projects / linux-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
wifi: nl80211: reject fragmented and non-inheritance elements
[linux-block.git] / net / wireless / nl80211.c
CommitLineData
457c8996 1// SPDX-License-Identifier: GPL-2.0-only
55682965
JB		 2/*
3 * This is the new netlink-based wireless configuration interface.
4 *
026331c4 5 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
2740f0cf 6 * Copyright 2013-2014 Intel Mobile Communications GmbH
66cd794e 7 * Copyright 2015-2017 Intel Deutschland GmbH
ea05fd35 8 * Copyright (C) 2018-2022 Intel Corporation
55682965
JB		 9 */
10
11#include <linux/if.h>
12#include <linux/module.h>
13#include <linux/err.h>
5a0e3ad6 14#include <linux/slab.h>
55682965
JB		 15#include <linux/list.h>
16#include <linux/if_ether.h>
17#include <linux/ieee80211.h>
18#include <linux/nl80211.h>
19#include <linux/rtnetlink.h>
20#include <linux/netlink.h>
259d8c1e 21#include <linux/nospec.h>
2a519311 22#include <linux/etherdevice.h>
e3ae39ed 23#include <linux/if_vlan.h>
463d0183 24#include <net/net_namespace.h>
55682965
JB		 25#include <net/genetlink.h>
26#include <net/cfg80211.h>
463d0183 27#include <net/sock.h>
2a0e047e 28#include <net/inet_connection_sock.h>
55682965
JB		 29#include "core.h"
30#include "nl80211.h"
b2e1b302 31#include "reg.h"
e35e4d28 32#include "rdev-ops.h"
55682965 33
5fb628e9
JM		 34static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
35 struct genl_info *info,
36 struct cfg80211_crypto_settings *settings,
37 int cipher_limit);
38
55682965 39/* the netlink family */
489111e5 40static struct genl_family nl80211_fam;
55682965 41
2a94fe48
JB		 42/* multicast groups */
43enum nl80211_multicast_groups {
44 NL80211_MCGRP_CONFIG,
45 NL80211_MCGRP_SCAN,
46 NL80211_MCGRP_REGULATORY,
47 NL80211_MCGRP_MLME,
567ffc35 48 NL80211_MCGRP_VENDOR,
50bcd31d 49 NL80211_MCGRP_NAN,
2a94fe48
JB		 50 NL80211_MCGRP_TESTMODE /* keep last - ifdef! */
51};
52
53static const struct genl_multicast_group nl80211_mcgrps[] = {
71b836ec
JB		 54 [NL80211_MCGRP_CONFIG] = { .name = NL80211_MULTICAST_GROUP_CONFIG },
55 [NL80211_MCGRP_SCAN] = { .name = NL80211_MULTICAST_GROUP_SCAN },
56 [NL80211_MCGRP_REGULATORY] = { .name = NL80211_MULTICAST_GROUP_REG },
57 [NL80211_MCGRP_MLME] = { .name = NL80211_MULTICAST_GROUP_MLME },
58 [NL80211_MCGRP_VENDOR] = { .name = NL80211_MULTICAST_GROUP_VENDOR },
50bcd31d 59 [NL80211_MCGRP_NAN] = { .name = NL80211_MULTICAST_GROUP_NAN },
2a94fe48 60#ifdef CONFIG_NL80211_TESTMODE
71b836ec 61 [NL80211_MCGRP_TESTMODE] = { .name = NL80211_MULTICAST_GROUP_TESTMODE }
2a94fe48
JB		 62#endif
63};
64
89a54e48
JB		 65/* returns ERR_PTR values */
66static struct wireless_dev *
a05829a7
JB		 67__cfg80211_wdev_from_attrs(struct cfg80211_registered_device *rdev,
68 struct net *netns, struct nlattr **attrs)
55682965 69{
89a54e48
JB		 70 struct wireless_dev *result = NULL;
71 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
72 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
239729a2 73 u64 wdev_id = 0;
89a54e48
JB		 74 int wiphy_idx = -1;
75 int ifidx = -1;
55682965 76
89a54e48
JB		 77 if (!have_ifidx && !have_wdev_id)
78 return ERR_PTR(-EINVAL);
55682965 79
89a54e48
JB		 80 if (have_ifidx)
81 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
82 if (have_wdev_id) {
83 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
84 wiphy_idx = wdev_id >> 32;
55682965
JB		 85 }
86
a05829a7
JB		 87 if (rdev) {
88 struct wireless_dev *wdev;
89
90 lockdep_assert_held(&rdev->wiphy.mtx);
91
92 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
93 if (have_ifidx && wdev->netdev &&
94 wdev->netdev->ifindex == ifidx) {
95 result = wdev;
96 break;
97 }
98 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
99 result = wdev;
100 break;
101 }
102 }
103
104 return result ?: ERR_PTR(-ENODEV);
105 }
106
107 ASSERT_RTNL();
108
89a54e48
JB		 109 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
110 struct wireless_dev *wdev;
111
112 if (wiphy_net(&rdev->wiphy) != netns)
113 continue;
114
115 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
116 continue;
117
53873f13 118 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
89a54e48
JB		 119 if (have_ifidx && wdev->netdev &&
120 wdev->netdev->ifindex == ifidx) {
121 result = wdev;
122 break;
123 }
124 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
125 result = wdev;
126 break;
127 }
128 }
89a54e48
JB		 129
130 if (result)
131 break;
132 }
133
134 if (result)
135 return result;
136 return ERR_PTR(-ENODEV);
55682965
JB		 137}
138
a9455408 139static struct cfg80211_registered_device *
878d9ec7 140__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 141{
7fee4778
JB		 142 struct cfg80211_registered_device *rdev = NULL, *tmp;
143 struct net_device *netdev;
a9455408 144
5fe231e8 145 ASSERT_RTNL();
a9455408 146
878d9ec7 147 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 148 !attrs[NL80211_ATTR_IFINDEX] &&
149 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 150 return ERR_PTR(-EINVAL);
151
878d9ec7 152 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 153 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 154 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 155
89a54e48
JB		 156 if (attrs[NL80211_ATTR_WDEV]) {
157 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
158 struct wireless_dev *wdev;
159 bool found = false;
160
161 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
162 if (tmp) {
163 /* make sure wdev exists */
53873f13 164 list_for_each_entry(wdev, &tmp->wiphy.wdev_list, list) {
89a54e48
JB		 165 if (wdev->identifier != (u32)wdev_id)
166 continue;
167 found = true;
168 break;
169 }
89a54e48
JB		 170
171 if (!found)
172 tmp = NULL;
173
174 if (rdev && tmp != rdev)
175 return ERR_PTR(-EINVAL);
176 rdev = tmp;
177 }
178 }
179
878d9ec7
JB		 180 if (attrs[NL80211_ATTR_IFINDEX]) {
181 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
7a087e74 182
7f2b8562 183 netdev = __dev_get_by_index(netns, ifindex);
7fee4778
JB		 184 if (netdev) {
185 if (netdev->ieee80211_ptr)
f26cbf40
ZG		 186 tmp = wiphy_to_rdev(
187 netdev->ieee80211_ptr->wiphy);
7fee4778
JB		 188 else
189 tmp = NULL;
190
7fee4778
JB		 191 /* not wireless device -- return error */
192 if (!tmp)
193 return ERR_PTR(-EINVAL);
194
195 /* mismatch -- return error */
196 if (rdev && tmp != rdev)
197 return ERR_PTR(-EINVAL);
198
199 rdev = tmp;
a9455408 200 }
a9455408 201 }
a9455408 202
4f7eff10
JB		 203 if (!rdev)
204 return ERR_PTR(-ENODEV);
a9455408 205
4f7eff10
JB		 206 if (netns != wiphy_net(&rdev->wiphy))
207 return ERR_PTR(-ENODEV);
208
209 return rdev;
a9455408
JB		 210}
211
212/*
213 * This function returns a pointer to the driver
214 * that the genl_info item that is passed refers to.
a9455408
JB		 215 *
216 * The result of this can be a PTR_ERR and hence must
217 * be checked with IS_ERR() for errors.
218 */
219static struct cfg80211_registered_device *
4f7eff10 220cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408 221{
5fe231e8 222 return __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 223}
224
f88eb7c0
JB		 225static int validate_beacon_head(const struct nlattr *attr,
226 struct netlink_ext_ack *extack)
227{
228 const u8 *data = nla_data(attr);
229 unsigned int len = nla_len(attr);
230 const struct element *elem;
231 const struct ieee80211_mgmt *mgmt = (void *)data;
1d47f119 232 unsigned int fixedlen, hdrlen;
9a6847ba 233 bool s1g_bcn;
1d47f119 234
9a6847ba
JB		 235 if (len < offsetofend(typeof(*mgmt), frame_control))
236 goto err;
237
238 s1g_bcn = ieee80211_is_s1g_beacon(mgmt->frame_control);
1d47f119
TP		 239 if (s1g_bcn) {
240 fixedlen = offsetof(struct ieee80211_ext,
241 u.s1g_beacon.variable);
242 hdrlen = offsetof(struct ieee80211_ext, u.s1g_beacon);
243 } else {
244 fixedlen = offsetof(struct ieee80211_mgmt,
245 u.beacon.variable);
246 hdrlen = offsetof(struct ieee80211_mgmt, u.beacon);
247 }
f88eb7c0
JB		 248
249 if (len < fixedlen)
250 goto err;
251
1d47f119 252 if (ieee80211_hdrlen(mgmt->frame_control) != hdrlen)
f88eb7c0
JB		 253 goto err;
254
255 data += fixedlen;
256 len -= fixedlen;
257
258 for_each_element(elem, data, len) {
259 /* nothing */
260 }
261
262 if (for_each_element_completed(elem, data, len))
263 return 0;
264
265err:
266 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed beacon head");
267 return -EINVAL;
268}
269
3d7af878
JB		 270static int validate_ie_attr(const struct nlattr *attr,
271 struct netlink_ext_ack *extack)
272{
9f308616
JB		 273 const u8 *data = nla_data(attr);
274 unsigned int len = nla_len(attr);
7388afe0 275 const struct element *elem;
3d7af878 276
9f308616
JB		 277 for_each_element(elem, data, len) {
278 /* nothing */
3d7af878
JB		 279 }
280
9f308616
JB		 281 if (for_each_element_completed(elem, data, len))
282 return 0;
283
3d7af878
JB		 284 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed information elements");
285 return -EINVAL;
286}
287
a3a20feb
JB		 288static int validate_he_capa(const struct nlattr *attr,
289 struct netlink_ext_ack *extack)
290{
291 if (!ieee80211_he_capa_size_ok(nla_data(attr), nla_len(attr)))
292 return -EINVAL;
293
294 return 0;
295}
296
55682965 297/* policy for the attributes */
d15da2a2
JB		 298static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR];
299
81e54d08
PKC		 300static const struct nla_policy
301nl80211_ftm_responder_policy[NL80211_FTM_RESP_ATTR_MAX + 1] = {
302 [NL80211_FTM_RESP_ATTR_ENABLED] = { .type = NLA_FLAG, },
303 [NL80211_FTM_RESP_ATTR_LCI] = { .type = NLA_BINARY,
304 .len = U8_MAX },
305 [NL80211_FTM_RESP_ATTR_CIVICLOC] = { .type = NLA_BINARY,
306 .len = U8_MAX },
307};
308
9bb7e0f2
JB		 309static const struct nla_policy
310nl80211_pmsr_ftm_req_attr_policy[NL80211_PMSR_FTM_REQ_ATTR_MAX + 1] = {
311 [NL80211_PMSR_FTM_REQ_ATTR_ASAP] = { .type = NLA_FLAG },
312 [NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE] = { .type = NLA_U32 },
313 [NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP] =
314 NLA_POLICY_MAX(NLA_U8, 15),
315 [NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD] = { .type = NLA_U16 },
316 [NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION] =
317 NLA_POLICY_MAX(NLA_U8, 15),
318 [NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST] =
ea18709a 319 NLA_POLICY_MAX(NLA_U8, 31),
9bb7e0f2
JB		 320 [NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES] = { .type = NLA_U8 },
321 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI] = { .type = NLA_FLAG },
322 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC] = { .type = NLA_FLAG },
efb5520d
AS		 323 [NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED] = { .type = NLA_FLAG },
324 [NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED] = { .type = NLA_FLAG },
73807523 325 [NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK] = { .type = NLA_FLAG },
9bb7e0f2
JB		 326};
327
328static const struct nla_policy
329nl80211_pmsr_req_data_policy[NL80211_PMSR_TYPE_MAX + 1] = {
330 [NL80211_PMSR_TYPE_FTM] =
23323289 331 NLA_POLICY_NESTED(nl80211_pmsr_ftm_req_attr_policy),
9bb7e0f2
JB		 332};
333
334static const struct nla_policy
335nl80211_pmsr_req_attr_policy[NL80211_PMSR_REQ_ATTR_MAX + 1] = {
336 [NL80211_PMSR_REQ_ATTR_DATA] =
23323289 337 NLA_POLICY_NESTED(nl80211_pmsr_req_data_policy),
9bb7e0f2
JB		 338 [NL80211_PMSR_REQ_ATTR_GET_AP_TSF] = { .type = NLA_FLAG },
339};
340
341static const struct nla_policy
aeddc05f 342nl80211_pmsr_peer_attr_policy[NL80211_PMSR_PEER_ATTR_MAX + 1] = {
9bb7e0f2 343 [NL80211_PMSR_PEER_ATTR_ADDR] = NLA_POLICY_ETH_ADDR,
d15da2a2 344 [NL80211_PMSR_PEER_ATTR_CHAN] = NLA_POLICY_NESTED(nl80211_policy),
9bb7e0f2 345 [NL80211_PMSR_PEER_ATTR_REQ] =
23323289 346 NLA_POLICY_NESTED(nl80211_pmsr_req_attr_policy),
9bb7e0f2
JB		 347 [NL80211_PMSR_PEER_ATTR_RESP] = { .type = NLA_REJECT },
348};
349
350static const struct nla_policy
351nl80211_pmsr_attr_policy[NL80211_PMSR_ATTR_MAX + 1] = {
352 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_REJECT },
353 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_REJECT },
354 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_REJECT },
355 [NL80211_PMSR_ATTR_TYPE_CAPA] = { .type = NLA_REJECT },
356 [NL80211_PMSR_ATTR_PEERS] =
aeddc05f 357 NLA_POLICY_NESTED_ARRAY(nl80211_pmsr_peer_attr_policy),
9bb7e0f2
JB		 358};
359
796e90f4
JC		 360static const struct nla_policy
361he_obss_pd_policy[NL80211_HE_OBSS_PD_ATTR_MAX + 1] = {
362 [NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] =
363 NLA_POLICY_RANGE(NLA_U8, 1, 20),
364 [NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET] =
365 NLA_POLICY_RANGE(NLA_U8, 1, 20),
f5bec330
RM		 366 [NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET] =
367 NLA_POLICY_RANGE(NLA_U8, 1, 20),
368 [NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP] =
369 NLA_POLICY_EXACT_LEN(8),
370 [NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP] =
371 NLA_POLICY_EXACT_LEN(8),
372 [NL80211_HE_OBSS_PD_ATTR_SR_CTRL] = { .type = NLA_U8 },
796e90f4
JC		 373};
374
5c5e52d1
JC		 375static const struct nla_policy
376he_bss_color_policy[NL80211_HE_BSS_COLOR_ATTR_MAX + 1] = {
377 [NL80211_HE_BSS_COLOR_ATTR_COLOR] = NLA_POLICY_RANGE(NLA_U8, 1, 63),
378 [NL80211_HE_BSS_COLOR_ATTR_DISABLED] = { .type = NLA_FLAG },
379 [NL80211_HE_BSS_COLOR_ATTR_PARTIAL] = { .type = NLA_FLAG },
380};
381
9a5f6488
TC		 382static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
383 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
384 .len = NL80211_MAX_SUPP_RATES },
385 [NL80211_TXRATE_HT] = { .type = NLA_BINARY,
386 .len = NL80211_MAX_SUPP_HT_RATES },
387 [NL80211_TXRATE_VHT] = NLA_POLICY_EXACT_LEN_WARN(sizeof(struct nl80211_txrate_vht)),
388 [NL80211_TXRATE_GI] = { .type = NLA_U8 },
eb89a6a6
MH		 389 [NL80211_TXRATE_HE] = NLA_POLICY_EXACT_LEN(sizeof(struct nl80211_txrate_he)),
390 [NL80211_TXRATE_HE_GI] = NLA_POLICY_RANGE(NLA_U8,
391 NL80211_RATE_INFO_HE_GI_0_8,
392 NL80211_RATE_INFO_HE_GI_3_2),
393 [NL80211_TXRATE_HE_LTF] = NLA_POLICY_RANGE(NLA_U8,
394 NL80211_RATE_INFO_HE_1XLTF,
395 NL80211_RATE_INFO_HE_4XLTF),
9a5f6488
TC		 396};
397
77f576de
T		 398static const struct nla_policy
399nl80211_tid_config_attr_policy[NL80211_TID_CONFIG_ATTR_MAX + 1] = {
3710a8a6
JB		 400 [NL80211_TID_CONFIG_ATTR_VIF_SUPP] = { .type = NLA_U64 },
401 [NL80211_TID_CONFIG_ATTR_PEER_SUPP] = { .type = NLA_U64 },
77f576de 402 [NL80211_TID_CONFIG_ATTR_OVERRIDE] = { .type = NLA_FLAG },
3710a8a6 403 [NL80211_TID_CONFIG_ATTR_TIDS] = NLA_POLICY_RANGE(NLA_U16, 1, 0xff),
77f576de
T		 404 [NL80211_TID_CONFIG_ATTR_NOACK] =
405 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
6a21d16c
T		 406 [NL80211_TID_CONFIG_ATTR_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
407 [NL80211_TID_CONFIG_ATTR_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
ade274b2
T		 408 [NL80211_TID_CONFIG_ATTR_AMPDU_CTRL] =
409 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
04f7d142
T		 410 [NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL] =
411 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
33462e68
SM		 412 [NL80211_TID_CONFIG_ATTR_AMSDU_CTRL] =
413 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
9a5f6488
TC		 414 [NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE] =
415 NLA_POLICY_MAX(NLA_U8, NL80211_TX_RATE_FIXED),
416 [NL80211_TID_CONFIG_ATTR_TX_RATE] =
417 NLA_POLICY_NESTED(nl80211_txattr_policy),
77f576de
T		 418};
419
291c49de
AD		 420static const struct nla_policy
421nl80211_fils_discovery_policy[NL80211_FILS_DISCOVERY_ATTR_MAX + 1] = {
422 [NL80211_FILS_DISCOVERY_ATTR_INT_MIN] = NLA_POLICY_MAX(NLA_U32, 10000),
423 [NL80211_FILS_DISCOVERY_ATTR_INT_MAX] = NLA_POLICY_MAX(NLA_U32, 10000),
272cd0e8
AD		 424 [NL80211_FILS_DISCOVERY_ATTR_TMPL] =
425 NLA_POLICY_RANGE(NLA_BINARY,
426 NL80211_FILS_DISCOVERY_TMPL_MIN_LEN,
427 IEEE80211_MAX_DATA_LEN),
291c49de
AD		 428};
429
7443dcd1
AD		 430static const struct nla_policy
431nl80211_unsol_bcast_probe_resp_policy[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1] = {
432 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] = NLA_POLICY_MAX(NLA_U32, 20),
433 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL] = { .type = NLA_BINARY,
434 .len = IEEE80211_MAX_DATA_LEN }
435};
436
6bdb68ce
CH		 437static const struct nla_policy
438sar_specs_policy[NL80211_SAR_ATTR_SPECS_MAX + 1] = {
439 [NL80211_SAR_ATTR_SPECS_POWER] = { .type = NLA_S32 },
440 [NL80211_SAR_ATTR_SPECS_RANGE_INDEX] = {.type = NLA_U32 },
441};
442
443static const struct nla_policy
444sar_policy[NL80211_SAR_ATTR_MAX + 1] = {
445 [NL80211_SAR_ATTR_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_SAR_TYPE),
446 [NL80211_SAR_ATTR_SPECS] = NLA_POLICY_NESTED_ARRAY(sar_specs_policy),
447};
448
dc1e3cb8
JC		 449static const struct nla_policy
450nl80211_mbssid_config_policy[NL80211_MBSSID_CONFIG_ATTR_MAX + 1] = {
451 [NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES] = NLA_POLICY_MIN(NLA_U8, 2),
452 [NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY] =
453 NLA_POLICY_MIN(NLA_U8, 1),
454 [NL80211_MBSSID_CONFIG_ATTR_INDEX] = { .type = NLA_U8 },
455 [NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX] = { .type = NLA_U32 },
456 [NL80211_MBSSID_CONFIG_ATTR_EMA] = { .type = NLA_FLAG },
457};
458
d15da2a2 459static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR] = {
6d4dd4ef 460 [0] = { .strict_start_type = NL80211_ATTR_HE_OBSS_PD },
55682965
JB		 461 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
462 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 463 .len = 20-1 },
31888487 464 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
3d9d1d66 465
72bdcf34 466 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 467 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
2a38075c
AAL		 468 [NL80211_ATTR_WIPHY_EDMG_CHANNELS] = NLA_POLICY_RANGE(NLA_U8,
469 NL80211_EDMG_CHANNELS_MIN,
470 NL80211_EDMG_CHANNELS_MAX),
471 [NL80211_ATTR_WIPHY_EDMG_BW_CONFIG] = NLA_POLICY_RANGE(NLA_U8,
472 NL80211_EDMG_BW_CONFIG_MIN,
473 NL80211_EDMG_BW_CONFIG_MAX),
474
3d9d1d66
JB		 475 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
476 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
942ba88b 477 [NL80211_ATTR_CENTER_FREQ1_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
3d9d1d66
JB		 478 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
479
ab0d76f6
JB		 480 [NL80211_ATTR_WIPHY_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
481 [NL80211_ATTR_WIPHY_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
b9a5f8ca
JM		 482 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
483 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 484 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
3057dbfd 485 [NL80211_ATTR_WIPHY_DYN_ACK] = { .type = NLA_FLAG },
55682965 486
ab0d76f6 487 [NL80211_ATTR_IFTYPE] = NLA_POLICY_MAX(NLA_U32, NL80211_IFTYPE_MAX),
55682965
JB		 488 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
489 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 490
c7721c05
JB		 491 [NL80211_ATTR_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
492 [NL80211_ATTR_PREV_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
41ade00f 493
b9454e83 494 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 495 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
496 .len = WLAN_MAX_KEY_LEN },
56be393f 497 [NL80211_ATTR_KEY_IDX] = NLA_POLICY_MAX(NLA_U8, 7),
41ade00f
JB		 498 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
499 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 500 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
ab0d76f6
JB		 501 [NL80211_ATTR_KEY_TYPE] =
502 NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES),
ed1b6cc7
JB		 503
504 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
505 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
f88eb7c0
JB		 506 [NL80211_ATTR_BEACON_HEAD] =
507 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_beacon_head,
508 IEEE80211_MAX_DATA_LEN),
3d7af878
JB		 509 [NL80211_ATTR_BEACON_TAIL] =
510 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
511 IEEE80211_MAX_DATA_LEN),
ab0d76f6
JB		 512 [NL80211_ATTR_STA_AID] =
513 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
5727ef1b
JB		 514 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
515 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
516 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
517 .len = NL80211_MAX_SUPP_RATES },
ab0d76f6
JB		 518 [NL80211_ATTR_STA_PLINK_ACTION] =
519 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_ACTIONS - 1),
e96d1cd2
ARN		 520 [NL80211_ATTR_STA_TX_POWER_SETTING] =
521 NLA_POLICY_RANGE(NLA_U8,
522 NL80211_TX_POWER_AUTOMATIC,
523 NL80211_TX_POWER_FIXED),
524 [NL80211_ATTR_STA_TX_POWER] = { .type = NLA_S16 },
5727ef1b 525 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 526 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 527 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 528 .len = IEEE80211_MAX_MESH_ID_LEN },
1fab1b89 529 [NL80211_ATTR_MPATH_NEXT_HOP] = NLA_POLICY_ETH_ADDR_COMPAT,
9f1ba906 530
6624bb34
JB		 531 /* allow 3 for NUL-termination, we used to declare this NLA_STRING */
532 [NL80211_ATTR_REG_ALPHA2] = NLA_POLICY_RANGE(NLA_BINARY, 2, 3),
b2e1b302
LR		 533 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
534
9f1ba906
JM		 535 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
536 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
537 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 538 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
539 .len = NL80211_MAX_SUPP_RATES },
50b12f59 540 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 541
24bdd9f4 542 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 543 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 544
c7721c05 545 [NL80211_ATTR_HT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_HT_CAPABILITY_LEN),
9aed3cc1
JM		 546
547 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
3d7af878
JB		 548 [NL80211_ATTR_IE] = NLA_POLICY_VALIDATE_FN(NLA_BINARY,
549 validate_ie_attr,
550 IEEE80211_MAX_DATA_LEN),
2a519311
JB		 551 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
552 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 553
554 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
555 .len = IEEE80211_MAX_SSID_LEN },
556 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
557 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 558 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 559 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
ab0d76f6
JB		 560 [NL80211_ATTR_USE_MFP] = NLA_POLICY_RANGE(NLA_U32,
561 NL80211_MFP_NO,
562 NL80211_MFP_OPTIONAL),
eccb8e8f
JB		 563 [NL80211_ATTR_STA_FLAGS2] = {
564 .len = sizeof(struct nl80211_sta_flag_update),
565 },
3f77316c 566 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 567 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
568 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
64bf3d4b 569 [NL80211_ATTR_CONTROL_PORT_OVER_NL80211] = { .type = NLA_FLAG },
b23aa676 570 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
ea750801 571 [NL80211_ATTR_STATUS_CODE] = { .type = NLA_U16 },
b23aa676
SO		 572 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
573 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 574 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 575 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
c7721c05 576 [NL80211_ATTR_PMKID] = NLA_POLICY_EXACT_LEN_WARN(WLAN_PMKID_LEN),
9588bbd5
JM		 577 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
578 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 579 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 580 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
581 .len = IEEE80211_MAX_DATA_LEN },
582 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ab0d76f6
JB		 583 [NL80211_ATTR_PS_STATE] = NLA_POLICY_RANGE(NLA_U32,
584 NL80211_PS_DISABLED,
585 NL80211_PS_ENABLED),
d6dc1a38 586 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 587 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 588 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 589 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
590 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 591 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 592 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
593 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 594 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 595 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 596 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 597 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
ab0d76f6
JB		 598 [NL80211_ATTR_STA_PLINK_STATE] =
599 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_STATES - 1),
056e9375
JK		 600 [NL80211_ATTR_MEASUREMENT_DURATION] = { .type = NLA_U16 },
601 [NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY] = { .type = NLA_FLAG },
ab0d76f6
JB		 602 [NL80211_ATTR_MESH_PEER_AID] =
603 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
bbe6ad6d 604 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 605 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 606 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
ab0d76f6
JB		 607 [NL80211_ATTR_HIDDEN_SSID] =
608 NLA_POLICY_RANGE(NLA_U32,
609 NL80211_HIDDEN_SSID_NOT_IN_USE,
610 NL80211_HIDDEN_SSID_ZERO_CONTENTS),
3d7af878
JB		 611 [NL80211_ATTR_IE_PROBE_RESP] =
612 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
613 IEEE80211_MAX_DATA_LEN),
614 [NL80211_ATTR_IE_ASSOC_RESP] =
615 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
616 IEEE80211_MAX_DATA_LEN),
f4b34b55 617 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 618 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 619 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 620 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
621 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
622 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
623 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
624 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
31fa97c5 625 [NL80211_ATTR_TDLS_INITIATOR] = { .type = NLA_FLAG },
e247bd90 626 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 627 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
628 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 629 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 630 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
631 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
632 .len = NL80211_HT_CAPABILITY_LEN
633 },
1d9d9213 634 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 635 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 636 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 637 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 638 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
cb9abd48
JB		 639
640 /* need to include at least Auth Transaction and Status Code */
641 [NL80211_ATTR_AUTH_DATA] = NLA_POLICY_MIN_LEN(4),
642
c7721c05 643 [NL80211_ATTR_VHT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_VHT_CAPABILITY_LEN),
ed473771 644 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
ab0d76f6
JB		 645 [NL80211_ATTR_P2P_CTWINDOW] = NLA_POLICY_MAX(NLA_U8, 127),
646 [NL80211_ATTR_P2P_OPPPS] = NLA_POLICY_MAX(NLA_U8, 1),
647 [NL80211_ATTR_LOCAL_MESH_POWER_MODE] =
648 NLA_POLICY_RANGE(NLA_U32,
649 NL80211_MESH_POWER_UNKNOWN + 1,
650 NL80211_MESH_POWER_MAX),
77765eaf
VT		 651 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
652 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
9d62a986
JM		 653 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
654 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
3713b4e3 655 [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
ee2aca34
JB		 656 [NL80211_ATTR_DISABLE_VHT] = { .type = NLA_FLAG },
657 [NL80211_ATTR_VHT_CAPABILITY_MASK] = {
658 .len = NL80211_VHT_CAPABILITY_LEN,
659 },
355199e0
JM		 660 [NL80211_ATTR_MDID] = { .type = NLA_U16 },
661 [NL80211_ATTR_IE_RIC] = { .type = NLA_BINARY,
662 .len = IEEE80211_MAX_DATA_LEN },
0e1a1d85 663 [NL80211_ATTR_CRIT_PROT_ID] = { .type = NLA_U16 },
cb9abd48
JB		 664 [NL80211_ATTR_MAX_CRIT_PROT_DURATION] =
665 NLA_POLICY_MAX(NLA_U16, NL80211_CRIT_PROTO_MAX_DURATION),
ab0d76f6
JB		 666 [NL80211_ATTR_PEER_AID] =
667 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
16ef1fe2
SW		 668 [NL80211_ATTR_CH_SWITCH_COUNT] = { .type = NLA_U32 },
669 [NL80211_ATTR_CH_SWITCH_BLOCK_TX] = { .type = NLA_FLAG },
670 [NL80211_ATTR_CSA_IES] = { .type = NLA_NESTED },
00c207ed
JC		 671 [NL80211_ATTR_CNTDWN_OFFS_BEACON] = { .type = NLA_BINARY },
672 [NL80211_ATTR_CNTDWN_OFFS_PRESP] = { .type = NLA_BINARY },
cb9abd48 673 [NL80211_ATTR_STA_SUPPORTED_CHANNELS] = NLA_POLICY_MIN_LEN(2),
c8b82802
JB		 674 /*
675 * The value of the Length field of the Supported Operating
676 * Classes element is between 2 and 253.
677 */
678 [NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES] =
679 NLA_POLICY_RANGE(NLA_BINARY, 2, 253),
5336fa88 680 [NL80211_ATTR_HANDLE_DFS] = { .type = NLA_FLAG },
60f4a7b1 681 [NL80211_ATTR_OPMODE_NOTIF] = { .type = NLA_U8 },
ad7e718c
JB		 682 [NL80211_ATTR_VENDOR_ID] = { .type = NLA_U32 },
683 [NL80211_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
684 [NL80211_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
c8b82802
JB		 685 [NL80211_ATTR_QOS_MAP] = NLA_POLICY_RANGE(NLA_BINARY,
686 IEEE80211_QOS_MAP_LEN_MIN,
687 IEEE80211_QOS_MAP_LEN_MAX),
c7721c05 688 [NL80211_ATTR_MAC_HINT] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1df4a510 689 [NL80211_ATTR_WIPHY_FREQ_HINT] = { .type = NLA_U32 },
df942e7b 690 [NL80211_ATTR_TDLS_PEER_CAPABILITY] = { .type = NLA_U32 },
18e5ca65 691 [NL80211_ATTR_SOCKET_OWNER] = { .type = NLA_FLAG },
34d22ce2 692 [NL80211_ATTR_CSA_C_OFFSETS_TX] = { .type = NLA_BINARY },
bab5ab7d 693 [NL80211_ATTR_USE_RRM] = { .type = NLA_FLAG },
ab0d76f6
JB		 694 [NL80211_ATTR_TSID] = NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_TIDS - 1),
695 [NL80211_ATTR_USER_PRIO] =
696 NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_UPS - 1),
960d01ac 697 [NL80211_ATTR_ADMITTED_TIME] = { .type = NLA_U16 },
18998c38 698 [NL80211_ATTR_SMPS_MODE] = { .type = NLA_U8 },
5cde05c6 699 [NL80211_ATTR_OPER_CLASS] = { .type = NLA_U8 },
c7721c05 700 [NL80211_ATTR_MAC_MASK] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1bdd716c 701 [NL80211_ATTR_WIPHY_SELF_MANAGED_REG] = { .type = NLA_FLAG },
4b681c82 702 [NL80211_ATTR_NETNS_FD] = { .type = NLA_U32 },
9c748934 703 [NL80211_ATTR_SCHED_SCAN_DELAY] = { .type = NLA_U32 },
05050753 704 [NL80211_ATTR_REG_INDOOR] = { .type = NLA_FLAG },
34d50519 705 [NL80211_ATTR_PBSS] = { .type = NLA_FLAG },
38de03d2 706 [NL80211_ATTR_BSS_SELECT] = { .type = NLA_NESTED },
ab0d76f6
JB		 707 [NL80211_ATTR_STA_SUPPORT_P2P_PS] =
708 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_P2P_PS_STATUS - 1),
c6e6a0c8
AE		 709 [NL80211_ATTR_MU_MIMO_GROUP_DATA] = {
710 .len = VHT_MUMIMO_GROUPS_DATA_LEN
711 },
c7721c05 712 [NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
ab0d76f6 713 [NL80211_ATTR_NAN_MASTER_PREF] = NLA_POLICY_MIN(NLA_U8, 1),
8585989d 714 [NL80211_ATTR_BANDS] = { .type = NLA_U32 },
a442b761 715 [NL80211_ATTR_NAN_FUNC] = { .type = NLA_NESTED },
348bd456
JM		 716 [NL80211_ATTR_FILS_KEK] = { .type = NLA_BINARY,
717 .len = FILS_MAX_KEK_LEN },
c7721c05 718 [NL80211_ATTR_FILS_NONCES] = NLA_POLICY_EXACT_LEN_WARN(2 * FILS_NONCE_LEN),
ce0ce13a 719 [NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED] = { .type = NLA_FLAG, },
c7721c05 720 [NL80211_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
bf95ecdb 721 [NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] = { .type = NLA_S8 },
722 [NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST] = {
723 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
724 },
3093ebbe 725 [NL80211_ATTR_TIMEOUT_REASON] = { .type = NLA_U32 },
a3caf744
VK		 726 [NL80211_ATTR_FILS_ERP_USERNAME] = { .type = NLA_BINARY,
727 .len = FILS_ERP_MAX_USERNAME_LEN },
728 [NL80211_ATTR_FILS_ERP_REALM] = { .type = NLA_BINARY,
729 .len = FILS_ERP_MAX_REALM_LEN },
730 [NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] = { .type = NLA_U16 },
731 [NL80211_ATTR_FILS_ERP_RRK] = { .type = NLA_BINARY,
732 .len = FILS_ERP_MAX_RRK_LEN },
c7721c05 733 [NL80211_ATTR_FILS_CACHE_ID] = NLA_POLICY_EXACT_LEN_WARN(2),
a3caf744 734 [NL80211_ATTR_PMK] = { .type = NLA_BINARY, .len = PMK_MAX_LEN },
cb9abd48 735 [NL80211_ATTR_PMKR0_NAME] = NLA_POLICY_EXACT_LEN(WLAN_PMK_NAME_LEN),
ca986ad9 736 [NL80211_ATTR_SCHED_SCAN_MULTI] = { .type = NLA_FLAG },
40cbfa90 737 [NL80211_ATTR_EXTERNAL_AUTH_SUPPORT] = { .type = NLA_FLAG },
52539ca8
THJ		 738
739 [NL80211_ATTR_TXQ_LIMIT] = { .type = NLA_U32 },
740 [NL80211_ATTR_TXQ_MEMORY_LIMIT] = { .type = NLA_U32 },
741 [NL80211_ATTR_TXQ_QUANTUM] = { .type = NLA_U32 },
c8b82802 742 [NL80211_ATTR_HE_CAPABILITY] =
a3a20feb
JB		 743 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_he_capa,
744 NL80211_HE_MAX_CAPABILITY_LEN),
0e012b4e
JB		 745 [NL80211_ATTR_FTM_RESPONDER] =
746 NLA_POLICY_NESTED(nl80211_ftm_responder_policy),
9bb7e0f2
JB		 747 [NL80211_ATTR_TIMEOUT] = NLA_POLICY_MIN(NLA_U32, 1),
748 [NL80211_ATTR_PEER_MEASUREMENTS] =
23323289 749 NLA_POLICY_NESTED(nl80211_pmsr_attr_policy),
36647055 750 [NL80211_ATTR_AIRTIME_WEIGHT] = NLA_POLICY_MIN(NLA_U16, 1),
26f7044e
CHH		 751 [NL80211_ATTR_SAE_PASSWORD] = { .type = NLA_BINARY,
752 .len = SAE_PASSWORD_MAX_LEN },
a0de1ca3 753 [NL80211_ATTR_TWT_RESPONDER] = { .type = NLA_FLAG },
796e90f4 754 [NL80211_ATTR_HE_OBSS_PD] = NLA_POLICY_NESTED(he_obss_pd_policy),
14f34e36 755 [NL80211_ATTR_VLAN_ID] = NLA_POLICY_RANGE(NLA_U16, 1, VLAN_N_VID - 2),
5c5e52d1 756 [NL80211_ATTR_HE_BSS_COLOR] = NLA_POLICY_NESTED(he_bss_color_policy),
77f576de
T		 757 [NL80211_ATTR_TID_CONFIG] =
758 NLA_POLICY_NESTED_ARRAY(nl80211_tid_config_attr_policy),
5631d96a 759 [NL80211_ATTR_CONTROL_PORT_NO_PREAUTH] = { .type = NLA_FLAG },
7fc82af8
VJ		 760 [NL80211_ATTR_PMK_LIFETIME] = NLA_POLICY_MIN(NLA_U32, 1),
761 [NL80211_ATTR_PMK_REAUTH_THRESHOLD] = NLA_POLICY_RANGE(NLA_U8, 1, 100),
9dba48a6 762 [NL80211_ATTR_RECEIVE_MULTICAST] = { .type = NLA_FLAG },
942ba88b 763 [NL80211_ATTR_WIPHY_FREQ_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
2032f3b2 764 [NL80211_ATTR_SCAN_FREQ_KHZ] = { .type = NLA_NESTED },
8140860c
JB		 765 [NL80211_ATTR_HE_6GHZ_CAPABILITY] =
766 NLA_POLICY_EXACT_LEN(sizeof(struct ieee80211_he_6ghz_capa)),
291c49de
AD		 767 [NL80211_ATTR_FILS_DISCOVERY] =
768 NLA_POLICY_NESTED(nl80211_fils_discovery_policy),
7443dcd1
AD		 769 [NL80211_ATTR_UNSOL_BCAST_PROBE_RESP] =
770 NLA_POLICY_NESTED(nl80211_unsol_bcast_probe_resp_policy),
d2b7588a
TP		 771 [NL80211_ATTR_S1G_CAPABILITY] =
772 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
773 [NL80211_ATTR_S1G_CAPABILITY_MASK] =
774 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
9f0ffa41
RD		 775 [NL80211_ATTR_SAE_PWE] =
776 NLA_POLICY_RANGE(NLA_U8, NL80211_SAE_PWE_HUNT_AND_PECK,
777 NL80211_SAE_PWE_BOTH),
3bb02143 778 [NL80211_ATTR_RECONNECT_REQUESTED] = { .type = NLA_REJECT },
6bdb68ce 779 [NL80211_ATTR_SAR_SPEC] = NLA_POLICY_NESTED(sar_policy),
b6db0f89 780 [NL80211_ATTR_DISABLE_HE] = { .type = NLA_FLAG },
0d2ab3ae
JC		 781 [NL80211_ATTR_OBSS_COLOR_BITMAP] = { .type = NLA_U64 },
782 [NL80211_ATTR_COLOR_CHANGE_COUNT] = { .type = NLA_U8 },
783 [NL80211_ATTR_COLOR_CHANGE_COLOR] = { .type = NLA_U8 },
784 [NL80211_ATTR_COLOR_CHANGE_ELEMS] = NLA_POLICY_NESTED(nl80211_policy),
dc1e3cb8
JC		 785 [NL80211_ATTR_MBSSID_CONFIG] =
786 NLA_POLICY_NESTED(nl80211_mbssid_config_policy),
787 [NL80211_ATTR_MBSSID_ELEMS] = { .type = NLA_NESTED },
a95bfb87 788 [NL80211_ATTR_RADAR_BACKGROUND] = { .type = NLA_FLAG },
47301a74 789 [NL80211_ATTR_AP_SETTINGS_FLAGS] = { .type = NLA_U32 },
ea05fd35
IP		 790 [NL80211_ATTR_EHT_CAPABILITY] =
791 NLA_POLICY_RANGE(NLA_BINARY,
792 NL80211_EHT_MIN_CAPABILITY_LEN,
793 NL80211_EHT_MAX_CAPABILITY_LEN),
36f84235 794 [NL80211_ATTR_DISABLE_EHT] = { .type = NLA_FLAG },
7b0a0e3c
JB		 795 [NL80211_ATTR_MLO_LINKS] =
796 NLA_POLICY_NESTED_ARRAY(nl80211_policy),
797 [NL80211_ATTR_MLO_LINK_ID] =
798 NLA_POLICY_RANGE(NLA_U8, 0, IEEE80211_MLD_MAX_NUM_LINKS),
d648c230 799 [NL80211_ATTR_MLD_ADDR] = NLA_POLICY_EXACT_LEN(ETH_ALEN),
efbabc11 800 [NL80211_ATTR_MLO_SUPPORT] = { .type = NLA_FLAG },
ecad3b0b 801 [NL80211_ATTR_MAX_NUM_AKM_SUITES] = { .type = NLA_REJECT },
55682965
JB		 802};
803
e31b8213 804/* policy for the key attributes */
b54452b0 805static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 806 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 807 [NL80211_KEY_IDX] = { .type = NLA_U8 },
808 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 809 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 810 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
811 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
ab0d76f6 812 [NL80211_KEY_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES - 1),
dbd2fd65 813 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
6cdd3979 814 [NL80211_KEY_MODE] = NLA_POLICY_RANGE(NLA_U8, 0, NL80211_KEY_SET_TX),
dbd2fd65
JB		 815};
816
817/* policy for the key default flags */
818static const struct nla_policy
819nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
820 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
821 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 822};
823
f83ace3b 824#ifdef CONFIG_PM
ff1b6e69
JB		 825/* policy for WoWLAN attributes */
826static const struct nla_policy
827nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
828 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
829 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
830 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
831 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 832 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
833 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
834 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
835 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
2a0e047e 836 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
8cd4d456 837 [NL80211_WOWLAN_TRIG_NET_DETECT] = { .type = NLA_NESTED },
2a0e047e
JB		 838};
839
840static const struct nla_policy
841nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
842 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
843 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
c7721c05 844 [NL80211_WOWLAN_TCP_DST_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
2a0e047e
JB		 845 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
846 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
bc043585 847 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
2a0e047e
JB		 848 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
849 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
850 },
851 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
852 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
853 },
854 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
bc043585
JB		 855 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
856 [NL80211_WOWLAN_TCP_WAKE_MASK] = NLA_POLICY_MIN_LEN(1),
ff1b6e69 857};
f83ace3b 858#endif /* CONFIG_PM */
ff1b6e69 859
be29b99a
AK		 860/* policy for coalesce rule attributes */
861static const struct nla_policy
862nl80211_coalesce_policy[NUM_NL80211_ATTR_COALESCE_RULE] = {
863 [NL80211_ATTR_COALESCE_RULE_DELAY] = { .type = NLA_U32 },
ab0d76f6
JB		 864 [NL80211_ATTR_COALESCE_RULE_CONDITION] =
865 NLA_POLICY_RANGE(NLA_U32,
866 NL80211_COALESCE_CONDITION_MATCH,
867 NL80211_COALESCE_CONDITION_NO_MATCH),
be29b99a
AK		 868 [NL80211_ATTR_COALESCE_RULE_PKT_PATTERN] = { .type = NLA_NESTED },
869};
870
e5497d76
JB		 871/* policy for GTK rekey offload attributes */
872static const struct nla_policy
873nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
093a48d2
NE		 874 [NL80211_REKEY_DATA_KEK] = {
875 .type = NLA_BINARY,
876 .len = NL80211_KEK_EXT_LEN
877 },
878 [NL80211_REKEY_DATA_KCK] = {
879 .type = NLA_BINARY,
880 .len = NL80211_KCK_EXT_LEN
881 },
cb9abd48 882 [NL80211_REKEY_DATA_REPLAY_CTR] = NLA_POLICY_EXACT_LEN(NL80211_REPLAY_CTR_LEN),
093a48d2 883 [NL80211_REKEY_DATA_AKM] = { .type = NLA_U32 },
e5497d76
JB		 884};
885
1e1b11b6 886static const struct nla_policy
887nl80211_match_band_rssi_policy[NUM_NL80211_BANDS] = {
888 [NL80211_BAND_2GHZ] = { .type = NLA_S32 },
889 [NL80211_BAND_5GHZ] = { .type = NLA_S32 },
e548a1c3 890 [NL80211_BAND_6GHZ] = { .type = NLA_S32 },
1e1b11b6 891 [NL80211_BAND_60GHZ] = { .type = NLA_S32 },
63fa0426 892 [NL80211_BAND_LC] = { .type = NLA_S32 },
1e1b11b6 893};
894
a1f1c21c
LC		 895static const struct nla_policy
896nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 897 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 898 .len = IEEE80211_MAX_SSID_LEN },
c7721c05 899 [NL80211_SCHED_SCAN_MATCH_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
88e920b4 900 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
1e1b11b6 901 [NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI] =
902 NLA_POLICY_NESTED(nl80211_match_band_rssi_policy),
a1f1c21c
LC		 903};
904
3b06d277
AS		 905static const struct nla_policy
906nl80211_plan_policy[NL80211_SCHED_SCAN_PLAN_MAX + 1] = {
907 [NL80211_SCHED_SCAN_PLAN_INTERVAL] = { .type = NLA_U32 },
908 [NL80211_SCHED_SCAN_PLAN_ITERATIONS] = { .type = NLA_U32 },
909};
910
38de03d2
AS		 911static const struct nla_policy
912nl80211_bss_select_policy[NL80211_BSS_SELECT_ATTR_MAX + 1] = {
913 [NL80211_BSS_SELECT_ATTR_RSSI] = { .type = NLA_FLAG },
914 [NL80211_BSS_SELECT_ATTR_BAND_PREF] = { .type = NLA_U32 },
915 [NL80211_BSS_SELECT_ATTR_RSSI_ADJUST] = {
916 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
917 },
918};
919
a442b761
AB		 920/* policy for NAN function attributes */
921static const struct nla_policy
922nl80211_nan_func_policy[NL80211_NAN_FUNC_ATTR_MAX + 1] = {
cb9abd48
JB		 923 [NL80211_NAN_FUNC_TYPE] =
924 NLA_POLICY_MAX(NLA_U8, NL80211_NAN_FUNC_MAX_TYPE),
0a27844c 925 [NL80211_NAN_FUNC_SERVICE_ID] = {
a442b761
AB		 926 .len = NL80211_NAN_FUNC_SERVICE_ID_LEN },
927 [NL80211_NAN_FUNC_PUBLISH_TYPE] = { .type = NLA_U8 },
928 [NL80211_NAN_FUNC_PUBLISH_BCAST] = { .type = NLA_FLAG },
929 [NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE] = { .type = NLA_FLAG },
930 [NL80211_NAN_FUNC_FOLLOW_UP_ID] = { .type = NLA_U8 },
931 [NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] = { .type = NLA_U8 },
c7721c05 932 [NL80211_NAN_FUNC_FOLLOW_UP_DEST] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
a442b761
AB		 933 [NL80211_NAN_FUNC_CLOSE_RANGE] = { .type = NLA_FLAG },
934 [NL80211_NAN_FUNC_TTL] = { .type = NLA_U32 },
935 [NL80211_NAN_FUNC_SERVICE_INFO] = { .type = NLA_BINARY,
936 .len = NL80211_NAN_FUNC_SERVICE_SPEC_INFO_MAX_LEN },
937 [NL80211_NAN_FUNC_SRF] = { .type = NLA_NESTED },
938 [NL80211_NAN_FUNC_RX_MATCH_FILTER] = { .type = NLA_NESTED },
939 [NL80211_NAN_FUNC_TX_MATCH_FILTER] = { .type = NLA_NESTED },
940 [NL80211_NAN_FUNC_INSTANCE_ID] = { .type = NLA_U8 },
941 [NL80211_NAN_FUNC_TERM_REASON] = { .type = NLA_U8 },
942};
943
944/* policy for Service Response Filter attributes */
945static const struct nla_policy
946nl80211_nan_srf_policy[NL80211_NAN_SRF_ATTR_MAX + 1] = {
947 [NL80211_NAN_SRF_INCLUDE] = { .type = NLA_FLAG },
948 [NL80211_NAN_SRF_BF] = { .type = NLA_BINARY,
949 .len = NL80211_NAN_FUNC_SRF_MAX_LEN },
950 [NL80211_NAN_SRF_BF_IDX] = { .type = NLA_U8 },
951 [NL80211_NAN_SRF_MAC_ADDRS] = { .type = NLA_NESTED },
952};
953
ad670233
PX		 954/* policy for packet pattern attributes */
955static const struct nla_policy
956nl80211_packet_pattern_policy[MAX_NL80211_PKTPAT + 1] = {
957 [NL80211_PKTPAT_MASK] = { .type = NLA_BINARY, },
958 [NL80211_PKTPAT_PATTERN] = { .type = NLA_BINARY, },
959 [NL80211_PKTPAT_OFFSET] = { .type = NLA_U32 },
960};
961
ce6b6974
JB		 962static int nl80211_prepare_wdev_dump(struct netlink_callback *cb,
963 struct cfg80211_registered_device **rdev,
964 struct wireless_dev **wdev,
965 struct nlattr **attrbuf)
a043897a 966{
97990a06 967 int err;
a043897a 968
97990a06 969 if (!cb->args[0]) {
ce6b6974
JB		 970 struct nlattr **attrbuf_free = NULL;
971
972 if (!attrbuf) {
973 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
974 GFP_KERNEL);
975 if (!attrbuf)
976 return -ENOMEM;
977 attrbuf_free = attrbuf;
978 }
50508d94 979
8cb08174
JB		 980 err = nlmsg_parse_deprecated(cb->nlh,
981 GENL_HDRLEN + nl80211_fam.hdrsize,
50508d94 982 attrbuf, nl80211_fam.maxattr,
8cb08174 983 nl80211_policy, NULL);
50508d94 984 if (err) {
ce6b6974 985 kfree(attrbuf_free);
ea90e0dc 986 return err;
50508d94 987 }
67748893 988
a05829a7
JB		 989 rtnl_lock();
990 *wdev = __cfg80211_wdev_from_attrs(NULL, sock_net(cb->skb->sk),
50508d94 991 attrbuf);
ce6b6974 992 kfree(attrbuf_free);
a05829a7
JB		 993 if (IS_ERR(*wdev)) {
994 rtnl_unlock();
ea90e0dc 995 return PTR_ERR(*wdev);
a05829a7 996 }
f26cbf40 997 *rdev = wiphy_to_rdev((*wdev)->wiphy);
a05829a7
JB		 998 mutex_lock(&(*rdev)->wiphy.mtx);
999 rtnl_unlock();
c319d50b
JB		 1000 /* 0 is the first index - add 1 to parse only once */
1001 cb->args[0] = (*rdev)->wiphy_idx + 1;
97990a06
JB		 1002 cb->args[1] = (*wdev)->identifier;
1003 } else {
c319d50b 1004 /* subtract the 1 again here */
a05829a7 1005 struct wiphy *wiphy;
97990a06 1006 struct wireless_dev *tmp;
67748893 1007
a05829a7
JB		 1008 rtnl_lock();
1009 wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
1010 if (!wiphy) {
1011 rtnl_unlock();
ea90e0dc 1012 return -ENODEV;
a05829a7 1013 }
f26cbf40 1014 *rdev = wiphy_to_rdev(wiphy);
97990a06 1015 *wdev = NULL;
67748893 1016
53873f13 1017 list_for_each_entry(tmp, &(*rdev)->wiphy.wdev_list, list) {
97990a06
JB		 1018 if (tmp->identifier == cb->args[1]) {
1019 *wdev = tmp;
1020 break;
1021 }
1022 }
67748893 1023
a05829a7
JB		 1024 if (!*wdev) {
1025 rtnl_unlock();
ea90e0dc 1026 return -ENODEV;
a05829a7
JB		 1027 }
1028 mutex_lock(&(*rdev)->wiphy.mtx);
1029 rtnl_unlock();
67748893
JB		 1030 }
1031
67748893 1032 return 0;
67748893
JB		 1033}
1034
55682965 1035/* message building helper */
9bb7e0f2
JB		 1036void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1037 int flags, u8 cmd)
55682965
JB		 1038{
1039 /* since there is no private header just add the generic one */
15e47304 1040 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 1041}
1042
50f32718
HD		 1043static int nl80211_msg_put_wmm_rules(struct sk_buff *msg,
1044 const struct ieee80211_reg_rule *rule)
1045{
1046 int j;
1047 struct nlattr *nl_wmm_rules =
ae0be8de 1048 nla_nest_start_noflag(msg, NL80211_FREQUENCY_ATTR_WMM);
50f32718
HD		 1049
1050 if (!nl_wmm_rules)
1051 goto nla_put_failure;
1052
1053 for (j = 0; j < IEEE80211_NUM_ACS; j++) {
ae0be8de 1054 struct nlattr *nl_wmm_rule = nla_nest_start_noflag(msg, j);
50f32718
HD		 1055
1056 if (!nl_wmm_rule)
1057 goto nla_put_failure;
1058
1059 if (nla_put_u16(msg, NL80211_WMMR_CW_MIN,
38cb87ee 1060 rule->wmm_rule.client[j].cw_min) ||
50f32718 1061 nla_put_u16(msg, NL80211_WMMR_CW_MAX,
38cb87ee 1062 rule->wmm_rule.client[j].cw_max) ||
50f32718 1063 nla_put_u8(msg, NL80211_WMMR_AIFSN,
38cb87ee 1064 rule->wmm_rule.client[j].aifsn) ||
d3c89bbc
HD		 1065 nla_put_u16(msg, NL80211_WMMR_TXOP,
1066 rule->wmm_rule.client[j].cot))
50f32718
HD		 1067 goto nla_put_failure;
1068
1069 nla_nest_end(msg, nl_wmm_rule);
1070 }
1071 nla_nest_end(msg, nl_wmm_rules);
1072
1073 return 0;
1074
1075nla_put_failure:
1076 return -ENOBUFS;
1077}
1078
1079static int nl80211_msg_put_channel(struct sk_buff *msg, struct wiphy *wiphy,
cdc89b97
JB		 1080 struct ieee80211_channel *chan,
1081 bool large)
5dab3b8a 1082{
ea077c1c
RL		 1083 /* Some channels must be completely excluded from the
1084 * list to protect old user-space tools from breaking
1085 */
1086 if (!large && chan->flags &
1087 (IEEE80211_CHAN_NO_10MHZ | IEEE80211_CHAN_NO_20MHZ))
1088 return 0;
f8d504ca
JB		 1089 if (!large && chan->freq_offset)
1090 return 0;
ea077c1c 1091
9360ffd1
DM		 1092 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
1093 chan->center_freq))
1094 goto nla_put_failure;
5dab3b8a 1095
942ba88b
TP		 1096 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_OFFSET, chan->freq_offset))
1097 goto nla_put_failure;
1098
9360ffd1
DM		 1099 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
1100 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
1101 goto nla_put_failure;
8fe02e16
LR		 1102 if (chan->flags & IEEE80211_CHAN_NO_IR) {
1103 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IR))
1104 goto nla_put_failure;
1105 if (nla_put_flag(msg, __NL80211_FREQUENCY_ATTR_NO_IBSS))
1106 goto nla_put_failure;
1107 }
cdc89b97
JB		 1108 if (chan->flags & IEEE80211_CHAN_RADAR) {
1109 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
1110 goto nla_put_failure;
1111 if (large) {
1112 u32 time;
1113
1114 time = elapsed_jiffies_msecs(chan->dfs_state_entered);
1115
1116 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
1117 chan->dfs_state))
1118 goto nla_put_failure;
1119 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
1120 time))
1121 goto nla_put_failure;
089027e5
JD		 1122 if (nla_put_u32(msg,
1123 NL80211_FREQUENCY_ATTR_DFS_CAC_TIME,
1124 chan->dfs_cac_ms))
1125 goto nla_put_failure;
cdc89b97
JB		 1126 }
1127 }
5dab3b8a 1128
fe1abafd
JB		 1129 if (large) {
1130 if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
1131 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
1132 goto nla_put_failure;
1133 if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
1134 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
1135 goto nla_put_failure;
1136 if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
1137 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
1138 goto nla_put_failure;
1139 if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
1140 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
1141 goto nla_put_failure;
570dbde1
DS		 1142 if ((chan->flags & IEEE80211_CHAN_INDOOR_ONLY) &&
1143 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_INDOOR_ONLY))
1144 goto nla_put_failure;
06f207fc
AN		 1145 if ((chan->flags & IEEE80211_CHAN_IR_CONCURRENT) &&
1146 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_IR_CONCURRENT))
570dbde1 1147 goto nla_put_failure;
ea077c1c
RL		 1148 if ((chan->flags & IEEE80211_CHAN_NO_20MHZ) &&
1149 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_20MHZ))
1150 goto nla_put_failure;
1151 if ((chan->flags & IEEE80211_CHAN_NO_10MHZ) &&
1152 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_10MHZ))
1153 goto nla_put_failure;
1e61d82c
HD		 1154 if ((chan->flags & IEEE80211_CHAN_NO_HE) &&
1155 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HE))
1156 goto nla_put_failure;
d65a9770
TP		 1157 if ((chan->flags & IEEE80211_CHAN_1MHZ) &&
1158 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_1MHZ))
1159 goto nla_put_failure;
1160 if ((chan->flags & IEEE80211_CHAN_2MHZ) &&
1161 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_2MHZ))
1162 goto nla_put_failure;
1163 if ((chan->flags & IEEE80211_CHAN_4MHZ) &&
1164 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_4MHZ))
1165 goto nla_put_failure;
1166 if ((chan->flags & IEEE80211_CHAN_8MHZ) &&
1167 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_8MHZ))
1168 goto nla_put_failure;
1169 if ((chan->flags & IEEE80211_CHAN_16MHZ) &&
1170 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_16MHZ))
1171 goto nla_put_failure;
c2b3d769
S		 1172 if ((chan->flags & IEEE80211_CHAN_NO_320MHZ) &&
1173 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_320MHZ))
1174 goto nla_put_failure;
31846b65
IP		 1175 if ((chan->flags & IEEE80211_CHAN_NO_EHT) &&
1176 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_EHT))
1177 goto nla_put_failure;
fe1abafd
JB		 1178 }
1179
9360ffd1
DM		 1180 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
1181 DBM_TO_MBM(chan->max_power)))
1182 goto nla_put_failure;
5dab3b8a 1183
50f32718
HD		 1184 if (large) {
1185 const struct ieee80211_reg_rule *rule =
b88d26d9 1186 freq_reg_info(wiphy, MHZ_TO_KHZ(chan->center_freq));
50f32718 1187
38cb87ee 1188 if (!IS_ERR_OR_NULL(rule) && rule->has_wmm) {
50f32718
HD		 1189 if (nl80211_msg_put_wmm_rules(msg, rule))
1190 goto nla_put_failure;
1191 }
1192 }
1193
5dab3b8a
LR		 1194 return 0;
1195
1196 nla_put_failure:
1197 return -ENOBUFS;
1198}
1199
52539ca8
THJ		 1200static bool nl80211_put_txq_stats(struct sk_buff *msg,
1201 struct cfg80211_txq_stats *txqstats,
1202 int attrtype)
1203{
1204 struct nlattr *txqattr;
1205
1206#define PUT_TXQVAL_U32(attr, memb) do { \
1207 if (txqstats->filled & BIT(NL80211_TXQ_STATS_ ## attr) && \
1208 nla_put_u32(msg, NL80211_TXQ_STATS_ ## attr, txqstats->memb)) \
1209 return false; \
1210 } while (0)
1211
ae0be8de 1212 txqattr = nla_nest_start_noflag(msg, attrtype);
52539ca8
THJ		 1213 if (!txqattr)
1214 return false;
1215
1216 PUT_TXQVAL_U32(BACKLOG_BYTES, backlog_bytes);
1217 PUT_TXQVAL_U32(BACKLOG_PACKETS, backlog_packets);
1218 PUT_TXQVAL_U32(FLOWS, flows);
1219 PUT_TXQVAL_U32(DROPS, drops);
1220 PUT_TXQVAL_U32(ECN_MARKS, ecn_marks);
1221 PUT_TXQVAL_U32(OVERLIMIT, overlimit);
1222 PUT_TXQVAL_U32(OVERMEMORY, overmemory);
1223 PUT_TXQVAL_U32(COLLISIONS, collisions);
1224 PUT_TXQVAL_U32(TX_BYTES, tx_bytes);
1225 PUT_TXQVAL_U32(TX_PACKETS, tx_packets);
1226 PUT_TXQVAL_U32(MAX_FLOWS, max_flows);
1227 nla_nest_end(msg, txqattr);
1228
1229#undef PUT_TXQVAL_U32
1230 return true;
1231}
1232
55682965
JB		 1233/* netlink command implementations */
1234
7b0a0e3c
JB		 1235/**
1236 * nl80211_link_id - return link ID
1237 * @attrs: attributes to look at
1238 *
1239 * Returns: the link ID or 0 if not given
1240 *
1241 * Note this function doesn't do any validation of the link
1242 * ID validity wrt. links that were actually added, so it must
1243 * be called only from ops with %NL80211_FLAG_MLO_VALID_LINK_ID
1244 * or if additional validation is done.
1245 */
1246static unsigned int nl80211_link_id(struct nlattr **attrs)
1247{
1248 struct nlattr *linkid = attrs[NL80211_ATTR_MLO_LINK_ID];
1249
1250 if (!linkid)
1251 return 0;
1252
1253 return nla_get_u8(linkid);
1254}
1255
1256static int nl80211_link_id_or_invalid(struct nlattr **attrs)
1257{
1258 struct nlattr *linkid = attrs[NL80211_ATTR_MLO_LINK_ID];
1259
1260 if (!linkid)
1261 return -1;
1262
1263 return nla_get_u8(linkid);
1264}
1265
b9454e83
JB		 1266struct key_parse {
1267 struct key_params p;
1268 int idx;
e31b8213 1269 int type;
56be393f 1270 bool def, defmgmt, defbeacon;
dbd2fd65 1271 bool def_uni, def_multi;
b9454e83
JB		 1272};
1273
768075eb
JB		 1274static int nl80211_parse_key_new(struct genl_info *info, struct nlattr *key,
1275 struct key_parse *k)
b9454e83
JB		 1276{
1277 struct nlattr *tb[NL80211_KEY_MAX + 1];
8cb08174
JB		 1278 int err = nla_parse_nested_deprecated(tb, NL80211_KEY_MAX, key,
1279 nl80211_key_policy,
1280 info->extack);
b9454e83
JB		 1281 if (err)
1282 return err;
1283
1284 k->def = !!tb[NL80211_KEY_DEFAULT];
1285 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
56be393f 1286 k->defbeacon = !!tb[NL80211_KEY_DEFAULT_BEACON];
b9454e83 1287
dbd2fd65
JB		 1288 if (k->def) {
1289 k->def_uni = true;
1290 k->def_multi = true;
1291 }
56be393f 1292 if (k->defmgmt || k->defbeacon)
dbd2fd65
JB		 1293 k->def_multi = true;
1294
b9454e83
JB		 1295 if (tb[NL80211_KEY_IDX])
1296 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
1297
1298 if (tb[NL80211_KEY_DATA]) {
1299 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
1300 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
1301 }
1302
1303 if (tb[NL80211_KEY_SEQ]) {
1304 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
1305 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
1306 }
1307
1308 if (tb[NL80211_KEY_CIPHER])
1309 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
1310
ab0d76f6 1311 if (tb[NL80211_KEY_TYPE])
e31b8213 1312 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
e31b8213 1313
dbd2fd65
JB		 1314 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
1315 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
7a087e74 1316
8cb08174
JB		 1317 err = nla_parse_nested_deprecated(kdt,
1318 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1319 tb[NL80211_KEY_DEFAULT_TYPES],
1320 nl80211_key_default_policy,
1321 info->extack);
dbd2fd65
JB		 1322 if (err)
1323 return err;
1324
1325 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1326 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1327 }
1328
6cdd3979
AW		 1329 if (tb[NL80211_KEY_MODE])
1330 k->p.mode = nla_get_u8(tb[NL80211_KEY_MODE]);
1331
b9454e83
JB		 1332 return 0;
1333}
1334
1335static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
1336{
1337 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
1338 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
1339 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
1340 }
1341
1342 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
1343 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
1344 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
1345 }
1346
1347 if (info->attrs[NL80211_ATTR_KEY_IDX])
1348 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1349
1350 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
1351 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
1352
1353 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
1354 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
1355
dbd2fd65
JB		 1356 if (k->def) {
1357 k->def_uni = true;
1358 k->def_multi = true;
1359 }
1360 if (k->defmgmt)
1361 k->def_multi = true;
1362
ab0d76f6 1363 if (info->attrs[NL80211_ATTR_KEY_TYPE])
e31b8213 1364 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
e31b8213 1365
dbd2fd65
JB		 1366 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
1367 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
8cb08174
JB		 1368 int err = nla_parse_nested_deprecated(kdt,
1369 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1370 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
1371 nl80211_key_default_policy,
1372 info->extack);
dbd2fd65
JB		 1373 if (err)
1374 return err;
1375
1376 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1377 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1378 }
1379
b9454e83
JB		 1380 return 0;
1381}
1382
1383static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
1384{
1385 int err;
1386
1387 memset(k, 0, sizeof(*k));
1388 k->idx = -1;
e31b8213 1389 k->type = -1;
b9454e83
JB		 1390
1391 if (info->attrs[NL80211_ATTR_KEY])
768075eb 1392 err = nl80211_parse_key_new(info, info->attrs[NL80211_ATTR_KEY], k);
b9454e83
JB		 1393 else
1394 err = nl80211_parse_key_old(info, k);
1395
1396 if (err)
1397 return err;
1398
56be393f
JM		 1399 if ((k->def ? 1 : 0) + (k->defmgmt ? 1 : 0) +
1400 (k->defbeacon ? 1 : 0) > 1) {
1401 GENL_SET_ERR_MSG(info,
1402 "key with multiple default flags is invalid");
b9454e83 1403 return -EINVAL;
768075eb 1404 }
b9454e83 1405
56be393f 1406 if (k->defmgmt || k->defbeacon) {
768075eb 1407 if (k->def_uni || !k->def_multi) {
56be393f
JM		 1408 GENL_SET_ERR_MSG(info,
1409 "defmgmt/defbeacon key must be mcast");
dbd2fd65 1410 return -EINVAL;
768075eb 1411 }
dbd2fd65
JB		 1412 }
1413
b9454e83
JB		 1414 if (k->idx != -1) {
1415 if (k->defmgmt) {
768075eb
JB		 1416 if (k->idx < 4 || k->idx > 5) {
1417 GENL_SET_ERR_MSG(info,
1418 "defmgmt key idx not 4 or 5");
b9454e83 1419 return -EINVAL;
768075eb 1420 }
56be393f
JM		 1421 } else if (k->defbeacon) {
1422 if (k->idx < 6 || k->idx > 7) {
1423 GENL_SET_ERR_MSG(info,
1424 "defbeacon key idx not 6 or 7");
1425 return -EINVAL;
1426 }
b9454e83 1427 } else if (k->def) {
768075eb
JB		 1428 if (k->idx < 0 || k->idx > 3) {
1429 GENL_SET_ERR_MSG(info, "def key idx not 0-3");
b9454e83 1430 return -EINVAL;
768075eb 1431 }
b9454e83 1432 } else {
56be393f
JM		 1433 if (k->idx < 0 || k->idx > 7) {
1434 GENL_SET_ERR_MSG(info, "key idx not 0-7");
b9454e83 1435 return -EINVAL;
768075eb 1436 }
b9454e83
JB		 1437 }
1438 }
1439
1440 return 0;
1441}
1442
fffd0934
JB		 1443static struct cfg80211_cached_keys *
1444nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
768075eb 1445 struct genl_info *info, bool *no_ht)
fffd0934 1446{
768075eb 1447 struct nlattr *keys = info->attrs[NL80211_ATTR_KEYS];
fffd0934
JB		 1448 struct key_parse parse;
1449 struct nlattr *key;
1450 struct cfg80211_cached_keys *result;
1451 int rem, err, def = 0;
f1c1f17a
JB		 1452 bool have_key = false;
1453
1454 nla_for_each_nested(key, keys, rem) {
1455 have_key = true;
1456 break;
1457 }
1458
1459 if (!have_key)
1460 return NULL;
fffd0934
JB		 1461
1462 result = kzalloc(sizeof(*result), GFP_KERNEL);
1463 if (!result)
1464 return ERR_PTR(-ENOMEM);
1465
1466 result->def = -1;
fffd0934
JB		 1467
1468 nla_for_each_nested(key, keys, rem) {
1469 memset(&parse, 0, sizeof(parse));
1470 parse.idx = -1;
1471
768075eb 1472 err = nl80211_parse_key_new(info, key, &parse);
fffd0934
JB		 1473 if (err)
1474 goto error;
1475 err = -EINVAL;
1476 if (!parse.p.key)
1477 goto error;
768075eb
JB		 1478 if (parse.idx < 0 || parse.idx > 3) {
1479 GENL_SET_ERR_MSG(info, "key index out of range [0-3]");
fffd0934 1480 goto error;
768075eb 1481 }
fffd0934 1482 if (parse.def) {
768075eb
JB		 1483 if (def) {
1484 GENL_SET_ERR_MSG(info,
1485 "only one key can be default");
fffd0934 1486 goto error;
768075eb 1487 }
fffd0934
JB		 1488 def = 1;
1489 result->def = parse.idx;
dbd2fd65
JB		 1490 if (!parse.def_uni || !parse.def_multi)
1491 goto error;
fffd0934
JB		 1492 } else if (parse.defmgmt)
1493 goto error;
1494 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 1495 parse.idx, false, NULL);
fffd0934
JB		 1496 if (err)
1497 goto error;
386b1f27
JB		 1498 if (parse.p.cipher != WLAN_CIPHER_SUITE_WEP40 &&
1499 parse.p.cipher != WLAN_CIPHER_SUITE_WEP104) {
768075eb 1500 GENL_SET_ERR_MSG(info, "connect key must be WEP");
386b1f27
JB		 1501 err = -EINVAL;
1502 goto error;
1503 }
fffd0934
JB		 1504 result->params[parse.idx].cipher = parse.p.cipher;
1505 result->params[parse.idx].key_len = parse.p.key_len;
1506 result->params[parse.idx].key = result->data[parse.idx];
1507 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee 1508
386b1f27
JB		 1509 /* must be WEP key if we got here */
1510 if (no_ht)
1511 *no_ht = true;
fffd0934
JB		 1512 }
1513
f1c1f17a
JB		 1514 if (result->def < 0) {
1515 err = -EINVAL;
768075eb 1516 GENL_SET_ERR_MSG(info, "need a default/TX key");
f1c1f17a
JB		 1517 goto error;
1518 }
1519
fffd0934
JB		 1520 return result;
1521 error:
1522 kfree(result);
1523 return ERR_PTR(err);
1524}
1525
1526static int nl80211_key_allowed(struct wireless_dev *wdev)
1527{
1528 ASSERT_WDEV_LOCK(wdev);
1529
fffd0934
JB		 1530 switch (wdev->iftype) {
1531 case NL80211_IFTYPE_AP:
1532 case NL80211_IFTYPE_AP_VLAN:
074ac8df 1533 case NL80211_IFTYPE_P2P_GO:
ff973af7 1534 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 1535 break;
1536 case NL80211_IFTYPE_ADHOC:
7b0a0e3c
JB		 1537 if (wdev->u.ibss.current_bss)
1538 return 0;
1539 return -ENOLINK;
fffd0934 1540 case NL80211_IFTYPE_STATION:
074ac8df 1541 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c
JB		 1542 /* for MLO, require driver validation of the link ID */
1543 if (wdev->connected)
1544 return 0;
1545 return -ENOLINK;
de4fcbad 1546 case NL80211_IFTYPE_UNSPECIFIED:
6e0bd6c3 1547 case NL80211_IFTYPE_OCB:
de4fcbad 1548 case NL80211_IFTYPE_MONITOR:
cb3b7d87 1549 case NL80211_IFTYPE_NAN:
de4fcbad
JB		 1550 case NL80211_IFTYPE_P2P_DEVICE:
1551 case NL80211_IFTYPE_WDS:
1552 case NUM_NL80211_IFTYPES:
fffd0934
JB		 1553 return -EINVAL;
1554 }
1555
1556 return 0;
1557}
1558
664834de 1559static struct ieee80211_channel *nl80211_get_valid_chan(struct wiphy *wiphy,
942ba88b 1560 u32 freq)
664834de
JM		 1561{
1562 struct ieee80211_channel *chan;
1563
942ba88b 1564 chan = ieee80211_get_channel_khz(wiphy, freq);
664834de
JM		 1565 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
1566 return NULL;
1567 return chan;
1568}
1569
7527a782
JB		 1570static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
1571{
ae0be8de 1572 struct nlattr *nl_modes = nla_nest_start_noflag(msg, attr);
7527a782
JB		 1573 int i;
1574
1575 if (!nl_modes)
1576 goto nla_put_failure;
1577
1578 i = 0;
1579 while (ifmodes) {
9360ffd1
DM		 1580 if ((ifmodes & 1) && nla_put_flag(msg, i))
1581 goto nla_put_failure;
7527a782
JB		 1582 ifmodes >>= 1;
1583 i++;
1584 }
1585
1586 nla_nest_end(msg, nl_modes);
1587 return 0;
1588
1589nla_put_failure:
1590 return -ENOBUFS;
1591}
1592
1593static int nl80211_put_iface_combinations(struct wiphy *wiphy,
cdc89b97
JB		 1594 struct sk_buff *msg,
1595 bool large)
7527a782
JB		 1596{
1597 struct nlattr *nl_combis;
1598 int i, j;
1599
ae0be8de
MK		 1600 nl_combis = nla_nest_start_noflag(msg,
1601 NL80211_ATTR_INTERFACE_COMBINATIONS);
7527a782
JB		 1602 if (!nl_combis)
1603 goto nla_put_failure;
1604
1605 for (i = 0; i < wiphy->n_iface_combinations; i++) {
1606 const struct ieee80211_iface_combination *c;
1607 struct nlattr *nl_combi, *nl_limits;
1608
1609 c = &wiphy->iface_combinations[i];
1610
ae0be8de 1611 nl_combi = nla_nest_start_noflag(msg, i + 1);
7527a782
JB		 1612 if (!nl_combi)
1613 goto nla_put_failure;
1614
ae0be8de
MK		 1615 nl_limits = nla_nest_start_noflag(msg,
1616 NL80211_IFACE_COMB_LIMITS);
7527a782
JB		 1617 if (!nl_limits)
1618 goto nla_put_failure;
1619
1620 for (j = 0; j < c->n_limits; j++) {
1621 struct nlattr *nl_limit;
1622
ae0be8de 1623 nl_limit = nla_nest_start_noflag(msg, j + 1);
7527a782
JB		 1624 if (!nl_limit)
1625 goto nla_put_failure;
9360ffd1
DM		 1626 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
1627 c->limits[j].max))
1628 goto nla_put_failure;
7527a782
JB		 1629 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
1630 c->limits[j].types))
1631 goto nla_put_failure;
1632 nla_nest_end(msg, nl_limit);
1633 }
1634
1635 nla_nest_end(msg, nl_limits);
1636
9360ffd1
DM		 1637 if (c->beacon_int_infra_match &&
1638 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
1639 goto nla_put_failure;
1640 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
1641 c->num_different_channels) ||
1642 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
1643 c->max_interfaces))
1644 goto nla_put_failure;
cdc89b97 1645 if (large &&
8c48b50a
FF		 1646 (nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
1647 c->radar_detect_widths) ||
1648 nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_REGIONS,
1649 c->radar_detect_regions)))
cdc89b97 1650 goto nla_put_failure;
0c317a02
PK		 1651 if (c->beacon_int_min_gcd &&
1652 nla_put_u32(msg, NL80211_IFACE_COMB_BI_MIN_GCD,
1653 c->beacon_int_min_gcd))
1654 goto nla_put_failure;
7527a782
JB		 1655
1656 nla_nest_end(msg, nl_combi);
1657 }
1658
1659 nla_nest_end(msg, nl_combis);
1660
1661 return 0;
1662nla_put_failure:
1663 return -ENOBUFS;
1664}
1665
3713b4e3 1666#ifdef CONFIG_PM
b56cf720
JB		 1667static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
1668 struct sk_buff *msg)
1669{
964dc9e2 1670 const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan->tcp;
b56cf720
JB		 1671 struct nlattr *nl_tcp;
1672
1673 if (!tcp)
1674 return 0;
1675
ae0be8de
MK		 1676 nl_tcp = nla_nest_start_noflag(msg,
1677 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
b56cf720
JB		 1678 if (!nl_tcp)
1679 return -ENOBUFS;
1680
1681 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1682 tcp->data_payload_max))
1683 return -ENOBUFS;
1684
1685 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1686 tcp->data_payload_max))
1687 return -ENOBUFS;
1688
1689 if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
1690 return -ENOBUFS;
1691
1692 if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
1693 sizeof(*tcp->tok), tcp->tok))
1694 return -ENOBUFS;
1695
1696 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
1697 tcp->data_interval_max))
1698 return -ENOBUFS;
1699
1700 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
1701 tcp->wake_payload_max))
1702 return -ENOBUFS;
1703
1704 nla_nest_end(msg, nl_tcp);
1705 return 0;
1706}
1707
3713b4e3 1708static int nl80211_send_wowlan(struct sk_buff *msg,
1b8ec87a 1709 struct cfg80211_registered_device *rdev,
b56cf720 1710 bool large)
55682965 1711{
3713b4e3 1712 struct nlattr *nl_wowlan;
55682965 1713
1b8ec87a 1714 if (!rdev->wiphy.wowlan)
3713b4e3 1715 return 0;
55682965 1716
ae0be8de
MK		 1717 nl_wowlan = nla_nest_start_noflag(msg,
1718 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
3713b4e3
JB		 1719 if (!nl_wowlan)
1720 return -ENOBUFS;
9360ffd1 1721
1b8ec87a 1722 if (((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_ANY) &&
3713b4e3 1723 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1b8ec87a 1724 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_DISCONNECT) &&
3713b4e3 1725 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1b8ec87a 1726 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT) &&
3713b4e3 1727 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1b8ec87a 1728 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
3713b4e3 1729 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1b8ec87a 1730 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
3713b4e3 1731 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1b8ec87a 1732 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
3713b4e3 1733 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1b8ec87a 1734 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
3713b4e3 1735 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1b8ec87a 1736 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
3713b4e3
JB		 1737 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1738 return -ENOBUFS;
9360ffd1 1739
1b8ec87a 1740 if (rdev->wiphy.wowlan->n_patterns) {
50ac6607 1741 struct nl80211_pattern_support pat = {
1b8ec87a
ZG		 1742 .max_patterns = rdev->wiphy.wowlan->n_patterns,
1743 .min_pattern_len = rdev->wiphy.wowlan->pattern_min_len,
1744 .max_pattern_len = rdev->wiphy.wowlan->pattern_max_len,
1745 .max_pkt_offset = rdev->wiphy.wowlan->max_pkt_offset,
3713b4e3 1746 };
9360ffd1 1747
3713b4e3
JB		 1748 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1749 sizeof(pat), &pat))
1750 return -ENOBUFS;
1751 }
9360ffd1 1752
75453ccb
LC		 1753 if ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_NET_DETECT) &&
1754 nla_put_u32(msg, NL80211_WOWLAN_TRIG_NET_DETECT,
1755 rdev->wiphy.wowlan->max_nd_match_sets))
1756 return -ENOBUFS;
1757
1b8ec87a 1758 if (large && nl80211_send_wowlan_tcp_caps(rdev, msg))
b56cf720
JB		 1759 return -ENOBUFS;
1760
3713b4e3 1761 nla_nest_end(msg, nl_wowlan);
9360ffd1 1762
3713b4e3
JB		 1763 return 0;
1764}
1765#endif
9360ffd1 1766
be29b99a 1767static int nl80211_send_coalesce(struct sk_buff *msg,
1b8ec87a 1768 struct cfg80211_registered_device *rdev)
be29b99a
AK		 1769{
1770 struct nl80211_coalesce_rule_support rule;
1771
1b8ec87a 1772 if (!rdev->wiphy.coalesce)
be29b99a
AK		 1773 return 0;
1774
1b8ec87a
ZG		 1775 rule.max_rules = rdev->wiphy.coalesce->n_rules;
1776 rule.max_delay = rdev->wiphy.coalesce->max_delay;
1777 rule.pat.max_patterns = rdev->wiphy.coalesce->n_patterns;
1778 rule.pat.min_pattern_len = rdev->wiphy.coalesce->pattern_min_len;
1779 rule.pat.max_pattern_len = rdev->wiphy.coalesce->pattern_max_len;
1780 rule.pat.max_pkt_offset = rdev->wiphy.coalesce->max_pkt_offset;
be29b99a
AK		 1781
1782 if (nla_put(msg, NL80211_ATTR_COALESCE_RULE, sizeof(rule), &rule))
1783 return -ENOBUFS;
1784
1785 return 0;
1786}
1787
c4cbaf79
LC		 1788static int
1789nl80211_send_iftype_data(struct sk_buff *msg,
22395217 1790 const struct ieee80211_supported_band *sband,
c4cbaf79
LC		 1791 const struct ieee80211_sband_iftype_data *iftdata)
1792{
1793 const struct ieee80211_sta_he_cap *he_cap = &iftdata->he_cap;
5cd5a8a3 1794 const struct ieee80211_sta_eht_cap *eht_cap = &iftdata->eht_cap;
c4cbaf79
LC		 1795
1796 if (nl80211_put_iftypes(msg, NL80211_BAND_IFTYPE_ATTR_IFTYPES,
1797 iftdata->types_mask))
1798 return -ENOBUFS;
1799
1800 if (he_cap->has_he) {
1801 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MAC,
1802 sizeof(he_cap->he_cap_elem.mac_cap_info),
1803 he_cap->he_cap_elem.mac_cap_info) ||
1804 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PHY,
1805 sizeof(he_cap->he_cap_elem.phy_cap_info),
1806 he_cap->he_cap_elem.phy_cap_info) ||
1807 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET,
1808 sizeof(he_cap->he_mcs_nss_supp),
1809 &he_cap->he_mcs_nss_supp) ||
1810 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PPE,
1811 sizeof(he_cap->ppe_thres), he_cap->ppe_thres))
1812 return -ENOBUFS;
1813 }
1814
5cd5a8a3
IP		 1815 if (eht_cap->has_eht && he_cap->has_he) {
1816 u8 mcs_nss_size, ppe_thresh_size;
1817 u16 ppe_thres_hdr;
1818
1819 mcs_nss_size =
1820 ieee80211_eht_mcs_nss_size(&he_cap->he_cap_elem,
1821 &eht_cap->eht_cap_elem);
1822
1823 ppe_thres_hdr = get_unaligned_le16(&eht_cap->eht_ppe_thres[0]);
1824 ppe_thresh_size =
1825 ieee80211_eht_ppe_size(ppe_thres_hdr,
1826 eht_cap->eht_cap_elem.phy_cap_info);
1827
1828 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_MAC,
1829 sizeof(eht_cap->eht_cap_elem.mac_cap_info),
1830 eht_cap->eht_cap_elem.mac_cap_info) ||
1831 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_PHY,
1832 sizeof(eht_cap->eht_cap_elem.phy_cap_info),
1833 eht_cap->eht_cap_elem.phy_cap_info) ||
1834 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_MCS_SET,
1835 mcs_nss_size, &eht_cap->eht_mcs_nss_supp) ||
1836 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_PPE,
1837 ppe_thresh_size, eht_cap->eht_ppe_thres))
1838 return -ENOBUFS;
1839 }
1840
22395217
JB		 1841 if (sband->band == NL80211_BAND_6GHZ &&
1842 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_6GHZ_CAPA,
1843 sizeof(iftdata->he_6ghz_capa),
1844 &iftdata->he_6ghz_capa))
1845 return -ENOBUFS;
1846
f4f86505
JB		 1847 if (iftdata->vendor_elems.data && iftdata->vendor_elems.len &&
1848 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_VENDOR_ELEMS,
1849 iftdata->vendor_elems.len, iftdata->vendor_elems.data))
1850 return -ENOBUFS;
1851
c4cbaf79
LC		 1852 return 0;
1853}
1854
3713b4e3 1855static int nl80211_send_band_rateinfo(struct sk_buff *msg,
f8d504ca
JB		 1856 struct ieee80211_supported_band *sband,
1857 bool large)
3713b4e3
JB		 1858{
1859 struct nlattr *nl_rates, *nl_rate;
1860 struct ieee80211_rate *rate;
1861 int i;
87bbbe22 1862
3713b4e3
JB		 1863 /* add HT info */
1864 if (sband->ht_cap.ht_supported &&
1865 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1866 sizeof(sband->ht_cap.mcs),
1867 &sband->ht_cap.mcs) ||
1868 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1869 sband->ht_cap.cap) ||
1870 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1871 sband->ht_cap.ampdu_factor) ||
1872 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1873 sband->ht_cap.ampdu_density)))
1874 return -ENOBUFS;
afe0cbf8 1875
3713b4e3
JB		 1876 /* add VHT info */
1877 if (sband->vht_cap.vht_supported &&
1878 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1879 sizeof(sband->vht_cap.vht_mcs),
1880 &sband->vht_cap.vht_mcs) ||
1881 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1882 sband->vht_cap.cap)))
1883 return -ENOBUFS;
f59ac048 1884
f8d504ca 1885 if (large && sband->n_iftype_data) {
c4cbaf79 1886 struct nlattr *nl_iftype_data =
ae0be8de
MK		 1887 nla_nest_start_noflag(msg,
1888 NL80211_BAND_ATTR_IFTYPE_DATA);
c4cbaf79
LC		 1889 int err;
1890
1891 if (!nl_iftype_data)
1892 return -ENOBUFS;
1893
1894 for (i = 0; i < sband->n_iftype_data; i++) {
1895 struct nlattr *iftdata;
1896
ae0be8de 1897 iftdata = nla_nest_start_noflag(msg, i + 1);
c4cbaf79
LC		 1898 if (!iftdata)
1899 return -ENOBUFS;
1900
22395217 1901 err = nl80211_send_iftype_data(msg, sband,
c4cbaf79
LC		 1902 &sband->iftype_data[i]);
1903 if (err)
1904 return err;
1905
1906 nla_nest_end(msg, iftdata);
1907 }
1908
1909 nla_nest_end(msg, nl_iftype_data);
1910 }
1911
2a38075c 1912 /* add EDMG info */
f8d504ca 1913 if (large && sband->edmg_cap.channels &&
2a38075c
AAL		 1914 (nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_CHANNELS,
1915 sband->edmg_cap.channels) ||
1916 nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_BW_CONFIG,
1917 sband->edmg_cap.bw_config)))
1918
1919 return -ENOBUFS;
1920
3713b4e3 1921 /* add bitrates */
ae0be8de 1922 nl_rates = nla_nest_start_noflag(msg, NL80211_BAND_ATTR_RATES);
3713b4e3
JB		 1923 if (!nl_rates)
1924 return -ENOBUFS;
ee688b00 1925
3713b4e3 1926 for (i = 0; i < sband->n_bitrates; i++) {
ae0be8de 1927 nl_rate = nla_nest_start_noflag(msg, i);
3713b4e3
JB		 1928 if (!nl_rate)
1929 return -ENOBUFS;
ee688b00 1930
3713b4e3
JB		 1931 rate = &sband->bitrates[i];
1932 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1933 rate->bitrate))
1934 return -ENOBUFS;
1935 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1936 nla_put_flag(msg,
1937 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1938 return -ENOBUFS;
ee688b00 1939
3713b4e3
JB		 1940 nla_nest_end(msg, nl_rate);
1941 }
d51626df 1942
3713b4e3 1943 nla_nest_end(msg, nl_rates);
bf0c111e 1944
3713b4e3
JB		 1945 return 0;
1946}
ee688b00 1947
3713b4e3
JB		 1948static int
1949nl80211_send_mgmt_stypes(struct sk_buff *msg,
1950 const struct ieee80211_txrx_stypes *mgmt_stypes)
1951{
1952 u16 stypes;
1953 struct nlattr *nl_ftypes, *nl_ifs;
1954 enum nl80211_iftype ift;
1955 int i;
ee688b00 1956
3713b4e3
JB		 1957 if (!mgmt_stypes)
1958 return 0;
5dab3b8a 1959
ae0be8de 1960 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_TX_FRAME_TYPES);
3713b4e3
JB		 1961 if (!nl_ifs)
1962 return -ENOBUFS;
e2f367f2 1963
3713b4e3 1964 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1965 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1966 if (!nl_ftypes)
1967 return -ENOBUFS;
1968 i = 0;
1969 stypes = mgmt_stypes[ift].tx;
1970 while (stypes) {
1971 if ((stypes & 1) &&
1972 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1973 (i << 4) | IEEE80211_FTYPE_MGMT))
1974 return -ENOBUFS;
1975 stypes >>= 1;
1976 i++;
ee688b00 1977 }
3713b4e3
JB		 1978 nla_nest_end(msg, nl_ftypes);
1979 }
ee688b00 1980
3713b4e3 1981 nla_nest_end(msg, nl_ifs);
ee688b00 1982
ae0be8de 1983 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_RX_FRAME_TYPES);
3713b4e3
JB		 1984 if (!nl_ifs)
1985 return -ENOBUFS;
ee688b00 1986
3713b4e3 1987 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1988 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1989 if (!nl_ftypes)
1990 return -ENOBUFS;
1991 i = 0;
1992 stypes = mgmt_stypes[ift].rx;
1993 while (stypes) {
1994 if ((stypes & 1) &&
1995 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1996 (i << 4) | IEEE80211_FTYPE_MGMT))
1997 return -ENOBUFS;
1998 stypes >>= 1;
1999 i++;
2000 }
2001 nla_nest_end(msg, nl_ftypes);
2002 }
2003 nla_nest_end(msg, nl_ifs);
ee688b00 2004
3713b4e3
JB		 2005 return 0;
2006}
ee688b00 2007
1794899e
JB		 2008#define CMD(op, n) \
2009 do { \
2010 if (rdev->ops->op) { \
2011 i++; \
2012 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
2013 goto nla_put_failure; \
2014 } \
2015 } while (0)
2016
2017static int nl80211_add_commands_unsplit(struct cfg80211_registered_device *rdev,
2018 struct sk_buff *msg)
2019{
2020 int i = 0;
2021
2022 /*
2023 * do *NOT* add anything into this function, new things need to be
2024 * advertised only to new versions of userspace that can deal with
2025 * the split (and they can't possibly care about new features...
2026 */
2027 CMD(add_virtual_intf, NEW_INTERFACE);
2028 CMD(change_virtual_intf, SET_INTERFACE);
2029 CMD(add_key, NEW_KEY);
2030 CMD(start_ap, START_AP);
2031 CMD(add_station, NEW_STATION);
2032 CMD(add_mpath, NEW_MPATH);
2033 CMD(update_mesh_config, SET_MESH_CONFIG);
2034 CMD(change_bss, SET_BSS);
2035 CMD(auth, AUTHENTICATE);
2036 CMD(assoc, ASSOCIATE);
2037 CMD(deauth, DEAUTHENTICATE);
2038 CMD(disassoc, DISASSOCIATE);
2039 CMD(join_ibss, JOIN_IBSS);
2040 CMD(join_mesh, JOIN_MESH);
2041 CMD(set_pmksa, SET_PMKSA);
2042 CMD(del_pmksa, DEL_PMKSA);
2043 CMD(flush_pmksa, FLUSH_PMKSA);
2044 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
2045 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
2046 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2047 CMD(mgmt_tx, FRAME);
2048 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
2049 if (rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
2050 i++;
2051 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
2052 goto nla_put_failure;
2053 }
2054 if (rdev->ops->set_monitor_channel || rdev->ops->start_ap ||
2055 rdev->ops->join_mesh) {
2056 i++;
2057 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
2058 goto nla_put_failure;
2059 }
1794899e
JB		 2060 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
2061 CMD(tdls_mgmt, TDLS_MGMT);
2062 CMD(tdls_oper, TDLS_OPER);
2063 }
ca986ad9 2064 if (rdev->wiphy.max_sched_scan_reqs)
1794899e
JB		 2065 CMD(sched_scan_start, START_SCHED_SCAN);
2066 CMD(probe_client, PROBE_CLIENT);
2067 CMD(set_noack_map, SET_NOACK_MAP);
2068 if (rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
2069 i++;
2070 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
2071 goto nla_put_failure;
2072 }
2073 CMD(start_p2p_device, START_P2P_DEVICE);
2074 CMD(set_mcast_rate, SET_MCAST_RATE);
2075#ifdef CONFIG_NL80211_TESTMODE
2076 CMD(testmode_cmd, TESTMODE);
2077#endif
2078
2079 if (rdev->ops->connect || rdev->ops->auth) {
2080 i++;
2081 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
2082 goto nla_put_failure;
2083 }
2084
2085 if (rdev->ops->disconnect || rdev->ops->deauth) {
2086 i++;
2087 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
2088 goto nla_put_failure;
2089 }
2090
2091 return i;
2092 nla_put_failure:
2093 return -ENOBUFS;
2094}
2095
9bb7e0f2
JB		 2096static int
2097nl80211_send_pmsr_ftm_capa(const struct cfg80211_pmsr_capabilities *cap,
2098 struct sk_buff *msg)
2099{
2100 struct nlattr *ftm;
2101
2102 if (!cap->ftm.supported)
2103 return 0;
2104
ae0be8de 2105 ftm = nla_nest_start_noflag(msg, NL80211_PMSR_TYPE_FTM);
9bb7e0f2
JB		 2106 if (!ftm)
2107 return -ENOBUFS;
2108
2109 if (cap->ftm.asap && nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_ASAP))
2110 return -ENOBUFS;
2111 if (cap->ftm.non_asap &&
2112 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP))
2113 return -ENOBUFS;
2114 if (cap->ftm.request_lci &&
2115 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI))
2116 return -ENOBUFS;
2117 if (cap->ftm.request_civicloc &&
2118 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC))
2119 return -ENOBUFS;
2120 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES,
2121 cap->ftm.preambles))
2122 return -ENOBUFS;
2123 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS,
2124 cap->ftm.bandwidths))
2125 return -ENOBUFS;
2126 if (cap->ftm.max_bursts_exponent >= 0 &&
2127 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT,
2128 cap->ftm.max_bursts_exponent))
2129 return -ENOBUFS;
2130 if (cap->ftm.max_ftms_per_burst &&
2131 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST,
2132 cap->ftm.max_ftms_per_burst))
2133 return -ENOBUFS;
efb5520d
AS		 2134 if (cap->ftm.trigger_based &&
2135 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED))
2136 return -ENOBUFS;
2137 if (cap->ftm.non_trigger_based &&
2138 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED))
2139 return -ENOBUFS;
9bb7e0f2
JB		 2140
2141 nla_nest_end(msg, ftm);
2142 return 0;
2143}
2144
2145static int nl80211_send_pmsr_capa(struct cfg80211_registered_device *rdev,
2146 struct sk_buff *msg)
2147{
2148 const struct cfg80211_pmsr_capabilities *cap = rdev->wiphy.pmsr_capa;
2149 struct nlattr *pmsr, *caps;
2150
2151 if (!cap)
2152 return 0;
2153
2154 /*
2155 * we don't need to clean up anything here since the caller
2156 * will genlmsg_cancel() if we fail
2157 */
2158
ae0be8de 2159 pmsr = nla_nest_start_noflag(msg, NL80211_ATTR_PEER_MEASUREMENTS);
9bb7e0f2
JB		 2160 if (!pmsr)
2161 return -ENOBUFS;
2162
2163 if (nla_put_u32(msg, NL80211_PMSR_ATTR_MAX_PEERS, cap->max_peers))
2164 return -ENOBUFS;
2165
2166 if (cap->report_ap_tsf &&
2167 nla_put_flag(msg, NL80211_PMSR_ATTR_REPORT_AP_TSF))
2168 return -ENOBUFS;
2169
2170 if (cap->randomize_mac_addr &&
2171 nla_put_flag(msg, NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR))
2172 return -ENOBUFS;
2173
ae0be8de 2174 caps = nla_nest_start_noflag(msg, NL80211_PMSR_ATTR_TYPE_CAPA);
9bb7e0f2
JB		 2175 if (!caps)
2176 return -ENOBUFS;
2177
2178 if (nl80211_send_pmsr_ftm_capa(cap, msg))
2179 return -ENOBUFS;
2180
2181 nla_nest_end(msg, caps);
2182 nla_nest_end(msg, pmsr);
2183
2184 return 0;
2185}
2186
d6039a34
VJ		 2187static int
2188nl80211_put_iftype_akm_suites(struct cfg80211_registered_device *rdev,
2189 struct sk_buff *msg)
2190{
2191 int i;
2192 struct nlattr *nested, *nested_akms;
2193 const struct wiphy_iftype_akm_suites *iftype_akms;
2194
2195 if (!rdev->wiphy.num_iftype_akm_suites ||
2196 !rdev->wiphy.iftype_akm_suites)
2197 return 0;
2198
2199 nested = nla_nest_start(msg, NL80211_ATTR_IFTYPE_AKM_SUITES);
2200 if (!nested)
2201 return -ENOBUFS;
2202
2203 for (i = 0; i < rdev->wiphy.num_iftype_akm_suites; i++) {
2204 nested_akms = nla_nest_start(msg, i + 1);
2205 if (!nested_akms)
2206 return -ENOBUFS;
2207
2208 iftype_akms = &rdev->wiphy.iftype_akm_suites[i];
2209
2210 if (nl80211_put_iftypes(msg, NL80211_IFTYPE_AKM_ATTR_IFTYPES,
2211 iftype_akms->iftypes_mask))
2212 return -ENOBUFS;
2213
2214 if (nla_put(msg, NL80211_IFTYPE_AKM_ATTR_SUITES,
2215 sizeof(u32) * iftype_akms->n_akm_suites,
2216 iftype_akms->akm_suites)) {
2217 return -ENOBUFS;
2218 }
2219 nla_nest_end(msg, nested_akms);
2220 }
2221
2222 nla_nest_end(msg, nested);
2223
2224 return 0;
2225}
2226
3710a8a6
JB		 2227static int
2228nl80211_put_tid_config_support(struct cfg80211_registered_device *rdev,
2229 struct sk_buff *msg)
2230{
2231 struct nlattr *supp;
2232
2233 if (!rdev->wiphy.tid_config_support.vif &&
2234 !rdev->wiphy.tid_config_support.peer)
2235 return 0;
2236
2237 supp = nla_nest_start(msg, NL80211_ATTR_TID_CONFIG);
2238 if (!supp)
2239 return -ENOSPC;
2240
2241 if (rdev->wiphy.tid_config_support.vif &&
2242 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_VIF_SUPP,
2243 rdev->wiphy.tid_config_support.vif,
2244 NL80211_TID_CONFIG_ATTR_PAD))
2245 goto fail;
2246
2247 if (rdev->wiphy.tid_config_support.peer &&
2248 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_PEER_SUPP,
2249 rdev->wiphy.tid_config_support.peer,
2250 NL80211_TID_CONFIG_ATTR_PAD))
2251 goto fail;
2252
6a21d16c
T		 2253 /* for now we just use the same value ... makes more sense */
2254 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_SHORT,
2255 rdev->wiphy.tid_config_support.max_retry))
2256 goto fail;
2257 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_LONG,
2258 rdev->wiphy.tid_config_support.max_retry))
2259 goto fail;
2260
3710a8a6
JB		 2261 nla_nest_end(msg, supp);
2262
2263 return 0;
2264fail:
2265 nla_nest_cancel(msg, supp);
2266 return -ENOBUFS;
2267}
2268
6bdb68ce
CH		 2269static int
2270nl80211_put_sar_specs(struct cfg80211_registered_device *rdev,
2271 struct sk_buff *msg)
2272{
2273 struct nlattr *sar_capa, *specs, *sub_freq_range;
2274 u8 num_freq_ranges;
2275 int i;
2276
2277 if (!rdev->wiphy.sar_capa)
2278 return 0;
2279
2280 num_freq_ranges = rdev->wiphy.sar_capa->num_freq_ranges;
2281
2282 sar_capa = nla_nest_start(msg, NL80211_ATTR_SAR_SPEC);
2283 if (!sar_capa)
2284 return -ENOSPC;
2285
2286 if (nla_put_u32(msg, NL80211_SAR_ATTR_TYPE, rdev->wiphy.sar_capa->type))
2287 goto fail;
2288
2289 specs = nla_nest_start(msg, NL80211_SAR_ATTR_SPECS);
2290 if (!specs)
2291 goto fail;
2292
2293 /* report supported freq_ranges */
2294 for (i = 0; i < num_freq_ranges; i++) {
2295 sub_freq_range = nla_nest_start(msg, i + 1);
2296 if (!sub_freq_range)
2297 goto fail;
2298
2299 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_START_FREQ,
2300 rdev->wiphy.sar_capa->freq_ranges[i].start_freq))
2301 goto fail;
2302
2303 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_END_FREQ,
2304 rdev->wiphy.sar_capa->freq_ranges[i].end_freq))
2305 goto fail;
2306
2307 nla_nest_end(msg, sub_freq_range);
2308 }
2309
2310 nla_nest_end(msg, specs);
2311 nla_nest_end(msg, sar_capa);
2312
2313 return 0;
2314fail:
2315 nla_nest_cancel(msg, sar_capa);
2316 return -ENOBUFS;
2317}
2318
dc1e3cb8
JC		 2319static int nl80211_put_mbssid_support(struct wiphy *wiphy, struct sk_buff *msg)
2320{
2321 struct nlattr *config;
2322
2323 if (!wiphy->mbssid_max_interfaces)
2324 return 0;
2325
2326 config = nla_nest_start(msg, NL80211_ATTR_MBSSID_CONFIG);
2327 if (!config)
2328 return -ENOBUFS;
2329
2330 if (nla_put_u8(msg, NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES,
2331 wiphy->mbssid_max_interfaces))
2332 goto fail;
2333
2334 if (wiphy->ema_max_profile_periodicity &&
2335 nla_put_u8(msg,
2336 NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY,
2337 wiphy->ema_max_profile_periodicity))
2338 goto fail;
2339
2340 nla_nest_end(msg, config);
2341 return 0;
2342
2343fail:
2344 nla_nest_cancel(msg, config);
2345 return -ENOBUFS;
2346}
2347
86e8cf98
JB		 2348struct nl80211_dump_wiphy_state {
2349 s64 filter_wiphy;
2350 long start;
019ae3a9 2351 long split_start, band_start, chan_start, capa_start;
86e8cf98
JB		 2352 bool split;
2353};
2354
1b8ec87a 2355static int nl80211_send_wiphy(struct cfg80211_registered_device *rdev,
3bb20556 2356 enum nl80211_commands cmd,
3713b4e3 2357 struct sk_buff *msg, u32 portid, u32 seq,
86e8cf98 2358 int flags, struct nl80211_dump_wiphy_state *state)
3713b4e3
JB		 2359{
2360 void *hdr;
2361 struct nlattr *nl_bands, *nl_band;
2362 struct nlattr *nl_freqs, *nl_freq;
2363 struct nlattr *nl_cmds;
57fbcce3 2364 enum nl80211_band band;
3713b4e3
JB		 2365 struct ieee80211_channel *chan;
2366 int i;
2367 const struct ieee80211_txrx_stypes *mgmt_stypes =
1b8ec87a 2368 rdev->wiphy.mgmt_stypes;
fe1abafd 2369 u32 features;
ee688b00 2370
3bb20556 2371 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
3713b4e3
JB		 2372 if (!hdr)
2373 return -ENOBUFS;
ee688b00 2374
86e8cf98
JB		 2375 if (WARN_ON(!state))
2376 return -EINVAL;
ee688b00 2377
1b8ec87a 2378 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3713b4e3 2379 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
1b8ec87a 2380 wiphy_name(&rdev->wiphy)) ||
3713b4e3
JB		 2381 nla_put_u32(msg, NL80211_ATTR_GENERATION,
2382 cfg80211_rdev_list_generation))
8fdc621d
JB		 2383 goto nla_put_failure;
2384
3bb20556
JB		 2385 if (cmd != NL80211_CMD_NEW_WIPHY)
2386 goto finish;
2387
86e8cf98 2388 switch (state->split_start) {
3713b4e3
JB		 2389 case 0:
2390 if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
1b8ec87a 2391 rdev->wiphy.retry_short) ||
3713b4e3 2392 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
1b8ec87a 2393 rdev->wiphy.retry_long) ||
3713b4e3 2394 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
1b8ec87a 2395 rdev->wiphy.frag_threshold) ||
3713b4e3 2396 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
1b8ec87a 2397 rdev->wiphy.rts_threshold) ||
3713b4e3 2398 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
1b8ec87a 2399 rdev->wiphy.coverage_class) ||
3713b4e3 2400 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
1b8ec87a 2401 rdev->wiphy.max_scan_ssids) ||
3713b4e3 2402 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
1b8ec87a 2403 rdev->wiphy.max_sched_scan_ssids) ||
3713b4e3 2404 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
1b8ec87a 2405 rdev->wiphy.max_scan_ie_len) ||
3713b4e3 2406 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
1b8ec87a 2407 rdev->wiphy.max_sched_scan_ie_len) ||
3713b4e3 2408 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
f8d504ca 2409 rdev->wiphy.max_match_sets))
9360ffd1 2410 goto nla_put_failure;
3713b4e3 2411
1b8ec87a 2412 if ((rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
3713b4e3 2413 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
aa430da4 2414 goto nla_put_failure;
1b8ec87a 2415 if ((rdev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
3713b4e3
JB		 2416 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
2417 goto nla_put_failure;
1b8ec87a 2418 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3713b4e3
JB		 2419 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
2420 goto nla_put_failure;
1b8ec87a 2421 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
3713b4e3
JB		 2422 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
2423 goto nla_put_failure;
1b8ec87a 2424 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
3713b4e3
JB		 2425 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
2426 goto nla_put_failure;
1b8ec87a 2427 if ((rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
3713b4e3 2428 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
9360ffd1 2429 goto nla_put_failure;
86e8cf98
JB		 2430 state->split_start++;
2431 if (state->split)
3713b4e3 2432 break;
7b506ff6 2433 fallthrough;
3713b4e3
JB		 2434 case 1:
2435 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
1b8ec87a
ZG		 2436 sizeof(u32) * rdev->wiphy.n_cipher_suites,
2437 rdev->wiphy.cipher_suites))
3713b4e3 2438 goto nla_put_failure;
4745fc09 2439
3713b4e3 2440 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
1b8ec87a 2441 rdev->wiphy.max_num_pmkids))
3713b4e3 2442 goto nla_put_failure;
b23aa676 2443
1b8ec87a 2444 if ((rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
3713b4e3 2445 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
9360ffd1 2446 goto nla_put_failure;
b23aa676 2447
3713b4e3 2448 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
1b8ec87a 2449 rdev->wiphy.available_antennas_tx) ||
3713b4e3 2450 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
1b8ec87a 2451 rdev->wiphy.available_antennas_rx))
9360ffd1 2452 goto nla_put_failure;
b23aa676 2453
1b8ec87a 2454 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
3713b4e3 2455 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
1b8ec87a 2456 rdev->wiphy.probe_resp_offload))
3713b4e3 2457 goto nla_put_failure;
8fdc621d 2458
1b8ec87a
ZG		 2459 if ((rdev->wiphy.available_antennas_tx ||
2460 rdev->wiphy.available_antennas_rx) &&
2461 rdev->ops->get_antenna) {
3713b4e3
JB		 2462 u32 tx_ant = 0, rx_ant = 0;
2463 int res;
7a087e74 2464
1b8ec87a 2465 res = rdev_get_antenna(rdev, &tx_ant, &rx_ant);
3713b4e3
JB		 2466 if (!res) {
2467 if (nla_put_u32(msg,
2468 NL80211_ATTR_WIPHY_ANTENNA_TX,
2469 tx_ant) ||
2470 nla_put_u32(msg,
2471 NL80211_ATTR_WIPHY_ANTENNA_RX,
2472 rx_ant))
2473 goto nla_put_failure;
2474 }
2475 }
a293911d 2476
86e8cf98
JB		 2477 state->split_start++;
2478 if (state->split)
3713b4e3 2479 break;
7b506ff6 2480 fallthrough;
3713b4e3
JB		 2481 case 2:
2482 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1b8ec87a 2483 rdev->wiphy.interface_modes))
3713b4e3 2484 goto nla_put_failure;
86e8cf98
JB		 2485 state->split_start++;
2486 if (state->split)
3713b4e3 2487 break;
7b506ff6 2488 fallthrough;
3713b4e3 2489 case 3:
ae0be8de
MK		 2490 nl_bands = nla_nest_start_noflag(msg,
2491 NL80211_ATTR_WIPHY_BANDS);
3713b4e3
JB		 2492 if (!nl_bands)
2493 goto nla_put_failure;
f7ca38df 2494
86e8cf98 2495 for (band = state->band_start;
0d059964
JB		 2496 band < (state->split ?
2497 NUM_NL80211_BANDS :
2498 NL80211_BAND_60GHZ + 1);
2499 band++) {
3713b4e3 2500 struct ieee80211_supported_band *sband;
2e161f78 2501
f8d504ca
JB		 2502 /* omit higher bands for ancient software */
2503 if (band > NL80211_BAND_5GHZ && !state->split)
2504 break;
2505
1b8ec87a 2506 sband = rdev->wiphy.bands[band];
2e161f78 2507
3713b4e3
JB		 2508 if (!sband)
2509 continue;
2510
ae0be8de 2511 nl_band = nla_nest_start_noflag(msg, band);
3713b4e3 2512 if (!nl_band)
2e161f78 2513 goto nla_put_failure;
3713b4e3 2514
86e8cf98 2515 switch (state->chan_start) {
3713b4e3 2516 case 0:
f8d504ca
JB		 2517 if (nl80211_send_band_rateinfo(msg, sband,
2518 state->split))
9360ffd1 2519 goto nla_put_failure;
86e8cf98
JB		 2520 state->chan_start++;
2521 if (state->split)
3713b4e3 2522 break;
7b506ff6 2523 fallthrough;
3713b4e3
JB		 2524 default:
2525 /* add frequencies */
ae0be8de
MK		 2526 nl_freqs = nla_nest_start_noflag(msg,
2527 NL80211_BAND_ATTR_FREQS);
3713b4e3
JB		 2528 if (!nl_freqs)
2529 goto nla_put_failure;
2530
86e8cf98 2531 for (i = state->chan_start - 1;
3713b4e3
JB		 2532 i < sband->n_channels;
2533 i++) {
ae0be8de
MK		 2534 nl_freq = nla_nest_start_noflag(msg,
2535 i);
3713b4e3
JB		 2536 if (!nl_freq)
2537 goto nla_put_failure;
2538
2539 chan = &sband->channels[i];
2540
86e8cf98 2541 if (nl80211_msg_put_channel(
50f32718 2542 msg, &rdev->wiphy, chan,
86e8cf98 2543 state->split))
3713b4e3
JB		 2544 goto nla_put_failure;
2545
2546 nla_nest_end(msg, nl_freq);
86e8cf98 2547 if (state->split)
3713b4e3
JB		 2548 break;
2549 }
2550 if (i < sband->n_channels)
86e8cf98 2551 state->chan_start = i + 2;
3713b4e3 2552 else
86e8cf98 2553 state->chan_start = 0;
3713b4e3
JB		 2554 nla_nest_end(msg, nl_freqs);
2555 }
2556
2557 nla_nest_end(msg, nl_band);
2558
86e8cf98 2559 if (state->split) {
3713b4e3 2560 /* start again here */
86e8cf98 2561 if (state->chan_start)
3713b4e3
JB		 2562 band--;
2563 break;
2e161f78 2564 }
2e161f78 2565 }
3713b4e3 2566 nla_nest_end(msg, nl_bands);
2e161f78 2567
57fbcce3 2568 if (band < NUM_NL80211_BANDS)
86e8cf98 2569 state->band_start = band + 1;
3713b4e3 2570 else
86e8cf98 2571 state->band_start = 0;
74b70a4e 2572
3713b4e3 2573 /* if bands & channels are done, continue outside */
86e8cf98
JB		 2574 if (state->band_start == 0 && state->chan_start == 0)
2575 state->split_start++;
2576 if (state->split)
3713b4e3 2577 break;
7b506ff6 2578 fallthrough;
3713b4e3 2579 case 4:
ae0be8de
MK		 2580 nl_cmds = nla_nest_start_noflag(msg,
2581 NL80211_ATTR_SUPPORTED_COMMANDS);
3713b4e3 2582 if (!nl_cmds)
2e161f78
JB		 2583 goto nla_put_failure;
2584
1794899e
JB		 2585 i = nl80211_add_commands_unsplit(rdev, msg);
2586 if (i < 0)
2587 goto nla_put_failure;
86e8cf98 2588 if (state->split) {
5de17984
AS		 2589 CMD(crit_proto_start, CRIT_PROTOCOL_START);
2590 CMD(crit_proto_stop, CRIT_PROTOCOL_STOP);
1b8ec87a 2591 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH)
16ef1fe2 2592 CMD(channel_switch, CHANNEL_SWITCH);
02df00eb 2593 CMD(set_qos_map, SET_QOS_MAP);
723e73ac
JB		 2594 if (rdev->wiphy.features &
2595 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION)
960d01ac 2596 CMD(add_tx_ts, ADD_TX_TS);
ce0ce13a 2597 CMD(set_multicast_to_unicast, SET_MULTICAST_TO_UNICAST);
088e8df8 2598 CMD(update_connect_params, UPDATE_CONNECT_PARAMS);
7010998c 2599 CMD(update_ft_ies, UPDATE_FT_IES);
6bdb68ce
CH		 2600 if (rdev->wiphy.sar_capa)
2601 CMD(set_sar_specs, SET_SAR_SPECS);
5de17984 2602 }
3713b4e3 2603#undef CMD
ff1b6e69 2604
3713b4e3 2605 nla_nest_end(msg, nl_cmds);
86e8cf98
JB		 2606 state->split_start++;
2607 if (state->split)
3713b4e3 2608 break;
7b506ff6 2609 fallthrough;
3713b4e3 2610 case 5:
1b8ec87a
ZG		 2611 if (rdev->ops->remain_on_channel &&
2612 (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
3713b4e3
JB		 2613 nla_put_u32(msg,
2614 NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1b8ec87a 2615 rdev->wiphy.max_remain_on_channel_duration))
3713b4e3
JB		 2616 goto nla_put_failure;
2617
1b8ec87a 2618 if ((rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
3713b4e3
JB		 2619 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
2620 goto nla_put_failure;
2621
86e8cf98
JB		 2622 state->split_start++;
2623 if (state->split)
3713b4e3 2624 break;
7b506ff6 2625 fallthrough;
3713b4e3
JB		 2626 case 6:
2627#ifdef CONFIG_PM
1b8ec87a 2628 if (nl80211_send_wowlan(msg, rdev, state->split))
3713b4e3 2629 goto nla_put_failure;
86e8cf98
JB		 2630 state->split_start++;
2631 if (state->split)
3713b4e3
JB		 2632 break;
2633#else
86e8cf98 2634 state->split_start++;
dfb89c56 2635#endif
7b506ff6 2636 fallthrough;
3713b4e3
JB		 2637 case 7:
2638 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1b8ec87a 2639 rdev->wiphy.software_iftypes))
3713b4e3 2640 goto nla_put_failure;
ff1b6e69 2641
1b8ec87a 2642 if (nl80211_put_iface_combinations(&rdev->wiphy, msg,
86e8cf98 2643 state->split))
3713b4e3 2644 goto nla_put_failure;
7527a782 2645
86e8cf98
JB		 2646 state->split_start++;
2647 if (state->split)
3713b4e3 2648 break;
7b506ff6 2649 fallthrough;
3713b4e3 2650 case 8:
1b8ec87a 2651 if ((rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
3713b4e3 2652 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1b8ec87a 2653 rdev->wiphy.ap_sme_capa))
3713b4e3 2654 goto nla_put_failure;
7527a782 2655
1b8ec87a 2656 features = rdev->wiphy.features;
fe1abafd
JB		 2657 /*
2658 * We can only add the per-channel limit information if the
2659 * dump is split, otherwise it makes it too big. Therefore
2660 * only advertise it in that case.
2661 */
86e8cf98 2662 if (state->split)
fe1abafd
JB		 2663 features |= NL80211_FEATURE_ADVERTISE_CHAN_LIMITS;
2664 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS, features))
3713b4e3 2665 goto nla_put_failure;
562a7480 2666
1b8ec87a 2667 if (rdev->wiphy.ht_capa_mod_mask &&
3713b4e3 2668 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1b8ec87a
ZG		 2669 sizeof(*rdev->wiphy.ht_capa_mod_mask),
2670 rdev->wiphy.ht_capa_mod_mask))
3713b4e3 2671 goto nla_put_failure;
1f074bd8 2672
1b8ec87a
ZG		 2673 if (rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
2674 rdev->wiphy.max_acl_mac_addrs &&
3713b4e3 2675 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1b8ec87a 2676 rdev->wiphy.max_acl_mac_addrs))
3713b4e3 2677 goto nla_put_failure;
7e7c8926 2678
3713b4e3
JB		 2679 /*
2680 * Any information below this point is only available to
2681 * applications that can deal with it being split. This
2682 * helps ensure that newly added capabilities don't break
2683 * older tools by overrunning their buffers.
2684 *
2685 * We still increment split_start so that in the split
2686 * case we'll continue with more data in the next round,
2687 * but break unconditionally so unsplit data stops here.
2688 */
ab10c22b
JB		 2689 if (state->split)
2690 state->split_start++;
2691 else
2692 state->split_start = 0;
3713b4e3
JB		 2693 break;
2694 case 9:
f8d504ca
JB		 2695 if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
2696 goto nla_put_failure;
2697
2698 if (nla_put_u32(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_PLANS,
2699 rdev->wiphy.max_sched_scan_plans) ||
2700 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_INTERVAL,
2701 rdev->wiphy.max_sched_scan_plan_interval) ||
2702 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_ITERATIONS,
2703 rdev->wiphy.max_sched_scan_plan_iterations))
2704 goto nla_put_failure;
2705
1b8ec87a 2706 if (rdev->wiphy.extended_capabilities &&
fe1abafd 2707 (nla_put(msg, NL80211_ATTR_EXT_CAPA,
1b8ec87a
ZG		 2708 rdev->wiphy.extended_capabilities_len,
2709 rdev->wiphy.extended_capabilities) ||
fe1abafd 2710 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
1b8ec87a
ZG		 2711 rdev->wiphy.extended_capabilities_len,
2712 rdev->wiphy.extended_capabilities_mask)))
fe1abafd 2713 goto nla_put_failure;
a50df0c4 2714
1b8ec87a 2715 if (rdev->wiphy.vht_capa_mod_mask &&
ee2aca34 2716 nla_put(msg, NL80211_ATTR_VHT_CAPABILITY_MASK,
1b8ec87a
ZG		 2717 sizeof(*rdev->wiphy.vht_capa_mod_mask),
2718 rdev->wiphy.vht_capa_mod_mask))
ee2aca34
JB		 2719 goto nla_put_failure;
2720
ae6fa4d5
DK		 2721 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
2722 rdev->wiphy.perm_addr))
2723 goto nla_put_failure;
2724
2725 if (!is_zero_ether_addr(rdev->wiphy.addr_mask) &&
2726 nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN,
2727 rdev->wiphy.addr_mask))
2728 goto nla_put_failure;
2729
2730 if (rdev->wiphy.n_addresses > 1) {
2731 void *attr;
2732
2733 attr = nla_nest_start(msg, NL80211_ATTR_MAC_ADDRS);
2734 if (!attr)
2735 goto nla_put_failure;
2736
2737 for (i = 0; i < rdev->wiphy.n_addresses; i++)
2738 if (nla_put(msg, i + 1, ETH_ALEN,
2739 rdev->wiphy.addresses[i].addr))
2740 goto nla_put_failure;
2741
2742 nla_nest_end(msg, attr);
2743 }
2744
be29b99a
AK		 2745 state->split_start++;
2746 break;
2747 case 10:
1b8ec87a 2748 if (nl80211_send_coalesce(msg, rdev))
be29b99a
AK		 2749 goto nla_put_failure;
2750
1b8ec87a 2751 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ) &&
01e0daa4
FF		 2752 (nla_put_flag(msg, NL80211_ATTR_SUPPORT_5_MHZ) ||
2753 nla_put_flag(msg, NL80211_ATTR_SUPPORT_10_MHZ)))
2754 goto nla_put_failure;
b43504cf 2755
1b8ec87a 2756 if (rdev->wiphy.max_ap_assoc_sta &&
b43504cf 2757 nla_put_u32(msg, NL80211_ATTR_MAX_AP_ASSOC_STA,
1b8ec87a 2758 rdev->wiphy.max_ap_assoc_sta))
b43504cf
JM		 2759 goto nla_put_failure;
2760
ad7e718c
JB		 2761 state->split_start++;
2762 break;
2763 case 11:
1b8ec87a 2764 if (rdev->wiphy.n_vendor_commands) {
567ffc35
JB		 2765 const struct nl80211_vendor_cmd_info *info;
2766 struct nlattr *nested;
2767
ae0be8de
MK		 2768 nested = nla_nest_start_noflag(msg,
2769 NL80211_ATTR_VENDOR_DATA);
567ffc35
JB		 2770 if (!nested)
2771 goto nla_put_failure;
2772
1b8ec87a
ZG		 2773 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
2774 info = &rdev->wiphy.vendor_commands[i].info;
567ffc35
JB		 2775 if (nla_put(msg, i + 1, sizeof(*info), info))
2776 goto nla_put_failure;
2777 }
2778 nla_nest_end(msg, nested);
2779 }
2780
1b8ec87a 2781 if (rdev->wiphy.n_vendor_events) {
567ffc35
JB		 2782 const struct nl80211_vendor_cmd_info *info;
2783 struct nlattr *nested;
ad7e718c 2784
ae0be8de
MK		 2785 nested = nla_nest_start_noflag(msg,
2786 NL80211_ATTR_VENDOR_EVENTS);
567ffc35 2787 if (!nested)
ad7e718c 2788 goto nla_put_failure;
567ffc35 2789
1b8ec87a
ZG		 2790 for (i = 0; i < rdev->wiphy.n_vendor_events; i++) {
2791 info = &rdev->wiphy.vendor_events[i];
567ffc35
JB		 2792 if (nla_put(msg, i + 1, sizeof(*info), info))
2793 goto nla_put_failure;
2794 }
2795 nla_nest_end(msg, nested);
2796 }
9a774c78
AO		 2797 state->split_start++;
2798 break;
2799 case 12:
2800 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH &&
2801 nla_put_u8(msg, NL80211_ATTR_MAX_CSA_COUNTERS,
2802 rdev->wiphy.max_num_csa_counters))
2803 goto nla_put_failure;
01e0daa4 2804
1bdd716c
AN		 2805 if (rdev->wiphy.regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
2806 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
2807 goto nla_put_failure;
2808
ca986ad9
AVS		 2809 if (rdev->wiphy.max_sched_scan_reqs &&
2810 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_MAX_REQS,
2811 rdev->wiphy.max_sched_scan_reqs))
2812 goto nla_put_failure;
2813
d75bb06b
GKS		 2814 if (nla_put(msg, NL80211_ATTR_EXT_FEATURES,
2815 sizeof(rdev->wiphy.ext_features),
2816 rdev->wiphy.ext_features))
2817 goto nla_put_failure;
2818
38de03d2
AS		 2819 if (rdev->wiphy.bss_select_support) {
2820 struct nlattr *nested;
2821 u32 bss_select_support = rdev->wiphy.bss_select_support;
2822
ae0be8de
MK		 2823 nested = nla_nest_start_noflag(msg,
2824 NL80211_ATTR_BSS_SELECT);
38de03d2
AS		 2825 if (!nested)
2826 goto nla_put_failure;
2827
2828 i = 0;
2829 while (bss_select_support) {
2830 if ((bss_select_support & 1) &&
2831 nla_put_flag(msg, i))
2832 goto nla_put_failure;
2833 i++;
2834 bss_select_support >>= 1;
2835 }
2836 nla_nest_end(msg, nested);
2837 }
2838
019ae3a9
KV		 2839 state->split_start++;
2840 break;
2841 case 13:
2842 if (rdev->wiphy.num_iftype_ext_capab &&
2843 rdev->wiphy.iftype_ext_capab) {
2844 struct nlattr *nested_ext_capab, *nested;
2845
ae0be8de
MK		 2846 nested = nla_nest_start_noflag(msg,
2847 NL80211_ATTR_IFTYPE_EXT_CAPA);
019ae3a9
KV		 2848 if (!nested)
2849 goto nla_put_failure;
2850
2851 for (i = state->capa_start;
2852 i < rdev->wiphy.num_iftype_ext_capab; i++) {
2853 const struct wiphy_iftype_ext_capab *capab;
2854
2855 capab = &rdev->wiphy.iftype_ext_capab[i];
2856
ae0be8de
MK		 2857 nested_ext_capab = nla_nest_start_noflag(msg,
2858 i);
019ae3a9
KV		 2859 if (!nested_ext_capab ||
2860 nla_put_u32(msg, NL80211_ATTR_IFTYPE,
2861 capab->iftype) ||
2862 nla_put(msg, NL80211_ATTR_EXT_CAPA,
2863 capab->extended_capabilities_len,
2864 capab->extended_capabilities) ||
2865 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
2866 capab->extended_capabilities_len,
2867 capab->extended_capabilities_mask))
2868 goto nla_put_failure;
2869
4e9c3af3
JB		 2870 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO &&
2871 (nla_put_u16(msg,
2872 NL80211_ATTR_EML_CAPABILITY,
2873 capab->eml_capabilities) ||
2874 nla_put_u16(msg,
2875 NL80211_ATTR_MLD_CAPA_AND_OPS,
2876 capab->mld_capa_and_ops)))
2877 goto nla_put_failure;
2878
019ae3a9
KV		 2879 nla_nest_end(msg, nested_ext_capab);
2880 if (state->split)
2881 break;
2882 }
2883 nla_nest_end(msg, nested);
2884 if (i < rdev->wiphy.num_iftype_ext_capab) {
2885 state->capa_start = i + 1;
2886 break;
2887 }
2888 }
2889
8585989d
LC		 2890 if (nla_put_u32(msg, NL80211_ATTR_BANDS,
2891 rdev->wiphy.nan_supported_bands))
2892 goto nla_put_failure;
2893
52539ca8
THJ		 2894 if (wiphy_ext_feature_isset(&rdev->wiphy,
2895 NL80211_EXT_FEATURE_TXQS)) {
2896 struct cfg80211_txq_stats txqstats = {};
2897 int res;
2898
2899 res = rdev_get_txq_stats(rdev, NULL, &txqstats);
2900 if (!res &&
2901 !nl80211_put_txq_stats(msg, &txqstats,
2902 NL80211_ATTR_TXQ_STATS))
2903 goto nla_put_failure;
2904
2905 if (nla_put_u32(msg, NL80211_ATTR_TXQ_LIMIT,
2906 rdev->wiphy.txq_limit))
2907 goto nla_put_failure;
2908 if (nla_put_u32(msg, NL80211_ATTR_TXQ_MEMORY_LIMIT,
2909 rdev->wiphy.txq_memory_limit))
2910 goto nla_put_failure;
2911 if (nla_put_u32(msg, NL80211_ATTR_TXQ_QUANTUM,
2912 rdev->wiphy.txq_quantum))
2913 goto nla_put_failure;
2914 }
2915
9bb7e0f2
JB		 2916 state->split_start++;
2917 break;
2918 case 14:
2919 if (nl80211_send_pmsr_capa(rdev, msg))
2920 goto nla_put_failure;
2921
ab4dfa20
VJ		 2922 state->split_start++;
2923 break;
2924 case 15:
2925 if (rdev->wiphy.akm_suites &&
2926 nla_put(msg, NL80211_ATTR_AKM_SUITES,
2927 sizeof(u32) * rdev->wiphy.n_akm_suites,
2928 rdev->wiphy.akm_suites))
2929 goto nla_put_failure;
2930
d6039a34
VJ		 2931 if (nl80211_put_iftype_akm_suites(rdev, msg))
2932 goto nla_put_failure;
2933
3710a8a6
JB		 2934 if (nl80211_put_tid_config_support(rdev, msg))
2935 goto nla_put_failure;
6bdb68ce
CH		 2936 state->split_start++;
2937 break;
2938 case 16:
2939 if (nl80211_put_sar_specs(rdev, msg))
2940 goto nla_put_failure;
3710a8a6 2941
dc1e3cb8
JC		 2942 if (nl80211_put_mbssid_support(&rdev->wiphy, msg))
2943 goto nla_put_failure;
2944
ecad3b0b
VJ		 2945 if (nla_put_u16(msg, NL80211_ATTR_MAX_NUM_AKM_SUITES,
2946 rdev->wiphy.max_num_akm_suites))
2947 goto nla_put_failure;
2948
fa2ca639
JB		 2949 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO)
2950 nla_put_flag(msg, NL80211_ATTR_MLO_SUPPORT);
2951
3713b4e3 2952 /* done */
86e8cf98 2953 state->split_start = 0;
3713b4e3
JB		 2954 break;
2955 }
3bb20556 2956 finish:
053c095a
JB		 2957 genlmsg_end(msg, hdr);
2958 return 0;
55682965
JB		 2959
2960 nla_put_failure:
bc3ed28c
TG		 2961 genlmsg_cancel(msg, hdr);
2962 return -EMSGSIZE;
55682965
JB		 2963}
2964
86e8cf98
JB		 2965static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
2966 struct netlink_callback *cb,
2967 struct nl80211_dump_wiphy_state *state)
2968{
50508d94
JB		 2969 struct nlattr **tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
2970 int ret;
2971
2972 if (!tb)
2973 return -ENOMEM;
2974
2975 ret = nlmsg_parse_deprecated(cb->nlh,
2976 GENL_HDRLEN + nl80211_fam.hdrsize,
2977 tb, nl80211_fam.maxattr,
2978 nl80211_policy, NULL);
86e8cf98 2979 /* ignore parse errors for backward compatibility */
50508d94
JB		 2980 if (ret) {
2981 ret = 0;
2982 goto out;
2983 }
86e8cf98
JB		 2984
2985 state->split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
2986 if (tb[NL80211_ATTR_WIPHY])
2987 state->filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
2988 if (tb[NL80211_ATTR_WDEV])
2989 state->filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
2990 if (tb[NL80211_ATTR_IFINDEX]) {
2991 struct net_device *netdev;
2992 struct cfg80211_registered_device *rdev;
2993 int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
2994
7f2b8562 2995 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
50508d94
JB		 2996 if (!netdev) {
2997 ret = -ENODEV;
2998 goto out;
2999 }
86e8cf98 3000 if (netdev->ieee80211_ptr) {
f26cbf40 3001 rdev = wiphy_to_rdev(
86e8cf98
JB		 3002 netdev->ieee80211_ptr->wiphy);
3003 state->filter_wiphy = rdev->wiphy_idx;
3004 }
86e8cf98
JB		 3005 }
3006
50508d94
JB		 3007 ret = 0;
3008out:
3009 kfree(tb);
3010 return ret;
86e8cf98
JB		 3011}
3012
55682965
JB		 3013static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
3014{
645e77de 3015 int idx = 0, ret;
86e8cf98 3016 struct nl80211_dump_wiphy_state *state = (void *)cb->args[0];
1b8ec87a 3017 struct cfg80211_registered_device *rdev;
3a5a423b 3018
5fe231e8 3019 rtnl_lock();
86e8cf98
JB		 3020 if (!state) {
3021 state = kzalloc(sizeof(*state), GFP_KERNEL);
57ed5cd6
JL		 3022 if (!state) {
3023 rtnl_unlock();
86e8cf98 3024 return -ENOMEM;
3713b4e3 3025 }
86e8cf98
JB		 3026 state->filter_wiphy = -1;
3027 ret = nl80211_dump_wiphy_parse(skb, cb, state);
3028 if (ret) {
3029 kfree(state);
3030 rtnl_unlock();
3031 return ret;
3713b4e3 3032 }
86e8cf98 3033 cb->args[0] = (long)state;
3713b4e3
JB		 3034 }
3035
1b8ec87a
ZG		 3036 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3037 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3038 continue;
86e8cf98 3039 if (++idx <= state->start)
55682965 3040 continue;
86e8cf98 3041 if (state->filter_wiphy != -1 &&
1b8ec87a 3042 state->filter_wiphy != rdev->wiphy_idx)
3713b4e3
JB		 3043 continue;
3044 /* attempt to fit multiple wiphy data chunks into the skb */
3045 do {
3bb20556
JB		 3046 ret = nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY,
3047 skb,
3713b4e3
JB		 3048 NETLINK_CB(cb->skb).portid,
3049 cb->nlh->nlmsg_seq,
86e8cf98 3050 NLM_F_MULTI, state);
3713b4e3
JB		 3051 if (ret < 0) {
3052 /*
3053 * If sending the wiphy data didn't fit (ENOBUFS
3054 * or EMSGSIZE returned), this SKB is still
3055 * empty (so it's not too big because another
3056 * wiphy dataset is already in the skb) and
3057 * we've not tried to adjust the dump allocation
3058 * yet ... then adjust the alloc size to be
3059 * bigger, and return 1 but with the empty skb.
3060 * This results in an empty message being RX'ed
3061 * in userspace, but that is ignored.
3062 *
3063 * We can then retry with the larger buffer.
3064 */
3065 if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
f12cb289 3066 !skb->len && !state->split &&
3713b4e3
JB		 3067 cb->min_dump_alloc < 4096) {
3068 cb->min_dump_alloc = 4096;
f12cb289 3069 state->split_start = 0;
d98cae64 3070 rtnl_unlock();
3713b4e3
JB		 3071 return 1;
3072 }
3073 idx--;
3074 break;
645e77de 3075 }
86e8cf98 3076 } while (state->split_start > 0);
3713b4e3 3077 break;
55682965 3078 }
5fe231e8 3079 rtnl_unlock();
55682965 3080
86e8cf98 3081 state->start = idx;
55682965
JB		 3082
3083 return skb->len;
3084}
3085
86e8cf98
JB		 3086static int nl80211_dump_wiphy_done(struct netlink_callback *cb)
3087{
3088 kfree((void *)cb->args[0]);
3089 return 0;
3090}
3091
55682965
JB		 3092static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
3093{
3094 struct sk_buff *msg;
1b8ec87a 3095 struct cfg80211_registered_device *rdev = info->user_ptr[0];
86e8cf98 3096 struct nl80211_dump_wiphy_state state = {};
55682965 3097
645e77de 3098 msg = nlmsg_new(4096, GFP_KERNEL);
55682965 3099 if (!msg)
4c476991 3100 return -ENOMEM;
55682965 3101
3bb20556
JB		 3102 if (nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY, msg,
3103 info->snd_portid, info->snd_seq, 0,
86e8cf98 3104 &state) < 0) {
4c476991
JB		 3105 nlmsg_free(msg);
3106 return -ENOBUFS;
3107 }
55682965 3108
134e6375 3109 return genlmsg_reply(msg, info);
55682965
JB		 3110}
3111
31888487
JM		 3112static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
3113 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
3114 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
3115 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
3116 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
3117 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
3118};
3119
3120static int parse_txq_params(struct nlattr *tb[],
3121 struct ieee80211_txq_params *txq_params)
3122{
259d8c1e
DW		 3123 u8 ac;
3124
a3304b0a 3125 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 3126 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
3127 !tb[NL80211_TXQ_ATTR_AIFS])
3128 return -EINVAL;
3129
259d8c1e 3130 ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 3131 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
3132 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
3133 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
3134 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
3135
259d8c1e 3136 if (ac >= NL80211_NUM_ACS)
a3304b0a 3137 return -EINVAL;
259d8c1e 3138 txq_params->ac = array_index_nospec(ac, NL80211_NUM_ACS);
31888487
JM		 3139 return 0;
3140}
3141
f444de05
JB		 3142static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
3143{
3144 /*
e7e0517c
JB		 3145 * You can only set the channel explicitly for some interfaces,
3146 * most have their channel managed via their respective
cc1d2806
JB		 3147 * "establish a connection" command (connect, join, ...)
3148 *
3149 * For AP/GO and mesh mode, the channel can be set with the
3150 * channel userspace API, but is only stored and passed to the
3151 * low-level driver when the AP starts or the mesh is joined.
3152 * This is for backward compatibility, userspace can also give
3153 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 3154 *
3155 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 3156 * whatever else is going on, so they have their own special
3157 * operation to set the monitor channel if possible.
f444de05
JB		 3158 */
3159 return !wdev ||
3160 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 3161 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 3162 wdev->iftype == NL80211_IFTYPE_MONITOR ||
3163 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 3164}
3165
9bb7e0f2
JB		 3166int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
3167 struct genl_info *info,
3168 struct cfg80211_chan_def *chandef)
683b6d3b 3169{
49f9cf0e
JB		 3170 struct netlink_ext_ack *extack = info->extack;
3171 struct nlattr **attrs = info->attrs;
dbeca2ea 3172 u32 control_freq;
683b6d3b 3173
49f9cf0e 3174 if (!attrs[NL80211_ATTR_WIPHY_FREQ])
683b6d3b
JB		 3175 return -EINVAL;
3176
942ba88b
TP		 3177 control_freq = MHZ_TO_KHZ(
3178 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3179 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
3180 control_freq +=
3181 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
683b6d3b 3182
f43e5210 3183 memset(chandef, 0, sizeof(*chandef));
942ba88b 3184 chandef->chan = ieee80211_get_channel_khz(&rdev->wiphy, control_freq);
3d9d1d66 3185 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
942ba88b
TP		 3186 chandef->center_freq1 = KHZ_TO_MHZ(control_freq);
3187 chandef->freq1_offset = control_freq % 1000;
3d9d1d66 3188 chandef->center_freq2 = 0;
683b6d3b
JB		 3189
3190 /* Primary channel not allowed */
49f9cf0e
JB		 3191 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED) {
3192 NL_SET_ERR_MSG_ATTR(extack, attrs[NL80211_ATTR_WIPHY_FREQ],
3193 "Channel is disabled");
683b6d3b 3194 return -EINVAL;
49f9cf0e 3195 }
683b6d3b 3196
49f9cf0e 3197 if (attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
3d9d1d66
JB		 3198 enum nl80211_channel_type chantype;
3199
49f9cf0e 3200 chantype = nla_get_u32(attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
3d9d1d66
JB		 3201
3202 switch (chantype) {
3203 case NL80211_CHAN_NO_HT:
3204 case NL80211_CHAN_HT20:
3205 case NL80211_CHAN_HT40PLUS:
3206 case NL80211_CHAN_HT40MINUS:
3207 cfg80211_chandef_create(chandef, chandef->chan,
3208 chantype);
ffa4629e 3209 /* user input for center_freq is incorrect */
49f9cf0e
JB		 3210 if (attrs[NL80211_ATTR_CENTER_FREQ1] &&
3211 chandef->center_freq1 != nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1])) {
3212 NL_SET_ERR_MSG_ATTR(extack,
3213 attrs[NL80211_ATTR_CENTER_FREQ1],
3214 "bad center frequency 1");
ffa4629e 3215 return -EINVAL;
49f9cf0e 3216 }
ffa4629e 3217 /* center_freq2 must be zero */
49f9cf0e
JB		 3218 if (attrs[NL80211_ATTR_CENTER_FREQ2] &&
3219 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2])) {
3220 NL_SET_ERR_MSG_ATTR(extack,
3221 attrs[NL80211_ATTR_CENTER_FREQ2],
3222 "center frequency 2 can't be used");
ffa4629e 3223 return -EINVAL;
49f9cf0e 3224 }
3d9d1d66
JB		 3225 break;
3226 default:
49f9cf0e
JB		 3227 NL_SET_ERR_MSG_ATTR(extack,
3228 attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
3229 "invalid channel type");
3d9d1d66
JB		 3230 return -EINVAL;
3231 }
49f9cf0e 3232 } else if (attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
3d9d1d66 3233 chandef->width =
49f9cf0e 3234 nla_get_u32(attrs[NL80211_ATTR_CHANNEL_WIDTH]);
5d087aa7
KF		 3235 if (chandef->chan->band == NL80211_BAND_S1GHZ) {
3236 /* User input error for channel width doesn't match channel */
3237 if (chandef->width != ieee80211_s1g_channel_width(chandef->chan)) {
3238 NL_SET_ERR_MSG_ATTR(extack,
3239 attrs[NL80211_ATTR_CHANNEL_WIDTH],
3240 "bad channel width");
3241 return -EINVAL;
3242 }
3243 }
942ba88b 3244 if (attrs[NL80211_ATTR_CENTER_FREQ1]) {
3d9d1d66 3245 chandef->center_freq1 =
49f9cf0e 3246 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1]);
942ba88b
TP		 3247 if (attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET])
3248 chandef->freq1_offset = nla_get_u32(
3249 attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET]);
3250 else
3251 chandef->freq1_offset = 0;
3252 }
49f9cf0e 3253 if (attrs[NL80211_ATTR_CENTER_FREQ2])
3d9d1d66 3254 chandef->center_freq2 =
49f9cf0e 3255 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2]);
3d9d1d66
JB		 3256 }
3257
2a38075c
AAL		 3258 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
3259 chandef->edmg.channels =
3260 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
3261
3262 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
3263 chandef->edmg.bw_config =
3264 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
3265 } else {
3266 chandef->edmg.bw_config = 0;
3267 chandef->edmg.channels = 0;
3268 }
3269
49f9cf0e
JB		 3270 if (!cfg80211_chandef_valid(chandef)) {
3271 NL_SET_ERR_MSG(extack, "invalid channel definition");
3d9d1d66 3272 return -EINVAL;
49f9cf0e 3273 }
3d9d1d66 3274
9f5e8f6e 3275 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
49f9cf0e
JB		 3276 IEEE80211_CHAN_DISABLED)) {
3277 NL_SET_ERR_MSG(extack, "(extension) channel is disabled");
3d9d1d66 3278 return -EINVAL;
49f9cf0e 3279 }
3d9d1d66 3280
2f301ab2
SW		 3281 if ((chandef->width == NL80211_CHAN_WIDTH_5 ||
3282 chandef->width == NL80211_CHAN_WIDTH_10) &&
49f9cf0e
JB		 3283 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ)) {
3284 NL_SET_ERR_MSG(extack, "5/10 MHz not supported");
2f301ab2 3285 return -EINVAL;
49f9cf0e 3286 }
2f301ab2 3287
683b6d3b
JB		 3288 return 0;
3289}
3290
f444de05 3291static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
e16821bc 3292 struct net_device *dev,
7b0a0e3c
JB		 3293 struct genl_info *info,
3294 int _link_id)
f444de05 3295{
683b6d3b 3296 struct cfg80211_chan_def chandef;
f444de05 3297 int result;
e8c9bd5b 3298 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
e16821bc 3299 struct wireless_dev *wdev = NULL;
7b0a0e3c 3300 int link_id = _link_id;
e8c9bd5b 3301
e16821bc
JM		 3302 if (dev)
3303 wdev = dev->ieee80211_ptr;
f444de05
JB		 3304 if (!nl80211_can_set_dev_channel(wdev))
3305 return -EOPNOTSUPP;
e16821bc
JM		 3306 if (wdev)
3307 iftype = wdev->iftype;
f444de05 3308
7b0a0e3c
JB		 3309 if (link_id < 0) {
3310 if (wdev && wdev->valid_links)
3311 return -EINVAL;
3312 link_id = 0;
3313 }
3314
683b6d3b
JB		 3315 result = nl80211_parse_chandef(rdev, info, &chandef);
3316 if (result)
3317 return result;
f444de05 3318
e8c9bd5b 3319 switch (iftype) {
aa430da4
JB		 3320 case NL80211_IFTYPE_AP:
3321 case NL80211_IFTYPE_P2P_GO:
923b352f 3322 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
7b0a0e3c
JB		 3323 iftype))
3324 return -EINVAL;
3325 if (wdev->links[link_id].ap.beacon_interval) {
3326 struct ieee80211_channel *cur_chan;
3327
e16821bc
JM		 3328 if (!dev || !rdev->ops->set_ap_chanwidth ||
3329 !(rdev->wiphy.features &
7b0a0e3c
JB		 3330 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE))
3331 return -EBUSY;
e16821bc
JM		 3332
3333 /* Only allow dynamic channel width changes */
7b0a0e3c
JB		 3334 cur_chan = wdev->links[link_id].ap.chandef.chan;
3335 if (chandef.chan != cur_chan)
3336 return -EBUSY;
3337
3338 result = rdev_set_ap_chanwidth(rdev, dev, link_id,
3339 &chandef);
e16821bc 3340 if (result)
7b0a0e3c
JB		 3341 return result;
3342 wdev->links[link_id].ap.chandef = chandef;
3343 } else {
3344 wdev->u.ap.preset_chandef = chandef;
e16821bc 3345 }
7b0a0e3c 3346 return 0;
cc1d2806 3347 case NL80211_IFTYPE_MESH_POINT:
7b0a0e3c 3348 return cfg80211_set_mesh_channel(rdev, wdev, &chandef);
e8c9bd5b 3349 case NL80211_IFTYPE_MONITOR:
7b0a0e3c 3350 return cfg80211_set_monitor_channel(rdev, &chandef);
aa430da4 3351 default:
7b0a0e3c 3352 break;
f444de05 3353 }
f444de05 3354
7b0a0e3c 3355 return -EINVAL;
f444de05
JB		 3356}
3357
3358static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
3359{
4c476991 3360 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 3361 int link_id = nl80211_link_id_or_invalid(info->attrs);
4c476991 3362 struct net_device *netdev = info->user_ptr[1];
4e2f3d67
JB		 3363 int ret;
3364
3365 wdev_lock(netdev->ieee80211_ptr);
3366 ret = __nl80211_set_channel(rdev, netdev, info, link_id);
3367 wdev_unlock(netdev->ieee80211_ptr);
f444de05 3368
4e2f3d67 3369 return ret;
f444de05
JB		 3370}
3371
55682965
JB		 3372static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
3373{
a05829a7 3374 struct cfg80211_registered_device *rdev = NULL;
f444de05
JB		 3375 struct net_device *netdev = NULL;
3376 struct wireless_dev *wdev;
a1e567c8 3377 int result = 0, rem_txq_params = 0;
31888487 3378 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 3379 u32 changed;
3380 u8 retry_short = 0, retry_long = 0;
3381 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 3382 u8 coverage_class = 0;
52539ca8 3383 u32 txq_limit = 0, txq_memory_limit = 0, txq_quantum = 0;
55682965 3384
a05829a7 3385 rtnl_lock();
f444de05
JB		 3386 /*
3387 * Try to find the wiphy and netdev. Normally this
3388 * function shouldn't need the netdev, but this is
3389 * done for backward compatibility -- previously
3390 * setting the channel was done per wiphy, but now
3391 * it is per netdev. Previous userland like hostapd
3392 * also passed a netdev to set_wiphy, so that it is
3393 * possible to let that go to the right netdev!
3394 */
4bbf4d56 3395
f444de05
JB		 3396 if (info->attrs[NL80211_ATTR_IFINDEX]) {
3397 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
3398
7f2b8562 3399 netdev = __dev_get_by_index(genl_info_net(info), ifindex);
5fe231e8 3400 if (netdev && netdev->ieee80211_ptr)
f26cbf40 3401 rdev = wiphy_to_rdev(netdev->ieee80211_ptr->wiphy);
5fe231e8 3402 else
f444de05 3403 netdev = NULL;
4bbf4d56
JB		 3404 }
3405
f444de05 3406 if (!netdev) {
878d9ec7
JB		 3407 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
3408 info->attrs);
a05829a7
JB		 3409 if (IS_ERR(rdev)) {
3410 rtnl_unlock();
4c476991 3411 return PTR_ERR(rdev);
a05829a7 3412 }
f444de05
JB		 3413 wdev = NULL;
3414 netdev = NULL;
3415 result = 0;
71fe96bf 3416 } else
f444de05 3417 wdev = netdev->ieee80211_ptr;
f444de05 3418
a05829a7 3419 wiphy_lock(&rdev->wiphy);
a05829a7 3420
f444de05
JB		 3421 /*
3422 * end workaround code, by now the rdev is available
3423 * and locked, and wdev may or may not be NULL.
3424 */
4bbf4d56
JB		 3425
3426 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 3427 result = cfg80211_dev_rename(
3428 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
0391a45c 3429 rtnl_unlock();
4bbf4d56 3430
4bbf4d56 3431 if (result)
a05829a7 3432 goto out;
31888487
JM		 3433
3434 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
3435 struct ieee80211_txq_params txq_params;
3436 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
3437
a05829a7
JB		 3438 if (!rdev->ops->set_txq_params) {
3439 result = -EOPNOTSUPP;
3440 goto out;
3441 }
31888487 3442
a05829a7
JB		 3443 if (!netdev) {
3444 result = -EINVAL;
3445 goto out;
3446 }
f70f01c2 3447
133a3ff2 3448 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
a05829a7
JB		 3449 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
3450 result = -EINVAL;
3451 goto out;
3452 }
133a3ff2 3453
a05829a7
JB		 3454 if (!netif_running(netdev)) {
3455 result = -ENETDOWN;
3456 goto out;
3457 }
2b5f8b0b 3458
31888487
JM		 3459 nla_for_each_nested(nl_txq_params,
3460 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
3461 rem_txq_params) {
8cb08174
JB		 3462 result = nla_parse_nested_deprecated(tb,
3463 NL80211_TXQ_ATTR_MAX,
3464 nl_txq_params,
3465 txq_params_policy,
3466 info->extack);
ae811e21 3467 if (result)
a05829a7 3468 goto out;
31888487
JM		 3469 result = parse_txq_params(tb, &txq_params);
3470 if (result)
a05829a7 3471 goto out;
31888487 3472
e35e4d28
HG		 3473 result = rdev_set_txq_params(rdev, netdev,
3474 &txq_params);
31888487 3475 if (result)
a05829a7 3476 goto out;
31888487
JM		 3477 }
3478 }
55682965 3479
72bdcf34 3480 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
69c3f2d3
IP		 3481 int link_id = nl80211_link_id_or_invalid(info->attrs);
3482
4e2f3d67
JB		 3483 if (wdev) {
3484 wdev_lock(wdev);
3485 result = __nl80211_set_channel(
3486 rdev,
3487 nl80211_can_set_dev_channel(wdev) ? netdev : NULL,
69c3f2d3 3488 info, link_id);
4e2f3d67
JB		 3489 wdev_unlock(wdev);
3490 } else {
69c3f2d3 3491 result = __nl80211_set_channel(rdev, netdev, info, link_id);
4e2f3d67 3492 }
69c3f2d3 3493
72bdcf34 3494 if (result)
a05829a7 3495 goto out;
72bdcf34
JM		 3496 }
3497
98d2ff8b 3498 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 3499 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 3500 enum nl80211_tx_power_setting type;
3501 int idx, mbm = 0;
3502
c8442118
JB		 3503 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
3504 txp_wdev = NULL;
3505
a05829a7
JB		 3506 if (!rdev->ops->set_tx_power) {
3507 result = -EOPNOTSUPP;
3508 goto out;
3509 }
98d2ff8b
JO		 3510
3511 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
3512 type = nla_get_u32(info->attrs[idx]);
3513
3514 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
a05829a7
JB		 3515 (type != NL80211_TX_POWER_AUTOMATIC)) {
3516 result = -EINVAL;
3517 goto out;
3518 }
98d2ff8b
JO		 3519
3520 if (type != NL80211_TX_POWER_AUTOMATIC) {
3521 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
3522 mbm = nla_get_u32(info->attrs[idx]);
3523 }
3524
c8442118 3525 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b 3526 if (result)
a05829a7 3527 goto out;
98d2ff8b
JO		 3528 }
3529
afe0cbf8
BR		 3530 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
3531 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
3532 u32 tx_ant, rx_ant;
7a087e74 3533
7f531e03
BR		 3534 if ((!rdev->wiphy.available_antennas_tx &&
3535 !rdev->wiphy.available_antennas_rx) ||
a05829a7
JB		 3536 !rdev->ops->set_antenna) {
3537 result = -EOPNOTSUPP;
3538 goto out;
3539 }
afe0cbf8
BR		 3540
3541 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
3542 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
3543
a7ffac95 3544 /* reject antenna configurations which don't match the
7f531e03
BR		 3545 * available antenna masks, except for the "all" mask */
3546 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
a05829a7
JB		 3547 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
3548 result = -EINVAL;
3549 goto out;
3550 }
a7ffac95 3551
7f531e03
BR		 3552 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
3553 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 3554
e35e4d28 3555 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8 3556 if (result)
a05829a7 3557 goto out;
afe0cbf8
BR		 3558 }
3559
b9a5f8ca
JM		 3560 changed = 0;
3561
3562 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
3563 retry_short = nla_get_u8(
3564 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
7f2b8562 3565
b9a5f8ca
JM		 3566 changed |= WIPHY_PARAM_RETRY_SHORT;
3567 }
3568
3569 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
3570 retry_long = nla_get_u8(
3571 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
7f2b8562 3572
b9a5f8ca
JM		 3573 changed |= WIPHY_PARAM_RETRY_LONG;
3574 }
3575
3576 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
3577 frag_threshold = nla_get_u32(
3578 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
a05829a7
JB		 3579 if (frag_threshold < 256) {
3580 result = -EINVAL;
3581 goto out;
3582 }
7f2b8562 3583
b9a5f8ca
JM		 3584 if (frag_threshold != (u32) -1) {
3585 /*
3586 * Fragments (apart from the last one) are required to
3587 * have even length. Make the fragmentation code
3588 * simpler by stripping LSB should someone try to use
3589 * odd threshold value.
3590 */
3591 frag_threshold &= ~0x1;
3592 }
3593 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
3594 }
3595
3596 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
3597 rts_threshold = nla_get_u32(
3598 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
3599 changed |= WIPHY_PARAM_RTS_THRESHOLD;
3600 }
3601
81077e82 3602 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
a05829a7
JB		 3603 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
3604 result = -EINVAL;
3605 goto out;
3606 }
3057dbfd 3607
81077e82
LT		 3608 coverage_class = nla_get_u8(
3609 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
3610 changed |= WIPHY_PARAM_COVERAGE_CLASS;
3611 }
3612
3057dbfd 3613 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
a05829a7
JB		 3614 if (!(rdev->wiphy.features & NL80211_FEATURE_ACKTO_ESTIMATION)) {
3615 result = -EOPNOTSUPP;
3616 goto out;
3617 }
3057dbfd
LB		 3618
3619 changed |= WIPHY_PARAM_DYN_ACK;
81077e82
LT		 3620 }
3621
52539ca8
THJ		 3622 if (info->attrs[NL80211_ATTR_TXQ_LIMIT]) {
3623 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3624 NL80211_EXT_FEATURE_TXQS)) {
3625 result = -EOPNOTSUPP;
3626 goto out;
3627 }
52539ca8
THJ		 3628 txq_limit = nla_get_u32(
3629 info->attrs[NL80211_ATTR_TXQ_LIMIT]);
3630 changed |= WIPHY_PARAM_TXQ_LIMIT;
3631 }
3632
3633 if (info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]) {
3634 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3635 NL80211_EXT_FEATURE_TXQS)) {
3636 result = -EOPNOTSUPP;
3637 goto out;
3638 }
52539ca8
THJ		 3639 txq_memory_limit = nla_get_u32(
3640 info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]);
3641 changed |= WIPHY_PARAM_TXQ_MEMORY_LIMIT;
3642 }
3643
3644 if (info->attrs[NL80211_ATTR_TXQ_QUANTUM]) {
3645 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3646 NL80211_EXT_FEATURE_TXQS)) {
3647 result = -EOPNOTSUPP;
3648 goto out;
3649 }
52539ca8
THJ		 3650 txq_quantum = nla_get_u32(
3651 info->attrs[NL80211_ATTR_TXQ_QUANTUM]);
3652 changed |= WIPHY_PARAM_TXQ_QUANTUM;
3653 }
3654
b9a5f8ca
JM		 3655 if (changed) {
3656 u8 old_retry_short, old_retry_long;
3657 u32 old_frag_threshold, old_rts_threshold;
81077e82 3658 u8 old_coverage_class;
52539ca8 3659 u32 old_txq_limit, old_txq_memory_limit, old_txq_quantum;
b9a5f8ca 3660
a05829a7
JB		 3661 if (!rdev->ops->set_wiphy_params) {
3662 result = -EOPNOTSUPP;
3663 goto out;
3664 }
b9a5f8ca
JM		 3665
3666 old_retry_short = rdev->wiphy.retry_short;
3667 old_retry_long = rdev->wiphy.retry_long;
3668 old_frag_threshold = rdev->wiphy.frag_threshold;
3669 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 3670 old_coverage_class = rdev->wiphy.coverage_class;
52539ca8
THJ		 3671 old_txq_limit = rdev->wiphy.txq_limit;
3672 old_txq_memory_limit = rdev->wiphy.txq_memory_limit;
3673 old_txq_quantum = rdev->wiphy.txq_quantum;
b9a5f8ca
JM		 3674
3675 if (changed & WIPHY_PARAM_RETRY_SHORT)
3676 rdev->wiphy.retry_short = retry_short;
3677 if (changed & WIPHY_PARAM_RETRY_LONG)
3678 rdev->wiphy.retry_long = retry_long;
3679 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
3680 rdev->wiphy.frag_threshold = frag_threshold;
3681 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
3682 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 3683 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
3684 rdev->wiphy.coverage_class = coverage_class;
52539ca8
THJ		 3685 if (changed & WIPHY_PARAM_TXQ_LIMIT)
3686 rdev->wiphy.txq_limit = txq_limit;
3687 if (changed & WIPHY_PARAM_TXQ_MEMORY_LIMIT)
3688 rdev->wiphy.txq_memory_limit = txq_memory_limit;
3689 if (changed & WIPHY_PARAM_TXQ_QUANTUM)
3690 rdev->wiphy.txq_quantum = txq_quantum;
b9a5f8ca 3691
e35e4d28 3692 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 3693 if (result) {
3694 rdev->wiphy.retry_short = old_retry_short;
3695 rdev->wiphy.retry_long = old_retry_long;
3696 rdev->wiphy.frag_threshold = old_frag_threshold;
3697 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 3698 rdev->wiphy.coverage_class = old_coverage_class;
52539ca8
THJ		 3699 rdev->wiphy.txq_limit = old_txq_limit;
3700 rdev->wiphy.txq_memory_limit = old_txq_memory_limit;
3701 rdev->wiphy.txq_quantum = old_txq_quantum;
a05829a7 3702 goto out;
b9a5f8ca
JM		 3703 }
3704 }
a05829a7
JB		 3705
3706 result = 0;
3707
3708out:
3709 wiphy_unlock(&rdev->wiphy);
3710 return result;
55682965
JB		 3711}
3712
683b6d3b 3713static int nl80211_send_chandef(struct sk_buff *msg,
d2859df5 3714 const struct cfg80211_chan_def *chandef)
683b6d3b 3715{
601555cd
JB		 3716 if (WARN_ON(!cfg80211_chandef_valid(chandef)))
3717 return -EINVAL;
3d9d1d66 3718
683b6d3b
JB		 3719 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
3720 chandef->chan->center_freq))
3721 return -ENOBUFS;
942ba88b
TP		 3722 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
3723 chandef->chan->freq_offset))
3724 return -ENOBUFS;
3d9d1d66
JB		 3725 switch (chandef->width) {
3726 case NL80211_CHAN_WIDTH_20_NOHT:
3727 case NL80211_CHAN_WIDTH_20:
3728 case NL80211_CHAN_WIDTH_40:
3729 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
3730 cfg80211_get_chandef_type(chandef)))
3731 return -ENOBUFS;
3732 break;
3733 default:
3734 break;
3735 }
3736 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
3737 return -ENOBUFS;
3738 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
3739 return -ENOBUFS;
3740 if (chandef->center_freq2 &&
3741 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
683b6d3b
JB		 3742 return -ENOBUFS;
3743 return 0;
3744}
3745
15e47304 3746static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 3747 struct cfg80211_registered_device *rdev,
3d1a5bbf
AZ		 3748 struct wireless_dev *wdev,
3749 enum nl80211_commands cmd)
55682965 3750{
72fb2abc 3751 struct net_device *dev = wdev->netdev;
55682965
JB		 3752 void *hdr;
3753
3d1a5bbf
AZ		 3754 WARN_ON(cmd != NL80211_CMD_NEW_INTERFACE &&
3755 cmd != NL80211_CMD_DEL_INTERFACE &&
3756 cmd != NL80211_CMD_SET_INTERFACE);
8f894be2
TB		 3757
3758 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
55682965
JB		 3759 if (!hdr)
3760 return -1;
3761
72fb2abc
JB		 3762 if (dev &&
3763 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 3764 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 3765 goto nla_put_failure;
3766
3767 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3768 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
2dad624e
ND		 3769 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
3770 NL80211_ATTR_PAD) ||
98104fde 3771 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 3772 nla_put_u32(msg, NL80211_ATTR_GENERATION,
3773 rdev->devlist_generation ^
446faa15
AQ		 3774 (cfg80211_rdev_list_generation << 2)) ||
3775 nla_put_u8(msg, NL80211_ATTR_4ADDR, wdev->use_4addr))
9360ffd1 3776 goto nla_put_failure;
f5ea9120 3777
7b0a0e3c 3778 if (rdev->ops->get_channel && !wdev->valid_links) {
f43e5210 3779 struct cfg80211_chan_def chandef = {};
7b0a0e3c 3780 int ret;
683b6d3b 3781
7b0a0e3c
JB		 3782 ret = rdev_get_channel(rdev, wdev, 0, &chandef);
3783 if (ret == 0 && nl80211_send_chandef(msg, &chandef))
3784 goto nla_put_failure;
d91df0e3
PF		 3785 }
3786
d55d0d59
RM		 3787 if (rdev->ops->get_tx_power) {
3788 int dbm, ret;
3789
3790 ret = rdev_get_tx_power(rdev, wdev, &dbm);
3791 if (ret == 0 &&
3792 nla_put_u32(msg, NL80211_ATTR_WIPHY_TX_POWER_LEVEL,
3793 DBM_TO_MBM(dbm)))
3794 goto nla_put_failure;
3795 }
3796
44905265
JB		 3797 wdev_lock(wdev);
3798 switch (wdev->iftype) {
3799 case NL80211_IFTYPE_AP:
a75971bc 3800 case NL80211_IFTYPE_P2P_GO:
7b0a0e3c
JB		 3801 if (wdev->u.ap.ssid_len &&
3802 nla_put(msg, NL80211_ATTR_SSID, wdev->u.ap.ssid_len,
3803 wdev->u.ap.ssid))
4564b187 3804 goto nla_put_failure_locked;
44905265
JB		 3805 break;
3806 case NL80211_IFTYPE_STATION:
3807 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c
JB		 3808 if (wdev->u.client.ssid_len &&
3809 nla_put(msg, NL80211_ATTR_SSID, wdev->u.client.ssid_len,
3810 wdev->u.client.ssid))
3811 goto nla_put_failure_locked;
3812 break;
3813 case NL80211_IFTYPE_ADHOC:
3814 if (wdev->u.ibss.ssid_len &&
3815 nla_put(msg, NL80211_ATTR_SSID, wdev->u.ibss.ssid_len,
3816 wdev->u.ibss.ssid))
3817 goto nla_put_failure_locked;
44905265 3818 break;
44905265
JB		 3819 default:
3820 /* nothing */
3821 break;
b84e7a05 3822 }
44905265 3823 wdev_unlock(wdev);
b84e7a05 3824
52539ca8
THJ		 3825 if (rdev->ops->get_txq_stats) {
3826 struct cfg80211_txq_stats txqstats = {};
3827 int ret = rdev_get_txq_stats(rdev, wdev, &txqstats);
3828
3829 if (ret == 0 &&
3830 !nl80211_put_txq_stats(msg, &txqstats,
3831 NL80211_ATTR_TXQ_STATS))
3832 goto nla_put_failure;
3833 }
3834
ce08cd34
JB		 3835 if (wdev->valid_links) {
3836 unsigned int link_id;
3837 struct nlattr *links = nla_nest_start(msg,
3838 NL80211_ATTR_MLO_LINKS);
3839
3840 if (!links)
3841 goto nla_put_failure;
3842
3843 for_each_valid_link(wdev, link_id) {
3844 struct nlattr *link = nla_nest_start(msg, link_id + 1);
3845
3846 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link_id))
3847 goto nla_put_failure;
3848 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
3849 wdev->links[link_id].addr))
3850 goto nla_put_failure;
3851 nla_nest_end(msg, link);
3852 }
3853
3854 nla_nest_end(msg, links);
3855 }
3856
053c095a
JB		 3857 genlmsg_end(msg, hdr);
3858 return 0;
55682965 3859
4564b187
JB		 3860 nla_put_failure_locked:
3861 wdev_unlock(wdev);
55682965 3862 nla_put_failure:
bc3ed28c
TG		 3863 genlmsg_cancel(msg, hdr);
3864 return -EMSGSIZE;
55682965
JB		 3865}
3866
3867static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
3868{
3869 int wp_idx = 0;
3870 int if_idx = 0;
3871 int wp_start = cb->args[0];
3872 int if_start = cb->args[1];
b7fb44da 3873 int filter_wiphy = -1;
f5ea9120 3874 struct cfg80211_registered_device *rdev;
55682965 3875 struct wireless_dev *wdev;
ea90e0dc 3876 int ret;
55682965 3877
5fe231e8 3878 rtnl_lock();
b7fb44da
DK		 3879 if (!cb->args[2]) {
3880 struct nl80211_dump_wiphy_state state = {
3881 .filter_wiphy = -1,
3882 };
b7fb44da
DK		 3883
3884 ret = nl80211_dump_wiphy_parse(skb, cb, &state);
3885 if (ret)
ea90e0dc 3886 goto out_unlock;
b7fb44da
DK		 3887
3888 filter_wiphy = state.filter_wiphy;
3889
3890 /*
3891 * if filtering, set cb->args[2] to +1 since 0 is the default
3892 * value needed to determine that parsing is necessary.
3893 */
3894 if (filter_wiphy >= 0)
3895 cb->args[2] = filter_wiphy + 1;
3896 else
3897 cb->args[2] = -1;
3898 } else if (cb->args[2] > 0) {
3899 filter_wiphy = cb->args[2] - 1;
3900 }
3901
f5ea9120
JB		 3902 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3903 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3904 continue;
bba95fef
JB		 3905 if (wp_idx < wp_start) {
3906 wp_idx++;
55682965 3907 continue;
bba95fef 3908 }
b7fb44da
DK		 3909
3910 if (filter_wiphy >= 0 && filter_wiphy != rdev->wiphy_idx)
3911 continue;
3912
55682965
JB		 3913 if_idx = 0;
3914
53873f13 3915 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
bba95fef
JB		 3916 if (if_idx < if_start) {
3917 if_idx++;
55682965 3918 continue;
bba95fef 3919 }
15e47304 3920 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 3921 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3d1a5bbf
AZ		 3922 rdev, wdev,
3923 NL80211_CMD_NEW_INTERFACE) < 0) {
bba95fef
JB		 3924 goto out;
3925 }
3926 if_idx++;
55682965 3927 }
bba95fef
JB		 3928
3929 wp_idx++;
55682965 3930 }
bba95fef 3931 out:
55682965
JB		 3932 cb->args[0] = wp_idx;
3933 cb->args[1] = if_idx;
3934
ea90e0dc
JB		 3935 ret = skb->len;
3936 out_unlock:
3937 rtnl_unlock();
3938
3939 return ret;
55682965
JB		 3940}
3941
3942static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
3943{
3944 struct sk_buff *msg;
1b8ec87a 3945 struct cfg80211_registered_device *rdev = info->user_ptr[0];
72fb2abc 3946 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3947
fd2120ca 3948 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 3949 if (!msg)
4c476991 3950 return -ENOMEM;
55682965 3951
15e47304 3952 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3953 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
4c476991
JB		 3954 nlmsg_free(msg);
3955 return -ENOBUFS;
3956 }
55682965 3957
134e6375 3958 return genlmsg_reply(msg, info);
55682965
JB		 3959}
3960
66f7ac50
MW		 3961static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
3962 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
3963 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
3964 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
3965 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
3966 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
e057d3c3 3967 [NL80211_MNTR_FLAG_ACTIVE] = { .type = NLA_FLAG },
66f7ac50
MW		 3968};
3969
3970static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
3971{
3972 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
3973 int flag;
3974
3975 *mntrflags = 0;
3976
3977 if (!nla)
3978 return -EINVAL;
3979
8cb08174 3980 if (nla_parse_nested_deprecated(flags, NL80211_MNTR_FLAG_MAX, nla, mntr_flags_policy, NULL))
66f7ac50
MW		 3981 return -EINVAL;
3982
3983 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
3984 if (flags[flag])
3985 *mntrflags |= (1<<flag);
3986
818a986e
JB		 3987 *mntrflags |= MONITOR_FLAG_CHANGED;
3988
66f7ac50
MW		 3989 return 0;
3990}
3991
1db77596
JB		 3992static int nl80211_parse_mon_options(struct cfg80211_registered_device *rdev,
3993 enum nl80211_iftype type,
3994 struct genl_info *info,
3995 struct vif_params *params)
3996{
3997 bool change = false;
3998 int err;
3999
4000 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4001 if (type != NL80211_IFTYPE_MONITOR)
4002 return -EINVAL;
4003
4004 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
4005 &params->flags);
4006 if (err)
4007 return err;
4008
4009 change = true;
4010 }
4011
4012 if (params->flags & MONITOR_FLAG_ACTIVE &&
4013 !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
4014 return -EOPNOTSUPP;
4015
4016 if (info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]) {
4017 const u8 *mumimo_groups;
4018 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
4019
4020 if (type != NL80211_IFTYPE_MONITOR)
4021 return -EINVAL;
4022
4023 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
4024 return -EOPNOTSUPP;
4025
4026 mumimo_groups =
4027 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]);
4028
4029 /* bits 0 and 63 are reserved and must be zero */
4954601f
JB		 4030 if ((mumimo_groups[0] & BIT(0)) ||
4031 (mumimo_groups[VHT_MUMIMO_GROUPS_DATA_LEN - 1] & BIT(7)))
1db77596
JB		 4032 return -EINVAL;
4033
4034 params->vht_mumimo_groups = mumimo_groups;
4035 change = true;
4036 }
4037
4038 if (info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]) {
4039 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
4040
4041 if (type != NL80211_IFTYPE_MONITOR)
4042 return -EINVAL;
4043
4044 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
4045 return -EOPNOTSUPP;
4046
4047 params->vht_mumimo_follow_addr =
4048 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]);
4049 change = true;
4050 }
4051
4052 return change ? 1 : 0;
4053}
4054
9bc383de 4055static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 4056 struct net_device *netdev, u8 use_4addr,
4057 enum nl80211_iftype iftype)
9bc383de 4058{
ad4bb6f8 4059 if (!use_4addr) {
2e92a2d0 4060 if (netdev && netif_is_bridge_port(netdev))
ad4bb6f8 4061 return -EBUSY;
9bc383de 4062 return 0;
ad4bb6f8 4063 }
9bc383de
JB		 4064
4065 switch (iftype) {
4066 case NL80211_IFTYPE_AP_VLAN:
4067 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
4068 return 0;
4069 break;
4070 case NL80211_IFTYPE_STATION:
4071 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
4072 return 0;
4073 break;
4074 default:
4075 break;
4076 }
4077
4078 return -EOPNOTSUPP;
4079}
4080
55682965
JB		 4081static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
4082{
4c476991 4083 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 4084 struct vif_params params;
e36d56b6 4085 int err;
04a773ad 4086 enum nl80211_iftype otype, ntype;
4c476991 4087 struct net_device *dev = info->user_ptr[1];
ac7f9cfa 4088 bool change = false;
55682965 4089
2ec600d6
LCC		 4090 memset(&params, 0, sizeof(params));
4091
04a773ad 4092 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 4093
723b038d 4094 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 4095 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 4096 if (otype != ntype)
ac7f9cfa 4097 change = true;
723b038d
JB		 4098 }
4099
92ffe055 4100 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 4101 struct wireless_dev *wdev = dev->ieee80211_ptr;
4102
4c476991
JB		 4103 if (ntype != NL80211_IFTYPE_MESH_POINT)
4104 return -EINVAL;
29cbe68c
JB		 4105 if (netif_running(dev))
4106 return -EBUSY;
4107
4108 wdev_lock(wdev);
4109 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
4110 IEEE80211_MAX_MESH_ID_LEN);
7b0a0e3c 4111 wdev->u.mesh.id_up_len =
29cbe68c 4112 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
7b0a0e3c
JB		 4113 memcpy(wdev->u.mesh.id,
4114 nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
4115 wdev->u.mesh.id_up_len);
29cbe68c 4116 wdev_unlock(wdev);
2ec600d6
LCC		 4117 }
4118
8b787643
FF		 4119 if (info->attrs[NL80211_ATTR_4ADDR]) {
4120 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
4121 change = true;
ad4bb6f8 4122 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 4123 if (err)
4c476991 4124 return err;
8b787643
FF		 4125 } else {
4126 params.use_4addr = -1;
4127 }
4128
1db77596
JB		 4129 err = nl80211_parse_mon_options(rdev, ntype, info, &params);
4130 if (err < 0)
4131 return err;
4132 if (err > 0)
c6e6a0c8 4133 change = true;
e057d3c3 4134
ac7f9cfa 4135 if (change)
818a986e 4136 err = cfg80211_change_iface(rdev, dev, ntype, &params);
ac7f9cfa
JB		 4137 else
4138 err = 0;
60719ffd 4139
9bc383de
JB		 4140 if (!err && params.use_4addr != -1)
4141 dev->ieee80211_ptr->use_4addr = params.use_4addr;
4142
3d1a5bbf
AZ		 4143 if (change && !err) {
4144 struct wireless_dev *wdev = dev->ieee80211_ptr;
4145
4146 nl80211_notify_iface(rdev, wdev, NL80211_CMD_SET_INTERFACE);
4147 }
4148
55682965
JB		 4149 return err;
4150}
4151
ea6b2098 4152static int _nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
55682965 4153{
4c476991 4154 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 4155 struct vif_params params;
84efbb84 4156 struct wireless_dev *wdev;
896ff063 4157 struct sk_buff *msg;
55682965
JB		 4158 int err;
4159 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
4160
2ec600d6
LCC		 4161 memset(&params, 0, sizeof(params));
4162
55682965
JB		 4163 if (!info->attrs[NL80211_ATTR_IFNAME])
4164 return -EINVAL;
4165
ab0d76f6 4166 if (info->attrs[NL80211_ATTR_IFTYPE])
55682965 4167 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
55682965 4168
33d915d9 4169 if (!rdev->ops->add_virtual_intf)
4c476991 4170 return -EOPNOTSUPP;
55682965 4171
cb3b7d87 4172 if ((type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN ||
e8f479b1
BG		 4173 rdev->wiphy.features & NL80211_FEATURE_MAC_ON_CREATE) &&
4174 info->attrs[NL80211_ATTR_MAC]) {
1c18f145
AS		 4175 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
4176 ETH_ALEN);
4177 if (!is_valid_ether_addr(params.macaddr))
4178 return -EADDRNOTAVAIL;
4179 }
4180
9bc383de 4181 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 4182 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 4183 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 4184 if (err)
4c476991 4185 return err;
9bc383de 4186 }
8b787643 4187
e6f40511 4188 if (!cfg80211_iftype_allowed(&rdev->wiphy, type, params.use_4addr, 0))
33d915d9
MP		 4189 return -EOPNOTSUPP;
4190
1db77596
JB		 4191 err = nl80211_parse_mon_options(rdev, type, info, &params);
4192 if (err < 0)
4193 return err;
e057d3c3 4194
a18c7192
JB		 4195 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4196 if (!msg)
4197 return -ENOMEM;
4198
e35e4d28
HG		 4199 wdev = rdev_add_virtual_intf(rdev,
4200 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
818a986e 4201 NET_NAME_USER, type, &params);
d687cbb7
RM		 4202 if (WARN_ON(!wdev)) {
4203 nlmsg_free(msg);
4204 return -EPROTO;
4205 } else if (IS_ERR(wdev)) {
1c90f9d4 4206 nlmsg_free(msg);
84efbb84 4207 return PTR_ERR(wdev);
1c90f9d4 4208 }
2ec600d6 4209
18e5ca65 4210 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
78f22b6a
JB		 4211 wdev->owner_nlportid = info->snd_portid;
4212
98104fde
JB		 4213 switch (type) {
4214 case NL80211_IFTYPE_MESH_POINT:
4215 if (!info->attrs[NL80211_ATTR_MESH_ID])
4216 break;
29cbe68c
JB		 4217 wdev_lock(wdev);
4218 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
4219 IEEE80211_MAX_MESH_ID_LEN);
7b0a0e3c 4220 wdev->u.mesh.id_up_len =
29cbe68c 4221 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
7b0a0e3c
JB		 4222 memcpy(wdev->u.mesh.id,
4223 nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
4224 wdev->u.mesh.id_up_len);
29cbe68c 4225 wdev_unlock(wdev);
98104fde 4226 break;
cb3b7d87 4227 case NL80211_IFTYPE_NAN:
98104fde
JB		 4228 case NL80211_IFTYPE_P2P_DEVICE:
4229 /*
cb3b7d87 4230 * P2P Device and NAN do not have a netdev, so don't go
98104fde
JB		 4231 * through the netdev notifier and must be added here
4232 */
9bdaf3b9
JB		 4233 cfg80211_init_wdev(wdev);
4234 cfg80211_register_wdev(rdev, wdev);
98104fde
JB		 4235 break;
4236 default:
4237 break;
29cbe68c
JB		 4238 }
4239
15e47304 4240 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 4241 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
1c90f9d4
JB		 4242 nlmsg_free(msg);
4243 return -ENOBUFS;
4244 }
4245
4246 return genlmsg_reply(msg, info);
55682965
JB		 4247}
4248
ea6b2098
JB		 4249static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
4250{
4251 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4252 int ret;
4253
4254 /* to avoid failing a new interface creation due to pending removal */
4255 cfg80211_destroy_ifaces(rdev);
4256
4257 wiphy_lock(&rdev->wiphy);
4258 ret = _nl80211_new_interface(skb, info);
4259 wiphy_unlock(&rdev->wiphy);
4260
4261 return ret;
4262}
4263
55682965
JB		 4264static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
4265{
4c476991 4266 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 4267 struct wireless_dev *wdev = info->user_ptr[1];
55682965 4268
4c476991
JB		 4269 if (!rdev->ops->del_virtual_intf)
4270 return -EOPNOTSUPP;
55682965 4271
a05829a7
JB		 4272 /*
4273 * We hold RTNL, so this is safe, without RTNL opencount cannot
4274 * reach 0, and thus the rdev cannot be deleted.
4275 *
4276 * We need to do it for the dev_close(), since that will call
4277 * the netdev notifiers, and we need to acquire the mutex there
4278 * but don't know if we get there from here or from some other
4279 * place (e.g. "ip link set ... down").
4280 */
4281 mutex_unlock(&rdev->wiphy.mtx);
4282
84efbb84
JB		 4283 /*
4284 * If we remove a wireless device without a netdev then clear
4285 * user_ptr[1] so that nl80211_post_doit won't dereference it
4286 * to check if it needs to do dev_put(). Otherwise it crashes
4287 * since the wdev has been freed, unlike with a netdev where
4288 * we need the dev_put() for the netdev to really be freed.
4289 */
4290 if (!wdev->netdev)
4291 info->user_ptr[1] = NULL;
a05829a7
JB		 4292 else
4293 dev_close(wdev->netdev);
4294
4295 mutex_lock(&rdev->wiphy.mtx);
84efbb84 4296
cdf0a0a8 4297 return cfg80211_remove_virtual_intf(rdev, wdev);
55682965
JB		 4298}
4299
1d9d9213
SW		 4300static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
4301{
4302 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4303 struct net_device *dev = info->user_ptr[1];
4304 u16 noack_map;
4305
4306 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
4307 return -EINVAL;
4308
4309 if (!rdev->ops->set_noack_map)
4310 return -EOPNOTSUPP;
4311
4312 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
4313
e35e4d28 4314 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 4315}
4316
41ade00f
JB		 4317struct get_key_cookie {
4318 struct sk_buff *msg;
4319 int error;
b9454e83 4320 int idx;
41ade00f
JB		 4321};
4322
4323static void get_key_callback(void *c, struct key_params *params)
4324{
b9454e83 4325 struct nlattr *key;
41ade00f
JB		 4326 struct get_key_cookie *cookie = c;
4327
9360ffd1
DM		 4328 if ((params->key &&
4329 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
4330 params->key_len, params->key)) ||
4331 (params->seq &&
4332 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
4333 params->seq_len, params->seq)) ||
4334 (params->cipher &&
4335 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
4336 params->cipher)))
4337 goto nla_put_failure;
41ade00f 4338
ae0be8de 4339 key = nla_nest_start_noflag(cookie->msg, NL80211_ATTR_KEY);
b9454e83
JB		 4340 if (!key)
4341 goto nla_put_failure;
4342
9360ffd1
DM		 4343 if ((params->key &&
4344 nla_put(cookie->msg, NL80211_KEY_DATA,
4345 params->key_len, params->key)) ||
4346 (params->seq &&
4347 nla_put(cookie->msg, NL80211_KEY_SEQ,
4348 params->seq_len, params->seq)) ||
4349 (params->cipher &&
4350 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
4351 params->cipher)))
4352 goto nla_put_failure;
b9454e83 4353
efdfce72 4354 if (nla_put_u8(cookie->msg, NL80211_KEY_IDX, cookie->idx))
9360ffd1 4355 goto nla_put_failure;
b9454e83
JB		 4356
4357 nla_nest_end(cookie->msg, key);
4358
41ade00f
JB		 4359 return;
4360 nla_put_failure:
4361 cookie->error = 1;
4362}
4363
4364static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
4365{
4c476991 4366 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4367 int err;
4c476991 4368 struct net_device *dev = info->user_ptr[1];
41ade00f 4369 u8 key_idx = 0;
e31b8213
JB		 4370 const u8 *mac_addr = NULL;
4371 bool pairwise;
41ade00f
JB		 4372 struct get_key_cookie cookie = {
4373 .error = 0,
4374 };
4375 void *hdr;
4376 struct sk_buff *msg;
155d7c73
JB		 4377 bool bigtk_support = false;
4378
4379 if (wiphy_ext_feature_isset(&rdev->wiphy,
4380 NL80211_EXT_FEATURE_BEACON_PROTECTION))
4381 bigtk_support = true;
4382
4383 if ((dev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION ||
4384 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
4385 wiphy_ext_feature_isset(&rdev->wiphy,
4386 NL80211_EXT_FEATURE_BEACON_PROTECTION_CLIENT))
4387 bigtk_support = true;
41ade00f 4388
56be393f 4389 if (info->attrs[NL80211_ATTR_KEY_IDX]) {
41ade00f 4390 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
155d7c73
JB		 4391
4392 if (key_idx >= 6 && key_idx <= 7 && !bigtk_support) {
4393 GENL_SET_ERR_MSG(info, "BIGTK not supported");
56be393f 4394 return -EINVAL;
155d7c73 4395 }
56be393f 4396 }
41ade00f 4397
41ade00f
JB		 4398 if (info->attrs[NL80211_ATTR_MAC])
4399 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4400
e31b8213
JB		 4401 pairwise = !!mac_addr;
4402 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
4403 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
7a087e74 4404
e31b8213
JB		 4405 if (kt != NL80211_KEYTYPE_GROUP &&
4406 kt != NL80211_KEYTYPE_PAIRWISE)
4407 return -EINVAL;
4408 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
4409 }
4410
4c476991
JB		 4411 if (!rdev->ops->get_key)
4412 return -EOPNOTSUPP;
41ade00f 4413
0fa7b391
JB		 4414 if (!pairwise && mac_addr && !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4415 return -ENOENT;
4416
fd2120ca 4417 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 4418 if (!msg)
4419 return -ENOMEM;
41ade00f 4420
15e47304 4421 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 4422 NL80211_CMD_NEW_KEY);
cb35fba3 4423 if (!hdr)
9fe271af 4424 goto nla_put_failure;
41ade00f
JB		 4425
4426 cookie.msg = msg;
b9454e83 4427 cookie.idx = key_idx;
41ade00f 4428
9360ffd1
DM		 4429 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
4430 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
4431 goto nla_put_failure;
4432 if (mac_addr &&
4433 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
4434 goto nla_put_failure;
41ade00f 4435
e35e4d28
HG		 4436 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
4437 get_key_callback);
41ade00f
JB		 4438
4439 if (err)
6c95e2a2 4440 goto free_msg;
41ade00f
JB		 4441
4442 if (cookie.error)
4443 goto nla_put_failure;
4444
4445 genlmsg_end(msg, hdr);
4c476991 4446 return genlmsg_reply(msg, info);
41ade00f
JB		 4447
4448 nla_put_failure:
4449 err = -ENOBUFS;
6c95e2a2 4450 free_msg:
41ade00f 4451 nlmsg_free(msg);
41ade00f
JB		 4452 return err;
4453}
4454
4455static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
4456{
4c476991 4457 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 4458 struct key_parse key;
41ade00f 4459 int err;
4c476991 4460 struct net_device *dev = info->user_ptr[1];
41ade00f 4461
b9454e83
JB		 4462 err = nl80211_parse_key(info, &key);
4463 if (err)
4464 return err;
41ade00f 4465
b9454e83 4466 if (key.idx < 0)
41ade00f
JB		 4467 return -EINVAL;
4468
6cdd3979
AW		 4469 /* Only support setting default key and
4470 * Extended Key ID action NL80211_KEY_SET_TX.
4471 */
56be393f 4472 if (!key.def && !key.defmgmt && !key.defbeacon &&
6cdd3979 4473 !(key.p.mode == NL80211_KEY_SET_TX))
41ade00f
JB		 4474 return -EINVAL;
4475
dbd2fd65 4476 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 4477
dbd2fd65
JB		 4478 if (key.def) {
4479 if (!rdev->ops->set_default_key) {
4480 err = -EOPNOTSUPP;
4481 goto out;
4482 }
41ade00f 4483
dbd2fd65
JB		 4484 err = nl80211_key_allowed(dev->ieee80211_ptr);
4485 if (err)
4486 goto out;
4487
e35e4d28 4488 err = rdev_set_default_key(rdev, dev, key.idx,
dbd2fd65
JB		 4489 key.def_uni, key.def_multi);
4490
4491 if (err)
4492 goto out;
fffd0934 4493
3d23e349 4494#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 4495 dev->ieee80211_ptr->wext.default_key = key.idx;
4496#endif
6cdd3979 4497 } else if (key.defmgmt) {
dbd2fd65
JB		 4498 if (key.def_uni || !key.def_multi) {
4499 err = -EINVAL;
4500 goto out;
4501 }
4502
4503 if (!rdev->ops->set_default_mgmt_key) {
4504 err = -EOPNOTSUPP;
4505 goto out;
4506 }
4507
4508 err = nl80211_key_allowed(dev->ieee80211_ptr);
4509 if (err)
4510 goto out;
4511
e35e4d28 4512 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
dbd2fd65
JB		 4513 if (err)
4514 goto out;
4515
4516#ifdef CONFIG_CFG80211_WEXT
4517 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 4518#endif
56be393f
JM		 4519 } else if (key.defbeacon) {
4520 if (key.def_uni || !key.def_multi) {
4521 err = -EINVAL;
4522 goto out;
4523 }
4524
4525 if (!rdev->ops->set_default_beacon_key) {
4526 err = -EOPNOTSUPP;
4527 goto out;
4528 }
4529
4530 err = nl80211_key_allowed(dev->ieee80211_ptr);
4531 if (err)
4532 goto out;
4533
4534 err = rdev_set_default_beacon_key(rdev, dev, key.idx);
4535 if (err)
4536 goto out;
6cdd3979
AW		 4537 } else if (key.p.mode == NL80211_KEY_SET_TX &&
4538 wiphy_ext_feature_isset(&rdev->wiphy,
4539 NL80211_EXT_FEATURE_EXT_KEY_ID)) {
4540 u8 *mac_addr = NULL;
4541
4542 if (info->attrs[NL80211_ATTR_MAC])
4543 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4544
4545 if (!mac_addr || key.idx < 0 || key.idx > 1) {
4546 err = -EINVAL;
4547 goto out;
4548 }
dbd2fd65 4549
6cdd3979
AW		 4550 err = rdev_add_key(rdev, dev, key.idx,
4551 NL80211_KEYTYPE_PAIRWISE,
4552 mac_addr, &key.p);
4553 } else {
4554 err = -EINVAL;
4555 }
dbd2fd65 4556 out:
fffd0934 4557 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4558
41ade00f
JB		 4559 return err;
4560}
4561
4562static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
4563{
4c476991 4564 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 4565 int err;
4c476991 4566 struct net_device *dev = info->user_ptr[1];
b9454e83 4567 struct key_parse key;
e31b8213 4568 const u8 *mac_addr = NULL;
41ade00f 4569
b9454e83
JB		 4570 err = nl80211_parse_key(info, &key);
4571 if (err)
4572 return err;
41ade00f 4573
f8af764b
JM		 4574 if (!key.p.key) {
4575 GENL_SET_ERR_MSG(info, "no key");
41ade00f 4576 return -EINVAL;
f8af764b 4577 }
41ade00f 4578
41ade00f
JB		 4579 if (info->attrs[NL80211_ATTR_MAC])
4580 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4581
e31b8213
JB		 4582 if (key.type == -1) {
4583 if (mac_addr)
4584 key.type = NL80211_KEYTYPE_PAIRWISE;
4585 else
4586 key.type = NL80211_KEYTYPE_GROUP;
4587 }
4588
4589 /* for now */
4590 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
f8af764b
JM		 4591 key.type != NL80211_KEYTYPE_GROUP) {
4592 GENL_SET_ERR_MSG(info, "key type not pairwise or group");
e31b8213 4593 return -EINVAL;
f8af764b 4594 }
e31b8213 4595
14f34e36
GG		 4596 if (key.type == NL80211_KEYTYPE_GROUP &&
4597 info->attrs[NL80211_ATTR_VLAN_ID])
4598 key.p.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
4599
4c476991
JB		 4600 if (!rdev->ops->add_key)
4601 return -EOPNOTSUPP;
25e47c18 4602
e31b8213
JB		 4603 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
4604 key.type == NL80211_KEYTYPE_PAIRWISE,
f8af764b
JM		 4605 mac_addr)) {
4606 GENL_SET_ERR_MSG(info, "key setting validation failed");
4c476991 4607 return -EINVAL;
f8af764b 4608 }
41ade00f 4609
fffd0934
JB		 4610 wdev_lock(dev->ieee80211_ptr);
4611 err = nl80211_key_allowed(dev->ieee80211_ptr);
f8af764b
JM		 4612 if (err)
4613 GENL_SET_ERR_MSG(info, "key not allowed");
4614 if (!err) {
e35e4d28
HG		 4615 err = rdev_add_key(rdev, dev, key.idx,
4616 key.type == NL80211_KEYTYPE_PAIRWISE,
4617 mac_addr, &key.p);
f8af764b
JM		 4618 if (err)
4619 GENL_SET_ERR_MSG(info, "key addition failed");
4620 }
fffd0934 4621 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4622
41ade00f
JB		 4623 return err;
4624}
4625
4626static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
4627{
4c476991 4628 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4629 int err;
4c476991 4630 struct net_device *dev = info->user_ptr[1];
41ade00f 4631 u8 *mac_addr = NULL;
b9454e83 4632 struct key_parse key;
41ade00f 4633
b9454e83
JB		 4634 err = nl80211_parse_key(info, &key);
4635 if (err)
4636 return err;
41ade00f
JB		 4637
4638 if (info->attrs[NL80211_ATTR_MAC])
4639 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4640
e31b8213
JB		 4641 if (key.type == -1) {
4642 if (mac_addr)
4643 key.type = NL80211_KEYTYPE_PAIRWISE;
4644 else
4645 key.type = NL80211_KEYTYPE_GROUP;
4646 }
4647
4648 /* for now */
4649 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
4650 key.type != NL80211_KEYTYPE_GROUP)
4651 return -EINVAL;
4652
2d946308
AT		 4653 if (!cfg80211_valid_key_idx(rdev, key.idx,
4654 key.type == NL80211_KEYTYPE_PAIRWISE))
4655 return -EINVAL;
4656
4c476991
JB		 4657 if (!rdev->ops->del_key)
4658 return -EOPNOTSUPP;
41ade00f 4659
fffd0934
JB		 4660 wdev_lock(dev->ieee80211_ptr);
4661 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213 4662
0fa7b391 4663 if (key.type == NL80211_KEYTYPE_GROUP && mac_addr &&
e31b8213
JB		 4664 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4665 err = -ENOENT;
4666
fffd0934 4667 if (!err)
e35e4d28
HG		 4668 err = rdev_del_key(rdev, dev, key.idx,
4669 key.type == NL80211_KEYTYPE_PAIRWISE,
4670 mac_addr);
41ade00f 4671
3d23e349 4672#ifdef CONFIG_CFG80211_WEXT
08645126 4673 if (!err) {
b9454e83 4674 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 4675 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 4676 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 4677 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
4678 }
4679#endif
fffd0934 4680 wdev_unlock(dev->ieee80211_ptr);
08645126 4681
41ade00f
JB		 4682 return err;
4683}
4684
77765eaf
VT		 4685/* This function returns an error or the number of nested attributes */
4686static int validate_acl_mac_addrs(struct nlattr *nl_attr)
4687{
4688 struct nlattr *attr;
4689 int n_entries = 0, tmp;
4690
4691 nla_for_each_nested(attr, nl_attr, tmp) {
4692 if (nla_len(attr) != ETH_ALEN)
4693 return -EINVAL;
4694
4695 n_entries++;
4696 }
4697
4698 return n_entries;
4699}
4700
4701/*
4702 * This function parses ACL information and allocates memory for ACL data.
4703 * On successful return, the calling function is responsible to free the
4704 * ACL buffer returned by this function.
4705 */
4706static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
4707 struct genl_info *info)
4708{
4709 enum nl80211_acl_policy acl_policy;
4710 struct nlattr *attr;
4711 struct cfg80211_acl_data *acl;
4712 int i = 0, n_entries, tmp;
4713
4714 if (!wiphy->max_acl_mac_addrs)
4715 return ERR_PTR(-EOPNOTSUPP);
4716
4717 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
4718 return ERR_PTR(-EINVAL);
4719
4720 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
4721 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
4722 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
4723 return ERR_PTR(-EINVAL);
4724
4725 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
4726 return ERR_PTR(-EINVAL);
4727
4728 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
4729 if (n_entries < 0)
4730 return ERR_PTR(n_entries);
4731
4732 if (n_entries > wiphy->max_acl_mac_addrs)
4733 return ERR_PTR(-ENOTSUPP);
4734
391d132c 4735 acl = kzalloc(struct_size(acl, mac_addrs, n_entries), GFP_KERNEL);
77765eaf
VT		 4736 if (!acl)
4737 return ERR_PTR(-ENOMEM);
4738
4739 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
4740 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
4741 i++;
4742 }
4743
4744 acl->n_acl_entries = n_entries;
4745 acl->acl_policy = acl_policy;
4746
4747 return acl;
4748}
4749
4750static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
4751{
4752 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4753 struct net_device *dev = info->user_ptr[1];
4754 struct cfg80211_acl_data *acl;
4755 int err;
4756
4757 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4758 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4759 return -EOPNOTSUPP;
4760
7b0a0e3c 4761 if (!dev->ieee80211_ptr->links[0].ap.beacon_interval)
77765eaf
VT		 4762 return -EINVAL;
4763
4764 acl = parse_acl_data(&rdev->wiphy, info);
4765 if (IS_ERR(acl))
4766 return PTR_ERR(acl);
4767
4768 err = rdev_set_mac_acl(rdev, dev, acl);
4769
4770 kfree(acl);
4771
4772 return err;
4773}
4774
a7c7fbff
PK		 4775static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4776 u8 *rates, u8 rates_len)
4777{
4778 u8 i;
4779 u32 mask = 0;
4780
4781 for (i = 0; i < rates_len; i++) {
4782 int rate = (rates[i] & 0x7f) * 5;
4783 int ridx;
4784
4785 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
4786 struct ieee80211_rate *srate =
4787 &sband->bitrates[ridx];
4788 if (rate == srate->bitrate) {
4789 mask |= 1 << ridx;
4790 break;
4791 }
4792 }
4793 if (ridx == sband->n_bitrates)
4794 return 0; /* rate not found */
4795 }
4796
4797 return mask;
4798}
4799
4800static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
4801 u8 *rates, u8 rates_len,
4802 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
4803{
4804 u8 i;
4805
4806 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
4807
4808 for (i = 0; i < rates_len; i++) {
4809 int ridx, rbit;
4810
4811 ridx = rates[i] / 8;
4812 rbit = BIT(rates[i] % 8);
4813
4814 /* check validity */
4815 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
4816 return false;
4817
4818 /* check availability */
30fe6d50 4819 ridx = array_index_nospec(ridx, IEEE80211_HT_MCS_MASK_LEN);
a7c7fbff
PK		 4820 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
4821 mcs[ridx] |= rbit;
4822 else
4823 return false;
4824 }
4825
4826 return true;
4827}
4828
4829static u16 vht_mcs_map_to_mcs_mask(u8 vht_mcs_map)
4830{
4831 u16 mcs_mask = 0;
4832
4833 switch (vht_mcs_map) {
4834 case IEEE80211_VHT_MCS_NOT_SUPPORTED:
4835 break;
4836 case IEEE80211_VHT_MCS_SUPPORT_0_7:
4837 mcs_mask = 0x00FF;
4838 break;
4839 case IEEE80211_VHT_MCS_SUPPORT_0_8:
4840 mcs_mask = 0x01FF;
4841 break;
4842 case IEEE80211_VHT_MCS_SUPPORT_0_9:
4843 mcs_mask = 0x03FF;
4844 break;
4845 default:
4846 break;
4847 }
4848
4849 return mcs_mask;
4850}
4851
4852static void vht_build_mcs_mask(u16 vht_mcs_map,
4853 u16 vht_mcs_mask[NL80211_VHT_NSS_MAX])
4854{
4855 u8 nss;
4856
4857 for (nss = 0; nss < NL80211_VHT_NSS_MAX; nss++) {
4858 vht_mcs_mask[nss] = vht_mcs_map_to_mcs_mask(vht_mcs_map & 0x03);
4859 vht_mcs_map >>= 2;
4860 }
4861}
4862
4863static bool vht_set_mcs_mask(struct ieee80211_supported_band *sband,
4864 struct nl80211_txrate_vht *txrate,
4865 u16 mcs[NL80211_VHT_NSS_MAX])
4866{
4867 u16 tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4868 u16 tx_mcs_mask[NL80211_VHT_NSS_MAX] = {};
4869 u8 i;
4870
4871 if (!sband->vht_cap.vht_supported)
4872 return false;
4873
4874 memset(mcs, 0, sizeof(u16) * NL80211_VHT_NSS_MAX);
4875
4876 /* Build vht_mcs_mask from VHT capabilities */
4877 vht_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4878
4879 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
4880 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4881 mcs[i] = txrate->mcs[i];
4882 else
4883 return false;
4884 }
4885
4886 return true;
4887}
4888
eb89a6a6
MH		 4889static u16 he_mcs_map_to_mcs_mask(u8 he_mcs_map)
4890{
4891 switch (he_mcs_map) {
4892 case IEEE80211_HE_MCS_NOT_SUPPORTED:
4893 return 0;
4894 case IEEE80211_HE_MCS_SUPPORT_0_7:
4895 return 0x00FF;
4896 case IEEE80211_HE_MCS_SUPPORT_0_9:
4897 return 0x03FF;
4898 case IEEE80211_HE_MCS_SUPPORT_0_11:
4899 return 0xFFF;
4900 default:
4901 break;
4902 }
4903 return 0;
4904}
4905
4906static void he_build_mcs_mask(u16 he_mcs_map,
4907 u16 he_mcs_mask[NL80211_HE_NSS_MAX])
4908{
4909 u8 nss;
4910
4911 for (nss = 0; nss < NL80211_HE_NSS_MAX; nss++) {
4912 he_mcs_mask[nss] = he_mcs_map_to_mcs_mask(he_mcs_map & 0x03);
4913 he_mcs_map >>= 2;
4914 }
4915}
4916
7b0a0e3c 4917static u16 he_get_txmcsmap(struct genl_info *info, unsigned int link_id,
eb89a6a6
MH		 4918 const struct ieee80211_sta_he_cap *he_cap)
4919{
4920 struct net_device *dev = info->user_ptr[1];
4921 struct wireless_dev *wdev = dev->ieee80211_ptr;
7b0a0e3c
JB		 4922 struct cfg80211_chan_def *chandef;
4923 __le16 tx_mcs;
eb89a6a6 4924
7b0a0e3c
JB		 4925 chandef = wdev_chandef(wdev, link_id);
4926 if (!chandef) {
4927 /*
4928 * This is probably broken, but we never maintained
4929 * a chandef in these cases, so it always was.
4930 */
4931 return le16_to_cpu(he_cap->he_mcs_nss_supp.tx_mcs_80);
4932 }
4933
4934 switch (chandef->width) {
eb89a6a6
MH		 4935 case NL80211_CHAN_WIDTH_80P80:
4936 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80p80;
4937 break;
4938 case NL80211_CHAN_WIDTH_160:
4939 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_160;
4940 break;
4941 default:
4942 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80;
4943 break;
4944 }
7b0a0e3c 4945
eb89a6a6
MH		 4946 return le16_to_cpu(tx_mcs);
4947}
4948
4949static bool he_set_mcs_mask(struct genl_info *info,
4950 struct wireless_dev *wdev,
4951 struct ieee80211_supported_band *sband,
4952 struct nl80211_txrate_he *txrate,
7b0a0e3c
JB		 4953 u16 mcs[NL80211_HE_NSS_MAX],
4954 unsigned int link_id)
eb89a6a6
MH		 4955{
4956 const struct ieee80211_sta_he_cap *he_cap;
4957 u16 tx_mcs_mask[NL80211_HE_NSS_MAX] = {};
4958 u16 tx_mcs_map = 0;
4959 u8 i;
4960
4961 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
4962 if (!he_cap)
4963 return false;
4964
4965 memset(mcs, 0, sizeof(u16) * NL80211_HE_NSS_MAX);
4966
7b0a0e3c 4967 tx_mcs_map = he_get_txmcsmap(info, link_id, he_cap);
eb89a6a6
MH		 4968
4969 /* Build he_mcs_mask from HE capabilities */
4970 he_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4971
4972 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
4973 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4974 mcs[i] = txrate->mcs[i];
4975 else
4976 return false;
4977 }
4978
4979 return true;
4980}
4981
a7c7fbff 4982static int nl80211_parse_tx_bitrate_mask(struct genl_info *info,
9a5f6488
TC		 4983 struct nlattr *attrs[],
4984 enum nl80211_attrs attr,
eb89a6a6 4985 struct cfg80211_bitrate_mask *mask,
857b34c4 4986 struct net_device *dev,
7b0a0e3c
JB		 4987 bool default_all_enabled,
4988 unsigned int link_id)
a7c7fbff
PK		 4989{
4990 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4991 struct cfg80211_registered_device *rdev = info->user_ptr[0];
eb89a6a6 4992 struct wireless_dev *wdev = dev->ieee80211_ptr;
a7c7fbff
PK		 4993 int rem, i;
4994 struct nlattr *tx_rates;
4995 struct ieee80211_supported_band *sband;
eb89a6a6 4996 u16 vht_tx_mcs_map, he_tx_mcs_map;
a7c7fbff
PK		 4997
4998 memset(mask, 0, sizeof(*mask));
4999 /* Default to all rates enabled */
5000 for (i = 0; i < NUM_NL80211_BANDS; i++) {
eb89a6a6
MH		 5001 const struct ieee80211_sta_he_cap *he_cap;
5002
857b34c4
RM		 5003 if (!default_all_enabled)
5004 break;
5005
a7c7fbff
PK		 5006 sband = rdev->wiphy.bands[i];
5007
5008 if (!sband)
5009 continue;
5010
5011 mask->control[i].legacy = (1 << sband->n_bitrates) - 1;
5012 memcpy(mask->control[i].ht_mcs,
5013 sband->ht_cap.mcs.rx_mask,
5014 sizeof(mask->control[i].ht_mcs));
5015
9df66d5b
PKS		 5016 if (sband->vht_cap.vht_supported) {
5017 vht_tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
5018 vht_build_mcs_mask(vht_tx_mcs_map, mask->control[i].vht_mcs);
5019 }
eb89a6a6
MH		 5020
5021 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
5022 if (!he_cap)
5023 continue;
5024
7b0a0e3c 5025 he_tx_mcs_map = he_get_txmcsmap(info, link_id, he_cap);
eb89a6a6
MH		 5026 he_build_mcs_mask(he_tx_mcs_map, mask->control[i].he_mcs);
5027
5028 mask->control[i].he_gi = 0xFF;
5029 mask->control[i].he_ltf = 0xFF;
a7c7fbff
PK		 5030 }
5031
5032 /* if no rates are given set it back to the defaults */
9a5f6488 5033 if (!attrs[attr])
a7c7fbff
PK		 5034 goto out;
5035
5036 /* The nested attribute uses enum nl80211_band as the index. This maps
5037 * directly to the enum nl80211_band values used in cfg80211.
5038 */
5039 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
9a5f6488 5040 nla_for_each_nested(tx_rates, attrs[attr], rem) {
a7c7fbff
PK		 5041 enum nl80211_band band = nla_type(tx_rates);
5042 int err;
5043
5044 if (band < 0 || band >= NUM_NL80211_BANDS)
5045 return -EINVAL;
5046 sband = rdev->wiphy.bands[band];
5047 if (sband == NULL)
5048 return -EINVAL;
8cb08174
JB		 5049 err = nla_parse_nested_deprecated(tb, NL80211_TXRATE_MAX,
5050 tx_rates,
5051 nl80211_txattr_policy,
5052 info->extack);
a7c7fbff
PK		 5053 if (err)
5054 return err;
5055 if (tb[NL80211_TXRATE_LEGACY]) {
5056 mask->control[band].legacy = rateset_to_mask(
5057 sband,
5058 nla_data(tb[NL80211_TXRATE_LEGACY]),
5059 nla_len(tb[NL80211_TXRATE_LEGACY]));
5060 if ((mask->control[band].legacy == 0) &&
5061 nla_len(tb[NL80211_TXRATE_LEGACY]))
5062 return -EINVAL;
5063 }
5064 if (tb[NL80211_TXRATE_HT]) {
5065 if (!ht_rateset_to_mask(
5066 sband,
5067 nla_data(tb[NL80211_TXRATE_HT]),
5068 nla_len(tb[NL80211_TXRATE_HT]),
5069 mask->control[band].ht_mcs))
5070 return -EINVAL;
5071 }
c4a30446 5072
a7c7fbff
PK		 5073 if (tb[NL80211_TXRATE_VHT]) {
5074 if (!vht_set_mcs_mask(
5075 sband,
5076 nla_data(tb[NL80211_TXRATE_VHT]),
5077 mask->control[band].vht_mcs))
5078 return -EINVAL;
5079 }
c4a30446 5080
a7c7fbff
PK		 5081 if (tb[NL80211_TXRATE_GI]) {
5082 mask->control[band].gi =
5083 nla_get_u8(tb[NL80211_TXRATE_GI]);
5084 if (mask->control[band].gi > NL80211_TXRATE_FORCE_LGI)
5085 return -EINVAL;
5086 }
eb89a6a6
MH		 5087 if (tb[NL80211_TXRATE_HE] &&
5088 !he_set_mcs_mask(info, wdev, sband,
5089 nla_data(tb[NL80211_TXRATE_HE]),
7b0a0e3c
JB		 5090 mask->control[band].he_mcs,
5091 link_id))
eb89a6a6 5092 return -EINVAL;
c4a30446 5093
eb89a6a6
MH		 5094 if (tb[NL80211_TXRATE_HE_GI])
5095 mask->control[band].he_gi =
5096 nla_get_u8(tb[NL80211_TXRATE_HE_GI]);
5097 if (tb[NL80211_TXRATE_HE_LTF])
5098 mask->control[band].he_ltf =
5099 nla_get_u8(tb[NL80211_TXRATE_HE_LTF]);
a7c7fbff
PK		 5100
5101 if (mask->control[band].legacy == 0) {
eb89a6a6 5102 /* don't allow empty legacy rates if HT, VHT or HE
a7c7fbff
PK		 5103 * are not even supported.
5104 */
5105 if (!(rdev->wiphy.bands[band]->ht_cap.ht_supported ||
eb89a6a6
MH		 5106 rdev->wiphy.bands[band]->vht_cap.vht_supported ||
5107 ieee80211_get_he_iftype_cap(sband, wdev->iftype)))
a7c7fbff
PK		 5108 return -EINVAL;
5109
5110 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
5111 if (mask->control[band].ht_mcs[i])
5112 goto out;
5113
5114 for (i = 0; i < NL80211_VHT_NSS_MAX; i++)
5115 if (mask->control[band].vht_mcs[i])
5116 goto out;
5117
eb89a6a6
MH		 5118 for (i = 0; i < NL80211_HE_NSS_MAX; i++)
5119 if (mask->control[band].he_mcs[i])
5120 goto out;
5121
a7c7fbff
PK		 5122 /* legacy and mcs rates may not be both empty */
5123 return -EINVAL;
5124 }
5125 }
5126
5127out:
5128 return 0;
5129}
5130
8564e382
JB		 5131static int validate_beacon_tx_rate(struct cfg80211_registered_device *rdev,
5132 enum nl80211_band band,
5133 struct cfg80211_bitrate_mask *beacon_rate)
a7c7fbff 5134{
c4a30446 5135 u32 count_ht, count_vht, count_he, i;
8564e382 5136 u32 rate = beacon_rate->control[band].legacy;
a7c7fbff
PK		 5137
5138 /* Allow only one rate */
5139 if (hweight32(rate) > 1)
5140 return -EINVAL;
5141
5142 count_ht = 0;
5143 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
8564e382 5144 if (hweight8(beacon_rate->control[band].ht_mcs[i]) > 1) {
a7c7fbff 5145 return -EINVAL;
8564e382 5146 } else if (beacon_rate->control[band].ht_mcs[i]) {
a7c7fbff
PK		 5147 count_ht++;
5148 if (count_ht > 1)
5149 return -EINVAL;
5150 }
5151 if (count_ht && rate)
5152 return -EINVAL;
5153 }
5154
5155 count_vht = 0;
5156 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
8564e382 5157 if (hweight16(beacon_rate->control[band].vht_mcs[i]) > 1) {
a7c7fbff 5158 return -EINVAL;
8564e382 5159 } else if (beacon_rate->control[band].vht_mcs[i]) {
a7c7fbff
PK		 5160 count_vht++;
5161 if (count_vht > 1)
5162 return -EINVAL;
5163 }
5164 if (count_vht && rate)
5165 return -EINVAL;
5166 }
5167
c4a30446
RM		 5168 count_he = 0;
5169 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
5170 if (hweight16(beacon_rate->control[band].he_mcs[i]) > 1) {
5171 return -EINVAL;
5172 } else if (beacon_rate->control[band].he_mcs[i]) {
5173 count_he++;
5174 if (count_he > 1)
5175 return -EINVAL;
5176 }
5177 if (count_he && rate)
5178 return -EINVAL;
5179 }
5180
5181 if ((count_ht && count_vht && count_he) ||
5182 (!rate && !count_ht && !count_vht && !count_he))
a7c7fbff
PK		 5183 return -EINVAL;
5184
8564e382
JB		 5185 if (rate &&
5186 !wiphy_ext_feature_isset(&rdev->wiphy,
5187 NL80211_EXT_FEATURE_BEACON_RATE_LEGACY))
5188 return -EINVAL;
5189 if (count_ht &&
5190 !wiphy_ext_feature_isset(&rdev->wiphy,
5191 NL80211_EXT_FEATURE_BEACON_RATE_HT))
5192 return -EINVAL;
5193 if (count_vht &&
5194 !wiphy_ext_feature_isset(&rdev->wiphy,
5195 NL80211_EXT_FEATURE_BEACON_RATE_VHT))
5196 return -EINVAL;
c4a30446
RM		 5197 if (count_he &&
5198 !wiphy_ext_feature_isset(&rdev->wiphy,
5199 NL80211_EXT_FEATURE_BEACON_RATE_HE))
5200 return -EINVAL;
8564e382 5201
a7c7fbff
PK		 5202 return 0;
5203}
5204
dc1e3cb8
JC		 5205static int nl80211_parse_mbssid_config(struct wiphy *wiphy,
5206 struct net_device *dev,
5207 struct nlattr *attrs,
5208 struct cfg80211_mbssid_config *config,
5209 u8 num_elems)
5210{
5211 struct nlattr *tb[NL80211_MBSSID_CONFIG_ATTR_MAX + 1];
5212
5213 if (!wiphy->mbssid_max_interfaces)
5214 return -EOPNOTSUPP;
5215
5216 if (nla_parse_nested(tb, NL80211_MBSSID_CONFIG_ATTR_MAX, attrs, NULL,
5217 NULL) ||
5218 !tb[NL80211_MBSSID_CONFIG_ATTR_INDEX])
5219 return -EINVAL;
5220
5221 config->ema = nla_get_flag(tb[NL80211_MBSSID_CONFIG_ATTR_EMA]);
5222 if (config->ema) {
5223 if (!wiphy->ema_max_profile_periodicity)
5224 return -EOPNOTSUPP;
5225
5226 if (num_elems > wiphy->ema_max_profile_periodicity)
5227 return -EINVAL;
5228 }
5229
5230 config->index = nla_get_u8(tb[NL80211_MBSSID_CONFIG_ATTR_INDEX]);
5231 if (config->index >= wiphy->mbssid_max_interfaces ||
5232 (!config->index && !num_elems))
5233 return -EINVAL;
5234
5235 if (tb[NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX]) {
5236 u32 tx_ifindex =
5237 nla_get_u32(tb[NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX]);
5238
5239 if ((!config->index && tx_ifindex != dev->ifindex) ||
5240 (config->index && tx_ifindex == dev->ifindex))
5241 return -EINVAL;
5242
5243 if (tx_ifindex != dev->ifindex) {
5244 struct net_device *tx_netdev =
5245 dev_get_by_index(wiphy_net(wiphy), tx_ifindex);
5246
5247 if (!tx_netdev || !tx_netdev->ieee80211_ptr ||
5248 tx_netdev->ieee80211_ptr->wiphy != wiphy ||
5249 tx_netdev->ieee80211_ptr->iftype !=
5250 NL80211_IFTYPE_AP) {
5251 dev_put(tx_netdev);
5252 return -EINVAL;
5253 }
5254
5255 config->tx_wdev = tx_netdev->ieee80211_ptr;
5256 } else {
5257 config->tx_wdev = dev->ieee80211_ptr;
5258 }
5259 } else if (!config->index) {
5260 config->tx_wdev = dev->ieee80211_ptr;
5261 } else {
5262 return -EINVAL;
5263 }
5264
5265 return 0;
5266}
5267
5268static struct cfg80211_mbssid_elems *
5269nl80211_parse_mbssid_elems(struct wiphy *wiphy, struct nlattr *attrs)
5270{
5271 struct nlattr *nl_elems;
5272 struct cfg80211_mbssid_elems *elems;
5273 int rem_elems;
5274 u8 i = 0, num_elems = 0;
5275
5276 if (!wiphy->mbssid_max_interfaces)
5277 return ERR_PTR(-EINVAL);
5278
5279 nla_for_each_nested(nl_elems, attrs, rem_elems)
5280 num_elems++;
5281
5282 elems = kzalloc(struct_size(elems, elem, num_elems), GFP_KERNEL);
5283 if (!elems)
5284 return ERR_PTR(-ENOMEM);
5285
5286 nla_for_each_nested(nl_elems, attrs, rem_elems) {
5287 elems->elem[i].data = nla_data(nl_elems);
5288 elems->elem[i].len = nla_len(nl_elems);
5289 i++;
5290 }
5291 elems->cnt = num_elems;
5292 return elems;
5293}
5294
3d48cb74
RS		 5295static int nl80211_parse_he_bss_color(struct nlattr *attrs,
5296 struct cfg80211_he_bss_color *he_bss_color)
5297{
5298 struct nlattr *tb[NL80211_HE_BSS_COLOR_ATTR_MAX + 1];
5299 int err;
5300
5301 err = nla_parse_nested(tb, NL80211_HE_BSS_COLOR_ATTR_MAX, attrs,
5302 he_bss_color_policy, NULL);
5303 if (err)
5304 return err;
5305
5306 if (!tb[NL80211_HE_BSS_COLOR_ATTR_COLOR])
5307 return -EINVAL;
5308
5309 he_bss_color->color =
5310 nla_get_u8(tb[NL80211_HE_BSS_COLOR_ATTR_COLOR]);
5311 he_bss_color->enabled =
5312 !nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_DISABLED]);
5313 he_bss_color->partial =
5314 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_PARTIAL]);
5315
5316 return 0;
5317}
5318
81e54d08
PKC		 5319static int nl80211_parse_beacon(struct cfg80211_registered_device *rdev,
5320 struct nlattr *attrs[],
8860020e 5321 struct cfg80211_beacon_data *bcn)
ed1b6cc7 5322{
8860020e 5323 bool haveinfo = false;
81e54d08 5324 int err;
ed1b6cc7 5325
8860020e 5326 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 5327
7b0a0e3c
JB		 5328 bcn->link_id = nl80211_link_id(attrs);
5329
a1193be8
SW		 5330 if (attrs[NL80211_ATTR_BEACON_HEAD]) {
5331 bcn->head = nla_data(attrs[NL80211_ATTR_BEACON_HEAD]);
5332 bcn->head_len = nla_len(attrs[NL80211_ATTR_BEACON_HEAD]);
8860020e
JB		 5333 if (!bcn->head_len)
5334 return -EINVAL;
5335 haveinfo = true;
ed1b6cc7
JB		 5336 }
5337
a1193be8
SW		 5338 if (attrs[NL80211_ATTR_BEACON_TAIL]) {
5339 bcn->tail = nla_data(attrs[NL80211_ATTR_BEACON_TAIL]);
5340 bcn->tail_len = nla_len(attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 5341 haveinfo = true;
ed1b6cc7
JB		 5342 }
5343
4c476991
JB		 5344 if (!haveinfo)
5345 return -EINVAL;
3b85875a 5346
a1193be8
SW		 5347 if (attrs[NL80211_ATTR_IE]) {
5348 bcn->beacon_ies = nla_data(attrs[NL80211_ATTR_IE]);
5349 bcn->beacon_ies_len = nla_len(attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 5350 }
5351
a1193be8 5352 if (attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 5353 bcn->proberesp_ies =
a1193be8 5354 nla_data(attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 5355 bcn->proberesp_ies_len =
a1193be8 5356 nla_len(attrs[NL80211_ATTR_IE_PROBE_RESP]);
9946ecfb
JM		 5357 }
5358
a1193be8 5359 if (attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 5360 bcn->assocresp_ies =
a1193be8 5361 nla_data(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 5362 bcn->assocresp_ies_len =
a1193be8 5363 nla_len(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
9946ecfb
JM		 5364 }
5365
a1193be8
SW		 5366 if (attrs[NL80211_ATTR_PROBE_RESP]) {
5367 bcn->probe_resp = nla_data(attrs[NL80211_ATTR_PROBE_RESP]);
5368 bcn->probe_resp_len = nla_len(attrs[NL80211_ATTR_PROBE_RESP]);
00f740e1
AN		 5369 }
5370
81e54d08
PKC		 5371 if (attrs[NL80211_ATTR_FTM_RESPONDER]) {
5372 struct nlattr *tb[NL80211_FTM_RESP_ATTR_MAX + 1];
5373
8cb08174
JB		 5374 err = nla_parse_nested_deprecated(tb,
5375 NL80211_FTM_RESP_ATTR_MAX,
5376 attrs[NL80211_ATTR_FTM_RESPONDER],
5377 NULL, NULL);
81e54d08
PKC		 5378 if (err)
5379 return err;
5380
5381 if (tb[NL80211_FTM_RESP_ATTR_ENABLED] &&
5382 wiphy_ext_feature_isset(&rdev->wiphy,
5383 NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER))
5384 bcn->ftm_responder = 1;
5385 else
5386 return -EOPNOTSUPP;
5387
5388 if (tb[NL80211_FTM_RESP_ATTR_LCI]) {
5389 bcn->lci = nla_data(tb[NL80211_FTM_RESP_ATTR_LCI]);
5390 bcn->lci_len = nla_len(tb[NL80211_FTM_RESP_ATTR_LCI]);
5391 }
5392
5393 if (tb[NL80211_FTM_RESP_ATTR_CIVICLOC]) {
5394 bcn->civicloc = nla_data(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
5395 bcn->civicloc_len = nla_len(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
5396 }
5397 } else {
5398 bcn->ftm_responder = -1;
5399 }
5400
3d48cb74
RS		 5401 if (attrs[NL80211_ATTR_HE_BSS_COLOR]) {
5402 err = nl80211_parse_he_bss_color(attrs[NL80211_ATTR_HE_BSS_COLOR],
5403 &bcn->he_bss_color);
5404 if (err)
5405 return err;
5406 bcn->he_bss_color_valid = true;
5407 }
5408
dc1e3cb8
JC		 5409 if (attrs[NL80211_ATTR_MBSSID_ELEMS]) {
5410 struct cfg80211_mbssid_elems *mbssid =
5411 nl80211_parse_mbssid_elems(&rdev->wiphy,
5412 attrs[NL80211_ATTR_MBSSID_ELEMS]);
5413
5414 if (IS_ERR(mbssid))
5415 return PTR_ERR(mbssid);
5416
5417 bcn->mbssid_ies = mbssid;
5418 }
5419
8860020e
JB		 5420 return 0;
5421}
5422
796e90f4
JC		 5423static int nl80211_parse_he_obss_pd(struct nlattr *attrs,
5424 struct ieee80211_he_obss_pd *he_obss_pd)
5425{
5426 struct nlattr *tb[NL80211_HE_OBSS_PD_ATTR_MAX + 1];
5427 int err;
5428
5429 err = nla_parse_nested(tb, NL80211_HE_OBSS_PD_ATTR_MAX, attrs,
5430 he_obss_pd_policy, NULL);
5431 if (err)
5432 return err;
5433
f5bec330
RM		 5434 if (!tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL])
5435 return -EINVAL;
5436
5437 he_obss_pd->sr_ctrl = nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL]);
5438
6c8b6e4a
RM		 5439 if (tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET])
5440 he_obss_pd->min_offset =
5441 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET]);
5442 if (tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET])
5443 he_obss_pd->max_offset =
5444 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET]);
f5bec330
RM		 5445 if (tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET])
5446 he_obss_pd->non_srg_max_offset =
5447 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET]);
6c8b6e4a
RM		 5448
5449 if (he_obss_pd->min_offset > he_obss_pd->max_offset)
796e90f4
JC		 5450 return -EINVAL;
5451
f5bec330
RM		 5452 if (tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP])
5453 memcpy(he_obss_pd->bss_color_bitmap,
5454 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP]),
5455 sizeof(he_obss_pd->bss_color_bitmap));
5456
5457 if (tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP])
5458 memcpy(he_obss_pd->partial_bssid_bitmap,
5459 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP]),
5460 sizeof(he_obss_pd->partial_bssid_bitmap));
5461
796e90f4
JC		 5462 he_obss_pd->enable = true;
5463
5464 return 0;
5465}
5466
291c49de
AD		 5467static int nl80211_parse_fils_discovery(struct cfg80211_registered_device *rdev,
5468 struct nlattr *attrs,
5469 struct cfg80211_ap_settings *params)
5470{
5471 struct nlattr *tb[NL80211_FILS_DISCOVERY_ATTR_MAX + 1];
5472 int ret;
5473 struct cfg80211_fils_discovery *fd = &params->fils_discovery;
5474
5475 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5476 NL80211_EXT_FEATURE_FILS_DISCOVERY))
5477 return -EINVAL;
5478
5479 ret = nla_parse_nested(tb, NL80211_FILS_DISCOVERY_ATTR_MAX, attrs,
5480 NULL, NULL);
5481 if (ret)
5482 return ret;
5483
5484 if (!tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN] ||
5485 !tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX] ||
5486 !tb[NL80211_FILS_DISCOVERY_ATTR_TMPL])
5487 return -EINVAL;
5488
5489 fd->tmpl_len = nla_len(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5490 fd->tmpl = nla_data(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5491 fd->min_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN]);
5492 fd->max_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX]);
5493
5494 return 0;
5495}
5496
7443dcd1
AD		 5497static int
5498nl80211_parse_unsol_bcast_probe_resp(struct cfg80211_registered_device *rdev,
5499 struct nlattr *attrs,
5500 struct cfg80211_ap_settings *params)
5501{
5502 struct nlattr *tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1];
5503 int ret;
5504 struct cfg80211_unsol_bcast_probe_resp *presp =
5505 &params->unsol_bcast_probe_resp;
5506
5507 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5508 NL80211_EXT_FEATURE_UNSOL_BCAST_PROBE_RESP))
5509 return -EINVAL;
5510
5511 ret = nla_parse_nested(tb, NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX,
5512 attrs, NULL, NULL);
5513 if (ret)
5514 return ret;
5515
5516 if (!tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] ||
5517 !tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL])
5518 return -EINVAL;
5519
5520 presp->tmpl = nla_data(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5521 presp->tmpl_len = nla_len(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5522 presp->interval = nla_get_u32(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT]);
5523 return 0;
5524}
5525
66cd794e 5526static void nl80211_check_ap_rate_selectors(struct cfg80211_ap_settings *params,
153e2a11 5527 const struct element *rates)
66cd794e
JB		 5528{
5529 int i;
5530
5531 if (!rates)
5532 return;
5533
153e2a11
JB		 5534 for (i = 0; i < rates->datalen; i++) {
5535 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
66cd794e 5536 params->ht_required = true;
153e2a11 5537 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_VHT_PHY)
66cd794e 5538 params->vht_required = true;
153e2a11 5539 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_HE_PHY)
2a392596 5540 params->he_required = true;
153e2a11 5541 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_SAE_H2E)
d6587602 5542 params->sae_h2e_required = true;
66cd794e
JB		 5543 }
5544}
5545
5546/*
5547 * Since the nl80211 API didn't include, from the beginning, attributes about
5548 * HT/VHT requirements/capabilities, we parse them out of the IEs for the
5549 * benefit of drivers that rebuild IEs in the firmware.
5550 */
8bc65d38 5551static int nl80211_calculate_ap_params(struct cfg80211_ap_settings *params)
66cd794e
JB		 5552{
5553 const struct cfg80211_beacon_data *bcn = &params->beacon;
ba83bfb1
IM		 5554 size_t ies_len = bcn->tail_len;
5555 const u8 *ies = bcn->tail;
153e2a11
JB		 5556 const struct element *rates;
5557 const struct element *cap;
66cd794e 5558
153e2a11 5559 rates = cfg80211_find_elem(WLAN_EID_SUPP_RATES, ies, ies_len);
66cd794e
JB		 5560 nl80211_check_ap_rate_selectors(params, rates);
5561
153e2a11 5562 rates = cfg80211_find_elem(WLAN_EID_EXT_SUPP_RATES, ies, ies_len);
66cd794e
JB		 5563 nl80211_check_ap_rate_selectors(params, rates);
5564
153e2a11
JB		 5565 cap = cfg80211_find_elem(WLAN_EID_HT_CAPABILITY, ies, ies_len);
5566 if (cap && cap->datalen >= sizeof(*params->ht_cap))
5567 params->ht_cap = (void *)cap->data;
5568 cap = cfg80211_find_elem(WLAN_EID_VHT_CAPABILITY, ies, ies_len);
5569 if (cap && cap->datalen >= sizeof(*params->vht_cap))
5570 params->vht_cap = (void *)cap->data;
5571 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_CAPABILITY, ies, ies_len);
5572 if (cap && cap->datalen >= sizeof(*params->he_cap) + 1)
5573 params->he_cap = (void *)(cap->data + 1);
5574 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_OPERATION, ies, ies_len);
5575 if (cap && cap->datalen >= sizeof(*params->he_oper) + 1)
5576 params->he_oper = (void *)(cap->data + 1);
8bc65d38
AD		 5577 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_EHT_CAPABILITY, ies, ies_len);
5578 if (cap) {
5579 if (!cap->datalen)
5580 return -EINVAL;
5581 params->eht_cap = (void *)(cap->data + 1);
5582 if (!ieee80211_eht_capa_size_ok((const u8 *)params->he_cap,
5583 (const u8 *)params->eht_cap,
5584 cap->datalen - 1))
5585 return -EINVAL;
5586 }
5587 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_EHT_OPERATION, ies, ies_len);
5588 if (cap) {
5589 if (!cap->datalen)
5590 return -EINVAL;
5591 params->eht_oper = (void *)(cap->data + 1);
5592 if (!ieee80211_eht_oper_size_ok((const u8 *)params->eht_oper,
5593 cap->datalen - 1))
5594 return -EINVAL;
5595 }
5596 return 0;
66cd794e
JB		 5597}
5598
46c1dd0c
FF		 5599static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
5600 struct cfg80211_ap_settings *params)
5601{
5602 struct wireless_dev *wdev;
46c1dd0c 5603
53873f13 5604 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
46c1dd0c
FF		 5605 if (wdev->iftype != NL80211_IFTYPE_AP &&
5606 wdev->iftype != NL80211_IFTYPE_P2P_GO)
5607 continue;
5608
7b0a0e3c 5609 if (!wdev->u.ap.preset_chandef.chan)
46c1dd0c
FF		 5610 continue;
5611
7b0a0e3c
JB		 5612 params->chandef = wdev->u.ap.preset_chandef;
5613 return true;
46c1dd0c
FF		 5614 }
5615
7b0a0e3c 5616 return false;
46c1dd0c
FF		 5617}
5618
e39e5b5e
JM		 5619static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
5620 enum nl80211_auth_type auth_type,
5621 enum nl80211_commands cmd)
5622{
5623 if (auth_type > NL80211_AUTHTYPE_MAX)
5624 return false;
5625
5626 switch (cmd) {
5627 case NL80211_CMD_AUTHENTICATE:
5628 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
5629 auth_type == NL80211_AUTHTYPE_SAE)
5630 return false;
63181060
JM		 5631 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5632 NL80211_EXT_FEATURE_FILS_STA) &&
5633 (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5634 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5635 auth_type == NL80211_AUTHTYPE_FILS_PK))
5636 return false;
e39e5b5e
JM		 5637 return true;
5638 case NL80211_CMD_CONNECT:
10773a7c 5639 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
26f7044e
CHH		 5640 !wiphy_ext_feature_isset(&rdev->wiphy,
5641 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10773a7c 5642 auth_type == NL80211_AUTHTYPE_SAE)
a3caf744 5643 return false;
10773a7c 5644
a3caf744
VK		 5645 /* FILS with SK PFS or PK not supported yet */
5646 if (auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5647 auth_type == NL80211_AUTHTYPE_FILS_PK)
5648 return false;
5649 if (!wiphy_ext_feature_isset(
5650 &rdev->wiphy,
5651 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
5652 auth_type == NL80211_AUTHTYPE_FILS_SK)
5653 return false;
5654 return true;
e39e5b5e 5655 case NL80211_CMD_START_AP:
2831a631
CHH		 5656 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5657 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP) &&
5658 auth_type == NL80211_AUTHTYPE_SAE)
e39e5b5e 5659 return false;
63181060
JM		 5660 /* FILS not supported yet */
5661 if (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5662 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5663 auth_type == NL80211_AUTHTYPE_FILS_PK)
5664 return false;
e39e5b5e
JM		 5665 return true;
5666 default:
5667 return false;
5668 }
5669}
5670
8860020e
JB		 5671static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
5672{
5673 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 5674 unsigned int link_id = nl80211_link_id(info->attrs);
8860020e
JB		 5675 struct net_device *dev = info->user_ptr[1];
5676 struct wireless_dev *wdev = dev->ieee80211_ptr;
9e263e19 5677 struct cfg80211_ap_settings *params;
8860020e
JB		 5678 int err;
5679
5680 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5681 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5682 return -EOPNOTSUPP;
5683
5684 if (!rdev->ops->start_ap)
5685 return -EOPNOTSUPP;
5686
7b0a0e3c 5687 if (wdev->links[link_id].ap.beacon_interval)
8860020e
JB		 5688 return -EALREADY;
5689
8860020e
JB		 5690 /* these are required for START_AP */
5691 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
5692 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
5693 !info->attrs[NL80211_ATTR_BEACON_HEAD])
5694 return -EINVAL;
5695
9e263e19
JB		 5696 params = kzalloc(sizeof(*params), GFP_KERNEL);
5697 if (!params)
5698 return -ENOMEM;
5699
5700 err = nl80211_parse_beacon(rdev, info->attrs, &params->beacon);
8860020e 5701 if (err)
9e263e19 5702 goto out;
8860020e 5703
9e263e19 5704 params->beacon_interval =
8860020e 5705 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
9e263e19 5706 params->dtim_period =
8860020e
JB		 5707 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
5708
0c317a02 5709 err = cfg80211_validate_beacon_int(rdev, dev->ieee80211_ptr->iftype,
9e263e19 5710 params->beacon_interval);
8860020e 5711 if (err)
9e263e19 5712 goto out;
8860020e
JB		 5713
5714 /*
5715 * In theory, some of these attributes should be required here
5716 * but since they were not used when the command was originally
5717 * added, keep them optional for old user space programs to let
5718 * them continue to work with drivers that do not need the
5719 * additional information -- drivers must check!
5720 */
5721 if (info->attrs[NL80211_ATTR_SSID]) {
9e263e19
JB		 5722 params->ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5723 params->ssid_len =
8860020e 5724 nla_len(info->attrs[NL80211_ATTR_SSID]);
9e263e19
JB		 5725 if (params->ssid_len == 0) {
5726 err = -EINVAL;
5727 goto out;
5728 }
7b0a0e3c
JB		 5729
5730 if (wdev->u.ap.ssid_len &&
5731 (wdev->u.ap.ssid_len != params->ssid_len ||
5732 memcmp(wdev->u.ap.ssid, params->ssid, params->ssid_len))) {
5733 /* require identical SSID for MLO */
5734 err = -EINVAL;
5735 goto out;
5736 }
5737 } else if (wdev->valid_links) {
5738 /* require SSID for MLO */
5739 err = -EINVAL;
5740 goto out;
8860020e
JB		 5741 }
5742
ab0d76f6 5743 if (info->attrs[NL80211_ATTR_HIDDEN_SSID])
9e263e19 5744 params->hidden_ssid = nla_get_u32(
8860020e 5745 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
8860020e 5746
9e263e19 5747 params->privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
8860020e
JB		 5748
5749 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
9e263e19 5750 params->auth_type = nla_get_u32(
8860020e 5751 info->attrs[NL80211_ATTR_AUTH_TYPE]);
9e263e19
JB		 5752 if (!nl80211_valid_auth_type(rdev, params->auth_type,
5753 NL80211_CMD_START_AP)) {
5754 err = -EINVAL;
5755 goto out;
5756 }
8860020e 5757 } else
9e263e19 5758 params->auth_type = NL80211_AUTHTYPE_AUTOMATIC;
8860020e 5759
9e263e19 5760 err = nl80211_crypto_settings(rdev, info, &params->crypto,
8860020e
JB		 5761 NL80211_MAX_NR_CIPHER_SUITES);
5762 if (err)
9e263e19 5763 goto out;
8860020e 5764
1b658f11 5765 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
9e263e19
JB		 5766 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER)) {
5767 err = -EOPNOTSUPP;
5768 goto out;
5769 }
5770 params->inactivity_timeout = nla_get_u16(
1b658f11
VT		 5771 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
5772 }
5773
53cabad7 5774 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
9e263e19
JB		 5775 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
5776 err = -EINVAL;
5777 goto out;
5778 }
5779 params->p2p_ctwindow =
53cabad7 5780 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
9e263e19
JB		 5781 if (params->p2p_ctwindow != 0 &&
5782 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN)) {
5783 err = -EINVAL;
5784 goto out;
5785 }
53cabad7
JB		 5786 }
5787
5788 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
5789 u8 tmp;
5790
9e263e19
JB		 5791 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
5792 err = -EINVAL;
5793 goto out;
5794 }
53cabad7 5795 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
9e263e19
JB		 5796 params->p2p_opp_ps = tmp;
5797 if (params->p2p_opp_ps != 0 &&
5798 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS)) {
5799 err = -EINVAL;
5800 goto out;
5801 }
53cabad7
JB		 5802 }
5803
aa430da4 5804 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
9e263e19 5805 err = nl80211_parse_chandef(rdev, info, &params->chandef);
683b6d3b 5806 if (err)
9e263e19 5807 goto out;
7b0a0e3c
JB		 5808 } else if (wdev->valid_links) {
5809 /* with MLD need to specify the channel configuration */
5810 err = -EINVAL;
5811 goto out;
5812 } else if (wdev->u.ap.preset_chandef.chan) {
5813 params->chandef = wdev->u.ap.preset_chandef;
9e263e19
JB		 5814 } else if (!nl80211_get_ap_channel(rdev, params)) {
5815 err = -EINVAL;
5816 goto out;
5817 }
aa430da4 5818
9e263e19
JB		 5819 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params->chandef,
5820 wdev->iftype)) {
5821 err = -EINVAL;
5822 goto out;
5823 }
aa430da4 5824
c2653990
JB		 5825 wdev_lock(wdev);
5826
a7c7fbff 5827 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 5828 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
5829 NL80211_ATTR_TX_RATES,
9e263e19 5830 &params->beacon_rate,
7b0a0e3c 5831 dev, false, link_id);
a7c7fbff 5832 if (err)
c2653990 5833 goto out_unlock;
a7c7fbff 5834
9e263e19
JB		 5835 err = validate_beacon_tx_rate(rdev, params->chandef.chan->band,
5836 &params->beacon_rate);
a7c7fbff 5837 if (err)
c2653990 5838 goto out_unlock;
a7c7fbff
PK		 5839 }
5840
18998c38 5841 if (info->attrs[NL80211_ATTR_SMPS_MODE]) {
9e263e19 5842 params->smps_mode =
18998c38 5843 nla_get_u8(info->attrs[NL80211_ATTR_SMPS_MODE]);
9e263e19 5844 switch (params->smps_mode) {
18998c38
EP		 5845 case NL80211_SMPS_OFF:
5846 break;
5847 case NL80211_SMPS_STATIC:
5848 if (!(rdev->wiphy.features &
9e263e19
JB		 5849 NL80211_FEATURE_STATIC_SMPS)) {
5850 err = -EINVAL;
c2653990 5851 goto out_unlock;
9e263e19 5852 }
18998c38
EP		 5853 break;
5854 case NL80211_SMPS_DYNAMIC:
5855 if (!(rdev->wiphy.features &
9e263e19
JB		 5856 NL80211_FEATURE_DYNAMIC_SMPS)) {
5857 err = -EINVAL;
c2653990 5858 goto out_unlock;
9e263e19 5859 }
18998c38
EP		 5860 break;
5861 default:
9e263e19 5862 err = -EINVAL;
c2653990 5863 goto out_unlock;
18998c38
EP		 5864 }
5865 } else {
9e263e19 5866 params->smps_mode = NL80211_SMPS_OFF;
18998c38
EP		 5867 }
5868
9e263e19
JB		 5869 params->pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
5870 if (params->pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
5871 err = -EOPNOTSUPP;
c2653990 5872 goto out_unlock;
9e263e19 5873 }
6e8ef842 5874
4baf6bea 5875 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
9e263e19
JB		 5876 params->acl = parse_acl_data(&rdev->wiphy, info);
5877 if (IS_ERR(params->acl)) {
5878 err = PTR_ERR(params->acl);
05075fe7 5879 params->acl = NULL;
c2653990 5880 goto out_unlock;
9e263e19 5881 }
4baf6bea
OO		 5882 }
5883
9e263e19 5884 params->twt_responder =
a0de1ca3
JC		 5885 nla_get_flag(info->attrs[NL80211_ATTR_TWT_RESPONDER]);
5886
796e90f4
JC		 5887 if (info->attrs[NL80211_ATTR_HE_OBSS_PD]) {
5888 err = nl80211_parse_he_obss_pd(
5889 info->attrs[NL80211_ATTR_HE_OBSS_PD],
9e263e19 5890 &params->he_obss_pd);
bc7a39b4 5891 if (err)
c2653990 5892 goto out_unlock;
796e90f4
JC		 5893 }
5894
291c49de
AD		 5895 if (info->attrs[NL80211_ATTR_FILS_DISCOVERY]) {
5896 err = nl80211_parse_fils_discovery(rdev,
5897 info->attrs[NL80211_ATTR_FILS_DISCOVERY],
9e263e19 5898 params);
291c49de 5899 if (err)
c2653990 5900 goto out_unlock;
291c49de
AD		 5901 }
5902
7443dcd1
AD		 5903 if (info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP]) {
5904 err = nl80211_parse_unsol_bcast_probe_resp(
5905 rdev, info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP],
9e263e19 5906 params);
7443dcd1 5907 if (err)
c2653990 5908 goto out_unlock;
7443dcd1
AD		 5909 }
5910
dc1e3cb8
JC		 5911 if (info->attrs[NL80211_ATTR_MBSSID_CONFIG]) {
5912 err = nl80211_parse_mbssid_config(&rdev->wiphy, dev,
5913 info->attrs[NL80211_ATTR_MBSSID_CONFIG],
5914 &params->mbssid_config,
5915 params->beacon.mbssid_ies ?
5916 params->beacon.mbssid_ies->cnt :
5917 0);
5918 if (err)
c2653990 5919 goto out_unlock;
dc1e3cb8
JC		 5920 }
5921
8bc65d38
AD		 5922 err = nl80211_calculate_ap_params(params);
5923 if (err)
5924 goto out_unlock;
66cd794e 5925
47301a74
VJ		 5926 if (info->attrs[NL80211_ATTR_AP_SETTINGS_FLAGS])
5927 params->flags = nla_get_u32(
5928 info->attrs[NL80211_ATTR_AP_SETTINGS_FLAGS]);
5929 else if (info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])
5930 params->flags |= NL80211_AP_SETTINGS_EXTERNAL_AUTH_SUPPORT;
fe494370 5931
7b0a0e3c
JB		 5932 if (wdev->conn_owner_nlportid &&
5933 info->attrs[NL80211_ATTR_SOCKET_OWNER] &&
5934 wdev->conn_owner_nlportid != info->snd_portid) {
5935 err = -EINVAL;
5936 goto out_unlock;
5937 }
5938
5939 /* FIXME: validate MLO/link-id against driver capabilities */
5940
9e263e19 5941 err = rdev_start_ap(rdev, dev, params);
46c1dd0c 5942 if (!err) {
7b0a0e3c
JB		 5943 wdev->links[link_id].ap.beacon_interval = params->beacon_interval;
5944 wdev->links[link_id].ap.chandef = params->chandef;
5945 wdev->u.ap.ssid_len = params->ssid_len;
5946 memcpy(wdev->u.ap.ssid, params->ssid,
5947 params->ssid_len);
466a3061
DK		 5948
5949 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
5950 wdev->conn_owner_nlportid = info->snd_portid;
46c1dd0c 5951 }
7b0a0e3c 5952out_unlock:
c56589ed 5953 wdev_unlock(wdev);
9951ebfc 5954out:
9e263e19 5955 kfree(params->acl);
dc1e3cb8
JC		 5956 kfree(params->beacon.mbssid_ies);
5957 if (params->mbssid_config.tx_wdev &&
5958 params->mbssid_config.tx_wdev->netdev &&
5959 params->mbssid_config.tx_wdev->netdev != dev)
5960 dev_put(params->mbssid_config.tx_wdev->netdev);
9e263e19 5961 kfree(params);
77765eaf 5962
56d1893d 5963 return err;
ed1b6cc7
JB		 5964}
5965
8860020e
JB		 5966static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
5967{
5968 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 5969 unsigned int link_id = nl80211_link_id(info->attrs);
8860020e
JB		 5970 struct net_device *dev = info->user_ptr[1];
5971 struct wireless_dev *wdev = dev->ieee80211_ptr;
5972 struct cfg80211_beacon_data params;
5973 int err;
5974
5975 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5976 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5977 return -EOPNOTSUPP;
5978
5979 if (!rdev->ops->change_beacon)
5980 return -EOPNOTSUPP;
5981
7b0a0e3c 5982 if (!wdev->links[link_id].ap.beacon_interval)
8860020e
JB		 5983 return -EINVAL;
5984
81e54d08 5985 err = nl80211_parse_beacon(rdev, info->attrs, &params);
8860020e 5986 if (err)
dc1e3cb8 5987 goto out;
8860020e 5988
c56589ed
SW		 5989 wdev_lock(wdev);
5990 err = rdev_change_beacon(rdev, dev, &params);
5991 wdev_unlock(wdev);
5992
dc1e3cb8
JC		 5993out:
5994 kfree(params.mbssid_ies);
c56589ed 5995 return err;
8860020e
JB		 5996}
5997
5998static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 5999{
4c476991 6000 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 6001 unsigned int link_id = nl80211_link_id(info->attrs);
4c476991 6002 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 6003
7b0a0e3c 6004 return cfg80211_stop_ap(rdev, dev, link_id, false);
ed1b6cc7
JB		 6005}
6006
5727ef1b
JB		 6007static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
6008 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
6009 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
6010 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 6011 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 6012 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 6013 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 6014};
6015
eccb8e8f 6016static int parse_station_flags(struct genl_info *info,
bdd3ae3d 6017 enum nl80211_iftype iftype,
eccb8e8f 6018 struct station_parameters *params)
5727ef1b
JB		 6019{
6020 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 6021 struct nlattr *nla;
5727ef1b
JB		 6022 int flag;
6023
eccb8e8f
JB		 6024 /*
6025 * Try parsing the new attribute first so userspace
6026 * can specify both for older kernels.
6027 */
6028 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
6029 if (nla) {
6030 struct nl80211_sta_flag_update *sta_flags;
6031
6032 sta_flags = nla_data(nla);
6033 params->sta_flags_mask = sta_flags->mask;
6034 params->sta_flags_set = sta_flags->set;
77ee7c89 6035 params->sta_flags_set &= params->sta_flags_mask;
eccb8e8f
JB		 6036 if ((params->sta_flags_mask |
6037 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
6038 return -EINVAL;
6039 return 0;
6040 }
6041
6042 /* if present, parse the old attribute */
5727ef1b 6043
eccb8e8f 6044 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 6045 if (!nla)
6046 return 0;
6047
8cb08174 6048 if (nla_parse_nested_deprecated(flags, NL80211_STA_FLAG_MAX, nla, sta_flags_policy, info->extack))
5727ef1b
JB		 6049 return -EINVAL;
6050
bdd3ae3d
JB		 6051 /*
6052 * Only allow certain flags for interface types so that
6053 * other attributes are silently ignored. Remember that
6054 * this is backward compatibility code with old userspace
6055 * and shouldn't be hit in other cases anyway.
6056 */
6057 switch (iftype) {
6058 case NL80211_IFTYPE_AP:
6059 case NL80211_IFTYPE_AP_VLAN:
6060 case NL80211_IFTYPE_P2P_GO:
6061 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
6062 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
6063 BIT(NL80211_STA_FLAG_WME) |
6064 BIT(NL80211_STA_FLAG_MFP);
6065 break;
6066 case NL80211_IFTYPE_P2P_CLIENT:
6067 case NL80211_IFTYPE_STATION:
6068 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
6069 BIT(NL80211_STA_FLAG_TDLS_PEER);
6070 break;
6071 case NL80211_IFTYPE_MESH_POINT:
6072 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6073 BIT(NL80211_STA_FLAG_MFP) |
6074 BIT(NL80211_STA_FLAG_AUTHORIZED);
5cf3006c 6075 break;
bdd3ae3d
JB		 6076 default:
6077 return -EINVAL;
6078 }
5727ef1b 6079
3383b5a6
JB		 6080 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
6081 if (flags[flag]) {
eccb8e8f 6082 params->sta_flags_set |= (1<<flag);
5727ef1b 6083
3383b5a6
JB		 6084 /* no longer support new API additions in old API */
6085 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
6086 return -EINVAL;
6087 }
6088 }
6089
5727ef1b
JB		 6090 return 0;
6091}
6092
9bb7e0f2 6093bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info, int attr)
c8dcfd8a
FF		 6094{
6095 struct nlattr *rate;
8eb41c8d
VK		 6096 u32 bitrate;
6097 u16 bitrate_compat;
bbf67e45 6098 enum nl80211_rate_info rate_flg;
c8dcfd8a 6099
ae0be8de 6100 rate = nla_nest_start_noflag(msg, attr);
c8dcfd8a 6101 if (!rate)
db9c64cf 6102 return false;
c8dcfd8a
FF		 6103
6104 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
6105 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 6106 /* report 16-bit bitrate only if we can */
6107 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
db9c64cf
JB		 6108 if (bitrate > 0 &&
6109 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
6110 return false;
6111 if (bitrate_compat > 0 &&
6112 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
6113 return false;
6114
b51f3bee
JB		 6115 switch (info->bw) {
6116 case RATE_INFO_BW_5:
6117 rate_flg = NL80211_RATE_INFO_5_MHZ_WIDTH;
6118 break;
6119 case RATE_INFO_BW_10:
6120 rate_flg = NL80211_RATE_INFO_10_MHZ_WIDTH;
6121 break;
6122 default:
6123 WARN_ON(1);
7b506ff6 6124 fallthrough;
b51f3bee
JB		 6125 case RATE_INFO_BW_20:
6126 rate_flg = 0;
6127 break;
6128 case RATE_INFO_BW_40:
6129 rate_flg = NL80211_RATE_INFO_40_MHZ_WIDTH;
6130 break;
6131 case RATE_INFO_BW_80:
6132 rate_flg = NL80211_RATE_INFO_80_MHZ_WIDTH;
6133 break;
6134 case RATE_INFO_BW_160:
6135 rate_flg = NL80211_RATE_INFO_160_MHZ_WIDTH;
6136 break;
c4cbaf79
LC		 6137 case RATE_INFO_BW_HE_RU:
6138 rate_flg = 0;
6139 WARN_ON(!(info->flags & RATE_INFO_FLAGS_HE_MCS));
cfb14110
VJ		 6140 break;
6141 case RATE_INFO_BW_320:
6142 rate_flg = NL80211_RATE_INFO_320_MHZ_WIDTH;
6143 break;
6144 case RATE_INFO_BW_EHT_RU:
6145 rate_flg = 0;
6146 WARN_ON(!(info->flags & RATE_INFO_FLAGS_EHT_MCS));
6147 break;
b51f3bee
JB		 6148 }
6149
6150 if (rate_flg && nla_put_flag(msg, rate_flg))
6151 return false;
6152
db9c64cf
JB		 6153 if (info->flags & RATE_INFO_FLAGS_MCS) {
6154 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
6155 return false;
db9c64cf
JB		 6156 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
6157 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
6158 return false;
6159 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
6160 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
6161 return false;
6162 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
6163 return false;
db9c64cf
JB		 6164 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
6165 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
6166 return false;
c4cbaf79
LC		 6167 } else if (info->flags & RATE_INFO_FLAGS_HE_MCS) {
6168 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_MCS, info->mcs))
6169 return false;
6170 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_NSS, info->nss))
6171 return false;
6172 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_GI, info->he_gi))
6173 return false;
6174 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_DCM, info->he_dcm))
6175 return false;
6176 if (info->bw == RATE_INFO_BW_HE_RU &&
6177 nla_put_u8(msg, NL80211_RATE_INFO_HE_RU_ALLOC,
6178 info->he_ru_alloc))
6179 return false;
cfb14110
VJ		 6180 } else if (info->flags & RATE_INFO_FLAGS_EHT_MCS) {
6181 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_MCS, info->mcs))
6182 return false;
6183 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_NSS, info->nss))
6184 return false;
6185 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_GI, info->eht_gi))
6186 return false;
6187 if (info->bw == RATE_INFO_BW_EHT_RU &&
6188 nla_put_u8(msg, NL80211_RATE_INFO_EHT_RU_ALLOC,
6189 info->eht_ru_alloc))
6190 return false;
db9c64cf 6191 }
c8dcfd8a
FF		 6192
6193 nla_nest_end(msg, rate);
6194 return true;
c8dcfd8a
FF		 6195}
6196
119363c7
FF		 6197static bool nl80211_put_signal(struct sk_buff *msg, u8 mask, s8 *signal,
6198 int id)
6199{
6200 void *attr;
6201 int i = 0;
6202
6203 if (!mask)
6204 return true;
6205
ae0be8de 6206 attr = nla_nest_start_noflag(msg, id);
119363c7
FF		 6207 if (!attr)
6208 return false;
6209
6210 for (i = 0; i < IEEE80211_MAX_CHAINS; i++) {
6211 if (!(mask & BIT(i)))
6212 continue;
6213
6214 if (nla_put_u8(msg, i, signal[i]))
6215 return false;
6216 }
6217
6218 nla_nest_end(msg, attr);
6219
6220 return true;
6221}
6222
cf5ead82
JB		 6223static int nl80211_send_station(struct sk_buff *msg, u32 cmd, u32 portid,
6224 u32 seq, int flags,
66266b3a
JL		 6225 struct cfg80211_registered_device *rdev,
6226 struct net_device *dev,
98b62183 6227 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 6228{
6229 void *hdr;
f4263c98 6230 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 6231
cf5ead82 6232 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
f77bf486
AS		 6233 if (!hdr) {
6234 cfg80211_sinfo_release_content(sinfo);
fd5b74dc 6235 return -1;
f77bf486 6236 }
fd5b74dc 6237
9360ffd1
DM		 6238 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6239 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
6240 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
6241 goto nla_put_failure;
f5ea9120 6242
ae0be8de 6243 sinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_STA_INFO);
2ec600d6 6244 if (!sinfoattr)
fd5b74dc 6245 goto nla_put_failure;
319090bf
JB		 6246
6247#define PUT_SINFO(attr, memb, type) do { \
d686b920 6248 BUILD_BUG_ON(sizeof(type) == sizeof(u64)); \
397c657a 6249 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
319090bf
JB		 6250 nla_put_ ## type(msg, NL80211_STA_INFO_ ## attr, \
6251 sinfo->memb)) \
6252 goto nla_put_failure; \
6253 } while (0)
d686b920 6254#define PUT_SINFO_U64(attr, memb) do { \
397c657a 6255 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
d686b920
JB		 6256 nla_put_u64_64bit(msg, NL80211_STA_INFO_ ## attr, \
6257 sinfo->memb, NL80211_STA_INFO_PAD)) \
6258 goto nla_put_failure; \
6259 } while (0)
319090bf
JB		 6260
6261 PUT_SINFO(CONNECTED_TIME, connected_time, u32);
6262 PUT_SINFO(INACTIVE_TIME, inactive_time, u32);
6c7a0033 6263 PUT_SINFO_U64(ASSOC_AT_BOOTTIME, assoc_at);
319090bf 6264
397c657a
OE		 6265 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_RX_BYTES) |
6266 BIT_ULL(NL80211_STA_INFO_RX_BYTES64)) &&
9360ffd1 6267 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
42745e03 6268 (u32)sinfo->rx_bytes))
9360ffd1 6269 goto nla_put_failure;
319090bf 6270
397c657a
OE		 6271 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_TX_BYTES) |
6272 BIT_ULL(NL80211_STA_INFO_TX_BYTES64)) &&
9360ffd1 6273 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
42745e03
VK		 6274 (u32)sinfo->tx_bytes))
6275 goto nla_put_failure;
319090bf 6276
d686b920
JB		 6277 PUT_SINFO_U64(RX_BYTES64, rx_bytes);
6278 PUT_SINFO_U64(TX_BYTES64, tx_bytes);
319090bf
JB		 6279 PUT_SINFO(LLID, llid, u16);
6280 PUT_SINFO(PLID, plid, u16);
6281 PUT_SINFO(PLINK_STATE, plink_state, u8);
d686b920 6282 PUT_SINFO_U64(RX_DURATION, rx_duration);
36647055
THJ		 6283 PUT_SINFO_U64(TX_DURATION, tx_duration);
6284
6285 if (wiphy_ext_feature_isset(&rdev->wiphy,
6286 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6287 PUT_SINFO(AIRTIME_WEIGHT, airtime_weight, u16);
319090bf 6288
66266b3a
JL		 6289 switch (rdev->wiphy.signal_type) {
6290 case CFG80211_SIGNAL_TYPE_MBM:
319090bf
JB		 6291 PUT_SINFO(SIGNAL, signal, u8);
6292 PUT_SINFO(SIGNAL_AVG, signal_avg, u8);
66266b3a
JL		 6293 break;
6294 default:
6295 break;
6296 }
397c657a 6297 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL)) {
119363c7
FF		 6298 if (!nl80211_put_signal(msg, sinfo->chains,
6299 sinfo->chain_signal,
6300 NL80211_STA_INFO_CHAIN_SIGNAL))
6301 goto nla_put_failure;
6302 }
397c657a 6303 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)) {
119363c7
FF		 6304 if (!nl80211_put_signal(msg, sinfo->chains,
6305 sinfo->chain_signal_avg,
6306 NL80211_STA_INFO_CHAIN_SIGNAL_AVG))
6307 goto nla_put_failure;
6308 }
397c657a 6309 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_TX_BITRATE)) {
c8dcfd8a
FF		 6310 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
6311 NL80211_STA_INFO_TX_BITRATE))
6312 goto nla_put_failure;
6313 }
397c657a 6314 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_RX_BITRATE)) {
c8dcfd8a
FF		 6315 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
6316 NL80211_STA_INFO_RX_BITRATE))
420e7fab 6317 goto nla_put_failure;
420e7fab 6318 }
319090bf
JB		 6319
6320 PUT_SINFO(RX_PACKETS, rx_packets, u32);
6321 PUT_SINFO(TX_PACKETS, tx_packets, u32);
6322 PUT_SINFO(TX_RETRIES, tx_retries, u32);
6323 PUT_SINFO(TX_FAILED, tx_failed, u32);
6324 PUT_SINFO(EXPECTED_THROUGHPUT, expected_throughput, u32);
ab60633c 6325 PUT_SINFO(AIRTIME_LINK_METRIC, airtime_link_metric, u32);
319090bf
JB		 6326 PUT_SINFO(BEACON_LOSS, beacon_loss_count, u32);
6327 PUT_SINFO(LOCAL_PM, local_pm, u32);
6328 PUT_SINFO(PEER_PM, peer_pm, u32);
6329 PUT_SINFO(NONPEER_PM, nonpeer_pm, u32);
dbdaee7a 6330 PUT_SINFO(CONNECTED_TO_GATE, connected_to_gate, u8);
1303a51c 6331 PUT_SINFO(CONNECTED_TO_AS, connected_to_as, u8);
319090bf 6332
397c657a 6333 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_BSS_PARAM)) {
ae0be8de
MK		 6334 bss_param = nla_nest_start_noflag(msg,
6335 NL80211_STA_INFO_BSS_PARAM);
f4263c98
PS		 6336 if (!bss_param)
6337 goto nla_put_failure;
6338
9360ffd1
DM		 6339 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
6340 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
6341 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
6342 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
6343 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
6344 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
6345 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
6346 sinfo->bss_param.dtim_period) ||
6347 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
6348 sinfo->bss_param.beacon_interval))
6349 goto nla_put_failure;
f4263c98
PS		 6350
6351 nla_nest_end(msg, bss_param);
6352 }
397c657a 6353 if ((sinfo->filled & BIT_ULL(NL80211_STA_INFO_STA_FLAGS)) &&
9360ffd1
DM		 6354 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
6355 sizeof(struct nl80211_sta_flag_update),
6356 &sinfo->sta_flags))
6357 goto nla_put_failure;
319090bf 6358
d686b920
JB		 6359 PUT_SINFO_U64(T_OFFSET, t_offset);
6360 PUT_SINFO_U64(RX_DROP_MISC, rx_dropped_misc);
6361 PUT_SINFO_U64(BEACON_RX, rx_beacon);
a76b1942 6362 PUT_SINFO(BEACON_SIGNAL_AVG, rx_beacon_signal_avg, u8);
0d4e14a3
AB		 6363 PUT_SINFO(RX_MPDUS, rx_mpdu_count, u32);
6364 PUT_SINFO(FCS_ERROR_COUNT, fcs_err_count, u32);
81d5439d 6365 if (wiphy_ext_feature_isset(&rdev->wiphy,
9c06602b
BP		 6366 NL80211_EXT_FEATURE_ACK_SIGNAL_SUPPORT)) {
6367 PUT_SINFO(ACK_SIGNAL, ack_signal, u8);
6368 PUT_SINFO(ACK_SIGNAL_AVG, avg_ack_signal, s8);
6369 }
319090bf
JB		 6370
6371#undef PUT_SINFO
d686b920 6372#undef PUT_SINFO_U64
6de39808 6373
8689c051 6374 if (sinfo->pertid) {
6de39808
JB		 6375 struct nlattr *tidsattr;
6376 int tid;
6377
ae0be8de
MK		 6378 tidsattr = nla_nest_start_noflag(msg,
6379 NL80211_STA_INFO_TID_STATS);
6de39808
JB		 6380 if (!tidsattr)
6381 goto nla_put_failure;
6382
6383 for (tid = 0; tid < IEEE80211_NUM_TIDS + 1; tid++) {
6384 struct cfg80211_tid_stats *tidstats;
6385 struct nlattr *tidattr;
6386
6387 tidstats = &sinfo->pertid[tid];
6388
6389 if (!tidstats->filled)
6390 continue;
6391
ae0be8de 6392 tidattr = nla_nest_start_noflag(msg, tid + 1);
6de39808
JB		 6393 if (!tidattr)
6394 goto nla_put_failure;
6395
d686b920 6396#define PUT_TIDVAL_U64(attr, memb) do { \
6de39808 6397 if (tidstats->filled & BIT(NL80211_TID_STATS_ ## attr) && \
d686b920
JB		 6398 nla_put_u64_64bit(msg, NL80211_TID_STATS_ ## attr, \
6399 tidstats->memb, NL80211_TID_STATS_PAD)) \
6de39808
JB		 6400 goto nla_put_failure; \
6401 } while (0)
6402
d686b920
JB		 6403 PUT_TIDVAL_U64(RX_MSDU, rx_msdu);
6404 PUT_TIDVAL_U64(TX_MSDU, tx_msdu);
6405 PUT_TIDVAL_U64(TX_MSDU_RETRIES, tx_msdu_retries);
6406 PUT_TIDVAL_U64(TX_MSDU_FAILED, tx_msdu_failed);
6de39808 6407
d686b920 6408#undef PUT_TIDVAL_U64
52539ca8
THJ		 6409 if ((tidstats->filled &
6410 BIT(NL80211_TID_STATS_TXQ_STATS)) &&
6411 !nl80211_put_txq_stats(msg, &tidstats->txq_stats,
6412 NL80211_TID_STATS_TXQ_STATS))
6413 goto nla_put_failure;
6414
6de39808
JB		 6415 nla_nest_end(msg, tidattr);
6416 }
6417
6418 nla_nest_end(msg, tidsattr);
6419 }
6420
2ec600d6 6421 nla_nest_end(msg, sinfoattr);
fd5b74dc 6422
319090bf 6423 if (sinfo->assoc_req_ies_len &&
9360ffd1
DM		 6424 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
6425 sinfo->assoc_req_ies))
6426 goto nla_put_failure;
50d3dfb7 6427
7ea3e110 6428 cfg80211_sinfo_release_content(sinfo);
053c095a
JB		 6429 genlmsg_end(msg, hdr);
6430 return 0;
fd5b74dc
JB		 6431
6432 nla_put_failure:
7ea3e110 6433 cfg80211_sinfo_release_content(sinfo);
bc3ed28c
TG		 6434 genlmsg_cancel(msg, hdr);
6435 return -EMSGSIZE;
fd5b74dc
JB		 6436}
6437
2ec600d6 6438static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 6439 struct netlink_callback *cb)
2ec600d6 6440{
73887fd9 6441 struct station_info sinfo;
1b8ec87a 6442 struct cfg80211_registered_device *rdev;
97990a06 6443 struct wireless_dev *wdev;
2ec600d6 6444 u8 mac_addr[ETH_ALEN];
97990a06 6445 int sta_idx = cb->args[2];
2ec600d6 6446 int err;
2ec600d6 6447
ce6b6974 6448 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
67748893 6449 if (err)
a05829a7
JB		 6450 return err;
6451 /* nl80211_prepare_wdev_dump acquired it in the successful case */
6452 __acquire(&rdev->wiphy.mtx);
bba95fef 6453
97990a06
JB		 6454 if (!wdev->netdev) {
6455 err = -EINVAL;
6456 goto out_err;
6457 }
6458
1b8ec87a 6459 if (!rdev->ops->dump_station) {
eec60b03 6460 err = -EOPNOTSUPP;
bba95fef
JB		 6461 goto out_err;
6462 }
6463
bba95fef 6464 while (1) {
73887fd9 6465 memset(&sinfo, 0, sizeof(sinfo));
1b8ec87a 6466 err = rdev_dump_station(rdev, wdev->netdev, sta_idx,
73887fd9 6467 mac_addr, &sinfo);
bba95fef
JB		 6468 if (err == -ENOENT)
6469 break;
6470 if (err)
3b85875a 6471 goto out_err;
bba95fef 6472
cf5ead82 6473 if (nl80211_send_station(skb, NL80211_CMD_NEW_STATION,
15e47304 6474 NETLINK_CB(cb->skb).portid,
bba95fef 6475 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1b8ec87a 6476 rdev, wdev->netdev, mac_addr,
73887fd9 6477 &sinfo) < 0)
bba95fef
JB		 6478 goto out;
6479
6480 sta_idx++;
6481 }
6482
bba95fef 6483 out:
97990a06 6484 cb->args[2] = sta_idx;
bba95fef 6485 err = skb->len;
bba95fef 6486 out_err:
a05829a7 6487 wiphy_unlock(&rdev->wiphy);
bba95fef
JB		 6488
6489 return err;
2ec600d6 6490}
fd5b74dc 6491
5727ef1b
JB		 6492static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
6493{
4c476991
JB		 6494 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6495 struct net_device *dev = info->user_ptr[1];
73887fd9 6496 struct station_info sinfo;
fd5b74dc
JB		 6497 struct sk_buff *msg;
6498 u8 *mac_addr = NULL;
4c476991 6499 int err;
fd5b74dc 6500
73887fd9 6501 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc 6502
73887fd9
JB		 6503 if (!info->attrs[NL80211_ATTR_MAC])
6504 return -EINVAL;
fd5b74dc
JB		 6505
6506 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6507
73887fd9
JB		 6508 if (!rdev->ops->get_station)
6509 return -EOPNOTSUPP;
3b85875a 6510
73887fd9 6511 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 6512 if (err)
73887fd9 6513 return err;
2ec600d6 6514
fd2120ca 6515 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7ea3e110 6516 if (!msg) {
ba8f566a 6517 cfg80211_sinfo_release_content(&sinfo);
73887fd9 6518 return -ENOMEM;
7ea3e110 6519 }
fd5b74dc 6520
cf5ead82
JB		 6521 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION,
6522 info->snd_portid, info->snd_seq, 0,
73887fd9 6523 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991 6524 nlmsg_free(msg);
73887fd9 6525 return -ENOBUFS;
4c476991 6526 }
3b85875a 6527
73887fd9 6528 return genlmsg_reply(msg, info);
5727ef1b
JB		 6529}
6530
77ee7c89
JB		 6531int cfg80211_check_station_change(struct wiphy *wiphy,
6532 struct station_parameters *params,
6533 enum cfg80211_station_type statype)
6534{
e4208427
AB		 6535 if (params->listen_interval != -1 &&
6536 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89 6537 return -EINVAL;
e4208427 6538
17b94247
AB		 6539 if (params->support_p2p_ps != -1 &&
6540 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
6541 return -EINVAL;
6542
c72e1140 6543 if (params->aid &&
e4208427
AB		 6544 !(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) &&
6545 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89
JB		 6546 return -EINVAL;
6547
6548 /* When you run into this, adjust the code below for the new flag */
6549 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
6550
6551 switch (statype) {
eef941e6
TP		 6552 case CFG80211_STA_MESH_PEER_KERNEL:
6553 case CFG80211_STA_MESH_PEER_USER:
77ee7c89
JB		 6554 /*
6555 * No ignoring the TDLS flag here -- the userspace mesh
6556 * code doesn't have the bug of including TDLS in the
6557 * mask everywhere.
6558 */
6559 if (params->sta_flags_mask &
6560 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6561 BIT(NL80211_STA_FLAG_MFP) |
6562 BIT(NL80211_STA_FLAG_AUTHORIZED)))
6563 return -EINVAL;
6564 break;
6565 case CFG80211_STA_TDLS_PEER_SETUP:
6566 case CFG80211_STA_TDLS_PEER_ACTIVE:
6567 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6568 return -EINVAL;
6569 /* ignore since it can't change */
6570 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6571 break;
6572 default:
6573 /* disallow mesh-specific things */
6574 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
6575 return -EINVAL;
6576 if (params->local_pm)
6577 return -EINVAL;
6578 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6579 return -EINVAL;
6580 }
6581
6582 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6583 statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
6584 /* TDLS can't be set, ... */
6585 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
6586 return -EINVAL;
6587 /*
6588 * ... but don't bother the driver with it. This works around
6589 * a hostapd/wpa_supplicant issue -- it always includes the
6590 * TLDS_PEER flag in the mask even for AP mode.
6591 */
6592 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6593 }
6594
47edb11b
AB		 6595 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6596 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6597 /* reject other things that can't change */
6598 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
6599 return -EINVAL;
6600 if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
6601 return -EINVAL;
b95eb7f0 6602 if (params->link_sta_params.supported_rates)
77ee7c89 6603 return -EINVAL;
b95eb7f0
ST		 6604 if (params->ext_capab || params->link_sta_params.ht_capa ||
6605 params->link_sta_params.vht_capa ||
6606 params->link_sta_params.he_capa ||
6607 params->link_sta_params.eht_capa)
77ee7c89
JB		 6608 return -EINVAL;
6609 }
6610
47edb11b
AB		 6611 if (statype != CFG80211_STA_AP_CLIENT &&
6612 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6613 if (params->vlan)
6614 return -EINVAL;
6615 }
6616
6617 switch (statype) {
6618 case CFG80211_STA_AP_MLME_CLIENT:
6619 /* Use this only for authorizing/unauthorizing a station */
6620 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
6621 return -EOPNOTSUPP;
6622 break;
6623 case CFG80211_STA_AP_CLIENT:
47edb11b 6624 case CFG80211_STA_AP_CLIENT_UNASSOC:
77ee7c89
JB		 6625 /* accept only the listed bits */
6626 if (params->sta_flags_mask &
6627 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6628 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6629 BIT(NL80211_STA_FLAG_ASSOCIATED) |
6630 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
6631 BIT(NL80211_STA_FLAG_WME) |
6632 BIT(NL80211_STA_FLAG_MFP)))
6633 return -EINVAL;
6634
6635 /* but authenticated/associated only if driver handles it */
6636 if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
6637 params->sta_flags_mask &
6638 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6639 BIT(NL80211_STA_FLAG_ASSOCIATED)))
6640 return -EINVAL;
6641 break;
6642 case CFG80211_STA_IBSS:
6643 case CFG80211_STA_AP_STA:
6644 /* reject any changes other than AUTHORIZED */
6645 if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
6646 return -EINVAL;
6647 break;
6648 case CFG80211_STA_TDLS_PEER_SETUP:
6649 /* reject any changes other than AUTHORIZED or WME */
6650 if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6651 BIT(NL80211_STA_FLAG_WME)))
6652 return -EINVAL;
6653 /* force (at least) rates when authorizing */
6654 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
b95eb7f0 6655 !params->link_sta_params.supported_rates)
77ee7c89
JB		 6656 return -EINVAL;
6657 break;
6658 case CFG80211_STA_TDLS_PEER_ACTIVE:
6659 /* reject any changes */
6660 return -EINVAL;
eef941e6 6661 case CFG80211_STA_MESH_PEER_KERNEL:
77ee7c89
JB		 6662 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6663 return -EINVAL;
6664 break;
eef941e6 6665 case CFG80211_STA_MESH_PEER_USER:
42925040
CYY		 6666 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION &&
6667 params->plink_action != NL80211_PLINK_ACTION_BLOCK)
77ee7c89
JB		 6668 return -EINVAL;
6669 break;
6670 }
6671
06f7c88c
BL		 6672 /*
6673 * Older kernel versions ignored this attribute entirely, so don't
6674 * reject attempts to update it but mark it as unused instead so the
6675 * driver won't look at the data.
6676 */
6677 if (statype != CFG80211_STA_AP_CLIENT_UNASSOC &&
6678 statype != CFG80211_STA_TDLS_PEER_SETUP)
b95eb7f0 6679 params->link_sta_params.opmode_notif_used = false;
06f7c88c 6680
77ee7c89
JB		 6681 return 0;
6682}
6683EXPORT_SYMBOL(cfg80211_check_station_change);
6684
5727ef1b 6685/*
c258d2de 6686 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 6687 */
80b99899
JB		 6688static struct net_device *get_vlan(struct genl_info *info,
6689 struct cfg80211_registered_device *rdev)
5727ef1b 6690{
463d0183 6691 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 6692 struct net_device *v;
6693 int ret;
6694
6695 if (!vlanattr)
6696 return NULL;
6697
6698 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
6699 if (!v)
6700 return ERR_PTR(-ENODEV);
6701
6702 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
6703 ret = -EINVAL;
6704 goto error;
5727ef1b 6705 }
80b99899 6706
77ee7c89
JB		 6707 if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
6708 v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
6709 v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
6710 ret = -EINVAL;
6711 goto error;
6712 }
6713
80b99899
JB		 6714 if (!netif_running(v)) {
6715 ret = -ENETDOWN;
6716 goto error;
6717 }
6718
6719 return v;
6720 error:
6721 dev_put(v);
6722 return ERR_PTR(ret);
5727ef1b
JB		 6723}
6724
94e860f1
JB		 6725static const struct nla_policy
6726nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] = {
df881293
JM		 6727 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
6728 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
6729};
6730
ff276691
JB		 6731static int nl80211_parse_sta_wme(struct genl_info *info,
6732 struct station_parameters *params)
df881293 6733{
df881293
JM		 6734 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
6735 struct nlattr *nla;
6736 int err;
6737
df881293
JM		 6738 /* parse WME attributes if present */
6739 if (!info->attrs[NL80211_ATTR_STA_WME])
6740 return 0;
6741
6742 nla = info->attrs[NL80211_ATTR_STA_WME];
8cb08174
JB		 6743 err = nla_parse_nested_deprecated(tb, NL80211_STA_WME_MAX, nla,
6744 nl80211_sta_wme_policy,
6745 info->extack);
df881293
JM		 6746 if (err)
6747 return err;
6748
6749 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
6750 params->uapsd_queues = nla_get_u8(
6751 tb[NL80211_STA_WME_UAPSD_QUEUES]);
6752 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
6753 return -EINVAL;
6754
6755 if (tb[NL80211_STA_WME_MAX_SP])
6756 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
6757
6758 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
6759 return -EINVAL;
6760
6761 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
6762
6763 return 0;
6764}
6765
c01fc9ad
SD		 6766static int nl80211_parse_sta_channel_info(struct genl_info *info,
6767 struct station_parameters *params)
6768{
6769 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]) {
6770 params->supported_channels =
6771 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6772 params->supported_channels_len =
6773 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6774 /*
6775 * Need to include at least one (first channel, number of
cb9abd48
JB		 6776 * channels) tuple for each subband (checked in policy),
6777 * and must have proper tuples for the rest of the data as well.
c01fc9ad 6778 */
c01fc9ad
SD		 6779 if (params->supported_channels_len % 2)
6780 return -EINVAL;
6781 }
6782
6783 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]) {
6784 params->supported_oper_classes =
6785 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
6786 params->supported_oper_classes_len =
6787 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
c01fc9ad
SD		 6788 }
6789 return 0;
6790}
6791
ff276691
JB		 6792static int nl80211_set_station_tdls(struct genl_info *info,
6793 struct station_parameters *params)
6794{
c01fc9ad 6795 int err;
ff276691 6796 /* Dummy STA entry gets updated once the peer capabilities are known */
5e4b6f56
JM		 6797 if (info->attrs[NL80211_ATTR_PEER_AID])
6798 params->aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
ff276691 6799 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
b95eb7f0 6800 params->link_sta_params.ht_capa =
ff276691
JB		 6801 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
6802 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
b95eb7f0 6803 params->link_sta_params.vht_capa =
ff276691 6804 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
c4cbaf79 6805 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
b95eb7f0 6806 params->link_sta_params.he_capa =
c4cbaf79 6807 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
b95eb7f0 6808 params->link_sta_params.he_capa_len =
c4cbaf79 6809 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
ea05fd35
IP		 6810
6811 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
b95eb7f0 6812 params->link_sta_params.eht_capa =
ea05fd35 6813 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
b95eb7f0 6814 params->link_sta_params.eht_capa_len =
ea05fd35
IP		 6815 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
6816
b95eb7f0
ST		 6817 if (!ieee80211_eht_capa_size_ok((const u8 *)params->link_sta_params.he_capa,
6818 (const u8 *)params->link_sta_params.eht_capa,
6819 params->link_sta_params.eht_capa_len))
ea05fd35
IP		 6820 return -EINVAL;
6821 }
c4cbaf79 6822 }
ff276691 6823
c01fc9ad
SD		 6824 err = nl80211_parse_sta_channel_info(info, params);
6825 if (err)
6826 return err;
6827
ff276691
JB		 6828 return nl80211_parse_sta_wme(info, params);
6829}
6830
e96d1cd2 6831static int nl80211_parse_sta_txpower_setting(struct genl_info *info,
577e5b8c
ST		 6832 struct sta_txpwr *txpwr,
6833 bool *txpwr_set)
e96d1cd2
ARN		 6834{
6835 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6836 int idx;
6837
6838 if (info->attrs[NL80211_ATTR_STA_TX_POWER_SETTING]) {
6839 if (!rdev->ops->set_tx_power ||
6840 !wiphy_ext_feature_isset(&rdev->wiphy,
6841 NL80211_EXT_FEATURE_STA_TX_PWR))
6842 return -EOPNOTSUPP;
6843
6844 idx = NL80211_ATTR_STA_TX_POWER_SETTING;
577e5b8c 6845 txpwr->type = nla_get_u8(info->attrs[idx]);
e96d1cd2 6846
577e5b8c 6847 if (txpwr->type == NL80211_TX_POWER_LIMITED) {
e96d1cd2
ARN		 6848 idx = NL80211_ATTR_STA_TX_POWER;
6849
6850 if (info->attrs[idx])
577e5b8c 6851 txpwr->power = nla_get_s16(info->attrs[idx]);
e96d1cd2
ARN		 6852 else
6853 return -EINVAL;
6854 }
577e5b8c
ST		 6855
6856 *txpwr_set = true;
6857 } else {
6858 *txpwr_set = false;
e96d1cd2
ARN		 6859 }
6860
6861 return 0;
6862}
6863
5727ef1b
JB		 6864static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
6865{
4c476991 6866 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 6867 struct net_device *dev = info->user_ptr[1];
5727ef1b 6868 struct station_parameters params;
77ee7c89
JB		 6869 u8 *mac_addr;
6870 int err;
5727ef1b
JB		 6871
6872 memset(&params, 0, sizeof(params));
6873
77ee7c89
JB		 6874 if (!rdev->ops->change_station)
6875 return -EOPNOTSUPP;
6876
e4208427
AB		 6877 /*
6878 * AID and listen_interval properties can be set only for unassociated
6879 * station. Include these parameters here and will check them in
6880 * cfg80211_check_station_change().
6881 */
a9bc31e4
AB		 6882 if (info->attrs[NL80211_ATTR_STA_AID])
6883 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
e4208427 6884
14f34e36
GG		 6885 if (info->attrs[NL80211_ATTR_VLAN_ID])
6886 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6887
e4208427
AB		 6888 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6889 params.listen_interval =
6890 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
6891 else
6892 params.listen_interval = -1;
5727ef1b 6893
ab0d76f6
JB		 6894 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS])
6895 params.support_p2p_ps =
6896 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
6897 else
17b94247 6898 params.support_p2p_ps = -1;
17b94247 6899
5727ef1b
JB		 6900 if (!info->attrs[NL80211_ATTR_MAC])
6901 return -EINVAL;
6902
d2bc5249
AO		 6903 params.link_sta_params.link_id =
6904 nl80211_link_id_or_invalid(info->attrs);
6905
6906 if (info->attrs[NL80211_ATTR_MLD_ADDR]) {
6907 /* If MLD_ADDR attribute is set then this is an MLD station
6908 * and the MLD_ADDR attribute holds the MLD address and the
6909 * MAC attribute holds for the LINK address.
6910 * In that case, the link_id is also expected to be valid.
6911 */
6912 if (params.link_sta_params.link_id < 0)
6913 return -EINVAL;
6914
6915 mac_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
6916 params.link_sta_params.mld_mac = mac_addr;
6917 params.link_sta_params.link_mac =
6918 nla_data(info->attrs[NL80211_ATTR_MAC]);
6919 if (!is_valid_ether_addr(params.link_sta_params.link_mac))
6920 return -EINVAL;
6921 } else {
6922 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6923 }
6924
5727ef1b
JB		 6925
6926 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
b95eb7f0 6927 params.link_sta_params.supported_rates =
5727ef1b 6928 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
b95eb7f0 6929 params.link_sta_params.supported_rates_len =
5727ef1b
JB		 6930 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6931 }
6932
9d62a986
JM		 6933 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
6934 params.capability =
6935 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
6936 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
6937 }
6938
6939 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
6940 params.ext_capab =
6941 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6942 params.ext_capab_len =
6943 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6944 }
6945
bdd3ae3d 6946 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 6947 return -EINVAL;
6948
ab0d76f6 6949 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2ec600d6 6950 params.plink_action =
f8bacc21 6951 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2ec600d6 6952
f8bacc21 6953 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
9c3990aa 6954 params.plink_state =
f8bacc21 6955 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
ab0d76f6 6956 if (info->attrs[NL80211_ATTR_MESH_PEER_AID])
7d27a0ba
MH		 6957 params.peer_aid = nla_get_u16(
6958 info->attrs[NL80211_ATTR_MESH_PEER_AID]);
f8bacc21
JB		 6959 params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
6960 }
9c3990aa 6961
ab0d76f6
JB		 6962 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE])
6963 params.local_pm = nla_get_u32(
3b1c5a53
MP		 6964 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
6965
06f7c88c 6966 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
b95eb7f0
ST		 6967 params.link_sta_params.opmode_notif_used = true;
6968 params.link_sta_params.opmode_notif =
06f7c88c
BL		 6969 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6970 }
6971
43e64bf3 6972 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
b95eb7f0 6973 params.link_sta_params.he_6ghz_capa =
fce2ff72 6974 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
43e64bf3 6975
36647055
THJ		 6976 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6977 params.airtime_weight =
6978 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6979
6980 if (params.airtime_weight &&
6981 !wiphy_ext_feature_isset(&rdev->wiphy,
6982 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6983 return -EOPNOTSUPP;
6984
b95eb7f0
ST		 6985 err = nl80211_parse_sta_txpower_setting(info,
6986 &params.link_sta_params.txpwr,
6987 &params.link_sta_params.txpwr_set);
e96d1cd2
ARN		 6988 if (err)
6989 return err;
6990
77ee7c89
JB		 6991 /* Include parameters for TDLS peer (will check later) */
6992 err = nl80211_set_station_tdls(info, &params);
6993 if (err)
6994 return err;
6995
6996 params.vlan = get_vlan(info, rdev);
6997 if (IS_ERR(params.vlan))
6998 return PTR_ERR(params.vlan);
6999
a97f4424
JB		 7000 switch (dev->ieee80211_ptr->iftype) {
7001 case NL80211_IFTYPE_AP:
7002 case NL80211_IFTYPE_AP_VLAN:
074ac8df 7003 case NL80211_IFTYPE_P2P_GO:
074ac8df 7004 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 7005 case NL80211_IFTYPE_STATION:
267335d6 7006 case NL80211_IFTYPE_ADHOC:
a97f4424 7007 case NL80211_IFTYPE_MESH_POINT:
a97f4424
JB		 7008 break;
7009 default:
77ee7c89
JB		 7010 err = -EOPNOTSUPP;
7011 goto out_put_vlan;
034d655e
JB		 7012 }
7013
77ee7c89 7014 /* driver will call cfg80211_check_station_change() */
3d1cc7cd 7015 wdev_lock(dev->ieee80211_ptr);
e35e4d28 7016 err = rdev_change_station(rdev, dev, mac_addr, &params);
3d1cc7cd 7017 wdev_unlock(dev->ieee80211_ptr);
5727ef1b 7018
77ee7c89 7019 out_put_vlan:
1160dfa1 7020 dev_put(params.vlan);
3b85875a 7021
5727ef1b
JB		 7022 return err;
7023}
7024
7025static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
7026{
4c476991 7027 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 7028 int err;
4c476991 7029 struct net_device *dev = info->user_ptr[1];
efbfe516 7030 struct wireless_dev *wdev = dev->ieee80211_ptr;
5727ef1b
JB		 7031 struct station_parameters params;
7032 u8 *mac_addr = NULL;
bda95eb1
JB		 7033 u32 auth_assoc = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
7034 BIT(NL80211_STA_FLAG_ASSOCIATED);
5727ef1b
JB		 7035
7036 memset(&params, 0, sizeof(params));
7037
984c311b
JB		 7038 if (!rdev->ops->add_station)
7039 return -EOPNOTSUPP;
7040
5727ef1b
JB		 7041 if (!info->attrs[NL80211_ATTR_MAC])
7042 return -EINVAL;
7043
5727ef1b
JB		 7044 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
7045 return -EINVAL;
7046
7047 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
7048 return -EINVAL;
7049
5e4b6f56
JM		 7050 if (!info->attrs[NL80211_ATTR_STA_AID] &&
7051 !info->attrs[NL80211_ATTR_PEER_AID])
0e956c13
TLSC		 7052 return -EINVAL;
7053
b95eb7f0
ST		 7054 params.link_sta_params.link_id =
7055 nl80211_link_id_or_invalid(info->attrs);
7056
c0d67012 7057 if (info->attrs[NL80211_ATTR_MLD_ADDR]) {
c0d67012
ST		 7058 mac_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
7059 params.link_sta_params.mld_mac = mac_addr;
7060 params.link_sta_params.link_mac =
7061 nla_data(info->attrs[NL80211_ATTR_MAC]);
7062 if (!is_valid_ether_addr(params.link_sta_params.link_mac))
7063 return -EINVAL;
7064 } else {
7065 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
7066 }
7067
b95eb7f0 7068 params.link_sta_params.supported_rates =
5727ef1b 7069 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
b95eb7f0 7070 params.link_sta_params.supported_rates_len =
5727ef1b
JB		 7071 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
7072 params.listen_interval =
7073 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 7074
14f34e36
GG		 7075 if (info->attrs[NL80211_ATTR_VLAN_ID])
7076 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
7077
17b94247 7078 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]) {
ab0d76f6
JB		 7079 params.support_p2p_ps =
7080 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
17b94247
AB		 7081 } else {
7082 /*
7083 * if not specified, assume it's supported for P2P GO interface,
7084 * and is NOT supported for AP interface
7085 */
7086 params.support_p2p_ps =
7087 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO;
7088 }
7089
3d124ea2 7090 if (info->attrs[NL80211_ATTR_PEER_AID])
5e4b6f56 7091 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
3d124ea2
JM		 7092 else
7093 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
51b50fbe 7094
9d62a986
JM		 7095 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
7096 params.capability =
7097 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
7098 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
7099 }
7100
7101 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
7102 params.ext_capab =
7103 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
7104 params.ext_capab_len =
7105 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
7106 }
7107
36aedc90 7108 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
b95eb7f0 7109 params.link_sta_params.ht_capa =
36aedc90 7110 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 7111
f461be3e 7112 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
b95eb7f0 7113 params.link_sta_params.vht_capa =
f461be3e
MP		 7114 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
7115
c4cbaf79 7116 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
b95eb7f0 7117 params.link_sta_params.he_capa =
c4cbaf79 7118 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
b95eb7f0 7119 params.link_sta_params.he_capa_len =
c4cbaf79 7120 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
ea05fd35
IP		 7121
7122 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
b95eb7f0 7123 params.link_sta_params.eht_capa =
ea05fd35 7124 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
b95eb7f0 7125 params.link_sta_params.eht_capa_len =
ea05fd35
IP		 7126 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
7127
b95eb7f0
ST		 7128 if (!ieee80211_eht_capa_size_ok((const u8 *)params.link_sta_params.he_capa,
7129 (const u8 *)params.link_sta_params.eht_capa,
7130 params.link_sta_params.eht_capa_len))
ea05fd35
IP		 7131 return -EINVAL;
7132 }
c4cbaf79
LC		 7133 }
7134
43e64bf3 7135 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
b95eb7f0 7136 params.link_sta_params.he_6ghz_capa =
43e64bf3
RM		 7137 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
7138
60f4a7b1 7139 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
b95eb7f0
ST		 7140 params.link_sta_params.opmode_notif_used = true;
7141 params.link_sta_params.opmode_notif =
60f4a7b1
MK		 7142 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
7143 }
7144
ab0d76f6 7145 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
96b78dff 7146 params.plink_action =
f8bacc21 7147 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
96b78dff 7148
36647055
THJ		 7149 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
7150 params.airtime_weight =
7151 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
7152
7153 if (params.airtime_weight &&
7154 !wiphy_ext_feature_isset(&rdev->wiphy,
7155 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
7156 return -EOPNOTSUPP;
7157
b95eb7f0
ST		 7158 err = nl80211_parse_sta_txpower_setting(info,
7159 &params.link_sta_params.txpwr,
7160 &params.link_sta_params.txpwr_set);
e96d1cd2
ARN		 7161 if (err)
7162 return err;
7163
c01fc9ad
SD		 7164 err = nl80211_parse_sta_channel_info(info, &params);
7165 if (err)
7166 return err;
7167
ff276691
JB		 7168 err = nl80211_parse_sta_wme(info, &params);
7169 if (err)
7170 return err;
bdd90d5e 7171
bdd3ae3d 7172 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 7173 return -EINVAL;
7174
496fcc29
JB		 7175 /* HT/VHT requires QoS, but if we don't have that just ignore HT/VHT
7176 * as userspace might just pass through the capabilities from the IEs
7177 * directly, rather than enforcing this restriction and returning an
7178 * error in this case.
7179 */
7180 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME))) {
b95eb7f0
ST		 7181 params.link_sta_params.ht_capa = NULL;
7182 params.link_sta_params.vht_capa = NULL;
c4cbaf79 7183
ea05fd35 7184 /* HE and EHT require WME */
b95eb7f0
ST		 7185 if (params.link_sta_params.he_capa_len ||
7186 params.link_sta_params.he_6ghz_capa ||
7187 params.link_sta_params.eht_capa_len)
c4cbaf79 7188 return -EINVAL;
496fcc29
JB		 7189 }
7190
43e64bf3 7191 /* Ensure that HT/VHT capabilities are not set for 6 GHz HE STA */
b95eb7f0
ST		 7192 if (params.link_sta_params.he_6ghz_capa &&
7193 (params.link_sta_params.ht_capa || params.link_sta_params.vht_capa))
43e64bf3
RM		 7194 return -EINVAL;
7195
77ee7c89
JB		 7196 /* When you run into this, adjust the code below for the new flag */
7197 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
7198
bdd90d5e
JB		 7199 switch (dev->ieee80211_ptr->iftype) {
7200 case NL80211_IFTYPE_AP:
7201 case NL80211_IFTYPE_AP_VLAN:
7202 case NL80211_IFTYPE_P2P_GO:
984c311b
JB		 7203 /* ignore WME attributes if iface/sta is not capable */
7204 if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
7205 !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
7206 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
c75786c9 7207
bdd90d5e 7208 /* TDLS peers cannot be added */
3d124ea2
JM		 7209 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
7210 info->attrs[NL80211_ATTR_PEER_AID])
4319e193 7211 return -EINVAL;
bdd90d5e
JB		 7212 /* but don't bother the driver with it */
7213 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 7214
d582cffb
JB		 7215 /* allow authenticated/associated only if driver handles it */
7216 if (!(rdev->wiphy.features &
7217 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
bda95eb1 7218 params.sta_flags_mask & auth_assoc)
d582cffb
JB		 7219 return -EINVAL;
7220
bda95eb1
JB		 7221 /* Older userspace, or userspace wanting to be compatible with
7222 * !NL80211_FEATURE_FULL_AP_CLIENT_STATE, will not set the auth
7223 * and assoc flags in the mask, but assumes the station will be
7224 * added as associated anyway since this was the required driver
7225 * behaviour before NL80211_FEATURE_FULL_AP_CLIENT_STATE was
7226 * introduced.
7227 * In order to not bother drivers with this quirk in the API
7228 * set the flags in both the mask and set for new stations in
7229 * this case.
7230 */
7231 if (!(params.sta_flags_mask & auth_assoc)) {
7232 params.sta_flags_mask |= auth_assoc;
7233 params.sta_flags_set |= auth_assoc;
7234 }
7235
bdd90d5e
JB		 7236 /* must be last in here for error handling */
7237 params.vlan = get_vlan(info, rdev);
7238 if (IS_ERR(params.vlan))
7239 return PTR_ERR(params.vlan);
7240 break;
7241 case NL80211_IFTYPE_MESH_POINT:
984c311b
JB		 7242 /* ignore uAPSD data */
7243 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
7244
d582cffb
JB		 7245 /* associated is disallowed */
7246 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
7247 return -EINVAL;
bdd90d5e 7248 /* TDLS peers cannot be added */
3d124ea2
JM		 7249 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
7250 info->attrs[NL80211_ATTR_PEER_AID])
bdd90d5e
JB		 7251 return -EINVAL;
7252 break;
7253 case NL80211_IFTYPE_STATION:
93d08f0b 7254 case NL80211_IFTYPE_P2P_CLIENT:
984c311b
JB		 7255 /* ignore uAPSD data */
7256 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
7257
77ee7c89
JB		 7258 /* these are disallowed */
7259 if (params.sta_flags_mask &
7260 (BIT(NL80211_STA_FLAG_ASSOCIATED) |
7261 BIT(NL80211_STA_FLAG_AUTHENTICATED)))
d582cffb 7262 return -EINVAL;
bdd90d5e
JB		 7263 /* Only TDLS peers can be added */
7264 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
7265 return -EINVAL;
7266 /* Can only add if TDLS ... */
7267 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
7268 return -EOPNOTSUPP;
7269 /* ... with external setup is supported */
7270 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
7271 return -EOPNOTSUPP;
77ee7c89
JB		 7272 /*
7273 * Older wpa_supplicant versions always mark the TDLS peer
7274 * as authorized, but it shouldn't yet be.
7275 */
7276 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
bdd90d5e
JB		 7277 break;
7278 default:
7279 return -EOPNOTSUPP;
c75786c9
EP		 7280 }
7281
bdd90d5e 7282 /* be aware of params.vlan when changing code here */
5727ef1b 7283
3d1cc7cd 7284 wdev_lock(dev->ieee80211_ptr);
efbfe516
JB		 7285 if (wdev->valid_links) {
7286 if (params.link_sta_params.link_id < 0) {
7287 err = -EINVAL;
7288 goto out;
7289 }
7290 if (!(wdev->valid_links & BIT(params.link_sta_params.link_id))) {
7291 err = -ENOLINK;
7292 goto out;
7293 }
7294 } else {
7295 if (params.link_sta_params.link_id >= 0) {
7296 err = -EINVAL;
7297 goto out;
7298 }
7299 }
e35e4d28 7300 err = rdev_add_station(rdev, dev, mac_addr, &params);
efbfe516 7301out:
3d1cc7cd 7302 wdev_unlock(dev->ieee80211_ptr);
1160dfa1 7303 dev_put(params.vlan);
5727ef1b
JB		 7304 return err;
7305}
7306
7307static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
7308{
4c476991
JB		 7309 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7310 struct net_device *dev = info->user_ptr[1];
89c771e5 7311 struct station_del_parameters params;
3d1cc7cd 7312 int ret;
89c771e5
JM		 7313
7314 memset(&params, 0, sizeof(params));
5727ef1b
JB		 7315
7316 if (info->attrs[NL80211_ATTR_MAC])
89c771e5 7317 params.mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
5727ef1b 7318
306b79ea
JB		 7319 switch (dev->ieee80211_ptr->iftype) {
7320 case NL80211_IFTYPE_AP:
7321 case NL80211_IFTYPE_AP_VLAN:
7322 case NL80211_IFTYPE_MESH_POINT:
7323 case NL80211_IFTYPE_P2P_GO:
7324 /* always accept these */
7325 break;
7326 case NL80211_IFTYPE_ADHOC:
7327 /* conditionally accept */
7328 if (wiphy_ext_feature_isset(&rdev->wiphy,
7329 NL80211_EXT_FEATURE_DEL_IBSS_STA))
7330 break;
edafcf42 7331 return -EINVAL;
306b79ea 7332 default:
4c476991 7333 return -EINVAL;
306b79ea 7334 }
5727ef1b 7335
4c476991
JB		 7336 if (!rdev->ops->del_station)
7337 return -EOPNOTSUPP;
3b85875a 7338
98856866
JM		 7339 if (info->attrs[NL80211_ATTR_MGMT_SUBTYPE]) {
7340 params.subtype =
7341 nla_get_u8(info->attrs[NL80211_ATTR_MGMT_SUBTYPE]);
7342 if (params.subtype != IEEE80211_STYPE_DISASSOC >> 4 &&
7343 params.subtype != IEEE80211_STYPE_DEAUTH >> 4)
7344 return -EINVAL;
7345 } else {
7346 /* Default to Deauthentication frame */
7347 params.subtype = IEEE80211_STYPE_DEAUTH >> 4;
7348 }
7349
7350 if (info->attrs[NL80211_ATTR_REASON_CODE]) {
7351 params.reason_code =
7352 nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
7353 if (params.reason_code == 0)
7354 return -EINVAL; /* 0 is reserved */
7355 } else {
7356 /* Default to reason code 2 */
7357 params.reason_code = WLAN_REASON_PREV_AUTH_NOT_VALID;
7358 }
7359
3d1cc7cd
JB		 7360 wdev_lock(dev->ieee80211_ptr);
7361 ret = rdev_del_station(rdev, dev, &params);
7362 wdev_unlock(dev->ieee80211_ptr);
7363
7364 return ret;
5727ef1b
JB		 7365}
7366
15e47304 7367static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 7368 int flags, struct net_device *dev,
7369 u8 *dst, u8 *next_hop,
7370 struct mpath_info *pinfo)
7371{
7372 void *hdr;
7373 struct nlattr *pinfoattr;
7374
1ef4c850 7375 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_MPATH);
2ec600d6
LCC		 7376 if (!hdr)
7377 return -1;
7378
9360ffd1
DM		 7379 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7380 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
7381 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
7382 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
7383 goto nla_put_failure;
f5ea9120 7384
ae0be8de 7385 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MPATH_INFO);
2ec600d6
LCC		 7386 if (!pinfoattr)
7387 goto nla_put_failure;
9360ffd1
DM		 7388 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
7389 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
7390 pinfo->frame_qlen))
7391 goto nla_put_failure;
7392 if (((pinfo->filled & MPATH_INFO_SN) &&
7393 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
7394 ((pinfo->filled & MPATH_INFO_METRIC) &&
7395 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
7396 pinfo->metric)) ||
7397 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
7398 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
7399 pinfo->exptime)) ||
7400 ((pinfo->filled & MPATH_INFO_FLAGS) &&
7401 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
7402 pinfo->flags)) ||
7403 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
7404 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
7405 pinfo->discovery_timeout)) ||
7406 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
7407 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
cc241636
JH		 7408 pinfo->discovery_retries)) ||
7409 ((pinfo->filled & MPATH_INFO_HOP_COUNT) &&
7410 nla_put_u8(msg, NL80211_MPATH_INFO_HOP_COUNT,
540bbcb9
JH		 7411 pinfo->hop_count)) ||
7412 ((pinfo->filled & MPATH_INFO_PATH_CHANGE) &&
7413 nla_put_u32(msg, NL80211_MPATH_INFO_PATH_CHANGE,
7414 pinfo->path_change_count)))
9360ffd1 7415 goto nla_put_failure;
2ec600d6
LCC		 7416
7417 nla_nest_end(msg, pinfoattr);
7418
053c095a
JB		 7419 genlmsg_end(msg, hdr);
7420 return 0;
2ec600d6
LCC		 7421
7422 nla_put_failure:
bc3ed28c
TG		 7423 genlmsg_cancel(msg, hdr);
7424 return -EMSGSIZE;
2ec600d6
LCC		 7425}
7426
7427static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 7428 struct netlink_callback *cb)
2ec600d6 7429{
2ec600d6 7430 struct mpath_info pinfo;
1b8ec87a 7431 struct cfg80211_registered_device *rdev;
97990a06 7432 struct wireless_dev *wdev;
2ec600d6
LCC		 7433 u8 dst[ETH_ALEN];
7434 u8 next_hop[ETH_ALEN];
97990a06 7435 int path_idx = cb->args[2];
2ec600d6 7436 int err;
2ec600d6 7437
ce6b6974 7438 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
67748893 7439 if (err)
a05829a7
JB		 7440 return err;
7441 /* nl80211_prepare_wdev_dump acquired it in the successful case */
7442 __acquire(&rdev->wiphy.mtx);
bba95fef 7443
1b8ec87a 7444 if (!rdev->ops->dump_mpath) {
eec60b03 7445 err = -EOPNOTSUPP;
bba95fef
JB		 7446 goto out_err;
7447 }
7448
97990a06 7449 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
eec60b03 7450 err = -EOPNOTSUPP;
0448b5fc 7451 goto out_err;
eec60b03
JM		 7452 }
7453
bba95fef 7454 while (1) {
1b8ec87a 7455 err = rdev_dump_mpath(rdev, wdev->netdev, path_idx, dst,
97990a06 7456 next_hop, &pinfo);
bba95fef 7457 if (err == -ENOENT)
2ec600d6 7458 break;
bba95fef 7459 if (err)
3b85875a 7460 goto out_err;
2ec600d6 7461
15e47304 7462 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef 7463 cb->nlh->nlmsg_seq, NLM_F_MULTI,
97990a06 7464 wdev->netdev, dst, next_hop,
bba95fef
JB		 7465 &pinfo) < 0)
7466 goto out;
2ec600d6 7467
bba95fef 7468 path_idx++;
2ec600d6 7469 }
2ec600d6 7470
bba95fef 7471 out:
97990a06 7472 cb->args[2] = path_idx;
bba95fef 7473 err = skb->len;
bba95fef 7474 out_err:
a05829a7 7475 wiphy_unlock(&rdev->wiphy);
bba95fef 7476 return err;
2ec600d6
LCC		 7477}
7478
7479static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
7480{
4c476991 7481 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 7482 int err;
4c476991 7483 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7484 struct mpath_info pinfo;
7485 struct sk_buff *msg;
7486 u8 *dst = NULL;
7487 u8 next_hop[ETH_ALEN];
7488
7489 memset(&pinfo, 0, sizeof(pinfo));
7490
7491 if (!info->attrs[NL80211_ATTR_MAC])
7492 return -EINVAL;
7493
7494 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7495
4c476991
JB		 7496 if (!rdev->ops->get_mpath)
7497 return -EOPNOTSUPP;
2ec600d6 7498
4c476991
JB		 7499 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7500 return -EOPNOTSUPP;
eec60b03 7501
e35e4d28 7502 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 7503 if (err)
4c476991 7504 return err;
2ec600d6 7505
fd2120ca 7506 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 7507 if (!msg)
4c476991 7508 return -ENOMEM;
2ec600d6 7509
15e47304 7510 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 7511 dev, dst, next_hop, &pinfo) < 0) {
7512 nlmsg_free(msg);
7513 return -ENOBUFS;
7514 }
3b85875a 7515
4c476991 7516 return genlmsg_reply(msg, info);
2ec600d6
LCC		 7517}
7518
7519static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
7520{
4c476991
JB		 7521 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7522 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7523 u8 *dst = NULL;
7524 u8 *next_hop = NULL;
7525
7526 if (!info->attrs[NL80211_ATTR_MAC])
7527 return -EINVAL;
7528
7529 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
7530 return -EINVAL;
7531
7532 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7533 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
7534
4c476991
JB		 7535 if (!rdev->ops->change_mpath)
7536 return -EOPNOTSUPP;
35a8efe1 7537
4c476991
JB		 7538 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7539 return -EOPNOTSUPP;
2ec600d6 7540
e35e4d28 7541 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 7542}
4c476991 7543
2ec600d6
LCC		 7544static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
7545{
4c476991
JB		 7546 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7547 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7548 u8 *dst = NULL;
7549 u8 *next_hop = NULL;
7550
7551 if (!info->attrs[NL80211_ATTR_MAC])
7552 return -EINVAL;
7553
7554 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
7555 return -EINVAL;
7556
7557 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7558 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
7559
4c476991
JB		 7560 if (!rdev->ops->add_mpath)
7561 return -EOPNOTSUPP;
35a8efe1 7562
4c476991
JB		 7563 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7564 return -EOPNOTSUPP;
2ec600d6 7565
e35e4d28 7566 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 7567}
7568
7569static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
7570{
4c476991
JB		 7571 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7572 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7573 u8 *dst = NULL;
7574
7575 if (info->attrs[NL80211_ATTR_MAC])
7576 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7577
4c476991
JB		 7578 if (!rdev->ops->del_mpath)
7579 return -EOPNOTSUPP;
3b85875a 7580
b501426c
MP		 7581 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7582 return -EOPNOTSUPP;
7583
e35e4d28 7584 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 7585}
7586
66be7d2b
HR		 7587static int nl80211_get_mpp(struct sk_buff *skb, struct genl_info *info)
7588{
7589 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7590 int err;
7591 struct net_device *dev = info->user_ptr[1];
7592 struct mpath_info pinfo;
7593 struct sk_buff *msg;
7594 u8 *dst = NULL;
7595 u8 mpp[ETH_ALEN];
7596
7597 memset(&pinfo, 0, sizeof(pinfo));
7598
7599 if (!info->attrs[NL80211_ATTR_MAC])
7600 return -EINVAL;
7601
7602 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7603
7604 if (!rdev->ops->get_mpp)
7605 return -EOPNOTSUPP;
7606
7607 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7608 return -EOPNOTSUPP;
7609
7610 err = rdev_get_mpp(rdev, dev, dst, mpp, &pinfo);
7611 if (err)
7612 return err;
7613
7614 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7615 if (!msg)
7616 return -ENOMEM;
7617
7618 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
7619 dev, dst, mpp, &pinfo) < 0) {
7620 nlmsg_free(msg);
7621 return -ENOBUFS;
7622 }
7623
7624 return genlmsg_reply(msg, info);
7625}
7626
7627static int nl80211_dump_mpp(struct sk_buff *skb,
7628 struct netlink_callback *cb)
7629{
7630 struct mpath_info pinfo;
7631 struct cfg80211_registered_device *rdev;
7632 struct wireless_dev *wdev;
7633 u8 dst[ETH_ALEN];
7634 u8 mpp[ETH_ALEN];
7635 int path_idx = cb->args[2];
7636 int err;
7637
ce6b6974 7638 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
66be7d2b 7639 if (err)
a05829a7
JB		 7640 return err;
7641 /* nl80211_prepare_wdev_dump acquired it in the successful case */
7642 __acquire(&rdev->wiphy.mtx);
66be7d2b
HR		 7643
7644 if (!rdev->ops->dump_mpp) {
7645 err = -EOPNOTSUPP;
7646 goto out_err;
7647 }
7648
7649 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
7650 err = -EOPNOTSUPP;
7651 goto out_err;
7652 }
7653
7654 while (1) {
7655 err = rdev_dump_mpp(rdev, wdev->netdev, path_idx, dst,
7656 mpp, &pinfo);
7657 if (err == -ENOENT)
7658 break;
7659 if (err)
7660 goto out_err;
7661
7662 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
7663 cb->nlh->nlmsg_seq, NLM_F_MULTI,
7664 wdev->netdev, dst, mpp,
7665 &pinfo) < 0)
7666 goto out;
7667
7668 path_idx++;
7669 }
7670
7671 out:
7672 cb->args[2] = path_idx;
7673 err = skb->len;
7674 out_err:
a05829a7 7675 wiphy_unlock(&rdev->wiphy);
66be7d2b
HR		 7676 return err;
7677}
7678
9f1ba906
JM		 7679static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
7680{
4c476991
JB		 7681 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7682 struct net_device *dev = info->user_ptr[1];
c56589ed 7683 struct wireless_dev *wdev = dev->ieee80211_ptr;
9f1ba906 7684 struct bss_parameters params;
c56589ed 7685 int err;
9f1ba906
JM		 7686
7687 memset(&params, 0, sizeof(params));
7688 /* default to not changing parameters */
7689 params.use_cts_prot = -1;
7690 params.use_short_preamble = -1;
7691 params.use_short_slot_time = -1;
fd8aaaf3 7692 params.ap_isolate = -1;
50b12f59 7693 params.ht_opmode = -1;
53cabad7
JB		 7694 params.p2p_ctwindow = -1;
7695 params.p2p_opp_ps = -1;
9f1ba906
JM		 7696
7697 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
7698 params.use_cts_prot =
7699 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
7700 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
7701 params.use_short_preamble =
7702 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
7703 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
7704 params.use_short_slot_time =
7705 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 7706 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
7707 params.basic_rates =
7708 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7709 params.basic_rates_len =
7710 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7711 }
fd8aaaf3
FF		 7712 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
7713 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 7714 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
7715 params.ht_opmode =
7716 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 7717
53cabad7
JB		 7718 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
7719 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7720 return -EINVAL;
7721 params.p2p_ctwindow =
ab0d76f6 7722 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 7723 if (params.p2p_ctwindow != 0 &&
7724 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
7725 return -EINVAL;
7726 }
7727
7728 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
7729 u8 tmp;
7730
7731 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7732 return -EINVAL;
7733 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 7734 params.p2p_opp_ps = tmp;
7735 if (params.p2p_opp_ps &&
7736 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
7737 return -EINVAL;
7738 }
7739
4c476991
JB		 7740 if (!rdev->ops->change_bss)
7741 return -EOPNOTSUPP;
9f1ba906 7742
074ac8df 7743 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 7744 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7745 return -EOPNOTSUPP;
3b85875a 7746
c56589ed
SW		 7747 wdev_lock(wdev);
7748 err = rdev_change_bss(rdev, dev, &params);
7749 wdev_unlock(wdev);
7750
7751 return err;
9f1ba906
JM		 7752}
7753
b2e1b302
LR		 7754static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
7755{
b2e1b302 7756 char *data = NULL;
05050753 7757 bool is_indoor;
57b5ce07 7758 enum nl80211_user_reg_hint_type user_reg_hint_type;
05050753
I		 7759 u32 owner_nlportid;
7760
80778f18
LR		 7761 /*
7762 * You should only get this when cfg80211 hasn't yet initialized
7763 * completely when built-in to the kernel right between the time
7764 * window between nl80211_init() and regulatory_init(), if that is
7765 * even possible.
7766 */
458f4f9e 7767 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
fe33eb39 7768 return -EINPROGRESS;
80778f18 7769
57b5ce07
LR		 7770 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
7771 user_reg_hint_type =
7772 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
7773 else
7774 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
7775
7776 switch (user_reg_hint_type) {
7777 case NL80211_USER_REG_HINT_USER:
7778 case NL80211_USER_REG_HINT_CELL_BASE:
52616f2b
IP		 7779 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7780 return -EINVAL;
7781
7782 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7783 return regulatory_hint_user(data, user_reg_hint_type);
7784 case NL80211_USER_REG_HINT_INDOOR:
05050753
I		 7785 if (info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
7786 owner_nlportid = info->snd_portid;
7787 is_indoor = !!info->attrs[NL80211_ATTR_REG_INDOOR];
7788 } else {
7789 owner_nlportid = 0;
7790 is_indoor = true;
7791 }
7792
7793 return regulatory_hint_indoor(is_indoor, owner_nlportid);
57b5ce07
LR		 7794 default:
7795 return -EINVAL;
7796 }
b2e1b302
LR		 7797}
7798
1ea4ff3e
JB		 7799static int nl80211_reload_regdb(struct sk_buff *skb, struct genl_info *info)
7800{
7801 return reg_reload_regdb();
7802}
7803
24bdd9f4 7804static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 7805 struct genl_info *info)
93da9cc1 7806{
4c476991 7807 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 7808 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 7809 struct wireless_dev *wdev = dev->ieee80211_ptr;
7810 struct mesh_config cur_params;
7811 int err = 0;
93da9cc1 7812 void *hdr;
7813 struct nlattr *pinfoattr;
7814 struct sk_buff *msg;
7815
29cbe68c
JB		 7816 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7817 return -EOPNOTSUPP;
7818
24bdd9f4 7819 if (!rdev->ops->get_mesh_config)
4c476991 7820 return -EOPNOTSUPP;
f3f92586 7821
29cbe68c
JB		 7822 wdev_lock(wdev);
7823 /* If not connected, get default parameters */
7b0a0e3c 7824 if (!wdev->u.mesh.id_len)
29cbe68c
JB		 7825 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
7826 else
e35e4d28 7827 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 7828 wdev_unlock(wdev);
7829
93da9cc1 7830 if (err)
4c476991 7831 return err;
93da9cc1 7832
7833 /* Draw up a netlink message to send back */
fd2120ca 7834 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 7835 if (!msg)
7836 return -ENOMEM;
15e47304 7837 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 7838 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 7839 if (!hdr)
efe1cf0c 7840 goto out;
ae0be8de 7841 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 7842 if (!pinfoattr)
7843 goto nla_put_failure;
9360ffd1
DM		 7844 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7845 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
7846 cur_params.dot11MeshRetryTimeout) ||
7847 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
7848 cur_params.dot11MeshConfirmTimeout) ||
7849 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
7850 cur_params.dot11MeshHoldingTimeout) ||
7851 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
7852 cur_params.dot11MeshMaxPeerLinks) ||
7853 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
7854 cur_params.dot11MeshMaxRetries) ||
7855 nla_put_u8(msg, NL80211_MESHCONF_TTL,
7856 cur_params.dot11MeshTTL) ||
7857 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
7858 cur_params.element_ttl) ||
7859 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
7860 cur_params.auto_open_plinks) ||
7eab0f64
JL		 7861 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
7862 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 7863 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
7864 cur_params.dot11MeshHWMPmaxPREQretries) ||
7865 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
7866 cur_params.path_refresh_time) ||
7867 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
7868 cur_params.min_discovery_timeout) ||
7869 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
7870 cur_params.dot11MeshHWMPactivePathTimeout) ||
7871 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
7872 cur_params.dot11MeshHWMPpreqMinInterval) ||
7873 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
7874 cur_params.dot11MeshHWMPperrMinInterval) ||
7875 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
7876 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
7877 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
7878 cur_params.dot11MeshHWMPRootMode) ||
7879 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7880 cur_params.dot11MeshHWMPRannInterval) ||
7881 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
7882 cur_params.dot11MeshGateAnnouncementProtocol) ||
7883 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
7884 cur_params.dot11MeshForwarding) ||
335d5349 7885 nla_put_s32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 7886 cur_params.rssi_threshold) ||
7887 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 7888 cur_params.ht_opmode) ||
7889 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7890 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
7891 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 7892 cur_params.dot11MeshHWMProotInterval) ||
7893 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3b1c5a53
MP		 7894 cur_params.dot11MeshHWMPconfirmationInterval) ||
7895 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
7896 cur_params.power_mode) ||
7897 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
8e7c0538
CT		 7898 cur_params.dot11MeshAwakeWindowDuration) ||
7899 nla_put_u32(msg, NL80211_MESHCONF_PLINK_TIMEOUT,
01d66fbd
BC		 7900 cur_params.plink_timeout) ||
7901 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_GATE,
e3718a61
LL		 7902 cur_params.dot11MeshConnectedToMeshGate) ||
7903 nla_put_u8(msg, NL80211_MESHCONF_NOLEARN,
184eebe6
MT		 7904 cur_params.dot11MeshNolearn) ||
7905 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_AS,
7906 cur_params.dot11MeshConnectedToAuthServer))
9360ffd1 7907 goto nla_put_failure;
93da9cc1 7908 nla_nest_end(msg, pinfoattr);
7909 genlmsg_end(msg, hdr);
4c476991 7910 return genlmsg_reply(msg, info);
93da9cc1 7911
3b85875a 7912 nla_put_failure:
efe1cf0c 7913 out:
d080e275 7914 nlmsg_free(msg);
4c476991 7915 return -ENOBUFS;
93da9cc1 7916}
7917
ab0d76f6
JB		 7918static const struct nla_policy
7919nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
7920 [NL80211_MESHCONF_RETRY_TIMEOUT] =
7921 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7922 [NL80211_MESHCONF_CONFIRM_TIMEOUT] =
7923 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7924 [NL80211_MESHCONF_HOLDING_TIMEOUT] =
7925 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7926 [NL80211_MESHCONF_MAX_PEER_LINKS] =
7927 NLA_POLICY_RANGE(NLA_U16, 0, 255),
7928 [NL80211_MESHCONF_MAX_RETRIES] = NLA_POLICY_MAX(NLA_U8, 16),
7929 [NL80211_MESHCONF_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
7930 [NL80211_MESHCONF_ELEMENT_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
7931 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = NLA_POLICY_MAX(NLA_U8, 1),
7932 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] =
7933 NLA_POLICY_RANGE(NLA_U32, 1, 255),
93da9cc1 7934 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
7935 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
ab0d76f6 7936 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = NLA_POLICY_MIN(NLA_U16, 1),
93da9cc1 7937 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 7938 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] =
7939 NLA_POLICY_MIN(NLA_U16, 1),
7940 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] =
7941 NLA_POLICY_MIN(NLA_U16, 1),
7942 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] =
7943 NLA_POLICY_MIN(NLA_U16, 1),
7944 [NL80211_MESHCONF_HWMP_ROOTMODE] = NLA_POLICY_MAX(NLA_U8, 4),
7945 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] =
7946 NLA_POLICY_MIN(NLA_U16, 1),
7947 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = NLA_POLICY_MAX(NLA_U8, 1),
7948 [NL80211_MESHCONF_FORWARDING] = NLA_POLICY_MAX(NLA_U8, 1),
7949 [NL80211_MESHCONF_RSSI_THRESHOLD] =
7950 NLA_POLICY_RANGE(NLA_S32, -255, 0),
a4f606ea 7951 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6 7952 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 7953 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] =
7954 NLA_POLICY_MIN(NLA_U16, 1),
7955 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] =
7956 NLA_POLICY_MIN(NLA_U16, 1),
7957 [NL80211_MESHCONF_POWER_MODE] =
7958 NLA_POLICY_RANGE(NLA_U32,
7959 NL80211_MESH_POWER_ACTIVE,
7960 NL80211_MESH_POWER_MAX),
3b1c5a53 7961 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
8e7c0538 7962 [NL80211_MESHCONF_PLINK_TIMEOUT] = { .type = NLA_U32 },
01d66fbd 7963 [NL80211_MESHCONF_CONNECTED_TO_GATE] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
e3718a61 7964 [NL80211_MESHCONF_NOLEARN] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
184eebe6 7965 [NL80211_MESHCONF_CONNECTED_TO_AS] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
93da9cc1 7966};
7967
c80d545d
JC		 7968static const struct nla_policy
7969 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 7970 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 7971 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
7972 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 7973 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
6e16d90b 7974 [NL80211_MESH_SETUP_AUTH_PROTOCOL] = { .type = NLA_U8 },
bb2798d4 7975 [NL80211_MESH_SETUP_USERSPACE_MPM] = { .type = NLA_FLAG },
3d7af878
JB		 7976 [NL80211_MESH_SETUP_IE] =
7977 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
7978 IEEE80211_MAX_DATA_LEN),
b130e5ce 7979 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 7980};
7981
24bdd9f4 7982static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 7983 struct mesh_config *cfg,
7984 u32 *mask_out)
93da9cc1 7985{
93da9cc1 7986 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 7987 u32 mask = 0;
9757235f 7988 u16 ht_opmode;
93da9cc1 7989
ab0d76f6
JB		 7990#define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, mask, attr, fn) \
7991do { \
7992 if (tb[attr]) { \
7993 cfg->param = fn(tb[attr]); \
7994 mask |= BIT((attr) - 1); \
7995 } \
ea54fba2 7996} while (0)
bd90fdcc 7997
24bdd9f4 7998 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 7999 return -EINVAL;
8cb08174 8000 if (nla_parse_nested_deprecated(tb, NL80211_MESHCONF_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_CONFIG], nl80211_meshconf_params_policy, info->extack))
93da9cc1 8001 return -EINVAL;
8002
93da9cc1 8003 /* This makes sure that there aren't more than 32 mesh config
8004 * parameters (otherwise our bitfield scheme would not work.) */
8005 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
8006
8007 /* Fill in the params struct */
ab0d76f6
JB		 8008 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, mask,
8009 NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
8010 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, mask,
8011 NL80211_MESHCONF_CONFIRM_TIMEOUT,
8012 nla_get_u16);
8013 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, mask,
8014 NL80211_MESHCONF_HOLDING_TIMEOUT,
8015 nla_get_u16);
8016 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, mask,
8017 NL80211_MESHCONF_MAX_PEER_LINKS,
8018 nla_get_u16);
8019 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, mask,
8020 NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
8021 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, mask,
8022 NL80211_MESHCONF_TTL, nla_get_u8);
8023 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, mask,
8024 NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
8025 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, mask,
8026 NL80211_MESHCONF_AUTO_OPEN_PLINKS,
8027 nla_get_u8);
ea54fba2 8028 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
ab0d76f6 8029 mask,
a4f606ea 8030 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
ab0d76f6
JB		 8031 nla_get_u32);
8032 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, mask,
8033 NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
8034 nla_get_u8);
8035 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, mask,
8036 NL80211_MESHCONF_PATH_REFRESH_TIME,
8037 nla_get_u32);
8038 if (mask & BIT(NL80211_MESHCONF_PATH_REFRESH_TIME) &&
8039 (cfg->path_refresh_time < 1 || cfg->path_refresh_time > 65535))
8040 return -EINVAL;
8041 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, mask,
8042 NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
8043 nla_get_u16);
ea54fba2 8044 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
ab0d76f6 8045 mask,
a4f606ea 8046 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
ab0d76f6
JB		 8047 nla_get_u32);
8048 if (mask & BIT(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT) &&
8049 (cfg->dot11MeshHWMPactivePathTimeout < 1 ||
8050 cfg->dot11MeshHWMPactivePathTimeout > 65535))
8051 return -EINVAL;
8052 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval, mask,
ea54fba2 8053 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
ab0d76f6
JB		 8054 nla_get_u16);
8055 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval, mask,
ea54fba2 8056 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
ab0d76f6 8057 nla_get_u16);
93da9cc1 8058 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6 8059 dot11MeshHWMPnetDiameterTraversalTime, mask,
a4f606ea 8060 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
ab0d76f6
JB		 8061 nla_get_u16);
8062 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
8063 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
8064 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
8065 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
8066 nla_get_u16);
8067 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshGateAnnouncementProtocol,
ea54fba2 8068 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
ab0d76f6
JB		 8069 nla_get_u8);
8070 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, mask,
8071 NL80211_MESHCONF_FORWARDING, nla_get_u8);
8072 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, mask,
8073 NL80211_MESHCONF_RSSI_THRESHOLD,
8074 nla_get_s32);
01d66fbd
BC		 8075 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToMeshGate, mask,
8076 NL80211_MESHCONF_CONNECTED_TO_GATE,
8077 nla_get_u8);
184eebe6
MT		 8078 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToAuthServer, mask,
8079 NL80211_MESHCONF_CONNECTED_TO_AS,
8080 nla_get_u8);
9757235f
MH		 8081 /*
8082 * Check HT operation mode based on
188f60ab 8083 * IEEE 802.11-2016 9.4.2.57 HT Operation element.
9757235f
MH		 8084 */
8085 if (tb[NL80211_MESHCONF_HT_OPMODE]) {
8086 ht_opmode = nla_get_u16(tb[NL80211_MESHCONF_HT_OPMODE]);
8087
8088 if (ht_opmode & ~(IEEE80211_HT_OP_MODE_PROTECTION |
8089 IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT |
8090 IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT))
8091 return -EINVAL;
8092
188f60ab
BC		 8093 /* NON_HT_STA bit is reserved, but some programs set it */
8094 ht_opmode &= ~IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
9757235f 8095
9757235f 8096 cfg->ht_opmode = ht_opmode;
fd551bac 8097 mask |= (1 << (NL80211_MESHCONF_HT_OPMODE - 1));
9757235f 8098 }
728b19e5 8099 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6
JB		 8100 dot11MeshHWMPactivePathToRootTimeout, mask,
8101 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
8102 nla_get_u32);
8103 if (mask & BIT(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT) &&
8104 (cfg->dot11MeshHWMPactivePathToRootTimeout < 1 ||
8105 cfg->dot11MeshHWMPactivePathToRootTimeout > 65535))
8106 return -EINVAL;
8107 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, mask,
8108 NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
8109 nla_get_u16);
8110 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPconfirmationInterval,
8111 mask,
728b19e5 8112 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
ab0d76f6
JB		 8113 nla_get_u16);
8114 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode, mask,
8115 NL80211_MESHCONF_POWER_MODE, nla_get_u32);
8116 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration, mask,
8117 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
8118 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, plink_timeout, mask,
8119 NL80211_MESHCONF_PLINK_TIMEOUT, nla_get_u32);
e3718a61
LL		 8120 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNolearn, mask,
8121 NL80211_MESHCONF_NOLEARN, nla_get_u8);
bd90fdcc
JB		 8122 if (mask_out)
8123 *mask_out = mask;
c80d545d 8124
bd90fdcc
JB		 8125 return 0;
8126
8127#undef FILL_IN_MESH_PARAM_IF_SET
8128}
8129
c80d545d
JC		 8130static int nl80211_parse_mesh_setup(struct genl_info *info,
8131 struct mesh_setup *setup)
8132{
bb2798d4 8133 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c80d545d
JC		 8134 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
8135
8136 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
8137 return -EINVAL;
8cb08174 8138 if (nla_parse_nested_deprecated(tb, NL80211_MESH_SETUP_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_SETUP], nl80211_mesh_setup_params_policy, info->extack))
c80d545d
JC		 8139 return -EINVAL;
8140
d299a1f2
JC		 8141 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
8142 setup->sync_method =
8143 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
8144 IEEE80211_SYNC_METHOD_VENDOR :
8145 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
8146
c80d545d
JC		 8147 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
8148 setup->path_sel_proto =
8149 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
8150 IEEE80211_PATH_PROTOCOL_VENDOR :
8151 IEEE80211_PATH_PROTOCOL_HWMP;
8152
8153 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
8154 setup->path_metric =
8155 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
8156 IEEE80211_PATH_METRIC_VENDOR :
8157 IEEE80211_PATH_METRIC_AIRTIME;
8158
581a8b0f 8159 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 8160 struct nlattr *ieattr =
581a8b0f 8161 tb[NL80211_MESH_SETUP_IE];
581a8b0f
JC		 8162 setup->ie = nla_data(ieattr);
8163 setup->ie_len = nla_len(ieattr);
c80d545d 8164 }
bb2798d4
TP		 8165 if (tb[NL80211_MESH_SETUP_USERSPACE_MPM] &&
8166 !(rdev->wiphy.features & NL80211_FEATURE_USERSPACE_MPM))
8167 return -EINVAL;
8168 setup->user_mpm = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_MPM]);
b130e5ce
JC		 8169 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
8170 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
bb2798d4
TP		 8171 if (setup->is_secure)
8172 setup->user_mpm = true;
c80d545d 8173
6e16d90b
CT		 8174 if (tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]) {
8175 if (!setup->user_mpm)
8176 return -EINVAL;
8177 setup->auth_id =
8178 nla_get_u8(tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]);
8179 }
8180
c80d545d
JC		 8181 return 0;
8182}
8183
24bdd9f4 8184static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 8185 struct genl_info *info)
bd90fdcc
JB		 8186{
8187 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8188 struct net_device *dev = info->user_ptr[1];
29cbe68c 8189 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 8190 struct mesh_config cfg;
8191 u32 mask;
8192 int err;
8193
29cbe68c
JB		 8194 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
8195 return -EOPNOTSUPP;
8196
24bdd9f4 8197 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 8198 return -EOPNOTSUPP;
8199
24bdd9f4 8200 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 8201 if (err)
8202 return err;
8203
29cbe68c 8204 wdev_lock(wdev);
7b0a0e3c 8205 if (!wdev->u.mesh.id_len)
29cbe68c
JB		 8206 err = -ENOLINK;
8207
8208 if (!err)
e35e4d28 8209 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 8210
8211 wdev_unlock(wdev);
8212
8213 return err;
93da9cc1 8214}
8215
ad30ca2c
AN		 8216static int nl80211_put_regdom(const struct ieee80211_regdomain *regdom,
8217 struct sk_buff *msg)
f130347c 8218{
f130347c
LR		 8219 struct nlattr *nl_reg_rules;
8220 unsigned int i;
f130347c 8221
458f4f9e
JB		 8222 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
8223 (regdom->dfs_region &&
8224 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
ad30ca2c 8225 goto nla_put_failure;
458f4f9e 8226
ae0be8de 8227 nl_reg_rules = nla_nest_start_noflag(msg, NL80211_ATTR_REG_RULES);
f130347c 8228 if (!nl_reg_rules)
ad30ca2c 8229 goto nla_put_failure;
f130347c 8230
458f4f9e 8231 for (i = 0; i < regdom->n_reg_rules; i++) {
f130347c
LR		 8232 struct nlattr *nl_reg_rule;
8233 const struct ieee80211_reg_rule *reg_rule;
8234 const struct ieee80211_freq_range *freq_range;
8235 const struct ieee80211_power_rule *power_rule;
97524820 8236 unsigned int max_bandwidth_khz;
f130347c 8237
458f4f9e 8238 reg_rule = &regdom->reg_rules[i];
f130347c
LR		 8239 freq_range = &reg_rule->freq_range;
8240 power_rule = &reg_rule->power_rule;
8241
ae0be8de 8242 nl_reg_rule = nla_nest_start_noflag(msg, i);
f130347c 8243 if (!nl_reg_rule)
ad30ca2c 8244 goto nla_put_failure;
f130347c 8245
97524820
JD		 8246 max_bandwidth_khz = freq_range->max_bandwidth_khz;
8247 if (!max_bandwidth_khz)
8248 max_bandwidth_khz = reg_get_max_bandwidth(regdom,
8249 reg_rule);
8250
9360ffd1
DM		 8251 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
8252 reg_rule->flags) ||
8253 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
8254 freq_range->start_freq_khz) ||
8255 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
8256 freq_range->end_freq_khz) ||
8257 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
97524820 8258 max_bandwidth_khz) ||
9360ffd1
DM		 8259 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
8260 power_rule->max_antenna_gain) ||
8261 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
089027e5
JD		 8262 power_rule->max_eirp) ||
8263 nla_put_u32(msg, NL80211_ATTR_DFS_CAC_TIME,
8264 reg_rule->dfs_cac_ms))
ad30ca2c 8265 goto nla_put_failure;
f130347c
LR		 8266
8267 nla_nest_end(msg, nl_reg_rule);
8268 }
8269
8270 nla_nest_end(msg, nl_reg_rules);
ad30ca2c
AN		 8271 return 0;
8272
8273nla_put_failure:
8274 return -EMSGSIZE;
8275}
8276
8277static int nl80211_get_reg_do(struct sk_buff *skb, struct genl_info *info)
8278{
8279 const struct ieee80211_regdomain *regdom = NULL;
8280 struct cfg80211_registered_device *rdev;
8281 struct wiphy *wiphy = NULL;
8282 struct sk_buff *msg;
024fcf5e 8283 int err = -EMSGSIZE;
ad30ca2c
AN		 8284 void *hdr;
8285
8286 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8287 if (!msg)
8288 return -ENOBUFS;
8289
8290 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
8291 NL80211_CMD_GET_REG);
8292 if (!hdr)
8293 goto put_failure;
8294
a05829a7
JB		 8295 rtnl_lock();
8296
ad30ca2c 8297 if (info->attrs[NL80211_ATTR_WIPHY]) {
1bdd716c
AN		 8298 bool self_managed;
8299
ad30ca2c
AN		 8300 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
8301 if (IS_ERR(rdev)) {
024fcf5e
JB		 8302 err = PTR_ERR(rdev);
8303 goto nla_put_failure;
ad30ca2c
AN		 8304 }
8305
8306 wiphy = &rdev->wiphy;
1bdd716c
AN		 8307 self_managed = wiphy->regulatory_flags &
8308 REGULATORY_WIPHY_SELF_MANAGED;
024fcf5e
JB		 8309
8310 rcu_read_lock();
8311
ad30ca2c
AN		 8312 regdom = get_wiphy_regdom(wiphy);
8313
1bdd716c
AN		 8314 /* a self-managed-reg device must have a private regdom */
8315 if (WARN_ON(!regdom && self_managed)) {
024fcf5e
JB		 8316 err = -EINVAL;
8317 goto nla_put_failure_rcu;
1bdd716c
AN		 8318 }
8319
ad30ca2c
AN		 8320 if (regdom &&
8321 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
024fcf5e
JB		 8322 goto nla_put_failure_rcu;
8323 } else {
8324 rcu_read_lock();
ad30ca2c
AN		 8325 }
8326
8327 if (!wiphy && reg_last_request_cell_base() &&
8328 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
8329 NL80211_USER_REG_HINT_CELL_BASE))
024fcf5e 8330 goto nla_put_failure_rcu;
ad30ca2c
AN		 8331
8332 if (!regdom)
8333 regdom = rcu_dereference(cfg80211_regdomain);
8334
8335 if (nl80211_put_regdom(regdom, msg))
8336 goto nla_put_failure_rcu;
8337
8338 rcu_read_unlock();
f130347c
LR		 8339
8340 genlmsg_end(msg, hdr);
a05829a7 8341 rtnl_unlock();
5fe231e8 8342 return genlmsg_reply(msg, info);
f130347c 8343
458f4f9e
JB		 8344nla_put_failure_rcu:
8345 rcu_read_unlock();
f130347c 8346nla_put_failure:
a05829a7 8347 rtnl_unlock();
efe1cf0c 8348put_failure:
d080e275 8349 nlmsg_free(msg);
024fcf5e 8350 return err;
f130347c
LR		 8351}
8352
ad30ca2c
AN		 8353static int nl80211_send_regdom(struct sk_buff *msg, struct netlink_callback *cb,
8354 u32 seq, int flags, struct wiphy *wiphy,
8355 const struct ieee80211_regdomain *regdom)
8356{
8357 void *hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
8358 NL80211_CMD_GET_REG);
8359
8360 if (!hdr)
8361 return -1;
8362
0a833c29 8363 genl_dump_check_consistent(cb, hdr);
ad30ca2c
AN		 8364
8365 if (nl80211_put_regdom(regdom, msg))
8366 goto nla_put_failure;
8367
8368 if (!wiphy && reg_last_request_cell_base() &&
8369 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
8370 NL80211_USER_REG_HINT_CELL_BASE))
8371 goto nla_put_failure;
8372
8373 if (wiphy &&
8374 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
8375 goto nla_put_failure;
8376
1bdd716c
AN		 8377 if (wiphy && wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
8378 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
8379 goto nla_put_failure;
8380
053c095a
JB		 8381 genlmsg_end(msg, hdr);
8382 return 0;
ad30ca2c
AN		 8383
8384nla_put_failure:
8385 genlmsg_cancel(msg, hdr);
8386 return -EMSGSIZE;
8387}
8388
8389static int nl80211_get_reg_dump(struct sk_buff *skb,
8390 struct netlink_callback *cb)
8391{
8392 const struct ieee80211_regdomain *regdom = NULL;
8393 struct cfg80211_registered_device *rdev;
8394 int err, reg_idx, start = cb->args[2];
8395
024fcf5e 8396 rcu_read_lock();
ad30ca2c
AN		 8397
8398 if (cfg80211_regdomain && start == 0) {
8399 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
8400 NLM_F_MULTI, NULL,
024fcf5e 8401 rcu_dereference(cfg80211_regdomain));
ad30ca2c
AN		 8402 if (err < 0)
8403 goto out_err;
8404 }
8405
8406 /* the global regdom is idx 0 */
8407 reg_idx = 1;
024fcf5e 8408 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ad30ca2c
AN		 8409 regdom = get_wiphy_regdom(&rdev->wiphy);
8410 if (!regdom)
8411 continue;
8412
8413 if (++reg_idx <= start)
8414 continue;
8415
8416 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
8417 NLM_F_MULTI, &rdev->wiphy, regdom);
8418 if (err < 0) {
8419 reg_idx--;
8420 break;
8421 }
8422 }
8423
8424 cb->args[2] = reg_idx;
8425 err = skb->len;
8426out_err:
024fcf5e 8427 rcu_read_unlock();
ad30ca2c
AN		 8428 return err;
8429}
8430
b6863036
JB		 8431#ifdef CONFIG_CFG80211_CRDA_SUPPORT
8432static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
8433 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
8434 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
8435 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
8436 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
8437 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
8438 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
8439 [NL80211_ATTR_DFS_CAC_TIME] = { .type = NLA_U32 },
8440};
8441
8442static int parse_reg_rule(struct nlattr *tb[],
8443 struct ieee80211_reg_rule *reg_rule)
8444{
8445 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
8446 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
8447
8448 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
8449 return -EINVAL;
8450 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
8451 return -EINVAL;
8452 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
8453 return -EINVAL;
8454 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
8455 return -EINVAL;
8456 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
8457 return -EINVAL;
8458
8459 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
8460
8461 freq_range->start_freq_khz =
8462 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
8463 freq_range->end_freq_khz =
8464 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
8465 freq_range->max_bandwidth_khz =
8466 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
8467
8468 power_rule->max_eirp =
8469 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
8470
8471 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
8472 power_rule->max_antenna_gain =
8473 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
8474
8475 if (tb[NL80211_ATTR_DFS_CAC_TIME])
8476 reg_rule->dfs_cac_ms =
8477 nla_get_u32(tb[NL80211_ATTR_DFS_CAC_TIME]);
8478
8479 return 0;
8480}
8481
b2e1b302
LR		 8482static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
8483{
8484 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
8485 struct nlattr *nl_reg_rule;
ea372c54
JB		 8486 char *alpha2;
8487 int rem_reg_rules, r;
391d132c 8488 u32 num_rules = 0, rule_idx = 0;
4c7d3982 8489 enum nl80211_dfs_regions dfs_region = NL80211_DFS_UNSET;
ea372c54 8490 struct ieee80211_regdomain *rd;
b2e1b302
LR		 8491
8492 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
8493 return -EINVAL;
8494
8495 if (!info->attrs[NL80211_ATTR_REG_RULES])
8496 return -EINVAL;
8497
8498 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
8499
8b60b078
LR		 8500 if (info->attrs[NL80211_ATTR_DFS_REGION])
8501 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
8502
b2e1b302 8503 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 8504 rem_reg_rules) {
b2e1b302
LR		 8505 num_rules++;
8506 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 8507 return -EINVAL;
b2e1b302
LR		 8508 }
8509
a05829a7
JB		 8510 rtnl_lock();
8511 if (!reg_is_valid_request(alpha2)) {
8512 r = -EINVAL;
8513 goto out;
8514 }
e438768f 8515
391d132c 8516 rd = kzalloc(struct_size(rd, reg_rules, num_rules), GFP_KERNEL);
a05829a7
JB		 8517 if (!rd) {
8518 r = -ENOMEM;
8519 goto out;
8520 }
b2e1b302
LR		 8521
8522 rd->n_reg_rules = num_rules;
8523 rd->alpha2[0] = alpha2[0];
8524 rd->alpha2[1] = alpha2[1];
8525
8b60b078
LR		 8526 /*
8527 * Disable DFS master mode if the DFS region was
8528 * not supported or known on this kernel.
8529 */
8530 if (reg_supported_dfs_region(dfs_region))
8531 rd->dfs_region = dfs_region;
8532
b2e1b302 8533 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 8534 rem_reg_rules) {
8cb08174
JB		 8535 r = nla_parse_nested_deprecated(tb, NL80211_REG_RULE_ATTR_MAX,
8536 nl_reg_rule, reg_rule_policy,
8537 info->extack);
ae811e21
JB		 8538 if (r)
8539 goto bad_reg;
b2e1b302
LR		 8540 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
8541 if (r)
8542 goto bad_reg;
8543
8544 rule_idx++;
8545
d0e18f83
LR		 8546 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
8547 r = -EINVAL;
b2e1b302 8548 goto bad_reg;
d0e18f83 8549 }
b2e1b302
LR		 8550 }
8551
a05829a7 8552 r = set_regdom(rd, REGD_SOURCE_CRDA);
06627990 8553 /* set_regdom takes ownership of rd */
a05829a7 8554 rd = NULL;
d2372b31 8555 bad_reg:
b2e1b302 8556 kfree(rd);
a05829a7
JB		 8557 out:
8558 rtnl_unlock();
d0e18f83 8559 return r;
b2e1b302 8560}
b6863036 8561#endif /* CONFIG_CFG80211_CRDA_SUPPORT */
b2e1b302 8562
83f5e2cf
JB		 8563static int validate_scan_freqs(struct nlattr *freqs)
8564{
8565 struct nlattr *attr1, *attr2;
8566 int n_channels = 0, tmp1, tmp2;
8567
d7f13f74
SD		 8568 nla_for_each_nested(attr1, freqs, tmp1)
8569 if (nla_len(attr1) != sizeof(u32))
8570 return 0;
8571
83f5e2cf
JB		 8572 nla_for_each_nested(attr1, freqs, tmp1) {
8573 n_channels++;
8574 /*
8575 * Some hardware has a limited channel list for
8576 * scanning, and it is pretty much nonsensical
8577 * to scan for a channel twice, so disallow that
8578 * and don't require drivers to check that the
8579 * channel list they get isn't longer than what
8580 * they can scan, as long as they can scan all
8581 * the channels they registered at once.
8582 */
8583 nla_for_each_nested(attr2, freqs, tmp2)
8584 if (attr1 != attr2 &&
8585 nla_get_u32(attr1) == nla_get_u32(attr2))
8586 return 0;
8587 }
8588
8589 return n_channels;
8590}
8591
57fbcce3 8592static bool is_band_valid(struct wiphy *wiphy, enum nl80211_band b)
38de03d2 8593{
57fbcce3 8594 return b < NUM_NL80211_BANDS && wiphy->bands[b];
38de03d2
AS		 8595}
8596
8597static int parse_bss_select(struct nlattr *nla, struct wiphy *wiphy,
8598 struct cfg80211_bss_selection *bss_select)
8599{
8600 struct nlattr *attr[NL80211_BSS_SELECT_ATTR_MAX + 1];
8601 struct nlattr *nest;
8602 int err;
8603 bool found = false;
8604 int i;
8605
8606 /* only process one nested attribute */
8607 nest = nla_data(nla);
8608 if (!nla_ok(nest, nla_len(nest)))
8609 return -EINVAL;
8610
8cb08174
JB		 8611 err = nla_parse_nested_deprecated(attr, NL80211_BSS_SELECT_ATTR_MAX,
8612 nest, nl80211_bss_select_policy,
8613 NULL);
38de03d2
AS		 8614 if (err)
8615 return err;
8616
8617 /* only one attribute may be given */
8618 for (i = 0; i <= NL80211_BSS_SELECT_ATTR_MAX; i++) {
8619 if (attr[i]) {
8620 if (found)
8621 return -EINVAL;
8622 found = true;
8623 }
8624 }
8625
8626 bss_select->behaviour = __NL80211_BSS_SELECT_ATTR_INVALID;
8627
8628 if (attr[NL80211_BSS_SELECT_ATTR_RSSI])
8629 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI;
8630
8631 if (attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]) {
8632 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_BAND_PREF;
8633 bss_select->param.band_pref =
8634 nla_get_u32(attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]);
8635 if (!is_band_valid(wiphy, bss_select->param.band_pref))
8636 return -EINVAL;
8637 }
8638
8639 if (attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]) {
8640 struct nl80211_bss_select_rssi_adjust *adj_param;
8641
8642 adj_param = nla_data(attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]);
8643 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI_ADJUST;
8644 bss_select->param.adjust.band = adj_param->band;
8645 bss_select->param.adjust.delta = adj_param->delta;
8646 if (!is_band_valid(wiphy, bss_select->param.adjust.band))
8647 return -EINVAL;
8648 }
8649
8650 /* user-space did not provide behaviour attribute */
8651 if (bss_select->behaviour == __NL80211_BSS_SELECT_ATTR_INVALID)
8652 return -EINVAL;
8653
8654 if (!(wiphy->bss_select_support & BIT(bss_select->behaviour)))
8655 return -EINVAL;
8656
8657 return 0;
8658}
8659
9bb7e0f2
JB		 8660int nl80211_parse_random_mac(struct nlattr **attrs,
8661 u8 *mac_addr, u8 *mac_addr_mask)
ad2b26ab
JB		 8662{
8663 int i;
8664
8665 if (!attrs[NL80211_ATTR_MAC] && !attrs[NL80211_ATTR_MAC_MASK]) {
d2beae10
JP		 8666 eth_zero_addr(mac_addr);
8667 eth_zero_addr(mac_addr_mask);
ad2b26ab
JB		 8668 mac_addr[0] = 0x2;
8669 mac_addr_mask[0] = 0x3;
8670
8671 return 0;
8672 }
8673
8674 /* need both or none */
8675 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_MAC_MASK])
8676 return -EINVAL;
8677
8678 memcpy(mac_addr, nla_data(attrs[NL80211_ATTR_MAC]), ETH_ALEN);
8679 memcpy(mac_addr_mask, nla_data(attrs[NL80211_ATTR_MAC_MASK]), ETH_ALEN);
8680
8681 /* don't allow or configure an mcast address */
8682 if (!is_multicast_ether_addr(mac_addr_mask) ||
8683 is_multicast_ether_addr(mac_addr))
8684 return -EINVAL;
8685
8686 /*
8687 * allow users to pass a MAC address that has bits set outside
8688 * of the mask, but don't bother drivers with having to deal
8689 * with such bits
8690 */
8691 for (i = 0; i < ETH_ALEN; i++)
8692 mac_addr[i] &= mac_addr_mask[i];
8693
8694 return 0;
8695}
8696
7b0a0e3c
JB		 8697static bool cfg80211_off_channel_oper_allowed(struct wireless_dev *wdev,
8698 struct ieee80211_channel *chan)
34373d12 8699{
7b0a0e3c
JB		 8700 unsigned int link_id;
8701 bool all_ok = true;
8702
34373d12
VT		 8703 ASSERT_WDEV_LOCK(wdev);
8704
8705 if (!cfg80211_beaconing_iface_active(wdev))
8706 return true;
8707
7b0a0e3c
JB		 8708 /*
8709 * FIXME: check if we have a free HW resource/link for chan
8710 *
8711 * This, as well as the FIXME below, requires knowing the link
8712 * capabilities of the hardware.
8713 */
8714
8715 /* we cannot leave radar channels */
8716 for_each_valid_link(wdev, link_id) {
8717 struct cfg80211_chan_def *chandef;
8718
8719 chandef = wdev_chandef(wdev, link_id);
8720 if (!chandef)
8721 continue;
8722
8723 /*
8724 * FIXME: don't require all_ok, but rather check only the
8725 * correct HW resource/link onto which 'chan' falls,
8726 * as only that link leaves the channel for doing
8727 * the off-channel operation.
8728 */
8729
8730 if (chandef->chan->flags & IEEE80211_CHAN_RADAR)
8731 all_ok = false;
8732 }
8733
8734 if (all_ok)
34373d12
VT		 8735 return true;
8736
8737 return regulatory_pre_cac_allowed(wdev->wiphy);
8738}
8739
db0a4ad8
JB		 8740static bool nl80211_check_scan_feat(struct wiphy *wiphy, u32 flags, u32 flag,
8741 enum nl80211_ext_feature_index feat)
8742{
8743 if (!(flags & flag))
8744 return true;
8745 if (wiphy_ext_feature_isset(wiphy, feat))
8746 return true;
8747 return false;
8748}
8749
2d23d073
RZ		 8750static int
8751nl80211_check_scan_flags(struct wiphy *wiphy, struct wireless_dev *wdev,
8752 void *request, struct nlattr **attrs,
8753 bool is_sched_scan)
8754{
8755 u8 *mac_addr, *mac_addr_mask;
8756 u32 *flags;
8757 enum nl80211_feature_flags randomness_flag;
8758
8759 if (!attrs[NL80211_ATTR_SCAN_FLAGS])
8760 return 0;
8761
8762 if (is_sched_scan) {
8763 struct cfg80211_sched_scan_request *req = request;
8764
8765 randomness_flag = wdev ?
8766 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR :
8767 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
8768 flags = &req->flags;
8769 mac_addr = req->mac_addr;
8770 mac_addr_mask = req->mac_addr_mask;
8771 } else {
8772 struct cfg80211_scan_request *req = request;
8773
8774 randomness_flag = NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
8775 flags = &req->flags;
8776 mac_addr = req->mac_addr;
8777 mac_addr_mask = req->mac_addr_mask;
8778 }
8779
8780 *flags = nla_get_u32(attrs[NL80211_ATTR_SCAN_FLAGS]);
8781
5037a009
SD		 8782 if (((*flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
8783 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
db0a4ad8
JB		 8784 !nl80211_check_scan_feat(wiphy, *flags,
8785 NL80211_SCAN_FLAG_LOW_SPAN,
8786 NL80211_EXT_FEATURE_LOW_SPAN_SCAN) ||
8787 !nl80211_check_scan_feat(wiphy, *flags,
8788 NL80211_SCAN_FLAG_LOW_POWER,
8789 NL80211_EXT_FEATURE_LOW_POWER_SCAN) ||
8790 !nl80211_check_scan_feat(wiphy, *flags,
8791 NL80211_SCAN_FLAG_HIGH_ACCURACY,
8792 NL80211_EXT_FEATURE_HIGH_ACCURACY_SCAN) ||
8793 !nl80211_check_scan_feat(wiphy, *flags,
8794 NL80211_SCAN_FLAG_FILS_MAX_CHANNEL_TIME,
8795 NL80211_EXT_FEATURE_FILS_MAX_CHANNEL_TIME) ||
8796 !nl80211_check_scan_feat(wiphy, *flags,
8797 NL80211_SCAN_FLAG_ACCEPT_BCAST_PROBE_RESP,
8798 NL80211_EXT_FEATURE_ACCEPT_BCAST_PROBE_RESP) ||
8799 !nl80211_check_scan_feat(wiphy, *flags,
8800 NL80211_SCAN_FLAG_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION,
8801 NL80211_EXT_FEATURE_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION) ||
8802 !nl80211_check_scan_feat(wiphy, *flags,
8803 NL80211_SCAN_FLAG_OCE_PROBE_REQ_HIGH_TX_RATE,
2e076f19
JB		 8804 NL80211_EXT_FEATURE_OCE_PROBE_REQ_HIGH_TX_RATE) ||
8805 !nl80211_check_scan_feat(wiphy, *flags,
8806 NL80211_SCAN_FLAG_RANDOM_SN,
8807 NL80211_EXT_FEATURE_SCAN_RANDOM_SN) ||
8808 !nl80211_check_scan_feat(wiphy, *flags,
8809 NL80211_SCAN_FLAG_MIN_PREQ_CONTENT,
8810 NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT))
2d23d073
RZ		 8811 return -EOPNOTSUPP;
8812
8813 if (*flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
8814 int err;
8815
8816 if (!(wiphy->features & randomness_flag) ||
7b0a0e3c 8817 (wdev && wdev->connected))
2d23d073
RZ		 8818 return -EOPNOTSUPP;
8819
8820 err = nl80211_parse_random_mac(attrs, mac_addr, mac_addr_mask);
8821 if (err)
8822 return err;
8823 }
8824
2d23d073
RZ		 8825 return 0;
8826}
8827
2a519311
JB		 8828static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
8829{
4c476991 8830 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 8831 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 8832 struct cfg80211_scan_request *request;
2032f3b2
TP		 8833 struct nlattr *scan_freqs = NULL;
8834 bool scan_freqs_khz = false;
2a519311
JB		 8835 struct nlattr *attr;
8836 struct wiphy *wiphy;
83f5e2cf 8837 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 8838 size_t ie_len;
2a519311 8839
79c97e97 8840 wiphy = &rdev->wiphy;
2a519311 8841
cb3b7d87
AB		 8842 if (wdev->iftype == NL80211_IFTYPE_NAN)
8843 return -EOPNOTSUPP;
8844
4c476991
JB		 8845 if (!rdev->ops->scan)
8846 return -EOPNOTSUPP;
2a519311 8847
83286856
CJ		 8848 if (rdev->scan_req || rdev->scan_msg)
8849 return -EBUSY;
2a519311 8850
2032f3b2
TP		 8851 if (info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ]) {
8852 if (!wiphy_ext_feature_isset(wiphy,
8853 NL80211_EXT_FEATURE_SCAN_FREQ_KHZ))
8854 return -EOPNOTSUPP;
8855 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ];
8856 scan_freqs_khz = true;
8857 } else if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES])
8858 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQUENCIES];
8859
8860 if (scan_freqs) {
8861 n_channels = validate_scan_freqs(scan_freqs);
83286856
CJ		 8862 if (!n_channels)
8863 return -EINVAL;
2a519311 8864 } else {
bdfbec2d 8865 n_channels = ieee80211_get_num_supported_channels(wiphy);
2a519311
JB		 8866 }
8867
8868 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
8869 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
8870 n_ssids++;
8871
83286856
CJ		 8872 if (n_ssids > wiphy->max_scan_ssids)
8873 return -EINVAL;
2a519311 8874
70692ad2
JM		 8875 if (info->attrs[NL80211_ATTR_IE])
8876 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
8877 else
8878 ie_len = 0;
8879
83286856
CJ		 8880 if (ie_len > wiphy->max_scan_ie_len)
8881 return -EINVAL;
18a83659 8882
2a519311 8883 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 8884 + sizeof(*request->ssids) * n_ssids
8885 + sizeof(*request->channels) * n_channels
70692ad2 8886 + ie_len, GFP_KERNEL);
83286856
CJ		 8887 if (!request)
8888 return -ENOMEM;
2a519311 8889
2a519311 8890 if (n_ssids)
5ba63533 8891 request->ssids = (void *)&request->channels[n_channels];
2a519311 8892 request->n_ssids = n_ssids;
70692ad2 8893 if (ie_len) {
13874e4b 8894 if (n_ssids)
70692ad2
JM		 8895 request->ie = (void *)(request->ssids + n_ssids);
8896 else
8897 request->ie = (void *)(request->channels + n_channels);
8898 }
2a519311 8899
584991dc 8900 i = 0;
2032f3b2 8901 if (scan_freqs) {
2a519311 8902 /* user specified, bail out if channel not found */
2032f3b2 8903 nla_for_each_nested(attr, scan_freqs, tmp) {
584991dc 8904 struct ieee80211_channel *chan;
2032f3b2 8905 int freq = nla_get_u32(attr);
584991dc 8906
2032f3b2
TP		 8907 if (!scan_freqs_khz)
8908 freq = MHZ_TO_KHZ(freq);
584991dc 8909
2032f3b2 8910 chan = ieee80211_get_channel_khz(wiphy, freq);
584991dc 8911 if (!chan) {
2a519311
JB		 8912 err = -EINVAL;
8913 goto out_free;
8914 }
584991dc
JB		 8915
8916 /* ignore disabled channels */
8917 if (chan->flags & IEEE80211_CHAN_DISABLED)
8918 continue;
8919
8920 request->channels[i] = chan;
2a519311
JB		 8921 i++;
8922 }
8923 } else {
57fbcce3 8924 enum nl80211_band band;
34850ab2 8925
2a519311 8926 /* all channels */
57fbcce3 8927 for (band = 0; band < NUM_NL80211_BANDS; band++) {
2a519311 8928 int j;
7a087e74 8929
2a519311
JB		 8930 if (!wiphy->bands[band])
8931 continue;
8932 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 8933 struct ieee80211_channel *chan;
8934
8935 chan = &wiphy->bands[band]->channels[j];
8936
8937 if (chan->flags & IEEE80211_CHAN_DISABLED)
8938 continue;
8939
8940 request->channels[i] = chan;
2a519311
JB		 8941 i++;
8942 }
8943 }
8944 }
8945
584991dc
JB		 8946 if (!i) {
8947 err = -EINVAL;
8948 goto out_free;
8949 }
8950
8951 request->n_channels = i;
8952
34373d12 8953 wdev_lock(wdev);
7b0a0e3c
JB		 8954 for (i = 0; i < request->n_channels; i++) {
8955 struct ieee80211_channel *chan = request->channels[i];
34373d12 8956
7b0a0e3c
JB		 8957 /* if we can go off-channel to the target channel we're good */
8958 if (cfg80211_off_channel_oper_allowed(wdev, chan))
8959 continue;
34373d12 8960
7b0a0e3c 8961 if (!cfg80211_wdev_on_sub_chan(wdev, chan, true)) {
34373d12
VT		 8962 wdev_unlock(wdev);
8963 err = -EBUSY;
8964 goto out_free;
8965 }
8966 }
8967 wdev_unlock(wdev);
8968
2a519311 8969 i = 0;
13874e4b 8970 if (n_ssids) {
2a519311 8971 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 8972 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 8973 err = -EINVAL;
8974 goto out_free;
8975 }
57a27e1d 8976 request->ssids[i].ssid_len = nla_len(attr);
2a519311 8977 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 8978 i++;
8979 }
8980 }
8981
70692ad2
JM		 8982 if (info->attrs[NL80211_ATTR_IE]) {
8983 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 8984 memcpy((void *)request->ie,
8985 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 8986 request->ie_len);
8987 }
8988
57fbcce3 8989 for (i = 0; i < NUM_NL80211_BANDS; i++)
a401d2bb
JB		 8990 if (wiphy->bands[i])
8991 request->rates[i] =
8992 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 8993
8994 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
8995 nla_for_each_nested(attr,
8996 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
8997 tmp) {
57fbcce3 8998 enum nl80211_band band = nla_type(attr);
34850ab2 8999
57fbcce3 9000 if (band < 0 || band >= NUM_NL80211_BANDS) {
34850ab2
JB		 9001 err = -EINVAL;
9002 goto out_free;
9003 }
1b09cd82
FF		 9004
9005 if (!wiphy->bands[band])
9006 continue;
9007
34850ab2
JB		 9008 err = ieee80211_get_ratemask(wiphy->bands[band],
9009 nla_data(attr),
9010 nla_len(attr),
9011 &request->rates[band]);
9012 if (err)
9013 goto out_free;
9014 }
9015 }
9016
1d76250b 9017 if (info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]) {
1d76250b
AS		 9018 request->duration =
9019 nla_get_u16(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]);
9020 request->duration_mandatory =
9021 nla_get_flag(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY]);
9022 }
9023
2d23d073
RZ		 9024 err = nl80211_check_scan_flags(wiphy, wdev, request, info->attrs,
9025 false);
9026 if (err)
9027 goto out_free;
ed473771 9028
e9f935e3
RM		 9029 request->no_cck =
9030 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
9031
2fa436b3
VK		 9032 /* Initial implementation used NL80211_ATTR_MAC to set the specific
9033 * BSSID to scan for. This was problematic because that same attribute
9034 * was already used for another purpose (local random MAC address). The
9035 * NL80211_ATTR_BSSID attribute was added to fix this. For backwards
9036 * compatibility with older userspace components, also use the
9037 * NL80211_ATTR_MAC value here if it can be determined to be used for
9038 * the specific BSSID use case instead of the random MAC address
9039 * (NL80211_ATTR_SCAN_FLAGS is used to enable random MAC address use).
9040 */
9041 if (info->attrs[NL80211_ATTR_BSSID])
9042 memcpy(request->bssid,
9043 nla_data(info->attrs[NL80211_ATTR_BSSID]), ETH_ALEN);
9044 else if (!(request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) &&
9045 info->attrs[NL80211_ATTR_MAC])
818965d3
JM		 9046 memcpy(request->bssid, nla_data(info->attrs[NL80211_ATTR_MAC]),
9047 ETH_ALEN);
9048 else
9049 eth_broadcast_addr(request->bssid);
9050
fd014284 9051 request->wdev = wdev;
79c97e97 9052 request->wiphy = &rdev->wiphy;
15d6030b 9053 request->scan_start = jiffies;
2a519311 9054
79c97e97 9055 rdev->scan_req = request;
c8cb5b85 9056 err = cfg80211_scan(rdev);
2a519311 9057
504776be
CJ		 9058 if (err)
9059 goto out_free;
9060
9061 nl80211_send_scan_start(rdev, wdev);
1160dfa1 9062 dev_hold(wdev->netdev);
504776be
CJ		 9063
9064 return 0;
9065
2a519311 9066 out_free:
504776be
CJ		 9067 rdev->scan_req = NULL;
9068 kfree(request);
3b85875a 9069
2a519311
JB		 9070 return err;
9071}
9072
91d3ab46
VK		 9073static int nl80211_abort_scan(struct sk_buff *skb, struct genl_info *info)
9074{
9075 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9076 struct wireless_dev *wdev = info->user_ptr[1];
9077
9078 if (!rdev->ops->abort_scan)
9079 return -EOPNOTSUPP;
9080
9081 if (rdev->scan_msg)
9082 return 0;
9083
9084 if (!rdev->scan_req)
9085 return -ENOENT;
9086
9087 rdev_abort_scan(rdev, wdev);
9088 return 0;
9089}
9090
3b06d277
AS		 9091static int
9092nl80211_parse_sched_scan_plans(struct wiphy *wiphy, int n_plans,
9093 struct cfg80211_sched_scan_request *request,
9094 struct nlattr **attrs)
9095{
9096 int tmp, err, i = 0;
9097 struct nlattr *attr;
9098
9099 if (!attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
9100 u32 interval;
9101
9102 /*
9103 * If scan plans are not specified,
5a88de53 9104 * %NL80211_ATTR_SCHED_SCAN_INTERVAL will be specified. In this
3b06d277
AS		 9105 * case one scan plan will be set with the specified scan
9106 * interval and infinite number of iterations.
9107 */
3b06d277
AS		 9108 interval = nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
9109 if (!interval)
9110 return -EINVAL;
9111
9112 request->scan_plans[0].interval =
9113 DIV_ROUND_UP(interval, MSEC_PER_SEC);
9114 if (!request->scan_plans[0].interval)
9115 return -EINVAL;
9116
9117 if (request->scan_plans[0].interval >
9118 wiphy->max_sched_scan_plan_interval)
9119 request->scan_plans[0].interval =
9120 wiphy->max_sched_scan_plan_interval;
9121
9122 return 0;
9123 }
9124
9125 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp) {
9126 struct nlattr *plan[NL80211_SCHED_SCAN_PLAN_MAX + 1];
9127
9128 if (WARN_ON(i >= n_plans))
9129 return -EINVAL;
9130
8cb08174
JB		 9131 err = nla_parse_nested_deprecated(plan,
9132 NL80211_SCHED_SCAN_PLAN_MAX,
9133 attr, nl80211_plan_policy,
9134 NULL);
3b06d277
AS		 9135 if (err)
9136 return err;
9137
9138 if (!plan[NL80211_SCHED_SCAN_PLAN_INTERVAL])
9139 return -EINVAL;
9140
9141 request->scan_plans[i].interval =
9142 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_INTERVAL]);
9143 if (!request->scan_plans[i].interval ||
9144 request->scan_plans[i].interval >
9145 wiphy->max_sched_scan_plan_interval)
9146 return -EINVAL;
9147
9148 if (plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]) {
9149 request->scan_plans[i].iterations =
9150 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]);
9151 if (!request->scan_plans[i].iterations ||
9152 (request->scan_plans[i].iterations >
9153 wiphy->max_sched_scan_plan_iterations))
9154 return -EINVAL;
9155 } else if (i < n_plans - 1) {
9156 /*
9157 * All scan plans but the last one must specify
9158 * a finite number of iterations
9159 */
9160 return -EINVAL;
9161 }
9162
9163 i++;
9164 }
9165
9166 /*
9167 * The last scan plan must not specify the number of
9168 * iterations, it is supposed to run infinitely
9169 */
9170 if (request->scan_plans[n_plans - 1].iterations)
9171 return -EINVAL;
9172
9173 return 0;
9174}
9175
1e1b11b6 9176static int
9177nl80211_parse_sched_scan_per_band_rssi(struct wiphy *wiphy,
9178 struct cfg80211_match_set *match_sets,
9179 struct nlattr *tb_band_rssi,
9180 s32 rssi_thold)
9181{
9182 struct nlattr *attr;
9183 int i, tmp, ret = 0;
9184
9185 if (!wiphy_ext_feature_isset(wiphy,
9186 NL80211_EXT_FEATURE_SCHED_SCAN_BAND_SPECIFIC_RSSI_THOLD)) {
9187 if (tb_band_rssi)
9188 ret = -EOPNOTSUPP;
9189 else
9190 for (i = 0; i < NUM_NL80211_BANDS; i++)
9191 match_sets->per_band_rssi_thold[i] =
9192 NL80211_SCAN_RSSI_THOLD_OFF;
9193 return ret;
9194 }
9195
9196 for (i = 0; i < NUM_NL80211_BANDS; i++)
9197 match_sets->per_band_rssi_thold[i] = rssi_thold;
9198
9199 nla_for_each_nested(attr, tb_band_rssi, tmp) {
9200 enum nl80211_band band = nla_type(attr);
9201
9202 if (band < 0 || band >= NUM_NL80211_BANDS)
9203 return -EINVAL;
9204
9205 match_sets->per_band_rssi_thold[band] = nla_get_s32(attr);
9206 }
9207
9208 return 0;
9209}
9210
256da02d 9211static struct cfg80211_sched_scan_request *
ad2b26ab 9212nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
aad1e812 9213 struct nlattr **attrs, int max_match_sets)
807f8a8c
LC		 9214{
9215 struct cfg80211_sched_scan_request *request;
807f8a8c 9216 struct nlattr *attr;
3b06d277 9217 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i, n_plans = 0;
57fbcce3 9218 enum nl80211_band band;
807f8a8c 9219 size_t ie_len;
a1f1c21c 9220 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
ea73cbce 9221 s32 default_match_rssi = NL80211_SCAN_RSSI_THOLD_OFF;
807f8a8c 9222
256da02d 9223 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c 9224 n_channels = validate_scan_freqs(
256da02d 9225 attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
807f8a8c 9226 if (!n_channels)
256da02d 9227 return ERR_PTR(-EINVAL);
807f8a8c 9228 } else {
bdfbec2d 9229 n_channels = ieee80211_get_num_supported_channels(wiphy);
807f8a8c
LC		 9230 }
9231
256da02d
LC		 9232 if (attrs[NL80211_ATTR_SCAN_SSIDS])
9233 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c
LC		 9234 tmp)
9235 n_ssids++;
9236
93b6aa69 9237 if (n_ssids > wiphy->max_sched_scan_ssids)
256da02d 9238 return ERR_PTR(-EINVAL);
807f8a8c 9239
ea73cbce
JB		 9240 /*
9241 * First, count the number of 'real' matchsets. Due to an issue with
9242 * the old implementation, matchsets containing only the RSSI attribute
9243 * (NL80211_SCHED_SCAN_MATCH_ATTR_RSSI) are considered as the 'default'
9244 * RSSI for all matchsets, rather than their own matchset for reporting
9245 * all APs with a strong RSSI. This is needed to be compatible with
9246 * older userspace that treated a matchset with only the RSSI as the
9247 * global RSSI for all other matchsets - if there are other matchsets.
9248 */
256da02d 9249 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 9250 nla_for_each_nested(attr,
256da02d 9251 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
ea73cbce
JB		 9252 tmp) {
9253 struct nlattr *rssi;
9254
8cb08174
JB		 9255 err = nla_parse_nested_deprecated(tb,
9256 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
9257 attr,
9258 nl80211_match_policy,
9259 NULL);
ea73cbce 9260 if (err)
256da02d 9261 return ERR_PTR(err);
3007e352
AVS		 9262
9263 /* SSID and BSSID are mutually exclusive */
9264 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] &&
9265 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID])
9266 return ERR_PTR(-EINVAL);
9267
ea73cbce 9268 /* add other standalone attributes here */
3007e352
AVS		 9269 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] ||
9270 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID]) {
ea73cbce
JB		 9271 n_match_sets++;
9272 continue;
9273 }
9274 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
9275 if (rssi)
9276 default_match_rssi = nla_get_s32(rssi);
9277 }
9278 }
9279
9280 /* However, if there's no other matchset, add the RSSI one */
9281 if (!n_match_sets && default_match_rssi != NL80211_SCAN_RSSI_THOLD_OFF)
9282 n_match_sets = 1;
a1f1c21c 9283
aad1e812 9284 if (n_match_sets > max_match_sets)
256da02d 9285 return ERR_PTR(-EINVAL);
a1f1c21c 9286
256da02d
LC		 9287 if (attrs[NL80211_ATTR_IE])
9288 ie_len = nla_len(attrs[NL80211_ATTR_IE]);
807f8a8c
LC		 9289 else
9290 ie_len = 0;
9291
5a865bad 9292 if (ie_len > wiphy->max_sched_scan_ie_len)
256da02d 9293 return ERR_PTR(-EINVAL);
c10841ca 9294
3b06d277
AS		 9295 if (attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
9296 /*
9297 * NL80211_ATTR_SCHED_SCAN_INTERVAL must not be specified since
9298 * each scan plan already specifies its own interval
9299 */
9300 if (attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
9301 return ERR_PTR(-EINVAL);
9302
9303 nla_for_each_nested(attr,
9304 attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp)
9305 n_plans++;
9306 } else {
9307 /*
9308 * The scan interval attribute is kept for backward
9309 * compatibility. If no scan plans are specified and sched scan
9310 * interval is specified, one scan plan will be set with this
9311 * scan interval and infinite number of iterations.
9312 */
9313 if (!attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
9314 return ERR_PTR(-EINVAL);
9315
9316 n_plans = 1;
9317 }
9318
9319 if (!n_plans || n_plans > wiphy->max_sched_scan_plans)
9320 return ERR_PTR(-EINVAL);
9321
bf95ecdb 9322 if (!wiphy_ext_feature_isset(
9323 wiphy, NL80211_EXT_FEATURE_SCHED_SCAN_RELATIVE_RSSI) &&
9324 (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] ||
9325 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]))
9326 return ERR_PTR(-EINVAL);
9327
807f8a8c 9328 request = kzalloc(sizeof(*request)
a2cd43c5 9329 + sizeof(*request->ssids) * n_ssids
a1f1c21c 9330 + sizeof(*request->match_sets) * n_match_sets
3b06d277 9331 + sizeof(*request->scan_plans) * n_plans
a2cd43c5 9332 + sizeof(*request->channels) * n_channels
807f8a8c 9333 + ie_len, GFP_KERNEL);
256da02d
LC		 9334 if (!request)
9335 return ERR_PTR(-ENOMEM);
807f8a8c
LC		 9336
9337 if (n_ssids)
9338 request->ssids = (void *)&request->channels[n_channels];
9339 request->n_ssids = n_ssids;
9340 if (ie_len) {
13874e4b 9341 if (n_ssids)
807f8a8c
LC		 9342 request->ie = (void *)(request->ssids + n_ssids);
9343 else
9344 request->ie = (void *)(request->channels + n_channels);
9345 }
9346
a1f1c21c
LC		 9347 if (n_match_sets) {
9348 if (request->ie)
9349 request->match_sets = (void *)(request->ie + ie_len);
13874e4b 9350 else if (n_ssids)
a1f1c21c
LC		 9351 request->match_sets =
9352 (void *)(request->ssids + n_ssids);
9353 else
9354 request->match_sets =
9355 (void *)(request->channels + n_channels);
9356 }
9357 request->n_match_sets = n_match_sets;
9358
3b06d277
AS		 9359 if (n_match_sets)
9360 request->scan_plans = (void *)(request->match_sets +
9361 n_match_sets);
9362 else if (request->ie)
9363 request->scan_plans = (void *)(request->ie + ie_len);
9364 else if (n_ssids)
9365 request->scan_plans = (void *)(request->ssids + n_ssids);
9366 else
9367 request->scan_plans = (void *)(request->channels + n_channels);
9368
9369 request->n_scan_plans = n_plans;
9370
807f8a8c 9371 i = 0;
256da02d 9372 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c
LC		 9373 /* user specified, bail out if channel not found */
9374 nla_for_each_nested(attr,
256da02d 9375 attrs[NL80211_ATTR_SCAN_FREQUENCIES],
807f8a8c
LC		 9376 tmp) {
9377 struct ieee80211_channel *chan;
9378
9379 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
9380
9381 if (!chan) {
9382 err = -EINVAL;
9383 goto out_free;
9384 }
9385
9386 /* ignore disabled channels */
9387 if (chan->flags & IEEE80211_CHAN_DISABLED)
9388 continue;
9389
9390 request->channels[i] = chan;
9391 i++;
9392 }
9393 } else {
9394 /* all channels */
57fbcce3 9395 for (band = 0; band < NUM_NL80211_BANDS; band++) {
807f8a8c 9396 int j;
7a087e74 9397
807f8a8c
LC		 9398 if (!wiphy->bands[band])
9399 continue;
9400 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
9401 struct ieee80211_channel *chan;
9402
9403 chan = &wiphy->bands[band]->channels[j];
9404
9405 if (chan->flags & IEEE80211_CHAN_DISABLED)
9406 continue;
9407
9408 request->channels[i] = chan;
9409 i++;
9410 }
9411 }
9412 }
9413
9414 if (!i) {
9415 err = -EINVAL;
9416 goto out_free;
9417 }
9418
9419 request->n_channels = i;
9420
9421 i = 0;
13874e4b 9422 if (n_ssids) {
256da02d 9423 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c 9424 tmp) {
57a27e1d 9425 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 9426 err = -EINVAL;
9427 goto out_free;
9428 }
57a27e1d 9429 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 9430 memcpy(request->ssids[i].ssid, nla_data(attr),
9431 nla_len(attr));
807f8a8c
LC		 9432 i++;
9433 }
9434 }
9435
a1f1c21c 9436 i = 0;
256da02d 9437 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 9438 nla_for_each_nested(attr,
256da02d 9439 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
a1f1c21c 9440 tmp) {
3007e352 9441 struct nlattr *ssid, *bssid, *rssi;
a1f1c21c 9442
8cb08174
JB		 9443 err = nla_parse_nested_deprecated(tb,
9444 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
9445 attr,
9446 nl80211_match_policy,
9447 NULL);
ae811e21
JB		 9448 if (err)
9449 goto out_free;
4a4ab0d7 9450 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
3007e352 9451 bssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID];
d39f3b4f
JB		 9452
9453 if (!ssid && !bssid) {
9454 i++;
9455 continue;
9456 }
9457
9458 if (WARN_ON(i >= n_match_sets)) {
9459 /* this indicates a programming error,
9460 * the loop above should have verified
9461 * things properly
9462 */
9463 err = -EINVAL;
9464 goto out_free;
9465 }
9466
9467 if (ssid) {
d39f3b4f
JB		 9468 memcpy(request->match_sets[i].ssid.ssid,
9469 nla_data(ssid), nla_len(ssid));
9470 request->match_sets[i].ssid.ssid_len =
9471 nla_len(ssid);
9472 }
cb9abd48 9473 if (bssid)
d39f3b4f
JB		 9474 memcpy(request->match_sets[i].bssid,
9475 nla_data(bssid), ETH_ALEN);
3007e352 9476
d39f3b4f
JB		 9477 /* special attribute - old implementation w/a */
9478 request->match_sets[i].rssi_thold = default_match_rssi;
9479 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
9480 if (rssi)
ea73cbce 9481 request->match_sets[i].rssi_thold =
d39f3b4f 9482 nla_get_s32(rssi);
1e1b11b6 9483
9484 /* Parse per band RSSI attribute */
9485 err = nl80211_parse_sched_scan_per_band_rssi(wiphy,
9486 &request->match_sets[i],
9487 tb[NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI],
9488 request->match_sets[i].rssi_thold);
9489 if (err)
9490 goto out_free;
9491
a1f1c21c
LC		 9492 i++;
9493 }
ea73cbce
JB		 9494
9495 /* there was no other matchset, so the RSSI one is alone */
f89f46cf 9496 if (i == 0 && n_match_sets)
ea73cbce
JB		 9497 request->match_sets[0].rssi_thold = default_match_rssi;
9498
9499 request->min_rssi_thold = INT_MAX;
9500 for (i = 0; i < n_match_sets; i++)
9501 request->min_rssi_thold =
9502 min(request->match_sets[i].rssi_thold,
9503 request->min_rssi_thold);
9504 } else {
9505 request->min_rssi_thold = NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 9506 }
9507
9900e484
JB		 9508 if (ie_len) {
9509 request->ie_len = ie_len;
807f8a8c 9510 memcpy((void *)request->ie,
256da02d 9511 nla_data(attrs[NL80211_ATTR_IE]),
807f8a8c
LC		 9512 request->ie_len);
9513 }
9514
2d23d073
RZ		 9515 err = nl80211_check_scan_flags(wiphy, wdev, request, attrs, true);
9516 if (err)
9517 goto out_free;
ed473771 9518
9c748934
LC		 9519 if (attrs[NL80211_ATTR_SCHED_SCAN_DELAY])
9520 request->delay =
9521 nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_DELAY]);
9522
bf95ecdb 9523 if (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]) {
9524 request->relative_rssi = nla_get_s8(
9525 attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]);
9526 request->relative_rssi_set = true;
9527 }
9528
9529 if (request->relative_rssi_set &&
9530 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]) {
9531 struct nl80211_bss_select_rssi_adjust *rssi_adjust;
9532
9533 rssi_adjust = nla_data(
9534 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]);
9535 request->rssi_adjust.band = rssi_adjust->band;
9536 request->rssi_adjust.delta = rssi_adjust->delta;
9537 if (!is_band_valid(wiphy, request->rssi_adjust.band)) {
9538 err = -EINVAL;
9539 goto out_free;
9540 }
9541 }
9542
3b06d277
AS		 9543 err = nl80211_parse_sched_scan_plans(wiphy, n_plans, request, attrs);
9544 if (err)
9545 goto out_free;
9546
15d6030b 9547 request->scan_start = jiffies;
807f8a8c 9548
256da02d 9549 return request;
807f8a8c
LC		 9550
9551out_free:
9552 kfree(request);
256da02d
LC		 9553 return ERR_PTR(err);
9554}
9555
9556static int nl80211_start_sched_scan(struct sk_buff *skb,
9557 struct genl_info *info)
9558{
9559 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9560 struct net_device *dev = info->user_ptr[1];
ad2b26ab 9561 struct wireless_dev *wdev = dev->ieee80211_ptr;
31a60ed1 9562 struct cfg80211_sched_scan_request *sched_scan_req;
ca986ad9 9563 bool want_multi;
256da02d
LC		 9564 int err;
9565
ca986ad9 9566 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_start)
256da02d
LC		 9567 return -EOPNOTSUPP;
9568
ca986ad9
AVS		 9569 want_multi = info->attrs[NL80211_ATTR_SCHED_SCAN_MULTI];
9570 err = cfg80211_sched_scan_req_possible(rdev, want_multi);
9571 if (err)
9572 return err;
256da02d 9573
31a60ed1 9574 sched_scan_req = nl80211_parse_sched_scan(&rdev->wiphy, wdev,
aad1e812
AVS		 9575 info->attrs,
9576 rdev->wiphy.max_match_sets);
31a60ed1
JR		 9577
9578 err = PTR_ERR_OR_ZERO(sched_scan_req);
256da02d
LC		 9579 if (err)
9580 goto out_err;
9581
ca986ad9
AVS		 9582 /* leave request id zero for legacy request
9583 * or if driver does not support multi-scheduled scan
9584 */
2fd351a8
DK		 9585 if (want_multi && rdev->wiphy.max_sched_scan_reqs > 1)
9586 sched_scan_req->reqid = cfg80211_assign_cookie(rdev);
ca986ad9 9587
31a60ed1 9588 err = rdev_sched_scan_start(rdev, dev, sched_scan_req);
256da02d
LC		 9589 if (err)
9590 goto out_free;
9591
31a60ed1
JR		 9592 sched_scan_req->dev = dev;
9593 sched_scan_req->wiphy = &rdev->wiphy;
9594
93a1e86c
JR		 9595 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
9596 sched_scan_req->owner_nlportid = info->snd_portid;
9597
ca986ad9 9598 cfg80211_add_sched_scan_req(rdev, sched_scan_req);
256da02d 9599
96b08fd6 9600 nl80211_send_sched_scan(sched_scan_req, NL80211_CMD_START_SCHED_SCAN);
256da02d
LC		 9601 return 0;
9602
9603out_free:
31a60ed1 9604 kfree(sched_scan_req);
256da02d 9605out_err:
807f8a8c
LC		 9606 return err;
9607}
9608
9609static int nl80211_stop_sched_scan(struct sk_buff *skb,
9610 struct genl_info *info)
9611{
ca986ad9 9612 struct cfg80211_sched_scan_request *req;
807f8a8c 9613 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ca986ad9 9614 u64 cookie;
807f8a8c 9615
ca986ad9 9616 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_stop)
807f8a8c
LC		 9617 return -EOPNOTSUPP;
9618
ca986ad9
AVS		 9619 if (info->attrs[NL80211_ATTR_COOKIE]) {
9620 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
9621 return __cfg80211_stop_sched_scan(rdev, cookie, false);
9622 }
9623
9624 req = list_first_or_null_rcu(&rdev->sched_scan_req_list,
9625 struct cfg80211_sched_scan_request,
9626 list);
9627 if (!req || req->reqid ||
9628 (req->owner_nlportid &&
9629 req->owner_nlportid != info->snd_portid))
9630 return -ENOENT;
9631
9632 return cfg80211_stop_sched_scan_req(rdev, req, false);
807f8a8c
LC		 9633}
9634
04f39047
SW		 9635static int nl80211_start_radar_detection(struct sk_buff *skb,
9636 struct genl_info *info)
9637{
9638 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9639 struct net_device *dev = info->user_ptr[1];
9640 struct wireless_dev *wdev = dev->ieee80211_ptr;
13cf6dec 9641 struct wiphy *wiphy = wdev->wiphy;
04f39047 9642 struct cfg80211_chan_def chandef;
55f7435c 9643 enum nl80211_dfs_regions dfs_region;
31559f35 9644 unsigned int cac_time_ms;
84158164
LB		 9645 int err = -EINVAL;
9646
9647 flush_delayed_work(&rdev->dfs_update_channels_wk);
9648
9649 wiphy_lock(wiphy);
04f39047 9650
13cf6dec 9651 dfs_region = reg_get_dfs_region(wiphy);
55f7435c 9652 if (dfs_region == NL80211_DFS_UNSET)
84158164 9653 goto unlock;
55f7435c 9654
04f39047
SW		 9655 err = nl80211_parse_chandef(rdev, info, &chandef);
9656 if (err)
84158164 9657 goto unlock;
04f39047 9658
13cf6dec 9659 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
04f39047 9660 if (err < 0)
84158164 9661 goto unlock;
04f39047 9662
84158164
LB		 9663 if (err == 0) {
9664 err = -EINVAL;
9665 goto unlock;
9666 }
04f39047 9667
84158164
LB		 9668 if (!cfg80211_chandef_dfs_usable(wiphy, &chandef)) {
9669 err = -EINVAL;
9670 goto unlock;
9671 }
04f39047 9672
a95bfb87
LB		 9673 if (nla_get_flag(info->attrs[NL80211_ATTR_RADAR_BACKGROUND])) {
9674 err = cfg80211_start_background_radar_detection(rdev, wdev,
9675 &chandef);
84158164
LB		 9676 goto unlock;
9677 }
bc2dfc02 9678
84158164
LB		 9679 if (netif_carrier_ok(dev)) {
9680 err = -EBUSY;
9681 goto unlock;
9682 }
bc2dfc02 9683
84158164
LB		 9684 if (wdev->cac_started) {
9685 err = -EBUSY;
9686 goto unlock;
9687 }
bc2dfc02 9688
13cf6dec 9689 /* CAC start is offloaded to HW and can't be started manually */
84158164
LB		 9690 if (wiphy_ext_feature_isset(wiphy, NL80211_EXT_FEATURE_DFS_OFFLOAD)) {
9691 err = -EOPNOTSUPP;
9692 goto unlock;
9693 }
13cf6dec 9694
84158164
LB		 9695 if (!rdev->ops->start_radar_detection) {
9696 err = -EOPNOTSUPP;
9697 goto unlock;
9698 }
04f39047 9699
31559f35
JD		 9700 cac_time_ms = cfg80211_chandef_dfs_cac_time(&rdev->wiphy, &chandef);
9701 if (WARN_ON(!cac_time_ms))
9702 cac_time_ms = IEEE80211_DFS_MIN_CAC_TIME_MS;
9703
a1056b1b 9704 err = rdev_start_radar_detection(rdev, dev, &chandef, cac_time_ms);
04f39047 9705 if (!err) {
7b0a0e3c 9706 wdev->links[0].ap.chandef = chandef;
04f39047
SW		 9707 wdev->cac_started = true;
9708 wdev->cac_start_time = jiffies;
31559f35 9709 wdev->cac_time_ms = cac_time_ms;
04f39047 9710 }
84158164
LB		 9711unlock:
9712 wiphy_unlock(wiphy);
9713
04f39047
SW		 9714 return err;
9715}
9716
30c63115
S		 9717static int nl80211_notify_radar_detection(struct sk_buff *skb,
9718 struct genl_info *info)
9719{
9720 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9721 struct net_device *dev = info->user_ptr[1];
9722 struct wireless_dev *wdev = dev->ieee80211_ptr;
9723 struct wiphy *wiphy = wdev->wiphy;
9724 struct cfg80211_chan_def chandef;
9725 enum nl80211_dfs_regions dfs_region;
9726 int err;
9727
9728 dfs_region = reg_get_dfs_region(wiphy);
9729 if (dfs_region == NL80211_DFS_UNSET) {
9730 GENL_SET_ERR_MSG(info,
9731 "DFS Region is not set. Unexpected Radar indication");
9732 return -EINVAL;
9733 }
9734
9735 err = nl80211_parse_chandef(rdev, info, &chandef);
9736 if (err) {
9737 GENL_SET_ERR_MSG(info, "Unable to extract chandef info");
9738 return err;
9739 }
9740
9741 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
9742 if (err < 0) {
9743 GENL_SET_ERR_MSG(info, "chandef is invalid");
9744 return err;
9745 }
9746
9747 if (err == 0) {
9748 GENL_SET_ERR_MSG(info,
9749 "Unexpected Radar indication for chandef/iftype");
9750 return -EINVAL;
9751 }
9752
9753 /* Do not process this notification if radar is already detected
9754 * by kernel on this channel, and return success.
9755 */
9756 if (chandef.chan->dfs_state == NL80211_DFS_UNAVAILABLE)
9757 return 0;
9758
9759 cfg80211_set_dfs_state(wiphy, &chandef, NL80211_DFS_UNAVAILABLE);
9760
9761 cfg80211_sched_dfs_chan_update(rdev);
9762
a680fe46 9763 rdev->radar_chandef = chandef;
30c63115
S		 9764
9765 /* Propagate this notification to other radios as well */
9766 queue_work(cfg80211_wq, &rdev->propagate_radar_detect_wk);
9767
9768 return 0;
9769}
9770
16ef1fe2
SW		 9771static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
9772{
9773 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 9774 unsigned int link_id = nl80211_link_id(info->attrs);
16ef1fe2
SW		 9775 struct net_device *dev = info->user_ptr[1];
9776 struct wireless_dev *wdev = dev->ieee80211_ptr;
9777 struct cfg80211_csa_settings params;
a05829a7 9778 struct nlattr **csa_attrs = NULL;
16ef1fe2 9779 int err;
ee4bc9e7 9780 bool need_new_beacon = false;
8d9de16f 9781 bool need_handle_dfs_flag = true;
9a774c78 9782 int len, i;
252e07ca 9783 u32 cs_count;
16ef1fe2
SW		 9784
9785 if (!rdev->ops->channel_switch ||
9786 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH))
9787 return -EOPNOTSUPP;
9788
ee4bc9e7
SW		 9789 switch (dev->ieee80211_ptr->iftype) {
9790 case NL80211_IFTYPE_AP:
9791 case NL80211_IFTYPE_P2P_GO:
9792 need_new_beacon = true;
8d9de16f
BB		 9793 /* For all modes except AP the handle_dfs flag needs to be
9794 * supplied to tell the kernel that userspace will handle radar
9795 * events when they happen. Otherwise a switch to a channel
9796 * requiring DFS will be rejected.
9797 */
9798 need_handle_dfs_flag = false;
ee4bc9e7
SW		 9799
9800 /* useless if AP is not running */
7b0a0e3c 9801 if (!wdev->links[link_id].ap.beacon_interval)
1ff79dfa 9802 return -ENOTCONN;
ee4bc9e7
SW		 9803 break;
9804 case NL80211_IFTYPE_ADHOC:
7b0a0e3c 9805 if (!wdev->u.ibss.ssid_len)
1ff79dfa
JB		 9806 return -ENOTCONN;
9807 break;
c6da674a 9808 case NL80211_IFTYPE_MESH_POINT:
7b0a0e3c 9809 if (!wdev->u.mesh.id_len)
1ff79dfa 9810 return -ENOTCONN;
ee4bc9e7
SW		 9811 break;
9812 default:
16ef1fe2 9813 return -EOPNOTSUPP;
ee4bc9e7 9814 }
16ef1fe2
SW		 9815
9816 memset(&params, 0, sizeof(params));
c177db2d 9817 params.beacon_csa.ftm_responder = -1;
16ef1fe2
SW		 9818
9819 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
9820 !info->attrs[NL80211_ATTR_CH_SWITCH_COUNT])
9821 return -EINVAL;
9822
9823 /* only important for AP, IBSS and mesh create IEs internally */
d0a361a5 9824 if (need_new_beacon && !info->attrs[NL80211_ATTR_CSA_IES])
16ef1fe2
SW		 9825 return -EINVAL;
9826
252e07ca
LC		 9827 /* Even though the attribute is u32, the specification says
9828 * u8, so let's make sure we don't overflow.
9829 */
9830 cs_count = nla_get_u32(info->attrs[NL80211_ATTR_CH_SWITCH_COUNT]);
9831 if (cs_count > 255)
9832 return -EINVAL;
9833
9834 params.count = cs_count;
16ef1fe2 9835
ee4bc9e7
SW		 9836 if (!need_new_beacon)
9837 goto skip_beacons;
9838
81e54d08 9839 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_after);
16ef1fe2 9840 if (err)
dc1e3cb8 9841 goto free;
16ef1fe2 9842
a05829a7
JB		 9843 csa_attrs = kcalloc(NL80211_ATTR_MAX + 1, sizeof(*csa_attrs),
9844 GFP_KERNEL);
dc1e3cb8
JC		 9845 if (!csa_attrs) {
9846 err = -ENOMEM;
9847 goto free;
9848 }
a05829a7 9849
8cb08174
JB		 9850 err = nla_parse_nested_deprecated(csa_attrs, NL80211_ATTR_MAX,
9851 info->attrs[NL80211_ATTR_CSA_IES],
9852 nl80211_policy, info->extack);
16ef1fe2 9853 if (err)
a05829a7 9854 goto free;
16ef1fe2 9855
81e54d08 9856 err = nl80211_parse_beacon(rdev, csa_attrs, &params.beacon_csa);
16ef1fe2 9857 if (err)
a05829a7 9858 goto free;
16ef1fe2 9859
a05829a7
JB		 9860 if (!csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]) {
9861 err = -EINVAL;
9862 goto free;
9863 }
16ef1fe2 9864
00c207ed 9865 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
a05829a7
JB		 9866 if (!len || (len % sizeof(u16))) {
9867 err = -EINVAL;
9868 goto free;
9869 }
16ef1fe2 9870
9a774c78
AO		 9871 params.n_counter_offsets_beacon = len / sizeof(u16);
9872 if (rdev->wiphy.max_num_csa_counters &&
9873 (params.n_counter_offsets_beacon >
a05829a7
JB		 9874 rdev->wiphy.max_num_csa_counters)) {
9875 err = -EINVAL;
9876 goto free;
9877 }
16ef1fe2 9878
9a774c78 9879 params.counter_offsets_beacon =
00c207ed 9880 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
9a774c78
AO		 9881
9882 /* sanity checks - counters should fit and be the same */
9883 for (i = 0; i < params.n_counter_offsets_beacon; i++) {
9884 u16 offset = params.counter_offsets_beacon[i];
9885
a05829a7
JB		 9886 if (offset >= params.beacon_csa.tail_len) {
9887 err = -EINVAL;
9888 goto free;
9889 }
9a774c78 9890
a05829a7
JB		 9891 if (params.beacon_csa.tail[offset] != params.count) {
9892 err = -EINVAL;
9893 goto free;
9894 }
9a774c78
AO		 9895 }
9896
00c207ed
JC		 9897 if (csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]) {
9898 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
a05829a7
JB		 9899 if (!len || (len % sizeof(u16))) {
9900 err = -EINVAL;
9901 goto free;
9902 }
16ef1fe2 9903
9a774c78
AO		 9904 params.n_counter_offsets_presp = len / sizeof(u16);
9905 if (rdev->wiphy.max_num_csa_counters &&
ad5987b4 9906 (params.n_counter_offsets_presp >
a05829a7
JB		 9907 rdev->wiphy.max_num_csa_counters)) {
9908 err = -EINVAL;
9909 goto free;
9910 }
9a774c78
AO		 9911
9912 params.counter_offsets_presp =
00c207ed 9913 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
9a774c78
AO		 9914
9915 /* sanity checks - counters should fit and be the same */
9916 for (i = 0; i < params.n_counter_offsets_presp; i++) {
9917 u16 offset = params.counter_offsets_presp[i];
9918
a05829a7
JB		 9919 if (offset >= params.beacon_csa.probe_resp_len) {
9920 err = -EINVAL;
9921 goto free;
9922 }
9a774c78
AO		 9923
9924 if (params.beacon_csa.probe_resp[offset] !=
a05829a7
JB		 9925 params.count) {
9926 err = -EINVAL;
9927 goto free;
9928 }
9a774c78 9929 }
16ef1fe2
SW		 9930 }
9931
ee4bc9e7 9932skip_beacons:
16ef1fe2
SW		 9933 err = nl80211_parse_chandef(rdev, info, &params.chandef);
9934 if (err)
a05829a7 9935 goto free;
16ef1fe2 9936
923b352f 9937 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
a05829a7
JB		 9938 wdev->iftype)) {
9939 err = -EINVAL;
9940 goto free;
9941 }
16ef1fe2 9942
2beb6dab
LC		 9943 err = cfg80211_chandef_dfs_required(wdev->wiphy,
9944 &params.chandef,
9945 wdev->iftype);
9946 if (err < 0)
a05829a7 9947 goto free;
2beb6dab 9948
8d9de16f 9949 if (err > 0) {
2beb6dab 9950 params.radar_required = true;
8d9de16f
BB		 9951 if (need_handle_dfs_flag &&
9952 !nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS])) {
a05829a7
JB		 9953 err = -EINVAL;
9954 goto free;
8d9de16f
BB		 9955 }
9956 }
16ef1fe2 9957
16ef1fe2
SW		 9958 if (info->attrs[NL80211_ATTR_CH_SWITCH_BLOCK_TX])
9959 params.block_tx = true;
9960
c56589ed
SW		 9961 wdev_lock(wdev);
9962 err = rdev_channel_switch(rdev, dev, &params);
9963 wdev_unlock(wdev);
9964
a05829a7 9965free:
dc1e3cb8
JC		 9966 kfree(params.beacon_after.mbssid_ies);
9967 kfree(params.beacon_csa.mbssid_ies);
a05829a7 9968 kfree(csa_attrs);
c56589ed 9969 return err;
16ef1fe2
SW		 9970}
9971
9720bb3a
JB		 9972static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
9973 u32 seq, int flags,
2a519311 9974 struct cfg80211_registered_device *rdev,
48ab905d
JB		 9975 struct wireless_dev *wdev,
9976 struct cfg80211_internal_bss *intbss)
2a519311 9977{
48ab905d 9978 struct cfg80211_bss *res = &intbss->pub;
9caf0364 9979 const struct cfg80211_bss_ies *ies;
7b0a0e3c 9980 unsigned int link_id;
2a519311
JB		 9981 void *hdr;
9982 struct nlattr *bss;
48ab905d
JB		 9983
9984 ASSERT_WDEV_LOCK(wdev);
2a519311 9985
15e47304 9986 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 9987 NL80211_CMD_NEW_SCAN_RESULTS);
9988 if (!hdr)
9989 return -1;
9990
0a833c29 9991 genl_dump_check_consistent(cb, hdr);
9720bb3a 9992
97990a06
JB		 9993 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation))
9994 goto nla_put_failure;
9995 if (wdev->netdev &&
9360ffd1
DM		 9996 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
9997 goto nla_put_failure;
2dad624e
ND		 9998 if (nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
9999 NL80211_ATTR_PAD))
97990a06 10000 goto nla_put_failure;
2a519311 10001
ae0be8de 10002 bss = nla_nest_start_noflag(msg, NL80211_ATTR_BSS);
2a519311
JB		 10003 if (!bss)
10004 goto nla_put_failure;
9360ffd1 10005 if ((!is_zero_ether_addr(res->bssid) &&
9caf0364 10006 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
9360ffd1 10007 goto nla_put_failure;
9caf0364
JB		 10008
10009 rcu_read_lock();
0e227084
JB		 10010 /* indicate whether we have probe response data or not */
10011 if (rcu_access_pointer(res->proberesp_ies) &&
10012 nla_put_flag(msg, NL80211_BSS_PRESP_DATA))
10013 goto fail_unlock_rcu;
10014
10015 /* this pointer prefers to be pointed to probe response data
10016 * but is always valid
10017 */
9caf0364 10018 ies = rcu_dereference(res->ies);
8cef2c9d 10019 if (ies) {
2dad624e
ND		 10020 if (nla_put_u64_64bit(msg, NL80211_BSS_TSF, ies->tsf,
10021 NL80211_BSS_PAD))
8cef2c9d 10022 goto fail_unlock_rcu;
8cef2c9d
JB		 10023 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
10024 ies->len, ies->data))
10025 goto fail_unlock_rcu;
9caf0364 10026 }
0e227084
JB		 10027
10028 /* and this pointer is always (unless driver didn't know) beacon data */
9caf0364 10029 ies = rcu_dereference(res->beacon_ies);
0e227084 10030 if (ies && ies->from_beacon) {
2dad624e
ND		 10031 if (nla_put_u64_64bit(msg, NL80211_BSS_BEACON_TSF, ies->tsf,
10032 NL80211_BSS_PAD))
8cef2c9d
JB		 10033 goto fail_unlock_rcu;
10034 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
10035 ies->len, ies->data))
10036 goto fail_unlock_rcu;
9caf0364
JB		 10037 }
10038 rcu_read_unlock();
10039
9360ffd1
DM		 10040 if (res->beacon_interval &&
10041 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
10042 goto nla_put_failure;
10043 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
10044 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
942ba88b
TP		 10045 nla_put_u32(msg, NL80211_BSS_FREQUENCY_OFFSET,
10046 res->channel->freq_offset) ||
dcd6eac1 10047 nla_put_u32(msg, NL80211_BSS_CHAN_WIDTH, res->scan_width) ||
9360ffd1
DM		 10048 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
10049 jiffies_to_msecs(jiffies - intbss->ts)))
10050 goto nla_put_failure;
2a519311 10051
1d76250b
AS		 10052 if (intbss->parent_tsf &&
10053 (nla_put_u64_64bit(msg, NL80211_BSS_PARENT_TSF,
10054 intbss->parent_tsf, NL80211_BSS_PAD) ||
10055 nla_put(msg, NL80211_BSS_PARENT_BSSID, ETH_ALEN,
10056 intbss->parent_bssid)))
10057 goto nla_put_failure;
10058
6e19bc4b 10059 if (intbss->ts_boottime &&
2dad624e
ND		 10060 nla_put_u64_64bit(msg, NL80211_BSS_LAST_SEEN_BOOTTIME,
10061 intbss->ts_boottime, NL80211_BSS_PAD))
6e19bc4b
DS		 10062 goto nla_put_failure;
10063
983dafaa
SD		 10064 if (!nl80211_put_signal(msg, intbss->pub.chains,
10065 intbss->pub.chain_signal,
10066 NL80211_BSS_CHAIN_SIGNAL))
10067 goto nla_put_failure;
10068
77965c97 10069 switch (rdev->wiphy.signal_type) {
2a519311 10070 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 10071 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
10072 goto nla_put_failure;
2a519311
JB		 10073 break;
10074 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 10075 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
10076 goto nla_put_failure;
2a519311
JB		 10077 break;
10078 default:
10079 break;
10080 }
10081
48ab905d 10082 switch (wdev->iftype) {
074ac8df 10083 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 10084 case NL80211_IFTYPE_STATION:
7b0a0e3c
JB		 10085 for_each_valid_link(wdev, link_id) {
10086 if (intbss == wdev->links[link_id].client.current_bss &&
dd374f84
JB		 10087 (nla_put_u32(msg, NL80211_BSS_STATUS,
10088 NL80211_BSS_STATUS_ASSOCIATED) ||
10089 (wdev->valid_links &&
3c512307
VJ		 10090 nla_put_u8(msg, NL80211_BSS_MLO_LINK_ID,
10091 link_id))))
7b0a0e3c
JB		 10092 goto nla_put_failure;
10093 }
48ab905d
JB		 10094 break;
10095 case NL80211_IFTYPE_ADHOC:
7b0a0e3c 10096 if (intbss == wdev->u.ibss.current_bss &&
9360ffd1
DM		 10097 nla_put_u32(msg, NL80211_BSS_STATUS,
10098 NL80211_BSS_STATUS_IBSS_JOINED))
10099 goto nla_put_failure;
48ab905d
JB		 10100 break;
10101 default:
10102 break;
10103 }
10104
2a519311
JB		 10105 nla_nest_end(msg, bss);
10106
053c095a
JB		 10107 genlmsg_end(msg, hdr);
10108 return 0;
2a519311 10109
8cef2c9d
JB		 10110 fail_unlock_rcu:
10111 rcu_read_unlock();
2a519311
JB		 10112 nla_put_failure:
10113 genlmsg_cancel(msg, hdr);
10114 return -EMSGSIZE;
10115}
10116
97990a06 10117static int nl80211_dump_scan(struct sk_buff *skb, struct netlink_callback *cb)
2a519311 10118{
48ab905d 10119 struct cfg80211_registered_device *rdev;
2a519311 10120 struct cfg80211_internal_bss *scan;
48ab905d 10121 struct wireless_dev *wdev;
97990a06 10122 int start = cb->args[2], idx = 0;
2a519311
JB		 10123 int err;
10124
ce6b6974 10125 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
a05829a7 10126 if (err)
67748893 10127 return err;
a05829a7
JB		 10128 /* nl80211_prepare_wdev_dump acquired it in the successful case */
10129 __acquire(&rdev->wiphy.mtx);
2a519311 10130
48ab905d
JB		 10131 wdev_lock(wdev);
10132 spin_lock_bh(&rdev->bss_lock);
d1e23c94
DK		 10133
10134 /*
10135 * dump_scan will be called multiple times to break up the scan results
10136 * into multiple messages. It is unlikely that any more bss-es will be
10137 * expired after the first call, so only call only call this on the
10138 * first dump_scan invocation.
10139 */
10140 if (start == 0)
10141 cfg80211_bss_expire(rdev);
48ab905d 10142
9720bb3a
JB		 10143 cb->seq = rdev->bss_generation;
10144
48ab905d 10145 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 10146 if (++idx <= start)
10147 continue;
9720bb3a 10148 if (nl80211_send_bss(skb, cb,
2a519311 10149 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 10150 rdev, wdev, scan) < 0) {
2a519311 10151 idx--;
67748893 10152 break;
2a519311
JB		 10153 }
10154 }
10155
48ab905d
JB		 10156 spin_unlock_bh(&rdev->bss_lock);
10157 wdev_unlock(wdev);
2a519311 10158
97990a06 10159 cb->args[2] = idx;
a05829a7 10160 wiphy_unlock(&rdev->wiphy);
2a519311 10161
67748893 10162 return skb->len;
2a519311
JB		 10163}
10164
15e47304 10165static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
11f78ac3
JB		 10166 int flags, struct net_device *dev,
10167 bool allow_radio_stats,
10168 struct survey_info *survey)
61fa713c
HS		 10169{
10170 void *hdr;
10171 struct nlattr *infoattr;
10172
11f78ac3
JB		 10173 /* skip radio stats if userspace didn't request them */
10174 if (!survey->channel && !allow_radio_stats)
10175 return 0;
10176
15e47304 10177 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 10178 NL80211_CMD_NEW_SURVEY_RESULTS);
10179 if (!hdr)
10180 return -ENOMEM;
10181
9360ffd1
DM		 10182 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
10183 goto nla_put_failure;
61fa713c 10184
ae0be8de 10185 infoattr = nla_nest_start_noflag(msg, NL80211_ATTR_SURVEY_INFO);
61fa713c
HS		 10186 if (!infoattr)
10187 goto nla_put_failure;
10188
11f78ac3
JB		 10189 if (survey->channel &&
10190 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
9360ffd1
DM		 10191 survey->channel->center_freq))
10192 goto nla_put_failure;
58ef7c1b
TP		 10193
10194 if (survey->channel && survey->channel->freq_offset &&
10195 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY_OFFSET,
10196 survey->channel->freq_offset))
10197 goto nla_put_failure;
9360ffd1
DM		 10198
10199 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
10200 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
10201 goto nla_put_failure;
10202 if ((survey->filled & SURVEY_INFO_IN_USE) &&
10203 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
10204 goto nla_put_failure;
4ed20beb 10205 if ((survey->filled & SURVEY_INFO_TIME) &&
2dad624e
ND		 10206 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME,
10207 survey->time, NL80211_SURVEY_INFO_PAD))
9360ffd1 10208 goto nla_put_failure;
4ed20beb 10209 if ((survey->filled & SURVEY_INFO_TIME_BUSY) &&
2dad624e
ND		 10210 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BUSY,
10211 survey->time_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 10212 goto nla_put_failure;
4ed20beb 10213 if ((survey->filled & SURVEY_INFO_TIME_EXT_BUSY) &&
2dad624e
ND		 10214 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_EXT_BUSY,
10215 survey->time_ext_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 10216 goto nla_put_failure;
4ed20beb 10217 if ((survey->filled & SURVEY_INFO_TIME_RX) &&
2dad624e
ND		 10218 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_RX,
10219 survey->time_rx, NL80211_SURVEY_INFO_PAD))
9360ffd1 10220 goto nla_put_failure;
4ed20beb 10221 if ((survey->filled & SURVEY_INFO_TIME_TX) &&
2dad624e
ND		 10222 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_TX,
10223 survey->time_tx, NL80211_SURVEY_INFO_PAD))
9360ffd1 10224 goto nla_put_failure;
052536ab 10225 if ((survey->filled & SURVEY_INFO_TIME_SCAN) &&
2dad624e
ND		 10226 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_SCAN,
10227 survey->time_scan, NL80211_SURVEY_INFO_PAD))
052536ab 10228 goto nla_put_failure;
c8cd6e7f
FF		 10229 if ((survey->filled & SURVEY_INFO_TIME_BSS_RX) &&
10230 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BSS_RX,
10231 survey->time_bss_rx, NL80211_SURVEY_INFO_PAD))
10232 goto nla_put_failure;
61fa713c
HS		 10233
10234 nla_nest_end(msg, infoattr);
10235
053c095a
JB		 10236 genlmsg_end(msg, hdr);
10237 return 0;
61fa713c
HS		 10238
10239 nla_put_failure:
10240 genlmsg_cancel(msg, hdr);
10241 return -EMSGSIZE;
10242}
10243
11f78ac3 10244static int nl80211_dump_survey(struct sk_buff *skb, struct netlink_callback *cb)
61fa713c 10245{
50508d94 10246 struct nlattr **attrbuf;
61fa713c 10247 struct survey_info survey;
1b8ec87a 10248 struct cfg80211_registered_device *rdev;
97990a06
JB		 10249 struct wireless_dev *wdev;
10250 int survey_idx = cb->args[2];
61fa713c 10251 int res;
11f78ac3 10252 bool radio_stats;
61fa713c 10253
50508d94
JB		 10254 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
10255 if (!attrbuf)
10256 return -ENOMEM;
10257
ce6b6974 10258 res = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, attrbuf);
a05829a7
JB		 10259 if (res) {
10260 kfree(attrbuf);
10261 return res;
10262 }
10263 /* nl80211_prepare_wdev_dump acquired it in the successful case */
10264 __acquire(&rdev->wiphy.mtx);
61fa713c 10265
11f78ac3 10266 /* prepare_wdev_dump parsed the attributes */
c90c39da 10267 radio_stats = attrbuf[NL80211_ATTR_SURVEY_RADIO_STATS];
11f78ac3 10268
97990a06
JB		 10269 if (!wdev->netdev) {
10270 res = -EINVAL;
10271 goto out_err;
10272 }
10273
1b8ec87a 10274 if (!rdev->ops->dump_survey) {
61fa713c
HS		 10275 res = -EOPNOTSUPP;
10276 goto out_err;
10277 }
10278
10279 while (1) {
284b38b6 10280 wdev_lock(wdev);
1b8ec87a 10281 res = rdev_dump_survey(rdev, wdev->netdev, survey_idx, &survey);
284b38b6 10282 wdev_unlock(wdev);
61fa713c
HS		 10283 if (res == -ENOENT)
10284 break;
10285 if (res)
10286 goto out_err;
10287
11f78ac3
JB		 10288 /* don't send disabled channels, but do send non-channel data */
10289 if (survey.channel &&
10290 survey.channel->flags & IEEE80211_CHAN_DISABLED) {
180cdc79
LR		 10291 survey_idx++;
10292 continue;
10293 }
10294
61fa713c 10295 if (nl80211_send_survey(skb,
15e47304 10296 NETLINK_CB(cb->skb).portid,
61fa713c 10297 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11f78ac3 10298 wdev->netdev, radio_stats, &survey) < 0)
61fa713c
HS		 10299 goto out;
10300 survey_idx++;
10301 }
10302
10303 out:
97990a06 10304 cb->args[2] = survey_idx;
61fa713c
HS		 10305 res = skb->len;
10306 out_err:
50508d94 10307 kfree(attrbuf);
a05829a7 10308 wiphy_unlock(&rdev->wiphy);
61fa713c
HS		 10309 return res;
10310}
10311
b23aa676
SO		 10312static bool nl80211_valid_wpa_versions(u32 wpa_versions)
10313{
10314 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
cc3e14c2
CHH		 10315 NL80211_WPA_VERSION_2 |
10316 NL80211_WPA_VERSION_3));
b23aa676
SO		 10317}
10318
636a5d36
JM		 10319static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
10320{
4c476991
JB		 10321 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10322 struct net_device *dev = info->user_ptr[1];
19957bb3 10323 struct ieee80211_channel *chan;
325839da
JB		 10324 const u8 *bssid, *ssid;
10325 int err, ssid_len;
19957bb3 10326 enum nl80211_auth_type auth_type;
fffd0934 10327 struct key_parse key;
d5cdfacb 10328 bool local_state_change;
325839da 10329 struct cfg80211_auth_request req = {};
942ba88b 10330 u32 freq;
636a5d36 10331
f4a11bb0
JB		 10332 if (!info->attrs[NL80211_ATTR_MAC])
10333 return -EINVAL;
10334
1778092e
JM		 10335 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
10336 return -EINVAL;
10337
19957bb3
JB		 10338 if (!info->attrs[NL80211_ATTR_SSID])
10339 return -EINVAL;
10340
10341 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
10342 return -EINVAL;
10343
fffd0934
JB		 10344 err = nl80211_parse_key(info, &key);
10345 if (err)
10346 return err;
10347
10348 if (key.idx >= 0) {
e31b8213
JB		 10349 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
10350 return -EINVAL;
fffd0934
JB		 10351 if (!key.p.key || !key.p.key_len)
10352 return -EINVAL;
10353 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
10354 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
10355 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
10356 key.p.key_len != WLAN_KEY_LEN_WEP104))
10357 return -EINVAL;
b6b5555b 10358 if (key.idx > 3)
fffd0934
JB		 10359 return -EINVAL;
10360 } else {
10361 key.p.key_len = 0;
10362 key.p.key = NULL;
10363 }
10364
afea0b7a
JB		 10365 if (key.idx >= 0) {
10366 int i;
10367 bool ok = false;
7a087e74 10368
afea0b7a
JB		 10369 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
10370 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
10371 ok = true;
10372 break;
10373 }
10374 }
4c476991
JB		 10375 if (!ok)
10376 return -EINVAL;
afea0b7a
JB		 10377 }
10378
4c476991
JB		 10379 if (!rdev->ops->auth)
10380 return -EOPNOTSUPP;
636a5d36 10381
074ac8df 10382 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10383 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10384 return -EOPNOTSUPP;
eec60b03 10385
19957bb3 10386 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
942ba88b
TP		 10387 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
10388 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10389 freq +=
10390 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10391
10392 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 10393 if (!chan)
4c476991 10394 return -EINVAL;
636a5d36 10395
19957bb3
JB		 10396 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10397 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 10398
10399 if (info->attrs[NL80211_ATTR_IE]) {
325839da
JB		 10400 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10401 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10402 }
10403
19957bb3 10404 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 10405 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 10406 return -EINVAL;
636a5d36 10407
63181060
JM		 10408 if ((auth_type == NL80211_AUTHTYPE_SAE ||
10409 auth_type == NL80211_AUTHTYPE_FILS_SK ||
10410 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
10411 auth_type == NL80211_AUTHTYPE_FILS_PK) &&
11b6b5a4 10412 !info->attrs[NL80211_ATTR_AUTH_DATA])
e39e5b5e
JM		 10413 return -EINVAL;
10414
11b6b5a4 10415 if (info->attrs[NL80211_ATTR_AUTH_DATA]) {
63181060
JM		 10416 if (auth_type != NL80211_AUTHTYPE_SAE &&
10417 auth_type != NL80211_AUTHTYPE_FILS_SK &&
10418 auth_type != NL80211_AUTHTYPE_FILS_SK_PFS &&
10419 auth_type != NL80211_AUTHTYPE_FILS_PK)
e39e5b5e 10420 return -EINVAL;
325839da
JB		 10421 req.auth_data = nla_data(info->attrs[NL80211_ATTR_AUTH_DATA]);
10422 req.auth_data_len = nla_len(info->attrs[NL80211_ATTR_AUTH_DATA]);
e39e5b5e
JM		 10423 }
10424
d5cdfacb
JM		 10425 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10426
95de817b
JB		 10427 /*
10428 * Since we no longer track auth state, ignore
10429 * requests to only change local state.
10430 */
10431 if (local_state_change)
10432 return 0;
10433
325839da
JB		 10434 req.auth_type = auth_type;
10435 req.key = key.p.key;
10436 req.key_len = key.p.key_len;
10437 req.key_idx = key.idx;
d648c230
JB		 10438 req.link_id = nl80211_link_id_or_invalid(info->attrs);
10439 if (req.link_id >= 0) {
45aaf17c
JB		 10440 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO))
10441 return -EINVAL;
d648c230
JB		 10442 if (!info->attrs[NL80211_ATTR_MLD_ADDR])
10443 return -EINVAL;
10444 req.ap_mld_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
10445 }
325839da
JB		 10446
10447 req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
10448 IEEE80211_BSS_TYPE_ESS,
10449 IEEE80211_PRIVACY_ANY);
10450 if (!req.bss)
10451 return -ENOENT;
10452
91bf9b26 10453 wdev_lock(dev->ieee80211_ptr);
325839da 10454 err = cfg80211_mlme_auth(rdev, dev, &req);
91bf9b26 10455 wdev_unlock(dev->ieee80211_ptr);
325839da
JB		 10456
10457 cfg80211_put_bss(&rdev->wiphy, req.bss);
10458
91bf9b26 10459 return err;
636a5d36
JM		 10460}
10461
64bf3d4b
DK		 10462static int validate_pae_over_nl80211(struct cfg80211_registered_device *rdev,
10463 struct genl_info *info)
10464{
10465 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10466 GENL_SET_ERR_MSG(info, "SOCKET_OWNER not set");
10467 return -EINVAL;
10468 }
10469
10470 if (!rdev->ops->tx_control_port ||
10471 !wiphy_ext_feature_isset(&rdev->wiphy,
10472 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
10473 return -EOPNOTSUPP;
10474
10475 return 0;
10476}
10477
c0692b8f
JB		 10478static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
10479 struct genl_info *info,
3dc27d25
JB		 10480 struct cfg80211_crypto_settings *settings,
10481 int cipher_limit)
b23aa676 10482{
c0b2bbd8
JB		 10483 memset(settings, 0, sizeof(*settings));
10484
b23aa676
SO		 10485 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
10486
c0692b8f
JB		 10487 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
10488 u16 proto;
7a087e74 10489
c0692b8f
JB		 10490 proto = nla_get_u16(
10491 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
10492 settings->control_port_ethertype = cpu_to_be16(proto);
10493 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
10494 proto != ETH_P_PAE)
10495 return -EINVAL;
10496 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
10497 settings->control_port_no_encrypt = true;
10498 } else
10499 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
10500
64bf3d4b
DK		 10501 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
10502 int r = validate_pae_over_nl80211(rdev, info);
10503
10504 if (r < 0)
10505 return r;
10506
10507 settings->control_port_over_nl80211 = true;
7f3f96ce
MT		 10508
10509 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_PREAUTH])
10510 settings->control_port_no_preauth = true;
64bf3d4b
DK		 10511 }
10512
b23aa676
SO		 10513 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
10514 void *data;
10515 int len, i;
10516
10517 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
10518 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
10519 settings->n_ciphers_pairwise = len / sizeof(u32);
10520
10521 if (len % sizeof(u32))
10522 return -EINVAL;
10523
3dc27d25 10524 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 10525 return -EINVAL;
10526
10527 memcpy(settings->ciphers_pairwise, data, len);
10528
10529 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 10530 if (!cfg80211_supported_cipher_suite(
10531 &rdev->wiphy,
b23aa676
SO		 10532 settings->ciphers_pairwise[i]))
10533 return -EINVAL;
10534 }
10535
10536 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
10537 settings->cipher_group =
10538 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 10539 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
10540 settings->cipher_group))
b23aa676
SO		 10541 return -EINVAL;
10542 }
10543
10544 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
10545 settings->wpa_versions =
10546 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
10547 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
10548 return -EINVAL;
10549 }
10550
10551 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
10552 void *data;
6d30240e 10553 int len;
b23aa676
SO		 10554
10555 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
10556 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
10557 settings->n_akm_suites = len / sizeof(u32);
10558
10559 if (len % sizeof(u32))
10560 return -EINVAL;
10561
ecad3b0b 10562 if (settings->n_akm_suites > rdev->wiphy.max_num_akm_suites)
1b9ca027
JM		 10563 return -EINVAL;
10564
b23aa676 10565 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 10566 }
10567
91b5ab62
EP		 10568 if (info->attrs[NL80211_ATTR_PMK]) {
10569 if (nla_len(info->attrs[NL80211_ATTR_PMK]) != WLAN_PMK_LEN)
10570 return -EINVAL;
10571 if (!wiphy_ext_feature_isset(&rdev->wiphy,
f9662274
CHH		 10572 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_PSK) &&
10573 !wiphy_ext_feature_isset(&rdev->wiphy,
10574 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_AP_PSK))
91b5ab62
EP		 10575 return -EINVAL;
10576 settings->psk = nla_data(info->attrs[NL80211_ATTR_PMK]);
10577 }
10578
26f7044e
CHH		 10579 if (info->attrs[NL80211_ATTR_SAE_PASSWORD]) {
10580 if (!wiphy_ext_feature_isset(&rdev->wiphy,
2831a631
CHH		 10581 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10582 !wiphy_ext_feature_isset(&rdev->wiphy,
10583 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP))
26f7044e
CHH		 10584 return -EINVAL;
10585 settings->sae_pwd =
10586 nla_data(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
10587 settings->sae_pwd_len =
10588 nla_len(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
10589 }
10590
9f0ffa41
RD		 10591 if (info->attrs[NL80211_ATTR_SAE_PWE])
10592 settings->sae_pwe =
10593 nla_get_u8(info->attrs[NL80211_ATTR_SAE_PWE]);
10594 else
10595 settings->sae_pwe = NL80211_SAE_PWE_UNSPECIFIED;
10596
b23aa676
SO		 10597 return 0;
10598}
10599
9ecff10e
JB		 10600static struct cfg80211_bss *nl80211_assoc_bss(struct cfg80211_registered_device *rdev,
10601 const u8 *ssid, int ssid_len,
10602 struct nlattr **attrs,
10603 const u8 **bssid_out)
10604{
10605 struct ieee80211_channel *chan;
10606 struct cfg80211_bss *bss;
10607 const u8 *bssid;
10608 u32 freq;
10609
10610 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_WIPHY_FREQ])
10611 return ERR_PTR(-EINVAL);
10612
10613 bssid = nla_data(attrs[NL80211_ATTR_MAC]);
10614
10615 freq = MHZ_TO_KHZ(nla_get_u32(attrs[NL80211_ATTR_WIPHY_FREQ]));
10616 if (attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10617 freq += nla_get_u32(attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10618
10619 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
10620 if (!chan)
10621 return ERR_PTR(-EINVAL);
10622
10623 bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid,
10624 ssid, ssid_len,
10625 IEEE80211_BSS_TYPE_ESS,
10626 IEEE80211_PRIVACY_ANY);
10627 if (!bss)
10628 return ERR_PTR(-ENOENT);
10629
10630 *bssid_out = bssid;
10631 return bss;
10632}
10633
636a5d36
JM		 10634static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
10635{
4c476991
JB		 10636 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10637 struct net_device *dev = info->user_ptr[1];
f62fab73 10638 struct cfg80211_assoc_request req = {};
d648c230 10639 struct nlattr **attrs = NULL;
f62fab73 10640 const u8 *bssid, *ssid;
d648c230 10641 unsigned int link_id;
0f759448 10642 int err, ssid_len;
636a5d36 10643
bad29297
AZ		 10644 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10645 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10646 return -EPERM;
10647
9ecff10e 10648 if (!info->attrs[NL80211_ATTR_SSID])
f4a11bb0
JB		 10649 return -EINVAL;
10650
4c476991
JB		 10651 if (!rdev->ops->assoc)
10652 return -EOPNOTSUPP;
636a5d36 10653
074ac8df 10654 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10655 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10656 return -EOPNOTSUPP;
eec60b03 10657
19957bb3
JB		 10658 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10659 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 10660
10661 if (info->attrs[NL80211_ATTR_IE]) {
f62fab73
JB		 10662 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10663 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
df35f316
JB		 10664
10665 if (cfg80211_find_ext_elem(WLAN_EID_EXT_NON_INHERITANCE,
10666 req.ie, req.ie_len)) {
10667 GENL_SET_ERR_MSG(info,
10668 "non-inheritance makes no sense");
10669 return -EINVAL;
10670 }
636a5d36
JM		 10671 }
10672
dc6382ce 10673 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 10674 enum nl80211_mfp mfp =
dc6382ce 10675 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 10676 if (mfp == NL80211_MFP_REQUIRED)
f62fab73 10677 req.use_mfp = true;
4c476991
JB		 10678 else if (mfp != NL80211_MFP_NO)
10679 return -EINVAL;
dc6382ce
JM		 10680 }
10681
3e5d7649 10682 if (info->attrs[NL80211_ATTR_PREV_BSSID])
f62fab73 10683 req.prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3e5d7649 10684
7e7c8926 10685 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
f62fab73 10686 req.flags |= ASSOC_REQ_DISABLE_HT;
7e7c8926
BG		 10687
10688 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
f62fab73
JB		 10689 memcpy(&req.ht_capa_mask,
10690 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10691 sizeof(req.ht_capa_mask));
7e7c8926
BG		 10692
10693 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
f62fab73 10694 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
7e7c8926 10695 return -EINVAL;
f62fab73
JB		 10696 memcpy(&req.ht_capa,
10697 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10698 sizeof(req.ht_capa));
7e7c8926
BG		 10699 }
10700
ee2aca34 10701 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
f62fab73 10702 req.flags |= ASSOC_REQ_DISABLE_VHT;
ee2aca34 10703
b6db0f89
BG		 10704 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HE]))
10705 req.flags |= ASSOC_REQ_DISABLE_HE;
10706
36f84235
MS		 10707 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_EHT]))
10708 req.flags |= ASSOC_REQ_DISABLE_EHT;
10709
ee2aca34 10710 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
f62fab73
JB		 10711 memcpy(&req.vht_capa_mask,
10712 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
10713 sizeof(req.vht_capa_mask));
ee2aca34
JB		 10714
10715 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
f62fab73 10716 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
ee2aca34 10717 return -EINVAL;
f62fab73
JB		 10718 memcpy(&req.vht_capa,
10719 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
10720 sizeof(req.vht_capa));
ee2aca34
JB		 10721 }
10722
bab5ab7d 10723 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 10724 if (!((rdev->wiphy.features &
10725 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
10726 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
10727 !wiphy_ext_feature_isset(&rdev->wiphy,
10728 NL80211_EXT_FEATURE_RRM))
bab5ab7d
AK		 10729 return -EINVAL;
10730 req.flags |= ASSOC_REQ_USE_RRM;
10731 }
10732
348bd456
JM		 10733 if (info->attrs[NL80211_ATTR_FILS_KEK]) {
10734 req.fils_kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
10735 req.fils_kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
10736 if (!info->attrs[NL80211_ATTR_FILS_NONCES])
10737 return -EINVAL;
10738 req.fils_nonces =
10739 nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
10740 }
10741
d2b7588a
TP		 10742 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]) {
10743 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY])
10744 return -EINVAL;
10745 memcpy(&req.s1g_capa_mask,
10746 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]),
10747 sizeof(req.s1g_capa_mask));
10748 }
10749
10750 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY]) {
10751 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK])
10752 return -EINVAL;
10753 memcpy(&req.s1g_capa,
10754 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY]),
10755 sizeof(req.s1g_capa));
10756 }
10757
d648c230
JB		 10758 req.link_id = nl80211_link_id_or_invalid(info->attrs);
10759
10760 if (info->attrs[NL80211_ATTR_MLO_LINKS]) {
10761 unsigned int attrsize = NUM_NL80211_ATTR * sizeof(*attrs);
10762 struct nlattr *link;
10763 int rem = 0;
10764
10765 if (req.link_id < 0)
10766 return -EINVAL;
10767
10768 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO))
10769 return -EINVAL;
10770
10771 if (info->attrs[NL80211_ATTR_MAC] ||
10772 info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
10773 !info->attrs[NL80211_ATTR_MLD_ADDR])
10774 return -EINVAL;
10775
10776 req.ap_mld_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
10777
10778 attrs = kzalloc(attrsize, GFP_KERNEL);
10779 if (!attrs)
10780 return -ENOMEM;
10781
10782 nla_for_each_nested(link,
10783 info->attrs[NL80211_ATTR_MLO_LINKS],
10784 rem) {
10785 memset(attrs, 0, attrsize);
10786
10787 nla_parse_nested(attrs, NL80211_ATTR_MAX,
10788 link, NULL, NULL);
10789
10790 if (!attrs[NL80211_ATTR_MLO_LINK_ID]) {
10791 err = -EINVAL;
10792 goto free;
10793 }
10794
10795 link_id = nla_get_u8(attrs[NL80211_ATTR_MLO_LINK_ID]);
10796 /* cannot use the same link ID again */
10797 if (req.links[link_id].bss) {
10798 err = -EINVAL;
10799 goto free;
10800 }
10801 req.links[link_id].bss =
10802 nl80211_assoc_bss(rdev, ssid, ssid_len, attrs,
10803 &bssid);
10804 if (IS_ERR(req.links[link_id].bss)) {
10805 err = PTR_ERR(req.links[link_id].bss);
9b6bf4d6 10806 req.links[link_id].bss = NULL;
d648c230
JB		 10807 goto free;
10808 }
10809
10810 if (attrs[NL80211_ATTR_IE]) {
10811 req.links[link_id].elems =
10812 nla_data(attrs[NL80211_ATTR_IE]);
10813 req.links[link_id].elems_len =
10814 nla_len(attrs[NL80211_ATTR_IE]);
df35f316
JB		 10815
10816 if (cfg80211_find_elem(WLAN_EID_FRAGMENT,
10817 req.links[link_id].elems,
10818 req.links[link_id].elems_len)) {
10819 GENL_SET_ERR_MSG(info,
10820 "cannot deal with fragmentation");
10821 err = -EINVAL;
10822 goto free;
10823 }
10824
10825 if (cfg80211_find_ext_elem(WLAN_EID_EXT_NON_INHERITANCE,
10826 req.links[link_id].elems,
10827 req.links[link_id].elems_len)) {
10828 GENL_SET_ERR_MSG(info,
10829 "cannot deal with non-inheritance");
10830 err = -EINVAL;
10831 goto free;
10832 }
d648c230
JB		 10833 }
10834 }
10835
10836 if (!req.links[req.link_id].bss) {
10837 err = -EINVAL;
10838 goto free;
10839 }
10840
34d76a14
JB		 10841 if (req.links[req.link_id].elems_len) {
10842 GENL_SET_ERR_MSG(info,
10843 "cannot have per-link elems on assoc link");
10844 err = -EINVAL;
10845 goto free;
10846 }
10847
d648c230
JB		 10848 kfree(attrs);
10849 attrs = NULL;
10850 } else {
10851 if (req.link_id >= 0)
10852 return -EINVAL;
10853
10854 req.bss = nl80211_assoc_bss(rdev, ssid, ssid_len, info->attrs,
10855 &bssid);
10856 if (IS_ERR(req.bss))
10857 return PTR_ERR(req.bss);
10858 }
0f759448 10859
f62fab73 10860 err = nl80211_crypto_settings(rdev, info, &req.crypto, 1);
91bf9b26
JB		 10861 if (!err) {
10862 wdev_lock(dev->ieee80211_ptr);
bd2522b1 10863
0f759448 10864 err = cfg80211_mlme_assoc(rdev, dev, &req);
bd2522b1
AZ		 10865
10866 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10867 dev->ieee80211_ptr->conn_owner_nlportid =
10868 info->snd_portid;
10869 memcpy(dev->ieee80211_ptr->disconnect_bssid,
10870 bssid, ETH_ALEN);
10871 }
10872
91bf9b26
JB		 10873 wdev_unlock(dev->ieee80211_ptr);
10874 }
636a5d36 10875
d648c230
JB		 10876free:
10877 for (link_id = 0; link_id < ARRAY_SIZE(req.links); link_id++)
10878 cfg80211_put_bss(&rdev->wiphy, req.links[link_id].bss);
0f759448 10879 cfg80211_put_bss(&rdev->wiphy, req.bss);
d648c230 10880 kfree(attrs);
0f759448 10881
636a5d36
JM		 10882 return err;
10883}
10884
10885static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
10886{
4c476991
JB		 10887 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10888 struct net_device *dev = info->user_ptr[1];
19957bb3 10889 const u8 *ie = NULL, *bssid;
91bf9b26 10890 int ie_len = 0, err;
19957bb3 10891 u16 reason_code;
d5cdfacb 10892 bool local_state_change;
636a5d36 10893
bad29297
AZ		 10894 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10895 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10896 return -EPERM;
10897
f4a11bb0
JB		 10898 if (!info->attrs[NL80211_ATTR_MAC])
10899 return -EINVAL;
10900
10901 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10902 return -EINVAL;
10903
4c476991
JB		 10904 if (!rdev->ops->deauth)
10905 return -EOPNOTSUPP;
636a5d36 10906
074ac8df 10907 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10908 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10909 return -EOPNOTSUPP;
eec60b03 10910
19957bb3 10911 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 10912
19957bb3
JB		 10913 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10914 if (reason_code == 0) {
f4a11bb0 10915 /* Reason Code 0 is reserved */
4c476991 10916 return -EINVAL;
255e737e 10917 }
636a5d36
JM		 10918
10919 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 10920 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10921 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10922 }
10923
d5cdfacb
JM		 10924 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10925
91bf9b26
JB		 10926 wdev_lock(dev->ieee80211_ptr);
10927 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
10928 local_state_change);
10929 wdev_unlock(dev->ieee80211_ptr);
10930 return err;
636a5d36
JM		 10931}
10932
10933static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
10934{
4c476991
JB		 10935 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10936 struct net_device *dev = info->user_ptr[1];
19957bb3 10937 const u8 *ie = NULL, *bssid;
91bf9b26 10938 int ie_len = 0, err;
19957bb3 10939 u16 reason_code;
d5cdfacb 10940 bool local_state_change;
636a5d36 10941
bad29297
AZ		 10942 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10943 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10944 return -EPERM;
10945
f4a11bb0
JB		 10946 if (!info->attrs[NL80211_ATTR_MAC])
10947 return -EINVAL;
10948
10949 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10950 return -EINVAL;
10951
4c476991
JB		 10952 if (!rdev->ops->disassoc)
10953 return -EOPNOTSUPP;
636a5d36 10954
074ac8df 10955 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10956 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10957 return -EOPNOTSUPP;
eec60b03 10958
19957bb3 10959 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 10960
19957bb3
JB		 10961 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10962 if (reason_code == 0) {
f4a11bb0 10963 /* Reason Code 0 is reserved */
4c476991 10964 return -EINVAL;
255e737e 10965 }
636a5d36
JM		 10966
10967 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 10968 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10969 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10970 }
10971
d5cdfacb
JM		 10972 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10973
91bf9b26
JB		 10974 wdev_lock(dev->ieee80211_ptr);
10975 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
10976 local_state_change);
10977 wdev_unlock(dev->ieee80211_ptr);
10978 return err;
636a5d36
JM		 10979}
10980
dd5b4cc7
FF		 10981static bool
10982nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
57fbcce3 10983 int mcast_rate[NUM_NL80211_BANDS],
dd5b4cc7
FF		 10984 int rateval)
10985{
10986 struct wiphy *wiphy = &rdev->wiphy;
10987 bool found = false;
10988 int band, i;
10989
57fbcce3 10990 for (band = 0; band < NUM_NL80211_BANDS; band++) {
dd5b4cc7
FF		 10991 struct ieee80211_supported_band *sband;
10992
10993 sband = wiphy->bands[band];
10994 if (!sband)
10995 continue;
10996
10997 for (i = 0; i < sband->n_bitrates; i++) {
10998 if (sband->bitrates[i].bitrate == rateval) {
10999 mcast_rate[band] = i + 1;
11000 found = true;
11001 break;
11002 }
11003 }
11004 }
11005
11006 return found;
11007}
11008
04a773ad
JB		 11009static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
11010{
4c476991
JB		 11011 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11012 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 11013 struct cfg80211_ibss_params ibss;
11014 struct wiphy *wiphy;
fffd0934 11015 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 11016 int err;
11017
8e30bc55
JB		 11018 memset(&ibss, 0, sizeof(ibss));
11019
683b6d3b 11020 if (!info->attrs[NL80211_ATTR_SSID] ||
04a773ad
JB		 11021 !nla_len(info->attrs[NL80211_ATTR_SSID]))
11022 return -EINVAL;
11023
8e30bc55
JB		 11024 ibss.beacon_interval = 100;
11025
12d20fc9 11026 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL])
8e30bc55
JB		 11027 ibss.beacon_interval =
11028 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 11029
0c317a02
PK		 11030 err = cfg80211_validate_beacon_int(rdev, NL80211_IFTYPE_ADHOC,
11031 ibss.beacon_interval);
12d20fc9
PK		 11032 if (err)
11033 return err;
8e30bc55 11034
4c476991
JB		 11035 if (!rdev->ops->join_ibss)
11036 return -EOPNOTSUPP;
04a773ad 11037
4c476991
JB		 11038 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
11039 return -EOPNOTSUPP;
04a773ad 11040
79c97e97 11041 wiphy = &rdev->wiphy;
04a773ad 11042
39193498 11043 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 11044 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 11045
11046 if (!is_valid_ether_addr(ibss.bssid))
11047 return -EINVAL;
11048 }
04a773ad
JB		 11049 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11050 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11051
11052 if (info->attrs[NL80211_ATTR_IE]) {
11053 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11054 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11055 }
11056
683b6d3b
JB		 11057 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
11058 if (err)
11059 return err;
04a773ad 11060
174e0cd2
IP		 11061 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef,
11062 NL80211_IFTYPE_ADHOC))
54858ee5
AS		 11063 return -EINVAL;
11064
2f301ab2 11065 switch (ibss.chandef.width) {
bf372645
SW		 11066 case NL80211_CHAN_WIDTH_5:
11067 case NL80211_CHAN_WIDTH_10:
2f301ab2
SW		 11068 case NL80211_CHAN_WIDTH_20_NOHT:
11069 break;
11070 case NL80211_CHAN_WIDTH_20:
11071 case NL80211_CHAN_WIDTH_40:
ffc11991
JD		 11072 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
11073 return -EINVAL;
11074 break;
11075 case NL80211_CHAN_WIDTH_80:
11076 case NL80211_CHAN_WIDTH_80P80:
11077 case NL80211_CHAN_WIDTH_160:
11078 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
11079 return -EINVAL;
11080 if (!wiphy_ext_feature_isset(&rdev->wiphy,
11081 NL80211_EXT_FEATURE_VHT_IBSS))
11082 return -EINVAL;
11083 break;
3743bec6
JD		 11084 case NL80211_CHAN_WIDTH_320:
11085 return -EINVAL;
2f301ab2 11086 default:
c04d6150 11087 return -EINVAL;
2f301ab2 11088 }
db9c64cf 11089
04a773ad 11090 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 11091 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
11092
fbd2c8dc
TP		 11093 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
11094 u8 *rates =
11095 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11096 int n_rates =
11097 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11098 struct ieee80211_supported_band *sband =
683b6d3b 11099 wiphy->bands[ibss.chandef.chan->band];
fbd2c8dc 11100
34850ab2
JB		 11101 err = ieee80211_get_ratemask(sband, rates, n_rates,
11102 &ibss.basic_rates);
11103 if (err)
11104 return err;
fbd2c8dc 11105 }
dd5b4cc7 11106
803768f5
SW		 11107 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11108 memcpy(&ibss.ht_capa_mask,
11109 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
11110 sizeof(ibss.ht_capa_mask));
11111
11112 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
11113 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11114 return -EINVAL;
11115 memcpy(&ibss.ht_capa,
11116 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
11117 sizeof(ibss.ht_capa));
11118 }
11119
dd5b4cc7
FF		 11120 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
11121 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
11122 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
11123 return -EINVAL;
fbd2c8dc 11124
4c476991 11125 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 11126 bool no_ht = false;
11127
768075eb 11128 connkeys = nl80211_parse_connkeys(rdev, info, &no_ht);
4c476991
JB		 11129 if (IS_ERR(connkeys))
11130 return PTR_ERR(connkeys);
de7044ee 11131
3d9d1d66
JB		 11132 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
11133 no_ht) {
453431a5 11134 kfree_sensitive(connkeys);
de7044ee
SM		 11135 return -EINVAL;
11136 }
4c476991 11137 }
04a773ad 11138
267335d6
AQ		 11139 ibss.control_port =
11140 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
11141
c3bfe1f6
DK		 11142 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
11143 int r = validate_pae_over_nl80211(rdev, info);
11144
d350a0f4 11145 if (r < 0) {
453431a5 11146 kfree_sensitive(connkeys);
c3bfe1f6 11147 return r;
d350a0f4 11148 }
c3bfe1f6
DK		 11149
11150 ibss.control_port_over_nl80211 = true;
11151 }
11152
5336fa88
SW		 11153 ibss.userspace_handles_dfs =
11154 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
11155
f8d16d3e
DK		 11156 wdev_lock(dev->ieee80211_ptr);
11157 err = __cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934 11158 if (err)
453431a5 11159 kfree_sensitive(connkeys);
f8d16d3e
DK		 11160 else if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
11161 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11162 wdev_unlock(dev->ieee80211_ptr);
11163
04a773ad
JB		 11164 return err;
11165}
11166
11167static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
11168{
4c476991
JB		 11169 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11170 struct net_device *dev = info->user_ptr[1];
04a773ad 11171
4c476991
JB		 11172 if (!rdev->ops->leave_ibss)
11173 return -EOPNOTSUPP;
04a773ad 11174
4c476991
JB		 11175 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
11176 return -EOPNOTSUPP;
04a773ad 11177
4c476991 11178 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 11179}
11180
f4e583c8
AQ		 11181static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
11182{
11183 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11184 struct net_device *dev = info->user_ptr[1];
57fbcce3 11185 int mcast_rate[NUM_NL80211_BANDS];
f4e583c8
AQ		 11186 u32 nla_rate;
11187 int err;
11188
11189 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
876dc930
BVB		 11190 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
11191 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_OCB)
f4e583c8
AQ		 11192 return -EOPNOTSUPP;
11193
11194 if (!rdev->ops->set_mcast_rate)
11195 return -EOPNOTSUPP;
11196
11197 memset(mcast_rate, 0, sizeof(mcast_rate));
11198
11199 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
11200 return -EINVAL;
11201
11202 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
11203 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
11204 return -EINVAL;
11205
a1056b1b 11206 err = rdev_set_mcast_rate(rdev, dev, mcast_rate);
f4e583c8
AQ		 11207
11208 return err;
11209}
11210
ad7e718c
JB		 11211static struct sk_buff *
11212__cfg80211_alloc_vendor_skb(struct cfg80211_registered_device *rdev,
6c09e791
AK		 11213 struct wireless_dev *wdev, int approxlen,
11214 u32 portid, u32 seq, enum nl80211_commands cmd,
567ffc35
JB		 11215 enum nl80211_attrs attr,
11216 const struct nl80211_vendor_cmd_info *info,
11217 gfp_t gfp)
ad7e718c
JB		 11218{
11219 struct sk_buff *skb;
11220 void *hdr;
11221 struct nlattr *data;
11222
11223 skb = nlmsg_new(approxlen + 100, gfp);
11224 if (!skb)
11225 return NULL;
11226
11227 hdr = nl80211hdr_put(skb, portid, seq, 0, cmd);
11228 if (!hdr) {
11229 kfree_skb(skb);
11230 return NULL;
11231 }
11232
11233 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
11234 goto nla_put_failure;
567ffc35
JB		 11235
11236 if (info) {
11237 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_ID,
11238 info->vendor_id))
11239 goto nla_put_failure;
11240 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_SUBCMD,
11241 info->subcmd))
11242 goto nla_put_failure;
11243 }
11244
6c09e791 11245 if (wdev) {
2dad624e
ND		 11246 if (nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
11247 wdev_id(wdev), NL80211_ATTR_PAD))
6c09e791
AK		 11248 goto nla_put_failure;
11249 if (wdev->netdev &&
11250 nla_put_u32(skb, NL80211_ATTR_IFINDEX,
11251 wdev->netdev->ifindex))
11252 goto nla_put_failure;
11253 }
11254
ae0be8de 11255 data = nla_nest_start_noflag(skb, attr);
76e1fb4b
JB		 11256 if (!data)
11257 goto nla_put_failure;
ad7e718c
JB		 11258
11259 ((void **)skb->cb)[0] = rdev;
11260 ((void **)skb->cb)[1] = hdr;
11261 ((void **)skb->cb)[2] = data;
11262
11263 return skb;
11264
11265 nla_put_failure:
11266 kfree_skb(skb);
11267 return NULL;
11268}
f4e583c8 11269
e03ad6ea 11270struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
6c09e791 11271 struct wireless_dev *wdev,
e03ad6ea
JB		 11272 enum nl80211_commands cmd,
11273 enum nl80211_attrs attr,
55c1fdf0 11274 unsigned int portid,
e03ad6ea
JB		 11275 int vendor_event_idx,
11276 int approxlen, gfp_t gfp)
11277{
f26cbf40 11278 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
e03ad6ea
JB		 11279 const struct nl80211_vendor_cmd_info *info;
11280
11281 switch (cmd) {
11282 case NL80211_CMD_TESTMODE:
11283 if (WARN_ON(vendor_event_idx != -1))
11284 return NULL;
11285 info = NULL;
11286 break;
11287 case NL80211_CMD_VENDOR:
11288 if (WARN_ON(vendor_event_idx < 0 ||
11289 vendor_event_idx >= wiphy->n_vendor_events))
11290 return NULL;
11291 info = &wiphy->vendor_events[vendor_event_idx];
11292 break;
11293 default:
11294 WARN_ON(1);
11295 return NULL;
11296 }
11297
55c1fdf0 11298 return __cfg80211_alloc_vendor_skb(rdev, wdev, approxlen, portid, 0,
e03ad6ea
JB		 11299 cmd, attr, info, gfp);
11300}
11301EXPORT_SYMBOL(__cfg80211_alloc_event_skb);
11302
11303void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp)
11304{
11305 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
11306 void *hdr = ((void **)skb->cb)[1];
55c1fdf0 11307 struct nlmsghdr *nlhdr = nlmsg_hdr(skb);
e03ad6ea
JB		 11308 struct nlattr *data = ((void **)skb->cb)[2];
11309 enum nl80211_multicast_groups mcgrp = NL80211_MCGRP_TESTMODE;
11310
bd8c78e7
JB		 11311 /* clear CB data for netlink core to own from now on */
11312 memset(skb->cb, 0, sizeof(skb->cb));
11313
e03ad6ea
JB		 11314 nla_nest_end(skb, data);
11315 genlmsg_end(skb, hdr);
11316
55c1fdf0
JB		 11317 if (nlhdr->nlmsg_pid) {
11318 genlmsg_unicast(wiphy_net(&rdev->wiphy), skb,
11319 nlhdr->nlmsg_pid);
11320 } else {
11321 if (data->nla_type == NL80211_ATTR_VENDOR_DATA)
11322 mcgrp = NL80211_MCGRP_VENDOR;
e03ad6ea 11323
55c1fdf0
JB		 11324 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
11325 skb, 0, mcgrp, gfp);
11326 }
e03ad6ea
JB		 11327}
11328EXPORT_SYMBOL(__cfg80211_send_event_skb);
11329
aff89a9b 11330#ifdef CONFIG_NL80211_TESTMODE
aff89a9b
JB		 11331static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
11332{
4c476991 11333 struct cfg80211_registered_device *rdev = info->user_ptr[0];
a05829a7 11334 struct wireless_dev *wdev;
aff89a9b
JB		 11335 int err;
11336
a05829a7
JB		 11337 lockdep_assert_held(&rdev->wiphy.mtx);
11338
11339 wdev = __cfg80211_wdev_from_attrs(rdev, genl_info_net(info),
11340 info->attrs);
11341
fc73f11f
DS		 11342 if (!rdev->ops->testmode_cmd)
11343 return -EOPNOTSUPP;
11344
11345 if (IS_ERR(wdev)) {
11346 err = PTR_ERR(wdev);
11347 if (err != -EINVAL)
11348 return err;
11349 wdev = NULL;
11350 } else if (wdev->wiphy != &rdev->wiphy) {
11351 return -EINVAL;
11352 }
11353
aff89a9b
JB		 11354 if (!info->attrs[NL80211_ATTR_TESTDATA])
11355 return -EINVAL;
11356
ad7e718c 11357 rdev->cur_cmd_info = info;
fc73f11f 11358 err = rdev_testmode_cmd(rdev, wdev,
aff89a9b
JB		 11359 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
11360 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
ad7e718c 11361 rdev->cur_cmd_info = NULL;
aff89a9b 11362
aff89a9b
JB		 11363 return err;
11364}
11365
71063f0e
WYG		 11366static int nl80211_testmode_dump(struct sk_buff *skb,
11367 struct netlink_callback *cb)
11368{
00918d33 11369 struct cfg80211_registered_device *rdev;
50508d94 11370 struct nlattr **attrbuf = NULL;
71063f0e
WYG		 11371 int err;
11372 long phy_idx;
11373 void *data = NULL;
11374 int data_len = 0;
11375
5fe231e8
JB		 11376 rtnl_lock();
11377
71063f0e
WYG		 11378 if (cb->args[0]) {
11379 /*
11380 * 0 is a valid index, but not valid for args[0],
11381 * so we need to offset by 1.
11382 */
11383 phy_idx = cb->args[0] - 1;
a4956dca
LC		 11384
11385 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
11386 if (!rdev) {
11387 err = -ENOENT;
11388 goto out_err;
11389 }
71063f0e 11390 } else {
50508d94
JB		 11391 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
11392 GFP_KERNEL);
11393 if (!attrbuf) {
11394 err = -ENOMEM;
11395 goto out_err;
11396 }
c90c39da 11397
8cb08174
JB		 11398 err = nlmsg_parse_deprecated(cb->nlh,
11399 GENL_HDRLEN + nl80211_fam.hdrsize,
11400 attrbuf, nl80211_fam.maxattr,
11401 nl80211_policy, NULL);
71063f0e 11402 if (err)
5fe231e8 11403 goto out_err;
00918d33 11404
c90c39da 11405 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
2bd7e35d 11406 if (IS_ERR(rdev)) {
5fe231e8
JB		 11407 err = PTR_ERR(rdev);
11408 goto out_err;
00918d33 11409 }
2bd7e35d 11410 phy_idx = rdev->wiphy_idx;
2bd7e35d 11411
c90c39da
JB		 11412 if (attrbuf[NL80211_ATTR_TESTDATA])
11413 cb->args[1] = (long)attrbuf[NL80211_ATTR_TESTDATA];
71063f0e
WYG		 11414 }
11415
11416 if (cb->args[1]) {
11417 data = nla_data((void *)cb->args[1]);
11418 data_len = nla_len((void *)cb->args[1]);
11419 }
11420
00918d33 11421 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 11422 err = -EOPNOTSUPP;
11423 goto out_err;
11424 }
11425
11426 while (1) {
15e47304 11427 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 11428 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11429 NL80211_CMD_TESTMODE);
11430 struct nlattr *tmdata;
11431
cb35fba3
DC		 11432 if (!hdr)
11433 break;
11434
9360ffd1 11435 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 11436 genlmsg_cancel(skb, hdr);
11437 break;
11438 }
11439
ae0be8de 11440 tmdata = nla_nest_start_noflag(skb, NL80211_ATTR_TESTDATA);
71063f0e
WYG		 11441 if (!tmdata) {
11442 genlmsg_cancel(skb, hdr);
11443 break;
11444 }
e35e4d28 11445 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 11446 nla_nest_end(skb, tmdata);
11447
11448 if (err == -ENOBUFS || err == -ENOENT) {
11449 genlmsg_cancel(skb, hdr);
11450 break;
11451 } else if (err) {
11452 genlmsg_cancel(skb, hdr);
11453 goto out_err;
11454 }
11455
11456 genlmsg_end(skb, hdr);
11457 }
11458
11459 err = skb->len;
11460 /* see above */
11461 cb->args[0] = phy_idx + 1;
11462 out_err:
50508d94 11463 kfree(attrbuf);
5fe231e8 11464 rtnl_unlock();
71063f0e
WYG		 11465 return err;
11466}
aff89a9b
JB		 11467#endif
11468
b23aa676
SO		 11469static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
11470{
4c476991
JB		 11471 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11472 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 11473 struct cfg80211_connect_params connect;
11474 struct wiphy *wiphy;
fffd0934 11475 struct cfg80211_cached_keys *connkeys = NULL;
942ba88b 11476 u32 freq = 0;
b23aa676
SO		 11477 int err;
11478
11479 memset(&connect, 0, sizeof(connect));
11480
b23aa676
SO		 11481 if (!info->attrs[NL80211_ATTR_SSID] ||
11482 !nla_len(info->attrs[NL80211_ATTR_SSID]))
11483 return -EINVAL;
11484
11485 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
11486 connect.auth_type =
11487 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 11488 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
11489 NL80211_CMD_CONNECT))
b23aa676
SO		 11490 return -EINVAL;
11491 } else
11492 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
11493
11494 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
11495
3a00df57
AS		 11496 if (info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS] &&
11497 !wiphy_ext_feature_isset(&rdev->wiphy,
11498 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
11499 return -EINVAL;
11500 connect.want_1x = info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS];
11501
c0692b8f 11502 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 11503 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 11504 if (err)
11505 return err;
b23aa676 11506
074ac8df 11507 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11508 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11509 return -EOPNOTSUPP;
b23aa676 11510
79c97e97 11511 wiphy = &rdev->wiphy;
b23aa676 11512
4486ea98
BS		 11513 connect.bg_scan_period = -1;
11514 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
11515 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
11516 connect.bg_scan_period =
11517 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
11518 }
11519
b23aa676
SO		 11520 if (info->attrs[NL80211_ATTR_MAC])
11521 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
1df4a510
JM		 11522 else if (info->attrs[NL80211_ATTR_MAC_HINT])
11523 connect.bssid_hint =
11524 nla_data(info->attrs[NL80211_ATTR_MAC_HINT]);
b23aa676
SO		 11525 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11526 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11527
11528 if (info->attrs[NL80211_ATTR_IE]) {
11529 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11530 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11531 }
11532
cee00a95
JM		 11533 if (info->attrs[NL80211_ATTR_USE_MFP]) {
11534 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
65026002
EG		 11535 if (connect.mfp == NL80211_MFP_OPTIONAL &&
11536 !wiphy_ext_feature_isset(&rdev->wiphy,
11537 NL80211_EXT_FEATURE_MFP_OPTIONAL))
11538 return -EOPNOTSUPP;
cee00a95
JM		 11539 } else {
11540 connect.mfp = NL80211_MFP_NO;
11541 }
11542
ba6fbacf
JM		 11543 if (info->attrs[NL80211_ATTR_PREV_BSSID])
11544 connect.prev_bssid =
11545 nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
11546
942ba88b
TP		 11547 if (info->attrs[NL80211_ATTR_WIPHY_FREQ])
11548 freq = MHZ_TO_KHZ(nla_get_u32(
11549 info->attrs[NL80211_ATTR_WIPHY_FREQ]));
11550 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
11551 freq +=
11552 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
11553
11554 if (freq) {
11555 connect.channel = nl80211_get_valid_chan(wiphy, freq);
664834de 11556 if (!connect.channel)
1df4a510
JM		 11557 return -EINVAL;
11558 } else if (info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]) {
942ba88b
TP		 11559 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]);
11560 freq = MHZ_TO_KHZ(freq);
11561 connect.channel_hint = nl80211_get_valid_chan(wiphy, freq);
664834de 11562 if (!connect.channel_hint)
4c476991 11563 return -EINVAL;
b23aa676
SO		 11564 }
11565
2a38075c
AAL		 11566 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
11567 connect.edmg.channels =
11568 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
11569
11570 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
11571 connect.edmg.bw_config =
11572 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
11573 }
11574
fffd0934 11575 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
768075eb 11576 connkeys = nl80211_parse_connkeys(rdev, info, NULL);
4c476991
JB		 11577 if (IS_ERR(connkeys))
11578 return PTR_ERR(connkeys);
fffd0934
JB		 11579 }
11580
7e7c8926
BG		 11581 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
11582 connect.flags |= ASSOC_REQ_DISABLE_HT;
11583
11584 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11585 memcpy(&connect.ht_capa_mask,
11586 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
11587 sizeof(connect.ht_capa_mask));
11588
11589 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e 11590 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
453431a5 11591 kfree_sensitive(connkeys);
7e7c8926 11592 return -EINVAL;
b4e4f47e 11593 }
7e7c8926
BG		 11594 memcpy(&connect.ht_capa,
11595 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
11596 sizeof(connect.ht_capa));
11597 }
11598
ee2aca34
JB		 11599 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
11600 connect.flags |= ASSOC_REQ_DISABLE_VHT;
11601
b6db0f89
BG		 11602 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HE]))
11603 connect.flags |= ASSOC_REQ_DISABLE_HE;
11604
36f84235
MS		 11605 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_EHT]))
11606 connect.flags |= ASSOC_REQ_DISABLE_EHT;
11607
ee2aca34
JB		 11608 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
11609 memcpy(&connect.vht_capa_mask,
11610 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
11611 sizeof(connect.vht_capa_mask));
11612
11613 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
11614 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]) {
453431a5 11615 kfree_sensitive(connkeys);
ee2aca34
JB		 11616 return -EINVAL;
11617 }
11618 memcpy(&connect.vht_capa,
11619 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
11620 sizeof(connect.vht_capa));
11621 }
11622
bab5ab7d 11623 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 11624 if (!((rdev->wiphy.features &
11625 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
11626 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
11627 !wiphy_ext_feature_isset(&rdev->wiphy,
11628 NL80211_EXT_FEATURE_RRM)) {
453431a5 11629 kfree_sensitive(connkeys);
bab5ab7d 11630 return -EINVAL;
707554b4 11631 }
bab5ab7d
AK		 11632 connect.flags |= ASSOC_REQ_USE_RRM;
11633 }
11634
34d50519 11635 connect.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
57fbcce3 11636 if (connect.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
453431a5 11637 kfree_sensitive(connkeys);
34d50519
LD		 11638 return -EOPNOTSUPP;
11639 }
11640
38de03d2
AS		 11641 if (info->attrs[NL80211_ATTR_BSS_SELECT]) {
11642 /* bss selection makes no sense if bssid is set */
11643 if (connect.bssid) {
453431a5 11644 kfree_sensitive(connkeys);
38de03d2
AS		 11645 return -EINVAL;
11646 }
11647
11648 err = parse_bss_select(info->attrs[NL80211_ATTR_BSS_SELECT],
11649 wiphy, &connect.bss_select);
11650 if (err) {
453431a5 11651 kfree_sensitive(connkeys);
38de03d2
AS		 11652 return err;
11653 }
11654 }
11655
a3caf744
VK		 11656 if (wiphy_ext_feature_isset(&rdev->wiphy,
11657 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
11658 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
11659 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
11660 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
11661 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11662 connect.fils_erp_username =
11663 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11664 connect.fils_erp_username_len =
11665 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11666 connect.fils_erp_realm =
11667 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11668 connect.fils_erp_realm_len =
11669 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11670 connect.fils_erp_next_seq_num =
11671 nla_get_u16(
11672 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
11673 connect.fils_erp_rrk =
11674 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11675 connect.fils_erp_rrk_len =
11676 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11677 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
11678 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
11679 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
11680 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
453431a5 11681 kfree_sensitive(connkeys);
a3caf744
VK		 11682 return -EINVAL;
11683 }
11684
40cbfa90
SD		 11685 if (nla_get_flag(info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])) {
11686 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
453431a5 11687 kfree_sensitive(connkeys);
40cbfa90
SD		 11688 GENL_SET_ERR_MSG(info,
11689 "external auth requires connection ownership");
11690 return -EINVAL;
11691 }
11692 connect.flags |= CONNECT_REQ_EXTERNAL_AUTH_SUPPORT;
11693 }
11694
efbabc11
VJ		 11695 if (nla_get_flag(info->attrs[NL80211_ATTR_MLO_SUPPORT]))
11696 connect.flags |= CONNECT_REQ_MLO_SUPPORT;
11697
83739b03 11698 wdev_lock(dev->ieee80211_ptr);
bd2522b1 11699
4ce2bd9c
JM		 11700 err = cfg80211_connect(rdev, dev, &connect, connkeys,
11701 connect.prev_bssid);
fffd0934 11702 if (err)
453431a5 11703 kfree_sensitive(connkeys);
bd2522b1
AZ		 11704
11705 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
11706 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11707 if (connect.bssid)
11708 memcpy(dev->ieee80211_ptr->disconnect_bssid,
11709 connect.bssid, ETH_ALEN);
11710 else
3b1648f1 11711 eth_zero_addr(dev->ieee80211_ptr->disconnect_bssid);
bd2522b1
AZ		 11712 }
11713
11714 wdev_unlock(dev->ieee80211_ptr);
11715
b23aa676
SO		 11716 return err;
11717}
11718
088e8df8 11719static int nl80211_update_connect_params(struct sk_buff *skb,
11720 struct genl_info *info)
11721{
11722 struct cfg80211_connect_params connect = {};
11723 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11724 struct net_device *dev = info->user_ptr[1];
11725 struct wireless_dev *wdev = dev->ieee80211_ptr;
7f9a3e15
VK		 11726 bool fils_sk_offload;
11727 u32 auth_type;
088e8df8 11728 u32 changed = 0;
11729 int ret;
11730
11731 if (!rdev->ops->update_connect_params)
11732 return -EOPNOTSUPP;
11733
11734 if (info->attrs[NL80211_ATTR_IE]) {
088e8df8 11735 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11736 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11737 changed |= UPDATE_ASSOC_IES;
11738 }
11739
7f9a3e15
VK		 11740 fils_sk_offload = wiphy_ext_feature_isset(&rdev->wiphy,
11741 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD);
11742
11743 /*
11744 * when driver supports fils-sk offload all attributes must be
11745 * provided. So the else covers "fils-sk-not-all" and
11746 * "no-fils-sk-any".
11747 */
11748 if (fils_sk_offload &&
11749 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
11750 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
11751 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
11752 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11753 connect.fils_erp_username =
11754 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11755 connect.fils_erp_username_len =
11756 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11757 connect.fils_erp_realm =
11758 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11759 connect.fils_erp_realm_len =
11760 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11761 connect.fils_erp_next_seq_num =
11762 nla_get_u16(
11763 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
11764 connect.fils_erp_rrk =
11765 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11766 connect.fils_erp_rrk_len =
11767 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11768 changed |= UPDATE_FILS_ERP_INFO;
11769 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
11770 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
11771 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
11772 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11773 return -EINVAL;
11774 }
11775
11776 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
11777 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
11778 if (!nl80211_valid_auth_type(rdev, auth_type,
11779 NL80211_CMD_CONNECT))
11780 return -EINVAL;
11781
11782 if (auth_type == NL80211_AUTHTYPE_FILS_SK &&
11783 fils_sk_offload && !(changed & UPDATE_FILS_ERP_INFO))
11784 return -EINVAL;
11785
11786 connect.auth_type = auth_type;
11787 changed |= UPDATE_AUTH_TYPE;
11788 }
11789
088e8df8 11790 wdev_lock(dev->ieee80211_ptr);
7b0a0e3c 11791 if (!wdev->connected)
088e8df8 11792 ret = -ENOLINK;
11793 else
11794 ret = rdev_update_connect_params(rdev, dev, &connect, changed);
11795 wdev_unlock(dev->ieee80211_ptr);
11796
11797 return ret;
11798}
11799
b23aa676
SO		 11800static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
11801{
4c476991
JB		 11802 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11803 struct net_device *dev = info->user_ptr[1];
b23aa676 11804 u16 reason;
83739b03 11805 int ret;
b23aa676 11806
bad29297
AZ		 11807 if (dev->ieee80211_ptr->conn_owner_nlportid &&
11808 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
11809 return -EPERM;
11810
b23aa676
SO		 11811 if (!info->attrs[NL80211_ATTR_REASON_CODE])
11812 reason = WLAN_REASON_DEAUTH_LEAVING;
11813 else
11814 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
11815
11816 if (reason == 0)
11817 return -EINVAL;
11818
074ac8df 11819 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11820 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11821 return -EOPNOTSUPP;
b23aa676 11822
83739b03
JB		 11823 wdev_lock(dev->ieee80211_ptr);
11824 ret = cfg80211_disconnect(rdev, dev, reason, true);
11825 wdev_unlock(dev->ieee80211_ptr);
11826 return ret;
b23aa676
SO		 11827}
11828
463d0183
JB		 11829static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
11830{
4c476991 11831 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 11832 struct net *net;
11833 int err;
463d0183 11834
4b681c82
VK		 11835 if (info->attrs[NL80211_ATTR_PID]) {
11836 u32 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
11837
11838 net = get_net_ns_by_pid(pid);
11839 } else if (info->attrs[NL80211_ATTR_NETNS_FD]) {
11840 u32 fd = nla_get_u32(info->attrs[NL80211_ATTR_NETNS_FD]);
463d0183 11841
4b681c82
VK		 11842 net = get_net_ns_by_fd(fd);
11843 } else {
11844 return -EINVAL;
11845 }
463d0183 11846
4c476991
JB		 11847 if (IS_ERR(net))
11848 return PTR_ERR(net);
463d0183
JB		 11849
11850 err = 0;
11851
11852 /* check if anything to do */
4c476991
JB		 11853 if (!net_eq(wiphy_net(&rdev->wiphy), net))
11854 err = cfg80211_switch_netns(rdev, net);
463d0183 11855
463d0183 11856 put_net(net);
463d0183
JB		 11857 return err;
11858}
11859
67fbb16b
SO		 11860static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
11861{
4c476991 11862 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 11863 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
11864 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 11865 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 11866 struct cfg80211_pmksa pmksa;
11867
11868 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
11869
67fbb16b
SO		 11870 if (!info->attrs[NL80211_ATTR_PMKID])
11871 return -EINVAL;
11872
67fbb16b 11873 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
a3caf744
VK		 11874
11875 if (info->attrs[NL80211_ATTR_MAC]) {
11876 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
11877 } else if (info->attrs[NL80211_ATTR_SSID] &&
11878 info->attrs[NL80211_ATTR_FILS_CACHE_ID] &&
11879 (info->genlhdr->cmd == NL80211_CMD_DEL_PMKSA ||
11880 info->attrs[NL80211_ATTR_PMK])) {
11881 pmksa.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11882 pmksa.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11883 pmksa.cache_id =
11884 nla_data(info->attrs[NL80211_ATTR_FILS_CACHE_ID]);
11885 } else {
11886 return -EINVAL;
11887 }
11888 if (info->attrs[NL80211_ATTR_PMK]) {
11889 pmksa.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
11890 pmksa.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
11891 }
67fbb16b 11892
7fc82af8
VJ		 11893 if (info->attrs[NL80211_ATTR_PMK_LIFETIME])
11894 pmksa.pmk_lifetime =
11895 nla_get_u32(info->attrs[NL80211_ATTR_PMK_LIFETIME]);
11896
11897 if (info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD])
11898 pmksa.pmk_reauth_threshold =
11899 nla_get_u8(
11900 info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD]);
11901
074ac8df 11902 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6c900360
LD		 11903 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
11904 !(dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP &&
11905 wiphy_ext_feature_isset(&rdev->wiphy,
11906 NL80211_EXT_FEATURE_AP_PMKSA_CACHING)))
4c476991 11907 return -EOPNOTSUPP;
67fbb16b
SO		 11908
11909 switch (info->genlhdr->cmd) {
11910 case NL80211_CMD_SET_PMKSA:
11911 rdev_ops = rdev->ops->set_pmksa;
11912 break;
11913 case NL80211_CMD_DEL_PMKSA:
11914 rdev_ops = rdev->ops->del_pmksa;
11915 break;
11916 default:
11917 WARN_ON(1);
11918 break;
11919 }
11920
4c476991
JB		 11921 if (!rdev_ops)
11922 return -EOPNOTSUPP;
67fbb16b 11923
4c476991 11924 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 11925}
11926
11927static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
11928{
4c476991
JB		 11929 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11930 struct net_device *dev = info->user_ptr[1];
67fbb16b 11931
074ac8df 11932 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11933 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11934 return -EOPNOTSUPP;
67fbb16b 11935
4c476991
JB		 11936 if (!rdev->ops->flush_pmksa)
11937 return -EOPNOTSUPP;
67fbb16b 11938
e35e4d28 11939 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 11940}
11941
109086ce
AN		 11942static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
11943{
11944 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11945 struct net_device *dev = info->user_ptr[1];
11946 u8 action_code, dialog_token;
df942e7b 11947 u32 peer_capability = 0;
109086ce
AN		 11948 u16 status_code;
11949 u8 *peer;
31fa97c5 11950 bool initiator;
109086ce
AN		 11951
11952 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
11953 !rdev->ops->tdls_mgmt)
11954 return -EOPNOTSUPP;
11955
11956 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
11957 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
11958 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
11959 !info->attrs[NL80211_ATTR_IE] ||
11960 !info->attrs[NL80211_ATTR_MAC])
11961 return -EINVAL;
11962
11963 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
11964 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
11965 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
11966 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
31fa97c5 11967 initiator = nla_get_flag(info->attrs[NL80211_ATTR_TDLS_INITIATOR]);
df942e7b
SDU		 11968 if (info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY])
11969 peer_capability =
11970 nla_get_u32(info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY]);
109086ce 11971
e35e4d28 11972 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
df942e7b 11973 dialog_token, status_code, peer_capability,
31fa97c5 11974 initiator,
e35e4d28
HG		 11975 nla_data(info->attrs[NL80211_ATTR_IE]),
11976 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 11977}
11978
11979static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
11980{
11981 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11982 struct net_device *dev = info->user_ptr[1];
11983 enum nl80211_tdls_operation operation;
11984 u8 *peer;
11985
11986 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
11987 !rdev->ops->tdls_oper)
11988 return -EOPNOTSUPP;
11989
11990 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
11991 !info->attrs[NL80211_ATTR_MAC])
11992 return -EINVAL;
11993
11994 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
11995 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
11996
e35e4d28 11997 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 11998}
11999
9588bbd5
JM		 12000static int nl80211_remain_on_channel(struct sk_buff *skb,
12001 struct genl_info *info)
12002{
4c476991 12003 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 12004 unsigned int link_id = nl80211_link_id(info->attrs);
71bbc994 12005 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 12006 struct cfg80211_chan_def chandef;
9588bbd5
JM		 12007 struct sk_buff *msg;
12008 void *hdr;
12009 u64 cookie;
683b6d3b 12010 u32 duration;
9588bbd5
JM		 12011 int err;
12012
12013 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
12014 !info->attrs[NL80211_ATTR_DURATION])
12015 return -EINVAL;
12016
12017 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
12018
ebf348fc
JB		 12019 if (!rdev->ops->remain_on_channel ||
12020 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
12021 return -EOPNOTSUPP;
12022
9588bbd5 12023 /*
ebf348fc
JB		 12024 * We should be on that channel for at least a minimum amount of
12025 * time (10ms) but no longer than the driver supports.
9588bbd5 12026 */
ebf348fc 12027 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 12028 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 12029 return -EINVAL;
12030
683b6d3b
JB		 12031 err = nl80211_parse_chandef(rdev, info, &chandef);
12032 if (err)
12033 return err;
9588bbd5 12034
34373d12 12035 wdev_lock(wdev);
7b0a0e3c
JB		 12036 if (!cfg80211_off_channel_oper_allowed(wdev, chandef.chan)) {
12037 const struct cfg80211_chan_def *oper_chandef, *compat_chandef;
12038
12039 oper_chandef = wdev_chandef(wdev, link_id);
12040
12041 if (WARN_ON(!oper_chandef)) {
12042 /* cannot happen since we must beacon to get here */
12043 WARN_ON(1);
12044 wdev_unlock(wdev);
12045 return -EBUSY;
12046 }
12047
12048 /* note: returns first one if identical chandefs */
12049 compat_chandef = cfg80211_chandef_compatible(&chandef,
12050 oper_chandef);
12051
34373d12
VT		 12052 if (compat_chandef != &chandef) {
12053 wdev_unlock(wdev);
12054 return -EBUSY;
12055 }
12056 }
12057 wdev_unlock(wdev);
12058
9588bbd5 12059 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 12060 if (!msg)
12061 return -ENOMEM;
9588bbd5 12062
15e47304 12063 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5 12064 NL80211_CMD_REMAIN_ON_CHANNEL);
cb35fba3
DC		 12065 if (!hdr) {
12066 err = -ENOBUFS;
9588bbd5
JM		 12067 goto free_msg;
12068 }
12069
683b6d3b
JB		 12070 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
12071 duration, &cookie);
9588bbd5
JM		 12072
12073 if (err)
12074 goto free_msg;
12075
2dad624e
ND		 12076 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12077 NL80211_ATTR_PAD))
9360ffd1 12078 goto nla_put_failure;
9588bbd5
JM		 12079
12080 genlmsg_end(msg, hdr);
4c476991
JB		 12081
12082 return genlmsg_reply(msg, info);
9588bbd5
JM		 12083
12084 nla_put_failure:
12085 err = -ENOBUFS;
12086 free_msg:
12087 nlmsg_free(msg);
9588bbd5
JM		 12088 return err;
12089}
12090
12091static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
12092 struct genl_info *info)
12093{
4c476991 12094 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12095 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 12096 u64 cookie;
9588bbd5
JM		 12097
12098 if (!info->attrs[NL80211_ATTR_COOKIE])
12099 return -EINVAL;
12100
4c476991
JB		 12101 if (!rdev->ops->cancel_remain_on_channel)
12102 return -EOPNOTSUPP;
9588bbd5 12103
9588bbd5
JM		 12104 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
12105
e35e4d28 12106 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 12107}
12108
13ae75b1
JM		 12109static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
12110 struct genl_info *info)
12111{
13ae75b1 12112 struct cfg80211_bitrate_mask mask;
7b0a0e3c 12113 unsigned int link_id = nl80211_link_id(info->attrs);
a7c7fbff 12114 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 12115 struct net_device *dev = info->user_ptr[1];
f971e188 12116 struct wireless_dev *wdev = dev->ieee80211_ptr;
a7c7fbff 12117 int err;
13ae75b1 12118
4c476991
JB		 12119 if (!rdev->ops->set_bitrate_mask)
12120 return -EOPNOTSUPP;
13ae75b1 12121
f971e188 12122 wdev_lock(wdev);
9a5f6488 12123 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
eb89a6a6 12124 NL80211_ATTR_TX_RATES, &mask,
7b0a0e3c 12125 dev, true, link_id);
a7c7fbff 12126 if (err)
f971e188 12127 goto out;
13ae75b1 12128
7b0a0e3c 12129 err = rdev_set_bitrate_mask(rdev, dev, link_id, NULL, &mask);
f971e188
JB		 12130out:
12131 wdev_unlock(wdev);
12132 return err;
13ae75b1
JM		 12133}
12134
2e161f78 12135static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 12136{
4c476991 12137 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12138 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 12139 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 12140
12141 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
12142 return -EINVAL;
12143
2e161f78
JB		 12144 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
12145 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 12146
71bbc994
JB		 12147 switch (wdev->iftype) {
12148 case NL80211_IFTYPE_STATION:
12149 case NL80211_IFTYPE_ADHOC:
12150 case NL80211_IFTYPE_P2P_CLIENT:
12151 case NL80211_IFTYPE_AP:
12152 case NL80211_IFTYPE_AP_VLAN:
12153 case NL80211_IFTYPE_MESH_POINT:
12154 case NL80211_IFTYPE_P2P_GO:
98104fde 12155 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 12156 break;
cb3b7d87 12157 case NL80211_IFTYPE_NAN:
71bbc994 12158 default:
4c476991 12159 return -EOPNOTSUPP;
71bbc994 12160 }
026331c4
JM		 12161
12162 /* not much point in registering if we can't reply */
4c476991
JB		 12163 if (!rdev->ops->mgmt_tx)
12164 return -EOPNOTSUPP;
026331c4 12165
9dba48a6
JB		 12166 if (info->attrs[NL80211_ATTR_RECEIVE_MULTICAST] &&
12167 !wiphy_ext_feature_isset(&rdev->wiphy,
12168 NL80211_EXT_FEATURE_MULTICAST_REGISTRATIONS)) {
12169 GENL_SET_ERR_MSG(info,
12170 "multicast RX registrations are not supported");
12171 return -EOPNOTSUPP;
12172 }
12173
15e47304 12174 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
ff74c51e
IP		 12175 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
12176 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]),
9dba48a6 12177 info->attrs[NL80211_ATTR_RECEIVE_MULTICAST],
ff74c51e 12178 info->extack);
026331c4
JM		 12179}
12180
2e161f78 12181static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 12182{
4c476991 12183 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12184 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 12185 struct cfg80211_chan_def chandef;
026331c4 12186 int err;
d64d373f 12187 void *hdr = NULL;
026331c4 12188 u64 cookie;
e247bd90 12189 struct sk_buff *msg = NULL;
b176e629
AO		 12190 struct cfg80211_mgmt_tx_params params = {
12191 .dont_wait_for_ack =
12192 info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK],
12193 };
026331c4 12194
683b6d3b 12195 if (!info->attrs[NL80211_ATTR_FRAME])
026331c4
JM		 12196 return -EINVAL;
12197
4c476991
JB		 12198 if (!rdev->ops->mgmt_tx)
12199 return -EOPNOTSUPP;
026331c4 12200
71bbc994 12201 switch (wdev->iftype) {
ea141b75
AQ		 12202 case NL80211_IFTYPE_P2P_DEVICE:
12203 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
12204 return -EINVAL;
d7832c71 12205 break;
71bbc994
JB		 12206 case NL80211_IFTYPE_STATION:
12207 case NL80211_IFTYPE_ADHOC:
12208 case NL80211_IFTYPE_P2P_CLIENT:
12209 case NL80211_IFTYPE_AP:
12210 case NL80211_IFTYPE_AP_VLAN:
12211 case NL80211_IFTYPE_MESH_POINT:
12212 case NL80211_IFTYPE_P2P_GO:
12213 break;
cb3b7d87 12214 case NL80211_IFTYPE_NAN:
71bbc994 12215 default:
4c476991 12216 return -EOPNOTSUPP;
71bbc994 12217 }
026331c4 12218
f7ca38df 12219 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 12220 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df 12221 return -EINVAL;
b176e629 12222 params.wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 12223
12224 /*
12225 * We should wait on the channel for at least a minimum amount
12226 * of time (10ms) but no longer than the driver supports.
12227 */
b176e629
AO		 12228 if (params.wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
12229 params.wait > rdev->wiphy.max_remain_on_channel_duration)
ebf348fc 12230 return -EINVAL;
f7ca38df
JB		 12231 }
12232
b176e629 12233 params.offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
f7ca38df 12234
b176e629 12235 if (params.offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
7c4ef712
JB		 12236 return -EINVAL;
12237
b176e629 12238 params.no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
e9f935e3 12239
ea141b75
AQ		 12240 /* get the channel if any has been specified, otherwise pass NULL to
12241 * the driver. The latter will use the current one
12242 */
12243 chandef.chan = NULL;
12244 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
12245 err = nl80211_parse_chandef(rdev, info, &chandef);
12246 if (err)
12247 return err;
12248 }
12249
b176e629 12250 if (!chandef.chan && params.offchan)
ea141b75 12251 return -EINVAL;
026331c4 12252
34373d12 12253 wdev_lock(wdev);
7b0a0e3c
JB		 12254 if (params.offchan &&
12255 !cfg80211_off_channel_oper_allowed(wdev, chandef.chan)) {
34373d12
VT		 12256 wdev_unlock(wdev);
12257 return -EBUSY;
12258 }
12259 wdev_unlock(wdev);
12260
34d22ce2
AO		 12261 params.buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
12262 params.len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
12263
12264 if (info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]) {
12265 int len = nla_len(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
12266 int i;
12267
12268 if (len % sizeof(u16))
12269 return -EINVAL;
12270
12271 params.n_csa_offsets = len / sizeof(u16);
12272 params.csa_offsets =
12273 nla_data(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
12274
12275 /* check that all the offsets fit the frame */
12276 for (i = 0; i < params.n_csa_offsets; i++) {
12277 if (params.csa_offsets[i] >= params.len)
12278 return -EINVAL;
12279 }
12280 }
12281
b176e629 12282 if (!params.dont_wait_for_ack) {
e247bd90
JB		 12283 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12284 if (!msg)
12285 return -ENOMEM;
026331c4 12286
15e47304 12287 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 12288 NL80211_CMD_FRAME);
cb35fba3
DC		 12289 if (!hdr) {
12290 err = -ENOBUFS;
e247bd90
JB		 12291 goto free_msg;
12292 }
026331c4 12293 }
e247bd90 12294
b176e629
AO		 12295 params.chan = chandef.chan;
12296 err = cfg80211_mlme_mgmt_tx(rdev, wdev, &params, &cookie);
026331c4
JM		 12297 if (err)
12298 goto free_msg;
12299
e247bd90 12300 if (msg) {
2dad624e
ND		 12301 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12302 NL80211_ATTR_PAD))
9360ffd1 12303 goto nla_put_failure;
026331c4 12304
e247bd90
JB		 12305 genlmsg_end(msg, hdr);
12306 return genlmsg_reply(msg, info);
12307 }
12308
12309 return 0;
026331c4
JM		 12310
12311 nla_put_failure:
12312 err = -ENOBUFS;
12313 free_msg:
12314 nlmsg_free(msg);
026331c4
JM		 12315 return err;
12316}
12317
f7ca38df
JB		 12318static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
12319{
12320 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12321 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 12322 u64 cookie;
12323
12324 if (!info->attrs[NL80211_ATTR_COOKIE])
12325 return -EINVAL;
12326
12327 if (!rdev->ops->mgmt_tx_cancel_wait)
12328 return -EOPNOTSUPP;
12329
71bbc994
JB		 12330 switch (wdev->iftype) {
12331 case NL80211_IFTYPE_STATION:
12332 case NL80211_IFTYPE_ADHOC:
12333 case NL80211_IFTYPE_P2P_CLIENT:
12334 case NL80211_IFTYPE_AP:
12335 case NL80211_IFTYPE_AP_VLAN:
12336 case NL80211_IFTYPE_P2P_GO:
98104fde 12337 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 12338 break;
cb3b7d87 12339 case NL80211_IFTYPE_NAN:
71bbc994 12340 default:
f7ca38df 12341 return -EOPNOTSUPP;
71bbc994 12342 }
f7ca38df
JB		 12343
12344 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
12345
e35e4d28 12346 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 12347}
12348
ffb9eb3d
KV		 12349static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
12350{
4c476991 12351 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 12352 struct wireless_dev *wdev;
4c476991 12353 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 12354 u8 ps_state;
12355 bool state;
12356 int err;
12357
4c476991
JB		 12358 if (!info->attrs[NL80211_ATTR_PS_STATE])
12359 return -EINVAL;
ffb9eb3d
KV		 12360
12361 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
12362
ffb9eb3d
KV		 12363 wdev = dev->ieee80211_ptr;
12364
4c476991
JB		 12365 if (!rdev->ops->set_power_mgmt)
12366 return -EOPNOTSUPP;
ffb9eb3d
KV		 12367
12368 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
12369
12370 if (state == wdev->ps)
4c476991 12371 return 0;
ffb9eb3d 12372
e35e4d28 12373 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 12374 if (!err)
12375 wdev->ps = state;
ffb9eb3d
KV		 12376 return err;
12377}
12378
12379static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
12380{
4c476991 12381 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 12382 enum nl80211_ps_state ps_state;
12383 struct wireless_dev *wdev;
4c476991 12384 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 12385 struct sk_buff *msg;
12386 void *hdr;
12387 int err;
12388
ffb9eb3d
KV		 12389 wdev = dev->ieee80211_ptr;
12390
4c476991
JB		 12391 if (!rdev->ops->set_power_mgmt)
12392 return -EOPNOTSUPP;
ffb9eb3d
KV		 12393
12394 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 12395 if (!msg)
12396 return -ENOMEM;
ffb9eb3d 12397
15e47304 12398 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 12399 NL80211_CMD_GET_POWER_SAVE);
12400 if (!hdr) {
4c476991 12401 err = -ENOBUFS;
ffb9eb3d
KV		 12402 goto free_msg;
12403 }
12404
12405 if (wdev->ps)
12406 ps_state = NL80211_PS_ENABLED;
12407 else
12408 ps_state = NL80211_PS_DISABLED;
12409
9360ffd1
DM		 12410 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
12411 goto nla_put_failure;
ffb9eb3d
KV		 12412
12413 genlmsg_end(msg, hdr);
4c476991 12414 return genlmsg_reply(msg, info);
ffb9eb3d 12415
4c476991 12416 nla_put_failure:
ffb9eb3d 12417 err = -ENOBUFS;
4c476991 12418 free_msg:
ffb9eb3d 12419 nlmsg_free(msg);
ffb9eb3d
KV		 12420 return err;
12421}
12422
94e860f1
JB		 12423static const struct nla_policy
12424nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
4a4b8169 12425 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_BINARY },
d6dc1a38
JO		 12426 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
12427 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 12428 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
12429 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
12430 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
bee427b8 12431 [NL80211_ATTR_CQM_RSSI_LEVEL] = { .type = NLA_S32 },
d6dc1a38
JO		 12432};
12433
84f10708 12434static int nl80211_set_cqm_txe(struct genl_info *info,
d9d8b019 12435 u32 rate, u32 pkts, u32 intvl)
84f10708
TP		 12436{
12437 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84f10708 12438 struct net_device *dev = info->user_ptr[1];
1da5fcc8 12439 struct wireless_dev *wdev = dev->ieee80211_ptr;
84f10708 12440
d9d8b019 12441 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
84f10708
TP		 12442 return -EINVAL;
12443
84f10708
TP		 12444 if (!rdev->ops->set_cqm_txe_config)
12445 return -EOPNOTSUPP;
12446
12447 if (wdev->iftype != NL80211_IFTYPE_STATION &&
12448 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
12449 return -EOPNOTSUPP;
12450
e35e4d28 12451 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 12452}
12453
4a4b8169
AZ		 12454static int cfg80211_cqm_rssi_update(struct cfg80211_registered_device *rdev,
12455 struct net_device *dev)
12456{
12457 struct wireless_dev *wdev = dev->ieee80211_ptr;
12458 s32 last, low, high;
12459 u32 hyst;
1222a160 12460 int i, n, low_index;
4a4b8169
AZ		 12461 int err;
12462
12463 /* RSSI reporting disabled? */
12464 if (!wdev->cqm_config)
12465 return rdev_set_cqm_rssi_range_config(rdev, dev, 0, 0);
12466
12467 /*
12468 * Obtain current RSSI value if possible, if not and no RSSI threshold
12469 * event has been received yet, we should receive an event after a
12470 * connection is established and enough beacons received to calculate
12471 * the average.
12472 */
7b0a0e3c
JB		 12473 if (!wdev->cqm_config->last_rssi_event_value &&
12474 wdev->links[0].client.current_bss &&
4a4b8169 12475 rdev->ops->get_station) {
73887fd9 12476 struct station_info sinfo = {};
4a4b8169
AZ		 12477 u8 *mac_addr;
12478
7b0a0e3c 12479 mac_addr = wdev->links[0].client.current_bss->pub.bssid;
4a4b8169 12480
73887fd9
JB		 12481 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
12482 if (err)
4a4b8169
AZ		 12483 return err;
12484
df16737d 12485 cfg80211_sinfo_release_content(&sinfo);
397c657a 12486 if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_BEACON_SIGNAL_AVG))
4a4b8169 12487 wdev->cqm_config->last_rssi_event_value =
73887fd9 12488 (s8) sinfo.rx_beacon_signal_avg;
4a4b8169
AZ		 12489 }
12490
12491 last = wdev->cqm_config->last_rssi_event_value;
12492 hyst = wdev->cqm_config->rssi_hyst;
12493 n = wdev->cqm_config->n_rssi_thresholds;
12494
4b2c5a14
MH		 12495 for (i = 0; i < n; i++) {
12496 i = array_index_nospec(i, n);
4a4b8169
AZ		 12497 if (last < wdev->cqm_config->rssi_thresholds[i])
12498 break;
4b2c5a14 12499 }
4a4b8169 12500
1222a160
MH		 12501 low_index = i - 1;
12502 if (low_index >= 0) {
12503 low_index = array_index_nospec(low_index, n);
12504 low = wdev->cqm_config->rssi_thresholds[low_index] - hyst;
12505 } else {
12506 low = S32_MIN;
12507 }
12508 if (i < n) {
12509 i = array_index_nospec(i, n);
12510 high = wdev->cqm_config->rssi_thresholds[i] + hyst - 1;
12511 } else {
12512 high = S32_MAX;
12513 }
4a4b8169
AZ		 12514
12515 return rdev_set_cqm_rssi_range_config(rdev, dev, low, high);
12516}
12517
d6dc1a38 12518static int nl80211_set_cqm_rssi(struct genl_info *info,
4a4b8169
AZ		 12519 const s32 *thresholds, int n_thresholds,
12520 u32 hysteresis)
d6dc1a38 12521{
4c476991 12522 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 12523 struct net_device *dev = info->user_ptr[1];
1da5fcc8 12524 struct wireless_dev *wdev = dev->ieee80211_ptr;
4a4b8169
AZ		 12525 int i, err;
12526 s32 prev = S32_MIN;
d6dc1a38 12527
4a4b8169
AZ		 12528 /* Check all values negative and sorted */
12529 for (i = 0; i < n_thresholds; i++) {
12530 if (thresholds[i] > 0 || thresholds[i] <= prev)
12531 return -EINVAL;
d6dc1a38 12532
4a4b8169
AZ		 12533 prev = thresholds[i];
12534 }
d6dc1a38 12535
074ac8df 12536 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 12537 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
12538 return -EOPNOTSUPP;
d6dc1a38 12539
4a4b8169
AZ		 12540 wdev_lock(wdev);
12541 cfg80211_cqm_config_free(wdev);
12542 wdev_unlock(wdev);
12543
12544 if (n_thresholds <= 1 && rdev->ops->set_cqm_rssi_config) {
12545 if (n_thresholds == 0 || thresholds[0] == 0) /* Disabling */
12546 return rdev_set_cqm_rssi_config(rdev, dev, 0, 0);
12547
12548 return rdev_set_cqm_rssi_config(rdev, dev,
12549 thresholds[0], hysteresis);
12550 }
12551
12552 if (!wiphy_ext_feature_isset(&rdev->wiphy,
12553 NL80211_EXT_FEATURE_CQM_RSSI_LIST))
12554 return -EOPNOTSUPP;
12555
12556 if (n_thresholds == 1 && thresholds[0] == 0) /* Disabling */
12557 n_thresholds = 0;
12558
12559 wdev_lock(wdev);
12560 if (n_thresholds) {
12561 struct cfg80211_cqm_config *cqm_config;
12562
40f231e7
LB		 12563 cqm_config = kzalloc(struct_size(cqm_config, rssi_thresholds,
12564 n_thresholds),
12565 GFP_KERNEL);
4a4b8169
AZ		 12566 if (!cqm_config) {
12567 err = -ENOMEM;
12568 goto unlock;
12569 }
12570
12571 cqm_config->rssi_hyst = hysteresis;
12572 cqm_config->n_rssi_thresholds = n_thresholds;
12573 memcpy(cqm_config->rssi_thresholds, thresholds,
40f231e7
LB		 12574 flex_array_size(cqm_config, rssi_thresholds,
12575 n_thresholds));
4a4b8169
AZ		 12576
12577 wdev->cqm_config = cqm_config;
12578 }
12579
12580 err = cfg80211_cqm_rssi_update(rdev, dev);
12581
12582unlock:
12583 wdev_unlock(wdev);
12584
12585 return err;
d6dc1a38
JO		 12586}
12587
12588static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
12589{
12590 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
12591 struct nlattr *cqm;
12592 int err;
12593
12594 cqm = info->attrs[NL80211_ATTR_CQM];
1da5fcc8
JB		 12595 if (!cqm)
12596 return -EINVAL;
d6dc1a38 12597
8cb08174
JB		 12598 err = nla_parse_nested_deprecated(attrs, NL80211_ATTR_CQM_MAX, cqm,
12599 nl80211_attr_cqm_policy,
12600 info->extack);
d6dc1a38 12601 if (err)
1da5fcc8 12602 return err;
d6dc1a38
JO		 12603
12604 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
12605 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
4a4b8169
AZ		 12606 const s32 *thresholds =
12607 nla_data(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
12608 int len = nla_len(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
1da5fcc8 12609 u32 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
d6dc1a38 12610
4a4b8169
AZ		 12611 if (len % 4)
12612 return -EINVAL;
12613
12614 return nl80211_set_cqm_rssi(info, thresholds, len / 4,
12615 hysteresis);
1da5fcc8
JB		 12616 }
12617
12618 if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
12619 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
12620 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
12621 u32 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
12622 u32 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
12623 u32 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
12624
12625 return nl80211_set_cqm_txe(info, rate, pkts, intvl);
12626 }
12627
12628 return -EINVAL;
d6dc1a38
JO		 12629}
12630
6e0bd6c3
RL		 12631static int nl80211_join_ocb(struct sk_buff *skb, struct genl_info *info)
12632{
12633 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12634 struct net_device *dev = info->user_ptr[1];
12635 struct ocb_setup setup = {};
12636 int err;
12637
12638 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
12639 if (err)
12640 return err;
12641
12642 return cfg80211_join_ocb(rdev, dev, &setup);
12643}
12644
12645static int nl80211_leave_ocb(struct sk_buff *skb, struct genl_info *info)
12646{
12647 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12648 struct net_device *dev = info->user_ptr[1];
12649
12650 return cfg80211_leave_ocb(rdev, dev);
12651}
12652
29cbe68c
JB		 12653static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
12654{
12655 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12656 struct net_device *dev = info->user_ptr[1];
12657 struct mesh_config cfg;
c80d545d 12658 struct mesh_setup setup;
29cbe68c
JB		 12659 int err;
12660
12661 /* start with default */
12662 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 12663 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 12664
24bdd9f4 12665 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 12666 /* and parse parameters if given */
24bdd9f4 12667 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 12668 if (err)
12669 return err;
12670 }
12671
12672 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
12673 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
12674 return -EINVAL;
12675
c80d545d
JC		 12676 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
12677 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
12678
4bb62344
CYY		 12679 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
12680 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
12681 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
12682 return -EINVAL;
12683
9bdbf04d
MP		 12684 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
12685 setup.beacon_interval =
12686 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 12687
0c317a02
PK		 12688 err = cfg80211_validate_beacon_int(rdev,
12689 NL80211_IFTYPE_MESH_POINT,
12690 setup.beacon_interval);
12d20fc9
PK		 12691 if (err)
12692 return err;
9bdbf04d
MP		 12693 }
12694
12695 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
12696 setup.dtim_period =
12697 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
12698 if (setup.dtim_period < 1 || setup.dtim_period > 100)
12699 return -EINVAL;
12700 }
12701
c80d545d
JC		 12702 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
12703 /* parse additional setup parameters if given */
12704 err = nl80211_parse_mesh_setup(info, &setup);
12705 if (err)
12706 return err;
12707 }
12708
d37bb18a
TP		 12709 if (setup.user_mpm)
12710 cfg.auto_open_plinks = false;
12711
cc1d2806 12712 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 12713 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
12714 if (err)
12715 return err;
cc1d2806 12716 } else {
188c1b3c 12717 /* __cfg80211_join_mesh() will sort it out */
683b6d3b 12718 setup.chandef.chan = NULL;
cc1d2806
JB		 12719 }
12720
ffb3cf30
AN		 12721 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
12722 u8 *rates = nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
12723 int n_rates =
12724 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
12725 struct ieee80211_supported_band *sband;
12726
12727 if (!setup.chandef.chan)
12728 return -EINVAL;
12729
12730 sband = rdev->wiphy.bands[setup.chandef.chan->band];
12731
12732 err = ieee80211_get_ratemask(sband, rates, n_rates,
12733 &setup.basic_rates);
12734 if (err)
12735 return err;
12736 }
12737
8564e382 12738 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 12739 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
12740 NL80211_ATTR_TX_RATES,
eb89a6a6 12741 &setup.beacon_rate,
7b0a0e3c 12742 dev, false, 0);
8564e382
JB		 12743 if (err)
12744 return err;
12745
265698d7
JB		 12746 if (!setup.chandef.chan)
12747 return -EINVAL;
12748
8564e382
JB		 12749 err = validate_beacon_tx_rate(rdev, setup.chandef.chan->band,
12750 &setup.beacon_rate);
12751 if (err)
12752 return err;
12753 }
12754
d37d49c2
BB		 12755 setup.userspace_handles_dfs =
12756 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
12757
1224f583
DK		 12758 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
12759 int r = validate_pae_over_nl80211(rdev, info);
12760
12761 if (r < 0)
12762 return r;
12763
12764 setup.control_port_over_nl80211 = true;
12765 }
12766
188c1b3c
DK		 12767 wdev_lock(dev->ieee80211_ptr);
12768 err = __cfg80211_join_mesh(rdev, dev, &setup, &cfg);
12769 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER])
12770 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
12771 wdev_unlock(dev->ieee80211_ptr);
12772
12773 return err;
29cbe68c
JB		 12774}
12775
12776static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
12777{
12778 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12779 struct net_device *dev = info->user_ptr[1];
12780
12781 return cfg80211_leave_mesh(rdev, dev);
12782}
12783
dfb89c56 12784#ifdef CONFIG_PM
bb92d199
AK		 12785static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
12786 struct cfg80211_registered_device *rdev)
12787{
6abb9cb9 12788 struct cfg80211_wowlan *wowlan = rdev->wiphy.wowlan_config;
bb92d199
AK		 12789 struct nlattr *nl_pats, *nl_pat;
12790 int i, pat_len;
12791
6abb9cb9 12792 if (!wowlan->n_patterns)
bb92d199
AK		 12793 return 0;
12794
ae0be8de 12795 nl_pats = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
bb92d199
AK		 12796 if (!nl_pats)
12797 return -ENOBUFS;
12798
6abb9cb9 12799 for (i = 0; i < wowlan->n_patterns; i++) {
ae0be8de 12800 nl_pat = nla_nest_start_noflag(msg, i + 1);
bb92d199
AK		 12801 if (!nl_pat)
12802 return -ENOBUFS;
6abb9cb9 12803 pat_len = wowlan->patterns[i].pattern_len;
50ac6607 12804 if (nla_put(msg, NL80211_PKTPAT_MASK, DIV_ROUND_UP(pat_len, 8),
6abb9cb9 12805 wowlan->patterns[i].mask) ||
50ac6607
AK		 12806 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
12807 wowlan->patterns[i].pattern) ||
12808 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
6abb9cb9 12809 wowlan->patterns[i].pkt_offset))
bb92d199
AK		 12810 return -ENOBUFS;
12811 nla_nest_end(msg, nl_pat);
12812 }
12813 nla_nest_end(msg, nl_pats);
12814
12815 return 0;
12816}
12817
2a0e047e
JB		 12818static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
12819 struct cfg80211_wowlan_tcp *tcp)
12820{
12821 struct nlattr *nl_tcp;
12822
12823 if (!tcp)
12824 return 0;
12825
ae0be8de
MK		 12826 nl_tcp = nla_nest_start_noflag(msg,
12827 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
2a0e047e
JB		 12828 if (!nl_tcp)
12829 return -ENOBUFS;
12830
930345ea
JB		 12831 if (nla_put_in_addr(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
12832 nla_put_in_addr(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
2a0e047e
JB		 12833 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
12834 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
12835 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
12836 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
12837 tcp->payload_len, tcp->payload) ||
12838 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
12839 tcp->data_interval) ||
12840 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
12841 tcp->wake_len, tcp->wake_data) ||
12842 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
12843 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
12844 return -ENOBUFS;
12845
12846 if (tcp->payload_seq.len &&
12847 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
12848 sizeof(tcp->payload_seq), &tcp->payload_seq))
12849 return -ENOBUFS;
12850
12851 if (tcp->payload_tok.len &&
12852 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
12853 sizeof(tcp->payload_tok) + tcp->tokens_size,
12854 &tcp->payload_tok))
12855 return -ENOBUFS;
12856
e248ad30
JB		 12857 nla_nest_end(msg, nl_tcp);
12858
2a0e047e
JB		 12859 return 0;
12860}
12861
75453ccb
LC		 12862static int nl80211_send_wowlan_nd(struct sk_buff *msg,
12863 struct cfg80211_sched_scan_request *req)
12864{
3b06d277 12865 struct nlattr *nd, *freqs, *matches, *match, *scan_plans, *scan_plan;
75453ccb
LC		 12866 int i;
12867
12868 if (!req)
12869 return 0;
12870
ae0be8de 12871 nd = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_NET_DETECT);
75453ccb
LC		 12872 if (!nd)
12873 return -ENOBUFS;
12874
3b06d277
AS		 12875 if (req->n_scan_plans == 1 &&
12876 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_INTERVAL,
12877 req->scan_plans[0].interval * 1000))
75453ccb
LC		 12878 return -ENOBUFS;
12879
21fea567
LC		 12880 if (nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_DELAY, req->delay))
12881 return -ENOBUFS;
12882
bf95ecdb 12883 if (req->relative_rssi_set) {
12884 struct nl80211_bss_select_rssi_adjust rssi_adjust;
12885
12886 if (nla_put_s8(msg, NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI,
12887 req->relative_rssi))
12888 return -ENOBUFS;
12889
12890 rssi_adjust.band = req->rssi_adjust.band;
12891 rssi_adjust.delta = req->rssi_adjust.delta;
12892 if (nla_put(msg, NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST,
12893 sizeof(rssi_adjust), &rssi_adjust))
12894 return -ENOBUFS;
12895 }
12896
ae0be8de 12897 freqs = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_FREQUENCIES);
75453ccb
LC		 12898 if (!freqs)
12899 return -ENOBUFS;
12900
53b18980
JB		 12901 for (i = 0; i < req->n_channels; i++) {
12902 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
12903 return -ENOBUFS;
12904 }
75453ccb
LC		 12905
12906 nla_nest_end(msg, freqs);
12907
12908 if (req->n_match_sets) {
ae0be8de
MK		 12909 matches = nla_nest_start_noflag(msg,
12910 NL80211_ATTR_SCHED_SCAN_MATCH);
76e1fb4b
JB		 12911 if (!matches)
12912 return -ENOBUFS;
12913
75453ccb 12914 for (i = 0; i < req->n_match_sets; i++) {
ae0be8de 12915 match = nla_nest_start_noflag(msg, i);
76e1fb4b
JB		 12916 if (!match)
12917 return -ENOBUFS;
12918
53b18980
JB		 12919 if (nla_put(msg, NL80211_SCHED_SCAN_MATCH_ATTR_SSID,
12920 req->match_sets[i].ssid.ssid_len,
12921 req->match_sets[i].ssid.ssid))
12922 return -ENOBUFS;
75453ccb
LC		 12923 nla_nest_end(msg, match);
12924 }
12925 nla_nest_end(msg, matches);
12926 }
12927
ae0be8de 12928 scan_plans = nla_nest_start_noflag(msg, NL80211_ATTR_SCHED_SCAN_PLANS);
3b06d277
AS		 12929 if (!scan_plans)
12930 return -ENOBUFS;
12931
12932 for (i = 0; i < req->n_scan_plans; i++) {
ae0be8de 12933 scan_plan = nla_nest_start_noflag(msg, i + 1);
76e1fb4b
JB		 12934 if (!scan_plan)
12935 return -ENOBUFS;
12936
67626964 12937 if (nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_INTERVAL,
3b06d277
AS		 12938 req->scan_plans[i].interval) ||
12939 (req->scan_plans[i].iterations &&
12940 nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_ITERATIONS,
12941 req->scan_plans[i].iterations)))
12942 return -ENOBUFS;
12943 nla_nest_end(msg, scan_plan);
12944 }
12945 nla_nest_end(msg, scan_plans);
12946
75453ccb
LC		 12947 nla_nest_end(msg, nd);
12948
12949 return 0;
12950}
12951
ff1b6e69
JB		 12952static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
12953{
12954 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12955 struct sk_buff *msg;
12956 void *hdr;
2a0e047e 12957 u32 size = NLMSG_DEFAULT_SIZE;
ff1b6e69 12958
964dc9e2 12959 if (!rdev->wiphy.wowlan)
ff1b6e69
JB		 12960 return -EOPNOTSUPP;
12961
6abb9cb9 12962 if (rdev->wiphy.wowlan_config && rdev->wiphy.wowlan_config->tcp) {
2a0e047e 12963 /* adjust size to have room for all the data */
6abb9cb9
JB		 12964 size += rdev->wiphy.wowlan_config->tcp->tokens_size +
12965 rdev->wiphy.wowlan_config->tcp->payload_len +
12966 rdev->wiphy.wowlan_config->tcp->wake_len +
12967 rdev->wiphy.wowlan_config->tcp->wake_len / 8;
2a0e047e
JB		 12968 }
12969
12970 msg = nlmsg_new(size, GFP_KERNEL);
ff1b6e69
JB		 12971 if (!msg)
12972 return -ENOMEM;
12973
15e47304 12974 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 12975 NL80211_CMD_GET_WOWLAN);
12976 if (!hdr)
12977 goto nla_put_failure;
12978
6abb9cb9 12979 if (rdev->wiphy.wowlan_config) {
ff1b6e69
JB		 12980 struct nlattr *nl_wowlan;
12981
ae0be8de
MK		 12982 nl_wowlan = nla_nest_start_noflag(msg,
12983 NL80211_ATTR_WOWLAN_TRIGGERS);
ff1b6e69
JB		 12984 if (!nl_wowlan)
12985 goto nla_put_failure;
12986
6abb9cb9 12987 if ((rdev->wiphy.wowlan_config->any &&
9360ffd1 12988 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6abb9cb9 12989 (rdev->wiphy.wowlan_config->disconnect &&
9360ffd1 12990 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6abb9cb9 12991 (rdev->wiphy.wowlan_config->magic_pkt &&
9360ffd1 12992 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6abb9cb9 12993 (rdev->wiphy.wowlan_config->gtk_rekey_failure &&
9360ffd1 12994 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6abb9cb9 12995 (rdev->wiphy.wowlan_config->eap_identity_req &&
9360ffd1 12996 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6abb9cb9 12997 (rdev->wiphy.wowlan_config->four_way_handshake &&
9360ffd1 12998 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6abb9cb9 12999 (rdev->wiphy.wowlan_config->rfkill_release &&
9360ffd1
DM		 13000 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
13001 goto nla_put_failure;
2a0e047e 13002
bb92d199
AK		 13003 if (nl80211_send_wowlan_patterns(msg, rdev))
13004 goto nla_put_failure;
2a0e047e 13005
6abb9cb9
JB		 13006 if (nl80211_send_wowlan_tcp(msg,
13007 rdev->wiphy.wowlan_config->tcp))
2a0e047e 13008 goto nla_put_failure;
75453ccb
LC		 13009
13010 if (nl80211_send_wowlan_nd(
13011 msg,
13012 rdev->wiphy.wowlan_config->nd_config))
13013 goto nla_put_failure;
2a0e047e 13014
ff1b6e69
JB		 13015 nla_nest_end(msg, nl_wowlan);
13016 }
13017
13018 genlmsg_end(msg, hdr);
13019 return genlmsg_reply(msg, info);
13020
13021nla_put_failure:
13022 nlmsg_free(msg);
13023 return -ENOBUFS;
13024}
13025
2a0e047e
JB		 13026static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
13027 struct nlattr *attr,
13028 struct cfg80211_wowlan *trig)
13029{
13030 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
13031 struct cfg80211_wowlan_tcp *cfg;
13032 struct nl80211_wowlan_tcp_data_token *tok = NULL;
13033 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
13034 u32 size;
13035 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
13036 int err, port;
13037
964dc9e2 13038 if (!rdev->wiphy.wowlan->tcp)
2a0e047e
JB		 13039 return -EINVAL;
13040
8cb08174
JB		 13041 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TCP, attr,
13042 nl80211_wowlan_tcp_policy, NULL);
2a0e047e
JB		 13043 if (err)
13044 return err;
13045
13046 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
13047 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
13048 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
13049 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
13050 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
13051 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
13052 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
13053 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
13054 return -EINVAL;
13055
13056 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
964dc9e2 13057 if (data_size > rdev->wiphy.wowlan->tcp->data_payload_max)
2a0e047e
JB		 13058 return -EINVAL;
13059
13060 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
964dc9e2 13061 rdev->wiphy.wowlan->tcp->data_interval_max ||
723d568a 13062 nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) == 0)
2a0e047e
JB		 13063 return -EINVAL;
13064
13065 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
964dc9e2 13066 if (wake_size > rdev->wiphy.wowlan->tcp->wake_payload_max)
2a0e047e
JB		 13067 return -EINVAL;
13068
13069 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
13070 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
13071 return -EINVAL;
13072
13073 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
13074 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
13075
13076 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
13077 tokens_size = tokln - sizeof(*tok);
13078
13079 if (!tok->len || tokens_size % tok->len)
13080 return -EINVAL;
964dc9e2 13081 if (!rdev->wiphy.wowlan->tcp->tok)
2a0e047e 13082 return -EINVAL;
964dc9e2 13083 if (tok->len > rdev->wiphy.wowlan->tcp->tok->max_len)
2a0e047e 13084 return -EINVAL;
964dc9e2 13085 if (tok->len < rdev->wiphy.wowlan->tcp->tok->min_len)
2a0e047e 13086 return -EINVAL;
964dc9e2 13087 if (tokens_size > rdev->wiphy.wowlan->tcp->tok->bufsize)
2a0e047e
JB		 13088 return -EINVAL;
13089 if (tok->offset + tok->len > data_size)
13090 return -EINVAL;
13091 }
13092
13093 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
13094 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
964dc9e2 13095 if (!rdev->wiphy.wowlan->tcp->seq)
2a0e047e
JB		 13096 return -EINVAL;
13097 if (seq->len == 0 || seq->len > 4)
13098 return -EINVAL;
13099 if (seq->len + seq->offset > data_size)
13100 return -EINVAL;
13101 }
13102
13103 size = sizeof(*cfg);
13104 size += data_size;
13105 size += wake_size + wake_mask_size;
13106 size += tokens_size;
13107
13108 cfg = kzalloc(size, GFP_KERNEL);
13109 if (!cfg)
13110 return -ENOMEM;
67b61f6c
JB		 13111 cfg->src = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
13112 cfg->dst = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
2a0e047e
JB		 13113 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
13114 ETH_ALEN);
13115 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
13116 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
13117 else
13118 port = 0;
13119#ifdef CONFIG_INET
13120 /* allocate a socket and port for it and use it */
13121 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
13122 IPPROTO_TCP, &cfg->sock, 1);
13123 if (err) {
13124 kfree(cfg);
13125 return err;
13126 }
13127 if (inet_csk_get_port(cfg->sock->sk, port)) {
13128 sock_release(cfg->sock);
13129 kfree(cfg);
13130 return -EADDRINUSE;
13131 }
13132 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
13133#else
13134 if (!port) {
13135 kfree(cfg);
13136 return -EINVAL;
13137 }
13138 cfg->src_port = port;
13139#endif
13140
13141 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
13142 cfg->payload_len = data_size;
13143 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
13144 memcpy((void *)cfg->payload,
13145 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
13146 data_size);
13147 if (seq)
13148 cfg->payload_seq = *seq;
13149 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
13150 cfg->wake_len = wake_size;
13151 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
13152 memcpy((void *)cfg->wake_data,
13153 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
13154 wake_size);
13155 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
13156 data_size + wake_size;
13157 memcpy((void *)cfg->wake_mask,
13158 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
13159 wake_mask_size);
13160 if (tok) {
13161 cfg->tokens_size = tokens_size;
13162 memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
13163 }
13164
13165 trig->tcp = cfg;
13166
13167 return 0;
13168}
13169
8cd4d456
LC		 13170static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
13171 const struct wiphy_wowlan_support *wowlan,
13172 struct nlattr *attr,
13173 struct cfg80211_wowlan *trig)
13174{
13175 struct nlattr **tb;
13176 int err;
13177
6396bb22 13178 tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
8cd4d456
LC		 13179 if (!tb)
13180 return -ENOMEM;
13181
13182 if (!(wowlan->flags & WIPHY_WOWLAN_NET_DETECT)) {
13183 err = -EOPNOTSUPP;
13184 goto out;
13185 }
13186
8cb08174
JB		 13187 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_MAX, attr,
13188 nl80211_policy, NULL);
8cd4d456
LC		 13189 if (err)
13190 goto out;
13191
aad1e812
AVS		 13192 trig->nd_config = nl80211_parse_sched_scan(&rdev->wiphy, NULL, tb,
13193 wowlan->max_nd_match_sets);
8cd4d456
LC		 13194 err = PTR_ERR_OR_ZERO(trig->nd_config);
13195 if (err)
13196 trig->nd_config = NULL;
13197
13198out:
13199 kfree(tb);
13200 return err;
13201}
13202
ff1b6e69
JB		 13203static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
13204{
13205 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13206 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 13207 struct cfg80211_wowlan new_triggers = {};
ae33bd81 13208 struct cfg80211_wowlan *ntrig;
964dc9e2 13209 const struct wiphy_wowlan_support *wowlan = rdev->wiphy.wowlan;
ff1b6e69 13210 int err, i;
6abb9cb9 13211 bool prev_enabled = rdev->wiphy.wowlan_config;
98fc4386 13212 bool regular = false;
ff1b6e69 13213
964dc9e2 13214 if (!wowlan)
ff1b6e69
JB		 13215 return -EOPNOTSUPP;
13216
ae33bd81
JB		 13217 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
13218 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 13219 rdev->wiphy.wowlan_config = NULL;
ae33bd81
JB		 13220 goto set_wakeup;
13221 }
ff1b6e69 13222
8cb08174
JB		 13223 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TRIG,
13224 info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS],
13225 nl80211_wowlan_policy, info->extack);
ff1b6e69
JB		 13226 if (err)
13227 return err;
13228
13229 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
13230 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
13231 return -EINVAL;
13232 new_triggers.any = true;
13233 }
13234
13235 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
13236 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
13237 return -EINVAL;
13238 new_triggers.disconnect = true;
98fc4386 13239 regular = true;
ff1b6e69
JB		 13240 }
13241
13242 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
13243 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
13244 return -EINVAL;
13245 new_triggers.magic_pkt = true;
98fc4386 13246 regular = true;
ff1b6e69
JB		 13247 }
13248
77dbbb13
JB		 13249 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
13250 return -EINVAL;
13251
13252 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
13253 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
13254 return -EINVAL;
13255 new_triggers.gtk_rekey_failure = true;
98fc4386 13256 regular = true;
77dbbb13
JB		 13257 }
13258
13259 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
13260 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
13261 return -EINVAL;
13262 new_triggers.eap_identity_req = true;
98fc4386 13263 regular = true;
77dbbb13
JB		 13264 }
13265
13266 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
13267 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
13268 return -EINVAL;
13269 new_triggers.four_way_handshake = true;
98fc4386 13270 regular = true;
77dbbb13
JB		 13271 }
13272
13273 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
13274 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
13275 return -EINVAL;
13276 new_triggers.rfkill_release = true;
98fc4386 13277 regular = true;
77dbbb13
JB		 13278 }
13279
ff1b6e69
JB		 13280 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
13281 struct nlattr *pat;
13282 int n_patterns = 0;
bb92d199 13283 int rem, pat_len, mask_len, pkt_offset;
50ac6607 13284 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
ff1b6e69 13285
98fc4386
JB		 13286 regular = true;
13287
ff1b6e69
JB		 13288 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
13289 rem)
13290 n_patterns++;
13291 if (n_patterns > wowlan->n_patterns)
13292 return -EINVAL;
13293
13294 new_triggers.patterns = kcalloc(n_patterns,
13295 sizeof(new_triggers.patterns[0]),
13296 GFP_KERNEL);
13297 if (!new_triggers.patterns)
13298 return -ENOMEM;
13299
13300 new_triggers.n_patterns = n_patterns;
13301 i = 0;
13302
13303 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
13304 rem) {
922bd80f
JB		 13305 u8 *mask_pat;
13306
8cb08174
JB		 13307 err = nla_parse_nested_deprecated(pat_tb,
13308 MAX_NL80211_PKTPAT,
13309 pat,
13310 nl80211_packet_pattern_policy,
13311 info->extack);
95bca62f
JB		 13312 if (err)
13313 goto error;
13314
ff1b6e69 13315 err = -EINVAL;
50ac6607
AK		 13316 if (!pat_tb[NL80211_PKTPAT_MASK] ||
13317 !pat_tb[NL80211_PKTPAT_PATTERN])
ff1b6e69 13318 goto error;
50ac6607 13319 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
ff1b6e69 13320 mask_len = DIV_ROUND_UP(pat_len, 8);
50ac6607 13321 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
ff1b6e69
JB		 13322 goto error;
13323 if (pat_len > wowlan->pattern_max_len ||
13324 pat_len < wowlan->pattern_min_len)
13325 goto error;
13326
50ac6607 13327 if (!pat_tb[NL80211_PKTPAT_OFFSET])
bb92d199
AK		 13328 pkt_offset = 0;
13329 else
13330 pkt_offset = nla_get_u32(
50ac6607 13331 pat_tb[NL80211_PKTPAT_OFFSET]);
bb92d199
AK		 13332 if (pkt_offset > wowlan->max_pkt_offset)
13333 goto error;
13334 new_triggers.patterns[i].pkt_offset = pkt_offset;
13335
922bd80f
JB		 13336 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
13337 if (!mask_pat) {
ff1b6e69
JB		 13338 err = -ENOMEM;
13339 goto error;
13340 }
922bd80f
JB		 13341 new_triggers.patterns[i].mask = mask_pat;
13342 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
ff1b6e69 13343 mask_len);
922bd80f
JB		 13344 mask_pat += mask_len;
13345 new_triggers.patterns[i].pattern = mask_pat;
ff1b6e69 13346 new_triggers.patterns[i].pattern_len = pat_len;
922bd80f 13347 memcpy(mask_pat,
50ac6607 13348 nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
ff1b6e69
JB		 13349 pat_len);
13350 i++;
13351 }
13352 }
13353
2a0e047e 13354 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
98fc4386 13355 regular = true;
2a0e047e
JB		 13356 err = nl80211_parse_wowlan_tcp(
13357 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
13358 &new_triggers);
13359 if (err)
13360 goto error;
13361 }
13362
8cd4d456 13363 if (tb[NL80211_WOWLAN_TRIG_NET_DETECT]) {
98fc4386 13364 regular = true;
8cd4d456
LC		 13365 err = nl80211_parse_wowlan_nd(
13366 rdev, wowlan, tb[NL80211_WOWLAN_TRIG_NET_DETECT],
13367 &new_triggers);
13368 if (err)
13369 goto error;
13370 }
13371
98fc4386
JB		 13372 /* The 'any' trigger means the device continues operating more or less
13373 * as in its normal operation mode and wakes up the host on most of the
13374 * normal interrupts (like packet RX, ...)
13375 * It therefore makes little sense to combine with the more constrained
13376 * wakeup trigger modes.
13377 */
13378 if (new_triggers.any && regular) {
13379 err = -EINVAL;
13380 goto error;
13381 }
13382
ae33bd81
JB		 13383 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
13384 if (!ntrig) {
13385 err = -ENOMEM;
13386 goto error;
ff1b6e69 13387 }
ae33bd81 13388 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 13389 rdev->wiphy.wowlan_config = ntrig;
ff1b6e69 13390
ae33bd81 13391 set_wakeup:
6abb9cb9
JB		 13392 if (rdev->ops->set_wakeup &&
13393 prev_enabled != !!rdev->wiphy.wowlan_config)
13394 rdev_set_wakeup(rdev, rdev->wiphy.wowlan_config);
6d52563f 13395
ff1b6e69
JB		 13396 return 0;
13397 error:
13398 for (i = 0; i < new_triggers.n_patterns; i++)
13399 kfree(new_triggers.patterns[i].mask);
13400 kfree(new_triggers.patterns);
2a0e047e
JB		 13401 if (new_triggers.tcp && new_triggers.tcp->sock)
13402 sock_release(new_triggers.tcp->sock);
13403 kfree(new_triggers.tcp);
e5dbe070 13404 kfree(new_triggers.nd_config);
ff1b6e69
JB		 13405 return err;
13406}
dfb89c56 13407#endif
ff1b6e69 13408
be29b99a
AK		 13409static int nl80211_send_coalesce_rules(struct sk_buff *msg,
13410 struct cfg80211_registered_device *rdev)
13411{
13412 struct nlattr *nl_pats, *nl_pat, *nl_rule, *nl_rules;
13413 int i, j, pat_len;
13414 struct cfg80211_coalesce_rules *rule;
13415
13416 if (!rdev->coalesce->n_rules)
13417 return 0;
13418
ae0be8de 13419 nl_rules = nla_nest_start_noflag(msg, NL80211_ATTR_COALESCE_RULE);
be29b99a
AK		 13420 if (!nl_rules)
13421 return -ENOBUFS;
13422
13423 for (i = 0; i < rdev->coalesce->n_rules; i++) {
ae0be8de 13424 nl_rule = nla_nest_start_noflag(msg, i + 1);
be29b99a
AK		 13425 if (!nl_rule)
13426 return -ENOBUFS;
13427
13428 rule = &rdev->coalesce->rules[i];
13429 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_DELAY,
13430 rule->delay))
13431 return -ENOBUFS;
13432
13433 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_CONDITION,
13434 rule->condition))
13435 return -ENOBUFS;
13436
ae0be8de
MK		 13437 nl_pats = nla_nest_start_noflag(msg,
13438 NL80211_ATTR_COALESCE_RULE_PKT_PATTERN);
be29b99a
AK		 13439 if (!nl_pats)
13440 return -ENOBUFS;
13441
13442 for (j = 0; j < rule->n_patterns; j++) {
ae0be8de 13443 nl_pat = nla_nest_start_noflag(msg, j + 1);
be29b99a
AK		 13444 if (!nl_pat)
13445 return -ENOBUFS;
13446 pat_len = rule->patterns[j].pattern_len;
13447 if (nla_put(msg, NL80211_PKTPAT_MASK,
13448 DIV_ROUND_UP(pat_len, 8),
13449 rule->patterns[j].mask) ||
13450 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
13451 rule->patterns[j].pattern) ||
13452 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
13453 rule->patterns[j].pkt_offset))
13454 return -ENOBUFS;
13455 nla_nest_end(msg, nl_pat);
13456 }
13457 nla_nest_end(msg, nl_pats);
13458 nla_nest_end(msg, nl_rule);
13459 }
13460 nla_nest_end(msg, nl_rules);
13461
13462 return 0;
13463}
13464
13465static int nl80211_get_coalesce(struct sk_buff *skb, struct genl_info *info)
13466{
13467 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13468 struct sk_buff *msg;
13469 void *hdr;
13470
13471 if (!rdev->wiphy.coalesce)
13472 return -EOPNOTSUPP;
13473
13474 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13475 if (!msg)
13476 return -ENOMEM;
13477
13478 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13479 NL80211_CMD_GET_COALESCE);
13480 if (!hdr)
13481 goto nla_put_failure;
13482
13483 if (rdev->coalesce && nl80211_send_coalesce_rules(msg, rdev))
13484 goto nla_put_failure;
13485
13486 genlmsg_end(msg, hdr);
13487 return genlmsg_reply(msg, info);
13488
13489nla_put_failure:
13490 nlmsg_free(msg);
13491 return -ENOBUFS;
13492}
13493
13494void cfg80211_rdev_free_coalesce(struct cfg80211_registered_device *rdev)
13495{
13496 struct cfg80211_coalesce *coalesce = rdev->coalesce;
13497 int i, j;
13498 struct cfg80211_coalesce_rules *rule;
13499
13500 if (!coalesce)
13501 return;
13502
13503 for (i = 0; i < coalesce->n_rules; i++) {
13504 rule = &coalesce->rules[i];
13505 for (j = 0; j < rule->n_patterns; j++)
13506 kfree(rule->patterns[j].mask);
13507 kfree(rule->patterns);
13508 }
13509 kfree(coalesce->rules);
13510 kfree(coalesce);
13511 rdev->coalesce = NULL;
13512}
13513
13514static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
13515 struct nlattr *rule,
13516 struct cfg80211_coalesce_rules *new_rule)
13517{
13518 int err, i;
13519 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
13520 struct nlattr *tb[NUM_NL80211_ATTR_COALESCE_RULE], *pat;
13521 int rem, pat_len, mask_len, pkt_offset, n_patterns = 0;
13522 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
13523
8cb08174
JB		 13524 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_COALESCE_RULE_MAX,
13525 rule, nl80211_coalesce_policy, NULL);
be29b99a
AK		 13526 if (err)
13527 return err;
13528
13529 if (tb[NL80211_ATTR_COALESCE_RULE_DELAY])
13530 new_rule->delay =
13531 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_DELAY]);
13532 if (new_rule->delay > coalesce->max_delay)
13533 return -EINVAL;
13534
13535 if (tb[NL80211_ATTR_COALESCE_RULE_CONDITION])
13536 new_rule->condition =
13537 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_CONDITION]);
be29b99a
AK		 13538
13539 if (!tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN])
13540 return -EINVAL;
13541
13542 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
13543 rem)
13544 n_patterns++;
13545 if (n_patterns > coalesce->n_patterns)
13546 return -EINVAL;
13547
13548 new_rule->patterns = kcalloc(n_patterns, sizeof(new_rule->patterns[0]),
13549 GFP_KERNEL);
13550 if (!new_rule->patterns)
13551 return -ENOMEM;
13552
13553 new_rule->n_patterns = n_patterns;
13554 i = 0;
13555
13556 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
13557 rem) {
922bd80f
JB		 13558 u8 *mask_pat;
13559
8cb08174
JB		 13560 err = nla_parse_nested_deprecated(pat_tb, MAX_NL80211_PKTPAT,
13561 pat,
13562 nl80211_packet_pattern_policy,
13563 NULL);
95bca62f
JB		 13564 if (err)
13565 return err;
13566
be29b99a
AK		 13567 if (!pat_tb[NL80211_PKTPAT_MASK] ||
13568 !pat_tb[NL80211_PKTPAT_PATTERN])
13569 return -EINVAL;
13570 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
13571 mask_len = DIV_ROUND_UP(pat_len, 8);
13572 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
13573 return -EINVAL;
13574 if (pat_len > coalesce->pattern_max_len ||
13575 pat_len < coalesce->pattern_min_len)
13576 return -EINVAL;
13577
13578 if (!pat_tb[NL80211_PKTPAT_OFFSET])
13579 pkt_offset = 0;
13580 else
13581 pkt_offset = nla_get_u32(pat_tb[NL80211_PKTPAT_OFFSET]);
13582 if (pkt_offset > coalesce->max_pkt_offset)
13583 return -EINVAL;
13584 new_rule->patterns[i].pkt_offset = pkt_offset;
13585
922bd80f
JB		 13586 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
13587 if (!mask_pat)
be29b99a 13588 return -ENOMEM;
922bd80f
JB		 13589
13590 new_rule->patterns[i].mask = mask_pat;
13591 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
13592 mask_len);
13593
13594 mask_pat += mask_len;
13595 new_rule->patterns[i].pattern = mask_pat;
be29b99a 13596 new_rule->patterns[i].pattern_len = pat_len;
922bd80f
JB		 13597 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
13598 pat_len);
be29b99a
AK		 13599 i++;
13600 }
13601
13602 return 0;
13603}
13604
13605static int nl80211_set_coalesce(struct sk_buff *skb, struct genl_info *info)
13606{
13607 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13608 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
13609 struct cfg80211_coalesce new_coalesce = {};
13610 struct cfg80211_coalesce *n_coalesce;
13611 int err, rem_rule, n_rules = 0, i, j;
13612 struct nlattr *rule;
13613 struct cfg80211_coalesce_rules *tmp_rule;
13614
13615 if (!rdev->wiphy.coalesce || !rdev->ops->set_coalesce)
13616 return -EOPNOTSUPP;
13617
13618 if (!info->attrs[NL80211_ATTR_COALESCE_RULE]) {
13619 cfg80211_rdev_free_coalesce(rdev);
a1056b1b 13620 rdev_set_coalesce(rdev, NULL);
be29b99a
AK		 13621 return 0;
13622 }
13623
13624 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
13625 rem_rule)
13626 n_rules++;
13627 if (n_rules > coalesce->n_rules)
13628 return -EINVAL;
13629
13630 new_coalesce.rules = kcalloc(n_rules, sizeof(new_coalesce.rules[0]),
13631 GFP_KERNEL);
13632 if (!new_coalesce.rules)
13633 return -ENOMEM;
13634
13635 new_coalesce.n_rules = n_rules;
13636 i = 0;
13637
13638 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
13639 rem_rule) {
13640 err = nl80211_parse_coalesce_rule(rdev, rule,
13641 &new_coalesce.rules[i]);
13642 if (err)
13643 goto error;
13644
13645 i++;
13646 }
13647
a1056b1b 13648 err = rdev_set_coalesce(rdev, &new_coalesce);
be29b99a
AK		 13649 if (err)
13650 goto error;
13651
13652 n_coalesce = kmemdup(&new_coalesce, sizeof(new_coalesce), GFP_KERNEL);
13653 if (!n_coalesce) {
13654 err = -ENOMEM;
13655 goto error;
13656 }
13657 cfg80211_rdev_free_coalesce(rdev);
13658 rdev->coalesce = n_coalesce;
13659
13660 return 0;
13661error:
13662 for (i = 0; i < new_coalesce.n_rules; i++) {
13663 tmp_rule = &new_coalesce.rules[i];
13664 for (j = 0; j < tmp_rule->n_patterns; j++)
13665 kfree(tmp_rule->patterns[j].mask);
13666 kfree(tmp_rule->patterns);
13667 }
13668 kfree(new_coalesce.rules);
13669
13670 return err;
13671}
13672
e5497d76
JB		 13673static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
13674{
13675 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13676 struct net_device *dev = info->user_ptr[1];
13677 struct wireless_dev *wdev = dev->ieee80211_ptr;
13678 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
f495acd8 13679 struct cfg80211_gtk_rekey_data rekey_data = {};
e5497d76
JB		 13680 int err;
13681
13682 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
13683 return -EINVAL;
13684
8cb08174
JB		 13685 err = nla_parse_nested_deprecated(tb, MAX_NL80211_REKEY_DATA,
13686 info->attrs[NL80211_ATTR_REKEY_DATA],
13687 nl80211_rekey_policy, info->extack);
e5497d76
JB		 13688 if (err)
13689 return err;
13690
e785fa0a
VD		 13691 if (!tb[NL80211_REKEY_DATA_REPLAY_CTR] || !tb[NL80211_REKEY_DATA_KEK] ||
13692 !tb[NL80211_REKEY_DATA_KCK])
13693 return -EINVAL;
093a48d2
NE		 13694 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN &&
13695 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
13696 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KEK_EXT_LEN))
e5497d76 13697 return -ERANGE;
093a48d2
NE		 13698 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN &&
13699 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
13700 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KCK_EXT_LEN))
e5497d76
JB		 13701 return -ERANGE;
13702
78f686ca
JB		 13703 rekey_data.kek = nla_data(tb[NL80211_REKEY_DATA_KEK]);
13704 rekey_data.kck = nla_data(tb[NL80211_REKEY_DATA_KCK]);
13705 rekey_data.replay_ctr = nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]);
093a48d2
NE		 13706 rekey_data.kek_len = nla_len(tb[NL80211_REKEY_DATA_KEK]);
13707 rekey_data.kck_len = nla_len(tb[NL80211_REKEY_DATA_KCK]);
13708 if (tb[NL80211_REKEY_DATA_AKM])
13709 rekey_data.akm = nla_get_u32(tb[NL80211_REKEY_DATA_AKM]);
e5497d76
JB		 13710
13711 wdev_lock(wdev);
7b0a0e3c 13712 if (!wdev->connected) {
e5497d76
JB		 13713 err = -ENOTCONN;
13714 goto out;
13715 }
13716
13717 if (!rdev->ops->set_rekey_data) {
13718 err = -EOPNOTSUPP;
13719 goto out;
13720 }
13721
e35e4d28 13722 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 13723 out:
13724 wdev_unlock(wdev);
13725 return err;
13726}
13727
28946da7
JB		 13728static int nl80211_register_unexpected_frame(struct sk_buff *skb,
13729 struct genl_info *info)
13730{
13731 struct net_device *dev = info->user_ptr[1];
13732 struct wireless_dev *wdev = dev->ieee80211_ptr;
13733
13734 if (wdev->iftype != NL80211_IFTYPE_AP &&
13735 wdev->iftype != NL80211_IFTYPE_P2P_GO)
13736 return -EINVAL;
13737
15e47304 13738 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 13739 return -EBUSY;
13740
15e47304 13741 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 13742 return 0;
13743}
13744
7f6cf311
JB		 13745static int nl80211_probe_client(struct sk_buff *skb,
13746 struct genl_info *info)
13747{
13748 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13749 struct net_device *dev = info->user_ptr[1];
13750 struct wireless_dev *wdev = dev->ieee80211_ptr;
13751 struct sk_buff *msg;
13752 void *hdr;
13753 const u8 *addr;
13754 u64 cookie;
13755 int err;
13756
13757 if (wdev->iftype != NL80211_IFTYPE_AP &&
13758 wdev->iftype != NL80211_IFTYPE_P2P_GO)
13759 return -EOPNOTSUPP;
13760
13761 if (!info->attrs[NL80211_ATTR_MAC])
13762 return -EINVAL;
13763
13764 if (!rdev->ops->probe_client)
13765 return -EOPNOTSUPP;
13766
13767 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13768 if (!msg)
13769 return -ENOMEM;
13770
15e47304 13771 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311 13772 NL80211_CMD_PROBE_CLIENT);
cb35fba3
DC		 13773 if (!hdr) {
13774 err = -ENOBUFS;
7f6cf311
JB		 13775 goto free_msg;
13776 }
13777
13778 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
13779
e35e4d28 13780 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 13781 if (err)
13782 goto free_msg;
13783
2dad624e
ND		 13784 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
13785 NL80211_ATTR_PAD))
9360ffd1 13786 goto nla_put_failure;
7f6cf311
JB		 13787
13788 genlmsg_end(msg, hdr);
13789
13790 return genlmsg_reply(msg, info);
13791
13792 nla_put_failure:
13793 err = -ENOBUFS;
13794 free_msg:
13795 nlmsg_free(msg);
13796 return err;
13797}
13798
5e760230
JB		 13799static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
13800{
13801 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 13802 struct cfg80211_beacon_registration *reg, *nreg;
13803 int rv;
5e760230
JB		 13804
13805 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
13806 return -EOPNOTSUPP;
13807
37c73b5f
BG		 13808 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
13809 if (!nreg)
13810 return -ENOMEM;
13811
13812 /* First, check if already registered. */
13813 spin_lock_bh(&rdev->beacon_registrations_lock);
13814 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
13815 if (reg->nlportid == info->snd_portid) {
13816 rv = -EALREADY;
13817 goto out_err;
13818 }
13819 }
13820 /* Add it to the list */
13821 nreg->nlportid = info->snd_portid;
13822 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 13823
37c73b5f 13824 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 13825
13826 return 0;
37c73b5f
BG		 13827out_err:
13828 spin_unlock_bh(&rdev->beacon_registrations_lock);
13829 kfree(nreg);
13830 return rv;
5e760230
JB		 13831}
13832
98104fde
JB		 13833static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
13834{
13835 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13836 struct wireless_dev *wdev = info->user_ptr[1];
13837 int err;
13838
13839 if (!rdev->ops->start_p2p_device)
13840 return -EOPNOTSUPP;
13841
13842 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
13843 return -EOPNOTSUPP;
13844
73c7da3d 13845 if (wdev_running(wdev))
98104fde
JB		 13846 return 0;
13847
358ae888 13848 if (rfkill_blocked(rdev->wiphy.rfkill))
b6a55015 13849 return -ERFKILL;
98104fde 13850
eeb126e9 13851 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 13852 if (err)
13853 return err;
13854
73c7da3d 13855 wdev->is_running = true;
98104fde 13856 rdev->opencount++;
98104fde
JB		 13857
13858 return 0;
13859}
13860
13861static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
13862{
13863 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13864 struct wireless_dev *wdev = info->user_ptr[1];
13865
13866 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
13867 return -EOPNOTSUPP;
13868
13869 if (!rdev->ops->stop_p2p_device)
13870 return -EOPNOTSUPP;
13871
f9f47529 13872 cfg80211_stop_p2p_device(rdev, wdev);
98104fde
JB		 13873
13874 return 0;
13875}
13876
cb3b7d87
AB		 13877static int nl80211_start_nan(struct sk_buff *skb, struct genl_info *info)
13878{
13879 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13880 struct wireless_dev *wdev = info->user_ptr[1];
13881 struct cfg80211_nan_conf conf = {};
13882 int err;
13883
13884 if (wdev->iftype != NL80211_IFTYPE_NAN)
13885 return -EOPNOTSUPP;
13886
eeb04a96 13887 if (wdev_running(wdev))
cb3b7d87
AB		 13888 return -EEXIST;
13889
358ae888 13890 if (rfkill_blocked(rdev->wiphy.rfkill))
cb3b7d87
AB		 13891 return -ERFKILL;
13892
13893 if (!info->attrs[NL80211_ATTR_NAN_MASTER_PREF])
13894 return -EINVAL;
13895
cb3b7d87
AB		 13896 conf.master_pref =
13897 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
cb3b7d87 13898
8585989d
LC		 13899 if (info->attrs[NL80211_ATTR_BANDS]) {
13900 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
13901
13902 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
13903 return -EOPNOTSUPP;
13904
13905 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
13906 return -EINVAL;
13907
13908 conf.bands = bands;
13909 }
cb3b7d87
AB		 13910
13911 err = rdev_start_nan(rdev, wdev, &conf);
13912 if (err)
13913 return err;
13914
73c7da3d 13915 wdev->is_running = true;
cb3b7d87
AB		 13916 rdev->opencount++;
13917
13918 return 0;
13919}
13920
13921static int nl80211_stop_nan(struct sk_buff *skb, struct genl_info *info)
13922{
13923 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13924 struct wireless_dev *wdev = info->user_ptr[1];
13925
13926 if (wdev->iftype != NL80211_IFTYPE_NAN)
13927 return -EOPNOTSUPP;
13928
13929 cfg80211_stop_nan(rdev, wdev);
13930
13931 return 0;
13932}
13933
a442b761
AB		 13934static int validate_nan_filter(struct nlattr *filter_attr)
13935{
13936 struct nlattr *attr;
13937 int len = 0, n_entries = 0, rem;
13938
13939 nla_for_each_nested(attr, filter_attr, rem) {
13940 len += nla_len(attr);
13941 n_entries++;
13942 }
13943
13944 if (len >= U8_MAX)
13945 return -EINVAL;
13946
13947 return n_entries;
13948}
13949
13950static int handle_nan_filter(struct nlattr *attr_filter,
13951 struct cfg80211_nan_func *func,
13952 bool tx)
13953{
13954 struct nlattr *attr;
13955 int n_entries, rem, i;
13956 struct cfg80211_nan_func_filter *filter;
13957
13958 n_entries = validate_nan_filter(attr_filter);
13959 if (n_entries < 0)
13960 return n_entries;
13961
13962 BUILD_BUG_ON(sizeof(*func->rx_filters) != sizeof(*func->tx_filters));
13963
13964 filter = kcalloc(n_entries, sizeof(*func->rx_filters), GFP_KERNEL);
13965 if (!filter)
13966 return -ENOMEM;
13967
13968 i = 0;
13969 nla_for_each_nested(attr, attr_filter, rem) {
b15ca182 13970 filter[i].filter = nla_memdup(attr, GFP_KERNEL);
6ad27f52
JJ		 13971 if (!filter[i].filter)
13972 goto err;
13973
a442b761
AB		 13974 filter[i].len = nla_len(attr);
13975 i++;
13976 }
13977 if (tx) {
13978 func->num_tx_filters = n_entries;
13979 func->tx_filters = filter;
13980 } else {
13981 func->num_rx_filters = n_entries;
13982 func->rx_filters = filter;
13983 }
13984
13985 return 0;
6ad27f52
JJ		 13986
13987err:
13988 i = 0;
13989 nla_for_each_nested(attr, attr_filter, rem) {
13990 kfree(filter[i].filter);
13991 i++;
13992 }
13993 kfree(filter);
13994 return -ENOMEM;
a442b761
AB		 13995}
13996
13997static int nl80211_nan_add_func(struct sk_buff *skb,
13998 struct genl_info *info)
13999{
14000 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14001 struct wireless_dev *wdev = info->user_ptr[1];
14002 struct nlattr *tb[NUM_NL80211_NAN_FUNC_ATTR], *func_attr;
14003 struct cfg80211_nan_func *func;
14004 struct sk_buff *msg = NULL;
14005 void *hdr = NULL;
14006 int err = 0;
14007
14008 if (wdev->iftype != NL80211_IFTYPE_NAN)
14009 return -EOPNOTSUPP;
14010
73c7da3d 14011 if (!wdev_running(wdev))
a442b761
AB		 14012 return -ENOTCONN;
14013
14014 if (!info->attrs[NL80211_ATTR_NAN_FUNC])
14015 return -EINVAL;
14016
8cb08174
JB		 14017 err = nla_parse_nested_deprecated(tb, NL80211_NAN_FUNC_ATTR_MAX,
14018 info->attrs[NL80211_ATTR_NAN_FUNC],
14019 nl80211_nan_func_policy,
14020 info->extack);
a442b761
AB		 14021 if (err)
14022 return err;
14023
14024 func = kzalloc(sizeof(*func), GFP_KERNEL);
14025 if (!func)
14026 return -ENOMEM;
14027
b60ad348 14028 func->cookie = cfg80211_assign_cookie(rdev);
a442b761 14029
cb9abd48 14030 if (!tb[NL80211_NAN_FUNC_TYPE]) {
a442b761
AB		 14031 err = -EINVAL;
14032 goto out;
14033 }
14034
14035
14036 func->type = nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]);
14037
14038 if (!tb[NL80211_NAN_FUNC_SERVICE_ID]) {
14039 err = -EINVAL;
14040 goto out;
14041 }
14042
14043 memcpy(func->service_id, nla_data(tb[NL80211_NAN_FUNC_SERVICE_ID]),
14044 sizeof(func->service_id));
14045
14046 func->close_range =
14047 nla_get_flag(tb[NL80211_NAN_FUNC_CLOSE_RANGE]);
14048
14049 if (tb[NL80211_NAN_FUNC_SERVICE_INFO]) {
14050 func->serv_spec_info_len =
14051 nla_len(tb[NL80211_NAN_FUNC_SERVICE_INFO]);
14052 func->serv_spec_info =
14053 kmemdup(nla_data(tb[NL80211_NAN_FUNC_SERVICE_INFO]),
14054 func->serv_spec_info_len,
14055 GFP_KERNEL);
14056 if (!func->serv_spec_info) {
14057 err = -ENOMEM;
14058 goto out;
14059 }
14060 }
14061
14062 if (tb[NL80211_NAN_FUNC_TTL])
14063 func->ttl = nla_get_u32(tb[NL80211_NAN_FUNC_TTL]);
14064
14065 switch (func->type) {
14066 case NL80211_NAN_FUNC_PUBLISH:
14067 if (!tb[NL80211_NAN_FUNC_PUBLISH_TYPE]) {
14068 err = -EINVAL;
14069 goto out;
14070 }
14071
14072 func->publish_type =
14073 nla_get_u8(tb[NL80211_NAN_FUNC_PUBLISH_TYPE]);
14074 func->publish_bcast =
14075 nla_get_flag(tb[NL80211_NAN_FUNC_PUBLISH_BCAST]);
14076
14077 if ((!(func->publish_type & NL80211_NAN_SOLICITED_PUBLISH)) &&
14078 func->publish_bcast) {
14079 err = -EINVAL;
14080 goto out;
14081 }
14082 break;
14083 case NL80211_NAN_FUNC_SUBSCRIBE:
14084 func->subscribe_active =
14085 nla_get_flag(tb[NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE]);
14086 break;
14087 case NL80211_NAN_FUNC_FOLLOW_UP:
14088 if (!tb[NL80211_NAN_FUNC_FOLLOW_UP_ID] ||
3ea15452
HC		 14089 !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] ||
14090 !tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]) {
a442b761
AB		 14091 err = -EINVAL;
14092 goto out;
14093 }
14094
14095 func->followup_id =
14096 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_ID]);
14097 func->followup_reqid =
14098 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID]);
14099 memcpy(func->followup_dest.addr,
14100 nla_data(tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]),
14101 sizeof(func->followup_dest.addr));
14102 if (func->ttl) {
14103 err = -EINVAL;
14104 goto out;
14105 }
14106 break;
14107 default:
14108 err = -EINVAL;
14109 goto out;
14110 }
14111
14112 if (tb[NL80211_NAN_FUNC_SRF]) {
14113 struct nlattr *srf_tb[NUM_NL80211_NAN_SRF_ATTR];
14114
8cb08174
JB		 14115 err = nla_parse_nested_deprecated(srf_tb,
14116 NL80211_NAN_SRF_ATTR_MAX,
14117 tb[NL80211_NAN_FUNC_SRF],
14118 nl80211_nan_srf_policy,
14119 info->extack);
a442b761
AB		 14120 if (err)
14121 goto out;
14122
14123 func->srf_include =
14124 nla_get_flag(srf_tb[NL80211_NAN_SRF_INCLUDE]);
14125
14126 if (srf_tb[NL80211_NAN_SRF_BF]) {
14127 if (srf_tb[NL80211_NAN_SRF_MAC_ADDRS] ||
14128 !srf_tb[NL80211_NAN_SRF_BF_IDX]) {
14129 err = -EINVAL;
14130 goto out;
14131 }
14132
14133 func->srf_bf_len =
14134 nla_len(srf_tb[NL80211_NAN_SRF_BF]);
14135 func->srf_bf =
14136 kmemdup(nla_data(srf_tb[NL80211_NAN_SRF_BF]),
14137 func->srf_bf_len, GFP_KERNEL);
14138 if (!func->srf_bf) {
14139 err = -ENOMEM;
14140 goto out;
14141 }
14142
14143 func->srf_bf_idx =
14144 nla_get_u8(srf_tb[NL80211_NAN_SRF_BF_IDX]);
14145 } else {
14146 struct nlattr *attr, *mac_attr =
14147 srf_tb[NL80211_NAN_SRF_MAC_ADDRS];
14148 int n_entries, rem, i = 0;
14149
14150 if (!mac_attr) {
14151 err = -EINVAL;
14152 goto out;
14153 }
14154
14155 n_entries = validate_acl_mac_addrs(mac_attr);
14156 if (n_entries <= 0) {
14157 err = -EINVAL;
14158 goto out;
14159 }
14160
14161 func->srf_num_macs = n_entries;
14162 func->srf_macs =
6396bb22 14163 kcalloc(n_entries, sizeof(*func->srf_macs),
a442b761
AB		 14164 GFP_KERNEL);
14165 if (!func->srf_macs) {
14166 err = -ENOMEM;
14167 goto out;
14168 }
14169
14170 nla_for_each_nested(attr, mac_attr, rem)
14171 memcpy(func->srf_macs[i++].addr, nla_data(attr),
14172 sizeof(*func->srf_macs));
14173 }
14174 }
14175
14176 if (tb[NL80211_NAN_FUNC_TX_MATCH_FILTER]) {
14177 err = handle_nan_filter(tb[NL80211_NAN_FUNC_TX_MATCH_FILTER],
14178 func, true);
14179 if (err)
14180 goto out;
14181 }
14182
14183 if (tb[NL80211_NAN_FUNC_RX_MATCH_FILTER]) {
14184 err = handle_nan_filter(tb[NL80211_NAN_FUNC_RX_MATCH_FILTER],
14185 func, false);
14186 if (err)
14187 goto out;
14188 }
14189
14190 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14191 if (!msg) {
14192 err = -ENOMEM;
14193 goto out;
14194 }
14195
14196 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14197 NL80211_CMD_ADD_NAN_FUNCTION);
14198 /* This can't really happen - we just allocated 4KB */
14199 if (WARN_ON(!hdr)) {
14200 err = -ENOMEM;
14201 goto out;
14202 }
14203
14204 err = rdev_add_nan_func(rdev, wdev, func);
14205out:
14206 if (err < 0) {
14207 cfg80211_free_nan_func(func);
14208 nlmsg_free(msg);
14209 return err;
14210 }
14211
14212 /* propagate the instance id and cookie to userspace */
14213 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, func->cookie,
14214 NL80211_ATTR_PAD))
14215 goto nla_put_failure;
14216
ae0be8de 14217 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
a442b761
AB		 14218 if (!func_attr)
14219 goto nla_put_failure;
14220
14221 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID,
14222 func->instance_id))
14223 goto nla_put_failure;
14224
14225 nla_nest_end(msg, func_attr);
14226
14227 genlmsg_end(msg, hdr);
14228 return genlmsg_reply(msg, info);
14229
14230nla_put_failure:
14231 nlmsg_free(msg);
14232 return -ENOBUFS;
14233}
14234
14235static int nl80211_nan_del_func(struct sk_buff *skb,
14236 struct genl_info *info)
14237{
14238 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14239 struct wireless_dev *wdev = info->user_ptr[1];
14240 u64 cookie;
14241
14242 if (wdev->iftype != NL80211_IFTYPE_NAN)
14243 return -EOPNOTSUPP;
14244
73c7da3d 14245 if (!wdev_running(wdev))
a442b761
AB		 14246 return -ENOTCONN;
14247
14248 if (!info->attrs[NL80211_ATTR_COOKIE])
14249 return -EINVAL;
14250
a442b761
AB		 14251 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
14252
14253 rdev_del_nan_func(rdev, wdev, cookie);
14254
14255 return 0;
14256}
14257
a5a9dcf2
AB		 14258static int nl80211_nan_change_config(struct sk_buff *skb,
14259 struct genl_info *info)
14260{
14261 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14262 struct wireless_dev *wdev = info->user_ptr[1];
14263 struct cfg80211_nan_conf conf = {};
14264 u32 changed = 0;
14265
14266 if (wdev->iftype != NL80211_IFTYPE_NAN)
14267 return -EOPNOTSUPP;
14268
73c7da3d 14269 if (!wdev_running(wdev))
a5a9dcf2
AB		 14270 return -ENOTCONN;
14271
14272 if (info->attrs[NL80211_ATTR_NAN_MASTER_PREF]) {
14273 conf.master_pref =
14274 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
14275 if (conf.master_pref <= 1 || conf.master_pref == 255)
14276 return -EINVAL;
14277
14278 changed |= CFG80211_NAN_CONF_CHANGED_PREF;
14279 }
14280
8585989d
LC		 14281 if (info->attrs[NL80211_ATTR_BANDS]) {
14282 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
14283
14284 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
14285 return -EOPNOTSUPP;
14286
14287 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
14288 return -EINVAL;
14289
14290 conf.bands = bands;
14291 changed |= CFG80211_NAN_CONF_CHANGED_BANDS;
a5a9dcf2
AB		 14292 }
14293
14294 if (!changed)
14295 return -EINVAL;
14296
14297 return rdev_nan_change_conf(rdev, wdev, &conf, changed);
14298}
14299
50bcd31d
AB		 14300void cfg80211_nan_match(struct wireless_dev *wdev,
14301 struct cfg80211_nan_match_params *match, gfp_t gfp)
14302{
14303 struct wiphy *wiphy = wdev->wiphy;
14304 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14305 struct nlattr *match_attr, *local_func_attr, *peer_func_attr;
14306 struct sk_buff *msg;
14307 void *hdr;
14308
14309 if (WARN_ON(!match->inst_id || !match->peer_inst_id || !match->addr))
14310 return;
14311
14312 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
14313 if (!msg)
14314 return;
14315
14316 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NAN_MATCH);
14317 if (!hdr) {
14318 nlmsg_free(msg);
14319 return;
14320 }
14321
14322 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
14323 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
14324 wdev->netdev->ifindex)) ||
14325 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
14326 NL80211_ATTR_PAD))
14327 goto nla_put_failure;
14328
14329 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, match->cookie,
14330 NL80211_ATTR_PAD) ||
14331 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, match->addr))
14332 goto nla_put_failure;
14333
ae0be8de 14334 match_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_MATCH);
50bcd31d
AB		 14335 if (!match_attr)
14336 goto nla_put_failure;
14337
ae0be8de
MK		 14338 local_func_attr = nla_nest_start_noflag(msg,
14339 NL80211_NAN_MATCH_FUNC_LOCAL);
50bcd31d
AB		 14340 if (!local_func_attr)
14341 goto nla_put_failure;
14342
14343 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->inst_id))
14344 goto nla_put_failure;
14345
14346 nla_nest_end(msg, local_func_attr);
14347
ae0be8de
MK		 14348 peer_func_attr = nla_nest_start_noflag(msg,
14349 NL80211_NAN_MATCH_FUNC_PEER);
50bcd31d
AB		 14350 if (!peer_func_attr)
14351 goto nla_put_failure;
14352
14353 if (nla_put_u8(msg, NL80211_NAN_FUNC_TYPE, match->type) ||
14354 nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->peer_inst_id))
14355 goto nla_put_failure;
14356
14357 if (match->info && match->info_len &&
14358 nla_put(msg, NL80211_NAN_FUNC_SERVICE_INFO, match->info_len,
14359 match->info))
14360 goto nla_put_failure;
14361
14362 nla_nest_end(msg, peer_func_attr);
14363 nla_nest_end(msg, match_attr);
14364 genlmsg_end(msg, hdr);
14365
14366 if (!wdev->owner_nlportid)
14367 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
14368 msg, 0, NL80211_MCGRP_NAN, gfp);
14369 else
14370 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
14371 wdev->owner_nlportid);
14372
14373 return;
14374
14375nla_put_failure:
14376 nlmsg_free(msg);
14377}
14378EXPORT_SYMBOL(cfg80211_nan_match);
14379
368e5a7b
AB		 14380void cfg80211_nan_func_terminated(struct wireless_dev *wdev,
14381 u8 inst_id,
14382 enum nl80211_nan_func_term_reason reason,
14383 u64 cookie, gfp_t gfp)
14384{
14385 struct wiphy *wiphy = wdev->wiphy;
14386 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14387 struct sk_buff *msg;
14388 struct nlattr *func_attr;
14389 void *hdr;
14390
14391 if (WARN_ON(!inst_id))
14392 return;
14393
14394 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
14395 if (!msg)
14396 return;
14397
14398 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_NAN_FUNCTION);
14399 if (!hdr) {
14400 nlmsg_free(msg);
14401 return;
14402 }
14403
14404 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
14405 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
14406 wdev->netdev->ifindex)) ||
14407 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
14408 NL80211_ATTR_PAD))
14409 goto nla_put_failure;
14410
14411 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
14412 NL80211_ATTR_PAD))
14413 goto nla_put_failure;
14414
ae0be8de 14415 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
368e5a7b
AB		 14416 if (!func_attr)
14417 goto nla_put_failure;
14418
14419 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, inst_id) ||
14420 nla_put_u8(msg, NL80211_NAN_FUNC_TERM_REASON, reason))
14421 goto nla_put_failure;
14422
14423 nla_nest_end(msg, func_attr);
14424 genlmsg_end(msg, hdr);
14425
14426 if (!wdev->owner_nlportid)
14427 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
14428 msg, 0, NL80211_MCGRP_NAN, gfp);
14429 else
14430 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
14431 wdev->owner_nlportid);
14432
14433 return;
14434
14435nla_put_failure:
14436 nlmsg_free(msg);
14437}
14438EXPORT_SYMBOL(cfg80211_nan_func_terminated);
14439
3713b4e3
JB		 14440static int nl80211_get_protocol_features(struct sk_buff *skb,
14441 struct genl_info *info)
14442{
14443 void *hdr;
14444 struct sk_buff *msg;
14445
14446 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14447 if (!msg)
14448 return -ENOMEM;
14449
14450 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14451 NL80211_CMD_GET_PROTOCOL_FEATURES);
14452 if (!hdr)
14453 goto nla_put_failure;
14454
14455 if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
14456 NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
14457 goto nla_put_failure;
14458
14459 genlmsg_end(msg, hdr);
14460 return genlmsg_reply(msg, info);
14461
14462 nla_put_failure:
14463 kfree_skb(msg);
14464 return -ENOBUFS;
14465}
14466
355199e0
JM		 14467static int nl80211_update_ft_ies(struct sk_buff *skb, struct genl_info *info)
14468{
14469 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14470 struct cfg80211_update_ft_ies_params ft_params;
14471 struct net_device *dev = info->user_ptr[1];
14472
14473 if (!rdev->ops->update_ft_ies)
14474 return -EOPNOTSUPP;
14475
14476 if (!info->attrs[NL80211_ATTR_MDID] ||
3d7af878 14477 !info->attrs[NL80211_ATTR_IE])
355199e0
JM		 14478 return -EINVAL;
14479
14480 memset(&ft_params, 0, sizeof(ft_params));
14481 ft_params.md = nla_get_u16(info->attrs[NL80211_ATTR_MDID]);
14482 ft_params.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
14483 ft_params.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
14484
14485 return rdev_update_ft_ies(rdev, dev, &ft_params);
14486}
14487
5de17984
AS		 14488static int nl80211_crit_protocol_start(struct sk_buff *skb,
14489 struct genl_info *info)
14490{
14491 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14492 struct wireless_dev *wdev = info->user_ptr[1];
14493 enum nl80211_crit_proto_id proto = NL80211_CRIT_PROTO_UNSPEC;
14494 u16 duration;
14495 int ret;
14496
14497 if (!rdev->ops->crit_proto_start)
14498 return -EOPNOTSUPP;
14499
14500 if (WARN_ON(!rdev->ops->crit_proto_stop))
14501 return -EINVAL;
14502
14503 if (rdev->crit_proto_nlportid)
14504 return -EBUSY;
14505
14506 /* determine protocol if provided */
14507 if (info->attrs[NL80211_ATTR_CRIT_PROT_ID])
14508 proto = nla_get_u16(info->attrs[NL80211_ATTR_CRIT_PROT_ID]);
14509
14510 if (proto >= NUM_NL80211_CRIT_PROTO)
14511 return -EINVAL;
14512
14513 /* timeout must be provided */
14514 if (!info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION])
14515 return -EINVAL;
14516
14517 duration =
14518 nla_get_u16(info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION]);
14519
5de17984
AS		 14520 ret = rdev_crit_proto_start(rdev, wdev, proto, duration);
14521 if (!ret)
14522 rdev->crit_proto_nlportid = info->snd_portid;
14523
14524 return ret;
14525}
14526
14527static int nl80211_crit_protocol_stop(struct sk_buff *skb,
14528 struct genl_info *info)
14529{
14530 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14531 struct wireless_dev *wdev = info->user_ptr[1];
14532
14533 if (!rdev->ops->crit_proto_stop)
14534 return -EOPNOTSUPP;
14535
14536 if (rdev->crit_proto_nlportid) {
14537 rdev->crit_proto_nlportid = 0;
14538 rdev_crit_proto_stop(rdev, wdev);
14539 }
14540 return 0;
14541}
14542
901bb989
JB		 14543static int nl80211_vendor_check_policy(const struct wiphy_vendor_command *vcmd,
14544 struct nlattr *attr,
14545 struct netlink_ext_ack *extack)
14546{
14547 if (vcmd->policy == VENDOR_CMD_RAW_DATA) {
14548 if (attr->nla_type & NLA_F_NESTED) {
14549 NL_SET_ERR_MSG_ATTR(extack, attr,
14550 "unexpected nested data");
14551 return -EINVAL;
14552 }
14553
14554 return 0;
14555 }
14556
14557 if (!(attr->nla_type & NLA_F_NESTED)) {
14558 NL_SET_ERR_MSG_ATTR(extack, attr, "expected nested data");
14559 return -EINVAL;
14560 }
14561
32d5109a 14562 return nla_validate_nested(attr, vcmd->maxattr, vcmd->policy, extack);
901bb989
JB		 14563}
14564
ad7e718c
JB		 14565static int nl80211_vendor_cmd(struct sk_buff *skb, struct genl_info *info)
14566{
14567 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14568 struct wireless_dev *wdev =
a05829a7
JB		 14569 __cfg80211_wdev_from_attrs(rdev, genl_info_net(info),
14570 info->attrs);
ad7e718c
JB		 14571 int i, err;
14572 u32 vid, subcmd;
14573
14574 if (!rdev->wiphy.vendor_commands)
14575 return -EOPNOTSUPP;
14576
14577 if (IS_ERR(wdev)) {
14578 err = PTR_ERR(wdev);
14579 if (err != -EINVAL)
14580 return err;
14581 wdev = NULL;
14582 } else if (wdev->wiphy != &rdev->wiphy) {
14583 return -EINVAL;
14584 }
14585
14586 if (!info->attrs[NL80211_ATTR_VENDOR_ID] ||
14587 !info->attrs[NL80211_ATTR_VENDOR_SUBCMD])
14588 return -EINVAL;
14589
14590 vid = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_ID]);
14591 subcmd = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_SUBCMD]);
14592 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
14593 const struct wiphy_vendor_command *vcmd;
14594 void *data = NULL;
14595 int len = 0;
14596
14597 vcmd = &rdev->wiphy.vendor_commands[i];
14598
14599 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
14600 continue;
14601
14602 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
14603 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
14604 if (!wdev)
14605 return -EINVAL;
14606 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
14607 !wdev->netdev)
14608 return -EINVAL;
14609
14610 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
73c7da3d 14611 if (!wdev_running(wdev))
ad7e718c
JB		 14612 return -ENETDOWN;
14613 }
14614 } else {
14615 wdev = NULL;
14616 }
14617
4052d3d2
JS		 14618 if (!vcmd->doit)
14619 return -EOPNOTSUPP;
14620
ad7e718c
JB		 14621 if (info->attrs[NL80211_ATTR_VENDOR_DATA]) {
14622 data = nla_data(info->attrs[NL80211_ATTR_VENDOR_DATA]);
14623 len = nla_len(info->attrs[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 14624
14625 err = nl80211_vendor_check_policy(vcmd,
14626 info->attrs[NL80211_ATTR_VENDOR_DATA],
14627 info->extack);
14628 if (err)
14629 return err;
ad7e718c
JB		 14630 }
14631
14632 rdev->cur_cmd_info = info;
901bb989 14633 err = vcmd->doit(&rdev->wiphy, wdev, data, len);
ad7e718c
JB		 14634 rdev->cur_cmd_info = NULL;
14635 return err;
14636 }
14637
14638 return -EOPNOTSUPP;
14639}
14640
7bdbe400
JB		 14641static int nl80211_prepare_vendor_dump(struct sk_buff *skb,
14642 struct netlink_callback *cb,
14643 struct cfg80211_registered_device **rdev,
14644 struct wireless_dev **wdev)
14645{
50508d94 14646 struct nlattr **attrbuf;
7bdbe400
JB		 14647 u32 vid, subcmd;
14648 unsigned int i;
14649 int vcmd_idx = -1;
14650 int err;
14651 void *data = NULL;
14652 unsigned int data_len = 0;
14653
7bdbe400
JB		 14654 if (cb->args[0]) {
14655 /* subtract the 1 again here */
14656 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
14657 struct wireless_dev *tmp;
14658
ea90e0dc
JB		 14659 if (!wiphy)
14660 return -ENODEV;
7bdbe400
JB		 14661 *rdev = wiphy_to_rdev(wiphy);
14662 *wdev = NULL;
14663
14664 if (cb->args[1]) {
53873f13 14665 list_for_each_entry(tmp, &wiphy->wdev_list, list) {
7bdbe400
JB		 14666 if (tmp->identifier == cb->args[1] - 1) {
14667 *wdev = tmp;
14668 break;
14669 }
14670 }
14671 }
14672
14673 /* keep rtnl locked in successful case */
14674 return 0;
14675 }
14676
50508d94
JB		 14677 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
14678 if (!attrbuf)
14679 return -ENOMEM;
14680
8cb08174
JB		 14681 err = nlmsg_parse_deprecated(cb->nlh,
14682 GENL_HDRLEN + nl80211_fam.hdrsize,
14683 attrbuf, nl80211_fam.maxattr,
14684 nl80211_policy, NULL);
7bdbe400 14685 if (err)
50508d94 14686 goto out;
7bdbe400 14687
c90c39da 14688 if (!attrbuf[NL80211_ATTR_VENDOR_ID] ||
50508d94
JB		 14689 !attrbuf[NL80211_ATTR_VENDOR_SUBCMD]) {
14690 err = -EINVAL;
14691 goto out;
14692 }
7bdbe400 14693
a05829a7 14694 *wdev = __cfg80211_wdev_from_attrs(NULL, sock_net(skb->sk), attrbuf);
7bdbe400
JB		 14695 if (IS_ERR(*wdev))
14696 *wdev = NULL;
14697
c90c39da 14698 *rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
50508d94
JB		 14699 if (IS_ERR(*rdev)) {
14700 err = PTR_ERR(*rdev);
14701 goto out;
14702 }
7bdbe400 14703
c90c39da
JB		 14704 vid = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_ID]);
14705 subcmd = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_SUBCMD]);
7bdbe400
JB		 14706
14707 for (i = 0; i < (*rdev)->wiphy.n_vendor_commands; i++) {
14708 const struct wiphy_vendor_command *vcmd;
14709
14710 vcmd = &(*rdev)->wiphy.vendor_commands[i];
14711
14712 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
14713 continue;
14714
50508d94
JB		 14715 if (!vcmd->dumpit) {
14716 err = -EOPNOTSUPP;
14717 goto out;
14718 }
7bdbe400
JB		 14719
14720 vcmd_idx = i;
14721 break;
14722 }
14723
50508d94
JB		 14724 if (vcmd_idx < 0) {
14725 err = -EOPNOTSUPP;
14726 goto out;
14727 }
7bdbe400 14728
c90c39da
JB		 14729 if (attrbuf[NL80211_ATTR_VENDOR_DATA]) {
14730 data = nla_data(attrbuf[NL80211_ATTR_VENDOR_DATA]);
14731 data_len = nla_len(attrbuf[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 14732
14733 err = nl80211_vendor_check_policy(
14734 &(*rdev)->wiphy.vendor_commands[vcmd_idx],
14735 attrbuf[NL80211_ATTR_VENDOR_DATA],
14736 cb->extack);
14737 if (err)
50508d94 14738 goto out;
7bdbe400
JB		 14739 }
14740
14741 /* 0 is the first index - add 1 to parse only once */
14742 cb->args[0] = (*rdev)->wiphy_idx + 1;
14743 /* add 1 to know if it was NULL */
14744 cb->args[1] = *wdev ? (*wdev)->identifier + 1 : 0;
14745 cb->args[2] = vcmd_idx;
14746 cb->args[3] = (unsigned long)data;
14747 cb->args[4] = data_len;
14748
14749 /* keep rtnl locked in successful case */
50508d94
JB		 14750 err = 0;
14751out:
14752 kfree(attrbuf);
14753 return err;
7bdbe400
JB		 14754}
14755
14756static int nl80211_vendor_cmd_dump(struct sk_buff *skb,
14757 struct netlink_callback *cb)
14758{
14759 struct cfg80211_registered_device *rdev;
14760 struct wireless_dev *wdev;
14761 unsigned int vcmd_idx;
14762 const struct wiphy_vendor_command *vcmd;
14763 void *data;
14764 int data_len;
14765 int err;
14766 struct nlattr *vendor_data;
14767
ea90e0dc 14768 rtnl_lock();
7bdbe400
JB		 14769 err = nl80211_prepare_vendor_dump(skb, cb, &rdev, &wdev);
14770 if (err)
ea90e0dc 14771 goto out;
7bdbe400
JB		 14772
14773 vcmd_idx = cb->args[2];
14774 data = (void *)cb->args[3];
14775 data_len = cb->args[4];
14776 vcmd = &rdev->wiphy.vendor_commands[vcmd_idx];
14777
14778 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
14779 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
ea90e0dc
JB		 14780 if (!wdev) {
14781 err = -EINVAL;
14782 goto out;
14783 }
7bdbe400 14784 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
ea90e0dc
JB		 14785 !wdev->netdev) {
14786 err = -EINVAL;
14787 goto out;
14788 }
7bdbe400
JB		 14789
14790 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
ea90e0dc
JB		 14791 if (!wdev_running(wdev)) {
14792 err = -ENETDOWN;
14793 goto out;
14794 }
7bdbe400
JB		 14795 }
14796 }
14797
14798 while (1) {
14799 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
14800 cb->nlh->nlmsg_seq, NLM_F_MULTI,
14801 NL80211_CMD_VENDOR);
14802 if (!hdr)
14803 break;
14804
14805 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 14806 (wdev && nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
14807 wdev_id(wdev),
14808 NL80211_ATTR_PAD))) {
7bdbe400
JB		 14809 genlmsg_cancel(skb, hdr);
14810 break;
14811 }
14812
ae0be8de
MK		 14813 vendor_data = nla_nest_start_noflag(skb,
14814 NL80211_ATTR_VENDOR_DATA);
7bdbe400
JB		 14815 if (!vendor_data) {
14816 genlmsg_cancel(skb, hdr);
14817 break;
14818 }
14819
14820 err = vcmd->dumpit(&rdev->wiphy, wdev, skb, data, data_len,
14821 (unsigned long *)&cb->args[5]);
14822 nla_nest_end(skb, vendor_data);
14823
14824 if (err == -ENOBUFS || err == -ENOENT) {
14825 genlmsg_cancel(skb, hdr);
14826 break;
9c167b2d 14827 } else if (err <= 0) {
7bdbe400
JB		 14828 genlmsg_cancel(skb, hdr);
14829 goto out;
14830 }
14831
14832 genlmsg_end(skb, hdr);
14833 }
14834
14835 err = skb->len;
14836 out:
14837 rtnl_unlock();
14838 return err;
14839}
14840
ad7e718c
JB		 14841struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
14842 enum nl80211_commands cmd,
14843 enum nl80211_attrs attr,
14844 int approxlen)
14845{
f26cbf40 14846 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ad7e718c
JB		 14847
14848 if (WARN_ON(!rdev->cur_cmd_info))
14849 return NULL;
14850
6c09e791 14851 return __cfg80211_alloc_vendor_skb(rdev, NULL, approxlen,
ad7e718c
JB		 14852 rdev->cur_cmd_info->snd_portid,
14853 rdev->cur_cmd_info->snd_seq,
567ffc35 14854 cmd, attr, NULL, GFP_KERNEL);
ad7e718c
JB		 14855}
14856EXPORT_SYMBOL(__cfg80211_alloc_reply_skb);
14857
14858int cfg80211_vendor_cmd_reply(struct sk_buff *skb)
14859{
14860 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
14861 void *hdr = ((void **)skb->cb)[1];
14862 struct nlattr *data = ((void **)skb->cb)[2];
14863
bd8c78e7
JB		 14864 /* clear CB data for netlink core to own from now on */
14865 memset(skb->cb, 0, sizeof(skb->cb));
14866
ad7e718c
JB		 14867 if (WARN_ON(!rdev->cur_cmd_info)) {
14868 kfree_skb(skb);
14869 return -EINVAL;
14870 }
14871
14872 nla_nest_end(skb, data);
14873 genlmsg_end(skb, hdr);
14874 return genlmsg_reply(skb, rdev->cur_cmd_info);
14875}
14876EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_reply);
14877
55c1fdf0
JB		 14878unsigned int cfg80211_vendor_cmd_get_sender(struct wiphy *wiphy)
14879{
14880 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14881
14882 if (WARN_ON(!rdev->cur_cmd_info))
14883 return 0;
14884
14885 return rdev->cur_cmd_info->snd_portid;
14886}
14887EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_get_sender);
14888
fa9ffc74
KP		 14889static int nl80211_set_qos_map(struct sk_buff *skb,
14890 struct genl_info *info)
14891{
14892 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14893 struct cfg80211_qos_map *qos_map = NULL;
14894 struct net_device *dev = info->user_ptr[1];
14895 u8 *pos, len, num_des, des_len, des;
14896 int ret;
14897
14898 if (!rdev->ops->set_qos_map)
14899 return -EOPNOTSUPP;
14900
14901 if (info->attrs[NL80211_ATTR_QOS_MAP]) {
14902 pos = nla_data(info->attrs[NL80211_ATTR_QOS_MAP]);
14903 len = nla_len(info->attrs[NL80211_ATTR_QOS_MAP]);
14904
c8b82802 14905 if (len % 2)
fa9ffc74
KP		 14906 return -EINVAL;
14907
14908 qos_map = kzalloc(sizeof(struct cfg80211_qos_map), GFP_KERNEL);
14909 if (!qos_map)
14910 return -ENOMEM;
14911
14912 num_des = (len - IEEE80211_QOS_MAP_LEN_MIN) >> 1;
14913 if (num_des) {
14914 des_len = num_des *
14915 sizeof(struct cfg80211_dscp_exception);
14916 memcpy(qos_map->dscp_exception, pos, des_len);
14917 qos_map->num_des = num_des;
14918 for (des = 0; des < num_des; des++) {
14919 if (qos_map->dscp_exception[des].up > 7) {
14920 kfree(qos_map);
14921 return -EINVAL;
14922 }
14923 }
14924 pos += des_len;
14925 }
14926 memcpy(qos_map->up, pos, IEEE80211_QOS_MAP_LEN_MIN);
14927 }
14928
14929 wdev_lock(dev->ieee80211_ptr);
14930 ret = nl80211_key_allowed(dev->ieee80211_ptr);
14931 if (!ret)
14932 ret = rdev_set_qos_map(rdev, dev, qos_map);
14933 wdev_unlock(dev->ieee80211_ptr);
14934
14935 kfree(qos_map);
14936 return ret;
14937}
14938
960d01ac
JB		 14939static int nl80211_add_tx_ts(struct sk_buff *skb, struct genl_info *info)
14940{
14941 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14942 struct net_device *dev = info->user_ptr[1];
14943 struct wireless_dev *wdev = dev->ieee80211_ptr;
14944 const u8 *peer;
14945 u8 tsid, up;
14946 u16 admitted_time = 0;
14947 int err;
14948
723e73ac 14949 if (!(rdev->wiphy.features & NL80211_FEATURE_SUPPORTS_WMM_ADMISSION))
960d01ac
JB		 14950 return -EOPNOTSUPP;
14951
14952 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC] ||
14953 !info->attrs[NL80211_ATTR_USER_PRIO])
14954 return -EINVAL;
14955
14956 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
960d01ac 14957 up = nla_get_u8(info->attrs[NL80211_ATTR_USER_PRIO]);
960d01ac
JB		 14958
14959 /* WMM uses TIDs 0-7 even for TSPEC */
723e73ac 14960 if (tsid >= IEEE80211_FIRST_TSPEC_TSID) {
960d01ac 14961 /* TODO: handle 802.11 TSPEC/admission control
723e73ac
JB		 14962 * need more attributes for that (e.g. BA session requirement);
14963 * change the WMM adminssion test above to allow both then
960d01ac
JB		 14964 */
14965 return -EINVAL;
14966 }
14967
14968 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14969
14970 if (info->attrs[NL80211_ATTR_ADMITTED_TIME]) {
14971 admitted_time =
14972 nla_get_u16(info->attrs[NL80211_ATTR_ADMITTED_TIME]);
14973 if (!admitted_time)
14974 return -EINVAL;
14975 }
14976
14977 wdev_lock(wdev);
14978 switch (wdev->iftype) {
14979 case NL80211_IFTYPE_STATION:
14980 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c 14981 if (wdev->connected)
960d01ac
JB		 14982 break;
14983 err = -ENOTCONN;
14984 goto out;
14985 default:
14986 err = -EOPNOTSUPP;
14987 goto out;
14988 }
14989
14990 err = rdev_add_tx_ts(rdev, dev, tsid, peer, up, admitted_time);
14991
14992 out:
14993 wdev_unlock(wdev);
14994 return err;
14995}
14996
14997static int nl80211_del_tx_ts(struct sk_buff *skb, struct genl_info *info)
14998{
14999 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15000 struct net_device *dev = info->user_ptr[1];
15001 struct wireless_dev *wdev = dev->ieee80211_ptr;
15002 const u8 *peer;
15003 u8 tsid;
15004 int err;
15005
15006 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC])
15007 return -EINVAL;
15008
15009 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
15010 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
15011
15012 wdev_lock(wdev);
15013 err = rdev_del_tx_ts(rdev, dev, tsid, peer);
15014 wdev_unlock(wdev);
15015
15016 return err;
15017}
15018
1057d35e
AN		 15019static int nl80211_tdls_channel_switch(struct sk_buff *skb,
15020 struct genl_info *info)
15021{
15022 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15023 struct net_device *dev = info->user_ptr[1];
15024 struct wireless_dev *wdev = dev->ieee80211_ptr;
15025 struct cfg80211_chan_def chandef = {};
15026 const u8 *addr;
15027 u8 oper_class;
15028 int err;
15029
15030 if (!rdev->ops->tdls_channel_switch ||
15031 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
15032 return -EOPNOTSUPP;
15033
15034 switch (dev->ieee80211_ptr->iftype) {
15035 case NL80211_IFTYPE_STATION:
15036 case NL80211_IFTYPE_P2P_CLIENT:
15037 break;
15038 default:
15039 return -EOPNOTSUPP;
15040 }
15041
15042 if (!info->attrs[NL80211_ATTR_MAC] ||
15043 !info->attrs[NL80211_ATTR_OPER_CLASS])
15044 return -EINVAL;
15045
15046 err = nl80211_parse_chandef(rdev, info, &chandef);
15047 if (err)
15048 return err;
15049
15050 /*
15051 * Don't allow wide channels on the 2.4Ghz band, as per IEEE802.11-2012
15052 * section 10.22.6.2.1. Disallow 5/10Mhz channels as well for now, the
15053 * specification is not defined for them.
15054 */
57fbcce3 15055 if (chandef.chan->band == NL80211_BAND_2GHZ &&
1057d35e
AN		 15056 chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
15057 chandef.width != NL80211_CHAN_WIDTH_20)
15058 return -EINVAL;
15059
15060 /* we will be active on the TDLS link */
923b352f
AN		 15061 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
15062 wdev->iftype))
1057d35e
AN		 15063 return -EINVAL;
15064
15065 /* don't allow switching to DFS channels */
15066 if (cfg80211_chandef_dfs_required(wdev->wiphy, &chandef, wdev->iftype))
15067 return -EINVAL;
15068
15069 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15070 oper_class = nla_get_u8(info->attrs[NL80211_ATTR_OPER_CLASS]);
15071
15072 wdev_lock(wdev);
15073 err = rdev_tdls_channel_switch(rdev, dev, addr, oper_class, &chandef);
15074 wdev_unlock(wdev);
15075
15076 return err;
15077}
15078
15079static int nl80211_tdls_cancel_channel_switch(struct sk_buff *skb,
15080 struct genl_info *info)
15081{
15082 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15083 struct net_device *dev = info->user_ptr[1];
15084 struct wireless_dev *wdev = dev->ieee80211_ptr;
15085 const u8 *addr;
15086
15087 if (!rdev->ops->tdls_channel_switch ||
15088 !rdev->ops->tdls_cancel_channel_switch ||
15089 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
15090 return -EOPNOTSUPP;
15091
15092 switch (dev->ieee80211_ptr->iftype) {
15093 case NL80211_IFTYPE_STATION:
15094 case NL80211_IFTYPE_P2P_CLIENT:
15095 break;
15096 default:
15097 return -EOPNOTSUPP;
15098 }
15099
15100 if (!info->attrs[NL80211_ATTR_MAC])
15101 return -EINVAL;
15102
15103 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15104
15105 wdev_lock(wdev);
15106 rdev_tdls_cancel_channel_switch(rdev, dev, addr);
15107 wdev_unlock(wdev);
15108
15109 return 0;
15110}
15111
ce0ce13a
MB		 15112static int nl80211_set_multicast_to_unicast(struct sk_buff *skb,
15113 struct genl_info *info)
15114{
15115 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15116 struct net_device *dev = info->user_ptr[1];
15117 struct wireless_dev *wdev = dev->ieee80211_ptr;
15118 const struct nlattr *nla;
15119 bool enabled;
15120
ce0ce13a
MB		 15121 if (!rdev->ops->set_multicast_to_unicast)
15122 return -EOPNOTSUPP;
15123
15124 if (wdev->iftype != NL80211_IFTYPE_AP &&
15125 wdev->iftype != NL80211_IFTYPE_P2P_GO)
15126 return -EOPNOTSUPP;
15127
15128 nla = info->attrs[NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED];
15129 enabled = nla_get_flag(nla);
15130
15131 return rdev_set_multicast_to_unicast(rdev, dev, enabled);
15132}
15133
3a00df57
AS		 15134static int nl80211_set_pmk(struct sk_buff *skb, struct genl_info *info)
15135{
15136 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15137 struct net_device *dev = info->user_ptr[1];
15138 struct wireless_dev *wdev = dev->ieee80211_ptr;
15139 struct cfg80211_pmk_conf pmk_conf = {};
15140 int ret;
15141
15142 if (wdev->iftype != NL80211_IFTYPE_STATION &&
15143 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
15144 return -EOPNOTSUPP;
15145
15146 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15147 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
15148 return -EOPNOTSUPP;
15149
15150 if (!info->attrs[NL80211_ATTR_MAC] || !info->attrs[NL80211_ATTR_PMK])
15151 return -EINVAL;
15152
15153 wdev_lock(wdev);
7b0a0e3c 15154 if (!wdev->connected) {
3a00df57
AS		 15155 ret = -ENOTCONN;
15156 goto out;
15157 }
15158
15159 pmk_conf.aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
7b0a0e3c 15160 if (memcmp(pmk_conf.aa, wdev->u.client.connected_addr, ETH_ALEN)) {
3a00df57
AS		 15161 ret = -EINVAL;
15162 goto out;
15163 }
15164
15165 pmk_conf.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
15166 pmk_conf.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
15167 if (pmk_conf.pmk_len != WLAN_PMK_LEN &&
15168 pmk_conf.pmk_len != WLAN_PMK_LEN_SUITE_B_192) {
15169 ret = -EINVAL;
15170 goto out;
15171 }
15172
cb9abd48 15173 if (info->attrs[NL80211_ATTR_PMKR0_NAME])
3a00df57
AS		 15174 pmk_conf.pmk_r0_name =
15175 nla_data(info->attrs[NL80211_ATTR_PMKR0_NAME]);
3a00df57
AS		 15176
15177 ret = rdev_set_pmk(rdev, dev, &pmk_conf);
15178out:
15179 wdev_unlock(wdev);
15180 return ret;
15181}
15182
15183static int nl80211_del_pmk(struct sk_buff *skb, struct genl_info *info)
15184{
15185 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15186 struct net_device *dev = info->user_ptr[1];
15187 struct wireless_dev *wdev = dev->ieee80211_ptr;
15188 const u8 *aa;
15189 int ret;
15190
15191 if (wdev->iftype != NL80211_IFTYPE_STATION &&
15192 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
15193 return -EOPNOTSUPP;
15194
15195 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15196 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
15197 return -EOPNOTSUPP;
15198
15199 if (!info->attrs[NL80211_ATTR_MAC])
15200 return -EINVAL;
15201
15202 wdev_lock(wdev);
15203 aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
15204 ret = rdev_del_pmk(rdev, dev, aa);
15205 wdev_unlock(wdev);
15206
15207 return ret;
15208}
15209
40cbfa90
SD		 15210static int nl80211_external_auth(struct sk_buff *skb, struct genl_info *info)
15211{
15212 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15213 struct net_device *dev = info->user_ptr[1];
15214 struct cfg80211_external_auth_params params;
15215
db8d93a7 15216 if (!rdev->ops->external_auth)
40cbfa90
SD		 15217 return -EOPNOTSUPP;
15218
fe494370
SD		 15219 if (!info->attrs[NL80211_ATTR_SSID] &&
15220 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
15221 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
40cbfa90
SD		 15222 return -EINVAL;
15223
15224 if (!info->attrs[NL80211_ATTR_BSSID])
15225 return -EINVAL;
15226
15227 if (!info->attrs[NL80211_ATTR_STATUS_CODE])
15228 return -EINVAL;
15229
15230 memset(&params, 0, sizeof(params));
15231
fe494370
SD		 15232 if (info->attrs[NL80211_ATTR_SSID]) {
15233 params.ssid.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
cb9abd48 15234 if (params.ssid.ssid_len == 0)
fe494370
SD		 15235 return -EINVAL;
15236 memcpy(params.ssid.ssid,
15237 nla_data(info->attrs[NL80211_ATTR_SSID]),
15238 params.ssid.ssid_len);
15239 }
40cbfa90
SD		 15240
15241 memcpy(params.bssid, nla_data(info->attrs[NL80211_ATTR_BSSID]),
15242 ETH_ALEN);
15243
15244 params.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
15245
fe494370
SD		 15246 if (info->attrs[NL80211_ATTR_PMKID])
15247 params.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
15248
40cbfa90
SD		 15249 return rdev_external_auth(rdev, dev, &params);
15250}
15251
2576a9ac
DK		 15252static int nl80211_tx_control_port(struct sk_buff *skb, struct genl_info *info)
15253{
dca9ca2d 15254 bool dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
2576a9ac
DK		 15255 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15256 struct net_device *dev = info->user_ptr[1];
15257 struct wireless_dev *wdev = dev->ieee80211_ptr;
15258 const u8 *buf;
15259 size_t len;
15260 u8 *dest;
15261 u16 proto;
15262 bool noencrypt;
dca9ca2d 15263 u64 cookie = 0;
67207bab 15264 int link_id;
2576a9ac
DK		 15265 int err;
15266
15267 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15268 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
15269 return -EOPNOTSUPP;
15270
15271 if (!rdev->ops->tx_control_port)
15272 return -EOPNOTSUPP;
15273
15274 if (!info->attrs[NL80211_ATTR_FRAME] ||
15275 !info->attrs[NL80211_ATTR_MAC] ||
15276 !info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
15277 GENL_SET_ERR_MSG(info, "Frame, MAC or ethertype missing");
15278 return -EINVAL;
15279 }
15280
15281 wdev_lock(wdev);
15282
15283 switch (wdev->iftype) {
15284 case NL80211_IFTYPE_AP:
15285 case NL80211_IFTYPE_P2P_GO:
15286 case NL80211_IFTYPE_MESH_POINT:
15287 break;
15288 case NL80211_IFTYPE_ADHOC:
7b0a0e3c
JB		 15289 if (wdev->u.ibss.current_bss)
15290 break;
15291 err = -ENOTCONN;
15292 goto out;
2576a9ac
DK		 15293 case NL80211_IFTYPE_STATION:
15294 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c 15295 if (wdev->connected)
2576a9ac
DK		 15296 break;
15297 err = -ENOTCONN;
15298 goto out;
15299 default:
15300 err = -EOPNOTSUPP;
15301 goto out;
15302 }
15303
15304 wdev_unlock(wdev);
15305
15306 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
15307 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
15308 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
15309 proto = nla_get_u16(info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
15310 noencrypt =
15311 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]);
15312
67207bab
AO		 15313 link_id = nl80211_link_id_or_invalid(info->attrs);
15314
dca9ca2d 15315 err = rdev_tx_control_port(rdev, dev, buf, len,
67207bab 15316 dest, cpu_to_be16(proto), noencrypt, link_id,
dca9ca2d
MT		 15317 dont_wait_for_ack ? NULL : &cookie);
15318 if (!err && !dont_wait_for_ack)
15319 nl_set_extack_cookie_u64(info->extack, cookie);
15320 return err;
2576a9ac
DK		 15321 out:
15322 wdev_unlock(wdev);
15323 return err;
15324}
15325
81e54d08
PKC		 15326static int nl80211_get_ftm_responder_stats(struct sk_buff *skb,
15327 struct genl_info *info)
15328{
15329 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15330 struct net_device *dev = info->user_ptr[1];
15331 struct wireless_dev *wdev = dev->ieee80211_ptr;
15332 struct cfg80211_ftm_responder_stats ftm_stats = {};
7b0a0e3c 15333 unsigned int link_id = nl80211_link_id(info->attrs);
81e54d08
PKC		 15334 struct sk_buff *msg;
15335 void *hdr;
15336 struct nlattr *ftm_stats_attr;
15337 int err;
15338
7b0a0e3c
JB		 15339 if (wdev->iftype != NL80211_IFTYPE_AP ||
15340 !wdev->links[link_id].ap.beacon_interval)
81e54d08
PKC		 15341 return -EOPNOTSUPP;
15342
15343 err = rdev_get_ftm_responder_stats(rdev, dev, &ftm_stats);
15344 if (err)
15345 return err;
15346
15347 if (!ftm_stats.filled)
15348 return -ENODATA;
15349
15350 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15351 if (!msg)
15352 return -ENOMEM;
15353
15354 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
15355 NL80211_CMD_GET_FTM_RESPONDER_STATS);
15356 if (!hdr)
1399c59f 15357 goto nla_put_failure;
81e54d08
PKC		 15358
15359 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
15360 goto nla_put_failure;
15361
ae0be8de
MK		 15362 ftm_stats_attr = nla_nest_start_noflag(msg,
15363 NL80211_ATTR_FTM_RESPONDER_STATS);
81e54d08
PKC		 15364 if (!ftm_stats_attr)
15365 goto nla_put_failure;
15366
15367#define SET_FTM(field, name, type) \
15368 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
15369 nla_put_ ## type(msg, NL80211_FTM_STATS_ ## name, \
15370 ftm_stats.field)) \
15371 goto nla_put_failure; } while (0)
15372#define SET_FTM_U64(field, name) \
15373 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
15374 nla_put_u64_64bit(msg, NL80211_FTM_STATS_ ## name, \
15375 ftm_stats.field, NL80211_FTM_STATS_PAD)) \
15376 goto nla_put_failure; } while (0)
15377
15378 SET_FTM(success_num, SUCCESS_NUM, u32);
15379 SET_FTM(partial_num, PARTIAL_NUM, u32);
15380 SET_FTM(failed_num, FAILED_NUM, u32);
15381 SET_FTM(asap_num, ASAP_NUM, u32);
15382 SET_FTM(non_asap_num, NON_ASAP_NUM, u32);
15383 SET_FTM_U64(total_duration_ms, TOTAL_DURATION_MSEC);
15384 SET_FTM(unknown_triggers_num, UNKNOWN_TRIGGERS_NUM, u32);
15385 SET_FTM(reschedule_requests_num, RESCHEDULE_REQUESTS_NUM, u32);
15386 SET_FTM(out_of_window_triggers_num, OUT_OF_WINDOW_TRIGGERS_NUM, u32);
15387#undef SET_FTM
15388
15389 nla_nest_end(msg, ftm_stats_attr);
15390
15391 genlmsg_end(msg, hdr);
15392 return genlmsg_reply(msg, info);
15393
15394nla_put_failure:
15395 nlmsg_free(msg);
15396 return -ENOBUFS;
15397}
15398
cb74e977
SD		 15399static int nl80211_update_owe_info(struct sk_buff *skb, struct genl_info *info)
15400{
15401 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15402 struct cfg80211_update_owe_info owe_info;
15403 struct net_device *dev = info->user_ptr[1];
15404
15405 if (!rdev->ops->update_owe_info)
15406 return -EOPNOTSUPP;
15407
15408 if (!info->attrs[NL80211_ATTR_STATUS_CODE] ||
15409 !info->attrs[NL80211_ATTR_MAC])
15410 return -EINVAL;
15411
15412 memset(&owe_info, 0, sizeof(owe_info));
15413 owe_info.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
15414 nla_memcpy(owe_info.peer, info->attrs[NL80211_ATTR_MAC], ETH_ALEN);
15415
15416 if (info->attrs[NL80211_ATTR_IE]) {
15417 owe_info.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
15418 owe_info.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
15419 }
15420
15421 return rdev_update_owe_info(rdev, dev, &owe_info);
15422}
15423
5ab92e7f
RM		 15424static int nl80211_probe_mesh_link(struct sk_buff *skb, struct genl_info *info)
15425{
15426 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15427 struct net_device *dev = info->user_ptr[1];
15428 struct wireless_dev *wdev = dev->ieee80211_ptr;
15429 struct station_info sinfo = {};
15430 const u8 *buf;
15431 size_t len;
15432 u8 *dest;
15433 int err;
15434
15435 if (!rdev->ops->probe_mesh_link || !rdev->ops->get_station)
15436 return -EOPNOTSUPP;
15437
15438 if (!info->attrs[NL80211_ATTR_MAC] ||
15439 !info->attrs[NL80211_ATTR_FRAME]) {
15440 GENL_SET_ERR_MSG(info, "Frame or MAC missing");
15441 return -EINVAL;
15442 }
15443
15444 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
15445 return -EOPNOTSUPP;
15446
15447 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
15448 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
15449 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
15450
15451 if (len < sizeof(struct ethhdr))
15452 return -EINVAL;
15453
15454 if (!ether_addr_equal(buf, dest) || is_multicast_ether_addr(buf) ||
15455 !ether_addr_equal(buf + ETH_ALEN, dev->dev_addr))
15456 return -EINVAL;
15457
15458 err = rdev_get_station(rdev, dev, dest, &sinfo);
15459 if (err)
15460 return err;
15461
2a279b34
FF		 15462 cfg80211_sinfo_release_content(&sinfo);
15463
5ab92e7f
RM		 15464 return rdev_probe_mesh_link(rdev, dev, dest, buf, len);
15465}
15466
77f576de
T		 15467static int parse_tid_conf(struct cfg80211_registered_device *rdev,
15468 struct nlattr *attrs[], struct net_device *dev,
3710a8a6 15469 struct cfg80211_tid_cfg *tid_conf,
7b0a0e3c
JB		 15470 struct genl_info *info, const u8 *peer,
15471 unsigned int link_id)
77f576de
T		 15472{
15473 struct netlink_ext_ack *extack = info->extack;
3710a8a6 15474 u64 mask;
77f576de
T		 15475 int err;
15476
15477 if (!attrs[NL80211_TID_CONFIG_ATTR_TIDS])
15478 return -EINVAL;
15479
15480 tid_conf->config_override =
15481 nla_get_flag(attrs[NL80211_TID_CONFIG_ATTR_OVERRIDE]);
3710a8a6 15482 tid_conf->tids = nla_get_u16(attrs[NL80211_TID_CONFIG_ATTR_TIDS]);
77f576de
T		 15483
15484 if (tid_conf->config_override) {
15485 if (rdev->ops->reset_tid_config) {
15486 err = rdev_reset_tid_config(rdev, dev, peer,
3710a8a6 15487 tid_conf->tids);
c0336955 15488 if (err)
77f576de
T		 15489 return err;
15490 } else {
15491 return -EINVAL;
15492 }
15493 }
15494
15495 if (attrs[NL80211_TID_CONFIG_ATTR_NOACK]) {
3710a8a6 15496 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_NOACK);
77f576de
T		 15497 tid_conf->noack =
15498 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_NOACK]);
15499 }
15500
6a21d16c
T		 15501 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]) {
15502 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_SHORT);
15503 tid_conf->retry_short =
15504 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]);
15505
15506 if (tid_conf->retry_short > rdev->wiphy.max_data_retry_count)
15507 return -EINVAL;
15508 }
15509
15510 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]) {
15511 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_LONG);
15512 tid_conf->retry_long =
15513 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]);
15514
15515 if (tid_conf->retry_long > rdev->wiphy.max_data_retry_count)
15516 return -EINVAL;
15517 }
15518
ade274b2
T		 15519 if (attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]) {
15520 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMPDU_CTRL);
15521 tid_conf->ampdu =
15522 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]);
15523 }
15524
04f7d142
T		 15525 if (attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]) {
15526 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL);
15527 tid_conf->rtscts =
15528 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]);
15529 }
15530
33462e68
SM		 15531 if (attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]) {
15532 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMSDU_CTRL);
15533 tid_conf->amsdu =
15534 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]);
15535 }
15536
9a5f6488
TC		 15537 if (attrs[NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE]) {
15538 u32 idx = NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE, attr;
15539
15540 tid_conf->txrate_type = nla_get_u8(attrs[idx]);
15541
15542 if (tid_conf->txrate_type != NL80211_TX_RATE_AUTOMATIC) {
15543 attr = NL80211_TID_CONFIG_ATTR_TX_RATE;
15544 err = nl80211_parse_tx_bitrate_mask(info, attrs, attr,
857b34c4 15545 &tid_conf->txrate_mask, dev,
7b0a0e3c 15546 true, link_id);
9a5f6488
TC		 15547 if (err)
15548 return err;
15549
15550 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE);
15551 }
15552 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE);
15553 }
15554
3710a8a6
JB		 15555 if (peer)
15556 mask = rdev->wiphy.tid_config_support.peer;
15557 else
15558 mask = rdev->wiphy.tid_config_support.vif;
15559
15560 if (tid_conf->mask & ~mask) {
15561 NL_SET_ERR_MSG(extack, "unsupported TID configuration");
15562 return -ENOTSUPP;
15563 }
15564
77f576de
T		 15565 return 0;
15566}
15567
15568static int nl80211_set_tid_config(struct sk_buff *skb,
15569 struct genl_info *info)
15570{
15571 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15572 struct nlattr *attrs[NL80211_TID_CONFIG_ATTR_MAX + 1];
7b0a0e3c 15573 unsigned int link_id = nl80211_link_id(info->attrs);
77f576de 15574 struct net_device *dev = info->user_ptr[1];
3710a8a6 15575 struct cfg80211_tid_config *tid_config;
77f576de
T		 15576 struct nlattr *tid;
15577 int conf_idx = 0, rem_conf;
15578 int ret = -EINVAL;
15579 u32 num_conf = 0;
15580
15581 if (!info->attrs[NL80211_ATTR_TID_CONFIG])
15582 return -EINVAL;
15583
15584 if (!rdev->ops->set_tid_config)
15585 return -EOPNOTSUPP;
15586
15587 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
15588 rem_conf)
15589 num_conf++;
15590
15591 tid_config = kzalloc(struct_size(tid_config, tid_conf, num_conf),
15592 GFP_KERNEL);
15593 if (!tid_config)
15594 return -ENOMEM;
15595
15596 tid_config->n_tid_conf = num_conf;
15597
15598 if (info->attrs[NL80211_ATTR_MAC])
15599 tid_config->peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
15600
206bbcf7
JB		 15601 wdev_lock(dev->ieee80211_ptr);
15602
77f576de
T		 15603 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
15604 rem_conf) {
15605 ret = nla_parse_nested(attrs, NL80211_TID_CONFIG_ATTR_MAX,
15606 tid, NULL, NULL);
15607
15608 if (ret)
15609 goto bad_tid_conf;
15610
15611 ret = parse_tid_conf(rdev, attrs, dev,
15612 &tid_config->tid_conf[conf_idx],
7b0a0e3c 15613 info, tid_config->peer, link_id);
77f576de
T		 15614 if (ret)
15615 goto bad_tid_conf;
15616
15617 conf_idx++;
15618 }
15619
15620 ret = rdev_set_tid_config(rdev, dev, tid_config);
15621
15622bad_tid_conf:
15623 kfree(tid_config);
206bbcf7 15624 wdev_unlock(dev->ieee80211_ptr);
77f576de
T		 15625 return ret;
15626}
15627
0d2ab3ae
JC		 15628static int nl80211_color_change(struct sk_buff *skb, struct genl_info *info)
15629{
15630 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15631 struct cfg80211_color_change_settings params = {};
15632 struct net_device *dev = info->user_ptr[1];
15633 struct wireless_dev *wdev = dev->ieee80211_ptr;
15634 struct nlattr **tb;
15635 u16 offset;
15636 int err;
15637
15638 if (!rdev->ops->color_change)
15639 return -EOPNOTSUPP;
15640
15641 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15642 NL80211_EXT_FEATURE_BSS_COLOR))
15643 return -EOPNOTSUPP;
15644
15645 if (wdev->iftype != NL80211_IFTYPE_AP)
15646 return -EOPNOTSUPP;
15647
15648 if (!info->attrs[NL80211_ATTR_COLOR_CHANGE_COUNT] ||
15649 !info->attrs[NL80211_ATTR_COLOR_CHANGE_COLOR] ||
15650 !info->attrs[NL80211_ATTR_COLOR_CHANGE_ELEMS])
15651 return -EINVAL;
15652
15653 params.count = nla_get_u8(info->attrs[NL80211_ATTR_COLOR_CHANGE_COUNT]);
15654 params.color = nla_get_u8(info->attrs[NL80211_ATTR_COLOR_CHANGE_COLOR]);
15655
15656 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_next);
15657 if (err)
15658 return err;
15659
15660 tb = kcalloc(NL80211_ATTR_MAX + 1, sizeof(*tb), GFP_KERNEL);
15661 if (!tb)
15662 return -ENOMEM;
15663
15664 err = nla_parse_nested(tb, NL80211_ATTR_MAX,
15665 info->attrs[NL80211_ATTR_COLOR_CHANGE_ELEMS],
15666 nl80211_policy, info->extack);
15667 if (err)
15668 goto out;
15669
15670 err = nl80211_parse_beacon(rdev, tb, &params.beacon_color_change);
15671 if (err)
15672 goto out;
15673
15674 if (!tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]) {
15675 err = -EINVAL;
15676 goto out;
15677 }
15678
15679 if (nla_len(tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]) != sizeof(u16)) {
15680 err = -EINVAL;
15681 goto out;
15682 }
15683
15684 offset = nla_get_u16(tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
15685 if (offset >= params.beacon_color_change.tail_len) {
15686 err = -EINVAL;
15687 goto out;
15688 }
15689
15690 if (params.beacon_color_change.tail[offset] != params.count) {
15691 err = -EINVAL;
15692 goto out;
15693 }
15694
15695 params.counter_offset_beacon = offset;
15696
15697 if (tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]) {
15698 if (nla_len(tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]) !=
15699 sizeof(u16)) {
15700 err = -EINVAL;
15701 goto out;
15702 }
15703
15704 offset = nla_get_u16(tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
15705 if (offset >= params.beacon_color_change.probe_resp_len) {
15706 err = -EINVAL;
15707 goto out;
15708 }
15709
15710 if (params.beacon_color_change.probe_resp[offset] !=
15711 params.count) {
15712 err = -EINVAL;
15713 goto out;
15714 }
15715
15716 params.counter_offset_presp = offset;
15717 }
15718
15719 wdev_lock(wdev);
15720 err = rdev_color_change(rdev, dev, &params);
15721 wdev_unlock(wdev);
15722
15723out:
dc1e3cb8
JC		 15724 kfree(params.beacon_next.mbssid_ies);
15725 kfree(params.beacon_color_change.mbssid_ies);
0d2ab3ae
JC		 15726 kfree(tb);
15727 return err;
15728}
15729
e306784a
SM		 15730static int nl80211_set_fils_aad(struct sk_buff *skb,
15731 struct genl_info *info)
15732{
15733 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15734 struct net_device *dev = info->user_ptr[1];
15735 struct cfg80211_fils_aad fils_aad = {};
15736 u8 *nonces;
15737
15738 if (!info->attrs[NL80211_ATTR_MAC] ||
15739 !info->attrs[NL80211_ATTR_FILS_KEK] ||
15740 !info->attrs[NL80211_ATTR_FILS_NONCES])
15741 return -EINVAL;
15742
15743 fils_aad.macaddr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15744 fils_aad.kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
15745 fils_aad.kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
15746 nonces = nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
15747 fils_aad.snonce = nonces;
15748 fils_aad.anonce = nonces + FILS_NONCE_LEN;
15749
15750 return rdev_set_fils_aad(rdev, dev, &fils_aad);
15751}
15752
7b0a0e3c
JB		 15753static int nl80211_add_link(struct sk_buff *skb, struct genl_info *info)
15754{
f2a0290b 15755 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c
JB		 15756 unsigned int link_id = nl80211_link_id(info->attrs);
15757 struct net_device *dev = info->user_ptr[1];
15758 struct wireless_dev *wdev = dev->ieee80211_ptr;
f2a0290b 15759 int ret;
7b0a0e3c
JB		 15760
15761 if (!(wdev->wiphy->flags & WIPHY_FLAG_SUPPORTS_MLO))
15762 return -EINVAL;
15763
15764 switch (wdev->iftype) {
15765 case NL80211_IFTYPE_AP:
15766 break;
15767 default:
15768 return -EINVAL;
15769 }
15770
15771 if (!info->attrs[NL80211_ATTR_MAC] ||
15772 !is_valid_ether_addr(nla_data(info->attrs[NL80211_ATTR_MAC])))
15773 return -EINVAL;
15774
15775 wdev_lock(wdev);
15776 wdev->valid_links |= BIT(link_id);
15777 ether_addr_copy(wdev->links[link_id].addr,
15778 nla_data(info->attrs[NL80211_ATTR_MAC]));
f2a0290b
JB		 15779
15780 ret = rdev_add_intf_link(rdev, wdev, link_id);
15781 if (ret) {
15782 wdev->valid_links &= ~BIT(link_id);
15783 eth_zero_addr(wdev->links[link_id].addr);
15784 }
7b0a0e3c
JB		 15785 wdev_unlock(wdev);
15786
f2a0290b 15787 return ret;
7b0a0e3c
JB		 15788}
15789
15790static int nl80211_remove_link(struct sk_buff *skb, struct genl_info *info)
15791{
15792 unsigned int link_id = nl80211_link_id(info->attrs);
15793 struct net_device *dev = info->user_ptr[1];
15794 struct wireless_dev *wdev = dev->ieee80211_ptr;
15795
15796 /* cannot remove if there's no link */
15797 if (!info->attrs[NL80211_ATTR_MLO_LINK_ID])
15798 return -EINVAL;
15799
15800 switch (wdev->iftype) {
15801 case NL80211_IFTYPE_AP:
15802 break;
15803 default:
15804 return -EINVAL;
15805 }
15806
7b0a0e3c 15807 wdev_lock(wdev);
cdf0a0a8 15808 cfg80211_remove_link(wdev, link_id);
7b0a0e3c
JB		 15809 wdev_unlock(wdev);
15810
15811 return 0;
15812}
15813
577e5b8c
ST		 15814static int
15815nl80211_add_mod_link_station(struct sk_buff *skb, struct genl_info *info,
15816 bool add)
15817{
15818 struct link_station_parameters params = {};
15819 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15820 struct net_device *dev = info->user_ptr[1];
15821 int err;
15822
15823 if ((add && !rdev->ops->add_link_station) ||
15824 (!add && !rdev->ops->mod_link_station))
15825 return -EOPNOTSUPP;
15826
15827 if (add && !info->attrs[NL80211_ATTR_MAC])
15828 return -EINVAL;
15829
15830 if (add && !info->attrs[NL80211_ATTR_MLD_ADDR])
15831 return -EINVAL;
15832
15833 if (add && !info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
15834 return -EINVAL;
15835
15836 if (info->attrs[NL80211_ATTR_MLD_ADDR])
15837 params.mld_mac = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
15838
15839 if (info->attrs[NL80211_ATTR_MAC]) {
15840 params.link_mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
15841 if (!is_valid_ether_addr(params.link_mac))
15842 return -EINVAL;
15843 }
15844
15845 if (!info->attrs[NL80211_ATTR_MLO_LINK_ID])
15846 return -EINVAL;
15847
15848 params.link_id = nla_get_u8(info->attrs[NL80211_ATTR_MLO_LINK_ID]);
15849
15850 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
15851 params.supported_rates =
15852 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
15853 params.supported_rates_len =
15854 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
15855 }
15856
15857 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
15858 params.ht_capa =
15859 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
15860
15861 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
15862 params.vht_capa =
15863 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
15864
15865 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
15866 params.he_capa =
15867 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
15868 params.he_capa_len =
15869 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
15870
15871 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
15872 params.eht_capa =
15873 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
15874 params.eht_capa_len =
15875 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
15876
15877 if (!ieee80211_eht_capa_size_ok((const u8 *)params.he_capa,
15878 (const u8 *)params.eht_capa,
15879 params.eht_capa_len))
15880 return -EINVAL;
15881 }
15882 }
15883
15884 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
15885 params.he_6ghz_capa =
15886 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
15887
15888 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
15889 params.opmode_notif_used = true;
15890 params.opmode_notif =
15891 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
15892 }
15893
15894 err = nl80211_parse_sta_txpower_setting(info, &params.txpwr,
15895 &params.txpwr_set);
15896 if (err)
15897 return err;
15898
858fd188 15899 wdev_lock(dev->ieee80211_ptr);
577e5b8c 15900 if (add)
858fd188
JB		 15901 err = rdev_add_link_station(rdev, dev, &params);
15902 else
15903 err = rdev_mod_link_station(rdev, dev, &params);
15904 wdev_unlock(dev->ieee80211_ptr);
15905
15906 return err;
577e5b8c
ST		 15907}
15908
15909static int
15910nl80211_add_link_station(struct sk_buff *skb, struct genl_info *info)
15911{
15912 return nl80211_add_mod_link_station(skb, info, true);
15913}
15914
15915static int
15916nl80211_modify_link_station(struct sk_buff *skb, struct genl_info *info)
15917{
15918 return nl80211_add_mod_link_station(skb, info, false);
15919}
15920
15921static int
15922nl80211_remove_link_station(struct sk_buff *skb, struct genl_info *info)
15923{
15924 struct link_station_del_parameters params = {};
15925 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15926 struct net_device *dev = info->user_ptr[1];
858fd188 15927 int ret;
577e5b8c
ST		 15928
15929 if (!rdev->ops->del_link_station)
15930 return -EOPNOTSUPP;
15931
15932 if (!info->attrs[NL80211_ATTR_MLD_ADDR] ||
15933 !info->attrs[NL80211_ATTR_MLO_LINK_ID])
15934 return -EINVAL;
15935
15936 params.mld_mac = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
15937 params.link_id = nla_get_u8(info->attrs[NL80211_ATTR_MLO_LINK_ID]);
15938
858fd188
JB		 15939 wdev_lock(dev->ieee80211_ptr);
15940 ret = rdev_del_link_station(rdev, dev, &params);
15941 wdev_unlock(dev->ieee80211_ptr);
15942
15943 return ret;
577e5b8c
ST		 15944}
15945
4c476991
JB		 15946#define NL80211_FLAG_NEED_WIPHY 0x01
15947#define NL80211_FLAG_NEED_NETDEV 0x02
15948#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 15949#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
15950#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
15951 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 15952#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 15953/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 15954#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
15955 NL80211_FLAG_CHECK_NETDEV_UP)
5393b917 15956#define NL80211_FLAG_CLEAR_SKB 0x20
77cbf790 15957#define NL80211_FLAG_NO_WIPHY_MTX 0x40
7b0a0e3c
JB		 15958#define NL80211_FLAG_MLO_VALID_LINK_ID 0x80
15959#define NL80211_FLAG_MLO_UNSUPPORTED 0x100
4c476991 15960
2182db91
JB		 15961#define INTERNAL_FLAG_SELECTORS(__sel) \
15962 SELECTOR(__sel, NONE, 0) /* must be first */ \
15963 SELECTOR(__sel, WIPHY, \
15964 NL80211_FLAG_NEED_WIPHY) \
15965 SELECTOR(__sel, WDEV, \
15966 NL80211_FLAG_NEED_WDEV) \
15967 SELECTOR(__sel, NETDEV, \
15968 NL80211_FLAG_NEED_NETDEV) \
7b0a0e3c
JB		 15969 SELECTOR(__sel, NETDEV_LINK, \
15970 NL80211_FLAG_NEED_NETDEV | \
15971 NL80211_FLAG_MLO_VALID_LINK_ID) \
15972 SELECTOR(__sel, NETDEV_NO_MLO, \
15973 NL80211_FLAG_NEED_NETDEV | \
15974 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 15975 SELECTOR(__sel, WIPHY_RTNL, \
15976 NL80211_FLAG_NEED_WIPHY | \
15977 NL80211_FLAG_NEED_RTNL) \
15978 SELECTOR(__sel, WIPHY_RTNL_NOMTX, \
15979 NL80211_FLAG_NEED_WIPHY | \
15980 NL80211_FLAG_NEED_RTNL | \
15981 NL80211_FLAG_NO_WIPHY_MTX) \
15982 SELECTOR(__sel, WDEV_RTNL, \
15983 NL80211_FLAG_NEED_WDEV | \
15984 NL80211_FLAG_NEED_RTNL) \
15985 SELECTOR(__sel, NETDEV_RTNL, \
15986 NL80211_FLAG_NEED_NETDEV | \
15987 NL80211_FLAG_NEED_RTNL) \
15988 SELECTOR(__sel, NETDEV_UP, \
15989 NL80211_FLAG_NEED_NETDEV_UP) \
7b0a0e3c
JB		 15990 SELECTOR(__sel, NETDEV_UP_LINK, \
15991 NL80211_FLAG_NEED_NETDEV_UP | \
15992 NL80211_FLAG_MLO_VALID_LINK_ID) \
15993 SELECTOR(__sel, NETDEV_UP_NO_MLO, \
15994 NL80211_FLAG_NEED_NETDEV_UP | \
15995 NL80211_FLAG_MLO_UNSUPPORTED) \
15996 SELECTOR(__sel, NETDEV_UP_NO_MLO_CLEAR, \
15997 NL80211_FLAG_NEED_NETDEV_UP | \
15998 NL80211_FLAG_CLEAR_SKB | \
15999 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 16000 SELECTOR(__sel, NETDEV_UP_NOTMX, \
16001 NL80211_FLAG_NEED_NETDEV_UP | \
16002 NL80211_FLAG_NO_WIPHY_MTX) \
7b0a0e3c
JB		 16003 SELECTOR(__sel, NETDEV_UP_NOTMX_NOMLO, \
16004 NL80211_FLAG_NEED_NETDEV_UP | \
16005 NL80211_FLAG_NO_WIPHY_MTX | \
16006 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 16007 SELECTOR(__sel, NETDEV_UP_CLEAR, \
16008 NL80211_FLAG_NEED_NETDEV_UP | \
16009 NL80211_FLAG_CLEAR_SKB) \
16010 SELECTOR(__sel, WDEV_UP, \
16011 NL80211_FLAG_NEED_WDEV_UP) \
7b0a0e3c
JB		 16012 SELECTOR(__sel, WDEV_UP_LINK, \
16013 NL80211_FLAG_NEED_WDEV_UP | \
16014 NL80211_FLAG_MLO_VALID_LINK_ID) \
2182db91
JB		 16015 SELECTOR(__sel, WDEV_UP_RTNL, \
16016 NL80211_FLAG_NEED_WDEV_UP | \
16017 NL80211_FLAG_NEED_RTNL) \
16018 SELECTOR(__sel, WIPHY_CLEAR, \
16019 NL80211_FLAG_NEED_WIPHY | \
16020 NL80211_FLAG_CLEAR_SKB)
16021
16022enum nl80211_internal_flags_selector {
16023#define SELECTOR(_, name, value) NL80211_IFL_SEL_##name,
16024 INTERNAL_FLAG_SELECTORS(_)
16025#undef SELECTOR
16026};
16027
16028static u32 nl80211_internal_flags[] = {
16029#define SELECTOR(_, name, value) [NL80211_IFL_SEL_##name] = value,
16030 INTERNAL_FLAG_SELECTORS(_)
16031#undef SELECTOR
16032};
16033
f84f771d 16034static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 16035 struct genl_info *info)
16036{
a05829a7 16037 struct cfg80211_registered_device *rdev = NULL;
7b0a0e3c
JB		 16038 struct wireless_dev *wdev = NULL;
16039 struct net_device *dev = NULL;
2182db91 16040 u32 internal_flags;
7b0a0e3c 16041 int err;
2182db91
JB		 16042
16043 if (WARN_ON(ops->internal_flags >= ARRAY_SIZE(nl80211_internal_flags)))
16044 return -EINVAL;
16045
16046 internal_flags = nl80211_internal_flags[ops->internal_flags];
4c476991 16047
a05829a7 16048 rtnl_lock();
2182db91 16049 if (internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 16050 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991 16051 if (IS_ERR(rdev)) {
7b0a0e3c
JB		 16052 err = PTR_ERR(rdev);
16053 goto out_unlock;
4c476991
JB		 16054 }
16055 info->user_ptr[0] = rdev;
2182db91
JB		 16056 } else if (internal_flags & NL80211_FLAG_NEED_NETDEV ||
16057 internal_flags & NL80211_FLAG_NEED_WDEV) {
a05829a7 16058 wdev = __cfg80211_wdev_from_attrs(NULL, genl_info_net(info),
89a54e48
JB		 16059 info->attrs);
16060 if (IS_ERR(wdev)) {
7b0a0e3c
JB		 16061 err = PTR_ERR(wdev);
16062 goto out_unlock;
4c476991 16063 }
89a54e48 16064
89a54e48 16065 dev = wdev->netdev;
7b0a0e3c 16066 dev_hold(dev);
f26cbf40 16067 rdev = wiphy_to_rdev(wdev->wiphy);
89a54e48 16068
2182db91 16069 if (internal_flags & NL80211_FLAG_NEED_NETDEV) {
1bf614ef 16070 if (!dev) {
7b0a0e3c
JB		 16071 err = -EINVAL;
16072 goto out_unlock;
1bf614ef
JB		 16073 }
16074
16075 info->user_ptr[1] = dev;
16076 } else {
16077 info->user_ptr[1] = wdev;
41265714 16078 }
1bf614ef 16079
2182db91 16080 if (internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
73c7da3d 16081 !wdev_running(wdev)) {
7b0a0e3c
JB		 16082 err = -ENETDOWN;
16083 goto out_unlock;
73c7da3d 16084 }
1bf614ef 16085
4c476991 16086 info->user_ptr[0] = rdev;
4c476991
JB		 16087 }
16088
7b0a0e3c
JB		 16089 if (internal_flags & NL80211_FLAG_MLO_VALID_LINK_ID) {
16090 struct nlattr *link_id = info->attrs[NL80211_ATTR_MLO_LINK_ID];
16091
16092 if (!wdev) {
16093 err = -EINVAL;
16094 goto out_unlock;
16095 }
16096
16097 /* MLO -> require valid link ID */
16098 if (wdev->valid_links &&
16099 (!link_id ||
ff3821bc 16100 !(wdev->valid_links & BIT(nla_get_u8(link_id))))) {
7b0a0e3c
JB		 16101 err = -EINVAL;
16102 goto out_unlock;
16103 }
16104
16105 /* non-MLO -> no link ID attribute accepted */
16106 if (!wdev->valid_links && link_id) {
16107 err = -EINVAL;
16108 goto out_unlock;
16109 }
16110 }
16111
16112 if (internal_flags & NL80211_FLAG_MLO_UNSUPPORTED) {
16113 if (info->attrs[NL80211_ATTR_MLO_LINK_ID] ||
16114 (wdev && wdev->valid_links)) {
16115 err = -EINVAL;
16116 goto out_unlock;
16117 }
16118 }
16119
2182db91 16120 if (rdev && !(internal_flags & NL80211_FLAG_NO_WIPHY_MTX)) {
a05829a7
JB		 16121 wiphy_lock(&rdev->wiphy);
16122 /* we keep the mutex locked until post_doit */
16123 __release(&rdev->wiphy.mtx);
16124 }
2182db91 16125 if (!(internal_flags & NL80211_FLAG_NEED_RTNL))
a05829a7
JB		 16126 rtnl_unlock();
16127
4c476991 16128 return 0;
7b0a0e3c
JB		 16129out_unlock:
16130 rtnl_unlock();
16131 dev_put(dev);
16132 return err;
4c476991
JB		 16133}
16134
f84f771d 16135static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 16136 struct genl_info *info)
16137{
2182db91
JB		 16138 u32 internal_flags = nl80211_internal_flags[ops->internal_flags];
16139
1bf614ef 16140 if (info->user_ptr[1]) {
2182db91 16141 if (internal_flags & NL80211_FLAG_NEED_WDEV) {
1bf614ef
JB		 16142 struct wireless_dev *wdev = info->user_ptr[1];
16143
1160dfa1 16144 dev_put(wdev->netdev);
1bf614ef
JB		 16145 } else {
16146 dev_put(info->user_ptr[1]);
16147 }
16148 }
5393b917 16149
77cbf790 16150 if (info->user_ptr[0] &&
2182db91 16151 !(internal_flags & NL80211_FLAG_NO_WIPHY_MTX)) {
a05829a7
JB		 16152 struct cfg80211_registered_device *rdev = info->user_ptr[0];
16153
16154 /* we kept the mutex locked since pre_doit */
16155 __acquire(&rdev->wiphy.mtx);
16156 wiphy_unlock(&rdev->wiphy);
16157 }
16158
2182db91 16159 if (internal_flags & NL80211_FLAG_NEED_RTNL)
4c476991 16160 rtnl_unlock();
5393b917
JB		 16161
16162 /* If needed, clear the netlink message payload from the SKB
16163 * as it might contain key data that shouldn't stick around on
16164 * the heap after the SKB is freed. The netlink message header
16165 * is still needed for further processing, so leave it intact.
16166 */
2182db91 16167 if (internal_flags & NL80211_FLAG_CLEAR_SKB) {
5393b917
JB		 16168 struct nlmsghdr *nlh = nlmsg_hdr(skb);
16169
16170 memset(nlmsg_data(nlh), 0, nlmsg_len(nlh));
16171 }
4c476991
JB		 16172}
16173
6bdb68ce
CH		 16174static int nl80211_set_sar_sub_specs(struct cfg80211_registered_device *rdev,
16175 struct cfg80211_sar_specs *sar_specs,
16176 struct nlattr *spec[], int index)
16177{
16178 u32 range_index, i;
16179
16180 if (!sar_specs || !spec)
16181 return -EINVAL;
16182
16183 if (!spec[NL80211_SAR_ATTR_SPECS_POWER] ||
16184 !spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX])
16185 return -EINVAL;
16186
16187 range_index = nla_get_u32(spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX]);
16188
16189 /* check if range_index exceeds num_freq_ranges */
16190 if (range_index >= rdev->wiphy.sar_capa->num_freq_ranges)
16191 return -EINVAL;
16192
16193 /* check if range_index duplicates */
16194 for (i = 0; i < index; i++) {
16195 if (sar_specs->sub_specs[i].freq_range_index == range_index)
16196 return -EINVAL;
16197 }
16198
16199 sar_specs->sub_specs[index].power =
16200 nla_get_s32(spec[NL80211_SAR_ATTR_SPECS_POWER]);
16201
16202 sar_specs->sub_specs[index].freq_range_index = range_index;
16203
16204 return 0;
16205}
16206
16207static int nl80211_set_sar_specs(struct sk_buff *skb, struct genl_info *info)
16208{
16209 struct cfg80211_registered_device *rdev = info->user_ptr[0];
16210 struct nlattr *spec[NL80211_SAR_ATTR_SPECS_MAX + 1];
16211 struct nlattr *tb[NL80211_SAR_ATTR_MAX + 1];
16212 struct cfg80211_sar_specs *sar_spec;
16213 enum nl80211_sar_type type;
16214 struct nlattr *spec_list;
16215 u32 specs;
16216 int rem, err;
16217
16218 if (!rdev->wiphy.sar_capa || !rdev->ops->set_sar_specs)
16219 return -EOPNOTSUPP;
16220
16221 if (!info->attrs[NL80211_ATTR_SAR_SPEC])
16222 return -EINVAL;
16223
16224 nla_parse_nested(tb, NL80211_SAR_ATTR_MAX,
16225 info->attrs[NL80211_ATTR_SAR_SPEC],
16226 NULL, NULL);
16227
16228 if (!tb[NL80211_SAR_ATTR_TYPE] || !tb[NL80211_SAR_ATTR_SPECS])
16229 return -EINVAL;
16230
16231 type = nla_get_u32(tb[NL80211_SAR_ATTR_TYPE]);
16232 if (type != rdev->wiphy.sar_capa->type)
16233 return -EINVAL;
16234
16235 specs = 0;
16236 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem)
16237 specs++;
16238
16239 if (specs > rdev->wiphy.sar_capa->num_freq_ranges)
16240 return -EINVAL;
16241
40f231e7 16242 sar_spec = kzalloc(struct_size(sar_spec, sub_specs, specs), GFP_KERNEL);
6bdb68ce
CH		 16243 if (!sar_spec)
16244 return -ENOMEM;
16245
16246 sar_spec->type = type;
16247 specs = 0;
16248 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem) {
16249 nla_parse_nested(spec, NL80211_SAR_ATTR_SPECS_MAX,
16250 spec_list, NULL, NULL);
16251
16252 switch (type) {
16253 case NL80211_SAR_TYPE_POWER:
16254 if (nl80211_set_sar_sub_specs(rdev, sar_spec,
16255 spec, specs)) {
16256 err = -EINVAL;
16257 goto error;
16258 }
16259 break;
16260 default:
16261 err = -EINVAL;
16262 goto error;
16263 }
16264 specs++;
16265 }
16266
16267 sar_spec->num_sub_specs = specs;
16268
16269 rdev->cur_cmd_info = info;
16270 err = rdev_set_sar_specs(rdev, sar_spec);
16271 rdev->cur_cmd_info = NULL;
16272error:
16273 kfree(sar_spec);
16274 return err;
16275}
16276
2182db91
JB		 16277#define SELECTOR(__sel, name, value) \
16278 ((__sel) == (value)) ? NL80211_IFL_SEL_##name :
16279int __missing_selector(void);
16280#define IFLAGS(__val) INTERNAL_FLAG_SELECTORS(__val) __missing_selector()
16281
4534de83 16282static const struct genl_ops nl80211_ops[] = {
55682965
JB		 16283 {
16284 .cmd = NL80211_CMD_GET_WIPHY,
ef6243ac 16285 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 16286 .doit = nl80211_get_wiphy,
16287 .dumpit = nl80211_dump_wiphy,
86e8cf98 16288 .done = nl80211_dump_wiphy_done,
55682965 16289 /* can be retrieved by unprivileged users */
2182db91 16290 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
55682965 16291 },
66a9b928
JK		 16292};
16293
16294static const struct genl_small_ops nl80211_small_ops[] = {
55682965
JB		 16295 {
16296 .cmd = NL80211_CMD_SET_WIPHY,
ef6243ac 16297 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16298 .doit = nl80211_set_wiphy,
5617c6cd 16299 .flags = GENL_UNS_ADMIN_PERM,
55682965
JB		 16300 },
16301 {
16302 .cmd = NL80211_CMD_GET_INTERFACE,
ef6243ac 16303 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 16304 .doit = nl80211_get_interface,
16305 .dumpit = nl80211_dump_interface,
55682965 16306 /* can be retrieved by unprivileged users */
2182db91 16307 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV),
55682965
JB		 16308 },
16309 {
16310 .cmd = NL80211_CMD_SET_INTERFACE,
ef6243ac 16311 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16312 .doit = nl80211_set_interface,
5617c6cd 16313 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16314 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16315 NL80211_FLAG_NEED_RTNL),
55682965
JB		 16316 },
16317 {
16318 .cmd = NL80211_CMD_NEW_INTERFACE,
ef6243ac 16319 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16320 .doit = nl80211_new_interface,
5617c6cd 16321 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16322 .internal_flags =
16323 IFLAGS(NL80211_FLAG_NEED_WIPHY |
16324 NL80211_FLAG_NEED_RTNL |
16325 /* we take the wiphy mutex later ourselves */
16326 NL80211_FLAG_NO_WIPHY_MTX),
55682965
JB		 16327 },
16328 {
16329 .cmd = NL80211_CMD_DEL_INTERFACE,
ef6243ac 16330 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16331 .doit = nl80211_del_interface,
5617c6cd 16332 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16333 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16334 NL80211_FLAG_NEED_RTNL),
41ade00f
JB		 16335 },
16336 {
16337 .cmd = NL80211_CMD_GET_KEY,
ef6243ac 16338 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16339 .doit = nl80211_get_key,
5617c6cd 16340 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16341 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
41ade00f
JB		 16342 },
16343 {
16344 .cmd = NL80211_CMD_SET_KEY,
ef6243ac 16345 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16346 .doit = nl80211_set_key,
5617c6cd 16347 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c 16348 /* cannot use NL80211_FLAG_MLO_VALID_LINK_ID, depends on key */
2182db91
JB		 16349 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16350 NL80211_FLAG_CLEAR_SKB),
41ade00f
JB		 16351 },
16352 {
16353 .cmd = NL80211_CMD_NEW_KEY,
ef6243ac 16354 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16355 .doit = nl80211_new_key,
5617c6cd 16356 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16357 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16358 NL80211_FLAG_CLEAR_SKB),
41ade00f
JB		 16359 },
16360 {
16361 .cmd = NL80211_CMD_DEL_KEY,
ef6243ac 16362 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16363 .doit = nl80211_del_key,
5617c6cd 16364 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16365 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
55682965 16366 },
ed1b6cc7
JB		 16367 {
16368 .cmd = NL80211_CMD_SET_BEACON,
ef6243ac 16369 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16370 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16371 .doit = nl80211_set_beacon,
7b0a0e3c
JB		 16372 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16373 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7
JB		 16374 },
16375 {
8860020e 16376 .cmd = NL80211_CMD_START_AP,
ef6243ac 16377 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16378 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16379 .doit = nl80211_start_ap,
7b0a0e3c
JB		 16380 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16381 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7
JB		 16382 },
16383 {
8860020e 16384 .cmd = NL80211_CMD_STOP_AP,
ef6243ac 16385 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16386 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16387 .doit = nl80211_stop_ap,
7b0a0e3c
JB		 16388 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16389 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7 16390 },
5727ef1b
JB		 16391 {
16392 .cmd = NL80211_CMD_GET_STATION,
ef6243ac 16393 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16394 .doit = nl80211_get_station,
2ec600d6 16395 .dumpit = nl80211_dump_station,
2182db91 16396 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
5727ef1b
JB		 16397 },
16398 {
16399 .cmd = NL80211_CMD_SET_STATION,
ef6243ac 16400 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16401 .doit = nl80211_set_station,
5617c6cd 16402 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16403 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5727ef1b
JB		 16404 },
16405 {
16406 .cmd = NL80211_CMD_NEW_STATION,
ef6243ac 16407 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16408 .doit = nl80211_new_station,
5617c6cd 16409 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16410 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5727ef1b
JB		 16411 },
16412 {
16413 .cmd = NL80211_CMD_DEL_STATION,
ef6243ac 16414 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16415 .doit = nl80211_del_station,
5617c6cd 16416 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16417 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16418 },
16419 {
16420 .cmd = NL80211_CMD_GET_MPATH,
ef6243ac 16421 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6
LCC		 16422 .doit = nl80211_get_mpath,
16423 .dumpit = nl80211_dump_mpath,
5617c6cd 16424 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16425 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6 16426 },
66be7d2b
HR		 16427 {
16428 .cmd = NL80211_CMD_GET_MPP,
ef6243ac 16429 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
66be7d2b
HR		 16430 .doit = nl80211_get_mpp,
16431 .dumpit = nl80211_dump_mpp,
5617c6cd 16432 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16433 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
66be7d2b 16434 },
2ec600d6
LCC		 16435 {
16436 .cmd = NL80211_CMD_SET_MPATH,
ef6243ac 16437 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16438 .doit = nl80211_set_mpath,
5617c6cd 16439 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16440 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16441 },
16442 {
16443 .cmd = NL80211_CMD_NEW_MPATH,
ef6243ac 16444 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16445 .doit = nl80211_new_mpath,
5617c6cd 16446 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16447 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16448 },
16449 {
16450 .cmd = NL80211_CMD_DEL_MPATH,
ef6243ac 16451 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16452 .doit = nl80211_del_mpath,
5617c6cd 16453 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16454 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
9f1ba906
JM		 16455 },
16456 {
16457 .cmd = NL80211_CMD_SET_BSS,
ef6243ac 16458 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9f1ba906 16459 .doit = nl80211_set_bss,
5617c6cd 16460 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16461 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
b2e1b302 16462 },
f130347c
LR		 16463 {
16464 .cmd = NL80211_CMD_GET_REG,
ef6243ac 16465 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad30ca2c
AN		 16466 .doit = nl80211_get_reg_do,
16467 .dumpit = nl80211_get_reg_dump,
f130347c
LR		 16468 /* can be retrieved by unprivileged users */
16469 },
b6863036 16470#ifdef CONFIG_CFG80211_CRDA_SUPPORT
b2e1b302
LR		 16471 {
16472 .cmd = NL80211_CMD_SET_REG,
ef6243ac 16473 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 16474 .doit = nl80211_set_reg,
b2e1b302
LR		 16475 .flags = GENL_ADMIN_PERM,
16476 },
b6863036 16477#endif
b2e1b302
LR		 16478 {
16479 .cmd = NL80211_CMD_REQ_SET_REG,
ef6243ac 16480 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 16481 .doit = nl80211_req_set_reg,
93da9cc1 16482 .flags = GENL_ADMIN_PERM,
16483 },
1ea4ff3e
JB		 16484 {
16485 .cmd = NL80211_CMD_RELOAD_REGDB,
ef6243ac 16486 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1ea4ff3e 16487 .doit = nl80211_reload_regdb,
1ea4ff3e
JB		 16488 .flags = GENL_ADMIN_PERM,
16489 },
93da9cc1 16490 {
24bdd9f4 16491 .cmd = NL80211_CMD_GET_MESH_CONFIG,
ef6243ac 16492 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 16493 .doit = nl80211_get_mesh_config,
93da9cc1 16494 /* can be retrieved by unprivileged users */
2182db91 16495 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
93da9cc1 16496 },
16497 {
24bdd9f4 16498 .cmd = NL80211_CMD_SET_MESH_CONFIG,
ef6243ac 16499 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 16500 .doit = nl80211_update_mesh_config,
5617c6cd 16501 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16502 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
9aed3cc1 16503 },
2a519311
JB		 16504 {
16505 .cmd = NL80211_CMD_TRIGGER_SCAN,
ef6243ac 16506 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311 16507 .doit = nl80211_trigger_scan,
5617c6cd 16508 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16509 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
2a519311 16510 },
91d3ab46
VK		 16511 {
16512 .cmd = NL80211_CMD_ABORT_SCAN,
ef6243ac 16513 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
91d3ab46 16514 .doit = nl80211_abort_scan,
5617c6cd 16515 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16516 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
91d3ab46 16517 },
2a519311
JB		 16518 {
16519 .cmd = NL80211_CMD_GET_SCAN,
ef6243ac 16520 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311
JB		 16521 .dumpit = nl80211_dump_scan,
16522 },
807f8a8c
LC		 16523 {
16524 .cmd = NL80211_CMD_START_SCHED_SCAN,
ef6243ac 16525 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 16526 .doit = nl80211_start_sched_scan,
5617c6cd 16527 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16528 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
807f8a8c
LC		 16529 },
16530 {
16531 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
ef6243ac 16532 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 16533 .doit = nl80211_stop_sched_scan,
5617c6cd 16534 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16535 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
807f8a8c 16536 },
636a5d36
JM		 16537 {
16538 .cmd = NL80211_CMD_AUTHENTICATE,
ef6243ac 16539 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16540 .doit = nl80211_authenticate,
5617c6cd 16541 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16542 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16543 NL80211_FLAG_CLEAR_SKB),
636a5d36
JM		 16544 },
16545 {
16546 .cmd = NL80211_CMD_ASSOCIATE,
ef6243ac 16547 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16548 .doit = nl80211_associate,
5617c6cd 16549 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16550 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16551 NL80211_FLAG_CLEAR_SKB),
636a5d36
JM		 16552 },
16553 {
16554 .cmd = NL80211_CMD_DEAUTHENTICATE,
ef6243ac 16555 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16556 .doit = nl80211_deauthenticate,
5617c6cd 16557 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16558 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
636a5d36
JM		 16559 },
16560 {
16561 .cmd = NL80211_CMD_DISASSOCIATE,
ef6243ac 16562 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16563 .doit = nl80211_disassociate,
5617c6cd 16564 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16565 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
636a5d36 16566 },
04a773ad
JB		 16567 {
16568 .cmd = NL80211_CMD_JOIN_IBSS,
ef6243ac 16569 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 16570 .doit = nl80211_join_ibss,
5617c6cd 16571 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16572 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
04a773ad
JB		 16573 },
16574 {
16575 .cmd = NL80211_CMD_LEAVE_IBSS,
ef6243ac 16576 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 16577 .doit = nl80211_leave_ibss,
5617c6cd 16578 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16579 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
04a773ad 16580 },
aff89a9b
JB		 16581#ifdef CONFIG_NL80211_TESTMODE
16582 {
16583 .cmd = NL80211_CMD_TESTMODE,
ef6243ac 16584 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
aff89a9b 16585 .doit = nl80211_testmode_do,
71063f0e 16586 .dumpit = nl80211_testmode_dump,
5617c6cd 16587 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16588 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
aff89a9b
JB		 16589 },
16590#endif
b23aa676
SO		 16591 {
16592 .cmd = NL80211_CMD_CONNECT,
ef6243ac 16593 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 16594 .doit = nl80211_connect,
5617c6cd 16595 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16596 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16597 NL80211_FLAG_CLEAR_SKB),
b23aa676 16598 },
088e8df8 16599 {
16600 .cmd = NL80211_CMD_UPDATE_CONNECT_PARAMS,
ef6243ac 16601 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
088e8df8 16602 .doit = nl80211_update_connect_params,
088e8df8 16603 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16604 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16605 NL80211_FLAG_CLEAR_SKB),
088e8df8 16606 },
b23aa676
SO		 16607 {
16608 .cmd = NL80211_CMD_DISCONNECT,
ef6243ac 16609 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 16610 .doit = nl80211_disconnect,
5617c6cd 16611 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16612 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
b23aa676 16613 },
463d0183
JB		 16614 {
16615 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
ef6243ac 16616 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
463d0183 16617 .doit = nl80211_wiphy_netns,
5617c6cd 16618 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16619 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
16620 NL80211_FLAG_NEED_RTNL |
16621 NL80211_FLAG_NO_WIPHY_MTX),
463d0183 16622 },
61fa713c
HS		 16623 {
16624 .cmd = NL80211_CMD_GET_SURVEY,
ef6243ac 16625 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
61fa713c
HS		 16626 .dumpit = nl80211_dump_survey,
16627 },
67fbb16b
SO		 16628 {
16629 .cmd = NL80211_CMD_SET_PMKSA,
ef6243ac 16630 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16631 .doit = nl80211_setdel_pmksa,
5617c6cd 16632 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16633 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16634 NL80211_FLAG_CLEAR_SKB),
67fbb16b
SO		 16635 },
16636 {
16637 .cmd = NL80211_CMD_DEL_PMKSA,
ef6243ac 16638 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16639 .doit = nl80211_setdel_pmksa,
5617c6cd 16640 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16641 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
67fbb16b
SO		 16642 },
16643 {
16644 .cmd = NL80211_CMD_FLUSH_PMKSA,
ef6243ac 16645 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16646 .doit = nl80211_flush_pmksa,
5617c6cd 16647 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16648 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
67fbb16b 16649 },
9588bbd5
JM		 16650 {
16651 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
ef6243ac 16652 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 16653 .doit = nl80211_remain_on_channel,
5617c6cd 16654 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16655 /* FIXME: requiring a link ID here is probably not good */
16656 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16657 NL80211_FLAG_MLO_VALID_LINK_ID),
9588bbd5
JM		 16658 },
16659 {
16660 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
ef6243ac 16661 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 16662 .doit = nl80211_cancel_remain_on_channel,
5617c6cd 16663 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16664 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
9588bbd5 16665 },
13ae75b1
JM		 16666 {
16667 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
ef6243ac 16668 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
13ae75b1 16669 .doit = nl80211_set_tx_bitrate_mask,
5617c6cd 16670 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16671 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16672 NL80211_FLAG_MLO_VALID_LINK_ID),
13ae75b1 16673 },
026331c4 16674 {
2e161f78 16675 .cmd = NL80211_CMD_REGISTER_FRAME,
ef6243ac 16676 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 16677 .doit = nl80211_register_mgmt,
5617c6cd 16678 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16679 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV),
026331c4
JM		 16680 },
16681 {
2e161f78 16682 .cmd = NL80211_CMD_FRAME,
ef6243ac 16683 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 16684 .doit = nl80211_tx_mgmt,
5617c6cd 16685 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16686 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
f7ca38df
JB		 16687 },
16688 {
16689 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
ef6243ac 16690 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f7ca38df 16691 .doit = nl80211_tx_mgmt_cancel_wait,
5617c6cd 16692 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16693 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
026331c4 16694 },
ffb9eb3d
KV		 16695 {
16696 .cmd = NL80211_CMD_SET_POWER_SAVE,
ef6243ac 16697 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 16698 .doit = nl80211_set_power_save,
5617c6cd 16699 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16700 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ffb9eb3d
KV		 16701 },
16702 {
16703 .cmd = NL80211_CMD_GET_POWER_SAVE,
ef6243ac 16704 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 16705 .doit = nl80211_get_power_save,
ffb9eb3d 16706 /* can be retrieved by unprivileged users */
2182db91 16707 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ffb9eb3d 16708 },
d6dc1a38
JO		 16709 {
16710 .cmd = NL80211_CMD_SET_CQM,
ef6243ac 16711 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
d6dc1a38 16712 .doit = nl80211_set_cqm,
5617c6cd 16713 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16714 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
d6dc1a38 16715 },
f444de05
JB		 16716 {
16717 .cmd = NL80211_CMD_SET_CHANNEL,
ef6243ac 16718 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f444de05 16719 .doit = nl80211_set_channel,
5617c6cd 16720 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16721 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16722 NL80211_FLAG_MLO_VALID_LINK_ID),
f444de05 16723 },
29cbe68c
JB		 16724 {
16725 .cmd = NL80211_CMD_JOIN_MESH,
ef6243ac 16726 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 16727 .doit = nl80211_join_mesh,
5617c6cd 16728 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16729 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
29cbe68c
JB		 16730 },
16731 {
16732 .cmd = NL80211_CMD_LEAVE_MESH,
ef6243ac 16733 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 16734 .doit = nl80211_leave_mesh,
5617c6cd 16735 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16736 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
29cbe68c 16737 },
6e0bd6c3
RL		 16738 {
16739 .cmd = NL80211_CMD_JOIN_OCB,
ef6243ac 16740 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 16741 .doit = nl80211_join_ocb,
5617c6cd 16742 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16743 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
6e0bd6c3
RL		 16744 },
16745 {
16746 .cmd = NL80211_CMD_LEAVE_OCB,
ef6243ac 16747 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 16748 .doit = nl80211_leave_ocb,
5617c6cd 16749 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16750 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
6e0bd6c3 16751 },
dfb89c56 16752#ifdef CONFIG_PM
ff1b6e69
JB		 16753 {
16754 .cmd = NL80211_CMD_GET_WOWLAN,
ef6243ac 16755 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 16756 .doit = nl80211_get_wowlan,
ff1b6e69 16757 /* can be retrieved by unprivileged users */
2182db91 16758 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
ff1b6e69
JB		 16759 },
16760 {
16761 .cmd = NL80211_CMD_SET_WOWLAN,
ef6243ac 16762 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 16763 .doit = nl80211_set_wowlan,
5617c6cd 16764 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16765 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
ff1b6e69 16766 },
dfb89c56 16767#endif
e5497d76
JB		 16768 {
16769 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
ef6243ac 16770 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e5497d76 16771 .doit = nl80211_set_rekey_data,
5617c6cd 16772 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16773 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16774 NL80211_FLAG_CLEAR_SKB),
e5497d76 16775 },
109086ce
AN		 16776 {
16777 .cmd = NL80211_CMD_TDLS_MGMT,
ef6243ac 16778 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 16779 .doit = nl80211_tdls_mgmt,
5617c6cd 16780 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16781 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
109086ce
AN		 16782 },
16783 {
16784 .cmd = NL80211_CMD_TDLS_OPER,
ef6243ac 16785 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 16786 .doit = nl80211_tdls_oper,
5617c6cd 16787 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16788 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
109086ce 16789 },
28946da7
JB		 16790 {
16791 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
ef6243ac 16792 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
28946da7 16793 .doit = nl80211_register_unexpected_frame,
5617c6cd 16794 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16795 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
28946da7 16796 },
7f6cf311
JB		 16797 {
16798 .cmd = NL80211_CMD_PROBE_CLIENT,
ef6243ac 16799 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
7f6cf311 16800 .doit = nl80211_probe_client,
5617c6cd 16801 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16802 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
7f6cf311 16803 },
5e760230
JB		 16804 {
16805 .cmd = NL80211_CMD_REGISTER_BEACONS,
ef6243ac 16806 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5e760230 16807 .doit = nl80211_register_beacons,
5617c6cd 16808 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16809 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
5e760230 16810 },
1d9d9213
SW		 16811 {
16812 .cmd = NL80211_CMD_SET_NOACK_MAP,
ef6243ac 16813 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1d9d9213 16814 .doit = nl80211_set_noack_map,
5617c6cd 16815 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16816 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
1d9d9213 16817 },
98104fde
JB		 16818 {
16819 .cmd = NL80211_CMD_START_P2P_DEVICE,
ef6243ac 16820 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 16821 .doit = nl80211_start_p2p_device,
5617c6cd 16822 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16823 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16824 NL80211_FLAG_NEED_RTNL),
98104fde
JB		 16825 },
16826 {
16827 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
ef6243ac 16828 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 16829 .doit = nl80211_stop_p2p_device,
5617c6cd 16830 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16831 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16832 NL80211_FLAG_NEED_RTNL),
cb3b7d87
AB		 16833 },
16834 {
16835 .cmd = NL80211_CMD_START_NAN,
ef6243ac 16836 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 16837 .doit = nl80211_start_nan,
cb3b7d87 16838 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16839 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16840 NL80211_FLAG_NEED_RTNL),
cb3b7d87
AB		 16841 },
16842 {
16843 .cmd = NL80211_CMD_STOP_NAN,
ef6243ac 16844 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 16845 .doit = nl80211_stop_nan,
cb3b7d87 16846 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16847 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16848 NL80211_FLAG_NEED_RTNL),
a442b761
AB		 16849 },
16850 {
16851 .cmd = NL80211_CMD_ADD_NAN_FUNCTION,
ef6243ac 16852 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 16853 .doit = nl80211_nan_add_func,
a442b761 16854 .flags = GENL_ADMIN_PERM,
2182db91 16855 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
a442b761
AB		 16856 },
16857 {
16858 .cmd = NL80211_CMD_DEL_NAN_FUNCTION,
ef6243ac 16859 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 16860 .doit = nl80211_nan_del_func,
a442b761 16861 .flags = GENL_ADMIN_PERM,
2182db91 16862 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
a5a9dcf2
AB		 16863 },
16864 {
16865 .cmd = NL80211_CMD_CHANGE_NAN_CONFIG,
ef6243ac 16866 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a5a9dcf2 16867 .doit = nl80211_nan_change_config,
a5a9dcf2 16868 .flags = GENL_ADMIN_PERM,
2182db91 16869 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
98104fde 16870 },
f4e583c8
AQ		 16871 {
16872 .cmd = NL80211_CMD_SET_MCAST_RATE,
ef6243ac 16873 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f4e583c8 16874 .doit = nl80211_set_mcast_rate,
5617c6cd 16875 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16876 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
77765eaf
VT		 16877 },
16878 {
16879 .cmd = NL80211_CMD_SET_MAC_ACL,
ef6243ac 16880 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
77765eaf 16881 .doit = nl80211_set_mac_acl,
5617c6cd 16882 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16883 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16884 NL80211_FLAG_MLO_UNSUPPORTED),
f4e583c8 16885 },
04f39047
SW		 16886 {
16887 .cmd = NL80211_CMD_RADAR_DETECT,
ef6243ac 16888 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04f39047 16889 .doit = nl80211_start_radar_detection,
5617c6cd 16890 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16891 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
7b0a0e3c
JB		 16892 NL80211_FLAG_NO_WIPHY_MTX |
16893 NL80211_FLAG_MLO_UNSUPPORTED),
04f39047 16894 },
3713b4e3
JB		 16895 {
16896 .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
ef6243ac 16897 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3713b4e3 16898 .doit = nl80211_get_protocol_features,
3713b4e3 16899 },
355199e0
JM		 16900 {
16901 .cmd = NL80211_CMD_UPDATE_FT_IES,
ef6243ac 16902 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
355199e0 16903 .doit = nl80211_update_ft_ies,
5617c6cd 16904 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16905 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
355199e0 16906 },
5de17984
AS		 16907 {
16908 .cmd = NL80211_CMD_CRIT_PROTOCOL_START,
ef6243ac 16909 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 16910 .doit = nl80211_crit_protocol_start,
5617c6cd 16911 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16912 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
5de17984
AS		 16913 },
16914 {
16915 .cmd = NL80211_CMD_CRIT_PROTOCOL_STOP,
ef6243ac 16916 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 16917 .doit = nl80211_crit_protocol_stop,
5617c6cd 16918 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16919 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
be29b99a
AK		 16920 },
16921 {
16922 .cmd = NL80211_CMD_GET_COALESCE,
ef6243ac 16923 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 16924 .doit = nl80211_get_coalesce,
2182db91 16925 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
be29b99a
AK		 16926 },
16927 {
16928 .cmd = NL80211_CMD_SET_COALESCE,
ef6243ac 16929 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 16930 .doit = nl80211_set_coalesce,
5617c6cd 16931 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16932 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
16ef1fe2
SW		 16933 },
16934 {
16935 .cmd = NL80211_CMD_CHANNEL_SWITCH,
ef6243ac 16936 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
16ef1fe2 16937 .doit = nl80211_channel_switch,
5617c6cd 16938 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16939 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16940 NL80211_FLAG_MLO_VALID_LINK_ID),
16ef1fe2 16941 },
ad7e718c
JB		 16942 {
16943 .cmd = NL80211_CMD_VENDOR,
ef6243ac 16944 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad7e718c 16945 .doit = nl80211_vendor_cmd,
7bdbe400 16946 .dumpit = nl80211_vendor_cmd_dump,
5617c6cd 16947 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16948 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
16949 NL80211_FLAG_CLEAR_SKB),
ad7e718c 16950 },
fa9ffc74
KP		 16951 {
16952 .cmd = NL80211_CMD_SET_QOS_MAP,
ef6243ac 16953 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
fa9ffc74 16954 .doit = nl80211_set_qos_map,
5617c6cd 16955 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16956 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
fa9ffc74 16957 },
960d01ac
JB		 16958 {
16959 .cmd = NL80211_CMD_ADD_TX_TS,
ef6243ac 16960 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 16961 .doit = nl80211_add_tx_ts,
5617c6cd 16962 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16963 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16964 NL80211_FLAG_MLO_UNSUPPORTED),
960d01ac
JB		 16965 },
16966 {
16967 .cmd = NL80211_CMD_DEL_TX_TS,
ef6243ac 16968 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 16969 .doit = nl80211_del_tx_ts,
5617c6cd 16970 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16971 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
960d01ac 16972 },
1057d35e
AN		 16973 {
16974 .cmd = NL80211_CMD_TDLS_CHANNEL_SWITCH,
ef6243ac 16975 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 16976 .doit = nl80211_tdls_channel_switch,
5617c6cd 16977 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16978 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
1057d35e
AN		 16979 },
16980 {
16981 .cmd = NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH,
ef6243ac 16982 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 16983 .doit = nl80211_tdls_cancel_channel_switch,
5617c6cd 16984 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16985 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
1057d35e 16986 },
ce0ce13a
MB		 16987 {
16988 .cmd = NL80211_CMD_SET_MULTICAST_TO_UNICAST,
ef6243ac 16989 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ce0ce13a 16990 .doit = nl80211_set_multicast_to_unicast,
ce0ce13a 16991 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16992 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ce0ce13a 16993 },
3a00df57
AS		 16994 {
16995 .cmd = NL80211_CMD_SET_PMK,
ef6243ac 16996 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 16997 .doit = nl80211_set_pmk,
2182db91
JB		 16998 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16999 NL80211_FLAG_CLEAR_SKB),
3a00df57
AS		 17000 },
17001 {
17002 .cmd = NL80211_CMD_DEL_PMK,
ef6243ac 17003 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 17004 .doit = nl80211_del_pmk,
2182db91 17005 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
3a00df57 17006 },
40cbfa90
SD		 17007 {
17008 .cmd = NL80211_CMD_EXTERNAL_AUTH,
ef6243ac 17009 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
40cbfa90 17010 .doit = nl80211_external_auth,
40cbfa90 17011 .flags = GENL_ADMIN_PERM,
2182db91 17012 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
40cbfa90 17013 },
2576a9ac
DK		 17014 {
17015 .cmd = NL80211_CMD_CONTROL_PORT_FRAME,
ef6243ac 17016 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2576a9ac 17017 .doit = nl80211_tx_control_port,
2576a9ac 17018 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17019 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2576a9ac 17020 },
81e54d08
PKC		 17021 {
17022 .cmd = NL80211_CMD_GET_FTM_RESPONDER_STATS,
ef6243ac 17023 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
81e54d08 17024 .doit = nl80211_get_ftm_responder_stats,
7b0a0e3c
JB		 17025 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
17026 NL80211_FLAG_MLO_VALID_LINK_ID),
81e54d08 17027 },
9bb7e0f2
JB		 17028 {
17029 .cmd = NL80211_CMD_PEER_MEASUREMENT_START,
ef6243ac 17030 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9bb7e0f2 17031 .doit = nl80211_pmsr_start,
9bb7e0f2 17032 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17033 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
9bb7e0f2 17034 },
30c63115
S		 17035 {
17036 .cmd = NL80211_CMD_NOTIFY_RADAR,
ef6243ac 17037 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
30c63115 17038 .doit = nl80211_notify_radar_detection,
30c63115 17039 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17040 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
30c63115 17041 },
cb74e977
SD		 17042 {
17043 .cmd = NL80211_CMD_UPDATE_OWE_INFO,
17044 .doit = nl80211_update_owe_info,
17045 .flags = GENL_ADMIN_PERM,
2182db91 17046 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5ab92e7f
RM		 17047 },
17048 {
17049 .cmd = NL80211_CMD_PROBE_MESH_LINK,
17050 .doit = nl80211_probe_mesh_link,
17051 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17052 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
cb74e977 17053 },
77f576de
T		 17054 {
17055 .cmd = NL80211_CMD_SET_TID_CONFIG,
17056 .doit = nl80211_set_tid_config,
17057 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 17058 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
17059 NL80211_FLAG_MLO_VALID_LINK_ID),
77f576de 17060 },
6bdb68ce
CH		 17061 {
17062 .cmd = NL80211_CMD_SET_SAR_SPECS,
17063 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17064 .doit = nl80211_set_sar_specs,
17065 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 17066 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
17067 NL80211_FLAG_NEED_RTNL),
6bdb68ce 17068 },
0d2ab3ae
JC		 17069 {
17070 .cmd = NL80211_CMD_COLOR_CHANGE_REQUEST,
17071 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17072 .doit = nl80211_color_change,
17073 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17074 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
0d2ab3ae 17075 },
e306784a
SM		 17076 {
17077 .cmd = NL80211_CMD_SET_FILS_AAD,
17078 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17079 .doit = nl80211_set_fils_aad,
17080 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17081 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
e306784a 17082 },
7b0a0e3c
JB		 17083 {
17084 .cmd = NL80211_CMD_ADD_LINK,
17085 .doit = nl80211_add_link,
17086 .flags = GENL_UNS_ADMIN_PERM,
17087 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
17088 },
17089 {
17090 .cmd = NL80211_CMD_REMOVE_LINK,
17091 .doit = nl80211_remove_link,
17092 .flags = GENL_UNS_ADMIN_PERM,
577e5b8c
ST		 17093 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17094 NL80211_FLAG_MLO_VALID_LINK_ID),
17095 },
17096 {
17097 .cmd = NL80211_CMD_ADD_LINK_STA,
17098 .doit = nl80211_add_link_station,
17099 .flags = GENL_UNS_ADMIN_PERM,
17100 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17101 NL80211_FLAG_MLO_VALID_LINK_ID),
17102 },
17103 {
17104 .cmd = NL80211_CMD_MODIFY_LINK_STA,
17105 .doit = nl80211_modify_link_station,
17106 .flags = GENL_UNS_ADMIN_PERM,
17107 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17108 NL80211_FLAG_MLO_VALID_LINK_ID),
17109 },
17110 {
17111 .cmd = NL80211_CMD_REMOVE_LINK_STA,
17112 .doit = nl80211_remove_link_station,
17113 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 17114 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17115 NL80211_FLAG_MLO_VALID_LINK_ID),
17116 },
55682965 17117};
9588bbd5 17118
56989f6d 17119static struct genl_family nl80211_fam __ro_after_init = {
489111e5
JB		 17120 .name = NL80211_GENL_NAME, /* have users key off the name instead */
17121 .hdrsize = 0, /* no private header */
17122 .version = 1, /* no particular meaning now */
17123 .maxattr = NL80211_ATTR_MAX,
3b0f31f2 17124 .policy = nl80211_policy,
489111e5
JB		 17125 .netnsok = true,
17126 .pre_doit = nl80211_pre_doit,
17127 .post_doit = nl80211_post_doit,
17128 .module = THIS_MODULE,
17129 .ops = nl80211_ops,
17130 .n_ops = ARRAY_SIZE(nl80211_ops),
66a9b928
JK		 17131 .small_ops = nl80211_small_ops,
17132 .n_small_ops = ARRAY_SIZE(nl80211_small_ops),
489111e5
JB		 17133 .mcgrps = nl80211_mcgrps,
17134 .n_mcgrps = ARRAY_SIZE(nl80211_mcgrps),
50508d94 17135 .parallel_ops = true,
489111e5
JB		 17136};
17137
55682965
JB		 17138/* notification functions */
17139
3bb20556
JB		 17140void nl80211_notify_wiphy(struct cfg80211_registered_device *rdev,
17141 enum nl80211_commands cmd)
55682965
JB		 17142{
17143 struct sk_buff *msg;
86e8cf98 17144 struct nl80211_dump_wiphy_state state = {};
55682965 17145
3bb20556
JB		 17146 WARN_ON(cmd != NL80211_CMD_NEW_WIPHY &&
17147 cmd != NL80211_CMD_DEL_WIPHY);
17148
fd2120ca 17149 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 17150 if (!msg)
17151 return;
17152
3bb20556 17153 if (nl80211_send_wiphy(rdev, cmd, msg, 0, 0, 0, &state) < 0) {
55682965
JB		 17154 nlmsg_free(msg);
17155 return;
17156 }
17157
68eb5503 17158 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17159 NL80211_MCGRP_CONFIG, GFP_KERNEL);
55682965
JB		 17160}
17161
896ff063
DK		 17162void nl80211_notify_iface(struct cfg80211_registered_device *rdev,
17163 struct wireless_dev *wdev,
17164 enum nl80211_commands cmd)
17165{
17166 struct sk_buff *msg;
17167
896ff063
DK		 17168 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17169 if (!msg)
17170 return;
17171
3d1a5bbf 17172 if (nl80211_send_iface(msg, 0, 0, 0, rdev, wdev, cmd) < 0) {
896ff063
DK		 17173 nlmsg_free(msg);
17174 return;
17175 }
17176
17177 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17178 NL80211_MCGRP_CONFIG, GFP_KERNEL);
17179}
17180
362a415d
JB		 17181static int nl80211_add_scan_req(struct sk_buff *msg,
17182 struct cfg80211_registered_device *rdev)
17183{
17184 struct cfg80211_scan_request *req = rdev->scan_req;
17185 struct nlattr *nest;
17186 int i;
c8cb5b85 17187 struct cfg80211_scan_info *info;
362a415d
JB		 17188
17189 if (WARN_ON(!req))
17190 return 0;
17191
ae0be8de 17192 nest = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_SSIDS);
362a415d
JB		 17193 if (!nest)
17194 goto nla_put_failure;
9360ffd1
DM		 17195 for (i = 0; i < req->n_ssids; i++) {
17196 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
17197 goto nla_put_failure;
17198 }
362a415d
JB		 17199 nla_nest_end(msg, nest);
17200
2032f3b2
TP		 17201 if (req->flags & NL80211_SCAN_FLAG_FREQ_KHZ) {
17202 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQ_KHZ);
17203 if (!nest)
17204 goto nla_put_failure;
17205 for (i = 0; i < req->n_channels; i++) {
17206 if (nla_put_u32(msg, i,
17207 ieee80211_channel_to_khz(req->channels[i])))
17208 goto nla_put_failure;
17209 }
17210 nla_nest_end(msg, nest);
17211 } else {
17212 nest = nla_nest_start_noflag(msg,
17213 NL80211_ATTR_SCAN_FREQUENCIES);
17214 if (!nest)
9360ffd1 17215 goto nla_put_failure;
2032f3b2
TP		 17216 for (i = 0; i < req->n_channels; i++) {
17217 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
17218 goto nla_put_failure;
17219 }
17220 nla_nest_end(msg, nest);
9360ffd1 17221 }
362a415d 17222
9360ffd1
DM		 17223 if (req->ie &&
17224 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
17225 goto nla_put_failure;
362a415d 17226
ae917c9f
JB		 17227 if (req->flags &&
17228 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags))
17229 goto nla_put_failure;
ed473771 17230
c8cb5b85
TM		 17231 info = rdev->int_scan_req ? &rdev->int_scan_req->info :
17232 &rdev->scan_req->info;
17233 if (info->scan_start_tsf &&
1d76250b 17234 (nla_put_u64_64bit(msg, NL80211_ATTR_SCAN_START_TIME_TSF,
c8cb5b85 17235 info->scan_start_tsf, NL80211_BSS_PAD) ||
1d76250b 17236 nla_put(msg, NL80211_ATTR_SCAN_START_TIME_TSF_BSSID, ETH_ALEN,
c8cb5b85 17237 info->tsf_bssid)))
1d76250b
AS		 17238 goto nla_put_failure;
17239
362a415d
JB		 17240 return 0;
17241 nla_put_failure:
17242 return -ENOBUFS;
17243}
17244
505a2e88 17245static int nl80211_prep_scan_msg(struct sk_buff *msg,
a538e2d5 17246 struct cfg80211_registered_device *rdev,
fd014284 17247 struct wireless_dev *wdev,
15e47304 17248 u32 portid, u32 seq, int flags,
a538e2d5 17249 u32 cmd)
2a519311
JB		 17250{
17251 void *hdr;
17252
15e47304 17253 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 17254 if (!hdr)
17255 return -1;
17256
9360ffd1 17257 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 17258 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
17259 wdev->netdev->ifindex)) ||
2dad624e
ND		 17260 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17261 NL80211_ATTR_PAD))
9360ffd1 17262 goto nla_put_failure;
2a519311 17263
362a415d
JB		 17264 /* ignore errors and send incomplete event anyway */
17265 nl80211_add_scan_req(msg, rdev);
2a519311 17266
053c095a
JB		 17267 genlmsg_end(msg, hdr);
17268 return 0;
2a519311
JB		 17269
17270 nla_put_failure:
17271 genlmsg_cancel(msg, hdr);
17272 return -EMSGSIZE;
17273}
17274
807f8a8c 17275static int
505a2e88 17276nl80211_prep_sched_scan_msg(struct sk_buff *msg,
96b08fd6 17277 struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 17278{
17279 void *hdr;
17280
96b08fd6 17281 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
807f8a8c
LC		 17282 if (!hdr)
17283 return -1;
17284
96b08fd6
AVS		 17285 if (nla_put_u32(msg, NL80211_ATTR_WIPHY,
17286 wiphy_to_rdev(req->wiphy)->wiphy_idx) ||
17287 nla_put_u32(msg, NL80211_ATTR_IFINDEX, req->dev->ifindex) ||
17288 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, req->reqid,
17289 NL80211_ATTR_PAD))
9360ffd1 17290 goto nla_put_failure;
807f8a8c 17291
053c095a
JB		 17292 genlmsg_end(msg, hdr);
17293 return 0;
807f8a8c
LC		 17294
17295 nla_put_failure:
17296 genlmsg_cancel(msg, hdr);
17297 return -EMSGSIZE;
17298}
17299
a538e2d5 17300void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 17301 struct wireless_dev *wdev)
a538e2d5
JB		 17302{
17303 struct sk_buff *msg;
17304
58050fce 17305 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 17306 if (!msg)
17307 return;
17308
505a2e88 17309 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 17310 NL80211_CMD_TRIGGER_SCAN) < 0) {
17311 nlmsg_free(msg);
17312 return;
17313 }
17314
68eb5503 17315 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17316 NL80211_MCGRP_SCAN, GFP_KERNEL);
a538e2d5
JB		 17317}
17318
f9d15d16
JB		 17319struct sk_buff *nl80211_build_scan_msg(struct cfg80211_registered_device *rdev,
17320 struct wireless_dev *wdev, bool aborted)
2a519311
JB		 17321{
17322 struct sk_buff *msg;
17323
fd2120ca 17324 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311 17325 if (!msg)
f9d15d16 17326 return NULL;
2a519311 17327
505a2e88 17328 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
f9d15d16
JB		 17329 aborted ? NL80211_CMD_SCAN_ABORTED :
17330 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311 17331 nlmsg_free(msg);
f9d15d16 17332 return NULL;
2a519311
JB		 17333 }
17334
f9d15d16 17335 return msg;
2a519311
JB		 17336}
17337
505a2e88
AVS		 17338/* send message created by nl80211_build_scan_msg() */
17339void nl80211_send_scan_msg(struct cfg80211_registered_device *rdev,
17340 struct sk_buff *msg)
807f8a8c 17341{
807f8a8c
LC		 17342 if (!msg)
17343 return;
17344
68eb5503 17345 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17346 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 17347}
17348
96b08fd6 17349void nl80211_send_sched_scan(struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 17350{
17351 struct sk_buff *msg;
17352
58050fce 17353 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 17354 if (!msg)
17355 return;
17356
96b08fd6 17357 if (nl80211_prep_sched_scan_msg(msg, req, cmd) < 0) {
807f8a8c
LC		 17358 nlmsg_free(msg);
17359 return;
17360 }
17361
96b08fd6 17362 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(req->wiphy), msg, 0,
2a94fe48 17363 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 17364}
17365
b0d7aa59
JD		 17366static bool nl80211_reg_change_event_fill(struct sk_buff *msg,
17367 struct regulatory_request *request)
73d54c9e 17368{
73d54c9e 17369 /* Userspace can always count this one always being set */
9360ffd1
DM		 17370 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
17371 goto nla_put_failure;
17372
17373 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
17374 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17375 NL80211_REGDOM_TYPE_WORLD))
17376 goto nla_put_failure;
17377 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
17378 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17379 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
17380 goto nla_put_failure;
17381 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
17382 request->intersect) {
17383 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17384 NL80211_REGDOM_TYPE_INTERSECTION))
17385 goto nla_put_failure;
17386 } else {
17387 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17388 NL80211_REGDOM_TYPE_COUNTRY) ||
17389 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
17390 request->alpha2))
17391 goto nla_put_failure;
17392 }
17393
ad30ca2c
AN		 17394 if (request->wiphy_idx != WIPHY_IDX_INVALID) {
17395 struct wiphy *wiphy = wiphy_idx_to_wiphy(request->wiphy_idx);
17396
17397 if (wiphy &&
17398 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
17399 goto nla_put_failure;
1bdd716c
AN		 17400
17401 if (wiphy &&
17402 wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
17403 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
17404 goto nla_put_failure;
ad30ca2c 17405 }
73d54c9e 17406
b0d7aa59
JD		 17407 return true;
17408
17409nla_put_failure:
17410 return false;
17411}
17412
17413/*
17414 * This can happen on global regulatory changes or device specific settings
17415 * based on custom regulatory domains.
17416 */
17417void nl80211_common_reg_change_event(enum nl80211_commands cmd_id,
17418 struct regulatory_request *request)
17419{
17420 struct sk_buff *msg;
17421 void *hdr;
17422
17423 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17424 if (!msg)
17425 return;
17426
17427 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd_id);
24f6d765 17428 if (!hdr)
17429 goto nla_put_failure;
b0d7aa59 17430
24f6d765 17431 if (!nl80211_reg_change_event_fill(msg, request))
b0d7aa59
JD		 17432 goto nla_put_failure;
17433
3b7b72ee 17434 genlmsg_end(msg, hdr);
73d54c9e 17435
bc43b28c 17436 rcu_read_lock();
68eb5503 17437 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 17438 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
bc43b28c 17439 rcu_read_unlock();
73d54c9e
LR		 17440
17441 return;
17442
17443nla_put_failure:
73d54c9e
LR		 17444 nlmsg_free(msg);
17445}
17446
6039f6d2
JM		 17447static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
17448 struct net_device *netdev,
17449 const u8 *buf, size_t len,
b0b6aa2c 17450 enum nl80211_commands cmd, gfp_t gfp,
4d9ec73d 17451 int uapsd_queues, const u8 *req_ies,
3bb02143 17452 size_t req_ies_len, bool reconnect)
6039f6d2
JM		 17453{
17454 struct sk_buff *msg;
17455 void *hdr;
17456
4d9ec73d 17457 msg = nlmsg_new(100 + len + req_ies_len, gfp);
6039f6d2
JM		 17458 if (!msg)
17459 return;
17460
17461 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
17462 if (!hdr) {
17463 nlmsg_free(msg);
17464 return;
17465 }
17466
9360ffd1
DM		 17467 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17468 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
4d9ec73d
JM		 17469 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
17470 (req_ies &&
17471 nla_put(msg, NL80211_ATTR_REQ_IE, req_ies_len, req_ies)))
9360ffd1 17472 goto nla_put_failure;
6039f6d2 17473
3bb02143
JB		 17474 if (reconnect && nla_put_flag(msg, NL80211_ATTR_RECONNECT_REQUESTED))
17475 goto nla_put_failure;
17476
b0b6aa2c
EP		 17477 if (uapsd_queues >= 0) {
17478 struct nlattr *nla_wmm =
ae0be8de 17479 nla_nest_start_noflag(msg, NL80211_ATTR_STA_WME);
b0b6aa2c
EP		 17480 if (!nla_wmm)
17481 goto nla_put_failure;
17482
17483 if (nla_put_u8(msg, NL80211_STA_WME_UAPSD_QUEUES,
17484 uapsd_queues))
17485 goto nla_put_failure;
17486
17487 nla_nest_end(msg, nla_wmm);
17488 }
17489
3b7b72ee 17490 genlmsg_end(msg, hdr);
6039f6d2 17491
68eb5503 17492 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17493 NL80211_MCGRP_MLME, gfp);
6039f6d2
JM		 17494 return;
17495
17496 nla_put_failure:
6039f6d2
JM		 17497 nlmsg_free(msg);
17498}
17499
17500void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17501 struct net_device *netdev, const u8 *buf,
17502 size_t len, gfp_t gfp)
6039f6d2
JM		 17503{
17504 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17505 NL80211_CMD_AUTHENTICATE, gfp, -1, NULL, 0,
17506 false);
6039f6d2
JM		 17507}
17508
17509void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
cd47c0f5
JB		 17510 struct net_device *netdev,
17511 struct cfg80211_rx_assoc_resp *data)
6039f6d2 17512{
cd47c0f5
JB		 17513 nl80211_send_mlme_event(rdev, netdev, data->buf, data->len,
17514 NL80211_CMD_ASSOCIATE, GFP_KERNEL,
17515 data->uapsd_queues,
17516 data->req_ies, data->req_ies_len, false);
6039f6d2
JM		 17517}
17518
53b46b84 17519void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342 17520 struct net_device *netdev, const u8 *buf,
3bb02143 17521 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 17522{
17523 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17524 NL80211_CMD_DEAUTHENTICATE, gfp, -1, NULL, 0,
17525 reconnect);
6039f6d2
JM		 17526}
17527
53b46b84
JM		 17528void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
17529 struct net_device *netdev, const u8 *buf,
3bb02143 17530 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 17531{
17532 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17533 NL80211_CMD_DISASSOCIATE, gfp, -1, NULL, 0,
17534 reconnect);
6039f6d2
JM		 17535}
17536
6ff57cf8
JB		 17537void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev, const u8 *buf,
17538 size_t len)
cf4e594e 17539{
947add36
JB		 17540 struct wireless_dev *wdev = dev->ieee80211_ptr;
17541 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17542 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
6ff57cf8
JB		 17543 const struct ieee80211_mgmt *mgmt = (void *)buf;
17544 u32 cmd;
947add36 17545
6ff57cf8
JB		 17546 if (WARN_ON(len < 2))
17547 return;
cf4e594e 17548
4d797fce 17549 if (ieee80211_is_deauth(mgmt->frame_control)) {
6ff57cf8 17550 cmd = NL80211_CMD_UNPROT_DEAUTHENTICATE;
4d797fce 17551 } else if (ieee80211_is_disassoc(mgmt->frame_control)) {
6ff57cf8 17552 cmd = NL80211_CMD_UNPROT_DISASSOCIATE;
4d797fce
JM		 17553 } else if (ieee80211_is_beacon(mgmt->frame_control)) {
17554 if (wdev->unprot_beacon_reported &&
17555 elapsed_jiffies_msecs(wdev->unprot_beacon_reported) < 10000)
17556 return;
17557 cmd = NL80211_CMD_UNPROT_BEACON;
17558 wdev->unprot_beacon_reported = jiffies;
17559 } else {
17560 return;
17561 }
947add36 17562
6ff57cf8 17563 trace_cfg80211_rx_unprot_mlme_mgmt(dev, buf, len);
4d9ec73d 17564 nl80211_send_mlme_event(rdev, dev, buf, len, cmd, GFP_ATOMIC, -1,
3bb02143 17565 NULL, 0, false);
cf4e594e 17566}
6ff57cf8 17567EXPORT_SYMBOL(cfg80211_rx_unprot_mlme_mgmt);
cf4e594e 17568
1b06bb40
LR		 17569static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
17570 struct net_device *netdev, int cmd,
e6d6e342 17571 const u8 *addr, gfp_t gfp)
1965c853
JM		 17572{
17573 struct sk_buff *msg;
17574 void *hdr;
17575
e6d6e342 17576 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 17577 if (!msg)
17578 return;
17579
17580 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
17581 if (!hdr) {
17582 nlmsg_free(msg);
17583 return;
17584 }
17585
9360ffd1
DM		 17586 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17587 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17588 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
17589 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
17590 goto nla_put_failure;
1965c853 17591
3b7b72ee 17592 genlmsg_end(msg, hdr);
1965c853 17593
68eb5503 17594 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17595 NL80211_MCGRP_MLME, gfp);
1965c853
JM		 17596 return;
17597
17598 nla_put_failure:
1965c853
JM		 17599 nlmsg_free(msg);
17600}
17601
17602void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17603 struct net_device *netdev, const u8 *addr,
17604 gfp_t gfp)
1965c853
JM		 17605{
17606 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 17607 addr, gfp);
1965c853
JM		 17608}
17609
17610void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17611 struct net_device *netdev, const u8 *addr,
17612 gfp_t gfp)
1965c853 17613{
e6d6e342
JB		 17614 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
17615 addr, gfp);
1965c853
JM		 17616}
17617
b23aa676 17618void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
5349a0f7
VK		 17619 struct net_device *netdev,
17620 struct cfg80211_connect_resp_params *cr,
3093ebbe 17621 gfp_t gfp)
b23aa676
SO		 17622{
17623 struct sk_buff *msg;
17624 void *hdr;
efbabc11
VJ		 17625 unsigned int link;
17626 size_t link_info_size = 0;
17627 const u8 *connected_addr = cr->valid_links ?
17628 cr->ap_mld_addr : cr->links[0].bssid;
17629
17630 if (cr->valid_links) {
17631 for_each_valid_link(cr, link) {
17632 /* Nested attribute header */
17633 link_info_size += NLA_HDRLEN;
17634 /* Link ID */
17635 link_info_size += nla_total_size(sizeof(u8));
17636 link_info_size += cr->links[link].addr ?
17637 nla_total_size(ETH_ALEN) : 0;
17638 link_info_size += (cr->links[link].bssid ||
17639 cr->links[link].bss) ?
17640 nla_total_size(ETH_ALEN) : 0;
17641 }
17642 }
b23aa676 17643
a3caf744 17644 msg = nlmsg_new(100 + cr->req_ie_len + cr->resp_ie_len +
76804d28 17645 cr->fils.kek_len + cr->fils.pmk_len +
efbabc11
VJ		 17646 (cr->fils.pmkid ? WLAN_PMKID_LEN : 0) + link_info_size,
17647 gfp);
b23aa676
SO		 17648 if (!msg)
17649 return;
17650
17651 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
17652 if (!hdr) {
17653 nlmsg_free(msg);
17654 return;
17655 }
17656
9360ffd1
DM		 17657 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17658 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
efbabc11
VJ		 17659 (connected_addr &&
17660 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, connected_addr)) ||
bf1ecd21 17661 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE,
5349a0f7
VK		 17662 cr->status < 0 ? WLAN_STATUS_UNSPECIFIED_FAILURE :
17663 cr->status) ||
17664 (cr->status < 0 &&
3093ebbe 17665 (nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
5349a0f7
VK		 17666 nla_put_u32(msg, NL80211_ATTR_TIMEOUT_REASON,
17667 cr->timeout_reason))) ||
17668 (cr->req_ie &&
17669 nla_put(msg, NL80211_ATTR_REQ_IE, cr->req_ie_len, cr->req_ie)) ||
17670 (cr->resp_ie &&
17671 nla_put(msg, NL80211_ATTR_RESP_IE, cr->resp_ie_len,
a3caf744 17672 cr->resp_ie)) ||
76804d28 17673 (cr->fils.update_erp_next_seq_num &&
a3caf744 17674 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
76804d28 17675 cr->fils.erp_next_seq_num)) ||
a3caf744 17676 (cr->status == WLAN_STATUS_SUCCESS &&
76804d28
AVS		 17677 ((cr->fils.kek &&
17678 nla_put(msg, NL80211_ATTR_FILS_KEK, cr->fils.kek_len,
17679 cr->fils.kek)) ||
17680 (cr->fils.pmk &&
17681 nla_put(msg, NL80211_ATTR_PMK, cr->fils.pmk_len, cr->fils.pmk)) ||
17682 (cr->fils.pmkid &&
17683 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, cr->fils.pmkid)))))
9360ffd1 17684 goto nla_put_failure;
b23aa676 17685
efbabc11
VJ		 17686 if (cr->valid_links) {
17687 int i = 1;
17688 struct nlattr *nested;
17689
17690 nested = nla_nest_start(msg, NL80211_ATTR_MLO_LINKS);
17691 if (!nested)
17692 goto nla_put_failure;
17693
17694 for_each_valid_link(cr, link) {
17695 struct nlattr *nested_mlo_links;
17696 const u8 *bssid = cr->links[link].bss ?
17697 cr->links[link].bss->bssid :
17698 cr->links[link].bssid;
17699
17700 nested_mlo_links = nla_nest_start(msg, i);
17701 if (!nested_mlo_links)
17702 goto nla_put_failure;
17703
17704 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link) ||
17705 (bssid &&
17706 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, bssid)) ||
17707 (cr->links[link].addr &&
17708 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
17709 cr->links[link].addr)))
17710 goto nla_put_failure;
17711
17712 nla_nest_end(msg, nested_mlo_links);
17713 i++;
17714 }
17715 nla_nest_end(msg, nested);
17716 }
17717
3b7b72ee 17718 genlmsg_end(msg, hdr);
b23aa676 17719
68eb5503 17720 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17721 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 17722 return;
17723
17724 nla_put_failure:
b23aa676 17725 nlmsg_free(msg);
b23aa676
SO		 17726}
17727
17728void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
29ce6ecb
AS		 17729 struct net_device *netdev,
17730 struct cfg80211_roam_info *info, gfp_t gfp)
b23aa676
SO		 17731{
17732 struct sk_buff *msg;
17733 void *hdr;
efbabc11
VJ		 17734 size_t link_info_size = 0;
17735 unsigned int link;
17736 const u8 *connected_addr = info->ap_mld_addr ?
17737 info->ap_mld_addr :
17738 (info->links[0].bss ?
17739 info->links[0].bss->bssid :
17740 info->links[0].bssid);
17741
17742 if (info->valid_links) {
17743 for_each_valid_link(info, link) {
17744 /* Nested attribute header */
17745 link_info_size += NLA_HDRLEN;
17746 /* Link ID */
17747 link_info_size += nla_total_size(sizeof(u8));
17748 link_info_size += info->links[link].addr ?
17749 nla_total_size(ETH_ALEN) : 0;
17750 link_info_size += (info->links[link].bssid ||
17751 info->links[link].bss) ?
17752 nla_total_size(ETH_ALEN) : 0;
17753 }
17754 }
b23aa676 17755
e841b7b1
AVS		 17756 msg = nlmsg_new(100 + info->req_ie_len + info->resp_ie_len +
17757 info->fils.kek_len + info->fils.pmk_len +
efbabc11
VJ		 17758 (info->fils.pmkid ? WLAN_PMKID_LEN : 0) +
17759 link_info_size, gfp);
b23aa676
SO		 17760 if (!msg)
17761 return;
17762
17763 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
17764 if (!hdr) {
17765 nlmsg_free(msg);
17766 return;
17767 }
17768
9360ffd1
DM		 17769 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17770 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
efbabc11 17771 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, connected_addr) ||
29ce6ecb
AS		 17772 (info->req_ie &&
17773 nla_put(msg, NL80211_ATTR_REQ_IE, info->req_ie_len,
17774 info->req_ie)) ||
17775 (info->resp_ie &&
17776 nla_put(msg, NL80211_ATTR_RESP_IE, info->resp_ie_len,
e841b7b1
AVS		 17777 info->resp_ie)) ||
17778 (info->fils.update_erp_next_seq_num &&
17779 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
17780 info->fils.erp_next_seq_num)) ||
17781 (info->fils.kek &&
17782 nla_put(msg, NL80211_ATTR_FILS_KEK, info->fils.kek_len,
17783 info->fils.kek)) ||
17784 (info->fils.pmk &&
17785 nla_put(msg, NL80211_ATTR_PMK, info->fils.pmk_len, info->fils.pmk)) ||
17786 (info->fils.pmkid &&
17787 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, info->fils.pmkid)))
9360ffd1 17788 goto nla_put_failure;
b23aa676 17789
efbabc11
VJ		 17790 if (info->valid_links) {
17791 int i = 1;
17792 struct nlattr *nested;
17793
17794 nested = nla_nest_start(msg, NL80211_ATTR_MLO_LINKS);
17795 if (!nested)
17796 goto nla_put_failure;
17797
17798 for_each_valid_link(info, link) {
17799 struct nlattr *nested_mlo_links;
17800 const u8 *bssid = info->links[link].bss ?
17801 info->links[link].bss->bssid :
17802 info->links[link].bssid;
17803
17804 nested_mlo_links = nla_nest_start(msg, i);
17805 if (!nested_mlo_links)
17806 goto nla_put_failure;
17807
17808 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link) ||
17809 (bssid &&
17810 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, bssid)) ||
17811 (info->links[link].addr &&
17812 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
17813 info->links[link].addr)))
17814 goto nla_put_failure;
17815
17816 nla_nest_end(msg, nested_mlo_links);
17817 i++;
17818 }
17819 nla_nest_end(msg, nested);
17820 }
17821
3b7b72ee 17822 genlmsg_end(msg, hdr);
b23aa676 17823
68eb5503 17824 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17825 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 17826 return;
17827
503c1fb9 17828 nla_put_failure:
503c1fb9
AS		 17829 nlmsg_free(msg);
17830}
17831
17832void nl80211_send_port_authorized(struct cfg80211_registered_device *rdev,
17833 struct net_device *netdev, const u8 *bssid)
17834{
17835 struct sk_buff *msg;
17836 void *hdr;
17837
17838 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17839 if (!msg)
17840 return;
17841
17842 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PORT_AUTHORIZED);
17843 if (!hdr) {
17844 nlmsg_free(msg);
17845 return;
17846 }
17847
f4d75993
CHH		 17848 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17849 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17850 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
503c1fb9
AS		 17851 goto nla_put_failure;
17852
17853 genlmsg_end(msg, hdr);
17854
17855 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17856 NL80211_MCGRP_MLME, GFP_KERNEL);
17857 return;
17858
b23aa676 17859 nla_put_failure:
b23aa676 17860 nlmsg_free(msg);
b23aa676
SO		 17861}
17862
17863void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
17864 struct net_device *netdev, u16 reason,
667503dd 17865 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 17866{
17867 struct sk_buff *msg;
17868 void *hdr;
17869
4ef8c1c9 17870 msg = nlmsg_new(100 + ie_len, GFP_KERNEL);
b23aa676
SO		 17871 if (!msg)
17872 return;
17873
17874 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
17875 if (!hdr) {
17876 nlmsg_free(msg);
17877 return;
17878 }
17879
9360ffd1
DM		 17880 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17881 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
86b6c465 17882 (reason &&
9360ffd1
DM		 17883 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
17884 (from_ap &&
17885 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
17886 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
17887 goto nla_put_failure;
b23aa676 17888
3b7b72ee 17889 genlmsg_end(msg, hdr);
b23aa676 17890
68eb5503 17891 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17892 NL80211_MCGRP_MLME, GFP_KERNEL);
b23aa676
SO		 17893 return;
17894
17895 nla_put_failure:
b23aa676 17896 nlmsg_free(msg);
b23aa676
SO		 17897}
17898
04a773ad
JB		 17899void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
17900 struct net_device *netdev, const u8 *bssid,
17901 gfp_t gfp)
17902{
17903 struct sk_buff *msg;
17904 void *hdr;
17905
fd2120ca 17906 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 17907 if (!msg)
17908 return;
17909
17910 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
17911 if (!hdr) {
17912 nlmsg_free(msg);
17913 return;
17914 }
17915
9360ffd1
DM		 17916 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17917 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17918 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
17919 goto nla_put_failure;
04a773ad 17920
3b7b72ee 17921 genlmsg_end(msg, hdr);
04a773ad 17922
68eb5503 17923 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17924 NL80211_MCGRP_MLME, gfp);
04a773ad
JB		 17925 return;
17926
17927 nla_put_failure:
04a773ad
JB		 17928 nlmsg_free(msg);
17929}
17930
947add36 17931void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
ecbc12ad
BC		 17932 const u8 *ie, u8 ie_len,
17933 int sig_dbm, gfp_t gfp)
c93b5e71 17934{
947add36 17935 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 17936 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
c93b5e71
JC		 17937 struct sk_buff *msg;
17938 void *hdr;
17939
947add36
JB		 17940 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_MESH_POINT))
17941 return;
17942
17943 trace_cfg80211_notify_new_peer_candidate(dev, addr);
17944
4ef8c1c9 17945 msg = nlmsg_new(100 + ie_len, gfp);
c93b5e71
JC		 17946 if (!msg)
17947 return;
17948
17949 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
17950 if (!hdr) {
17951 nlmsg_free(msg);
17952 return;
17953 }
17954
9360ffd1 17955 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36
JB		 17956 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17957 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
9360ffd1 17958 (ie_len && ie &&
ecbc12ad
BC		 17959 nla_put(msg, NL80211_ATTR_IE, ie_len, ie)) ||
17960 (sig_dbm &&
17961 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)))
9360ffd1 17962 goto nla_put_failure;
c93b5e71 17963
3b7b72ee 17964 genlmsg_end(msg, hdr);
c93b5e71 17965
68eb5503 17966 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17967 NL80211_MCGRP_MLME, gfp);
c93b5e71
JC		 17968 return;
17969
17970 nla_put_failure:
c93b5e71
JC		 17971 nlmsg_free(msg);
17972}
947add36 17973EXPORT_SYMBOL(cfg80211_notify_new_peer_candidate);
c93b5e71 17974
a3b8b056
JM		 17975void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
17976 struct net_device *netdev, const u8 *addr,
17977 enum nl80211_key_type key_type, int key_id,
e6d6e342 17978 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 17979{
17980 struct sk_buff *msg;
17981 void *hdr;
17982
e6d6e342 17983 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 17984 if (!msg)
17985 return;
17986
17987 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
17988 if (!hdr) {
17989 nlmsg_free(msg);
17990 return;
17991 }
17992
9360ffd1
DM		 17993 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17994 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17995 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
17996 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
17997 (key_id != -1 &&
17998 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
17999 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
18000 goto nla_put_failure;
a3b8b056 18001
3b7b72ee 18002 genlmsg_end(msg, hdr);
a3b8b056 18003
68eb5503 18004 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18005 NL80211_MCGRP_MLME, gfp);
a3b8b056
JM		 18006 return;
18007
18008 nla_put_failure:
a3b8b056
JM		 18009 nlmsg_free(msg);
18010}
18011
6bad8766
LR		 18012void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
18013 struct ieee80211_channel *channel_before,
18014 struct ieee80211_channel *channel_after)
18015{
18016 struct sk_buff *msg;
18017 void *hdr;
18018 struct nlattr *nl_freq;
18019
fd2120ca 18020 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 18021 if (!msg)
18022 return;
18023
18024 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
18025 if (!hdr) {
18026 nlmsg_free(msg);
18027 return;
18028 }
18029
18030 /*
18031 * Since we are applying the beacon hint to a wiphy we know its
18032 * wiphy_idx is valid
18033 */
9360ffd1
DM		 18034 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
18035 goto nla_put_failure;
6bad8766
LR		 18036
18037 /* Before */
ae0be8de 18038 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_BEFORE);
6bad8766
LR		 18039 if (!nl_freq)
18040 goto nla_put_failure;
50f32718
HD		 18041
18042 if (nl80211_msg_put_channel(msg, wiphy, channel_before, false))
6bad8766
LR		 18043 goto nla_put_failure;
18044 nla_nest_end(msg, nl_freq);
18045
18046 /* After */
ae0be8de 18047 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_AFTER);
6bad8766
LR		 18048 if (!nl_freq)
18049 goto nla_put_failure;
50f32718
HD		 18050
18051 if (nl80211_msg_put_channel(msg, wiphy, channel_after, false))
6bad8766
LR		 18052 goto nla_put_failure;
18053 nla_nest_end(msg, nl_freq);
18054
3b7b72ee 18055 genlmsg_end(msg, hdr);
6bad8766 18056
463d0183 18057 rcu_read_lock();
68eb5503 18058 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 18059 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
463d0183 18060 rcu_read_unlock();
6bad8766
LR		 18061
18062 return;
18063
18064nla_put_failure:
6bad8766
LR		 18065 nlmsg_free(msg);
18066}
18067
9588bbd5
JM		 18068static void nl80211_send_remain_on_chan_event(
18069 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 18070 struct wireless_dev *wdev, u64 cookie,
9588bbd5 18071 struct ieee80211_channel *chan,
9588bbd5
JM		 18072 unsigned int duration, gfp_t gfp)
18073{
18074 struct sk_buff *msg;
18075 void *hdr;
18076
18077 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18078 if (!msg)
18079 return;
18080
18081 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
18082 if (!hdr) {
18083 nlmsg_free(msg);
18084 return;
18085 }
18086
9360ffd1 18087 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18088 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18089 wdev->netdev->ifindex)) ||
2dad624e
ND		 18090 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18091 NL80211_ATTR_PAD) ||
9360ffd1 18092 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
42d97a59
JB		 18093 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
18094 NL80211_CHAN_NO_HT) ||
2dad624e
ND		 18095 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
18096 NL80211_ATTR_PAD))
9360ffd1 18097 goto nla_put_failure;
9588bbd5 18098
9360ffd1
DM		 18099 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
18100 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
18101 goto nla_put_failure;
9588bbd5 18102
3b7b72ee 18103 genlmsg_end(msg, hdr);
9588bbd5 18104
68eb5503 18105 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18106 NL80211_MCGRP_MLME, gfp);
9588bbd5
JM		 18107 return;
18108
18109 nla_put_failure:
9588bbd5
JM		 18110 nlmsg_free(msg);
18111}
18112
a083ee8a 18113void cfg80211_assoc_comeback(struct net_device *netdev,
e69dac88 18114 const u8 *ap_addr, u32 timeout)
a083ee8a
IP		 18115{
18116 struct wireless_dev *wdev = netdev->ieee80211_ptr;
18117 struct wiphy *wiphy = wdev->wiphy;
18118 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18119 struct sk_buff *msg;
18120 void *hdr;
18121
e69dac88 18122 trace_cfg80211_assoc_comeback(wdev, ap_addr, timeout);
a083ee8a
IP		 18123
18124 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
18125 if (!msg)
18126 return;
18127
18128 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ASSOC_COMEBACK);
18129 if (!hdr) {
18130 nlmsg_free(msg);
18131 return;
18132 }
18133
18134 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18135 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
e69dac88 18136 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ap_addr) ||
a083ee8a
IP		 18137 nla_put_u32(msg, NL80211_ATTR_TIMEOUT, timeout))
18138 goto nla_put_failure;
18139
18140 genlmsg_end(msg, hdr);
18141
18142 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
18143 NL80211_MCGRP_MLME, GFP_KERNEL);
18144 return;
18145
18146 nla_put_failure:
18147 nlmsg_free(msg);
18148}
18149EXPORT_SYMBOL(cfg80211_assoc_comeback);
18150
947add36
JB		 18151void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
18152 struct ieee80211_channel *chan,
18153 unsigned int duration, gfp_t gfp)
9588bbd5 18154{
947add36 18155 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18156 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18157
18158 trace_cfg80211_ready_on_channel(wdev, cookie, chan, duration);
9588bbd5 18159 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 18160 rdev, wdev, cookie, chan,
42d97a59 18161 duration, gfp);
9588bbd5 18162}
947add36 18163EXPORT_SYMBOL(cfg80211_ready_on_channel);
9588bbd5 18164
947add36
JB		 18165void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
18166 struct ieee80211_channel *chan,
18167 gfp_t gfp)
9588bbd5 18168{
947add36 18169 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18170 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18171
18172 trace_cfg80211_ready_on_channel_expired(wdev, cookie, chan);
9588bbd5 18173 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
42d97a59 18174 rdev, wdev, cookie, chan, 0, gfp);
9588bbd5 18175}
947add36 18176EXPORT_SYMBOL(cfg80211_remain_on_channel_expired);
9588bbd5 18177
1c38c7f2
JP		 18178void cfg80211_tx_mgmt_expired(struct wireless_dev *wdev, u64 cookie,
18179 struct ieee80211_channel *chan,
18180 gfp_t gfp)
18181{
18182 struct wiphy *wiphy = wdev->wiphy;
18183 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18184
18185 trace_cfg80211_tx_mgmt_expired(wdev, cookie, chan);
18186 nl80211_send_remain_on_chan_event(NL80211_CMD_FRAME_WAIT_CANCEL,
18187 rdev, wdev, cookie, chan, 0, gfp);
18188}
18189EXPORT_SYMBOL(cfg80211_tx_mgmt_expired);
18190
947add36
JB		 18191void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
18192 struct station_info *sinfo, gfp_t gfp)
98b62183 18193{
947add36 18194 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18195 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
98b62183
JB		 18196 struct sk_buff *msg;
18197
947add36
JB		 18198 trace_cfg80211_new_sta(dev, mac_addr, sinfo);
18199
58050fce 18200 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 18201 if (!msg)
18202 return;
18203
cf5ead82 18204 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION, 0, 0, 0,
66266b3a 18205 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 18206 nlmsg_free(msg);
18207 return;
18208 }
18209
68eb5503 18210 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18211 NL80211_MCGRP_MLME, gfp);
98b62183 18212}
947add36 18213EXPORT_SYMBOL(cfg80211_new_sta);
98b62183 18214
cf5ead82
JB		 18215void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
18216 struct station_info *sinfo, gfp_t gfp)
ec15e68b 18217{
947add36 18218 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18219 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ec15e68b 18220 struct sk_buff *msg;
73887fd9 18221 struct station_info empty_sinfo = {};
cf5ead82 18222
73887fd9
JB		 18223 if (!sinfo)
18224 sinfo = &empty_sinfo;
ec15e68b 18225
947add36
JB		 18226 trace_cfg80211_del_sta(dev, mac_addr);
18227
58050fce 18228 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7ea3e110
JB		 18229 if (!msg) {
18230 cfg80211_sinfo_release_content(sinfo);
73887fd9 18231 return;
7ea3e110 18232 }
ec15e68b 18233
cf5ead82 18234 if (nl80211_send_station(msg, NL80211_CMD_DEL_STATION, 0, 0, 0,
57007121 18235 rdev, dev, mac_addr, sinfo) < 0) {
ec15e68b 18236 nlmsg_free(msg);
73887fd9 18237 return;
ec15e68b
JM		 18238 }
18239
68eb5503 18240 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18241 NL80211_MCGRP_MLME, gfp);
ec15e68b 18242}
cf5ead82 18243EXPORT_SYMBOL(cfg80211_del_sta_sinfo);
ec15e68b 18244
947add36
JB		 18245void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
18246 enum nl80211_connect_failed_reason reason,
18247 gfp_t gfp)
ed44a951 18248{
947add36 18249 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18250 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ed44a951
PP		 18251 struct sk_buff *msg;
18252 void *hdr;
18253
18254 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
18255 if (!msg)
18256 return;
18257
18258 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
18259 if (!hdr) {
18260 nlmsg_free(msg);
18261 return;
18262 }
18263
18264 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18265 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
18266 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
18267 goto nla_put_failure;
18268
18269 genlmsg_end(msg, hdr);
18270
68eb5503 18271 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18272 NL80211_MCGRP_MLME, gfp);
ed44a951
PP		 18273 return;
18274
18275 nla_put_failure:
ed44a951
PP		 18276 nlmsg_free(msg);
18277}
947add36 18278EXPORT_SYMBOL(cfg80211_conn_failed);
ed44a951 18279
b92ab5d8
JB		 18280static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
18281 const u8 *addr, gfp_t gfp)
28946da7
JB		 18282{
18283 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 18284 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
28946da7
JB		 18285 struct sk_buff *msg;
18286 void *hdr;
6aa7de05 18287 u32 nlportid = READ_ONCE(wdev->ap_unexpected_nlportid);
28946da7 18288
15e47304 18289 if (!nlportid)
28946da7
JB		 18290 return false;
18291
18292 msg = nlmsg_new(100, gfp);
18293 if (!msg)
18294 return true;
18295
b92ab5d8 18296 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 18297 if (!hdr) {
18298 nlmsg_free(msg);
18299 return true;
18300 }
18301
9360ffd1
DM		 18302 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18303 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18304 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
18305 goto nla_put_failure;
28946da7 18306
9c90a9f6 18307 genlmsg_end(msg, hdr);
15e47304 18308 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 18309 return true;
18310
18311 nla_put_failure:
28946da7
JB		 18312 nlmsg_free(msg);
18313 return true;
18314}
18315
947add36
JB		 18316bool cfg80211_rx_spurious_frame(struct net_device *dev,
18317 const u8 *addr, gfp_t gfp)
b92ab5d8 18318{
947add36
JB		 18319 struct wireless_dev *wdev = dev->ieee80211_ptr;
18320 bool ret;
18321
18322 trace_cfg80211_rx_spurious_frame(dev, addr);
18323
18324 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
18325 wdev->iftype != NL80211_IFTYPE_P2P_GO)) {
18326 trace_cfg80211_return_bool(false);
18327 return false;
18328 }
18329 ret = __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
18330 addr, gfp);
18331 trace_cfg80211_return_bool(ret);
18332 return ret;
b92ab5d8 18333}
947add36 18334EXPORT_SYMBOL(cfg80211_rx_spurious_frame);
b92ab5d8 18335
947add36
JB		 18336bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
18337 const u8 *addr, gfp_t gfp)
b92ab5d8 18338{
947add36
JB		 18339 struct wireless_dev *wdev = dev->ieee80211_ptr;
18340 bool ret;
18341
18342 trace_cfg80211_rx_unexpected_4addr_frame(dev, addr);
18343
18344 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
18345 wdev->iftype != NL80211_IFTYPE_P2P_GO &&
18346 wdev->iftype != NL80211_IFTYPE_AP_VLAN)) {
18347 trace_cfg80211_return_bool(false);
18348 return false;
18349 }
18350 ret = __nl80211_unexpected_frame(dev,
18351 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
18352 addr, gfp);
18353 trace_cfg80211_return_bool(ret);
18354 return ret;
b92ab5d8 18355}
947add36 18356EXPORT_SYMBOL(cfg80211_rx_unexpected_4addr_frame);
b92ab5d8 18357
2e161f78 18358int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 18359 struct wireless_dev *wdev, u32 nlportid,
804483e9 18360 int freq, int sig_dbm,
19504cf5 18361 const u8 *buf, size_t len, u32 flags, gfp_t gfp)
026331c4 18362{
71bbc994 18363 struct net_device *netdev = wdev->netdev;
026331c4
JM		 18364 struct sk_buff *msg;
18365 void *hdr;
026331c4 18366
4ef8c1c9 18367 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 18368 if (!msg)
18369 return -ENOMEM;
18370
2e161f78 18371 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 18372 if (!hdr) {
18373 nlmsg_free(msg);
18374 return -ENOMEM;
18375 }
18376
9360ffd1 18377 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18378 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18379 netdev->ifindex)) ||
2dad624e
ND		 18380 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18381 NL80211_ATTR_PAD) ||
e76fede8 18382 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, KHZ_TO_MHZ(freq)) ||
942ba88b 18383 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET, freq % 1000) ||
9360ffd1
DM		 18384 (sig_dbm &&
18385 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
19504cf5
VK		 18386 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
18387 (flags &&
18388 nla_put_u32(msg, NL80211_ATTR_RXMGMT_FLAGS, flags)))
9360ffd1 18389 goto nla_put_failure;
026331c4 18390
3b7b72ee 18391 genlmsg_end(msg, hdr);
026331c4 18392
15e47304 18393 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 18394
18395 nla_put_failure:
026331c4
JM		 18396 nlmsg_free(msg);
18397 return -ENOBUFS;
18398}
18399
dca9ca2d
MT		 18400static void nl80211_frame_tx_status(struct wireless_dev *wdev, u64 cookie,
18401 const u8 *buf, size_t len, bool ack,
18402 gfp_t gfp, enum nl80211_commands command)
026331c4 18403{
947add36 18404 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18405 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
71bbc994 18406 struct net_device *netdev = wdev->netdev;
026331c4
JM		 18407 struct sk_buff *msg;
18408 void *hdr;
18409
dca9ca2d
MT		 18410 if (command == NL80211_CMD_FRAME_TX_STATUS)
18411 trace_cfg80211_mgmt_tx_status(wdev, cookie, ack);
18412 else
18413 trace_cfg80211_control_port_tx_status(wdev, cookie, ack);
947add36 18414
4ef8c1c9 18415 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 18416 if (!msg)
18417 return;
18418
dca9ca2d 18419 hdr = nl80211hdr_put(msg, 0, 0, 0, command);
026331c4
JM		 18420 if (!hdr) {
18421 nlmsg_free(msg);
18422 return;
18423 }
18424
9360ffd1 18425 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18426 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18427 netdev->ifindex)) ||
2dad624e
ND		 18428 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18429 NL80211_ATTR_PAD) ||
9360ffd1 18430 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
2dad624e
ND		 18431 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
18432 NL80211_ATTR_PAD) ||
9360ffd1
DM		 18433 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
18434 goto nla_put_failure;
026331c4 18435
3b7b72ee 18436 genlmsg_end(msg, hdr);
026331c4 18437
68eb5503 18438 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18439 NL80211_MCGRP_MLME, gfp);
026331c4
JM		 18440 return;
18441
dca9ca2d 18442nla_put_failure:
026331c4
JM		 18443 nlmsg_free(msg);
18444}
dca9ca2d
MT		 18445
18446void cfg80211_control_port_tx_status(struct wireless_dev *wdev, u64 cookie,
18447 const u8 *buf, size_t len, bool ack,
18448 gfp_t gfp)
18449{
18450 nl80211_frame_tx_status(wdev, cookie, buf, len, ack, gfp,
18451 NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS);
18452}
18453EXPORT_SYMBOL(cfg80211_control_port_tx_status);
18454
18455void cfg80211_mgmt_tx_status(struct wireless_dev *wdev, u64 cookie,
18456 const u8 *buf, size_t len, bool ack, gfp_t gfp)
18457{
18458 nl80211_frame_tx_status(wdev, cookie, buf, len, ack, gfp,
18459 NL80211_CMD_FRAME_TX_STATUS);
18460}
947add36 18461EXPORT_SYMBOL(cfg80211_mgmt_tx_status);
026331c4 18462
6a671a50 18463static int __nl80211_rx_control_port(struct net_device *dev,
a948f713 18464 struct sk_buff *skb,
6a671a50
DK		 18465 bool unencrypted, gfp_t gfp)
18466{
18467 struct wireless_dev *wdev = dev->ieee80211_ptr;
18468 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
a948f713 18469 struct ethhdr *ehdr = eth_hdr(skb);
8d74a623 18470 const u8 *addr = ehdr->h_source;
a948f713 18471 u16 proto = be16_to_cpu(skb->protocol);
6a671a50
DK		 18472 struct sk_buff *msg;
18473 void *hdr;
a948f713
DK		 18474 struct nlattr *frame;
18475
6a671a50
DK		 18476 u32 nlportid = READ_ONCE(wdev->conn_owner_nlportid);
18477
18478 if (!nlportid)
18479 return -ENOENT;
18480
a948f713 18481 msg = nlmsg_new(100 + skb->len, gfp);
6a671a50
DK		 18482 if (!msg)
18483 return -ENOMEM;
18484
18485 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONTROL_PORT_FRAME);
18486 if (!hdr) {
18487 nlmsg_free(msg);
18488 return -ENOBUFS;
18489 }
18490
18491 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18492 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18493 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18494 NL80211_ATTR_PAD) ||
8d74a623 18495 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
6a671a50
DK		 18496 nla_put_u16(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE, proto) ||
18497 (unencrypted && nla_put_flag(msg,
18498 NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT)))
18499 goto nla_put_failure;
18500
a948f713
DK		 18501 frame = nla_reserve(msg, NL80211_ATTR_FRAME, skb->len);
18502 if (!frame)
18503 goto nla_put_failure;
18504
18505 skb_copy_bits(skb, 0, nla_data(frame), skb->len);
6a671a50
DK		 18506 genlmsg_end(msg, hdr);
18507
18508 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
18509
18510 nla_put_failure:
18511 nlmsg_free(msg);
18512 return -ENOBUFS;
18513}
18514
18515bool cfg80211_rx_control_port(struct net_device *dev,
a948f713 18516 struct sk_buff *skb, bool unencrypted)
6a671a50
DK		 18517{
18518 int ret;
18519
a948f713
DK		 18520 trace_cfg80211_rx_control_port(dev, skb, unencrypted);
18521 ret = __nl80211_rx_control_port(dev, skb, unencrypted, GFP_ATOMIC);
6a671a50
DK		 18522 trace_cfg80211_return_bool(ret == 0);
18523 return ret == 0;
18524}
18525EXPORT_SYMBOL(cfg80211_rx_control_port);
18526
5b97f49d
JB		 18527static struct sk_buff *cfg80211_prepare_cqm(struct net_device *dev,
18528 const char *mac, gfp_t gfp)
d6dc1a38 18529{
947add36 18530 struct wireless_dev *wdev = dev->ieee80211_ptr;
5b97f49d
JB		 18531 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
18532 struct sk_buff *msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18533 void **cb;
947add36 18534
d6dc1a38 18535 if (!msg)
5b97f49d 18536 return NULL;
d6dc1a38 18537
5b97f49d
JB		 18538 cb = (void **)msg->cb;
18539
18540 cb[0] = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
18541 if (!cb[0]) {
d6dc1a38 18542 nlmsg_free(msg);
5b97f49d 18543 return NULL;
d6dc1a38
JO		 18544 }
18545
9360ffd1 18546 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36 18547 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9360ffd1 18548 goto nla_put_failure;
d6dc1a38 18549
5b97f49d 18550 if (mac && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
d6dc1a38
JO		 18551 goto nla_put_failure;
18552
ae0be8de 18553 cb[1] = nla_nest_start_noflag(msg, NL80211_ATTR_CQM);
5b97f49d 18554 if (!cb[1])
9360ffd1 18555 goto nla_put_failure;
d6dc1a38 18556
5b97f49d 18557 cb[2] = rdev;
d6dc1a38 18558
5b97f49d
JB		 18559 return msg;
18560 nla_put_failure:
18561 nlmsg_free(msg);
18562 return NULL;
18563}
18564
18565static void cfg80211_send_cqm(struct sk_buff *msg, gfp_t gfp)
18566{
18567 void **cb = (void **)msg->cb;
18568 struct cfg80211_registered_device *rdev = cb[2];
18569
18570 nla_nest_end(msg, cb[1]);
18571 genlmsg_end(msg, cb[0]);
18572
18573 memset(msg->cb, 0, sizeof(msg->cb));
d6dc1a38 18574
68eb5503 18575 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18576 NL80211_MCGRP_MLME, gfp);
5b97f49d
JB		 18577}
18578
18579void cfg80211_cqm_rssi_notify(struct net_device *dev,
18580 enum nl80211_cqm_rssi_threshold_event rssi_event,
bee427b8 18581 s32 rssi_level, gfp_t gfp)
5b97f49d
JB		 18582{
18583 struct sk_buff *msg;
4a4b8169
AZ		 18584 struct wireless_dev *wdev = dev->ieee80211_ptr;
18585 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
5b97f49d 18586
bee427b8 18587 trace_cfg80211_cqm_rssi_notify(dev, rssi_event, rssi_level);
5b97f49d 18588
98f03342
JB		 18589 if (WARN_ON(rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW &&
18590 rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH))
18591 return;
18592
4a4b8169
AZ		 18593 if (wdev->cqm_config) {
18594 wdev->cqm_config->last_rssi_event_value = rssi_level;
18595
18596 cfg80211_cqm_rssi_update(rdev, dev);
18597
18598 if (rssi_level == 0)
18599 rssi_level = wdev->cqm_config->last_rssi_event_value;
18600 }
18601
5b97f49d
JB		 18602 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
18603 if (!msg)
18604 return;
18605
18606 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
18607 rssi_event))
18608 goto nla_put_failure;
18609
bee427b8
AZ		 18610 if (rssi_level && nla_put_s32(msg, NL80211_ATTR_CQM_RSSI_LEVEL,
18611 rssi_level))
18612 goto nla_put_failure;
18613
5b97f49d
JB		 18614 cfg80211_send_cqm(msg, gfp);
18615
d6dc1a38
JO		 18616 return;
18617
18618 nla_put_failure:
d6dc1a38
JO		 18619 nlmsg_free(msg);
18620}
947add36 18621EXPORT_SYMBOL(cfg80211_cqm_rssi_notify);
d6dc1a38 18622
5b97f49d
JB		 18623void cfg80211_cqm_txe_notify(struct net_device *dev,
18624 const u8 *peer, u32 num_packets,
18625 u32 rate, u32 intvl, gfp_t gfp)
18626{
18627 struct sk_buff *msg;
18628
18629 msg = cfg80211_prepare_cqm(dev, peer, gfp);
18630 if (!msg)
18631 return;
18632
18633 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
18634 goto nla_put_failure;
18635
18636 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
18637 goto nla_put_failure;
18638
18639 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
18640 goto nla_put_failure;
18641
18642 cfg80211_send_cqm(msg, gfp);
18643 return;
18644
18645 nla_put_failure:
18646 nlmsg_free(msg);
18647}
18648EXPORT_SYMBOL(cfg80211_cqm_txe_notify);
18649
18650void cfg80211_cqm_pktloss_notify(struct net_device *dev,
18651 const u8 *peer, u32 num_packets, gfp_t gfp)
18652{
18653 struct sk_buff *msg;
18654
18655 trace_cfg80211_cqm_pktloss_notify(dev, peer, num_packets);
18656
18657 msg = cfg80211_prepare_cqm(dev, peer, gfp);
18658 if (!msg)
18659 return;
18660
18661 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
18662 goto nla_put_failure;
18663
18664 cfg80211_send_cqm(msg, gfp);
18665 return;
18666
18667 nla_put_failure:
18668 nlmsg_free(msg);
18669}
18670EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify);
18671
98f03342
JB		 18672void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp)
18673{
18674 struct sk_buff *msg;
18675
18676 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
18677 if (!msg)
18678 return;
18679
18680 if (nla_put_flag(msg, NL80211_ATTR_CQM_BEACON_LOSS_EVENT))
18681 goto nla_put_failure;
18682
18683 cfg80211_send_cqm(msg, gfp);
18684 return;
18685
18686 nla_put_failure:
18687 nlmsg_free(msg);
18688}
18689EXPORT_SYMBOL(cfg80211_cqm_beacon_loss_notify);
18690
947add36
JB		 18691static void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
18692 struct net_device *netdev, const u8 *bssid,
18693 const u8 *replay_ctr, gfp_t gfp)
e5497d76
JB		 18694{
18695 struct sk_buff *msg;
18696 struct nlattr *rekey_attr;
18697 void *hdr;
18698
58050fce 18699 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 18700 if (!msg)
18701 return;
18702
18703 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
18704 if (!hdr) {
18705 nlmsg_free(msg);
18706 return;
18707 }
18708
9360ffd1
DM		 18709 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18710 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
18711 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
18712 goto nla_put_failure;
e5497d76 18713
ae0be8de 18714 rekey_attr = nla_nest_start_noflag(msg, NL80211_ATTR_REKEY_DATA);
e5497d76
JB		 18715 if (!rekey_attr)
18716 goto nla_put_failure;
18717
9360ffd1
DM		 18718 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
18719 NL80211_REPLAY_CTR_LEN, replay_ctr))
18720 goto nla_put_failure;
e5497d76
JB		 18721
18722 nla_nest_end(msg, rekey_attr);
18723
3b7b72ee 18724 genlmsg_end(msg, hdr);
e5497d76 18725
68eb5503 18726 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18727 NL80211_MCGRP_MLME, gfp);
e5497d76
JB		 18728 return;
18729
18730 nla_put_failure:
e5497d76
JB		 18731 nlmsg_free(msg);
18732}
18733
947add36
JB		 18734void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
18735 const u8 *replay_ctr, gfp_t gfp)
18736{
18737 struct wireless_dev *wdev = dev->ieee80211_ptr;
18738 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18739 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18740
18741 trace_cfg80211_gtk_rekey_notify(dev, bssid);
18742 nl80211_gtk_rekey_notify(rdev, dev, bssid, replay_ctr, gfp);
18743}
18744EXPORT_SYMBOL(cfg80211_gtk_rekey_notify);
18745
18746static void
18747nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
18748 struct net_device *netdev, int index,
18749 const u8 *bssid, bool preauth, gfp_t gfp)
c9df56b4
JM		 18750{
18751 struct sk_buff *msg;
18752 struct nlattr *attr;
18753 void *hdr;
18754
58050fce 18755 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 18756 if (!msg)
18757 return;
18758
18759 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
18760 if (!hdr) {
18761 nlmsg_free(msg);
18762 return;
18763 }
18764
9360ffd1
DM		 18765 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18766 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
18767 goto nla_put_failure;
c9df56b4 18768
ae0be8de 18769 attr = nla_nest_start_noflag(msg, NL80211_ATTR_PMKSA_CANDIDATE);
c9df56b4
JM		 18770 if (!attr)
18771 goto nla_put_failure;
18772
9360ffd1
DM		 18773 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
18774 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
18775 (preauth &&
18776 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
18777 goto nla_put_failure;
c9df56b4
JM		 18778
18779 nla_nest_end(msg, attr);
18780
3b7b72ee 18781 genlmsg_end(msg, hdr);
c9df56b4 18782
68eb5503 18783 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18784 NL80211_MCGRP_MLME, gfp);
c9df56b4
JM		 18785 return;
18786
18787 nla_put_failure:
c9df56b4
JM		 18788 nlmsg_free(msg);
18789}
18790
947add36
JB		 18791void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
18792 const u8 *bssid, bool preauth, gfp_t gfp)
18793{
18794 struct wireless_dev *wdev = dev->ieee80211_ptr;
18795 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18796 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18797
18798 trace_cfg80211_pmksa_candidate_notify(dev, index, bssid, preauth);
18799 nl80211_pmksa_candidate_notify(rdev, dev, index, bssid, preauth, gfp);
18800}
18801EXPORT_SYMBOL(cfg80211_pmksa_candidate_notify);
18802
18803static void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
18804 struct net_device *netdev,
18805 struct cfg80211_chan_def *chandef,
f8d7552e
LC		 18806 gfp_t gfp,
18807 enum nl80211_commands notif,
669b8413 18808 u8 count, bool quiet)
5314526b
TP		 18809{
18810 struct sk_buff *msg;
18811 void *hdr;
18812
58050fce 18813 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 18814 if (!msg)
18815 return;
18816
f8d7552e 18817 hdr = nl80211hdr_put(msg, 0, 0, 0, notif);
5314526b
TP		 18818 if (!hdr) {
18819 nlmsg_free(msg);
18820 return;
18821 }
18822
683b6d3b
JB		 18823 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
18824 goto nla_put_failure;
18825
18826 if (nl80211_send_chandef(msg, chandef))
7eab0f64 18827 goto nla_put_failure;
5314526b 18828
669b8413
JB		 18829 if (notif == NL80211_CMD_CH_SWITCH_STARTED_NOTIFY) {
18830 if (nla_put_u32(msg, NL80211_ATTR_CH_SWITCH_COUNT, count))
f8d7552e 18831 goto nla_put_failure;
669b8413
JB		 18832 if (quiet &&
18833 nla_put_flag(msg, NL80211_ATTR_CH_SWITCH_BLOCK_TX))
f8d7552e 18834 goto nla_put_failure;
669b8413 18835 }
f8d7552e 18836
5314526b
TP		 18837 genlmsg_end(msg, hdr);
18838
68eb5503 18839 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18840 NL80211_MCGRP_MLME, gfp);
5314526b
TP		 18841 return;
18842
18843 nla_put_failure:
5314526b
TP		 18844 nlmsg_free(msg);
18845}
18846
947add36 18847void cfg80211_ch_switch_notify(struct net_device *dev,
7b0a0e3c
JB		 18848 struct cfg80211_chan_def *chandef,
18849 unsigned int link_id)
84f10708 18850{
947add36
JB		 18851 struct wireless_dev *wdev = dev->ieee80211_ptr;
18852 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18853 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36 18854
e487eaeb 18855 ASSERT_WDEV_LOCK(wdev);
7b0a0e3c 18856 WARN_INVALID_LINK_ID(wdev, link_id);
947add36 18857
7b0a0e3c 18858 trace_cfg80211_ch_switch_notify(dev, chandef, link_id);
5dc8cdce 18859
7b0a0e3c
JB		 18860 switch (wdev->iftype) {
18861 case NL80211_IFTYPE_STATION:
18862 case NL80211_IFTYPE_P2P_CLIENT:
18863 if (!WARN_ON(!wdev->links[link_id].client.current_bss))
18864 cfg80211_update_assoc_bss_entry(wdev, link_id,
18865 chandef->chan);
18866 break;
18867 case NL80211_IFTYPE_MESH_POINT:
18868 wdev->u.mesh.chandef = *chandef;
18869 wdev->u.mesh.preset_chandef = *chandef;
18870 break;
18871 case NL80211_IFTYPE_AP:
18872 case NL80211_IFTYPE_P2P_GO:
18873 wdev->links[link_id].ap.chandef = *chandef;
18874 break;
77e7b6ba
JB		 18875 case NL80211_IFTYPE_ADHOC:
18876 wdev->u.ibss.chandef = *chandef;
18877 break;
7b0a0e3c
JB		 18878 default:
18879 WARN_ON(1);
18880 break;
18881 }
5dc8cdce 18882
d34990bb
MV		 18883 cfg80211_sched_dfs_chan_update(rdev);
18884
f8d7552e 18885 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
669b8413 18886 NL80211_CMD_CH_SWITCH_NOTIFY, 0, false);
947add36
JB		 18887}
18888EXPORT_SYMBOL(cfg80211_ch_switch_notify);
18889
f8d7552e
LC		 18890void cfg80211_ch_switch_started_notify(struct net_device *dev,
18891 struct cfg80211_chan_def *chandef,
669b8413 18892 u8 count, bool quiet)
f8d7552e
LC		 18893{
18894 struct wireless_dev *wdev = dev->ieee80211_ptr;
18895 struct wiphy *wiphy = wdev->wiphy;
18896 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18897
18898 trace_cfg80211_ch_switch_started_notify(dev, chandef);
18899
18900 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
669b8413
JB		 18901 NL80211_CMD_CH_SWITCH_STARTED_NOTIFY,
18902 count, quiet);
f8d7552e
LC		 18903}
18904EXPORT_SYMBOL(cfg80211_ch_switch_started_notify);
18905
0d2ab3ae
JC		 18906int cfg80211_bss_color_notify(struct net_device *dev, gfp_t gfp,
18907 enum nl80211_commands cmd, u8 count,
18908 u64 color_bitmap)
18909{
18910 struct wireless_dev *wdev = dev->ieee80211_ptr;
18911 struct wiphy *wiphy = wdev->wiphy;
18912 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18913 struct sk_buff *msg;
18914 void *hdr;
18915
18916 ASSERT_WDEV_LOCK(wdev);
18917
18918 trace_cfg80211_bss_color_notify(dev, cmd, count, color_bitmap);
18919
18920 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18921 if (!msg)
18922 return -ENOMEM;
18923
18924 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
18925 if (!hdr)
18926 goto nla_put_failure;
18927
18928 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
18929 goto nla_put_failure;
18930
18931 if (cmd == NL80211_CMD_COLOR_CHANGE_STARTED &&
18932 nla_put_u32(msg, NL80211_ATTR_COLOR_CHANGE_COUNT, count))
18933 goto nla_put_failure;
18934
18935 if (cmd == NL80211_CMD_OBSS_COLOR_COLLISION &&
18936 nla_put_u64_64bit(msg, NL80211_ATTR_OBSS_COLOR_BITMAP,
18937 color_bitmap, NL80211_ATTR_PAD))
18938 goto nla_put_failure;
18939
18940 genlmsg_end(msg, hdr);
18941
18942 return genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
18943 msg, 0, NL80211_MCGRP_MLME, gfp);
18944
18945nla_put_failure:
18946 nlmsg_free(msg);
18947 return -EINVAL;
18948}
18949EXPORT_SYMBOL(cfg80211_bss_color_notify);
18950
04f39047
SW		 18951void
18952nl80211_radar_notify(struct cfg80211_registered_device *rdev,
d2859df5 18953 const struct cfg80211_chan_def *chandef,
04f39047
SW		 18954 enum nl80211_radar_event event,
18955 struct net_device *netdev, gfp_t gfp)
18956{
18957 struct sk_buff *msg;
18958 void *hdr;
18959
18960 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18961 if (!msg)
18962 return;
18963
18964 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
18965 if (!hdr) {
18966 nlmsg_free(msg);
18967 return;
18968 }
18969
18970 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
18971 goto nla_put_failure;
18972
18973 /* NOP and radar events don't need a netdev parameter */
18974 if (netdev) {
18975 struct wireless_dev *wdev = netdev->ieee80211_ptr;
18976
18977 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
2dad624e
ND		 18978 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18979 NL80211_ATTR_PAD))
04f39047
SW		 18980 goto nla_put_failure;
18981 }
18982
18983 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
18984 goto nla_put_failure;
18985
18986 if (nl80211_send_chandef(msg, chandef))
18987 goto nla_put_failure;
18988
9c90a9f6 18989 genlmsg_end(msg, hdr);
04f39047 18990
68eb5503 18991 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18992 NL80211_MCGRP_MLME, gfp);
04f39047
SW		 18993 return;
18994
18995 nla_put_failure:
04f39047
SW		 18996 nlmsg_free(msg);
18997}
18998
466b9936 18999void cfg80211_sta_opmode_change_notify(struct net_device *dev, const u8 *mac,
19000 struct sta_opmode_info *sta_opmode,
19001 gfp_t gfp)
19002{
19003 struct sk_buff *msg;
19004 struct wireless_dev *wdev = dev->ieee80211_ptr;
19005 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
19006 void *hdr;
19007
19008 if (WARN_ON(!mac))
19009 return;
19010
19011 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19012 if (!msg)
19013 return;
19014
19015 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STA_OPMODE_CHANGED);
19016 if (!hdr) {
19017 nlmsg_free(msg);
19018 return;
19019 }
19020
19021 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
19022 goto nla_put_failure;
19023
19024 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
19025 goto nla_put_failure;
19026
19027 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
19028 goto nla_put_failure;
19029
19030 if ((sta_opmode->changed & STA_OPMODE_SMPS_MODE_CHANGED) &&
19031 nla_put_u8(msg, NL80211_ATTR_SMPS_MODE, sta_opmode->smps_mode))
19032 goto nla_put_failure;
19033
19034 if ((sta_opmode->changed & STA_OPMODE_MAX_BW_CHANGED) &&
0016d320 19035 nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, sta_opmode->bw))
466b9936 19036 goto nla_put_failure;
19037
19038 if ((sta_opmode->changed & STA_OPMODE_N_SS_CHANGED) &&
19039 nla_put_u8(msg, NL80211_ATTR_NSS, sta_opmode->rx_nss))
19040 goto nla_put_failure;
19041
19042 genlmsg_end(msg, hdr);
19043
19044 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
19045 NL80211_MCGRP_MLME, gfp);
19046
19047 return;
19048
19049nla_put_failure:
19050 nlmsg_free(msg);
19051}
19052EXPORT_SYMBOL(cfg80211_sta_opmode_change_notify);
19053
7f6cf311 19054void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
c4b50cd3
VN		 19055 u64 cookie, bool acked, s32 ack_signal,
19056 bool is_valid_ack_signal, gfp_t gfp)
7f6cf311
JB		 19057{
19058 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 19059 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
7f6cf311
JB		 19060 struct sk_buff *msg;
19061 void *hdr;
7f6cf311 19062
4ee3e063
BL		 19063 trace_cfg80211_probe_status(dev, addr, cookie, acked);
19064
58050fce 19065 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 19066
7f6cf311
JB		 19067 if (!msg)
19068 return;
19069
19070 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
19071 if (!hdr) {
19072 nlmsg_free(msg);
19073 return;
19074 }
19075
9360ffd1
DM		 19076 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19077 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19078 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
2dad624e
ND		 19079 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
19080 NL80211_ATTR_PAD) ||
c4b50cd3
VN		 19081 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
19082 (is_valid_ack_signal && nla_put_s32(msg, NL80211_ATTR_ACK_SIGNAL,
19083 ack_signal)))
9360ffd1 19084 goto nla_put_failure;
7f6cf311 19085
9c90a9f6 19086 genlmsg_end(msg, hdr);
7f6cf311 19087
68eb5503 19088 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19089 NL80211_MCGRP_MLME, gfp);
7f6cf311
JB		 19090 return;
19091
19092 nla_put_failure:
7f6cf311
JB		 19093 nlmsg_free(msg);
19094}
19095EXPORT_SYMBOL(cfg80211_probe_status);
19096
e76fede8
TP		 19097void cfg80211_report_obss_beacon_khz(struct wiphy *wiphy, const u8 *frame,
19098 size_t len, int freq, int sig_dbm)
5e760230 19099{
f26cbf40 19100 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
5e760230
JB		 19101 struct sk_buff *msg;
19102 void *hdr;
37c73b5f 19103 struct cfg80211_beacon_registration *reg;
5e760230 19104
4ee3e063
BL		 19105 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
19106
37c73b5f
BG		 19107 spin_lock_bh(&rdev->beacon_registrations_lock);
19108 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
19109 msg = nlmsg_new(len + 100, GFP_ATOMIC);
19110 if (!msg) {
19111 spin_unlock_bh(&rdev->beacon_registrations_lock);
19112 return;
19113 }
5e760230 19114
37c73b5f
BG		 19115 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
19116 if (!hdr)
19117 goto nla_put_failure;
5e760230 19118
37c73b5f
BG		 19119 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19120 (freq &&
942ba88b
TP		 19121 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
19122 KHZ_TO_MHZ(freq)) ||
19123 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
19124 freq % 1000))) ||
37c73b5f
BG		 19125 (sig_dbm &&
19126 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
19127 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
19128 goto nla_put_failure;
5e760230 19129
37c73b5f 19130 genlmsg_end(msg, hdr);
5e760230 19131
37c73b5f
BG		 19132 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
19133 }
19134 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 19135 return;
19136
19137 nla_put_failure:
37c73b5f 19138 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 19139 nlmsg_free(msg);
19140}
e76fede8 19141EXPORT_SYMBOL(cfg80211_report_obss_beacon_khz);
5e760230 19142
cd8f7cb4 19143#ifdef CONFIG_PM
8cd4d456
LC		 19144static int cfg80211_net_detect_results(struct sk_buff *msg,
19145 struct cfg80211_wowlan_wakeup *wakeup)
19146{
19147 struct cfg80211_wowlan_nd_info *nd = wakeup->net_detect;
19148 struct nlattr *nl_results, *nl_match, *nl_freqs;
19149 int i, j;
19150
ae0be8de
MK		 19151 nl_results = nla_nest_start_noflag(msg,
19152 NL80211_WOWLAN_TRIG_NET_DETECT_RESULTS);
8cd4d456
LC		 19153 if (!nl_results)
19154 return -EMSGSIZE;
19155
19156 for (i = 0; i < nd->n_matches; i++) {
19157 struct cfg80211_wowlan_nd_match *match = nd->matches[i];
19158
ae0be8de 19159 nl_match = nla_nest_start_noflag(msg, i);
8cd4d456
LC		 19160 if (!nl_match)
19161 break;
19162
19163 /* The SSID attribute is optional in nl80211, but for
19164 * simplicity reasons it's always present in the
19165 * cfg80211 structure. If a driver can't pass the
19166 * SSID, that needs to be changed. A zero length SSID
19167 * is still a valid SSID (wildcard), so it cannot be
19168 * used for this purpose.
19169 */
19170 if (nla_put(msg, NL80211_ATTR_SSID, match->ssid.ssid_len,
19171 match->ssid.ssid)) {
19172 nla_nest_cancel(msg, nl_match);
19173 goto out;
19174 }
19175
19176 if (match->n_channels) {
ae0be8de
MK		 19177 nl_freqs = nla_nest_start_noflag(msg,
19178 NL80211_ATTR_SCAN_FREQUENCIES);
8cd4d456
LC		 19179 if (!nl_freqs) {
19180 nla_nest_cancel(msg, nl_match);
19181 goto out;
19182 }
19183
19184 for (j = 0; j < match->n_channels; j++) {
5528fae8 19185 if (nla_put_u32(msg, j, match->channels[j])) {
8cd4d456
LC		 19186 nla_nest_cancel(msg, nl_freqs);
19187 nla_nest_cancel(msg, nl_match);
19188 goto out;
19189 }
19190 }
19191
19192 nla_nest_end(msg, nl_freqs);
19193 }
19194
19195 nla_nest_end(msg, nl_match);
19196 }
19197
19198out:
19199 nla_nest_end(msg, nl_results);
19200 return 0;
19201}
19202
cd8f7cb4
JB		 19203void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
19204 struct cfg80211_wowlan_wakeup *wakeup,
19205 gfp_t gfp)
19206{
f26cbf40 19207 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
cd8f7cb4
JB		 19208 struct sk_buff *msg;
19209 void *hdr;
9c90a9f6 19210 int size = 200;
cd8f7cb4
JB		 19211
19212 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
19213
19214 if (wakeup)
19215 size += wakeup->packet_present_len;
19216
19217 msg = nlmsg_new(size, gfp);
19218 if (!msg)
19219 return;
19220
19221 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
19222 if (!hdr)
19223 goto free_msg;
19224
19225 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 19226 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19227 NL80211_ATTR_PAD))
cd8f7cb4
JB		 19228 goto free_msg;
19229
19230 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
19231 wdev->netdev->ifindex))
19232 goto free_msg;
19233
19234 if (wakeup) {
19235 struct nlattr *reasons;
19236
ae0be8de
MK		 19237 reasons = nla_nest_start_noflag(msg,
19238 NL80211_ATTR_WOWLAN_TRIGGERS);
7fa322c8
JB		 19239 if (!reasons)
19240 goto free_msg;
cd8f7cb4
JB		 19241
19242 if (wakeup->disconnect &&
19243 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
19244 goto free_msg;
19245 if (wakeup->magic_pkt &&
19246 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
19247 goto free_msg;
19248 if (wakeup->gtk_rekey_failure &&
19249 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
19250 goto free_msg;
19251 if (wakeup->eap_identity_req &&
19252 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
19253 goto free_msg;
19254 if (wakeup->four_way_handshake &&
19255 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
19256 goto free_msg;
19257 if (wakeup->rfkill_release &&
19258 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
19259 goto free_msg;
19260
19261 if (wakeup->pattern_idx >= 0 &&
19262 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
19263 wakeup->pattern_idx))
19264 goto free_msg;
19265
ae917c9f
JB		 19266 if (wakeup->tcp_match &&
19267 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH))
19268 goto free_msg;
2a0e047e 19269
ae917c9f
JB		 19270 if (wakeup->tcp_connlost &&
19271 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST))
19272 goto free_msg;
2a0e047e 19273
ae917c9f
JB		 19274 if (wakeup->tcp_nomoretokens &&
19275 nla_put_flag(msg,
19276 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS))
19277 goto free_msg;
2a0e047e 19278
cd8f7cb4
JB		 19279 if (wakeup->packet) {
19280 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
19281 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
19282
19283 if (!wakeup->packet_80211) {
19284 pkt_attr =
19285 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
19286 len_attr =
19287 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
19288 }
19289
19290 if (wakeup->packet_len &&
19291 nla_put_u32(msg, len_attr, wakeup->packet_len))
19292 goto free_msg;
19293
19294 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
19295 wakeup->packet))
19296 goto free_msg;
19297 }
19298
8cd4d456
LC		 19299 if (wakeup->net_detect &&
19300 cfg80211_net_detect_results(msg, wakeup))
19301 goto free_msg;
19302
cd8f7cb4
JB		 19303 nla_nest_end(msg, reasons);
19304 }
19305
9c90a9f6 19306 genlmsg_end(msg, hdr);
cd8f7cb4 19307
68eb5503 19308 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19309 NL80211_MCGRP_MLME, gfp);
cd8f7cb4
JB		 19310 return;
19311
19312 free_msg:
19313 nlmsg_free(msg);
19314}
19315EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
19316#endif
19317
3475b094
JM		 19318void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
19319 enum nl80211_tdls_operation oper,
19320 u16 reason_code, gfp_t gfp)
19321{
19322 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 19323 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
3475b094
JM		 19324 struct sk_buff *msg;
19325 void *hdr;
3475b094
JM		 19326
19327 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
19328 reason_code);
19329
19330 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19331 if (!msg)
19332 return;
19333
19334 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
19335 if (!hdr) {
19336 nlmsg_free(msg);
19337 return;
19338 }
19339
19340 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19341 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19342 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
19343 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
19344 (reason_code > 0 &&
19345 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
19346 goto nla_put_failure;
19347
9c90a9f6 19348 genlmsg_end(msg, hdr);
3475b094 19349
68eb5503 19350 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19351 NL80211_MCGRP_MLME, gfp);
3475b094
JM		 19352 return;
19353
19354 nla_put_failure:
3475b094
JM		 19355 nlmsg_free(msg);
19356}
19357EXPORT_SYMBOL(cfg80211_tdls_oper_request);
19358
026331c4
JM		 19359static int nl80211_netlink_notify(struct notifier_block * nb,
19360 unsigned long state,
19361 void *_notify)
19362{
19363 struct netlink_notify *notify = _notify;
19364 struct cfg80211_registered_device *rdev;
19365 struct wireless_dev *wdev;
37c73b5f 19366 struct cfg80211_beacon_registration *reg, *tmp;
026331c4 19367
8f815cdd 19368 if (state != NETLINK_URELEASE || notify->protocol != NETLINK_GENERIC)
026331c4
JM		 19369 return NOTIFY_DONE;
19370
19371 rcu_read_lock();
19372
5e760230 19373 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ca986ad9 19374 struct cfg80211_sched_scan_request *sched_scan_req;
753aacfd 19375
ca986ad9
AVS		 19376 list_for_each_entry_rcu(sched_scan_req,
19377 &rdev->sched_scan_req_list,
19378 list) {
19379 if (sched_scan_req->owner_nlportid == notify->portid) {
19380 sched_scan_req->nl_owner_dead = true;
753aacfd 19381 schedule_work(&rdev->sched_scan_stop_wk);
ca986ad9 19382 }
753aacfd 19383 }
78f22b6a 19384
53873f13 19385 list_for_each_entry_rcu(wdev, &rdev->wiphy.wdev_list, list) {
15e47304 19386 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f 19387
ab81007a
JB		 19388 if (wdev->owner_nlportid == notify->portid) {
19389 wdev->nl_owner_dead = true;
19390 schedule_work(&rdev->destroy_work);
19391 } else if (wdev->conn_owner_nlportid == notify->portid) {
bd2522b1 19392 schedule_work(&wdev->disconnect_wk);
ab81007a 19393 }
9bb7e0f2
JB		 19394
19395 cfg80211_release_pmsr(wdev, notify->portid);
78f22b6a
JB		 19396 }
19397
37c73b5f
BG		 19398 spin_lock_bh(&rdev->beacon_registrations_lock);
19399 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
19400 list) {
19401 if (reg->nlportid == notify->portid) {
19402 list_del(&reg->list);
19403 kfree(reg);
19404 break;
19405 }
19406 }
19407 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 19408 }
026331c4
JM		 19409
19410 rcu_read_unlock();
19411
05050753
I		 19412 /*
19413 * It is possible that the user space process that is controlling the
19414 * indoor setting disappeared, so notify the regulatory core.
19415 */
19416 regulatory_netlink_notify(notify->portid);
6784c7db 19417 return NOTIFY_OK;
026331c4
JM		 19418}
19419
19420static struct notifier_block nl80211_netlink_notifier = {
19421 .notifier_call = nl80211_netlink_notify,
19422};
19423
355199e0
JM		 19424void cfg80211_ft_event(struct net_device *netdev,
19425 struct cfg80211_ft_event_params *ft_event)
19426{
19427 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
f26cbf40 19428 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
355199e0
JM		 19429 struct sk_buff *msg;
19430 void *hdr;
355199e0
JM		 19431
19432 trace_cfg80211_ft_event(wiphy, netdev, ft_event);
19433
19434 if (!ft_event->target_ap)
19435 return;
19436
1039d081
DL		 19437 msg = nlmsg_new(100 + ft_event->ies_len + ft_event->ric_ies_len,
19438 GFP_KERNEL);
355199e0
JM		 19439 if (!msg)
19440 return;
19441
19442 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FT_EVENT);
ae917c9f
JB		 19443 if (!hdr)
19444 goto out;
355199e0 19445
ae917c9f
JB		 19446 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19447 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
19448 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ft_event->target_ap))
19449 goto out;
355199e0 19450
ae917c9f
JB		 19451 if (ft_event->ies &&
19452 nla_put(msg, NL80211_ATTR_IE, ft_event->ies_len, ft_event->ies))
19453 goto out;
19454 if (ft_event->ric_ies &&
19455 nla_put(msg, NL80211_ATTR_IE_RIC, ft_event->ric_ies_len,
19456 ft_event->ric_ies))
19457 goto out;
355199e0 19458
9c90a9f6 19459 genlmsg_end(msg, hdr);
355199e0 19460
68eb5503 19461 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19462 NL80211_MCGRP_MLME, GFP_KERNEL);
ae917c9f
JB		 19463 return;
19464 out:
19465 nlmsg_free(msg);
355199e0
JM		 19466}
19467EXPORT_SYMBOL(cfg80211_ft_event);
19468
5de17984
AS		 19469void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp)
19470{
19471 struct cfg80211_registered_device *rdev;
19472 struct sk_buff *msg;
19473 void *hdr;
19474 u32 nlportid;
19475
f26cbf40 19476 rdev = wiphy_to_rdev(wdev->wiphy);
5de17984
AS		 19477 if (!rdev->crit_proto_nlportid)
19478 return;
19479
19480 nlportid = rdev->crit_proto_nlportid;
19481 rdev->crit_proto_nlportid = 0;
19482
19483 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19484 if (!msg)
19485 return;
19486
19487 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CRIT_PROTOCOL_STOP);
19488 if (!hdr)
19489 goto nla_put_failure;
19490
19491 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 19492 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19493 NL80211_ATTR_PAD))
5de17984
AS		 19494 goto nla_put_failure;
19495
19496 genlmsg_end(msg, hdr);
19497
19498 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
19499 return;
19500
19501 nla_put_failure:
5de17984 19502 nlmsg_free(msg);
5de17984
AS		 19503}
19504EXPORT_SYMBOL(cfg80211_crit_proto_stopped);
19505
348baf0e
JB		 19506void nl80211_send_ap_stopped(struct wireless_dev *wdev)
19507{
19508 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 19509 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
348baf0e
JB		 19510 struct sk_buff *msg;
19511 void *hdr;
19512
19513 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
19514 if (!msg)
19515 return;
19516
19517 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STOP_AP);
19518 if (!hdr)
19519 goto out;
19520
19521 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19522 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex) ||
2dad624e
ND		 19523 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19524 NL80211_ATTR_PAD))
348baf0e
JB		 19525 goto out;
19526
19527 genlmsg_end(msg, hdr);
19528
19529 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(wiphy), msg, 0,
19530 NL80211_MCGRP_MLME, GFP_KERNEL);
19531 return;
19532 out:
19533 nlmsg_free(msg);
19534}
19535
40cbfa90
SD		 19536int cfg80211_external_auth_request(struct net_device *dev,
19537 struct cfg80211_external_auth_params *params,
19538 gfp_t gfp)
19539{
19540 struct wireless_dev *wdev = dev->ieee80211_ptr;
19541 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
19542 struct sk_buff *msg;
19543 void *hdr;
19544
19545 if (!wdev->conn_owner_nlportid)
19546 return -EINVAL;
19547
19548 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19549 if (!msg)
19550 return -ENOMEM;
19551
19552 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_EXTERNAL_AUTH);
19553 if (!hdr)
19554 goto nla_put_failure;
19555
19556 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19557 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19558 nla_put_u32(msg, NL80211_ATTR_AKM_SUITES, params->key_mgmt_suite) ||
19559 nla_put_u32(msg, NL80211_ATTR_EXTERNAL_AUTH_ACTION,
19560 params->action) ||
19561 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, params->bssid) ||
19562 nla_put(msg, NL80211_ATTR_SSID, params->ssid.ssid_len,
19563 params->ssid.ssid))
19564 goto nla_put_failure;
19565
19566 genlmsg_end(msg, hdr);
19567 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
19568 wdev->conn_owner_nlportid);
19569 return 0;
19570
19571 nla_put_failure:
19572 nlmsg_free(msg);
19573 return -ENOBUFS;
19574}
19575EXPORT_SYMBOL(cfg80211_external_auth_request);
19576
cb74e977
SD		 19577void cfg80211_update_owe_info_event(struct net_device *netdev,
19578 struct cfg80211_update_owe_info *owe_info,
19579 gfp_t gfp)
19580{
19581 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
19582 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
19583 struct sk_buff *msg;
19584 void *hdr;
19585
19586 trace_cfg80211_update_owe_info_event(wiphy, netdev, owe_info);
19587
19588 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19589 if (!msg)
19590 return;
19591
19592 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_UPDATE_OWE_INFO);
19593 if (!hdr)
19594 goto nla_put_failure;
19595
19596 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19597 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
19598 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, owe_info->peer))
19599 goto nla_put_failure;
19600
19601 if (!owe_info->ie_len ||
19602 nla_put(msg, NL80211_ATTR_IE, owe_info->ie_len, owe_info->ie))
19603 goto nla_put_failure;
19604
19605 genlmsg_end(msg, hdr);
19606
19607 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
19608 NL80211_MCGRP_MLME, gfp);
19609 return;
19610
19611nla_put_failure:
19612 genlmsg_cancel(msg, hdr);
19613 nlmsg_free(msg);
19614}
19615EXPORT_SYMBOL(cfg80211_update_owe_info_event);
19616
55682965
JB		 19617/* initialisation/exit functions */
19618
56989f6d 19619int __init nl80211_init(void)
55682965 19620{
0d63cbb5 19621 int err;
55682965 19622
489111e5 19623 err = genl_register_family(&nl80211_fam);
55682965
JB		 19624 if (err)
19625 return err;
19626
026331c4
JM		 19627 err = netlink_register_notifier(&nl80211_netlink_notifier);
19628 if (err)
19629 goto err_out;
19630
55682965
JB		 19631 return 0;
19632 err_out:
19633 genl_unregister_family(&nl80211_fam);
19634 return err;
19635}
19636
19637void nl80211_exit(void)
19638{
026331c4 19639 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 19640 genl_unregister_family(&nl80211_fam);
19641}
Linux 6.x block layer and io_uring tree(s)