ce13a
MB		 13768static int nl80211_set_multicast_to_unicast(struct sk_buff *skb,
13769 struct genl_info *info)
13770{
13771 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13772 struct net_device *dev = info->user_ptr[1];
13773 struct wireless_dev *wdev = dev->ieee80211_ptr;
13774 const struct nlattr *nla;
13775 bool enabled;
13776
ce0ce13a
MB		 13777 if (!rdev->ops->set_multicast_to_unicast)
13778 return -EOPNOTSUPP;
13779
13780 if (wdev->iftype != NL80211_IFTYPE_AP &&
13781 wdev->iftype != NL80211_IFTYPE_P2P_GO)
13782 return -EOPNOTSUPP;
13783
13784 nla = info->attrs[NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED];
13785 enabled = nla_get_flag(nla);
13786
13787 return rdev_set_multicast_to_unicast(rdev, dev, enabled);
13788}
13789
3a00df57
AS		 13790static int nl80211_set_pmk(struct sk_buff *skb, struct genl_info *info)
13791{
13792 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13793 struct net_device *dev = info->user_ptr[1];
13794 struct wireless_dev *wdev = dev->ieee80211_ptr;
13795 struct cfg80211_pmk_conf pmk_conf = {};
13796 int ret;
13797
13798 if (wdev->iftype != NL80211_IFTYPE_STATION &&
13799 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
13800 return -EOPNOTSUPP;
13801
13802 if (!wiphy_ext_feature_isset(&rdev->wiphy,
13803 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
13804 return -EOPNOTSUPP;
13805
13806 if (!info->attrs[NL80211_ATTR_MAC] || !info->attrs[NL80211_ATTR_PMK])
13807 return -EINVAL;
13808
13809 wdev_lock(wdev);
13810 if (!wdev->current_bss) {
13811 ret = -ENOTCONN;
13812 goto out;
13813 }
13814
13815 pmk_conf.aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
13816 if (memcmp(pmk_conf.aa, wdev->current_bss->pub.bssid, ETH_ALEN)) {
13817 ret = -EINVAL;
13818 goto out;
13819 }
13820
13821 pmk_conf.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
13822 pmk_conf.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
13823 if (pmk_conf.pmk_len != WLAN_PMK_LEN &&
13824 pmk_conf.pmk_len != WLAN_PMK_LEN_SUITE_B_192) {
13825 ret = -EINVAL;
13826 goto out;
13827 }
13828
13829 if (info->attrs[NL80211_ATTR_PMKR0_NAME]) {
13830 int r0_name_len = nla_len(info->attrs[NL80211_ATTR_PMKR0_NAME]);
13831
13832 if (r0_name_len != WLAN_PMK_NAME_LEN) {
13833 ret = -EINVAL;
13834 goto out;
13835 }
13836
13837 pmk_conf.pmk_r0_name =
13838 nla_data(info->attrs[NL80211_ATTR_PMKR0_NAME]);
13839 }
13840
13841 ret = rdev_set_pmk(rdev, dev, &pmk_conf);
13842out:
13843 wdev_unlock(wdev);
13844 return ret;
13845}
13846
13847static int nl80211_del_pmk(struct sk_buff *skb, struct genl_info *info)
13848{
13849 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13850 struct net_device *dev = info->user_ptr[1];
13851 struct wireless_dev *wdev = dev->ieee80211_ptr;
13852 const u8 *aa;
13853 int ret;
13854
13855 if (wdev->iftype != NL80211_IFTYPE_STATION &&
13856 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
13857 return -EOPNOTSUPP;
13858
13859 if (!wiphy_ext_feature_isset(&rdev->wiphy,
13860 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
13861 return -EOPNOTSUPP;
13862
13863 if (!info->attrs[NL80211_ATTR_MAC])
13864 return -EINVAL;
13865
13866 wdev_lock(wdev);
13867 aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
13868 ret = rdev_del_pmk(rdev, dev, aa);
13869 wdev_unlock(wdev);
13870
13871 return ret;
13872}
13873
40cbfa90
SD		 13874static int nl80211_external_auth(struct sk_buff *skb, struct genl_info *info)
13875{
13876 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13877 struct net_device *dev = info->user_ptr[1];
13878 struct cfg80211_external_auth_params params;
13879
db8d93a7 13880 if (!rdev->ops->external_auth)
40cbfa90
SD		 13881 return -EOPNOTSUPP;
13882
fe494370
SD		 13883 if (!info->attrs[NL80211_ATTR_SSID] &&
13884 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
13885 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
40cbfa90
SD		 13886 return -EINVAL;
13887
13888 if (!info->attrs[NL80211_ATTR_BSSID])
13889 return -EINVAL;
13890
13891 if (!info->attrs[NL80211_ATTR_STATUS_CODE])
13892 return -EINVAL;
13893
13894 memset(&params, 0, sizeof(params));
13895
fe494370
SD		 13896 if (info->attrs[NL80211_ATTR_SSID]) {
13897 params.ssid.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
13898 if (params.ssid.ssid_len == 0 ||
13899 params.ssid.ssid_len > IEEE80211_MAX_SSID_LEN)
13900 return -EINVAL;
13901 memcpy(params.ssid.ssid,
13902 nla_data(info->attrs[NL80211_ATTR_SSID]),
13903 params.ssid.ssid_len);
13904 }
40cbfa90
SD		 13905
13906 memcpy(params.bssid, nla_data(info->attrs[NL80211_ATTR_BSSID]),
13907 ETH_ALEN);
13908
13909 params.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
13910
fe494370
SD		 13911 if (info->attrs[NL80211_ATTR_PMKID])
13912 params.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
13913
40cbfa90
SD		 13914 return rdev_external_auth(rdev, dev, &params);
13915}
13916
2576a9ac
DK		 13917static int nl80211_tx_control_port(struct sk_buff *skb, struct genl_info *info)
13918{
dca9ca2d 13919 bool dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
2576a9ac
DK		 13920 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13921 struct net_device *dev = info->user_ptr[1];
13922 struct wireless_dev *wdev = dev->ieee80211_ptr;
13923 const u8 *buf;
13924 size_t len;
13925 u8 *dest;
13926 u16 proto;
13927 bool noencrypt;
dca9ca2d 13928 u64 cookie = 0;
2576a9ac
DK		 13929 int err;
13930
13931 if (!wiphy_ext_feature_isset(&rdev->wiphy,
13932 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
13933 return -EOPNOTSUPP;
13934
13935 if (!rdev->ops->tx_control_port)
13936 return -EOPNOTSUPP;
13937
13938 if (!info->attrs[NL80211_ATTR_FRAME] ||
13939 !info->attrs[NL80211_ATTR_MAC] ||
13940 !info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
13941 GENL_SET_ERR_MSG(info, "Frame, MAC or ethertype missing");
13942 return -EINVAL;
13943 }
13944
13945 wdev_lock(wdev);
13946
13947 switch (wdev->iftype) {
13948 case NL80211_IFTYPE_AP:
13949 case NL80211_IFTYPE_P2P_GO:
13950 case NL80211_IFTYPE_MESH_POINT:
13951 break;
13952 case NL80211_IFTYPE_ADHOC:
13953 case NL80211_IFTYPE_STATION:
13954 case NL80211_IFTYPE_P2P_CLIENT:
13955 if (wdev->current_bss)
13956 break;
13957 err = -ENOTCONN;
13958 goto out;
13959 default:
13960 err = -EOPNOTSUPP;
13961 goto out;
13962 }
13963
13964 wdev_unlock(wdev);
13965
13966 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
13967 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
13968 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
13969 proto = nla_get_u16(info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
13970 noencrypt =
13971 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]);
13972
dca9ca2d
MT		 13973 err = rdev_tx_control_port(rdev, dev, buf, len,
13974 dest, cpu_to_be16(proto), noencrypt,
13975 dont_wait_for_ack ? NULL : &cookie);
13976 if (!err && !dont_wait_for_ack)
13977 nl_set_extack_cookie_u64(info->extack, cookie);
13978 return err;
2576a9ac
DK		 13979 out:
13980 wdev_unlock(wdev);
13981 return err;
13982}
13983
81e54d08
PKC		 13984static int nl80211_get_ftm_responder_stats(struct sk_buff *skb,
13985 struct genl_info *info)
13986{
13987 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13988 struct net_device *dev = info->user_ptr[1];
13989 struct wireless_dev *wdev = dev->ieee80211_ptr;
13990 struct cfg80211_ftm_responder_stats ftm_stats = {};
13991 struct sk_buff *msg;
13992 void *hdr;
13993 struct nlattr *ftm_stats_attr;
13994 int err;
13995
13996 if (wdev->iftype != NL80211_IFTYPE_AP || !wdev->beacon_interval)
13997 return -EOPNOTSUPP;
13998
13999 err = rdev_get_ftm_responder_stats(rdev, dev, &ftm_stats);
14000 if (err)
14001 return err;
14002
14003 if (!ftm_stats.filled)
14004 return -ENODATA;
14005
14006 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14007 if (!msg)
14008 return -ENOMEM;
14009
14010 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14011 NL80211_CMD_GET_FTM_RESPONDER_STATS);
14012 if (!hdr)
1399c59f 14013 goto nla_put_failure;
81e54d08
PKC		 14014
14015 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
14016 goto nla_put_failure;
14017
ae0be8de
MK		 14018 ftm_stats_attr = nla_nest_start_noflag(msg,
14019 NL80211_ATTR_FTM_RESPONDER_STATS);
81e54d08
PKC		 14020 if (!ftm_stats_attr)
14021 goto nla_put_failure;
14022
14023#define SET_FTM(field, name, type) \
14024 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
14025 nla_put_ ## type(msg, NL80211_FTM_STATS_ ## name, \
14026 ftm_stats.field)) \
14027 goto nla_put_failure; } while (0)
14028#define SET_FTM_U64(field, name) \
14029 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
14030 nla_put_u64_64bit(msg, NL80211_FTM_STATS_ ## name, \
14031 ftm_stats.field, NL80211_FTM_STATS_PAD)) \
14032 goto nla_put_failure; } while (0)
14033
14034 SET_FTM(success_num, SUCCESS_NUM, u32);
14035 SET_FTM(partial_num, PARTIAL_NUM, u32);
14036 SET_FTM(failed_num, FAILED_NUM, u32);
14037 SET_FTM(asap_num, ASAP_NUM, u32);
14038 SET_FTM(non_asap_num, NON_ASAP_NUM, u32);
14039 SET_FTM_U64(total_duration_ms, TOTAL_DURATION_MSEC);
14040 SET_FTM(unknown_triggers_num, UNKNOWN_TRIGGERS_NUM, u32);
14041 SET_FTM(reschedule_requests_num, RESCHEDULE_REQUESTS_NUM, u32);
14042 SET_FTM(out_of_window_triggers_num, OUT_OF_WINDOW_TRIGGERS_NUM, u32);
14043#undef SET_FTM
14044
14045 nla_nest_end(msg, ftm_stats_attr);
14046
14047 genlmsg_end(msg, hdr);
14048 return genlmsg_reply(msg, info);
14049
14050nla_put_failure:
14051 nlmsg_free(msg);
14052 return -ENOBUFS;
14053}
14054
cb74e977
SD		 14055static int nl80211_update_owe_info(struct sk_buff *skb, struct genl_info *info)
14056{
14057 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14058 struct cfg80211_update_owe_info owe_info;
14059 struct net_device *dev = info->user_ptr[1];
14060
14061 if (!rdev->ops->update_owe_info)
14062 return -EOPNOTSUPP;
14063
14064 if (!info->attrs[NL80211_ATTR_STATUS_CODE] ||
14065 !info->attrs[NL80211_ATTR_MAC])
14066 return -EINVAL;
14067
14068 memset(&owe_info, 0, sizeof(owe_info));
14069 owe_info.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
14070 nla_memcpy(owe_info.peer, info->attrs[NL80211_ATTR_MAC], ETH_ALEN);
14071
14072 if (info->attrs[NL80211_ATTR_IE]) {
14073 owe_info.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
14074 owe_info.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
14075 }
14076
14077 return rdev_update_owe_info(rdev, dev, &owe_info);
14078}
14079
5ab92e7f
RM		 14080static int nl80211_probe_mesh_link(struct sk_buff *skb, struct genl_info *info)
14081{
14082 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14083 struct net_device *dev = info->user_ptr[1];
14084 struct wireless_dev *wdev = dev->ieee80211_ptr;
14085 struct station_info sinfo = {};
14086 const u8 *buf;
14087 size_t len;
14088 u8 *dest;
14089 int err;
14090
14091 if (!rdev->ops->probe_mesh_link || !rdev->ops->get_station)
14092 return -EOPNOTSUPP;
14093
14094 if (!info->attrs[NL80211_ATTR_MAC] ||
14095 !info->attrs[NL80211_ATTR_FRAME]) {
14096 GENL_SET_ERR_MSG(info, "Frame or MAC missing");
14097 return -EINVAL;
14098 }
14099
14100 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
14101 return -EOPNOTSUPP;
14102
14103 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
14104 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
14105 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
14106
14107 if (len < sizeof(struct ethhdr))
14108 return -EINVAL;
14109
14110 if (!ether_addr_equal(buf, dest) || is_multicast_ether_addr(buf) ||
14111 !ether_addr_equal(buf + ETH_ALEN, dev->dev_addr))
14112 return -EINVAL;
14113
14114 err = rdev_get_station(rdev, dev, dest, &sinfo);
14115 if (err)
14116 return err;
14117
2a279b34
FF		 14118 cfg80211_sinfo_release_content(&sinfo);
14119
5ab92e7f
RM		 14120 return rdev_probe_mesh_link(rdev, dev, dest, buf, len);
14121}
14122
77f576de
T		 14123static int parse_tid_conf(struct cfg80211_registered_device *rdev,
14124 struct nlattr *attrs[], struct net_device *dev,
3710a8a6 14125 struct cfg80211_tid_cfg *tid_conf,
77f576de
T		 14126 struct genl_info *info, const u8 *peer)
14127{
14128 struct netlink_ext_ack *extack = info->extack;
3710a8a6 14129 u64 mask;
77f576de
T		 14130 int err;
14131
14132 if (!attrs[NL80211_TID_CONFIG_ATTR_TIDS])
14133 return -EINVAL;
14134
14135 tid_conf->config_override =
14136 nla_get_flag(attrs[NL80211_TID_CONFIG_ATTR_OVERRIDE]);
3710a8a6 14137 tid_conf->tids = nla_get_u16(attrs[NL80211_TID_CONFIG_ATTR_TIDS]);
77f576de
T		 14138
14139 if (tid_conf->config_override) {
14140 if (rdev->ops->reset_tid_config) {
14141 err = rdev_reset_tid_config(rdev, dev, peer,
3710a8a6 14142 tid_conf->tids);
c0336955 14143 if (err)
77f576de
T		 14144 return err;
14145 } else {
14146 return -EINVAL;
14147 }
14148 }
14149
14150 if (attrs[NL80211_TID_CONFIG_ATTR_NOACK]) {
3710a8a6 14151 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_NOACK);
77f576de
T		 14152 tid_conf->noack =
14153 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_NOACK]);
14154 }
14155
6a21d16c
T		 14156 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]) {
14157 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_SHORT);
14158 tid_conf->retry_short =
14159 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]);
14160
14161 if (tid_conf->retry_short > rdev->wiphy.max_data_retry_count)
14162 return -EINVAL;
14163 }
14164
14165 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]) {
14166 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_LONG);
14167 tid_conf->retry_long =
14168 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]);
14169
14170 if (tid_conf->retry_long > rdev->wiphy.max_data_retry_count)
14171 return -EINVAL;
14172 }
14173
ade274b2
T		 14174 if (attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]) {
14175 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMPDU_CTRL);
14176 tid_conf->ampdu =
14177 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]);
14178 }
14179
04f7d142
T		 14180 if (attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]) {
14181 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL);
14182 tid_conf->rtscts =
14183 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]);
14184 }
14185
33462e68
SM		 14186 if (attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]) {
14187 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMSDU_CTRL);
14188 tid_conf->amsdu =
14189 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]);
14190 }
14191
9a5f6488
TC		 14192 if (attrs[NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE]) {
14193 u32 idx = NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE, attr;
14194
14195 tid_conf->txrate_type = nla_get_u8(attrs[idx]);
14196
14197 if (tid_conf->txrate_type != NL80211_TX_RATE_AUTOMATIC) {
14198 attr = NL80211_TID_CONFIG_ATTR_TX_RATE;
14199 err = nl80211_parse_tx_bitrate_mask(info, attrs, attr,
14200 &tid_conf->txrate_mask);
14201 if (err)
14202 return err;
14203
14204 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE);
14205 }
14206 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE);
14207 }
14208
3710a8a6
JB		 14209 if (peer)
14210 mask = rdev->wiphy.tid_config_support.peer;
14211 else
14212 mask = rdev->wiphy.tid_config_support.vif;
14213
14214 if (tid_conf->mask & ~mask) {
14215 NL_SET_ERR_MSG(extack, "unsupported TID configuration");
14216 return -ENOTSUPP;
14217 }
14218
77f576de
T		 14219 return 0;
14220}
14221
14222static int nl80211_set_tid_config(struct sk_buff *skb,
14223 struct genl_info *info)
14224{
14225 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14226 struct nlattr *attrs[NL80211_TID_CONFIG_ATTR_MAX + 1];
14227 struct net_device *dev = info->user_ptr[1];
3710a8a6 14228 struct cfg80211_tid_config *tid_config;
77f576de
T		 14229 struct nlattr *tid;
14230 int conf_idx = 0, rem_conf;
14231 int ret = -EINVAL;
14232 u32 num_conf = 0;
14233
14234 if (!info->attrs[NL80211_ATTR_TID_CONFIG])
14235 return -EINVAL;
14236
14237 if (!rdev->ops->set_tid_config)
14238 return -EOPNOTSUPP;
14239
14240 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
14241 rem_conf)
14242 num_conf++;
14243
14244 tid_config = kzalloc(struct_size(tid_config, tid_conf, num_conf),
14245 GFP_KERNEL);
14246 if (!tid_config)
14247 return -ENOMEM;
14248
14249 tid_config->n_tid_conf = num_conf;
14250
14251 if (info->attrs[NL80211_ATTR_MAC])
14252 tid_config->peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14253
14254 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
14255 rem_conf) {
14256 ret = nla_parse_nested(attrs, NL80211_TID_CONFIG_ATTR_MAX,
14257 tid, NULL, NULL);
14258
14259 if (ret)
14260 goto bad_tid_conf;
14261
14262 ret = parse_tid_conf(rdev, attrs, dev,
14263 &tid_config->tid_conf[conf_idx],
14264 info, tid_config->peer);
14265 if (ret)
14266 goto bad_tid_conf;
14267
14268 conf_idx++;
14269 }
14270
14271 ret = rdev_set_tid_config(rdev, dev, tid_config);
14272
14273bad_tid_conf:
14274 kfree(tid_config);
14275 return ret;
14276}
14277
4c476991
JB		 14278#define NL80211_FLAG_NEED_WIPHY 0x01
14279#define NL80211_FLAG_NEED_NETDEV 0x02
14280#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 14281#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
14282#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
14283 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 14284#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 14285/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 14286#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
14287 NL80211_FLAG_CHECK_NETDEV_UP)
5393b917 14288#define NL80211_FLAG_CLEAR_SKB 0x20
4c476991 14289
f84f771d 14290static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 14291 struct genl_info *info)
14292{
14293 struct cfg80211_registered_device *rdev;
89a54e48 14294 struct wireless_dev *wdev;
4c476991 14295 struct net_device *dev;
4c476991
JB		 14296 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
14297
14298 if (rtnl)
14299 rtnl_lock();
14300
14301 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 14302 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991
JB		 14303 if (IS_ERR(rdev)) {
14304 if (rtnl)
14305 rtnl_unlock();
14306 return PTR_ERR(rdev);
14307 }
14308 info->user_ptr[0] = rdev;
1bf614ef
JB		 14309 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
14310 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
5fe231e8
JB		 14311 ASSERT_RTNL();
14312
89a54e48
JB		 14313 wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
14314 info->attrs);
14315 if (IS_ERR(wdev)) {
4c476991
JB		 14316 if (rtnl)
14317 rtnl_unlock();
89a54e48 14318 return PTR_ERR(wdev);
4c476991 14319 }
89a54e48 14320
89a54e48 14321 dev = wdev->netdev;
f26cbf40 14322 rdev = wiphy_to_rdev(wdev->wiphy);
89a54e48 14323
1bf614ef
JB		 14324 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
14325 if (!dev) {
1bf614ef
JB		 14326 if (rtnl)
14327 rtnl_unlock();
14328 return -EINVAL;
14329 }
14330
14331 info->user_ptr[1] = dev;
14332 } else {
14333 info->user_ptr[1] = wdev;
41265714 14334 }
1bf614ef 14335
73c7da3d
AVS		 14336 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
14337 !wdev_running(wdev)) {
14338 if (rtnl)
14339 rtnl_unlock();
14340 return -ENETDOWN;
14341 }
1bf614ef 14342
73c7da3d 14343 if (dev)
1bf614ef 14344 dev_hold(dev);
89a54e48 14345
4c476991 14346 info->user_ptr[0] = rdev;
4c476991
JB		 14347 }
14348
14349 return 0;
14350}
14351
f84f771d 14352static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 14353 struct genl_info *info)
14354{
1bf614ef
JB		 14355 if (info->user_ptr[1]) {
14356 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
14357 struct wireless_dev *wdev = info->user_ptr[1];
14358
14359 if (wdev->netdev)
14360 dev_put(wdev->netdev);
14361 } else {
14362 dev_put(info->user_ptr[1]);
14363 }
14364 }
5393b917 14365
4c476991
JB		 14366 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
14367 rtnl_unlock();
5393b917
JB		 14368
14369 /* If needed, clear the netlink message payload from the SKB
14370 * as it might contain key data that shouldn't stick around on
14371 * the heap after the SKB is freed. The netlink message header
14372 * is still needed for further processing, so leave it intact.
14373 */
14374 if (ops->internal_flags & NL80211_FLAG_CLEAR_SKB) {
14375 struct nlmsghdr *nlh = nlmsg_hdr(skb);
14376
14377 memset(nlmsg_data(nlh), 0, nlmsg_len(nlh));
14378 }
4c476991
JB		 14379}
14380
4534de83 14381static const struct genl_ops nl80211_ops[] = {
55682965
JB		 14382 {
14383 .cmd = NL80211_CMD_GET_WIPHY,
ef6243ac 14384 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 14385 .doit = nl80211_get_wiphy,
14386 .dumpit = nl80211_dump_wiphy,
86e8cf98 14387 .done = nl80211_dump_wiphy_done,
55682965 14388 /* can be retrieved by unprivileged users */
5fe231e8
JB		 14389 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14390 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14391 },
14392 {
14393 .cmd = NL80211_CMD_SET_WIPHY,
ef6243ac 14394 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14395 .doit = nl80211_set_wiphy,
5617c6cd 14396 .flags = GENL_UNS_ADMIN_PERM,
4c476991 14397 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 14398 },
14399 {
14400 .cmd = NL80211_CMD_GET_INTERFACE,
ef6243ac 14401 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 14402 .doit = nl80211_get_interface,
14403 .dumpit = nl80211_dump_interface,
55682965 14404 /* can be retrieved by unprivileged users */
5fe231e8
JB		 14405 .internal_flags = NL80211_FLAG_NEED_WDEV |
14406 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14407 },
14408 {
14409 .cmd = NL80211_CMD_SET_INTERFACE,
ef6243ac 14410 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14411 .doit = nl80211_set_interface,
5617c6cd 14412 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14413 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14414 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14415 },
14416 {
14417 .cmd = NL80211_CMD_NEW_INTERFACE,
ef6243ac 14418 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14419 .doit = nl80211_new_interface,
5617c6cd 14420 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14421 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14422 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14423 },
14424 {
14425 .cmd = NL80211_CMD_DEL_INTERFACE,
ef6243ac 14426 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14427 .doit = nl80211_del_interface,
5617c6cd 14428 .flags = GENL_UNS_ADMIN_PERM,
84efbb84 14429 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 14430 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 14431 },
14432 {
14433 .cmd = NL80211_CMD_GET_KEY,
ef6243ac 14434 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14435 .doit = nl80211_get_key,
5617c6cd 14436 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14437 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14438 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 14439 },
14440 {
14441 .cmd = NL80211_CMD_SET_KEY,
ef6243ac 14442 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14443 .doit = nl80211_set_key,
5617c6cd 14444 .flags = GENL_UNS_ADMIN_PERM,
41265714 14445 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14446 NL80211_FLAG_NEED_RTNL |
14447 NL80211_FLAG_CLEAR_SKB,
41ade00f
JB		 14448 },
14449 {
14450 .cmd = NL80211_CMD_NEW_KEY,
ef6243ac 14451 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14452 .doit = nl80211_new_key,
5617c6cd 14453 .flags = GENL_UNS_ADMIN_PERM,
41265714 14454 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14455 NL80211_FLAG_NEED_RTNL |
14456 NL80211_FLAG_CLEAR_SKB,
41ade00f
JB		 14457 },
14458 {
14459 .cmd = NL80211_CMD_DEL_KEY,
ef6243ac 14460 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14461 .doit = nl80211_del_key,
5617c6cd 14462 .flags = GENL_UNS_ADMIN_PERM,
41265714 14463 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14464 NL80211_FLAG_NEED_RTNL,
55682965 14465 },
ed1b6cc7
JB		 14466 {
14467 .cmd = NL80211_CMD_SET_BEACON,
ef6243ac 14468 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14469 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14470 .doit = nl80211_set_beacon,
2b5f8b0b 14471 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14472 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 14473 },
14474 {
8860020e 14475 .cmd = NL80211_CMD_START_AP,
ef6243ac 14476 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14477 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14478 .doit = nl80211_start_ap,
2b5f8b0b 14479 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14480 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 14481 },
14482 {
8860020e 14483 .cmd = NL80211_CMD_STOP_AP,
ef6243ac 14484 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14485 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14486 .doit = nl80211_stop_ap,
2b5f8b0b 14487 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14488 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 14489 },
5727ef1b
JB		 14490 {
14491 .cmd = NL80211_CMD_GET_STATION,
ef6243ac 14492 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14493 .doit = nl80211_get_station,
2ec600d6 14494 .dumpit = nl80211_dump_station,
4c476991
JB		 14495 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14496 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14497 },
14498 {
14499 .cmd = NL80211_CMD_SET_STATION,
ef6243ac 14500 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14501 .doit = nl80211_set_station,
5617c6cd 14502 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14503 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14504 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14505 },
14506 {
14507 .cmd = NL80211_CMD_NEW_STATION,
ef6243ac 14508 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14509 .doit = nl80211_new_station,
5617c6cd 14510 .flags = GENL_UNS_ADMIN_PERM,
41265714 14511 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14512 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14513 },
14514 {
14515 .cmd = NL80211_CMD_DEL_STATION,
ef6243ac 14516 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14517 .doit = nl80211_del_station,
5617c6cd 14518 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14519 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14520 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 14521 },
14522 {
14523 .cmd = NL80211_CMD_GET_MPATH,
ef6243ac 14524 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6
LCC		 14525 .doit = nl80211_get_mpath,
14526 .dumpit = nl80211_dump_mpath,
5617c6cd 14527 .flags = GENL_UNS_ADMIN_PERM,
41265714 14528 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14529 NL80211_FLAG_NEED_RTNL,
2ec600d6 14530 },
66be7d2b
HR		 14531 {
14532 .cmd = NL80211_CMD_GET_MPP,
ef6243ac 14533 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
66be7d2b
HR		 14534 .doit = nl80211_get_mpp,
14535 .dumpit = nl80211_dump_mpp,
5617c6cd 14536 .flags = GENL_UNS_ADMIN_PERM,
66be7d2b
HR		 14537 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14538 NL80211_FLAG_NEED_RTNL,
14539 },
2ec600d6
LCC		 14540 {
14541 .cmd = NL80211_CMD_SET_MPATH,
ef6243ac 14542 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 14543 .doit = nl80211_set_mpath,
5617c6cd 14544 .flags = GENL_UNS_ADMIN_PERM,
41265714 14545 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14546 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 14547 },
14548 {
14549 .cmd = NL80211_CMD_NEW_MPATH,
ef6243ac 14550 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 14551 .doit = nl80211_new_mpath,
5617c6cd 14552 .flags = GENL_UNS_ADMIN_PERM,
41265714 14553 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14554 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 14555 },
14556 {
14557 .cmd = NL80211_CMD_DEL_MPATH,
ef6243ac 14558 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 14559 .doit = nl80211_del_mpath,
5617c6cd 14560 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14561 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14562 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 14563 },
14564 {
14565 .cmd = NL80211_CMD_SET_BSS,
ef6243ac 14566 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9f1ba906 14567 .doit = nl80211_set_bss,
5617c6cd 14568 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14569 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14570 NL80211_FLAG_NEED_RTNL,
b2e1b302 14571 },
f130347c
LR		 14572 {
14573 .cmd = NL80211_CMD_GET_REG,
ef6243ac 14574 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad30ca2c
AN		 14575 .doit = nl80211_get_reg_do,
14576 .dumpit = nl80211_get_reg_dump,
5fe231e8 14577 .internal_flags = NL80211_FLAG_NEED_RTNL,
f130347c
LR		 14578 /* can be retrieved by unprivileged users */
14579 },
b6863036 14580#ifdef CONFIG_CFG80211_CRDA_SUPPORT
b2e1b302
LR		 14581 {
14582 .cmd = NL80211_CMD_SET_REG,
ef6243ac 14583 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 14584 .doit = nl80211_set_reg,
b2e1b302 14585 .flags = GENL_ADMIN_PERM,
5fe231e8 14586 .internal_flags = NL80211_FLAG_NEED_RTNL,
b2e1b302 14587 },
b6863036 14588#endif
b2e1b302
LR		 14589 {
14590 .cmd = NL80211_CMD_REQ_SET_REG,
ef6243ac 14591 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 14592 .doit = nl80211_req_set_reg,
93da9cc1 14593 .flags = GENL_ADMIN_PERM,
14594 },
1ea4ff3e
JB		 14595 {
14596 .cmd = NL80211_CMD_RELOAD_REGDB,
ef6243ac 14597 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1ea4ff3e 14598 .doit = nl80211_reload_regdb,
1ea4ff3e
JB		 14599 .flags = GENL_ADMIN_PERM,
14600 },
93da9cc1 14601 {
24bdd9f4 14602 .cmd = NL80211_CMD_GET_MESH_CONFIG,
ef6243ac 14603 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 14604 .doit = nl80211_get_mesh_config,
93da9cc1 14605 /* can be retrieved by unprivileged users */
2b5f8b0b 14606 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14607 NL80211_FLAG_NEED_RTNL,
93da9cc1 14608 },
14609 {
24bdd9f4 14610 .cmd = NL80211_CMD_SET_MESH_CONFIG,
ef6243ac 14611 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 14612 .doit = nl80211_update_mesh_config,
5617c6cd 14613 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c 14614 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14615 NL80211_FLAG_NEED_RTNL,
9aed3cc1 14616 },
2a519311
JB		 14617 {
14618 .cmd = NL80211_CMD_TRIGGER_SCAN,
ef6243ac 14619 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311 14620 .doit = nl80211_trigger_scan,
5617c6cd 14621 .flags = GENL_UNS_ADMIN_PERM,
fd014284 14622 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 14623 NL80211_FLAG_NEED_RTNL,
2a519311 14624 },
91d3ab46
VK		 14625 {
14626 .cmd = NL80211_CMD_ABORT_SCAN,
ef6243ac 14627 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
91d3ab46 14628 .doit = nl80211_abort_scan,
5617c6cd 14629 .flags = GENL_UNS_ADMIN_PERM,
91d3ab46
VK		 14630 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14631 NL80211_FLAG_NEED_RTNL,
14632 },
2a519311
JB		 14633 {
14634 .cmd = NL80211_CMD_GET_SCAN,
ef6243ac 14635 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311
JB		 14636 .dumpit = nl80211_dump_scan,
14637 },
807f8a8c
LC		 14638 {
14639 .cmd = NL80211_CMD_START_SCHED_SCAN,
ef6243ac 14640 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 14641 .doit = nl80211_start_sched_scan,
5617c6cd 14642 .flags = GENL_UNS_ADMIN_PERM,
807f8a8c
LC		 14643 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14644 NL80211_FLAG_NEED_RTNL,
14645 },
14646 {
14647 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
ef6243ac 14648 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 14649 .doit = nl80211_stop_sched_scan,
5617c6cd 14650 .flags = GENL_UNS_ADMIN_PERM,
807f8a8c
LC		 14651 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14652 NL80211_FLAG_NEED_RTNL,
14653 },
636a5d36
JM		 14654 {
14655 .cmd = NL80211_CMD_AUTHENTICATE,
ef6243ac 14656 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 14657 .doit = nl80211_authenticate,
5617c6cd 14658 .flags = GENL_UNS_ADMIN_PERM,
41265714 14659 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14660 NL80211_FLAG_NEED_RTNL |
14661 NL80211_FLAG_CLEAR_SKB,
636a5d36
JM		 14662 },
14663 {
14664 .cmd = NL80211_CMD_ASSOCIATE,
ef6243ac 14665 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 14666 .doit = nl80211_associate,
5617c6cd 14667 .flags = GENL_UNS_ADMIN_PERM,
41265714 14668 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 14669 NL80211_FLAG_NEED_RTNL |
14670 NL80211_FLAG_CLEAR_SKB,
636a5d36
JM		 14671 },
14672 {
14673 .cmd = NL80211_CMD_DEAUTHENTICATE,
ef6243ac 14674 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 14675 .doit = nl80211_deauthenticate,
5617c6cd 14676 .flags = GENL_UNS_ADMIN_PERM,
41265714 14677 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14678 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 14679 },
14680 {
14681 .cmd = NL80211_CMD_DISASSOCIATE,
ef6243ac 14682 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 14683 .doit = nl80211_disassociate,
5617c6cd 14684 .flags = GENL_UNS_ADMIN_PERM,
41265714 14685 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14686 NL80211_FLAG_NEED_RTNL,
636a5d36 14687 },
04a773ad
JB		 14688 {
14689 .cmd = NL80211_CMD_JOIN_IBSS,
ef6243ac 14690 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 14691 .doit = nl80211_join_ibss,
5617c6cd 14692 .flags = GENL_UNS_ADMIN_PERM,
41265714 14693 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14694 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 14695 },
14696 {
14697 .cmd = NL80211_CMD_LEAVE_IBSS,
ef6243ac 14698 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 14699 .doit = nl80211_leave_ibss,
5617c6cd 14700 .flags = GENL_UNS_ADMIN_PERM,
41265714 14701 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14702 NL80211_FLAG_NEED_RTNL,
04a773ad 14703 },
aff89a9b
JB		 14704#ifdef CONFIG_NL80211_TESTMODE
14705 {
14706 .cmd = NL80211_CMD_TESTMODE,
ef6243ac 14707 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
aff89a9b 14708 .doit = nl80211_testmode_do,
71063f0e 14709 .dumpit = nl80211_testmode_dump,
5617c6cd 14710 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14711 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14712 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 14713 },
14714#endif
b23aa676
SO		 14715 {
14716 .cmd = NL80211_CMD_CONNECT,
ef6243ac 14717 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 14718 .doit = nl80211_connect,
5617c6cd 14719 .flags = GENL_UNS_ADMIN_PERM,
41265714 14720 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 14721 NL80211_FLAG_NEED_RTNL |
14722 NL80211_FLAG_CLEAR_SKB,
b23aa676 14723 },
088e8df8 14724 {
14725 .cmd = NL80211_CMD_UPDATE_CONNECT_PARAMS,
ef6243ac 14726 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
088e8df8 14727 .doit = nl80211_update_connect_params,
088e8df8 14728 .flags = GENL_ADMIN_PERM,
14729 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 14730 NL80211_FLAG_NEED_RTNL |
14731 NL80211_FLAG_CLEAR_SKB,
088e8df8 14732 },
b23aa676
SO		 14733 {
14734 .cmd = NL80211_CMD_DISCONNECT,
ef6243ac 14735 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 14736 .doit = nl80211_disconnect,
5617c6cd 14737 .flags = GENL_UNS_ADMIN_PERM,
41265714 14738 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14739 NL80211_FLAG_NEED_RTNL,
b23aa676 14740 },
463d0183
JB		 14741 {
14742 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
ef6243ac 14743 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
463d0183 14744 .doit = nl80211_wiphy_netns,
5617c6cd 14745 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14746 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14747 NL80211_FLAG_NEED_RTNL,
463d0183 14748 },
61fa713c
HS		 14749 {
14750 .cmd = NL80211_CMD_GET_SURVEY,
ef6243ac 14751 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
61fa713c
HS		 14752 .dumpit = nl80211_dump_survey,
14753 },
67fbb16b
SO		 14754 {
14755 .cmd = NL80211_CMD_SET_PMKSA,
ef6243ac 14756 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 14757 .doit = nl80211_setdel_pmksa,
5617c6cd 14758 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14759 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 14760 NL80211_FLAG_NEED_RTNL |
14761 NL80211_FLAG_CLEAR_SKB,
67fbb16b
SO		 14762 },
14763 {
14764 .cmd = NL80211_CMD_DEL_PMKSA,
ef6243ac 14765 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 14766 .doit = nl80211_setdel_pmksa,
5617c6cd 14767 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14768 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14769 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 14770 },
14771 {
14772 .cmd = NL80211_CMD_FLUSH_PMKSA,
ef6243ac 14773 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 14774 .doit = nl80211_flush_pmksa,
5617c6cd 14775 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14776 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14777 NL80211_FLAG_NEED_RTNL,
67fbb16b 14778 },
9588bbd5
JM		 14779 {
14780 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
ef6243ac 14781 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 14782 .doit = nl80211_remain_on_channel,
5617c6cd 14783 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14784 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 14785 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 14786 },
14787 {
14788 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
ef6243ac 14789 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 14790 .doit = nl80211_cancel_remain_on_channel,
5617c6cd 14791 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14792 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 14793 NL80211_FLAG_NEED_RTNL,
9588bbd5 14794 },
13ae75b1
JM		 14795 {
14796 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
ef6243ac 14797 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
13ae75b1 14798 .doit = nl80211_set_tx_bitrate_mask,
5617c6cd 14799 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14800 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14801 NL80211_FLAG_NEED_RTNL,
13ae75b1 14802 },
026331c4 14803 {
2e161f78 14804 .cmd = NL80211_CMD_REGISTER_FRAME,
ef6243ac 14805 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 14806 .doit = nl80211_register_mgmt,
5617c6cd 14807 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14808 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 14809 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 14810 },
14811 {
2e161f78 14812 .cmd = NL80211_CMD_FRAME,
ef6243ac 14813 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 14814 .doit = nl80211_tx_mgmt,
5617c6cd 14815 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14816 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
f7ca38df
JB		 14817 NL80211_FLAG_NEED_RTNL,
14818 },
14819 {
14820 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
ef6243ac 14821 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f7ca38df 14822 .doit = nl80211_tx_mgmt_cancel_wait,
5617c6cd 14823 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 14824 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 14825 NL80211_FLAG_NEED_RTNL,
026331c4 14826 },
ffb9eb3d
KV		 14827 {
14828 .cmd = NL80211_CMD_SET_POWER_SAVE,
ef6243ac 14829 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 14830 .doit = nl80211_set_power_save,
5617c6cd 14831 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14832 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14833 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 14834 },
14835 {
14836 .cmd = NL80211_CMD_GET_POWER_SAVE,
ef6243ac 14837 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 14838 .doit = nl80211_get_power_save,
ffb9eb3d 14839 /* can be retrieved by unprivileged users */
4c476991
JB		 14840 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14841 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 14842 },
d6dc1a38
JO		 14843 {
14844 .cmd = NL80211_CMD_SET_CQM,
ef6243ac 14845 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
d6dc1a38 14846 .doit = nl80211_set_cqm,
5617c6cd 14847 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14848 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14849 NL80211_FLAG_NEED_RTNL,
d6dc1a38 14850 },
f444de05
JB		 14851 {
14852 .cmd = NL80211_CMD_SET_CHANNEL,
ef6243ac 14853 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f444de05 14854 .doit = nl80211_set_channel,
5617c6cd 14855 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14856 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14857 NL80211_FLAG_NEED_RTNL,
f444de05 14858 },
e8347eba
BJ		 14859 {
14860 .cmd = NL80211_CMD_SET_WDS_PEER,
ef6243ac 14861 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e8347eba 14862 .doit = nl80211_set_wds_peer,
5617c6cd 14863 .flags = GENL_UNS_ADMIN_PERM,
43b19952
JB		 14864 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14865 NL80211_FLAG_NEED_RTNL,
e8347eba 14866 },
29cbe68c
JB		 14867 {
14868 .cmd = NL80211_CMD_JOIN_MESH,
ef6243ac 14869 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 14870 .doit = nl80211_join_mesh,
5617c6cd 14871 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c
JB		 14872 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14873 NL80211_FLAG_NEED_RTNL,
14874 },
14875 {
14876 .cmd = NL80211_CMD_LEAVE_MESH,
ef6243ac 14877 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 14878 .doit = nl80211_leave_mesh,
5617c6cd 14879 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c
JB		 14880 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14881 NL80211_FLAG_NEED_RTNL,
14882 },
6e0bd6c3
RL		 14883 {
14884 .cmd = NL80211_CMD_JOIN_OCB,
ef6243ac 14885 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 14886 .doit = nl80211_join_ocb,
5617c6cd 14887 .flags = GENL_UNS_ADMIN_PERM,
6e0bd6c3
RL		 14888 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14889 NL80211_FLAG_NEED_RTNL,
14890 },
14891 {
14892 .cmd = NL80211_CMD_LEAVE_OCB,
ef6243ac 14893 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 14894 .doit = nl80211_leave_ocb,
5617c6cd 14895 .flags = GENL_UNS_ADMIN_PERM,
6e0bd6c3
RL		 14896 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14897 NL80211_FLAG_NEED_RTNL,
14898 },
dfb89c56 14899#ifdef CONFIG_PM
ff1b6e69
JB		 14900 {
14901 .cmd = NL80211_CMD_GET_WOWLAN,
ef6243ac 14902 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 14903 .doit = nl80211_get_wowlan,
ff1b6e69
JB		 14904 /* can be retrieved by unprivileged users */
14905 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14906 NL80211_FLAG_NEED_RTNL,
14907 },
14908 {
14909 .cmd = NL80211_CMD_SET_WOWLAN,
ef6243ac 14910 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 14911 .doit = nl80211_set_wowlan,
5617c6cd 14912 .flags = GENL_UNS_ADMIN_PERM,
ff1b6e69
JB		 14913 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14914 NL80211_FLAG_NEED_RTNL,
14915 },
dfb89c56 14916#endif
e5497d76
JB		 14917 {
14918 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
ef6243ac 14919 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e5497d76 14920 .doit = nl80211_set_rekey_data,
5617c6cd 14921 .flags = GENL_UNS_ADMIN_PERM,
e5497d76 14922 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14923 NL80211_FLAG_NEED_RTNL |
14924 NL80211_FLAG_CLEAR_SKB,
e5497d76 14925 },
109086ce
AN		 14926 {
14927 .cmd = NL80211_CMD_TDLS_MGMT,
ef6243ac 14928 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 14929 .doit = nl80211_tdls_mgmt,
5617c6cd 14930 .flags = GENL_UNS_ADMIN_PERM,
109086ce
AN		 14931 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14932 NL80211_FLAG_NEED_RTNL,
14933 },
14934 {
14935 .cmd = NL80211_CMD_TDLS_OPER,
ef6243ac 14936 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 14937 .doit = nl80211_tdls_oper,
5617c6cd 14938 .flags = GENL_UNS_ADMIN_PERM,
109086ce
AN		 14939 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
14940 NL80211_FLAG_NEED_RTNL,
14941 },
28946da7
JB		 14942 {
14943 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
ef6243ac 14944 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
28946da7 14945 .doit = nl80211_register_unexpected_frame,
5617c6cd 14946 .flags = GENL_UNS_ADMIN_PERM,
28946da7
JB		 14947 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14948 NL80211_FLAG_NEED_RTNL,
14949 },
7f6cf311
JB		 14950 {
14951 .cmd = NL80211_CMD_PROBE_CLIENT,
ef6243ac 14952 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
7f6cf311 14953 .doit = nl80211_probe_client,
5617c6cd 14954 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14955 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7f6cf311
JB		 14956 NL80211_FLAG_NEED_RTNL,
14957 },
5e760230
JB		 14958 {
14959 .cmd = NL80211_CMD_REGISTER_BEACONS,
ef6243ac 14960 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5e760230 14961 .doit = nl80211_register_beacons,
5617c6cd 14962 .flags = GENL_UNS_ADMIN_PERM,
5e760230
JB		 14963 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14964 NL80211_FLAG_NEED_RTNL,
14965 },
1d9d9213
SW		 14966 {
14967 .cmd = NL80211_CMD_SET_NOACK_MAP,
ef6243ac 14968 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1d9d9213 14969 .doit = nl80211_set_noack_map,
5617c6cd 14970 .flags = GENL_UNS_ADMIN_PERM,
1d9d9213
SW		 14971 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14972 NL80211_FLAG_NEED_RTNL,
14973 },
98104fde
JB		 14974 {
14975 .cmd = NL80211_CMD_START_P2P_DEVICE,
ef6243ac 14976 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 14977 .doit = nl80211_start_p2p_device,
5617c6cd 14978 .flags = GENL_UNS_ADMIN_PERM,
98104fde
JB		 14979 .internal_flags = NL80211_FLAG_NEED_WDEV |
14980 NL80211_FLAG_NEED_RTNL,
14981 },
14982 {
14983 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
ef6243ac 14984 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 14985 .doit = nl80211_stop_p2p_device,
5617c6cd 14986 .flags = GENL_UNS_ADMIN_PERM,
98104fde
JB		 14987 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
14988 NL80211_FLAG_NEED_RTNL,
cb3b7d87
AB		 14989 },
14990 {
14991 .cmd = NL80211_CMD_START_NAN,
ef6243ac 14992 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 14993 .doit = nl80211_start_nan,
cb3b7d87
AB		 14994 .flags = GENL_ADMIN_PERM,
14995 .internal_flags = NL80211_FLAG_NEED_WDEV |
14996 NL80211_FLAG_NEED_RTNL,
14997 },
14998 {
14999 .cmd = NL80211_CMD_STOP_NAN,
ef6243ac 15000 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 15001 .doit = nl80211_stop_nan,
cb3b7d87
AB		 15002 .flags = GENL_ADMIN_PERM,
15003 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15004 NL80211_FLAG_NEED_RTNL,
a442b761
AB		 15005 },
15006 {
15007 .cmd = NL80211_CMD_ADD_NAN_FUNCTION,
ef6243ac 15008 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 15009 .doit = nl80211_nan_add_func,
a442b761
AB		 15010 .flags = GENL_ADMIN_PERM,
15011 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15012 NL80211_FLAG_NEED_RTNL,
15013 },
15014 {
15015 .cmd = NL80211_CMD_DEL_NAN_FUNCTION,
ef6243ac 15016 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 15017 .doit = nl80211_nan_del_func,
a442b761
AB		 15018 .flags = GENL_ADMIN_PERM,
15019 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15020 NL80211_FLAG_NEED_RTNL,
a5a9dcf2
AB		 15021 },
15022 {
15023 .cmd = NL80211_CMD_CHANGE_NAN_CONFIG,
ef6243ac 15024 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a5a9dcf2 15025 .doit = nl80211_nan_change_config,
a5a9dcf2
AB		 15026 .flags = GENL_ADMIN_PERM,
15027 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15028 NL80211_FLAG_NEED_RTNL,
98104fde 15029 },
f4e583c8
AQ		 15030 {
15031 .cmd = NL80211_CMD_SET_MCAST_RATE,
ef6243ac 15032 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f4e583c8 15033 .doit = nl80211_set_mcast_rate,
5617c6cd 15034 .flags = GENL_UNS_ADMIN_PERM,
77765eaf
VT		 15035 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15036 NL80211_FLAG_NEED_RTNL,
15037 },
15038 {
15039 .cmd = NL80211_CMD_SET_MAC_ACL,
ef6243ac 15040 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
77765eaf 15041 .doit = nl80211_set_mac_acl,
5617c6cd 15042 .flags = GENL_UNS_ADMIN_PERM,
f4e583c8
AQ		 15043 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15044 NL80211_FLAG_NEED_RTNL,
15045 },
04f39047
SW		 15046 {
15047 .cmd = NL80211_CMD_RADAR_DETECT,
ef6243ac 15048 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04f39047 15049 .doit = nl80211_start_radar_detection,
5617c6cd 15050 .flags = GENL_UNS_ADMIN_PERM,
04f39047
SW		 15051 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15052 NL80211_FLAG_NEED_RTNL,
15053 },
3713b4e3
JB		 15054 {
15055 .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
ef6243ac 15056 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3713b4e3 15057 .doit = nl80211_get_protocol_features,
3713b4e3 15058 },
355199e0
JM		 15059 {
15060 .cmd = NL80211_CMD_UPDATE_FT_IES,
ef6243ac 15061 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
355199e0 15062 .doit = nl80211_update_ft_ies,
5617c6cd 15063 .flags = GENL_UNS_ADMIN_PERM,
355199e0
JM		 15064 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15065 NL80211_FLAG_NEED_RTNL,
15066 },
5de17984
AS		 15067 {
15068 .cmd = NL80211_CMD_CRIT_PROTOCOL_START,
ef6243ac 15069 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 15070 .doit = nl80211_crit_protocol_start,
5617c6cd 15071 .flags = GENL_UNS_ADMIN_PERM,
5de17984
AS		 15072 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15073 NL80211_FLAG_NEED_RTNL,
15074 },
15075 {
15076 .cmd = NL80211_CMD_CRIT_PROTOCOL_STOP,
ef6243ac 15077 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 15078 .doit = nl80211_crit_protocol_stop,
5617c6cd 15079 .flags = GENL_UNS_ADMIN_PERM,
5de17984
AS		 15080 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15081 NL80211_FLAG_NEED_RTNL,
be29b99a
AK		 15082 },
15083 {
15084 .cmd = NL80211_CMD_GET_COALESCE,
ef6243ac 15085 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 15086 .doit = nl80211_get_coalesce,
be29b99a
AK		 15087 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15088 NL80211_FLAG_NEED_RTNL,
15089 },
15090 {
15091 .cmd = NL80211_CMD_SET_COALESCE,
ef6243ac 15092 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 15093 .doit = nl80211_set_coalesce,
5617c6cd 15094 .flags = GENL_UNS_ADMIN_PERM,
be29b99a
AK		 15095 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15096 NL80211_FLAG_NEED_RTNL,
16ef1fe2
SW		 15097 },
15098 {
15099 .cmd = NL80211_CMD_CHANNEL_SWITCH,
ef6243ac 15100 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
16ef1fe2 15101 .doit = nl80211_channel_switch,
5617c6cd 15102 .flags = GENL_UNS_ADMIN_PERM,
16ef1fe2
SW		 15103 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15104 NL80211_FLAG_NEED_RTNL,
15105 },
ad7e718c
JB		 15106 {
15107 .cmd = NL80211_CMD_VENDOR,
ef6243ac 15108 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad7e718c 15109 .doit = nl80211_vendor_cmd,
7bdbe400 15110 .dumpit = nl80211_vendor_cmd_dump,
5617c6cd 15111 .flags = GENL_UNS_ADMIN_PERM,
ad7e718c 15112 .internal_flags = NL80211_FLAG_NEED_WIPHY |
d6db02a8
SD		 15113 NL80211_FLAG_NEED_RTNL |
15114 NL80211_FLAG_CLEAR_SKB,
ad7e718c 15115 },
fa9ffc74
KP		 15116 {
15117 .cmd = NL80211_CMD_SET_QOS_MAP,
ef6243ac 15118 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
fa9ffc74 15119 .doit = nl80211_set_qos_map,
5617c6cd 15120 .flags = GENL_UNS_ADMIN_PERM,
fa9ffc74
KP		 15121 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15122 NL80211_FLAG_NEED_RTNL,
15123 },
960d01ac
JB		 15124 {
15125 .cmd = NL80211_CMD_ADD_TX_TS,
ef6243ac 15126 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 15127 .doit = nl80211_add_tx_ts,
5617c6cd 15128 .flags = GENL_UNS_ADMIN_PERM,
960d01ac
JB		 15129 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15130 NL80211_FLAG_NEED_RTNL,
15131 },
15132 {
15133 .cmd = NL80211_CMD_DEL_TX_TS,
ef6243ac 15134 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 15135 .doit = nl80211_del_tx_ts,
5617c6cd 15136 .flags = GENL_UNS_ADMIN_PERM,
960d01ac
JB		 15137 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15138 NL80211_FLAG_NEED_RTNL,
15139 },
1057d35e
AN		 15140 {
15141 .cmd = NL80211_CMD_TDLS_CHANNEL_SWITCH,
ef6243ac 15142 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 15143 .doit = nl80211_tdls_channel_switch,
5617c6cd 15144 .flags = GENL_UNS_ADMIN_PERM,
1057d35e
AN		 15145 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15146 NL80211_FLAG_NEED_RTNL,
15147 },
15148 {
15149 .cmd = NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH,
ef6243ac 15150 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 15151 .doit = nl80211_tdls_cancel_channel_switch,
5617c6cd 15152 .flags = GENL_UNS_ADMIN_PERM,
1057d35e
AN		 15153 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15154 NL80211_FLAG_NEED_RTNL,
15155 },
ce0ce13a
MB		 15156 {
15157 .cmd = NL80211_CMD_SET_MULTICAST_TO_UNICAST,
ef6243ac 15158 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ce0ce13a 15159 .doit = nl80211_set_multicast_to_unicast,
ce0ce13a
MB		 15160 .flags = GENL_UNS_ADMIN_PERM,
15161 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15162 NL80211_FLAG_NEED_RTNL,
15163 },
3a00df57
AS		 15164 {
15165 .cmd = NL80211_CMD_SET_PMK,
ef6243ac 15166 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 15167 .doit = nl80211_set_pmk,
3a00df57 15168 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 15169 NL80211_FLAG_NEED_RTNL |
15170 NL80211_FLAG_CLEAR_SKB,
3a00df57
AS		 15171 },
15172 {
15173 .cmd = NL80211_CMD_DEL_PMK,
ef6243ac 15174 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 15175 .doit = nl80211_del_pmk,
3a00df57
AS		 15176 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15177 NL80211_FLAG_NEED_RTNL,
15178 },
40cbfa90
SD		 15179 {
15180 .cmd = NL80211_CMD_EXTERNAL_AUTH,
ef6243ac 15181 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
40cbfa90 15182 .doit = nl80211_external_auth,
40cbfa90
SD		 15183 .flags = GENL_ADMIN_PERM,
15184 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15185 NL80211_FLAG_NEED_RTNL,
15186 },
2576a9ac
DK		 15187 {
15188 .cmd = NL80211_CMD_CONTROL_PORT_FRAME,
ef6243ac 15189 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2576a9ac 15190 .doit = nl80211_tx_control_port,
2576a9ac
DK		 15191 .flags = GENL_UNS_ADMIN_PERM,
15192 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15193 NL80211_FLAG_NEED_RTNL,
15194 },
81e54d08
PKC		 15195 {
15196 .cmd = NL80211_CMD_GET_FTM_RESPONDER_STATS,
ef6243ac 15197 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
81e54d08 15198 .doit = nl80211_get_ftm_responder_stats,
81e54d08
PKC		 15199 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15200 NL80211_FLAG_NEED_RTNL,
15201 },
9bb7e0f2
JB		 15202 {
15203 .cmd = NL80211_CMD_PEER_MEASUREMENT_START,
ef6243ac 15204 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9bb7e0f2 15205 .doit = nl80211_pmsr_start,
9bb7e0f2
JB		 15206 .flags = GENL_UNS_ADMIN_PERM,
15207 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15208 NL80211_FLAG_NEED_RTNL,
15209 },
30c63115
S		 15210 {
15211 .cmd = NL80211_CMD_NOTIFY_RADAR,
ef6243ac 15212 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
30c63115 15213 .doit = nl80211_notify_radar_detection,
30c63115
S		 15214 .flags = GENL_UNS_ADMIN_PERM,
15215 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15216 NL80211_FLAG_NEED_RTNL,
15217 },
cb74e977
SD		 15218 {
15219 .cmd = NL80211_CMD_UPDATE_OWE_INFO,
15220 .doit = nl80211_update_owe_info,
15221 .flags = GENL_ADMIN_PERM,
5ab92e7f
RM		 15222 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15223 NL80211_FLAG_NEED_RTNL,
15224 },
15225 {
15226 .cmd = NL80211_CMD_PROBE_MESH_LINK,
15227 .doit = nl80211_probe_mesh_link,
15228 .flags = GENL_UNS_ADMIN_PERM,
cb74e977
SD		 15229 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15230 NL80211_FLAG_NEED_RTNL,
15231 },
77f576de
T		 15232 {
15233 .cmd = NL80211_CMD_SET_TID_CONFIG,
15234 .doit = nl80211_set_tid_config,
15235 .flags = GENL_UNS_ADMIN_PERM,
15236 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15237 NL80211_FLAG_NEED_RTNL,
15238 },
55682965 15239};
9588bbd5 15240
56989f6d 15241static struct genl_family nl80211_fam __ro_after_init = {
489111e5
JB		 15242 .name = NL80211_GENL_NAME, /* have users key off the name instead */
15243 .hdrsize = 0, /* no private header */
15244 .version = 1, /* no particular meaning now */
15245 .maxattr = NL80211_ATTR_MAX,
3b0f31f2 15246 .policy = nl80211_policy,
489111e5
JB		 15247 .netnsok = true,
15248 .pre_doit = nl80211_pre_doit,
15249 .post_doit = nl80211_post_doit,
15250 .module = THIS_MODULE,
15251 .ops = nl80211_ops,
15252 .n_ops = ARRAY_SIZE(nl80211_ops),
15253 .mcgrps = nl80211_mcgrps,
15254 .n_mcgrps = ARRAY_SIZE(nl80211_mcgrps),
50508d94 15255 .parallel_ops = true,
489111e5
JB		 15256};
15257
55682965
JB		 15258/* notification functions */
15259
3bb20556
JB		 15260void nl80211_notify_wiphy(struct cfg80211_registered_device *rdev,
15261 enum nl80211_commands cmd)
55682965
JB		 15262{
15263 struct sk_buff *msg;
86e8cf98 15264 struct nl80211_dump_wiphy_state state = {};
55682965 15265
3bb20556
JB		 15266 WARN_ON(cmd != NL80211_CMD_NEW_WIPHY &&
15267 cmd != NL80211_CMD_DEL_WIPHY);
15268
fd2120ca 15269 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 15270 if (!msg)
15271 return;
15272
3bb20556 15273 if (nl80211_send_wiphy(rdev, cmd, msg, 0, 0, 0, &state) < 0) {
55682965
JB		 15274 nlmsg_free(msg);
15275 return;
15276 }
15277
68eb5503 15278 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15279 NL80211_MCGRP_CONFIG, GFP_KERNEL);
55682965
JB		 15280}
15281
896ff063
DK		 15282void nl80211_notify_iface(struct cfg80211_registered_device *rdev,
15283 struct wireless_dev *wdev,
15284 enum nl80211_commands cmd)
15285{
15286 struct sk_buff *msg;
15287
896ff063
DK		 15288 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15289 if (!msg)
15290 return;
15291
3d1a5bbf 15292 if (nl80211_send_iface(msg, 0, 0, 0, rdev, wdev, cmd) < 0) {
896ff063
DK		 15293 nlmsg_free(msg);
15294 return;
15295 }
15296
15297 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
15298 NL80211_MCGRP_CONFIG, GFP_KERNEL);
15299}
15300
362a415d
JB		 15301static int nl80211_add_scan_req(struct sk_buff *msg,
15302 struct cfg80211_registered_device *rdev)
15303{
15304 struct cfg80211_scan_request *req = rdev->scan_req;
15305 struct nlattr *nest;
15306 int i;
15307
15308 if (WARN_ON(!req))
15309 return 0;
15310
ae0be8de 15311 nest = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_SSIDS);
362a415d
JB		 15312 if (!nest)
15313 goto nla_put_failure;
9360ffd1
DM		 15314 for (i = 0; i < req->n_ssids; i++) {
15315 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
15316 goto nla_put_failure;
15317 }
362a415d
JB		 15318 nla_nest_end(msg, nest);
15319
2032f3b2
TP		 15320 if (req->flags & NL80211_SCAN_FLAG_FREQ_KHZ) {
15321 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQ_KHZ);
15322 if (!nest)
15323 goto nla_put_failure;
15324 for (i = 0; i < req->n_channels; i++) {
15325 if (nla_put_u32(msg, i,
15326 ieee80211_channel_to_khz(req->channels[i])))
15327 goto nla_put_failure;
15328 }
15329 nla_nest_end(msg, nest);
15330 } else {
15331 nest = nla_nest_start_noflag(msg,
15332 NL80211_ATTR_SCAN_FREQUENCIES);
15333 if (!nest)
9360ffd1 15334 goto nla_put_failure;
2032f3b2
TP		 15335 for (i = 0; i < req->n_channels; i++) {
15336 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
15337 goto nla_put_failure;
15338 }
15339 nla_nest_end(msg, nest);
9360ffd1 15340 }
362a415d 15341
9360ffd1
DM		 15342 if (req->ie &&
15343 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
15344 goto nla_put_failure;
362a415d 15345
ae917c9f
JB		 15346 if (req->flags &&
15347 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags))
15348 goto nla_put_failure;
ed473771 15349
1d76250b
AS		 15350 if (req->info.scan_start_tsf &&
15351 (nla_put_u64_64bit(msg, NL80211_ATTR_SCAN_START_TIME_TSF,
15352 req->info.scan_start_tsf, NL80211_BSS_PAD) ||
15353 nla_put(msg, NL80211_ATTR_SCAN_START_TIME_TSF_BSSID, ETH_ALEN,
15354 req->info.tsf_bssid)))
15355 goto nla_put_failure;
15356
362a415d
JB		 15357 return 0;
15358 nla_put_failure:
15359 return -ENOBUFS;
15360}
15361
505a2e88 15362static int nl80211_prep_scan_msg(struct sk_buff *msg,
a538e2d5 15363 struct cfg80211_registered_device *rdev,
fd014284 15364 struct wireless_dev *wdev,
15e47304 15365 u32 portid, u32 seq, int flags,
a538e2d5 15366 u32 cmd)
2a519311
JB		 15367{
15368 void *hdr;
15369
15e47304 15370 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 15371 if (!hdr)
15372 return -1;
15373
9360ffd1 15374 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 15375 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
15376 wdev->netdev->ifindex)) ||
2dad624e
ND		 15377 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
15378 NL80211_ATTR_PAD))
9360ffd1 15379 goto nla_put_failure;
2a519311 15380
362a415d
JB		 15381 /* ignore errors and send incomplete event anyway */
15382 nl80211_add_scan_req(msg, rdev);
2a519311 15383
053c095a
JB		 15384 genlmsg_end(msg, hdr);
15385 return 0;
2a519311
JB		 15386
15387 nla_put_failure:
15388 genlmsg_cancel(msg, hdr);
15389 return -EMSGSIZE;
15390}
15391
807f8a8c 15392static int
505a2e88 15393nl80211_prep_sched_scan_msg(struct sk_buff *msg,
96b08fd6 15394 struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 15395{
15396 void *hdr;
15397
96b08fd6 15398 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
807f8a8c
LC		 15399 if (!hdr)
15400 return -1;
15401
96b08fd6
AVS		 15402 if (nla_put_u32(msg, NL80211_ATTR_WIPHY,
15403 wiphy_to_rdev(req->wiphy)->wiphy_idx) ||
15404 nla_put_u32(msg, NL80211_ATTR_IFINDEX, req->dev->ifindex) ||
15405 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, req->reqid,
15406 NL80211_ATTR_PAD))
9360ffd1 15407 goto nla_put_failure;
807f8a8c 15408
053c095a
JB		 15409 genlmsg_end(msg, hdr);
15410 return 0;
807f8a8c
LC		 15411
15412 nla_put_failure:
15413 genlmsg_cancel(msg, hdr);
15414 return -EMSGSIZE;
15415}
15416
a538e2d5 15417void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 15418 struct wireless_dev *wdev)
a538e2d5
JB		 15419{
15420 struct sk_buff *msg;
15421
58050fce 15422 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 15423 if (!msg)
15424 return;
15425
505a2e88 15426 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 15427 NL80211_CMD_TRIGGER_SCAN) < 0) {
15428 nlmsg_free(msg);
15429 return;
15430 }
15431
68eb5503 15432 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15433 NL80211_MCGRP_SCAN, GFP_KERNEL);
a538e2d5
JB		 15434}
15435
f9d15d16
JB		 15436struct sk_buff *nl80211_build_scan_msg(struct cfg80211_registered_device *rdev,
15437 struct wireless_dev *wdev, bool aborted)
2a519311
JB		 15438{
15439 struct sk_buff *msg;
15440
fd2120ca 15441 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311 15442 if (!msg)
f9d15d16 15443 return NULL;
2a519311 15444
505a2e88 15445 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
f9d15d16
JB		 15446 aborted ? NL80211_CMD_SCAN_ABORTED :
15447 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311 15448 nlmsg_free(msg);
f9d15d16 15449 return NULL;
2a519311
JB		 15450 }
15451
f9d15d16 15452 return msg;
2a519311
JB		 15453}
15454
505a2e88
AVS		 15455/* send message created by nl80211_build_scan_msg() */
15456void nl80211_send_scan_msg(struct cfg80211_registered_device *rdev,
15457 struct sk_buff *msg)
807f8a8c 15458{
807f8a8c
LC		 15459 if (!msg)
15460 return;
15461
68eb5503 15462 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15463 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 15464}
15465
96b08fd6 15466void nl80211_send_sched_scan(struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 15467{
15468 struct sk_buff *msg;
15469
58050fce 15470 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 15471 if (!msg)
15472 return;
15473
96b08fd6 15474 if (nl80211_prep_sched_scan_msg(msg, req, cmd) < 0) {
807f8a8c
LC		 15475 nlmsg_free(msg);
15476 return;
15477 }
15478
96b08fd6 15479 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(req->wiphy), msg, 0,
2a94fe48 15480 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 15481}
15482
b0d7aa59
JD		 15483static bool nl80211_reg_change_event_fill(struct sk_buff *msg,
15484 struct regulatory_request *request)
73d54c9e 15485{
73d54c9e 15486 /* Userspace can always count this one always being set */
9360ffd1
DM		 15487 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
15488 goto nla_put_failure;
15489
15490 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
15491 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15492 NL80211_REGDOM_TYPE_WORLD))
15493 goto nla_put_failure;
15494 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
15495 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15496 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
15497 goto nla_put_failure;
15498 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
15499 request->intersect) {
15500 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15501 NL80211_REGDOM_TYPE_INTERSECTION))
15502 goto nla_put_failure;
15503 } else {
15504 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15505 NL80211_REGDOM_TYPE_COUNTRY) ||
15506 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
15507 request->alpha2))
15508 goto nla_put_failure;
15509 }
15510
ad30ca2c
AN		 15511 if (request->wiphy_idx != WIPHY_IDX_INVALID) {
15512 struct wiphy *wiphy = wiphy_idx_to_wiphy(request->wiphy_idx);
15513
15514 if (wiphy &&
15515 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
15516 goto nla_put_failure;
1bdd716c
AN		 15517
15518 if (wiphy &&
15519 wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
15520 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
15521 goto nla_put_failure;
ad30ca2c 15522 }
73d54c9e 15523
b0d7aa59
JD		 15524 return true;
15525
15526nla_put_failure:
15527 return false;
15528}
15529
15530/*
15531 * This can happen on global regulatory changes or device specific settings
15532 * based on custom regulatory domains.
15533 */
15534void nl80211_common_reg_change_event(enum nl80211_commands cmd_id,
15535 struct regulatory_request *request)
15536{
15537 struct sk_buff *msg;
15538 void *hdr;
15539
15540 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15541 if (!msg)
15542 return;
15543
15544 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd_id);
24f6d765 15545 if (!hdr)
15546 goto nla_put_failure;
b0d7aa59 15547
24f6d765 15548 if (!nl80211_reg_change_event_fill(msg, request))
b0d7aa59
JD		 15549 goto nla_put_failure;
15550
3b7b72ee 15551 genlmsg_end(msg, hdr);
73d54c9e 15552
bc43b28c 15553 rcu_read_lock();
68eb5503 15554 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 15555 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
bc43b28c 15556 rcu_read_unlock();
73d54c9e
LR		 15557
15558 return;
15559
15560nla_put_failure:
73d54c9e
LR		 15561 nlmsg_free(msg);
15562}
15563
6039f6d2
JM		 15564static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
15565 struct net_device *netdev,
15566 const u8 *buf, size_t len,
b0b6aa2c 15567 enum nl80211_commands cmd, gfp_t gfp,
4d9ec73d
JM		 15568 int uapsd_queues, const u8 *req_ies,
15569 size_t req_ies_len)
6039f6d2
JM		 15570{
15571 struct sk_buff *msg;
15572 void *hdr;
15573
4d9ec73d 15574 msg = nlmsg_new(100 + len + req_ies_len, gfp);
6039f6d2
JM		 15575 if (!msg)
15576 return;
15577
15578 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
15579 if (!hdr) {
15580 nlmsg_free(msg);
15581 return;
15582 }
15583
9360ffd1
DM		 15584 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15585 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
4d9ec73d
JM		 15586 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
15587 (req_ies &&
15588 nla_put(msg, NL80211_ATTR_REQ_IE, req_ies_len, req_ies)))
9360ffd1 15589 goto nla_put_failure;
6039f6d2 15590
b0b6aa2c
EP		 15591 if (uapsd_queues >= 0) {
15592 struct nlattr *nla_wmm =
ae0be8de 15593 nla_nest_start_noflag(msg, NL80211_ATTR_STA_WME);
b0b6aa2c
EP		 15594 if (!nla_wmm)
15595 goto nla_put_failure;
15596
15597 if (nla_put_u8(msg, NL80211_STA_WME_UAPSD_QUEUES,
15598 uapsd_queues))
15599 goto nla_put_failure;
15600
15601 nla_nest_end(msg, nla_wmm);
15602 }
15603
3b7b72ee 15604 genlmsg_end(msg, hdr);
6039f6d2 15605
68eb5503 15606 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15607 NL80211_MCGRP_MLME, gfp);
6039f6d2
JM		 15608 return;
15609
15610 nla_put_failure:
6039f6d2
JM		 15611 nlmsg_free(msg);
15612}
15613
15614void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 15615 struct net_device *netdev, const u8 *buf,
15616 size_t len, gfp_t gfp)
6039f6d2
JM		 15617{
15618 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d 15619 NL80211_CMD_AUTHENTICATE, gfp, -1, NULL, 0);
6039f6d2
JM		 15620}
15621
15622void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
15623 struct net_device *netdev, const u8 *buf,
4d9ec73d
JM		 15624 size_t len, gfp_t gfp, int uapsd_queues,
15625 const u8 *req_ies, size_t req_ies_len)
6039f6d2 15626{
e6d6e342 15627 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d
JM		 15628 NL80211_CMD_ASSOCIATE, gfp, uapsd_queues,
15629 req_ies, req_ies_len);
6039f6d2
JM		 15630}
15631
53b46b84 15632void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 15633 struct net_device *netdev, const u8 *buf,
15634 size_t len, gfp_t gfp)
6039f6d2
JM		 15635{
15636 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d 15637 NL80211_CMD_DEAUTHENTICATE, gfp, -1, NULL, 0);
6039f6d2
JM		 15638}
15639
53b46b84
JM		 15640void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
15641 struct net_device *netdev, const u8 *buf,
e6d6e342 15642 size_t len, gfp_t gfp)
6039f6d2
JM		 15643{
15644 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d 15645 NL80211_CMD_DISASSOCIATE, gfp, -1, NULL, 0);
6039f6d2
JM		 15646}
15647
6ff57cf8
JB		 15648void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev, const u8 *buf,
15649 size_t len)
cf4e594e 15650{
947add36
JB		 15651 struct wireless_dev *wdev = dev->ieee80211_ptr;
15652 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 15653 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
6ff57cf8
JB		 15654 const struct ieee80211_mgmt *mgmt = (void *)buf;
15655 u32 cmd;
947add36 15656
6ff57cf8
JB		 15657 if (WARN_ON(len < 2))
15658 return;
cf4e594e 15659
4d797fce 15660 if (ieee80211_is_deauth(mgmt->frame_control)) {
6ff57cf8 15661 cmd = NL80211_CMD_UNPROT_DEAUTHENTICATE;
4d797fce 15662 } else if (ieee80211_is_disassoc(mgmt->frame_control)) {
6ff57cf8 15663 cmd = NL80211_CMD_UNPROT_DISASSOCIATE;
4d797fce
JM		 15664 } else if (ieee80211_is_beacon(mgmt->frame_control)) {
15665 if (wdev->unprot_beacon_reported &&
15666 elapsed_jiffies_msecs(wdev->unprot_beacon_reported) < 10000)
15667 return;
15668 cmd = NL80211_CMD_UNPROT_BEACON;
15669 wdev->unprot_beacon_reported = jiffies;
15670 } else {
15671 return;
15672 }
947add36 15673
6ff57cf8 15674 trace_cfg80211_rx_unprot_mlme_mgmt(dev, buf, len);
4d9ec73d
JM		 15675 nl80211_send_mlme_event(rdev, dev, buf, len, cmd, GFP_ATOMIC, -1,
15676 NULL, 0);
cf4e594e 15677}
6ff57cf8 15678EXPORT_SYMBOL(cfg80211_rx_unprot_mlme_mgmt);
cf4e594e 15679
1b06bb40
LR		 15680static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
15681 struct net_device *netdev, int cmd,
e6d6e342 15682 const u8 *addr, gfp_t gfp)
1965c853
JM		 15683{
15684 struct sk_buff *msg;
15685 void *hdr;
15686
e6d6e342 15687 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 15688 if (!msg)
15689 return;
15690
15691 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
15692 if (!hdr) {
15693 nlmsg_free(msg);
15694 return;
15695 }
15696
9360ffd1
DM		 15697 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15698 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15699 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
15700 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
15701 goto nla_put_failure;
1965c853 15702
3b7b72ee 15703 genlmsg_end(msg, hdr);
1965c853 15704
68eb5503 15705 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15706 NL80211_MCGRP_MLME, gfp);
1965c853
JM		 15707 return;
15708
15709 nla_put_failure:
1965c853
JM		 15710 nlmsg_free(msg);
15711}
15712
15713void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 15714 struct net_device *netdev, const u8 *addr,
15715 gfp_t gfp)
1965c853
JM		 15716{
15717 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 15718 addr, gfp);
1965c853
JM		 15719}
15720
15721void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 15722 struct net_device *netdev, const u8 *addr,
15723 gfp_t gfp)
1965c853 15724{
e6d6e342
JB		 15725 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
15726 addr, gfp);
1965c853
JM		 15727}
15728
b23aa676 15729void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
5349a0f7
VK		 15730 struct net_device *netdev,
15731 struct cfg80211_connect_resp_params *cr,
3093ebbe 15732 gfp_t gfp)
b23aa676
SO		 15733{
15734 struct sk_buff *msg;
15735 void *hdr;
15736
a3caf744 15737 msg = nlmsg_new(100 + cr->req_ie_len + cr->resp_ie_len +
76804d28
AVS		 15738 cr->fils.kek_len + cr->fils.pmk_len +
15739 (cr->fils.pmkid ? WLAN_PMKID_LEN : 0), gfp);
b23aa676
SO		 15740 if (!msg)
15741 return;
15742
15743 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
15744 if (!hdr) {
15745 nlmsg_free(msg);
15746 return;
15747 }
15748
9360ffd1
DM		 15749 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15750 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
5349a0f7
VK		 15751 (cr->bssid &&
15752 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, cr->bssid)) ||
bf1ecd21 15753 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE,
5349a0f7
VK		 15754 cr->status < 0 ? WLAN_STATUS_UNSPECIFIED_FAILURE :
15755 cr->status) ||
15756 (cr->status < 0 &&
3093ebbe 15757 (nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
5349a0f7
VK		 15758 nla_put_u32(msg, NL80211_ATTR_TIMEOUT_REASON,
15759 cr->timeout_reason))) ||
15760 (cr->req_ie &&
15761 nla_put(msg, NL80211_ATTR_REQ_IE, cr->req_ie_len, cr->req_ie)) ||
15762 (cr->resp_ie &&
15763 nla_put(msg, NL80211_ATTR_RESP_IE, cr->resp_ie_len,
a3caf744 15764 cr->resp_ie)) ||
76804d28 15765 (cr->fils.update_erp_next_seq_num &&
a3caf744 15766 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
76804d28 15767 cr->fils.erp_next_seq_num)) ||
a3caf744 15768 (cr->status == WLAN_STATUS_SUCCESS &&
76804d28
AVS		 15769 ((cr->fils.kek &&
15770 nla_put(msg, NL80211_ATTR_FILS_KEK, cr->fils.kek_len,
15771 cr->fils.kek)) ||
15772 (cr->fils.pmk &&
15773 nla_put(msg, NL80211_ATTR_PMK, cr->fils.pmk_len, cr->fils.pmk)) ||
15774 (cr->fils.pmkid &&
15775 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, cr->fils.pmkid)))))
9360ffd1 15776 goto nla_put_failure;
b23aa676 15777
3b7b72ee 15778 genlmsg_end(msg, hdr);
b23aa676 15779
68eb5503 15780 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15781 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 15782 return;
15783
15784 nla_put_failure:
b23aa676 15785 nlmsg_free(msg);
b23aa676
SO		 15786}
15787
15788void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
29ce6ecb
AS		 15789 struct net_device *netdev,
15790 struct cfg80211_roam_info *info, gfp_t gfp)
b23aa676
SO		 15791{
15792 struct sk_buff *msg;
15793 void *hdr;
29ce6ecb 15794 const u8 *bssid = info->bss ? info->bss->bssid : info->bssid;
b23aa676 15795
e841b7b1
AVS		 15796 msg = nlmsg_new(100 + info->req_ie_len + info->resp_ie_len +
15797 info->fils.kek_len + info->fils.pmk_len +
15798 (info->fils.pmkid ? WLAN_PMKID_LEN : 0), gfp);
b23aa676
SO		 15799 if (!msg)
15800 return;
15801
15802 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
15803 if (!hdr) {
15804 nlmsg_free(msg);
15805 return;
15806 }
15807
9360ffd1
DM		 15808 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15809 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15810 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
29ce6ecb
AS		 15811 (info->req_ie &&
15812 nla_put(msg, NL80211_ATTR_REQ_IE, info->req_ie_len,
15813 info->req_ie)) ||
15814 (info->resp_ie &&
15815 nla_put(msg, NL80211_ATTR_RESP_IE, info->resp_ie_len,
e841b7b1
AVS		 15816 info->resp_ie)) ||
15817 (info->fils.update_erp_next_seq_num &&
15818 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
15819 info->fils.erp_next_seq_num)) ||
15820 (info->fils.kek &&
15821 nla_put(msg, NL80211_ATTR_FILS_KEK, info->fils.kek_len,
15822 info->fils.kek)) ||
15823 (info->fils.pmk &&
15824 nla_put(msg, NL80211_ATTR_PMK, info->fils.pmk_len, info->fils.pmk)) ||
15825 (info->fils.pmkid &&
15826 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, info->fils.pmkid)))
9360ffd1 15827 goto nla_put_failure;
b23aa676 15828
3b7b72ee 15829 genlmsg_end(msg, hdr);
b23aa676 15830
68eb5503 15831 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15832 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 15833 return;
15834
503c1fb9 15835 nla_put_failure:
503c1fb9
AS		 15836 nlmsg_free(msg);
15837}
15838
15839void nl80211_send_port_authorized(struct cfg80211_registered_device *rdev,
15840 struct net_device *netdev, const u8 *bssid)
15841{
15842 struct sk_buff *msg;
15843 void *hdr;
15844
15845 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15846 if (!msg)
15847 return;
15848
15849 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PORT_AUTHORIZED);
15850 if (!hdr) {
15851 nlmsg_free(msg);
15852 return;
15853 }
15854
f4d75993
CHH		 15855 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15856 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15857 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
503c1fb9
AS		 15858 goto nla_put_failure;
15859
15860 genlmsg_end(msg, hdr);
15861
15862 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
15863 NL80211_MCGRP_MLME, GFP_KERNEL);
15864 return;
15865
b23aa676 15866 nla_put_failure:
b23aa676 15867 nlmsg_free(msg);
b23aa676
SO		 15868}
15869
15870void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
15871 struct net_device *netdev, u16 reason,
667503dd 15872 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 15873{
15874 struct sk_buff *msg;
15875 void *hdr;
15876
4ef8c1c9 15877 msg = nlmsg_new(100 + ie_len, GFP_KERNEL);
b23aa676
SO		 15878 if (!msg)
15879 return;
15880
15881 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
15882 if (!hdr) {
15883 nlmsg_free(msg);
15884 return;
15885 }
15886
9360ffd1
DM		 15887 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15888 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
86b6c465 15889 (reason &&
9360ffd1
DM		 15890 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
15891 (from_ap &&
15892 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
15893 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
15894 goto nla_put_failure;
b23aa676 15895
3b7b72ee 15896 genlmsg_end(msg, hdr);
b23aa676 15897
68eb5503 15898 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15899 NL80211_MCGRP_MLME, GFP_KERNEL);
b23aa676
SO		 15900 return;
15901
15902 nla_put_failure:
b23aa676 15903 nlmsg_free(msg);
b23aa676
SO		 15904}
15905
04a773ad
JB		 15906void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
15907 struct net_device *netdev, const u8 *bssid,
15908 gfp_t gfp)
15909{
15910 struct sk_buff *msg;
15911 void *hdr;
15912
fd2120ca 15913 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 15914 if (!msg)
15915 return;
15916
15917 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
15918 if (!hdr) {
15919 nlmsg_free(msg);
15920 return;
15921 }
15922
9360ffd1
DM		 15923 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
15924 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
15925 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
15926 goto nla_put_failure;
04a773ad 15927
3b7b72ee 15928 genlmsg_end(msg, hdr);
04a773ad 15929
68eb5503 15930 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15931 NL80211_MCGRP_MLME, gfp);
04a773ad
JB		 15932 return;
15933
15934 nla_put_failure:
04a773ad
JB		 15935 nlmsg_free(msg);
15936}
15937
947add36 15938void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
ecbc12ad
BC		 15939 const u8 *ie, u8 ie_len,
15940 int sig_dbm, gfp_t gfp)
c93b5e71 15941{
947add36 15942 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 15943 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
c93b5e71
JC		 15944 struct sk_buff *msg;
15945 void *hdr;
15946
947add36
JB		 15947 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_MESH_POINT))
15948 return;
15949
15950 trace_cfg80211_notify_new_peer_candidate(dev, addr);
15951
4ef8c1c9 15952 msg = nlmsg_new(100 + ie_len, gfp);
c93b5e71
JC		 15953 if (!msg)
15954 return;
15955
15956 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
15957 if (!hdr) {
15958 nlmsg_free(msg);
15959 return;
15960 }
15961
9360ffd1 15962 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36
JB		 15963 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
15964 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
9360ffd1 15965 (ie_len && ie &&
ecbc12ad
BC		 15966 nla_put(msg, NL80211_ATTR_IE, ie_len, ie)) ||
15967 (sig_dbm &&
15968 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)))
9360ffd1 15969 goto nla_put_failure;
c93b5e71 15970
3b7b72ee 15971 genlmsg_end(msg, hdr);
c93b5e71 15972
68eb5503 15973 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15974 NL80211_MCGRP_MLME, gfp);
c93b5e71
JC		 15975 return;
15976
15977 nla_put_failure:
c93b5e71
JC		 15978 nlmsg_free(msg);
15979}
947add36 15980EXPORT_SYMBOL(cfg80211_notify_new_peer_candidate);
c93b5e71 15981
a3b8b056
JM		 15982void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
15983 struct net_device *netdev, const u8 *addr,
15984 enum nl80211_key_type key_type, int key_id,
e6d6e342 15985 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 15986{
15987 struct sk_buff *msg;
15988 void *hdr;
15989
e6d6e342 15990 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 15991 if (!msg)
15992 return;
15993
15994 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
15995 if (!hdr) {
15996 nlmsg_free(msg);
15997 return;
15998 }
15999
9360ffd1
DM		 16000 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16001 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16002 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
16003 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
16004 (key_id != -1 &&
16005 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
16006 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
16007 goto nla_put_failure;
a3b8b056 16008
3b7b72ee 16009 genlmsg_end(msg, hdr);
a3b8b056 16010
68eb5503 16011 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16012 NL80211_MCGRP_MLME, gfp);
a3b8b056
JM		 16013 return;
16014
16015 nla_put_failure:
a3b8b056
JM		 16016 nlmsg_free(msg);
16017}
16018
6bad8766
LR		 16019void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
16020 struct ieee80211_channel *channel_before,
16021 struct ieee80211_channel *channel_after)
16022{
16023 struct sk_buff *msg;
16024 void *hdr;
16025 struct nlattr *nl_freq;
16026
fd2120ca 16027 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 16028 if (!msg)
16029 return;
16030
16031 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
16032 if (!hdr) {
16033 nlmsg_free(msg);
16034 return;
16035 }
16036
16037 /*
16038 * Since we are applying the beacon hint to a wiphy we know its
16039 * wiphy_idx is valid
16040 */
9360ffd1
DM		 16041 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
16042 goto nla_put_failure;
6bad8766
LR		 16043
16044 /* Before */
ae0be8de 16045 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_BEFORE);
6bad8766
LR		 16046 if (!nl_freq)
16047 goto nla_put_failure;
50f32718
HD		 16048
16049 if (nl80211_msg_put_channel(msg, wiphy, channel_before, false))
6bad8766
LR		 16050 goto nla_put_failure;
16051 nla_nest_end(msg, nl_freq);
16052
16053 /* After */
ae0be8de 16054 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_AFTER);
6bad8766
LR		 16055 if (!nl_freq)
16056 goto nla_put_failure;
50f32718
HD		 16057
16058 if (nl80211_msg_put_channel(msg, wiphy, channel_after, false))
6bad8766
LR		 16059 goto nla_put_failure;
16060 nla_nest_end(msg, nl_freq);
16061
3b7b72ee 16062 genlmsg_end(msg, hdr);
6bad8766 16063
463d0183 16064 rcu_read_lock();
68eb5503 16065 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 16066 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
463d0183 16067 rcu_read_unlock();
6bad8766
LR		 16068
16069 return;
16070
16071nla_put_failure:
6bad8766
LR		 16072 nlmsg_free(msg);
16073}
16074
9588bbd5
JM		 16075static void nl80211_send_remain_on_chan_event(
16076 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 16077 struct wireless_dev *wdev, u64 cookie,
9588bbd5 16078 struct ieee80211_channel *chan,
9588bbd5
JM		 16079 unsigned int duration, gfp_t gfp)
16080{
16081 struct sk_buff *msg;
16082 void *hdr;
16083
16084 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16085 if (!msg)
16086 return;
16087
16088 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
16089 if (!hdr) {
16090 nlmsg_free(msg);
16091 return;
16092 }
16093
9360ffd1 16094 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16095 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16096 wdev->netdev->ifindex)) ||
2dad624e
ND		 16097 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16098 NL80211_ATTR_PAD) ||
9360ffd1 16099 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
42d97a59
JB		 16100 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
16101 NL80211_CHAN_NO_HT) ||
2dad624e
ND		 16102 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16103 NL80211_ATTR_PAD))
9360ffd1 16104 goto nla_put_failure;
9588bbd5 16105
9360ffd1
DM		 16106 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
16107 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
16108 goto nla_put_failure;
9588bbd5 16109
3b7b72ee 16110 genlmsg_end(msg, hdr);
9588bbd5 16111
68eb5503 16112 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16113 NL80211_MCGRP_MLME, gfp);
9588bbd5
JM		 16114 return;
16115
16116 nla_put_failure:
9588bbd5
JM		 16117 nlmsg_free(msg);
16118}
16119
947add36
JB		 16120void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
16121 struct ieee80211_channel *chan,
16122 unsigned int duration, gfp_t gfp)
9588bbd5 16123{
947add36 16124 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16125 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16126
16127 trace_cfg80211_ready_on_channel(wdev, cookie, chan, duration);
9588bbd5 16128 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 16129 rdev, wdev, cookie, chan,
42d97a59 16130 duration, gfp);
9588bbd5 16131}
947add36 16132EXPORT_SYMBOL(cfg80211_ready_on_channel);
9588bbd5 16133
947add36
JB		 16134void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
16135 struct ieee80211_channel *chan,
16136 gfp_t gfp)
9588bbd5 16137{
947add36 16138 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16139 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16140
16141 trace_cfg80211_ready_on_channel_expired(wdev, cookie, chan);
9588bbd5 16142 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
42d97a59 16143 rdev, wdev, cookie, chan, 0, gfp);
9588bbd5 16144}
947add36 16145EXPORT_SYMBOL(cfg80211_remain_on_channel_expired);
9588bbd5 16146
1c38c7f2
JP		 16147void cfg80211_tx_mgmt_expired(struct wireless_dev *wdev, u64 cookie,
16148 struct ieee80211_channel *chan,
16149 gfp_t gfp)
16150{
16151 struct wiphy *wiphy = wdev->wiphy;
16152 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
16153
16154 trace_cfg80211_tx_mgmt_expired(wdev, cookie, chan);
16155 nl80211_send_remain_on_chan_event(NL80211_CMD_FRAME_WAIT_CANCEL,
16156 rdev, wdev, cookie, chan, 0, gfp);
16157}
16158EXPORT_SYMBOL(cfg80211_tx_mgmt_expired);
16159
947add36
JB		 16160void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
16161 struct station_info *sinfo, gfp_t gfp)
98b62183 16162{
947add36 16163 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16164 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
98b62183
JB		 16165 struct sk_buff *msg;
16166
947add36
JB		 16167 trace_cfg80211_new_sta(dev, mac_addr, sinfo);
16168
58050fce 16169 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 16170 if (!msg)
16171 return;
16172
cf5ead82 16173 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION, 0, 0, 0,
66266b3a 16174 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 16175 nlmsg_free(msg);
16176 return;
16177 }
16178
68eb5503 16179 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16180 NL80211_MCGRP_MLME, gfp);
98b62183 16181}
947add36 16182EXPORT_SYMBOL(cfg80211_new_sta);
98b62183 16183
cf5ead82
JB		 16184void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
16185 struct station_info *sinfo, gfp_t gfp)
ec15e68b 16186{
947add36 16187 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16188 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ec15e68b 16189 struct sk_buff *msg;
73887fd9 16190 struct station_info empty_sinfo = {};
cf5ead82 16191
73887fd9
JB		 16192 if (!sinfo)
16193 sinfo = &empty_sinfo;
ec15e68b 16194
947add36
JB		 16195 trace_cfg80211_del_sta(dev, mac_addr);
16196
58050fce 16197 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7ea3e110
JB		 16198 if (!msg) {
16199 cfg80211_sinfo_release_content(sinfo);
73887fd9 16200 return;
7ea3e110 16201 }
ec15e68b 16202
cf5ead82 16203 if (nl80211_send_station(msg, NL80211_CMD_DEL_STATION, 0, 0, 0,
57007121 16204 rdev, dev, mac_addr, sinfo) < 0) {
ec15e68b 16205 nlmsg_free(msg);
73887fd9 16206 return;
ec15e68b
JM		 16207 }
16208
68eb5503 16209 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16210 NL80211_MCGRP_MLME, gfp);
ec15e68b 16211}
cf5ead82 16212EXPORT_SYMBOL(cfg80211_del_sta_sinfo);
ec15e68b 16213
947add36
JB		 16214void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
16215 enum nl80211_connect_failed_reason reason,
16216 gfp_t gfp)
ed44a951 16217{
947add36 16218 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16219 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ed44a951
PP		 16220 struct sk_buff *msg;
16221 void *hdr;
16222
16223 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
16224 if (!msg)
16225 return;
16226
16227 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
16228 if (!hdr) {
16229 nlmsg_free(msg);
16230 return;
16231 }
16232
16233 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16234 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
16235 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
16236 goto nla_put_failure;
16237
16238 genlmsg_end(msg, hdr);
16239
68eb5503 16240 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16241 NL80211_MCGRP_MLME, gfp);
ed44a951
PP		 16242 return;
16243
16244 nla_put_failure:
ed44a951
PP		 16245 nlmsg_free(msg);
16246}
947add36 16247EXPORT_SYMBOL(cfg80211_conn_failed);
ed44a951 16248
b92ab5d8
JB		 16249static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
16250 const u8 *addr, gfp_t gfp)
28946da7
JB		 16251{
16252 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 16253 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
28946da7
JB		 16254 struct sk_buff *msg;
16255 void *hdr;
6aa7de05 16256 u32 nlportid = READ_ONCE(wdev->ap_unexpected_nlportid);
28946da7 16257
15e47304 16258 if (!nlportid)
28946da7
JB		 16259 return false;
16260
16261 msg = nlmsg_new(100, gfp);
16262 if (!msg)
16263 return true;
16264
b92ab5d8 16265 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 16266 if (!hdr) {
16267 nlmsg_free(msg);
16268 return true;
16269 }
16270
9360ffd1
DM		 16271 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16272 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16273 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
16274 goto nla_put_failure;
28946da7 16275
9c90a9f6 16276 genlmsg_end(msg, hdr);
15e47304 16277 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 16278 return true;
16279
16280 nla_put_failure:
28946da7
JB		 16281 nlmsg_free(msg);
16282 return true;
16283}
16284
947add36
JB		 16285bool cfg80211_rx_spurious_frame(struct net_device *dev,
16286 const u8 *addr, gfp_t gfp)
b92ab5d8 16287{
947add36
JB		 16288 struct wireless_dev *wdev = dev->ieee80211_ptr;
16289 bool ret;
16290
16291 trace_cfg80211_rx_spurious_frame(dev, addr);
16292
16293 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
16294 wdev->iftype != NL80211_IFTYPE_P2P_GO)) {
16295 trace_cfg80211_return_bool(false);
16296 return false;
16297 }
16298 ret = __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
16299 addr, gfp);
16300 trace_cfg80211_return_bool(ret);
16301 return ret;
b92ab5d8 16302}
947add36 16303EXPORT_SYMBOL(cfg80211_rx_spurious_frame);
b92ab5d8 16304
947add36
JB		 16305bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
16306 const u8 *addr, gfp_t gfp)
b92ab5d8 16307{
947add36
JB		 16308 struct wireless_dev *wdev = dev->ieee80211_ptr;
16309 bool ret;
16310
16311 trace_cfg80211_rx_unexpected_4addr_frame(dev, addr);
16312
16313 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
16314 wdev->iftype != NL80211_IFTYPE_P2P_GO &&
16315 wdev->iftype != NL80211_IFTYPE_AP_VLAN)) {
16316 trace_cfg80211_return_bool(false);
16317 return false;
16318 }
16319 ret = __nl80211_unexpected_frame(dev,
16320 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
16321 addr, gfp);
16322 trace_cfg80211_return_bool(ret);
16323 return ret;
b92ab5d8 16324}
947add36 16325EXPORT_SYMBOL(cfg80211_rx_unexpected_4addr_frame);
b92ab5d8 16326
2e161f78 16327int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 16328 struct wireless_dev *wdev, u32 nlportid,
804483e9 16329 int freq, int sig_dbm,
19504cf5 16330 const u8 *buf, size_t len, u32 flags, gfp_t gfp)
026331c4 16331{
71bbc994 16332 struct net_device *netdev = wdev->netdev;
026331c4
JM		 16333 struct sk_buff *msg;
16334 void *hdr;
026331c4 16335
4ef8c1c9 16336 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 16337 if (!msg)
16338 return -ENOMEM;
16339
2e161f78 16340 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 16341 if (!hdr) {
16342 nlmsg_free(msg);
16343 return -ENOMEM;
16344 }
16345
9360ffd1 16346 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16347 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16348 netdev->ifindex)) ||
2dad624e
ND		 16349 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16350 NL80211_ATTR_PAD) ||
e76fede8 16351 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, KHZ_TO_MHZ(freq)) ||
942ba88b 16352 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET, freq % 1000) ||
9360ffd1
DM		 16353 (sig_dbm &&
16354 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
19504cf5
VK		 16355 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
16356 (flags &&
16357 nla_put_u32(msg, NL80211_ATTR_RXMGMT_FLAGS, flags)))
9360ffd1 16358 goto nla_put_failure;
026331c4 16359
3b7b72ee 16360 genlmsg_end(msg, hdr);
026331c4 16361
15e47304 16362 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 16363
16364 nla_put_failure:
026331c4
JM		 16365 nlmsg_free(msg);
16366 return -ENOBUFS;
16367}
16368
dca9ca2d
MT		 16369static void nl80211_frame_tx_status(struct wireless_dev *wdev, u64 cookie,
16370 const u8 *buf, size_t len, bool ack,
16371 gfp_t gfp, enum nl80211_commands command)
026331c4 16372{
947add36 16373 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16374 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
71bbc994 16375 struct net_device *netdev = wdev->netdev;
026331c4
JM		 16376 struct sk_buff *msg;
16377 void *hdr;
16378
dca9ca2d
MT		 16379 if (command == NL80211_CMD_FRAME_TX_STATUS)
16380 trace_cfg80211_mgmt_tx_status(wdev, cookie, ack);
16381 else
16382 trace_cfg80211_control_port_tx_status(wdev, cookie, ack);
947add36 16383
4ef8c1c9 16384 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 16385 if (!msg)
16386 return;
16387
dca9ca2d 16388 hdr = nl80211hdr_put(msg, 0, 0, 0, command);
026331c4
JM		 16389 if (!hdr) {
16390 nlmsg_free(msg);
16391 return;
16392 }
16393
9360ffd1 16394 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16395 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16396 netdev->ifindex)) ||
2dad624e
ND		 16397 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16398 NL80211_ATTR_PAD) ||
9360ffd1 16399 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
2dad624e
ND		 16400 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16401 NL80211_ATTR_PAD) ||
9360ffd1
DM		 16402 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
16403 goto nla_put_failure;
026331c4 16404
3b7b72ee 16405 genlmsg_end(msg, hdr);
026331c4 16406
68eb5503 16407 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16408 NL80211_MCGRP_MLME, gfp);
026331c4
JM		 16409 return;
16410
dca9ca2d 16411nla_put_failure:
026331c4
JM		 16412 nlmsg_free(msg);
16413}
dca9ca2d
MT		 16414
16415void cfg80211_control_port_tx_status(struct wireless_dev *wdev, u64 cookie,
16416 const u8 *buf, size_t len, bool ack,
16417 gfp_t gfp)
16418{
16419 nl80211_frame_tx_status(wdev, cookie, buf, len, ack, gfp,
16420 NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS);
16421}
16422EXPORT_SYMBOL(cfg80211_control_port_tx_status);
16423
16424void cfg80211_mgmt_tx_status(struct wireless_dev *wdev, u64 cookie,
16425 const u8 *buf, size_t len, bool ack, gfp_t gfp)
16426{
16427 nl80211_frame_tx_status(wdev, cookie, buf, len, ack, gfp,
16428 NL80211_CMD_FRAME_TX_STATUS);
16429}
947add36 16430EXPORT_SYMBOL(cfg80211_mgmt_tx_status);
026331c4 16431
6a671a50 16432static int __nl80211_rx_control_port(struct net_device *dev,
a948f713 16433 struct sk_buff *skb,
6a671a50
DK		 16434 bool unencrypted, gfp_t gfp)
16435{
16436 struct wireless_dev *wdev = dev->ieee80211_ptr;
16437 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
a948f713 16438 struct ethhdr *ehdr = eth_hdr(skb);
8d74a623 16439 const u8 *addr = ehdr->h_source;
a948f713 16440 u16 proto = be16_to_cpu(skb->protocol);
6a671a50
DK		 16441 struct sk_buff *msg;
16442 void *hdr;
a948f713
DK		 16443 struct nlattr *frame;
16444
6a671a50
DK		 16445 u32 nlportid = READ_ONCE(wdev->conn_owner_nlportid);
16446
16447 if (!nlportid)
16448 return -ENOENT;
16449
a948f713 16450 msg = nlmsg_new(100 + skb->len, gfp);
6a671a50
DK		 16451 if (!msg)
16452 return -ENOMEM;
16453
16454 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONTROL_PORT_FRAME);
16455 if (!hdr) {
16456 nlmsg_free(msg);
16457 return -ENOBUFS;
16458 }
16459
16460 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16461 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16462 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16463 NL80211_ATTR_PAD) ||
8d74a623 16464 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
6a671a50
DK		 16465 nla_put_u16(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE, proto) ||
16466 (unencrypted && nla_put_flag(msg,
16467 NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT)))
16468 goto nla_put_failure;
16469
a948f713
DK		 16470 frame = nla_reserve(msg, NL80211_ATTR_FRAME, skb->len);
16471 if (!frame)
16472 goto nla_put_failure;
16473
16474 skb_copy_bits(skb, 0, nla_data(frame), skb->len);
6a671a50
DK		 16475 genlmsg_end(msg, hdr);
16476
16477 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
16478
16479 nla_put_failure:
16480 nlmsg_free(msg);
16481 return -ENOBUFS;
16482}
16483
16484bool cfg80211_rx_control_port(struct net_device *dev,
a948f713 16485 struct sk_buff *skb, bool unencrypted)
6a671a50
DK		 16486{
16487 int ret;
16488
a948f713
DK		 16489 trace_cfg80211_rx_control_port(dev, skb, unencrypted);
16490 ret = __nl80211_rx_control_port(dev, skb, unencrypted, GFP_ATOMIC);
6a671a50
DK		 16491 trace_cfg80211_return_bool(ret == 0);
16492 return ret == 0;
16493}
16494EXPORT_SYMBOL(cfg80211_rx_control_port);
16495
5b97f49d
JB		 16496static struct sk_buff *cfg80211_prepare_cqm(struct net_device *dev,
16497 const char *mac, gfp_t gfp)
d6dc1a38 16498{
947add36 16499 struct wireless_dev *wdev = dev->ieee80211_ptr;
5b97f49d
JB		 16500 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
16501 struct sk_buff *msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16502 void **cb;
947add36 16503
d6dc1a38 16504 if (!msg)
5b97f49d 16505 return NULL;
d6dc1a38 16506
5b97f49d
JB		 16507 cb = (void **)msg->cb;
16508
16509 cb[0] = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
16510 if (!cb[0]) {
d6dc1a38 16511 nlmsg_free(msg);
5b97f49d 16512 return NULL;
d6dc1a38
JO		 16513 }
16514
9360ffd1 16515 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36 16516 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9360ffd1 16517 goto nla_put_failure;
d6dc1a38 16518
5b97f49d 16519 if (mac && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
d6dc1a38
JO		 16520 goto nla_put_failure;
16521
ae0be8de 16522 cb[1] = nla_nest_start_noflag(msg, NL80211_ATTR_CQM);
5b97f49d 16523 if (!cb[1])
9360ffd1 16524 goto nla_put_failure;
d6dc1a38 16525
5b97f49d 16526 cb[2] = rdev;
d6dc1a38 16527
5b97f49d
JB		 16528 return msg;
16529 nla_put_failure:
16530 nlmsg_free(msg);
16531 return NULL;
16532}
16533
16534static void cfg80211_send_cqm(struct sk_buff *msg, gfp_t gfp)
16535{
16536 void **cb = (void **)msg->cb;
16537 struct cfg80211_registered_device *rdev = cb[2];
16538
16539 nla_nest_end(msg, cb[1]);
16540 genlmsg_end(msg, cb[0]);
16541
16542 memset(msg->cb, 0, sizeof(msg->cb));
d6dc1a38 16543
68eb5503 16544 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16545 NL80211_MCGRP_MLME, gfp);
5b97f49d
JB		 16546}
16547
16548void cfg80211_cqm_rssi_notify(struct net_device *dev,
16549 enum nl80211_cqm_rssi_threshold_event rssi_event,
bee427b8 16550 s32 rssi_level, gfp_t gfp)
5b97f49d
JB		 16551{
16552 struct sk_buff *msg;
4a4b8169
AZ		 16553 struct wireless_dev *wdev = dev->ieee80211_ptr;
16554 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
5b97f49d 16555
bee427b8 16556 trace_cfg80211_cqm_rssi_notify(dev, rssi_event, rssi_level);
5b97f49d 16557
98f03342
JB		 16558 if (WARN_ON(rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW &&
16559 rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH))
16560 return;
16561
4a4b8169
AZ		 16562 if (wdev->cqm_config) {
16563 wdev->cqm_config->last_rssi_event_value = rssi_level;
16564
16565 cfg80211_cqm_rssi_update(rdev, dev);
16566
16567 if (rssi_level == 0)
16568 rssi_level = wdev->cqm_config->last_rssi_event_value;
16569 }
16570
5b97f49d
JB		 16571 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
16572 if (!msg)
16573 return;
16574
16575 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
16576 rssi_event))
16577 goto nla_put_failure;
16578
bee427b8
AZ		 16579 if (rssi_level && nla_put_s32(msg, NL80211_ATTR_CQM_RSSI_LEVEL,
16580 rssi_level))
16581 goto nla_put_failure;
16582
5b97f49d
JB		 16583 cfg80211_send_cqm(msg, gfp);
16584
d6dc1a38
JO		 16585 return;
16586
16587 nla_put_failure:
d6dc1a38
JO		 16588 nlmsg_free(msg);
16589}
947add36 16590EXPORT_SYMBOL(cfg80211_cqm_rssi_notify);
d6dc1a38 16591
5b97f49d
JB		 16592void cfg80211_cqm_txe_notify(struct net_device *dev,
16593 const u8 *peer, u32 num_packets,
16594 u32 rate, u32 intvl, gfp_t gfp)
16595{
16596 struct sk_buff *msg;
16597
16598 msg = cfg80211_prepare_cqm(dev, peer, gfp);
16599 if (!msg)
16600 return;
16601
16602 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
16603 goto nla_put_failure;
16604
16605 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
16606 goto nla_put_failure;
16607
16608 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
16609 goto nla_put_failure;
16610
16611 cfg80211_send_cqm(msg, gfp);
16612 return;
16613
16614 nla_put_failure:
16615 nlmsg_free(msg);
16616}
16617EXPORT_SYMBOL(cfg80211_cqm_txe_notify);
16618
16619void cfg80211_cqm_pktloss_notify(struct net_device *dev,
16620 const u8 *peer, u32 num_packets, gfp_t gfp)
16621{
16622 struct sk_buff *msg;
16623
16624 trace_cfg80211_cqm_pktloss_notify(dev, peer, num_packets);
16625
16626 msg = cfg80211_prepare_cqm(dev, peer, gfp);
16627 if (!msg)
16628 return;
16629
16630 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
16631 goto nla_put_failure;
16632
16633 cfg80211_send_cqm(msg, gfp);
16634 return;
16635
16636 nla_put_failure:
16637 nlmsg_free(msg);
16638}
16639EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify);
16640
98f03342
JB		 16641void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp)
16642{
16643 struct sk_buff *msg;
16644
16645 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
16646 if (!msg)
16647 return;
16648
16649 if (nla_put_flag(msg, NL80211_ATTR_CQM_BEACON_LOSS_EVENT))
16650 goto nla_put_failure;
16651
16652 cfg80211_send_cqm(msg, gfp);
16653 return;
16654
16655 nla_put_failure:
16656 nlmsg_free(msg);
16657}
16658EXPORT_SYMBOL(cfg80211_cqm_beacon_loss_notify);
16659
947add36
JB		 16660static void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
16661 struct net_device *netdev, const u8 *bssid,
16662 const u8 *replay_ctr, gfp_t gfp)
e5497d76
JB		 16663{
16664 struct sk_buff *msg;
16665 struct nlattr *rekey_attr;
16666 void *hdr;
16667
58050fce 16668 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 16669 if (!msg)
16670 return;
16671
16672 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
16673 if (!hdr) {
16674 nlmsg_free(msg);
16675 return;
16676 }
16677
9360ffd1
DM		 16678 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16679 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16680 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
16681 goto nla_put_failure;
e5497d76 16682
ae0be8de 16683 rekey_attr = nla_nest_start_noflag(msg, NL80211_ATTR_REKEY_DATA);
e5497d76
JB		 16684 if (!rekey_attr)
16685 goto nla_put_failure;
16686
9360ffd1
DM		 16687 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
16688 NL80211_REPLAY_CTR_LEN, replay_ctr))
16689 goto nla_put_failure;
e5497d76
JB		 16690
16691 nla_nest_end(msg, rekey_attr);
16692
3b7b72ee 16693 genlmsg_end(msg, hdr);
e5497d76 16694
68eb5503 16695 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16696 NL80211_MCGRP_MLME, gfp);
e5497d76
JB		 16697 return;
16698
16699 nla_put_failure:
e5497d76
JB		 16700 nlmsg_free(msg);
16701}
16702
947add36
JB		 16703void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
16704 const u8 *replay_ctr, gfp_t gfp)
16705{
16706 struct wireless_dev *wdev = dev->ieee80211_ptr;
16707 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16708 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16709
16710 trace_cfg80211_gtk_rekey_notify(dev, bssid);
16711 nl80211_gtk_rekey_notify(rdev, dev, bssid, replay_ctr, gfp);
16712}
16713EXPORT_SYMBOL(cfg80211_gtk_rekey_notify);
16714
16715static void
16716nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
16717 struct net_device *netdev, int index,
16718 const u8 *bssid, bool preauth, gfp_t gfp)
c9df56b4
JM		 16719{
16720 struct sk_buff *msg;
16721 struct nlattr *attr;
16722 void *hdr;
16723
58050fce 16724 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 16725 if (!msg)
16726 return;
16727
16728 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
16729 if (!hdr) {
16730 nlmsg_free(msg);
16731 return;
16732 }
16733
9360ffd1
DM		 16734 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16735 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
16736 goto nla_put_failure;
c9df56b4 16737
ae0be8de 16738 attr = nla_nest_start_noflag(msg, NL80211_ATTR_PMKSA_CANDIDATE);
c9df56b4
JM		 16739 if (!attr)
16740 goto nla_put_failure;
16741
9360ffd1
DM		 16742 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
16743 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
16744 (preauth &&
16745 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
16746 goto nla_put_failure;
c9df56b4
JM		 16747
16748 nla_nest_end(msg, attr);
16749
3b7b72ee 16750 genlmsg_end(msg, hdr);
c9df56b4 16751
68eb5503 16752 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16753 NL80211_MCGRP_MLME, gfp);
c9df56b4
JM		 16754 return;
16755
16756 nla_put_failure:
c9df56b4
JM		 16757 nlmsg_free(msg);
16758}
16759
947add36
JB		 16760void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
16761 const u8 *bssid, bool preauth, gfp_t gfp)
16762{
16763 struct wireless_dev *wdev = dev->ieee80211_ptr;
16764 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16765 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16766
16767 trace_cfg80211_pmksa_candidate_notify(dev, index, bssid, preauth);
16768 nl80211_pmksa_candidate_notify(rdev, dev, index, bssid, preauth, gfp);
16769}
16770EXPORT_SYMBOL(cfg80211_pmksa_candidate_notify);
16771
16772static void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
16773 struct net_device *netdev,
16774 struct cfg80211_chan_def *chandef,
f8d7552e
LC		 16775 gfp_t gfp,
16776 enum nl80211_commands notif,
16777 u8 count)
5314526b
TP		 16778{
16779 struct sk_buff *msg;
16780 void *hdr;
16781
58050fce 16782 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 16783 if (!msg)
16784 return;
16785
f8d7552e 16786 hdr = nl80211hdr_put(msg, 0, 0, 0, notif);
5314526b
TP		 16787 if (!hdr) {
16788 nlmsg_free(msg);
16789 return;
16790 }
16791
683b6d3b
JB		 16792 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
16793 goto nla_put_failure;
16794
16795 if (nl80211_send_chandef(msg, chandef))
7eab0f64 16796 goto nla_put_failure;
5314526b 16797
f8d7552e
LC		 16798 if ((notif == NL80211_CMD_CH_SWITCH_STARTED_NOTIFY) &&
16799 (nla_put_u32(msg, NL80211_ATTR_CH_SWITCH_COUNT, count)))
16800 goto nla_put_failure;
16801
5314526b
TP		 16802 genlmsg_end(msg, hdr);
16803
68eb5503 16804 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16805 NL80211_MCGRP_MLME, gfp);
5314526b
TP		 16806 return;
16807
16808 nla_put_failure:
5314526b
TP		 16809 nlmsg_free(msg);
16810}
16811
947add36
JB		 16812void cfg80211_ch_switch_notify(struct net_device *dev,
16813 struct cfg80211_chan_def *chandef)
84f10708 16814{
947add36
JB		 16815 struct wireless_dev *wdev = dev->ieee80211_ptr;
16816 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16817 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36 16818
e487eaeb 16819 ASSERT_WDEV_LOCK(wdev);
947add36 16820
e487eaeb 16821 trace_cfg80211_ch_switch_notify(dev, chandef);
947add36 16822
9e0e2961 16823 wdev->chandef = *chandef;
96f55f12 16824 wdev->preset_chandef = *chandef;
5dc8cdce
SM		 16825
16826 if (wdev->iftype == NL80211_IFTYPE_STATION &&
16827 !WARN_ON(!wdev->current_bss))
0afd425b 16828 cfg80211_update_assoc_bss_entry(wdev, chandef->chan);
5dc8cdce 16829
d34990bb
MV		 16830 cfg80211_sched_dfs_chan_update(rdev);
16831
f8d7552e
LC		 16832 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
16833 NL80211_CMD_CH_SWITCH_NOTIFY, 0);
947add36
JB		 16834}
16835EXPORT_SYMBOL(cfg80211_ch_switch_notify);
16836
f8d7552e
LC		 16837void cfg80211_ch_switch_started_notify(struct net_device *dev,
16838 struct cfg80211_chan_def *chandef,
16839 u8 count)
16840{
16841 struct wireless_dev *wdev = dev->ieee80211_ptr;
16842 struct wiphy *wiphy = wdev->wiphy;
16843 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
16844
16845 trace_cfg80211_ch_switch_started_notify(dev, chandef);
16846
16847 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
16848 NL80211_CMD_CH_SWITCH_STARTED_NOTIFY, count);
16849}
16850EXPORT_SYMBOL(cfg80211_ch_switch_started_notify);
16851
04f39047
SW		 16852void
16853nl80211_radar_notify(struct cfg80211_registered_device *rdev,
d2859df5 16854 const struct cfg80211_chan_def *chandef,
04f39047
SW		 16855 enum nl80211_radar_event event,
16856 struct net_device *netdev, gfp_t gfp)
16857{
16858 struct sk_buff *msg;
16859 void *hdr;
16860
16861 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16862 if (!msg)
16863 return;
16864
16865 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
16866 if (!hdr) {
16867 nlmsg_free(msg);
16868 return;
16869 }
16870
16871 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
16872 goto nla_put_failure;
16873
16874 /* NOP and radar events don't need a netdev parameter */
16875 if (netdev) {
16876 struct wireless_dev *wdev = netdev->ieee80211_ptr;
16877
16878 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
2dad624e
ND		 16879 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16880 NL80211_ATTR_PAD))
04f39047
SW		 16881 goto nla_put_failure;
16882 }
16883
16884 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
16885 goto nla_put_failure;
16886
16887 if (nl80211_send_chandef(msg, chandef))
16888 goto nla_put_failure;
16889
9c90a9f6 16890 genlmsg_end(msg, hdr);
04f39047 16891
68eb5503 16892 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16893 NL80211_MCGRP_MLME, gfp);
04f39047
SW		 16894 return;
16895
16896 nla_put_failure:
04f39047
SW		 16897 nlmsg_free(msg);
16898}
16899
466b9936 16900void cfg80211_sta_opmode_change_notify(struct net_device *dev, const u8 *mac,
16901 struct sta_opmode_info *sta_opmode,
16902 gfp_t gfp)
16903{
16904 struct sk_buff *msg;
16905 struct wireless_dev *wdev = dev->ieee80211_ptr;
16906 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
16907 void *hdr;
16908
16909 if (WARN_ON(!mac))
16910 return;
16911
16912 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16913 if (!msg)
16914 return;
16915
16916 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STA_OPMODE_CHANGED);
16917 if (!hdr) {
16918 nlmsg_free(msg);
16919 return;
16920 }
16921
16922 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
16923 goto nla_put_failure;
16924
16925 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
16926 goto nla_put_failure;
16927
16928 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
16929 goto nla_put_failure;
16930
16931 if ((sta_opmode->changed & STA_OPMODE_SMPS_MODE_CHANGED) &&
16932 nla_put_u8(msg, NL80211_ATTR_SMPS_MODE, sta_opmode->smps_mode))
16933 goto nla_put_failure;
16934
16935 if ((sta_opmode->changed & STA_OPMODE_MAX_BW_CHANGED) &&
0016d320 16936 nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, sta_opmode->bw))
466b9936 16937 goto nla_put_failure;
16938
16939 if ((sta_opmode->changed & STA_OPMODE_N_SS_CHANGED) &&
16940 nla_put_u8(msg, NL80211_ATTR_NSS, sta_opmode->rx_nss))
16941 goto nla_put_failure;
16942
16943 genlmsg_end(msg, hdr);
16944
16945 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
16946 NL80211_MCGRP_MLME, gfp);
16947
16948 return;
16949
16950nla_put_failure:
16951 nlmsg_free(msg);
16952}
16953EXPORT_SYMBOL(cfg80211_sta_opmode_change_notify);
16954
7f6cf311 16955void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
c4b50cd3
VN		 16956 u64 cookie, bool acked, s32 ack_signal,
16957 bool is_valid_ack_signal, gfp_t gfp)
7f6cf311
JB		 16958{
16959 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 16960 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
7f6cf311
JB		 16961 struct sk_buff *msg;
16962 void *hdr;
7f6cf311 16963
4ee3e063
BL		 16964 trace_cfg80211_probe_status(dev, addr, cookie, acked);
16965
58050fce 16966 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 16967
7f6cf311
JB		 16968 if (!msg)
16969 return;
16970
16971 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
16972 if (!hdr) {
16973 nlmsg_free(msg);
16974 return;
16975 }
16976
9360ffd1
DM		 16977 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16978 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16979 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
2dad624e
ND		 16980 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16981 NL80211_ATTR_PAD) ||
c4b50cd3
VN		 16982 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
16983 (is_valid_ack_signal && nla_put_s32(msg, NL80211_ATTR_ACK_SIGNAL,
16984 ack_signal)))
9360ffd1 16985 goto nla_put_failure;
7f6cf311 16986
9c90a9f6 16987 genlmsg_end(msg, hdr);
7f6cf311 16988
68eb5503 16989 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16990 NL80211_MCGRP_MLME, gfp);
7f6cf311
JB		 16991 return;
16992
16993 nla_put_failure:
7f6cf311
JB		 16994 nlmsg_free(msg);
16995}
16996EXPORT_SYMBOL(cfg80211_probe_status);
16997
e76fede8
TP		 16998void cfg80211_report_obss_beacon_khz(struct wiphy *wiphy, const u8 *frame,
16999 size_t len, int freq, int sig_dbm)
5e760230 17000{
f26cbf40 17001 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
5e760230
JB		 17002 struct sk_buff *msg;
17003 void *hdr;
37c73b5f 17004 struct cfg80211_beacon_registration *reg;
5e760230 17005
4ee3e063
BL		 17006 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
17007
37c73b5f
BG		 17008 spin_lock_bh(&rdev->beacon_registrations_lock);
17009 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
17010 msg = nlmsg_new(len + 100, GFP_ATOMIC);
17011 if (!msg) {
17012 spin_unlock_bh(&rdev->beacon_registrations_lock);
17013 return;
17014 }
5e760230 17015
37c73b5f
BG		 17016 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
17017 if (!hdr)
17018 goto nla_put_failure;
5e760230 17019
37c73b5f
BG		 17020 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17021 (freq &&
942ba88b
TP		 17022 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
17023 KHZ_TO_MHZ(freq)) ||
17024 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
17025 freq % 1000))) ||
37c73b5f
BG		 17026 (sig_dbm &&
17027 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
17028 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
17029 goto nla_put_failure;
5e760230 17030
37c73b5f 17031 genlmsg_end(msg, hdr);
5e760230 17032
37c73b5f
BG		 17033 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
17034 }
17035 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 17036 return;
17037
17038 nla_put_failure:
37c73b5f 17039 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 17040 nlmsg_free(msg);
17041}
e76fede8 17042EXPORT_SYMBOL(cfg80211_report_obss_beacon_khz);
5e760230 17043
cd8f7cb4 17044#ifdef CONFIG_PM
8cd4d456
LC		 17045static int cfg80211_net_detect_results(struct sk_buff *msg,
17046 struct cfg80211_wowlan_wakeup *wakeup)
17047{
17048 struct cfg80211_wowlan_nd_info *nd = wakeup->net_detect;
17049 struct nlattr *nl_results, *nl_match, *nl_freqs;
17050 int i, j;
17051
ae0be8de
MK		 17052 nl_results = nla_nest_start_noflag(msg,
17053 NL80211_WOWLAN_TRIG_NET_DETECT_RESULTS);
8cd4d456
LC		 17054 if (!nl_results)
17055 return -EMSGSIZE;
17056
17057 for (i = 0; i < nd->n_matches; i++) {
17058 struct cfg80211_wowlan_nd_match *match = nd->matches[i];
17059
ae0be8de 17060 nl_match = nla_nest_start_noflag(msg, i);
8cd4d456
LC		 17061 if (!nl_match)
17062 break;
17063
17064 /* The SSID attribute is optional in nl80211, but for
17065 * simplicity reasons it's always present in the
17066 * cfg80211 structure. If a driver can't pass the
17067 * SSID, that needs to be changed. A zero length SSID
17068 * is still a valid SSID (wildcard), so it cannot be
17069 * used for this purpose.
17070 */
17071 if (nla_put(msg, NL80211_ATTR_SSID, match->ssid.ssid_len,
17072 match->ssid.ssid)) {
17073 nla_nest_cancel(msg, nl_match);
17074 goto out;
17075 }
17076
17077 if (match->n_channels) {
ae0be8de
MK		 17078 nl_freqs = nla_nest_start_noflag(msg,
17079 NL80211_ATTR_SCAN_FREQUENCIES);
8cd4d456
LC		 17080 if (!nl_freqs) {
17081 nla_nest_cancel(msg, nl_match);
17082 goto out;
17083 }
17084
17085 for (j = 0; j < match->n_channels; j++) {
5528fae8 17086 if (nla_put_u32(msg, j, match->channels[j])) {
8cd4d456
LC		 17087 nla_nest_cancel(msg, nl_freqs);
17088 nla_nest_cancel(msg, nl_match);
17089 goto out;
17090 }
17091 }
17092
17093 nla_nest_end(msg, nl_freqs);
17094 }
17095
17096 nla_nest_end(msg, nl_match);
17097 }
17098
17099out:
17100 nla_nest_end(msg, nl_results);
17101 return 0;
17102}
17103
cd8f7cb4
JB		 17104void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
17105 struct cfg80211_wowlan_wakeup *wakeup,
17106 gfp_t gfp)
17107{
f26cbf40 17108 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
cd8f7cb4
JB		 17109 struct sk_buff *msg;
17110 void *hdr;
9c90a9f6 17111 int size = 200;
cd8f7cb4
JB		 17112
17113 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
17114
17115 if (wakeup)
17116 size += wakeup->packet_present_len;
17117
17118 msg = nlmsg_new(size, gfp);
17119 if (!msg)
17120 return;
17121
17122 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
17123 if (!hdr)
17124 goto free_msg;
17125
17126 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 17127 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17128 NL80211_ATTR_PAD))
cd8f7cb4
JB		 17129 goto free_msg;
17130
17131 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
17132 wdev->netdev->ifindex))
17133 goto free_msg;
17134
17135 if (wakeup) {
17136 struct nlattr *reasons;
17137
ae0be8de
MK		 17138 reasons = nla_nest_start_noflag(msg,
17139 NL80211_ATTR_WOWLAN_TRIGGERS);
7fa322c8
JB		 17140 if (!reasons)
17141 goto free_msg;
cd8f7cb4
JB		 17142
17143 if (wakeup->disconnect &&
17144 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
17145 goto free_msg;
17146 if (wakeup->magic_pkt &&
17147 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
17148 goto free_msg;
17149 if (wakeup->gtk_rekey_failure &&
17150 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
17151 goto free_msg;
17152 if (wakeup->eap_identity_req &&
17153 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
17154 goto free_msg;
17155 if (wakeup->four_way_handshake &&
17156 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
17157 goto free_msg;
17158 if (wakeup->rfkill_release &&
17159 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
17160 goto free_msg;
17161
17162 if (wakeup->pattern_idx >= 0 &&
17163 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
17164 wakeup->pattern_idx))
17165 goto free_msg;
17166
ae917c9f
JB		 17167 if (wakeup->tcp_match &&
17168 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH))
17169 goto free_msg;
2a0e047e 17170
ae917c9f
JB		 17171 if (wakeup->tcp_connlost &&
17172 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST))
17173 goto free_msg;
2a0e047e 17174
ae917c9f
JB		 17175 if (wakeup->tcp_nomoretokens &&
17176 nla_put_flag(msg,
17177 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS))
17178 goto free_msg;
2a0e047e 17179
cd8f7cb4
JB		 17180 if (wakeup->packet) {
17181 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
17182 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
17183
17184 if (!wakeup->packet_80211) {
17185 pkt_attr =
17186 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
17187 len_attr =
17188 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
17189 }
17190
17191 if (wakeup->packet_len &&
17192 nla_put_u32(msg, len_attr, wakeup->packet_len))
17193 goto free_msg;
17194
17195 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
17196 wakeup->packet))
17197 goto free_msg;
17198 }
17199
8cd4d456
LC		 17200 if (wakeup->net_detect &&
17201 cfg80211_net_detect_results(msg, wakeup))
17202 goto free_msg;
17203
cd8f7cb4
JB		 17204 nla_nest_end(msg, reasons);
17205 }
17206
9c90a9f6 17207 genlmsg_end(msg, hdr);
cd8f7cb4 17208
68eb5503 17209 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17210 NL80211_MCGRP_MLME, gfp);
cd8f7cb4
JB		 17211 return;
17212
17213 free_msg:
17214 nlmsg_free(msg);
17215}
17216EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
17217#endif
17218
3475b094
JM		 17219void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
17220 enum nl80211_tdls_operation oper,
17221 u16 reason_code, gfp_t gfp)
17222{
17223 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 17224 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
3475b094
JM		 17225 struct sk_buff *msg;
17226 void *hdr;
3475b094
JM		 17227
17228 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
17229 reason_code);
17230
17231 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17232 if (!msg)
17233 return;
17234
17235 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
17236 if (!hdr) {
17237 nlmsg_free(msg);
17238 return;
17239 }
17240
17241 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17242 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17243 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
17244 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
17245 (reason_code > 0 &&
17246 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
17247 goto nla_put_failure;
17248
9c90a9f6 17249 genlmsg_end(msg, hdr);
3475b094 17250
68eb5503 17251 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17252 NL80211_MCGRP_MLME, gfp);
3475b094
JM		 17253 return;
17254
17255 nla_put_failure:
3475b094
JM		 17256 nlmsg_free(msg);
17257}
17258EXPORT_SYMBOL(cfg80211_tdls_oper_request);
17259
026331c4
JM		 17260static int nl80211_netlink_notify(struct notifier_block * nb,
17261 unsigned long state,
17262 void *_notify)
17263{
17264 struct netlink_notify *notify = _notify;
17265 struct cfg80211_registered_device *rdev;
17266 struct wireless_dev *wdev;
37c73b5f 17267 struct cfg80211_beacon_registration *reg, *tmp;
026331c4 17268
8f815cdd 17269 if (state != NETLINK_URELEASE || notify->protocol != NETLINK_GENERIC)
026331c4
JM		 17270 return NOTIFY_DONE;
17271
17272 rcu_read_lock();
17273
5e760230 17274 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ca986ad9 17275 struct cfg80211_sched_scan_request *sched_scan_req;
753aacfd 17276
ca986ad9
AVS		 17277 list_for_each_entry_rcu(sched_scan_req,
17278 &rdev->sched_scan_req_list,
17279 list) {
17280 if (sched_scan_req->owner_nlportid == notify->portid) {
17281 sched_scan_req->nl_owner_dead = true;
753aacfd 17282 schedule_work(&rdev->sched_scan_stop_wk);
ca986ad9 17283 }
753aacfd 17284 }
78f22b6a 17285
53873f13 17286 list_for_each_entry_rcu(wdev, &rdev->wiphy.wdev_list, list) {
15e47304 17287 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f 17288
ab81007a
JB		 17289 if (wdev->owner_nlportid == notify->portid) {
17290 wdev->nl_owner_dead = true;
17291 schedule_work(&rdev->destroy_work);
17292 } else if (wdev->conn_owner_nlportid == notify->portid) {
bd2522b1 17293 schedule_work(&wdev->disconnect_wk);
ab81007a 17294 }
9bb7e0f2
JB		 17295
17296 cfg80211_release_pmsr(wdev, notify->portid);
78f22b6a
JB		 17297 }
17298
37c73b5f
BG		 17299 spin_lock_bh(&rdev->beacon_registrations_lock);
17300 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
17301 list) {
17302 if (reg->nlportid == notify->portid) {
17303 list_del(&reg->list);
17304 kfree(reg);
17305 break;
17306 }
17307 }
17308 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 17309 }
026331c4
JM		 17310
17311 rcu_read_unlock();
17312
05050753
I		 17313 /*
17314 * It is possible that the user space process that is controlling the
17315 * indoor setting disappeared, so notify the regulatory core.
17316 */
17317 regulatory_netlink_notify(notify->portid);
6784c7db 17318 return NOTIFY_OK;
026331c4
JM		 17319}
17320
17321static struct notifier_block nl80211_netlink_notifier = {
17322 .notifier_call = nl80211_netlink_notify,
17323};
17324
355199e0
JM		 17325void cfg80211_ft_event(struct net_device *netdev,
17326 struct cfg80211_ft_event_params *ft_event)
17327{
17328 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
f26cbf40 17329 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
355199e0
JM		 17330 struct sk_buff *msg;
17331 void *hdr;
355199e0
JM		 17332
17333 trace_cfg80211_ft_event(wiphy, netdev, ft_event);
17334
17335 if (!ft_event->target_ap)
17336 return;
17337
1039d081
DL		 17338 msg = nlmsg_new(100 + ft_event->ies_len + ft_event->ric_ies_len,
17339 GFP_KERNEL);
355199e0
JM		 17340 if (!msg)
17341 return;
17342
17343 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FT_EVENT);
ae917c9f
JB		 17344 if (!hdr)
17345 goto out;
355199e0 17346
ae917c9f
JB		 17347 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17348 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17349 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ft_event->target_ap))
17350 goto out;
355199e0 17351
ae917c9f
JB		 17352 if (ft_event->ies &&
17353 nla_put(msg, NL80211_ATTR_IE, ft_event->ies_len, ft_event->ies))
17354 goto out;
17355 if (ft_event->ric_ies &&
17356 nla_put(msg, NL80211_ATTR_IE_RIC, ft_event->ric_ies_len,
17357 ft_event->ric_ies))
17358 goto out;
355199e0 17359
9c90a9f6 17360 genlmsg_end(msg, hdr);
355199e0 17361
68eb5503 17362 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17363 NL80211_MCGRP_MLME, GFP_KERNEL);
ae917c9f
JB		 17364 return;
17365 out:
17366 nlmsg_free(msg);
355199e0
JM		 17367}
17368EXPORT_SYMBOL(cfg80211_ft_event);
17369
5de17984
AS		 17370void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp)
17371{
17372 struct cfg80211_registered_device *rdev;
17373 struct sk_buff *msg;
17374 void *hdr;
17375 u32 nlportid;
17376
f26cbf40 17377 rdev = wiphy_to_rdev(wdev->wiphy);
5de17984
AS		 17378 if (!rdev->crit_proto_nlportid)
17379 return;
17380
17381 nlportid = rdev->crit_proto_nlportid;
17382 rdev->crit_proto_nlportid = 0;
17383
17384 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17385 if (!msg)
17386 return;
17387
17388 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CRIT_PROTOCOL_STOP);
17389 if (!hdr)
17390 goto nla_put_failure;
17391
17392 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 17393 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17394 NL80211_ATTR_PAD))
5de17984
AS		 17395 goto nla_put_failure;
17396
17397 genlmsg_end(msg, hdr);
17398
17399 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
17400 return;
17401
17402 nla_put_failure:
5de17984 17403 nlmsg_free(msg);
5de17984
AS		 17404}
17405EXPORT_SYMBOL(cfg80211_crit_proto_stopped);
17406
348baf0e
JB		 17407void nl80211_send_ap_stopped(struct wireless_dev *wdev)
17408{
17409 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17410 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
348baf0e
JB		 17411 struct sk_buff *msg;
17412 void *hdr;
17413
17414 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17415 if (!msg)
17416 return;
17417
17418 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STOP_AP);
17419 if (!hdr)
17420 goto out;
17421
17422 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17423 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex) ||
2dad624e
ND		 17424 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17425 NL80211_ATTR_PAD))
348baf0e
JB		 17426 goto out;
17427
17428 genlmsg_end(msg, hdr);
17429
17430 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(wiphy), msg, 0,
17431 NL80211_MCGRP_MLME, GFP_KERNEL);
17432 return;
17433 out:
17434 nlmsg_free(msg);
17435}
17436
40cbfa90
SD		 17437int cfg80211_external_auth_request(struct net_device *dev,
17438 struct cfg80211_external_auth_params *params,
17439 gfp_t gfp)
17440{
17441 struct wireless_dev *wdev = dev->ieee80211_ptr;
17442 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
17443 struct sk_buff *msg;
17444 void *hdr;
17445
17446 if (!wdev->conn_owner_nlportid)
17447 return -EINVAL;
17448
17449 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17450 if (!msg)
17451 return -ENOMEM;
17452
17453 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_EXTERNAL_AUTH);
17454 if (!hdr)
17455 goto nla_put_failure;
17456
17457 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17458 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17459 nla_put_u32(msg, NL80211_ATTR_AKM_SUITES, params->key_mgmt_suite) ||
17460 nla_put_u32(msg, NL80211_ATTR_EXTERNAL_AUTH_ACTION,
17461 params->action) ||
17462 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, params->bssid) ||
17463 nla_put(msg, NL80211_ATTR_SSID, params->ssid.ssid_len,
17464 params->ssid.ssid))
17465 goto nla_put_failure;
17466
17467 genlmsg_end(msg, hdr);
17468 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
17469 wdev->conn_owner_nlportid);
17470 return 0;
17471
17472 nla_put_failure:
17473 nlmsg_free(msg);
17474 return -ENOBUFS;
17475}
17476EXPORT_SYMBOL(cfg80211_external_auth_request);
17477
cb74e977
SD		 17478void cfg80211_update_owe_info_event(struct net_device *netdev,
17479 struct cfg80211_update_owe_info *owe_info,
17480 gfp_t gfp)
17481{
17482 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
17483 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
17484 struct sk_buff *msg;
17485 void *hdr;
17486
17487 trace_cfg80211_update_owe_info_event(wiphy, netdev, owe_info);
17488
17489 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17490 if (!msg)
17491 return;
17492
17493 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_UPDATE_OWE_INFO);
17494 if (!hdr)
17495 goto nla_put_failure;
17496
17497 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17498 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17499 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, owe_info->peer))
17500 goto nla_put_failure;
17501
17502 if (!owe_info->ie_len ||
17503 nla_put(msg, NL80211_ATTR_IE, owe_info->ie_len, owe_info->ie))
17504 goto nla_put_failure;
17505
17506 genlmsg_end(msg, hdr);
17507
17508 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17509 NL80211_MCGRP_MLME, gfp);
17510 return;
17511
17512nla_put_failure:
17513 genlmsg_cancel(msg, hdr);
17514 nlmsg_free(msg);
17515}
17516EXPORT_SYMBOL(cfg80211_update_owe_info_event);
17517
55682965
JB		 17518/* initialisation/exit functions */
17519
56989f6d 17520int __init nl80211_init(void)
55682965 17521{
0d63cbb5 17522 int err;
55682965 17523
489111e5 17524 err = genl_register_family(&nl80211_fam);
55682965
JB		 17525 if (err)
17526 return err;
17527
026331c4
JM		 17528 err = netlink_register_notifier(&nl80211_netlink_notifier);
17529 if (err)
17530 goto err_out;
17531
55682965
JB		 17532 return 0;
17533 err_out:
17534 genl_unregister_family(&nl80211_fam);
17535 return err;
17536}
17537
17538void nl80211_exit(void)
17539{
026331c4 17540 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 17541 genl_unregister_family(&nl80211_fam);
17542}
Linux 6.x block layer and io_uring tree(s)