projects / linux-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
wifi: mac80211: add hardware timestamps for RX and TX
[linux-block.git] / net / wireless / nl80211.c
CommitLineData
457c8996 1// SPDX-License-Identifier: GPL-2.0-only
55682965
JB		 2/*
3 * This is the new netlink-based wireless configuration interface.
4 *
026331c4 5 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
2740f0cf 6 * Copyright 2013-2014 Intel Mobile Communications GmbH
66cd794e 7 * Copyright 2015-2017 Intel Deutschland GmbH
ea05fd35 8 * Copyright (C) 2018-2022 Intel Corporation
55682965
JB		 9 */
10
11#include <linux/if.h>
12#include <linux/module.h>
13#include <linux/err.h>
5a0e3ad6 14#include <linux/slab.h>
55682965
JB		 15#include <linux/list.h>
16#include <linux/if_ether.h>
17#include <linux/ieee80211.h>
18#include <linux/nl80211.h>
19#include <linux/rtnetlink.h>
20#include <linux/netlink.h>
259d8c1e 21#include <linux/nospec.h>
2a519311 22#include <linux/etherdevice.h>
e3ae39ed 23#include <linux/if_vlan.h>
463d0183 24#include <net/net_namespace.h>
55682965
JB		 25#include <net/genetlink.h>
26#include <net/cfg80211.h>
463d0183 27#include <net/sock.h>
2a0e047e 28#include <net/inet_connection_sock.h>
55682965
JB		 29#include "core.h"
30#include "nl80211.h"
b2e1b302 31#include "reg.h"
e35e4d28 32#include "rdev-ops.h"
55682965 33
5fb628e9
JM		 34static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
35 struct genl_info *info,
36 struct cfg80211_crypto_settings *settings,
37 int cipher_limit);
38
55682965 39/* the netlink family */
489111e5 40static struct genl_family nl80211_fam;
55682965 41
2a94fe48
JB		 42/* multicast groups */
43enum nl80211_multicast_groups {
44 NL80211_MCGRP_CONFIG,
45 NL80211_MCGRP_SCAN,
46 NL80211_MCGRP_REGULATORY,
47 NL80211_MCGRP_MLME,
567ffc35 48 NL80211_MCGRP_VENDOR,
50bcd31d 49 NL80211_MCGRP_NAN,
2a94fe48
JB		 50 NL80211_MCGRP_TESTMODE /* keep last - ifdef! */
51};
52
53static const struct genl_multicast_group nl80211_mcgrps[] = {
71b836ec
JB		 54 [NL80211_MCGRP_CONFIG] = { .name = NL80211_MULTICAST_GROUP_CONFIG },
55 [NL80211_MCGRP_SCAN] = { .name = NL80211_MULTICAST_GROUP_SCAN },
56 [NL80211_MCGRP_REGULATORY] = { .name = NL80211_MULTICAST_GROUP_REG },
57 [NL80211_MCGRP_MLME] = { .name = NL80211_MULTICAST_GROUP_MLME },
58 [NL80211_MCGRP_VENDOR] = { .name = NL80211_MULTICAST_GROUP_VENDOR },
50bcd31d 59 [NL80211_MCGRP_NAN] = { .name = NL80211_MULTICAST_GROUP_NAN },
2a94fe48 60#ifdef CONFIG_NL80211_TESTMODE
71b836ec 61 [NL80211_MCGRP_TESTMODE] = { .name = NL80211_MULTICAST_GROUP_TESTMODE }
2a94fe48
JB		 62#endif
63};
64
89a54e48
JB		 65/* returns ERR_PTR values */
66static struct wireless_dev *
a05829a7
JB		 67__cfg80211_wdev_from_attrs(struct cfg80211_registered_device *rdev,
68 struct net *netns, struct nlattr **attrs)
55682965 69{
89a54e48
JB		 70 struct wireless_dev *result = NULL;
71 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
72 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
239729a2 73 u64 wdev_id = 0;
89a54e48
JB		 74 int wiphy_idx = -1;
75 int ifidx = -1;
55682965 76
89a54e48
JB		 77 if (!have_ifidx && !have_wdev_id)
78 return ERR_PTR(-EINVAL);
55682965 79
89a54e48
JB		 80 if (have_ifidx)
81 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
82 if (have_wdev_id) {
83 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
84 wiphy_idx = wdev_id >> 32;
55682965
JB		 85 }
86
a05829a7
JB		 87 if (rdev) {
88 struct wireless_dev *wdev;
89
90 lockdep_assert_held(&rdev->wiphy.mtx);
91
92 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
93 if (have_ifidx && wdev->netdev &&
94 wdev->netdev->ifindex == ifidx) {
95 result = wdev;
96 break;
97 }
98 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
99 result = wdev;
100 break;
101 }
102 }
103
104 return result ?: ERR_PTR(-ENODEV);
105 }
106
107 ASSERT_RTNL();
108
89a54e48
JB		 109 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
110 struct wireless_dev *wdev;
111
112 if (wiphy_net(&rdev->wiphy) != netns)
113 continue;
114
115 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
116 continue;
117
53873f13 118 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
89a54e48
JB		 119 if (have_ifidx && wdev->netdev &&
120 wdev->netdev->ifindex == ifidx) {
121 result = wdev;
122 break;
123 }
124 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
125 result = wdev;
126 break;
127 }
128 }
89a54e48
JB		 129
130 if (result)
131 break;
132 }
133
134 if (result)
135 return result;
136 return ERR_PTR(-ENODEV);
55682965
JB		 137}
138
a9455408 139static struct cfg80211_registered_device *
878d9ec7 140__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 141{
7fee4778
JB		 142 struct cfg80211_registered_device *rdev = NULL, *tmp;
143 struct net_device *netdev;
a9455408 144
5fe231e8 145 ASSERT_RTNL();
a9455408 146
878d9ec7 147 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 148 !attrs[NL80211_ATTR_IFINDEX] &&
149 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 150 return ERR_PTR(-EINVAL);
151
878d9ec7 152 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 153 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 154 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 155
89a54e48
JB		 156 if (attrs[NL80211_ATTR_WDEV]) {
157 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
158 struct wireless_dev *wdev;
159 bool found = false;
160
161 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
162 if (tmp) {
163 /* make sure wdev exists */
53873f13 164 list_for_each_entry(wdev, &tmp->wiphy.wdev_list, list) {
89a54e48
JB		 165 if (wdev->identifier != (u32)wdev_id)
166 continue;
167 found = true;
168 break;
169 }
89a54e48
JB		 170
171 if (!found)
172 tmp = NULL;
173
174 if (rdev && tmp != rdev)
175 return ERR_PTR(-EINVAL);
176 rdev = tmp;
177 }
178 }
179
878d9ec7
JB		 180 if (attrs[NL80211_ATTR_IFINDEX]) {
181 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
7a087e74 182
7f2b8562 183 netdev = __dev_get_by_index(netns, ifindex);
7fee4778
JB		 184 if (netdev) {
185 if (netdev->ieee80211_ptr)
f26cbf40
ZG		 186 tmp = wiphy_to_rdev(
187 netdev->ieee80211_ptr->wiphy);
7fee4778
JB		 188 else
189 tmp = NULL;
190
7fee4778
JB		 191 /* not wireless device -- return error */
192 if (!tmp)
193 return ERR_PTR(-EINVAL);
194
195 /* mismatch -- return error */
196 if (rdev && tmp != rdev)
197 return ERR_PTR(-EINVAL);
198
199 rdev = tmp;
a9455408 200 }
a9455408 201 }
a9455408 202
4f7eff10
JB		 203 if (!rdev)
204 return ERR_PTR(-ENODEV);
a9455408 205
4f7eff10
JB		 206 if (netns != wiphy_net(&rdev->wiphy))
207 return ERR_PTR(-ENODEV);
208
209 return rdev;
a9455408
JB		 210}
211
212/*
213 * This function returns a pointer to the driver
214 * that the genl_info item that is passed refers to.
a9455408
JB		 215 *
216 * The result of this can be a PTR_ERR and hence must
217 * be checked with IS_ERR() for errors.
218 */
219static struct cfg80211_registered_device *
4f7eff10 220cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408 221{
5fe231e8 222 return __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 223}
224
f88eb7c0
JB		 225static int validate_beacon_head(const struct nlattr *attr,
226 struct netlink_ext_ack *extack)
227{
228 const u8 *data = nla_data(attr);
229 unsigned int len = nla_len(attr);
230 const struct element *elem;
231 const struct ieee80211_mgmt *mgmt = (void *)data;
1d47f119 232 unsigned int fixedlen, hdrlen;
9a6847ba 233 bool s1g_bcn;
1d47f119 234
9a6847ba
JB		 235 if (len < offsetofend(typeof(*mgmt), frame_control))
236 goto err;
237
238 s1g_bcn = ieee80211_is_s1g_beacon(mgmt->frame_control);
1d47f119
TP		 239 if (s1g_bcn) {
240 fixedlen = offsetof(struct ieee80211_ext,
241 u.s1g_beacon.variable);
242 hdrlen = offsetof(struct ieee80211_ext, u.s1g_beacon);
243 } else {
244 fixedlen = offsetof(struct ieee80211_mgmt,
245 u.beacon.variable);
246 hdrlen = offsetof(struct ieee80211_mgmt, u.beacon);
247 }
f88eb7c0
JB		 248
249 if (len < fixedlen)
250 goto err;
251
1d47f119 252 if (ieee80211_hdrlen(mgmt->frame_control) != hdrlen)
f88eb7c0
JB		 253 goto err;
254
255 data += fixedlen;
256 len -= fixedlen;
257
258 for_each_element(elem, data, len) {
259 /* nothing */
260 }
261
262 if (for_each_element_completed(elem, data, len))
263 return 0;
264
265err:
266 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed beacon head");
267 return -EINVAL;
268}
269
3d7af878
JB		 270static int validate_ie_attr(const struct nlattr *attr,
271 struct netlink_ext_ack *extack)
272{
9f308616
JB		 273 const u8 *data = nla_data(attr);
274 unsigned int len = nla_len(attr);
7388afe0 275 const struct element *elem;
3d7af878 276
9f308616
JB		 277 for_each_element(elem, data, len) {
278 /* nothing */
3d7af878
JB		 279 }
280
9f308616
JB		 281 if (for_each_element_completed(elem, data, len))
282 return 0;
283
3d7af878
JB		 284 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed information elements");
285 return -EINVAL;
286}
287
a3a20feb
JB		 288static int validate_he_capa(const struct nlattr *attr,
289 struct netlink_ext_ack *extack)
290{
291 if (!ieee80211_he_capa_size_ok(nla_data(attr), nla_len(attr)))
292 return -EINVAL;
293
294 return 0;
295}
296
55682965 297/* policy for the attributes */
d15da2a2
JB		 298static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR];
299
81e54d08
PKC		 300static const struct nla_policy
301nl80211_ftm_responder_policy[NL80211_FTM_RESP_ATTR_MAX + 1] = {
302 [NL80211_FTM_RESP_ATTR_ENABLED] = { .type = NLA_FLAG, },
303 [NL80211_FTM_RESP_ATTR_LCI] = { .type = NLA_BINARY,
304 .len = U8_MAX },
305 [NL80211_FTM_RESP_ATTR_CIVICLOC] = { .type = NLA_BINARY,
306 .len = U8_MAX },
307};
308
9bb7e0f2
JB		 309static const struct nla_policy
310nl80211_pmsr_ftm_req_attr_policy[NL80211_PMSR_FTM_REQ_ATTR_MAX + 1] = {
311 [NL80211_PMSR_FTM_REQ_ATTR_ASAP] = { .type = NLA_FLAG },
312 [NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE] = { .type = NLA_U32 },
313 [NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP] =
314 NLA_POLICY_MAX(NLA_U8, 15),
315 [NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD] = { .type = NLA_U16 },
316 [NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION] =
317 NLA_POLICY_MAX(NLA_U8, 15),
318 [NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST] =
ea18709a 319 NLA_POLICY_MAX(NLA_U8, 31),
9bb7e0f2
JB		 320 [NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES] = { .type = NLA_U8 },
321 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI] = { .type = NLA_FLAG },
322 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC] = { .type = NLA_FLAG },
efb5520d
AS		 323 [NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED] = { .type = NLA_FLAG },
324 [NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED] = { .type = NLA_FLAG },
73807523 325 [NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK] = { .type = NLA_FLAG },
9bb7e0f2
JB		 326};
327
328static const struct nla_policy
329nl80211_pmsr_req_data_policy[NL80211_PMSR_TYPE_MAX + 1] = {
330 [NL80211_PMSR_TYPE_FTM] =
23323289 331 NLA_POLICY_NESTED(nl80211_pmsr_ftm_req_attr_policy),
9bb7e0f2
JB		 332};
333
334static const struct nla_policy
335nl80211_pmsr_req_attr_policy[NL80211_PMSR_REQ_ATTR_MAX + 1] = {
336 [NL80211_PMSR_REQ_ATTR_DATA] =
23323289 337 NLA_POLICY_NESTED(nl80211_pmsr_req_data_policy),
9bb7e0f2
JB		 338 [NL80211_PMSR_REQ_ATTR_GET_AP_TSF] = { .type = NLA_FLAG },
339};
340
341static const struct nla_policy
aeddc05f 342nl80211_pmsr_peer_attr_policy[NL80211_PMSR_PEER_ATTR_MAX + 1] = {
9bb7e0f2 343 [NL80211_PMSR_PEER_ATTR_ADDR] = NLA_POLICY_ETH_ADDR,
d15da2a2 344 [NL80211_PMSR_PEER_ATTR_CHAN] = NLA_POLICY_NESTED(nl80211_policy),
9bb7e0f2 345 [NL80211_PMSR_PEER_ATTR_REQ] =
23323289 346 NLA_POLICY_NESTED(nl80211_pmsr_req_attr_policy),
9bb7e0f2
JB		 347 [NL80211_PMSR_PEER_ATTR_RESP] = { .type = NLA_REJECT },
348};
349
350static const struct nla_policy
351nl80211_pmsr_attr_policy[NL80211_PMSR_ATTR_MAX + 1] = {
352 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_REJECT },
353 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_REJECT },
354 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_REJECT },
355 [NL80211_PMSR_ATTR_TYPE_CAPA] = { .type = NLA_REJECT },
356 [NL80211_PMSR_ATTR_PEERS] =
aeddc05f 357 NLA_POLICY_NESTED_ARRAY(nl80211_pmsr_peer_attr_policy),
9bb7e0f2
JB		 358};
359
796e90f4
JC		 360static const struct nla_policy
361he_obss_pd_policy[NL80211_HE_OBSS_PD_ATTR_MAX + 1] = {
362 [NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] =
363 NLA_POLICY_RANGE(NLA_U8, 1, 20),
364 [NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET] =
365 NLA_POLICY_RANGE(NLA_U8, 1, 20),
f5bec330
RM		 366 [NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET] =
367 NLA_POLICY_RANGE(NLA_U8, 1, 20),
368 [NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP] =
369 NLA_POLICY_EXACT_LEN(8),
370 [NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP] =
371 NLA_POLICY_EXACT_LEN(8),
372 [NL80211_HE_OBSS_PD_ATTR_SR_CTRL] = { .type = NLA_U8 },
796e90f4
JC		 373};
374
5c5e52d1
JC		 375static const struct nla_policy
376he_bss_color_policy[NL80211_HE_BSS_COLOR_ATTR_MAX + 1] = {
377 [NL80211_HE_BSS_COLOR_ATTR_COLOR] = NLA_POLICY_RANGE(NLA_U8, 1, 63),
378 [NL80211_HE_BSS_COLOR_ATTR_DISABLED] = { .type = NLA_FLAG },
379 [NL80211_HE_BSS_COLOR_ATTR_PARTIAL] = { .type = NLA_FLAG },
380};
381
9a5f6488
TC		 382static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
383 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
384 .len = NL80211_MAX_SUPP_RATES },
385 [NL80211_TXRATE_HT] = { .type = NLA_BINARY,
386 .len = NL80211_MAX_SUPP_HT_RATES },
387 [NL80211_TXRATE_VHT] = NLA_POLICY_EXACT_LEN_WARN(sizeof(struct nl80211_txrate_vht)),
388 [NL80211_TXRATE_GI] = { .type = NLA_U8 },
eb89a6a6
MH		 389 [NL80211_TXRATE_HE] = NLA_POLICY_EXACT_LEN(sizeof(struct nl80211_txrate_he)),
390 [NL80211_TXRATE_HE_GI] = NLA_POLICY_RANGE(NLA_U8,
391 NL80211_RATE_INFO_HE_GI_0_8,
392 NL80211_RATE_INFO_HE_GI_3_2),
393 [NL80211_TXRATE_HE_LTF] = NLA_POLICY_RANGE(NLA_U8,
394 NL80211_RATE_INFO_HE_1XLTF,
395 NL80211_RATE_INFO_HE_4XLTF),
9a5f6488
TC		 396};
397
77f576de
T		 398static const struct nla_policy
399nl80211_tid_config_attr_policy[NL80211_TID_CONFIG_ATTR_MAX + 1] = {
3710a8a6
JB		 400 [NL80211_TID_CONFIG_ATTR_VIF_SUPP] = { .type = NLA_U64 },
401 [NL80211_TID_CONFIG_ATTR_PEER_SUPP] = { .type = NLA_U64 },
77f576de 402 [NL80211_TID_CONFIG_ATTR_OVERRIDE] = { .type = NLA_FLAG },
3710a8a6 403 [NL80211_TID_CONFIG_ATTR_TIDS] = NLA_POLICY_RANGE(NLA_U16, 1, 0xff),
77f576de
T		 404 [NL80211_TID_CONFIG_ATTR_NOACK] =
405 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
6a21d16c
T		 406 [NL80211_TID_CONFIG_ATTR_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
407 [NL80211_TID_CONFIG_ATTR_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
ade274b2
T		 408 [NL80211_TID_CONFIG_ATTR_AMPDU_CTRL] =
409 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
04f7d142
T		 410 [NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL] =
411 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
33462e68
SM		 412 [NL80211_TID_CONFIG_ATTR_AMSDU_CTRL] =
413 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
9a5f6488
TC		 414 [NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE] =
415 NLA_POLICY_MAX(NLA_U8, NL80211_TX_RATE_FIXED),
416 [NL80211_TID_CONFIG_ATTR_TX_RATE] =
417 NLA_POLICY_NESTED(nl80211_txattr_policy),
77f576de
T		 418};
419
291c49de
AD		 420static const struct nla_policy
421nl80211_fils_discovery_policy[NL80211_FILS_DISCOVERY_ATTR_MAX + 1] = {
422 [NL80211_FILS_DISCOVERY_ATTR_INT_MIN] = NLA_POLICY_MAX(NLA_U32, 10000),
423 [NL80211_FILS_DISCOVERY_ATTR_INT_MAX] = NLA_POLICY_MAX(NLA_U32, 10000),
272cd0e8
AD		 424 [NL80211_FILS_DISCOVERY_ATTR_TMPL] =
425 NLA_POLICY_RANGE(NLA_BINARY,
426 NL80211_FILS_DISCOVERY_TMPL_MIN_LEN,
427 IEEE80211_MAX_DATA_LEN),
291c49de
AD		 428};
429
7443dcd1
AD		 430static const struct nla_policy
431nl80211_unsol_bcast_probe_resp_policy[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1] = {
432 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] = NLA_POLICY_MAX(NLA_U32, 20),
433 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL] = { .type = NLA_BINARY,
434 .len = IEEE80211_MAX_DATA_LEN }
435};
436
6bdb68ce
CH		 437static const struct nla_policy
438sar_specs_policy[NL80211_SAR_ATTR_SPECS_MAX + 1] = {
439 [NL80211_SAR_ATTR_SPECS_POWER] = { .type = NLA_S32 },
440 [NL80211_SAR_ATTR_SPECS_RANGE_INDEX] = {.type = NLA_U32 },
441};
442
443static const struct nla_policy
444sar_policy[NL80211_SAR_ATTR_MAX + 1] = {
445 [NL80211_SAR_ATTR_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_SAR_TYPE),
446 [NL80211_SAR_ATTR_SPECS] = NLA_POLICY_NESTED_ARRAY(sar_specs_policy),
447};
448
dc1e3cb8
JC		 449static const struct nla_policy
450nl80211_mbssid_config_policy[NL80211_MBSSID_CONFIG_ATTR_MAX + 1] = {
451 [NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES] = NLA_POLICY_MIN(NLA_U8, 2),
452 [NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY] =
453 NLA_POLICY_MIN(NLA_U8, 1),
454 [NL80211_MBSSID_CONFIG_ATTR_INDEX] = { .type = NLA_U8 },
455 [NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX] = { .type = NLA_U32 },
456 [NL80211_MBSSID_CONFIG_ATTR_EMA] = { .type = NLA_FLAG },
457};
458
ff5c4dc4
JB		 459static const struct nla_policy
460nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] = {
461 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
462 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
463};
464
d15da2a2 465static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR] = {
6d4dd4ef 466 [0] = { .strict_start_type = NL80211_ATTR_HE_OBSS_PD },
55682965
JB		 467 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
468 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 469 .len = 20-1 },
31888487 470 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
3d9d1d66 471
72bdcf34 472 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 473 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
2a38075c
AAL		 474 [NL80211_ATTR_WIPHY_EDMG_CHANNELS] = NLA_POLICY_RANGE(NLA_U8,
475 NL80211_EDMG_CHANNELS_MIN,
476 NL80211_EDMG_CHANNELS_MAX),
477 [NL80211_ATTR_WIPHY_EDMG_BW_CONFIG] = NLA_POLICY_RANGE(NLA_U8,
478 NL80211_EDMG_BW_CONFIG_MIN,
479 NL80211_EDMG_BW_CONFIG_MAX),
480
3d9d1d66
JB		 481 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
482 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
942ba88b 483 [NL80211_ATTR_CENTER_FREQ1_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
3d9d1d66
JB		 484 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
485
ab0d76f6
JB		 486 [NL80211_ATTR_WIPHY_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
487 [NL80211_ATTR_WIPHY_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
b9a5f8ca
JM		 488 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
489 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 490 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
3057dbfd 491 [NL80211_ATTR_WIPHY_DYN_ACK] = { .type = NLA_FLAG },
55682965 492
ab0d76f6 493 [NL80211_ATTR_IFTYPE] = NLA_POLICY_MAX(NLA_U32, NL80211_IFTYPE_MAX),
55682965
JB		 494 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
495 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 496
c7721c05
JB		 497 [NL80211_ATTR_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
498 [NL80211_ATTR_PREV_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
41ade00f 499
b9454e83 500 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 501 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
502 .len = WLAN_MAX_KEY_LEN },
56be393f 503 [NL80211_ATTR_KEY_IDX] = NLA_POLICY_MAX(NLA_U8, 7),
41ade00f
JB		 504 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
505 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 506 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
ab0d76f6
JB		 507 [NL80211_ATTR_KEY_TYPE] =
508 NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES),
ed1b6cc7
JB		 509
510 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
511 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
f88eb7c0
JB		 512 [NL80211_ATTR_BEACON_HEAD] =
513 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_beacon_head,
514 IEEE80211_MAX_DATA_LEN),
3d7af878
JB		 515 [NL80211_ATTR_BEACON_TAIL] =
516 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
517 IEEE80211_MAX_DATA_LEN),
ab0d76f6
JB		 518 [NL80211_ATTR_STA_AID] =
519 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
5727ef1b
JB		 520 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
521 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
522 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
523 .len = NL80211_MAX_SUPP_RATES },
ab0d76f6
JB		 524 [NL80211_ATTR_STA_PLINK_ACTION] =
525 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_ACTIONS - 1),
e96d1cd2
ARN		 526 [NL80211_ATTR_STA_TX_POWER_SETTING] =
527 NLA_POLICY_RANGE(NLA_U8,
528 NL80211_TX_POWER_AUTOMATIC,
529 NL80211_TX_POWER_FIXED),
530 [NL80211_ATTR_STA_TX_POWER] = { .type = NLA_S16 },
5727ef1b 531 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 532 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 533 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 534 .len = IEEE80211_MAX_MESH_ID_LEN },
1fab1b89 535 [NL80211_ATTR_MPATH_NEXT_HOP] = NLA_POLICY_ETH_ADDR_COMPAT,
9f1ba906 536
6624bb34
JB		 537 /* allow 3 for NUL-termination, we used to declare this NLA_STRING */
538 [NL80211_ATTR_REG_ALPHA2] = NLA_POLICY_RANGE(NLA_BINARY, 2, 3),
b2e1b302
LR		 539 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
540
9f1ba906
JM		 541 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
542 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
543 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 544 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
545 .len = NL80211_MAX_SUPP_RATES },
50b12f59 546 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 547
24bdd9f4 548 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 549 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 550
c7721c05 551 [NL80211_ATTR_HT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_HT_CAPABILITY_LEN),
9aed3cc1
JM		 552
553 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
3d7af878
JB		 554 [NL80211_ATTR_IE] = NLA_POLICY_VALIDATE_FN(NLA_BINARY,
555 validate_ie_attr,
556 IEEE80211_MAX_DATA_LEN),
2a519311
JB		 557 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
558 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 559
560 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
561 .len = IEEE80211_MAX_SSID_LEN },
562 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
563 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 564 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 565 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
ab0d76f6
JB		 566 [NL80211_ATTR_USE_MFP] = NLA_POLICY_RANGE(NLA_U32,
567 NL80211_MFP_NO,
568 NL80211_MFP_OPTIONAL),
ff5c4dc4
JB		 569 [NL80211_ATTR_STA_FLAGS2] =
570 NLA_POLICY_EXACT_LEN_WARN(sizeof(struct nl80211_sta_flag_update)),
3f77316c 571 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 572 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
573 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
64bf3d4b 574 [NL80211_ATTR_CONTROL_PORT_OVER_NL80211] = { .type = NLA_FLAG },
b23aa676 575 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
ea750801 576 [NL80211_ATTR_STATUS_CODE] = { .type = NLA_U16 },
b23aa676
SO		 577 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
578 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 579 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 580 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
c7721c05 581 [NL80211_ATTR_PMKID] = NLA_POLICY_EXACT_LEN_WARN(WLAN_PMKID_LEN),
9588bbd5
JM		 582 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
583 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 584 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 585 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
586 .len = IEEE80211_MAX_DATA_LEN },
587 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ab0d76f6
JB		 588 [NL80211_ATTR_PS_STATE] = NLA_POLICY_RANGE(NLA_U32,
589 NL80211_PS_DISABLED,
590 NL80211_PS_ENABLED),
d6dc1a38 591 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 592 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 593 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 594 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
595 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 596 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 597 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
598 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 599 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 600 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 601 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 602 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
ab0d76f6
JB		 603 [NL80211_ATTR_STA_PLINK_STATE] =
604 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_STATES - 1),
056e9375
JK		 605 [NL80211_ATTR_MEASUREMENT_DURATION] = { .type = NLA_U16 },
606 [NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY] = { .type = NLA_FLAG },
ab0d76f6
JB		 607 [NL80211_ATTR_MESH_PEER_AID] =
608 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
bbe6ad6d 609 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 610 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 611 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
ab0d76f6
JB		 612 [NL80211_ATTR_HIDDEN_SSID] =
613 NLA_POLICY_RANGE(NLA_U32,
614 NL80211_HIDDEN_SSID_NOT_IN_USE,
615 NL80211_HIDDEN_SSID_ZERO_CONTENTS),
3d7af878
JB		 616 [NL80211_ATTR_IE_PROBE_RESP] =
617 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
618 IEEE80211_MAX_DATA_LEN),
619 [NL80211_ATTR_IE_ASSOC_RESP] =
620 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
621 IEEE80211_MAX_DATA_LEN),
f4b34b55 622 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
ff5c4dc4 623 [NL80211_ATTR_STA_WME] = NLA_POLICY_NESTED(nl80211_sta_wme_policy),
a1f1c21c 624 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 625 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 626 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
627 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
628 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
629 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
630 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
31fa97c5 631 [NL80211_ATTR_TDLS_INITIATOR] = { .type = NLA_FLAG },
e247bd90 632 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 633 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
634 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 635 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 636 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
637 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
638 .len = NL80211_HT_CAPABILITY_LEN
639 },
1d9d9213 640 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 641 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 642 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 643 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 644 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
cb9abd48
JB		 645
646 /* need to include at least Auth Transaction and Status Code */
647 [NL80211_ATTR_AUTH_DATA] = NLA_POLICY_MIN_LEN(4),
648
c7721c05 649 [NL80211_ATTR_VHT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_VHT_CAPABILITY_LEN),
ed473771 650 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
ab0d76f6
JB		 651 [NL80211_ATTR_P2P_CTWINDOW] = NLA_POLICY_MAX(NLA_U8, 127),
652 [NL80211_ATTR_P2P_OPPPS] = NLA_POLICY_MAX(NLA_U8, 1),
653 [NL80211_ATTR_LOCAL_MESH_POWER_MODE] =
654 NLA_POLICY_RANGE(NLA_U32,
655 NL80211_MESH_POWER_UNKNOWN + 1,
656 NL80211_MESH_POWER_MAX),
77765eaf
VT		 657 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
658 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
9d62a986
JM		 659 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
660 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
3713b4e3 661 [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
ee2aca34
JB		 662 [NL80211_ATTR_DISABLE_VHT] = { .type = NLA_FLAG },
663 [NL80211_ATTR_VHT_CAPABILITY_MASK] = {
664 .len = NL80211_VHT_CAPABILITY_LEN,
665 },
355199e0
JM		 666 [NL80211_ATTR_MDID] = { .type = NLA_U16 },
667 [NL80211_ATTR_IE_RIC] = { .type = NLA_BINARY,
668 .len = IEEE80211_MAX_DATA_LEN },
0e1a1d85 669 [NL80211_ATTR_CRIT_PROT_ID] = { .type = NLA_U16 },
cb9abd48
JB		 670 [NL80211_ATTR_MAX_CRIT_PROT_DURATION] =
671 NLA_POLICY_MAX(NLA_U16, NL80211_CRIT_PROTO_MAX_DURATION),
ab0d76f6
JB		 672 [NL80211_ATTR_PEER_AID] =
673 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
16ef1fe2
SW		 674 [NL80211_ATTR_CH_SWITCH_COUNT] = { .type = NLA_U32 },
675 [NL80211_ATTR_CH_SWITCH_BLOCK_TX] = { .type = NLA_FLAG },
676 [NL80211_ATTR_CSA_IES] = { .type = NLA_NESTED },
00c207ed
JC		 677 [NL80211_ATTR_CNTDWN_OFFS_BEACON] = { .type = NLA_BINARY },
678 [NL80211_ATTR_CNTDWN_OFFS_PRESP] = { .type = NLA_BINARY },
cb9abd48 679 [NL80211_ATTR_STA_SUPPORTED_CHANNELS] = NLA_POLICY_MIN_LEN(2),
c8b82802
JB		 680 /*
681 * The value of the Length field of the Supported Operating
682 * Classes element is between 2 and 253.
683 */
684 [NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES] =
685 NLA_POLICY_RANGE(NLA_BINARY, 2, 253),
5336fa88 686 [NL80211_ATTR_HANDLE_DFS] = { .type = NLA_FLAG },
60f4a7b1 687 [NL80211_ATTR_OPMODE_NOTIF] = { .type = NLA_U8 },
ad7e718c
JB		 688 [NL80211_ATTR_VENDOR_ID] = { .type = NLA_U32 },
689 [NL80211_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
690 [NL80211_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
c8b82802
JB		 691 [NL80211_ATTR_QOS_MAP] = NLA_POLICY_RANGE(NLA_BINARY,
692 IEEE80211_QOS_MAP_LEN_MIN,
693 IEEE80211_QOS_MAP_LEN_MAX),
c7721c05 694 [NL80211_ATTR_MAC_HINT] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1df4a510 695 [NL80211_ATTR_WIPHY_FREQ_HINT] = { .type = NLA_U32 },
df942e7b 696 [NL80211_ATTR_TDLS_PEER_CAPABILITY] = { .type = NLA_U32 },
18e5ca65 697 [NL80211_ATTR_SOCKET_OWNER] = { .type = NLA_FLAG },
34d22ce2 698 [NL80211_ATTR_CSA_C_OFFSETS_TX] = { .type = NLA_BINARY },
bab5ab7d 699 [NL80211_ATTR_USE_RRM] = { .type = NLA_FLAG },
ab0d76f6
JB		 700 [NL80211_ATTR_TSID] = NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_TIDS - 1),
701 [NL80211_ATTR_USER_PRIO] =
702 NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_UPS - 1),
960d01ac 703 [NL80211_ATTR_ADMITTED_TIME] = { .type = NLA_U16 },
18998c38 704 [NL80211_ATTR_SMPS_MODE] = { .type = NLA_U8 },
5cde05c6 705 [NL80211_ATTR_OPER_CLASS] = { .type = NLA_U8 },
c7721c05 706 [NL80211_ATTR_MAC_MASK] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1bdd716c 707 [NL80211_ATTR_WIPHY_SELF_MANAGED_REG] = { .type = NLA_FLAG },
4b681c82 708 [NL80211_ATTR_NETNS_FD] = { .type = NLA_U32 },
9c748934 709 [NL80211_ATTR_SCHED_SCAN_DELAY] = { .type = NLA_U32 },
05050753 710 [NL80211_ATTR_REG_INDOOR] = { .type = NLA_FLAG },
34d50519 711 [NL80211_ATTR_PBSS] = { .type = NLA_FLAG },
38de03d2 712 [NL80211_ATTR_BSS_SELECT] = { .type = NLA_NESTED },
ab0d76f6
JB		 713 [NL80211_ATTR_STA_SUPPORT_P2P_PS] =
714 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_P2P_PS_STATUS - 1),
c6e6a0c8
AE		 715 [NL80211_ATTR_MU_MIMO_GROUP_DATA] = {
716 .len = VHT_MUMIMO_GROUPS_DATA_LEN
717 },
c7721c05 718 [NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
ab0d76f6 719 [NL80211_ATTR_NAN_MASTER_PREF] = NLA_POLICY_MIN(NLA_U8, 1),
8585989d 720 [NL80211_ATTR_BANDS] = { .type = NLA_U32 },
a442b761 721 [NL80211_ATTR_NAN_FUNC] = { .type = NLA_NESTED },
348bd456
JM		 722 [NL80211_ATTR_FILS_KEK] = { .type = NLA_BINARY,
723 .len = FILS_MAX_KEK_LEN },
c7721c05 724 [NL80211_ATTR_FILS_NONCES] = NLA_POLICY_EXACT_LEN_WARN(2 * FILS_NONCE_LEN),
ce0ce13a 725 [NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED] = { .type = NLA_FLAG, },
c7721c05 726 [NL80211_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
bf95ecdb 727 [NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] = { .type = NLA_S8 },
728 [NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST] = {
729 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
730 },
3093ebbe 731 [NL80211_ATTR_TIMEOUT_REASON] = { .type = NLA_U32 },
a3caf744
VK		 732 [NL80211_ATTR_FILS_ERP_USERNAME] = { .type = NLA_BINARY,
733 .len = FILS_ERP_MAX_USERNAME_LEN },
734 [NL80211_ATTR_FILS_ERP_REALM] = { .type = NLA_BINARY,
735 .len = FILS_ERP_MAX_REALM_LEN },
736 [NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] = { .type = NLA_U16 },
737 [NL80211_ATTR_FILS_ERP_RRK] = { .type = NLA_BINARY,
738 .len = FILS_ERP_MAX_RRK_LEN },
c7721c05 739 [NL80211_ATTR_FILS_CACHE_ID] = NLA_POLICY_EXACT_LEN_WARN(2),
a3caf744 740 [NL80211_ATTR_PMK] = { .type = NLA_BINARY, .len = PMK_MAX_LEN },
cb9abd48 741 [NL80211_ATTR_PMKR0_NAME] = NLA_POLICY_EXACT_LEN(WLAN_PMK_NAME_LEN),
ca986ad9 742 [NL80211_ATTR_SCHED_SCAN_MULTI] = { .type = NLA_FLAG },
40cbfa90 743 [NL80211_ATTR_EXTERNAL_AUTH_SUPPORT] = { .type = NLA_FLAG },
52539ca8
THJ		 744
745 [NL80211_ATTR_TXQ_LIMIT] = { .type = NLA_U32 },
746 [NL80211_ATTR_TXQ_MEMORY_LIMIT] = { .type = NLA_U32 },
747 [NL80211_ATTR_TXQ_QUANTUM] = { .type = NLA_U32 },
c8b82802 748 [NL80211_ATTR_HE_CAPABILITY] =
a3a20feb
JB		 749 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_he_capa,
750 NL80211_HE_MAX_CAPABILITY_LEN),
0e012b4e
JB		 751 [NL80211_ATTR_FTM_RESPONDER] =
752 NLA_POLICY_NESTED(nl80211_ftm_responder_policy),
9bb7e0f2
JB		 753 [NL80211_ATTR_TIMEOUT] = NLA_POLICY_MIN(NLA_U32, 1),
754 [NL80211_ATTR_PEER_MEASUREMENTS] =
23323289 755 NLA_POLICY_NESTED(nl80211_pmsr_attr_policy),
36647055 756 [NL80211_ATTR_AIRTIME_WEIGHT] = NLA_POLICY_MIN(NLA_U16, 1),
26f7044e
CHH		 757 [NL80211_ATTR_SAE_PASSWORD] = { .type = NLA_BINARY,
758 .len = SAE_PASSWORD_MAX_LEN },
a0de1ca3 759 [NL80211_ATTR_TWT_RESPONDER] = { .type = NLA_FLAG },
796e90f4 760 [NL80211_ATTR_HE_OBSS_PD] = NLA_POLICY_NESTED(he_obss_pd_policy),
14f34e36 761 [NL80211_ATTR_VLAN_ID] = NLA_POLICY_RANGE(NLA_U16, 1, VLAN_N_VID - 2),
5c5e52d1 762 [NL80211_ATTR_HE_BSS_COLOR] = NLA_POLICY_NESTED(he_bss_color_policy),
77f576de
T		 763 [NL80211_ATTR_TID_CONFIG] =
764 NLA_POLICY_NESTED_ARRAY(nl80211_tid_config_attr_policy),
5631d96a 765 [NL80211_ATTR_CONTROL_PORT_NO_PREAUTH] = { .type = NLA_FLAG },
7fc82af8
VJ		 766 [NL80211_ATTR_PMK_LIFETIME] = NLA_POLICY_MIN(NLA_U32, 1),
767 [NL80211_ATTR_PMK_REAUTH_THRESHOLD] = NLA_POLICY_RANGE(NLA_U8, 1, 100),
9dba48a6 768 [NL80211_ATTR_RECEIVE_MULTICAST] = { .type = NLA_FLAG },
942ba88b 769 [NL80211_ATTR_WIPHY_FREQ_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
2032f3b2 770 [NL80211_ATTR_SCAN_FREQ_KHZ] = { .type = NLA_NESTED },
8140860c
JB		 771 [NL80211_ATTR_HE_6GHZ_CAPABILITY] =
772 NLA_POLICY_EXACT_LEN(sizeof(struct ieee80211_he_6ghz_capa)),
291c49de
AD		 773 [NL80211_ATTR_FILS_DISCOVERY] =
774 NLA_POLICY_NESTED(nl80211_fils_discovery_policy),
7443dcd1
AD		 775 [NL80211_ATTR_UNSOL_BCAST_PROBE_RESP] =
776 NLA_POLICY_NESTED(nl80211_unsol_bcast_probe_resp_policy),
d2b7588a
TP		 777 [NL80211_ATTR_S1G_CAPABILITY] =
778 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
779 [NL80211_ATTR_S1G_CAPABILITY_MASK] =
780 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
9f0ffa41
RD		 781 [NL80211_ATTR_SAE_PWE] =
782 NLA_POLICY_RANGE(NLA_U8, NL80211_SAE_PWE_HUNT_AND_PECK,
783 NL80211_SAE_PWE_BOTH),
3bb02143 784 [NL80211_ATTR_RECONNECT_REQUESTED] = { .type = NLA_REJECT },
6bdb68ce 785 [NL80211_ATTR_SAR_SPEC] = NLA_POLICY_NESTED(sar_policy),
b6db0f89 786 [NL80211_ATTR_DISABLE_HE] = { .type = NLA_FLAG },
0d2ab3ae
JC		 787 [NL80211_ATTR_OBSS_COLOR_BITMAP] = { .type = NLA_U64 },
788 [NL80211_ATTR_COLOR_CHANGE_COUNT] = { .type = NLA_U8 },
789 [NL80211_ATTR_COLOR_CHANGE_COLOR] = { .type = NLA_U8 },
790 [NL80211_ATTR_COLOR_CHANGE_ELEMS] = NLA_POLICY_NESTED(nl80211_policy),
dc1e3cb8
JC		 791 [NL80211_ATTR_MBSSID_CONFIG] =
792 NLA_POLICY_NESTED(nl80211_mbssid_config_policy),
793 [NL80211_ATTR_MBSSID_ELEMS] = { .type = NLA_NESTED },
a95bfb87 794 [NL80211_ATTR_RADAR_BACKGROUND] = { .type = NLA_FLAG },
47301a74 795 [NL80211_ATTR_AP_SETTINGS_FLAGS] = { .type = NLA_U32 },
ea05fd35
IP		 796 [NL80211_ATTR_EHT_CAPABILITY] =
797 NLA_POLICY_RANGE(NLA_BINARY,
798 NL80211_EHT_MIN_CAPABILITY_LEN,
799 NL80211_EHT_MAX_CAPABILITY_LEN),
36f84235 800 [NL80211_ATTR_DISABLE_EHT] = { .type = NLA_FLAG },
7b0a0e3c
JB		 801 [NL80211_ATTR_MLO_LINKS] =
802 NLA_POLICY_NESTED_ARRAY(nl80211_policy),
803 [NL80211_ATTR_MLO_LINK_ID] =
804 NLA_POLICY_RANGE(NLA_U8, 0, IEEE80211_MLD_MAX_NUM_LINKS),
d648c230 805 [NL80211_ATTR_MLD_ADDR] = NLA_POLICY_EXACT_LEN(ETH_ALEN),
efbabc11 806 [NL80211_ATTR_MLO_SUPPORT] = { .type = NLA_FLAG },
ecad3b0b 807 [NL80211_ATTR_MAX_NUM_AKM_SUITES] = { .type = NLA_REJECT },
55682965
JB		 808};
809
e31b8213 810/* policy for the key attributes */
b54452b0 811static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 812 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 813 [NL80211_KEY_IDX] = { .type = NLA_U8 },
814 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 815 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 816 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
817 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
ab0d76f6 818 [NL80211_KEY_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES - 1),
dbd2fd65 819 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
6cdd3979 820 [NL80211_KEY_MODE] = NLA_POLICY_RANGE(NLA_U8, 0, NL80211_KEY_SET_TX),
dbd2fd65
JB		 821};
822
823/* policy for the key default flags */
824static const struct nla_policy
825nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
826 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
827 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 828};
829
f83ace3b 830#ifdef CONFIG_PM
ff1b6e69
JB		 831/* policy for WoWLAN attributes */
832static const struct nla_policy
833nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
834 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
835 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
836 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
837 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 838 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
839 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
840 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
841 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
2a0e047e 842 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
8cd4d456 843 [NL80211_WOWLAN_TRIG_NET_DETECT] = { .type = NLA_NESTED },
2a0e047e
JB		 844};
845
846static const struct nla_policy
847nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
848 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
849 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
c7721c05 850 [NL80211_WOWLAN_TCP_DST_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
2a0e047e
JB		 851 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
852 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
bc043585 853 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
2a0e047e
JB		 854 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
855 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
856 },
857 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
858 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
859 },
860 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
bc043585
JB		 861 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
862 [NL80211_WOWLAN_TCP_WAKE_MASK] = NLA_POLICY_MIN_LEN(1),
ff1b6e69 863};
f83ace3b 864#endif /* CONFIG_PM */
ff1b6e69 865
be29b99a
AK		 866/* policy for coalesce rule attributes */
867static const struct nla_policy
868nl80211_coalesce_policy[NUM_NL80211_ATTR_COALESCE_RULE] = {
869 [NL80211_ATTR_COALESCE_RULE_DELAY] = { .type = NLA_U32 },
ab0d76f6
JB		 870 [NL80211_ATTR_COALESCE_RULE_CONDITION] =
871 NLA_POLICY_RANGE(NLA_U32,
872 NL80211_COALESCE_CONDITION_MATCH,
873 NL80211_COALESCE_CONDITION_NO_MATCH),
be29b99a
AK		 874 [NL80211_ATTR_COALESCE_RULE_PKT_PATTERN] = { .type = NLA_NESTED },
875};
876
e5497d76
JB		 877/* policy for GTK rekey offload attributes */
878static const struct nla_policy
879nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
093a48d2
NE		 880 [NL80211_REKEY_DATA_KEK] = {
881 .type = NLA_BINARY,
882 .len = NL80211_KEK_EXT_LEN
883 },
884 [NL80211_REKEY_DATA_KCK] = {
885 .type = NLA_BINARY,
886 .len = NL80211_KCK_EXT_LEN
887 },
cb9abd48 888 [NL80211_REKEY_DATA_REPLAY_CTR] = NLA_POLICY_EXACT_LEN(NL80211_REPLAY_CTR_LEN),
093a48d2 889 [NL80211_REKEY_DATA_AKM] = { .type = NLA_U32 },
e5497d76
JB		 890};
891
1e1b11b6 892static const struct nla_policy
893nl80211_match_band_rssi_policy[NUM_NL80211_BANDS] = {
894 [NL80211_BAND_2GHZ] = { .type = NLA_S32 },
895 [NL80211_BAND_5GHZ] = { .type = NLA_S32 },
e548a1c3 896 [NL80211_BAND_6GHZ] = { .type = NLA_S32 },
1e1b11b6 897 [NL80211_BAND_60GHZ] = { .type = NLA_S32 },
63fa0426 898 [NL80211_BAND_LC] = { .type = NLA_S32 },
1e1b11b6 899};
900
a1f1c21c
LC		 901static const struct nla_policy
902nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 903 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 904 .len = IEEE80211_MAX_SSID_LEN },
c7721c05 905 [NL80211_SCHED_SCAN_MATCH_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
88e920b4 906 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
1e1b11b6 907 [NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI] =
908 NLA_POLICY_NESTED(nl80211_match_band_rssi_policy),
a1f1c21c
LC		 909};
910
3b06d277
AS		 911static const struct nla_policy
912nl80211_plan_policy[NL80211_SCHED_SCAN_PLAN_MAX + 1] = {
913 [NL80211_SCHED_SCAN_PLAN_INTERVAL] = { .type = NLA_U32 },
914 [NL80211_SCHED_SCAN_PLAN_ITERATIONS] = { .type = NLA_U32 },
915};
916
38de03d2
AS		 917static const struct nla_policy
918nl80211_bss_select_policy[NL80211_BSS_SELECT_ATTR_MAX + 1] = {
919 [NL80211_BSS_SELECT_ATTR_RSSI] = { .type = NLA_FLAG },
920 [NL80211_BSS_SELECT_ATTR_BAND_PREF] = { .type = NLA_U32 },
921 [NL80211_BSS_SELECT_ATTR_RSSI_ADJUST] = {
922 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
923 },
924};
925
a442b761
AB		 926/* policy for NAN function attributes */
927static const struct nla_policy
928nl80211_nan_func_policy[NL80211_NAN_FUNC_ATTR_MAX + 1] = {
cb9abd48
JB		 929 [NL80211_NAN_FUNC_TYPE] =
930 NLA_POLICY_MAX(NLA_U8, NL80211_NAN_FUNC_MAX_TYPE),
0a27844c 931 [NL80211_NAN_FUNC_SERVICE_ID] = {
a442b761
AB		 932 .len = NL80211_NAN_FUNC_SERVICE_ID_LEN },
933 [NL80211_NAN_FUNC_PUBLISH_TYPE] = { .type = NLA_U8 },
934 [NL80211_NAN_FUNC_PUBLISH_BCAST] = { .type = NLA_FLAG },
935 [NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE] = { .type = NLA_FLAG },
936 [NL80211_NAN_FUNC_FOLLOW_UP_ID] = { .type = NLA_U8 },
937 [NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] = { .type = NLA_U8 },
c7721c05 938 [NL80211_NAN_FUNC_FOLLOW_UP_DEST] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
a442b761
AB		 939 [NL80211_NAN_FUNC_CLOSE_RANGE] = { .type = NLA_FLAG },
940 [NL80211_NAN_FUNC_TTL] = { .type = NLA_U32 },
941 [NL80211_NAN_FUNC_SERVICE_INFO] = { .type = NLA_BINARY,
942 .len = NL80211_NAN_FUNC_SERVICE_SPEC_INFO_MAX_LEN },
943 [NL80211_NAN_FUNC_SRF] = { .type = NLA_NESTED },
944 [NL80211_NAN_FUNC_RX_MATCH_FILTER] = { .type = NLA_NESTED },
945 [NL80211_NAN_FUNC_TX_MATCH_FILTER] = { .type = NLA_NESTED },
946 [NL80211_NAN_FUNC_INSTANCE_ID] = { .type = NLA_U8 },
947 [NL80211_NAN_FUNC_TERM_REASON] = { .type = NLA_U8 },
948};
949
950/* policy for Service Response Filter attributes */
951static const struct nla_policy
952nl80211_nan_srf_policy[NL80211_NAN_SRF_ATTR_MAX + 1] = {
953 [NL80211_NAN_SRF_INCLUDE] = { .type = NLA_FLAG },
954 [NL80211_NAN_SRF_BF] = { .type = NLA_BINARY,
955 .len = NL80211_NAN_FUNC_SRF_MAX_LEN },
956 [NL80211_NAN_SRF_BF_IDX] = { .type = NLA_U8 },
957 [NL80211_NAN_SRF_MAC_ADDRS] = { .type = NLA_NESTED },
958};
959
ad670233
PX		 960/* policy for packet pattern attributes */
961static const struct nla_policy
962nl80211_packet_pattern_policy[MAX_NL80211_PKTPAT + 1] = {
963 [NL80211_PKTPAT_MASK] = { .type = NLA_BINARY, },
964 [NL80211_PKTPAT_PATTERN] = { .type = NLA_BINARY, },
965 [NL80211_PKTPAT_OFFSET] = { .type = NLA_U32 },
966};
967
ce6b6974
JB		 968static int nl80211_prepare_wdev_dump(struct netlink_callback *cb,
969 struct cfg80211_registered_device **rdev,
970 struct wireless_dev **wdev,
971 struct nlattr **attrbuf)
a043897a 972{
97990a06 973 int err;
a043897a 974
97990a06 975 if (!cb->args[0]) {
ce6b6974
JB		 976 struct nlattr **attrbuf_free = NULL;
977
978 if (!attrbuf) {
979 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
980 GFP_KERNEL);
981 if (!attrbuf)
982 return -ENOMEM;
983 attrbuf_free = attrbuf;
984 }
50508d94 985
8cb08174
JB		 986 err = nlmsg_parse_deprecated(cb->nlh,
987 GENL_HDRLEN + nl80211_fam.hdrsize,
50508d94 988 attrbuf, nl80211_fam.maxattr,
8cb08174 989 nl80211_policy, NULL);
50508d94 990 if (err) {
ce6b6974 991 kfree(attrbuf_free);
ea90e0dc 992 return err;
50508d94 993 }
67748893 994
a05829a7
JB		 995 rtnl_lock();
996 *wdev = __cfg80211_wdev_from_attrs(NULL, sock_net(cb->skb->sk),
50508d94 997 attrbuf);
ce6b6974 998 kfree(attrbuf_free);
a05829a7
JB		 999 if (IS_ERR(*wdev)) {
1000 rtnl_unlock();
ea90e0dc 1001 return PTR_ERR(*wdev);
a05829a7 1002 }
f26cbf40 1003 *rdev = wiphy_to_rdev((*wdev)->wiphy);
a05829a7
JB		 1004 mutex_lock(&(*rdev)->wiphy.mtx);
1005 rtnl_unlock();
c319d50b
JB		 1006 /* 0 is the first index - add 1 to parse only once */
1007 cb->args[0] = (*rdev)->wiphy_idx + 1;
97990a06
JB		 1008 cb->args[1] = (*wdev)->identifier;
1009 } else {
c319d50b 1010 /* subtract the 1 again here */
a05829a7 1011 struct wiphy *wiphy;
97990a06 1012 struct wireless_dev *tmp;
67748893 1013
a05829a7
JB		 1014 rtnl_lock();
1015 wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
1016 if (!wiphy) {
1017 rtnl_unlock();
ea90e0dc 1018 return -ENODEV;
a05829a7 1019 }
f26cbf40 1020 *rdev = wiphy_to_rdev(wiphy);
97990a06 1021 *wdev = NULL;
67748893 1022
53873f13 1023 list_for_each_entry(tmp, &(*rdev)->wiphy.wdev_list, list) {
97990a06
JB		 1024 if (tmp->identifier == cb->args[1]) {
1025 *wdev = tmp;
1026 break;
1027 }
1028 }
67748893 1029
a05829a7
JB		 1030 if (!*wdev) {
1031 rtnl_unlock();
ea90e0dc 1032 return -ENODEV;
a05829a7
JB		 1033 }
1034 mutex_lock(&(*rdev)->wiphy.mtx);
1035 rtnl_unlock();
67748893
JB		 1036 }
1037
67748893 1038 return 0;
67748893
JB		 1039}
1040
55682965 1041/* message building helper */
9bb7e0f2
JB		 1042void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1043 int flags, u8 cmd)
55682965
JB		 1044{
1045 /* since there is no private header just add the generic one */
15e47304 1046 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 1047}
1048
50f32718
HD		 1049static int nl80211_msg_put_wmm_rules(struct sk_buff *msg,
1050 const struct ieee80211_reg_rule *rule)
1051{
1052 int j;
1053 struct nlattr *nl_wmm_rules =
ae0be8de 1054 nla_nest_start_noflag(msg, NL80211_FREQUENCY_ATTR_WMM);
50f32718
HD		 1055
1056 if (!nl_wmm_rules)
1057 goto nla_put_failure;
1058
1059 for (j = 0; j < IEEE80211_NUM_ACS; j++) {
ae0be8de 1060 struct nlattr *nl_wmm_rule = nla_nest_start_noflag(msg, j);
50f32718
HD		 1061
1062 if (!nl_wmm_rule)
1063 goto nla_put_failure;
1064
1065 if (nla_put_u16(msg, NL80211_WMMR_CW_MIN,
38cb87ee 1066 rule->wmm_rule.client[j].cw_min) ||
50f32718 1067 nla_put_u16(msg, NL80211_WMMR_CW_MAX,
38cb87ee 1068 rule->wmm_rule.client[j].cw_max) ||
50f32718 1069 nla_put_u8(msg, NL80211_WMMR_AIFSN,
38cb87ee 1070 rule->wmm_rule.client[j].aifsn) ||
d3c89bbc
HD		 1071 nla_put_u16(msg, NL80211_WMMR_TXOP,
1072 rule->wmm_rule.client[j].cot))
50f32718
HD		 1073 goto nla_put_failure;
1074
1075 nla_nest_end(msg, nl_wmm_rule);
1076 }
1077 nla_nest_end(msg, nl_wmm_rules);
1078
1079 return 0;
1080
1081nla_put_failure:
1082 return -ENOBUFS;
1083}
1084
1085static int nl80211_msg_put_channel(struct sk_buff *msg, struct wiphy *wiphy,
cdc89b97
JB		 1086 struct ieee80211_channel *chan,
1087 bool large)
5dab3b8a 1088{
ea077c1c
RL		 1089 /* Some channels must be completely excluded from the
1090 * list to protect old user-space tools from breaking
1091 */
1092 if (!large && chan->flags &
1093 (IEEE80211_CHAN_NO_10MHZ | IEEE80211_CHAN_NO_20MHZ))
1094 return 0;
f8d504ca
JB		 1095 if (!large && chan->freq_offset)
1096 return 0;
ea077c1c 1097
9360ffd1
DM		 1098 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
1099 chan->center_freq))
1100 goto nla_put_failure;
5dab3b8a 1101
942ba88b
TP		 1102 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_OFFSET, chan->freq_offset))
1103 goto nla_put_failure;
1104
9360ffd1
DM		 1105 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
1106 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
1107 goto nla_put_failure;
8fe02e16
LR		 1108 if (chan->flags & IEEE80211_CHAN_NO_IR) {
1109 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IR))
1110 goto nla_put_failure;
1111 if (nla_put_flag(msg, __NL80211_FREQUENCY_ATTR_NO_IBSS))
1112 goto nla_put_failure;
1113 }
cdc89b97
JB		 1114 if (chan->flags & IEEE80211_CHAN_RADAR) {
1115 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
1116 goto nla_put_failure;
1117 if (large) {
1118 u32 time;
1119
1120 time = elapsed_jiffies_msecs(chan->dfs_state_entered);
1121
1122 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
1123 chan->dfs_state))
1124 goto nla_put_failure;
1125 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
1126 time))
1127 goto nla_put_failure;
089027e5
JD		 1128 if (nla_put_u32(msg,
1129 NL80211_FREQUENCY_ATTR_DFS_CAC_TIME,
1130 chan->dfs_cac_ms))
1131 goto nla_put_failure;
cdc89b97
JB		 1132 }
1133 }
5dab3b8a 1134
fe1abafd
JB		 1135 if (large) {
1136 if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
1137 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
1138 goto nla_put_failure;
1139 if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
1140 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
1141 goto nla_put_failure;
1142 if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
1143 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
1144 goto nla_put_failure;
1145 if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
1146 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
1147 goto nla_put_failure;
570dbde1
DS		 1148 if ((chan->flags & IEEE80211_CHAN_INDOOR_ONLY) &&
1149 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_INDOOR_ONLY))
1150 goto nla_put_failure;
06f207fc
AN		 1151 if ((chan->flags & IEEE80211_CHAN_IR_CONCURRENT) &&
1152 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_IR_CONCURRENT))
570dbde1 1153 goto nla_put_failure;
ea077c1c
RL		 1154 if ((chan->flags & IEEE80211_CHAN_NO_20MHZ) &&
1155 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_20MHZ))
1156 goto nla_put_failure;
1157 if ((chan->flags & IEEE80211_CHAN_NO_10MHZ) &&
1158 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_10MHZ))
1159 goto nla_put_failure;
1e61d82c
HD		 1160 if ((chan->flags & IEEE80211_CHAN_NO_HE) &&
1161 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HE))
1162 goto nla_put_failure;
d65a9770
TP		 1163 if ((chan->flags & IEEE80211_CHAN_1MHZ) &&
1164 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_1MHZ))
1165 goto nla_put_failure;
1166 if ((chan->flags & IEEE80211_CHAN_2MHZ) &&
1167 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_2MHZ))
1168 goto nla_put_failure;
1169 if ((chan->flags & IEEE80211_CHAN_4MHZ) &&
1170 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_4MHZ))
1171 goto nla_put_failure;
1172 if ((chan->flags & IEEE80211_CHAN_8MHZ) &&
1173 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_8MHZ))
1174 goto nla_put_failure;
1175 if ((chan->flags & IEEE80211_CHAN_16MHZ) &&
1176 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_16MHZ))
1177 goto nla_put_failure;
c2b3d769
S		 1178 if ((chan->flags & IEEE80211_CHAN_NO_320MHZ) &&
1179 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_320MHZ))
1180 goto nla_put_failure;
31846b65
IP		 1181 if ((chan->flags & IEEE80211_CHAN_NO_EHT) &&
1182 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_EHT))
1183 goto nla_put_failure;
fe1abafd
JB		 1184 }
1185
9360ffd1
DM		 1186 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
1187 DBM_TO_MBM(chan->max_power)))
1188 goto nla_put_failure;
5dab3b8a 1189
50f32718
HD		 1190 if (large) {
1191 const struct ieee80211_reg_rule *rule =
b88d26d9 1192 freq_reg_info(wiphy, MHZ_TO_KHZ(chan->center_freq));
50f32718 1193
38cb87ee 1194 if (!IS_ERR_OR_NULL(rule) && rule->has_wmm) {
50f32718
HD		 1195 if (nl80211_msg_put_wmm_rules(msg, rule))
1196 goto nla_put_failure;
1197 }
1198 }
1199
5dab3b8a
LR		 1200 return 0;
1201
1202 nla_put_failure:
1203 return -ENOBUFS;
1204}
1205
52539ca8
THJ		 1206static bool nl80211_put_txq_stats(struct sk_buff *msg,
1207 struct cfg80211_txq_stats *txqstats,
1208 int attrtype)
1209{
1210 struct nlattr *txqattr;
1211
1212#define PUT_TXQVAL_U32(attr, memb) do { \
1213 if (txqstats->filled & BIT(NL80211_TXQ_STATS_ ## attr) && \
1214 nla_put_u32(msg, NL80211_TXQ_STATS_ ## attr, txqstats->memb)) \
1215 return false; \
1216 } while (0)
1217
ae0be8de 1218 txqattr = nla_nest_start_noflag(msg, attrtype);
52539ca8
THJ		 1219 if (!txqattr)
1220 return false;
1221
1222 PUT_TXQVAL_U32(BACKLOG_BYTES, backlog_bytes);
1223 PUT_TXQVAL_U32(BACKLOG_PACKETS, backlog_packets);
1224 PUT_TXQVAL_U32(FLOWS, flows);
1225 PUT_TXQVAL_U32(DROPS, drops);
1226 PUT_TXQVAL_U32(ECN_MARKS, ecn_marks);
1227 PUT_TXQVAL_U32(OVERLIMIT, overlimit);
1228 PUT_TXQVAL_U32(OVERMEMORY, overmemory);
1229 PUT_TXQVAL_U32(COLLISIONS, collisions);
1230 PUT_TXQVAL_U32(TX_BYTES, tx_bytes);
1231 PUT_TXQVAL_U32(TX_PACKETS, tx_packets);
1232 PUT_TXQVAL_U32(MAX_FLOWS, max_flows);
1233 nla_nest_end(msg, txqattr);
1234
1235#undef PUT_TXQVAL_U32
1236 return true;
1237}
1238
55682965
JB		 1239/* netlink command implementations */
1240
7b0a0e3c
JB		 1241/**
1242 * nl80211_link_id - return link ID
1243 * @attrs: attributes to look at
1244 *
1245 * Returns: the link ID or 0 if not given
1246 *
1247 * Note this function doesn't do any validation of the link
1248 * ID validity wrt. links that were actually added, so it must
1249 * be called only from ops with %NL80211_FLAG_MLO_VALID_LINK_ID
1250 * or if additional validation is done.
1251 */
1252static unsigned int nl80211_link_id(struct nlattr **attrs)
1253{
1254 struct nlattr *linkid = attrs[NL80211_ATTR_MLO_LINK_ID];
1255
1256 if (!linkid)
1257 return 0;
1258
1259 return nla_get_u8(linkid);
1260}
1261
1262static int nl80211_link_id_or_invalid(struct nlattr **attrs)
1263{
1264 struct nlattr *linkid = attrs[NL80211_ATTR_MLO_LINK_ID];
1265
1266 if (!linkid)
1267 return -1;
1268
1269 return nla_get_u8(linkid);
1270}
1271
b9454e83
JB		 1272struct key_parse {
1273 struct key_params p;
1274 int idx;
e31b8213 1275 int type;
56be393f 1276 bool def, defmgmt, defbeacon;
dbd2fd65 1277 bool def_uni, def_multi;
b9454e83
JB		 1278};
1279
768075eb
JB		 1280static int nl80211_parse_key_new(struct genl_info *info, struct nlattr *key,
1281 struct key_parse *k)
b9454e83
JB		 1282{
1283 struct nlattr *tb[NL80211_KEY_MAX + 1];
8cb08174
JB		 1284 int err = nla_parse_nested_deprecated(tb, NL80211_KEY_MAX, key,
1285 nl80211_key_policy,
1286 info->extack);
b9454e83
JB		 1287 if (err)
1288 return err;
1289
1290 k->def = !!tb[NL80211_KEY_DEFAULT];
1291 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
56be393f 1292 k->defbeacon = !!tb[NL80211_KEY_DEFAULT_BEACON];
b9454e83 1293
dbd2fd65
JB		 1294 if (k->def) {
1295 k->def_uni = true;
1296 k->def_multi = true;
1297 }
56be393f 1298 if (k->defmgmt || k->defbeacon)
dbd2fd65
JB		 1299 k->def_multi = true;
1300
b9454e83
JB		 1301 if (tb[NL80211_KEY_IDX])
1302 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
1303
1304 if (tb[NL80211_KEY_DATA]) {
1305 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
1306 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
1307 }
1308
1309 if (tb[NL80211_KEY_SEQ]) {
1310 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
1311 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
1312 }
1313
1314 if (tb[NL80211_KEY_CIPHER])
1315 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
1316
ab0d76f6 1317 if (tb[NL80211_KEY_TYPE])
e31b8213 1318 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
e31b8213 1319
dbd2fd65
JB		 1320 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
1321 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
7a087e74 1322
8cb08174
JB		 1323 err = nla_parse_nested_deprecated(kdt,
1324 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1325 tb[NL80211_KEY_DEFAULT_TYPES],
1326 nl80211_key_default_policy,
1327 info->extack);
dbd2fd65
JB		 1328 if (err)
1329 return err;
1330
1331 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1332 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1333 }
1334
6cdd3979
AW		 1335 if (tb[NL80211_KEY_MODE])
1336 k->p.mode = nla_get_u8(tb[NL80211_KEY_MODE]);
1337
b9454e83
JB		 1338 return 0;
1339}
1340
1341static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
1342{
1343 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
1344 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
1345 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
1346 }
1347
1348 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
1349 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
1350 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
1351 }
1352
1353 if (info->attrs[NL80211_ATTR_KEY_IDX])
1354 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1355
1356 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
1357 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
1358
1359 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
1360 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
1361
dbd2fd65
JB		 1362 if (k->def) {
1363 k->def_uni = true;
1364 k->def_multi = true;
1365 }
1366 if (k->defmgmt)
1367 k->def_multi = true;
1368
ab0d76f6 1369 if (info->attrs[NL80211_ATTR_KEY_TYPE])
e31b8213 1370 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
e31b8213 1371
dbd2fd65
JB		 1372 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
1373 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
8cb08174
JB		 1374 int err = nla_parse_nested_deprecated(kdt,
1375 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1376 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
1377 nl80211_key_default_policy,
1378 info->extack);
dbd2fd65
JB		 1379 if (err)
1380 return err;
1381
1382 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1383 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1384 }
1385
b9454e83
JB		 1386 return 0;
1387}
1388
1389static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
1390{
1391 int err;
1392
1393 memset(k, 0, sizeof(*k));
1394 k->idx = -1;
e31b8213 1395 k->type = -1;
b9454e83
JB		 1396
1397 if (info->attrs[NL80211_ATTR_KEY])
768075eb 1398 err = nl80211_parse_key_new(info, info->attrs[NL80211_ATTR_KEY], k);
b9454e83
JB		 1399 else
1400 err = nl80211_parse_key_old(info, k);
1401
1402 if (err)
1403 return err;
1404
56be393f
JM		 1405 if ((k->def ? 1 : 0) + (k->defmgmt ? 1 : 0) +
1406 (k->defbeacon ? 1 : 0) > 1) {
1407 GENL_SET_ERR_MSG(info,
1408 "key with multiple default flags is invalid");
b9454e83 1409 return -EINVAL;
768075eb 1410 }
b9454e83 1411
56be393f 1412 if (k->defmgmt || k->defbeacon) {
768075eb 1413 if (k->def_uni || !k->def_multi) {
56be393f
JM		 1414 GENL_SET_ERR_MSG(info,
1415 "defmgmt/defbeacon key must be mcast");
dbd2fd65 1416 return -EINVAL;
768075eb 1417 }
dbd2fd65
JB		 1418 }
1419
b9454e83
JB		 1420 if (k->idx != -1) {
1421 if (k->defmgmt) {
768075eb
JB		 1422 if (k->idx < 4 || k->idx > 5) {
1423 GENL_SET_ERR_MSG(info,
1424 "defmgmt key idx not 4 or 5");
b9454e83 1425 return -EINVAL;
768075eb 1426 }
56be393f
JM		 1427 } else if (k->defbeacon) {
1428 if (k->idx < 6 || k->idx > 7) {
1429 GENL_SET_ERR_MSG(info,
1430 "defbeacon key idx not 6 or 7");
1431 return -EINVAL;
1432 }
b9454e83 1433 } else if (k->def) {
768075eb
JB		 1434 if (k->idx < 0 || k->idx > 3) {
1435 GENL_SET_ERR_MSG(info, "def key idx not 0-3");
b9454e83 1436 return -EINVAL;
768075eb 1437 }
b9454e83 1438 } else {
56be393f
JM		 1439 if (k->idx < 0 || k->idx > 7) {
1440 GENL_SET_ERR_MSG(info, "key idx not 0-7");
b9454e83 1441 return -EINVAL;
768075eb 1442 }
b9454e83
JB		 1443 }
1444 }
1445
1446 return 0;
1447}
1448
fffd0934
JB		 1449static struct cfg80211_cached_keys *
1450nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
768075eb 1451 struct genl_info *info, bool *no_ht)
fffd0934 1452{
768075eb 1453 struct nlattr *keys = info->attrs[NL80211_ATTR_KEYS];
fffd0934
JB		 1454 struct key_parse parse;
1455 struct nlattr *key;
1456 struct cfg80211_cached_keys *result;
1457 int rem, err, def = 0;
f1c1f17a
JB		 1458 bool have_key = false;
1459
1460 nla_for_each_nested(key, keys, rem) {
1461 have_key = true;
1462 break;
1463 }
1464
1465 if (!have_key)
1466 return NULL;
fffd0934
JB		 1467
1468 result = kzalloc(sizeof(*result), GFP_KERNEL);
1469 if (!result)
1470 return ERR_PTR(-ENOMEM);
1471
1472 result->def = -1;
fffd0934
JB		 1473
1474 nla_for_each_nested(key, keys, rem) {
1475 memset(&parse, 0, sizeof(parse));
1476 parse.idx = -1;
1477
768075eb 1478 err = nl80211_parse_key_new(info, key, &parse);
fffd0934
JB		 1479 if (err)
1480 goto error;
1481 err = -EINVAL;
1482 if (!parse.p.key)
1483 goto error;
768075eb
JB		 1484 if (parse.idx < 0 || parse.idx > 3) {
1485 GENL_SET_ERR_MSG(info, "key index out of range [0-3]");
fffd0934 1486 goto error;
768075eb 1487 }
fffd0934 1488 if (parse.def) {
768075eb
JB		 1489 if (def) {
1490 GENL_SET_ERR_MSG(info,
1491 "only one key can be default");
fffd0934 1492 goto error;
768075eb 1493 }
fffd0934
JB		 1494 def = 1;
1495 result->def = parse.idx;
dbd2fd65
JB		 1496 if (!parse.def_uni || !parse.def_multi)
1497 goto error;
fffd0934
JB		 1498 } else if (parse.defmgmt)
1499 goto error;
1500 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 1501 parse.idx, false, NULL);
fffd0934
JB		 1502 if (err)
1503 goto error;
386b1f27
JB		 1504 if (parse.p.cipher != WLAN_CIPHER_SUITE_WEP40 &&
1505 parse.p.cipher != WLAN_CIPHER_SUITE_WEP104) {
768075eb 1506 GENL_SET_ERR_MSG(info, "connect key must be WEP");
386b1f27
JB		 1507 err = -EINVAL;
1508 goto error;
1509 }
fffd0934
JB		 1510 result->params[parse.idx].cipher = parse.p.cipher;
1511 result->params[parse.idx].key_len = parse.p.key_len;
1512 result->params[parse.idx].key = result->data[parse.idx];
1513 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee 1514
386b1f27
JB		 1515 /* must be WEP key if we got here */
1516 if (no_ht)
1517 *no_ht = true;
fffd0934
JB		 1518 }
1519
f1c1f17a
JB		 1520 if (result->def < 0) {
1521 err = -EINVAL;
768075eb 1522 GENL_SET_ERR_MSG(info, "need a default/TX key");
f1c1f17a
JB		 1523 goto error;
1524 }
1525
fffd0934
JB		 1526 return result;
1527 error:
1528 kfree(result);
1529 return ERR_PTR(err);
1530}
1531
1532static int nl80211_key_allowed(struct wireless_dev *wdev)
1533{
1534 ASSERT_WDEV_LOCK(wdev);
1535
fffd0934
JB		 1536 switch (wdev->iftype) {
1537 case NL80211_IFTYPE_AP:
1538 case NL80211_IFTYPE_AP_VLAN:
074ac8df 1539 case NL80211_IFTYPE_P2P_GO:
ff973af7 1540 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 1541 break;
1542 case NL80211_IFTYPE_ADHOC:
7b0a0e3c
JB		 1543 if (wdev->u.ibss.current_bss)
1544 return 0;
1545 return -ENOLINK;
fffd0934 1546 case NL80211_IFTYPE_STATION:
074ac8df 1547 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c
JB		 1548 /* for MLO, require driver validation of the link ID */
1549 if (wdev->connected)
1550 return 0;
1551 return -ENOLINK;
de4fcbad 1552 case NL80211_IFTYPE_UNSPECIFIED:
6e0bd6c3 1553 case NL80211_IFTYPE_OCB:
de4fcbad 1554 case NL80211_IFTYPE_MONITOR:
cb3b7d87 1555 case NL80211_IFTYPE_NAN:
de4fcbad
JB		 1556 case NL80211_IFTYPE_P2P_DEVICE:
1557 case NL80211_IFTYPE_WDS:
1558 case NUM_NL80211_IFTYPES:
fffd0934
JB		 1559 return -EINVAL;
1560 }
1561
1562 return 0;
1563}
1564
664834de 1565static struct ieee80211_channel *nl80211_get_valid_chan(struct wiphy *wiphy,
942ba88b 1566 u32 freq)
664834de
JM		 1567{
1568 struct ieee80211_channel *chan;
1569
942ba88b 1570 chan = ieee80211_get_channel_khz(wiphy, freq);
664834de
JM		 1571 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
1572 return NULL;
1573 return chan;
1574}
1575
7527a782
JB		 1576static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
1577{
ae0be8de 1578 struct nlattr *nl_modes = nla_nest_start_noflag(msg, attr);
7527a782
JB		 1579 int i;
1580
1581 if (!nl_modes)
1582 goto nla_put_failure;
1583
1584 i = 0;
1585 while (ifmodes) {
9360ffd1
DM		 1586 if ((ifmodes & 1) && nla_put_flag(msg, i))
1587 goto nla_put_failure;
7527a782
JB		 1588 ifmodes >>= 1;
1589 i++;
1590 }
1591
1592 nla_nest_end(msg, nl_modes);
1593 return 0;
1594
1595nla_put_failure:
1596 return -ENOBUFS;
1597}
1598
1599static int nl80211_put_iface_combinations(struct wiphy *wiphy,
cdc89b97
JB		 1600 struct sk_buff *msg,
1601 bool large)
7527a782
JB		 1602{
1603 struct nlattr *nl_combis;
1604 int i, j;
1605
ae0be8de
MK		 1606 nl_combis = nla_nest_start_noflag(msg,
1607 NL80211_ATTR_INTERFACE_COMBINATIONS);
7527a782
JB		 1608 if (!nl_combis)
1609 goto nla_put_failure;
1610
1611 for (i = 0; i < wiphy->n_iface_combinations; i++) {
1612 const struct ieee80211_iface_combination *c;
1613 struct nlattr *nl_combi, *nl_limits;
1614
1615 c = &wiphy->iface_combinations[i];
1616
ae0be8de 1617 nl_combi = nla_nest_start_noflag(msg, i + 1);
7527a782
JB		 1618 if (!nl_combi)
1619 goto nla_put_failure;
1620
ae0be8de
MK		 1621 nl_limits = nla_nest_start_noflag(msg,
1622 NL80211_IFACE_COMB_LIMITS);
7527a782
JB		 1623 if (!nl_limits)
1624 goto nla_put_failure;
1625
1626 for (j = 0; j < c->n_limits; j++) {
1627 struct nlattr *nl_limit;
1628
ae0be8de 1629 nl_limit = nla_nest_start_noflag(msg, j + 1);
7527a782
JB		 1630 if (!nl_limit)
1631 goto nla_put_failure;
9360ffd1
DM		 1632 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
1633 c->limits[j].max))
1634 goto nla_put_failure;
7527a782
JB		 1635 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
1636 c->limits[j].types))
1637 goto nla_put_failure;
1638 nla_nest_end(msg, nl_limit);
1639 }
1640
1641 nla_nest_end(msg, nl_limits);
1642
9360ffd1
DM		 1643 if (c->beacon_int_infra_match &&
1644 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
1645 goto nla_put_failure;
1646 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
1647 c->num_different_channels) ||
1648 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
1649 c->max_interfaces))
1650 goto nla_put_failure;
cdc89b97 1651 if (large &&
8c48b50a
FF		 1652 (nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
1653 c->radar_detect_widths) ||
1654 nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_REGIONS,
1655 c->radar_detect_regions)))
cdc89b97 1656 goto nla_put_failure;
0c317a02
PK		 1657 if (c->beacon_int_min_gcd &&
1658 nla_put_u32(msg, NL80211_IFACE_COMB_BI_MIN_GCD,
1659 c->beacon_int_min_gcd))
1660 goto nla_put_failure;
7527a782
JB		 1661
1662 nla_nest_end(msg, nl_combi);
1663 }
1664
1665 nla_nest_end(msg, nl_combis);
1666
1667 return 0;
1668nla_put_failure:
1669 return -ENOBUFS;
1670}
1671
3713b4e3 1672#ifdef CONFIG_PM
b56cf720
JB		 1673static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
1674 struct sk_buff *msg)
1675{
964dc9e2 1676 const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan->tcp;
b56cf720
JB		 1677 struct nlattr *nl_tcp;
1678
1679 if (!tcp)
1680 return 0;
1681
ae0be8de
MK		 1682 nl_tcp = nla_nest_start_noflag(msg,
1683 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
b56cf720
JB		 1684 if (!nl_tcp)
1685 return -ENOBUFS;
1686
1687 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1688 tcp->data_payload_max))
1689 return -ENOBUFS;
1690
1691 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1692 tcp->data_payload_max))
1693 return -ENOBUFS;
1694
1695 if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
1696 return -ENOBUFS;
1697
1698 if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
1699 sizeof(*tcp->tok), tcp->tok))
1700 return -ENOBUFS;
1701
1702 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
1703 tcp->data_interval_max))
1704 return -ENOBUFS;
1705
1706 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
1707 tcp->wake_payload_max))
1708 return -ENOBUFS;
1709
1710 nla_nest_end(msg, nl_tcp);
1711 return 0;
1712}
1713
3713b4e3 1714static int nl80211_send_wowlan(struct sk_buff *msg,
1b8ec87a 1715 struct cfg80211_registered_device *rdev,
b56cf720 1716 bool large)
55682965 1717{
3713b4e3 1718 struct nlattr *nl_wowlan;
55682965 1719
1b8ec87a 1720 if (!rdev->wiphy.wowlan)
3713b4e3 1721 return 0;
55682965 1722
ae0be8de
MK		 1723 nl_wowlan = nla_nest_start_noflag(msg,
1724 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
3713b4e3
JB		 1725 if (!nl_wowlan)
1726 return -ENOBUFS;
9360ffd1 1727
1b8ec87a 1728 if (((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_ANY) &&
3713b4e3 1729 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1b8ec87a 1730 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_DISCONNECT) &&
3713b4e3 1731 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1b8ec87a 1732 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT) &&
3713b4e3 1733 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1b8ec87a 1734 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
3713b4e3 1735 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1b8ec87a 1736 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
3713b4e3 1737 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1b8ec87a 1738 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
3713b4e3 1739 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1b8ec87a 1740 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
3713b4e3 1741 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1b8ec87a 1742 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
3713b4e3
JB		 1743 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1744 return -ENOBUFS;
9360ffd1 1745
1b8ec87a 1746 if (rdev->wiphy.wowlan->n_patterns) {
50ac6607 1747 struct nl80211_pattern_support pat = {
1b8ec87a
ZG		 1748 .max_patterns = rdev->wiphy.wowlan->n_patterns,
1749 .min_pattern_len = rdev->wiphy.wowlan->pattern_min_len,
1750 .max_pattern_len = rdev->wiphy.wowlan->pattern_max_len,
1751 .max_pkt_offset = rdev->wiphy.wowlan->max_pkt_offset,
3713b4e3 1752 };
9360ffd1 1753
3713b4e3
JB		 1754 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1755 sizeof(pat), &pat))
1756 return -ENOBUFS;
1757 }
9360ffd1 1758
75453ccb
LC		 1759 if ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_NET_DETECT) &&
1760 nla_put_u32(msg, NL80211_WOWLAN_TRIG_NET_DETECT,
1761 rdev->wiphy.wowlan->max_nd_match_sets))
1762 return -ENOBUFS;
1763
1b8ec87a 1764 if (large && nl80211_send_wowlan_tcp_caps(rdev, msg))
b56cf720
JB		 1765 return -ENOBUFS;
1766
3713b4e3 1767 nla_nest_end(msg, nl_wowlan);
9360ffd1 1768
3713b4e3
JB		 1769 return 0;
1770}
1771#endif
9360ffd1 1772
be29b99a 1773static int nl80211_send_coalesce(struct sk_buff *msg,
1b8ec87a 1774 struct cfg80211_registered_device *rdev)
be29b99a
AK		 1775{
1776 struct nl80211_coalesce_rule_support rule;
1777
1b8ec87a 1778 if (!rdev->wiphy.coalesce)
be29b99a
AK		 1779 return 0;
1780
1b8ec87a
ZG		 1781 rule.max_rules = rdev->wiphy.coalesce->n_rules;
1782 rule.max_delay = rdev->wiphy.coalesce->max_delay;
1783 rule.pat.max_patterns = rdev->wiphy.coalesce->n_patterns;
1784 rule.pat.min_pattern_len = rdev->wiphy.coalesce->pattern_min_len;
1785 rule.pat.max_pattern_len = rdev->wiphy.coalesce->pattern_max_len;
1786 rule.pat.max_pkt_offset = rdev->wiphy.coalesce->max_pkt_offset;
be29b99a
AK		 1787
1788 if (nla_put(msg, NL80211_ATTR_COALESCE_RULE, sizeof(rule), &rule))
1789 return -ENOBUFS;
1790
1791 return 0;
1792}
1793
c4cbaf79
LC		 1794static int
1795nl80211_send_iftype_data(struct sk_buff *msg,
22395217 1796 const struct ieee80211_supported_band *sband,
c4cbaf79
LC		 1797 const struct ieee80211_sband_iftype_data *iftdata)
1798{
1799 const struct ieee80211_sta_he_cap *he_cap = &iftdata->he_cap;
5cd5a8a3 1800 const struct ieee80211_sta_eht_cap *eht_cap = &iftdata->eht_cap;
c4cbaf79
LC		 1801
1802 if (nl80211_put_iftypes(msg, NL80211_BAND_IFTYPE_ATTR_IFTYPES,
1803 iftdata->types_mask))
1804 return -ENOBUFS;
1805
1806 if (he_cap->has_he) {
1807 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MAC,
1808 sizeof(he_cap->he_cap_elem.mac_cap_info),
1809 he_cap->he_cap_elem.mac_cap_info) ||
1810 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PHY,
1811 sizeof(he_cap->he_cap_elem.phy_cap_info),
1812 he_cap->he_cap_elem.phy_cap_info) ||
1813 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET,
1814 sizeof(he_cap->he_mcs_nss_supp),
1815 &he_cap->he_mcs_nss_supp) ||
1816 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PPE,
1817 sizeof(he_cap->ppe_thres), he_cap->ppe_thres))
1818 return -ENOBUFS;
1819 }
1820
5cd5a8a3
IP		 1821 if (eht_cap->has_eht && he_cap->has_he) {
1822 u8 mcs_nss_size, ppe_thresh_size;
1823 u16 ppe_thres_hdr;
1824
1825 mcs_nss_size =
1826 ieee80211_eht_mcs_nss_size(&he_cap->he_cap_elem,
1827 &eht_cap->eht_cap_elem);
1828
1829 ppe_thres_hdr = get_unaligned_le16(&eht_cap->eht_ppe_thres[0]);
1830 ppe_thresh_size =
1831 ieee80211_eht_ppe_size(ppe_thres_hdr,
1832 eht_cap->eht_cap_elem.phy_cap_info);
1833
1834 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_MAC,
1835 sizeof(eht_cap->eht_cap_elem.mac_cap_info),
1836 eht_cap->eht_cap_elem.mac_cap_info) ||
1837 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_PHY,
1838 sizeof(eht_cap->eht_cap_elem.phy_cap_info),
1839 eht_cap->eht_cap_elem.phy_cap_info) ||
1840 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_MCS_SET,
1841 mcs_nss_size, &eht_cap->eht_mcs_nss_supp) ||
1842 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_EHT_CAP_PPE,
1843 ppe_thresh_size, eht_cap->eht_ppe_thres))
1844 return -ENOBUFS;
1845 }
1846
22395217
JB		 1847 if (sband->band == NL80211_BAND_6GHZ &&
1848 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_6GHZ_CAPA,
1849 sizeof(iftdata->he_6ghz_capa),
1850 &iftdata->he_6ghz_capa))
1851 return -ENOBUFS;
1852
f4f86505
JB		 1853 if (iftdata->vendor_elems.data && iftdata->vendor_elems.len &&
1854 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_VENDOR_ELEMS,
1855 iftdata->vendor_elems.len, iftdata->vendor_elems.data))
1856 return -ENOBUFS;
1857
c4cbaf79
LC		 1858 return 0;
1859}
1860
3713b4e3 1861static int nl80211_send_band_rateinfo(struct sk_buff *msg,
f8d504ca
JB		 1862 struct ieee80211_supported_band *sband,
1863 bool large)
3713b4e3
JB		 1864{
1865 struct nlattr *nl_rates, *nl_rate;
1866 struct ieee80211_rate *rate;
1867 int i;
87bbbe22 1868
3713b4e3
JB		 1869 /* add HT info */
1870 if (sband->ht_cap.ht_supported &&
1871 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1872 sizeof(sband->ht_cap.mcs),
1873 &sband->ht_cap.mcs) ||
1874 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1875 sband->ht_cap.cap) ||
1876 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1877 sband->ht_cap.ampdu_factor) ||
1878 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1879 sband->ht_cap.ampdu_density)))
1880 return -ENOBUFS;
afe0cbf8 1881
3713b4e3
JB		 1882 /* add VHT info */
1883 if (sband->vht_cap.vht_supported &&
1884 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1885 sizeof(sband->vht_cap.vht_mcs),
1886 &sband->vht_cap.vht_mcs) ||
1887 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1888 sband->vht_cap.cap)))
1889 return -ENOBUFS;
f59ac048 1890
f8d504ca 1891 if (large && sband->n_iftype_data) {
c4cbaf79 1892 struct nlattr *nl_iftype_data =
ae0be8de
MK		 1893 nla_nest_start_noflag(msg,
1894 NL80211_BAND_ATTR_IFTYPE_DATA);
c4cbaf79
LC		 1895 int err;
1896
1897 if (!nl_iftype_data)
1898 return -ENOBUFS;
1899
1900 for (i = 0; i < sband->n_iftype_data; i++) {
1901 struct nlattr *iftdata;
1902
ae0be8de 1903 iftdata = nla_nest_start_noflag(msg, i + 1);
c4cbaf79
LC		 1904 if (!iftdata)
1905 return -ENOBUFS;
1906
22395217 1907 err = nl80211_send_iftype_data(msg, sband,
c4cbaf79
LC		 1908 &sband->iftype_data[i]);
1909 if (err)
1910 return err;
1911
1912 nla_nest_end(msg, iftdata);
1913 }
1914
1915 nla_nest_end(msg, nl_iftype_data);
1916 }
1917
2a38075c 1918 /* add EDMG info */
f8d504ca 1919 if (large && sband->edmg_cap.channels &&
2a38075c
AAL		 1920 (nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_CHANNELS,
1921 sband->edmg_cap.channels) ||
1922 nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_BW_CONFIG,
1923 sband->edmg_cap.bw_config)))
1924
1925 return -ENOBUFS;
1926
3713b4e3 1927 /* add bitrates */
ae0be8de 1928 nl_rates = nla_nest_start_noflag(msg, NL80211_BAND_ATTR_RATES);
3713b4e3
JB		 1929 if (!nl_rates)
1930 return -ENOBUFS;
ee688b00 1931
3713b4e3 1932 for (i = 0; i < sband->n_bitrates; i++) {
ae0be8de 1933 nl_rate = nla_nest_start_noflag(msg, i);
3713b4e3
JB		 1934 if (!nl_rate)
1935 return -ENOBUFS;
ee688b00 1936
3713b4e3
JB		 1937 rate = &sband->bitrates[i];
1938 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1939 rate->bitrate))
1940 return -ENOBUFS;
1941 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1942 nla_put_flag(msg,
1943 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1944 return -ENOBUFS;
ee688b00 1945
3713b4e3
JB		 1946 nla_nest_end(msg, nl_rate);
1947 }
d51626df 1948
3713b4e3 1949 nla_nest_end(msg, nl_rates);
bf0c111e 1950
3713b4e3
JB		 1951 return 0;
1952}
ee688b00 1953
3713b4e3
JB		 1954static int
1955nl80211_send_mgmt_stypes(struct sk_buff *msg,
1956 const struct ieee80211_txrx_stypes *mgmt_stypes)
1957{
1958 u16 stypes;
1959 struct nlattr *nl_ftypes, *nl_ifs;
1960 enum nl80211_iftype ift;
1961 int i;
ee688b00 1962
3713b4e3
JB		 1963 if (!mgmt_stypes)
1964 return 0;
5dab3b8a 1965
ae0be8de 1966 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_TX_FRAME_TYPES);
3713b4e3
JB		 1967 if (!nl_ifs)
1968 return -ENOBUFS;
e2f367f2 1969
3713b4e3 1970 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1971 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1972 if (!nl_ftypes)
1973 return -ENOBUFS;
1974 i = 0;
1975 stypes = mgmt_stypes[ift].tx;
1976 while (stypes) {
1977 if ((stypes & 1) &&
1978 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1979 (i << 4) | IEEE80211_FTYPE_MGMT))
1980 return -ENOBUFS;
1981 stypes >>= 1;
1982 i++;
ee688b00 1983 }
3713b4e3
JB		 1984 nla_nest_end(msg, nl_ftypes);
1985 }
ee688b00 1986
3713b4e3 1987 nla_nest_end(msg, nl_ifs);
ee688b00 1988
ae0be8de 1989 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_RX_FRAME_TYPES);
3713b4e3
JB		 1990 if (!nl_ifs)
1991 return -ENOBUFS;
ee688b00 1992
3713b4e3 1993 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1994 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1995 if (!nl_ftypes)
1996 return -ENOBUFS;
1997 i = 0;
1998 stypes = mgmt_stypes[ift].rx;
1999 while (stypes) {
2000 if ((stypes & 1) &&
2001 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
2002 (i << 4) | IEEE80211_FTYPE_MGMT))
2003 return -ENOBUFS;
2004 stypes >>= 1;
2005 i++;
2006 }
2007 nla_nest_end(msg, nl_ftypes);
2008 }
2009 nla_nest_end(msg, nl_ifs);
ee688b00 2010
3713b4e3
JB		 2011 return 0;
2012}
ee688b00 2013
1794899e
JB		 2014#define CMD(op, n) \
2015 do { \
2016 if (rdev->ops->op) { \
2017 i++; \
2018 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
2019 goto nla_put_failure; \
2020 } \
2021 } while (0)
2022
2023static int nl80211_add_commands_unsplit(struct cfg80211_registered_device *rdev,
2024 struct sk_buff *msg)
2025{
2026 int i = 0;
2027
2028 /*
2029 * do *NOT* add anything into this function, new things need to be
2030 * advertised only to new versions of userspace that can deal with
2031 * the split (and they can't possibly care about new features...
2032 */
2033 CMD(add_virtual_intf, NEW_INTERFACE);
2034 CMD(change_virtual_intf, SET_INTERFACE);
2035 CMD(add_key, NEW_KEY);
2036 CMD(start_ap, START_AP);
2037 CMD(add_station, NEW_STATION);
2038 CMD(add_mpath, NEW_MPATH);
2039 CMD(update_mesh_config, SET_MESH_CONFIG);
2040 CMD(change_bss, SET_BSS);
2041 CMD(auth, AUTHENTICATE);
2042 CMD(assoc, ASSOCIATE);
2043 CMD(deauth, DEAUTHENTICATE);
2044 CMD(disassoc, DISASSOCIATE);
2045 CMD(join_ibss, JOIN_IBSS);
2046 CMD(join_mesh, JOIN_MESH);
2047 CMD(set_pmksa, SET_PMKSA);
2048 CMD(del_pmksa, DEL_PMKSA);
2049 CMD(flush_pmksa, FLUSH_PMKSA);
2050 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
2051 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
2052 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2053 CMD(mgmt_tx, FRAME);
2054 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
2055 if (rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
2056 i++;
2057 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
2058 goto nla_put_failure;
2059 }
2060 if (rdev->ops->set_monitor_channel || rdev->ops->start_ap ||
2061 rdev->ops->join_mesh) {
2062 i++;
2063 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
2064 goto nla_put_failure;
2065 }
1794899e
JB		 2066 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
2067 CMD(tdls_mgmt, TDLS_MGMT);
2068 CMD(tdls_oper, TDLS_OPER);
2069 }
ca986ad9 2070 if (rdev->wiphy.max_sched_scan_reqs)
1794899e
JB		 2071 CMD(sched_scan_start, START_SCHED_SCAN);
2072 CMD(probe_client, PROBE_CLIENT);
2073 CMD(set_noack_map, SET_NOACK_MAP);
2074 if (rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
2075 i++;
2076 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
2077 goto nla_put_failure;
2078 }
2079 CMD(start_p2p_device, START_P2P_DEVICE);
2080 CMD(set_mcast_rate, SET_MCAST_RATE);
2081#ifdef CONFIG_NL80211_TESTMODE
2082 CMD(testmode_cmd, TESTMODE);
2083#endif
2084
2085 if (rdev->ops->connect || rdev->ops->auth) {
2086 i++;
2087 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
2088 goto nla_put_failure;
2089 }
2090
2091 if (rdev->ops->disconnect || rdev->ops->deauth) {
2092 i++;
2093 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
2094 goto nla_put_failure;
2095 }
2096
2097 return i;
2098 nla_put_failure:
2099 return -ENOBUFS;
2100}
2101
9bb7e0f2
JB		 2102static int
2103nl80211_send_pmsr_ftm_capa(const struct cfg80211_pmsr_capabilities *cap,
2104 struct sk_buff *msg)
2105{
2106 struct nlattr *ftm;
2107
2108 if (!cap->ftm.supported)
2109 return 0;
2110
ae0be8de 2111 ftm = nla_nest_start_noflag(msg, NL80211_PMSR_TYPE_FTM);
9bb7e0f2
JB		 2112 if (!ftm)
2113 return -ENOBUFS;
2114
2115 if (cap->ftm.asap && nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_ASAP))
2116 return -ENOBUFS;
2117 if (cap->ftm.non_asap &&
2118 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP))
2119 return -ENOBUFS;
2120 if (cap->ftm.request_lci &&
2121 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI))
2122 return -ENOBUFS;
2123 if (cap->ftm.request_civicloc &&
2124 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC))
2125 return -ENOBUFS;
2126 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES,
2127 cap->ftm.preambles))
2128 return -ENOBUFS;
2129 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS,
2130 cap->ftm.bandwidths))
2131 return -ENOBUFS;
2132 if (cap->ftm.max_bursts_exponent >= 0 &&
2133 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT,
2134 cap->ftm.max_bursts_exponent))
2135 return -ENOBUFS;
2136 if (cap->ftm.max_ftms_per_burst &&
2137 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST,
2138 cap->ftm.max_ftms_per_burst))
2139 return -ENOBUFS;
efb5520d
AS		 2140 if (cap->ftm.trigger_based &&
2141 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED))
2142 return -ENOBUFS;
2143 if (cap->ftm.non_trigger_based &&
2144 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED))
2145 return -ENOBUFS;
9bb7e0f2
JB		 2146
2147 nla_nest_end(msg, ftm);
2148 return 0;
2149}
2150
2151static int nl80211_send_pmsr_capa(struct cfg80211_registered_device *rdev,
2152 struct sk_buff *msg)
2153{
2154 const struct cfg80211_pmsr_capabilities *cap = rdev->wiphy.pmsr_capa;
2155 struct nlattr *pmsr, *caps;
2156
2157 if (!cap)
2158 return 0;
2159
2160 /*
2161 * we don't need to clean up anything here since the caller
2162 * will genlmsg_cancel() if we fail
2163 */
2164
ae0be8de 2165 pmsr = nla_nest_start_noflag(msg, NL80211_ATTR_PEER_MEASUREMENTS);
9bb7e0f2
JB		 2166 if (!pmsr)
2167 return -ENOBUFS;
2168
2169 if (nla_put_u32(msg, NL80211_PMSR_ATTR_MAX_PEERS, cap->max_peers))
2170 return -ENOBUFS;
2171
2172 if (cap->report_ap_tsf &&
2173 nla_put_flag(msg, NL80211_PMSR_ATTR_REPORT_AP_TSF))
2174 return -ENOBUFS;
2175
2176 if (cap->randomize_mac_addr &&
2177 nla_put_flag(msg, NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR))
2178 return -ENOBUFS;
2179
ae0be8de 2180 caps = nla_nest_start_noflag(msg, NL80211_PMSR_ATTR_TYPE_CAPA);
9bb7e0f2
JB		 2181 if (!caps)
2182 return -ENOBUFS;
2183
2184 if (nl80211_send_pmsr_ftm_capa(cap, msg))
2185 return -ENOBUFS;
2186
2187 nla_nest_end(msg, caps);
2188 nla_nest_end(msg, pmsr);
2189
2190 return 0;
2191}
2192
d6039a34
VJ		 2193static int
2194nl80211_put_iftype_akm_suites(struct cfg80211_registered_device *rdev,
2195 struct sk_buff *msg)
2196{
2197 int i;
2198 struct nlattr *nested, *nested_akms;
2199 const struct wiphy_iftype_akm_suites *iftype_akms;
2200
2201 if (!rdev->wiphy.num_iftype_akm_suites ||
2202 !rdev->wiphy.iftype_akm_suites)
2203 return 0;
2204
2205 nested = nla_nest_start(msg, NL80211_ATTR_IFTYPE_AKM_SUITES);
2206 if (!nested)
2207 return -ENOBUFS;
2208
2209 for (i = 0; i < rdev->wiphy.num_iftype_akm_suites; i++) {
2210 nested_akms = nla_nest_start(msg, i + 1);
2211 if (!nested_akms)
2212 return -ENOBUFS;
2213
2214 iftype_akms = &rdev->wiphy.iftype_akm_suites[i];
2215
2216 if (nl80211_put_iftypes(msg, NL80211_IFTYPE_AKM_ATTR_IFTYPES,
2217 iftype_akms->iftypes_mask))
2218 return -ENOBUFS;
2219
2220 if (nla_put(msg, NL80211_IFTYPE_AKM_ATTR_SUITES,
2221 sizeof(u32) * iftype_akms->n_akm_suites,
2222 iftype_akms->akm_suites)) {
2223 return -ENOBUFS;
2224 }
2225 nla_nest_end(msg, nested_akms);
2226 }
2227
2228 nla_nest_end(msg, nested);
2229
2230 return 0;
2231}
2232
3710a8a6
JB		 2233static int
2234nl80211_put_tid_config_support(struct cfg80211_registered_device *rdev,
2235 struct sk_buff *msg)
2236{
2237 struct nlattr *supp;
2238
2239 if (!rdev->wiphy.tid_config_support.vif &&
2240 !rdev->wiphy.tid_config_support.peer)
2241 return 0;
2242
2243 supp = nla_nest_start(msg, NL80211_ATTR_TID_CONFIG);
2244 if (!supp)
2245 return -ENOSPC;
2246
2247 if (rdev->wiphy.tid_config_support.vif &&
2248 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_VIF_SUPP,
2249 rdev->wiphy.tid_config_support.vif,
2250 NL80211_TID_CONFIG_ATTR_PAD))
2251 goto fail;
2252
2253 if (rdev->wiphy.tid_config_support.peer &&
2254 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_PEER_SUPP,
2255 rdev->wiphy.tid_config_support.peer,
2256 NL80211_TID_CONFIG_ATTR_PAD))
2257 goto fail;
2258
6a21d16c
T		 2259 /* for now we just use the same value ... makes more sense */
2260 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_SHORT,
2261 rdev->wiphy.tid_config_support.max_retry))
2262 goto fail;
2263 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_LONG,
2264 rdev->wiphy.tid_config_support.max_retry))
2265 goto fail;
2266
3710a8a6
JB		 2267 nla_nest_end(msg, supp);
2268
2269 return 0;
2270fail:
2271 nla_nest_cancel(msg, supp);
2272 return -ENOBUFS;
2273}
2274
6bdb68ce
CH		 2275static int
2276nl80211_put_sar_specs(struct cfg80211_registered_device *rdev,
2277 struct sk_buff *msg)
2278{
2279 struct nlattr *sar_capa, *specs, *sub_freq_range;
2280 u8 num_freq_ranges;
2281 int i;
2282
2283 if (!rdev->wiphy.sar_capa)
2284 return 0;
2285
2286 num_freq_ranges = rdev->wiphy.sar_capa->num_freq_ranges;
2287
2288 sar_capa = nla_nest_start(msg, NL80211_ATTR_SAR_SPEC);
2289 if (!sar_capa)
2290 return -ENOSPC;
2291
2292 if (nla_put_u32(msg, NL80211_SAR_ATTR_TYPE, rdev->wiphy.sar_capa->type))
2293 goto fail;
2294
2295 specs = nla_nest_start(msg, NL80211_SAR_ATTR_SPECS);
2296 if (!specs)
2297 goto fail;
2298
2299 /* report supported freq_ranges */
2300 for (i = 0; i < num_freq_ranges; i++) {
2301 sub_freq_range = nla_nest_start(msg, i + 1);
2302 if (!sub_freq_range)
2303 goto fail;
2304
2305 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_START_FREQ,
2306 rdev->wiphy.sar_capa->freq_ranges[i].start_freq))
2307 goto fail;
2308
2309 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_END_FREQ,
2310 rdev->wiphy.sar_capa->freq_ranges[i].end_freq))
2311 goto fail;
2312
2313 nla_nest_end(msg, sub_freq_range);
2314 }
2315
2316 nla_nest_end(msg, specs);
2317 nla_nest_end(msg, sar_capa);
2318
2319 return 0;
2320fail:
2321 nla_nest_cancel(msg, sar_capa);
2322 return -ENOBUFS;
2323}
2324
dc1e3cb8
JC		 2325static int nl80211_put_mbssid_support(struct wiphy *wiphy, struct sk_buff *msg)
2326{
2327 struct nlattr *config;
2328
2329 if (!wiphy->mbssid_max_interfaces)
2330 return 0;
2331
2332 config = nla_nest_start(msg, NL80211_ATTR_MBSSID_CONFIG);
2333 if (!config)
2334 return -ENOBUFS;
2335
2336 if (nla_put_u8(msg, NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES,
2337 wiphy->mbssid_max_interfaces))
2338 goto fail;
2339
2340 if (wiphy->ema_max_profile_periodicity &&
2341 nla_put_u8(msg,
2342 NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY,
2343 wiphy->ema_max_profile_periodicity))
2344 goto fail;
2345
2346 nla_nest_end(msg, config);
2347 return 0;
2348
2349fail:
2350 nla_nest_cancel(msg, config);
2351 return -ENOBUFS;
2352}
2353
86e8cf98
JB		 2354struct nl80211_dump_wiphy_state {
2355 s64 filter_wiphy;
2356 long start;
019ae3a9 2357 long split_start, band_start, chan_start, capa_start;
86e8cf98
JB		 2358 bool split;
2359};
2360
1b8ec87a 2361static int nl80211_send_wiphy(struct cfg80211_registered_device *rdev,
3bb20556 2362 enum nl80211_commands cmd,
3713b4e3 2363 struct sk_buff *msg, u32 portid, u32 seq,
86e8cf98 2364 int flags, struct nl80211_dump_wiphy_state *state)
3713b4e3
JB		 2365{
2366 void *hdr;
2367 struct nlattr *nl_bands, *nl_band;
2368 struct nlattr *nl_freqs, *nl_freq;
2369 struct nlattr *nl_cmds;
57fbcce3 2370 enum nl80211_band band;
3713b4e3
JB		 2371 struct ieee80211_channel *chan;
2372 int i;
2373 const struct ieee80211_txrx_stypes *mgmt_stypes =
1b8ec87a 2374 rdev->wiphy.mgmt_stypes;
fe1abafd 2375 u32 features;
ee688b00 2376
3bb20556 2377 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
3713b4e3
JB		 2378 if (!hdr)
2379 return -ENOBUFS;
ee688b00 2380
86e8cf98
JB		 2381 if (WARN_ON(!state))
2382 return -EINVAL;
ee688b00 2383
1b8ec87a 2384 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3713b4e3 2385 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
1b8ec87a 2386 wiphy_name(&rdev->wiphy)) ||
3713b4e3
JB		 2387 nla_put_u32(msg, NL80211_ATTR_GENERATION,
2388 cfg80211_rdev_list_generation))
8fdc621d
JB		 2389 goto nla_put_failure;
2390
3bb20556
JB		 2391 if (cmd != NL80211_CMD_NEW_WIPHY)
2392 goto finish;
2393
86e8cf98 2394 switch (state->split_start) {
3713b4e3
JB		 2395 case 0:
2396 if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
1b8ec87a 2397 rdev->wiphy.retry_short) ||
3713b4e3 2398 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
1b8ec87a 2399 rdev->wiphy.retry_long) ||
3713b4e3 2400 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
1b8ec87a 2401 rdev->wiphy.frag_threshold) ||
3713b4e3 2402 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
1b8ec87a 2403 rdev->wiphy.rts_threshold) ||
3713b4e3 2404 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
1b8ec87a 2405 rdev->wiphy.coverage_class) ||
3713b4e3 2406 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
1b8ec87a 2407 rdev->wiphy.max_scan_ssids) ||
3713b4e3 2408 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
1b8ec87a 2409 rdev->wiphy.max_sched_scan_ssids) ||
3713b4e3 2410 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
1b8ec87a 2411 rdev->wiphy.max_scan_ie_len) ||
3713b4e3 2412 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
1b8ec87a 2413 rdev->wiphy.max_sched_scan_ie_len) ||
3713b4e3 2414 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
f8d504ca 2415 rdev->wiphy.max_match_sets))
9360ffd1 2416 goto nla_put_failure;
3713b4e3 2417
1b8ec87a 2418 if ((rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
3713b4e3 2419 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
aa430da4 2420 goto nla_put_failure;
1b8ec87a 2421 if ((rdev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
3713b4e3
JB		 2422 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
2423 goto nla_put_failure;
1b8ec87a 2424 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3713b4e3
JB		 2425 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
2426 goto nla_put_failure;
1b8ec87a 2427 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
3713b4e3
JB		 2428 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
2429 goto nla_put_failure;
1b8ec87a 2430 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
3713b4e3
JB		 2431 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
2432 goto nla_put_failure;
1b8ec87a 2433 if ((rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
3713b4e3 2434 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
9360ffd1 2435 goto nla_put_failure;
86e8cf98
JB		 2436 state->split_start++;
2437 if (state->split)
3713b4e3 2438 break;
7b506ff6 2439 fallthrough;
3713b4e3
JB		 2440 case 1:
2441 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
1b8ec87a
ZG		 2442 sizeof(u32) * rdev->wiphy.n_cipher_suites,
2443 rdev->wiphy.cipher_suites))
3713b4e3 2444 goto nla_put_failure;
4745fc09 2445
3713b4e3 2446 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
1b8ec87a 2447 rdev->wiphy.max_num_pmkids))
3713b4e3 2448 goto nla_put_failure;
b23aa676 2449
1b8ec87a 2450 if ((rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
3713b4e3 2451 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
9360ffd1 2452 goto nla_put_failure;
b23aa676 2453
3713b4e3 2454 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
1b8ec87a 2455 rdev->wiphy.available_antennas_tx) ||
3713b4e3 2456 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
1b8ec87a 2457 rdev->wiphy.available_antennas_rx))
9360ffd1 2458 goto nla_put_failure;
b23aa676 2459
1b8ec87a 2460 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
3713b4e3 2461 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
1b8ec87a 2462 rdev->wiphy.probe_resp_offload))
3713b4e3 2463 goto nla_put_failure;
8fdc621d 2464
1b8ec87a
ZG		 2465 if ((rdev->wiphy.available_antennas_tx ||
2466 rdev->wiphy.available_antennas_rx) &&
2467 rdev->ops->get_antenna) {
3713b4e3
JB		 2468 u32 tx_ant = 0, rx_ant = 0;
2469 int res;
7a087e74 2470
1b8ec87a 2471 res = rdev_get_antenna(rdev, &tx_ant, &rx_ant);
3713b4e3
JB		 2472 if (!res) {
2473 if (nla_put_u32(msg,
2474 NL80211_ATTR_WIPHY_ANTENNA_TX,
2475 tx_ant) ||
2476 nla_put_u32(msg,
2477 NL80211_ATTR_WIPHY_ANTENNA_RX,
2478 rx_ant))
2479 goto nla_put_failure;
2480 }
2481 }
a293911d 2482
86e8cf98
JB		 2483 state->split_start++;
2484 if (state->split)
3713b4e3 2485 break;
7b506ff6 2486 fallthrough;
3713b4e3
JB		 2487 case 2:
2488 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1b8ec87a 2489 rdev->wiphy.interface_modes))
3713b4e3 2490 goto nla_put_failure;
86e8cf98
JB		 2491 state->split_start++;
2492 if (state->split)
3713b4e3 2493 break;
7b506ff6 2494 fallthrough;
3713b4e3 2495 case 3:
ae0be8de
MK		 2496 nl_bands = nla_nest_start_noflag(msg,
2497 NL80211_ATTR_WIPHY_BANDS);
3713b4e3
JB		 2498 if (!nl_bands)
2499 goto nla_put_failure;
f7ca38df 2500
86e8cf98 2501 for (band = state->band_start;
0d059964
JB		 2502 band < (state->split ?
2503 NUM_NL80211_BANDS :
2504 NL80211_BAND_60GHZ + 1);
2505 band++) {
3713b4e3 2506 struct ieee80211_supported_band *sband;
2e161f78 2507
f8d504ca
JB		 2508 /* omit higher bands for ancient software */
2509 if (band > NL80211_BAND_5GHZ && !state->split)
2510 break;
2511
1b8ec87a 2512 sband = rdev->wiphy.bands[band];
2e161f78 2513
3713b4e3
JB		 2514 if (!sband)
2515 continue;
2516
ae0be8de 2517 nl_band = nla_nest_start_noflag(msg, band);
3713b4e3 2518 if (!nl_band)
2e161f78 2519 goto nla_put_failure;
3713b4e3 2520
86e8cf98 2521 switch (state->chan_start) {
3713b4e3 2522 case 0:
f8d504ca
JB		 2523 if (nl80211_send_band_rateinfo(msg, sband,
2524 state->split))
9360ffd1 2525 goto nla_put_failure;
86e8cf98
JB		 2526 state->chan_start++;
2527 if (state->split)
3713b4e3 2528 break;
7b506ff6 2529 fallthrough;
3713b4e3
JB		 2530 default:
2531 /* add frequencies */
ae0be8de
MK		 2532 nl_freqs = nla_nest_start_noflag(msg,
2533 NL80211_BAND_ATTR_FREQS);
3713b4e3
JB		 2534 if (!nl_freqs)
2535 goto nla_put_failure;
2536
86e8cf98 2537 for (i = state->chan_start - 1;
3713b4e3
JB		 2538 i < sband->n_channels;
2539 i++) {
ae0be8de
MK		 2540 nl_freq = nla_nest_start_noflag(msg,
2541 i);
3713b4e3
JB		 2542 if (!nl_freq)
2543 goto nla_put_failure;
2544
2545 chan = &sband->channels[i];
2546
86e8cf98 2547 if (nl80211_msg_put_channel(
50f32718 2548 msg, &rdev->wiphy, chan,
86e8cf98 2549 state->split))
3713b4e3
JB		 2550 goto nla_put_failure;
2551
2552 nla_nest_end(msg, nl_freq);
86e8cf98 2553 if (state->split)
3713b4e3
JB		 2554 break;
2555 }
2556 if (i < sband->n_channels)
86e8cf98 2557 state->chan_start = i + 2;
3713b4e3 2558 else
86e8cf98 2559 state->chan_start = 0;
3713b4e3
JB		 2560 nla_nest_end(msg, nl_freqs);
2561 }
2562
2563 nla_nest_end(msg, nl_band);
2564
86e8cf98 2565 if (state->split) {
3713b4e3 2566 /* start again here */
86e8cf98 2567 if (state->chan_start)
3713b4e3
JB		 2568 band--;
2569 break;
2e161f78 2570 }
2e161f78 2571 }
3713b4e3 2572 nla_nest_end(msg, nl_bands);
2e161f78 2573
57fbcce3 2574 if (band < NUM_NL80211_BANDS)
86e8cf98 2575 state->band_start = band + 1;
3713b4e3 2576 else
86e8cf98 2577 state->band_start = 0;
74b70a4e 2578
3713b4e3 2579 /* if bands & channels are done, continue outside */
86e8cf98
JB		 2580 if (state->band_start == 0 && state->chan_start == 0)
2581 state->split_start++;
2582 if (state->split)
3713b4e3 2583 break;
7b506ff6 2584 fallthrough;
3713b4e3 2585 case 4:
ae0be8de
MK		 2586 nl_cmds = nla_nest_start_noflag(msg,
2587 NL80211_ATTR_SUPPORTED_COMMANDS);
3713b4e3 2588 if (!nl_cmds)
2e161f78
JB		 2589 goto nla_put_failure;
2590
1794899e
JB		 2591 i = nl80211_add_commands_unsplit(rdev, msg);
2592 if (i < 0)
2593 goto nla_put_failure;
86e8cf98 2594 if (state->split) {
5de17984
AS		 2595 CMD(crit_proto_start, CRIT_PROTOCOL_START);
2596 CMD(crit_proto_stop, CRIT_PROTOCOL_STOP);
1b8ec87a 2597 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH)
16ef1fe2 2598 CMD(channel_switch, CHANNEL_SWITCH);
02df00eb 2599 CMD(set_qos_map, SET_QOS_MAP);
723e73ac
JB		 2600 if (rdev->wiphy.features &
2601 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION)
960d01ac 2602 CMD(add_tx_ts, ADD_TX_TS);
ce0ce13a 2603 CMD(set_multicast_to_unicast, SET_MULTICAST_TO_UNICAST);
088e8df8 2604 CMD(update_connect_params, UPDATE_CONNECT_PARAMS);
7010998c 2605 CMD(update_ft_ies, UPDATE_FT_IES);
6bdb68ce
CH		 2606 if (rdev->wiphy.sar_capa)
2607 CMD(set_sar_specs, SET_SAR_SPECS);
5de17984 2608 }
3713b4e3 2609#undef CMD
ff1b6e69 2610
3713b4e3 2611 nla_nest_end(msg, nl_cmds);
86e8cf98
JB		 2612 state->split_start++;
2613 if (state->split)
3713b4e3 2614 break;
7b506ff6 2615 fallthrough;
3713b4e3 2616 case 5:
1b8ec87a
ZG		 2617 if (rdev->ops->remain_on_channel &&
2618 (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
3713b4e3
JB		 2619 nla_put_u32(msg,
2620 NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1b8ec87a 2621 rdev->wiphy.max_remain_on_channel_duration))
3713b4e3
JB		 2622 goto nla_put_failure;
2623
1b8ec87a 2624 if ((rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
3713b4e3
JB		 2625 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
2626 goto nla_put_failure;
2627
86e8cf98
JB		 2628 state->split_start++;
2629 if (state->split)
3713b4e3 2630 break;
7b506ff6 2631 fallthrough;
3713b4e3
JB		 2632 case 6:
2633#ifdef CONFIG_PM
1b8ec87a 2634 if (nl80211_send_wowlan(msg, rdev, state->split))
3713b4e3 2635 goto nla_put_failure;
86e8cf98
JB		 2636 state->split_start++;
2637 if (state->split)
3713b4e3
JB		 2638 break;
2639#else
86e8cf98 2640 state->split_start++;
dfb89c56 2641#endif
7b506ff6 2642 fallthrough;
3713b4e3
JB		 2643 case 7:
2644 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1b8ec87a 2645 rdev->wiphy.software_iftypes))
3713b4e3 2646 goto nla_put_failure;
ff1b6e69 2647
1b8ec87a 2648 if (nl80211_put_iface_combinations(&rdev->wiphy, msg,
86e8cf98 2649 state->split))
3713b4e3 2650 goto nla_put_failure;
7527a782 2651
86e8cf98
JB		 2652 state->split_start++;
2653 if (state->split)
3713b4e3 2654 break;
7b506ff6 2655 fallthrough;
3713b4e3 2656 case 8:
1b8ec87a 2657 if ((rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
3713b4e3 2658 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1b8ec87a 2659 rdev->wiphy.ap_sme_capa))
3713b4e3 2660 goto nla_put_failure;
7527a782 2661
1b8ec87a 2662 features = rdev->wiphy.features;
fe1abafd
JB		 2663 /*
2664 * We can only add the per-channel limit information if the
2665 * dump is split, otherwise it makes it too big. Therefore
2666 * only advertise it in that case.
2667 */
86e8cf98 2668 if (state->split)
fe1abafd
JB		 2669 features |= NL80211_FEATURE_ADVERTISE_CHAN_LIMITS;
2670 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS, features))
3713b4e3 2671 goto nla_put_failure;
562a7480 2672
1b8ec87a 2673 if (rdev->wiphy.ht_capa_mod_mask &&
3713b4e3 2674 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1b8ec87a
ZG		 2675 sizeof(*rdev->wiphy.ht_capa_mod_mask),
2676 rdev->wiphy.ht_capa_mod_mask))
3713b4e3 2677 goto nla_put_failure;
1f074bd8 2678
1b8ec87a
ZG		 2679 if (rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
2680 rdev->wiphy.max_acl_mac_addrs &&
3713b4e3 2681 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1b8ec87a 2682 rdev->wiphy.max_acl_mac_addrs))
3713b4e3 2683 goto nla_put_failure;
7e7c8926 2684
3713b4e3
JB		 2685 /*
2686 * Any information below this point is only available to
2687 * applications that can deal with it being split. This
2688 * helps ensure that newly added capabilities don't break
2689 * older tools by overrunning their buffers.
2690 *
2691 * We still increment split_start so that in the split
2692 * case we'll continue with more data in the next round,
2693 * but break unconditionally so unsplit data stops here.
2694 */
ab10c22b
JB		 2695 if (state->split)
2696 state->split_start++;
2697 else
2698 state->split_start = 0;
3713b4e3
JB		 2699 break;
2700 case 9:
f8d504ca
JB		 2701 if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
2702 goto nla_put_failure;
2703
2704 if (nla_put_u32(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_PLANS,
2705 rdev->wiphy.max_sched_scan_plans) ||
2706 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_INTERVAL,
2707 rdev->wiphy.max_sched_scan_plan_interval) ||
2708 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_ITERATIONS,
2709 rdev->wiphy.max_sched_scan_plan_iterations))
2710 goto nla_put_failure;
2711
1b8ec87a 2712 if (rdev->wiphy.extended_capabilities &&
fe1abafd 2713 (nla_put(msg, NL80211_ATTR_EXT_CAPA,
1b8ec87a
ZG		 2714 rdev->wiphy.extended_capabilities_len,
2715 rdev->wiphy.extended_capabilities) ||
fe1abafd 2716 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
1b8ec87a
ZG		 2717 rdev->wiphy.extended_capabilities_len,
2718 rdev->wiphy.extended_capabilities_mask)))
fe1abafd 2719 goto nla_put_failure;
a50df0c4 2720
1b8ec87a 2721 if (rdev->wiphy.vht_capa_mod_mask &&
ee2aca34 2722 nla_put(msg, NL80211_ATTR_VHT_CAPABILITY_MASK,
1b8ec87a
ZG		 2723 sizeof(*rdev->wiphy.vht_capa_mod_mask),
2724 rdev->wiphy.vht_capa_mod_mask))
ee2aca34
JB		 2725 goto nla_put_failure;
2726
ae6fa4d5
DK		 2727 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
2728 rdev->wiphy.perm_addr))
2729 goto nla_put_failure;
2730
2731 if (!is_zero_ether_addr(rdev->wiphy.addr_mask) &&
2732 nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN,
2733 rdev->wiphy.addr_mask))
2734 goto nla_put_failure;
2735
2736 if (rdev->wiphy.n_addresses > 1) {
2737 void *attr;
2738
2739 attr = nla_nest_start(msg, NL80211_ATTR_MAC_ADDRS);
2740 if (!attr)
2741 goto nla_put_failure;
2742
2743 for (i = 0; i < rdev->wiphy.n_addresses; i++)
2744 if (nla_put(msg, i + 1, ETH_ALEN,
2745 rdev->wiphy.addresses[i].addr))
2746 goto nla_put_failure;
2747
2748 nla_nest_end(msg, attr);
2749 }
2750
be29b99a
AK		 2751 state->split_start++;
2752 break;
2753 case 10:
1b8ec87a 2754 if (nl80211_send_coalesce(msg, rdev))
be29b99a
AK		 2755 goto nla_put_failure;
2756
1b8ec87a 2757 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ) &&
01e0daa4
FF		 2758 (nla_put_flag(msg, NL80211_ATTR_SUPPORT_5_MHZ) ||
2759 nla_put_flag(msg, NL80211_ATTR_SUPPORT_10_MHZ)))
2760 goto nla_put_failure;
b43504cf 2761
1b8ec87a 2762 if (rdev->wiphy.max_ap_assoc_sta &&
b43504cf 2763 nla_put_u32(msg, NL80211_ATTR_MAX_AP_ASSOC_STA,
1b8ec87a 2764 rdev->wiphy.max_ap_assoc_sta))
b43504cf
JM		 2765 goto nla_put_failure;
2766
ad7e718c
JB		 2767 state->split_start++;
2768 break;
2769 case 11:
1b8ec87a 2770 if (rdev->wiphy.n_vendor_commands) {
567ffc35
JB		 2771 const struct nl80211_vendor_cmd_info *info;
2772 struct nlattr *nested;
2773
ae0be8de
MK		 2774 nested = nla_nest_start_noflag(msg,
2775 NL80211_ATTR_VENDOR_DATA);
567ffc35
JB		 2776 if (!nested)
2777 goto nla_put_failure;
2778
1b8ec87a
ZG		 2779 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
2780 info = &rdev->wiphy.vendor_commands[i].info;
567ffc35
JB		 2781 if (nla_put(msg, i + 1, sizeof(*info), info))
2782 goto nla_put_failure;
2783 }
2784 nla_nest_end(msg, nested);
2785 }
2786
1b8ec87a 2787 if (rdev->wiphy.n_vendor_events) {
567ffc35
JB		 2788 const struct nl80211_vendor_cmd_info *info;
2789 struct nlattr *nested;
ad7e718c 2790
ae0be8de
MK		 2791 nested = nla_nest_start_noflag(msg,
2792 NL80211_ATTR_VENDOR_EVENTS);
567ffc35 2793 if (!nested)
ad7e718c 2794 goto nla_put_failure;
567ffc35 2795
1b8ec87a
ZG		 2796 for (i = 0; i < rdev->wiphy.n_vendor_events; i++) {
2797 info = &rdev->wiphy.vendor_events[i];
567ffc35
JB		 2798 if (nla_put(msg, i + 1, sizeof(*info), info))
2799 goto nla_put_failure;
2800 }
2801 nla_nest_end(msg, nested);
2802 }
9a774c78
AO		 2803 state->split_start++;
2804 break;
2805 case 12:
2806 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH &&
2807 nla_put_u8(msg, NL80211_ATTR_MAX_CSA_COUNTERS,
2808 rdev->wiphy.max_num_csa_counters))
2809 goto nla_put_failure;
01e0daa4 2810
1bdd716c
AN		 2811 if (rdev->wiphy.regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
2812 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
2813 goto nla_put_failure;
2814
ca986ad9
AVS		 2815 if (rdev->wiphy.max_sched_scan_reqs &&
2816 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_MAX_REQS,
2817 rdev->wiphy.max_sched_scan_reqs))
2818 goto nla_put_failure;
2819
d75bb06b
GKS		 2820 if (nla_put(msg, NL80211_ATTR_EXT_FEATURES,
2821 sizeof(rdev->wiphy.ext_features),
2822 rdev->wiphy.ext_features))
2823 goto nla_put_failure;
2824
38de03d2
AS		 2825 if (rdev->wiphy.bss_select_support) {
2826 struct nlattr *nested;
2827 u32 bss_select_support = rdev->wiphy.bss_select_support;
2828
ae0be8de
MK		 2829 nested = nla_nest_start_noflag(msg,
2830 NL80211_ATTR_BSS_SELECT);
38de03d2
AS		 2831 if (!nested)
2832 goto nla_put_failure;
2833
2834 i = 0;
2835 while (bss_select_support) {
2836 if ((bss_select_support & 1) &&
2837 nla_put_flag(msg, i))
2838 goto nla_put_failure;
2839 i++;
2840 bss_select_support >>= 1;
2841 }
2842 nla_nest_end(msg, nested);
2843 }
2844
019ae3a9
KV		 2845 state->split_start++;
2846 break;
2847 case 13:
2848 if (rdev->wiphy.num_iftype_ext_capab &&
2849 rdev->wiphy.iftype_ext_capab) {
2850 struct nlattr *nested_ext_capab, *nested;
2851
ae0be8de
MK		 2852 nested = nla_nest_start_noflag(msg,
2853 NL80211_ATTR_IFTYPE_EXT_CAPA);
019ae3a9
KV		 2854 if (!nested)
2855 goto nla_put_failure;
2856
2857 for (i = state->capa_start;
2858 i < rdev->wiphy.num_iftype_ext_capab; i++) {
2859 const struct wiphy_iftype_ext_capab *capab;
2860
2861 capab = &rdev->wiphy.iftype_ext_capab[i];
2862
ae0be8de
MK		 2863 nested_ext_capab = nla_nest_start_noflag(msg,
2864 i);
019ae3a9
KV		 2865 if (!nested_ext_capab ||
2866 nla_put_u32(msg, NL80211_ATTR_IFTYPE,
2867 capab->iftype) ||
2868 nla_put(msg, NL80211_ATTR_EXT_CAPA,
2869 capab->extended_capabilities_len,
2870 capab->extended_capabilities) ||
2871 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
2872 capab->extended_capabilities_len,
2873 capab->extended_capabilities_mask))
2874 goto nla_put_failure;
2875
4e9c3af3
JB		 2876 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO &&
2877 (nla_put_u16(msg,
2878 NL80211_ATTR_EML_CAPABILITY,
2879 capab->eml_capabilities) ||
2880 nla_put_u16(msg,
2881 NL80211_ATTR_MLD_CAPA_AND_OPS,
2882 capab->mld_capa_and_ops)))
2883 goto nla_put_failure;
2884
019ae3a9
KV		 2885 nla_nest_end(msg, nested_ext_capab);
2886 if (state->split)
2887 break;
2888 }
2889 nla_nest_end(msg, nested);
2890 if (i < rdev->wiphy.num_iftype_ext_capab) {
2891 state->capa_start = i + 1;
2892 break;
2893 }
2894 }
2895
8585989d
LC		 2896 if (nla_put_u32(msg, NL80211_ATTR_BANDS,
2897 rdev->wiphy.nan_supported_bands))
2898 goto nla_put_failure;
2899
52539ca8
THJ		 2900 if (wiphy_ext_feature_isset(&rdev->wiphy,
2901 NL80211_EXT_FEATURE_TXQS)) {
2902 struct cfg80211_txq_stats txqstats = {};
2903 int res;
2904
2905 res = rdev_get_txq_stats(rdev, NULL, &txqstats);
2906 if (!res &&
2907 !nl80211_put_txq_stats(msg, &txqstats,
2908 NL80211_ATTR_TXQ_STATS))
2909 goto nla_put_failure;
2910
2911 if (nla_put_u32(msg, NL80211_ATTR_TXQ_LIMIT,
2912 rdev->wiphy.txq_limit))
2913 goto nla_put_failure;
2914 if (nla_put_u32(msg, NL80211_ATTR_TXQ_MEMORY_LIMIT,
2915 rdev->wiphy.txq_memory_limit))
2916 goto nla_put_failure;
2917 if (nla_put_u32(msg, NL80211_ATTR_TXQ_QUANTUM,
2918 rdev->wiphy.txq_quantum))
2919 goto nla_put_failure;
2920 }
2921
9bb7e0f2
JB		 2922 state->split_start++;
2923 break;
2924 case 14:
2925 if (nl80211_send_pmsr_capa(rdev, msg))
2926 goto nla_put_failure;
2927
ab4dfa20
VJ		 2928 state->split_start++;
2929 break;
2930 case 15:
2931 if (rdev->wiphy.akm_suites &&
2932 nla_put(msg, NL80211_ATTR_AKM_SUITES,
2933 sizeof(u32) * rdev->wiphy.n_akm_suites,
2934 rdev->wiphy.akm_suites))
2935 goto nla_put_failure;
2936
d6039a34
VJ		 2937 if (nl80211_put_iftype_akm_suites(rdev, msg))
2938 goto nla_put_failure;
2939
3710a8a6
JB		 2940 if (nl80211_put_tid_config_support(rdev, msg))
2941 goto nla_put_failure;
6bdb68ce
CH		 2942 state->split_start++;
2943 break;
2944 case 16:
2945 if (nl80211_put_sar_specs(rdev, msg))
2946 goto nla_put_failure;
3710a8a6 2947
dc1e3cb8
JC		 2948 if (nl80211_put_mbssid_support(&rdev->wiphy, msg))
2949 goto nla_put_failure;
2950
ecad3b0b
VJ		 2951 if (nla_put_u16(msg, NL80211_ATTR_MAX_NUM_AKM_SUITES,
2952 rdev->wiphy.max_num_akm_suites))
2953 goto nla_put_failure;
2954
fa2ca639
JB		 2955 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO)
2956 nla_put_flag(msg, NL80211_ATTR_MLO_SUPPORT);
2957
3713b4e3 2958 /* done */
86e8cf98 2959 state->split_start = 0;
3713b4e3
JB		 2960 break;
2961 }
3bb20556 2962 finish:
053c095a
JB		 2963 genlmsg_end(msg, hdr);
2964 return 0;
55682965
JB		 2965
2966 nla_put_failure:
bc3ed28c
TG		 2967 genlmsg_cancel(msg, hdr);
2968 return -EMSGSIZE;
55682965
JB		 2969}
2970
86e8cf98
JB		 2971static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
2972 struct netlink_callback *cb,
2973 struct nl80211_dump_wiphy_state *state)
2974{
50508d94
JB		 2975 struct nlattr **tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
2976 int ret;
2977
2978 if (!tb)
2979 return -ENOMEM;
2980
2981 ret = nlmsg_parse_deprecated(cb->nlh,
2982 GENL_HDRLEN + nl80211_fam.hdrsize,
2983 tb, nl80211_fam.maxattr,
2984 nl80211_policy, NULL);
86e8cf98 2985 /* ignore parse errors for backward compatibility */
50508d94
JB		 2986 if (ret) {
2987 ret = 0;
2988 goto out;
2989 }
86e8cf98
JB		 2990
2991 state->split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
2992 if (tb[NL80211_ATTR_WIPHY])
2993 state->filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
2994 if (tb[NL80211_ATTR_WDEV])
2995 state->filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
2996 if (tb[NL80211_ATTR_IFINDEX]) {
2997 struct net_device *netdev;
2998 struct cfg80211_registered_device *rdev;
2999 int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
3000
7f2b8562 3001 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
50508d94
JB		 3002 if (!netdev) {
3003 ret = -ENODEV;
3004 goto out;
3005 }
86e8cf98 3006 if (netdev->ieee80211_ptr) {
f26cbf40 3007 rdev = wiphy_to_rdev(
86e8cf98
JB		 3008 netdev->ieee80211_ptr->wiphy);
3009 state->filter_wiphy = rdev->wiphy_idx;
3010 }
86e8cf98
JB		 3011 }
3012
50508d94
JB		 3013 ret = 0;
3014out:
3015 kfree(tb);
3016 return ret;
86e8cf98
JB		 3017}
3018
55682965
JB		 3019static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
3020{
645e77de 3021 int idx = 0, ret;
86e8cf98 3022 struct nl80211_dump_wiphy_state *state = (void *)cb->args[0];
1b8ec87a 3023 struct cfg80211_registered_device *rdev;
3a5a423b 3024
5fe231e8 3025 rtnl_lock();
86e8cf98
JB		 3026 if (!state) {
3027 state = kzalloc(sizeof(*state), GFP_KERNEL);
57ed5cd6
JL		 3028 if (!state) {
3029 rtnl_unlock();
86e8cf98 3030 return -ENOMEM;
3713b4e3 3031 }
86e8cf98
JB		 3032 state->filter_wiphy = -1;
3033 ret = nl80211_dump_wiphy_parse(skb, cb, state);
3034 if (ret) {
3035 kfree(state);
3036 rtnl_unlock();
3037 return ret;
3713b4e3 3038 }
86e8cf98 3039 cb->args[0] = (long)state;
3713b4e3
JB		 3040 }
3041
1b8ec87a
ZG		 3042 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3043 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3044 continue;
86e8cf98 3045 if (++idx <= state->start)
55682965 3046 continue;
86e8cf98 3047 if (state->filter_wiphy != -1 &&
1b8ec87a 3048 state->filter_wiphy != rdev->wiphy_idx)
3713b4e3
JB		 3049 continue;
3050 /* attempt to fit multiple wiphy data chunks into the skb */
3051 do {
3bb20556
JB		 3052 ret = nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY,
3053 skb,
3713b4e3
JB		 3054 NETLINK_CB(cb->skb).portid,
3055 cb->nlh->nlmsg_seq,
86e8cf98 3056 NLM_F_MULTI, state);
3713b4e3
JB		 3057 if (ret < 0) {
3058 /*
3059 * If sending the wiphy data didn't fit (ENOBUFS
3060 * or EMSGSIZE returned), this SKB is still
3061 * empty (so it's not too big because another
3062 * wiphy dataset is already in the skb) and
3063 * we've not tried to adjust the dump allocation
3064 * yet ... then adjust the alloc size to be
3065 * bigger, and return 1 but with the empty skb.
3066 * This results in an empty message being RX'ed
3067 * in userspace, but that is ignored.
3068 *
3069 * We can then retry with the larger buffer.
3070 */
3071 if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
f12cb289 3072 !skb->len && !state->split &&
3713b4e3
JB		 3073 cb->min_dump_alloc < 4096) {
3074 cb->min_dump_alloc = 4096;
f12cb289 3075 state->split_start = 0;
d98cae64 3076 rtnl_unlock();
3713b4e3
JB		 3077 return 1;
3078 }
3079 idx--;
3080 break;
645e77de 3081 }
86e8cf98 3082 } while (state->split_start > 0);
3713b4e3 3083 break;
55682965 3084 }
5fe231e8 3085 rtnl_unlock();
55682965 3086
86e8cf98 3087 state->start = idx;
55682965
JB		 3088
3089 return skb->len;
3090}
3091
86e8cf98
JB		 3092static int nl80211_dump_wiphy_done(struct netlink_callback *cb)
3093{
3094 kfree((void *)cb->args[0]);
3095 return 0;
3096}
3097
55682965
JB		 3098static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
3099{
3100 struct sk_buff *msg;
1b8ec87a 3101 struct cfg80211_registered_device *rdev = info->user_ptr[0];
86e8cf98 3102 struct nl80211_dump_wiphy_state state = {};
55682965 3103
645e77de 3104 msg = nlmsg_new(4096, GFP_KERNEL);
55682965 3105 if (!msg)
4c476991 3106 return -ENOMEM;
55682965 3107
3bb20556
JB		 3108 if (nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY, msg,
3109 info->snd_portid, info->snd_seq, 0,
86e8cf98 3110 &state) < 0) {
4c476991
JB		 3111 nlmsg_free(msg);
3112 return -ENOBUFS;
3113 }
55682965 3114
134e6375 3115 return genlmsg_reply(msg, info);
55682965
JB		 3116}
3117
31888487
JM		 3118static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
3119 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
3120 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
3121 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
3122 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
3123 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
3124};
3125
3126static int parse_txq_params(struct nlattr *tb[],
3127 struct ieee80211_txq_params *txq_params)
3128{
259d8c1e
DW		 3129 u8 ac;
3130
a3304b0a 3131 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 3132 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
3133 !tb[NL80211_TXQ_ATTR_AIFS])
3134 return -EINVAL;
3135
259d8c1e 3136 ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 3137 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
3138 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
3139 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
3140 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
3141
259d8c1e 3142 if (ac >= NL80211_NUM_ACS)
a3304b0a 3143 return -EINVAL;
259d8c1e 3144 txq_params->ac = array_index_nospec(ac, NL80211_NUM_ACS);
31888487
JM		 3145 return 0;
3146}
3147
f444de05
JB		 3148static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
3149{
3150 /*
e7e0517c
JB		 3151 * You can only set the channel explicitly for some interfaces,
3152 * most have their channel managed via their respective
cc1d2806
JB		 3153 * "establish a connection" command (connect, join, ...)
3154 *
3155 * For AP/GO and mesh mode, the channel can be set with the
3156 * channel userspace API, but is only stored and passed to the
3157 * low-level driver when the AP starts or the mesh is joined.
3158 * This is for backward compatibility, userspace can also give
3159 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 3160 *
3161 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 3162 * whatever else is going on, so they have their own special
3163 * operation to set the monitor channel if possible.
f444de05
JB		 3164 */
3165 return !wdev ||
3166 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 3167 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 3168 wdev->iftype == NL80211_IFTYPE_MONITOR ||
3169 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 3170}
3171
9bb7e0f2
JB		 3172int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
3173 struct genl_info *info,
3174 struct cfg80211_chan_def *chandef)
683b6d3b 3175{
49f9cf0e
JB		 3176 struct netlink_ext_ack *extack = info->extack;
3177 struct nlattr **attrs = info->attrs;
dbeca2ea 3178 u32 control_freq;
683b6d3b 3179
49f9cf0e 3180 if (!attrs[NL80211_ATTR_WIPHY_FREQ])
683b6d3b
JB		 3181 return -EINVAL;
3182
942ba88b
TP		 3183 control_freq = MHZ_TO_KHZ(
3184 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3185 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
3186 control_freq +=
3187 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
683b6d3b 3188
f43e5210 3189 memset(chandef, 0, sizeof(*chandef));
942ba88b 3190 chandef->chan = ieee80211_get_channel_khz(&rdev->wiphy, control_freq);
3d9d1d66 3191 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
942ba88b
TP		 3192 chandef->center_freq1 = KHZ_TO_MHZ(control_freq);
3193 chandef->freq1_offset = control_freq % 1000;
3d9d1d66 3194 chandef->center_freq2 = 0;
683b6d3b
JB		 3195
3196 /* Primary channel not allowed */
49f9cf0e
JB		 3197 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED) {
3198 NL_SET_ERR_MSG_ATTR(extack, attrs[NL80211_ATTR_WIPHY_FREQ],
3199 "Channel is disabled");
683b6d3b 3200 return -EINVAL;
49f9cf0e 3201 }
683b6d3b 3202
49f9cf0e 3203 if (attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
3d9d1d66
JB		 3204 enum nl80211_channel_type chantype;
3205
49f9cf0e 3206 chantype = nla_get_u32(attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
3d9d1d66
JB		 3207
3208 switch (chantype) {
3209 case NL80211_CHAN_NO_HT:
3210 case NL80211_CHAN_HT20:
3211 case NL80211_CHAN_HT40PLUS:
3212 case NL80211_CHAN_HT40MINUS:
3213 cfg80211_chandef_create(chandef, chandef->chan,
3214 chantype);
ffa4629e 3215 /* user input for center_freq is incorrect */
49f9cf0e
JB		 3216 if (attrs[NL80211_ATTR_CENTER_FREQ1] &&
3217 chandef->center_freq1 != nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1])) {
3218 NL_SET_ERR_MSG_ATTR(extack,
3219 attrs[NL80211_ATTR_CENTER_FREQ1],
3220 "bad center frequency 1");
ffa4629e 3221 return -EINVAL;
49f9cf0e 3222 }
ffa4629e 3223 /* center_freq2 must be zero */
49f9cf0e
JB		 3224 if (attrs[NL80211_ATTR_CENTER_FREQ2] &&
3225 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2])) {
3226 NL_SET_ERR_MSG_ATTR(extack,
3227 attrs[NL80211_ATTR_CENTER_FREQ2],
3228 "center frequency 2 can't be used");
ffa4629e 3229 return -EINVAL;
49f9cf0e 3230 }
3d9d1d66
JB		 3231 break;
3232 default:
49f9cf0e
JB		 3233 NL_SET_ERR_MSG_ATTR(extack,
3234 attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
3235 "invalid channel type");
3d9d1d66
JB		 3236 return -EINVAL;
3237 }
49f9cf0e 3238 } else if (attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
3d9d1d66 3239 chandef->width =
49f9cf0e 3240 nla_get_u32(attrs[NL80211_ATTR_CHANNEL_WIDTH]);
5d087aa7
KF		 3241 if (chandef->chan->band == NL80211_BAND_S1GHZ) {
3242 /* User input error for channel width doesn't match channel */
3243 if (chandef->width != ieee80211_s1g_channel_width(chandef->chan)) {
3244 NL_SET_ERR_MSG_ATTR(extack,
3245 attrs[NL80211_ATTR_CHANNEL_WIDTH],
3246 "bad channel width");
3247 return -EINVAL;
3248 }
3249 }
942ba88b 3250 if (attrs[NL80211_ATTR_CENTER_FREQ1]) {
3d9d1d66 3251 chandef->center_freq1 =
49f9cf0e 3252 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1]);
942ba88b
TP		 3253 if (attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET])
3254 chandef->freq1_offset = nla_get_u32(
3255 attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET]);
3256 else
3257 chandef->freq1_offset = 0;
3258 }
49f9cf0e 3259 if (attrs[NL80211_ATTR_CENTER_FREQ2])
3d9d1d66 3260 chandef->center_freq2 =
49f9cf0e 3261 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2]);
3d9d1d66
JB		 3262 }
3263
2a38075c
AAL		 3264 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
3265 chandef->edmg.channels =
3266 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
3267
3268 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
3269 chandef->edmg.bw_config =
3270 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
3271 } else {
3272 chandef->edmg.bw_config = 0;
3273 chandef->edmg.channels = 0;
3274 }
3275
49f9cf0e
JB		 3276 if (!cfg80211_chandef_valid(chandef)) {
3277 NL_SET_ERR_MSG(extack, "invalid channel definition");
3d9d1d66 3278 return -EINVAL;
49f9cf0e 3279 }
3d9d1d66 3280
9f5e8f6e 3281 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
49f9cf0e
JB		 3282 IEEE80211_CHAN_DISABLED)) {
3283 NL_SET_ERR_MSG(extack, "(extension) channel is disabled");
3d9d1d66 3284 return -EINVAL;
49f9cf0e 3285 }
3d9d1d66 3286
2f301ab2
SW		 3287 if ((chandef->width == NL80211_CHAN_WIDTH_5 ||
3288 chandef->width == NL80211_CHAN_WIDTH_10) &&
49f9cf0e
JB		 3289 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ)) {
3290 NL_SET_ERR_MSG(extack, "5/10 MHz not supported");
2f301ab2 3291 return -EINVAL;
49f9cf0e 3292 }
2f301ab2 3293
683b6d3b
JB		 3294 return 0;
3295}
3296
f444de05 3297static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
e16821bc 3298 struct net_device *dev,
7b0a0e3c
JB		 3299 struct genl_info *info,
3300 int _link_id)
f444de05 3301{
683b6d3b 3302 struct cfg80211_chan_def chandef;
f444de05 3303 int result;
e8c9bd5b 3304 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
e16821bc 3305 struct wireless_dev *wdev = NULL;
7b0a0e3c 3306 int link_id = _link_id;
e8c9bd5b 3307
e16821bc
JM		 3308 if (dev)
3309 wdev = dev->ieee80211_ptr;
f444de05
JB		 3310 if (!nl80211_can_set_dev_channel(wdev))
3311 return -EOPNOTSUPP;
e16821bc
JM		 3312 if (wdev)
3313 iftype = wdev->iftype;
f444de05 3314
7b0a0e3c
JB		 3315 if (link_id < 0) {
3316 if (wdev && wdev->valid_links)
3317 return -EINVAL;
3318 link_id = 0;
3319 }
3320
683b6d3b
JB		 3321 result = nl80211_parse_chandef(rdev, info, &chandef);
3322 if (result)
3323 return result;
f444de05 3324
e8c9bd5b 3325 switch (iftype) {
aa430da4
JB		 3326 case NL80211_IFTYPE_AP:
3327 case NL80211_IFTYPE_P2P_GO:
923b352f 3328 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
7b0a0e3c
JB		 3329 iftype))
3330 return -EINVAL;
3331 if (wdev->links[link_id].ap.beacon_interval) {
3332 struct ieee80211_channel *cur_chan;
3333
e16821bc
JM		 3334 if (!dev || !rdev->ops->set_ap_chanwidth ||
3335 !(rdev->wiphy.features &
7b0a0e3c
JB		 3336 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE))
3337 return -EBUSY;
e16821bc
JM		 3338
3339 /* Only allow dynamic channel width changes */
7b0a0e3c
JB		 3340 cur_chan = wdev->links[link_id].ap.chandef.chan;
3341 if (chandef.chan != cur_chan)
3342 return -EBUSY;
3343
3344 result = rdev_set_ap_chanwidth(rdev, dev, link_id,
3345 &chandef);
e16821bc 3346 if (result)
7b0a0e3c
JB		 3347 return result;
3348 wdev->links[link_id].ap.chandef = chandef;
3349 } else {
3350 wdev->u.ap.preset_chandef = chandef;
e16821bc 3351 }
7b0a0e3c 3352 return 0;
cc1d2806 3353 case NL80211_IFTYPE_MESH_POINT:
7b0a0e3c 3354 return cfg80211_set_mesh_channel(rdev, wdev, &chandef);
e8c9bd5b 3355 case NL80211_IFTYPE_MONITOR:
7b0a0e3c 3356 return cfg80211_set_monitor_channel(rdev, &chandef);
aa430da4 3357 default:
7b0a0e3c 3358 break;
f444de05 3359 }
f444de05 3360
7b0a0e3c 3361 return -EINVAL;
f444de05
JB		 3362}
3363
3364static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
3365{
4c476991 3366 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 3367 int link_id = nl80211_link_id_or_invalid(info->attrs);
4c476991 3368 struct net_device *netdev = info->user_ptr[1];
4e2f3d67
JB		 3369 int ret;
3370
3371 wdev_lock(netdev->ieee80211_ptr);
3372 ret = __nl80211_set_channel(rdev, netdev, info, link_id);
3373 wdev_unlock(netdev->ieee80211_ptr);
f444de05 3374
4e2f3d67 3375 return ret;
f444de05
JB		 3376}
3377
55682965
JB		 3378static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
3379{
a05829a7 3380 struct cfg80211_registered_device *rdev = NULL;
f444de05
JB		 3381 struct net_device *netdev = NULL;
3382 struct wireless_dev *wdev;
a1e567c8 3383 int result = 0, rem_txq_params = 0;
31888487 3384 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 3385 u32 changed;
3386 u8 retry_short = 0, retry_long = 0;
3387 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 3388 u8 coverage_class = 0;
52539ca8 3389 u32 txq_limit = 0, txq_memory_limit = 0, txq_quantum = 0;
55682965 3390
a05829a7 3391 rtnl_lock();
f444de05
JB		 3392 /*
3393 * Try to find the wiphy and netdev. Normally this
3394 * function shouldn't need the netdev, but this is
3395 * done for backward compatibility -- previously
3396 * setting the channel was done per wiphy, but now
3397 * it is per netdev. Previous userland like hostapd
3398 * also passed a netdev to set_wiphy, so that it is
3399 * possible to let that go to the right netdev!
3400 */
4bbf4d56 3401
f444de05
JB		 3402 if (info->attrs[NL80211_ATTR_IFINDEX]) {
3403 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
3404
7f2b8562 3405 netdev = __dev_get_by_index(genl_info_net(info), ifindex);
5fe231e8 3406 if (netdev && netdev->ieee80211_ptr)
f26cbf40 3407 rdev = wiphy_to_rdev(netdev->ieee80211_ptr->wiphy);
5fe231e8 3408 else
f444de05 3409 netdev = NULL;
4bbf4d56
JB		 3410 }
3411
f444de05 3412 if (!netdev) {
878d9ec7
JB		 3413 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
3414 info->attrs);
a05829a7
JB		 3415 if (IS_ERR(rdev)) {
3416 rtnl_unlock();
4c476991 3417 return PTR_ERR(rdev);
a05829a7 3418 }
f444de05
JB		 3419 wdev = NULL;
3420 netdev = NULL;
3421 result = 0;
71fe96bf 3422 } else
f444de05 3423 wdev = netdev->ieee80211_ptr;
f444de05 3424
a05829a7 3425 wiphy_lock(&rdev->wiphy);
a05829a7 3426
f444de05
JB		 3427 /*
3428 * end workaround code, by now the rdev is available
3429 * and locked, and wdev may or may not be NULL.
3430 */
4bbf4d56
JB		 3431
3432 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 3433 result = cfg80211_dev_rename(
3434 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
0391a45c 3435 rtnl_unlock();
4bbf4d56 3436
4bbf4d56 3437 if (result)
a05829a7 3438 goto out;
31888487
JM		 3439
3440 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
3441 struct ieee80211_txq_params txq_params;
3442 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
3443
a05829a7
JB		 3444 if (!rdev->ops->set_txq_params) {
3445 result = -EOPNOTSUPP;
3446 goto out;
3447 }
31888487 3448
a05829a7
JB		 3449 if (!netdev) {
3450 result = -EINVAL;
3451 goto out;
3452 }
f70f01c2 3453
133a3ff2 3454 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
a05829a7
JB		 3455 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
3456 result = -EINVAL;
3457 goto out;
3458 }
133a3ff2 3459
a05829a7
JB		 3460 if (!netif_running(netdev)) {
3461 result = -ENETDOWN;
3462 goto out;
3463 }
2b5f8b0b 3464
31888487
JM		 3465 nla_for_each_nested(nl_txq_params,
3466 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
3467 rem_txq_params) {
8cb08174
JB		 3468 result = nla_parse_nested_deprecated(tb,
3469 NL80211_TXQ_ATTR_MAX,
3470 nl_txq_params,
3471 txq_params_policy,
3472 info->extack);
ae811e21 3473 if (result)
a05829a7 3474 goto out;
31888487
JM		 3475 result = parse_txq_params(tb, &txq_params);
3476 if (result)
a05829a7 3477 goto out;
31888487 3478
e35e4d28
HG		 3479 result = rdev_set_txq_params(rdev, netdev,
3480 &txq_params);
31888487 3481 if (result)
a05829a7 3482 goto out;
31888487
JM		 3483 }
3484 }
55682965 3485
72bdcf34 3486 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
69c3f2d3
IP		 3487 int link_id = nl80211_link_id_or_invalid(info->attrs);
3488
4e2f3d67
JB		 3489 if (wdev) {
3490 wdev_lock(wdev);
3491 result = __nl80211_set_channel(
3492 rdev,
3493 nl80211_can_set_dev_channel(wdev) ? netdev : NULL,
69c3f2d3 3494 info, link_id);
4e2f3d67
JB		 3495 wdev_unlock(wdev);
3496 } else {
69c3f2d3 3497 result = __nl80211_set_channel(rdev, netdev, info, link_id);
4e2f3d67 3498 }
69c3f2d3 3499
72bdcf34 3500 if (result)
a05829a7 3501 goto out;
72bdcf34
JM		 3502 }
3503
98d2ff8b 3504 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 3505 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 3506 enum nl80211_tx_power_setting type;
3507 int idx, mbm = 0;
3508
c8442118
JB		 3509 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
3510 txp_wdev = NULL;
3511
a05829a7
JB		 3512 if (!rdev->ops->set_tx_power) {
3513 result = -EOPNOTSUPP;
3514 goto out;
3515 }
98d2ff8b
JO		 3516
3517 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
3518 type = nla_get_u32(info->attrs[idx]);
3519
3520 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
a05829a7
JB		 3521 (type != NL80211_TX_POWER_AUTOMATIC)) {
3522 result = -EINVAL;
3523 goto out;
3524 }
98d2ff8b
JO		 3525
3526 if (type != NL80211_TX_POWER_AUTOMATIC) {
3527 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
3528 mbm = nla_get_u32(info->attrs[idx]);
3529 }
3530
c8442118 3531 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b 3532 if (result)
a05829a7 3533 goto out;
98d2ff8b
JO		 3534 }
3535
afe0cbf8
BR		 3536 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
3537 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
3538 u32 tx_ant, rx_ant;
7a087e74 3539
7f531e03
BR		 3540 if ((!rdev->wiphy.available_antennas_tx &&
3541 !rdev->wiphy.available_antennas_rx) ||
a05829a7
JB		 3542 !rdev->ops->set_antenna) {
3543 result = -EOPNOTSUPP;
3544 goto out;
3545 }
afe0cbf8
BR		 3546
3547 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
3548 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
3549
a7ffac95 3550 /* reject antenna configurations which don't match the
7f531e03
BR		 3551 * available antenna masks, except for the "all" mask */
3552 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
a05829a7
JB		 3553 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
3554 result = -EINVAL;
3555 goto out;
3556 }
a7ffac95 3557
7f531e03
BR		 3558 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
3559 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 3560
e35e4d28 3561 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8 3562 if (result)
a05829a7 3563 goto out;
afe0cbf8
BR		 3564 }
3565
b9a5f8ca
JM		 3566 changed = 0;
3567
3568 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
3569 retry_short = nla_get_u8(
3570 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
7f2b8562 3571
b9a5f8ca
JM		 3572 changed |= WIPHY_PARAM_RETRY_SHORT;
3573 }
3574
3575 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
3576 retry_long = nla_get_u8(
3577 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
7f2b8562 3578
b9a5f8ca
JM		 3579 changed |= WIPHY_PARAM_RETRY_LONG;
3580 }
3581
3582 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
3583 frag_threshold = nla_get_u32(
3584 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
a05829a7
JB		 3585 if (frag_threshold < 256) {
3586 result = -EINVAL;
3587 goto out;
3588 }
7f2b8562 3589
b9a5f8ca
JM		 3590 if (frag_threshold != (u32) -1) {
3591 /*
3592 * Fragments (apart from the last one) are required to
3593 * have even length. Make the fragmentation code
3594 * simpler by stripping LSB should someone try to use
3595 * odd threshold value.
3596 */
3597 frag_threshold &= ~0x1;
3598 }
3599 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
3600 }
3601
3602 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
3603 rts_threshold = nla_get_u32(
3604 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
3605 changed |= WIPHY_PARAM_RTS_THRESHOLD;
3606 }
3607
81077e82 3608 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
a05829a7
JB		 3609 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
3610 result = -EINVAL;
3611 goto out;
3612 }
3057dbfd 3613
81077e82
LT		 3614 coverage_class = nla_get_u8(
3615 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
3616 changed |= WIPHY_PARAM_COVERAGE_CLASS;
3617 }
3618
3057dbfd 3619 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
a05829a7
JB		 3620 if (!(rdev->wiphy.features & NL80211_FEATURE_ACKTO_ESTIMATION)) {
3621 result = -EOPNOTSUPP;
3622 goto out;
3623 }
3057dbfd
LB		 3624
3625 changed |= WIPHY_PARAM_DYN_ACK;
81077e82
LT		 3626 }
3627
52539ca8
THJ		 3628 if (info->attrs[NL80211_ATTR_TXQ_LIMIT]) {
3629 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3630 NL80211_EXT_FEATURE_TXQS)) {
3631 result = -EOPNOTSUPP;
3632 goto out;
3633 }
52539ca8
THJ		 3634 txq_limit = nla_get_u32(
3635 info->attrs[NL80211_ATTR_TXQ_LIMIT]);
3636 changed |= WIPHY_PARAM_TXQ_LIMIT;
3637 }
3638
3639 if (info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]) {
3640 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3641 NL80211_EXT_FEATURE_TXQS)) {
3642 result = -EOPNOTSUPP;
3643 goto out;
3644 }
52539ca8
THJ		 3645 txq_memory_limit = nla_get_u32(
3646 info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]);
3647 changed |= WIPHY_PARAM_TXQ_MEMORY_LIMIT;
3648 }
3649
3650 if (info->attrs[NL80211_ATTR_TXQ_QUANTUM]) {
3651 if (!wiphy_ext_feature_isset(&rdev->wiphy,
a05829a7
JB		 3652 NL80211_EXT_FEATURE_TXQS)) {
3653 result = -EOPNOTSUPP;
3654 goto out;
3655 }
52539ca8
THJ		 3656 txq_quantum = nla_get_u32(
3657 info->attrs[NL80211_ATTR_TXQ_QUANTUM]);
3658 changed |= WIPHY_PARAM_TXQ_QUANTUM;
3659 }
3660
b9a5f8ca
JM		 3661 if (changed) {
3662 u8 old_retry_short, old_retry_long;
3663 u32 old_frag_threshold, old_rts_threshold;
81077e82 3664 u8 old_coverage_class;
52539ca8 3665 u32 old_txq_limit, old_txq_memory_limit, old_txq_quantum;
b9a5f8ca 3666
a05829a7
JB		 3667 if (!rdev->ops->set_wiphy_params) {
3668 result = -EOPNOTSUPP;
3669 goto out;
3670 }
b9a5f8ca
JM		 3671
3672 old_retry_short = rdev->wiphy.retry_short;
3673 old_retry_long = rdev->wiphy.retry_long;
3674 old_frag_threshold = rdev->wiphy.frag_threshold;
3675 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 3676 old_coverage_class = rdev->wiphy.coverage_class;
52539ca8
THJ		 3677 old_txq_limit = rdev->wiphy.txq_limit;
3678 old_txq_memory_limit = rdev->wiphy.txq_memory_limit;
3679 old_txq_quantum = rdev->wiphy.txq_quantum;
b9a5f8ca
JM		 3680
3681 if (changed & WIPHY_PARAM_RETRY_SHORT)
3682 rdev->wiphy.retry_short = retry_short;
3683 if (changed & WIPHY_PARAM_RETRY_LONG)
3684 rdev->wiphy.retry_long = retry_long;
3685 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
3686 rdev->wiphy.frag_threshold = frag_threshold;
3687 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
3688 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 3689 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
3690 rdev->wiphy.coverage_class = coverage_class;
52539ca8
THJ		 3691 if (changed & WIPHY_PARAM_TXQ_LIMIT)
3692 rdev->wiphy.txq_limit = txq_limit;
3693 if (changed & WIPHY_PARAM_TXQ_MEMORY_LIMIT)
3694 rdev->wiphy.txq_memory_limit = txq_memory_limit;
3695 if (changed & WIPHY_PARAM_TXQ_QUANTUM)
3696 rdev->wiphy.txq_quantum = txq_quantum;
b9a5f8ca 3697
e35e4d28 3698 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 3699 if (result) {
3700 rdev->wiphy.retry_short = old_retry_short;
3701 rdev->wiphy.retry_long = old_retry_long;
3702 rdev->wiphy.frag_threshold = old_frag_threshold;
3703 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 3704 rdev->wiphy.coverage_class = old_coverage_class;
52539ca8
THJ		 3705 rdev->wiphy.txq_limit = old_txq_limit;
3706 rdev->wiphy.txq_memory_limit = old_txq_memory_limit;
3707 rdev->wiphy.txq_quantum = old_txq_quantum;
a05829a7 3708 goto out;
b9a5f8ca
JM		 3709 }
3710 }
a05829a7
JB		 3711
3712 result = 0;
3713
3714out:
3715 wiphy_unlock(&rdev->wiphy);
3716 return result;
55682965
JB		 3717}
3718
683b6d3b 3719static int nl80211_send_chandef(struct sk_buff *msg,
d2859df5 3720 const struct cfg80211_chan_def *chandef)
683b6d3b 3721{
601555cd
JB		 3722 if (WARN_ON(!cfg80211_chandef_valid(chandef)))
3723 return -EINVAL;
3d9d1d66 3724
683b6d3b
JB		 3725 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
3726 chandef->chan->center_freq))
3727 return -ENOBUFS;
942ba88b
TP		 3728 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
3729 chandef->chan->freq_offset))
3730 return -ENOBUFS;
3d9d1d66
JB		 3731 switch (chandef->width) {
3732 case NL80211_CHAN_WIDTH_20_NOHT:
3733 case NL80211_CHAN_WIDTH_20:
3734 case NL80211_CHAN_WIDTH_40:
3735 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
3736 cfg80211_get_chandef_type(chandef)))
3737 return -ENOBUFS;
3738 break;
3739 default:
3740 break;
3741 }
3742 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
3743 return -ENOBUFS;
3744 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
3745 return -ENOBUFS;
3746 if (chandef->center_freq2 &&
3747 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
683b6d3b
JB		 3748 return -ENOBUFS;
3749 return 0;
3750}
3751
15e47304 3752static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 3753 struct cfg80211_registered_device *rdev,
3d1a5bbf
AZ		 3754 struct wireless_dev *wdev,
3755 enum nl80211_commands cmd)
55682965 3756{
72fb2abc 3757 struct net_device *dev = wdev->netdev;
55682965
JB		 3758 void *hdr;
3759
3d1a5bbf
AZ		 3760 WARN_ON(cmd != NL80211_CMD_NEW_INTERFACE &&
3761 cmd != NL80211_CMD_DEL_INTERFACE &&
3762 cmd != NL80211_CMD_SET_INTERFACE);
8f894be2
TB		 3763
3764 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
55682965
JB		 3765 if (!hdr)
3766 return -1;
3767
72fb2abc
JB		 3768 if (dev &&
3769 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 3770 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 3771 goto nla_put_failure;
3772
3773 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3774 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
2dad624e
ND		 3775 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
3776 NL80211_ATTR_PAD) ||
98104fde 3777 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 3778 nla_put_u32(msg, NL80211_ATTR_GENERATION,
3779 rdev->devlist_generation ^
446faa15
AQ		 3780 (cfg80211_rdev_list_generation << 2)) ||
3781 nla_put_u8(msg, NL80211_ATTR_4ADDR, wdev->use_4addr))
9360ffd1 3782 goto nla_put_failure;
f5ea9120 3783
7b0a0e3c 3784 if (rdev->ops->get_channel && !wdev->valid_links) {
f43e5210 3785 struct cfg80211_chan_def chandef = {};
7b0a0e3c 3786 int ret;
683b6d3b 3787
7b0a0e3c
JB		 3788 ret = rdev_get_channel(rdev, wdev, 0, &chandef);
3789 if (ret == 0 && nl80211_send_chandef(msg, &chandef))
3790 goto nla_put_failure;
d91df0e3
PF		 3791 }
3792
d55d0d59
RM		 3793 if (rdev->ops->get_tx_power) {
3794 int dbm, ret;
3795
3796 ret = rdev_get_tx_power(rdev, wdev, &dbm);
3797 if (ret == 0 &&
3798 nla_put_u32(msg, NL80211_ATTR_WIPHY_TX_POWER_LEVEL,
3799 DBM_TO_MBM(dbm)))
3800 goto nla_put_failure;
3801 }
3802
44905265
JB		 3803 wdev_lock(wdev);
3804 switch (wdev->iftype) {
3805 case NL80211_IFTYPE_AP:
a75971bc 3806 case NL80211_IFTYPE_P2P_GO:
7b0a0e3c
JB		 3807 if (wdev->u.ap.ssid_len &&
3808 nla_put(msg, NL80211_ATTR_SSID, wdev->u.ap.ssid_len,
3809 wdev->u.ap.ssid))
4564b187 3810 goto nla_put_failure_locked;
44905265
JB		 3811 break;
3812 case NL80211_IFTYPE_STATION:
3813 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c
JB		 3814 if (wdev->u.client.ssid_len &&
3815 nla_put(msg, NL80211_ATTR_SSID, wdev->u.client.ssid_len,
3816 wdev->u.client.ssid))
3817 goto nla_put_failure_locked;
3818 break;
3819 case NL80211_IFTYPE_ADHOC:
3820 if (wdev->u.ibss.ssid_len &&
3821 nla_put(msg, NL80211_ATTR_SSID, wdev->u.ibss.ssid_len,
3822 wdev->u.ibss.ssid))
3823 goto nla_put_failure_locked;
44905265 3824 break;
44905265
JB		 3825 default:
3826 /* nothing */
3827 break;
b84e7a05 3828 }
44905265 3829 wdev_unlock(wdev);
b84e7a05 3830
52539ca8
THJ		 3831 if (rdev->ops->get_txq_stats) {
3832 struct cfg80211_txq_stats txqstats = {};
3833 int ret = rdev_get_txq_stats(rdev, wdev, &txqstats);
3834
3835 if (ret == 0 &&
3836 !nl80211_put_txq_stats(msg, &txqstats,
3837 NL80211_ATTR_TXQ_STATS))
3838 goto nla_put_failure;
3839 }
3840
ce08cd34
JB		 3841 if (wdev->valid_links) {
3842 unsigned int link_id;
3843 struct nlattr *links = nla_nest_start(msg,
3844 NL80211_ATTR_MLO_LINKS);
3845
3846 if (!links)
3847 goto nla_put_failure;
3848
3849 for_each_valid_link(wdev, link_id) {
3850 struct nlattr *link = nla_nest_start(msg, link_id + 1);
3851
3852 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link_id))
3853 goto nla_put_failure;
3854 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
3855 wdev->links[link_id].addr))
3856 goto nla_put_failure;
3857 nla_nest_end(msg, link);
3858 }
3859
3860 nla_nest_end(msg, links);
3861 }
3862
053c095a
JB		 3863 genlmsg_end(msg, hdr);
3864 return 0;
55682965 3865
4564b187
JB		 3866 nla_put_failure_locked:
3867 wdev_unlock(wdev);
55682965 3868 nla_put_failure:
bc3ed28c
TG		 3869 genlmsg_cancel(msg, hdr);
3870 return -EMSGSIZE;
55682965
JB		 3871}
3872
3873static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
3874{
3875 int wp_idx = 0;
3876 int if_idx = 0;
3877 int wp_start = cb->args[0];
3878 int if_start = cb->args[1];
b7fb44da 3879 int filter_wiphy = -1;
f5ea9120 3880 struct cfg80211_registered_device *rdev;
55682965 3881 struct wireless_dev *wdev;
ea90e0dc 3882 int ret;
55682965 3883
5fe231e8 3884 rtnl_lock();
b7fb44da
DK		 3885 if (!cb->args[2]) {
3886 struct nl80211_dump_wiphy_state state = {
3887 .filter_wiphy = -1,
3888 };
b7fb44da
DK		 3889
3890 ret = nl80211_dump_wiphy_parse(skb, cb, &state);
3891 if (ret)
ea90e0dc 3892 goto out_unlock;
b7fb44da
DK		 3893
3894 filter_wiphy = state.filter_wiphy;
3895
3896 /*
3897 * if filtering, set cb->args[2] to +1 since 0 is the default
3898 * value needed to determine that parsing is necessary.
3899 */
3900 if (filter_wiphy >= 0)
3901 cb->args[2] = filter_wiphy + 1;
3902 else
3903 cb->args[2] = -1;
3904 } else if (cb->args[2] > 0) {
3905 filter_wiphy = cb->args[2] - 1;
3906 }
3907
f5ea9120
JB		 3908 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3909 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3910 continue;
bba95fef
JB		 3911 if (wp_idx < wp_start) {
3912 wp_idx++;
55682965 3913 continue;
bba95fef 3914 }
b7fb44da
DK		 3915
3916 if (filter_wiphy >= 0 && filter_wiphy != rdev->wiphy_idx)
3917 continue;
3918
55682965
JB		 3919 if_idx = 0;
3920
53873f13 3921 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
bba95fef
JB		 3922 if (if_idx < if_start) {
3923 if_idx++;
55682965 3924 continue;
bba95fef 3925 }
15e47304 3926 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 3927 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3d1a5bbf
AZ		 3928 rdev, wdev,
3929 NL80211_CMD_NEW_INTERFACE) < 0) {
bba95fef
JB		 3930 goto out;
3931 }
3932 if_idx++;
55682965 3933 }
bba95fef
JB		 3934
3935 wp_idx++;
55682965 3936 }
bba95fef 3937 out:
55682965
JB		 3938 cb->args[0] = wp_idx;
3939 cb->args[1] = if_idx;
3940
ea90e0dc
JB		 3941 ret = skb->len;
3942 out_unlock:
3943 rtnl_unlock();
3944
3945 return ret;
55682965
JB		 3946}
3947
3948static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
3949{
3950 struct sk_buff *msg;
1b8ec87a 3951 struct cfg80211_registered_device *rdev = info->user_ptr[0];
72fb2abc 3952 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3953
fd2120ca 3954 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 3955 if (!msg)
4c476991 3956 return -ENOMEM;
55682965 3957
15e47304 3958 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3959 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
4c476991
JB		 3960 nlmsg_free(msg);
3961 return -ENOBUFS;
3962 }
55682965 3963
134e6375 3964 return genlmsg_reply(msg, info);
55682965
JB		 3965}
3966
66f7ac50
MW		 3967static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
3968 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
3969 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
3970 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
3971 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
3972 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
e057d3c3 3973 [NL80211_MNTR_FLAG_ACTIVE] = { .type = NLA_FLAG },
66f7ac50
MW		 3974};
3975
3976static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
3977{
3978 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
3979 int flag;
3980
3981 *mntrflags = 0;
3982
3983 if (!nla)
3984 return -EINVAL;
3985
8cb08174 3986 if (nla_parse_nested_deprecated(flags, NL80211_MNTR_FLAG_MAX, nla, mntr_flags_policy, NULL))
66f7ac50
MW		 3987 return -EINVAL;
3988
3989 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
3990 if (flags[flag])
3991 *mntrflags |= (1<<flag);
3992
818a986e
JB		 3993 *mntrflags |= MONITOR_FLAG_CHANGED;
3994
66f7ac50
MW		 3995 return 0;
3996}
3997
1db77596
JB		 3998static int nl80211_parse_mon_options(struct cfg80211_registered_device *rdev,
3999 enum nl80211_iftype type,
4000 struct genl_info *info,
4001 struct vif_params *params)
4002{
4003 bool change = false;
4004 int err;
4005
4006 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4007 if (type != NL80211_IFTYPE_MONITOR)
4008 return -EINVAL;
4009
4010 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
4011 &params->flags);
4012 if (err)
4013 return err;
4014
4015 change = true;
4016 }
4017
4018 if (params->flags & MONITOR_FLAG_ACTIVE &&
4019 !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
4020 return -EOPNOTSUPP;
4021
4022 if (info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]) {
4023 const u8 *mumimo_groups;
4024 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
4025
4026 if (type != NL80211_IFTYPE_MONITOR)
4027 return -EINVAL;
4028
4029 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
4030 return -EOPNOTSUPP;
4031
4032 mumimo_groups =
4033 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]);
4034
4035 /* bits 0 and 63 are reserved and must be zero */
4954601f
JB		 4036 if ((mumimo_groups[0] & BIT(0)) ||
4037 (mumimo_groups[VHT_MUMIMO_GROUPS_DATA_LEN - 1] & BIT(7)))
1db77596
JB		 4038 return -EINVAL;
4039
4040 params->vht_mumimo_groups = mumimo_groups;
4041 change = true;
4042 }
4043
4044 if (info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]) {
4045 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
4046
4047 if (type != NL80211_IFTYPE_MONITOR)
4048 return -EINVAL;
4049
4050 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
4051 return -EOPNOTSUPP;
4052
4053 params->vht_mumimo_follow_addr =
4054 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]);
4055 change = true;
4056 }
4057
4058 return change ? 1 : 0;
4059}
4060
9bc383de 4061static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 4062 struct net_device *netdev, u8 use_4addr,
4063 enum nl80211_iftype iftype)
9bc383de 4064{
ad4bb6f8 4065 if (!use_4addr) {
2e92a2d0 4066 if (netdev && netif_is_bridge_port(netdev))
ad4bb6f8 4067 return -EBUSY;
9bc383de 4068 return 0;
ad4bb6f8 4069 }
9bc383de
JB		 4070
4071 switch (iftype) {
4072 case NL80211_IFTYPE_AP_VLAN:
4073 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
4074 return 0;
4075 break;
4076 case NL80211_IFTYPE_STATION:
4077 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
4078 return 0;
4079 break;
4080 default:
4081 break;
4082 }
4083
4084 return -EOPNOTSUPP;
4085}
4086
55682965
JB		 4087static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
4088{
4c476991 4089 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 4090 struct vif_params params;
e36d56b6 4091 int err;
04a773ad 4092 enum nl80211_iftype otype, ntype;
4c476991 4093 struct net_device *dev = info->user_ptr[1];
ac7f9cfa 4094 bool change = false;
55682965 4095
2ec600d6
LCC		 4096 memset(&params, 0, sizeof(params));
4097
04a773ad 4098 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 4099
723b038d 4100 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 4101 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 4102 if (otype != ntype)
ac7f9cfa 4103 change = true;
723b038d
JB		 4104 }
4105
92ffe055 4106 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 4107 struct wireless_dev *wdev = dev->ieee80211_ptr;
4108
4c476991
JB		 4109 if (ntype != NL80211_IFTYPE_MESH_POINT)
4110 return -EINVAL;
29cbe68c
JB		 4111 if (netif_running(dev))
4112 return -EBUSY;
4113
4114 wdev_lock(wdev);
4115 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
4116 IEEE80211_MAX_MESH_ID_LEN);
7b0a0e3c 4117 wdev->u.mesh.id_up_len =
29cbe68c 4118 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
7b0a0e3c
JB		 4119 memcpy(wdev->u.mesh.id,
4120 nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
4121 wdev->u.mesh.id_up_len);
29cbe68c 4122 wdev_unlock(wdev);
2ec600d6
LCC		 4123 }
4124
8b787643
FF		 4125 if (info->attrs[NL80211_ATTR_4ADDR]) {
4126 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
4127 change = true;
ad4bb6f8 4128 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 4129 if (err)
4c476991 4130 return err;
8b787643
FF		 4131 } else {
4132 params.use_4addr = -1;
4133 }
4134
1db77596
JB		 4135 err = nl80211_parse_mon_options(rdev, ntype, info, &params);
4136 if (err < 0)
4137 return err;
4138 if (err > 0)
c6e6a0c8 4139 change = true;
e057d3c3 4140
ac7f9cfa 4141 if (change)
818a986e 4142 err = cfg80211_change_iface(rdev, dev, ntype, &params);
ac7f9cfa
JB		 4143 else
4144 err = 0;
60719ffd 4145
9bc383de
JB		 4146 if (!err && params.use_4addr != -1)
4147 dev->ieee80211_ptr->use_4addr = params.use_4addr;
4148
3d1a5bbf
AZ		 4149 if (change && !err) {
4150 struct wireless_dev *wdev = dev->ieee80211_ptr;
4151
4152 nl80211_notify_iface(rdev, wdev, NL80211_CMD_SET_INTERFACE);
4153 }
4154
55682965
JB		 4155 return err;
4156}
4157
ea6b2098 4158static int _nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
55682965 4159{
4c476991 4160 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 4161 struct vif_params params;
84efbb84 4162 struct wireless_dev *wdev;
896ff063 4163 struct sk_buff *msg;
55682965
JB		 4164 int err;
4165 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
4166
2ec600d6
LCC		 4167 memset(&params, 0, sizeof(params));
4168
55682965
JB		 4169 if (!info->attrs[NL80211_ATTR_IFNAME])
4170 return -EINVAL;
4171
ab0d76f6 4172 if (info->attrs[NL80211_ATTR_IFTYPE])
55682965 4173 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
55682965 4174
33d915d9 4175 if (!rdev->ops->add_virtual_intf)
4c476991 4176 return -EOPNOTSUPP;
55682965 4177
cb3b7d87 4178 if ((type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN ||
e8f479b1
BG		 4179 rdev->wiphy.features & NL80211_FEATURE_MAC_ON_CREATE) &&
4180 info->attrs[NL80211_ATTR_MAC]) {
1c18f145
AS		 4181 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
4182 ETH_ALEN);
4183 if (!is_valid_ether_addr(params.macaddr))
4184 return -EADDRNOTAVAIL;
4185 }
4186
9bc383de 4187 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 4188 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 4189 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 4190 if (err)
4c476991 4191 return err;
9bc383de 4192 }
8b787643 4193
e6f40511 4194 if (!cfg80211_iftype_allowed(&rdev->wiphy, type, params.use_4addr, 0))
33d915d9
MP		 4195 return -EOPNOTSUPP;
4196
1db77596
JB		 4197 err = nl80211_parse_mon_options(rdev, type, info, &params);
4198 if (err < 0)
4199 return err;
e057d3c3 4200
a18c7192
JB		 4201 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4202 if (!msg)
4203 return -ENOMEM;
4204
e35e4d28
HG		 4205 wdev = rdev_add_virtual_intf(rdev,
4206 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
818a986e 4207 NET_NAME_USER, type, &params);
d687cbb7
RM		 4208 if (WARN_ON(!wdev)) {
4209 nlmsg_free(msg);
4210 return -EPROTO;
4211 } else if (IS_ERR(wdev)) {
1c90f9d4 4212 nlmsg_free(msg);
84efbb84 4213 return PTR_ERR(wdev);
1c90f9d4 4214 }
2ec600d6 4215
18e5ca65 4216 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
78f22b6a
JB		 4217 wdev->owner_nlportid = info->snd_portid;
4218
98104fde
JB		 4219 switch (type) {
4220 case NL80211_IFTYPE_MESH_POINT:
4221 if (!info->attrs[NL80211_ATTR_MESH_ID])
4222 break;
29cbe68c
JB		 4223 wdev_lock(wdev);
4224 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
4225 IEEE80211_MAX_MESH_ID_LEN);
7b0a0e3c 4226 wdev->u.mesh.id_up_len =
29cbe68c 4227 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
7b0a0e3c
JB		 4228 memcpy(wdev->u.mesh.id,
4229 nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
4230 wdev->u.mesh.id_up_len);
29cbe68c 4231 wdev_unlock(wdev);
98104fde 4232 break;
cb3b7d87 4233 case NL80211_IFTYPE_NAN:
98104fde
JB		 4234 case NL80211_IFTYPE_P2P_DEVICE:
4235 /*
cb3b7d87 4236 * P2P Device and NAN do not have a netdev, so don't go
98104fde
JB		 4237 * through the netdev notifier and must be added here
4238 */
9bdaf3b9
JB		 4239 cfg80211_init_wdev(wdev);
4240 cfg80211_register_wdev(rdev, wdev);
98104fde
JB		 4241 break;
4242 default:
4243 break;
29cbe68c
JB		 4244 }
4245
15e47304 4246 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 4247 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
1c90f9d4
JB		 4248 nlmsg_free(msg);
4249 return -ENOBUFS;
4250 }
4251
4252 return genlmsg_reply(msg, info);
55682965
JB		 4253}
4254
ea6b2098
JB		 4255static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
4256{
4257 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4258 int ret;
4259
4260 /* to avoid failing a new interface creation due to pending removal */
4261 cfg80211_destroy_ifaces(rdev);
4262
4263 wiphy_lock(&rdev->wiphy);
4264 ret = _nl80211_new_interface(skb, info);
4265 wiphy_unlock(&rdev->wiphy);
4266
4267 return ret;
4268}
4269
55682965
JB		 4270static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
4271{
4c476991 4272 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 4273 struct wireless_dev *wdev = info->user_ptr[1];
55682965 4274
4c476991
JB		 4275 if (!rdev->ops->del_virtual_intf)
4276 return -EOPNOTSUPP;
55682965 4277
a05829a7
JB		 4278 /*
4279 * We hold RTNL, so this is safe, without RTNL opencount cannot
4280 * reach 0, and thus the rdev cannot be deleted.
4281 *
4282 * We need to do it for the dev_close(), since that will call
4283 * the netdev notifiers, and we need to acquire the mutex there
4284 * but don't know if we get there from here or from some other
4285 * place (e.g. "ip link set ... down").
4286 */
4287 mutex_unlock(&rdev->wiphy.mtx);
4288
84efbb84
JB		 4289 /*
4290 * If we remove a wireless device without a netdev then clear
4291 * user_ptr[1] so that nl80211_post_doit won't dereference it
4292 * to check if it needs to do dev_put(). Otherwise it crashes
4293 * since the wdev has been freed, unlike with a netdev where
4294 * we need the dev_put() for the netdev to really be freed.
4295 */
4296 if (!wdev->netdev)
4297 info->user_ptr[1] = NULL;
a05829a7
JB		 4298 else
4299 dev_close(wdev->netdev);
4300
4301 mutex_lock(&rdev->wiphy.mtx);
84efbb84 4302
cdf0a0a8 4303 return cfg80211_remove_virtual_intf(rdev, wdev);
55682965
JB		 4304}
4305
1d9d9213
SW		 4306static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
4307{
4308 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4309 struct net_device *dev = info->user_ptr[1];
4310 u16 noack_map;
4311
4312 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
4313 return -EINVAL;
4314
4315 if (!rdev->ops->set_noack_map)
4316 return -EOPNOTSUPP;
4317
4318 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
4319
e35e4d28 4320 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 4321}
4322
41ade00f
JB		 4323struct get_key_cookie {
4324 struct sk_buff *msg;
4325 int error;
b9454e83 4326 int idx;
41ade00f
JB		 4327};
4328
4329static void get_key_callback(void *c, struct key_params *params)
4330{
b9454e83 4331 struct nlattr *key;
41ade00f
JB		 4332 struct get_key_cookie *cookie = c;
4333
9360ffd1
DM		 4334 if ((params->key &&
4335 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
4336 params->key_len, params->key)) ||
4337 (params->seq &&
4338 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
4339 params->seq_len, params->seq)) ||
4340 (params->cipher &&
4341 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
4342 params->cipher)))
4343 goto nla_put_failure;
41ade00f 4344
ae0be8de 4345 key = nla_nest_start_noflag(cookie->msg, NL80211_ATTR_KEY);
b9454e83
JB		 4346 if (!key)
4347 goto nla_put_failure;
4348
9360ffd1
DM		 4349 if ((params->key &&
4350 nla_put(cookie->msg, NL80211_KEY_DATA,
4351 params->key_len, params->key)) ||
4352 (params->seq &&
4353 nla_put(cookie->msg, NL80211_KEY_SEQ,
4354 params->seq_len, params->seq)) ||
4355 (params->cipher &&
4356 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
4357 params->cipher)))
4358 goto nla_put_failure;
b9454e83 4359
efdfce72 4360 if (nla_put_u8(cookie->msg, NL80211_KEY_IDX, cookie->idx))
9360ffd1 4361 goto nla_put_failure;
b9454e83
JB		 4362
4363 nla_nest_end(cookie->msg, key);
4364
41ade00f
JB		 4365 return;
4366 nla_put_failure:
4367 cookie->error = 1;
4368}
4369
4370static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
4371{
4c476991 4372 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4373 int err;
4c476991 4374 struct net_device *dev = info->user_ptr[1];
41ade00f 4375 u8 key_idx = 0;
e31b8213
JB		 4376 const u8 *mac_addr = NULL;
4377 bool pairwise;
41ade00f
JB		 4378 struct get_key_cookie cookie = {
4379 .error = 0,
4380 };
4381 void *hdr;
4382 struct sk_buff *msg;
155d7c73
JB		 4383 bool bigtk_support = false;
4384
4385 if (wiphy_ext_feature_isset(&rdev->wiphy,
4386 NL80211_EXT_FEATURE_BEACON_PROTECTION))
4387 bigtk_support = true;
4388
4389 if ((dev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION ||
4390 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
4391 wiphy_ext_feature_isset(&rdev->wiphy,
4392 NL80211_EXT_FEATURE_BEACON_PROTECTION_CLIENT))
4393 bigtk_support = true;
41ade00f 4394
56be393f 4395 if (info->attrs[NL80211_ATTR_KEY_IDX]) {
41ade00f 4396 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
155d7c73
JB		 4397
4398 if (key_idx >= 6 && key_idx <= 7 && !bigtk_support) {
4399 GENL_SET_ERR_MSG(info, "BIGTK not supported");
56be393f 4400 return -EINVAL;
155d7c73 4401 }
56be393f 4402 }
41ade00f 4403
41ade00f
JB		 4404 if (info->attrs[NL80211_ATTR_MAC])
4405 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4406
e31b8213
JB		 4407 pairwise = !!mac_addr;
4408 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
4409 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
7a087e74 4410
e31b8213
JB		 4411 if (kt != NL80211_KEYTYPE_GROUP &&
4412 kt != NL80211_KEYTYPE_PAIRWISE)
4413 return -EINVAL;
4414 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
4415 }
4416
4c476991
JB		 4417 if (!rdev->ops->get_key)
4418 return -EOPNOTSUPP;
41ade00f 4419
0fa7b391
JB		 4420 if (!pairwise && mac_addr && !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4421 return -ENOENT;
4422
fd2120ca 4423 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 4424 if (!msg)
4425 return -ENOMEM;
41ade00f 4426
15e47304 4427 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 4428 NL80211_CMD_NEW_KEY);
cb35fba3 4429 if (!hdr)
9fe271af 4430 goto nla_put_failure;
41ade00f
JB		 4431
4432 cookie.msg = msg;
b9454e83 4433 cookie.idx = key_idx;
41ade00f 4434
9360ffd1
DM		 4435 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
4436 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
4437 goto nla_put_failure;
4438 if (mac_addr &&
4439 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
4440 goto nla_put_failure;
41ade00f 4441
e35e4d28
HG		 4442 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
4443 get_key_callback);
41ade00f
JB		 4444
4445 if (err)
6c95e2a2 4446 goto free_msg;
41ade00f
JB		 4447
4448 if (cookie.error)
4449 goto nla_put_failure;
4450
4451 genlmsg_end(msg, hdr);
4c476991 4452 return genlmsg_reply(msg, info);
41ade00f
JB		 4453
4454 nla_put_failure:
4455 err = -ENOBUFS;
6c95e2a2 4456 free_msg:
41ade00f 4457 nlmsg_free(msg);
41ade00f
JB		 4458 return err;
4459}
4460
4461static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
4462{
4c476991 4463 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 4464 struct key_parse key;
41ade00f 4465 int err;
4c476991 4466 struct net_device *dev = info->user_ptr[1];
41ade00f 4467
b9454e83
JB		 4468 err = nl80211_parse_key(info, &key);
4469 if (err)
4470 return err;
41ade00f 4471
b9454e83 4472 if (key.idx < 0)
41ade00f
JB		 4473 return -EINVAL;
4474
6cdd3979
AW		 4475 /* Only support setting default key and
4476 * Extended Key ID action NL80211_KEY_SET_TX.
4477 */
56be393f 4478 if (!key.def && !key.defmgmt && !key.defbeacon &&
6cdd3979 4479 !(key.p.mode == NL80211_KEY_SET_TX))
41ade00f
JB		 4480 return -EINVAL;
4481
dbd2fd65 4482 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 4483
dbd2fd65
JB		 4484 if (key.def) {
4485 if (!rdev->ops->set_default_key) {
4486 err = -EOPNOTSUPP;
4487 goto out;
4488 }
41ade00f 4489
dbd2fd65
JB		 4490 err = nl80211_key_allowed(dev->ieee80211_ptr);
4491 if (err)
4492 goto out;
4493
e35e4d28 4494 err = rdev_set_default_key(rdev, dev, key.idx,
dbd2fd65
JB		 4495 key.def_uni, key.def_multi);
4496
4497 if (err)
4498 goto out;
fffd0934 4499
3d23e349 4500#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 4501 dev->ieee80211_ptr->wext.default_key = key.idx;
4502#endif
6cdd3979 4503 } else if (key.defmgmt) {
dbd2fd65
JB		 4504 if (key.def_uni || !key.def_multi) {
4505 err = -EINVAL;
4506 goto out;
4507 }
4508
4509 if (!rdev->ops->set_default_mgmt_key) {
4510 err = -EOPNOTSUPP;
4511 goto out;
4512 }
4513
4514 err = nl80211_key_allowed(dev->ieee80211_ptr);
4515 if (err)
4516 goto out;
4517
e35e4d28 4518 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
dbd2fd65
JB		 4519 if (err)
4520 goto out;
4521
4522#ifdef CONFIG_CFG80211_WEXT
4523 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 4524#endif
56be393f
JM		 4525 } else if (key.defbeacon) {
4526 if (key.def_uni || !key.def_multi) {
4527 err = -EINVAL;
4528 goto out;
4529 }
4530
4531 if (!rdev->ops->set_default_beacon_key) {
4532 err = -EOPNOTSUPP;
4533 goto out;
4534 }
4535
4536 err = nl80211_key_allowed(dev->ieee80211_ptr);
4537 if (err)
4538 goto out;
4539
4540 err = rdev_set_default_beacon_key(rdev, dev, key.idx);
4541 if (err)
4542 goto out;
6cdd3979
AW		 4543 } else if (key.p.mode == NL80211_KEY_SET_TX &&
4544 wiphy_ext_feature_isset(&rdev->wiphy,
4545 NL80211_EXT_FEATURE_EXT_KEY_ID)) {
4546 u8 *mac_addr = NULL;
4547
4548 if (info->attrs[NL80211_ATTR_MAC])
4549 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4550
4551 if (!mac_addr || key.idx < 0 || key.idx > 1) {
4552 err = -EINVAL;
4553 goto out;
4554 }
dbd2fd65 4555
6cdd3979
AW		 4556 err = rdev_add_key(rdev, dev, key.idx,
4557 NL80211_KEYTYPE_PAIRWISE,
4558 mac_addr, &key.p);
4559 } else {
4560 err = -EINVAL;
4561 }
dbd2fd65 4562 out:
fffd0934 4563 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4564
41ade00f
JB		 4565 return err;
4566}
4567
4568static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
4569{
4c476991 4570 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 4571 int err;
4c476991 4572 struct net_device *dev = info->user_ptr[1];
b9454e83 4573 struct key_parse key;
e31b8213 4574 const u8 *mac_addr = NULL;
41ade00f 4575
b9454e83
JB		 4576 err = nl80211_parse_key(info, &key);
4577 if (err)
4578 return err;
41ade00f 4579
f8af764b
JM		 4580 if (!key.p.key) {
4581 GENL_SET_ERR_MSG(info, "no key");
41ade00f 4582 return -EINVAL;
f8af764b 4583 }
41ade00f 4584
41ade00f
JB		 4585 if (info->attrs[NL80211_ATTR_MAC])
4586 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4587
e31b8213
JB		 4588 if (key.type == -1) {
4589 if (mac_addr)
4590 key.type = NL80211_KEYTYPE_PAIRWISE;
4591 else
4592 key.type = NL80211_KEYTYPE_GROUP;
4593 }
4594
4595 /* for now */
4596 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
f8af764b
JM		 4597 key.type != NL80211_KEYTYPE_GROUP) {
4598 GENL_SET_ERR_MSG(info, "key type not pairwise or group");
e31b8213 4599 return -EINVAL;
f8af764b 4600 }
e31b8213 4601
14f34e36
GG		 4602 if (key.type == NL80211_KEYTYPE_GROUP &&
4603 info->attrs[NL80211_ATTR_VLAN_ID])
4604 key.p.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
4605
4c476991
JB		 4606 if (!rdev->ops->add_key)
4607 return -EOPNOTSUPP;
25e47c18 4608
e31b8213
JB		 4609 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
4610 key.type == NL80211_KEYTYPE_PAIRWISE,
f8af764b
JM		 4611 mac_addr)) {
4612 GENL_SET_ERR_MSG(info, "key setting validation failed");
4c476991 4613 return -EINVAL;
f8af764b 4614 }
41ade00f 4615
fffd0934
JB		 4616 wdev_lock(dev->ieee80211_ptr);
4617 err = nl80211_key_allowed(dev->ieee80211_ptr);
f8af764b
JM		 4618 if (err)
4619 GENL_SET_ERR_MSG(info, "key not allowed");
4620 if (!err) {
e35e4d28
HG		 4621 err = rdev_add_key(rdev, dev, key.idx,
4622 key.type == NL80211_KEYTYPE_PAIRWISE,
4623 mac_addr, &key.p);
f8af764b
JM		 4624 if (err)
4625 GENL_SET_ERR_MSG(info, "key addition failed");
4626 }
fffd0934 4627 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4628
41ade00f
JB		 4629 return err;
4630}
4631
4632static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
4633{
4c476991 4634 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4635 int err;
4c476991 4636 struct net_device *dev = info->user_ptr[1];
41ade00f 4637 u8 *mac_addr = NULL;
b9454e83 4638 struct key_parse key;
41ade00f 4639
b9454e83
JB		 4640 err = nl80211_parse_key(info, &key);
4641 if (err)
4642 return err;
41ade00f
JB		 4643
4644 if (info->attrs[NL80211_ATTR_MAC])
4645 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4646
e31b8213
JB		 4647 if (key.type == -1) {
4648 if (mac_addr)
4649 key.type = NL80211_KEYTYPE_PAIRWISE;
4650 else
4651 key.type = NL80211_KEYTYPE_GROUP;
4652 }
4653
4654 /* for now */
4655 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
4656 key.type != NL80211_KEYTYPE_GROUP)
4657 return -EINVAL;
4658
2d946308
AT		 4659 if (!cfg80211_valid_key_idx(rdev, key.idx,
4660 key.type == NL80211_KEYTYPE_PAIRWISE))
4661 return -EINVAL;
4662
4c476991
JB		 4663 if (!rdev->ops->del_key)
4664 return -EOPNOTSUPP;
41ade00f 4665
fffd0934
JB		 4666 wdev_lock(dev->ieee80211_ptr);
4667 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213 4668
0fa7b391 4669 if (key.type == NL80211_KEYTYPE_GROUP && mac_addr &&
e31b8213
JB		 4670 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4671 err = -ENOENT;
4672
fffd0934 4673 if (!err)
e35e4d28
HG		 4674 err = rdev_del_key(rdev, dev, key.idx,
4675 key.type == NL80211_KEYTYPE_PAIRWISE,
4676 mac_addr);
41ade00f 4677
3d23e349 4678#ifdef CONFIG_CFG80211_WEXT
08645126 4679 if (!err) {
b9454e83 4680 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 4681 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 4682 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 4683 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
4684 }
4685#endif
fffd0934 4686 wdev_unlock(dev->ieee80211_ptr);
08645126 4687
41ade00f
JB		 4688 return err;
4689}
4690
77765eaf
VT		 4691/* This function returns an error or the number of nested attributes */
4692static int validate_acl_mac_addrs(struct nlattr *nl_attr)
4693{
4694 struct nlattr *attr;
4695 int n_entries = 0, tmp;
4696
4697 nla_for_each_nested(attr, nl_attr, tmp) {
4698 if (nla_len(attr) != ETH_ALEN)
4699 return -EINVAL;
4700
4701 n_entries++;
4702 }
4703
4704 return n_entries;
4705}
4706
4707/*
4708 * This function parses ACL information and allocates memory for ACL data.
4709 * On successful return, the calling function is responsible to free the
4710 * ACL buffer returned by this function.
4711 */
4712static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
4713 struct genl_info *info)
4714{
4715 enum nl80211_acl_policy acl_policy;
4716 struct nlattr *attr;
4717 struct cfg80211_acl_data *acl;
4718 int i = 0, n_entries, tmp;
4719
4720 if (!wiphy->max_acl_mac_addrs)
4721 return ERR_PTR(-EOPNOTSUPP);
4722
4723 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
4724 return ERR_PTR(-EINVAL);
4725
4726 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
4727 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
4728 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
4729 return ERR_PTR(-EINVAL);
4730
4731 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
4732 return ERR_PTR(-EINVAL);
4733
4734 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
4735 if (n_entries < 0)
4736 return ERR_PTR(n_entries);
4737
4738 if (n_entries > wiphy->max_acl_mac_addrs)
4739 return ERR_PTR(-ENOTSUPP);
4740
391d132c 4741 acl = kzalloc(struct_size(acl, mac_addrs, n_entries), GFP_KERNEL);
77765eaf
VT		 4742 if (!acl)
4743 return ERR_PTR(-ENOMEM);
4744
4745 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
4746 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
4747 i++;
4748 }
4749
4750 acl->n_acl_entries = n_entries;
4751 acl->acl_policy = acl_policy;
4752
4753 return acl;
4754}
4755
4756static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
4757{
4758 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4759 struct net_device *dev = info->user_ptr[1];
4760 struct cfg80211_acl_data *acl;
4761 int err;
4762
4763 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4764 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4765 return -EOPNOTSUPP;
4766
7b0a0e3c 4767 if (!dev->ieee80211_ptr->links[0].ap.beacon_interval)
77765eaf
VT		 4768 return -EINVAL;
4769
4770 acl = parse_acl_data(&rdev->wiphy, info);
4771 if (IS_ERR(acl))
4772 return PTR_ERR(acl);
4773
4774 err = rdev_set_mac_acl(rdev, dev, acl);
4775
4776 kfree(acl);
4777
4778 return err;
4779}
4780
a7c7fbff
PK		 4781static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4782 u8 *rates, u8 rates_len)
4783{
4784 u8 i;
4785 u32 mask = 0;
4786
4787 for (i = 0; i < rates_len; i++) {
4788 int rate = (rates[i] & 0x7f) * 5;
4789 int ridx;
4790
4791 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
4792 struct ieee80211_rate *srate =
4793 &sband->bitrates[ridx];
4794 if (rate == srate->bitrate) {
4795 mask |= 1 << ridx;
4796 break;
4797 }
4798 }
4799 if (ridx == sband->n_bitrates)
4800 return 0; /* rate not found */
4801 }
4802
4803 return mask;
4804}
4805
4806static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
4807 u8 *rates, u8 rates_len,
4808 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
4809{
4810 u8 i;
4811
4812 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
4813
4814 for (i = 0; i < rates_len; i++) {
4815 int ridx, rbit;
4816
4817 ridx = rates[i] / 8;
4818 rbit = BIT(rates[i] % 8);
4819
4820 /* check validity */
4821 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
4822 return false;
4823
4824 /* check availability */
30fe6d50 4825 ridx = array_index_nospec(ridx, IEEE80211_HT_MCS_MASK_LEN);
a7c7fbff
PK		 4826 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
4827 mcs[ridx] |= rbit;
4828 else
4829 return false;
4830 }
4831
4832 return true;
4833}
4834
4835static u16 vht_mcs_map_to_mcs_mask(u8 vht_mcs_map)
4836{
4837 u16 mcs_mask = 0;
4838
4839 switch (vht_mcs_map) {
4840 case IEEE80211_VHT_MCS_NOT_SUPPORTED:
4841 break;
4842 case IEEE80211_VHT_MCS_SUPPORT_0_7:
4843 mcs_mask = 0x00FF;
4844 break;
4845 case IEEE80211_VHT_MCS_SUPPORT_0_8:
4846 mcs_mask = 0x01FF;
4847 break;
4848 case IEEE80211_VHT_MCS_SUPPORT_0_9:
4849 mcs_mask = 0x03FF;
4850 break;
4851 default:
4852 break;
4853 }
4854
4855 return mcs_mask;
4856}
4857
4858static void vht_build_mcs_mask(u16 vht_mcs_map,
4859 u16 vht_mcs_mask[NL80211_VHT_NSS_MAX])
4860{
4861 u8 nss;
4862
4863 for (nss = 0; nss < NL80211_VHT_NSS_MAX; nss++) {
4864 vht_mcs_mask[nss] = vht_mcs_map_to_mcs_mask(vht_mcs_map & 0x03);
4865 vht_mcs_map >>= 2;
4866 }
4867}
4868
4869static bool vht_set_mcs_mask(struct ieee80211_supported_band *sband,
4870 struct nl80211_txrate_vht *txrate,
4871 u16 mcs[NL80211_VHT_NSS_MAX])
4872{
4873 u16 tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4874 u16 tx_mcs_mask[NL80211_VHT_NSS_MAX] = {};
4875 u8 i;
4876
4877 if (!sband->vht_cap.vht_supported)
4878 return false;
4879
4880 memset(mcs, 0, sizeof(u16) * NL80211_VHT_NSS_MAX);
4881
4882 /* Build vht_mcs_mask from VHT capabilities */
4883 vht_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4884
4885 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
4886 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4887 mcs[i] = txrate->mcs[i];
4888 else
4889 return false;
4890 }
4891
4892 return true;
4893}
4894
eb89a6a6
MH		 4895static u16 he_mcs_map_to_mcs_mask(u8 he_mcs_map)
4896{
4897 switch (he_mcs_map) {
4898 case IEEE80211_HE_MCS_NOT_SUPPORTED:
4899 return 0;
4900 case IEEE80211_HE_MCS_SUPPORT_0_7:
4901 return 0x00FF;
4902 case IEEE80211_HE_MCS_SUPPORT_0_9:
4903 return 0x03FF;
4904 case IEEE80211_HE_MCS_SUPPORT_0_11:
4905 return 0xFFF;
4906 default:
4907 break;
4908 }
4909 return 0;
4910}
4911
4912static void he_build_mcs_mask(u16 he_mcs_map,
4913 u16 he_mcs_mask[NL80211_HE_NSS_MAX])
4914{
4915 u8 nss;
4916
4917 for (nss = 0; nss < NL80211_HE_NSS_MAX; nss++) {
4918 he_mcs_mask[nss] = he_mcs_map_to_mcs_mask(he_mcs_map & 0x03);
4919 he_mcs_map >>= 2;
4920 }
4921}
4922
7b0a0e3c 4923static u16 he_get_txmcsmap(struct genl_info *info, unsigned int link_id,
eb89a6a6
MH		 4924 const struct ieee80211_sta_he_cap *he_cap)
4925{
4926 struct net_device *dev = info->user_ptr[1];
4927 struct wireless_dev *wdev = dev->ieee80211_ptr;
7b0a0e3c
JB		 4928 struct cfg80211_chan_def *chandef;
4929 __le16 tx_mcs;
eb89a6a6 4930
7b0a0e3c
JB		 4931 chandef = wdev_chandef(wdev, link_id);
4932 if (!chandef) {
4933 /*
4934 * This is probably broken, but we never maintained
4935 * a chandef in these cases, so it always was.
4936 */
4937 return le16_to_cpu(he_cap->he_mcs_nss_supp.tx_mcs_80);
4938 }
4939
4940 switch (chandef->width) {
eb89a6a6
MH		 4941 case NL80211_CHAN_WIDTH_80P80:
4942 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80p80;
4943 break;
4944 case NL80211_CHAN_WIDTH_160:
4945 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_160;
4946 break;
4947 default:
4948 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80;
4949 break;
4950 }
7b0a0e3c 4951
eb89a6a6
MH		 4952 return le16_to_cpu(tx_mcs);
4953}
4954
4955static bool he_set_mcs_mask(struct genl_info *info,
4956 struct wireless_dev *wdev,
4957 struct ieee80211_supported_band *sband,
4958 struct nl80211_txrate_he *txrate,
7b0a0e3c
JB		 4959 u16 mcs[NL80211_HE_NSS_MAX],
4960 unsigned int link_id)
eb89a6a6
MH		 4961{
4962 const struct ieee80211_sta_he_cap *he_cap;
4963 u16 tx_mcs_mask[NL80211_HE_NSS_MAX] = {};
4964 u16 tx_mcs_map = 0;
4965 u8 i;
4966
4967 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
4968 if (!he_cap)
4969 return false;
4970
4971 memset(mcs, 0, sizeof(u16) * NL80211_HE_NSS_MAX);
4972
7b0a0e3c 4973 tx_mcs_map = he_get_txmcsmap(info, link_id, he_cap);
eb89a6a6
MH		 4974
4975 /* Build he_mcs_mask from HE capabilities */
4976 he_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4977
4978 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
4979 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4980 mcs[i] = txrate->mcs[i];
4981 else
4982 return false;
4983 }
4984
4985 return true;
4986}
4987
a7c7fbff 4988static int nl80211_parse_tx_bitrate_mask(struct genl_info *info,
9a5f6488
TC		 4989 struct nlattr *attrs[],
4990 enum nl80211_attrs attr,
eb89a6a6 4991 struct cfg80211_bitrate_mask *mask,
857b34c4 4992 struct net_device *dev,
7b0a0e3c
JB		 4993 bool default_all_enabled,
4994 unsigned int link_id)
a7c7fbff
PK		 4995{
4996 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4997 struct cfg80211_registered_device *rdev = info->user_ptr[0];
eb89a6a6 4998 struct wireless_dev *wdev = dev->ieee80211_ptr;
a7c7fbff
PK		 4999 int rem, i;
5000 struct nlattr *tx_rates;
5001 struct ieee80211_supported_band *sband;
eb89a6a6 5002 u16 vht_tx_mcs_map, he_tx_mcs_map;
a7c7fbff
PK		 5003
5004 memset(mask, 0, sizeof(*mask));
5005 /* Default to all rates enabled */
5006 for (i = 0; i < NUM_NL80211_BANDS; i++) {
eb89a6a6
MH		 5007 const struct ieee80211_sta_he_cap *he_cap;
5008
857b34c4
RM		 5009 if (!default_all_enabled)
5010 break;
5011
a7c7fbff
PK		 5012 sband = rdev->wiphy.bands[i];
5013
5014 if (!sband)
5015 continue;
5016
5017 mask->control[i].legacy = (1 << sband->n_bitrates) - 1;
5018 memcpy(mask->control[i].ht_mcs,
5019 sband->ht_cap.mcs.rx_mask,
5020 sizeof(mask->control[i].ht_mcs));
5021
9df66d5b
PKS		 5022 if (sband->vht_cap.vht_supported) {
5023 vht_tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
5024 vht_build_mcs_mask(vht_tx_mcs_map, mask->control[i].vht_mcs);
5025 }
eb89a6a6
MH		 5026
5027 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
5028 if (!he_cap)
5029 continue;
5030
7b0a0e3c 5031 he_tx_mcs_map = he_get_txmcsmap(info, link_id, he_cap);
eb89a6a6
MH		 5032 he_build_mcs_mask(he_tx_mcs_map, mask->control[i].he_mcs);
5033
5034 mask->control[i].he_gi = 0xFF;
5035 mask->control[i].he_ltf = 0xFF;
a7c7fbff
PK		 5036 }
5037
5038 /* if no rates are given set it back to the defaults */
9a5f6488 5039 if (!attrs[attr])
a7c7fbff
PK		 5040 goto out;
5041
5042 /* The nested attribute uses enum nl80211_band as the index. This maps
5043 * directly to the enum nl80211_band values used in cfg80211.
5044 */
5045 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
9a5f6488 5046 nla_for_each_nested(tx_rates, attrs[attr], rem) {
a7c7fbff
PK		 5047 enum nl80211_band band = nla_type(tx_rates);
5048 int err;
5049
5050 if (band < 0 || band >= NUM_NL80211_BANDS)
5051 return -EINVAL;
5052 sband = rdev->wiphy.bands[band];
5053 if (sband == NULL)
5054 return -EINVAL;
8cb08174
JB		 5055 err = nla_parse_nested_deprecated(tb, NL80211_TXRATE_MAX,
5056 tx_rates,
5057 nl80211_txattr_policy,
5058 info->extack);
a7c7fbff
PK		 5059 if (err)
5060 return err;
5061 if (tb[NL80211_TXRATE_LEGACY]) {
5062 mask->control[band].legacy = rateset_to_mask(
5063 sband,
5064 nla_data(tb[NL80211_TXRATE_LEGACY]),
5065 nla_len(tb[NL80211_TXRATE_LEGACY]));
5066 if ((mask->control[band].legacy == 0) &&
5067 nla_len(tb[NL80211_TXRATE_LEGACY]))
5068 return -EINVAL;
5069 }
5070 if (tb[NL80211_TXRATE_HT]) {
5071 if (!ht_rateset_to_mask(
5072 sband,
5073 nla_data(tb[NL80211_TXRATE_HT]),
5074 nla_len(tb[NL80211_TXRATE_HT]),
5075 mask->control[band].ht_mcs))
5076 return -EINVAL;
5077 }
c4a30446 5078
a7c7fbff
PK		 5079 if (tb[NL80211_TXRATE_VHT]) {
5080 if (!vht_set_mcs_mask(
5081 sband,
5082 nla_data(tb[NL80211_TXRATE_VHT]),
5083 mask->control[band].vht_mcs))
5084 return -EINVAL;
5085 }
c4a30446 5086
a7c7fbff
PK		 5087 if (tb[NL80211_TXRATE_GI]) {
5088 mask->control[band].gi =
5089 nla_get_u8(tb[NL80211_TXRATE_GI]);
5090 if (mask->control[band].gi > NL80211_TXRATE_FORCE_LGI)
5091 return -EINVAL;
5092 }
eb89a6a6
MH		 5093 if (tb[NL80211_TXRATE_HE] &&
5094 !he_set_mcs_mask(info, wdev, sband,
5095 nla_data(tb[NL80211_TXRATE_HE]),
7b0a0e3c
JB		 5096 mask->control[band].he_mcs,
5097 link_id))
eb89a6a6 5098 return -EINVAL;
c4a30446 5099
eb89a6a6
MH		 5100 if (tb[NL80211_TXRATE_HE_GI])
5101 mask->control[band].he_gi =
5102 nla_get_u8(tb[NL80211_TXRATE_HE_GI]);
5103 if (tb[NL80211_TXRATE_HE_LTF])
5104 mask->control[band].he_ltf =
5105 nla_get_u8(tb[NL80211_TXRATE_HE_LTF]);
a7c7fbff
PK		 5106
5107 if (mask->control[band].legacy == 0) {
eb89a6a6 5108 /* don't allow empty legacy rates if HT, VHT or HE
a7c7fbff
PK		 5109 * are not even supported.
5110 */
5111 if (!(rdev->wiphy.bands[band]->ht_cap.ht_supported ||
eb89a6a6
MH		 5112 rdev->wiphy.bands[band]->vht_cap.vht_supported ||
5113 ieee80211_get_he_iftype_cap(sband, wdev->iftype)))
a7c7fbff
PK		 5114 return -EINVAL;
5115
5116 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
5117 if (mask->control[band].ht_mcs[i])
5118 goto out;
5119
5120 for (i = 0; i < NL80211_VHT_NSS_MAX; i++)
5121 if (mask->control[band].vht_mcs[i])
5122 goto out;
5123
eb89a6a6
MH		 5124 for (i = 0; i < NL80211_HE_NSS_MAX; i++)
5125 if (mask->control[band].he_mcs[i])
5126 goto out;
5127
a7c7fbff
PK		 5128 /* legacy and mcs rates may not be both empty */
5129 return -EINVAL;
5130 }
5131 }
5132
5133out:
5134 return 0;
5135}
5136
8564e382
JB		 5137static int validate_beacon_tx_rate(struct cfg80211_registered_device *rdev,
5138 enum nl80211_band band,
5139 struct cfg80211_bitrate_mask *beacon_rate)
a7c7fbff 5140{
c4a30446 5141 u32 count_ht, count_vht, count_he, i;
8564e382 5142 u32 rate = beacon_rate->control[band].legacy;
a7c7fbff
PK		 5143
5144 /* Allow only one rate */
5145 if (hweight32(rate) > 1)
5146 return -EINVAL;
5147
5148 count_ht = 0;
5149 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
8564e382 5150 if (hweight8(beacon_rate->control[band].ht_mcs[i]) > 1) {
a7c7fbff 5151 return -EINVAL;
8564e382 5152 } else if (beacon_rate->control[band].ht_mcs[i]) {
a7c7fbff
PK		 5153 count_ht++;
5154 if (count_ht > 1)
5155 return -EINVAL;
5156 }
5157 if (count_ht && rate)
5158 return -EINVAL;
5159 }
5160
5161 count_vht = 0;
5162 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
8564e382 5163 if (hweight16(beacon_rate->control[band].vht_mcs[i]) > 1) {
a7c7fbff 5164 return -EINVAL;
8564e382 5165 } else if (beacon_rate->control[band].vht_mcs[i]) {
a7c7fbff
PK		 5166 count_vht++;
5167 if (count_vht > 1)
5168 return -EINVAL;
5169 }
5170 if (count_vht && rate)
5171 return -EINVAL;
5172 }
5173
c4a30446
RM		 5174 count_he = 0;
5175 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
5176 if (hweight16(beacon_rate->control[band].he_mcs[i]) > 1) {
5177 return -EINVAL;
5178 } else if (beacon_rate->control[band].he_mcs[i]) {
5179 count_he++;
5180 if (count_he > 1)
5181 return -EINVAL;
5182 }
5183 if (count_he && rate)
5184 return -EINVAL;
5185 }
5186
5187 if ((count_ht && count_vht && count_he) ||
5188 (!rate && !count_ht && !count_vht && !count_he))
a7c7fbff
PK		 5189 return -EINVAL;
5190
8564e382
JB		 5191 if (rate &&
5192 !wiphy_ext_feature_isset(&rdev->wiphy,
5193 NL80211_EXT_FEATURE_BEACON_RATE_LEGACY))
5194 return -EINVAL;
5195 if (count_ht &&
5196 !wiphy_ext_feature_isset(&rdev->wiphy,
5197 NL80211_EXT_FEATURE_BEACON_RATE_HT))
5198 return -EINVAL;
5199 if (count_vht &&
5200 !wiphy_ext_feature_isset(&rdev->wiphy,
5201 NL80211_EXT_FEATURE_BEACON_RATE_VHT))
5202 return -EINVAL;
c4a30446
RM		 5203 if (count_he &&
5204 !wiphy_ext_feature_isset(&rdev->wiphy,
5205 NL80211_EXT_FEATURE_BEACON_RATE_HE))
5206 return -EINVAL;
8564e382 5207
a7c7fbff
PK		 5208 return 0;
5209}
5210
dc1e3cb8
JC		 5211static int nl80211_parse_mbssid_config(struct wiphy *wiphy,
5212 struct net_device *dev,
5213 struct nlattr *attrs,
5214 struct cfg80211_mbssid_config *config,
5215 u8 num_elems)
5216{
5217 struct nlattr *tb[NL80211_MBSSID_CONFIG_ATTR_MAX + 1];
5218
5219 if (!wiphy->mbssid_max_interfaces)
5220 return -EOPNOTSUPP;
5221
5222 if (nla_parse_nested(tb, NL80211_MBSSID_CONFIG_ATTR_MAX, attrs, NULL,
5223 NULL) ||
5224 !tb[NL80211_MBSSID_CONFIG_ATTR_INDEX])
5225 return -EINVAL;
5226
5227 config->ema = nla_get_flag(tb[NL80211_MBSSID_CONFIG_ATTR_EMA]);
5228 if (config->ema) {
5229 if (!wiphy->ema_max_profile_periodicity)
5230 return -EOPNOTSUPP;
5231
5232 if (num_elems > wiphy->ema_max_profile_periodicity)
5233 return -EINVAL;
5234 }
5235
5236 config->index = nla_get_u8(tb[NL80211_MBSSID_CONFIG_ATTR_INDEX]);
5237 if (config->index >= wiphy->mbssid_max_interfaces ||
5238 (!config->index && !num_elems))
5239 return -EINVAL;
5240
5241 if (tb[NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX]) {
5242 u32 tx_ifindex =
5243 nla_get_u32(tb[NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX]);
5244
5245 if ((!config->index && tx_ifindex != dev->ifindex) ||
5246 (config->index && tx_ifindex == dev->ifindex))
5247 return -EINVAL;
5248
5249 if (tx_ifindex != dev->ifindex) {
5250 struct net_device *tx_netdev =
5251 dev_get_by_index(wiphy_net(wiphy), tx_ifindex);
5252
5253 if (!tx_netdev || !tx_netdev->ieee80211_ptr ||
5254 tx_netdev->ieee80211_ptr->wiphy != wiphy ||
5255 tx_netdev->ieee80211_ptr->iftype !=
5256 NL80211_IFTYPE_AP) {
5257 dev_put(tx_netdev);
5258 return -EINVAL;
5259 }
5260
5261 config->tx_wdev = tx_netdev->ieee80211_ptr;
5262 } else {
5263 config->tx_wdev = dev->ieee80211_ptr;
5264 }
5265 } else if (!config->index) {
5266 config->tx_wdev = dev->ieee80211_ptr;
5267 } else {
5268 return -EINVAL;
5269 }
5270
5271 return 0;
5272}
5273
5274static struct cfg80211_mbssid_elems *
5275nl80211_parse_mbssid_elems(struct wiphy *wiphy, struct nlattr *attrs)
5276{
5277 struct nlattr *nl_elems;
5278 struct cfg80211_mbssid_elems *elems;
5279 int rem_elems;
5280 u8 i = 0, num_elems = 0;
5281
5282 if (!wiphy->mbssid_max_interfaces)
5283 return ERR_PTR(-EINVAL);
5284
5285 nla_for_each_nested(nl_elems, attrs, rem_elems)
5286 num_elems++;
5287
5288 elems = kzalloc(struct_size(elems, elem, num_elems), GFP_KERNEL);
5289 if (!elems)
5290 return ERR_PTR(-ENOMEM);
5291
5292 nla_for_each_nested(nl_elems, attrs, rem_elems) {
5293 elems->elem[i].data = nla_data(nl_elems);
5294 elems->elem[i].len = nla_len(nl_elems);
5295 i++;
5296 }
5297 elems->cnt = num_elems;
5298 return elems;
5299}
5300
3d48cb74
RS		 5301static int nl80211_parse_he_bss_color(struct nlattr *attrs,
5302 struct cfg80211_he_bss_color *he_bss_color)
5303{
5304 struct nlattr *tb[NL80211_HE_BSS_COLOR_ATTR_MAX + 1];
5305 int err;
5306
5307 err = nla_parse_nested(tb, NL80211_HE_BSS_COLOR_ATTR_MAX, attrs,
5308 he_bss_color_policy, NULL);
5309 if (err)
5310 return err;
5311
5312 if (!tb[NL80211_HE_BSS_COLOR_ATTR_COLOR])
5313 return -EINVAL;
5314
5315 he_bss_color->color =
5316 nla_get_u8(tb[NL80211_HE_BSS_COLOR_ATTR_COLOR]);
5317 he_bss_color->enabled =
5318 !nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_DISABLED]);
5319 he_bss_color->partial =
5320 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_PARTIAL]);
5321
5322 return 0;
5323}
5324
81e54d08
PKC		 5325static int nl80211_parse_beacon(struct cfg80211_registered_device *rdev,
5326 struct nlattr *attrs[],
8860020e 5327 struct cfg80211_beacon_data *bcn)
ed1b6cc7 5328{
8860020e 5329 bool haveinfo = false;
81e54d08 5330 int err;
ed1b6cc7 5331
8860020e 5332 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 5333
7b0a0e3c
JB		 5334 bcn->link_id = nl80211_link_id(attrs);
5335
a1193be8
SW		 5336 if (attrs[NL80211_ATTR_BEACON_HEAD]) {
5337 bcn->head = nla_data(attrs[NL80211_ATTR_BEACON_HEAD]);
5338 bcn->head_len = nla_len(attrs[NL80211_ATTR_BEACON_HEAD]);
8860020e
JB		 5339 if (!bcn->head_len)
5340 return -EINVAL;
5341 haveinfo = true;
ed1b6cc7
JB		 5342 }
5343
a1193be8
SW		 5344 if (attrs[NL80211_ATTR_BEACON_TAIL]) {
5345 bcn->tail = nla_data(attrs[NL80211_ATTR_BEACON_TAIL]);
5346 bcn->tail_len = nla_len(attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 5347 haveinfo = true;
ed1b6cc7
JB		 5348 }
5349
4c476991
JB		 5350 if (!haveinfo)
5351 return -EINVAL;
3b85875a 5352
a1193be8
SW		 5353 if (attrs[NL80211_ATTR_IE]) {
5354 bcn->beacon_ies = nla_data(attrs[NL80211_ATTR_IE]);
5355 bcn->beacon_ies_len = nla_len(attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 5356 }
5357
a1193be8 5358 if (attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 5359 bcn->proberesp_ies =
a1193be8 5360 nla_data(attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 5361 bcn->proberesp_ies_len =
a1193be8 5362 nla_len(attrs[NL80211_ATTR_IE_PROBE_RESP]);
9946ecfb
JM		 5363 }
5364
a1193be8 5365 if (attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 5366 bcn->assocresp_ies =
a1193be8 5367 nla_data(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 5368 bcn->assocresp_ies_len =
a1193be8 5369 nla_len(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
9946ecfb
JM		 5370 }
5371
a1193be8
SW		 5372 if (attrs[NL80211_ATTR_PROBE_RESP]) {
5373 bcn->probe_resp = nla_data(attrs[NL80211_ATTR_PROBE_RESP]);
5374 bcn->probe_resp_len = nla_len(attrs[NL80211_ATTR_PROBE_RESP]);
00f740e1
AN		 5375 }
5376
81e54d08
PKC		 5377 if (attrs[NL80211_ATTR_FTM_RESPONDER]) {
5378 struct nlattr *tb[NL80211_FTM_RESP_ATTR_MAX + 1];
5379
8cb08174
JB		 5380 err = nla_parse_nested_deprecated(tb,
5381 NL80211_FTM_RESP_ATTR_MAX,
5382 attrs[NL80211_ATTR_FTM_RESPONDER],
5383 NULL, NULL);
81e54d08
PKC		 5384 if (err)
5385 return err;
5386
5387 if (tb[NL80211_FTM_RESP_ATTR_ENABLED] &&
5388 wiphy_ext_feature_isset(&rdev->wiphy,
5389 NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER))
5390 bcn->ftm_responder = 1;
5391 else
5392 return -EOPNOTSUPP;
5393
5394 if (tb[NL80211_FTM_RESP_ATTR_LCI]) {
5395 bcn->lci = nla_data(tb[NL80211_FTM_RESP_ATTR_LCI]);
5396 bcn->lci_len = nla_len(tb[NL80211_FTM_RESP_ATTR_LCI]);
5397 }
5398
5399 if (tb[NL80211_FTM_RESP_ATTR_CIVICLOC]) {
5400 bcn->civicloc = nla_data(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
5401 bcn->civicloc_len = nla_len(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
5402 }
5403 } else {
5404 bcn->ftm_responder = -1;
5405 }
5406
3d48cb74
RS		 5407 if (attrs[NL80211_ATTR_HE_BSS_COLOR]) {
5408 err = nl80211_parse_he_bss_color(attrs[NL80211_ATTR_HE_BSS_COLOR],
5409 &bcn->he_bss_color);
5410 if (err)
5411 return err;
5412 bcn->he_bss_color_valid = true;
5413 }
5414
dc1e3cb8
JC		 5415 if (attrs[NL80211_ATTR_MBSSID_ELEMS]) {
5416 struct cfg80211_mbssid_elems *mbssid =
5417 nl80211_parse_mbssid_elems(&rdev->wiphy,
5418 attrs[NL80211_ATTR_MBSSID_ELEMS]);
5419
5420 if (IS_ERR(mbssid))
5421 return PTR_ERR(mbssid);
5422
5423 bcn->mbssid_ies = mbssid;
5424 }
5425
8860020e
JB		 5426 return 0;
5427}
5428
796e90f4
JC		 5429static int nl80211_parse_he_obss_pd(struct nlattr *attrs,
5430 struct ieee80211_he_obss_pd *he_obss_pd)
5431{
5432 struct nlattr *tb[NL80211_HE_OBSS_PD_ATTR_MAX + 1];
5433 int err;
5434
5435 err = nla_parse_nested(tb, NL80211_HE_OBSS_PD_ATTR_MAX, attrs,
5436 he_obss_pd_policy, NULL);
5437 if (err)
5438 return err;
5439
f5bec330
RM		 5440 if (!tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL])
5441 return -EINVAL;
5442
5443 he_obss_pd->sr_ctrl = nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL]);
5444
6c8b6e4a
RM		 5445 if (tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET])
5446 he_obss_pd->min_offset =
5447 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET]);
5448 if (tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET])
5449 he_obss_pd->max_offset =
5450 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET]);
f5bec330
RM		 5451 if (tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET])
5452 he_obss_pd->non_srg_max_offset =
5453 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET]);
6c8b6e4a
RM		 5454
5455 if (he_obss_pd->min_offset > he_obss_pd->max_offset)
796e90f4
JC		 5456 return -EINVAL;
5457
f5bec330
RM		 5458 if (tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP])
5459 memcpy(he_obss_pd->bss_color_bitmap,
5460 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP]),
5461 sizeof(he_obss_pd->bss_color_bitmap));
5462
5463 if (tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP])
5464 memcpy(he_obss_pd->partial_bssid_bitmap,
5465 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP]),
5466 sizeof(he_obss_pd->partial_bssid_bitmap));
5467
796e90f4
JC		 5468 he_obss_pd->enable = true;
5469
5470 return 0;
5471}
5472
291c49de
AD		 5473static int nl80211_parse_fils_discovery(struct cfg80211_registered_device *rdev,
5474 struct nlattr *attrs,
5475 struct cfg80211_ap_settings *params)
5476{
5477 struct nlattr *tb[NL80211_FILS_DISCOVERY_ATTR_MAX + 1];
5478 int ret;
5479 struct cfg80211_fils_discovery *fd = &params->fils_discovery;
5480
5481 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5482 NL80211_EXT_FEATURE_FILS_DISCOVERY))
5483 return -EINVAL;
5484
5485 ret = nla_parse_nested(tb, NL80211_FILS_DISCOVERY_ATTR_MAX, attrs,
5486 NULL, NULL);
5487 if (ret)
5488 return ret;
5489
5490 if (!tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN] ||
5491 !tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX] ||
5492 !tb[NL80211_FILS_DISCOVERY_ATTR_TMPL])
5493 return -EINVAL;
5494
5495 fd->tmpl_len = nla_len(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5496 fd->tmpl = nla_data(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5497 fd->min_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN]);
5498 fd->max_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX]);
5499
5500 return 0;
5501}
5502
7443dcd1
AD		 5503static int
5504nl80211_parse_unsol_bcast_probe_resp(struct cfg80211_registered_device *rdev,
5505 struct nlattr *attrs,
5506 struct cfg80211_ap_settings *params)
5507{
5508 struct nlattr *tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1];
5509 int ret;
5510 struct cfg80211_unsol_bcast_probe_resp *presp =
5511 &params->unsol_bcast_probe_resp;
5512
5513 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5514 NL80211_EXT_FEATURE_UNSOL_BCAST_PROBE_RESP))
5515 return -EINVAL;
5516
5517 ret = nla_parse_nested(tb, NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX,
5518 attrs, NULL, NULL);
5519 if (ret)
5520 return ret;
5521
5522 if (!tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] ||
5523 !tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL])
5524 return -EINVAL;
5525
5526 presp->tmpl = nla_data(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5527 presp->tmpl_len = nla_len(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5528 presp->interval = nla_get_u32(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT]);
5529 return 0;
5530}
5531
66cd794e 5532static void nl80211_check_ap_rate_selectors(struct cfg80211_ap_settings *params,
153e2a11 5533 const struct element *rates)
66cd794e
JB		 5534{
5535 int i;
5536
5537 if (!rates)
5538 return;
5539
153e2a11
JB		 5540 for (i = 0; i < rates->datalen; i++) {
5541 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
66cd794e 5542 params->ht_required = true;
153e2a11 5543 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_VHT_PHY)
66cd794e 5544 params->vht_required = true;
153e2a11 5545 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_HE_PHY)
2a392596 5546 params->he_required = true;
153e2a11 5547 if (rates->data[i] == BSS_MEMBERSHIP_SELECTOR_SAE_H2E)
d6587602 5548 params->sae_h2e_required = true;
66cd794e
JB		 5549 }
5550}
5551
5552/*
5553 * Since the nl80211 API didn't include, from the beginning, attributes about
5554 * HT/VHT requirements/capabilities, we parse them out of the IEs for the
5555 * benefit of drivers that rebuild IEs in the firmware.
5556 */
8bc65d38 5557static int nl80211_calculate_ap_params(struct cfg80211_ap_settings *params)
66cd794e
JB		 5558{
5559 const struct cfg80211_beacon_data *bcn = &params->beacon;
ba83bfb1
IM		 5560 size_t ies_len = bcn->tail_len;
5561 const u8 *ies = bcn->tail;
153e2a11
JB		 5562 const struct element *rates;
5563 const struct element *cap;
66cd794e 5564
153e2a11 5565 rates = cfg80211_find_elem(WLAN_EID_SUPP_RATES, ies, ies_len);
66cd794e
JB		 5566 nl80211_check_ap_rate_selectors(params, rates);
5567
153e2a11 5568 rates = cfg80211_find_elem(WLAN_EID_EXT_SUPP_RATES, ies, ies_len);
66cd794e
JB		 5569 nl80211_check_ap_rate_selectors(params, rates);
5570
153e2a11
JB		 5571 cap = cfg80211_find_elem(WLAN_EID_HT_CAPABILITY, ies, ies_len);
5572 if (cap && cap->datalen >= sizeof(*params->ht_cap))
5573 params->ht_cap = (void *)cap->data;
5574 cap = cfg80211_find_elem(WLAN_EID_VHT_CAPABILITY, ies, ies_len);
5575 if (cap && cap->datalen >= sizeof(*params->vht_cap))
5576 params->vht_cap = (void *)cap->data;
5577 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_CAPABILITY, ies, ies_len);
5578 if (cap && cap->datalen >= sizeof(*params->he_cap) + 1)
5579 params->he_cap = (void *)(cap->data + 1);
5580 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_OPERATION, ies, ies_len);
5581 if (cap && cap->datalen >= sizeof(*params->he_oper) + 1)
5582 params->he_oper = (void *)(cap->data + 1);
8bc65d38
AD		 5583 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_EHT_CAPABILITY, ies, ies_len);
5584 if (cap) {
5585 if (!cap->datalen)
5586 return -EINVAL;
5587 params->eht_cap = (void *)(cap->data + 1);
5588 if (!ieee80211_eht_capa_size_ok((const u8 *)params->he_cap,
5589 (const u8 *)params->eht_cap,
5590 cap->datalen - 1))
5591 return -EINVAL;
5592 }
5593 cap = cfg80211_find_ext_elem(WLAN_EID_EXT_EHT_OPERATION, ies, ies_len);
5594 if (cap) {
5595 if (!cap->datalen)
5596 return -EINVAL;
5597 params->eht_oper = (void *)(cap->data + 1);
5598 if (!ieee80211_eht_oper_size_ok((const u8 *)params->eht_oper,
5599 cap->datalen - 1))
5600 return -EINVAL;
5601 }
5602 return 0;
66cd794e
JB		 5603}
5604
46c1dd0c
FF		 5605static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
5606 struct cfg80211_ap_settings *params)
5607{
5608 struct wireless_dev *wdev;
46c1dd0c 5609
53873f13 5610 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
46c1dd0c
FF		 5611 if (wdev->iftype != NL80211_IFTYPE_AP &&
5612 wdev->iftype != NL80211_IFTYPE_P2P_GO)
5613 continue;
5614
7b0a0e3c 5615 if (!wdev->u.ap.preset_chandef.chan)
46c1dd0c
FF		 5616 continue;
5617
7b0a0e3c
JB		 5618 params->chandef = wdev->u.ap.preset_chandef;
5619 return true;
46c1dd0c
FF		 5620 }
5621
7b0a0e3c 5622 return false;
46c1dd0c
FF		 5623}
5624
e39e5b5e
JM		 5625static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
5626 enum nl80211_auth_type auth_type,
5627 enum nl80211_commands cmd)
5628{
5629 if (auth_type > NL80211_AUTHTYPE_MAX)
5630 return false;
5631
5632 switch (cmd) {
5633 case NL80211_CMD_AUTHENTICATE:
5634 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
5635 auth_type == NL80211_AUTHTYPE_SAE)
5636 return false;
63181060
JM		 5637 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5638 NL80211_EXT_FEATURE_FILS_STA) &&
5639 (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5640 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5641 auth_type == NL80211_AUTHTYPE_FILS_PK))
5642 return false;
e39e5b5e
JM		 5643 return true;
5644 case NL80211_CMD_CONNECT:
10773a7c 5645 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
26f7044e
CHH		 5646 !wiphy_ext_feature_isset(&rdev->wiphy,
5647 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10773a7c 5648 auth_type == NL80211_AUTHTYPE_SAE)
a3caf744 5649 return false;
10773a7c 5650
a3caf744
VK		 5651 /* FILS with SK PFS or PK not supported yet */
5652 if (auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5653 auth_type == NL80211_AUTHTYPE_FILS_PK)
5654 return false;
5655 if (!wiphy_ext_feature_isset(
5656 &rdev->wiphy,
5657 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
5658 auth_type == NL80211_AUTHTYPE_FILS_SK)
5659 return false;
5660 return true;
e39e5b5e 5661 case NL80211_CMD_START_AP:
2831a631
CHH		 5662 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5663 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP) &&
5664 auth_type == NL80211_AUTHTYPE_SAE)
e39e5b5e 5665 return false;
63181060
JM		 5666 /* FILS not supported yet */
5667 if (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5668 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5669 auth_type == NL80211_AUTHTYPE_FILS_PK)
5670 return false;
e39e5b5e
JM		 5671 return true;
5672 default:
5673 return false;
5674 }
5675}
5676
8860020e
JB		 5677static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
5678{
5679 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 5680 unsigned int link_id = nl80211_link_id(info->attrs);
8860020e
JB		 5681 struct net_device *dev = info->user_ptr[1];
5682 struct wireless_dev *wdev = dev->ieee80211_ptr;
9e263e19 5683 struct cfg80211_ap_settings *params;
8860020e
JB		 5684 int err;
5685
5686 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5687 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5688 return -EOPNOTSUPP;
5689
5690 if (!rdev->ops->start_ap)
5691 return -EOPNOTSUPP;
5692
7b0a0e3c 5693 if (wdev->links[link_id].ap.beacon_interval)
8860020e
JB		 5694 return -EALREADY;
5695
8860020e
JB		 5696 /* these are required for START_AP */
5697 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
5698 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
5699 !info->attrs[NL80211_ATTR_BEACON_HEAD])
5700 return -EINVAL;
5701
9e263e19
JB		 5702 params = kzalloc(sizeof(*params), GFP_KERNEL);
5703 if (!params)
5704 return -ENOMEM;
5705
5706 err = nl80211_parse_beacon(rdev, info->attrs, &params->beacon);
8860020e 5707 if (err)
9e263e19 5708 goto out;
8860020e 5709
9e263e19 5710 params->beacon_interval =
8860020e 5711 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
9e263e19 5712 params->dtim_period =
8860020e
JB		 5713 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
5714
0c317a02 5715 err = cfg80211_validate_beacon_int(rdev, dev->ieee80211_ptr->iftype,
9e263e19 5716 params->beacon_interval);
8860020e 5717 if (err)
9e263e19 5718 goto out;
8860020e
JB		 5719
5720 /*
5721 * In theory, some of these attributes should be required here
5722 * but since they were not used when the command was originally
5723 * added, keep them optional for old user space programs to let
5724 * them continue to work with drivers that do not need the
5725 * additional information -- drivers must check!
5726 */
5727 if (info->attrs[NL80211_ATTR_SSID]) {
9e263e19
JB		 5728 params->ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5729 params->ssid_len =
8860020e 5730 nla_len(info->attrs[NL80211_ATTR_SSID]);
9e263e19
JB		 5731 if (params->ssid_len == 0) {
5732 err = -EINVAL;
5733 goto out;
5734 }
7b0a0e3c
JB		 5735
5736 if (wdev->u.ap.ssid_len &&
5737 (wdev->u.ap.ssid_len != params->ssid_len ||
5738 memcmp(wdev->u.ap.ssid, params->ssid, params->ssid_len))) {
5739 /* require identical SSID for MLO */
5740 err = -EINVAL;
5741 goto out;
5742 }
5743 } else if (wdev->valid_links) {
5744 /* require SSID for MLO */
5745 err = -EINVAL;
5746 goto out;
8860020e
JB		 5747 }
5748
ab0d76f6 5749 if (info->attrs[NL80211_ATTR_HIDDEN_SSID])
9e263e19 5750 params->hidden_ssid = nla_get_u32(
8860020e 5751 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
8860020e 5752
9e263e19 5753 params->privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
8860020e
JB		 5754
5755 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
9e263e19 5756 params->auth_type = nla_get_u32(
8860020e 5757 info->attrs[NL80211_ATTR_AUTH_TYPE]);
9e263e19
JB		 5758 if (!nl80211_valid_auth_type(rdev, params->auth_type,
5759 NL80211_CMD_START_AP)) {
5760 err = -EINVAL;
5761 goto out;
5762 }
8860020e 5763 } else
9e263e19 5764 params->auth_type = NL80211_AUTHTYPE_AUTOMATIC;
8860020e 5765
9e263e19 5766 err = nl80211_crypto_settings(rdev, info, &params->crypto,
8860020e
JB		 5767 NL80211_MAX_NR_CIPHER_SUITES);
5768 if (err)
9e263e19 5769 goto out;
8860020e 5770
1b658f11 5771 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
9e263e19
JB		 5772 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER)) {
5773 err = -EOPNOTSUPP;
5774 goto out;
5775 }
5776 params->inactivity_timeout = nla_get_u16(
1b658f11
VT		 5777 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
5778 }
5779
53cabad7 5780 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
9e263e19
JB		 5781 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
5782 err = -EINVAL;
5783 goto out;
5784 }
5785 params->p2p_ctwindow =
53cabad7 5786 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
9e263e19
JB		 5787 if (params->p2p_ctwindow != 0 &&
5788 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN)) {
5789 err = -EINVAL;
5790 goto out;
5791 }
53cabad7
JB		 5792 }
5793
5794 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
5795 u8 tmp;
5796
9e263e19
JB		 5797 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
5798 err = -EINVAL;
5799 goto out;
5800 }
53cabad7 5801 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
9e263e19
JB		 5802 params->p2p_opp_ps = tmp;
5803 if (params->p2p_opp_ps != 0 &&
5804 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS)) {
5805 err = -EINVAL;
5806 goto out;
5807 }
53cabad7
JB		 5808 }
5809
aa430da4 5810 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
9e263e19 5811 err = nl80211_parse_chandef(rdev, info, &params->chandef);
683b6d3b 5812 if (err)
9e263e19 5813 goto out;
7b0a0e3c
JB		 5814 } else if (wdev->valid_links) {
5815 /* with MLD need to specify the channel configuration */
5816 err = -EINVAL;
5817 goto out;
5818 } else if (wdev->u.ap.preset_chandef.chan) {
5819 params->chandef = wdev->u.ap.preset_chandef;
9e263e19
JB		 5820 } else if (!nl80211_get_ap_channel(rdev, params)) {
5821 err = -EINVAL;
5822 goto out;
5823 }
aa430da4 5824
9e263e19
JB		 5825 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params->chandef,
5826 wdev->iftype)) {
5827 err = -EINVAL;
5828 goto out;
5829 }
aa430da4 5830
c2653990
JB		 5831 wdev_lock(wdev);
5832
a7c7fbff 5833 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 5834 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
5835 NL80211_ATTR_TX_RATES,
9e263e19 5836 &params->beacon_rate,
7b0a0e3c 5837 dev, false, link_id);
a7c7fbff 5838 if (err)
c2653990 5839 goto out_unlock;
a7c7fbff 5840
9e263e19
JB		 5841 err = validate_beacon_tx_rate(rdev, params->chandef.chan->band,
5842 &params->beacon_rate);
a7c7fbff 5843 if (err)
c2653990 5844 goto out_unlock;
a7c7fbff
PK		 5845 }
5846
18998c38 5847 if (info->attrs[NL80211_ATTR_SMPS_MODE]) {
9e263e19 5848 params->smps_mode =
18998c38 5849 nla_get_u8(info->attrs[NL80211_ATTR_SMPS_MODE]);
9e263e19 5850 switch (params->smps_mode) {
18998c38
EP		 5851 case NL80211_SMPS_OFF:
5852 break;
5853 case NL80211_SMPS_STATIC:
5854 if (!(rdev->wiphy.features &
9e263e19
JB		 5855 NL80211_FEATURE_STATIC_SMPS)) {
5856 err = -EINVAL;
c2653990 5857 goto out_unlock;
9e263e19 5858 }
18998c38
EP		 5859 break;
5860 case NL80211_SMPS_DYNAMIC:
5861 if (!(rdev->wiphy.features &
9e263e19
JB		 5862 NL80211_FEATURE_DYNAMIC_SMPS)) {
5863 err = -EINVAL;
c2653990 5864 goto out_unlock;
9e263e19 5865 }
18998c38
EP		 5866 break;
5867 default:
9e263e19 5868 err = -EINVAL;
c2653990 5869 goto out_unlock;
18998c38
EP		 5870 }
5871 } else {
9e263e19 5872 params->smps_mode = NL80211_SMPS_OFF;
18998c38
EP		 5873 }
5874
9e263e19
JB		 5875 params->pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
5876 if (params->pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
5877 err = -EOPNOTSUPP;
c2653990 5878 goto out_unlock;
9e263e19 5879 }
6e8ef842 5880
4baf6bea 5881 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
9e263e19
JB		 5882 params->acl = parse_acl_data(&rdev->wiphy, info);
5883 if (IS_ERR(params->acl)) {
5884 err = PTR_ERR(params->acl);
05075fe7 5885 params->acl = NULL;
c2653990 5886 goto out_unlock;
9e263e19 5887 }
4baf6bea
OO		 5888 }
5889
9e263e19 5890 params->twt_responder =
a0de1ca3
JC		 5891 nla_get_flag(info->attrs[NL80211_ATTR_TWT_RESPONDER]);
5892
796e90f4
JC		 5893 if (info->attrs[NL80211_ATTR_HE_OBSS_PD]) {
5894 err = nl80211_parse_he_obss_pd(
5895 info->attrs[NL80211_ATTR_HE_OBSS_PD],
9e263e19 5896 &params->he_obss_pd);
bc7a39b4 5897 if (err)
c2653990 5898 goto out_unlock;
796e90f4
JC		 5899 }
5900
291c49de
AD		 5901 if (info->attrs[NL80211_ATTR_FILS_DISCOVERY]) {
5902 err = nl80211_parse_fils_discovery(rdev,
5903 info->attrs[NL80211_ATTR_FILS_DISCOVERY],
9e263e19 5904 params);
291c49de 5905 if (err)
c2653990 5906 goto out_unlock;
291c49de
AD		 5907 }
5908
7443dcd1
AD		 5909 if (info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP]) {
5910 err = nl80211_parse_unsol_bcast_probe_resp(
5911 rdev, info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP],
9e263e19 5912 params);
7443dcd1 5913 if (err)
c2653990 5914 goto out_unlock;
7443dcd1
AD		 5915 }
5916
dc1e3cb8
JC		 5917 if (info->attrs[NL80211_ATTR_MBSSID_CONFIG]) {
5918 err = nl80211_parse_mbssid_config(&rdev->wiphy, dev,
5919 info->attrs[NL80211_ATTR_MBSSID_CONFIG],
5920 &params->mbssid_config,
5921 params->beacon.mbssid_ies ?
5922 params->beacon.mbssid_ies->cnt :
5923 0);
5924 if (err)
c2653990 5925 goto out_unlock;
dc1e3cb8
JC		 5926 }
5927
8bc65d38
AD		 5928 err = nl80211_calculate_ap_params(params);
5929 if (err)
5930 goto out_unlock;
66cd794e 5931
47301a74
VJ		 5932 if (info->attrs[NL80211_ATTR_AP_SETTINGS_FLAGS])
5933 params->flags = nla_get_u32(
5934 info->attrs[NL80211_ATTR_AP_SETTINGS_FLAGS]);
5935 else if (info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])
5936 params->flags |= NL80211_AP_SETTINGS_EXTERNAL_AUTH_SUPPORT;
fe494370 5937
7b0a0e3c
JB		 5938 if (wdev->conn_owner_nlportid &&
5939 info->attrs[NL80211_ATTR_SOCKET_OWNER] &&
5940 wdev->conn_owner_nlportid != info->snd_portid) {
5941 err = -EINVAL;
5942 goto out_unlock;
5943 }
5944
5945 /* FIXME: validate MLO/link-id against driver capabilities */
5946
9e263e19 5947 err = rdev_start_ap(rdev, dev, params);
46c1dd0c 5948 if (!err) {
7b0a0e3c
JB		 5949 wdev->links[link_id].ap.beacon_interval = params->beacon_interval;
5950 wdev->links[link_id].ap.chandef = params->chandef;
5951 wdev->u.ap.ssid_len = params->ssid_len;
5952 memcpy(wdev->u.ap.ssid, params->ssid,
5953 params->ssid_len);
466a3061
DK		 5954
5955 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
5956 wdev->conn_owner_nlportid = info->snd_portid;
46c1dd0c 5957 }
7b0a0e3c 5958out_unlock:
c56589ed 5959 wdev_unlock(wdev);
9951ebfc 5960out:
9e263e19 5961 kfree(params->acl);
dc1e3cb8
JC		 5962 kfree(params->beacon.mbssid_ies);
5963 if (params->mbssid_config.tx_wdev &&
5964 params->mbssid_config.tx_wdev->netdev &&
5965 params->mbssid_config.tx_wdev->netdev != dev)
5966 dev_put(params->mbssid_config.tx_wdev->netdev);
9e263e19 5967 kfree(params);
77765eaf 5968
56d1893d 5969 return err;
ed1b6cc7
JB		 5970}
5971
8860020e
JB		 5972static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
5973{
5974 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 5975 unsigned int link_id = nl80211_link_id(info->attrs);
8860020e
JB		 5976 struct net_device *dev = info->user_ptr[1];
5977 struct wireless_dev *wdev = dev->ieee80211_ptr;
5978 struct cfg80211_beacon_data params;
5979 int err;
5980
5981 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5982 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5983 return -EOPNOTSUPP;
5984
5985 if (!rdev->ops->change_beacon)
5986 return -EOPNOTSUPP;
5987
7b0a0e3c 5988 if (!wdev->links[link_id].ap.beacon_interval)
8860020e
JB		 5989 return -EINVAL;
5990
81e54d08 5991 err = nl80211_parse_beacon(rdev, info->attrs, &params);
8860020e 5992 if (err)
dc1e3cb8 5993 goto out;
8860020e 5994
c56589ed
SW		 5995 wdev_lock(wdev);
5996 err = rdev_change_beacon(rdev, dev, &params);
5997 wdev_unlock(wdev);
5998
dc1e3cb8
JC		 5999out:
6000 kfree(params.mbssid_ies);
c56589ed 6001 return err;
8860020e
JB		 6002}
6003
6004static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 6005{
4c476991 6006 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 6007 unsigned int link_id = nl80211_link_id(info->attrs);
4c476991 6008 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 6009
7b0a0e3c 6010 return cfg80211_stop_ap(rdev, dev, link_id, false);
ed1b6cc7
JB		 6011}
6012
5727ef1b
JB		 6013static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
6014 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
6015 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
6016 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 6017 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 6018 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 6019 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 6020};
6021
eccb8e8f 6022static int parse_station_flags(struct genl_info *info,
bdd3ae3d 6023 enum nl80211_iftype iftype,
eccb8e8f 6024 struct station_parameters *params)
5727ef1b
JB		 6025{
6026 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 6027 struct nlattr *nla;
5727ef1b
JB		 6028 int flag;
6029
eccb8e8f
JB		 6030 /*
6031 * Try parsing the new attribute first so userspace
6032 * can specify both for older kernels.
6033 */
6034 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
6035 if (nla) {
6036 struct nl80211_sta_flag_update *sta_flags;
6037
6038 sta_flags = nla_data(nla);
6039 params->sta_flags_mask = sta_flags->mask;
6040 params->sta_flags_set = sta_flags->set;
77ee7c89 6041 params->sta_flags_set &= params->sta_flags_mask;
eccb8e8f
JB		 6042 if ((params->sta_flags_mask |
6043 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
6044 return -EINVAL;
6045 return 0;
6046 }
6047
6048 /* if present, parse the old attribute */
5727ef1b 6049
eccb8e8f 6050 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 6051 if (!nla)
6052 return 0;
6053
8cb08174 6054 if (nla_parse_nested_deprecated(flags, NL80211_STA_FLAG_MAX, nla, sta_flags_policy, info->extack))
5727ef1b
JB		 6055 return -EINVAL;
6056
bdd3ae3d
JB		 6057 /*
6058 * Only allow certain flags for interface types so that
6059 * other attributes are silently ignored. Remember that
6060 * this is backward compatibility code with old userspace
6061 * and shouldn't be hit in other cases anyway.
6062 */
6063 switch (iftype) {
6064 case NL80211_IFTYPE_AP:
6065 case NL80211_IFTYPE_AP_VLAN:
6066 case NL80211_IFTYPE_P2P_GO:
6067 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
6068 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
6069 BIT(NL80211_STA_FLAG_WME) |
6070 BIT(NL80211_STA_FLAG_MFP);
6071 break;
6072 case NL80211_IFTYPE_P2P_CLIENT:
6073 case NL80211_IFTYPE_STATION:
6074 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
6075 BIT(NL80211_STA_FLAG_TDLS_PEER);
6076 break;
6077 case NL80211_IFTYPE_MESH_POINT:
6078 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6079 BIT(NL80211_STA_FLAG_MFP) |
6080 BIT(NL80211_STA_FLAG_AUTHORIZED);
5cf3006c 6081 break;
bdd3ae3d
JB		 6082 default:
6083 return -EINVAL;
6084 }
5727ef1b 6085
3383b5a6
JB		 6086 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
6087 if (flags[flag]) {
eccb8e8f 6088 params->sta_flags_set |= (1<<flag);
5727ef1b 6089
3383b5a6
JB		 6090 /* no longer support new API additions in old API */
6091 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
6092 return -EINVAL;
6093 }
6094 }
6095
5727ef1b
JB		 6096 return 0;
6097}
6098
9bb7e0f2 6099bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info, int attr)
c8dcfd8a
FF		 6100{
6101 struct nlattr *rate;
8eb41c8d
VK		 6102 u32 bitrate;
6103 u16 bitrate_compat;
bbf67e45 6104 enum nl80211_rate_info rate_flg;
c8dcfd8a 6105
ae0be8de 6106 rate = nla_nest_start_noflag(msg, attr);
c8dcfd8a 6107 if (!rate)
db9c64cf 6108 return false;
c8dcfd8a
FF		 6109
6110 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
6111 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 6112 /* report 16-bit bitrate only if we can */
6113 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
db9c64cf
JB		 6114 if (bitrate > 0 &&
6115 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
6116 return false;
6117 if (bitrate_compat > 0 &&
6118 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
6119 return false;
6120
b51f3bee
JB		 6121 switch (info->bw) {
6122 case RATE_INFO_BW_5:
6123 rate_flg = NL80211_RATE_INFO_5_MHZ_WIDTH;
6124 break;
6125 case RATE_INFO_BW_10:
6126 rate_flg = NL80211_RATE_INFO_10_MHZ_WIDTH;
6127 break;
6128 default:
6129 WARN_ON(1);
7b506ff6 6130 fallthrough;
b51f3bee
JB		 6131 case RATE_INFO_BW_20:
6132 rate_flg = 0;
6133 break;
6134 case RATE_INFO_BW_40:
6135 rate_flg = NL80211_RATE_INFO_40_MHZ_WIDTH;
6136 break;
6137 case RATE_INFO_BW_80:
6138 rate_flg = NL80211_RATE_INFO_80_MHZ_WIDTH;
6139 break;
6140 case RATE_INFO_BW_160:
6141 rate_flg = NL80211_RATE_INFO_160_MHZ_WIDTH;
6142 break;
c4cbaf79
LC		 6143 case RATE_INFO_BW_HE_RU:
6144 rate_flg = 0;
6145 WARN_ON(!(info->flags & RATE_INFO_FLAGS_HE_MCS));
cfb14110
VJ		 6146 break;
6147 case RATE_INFO_BW_320:
6148 rate_flg = NL80211_RATE_INFO_320_MHZ_WIDTH;
6149 break;
6150 case RATE_INFO_BW_EHT_RU:
6151 rate_flg = 0;
6152 WARN_ON(!(info->flags & RATE_INFO_FLAGS_EHT_MCS));
6153 break;
b51f3bee
JB		 6154 }
6155
6156 if (rate_flg && nla_put_flag(msg, rate_flg))
6157 return false;
6158
db9c64cf
JB		 6159 if (info->flags & RATE_INFO_FLAGS_MCS) {
6160 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
6161 return false;
db9c64cf
JB		 6162 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
6163 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
6164 return false;
6165 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
6166 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
6167 return false;
6168 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
6169 return false;
db9c64cf
JB		 6170 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
6171 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
6172 return false;
c4cbaf79
LC		 6173 } else if (info->flags & RATE_INFO_FLAGS_HE_MCS) {
6174 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_MCS, info->mcs))
6175 return false;
6176 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_NSS, info->nss))
6177 return false;
6178 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_GI, info->he_gi))
6179 return false;
6180 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_DCM, info->he_dcm))
6181 return false;
6182 if (info->bw == RATE_INFO_BW_HE_RU &&
6183 nla_put_u8(msg, NL80211_RATE_INFO_HE_RU_ALLOC,
6184 info->he_ru_alloc))
6185 return false;
cfb14110
VJ		 6186 } else if (info->flags & RATE_INFO_FLAGS_EHT_MCS) {
6187 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_MCS, info->mcs))
6188 return false;
6189 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_NSS, info->nss))
6190 return false;
6191 if (nla_put_u8(msg, NL80211_RATE_INFO_EHT_GI, info->eht_gi))
6192 return false;
6193 if (info->bw == RATE_INFO_BW_EHT_RU &&
6194 nla_put_u8(msg, NL80211_RATE_INFO_EHT_RU_ALLOC,
6195 info->eht_ru_alloc))
6196 return false;
db9c64cf 6197 }
c8dcfd8a
FF		 6198
6199 nla_nest_end(msg, rate);
6200 return true;
c8dcfd8a
FF		 6201}
6202
119363c7
FF		 6203static bool nl80211_put_signal(struct sk_buff *msg, u8 mask, s8 *signal,
6204 int id)
6205{
6206 void *attr;
6207 int i = 0;
6208
6209 if (!mask)
6210 return true;
6211
ae0be8de 6212 attr = nla_nest_start_noflag(msg, id);
119363c7
FF		 6213 if (!attr)
6214 return false;
6215
6216 for (i = 0; i < IEEE80211_MAX_CHAINS; i++) {
6217 if (!(mask & BIT(i)))
6218 continue;
6219
6220 if (nla_put_u8(msg, i, signal[i]))
6221 return false;
6222 }
6223
6224 nla_nest_end(msg, attr);
6225
6226 return true;
6227}
6228
cf5ead82
JB		 6229static int nl80211_send_station(struct sk_buff *msg, u32 cmd, u32 portid,
6230 u32 seq, int flags,
66266b3a
JL		 6231 struct cfg80211_registered_device *rdev,
6232 struct net_device *dev,
98b62183 6233 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 6234{
6235 void *hdr;
f4263c98 6236 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 6237
cf5ead82 6238 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
f77bf486
AS		 6239 if (!hdr) {
6240 cfg80211_sinfo_release_content(sinfo);
fd5b74dc 6241 return -1;
f77bf486 6242 }
fd5b74dc 6243
9360ffd1
DM		 6244 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6245 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
6246 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
6247 goto nla_put_failure;
f5ea9120 6248
ae0be8de 6249 sinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_STA_INFO);
2ec600d6 6250 if (!sinfoattr)
fd5b74dc 6251 goto nla_put_failure;
319090bf
JB		 6252
6253#define PUT_SINFO(attr, memb, type) do { \
d686b920 6254 BUILD_BUG_ON(sizeof(type) == sizeof(u64)); \
397c657a 6255 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
319090bf
JB		 6256 nla_put_ ## type(msg, NL80211_STA_INFO_ ## attr, \
6257 sinfo->memb)) \
6258 goto nla_put_failure; \
6259 } while (0)
d686b920 6260#define PUT_SINFO_U64(attr, memb) do { \
397c657a 6261 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
d686b920
JB		 6262 nla_put_u64_64bit(msg, NL80211_STA_INFO_ ## attr, \
6263 sinfo->memb, NL80211_STA_INFO_PAD)) \
6264 goto nla_put_failure; \
6265 } while (0)
319090bf
JB		 6266
6267 PUT_SINFO(CONNECTED_TIME, connected_time, u32);
6268 PUT_SINFO(INACTIVE_TIME, inactive_time, u32);
6c7a0033 6269 PUT_SINFO_U64(ASSOC_AT_BOOTTIME, assoc_at);
319090bf 6270
397c657a
OE		 6271 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_RX_BYTES) |
6272 BIT_ULL(NL80211_STA_INFO_RX_BYTES64)) &&
9360ffd1 6273 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
42745e03 6274 (u32)sinfo->rx_bytes))
9360ffd1 6275 goto nla_put_failure;
319090bf 6276
397c657a
OE		 6277 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_TX_BYTES) |
6278 BIT_ULL(NL80211_STA_INFO_TX_BYTES64)) &&
9360ffd1 6279 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
42745e03
VK		 6280 (u32)sinfo->tx_bytes))
6281 goto nla_put_failure;
319090bf 6282
d686b920
JB		 6283 PUT_SINFO_U64(RX_BYTES64, rx_bytes);
6284 PUT_SINFO_U64(TX_BYTES64, tx_bytes);
319090bf
JB		 6285 PUT_SINFO(LLID, llid, u16);
6286 PUT_SINFO(PLID, plid, u16);
6287 PUT_SINFO(PLINK_STATE, plink_state, u8);
d686b920 6288 PUT_SINFO_U64(RX_DURATION, rx_duration);
36647055
THJ		 6289 PUT_SINFO_U64(TX_DURATION, tx_duration);
6290
6291 if (wiphy_ext_feature_isset(&rdev->wiphy,
6292 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6293 PUT_SINFO(AIRTIME_WEIGHT, airtime_weight, u16);
319090bf 6294
66266b3a
JL		 6295 switch (rdev->wiphy.signal_type) {
6296 case CFG80211_SIGNAL_TYPE_MBM:
319090bf
JB		 6297 PUT_SINFO(SIGNAL, signal, u8);
6298 PUT_SINFO(SIGNAL_AVG, signal_avg, u8);
66266b3a
JL		 6299 break;
6300 default:
6301 break;
6302 }
397c657a 6303 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL)) {
119363c7
FF		 6304 if (!nl80211_put_signal(msg, sinfo->chains,
6305 sinfo->chain_signal,
6306 NL80211_STA_INFO_CHAIN_SIGNAL))
6307 goto nla_put_failure;
6308 }
397c657a 6309 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)) {
119363c7
FF		 6310 if (!nl80211_put_signal(msg, sinfo->chains,
6311 sinfo->chain_signal_avg,
6312 NL80211_STA_INFO_CHAIN_SIGNAL_AVG))
6313 goto nla_put_failure;
6314 }
397c657a 6315 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_TX_BITRATE)) {
c8dcfd8a
FF		 6316 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
6317 NL80211_STA_INFO_TX_BITRATE))
6318 goto nla_put_failure;
6319 }
397c657a 6320 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_RX_BITRATE)) {
c8dcfd8a
FF		 6321 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
6322 NL80211_STA_INFO_RX_BITRATE))
420e7fab 6323 goto nla_put_failure;
420e7fab 6324 }
319090bf
JB		 6325
6326 PUT_SINFO(RX_PACKETS, rx_packets, u32);
6327 PUT_SINFO(TX_PACKETS, tx_packets, u32);
6328 PUT_SINFO(TX_RETRIES, tx_retries, u32);
6329 PUT_SINFO(TX_FAILED, tx_failed, u32);
6330 PUT_SINFO(EXPECTED_THROUGHPUT, expected_throughput, u32);
ab60633c 6331 PUT_SINFO(AIRTIME_LINK_METRIC, airtime_link_metric, u32);
319090bf
JB		 6332 PUT_SINFO(BEACON_LOSS, beacon_loss_count, u32);
6333 PUT_SINFO(LOCAL_PM, local_pm, u32);
6334 PUT_SINFO(PEER_PM, peer_pm, u32);
6335 PUT_SINFO(NONPEER_PM, nonpeer_pm, u32);
dbdaee7a 6336 PUT_SINFO(CONNECTED_TO_GATE, connected_to_gate, u8);
1303a51c 6337 PUT_SINFO(CONNECTED_TO_AS, connected_to_as, u8);
319090bf 6338
397c657a 6339 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_BSS_PARAM)) {
ae0be8de
MK		 6340 bss_param = nla_nest_start_noflag(msg,
6341 NL80211_STA_INFO_BSS_PARAM);
f4263c98
PS		 6342 if (!bss_param)
6343 goto nla_put_failure;
6344
9360ffd1
DM		 6345 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
6346 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
6347 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
6348 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
6349 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
6350 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
6351 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
6352 sinfo->bss_param.dtim_period) ||
6353 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
6354 sinfo->bss_param.beacon_interval))
6355 goto nla_put_failure;
f4263c98
PS		 6356
6357 nla_nest_end(msg, bss_param);
6358 }
397c657a 6359 if ((sinfo->filled & BIT_ULL(NL80211_STA_INFO_STA_FLAGS)) &&
9360ffd1
DM		 6360 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
6361 sizeof(struct nl80211_sta_flag_update),
6362 &sinfo->sta_flags))
6363 goto nla_put_failure;
319090bf 6364
d686b920
JB		 6365 PUT_SINFO_U64(T_OFFSET, t_offset);
6366 PUT_SINFO_U64(RX_DROP_MISC, rx_dropped_misc);
6367 PUT_SINFO_U64(BEACON_RX, rx_beacon);
a76b1942 6368 PUT_SINFO(BEACON_SIGNAL_AVG, rx_beacon_signal_avg, u8);
0d4e14a3
AB		 6369 PUT_SINFO(RX_MPDUS, rx_mpdu_count, u32);
6370 PUT_SINFO(FCS_ERROR_COUNT, fcs_err_count, u32);
81d5439d 6371 if (wiphy_ext_feature_isset(&rdev->wiphy,
9c06602b
BP		 6372 NL80211_EXT_FEATURE_ACK_SIGNAL_SUPPORT)) {
6373 PUT_SINFO(ACK_SIGNAL, ack_signal, u8);
6374 PUT_SINFO(ACK_SIGNAL_AVG, avg_ack_signal, s8);
6375 }
319090bf
JB		 6376
6377#undef PUT_SINFO
d686b920 6378#undef PUT_SINFO_U64
6de39808 6379
8689c051 6380 if (sinfo->pertid) {
6de39808
JB		 6381 struct nlattr *tidsattr;
6382 int tid;
6383
ae0be8de
MK		 6384 tidsattr = nla_nest_start_noflag(msg,
6385 NL80211_STA_INFO_TID_STATS);
6de39808
JB		 6386 if (!tidsattr)
6387 goto nla_put_failure;
6388
6389 for (tid = 0; tid < IEEE80211_NUM_TIDS + 1; tid++) {
6390 struct cfg80211_tid_stats *tidstats;
6391 struct nlattr *tidattr;
6392
6393 tidstats = &sinfo->pertid[tid];
6394
6395 if (!tidstats->filled)
6396 continue;
6397
ae0be8de 6398 tidattr = nla_nest_start_noflag(msg, tid + 1);
6de39808
JB		 6399 if (!tidattr)
6400 goto nla_put_failure;
6401
d686b920 6402#define PUT_TIDVAL_U64(attr, memb) do { \
6de39808 6403 if (tidstats->filled & BIT(NL80211_TID_STATS_ ## attr) && \
d686b920
JB		 6404 nla_put_u64_64bit(msg, NL80211_TID_STATS_ ## attr, \
6405 tidstats->memb, NL80211_TID_STATS_PAD)) \
6de39808
JB		 6406 goto nla_put_failure; \
6407 } while (0)
6408
d686b920
JB		 6409 PUT_TIDVAL_U64(RX_MSDU, rx_msdu);
6410 PUT_TIDVAL_U64(TX_MSDU, tx_msdu);
6411 PUT_TIDVAL_U64(TX_MSDU_RETRIES, tx_msdu_retries);
6412 PUT_TIDVAL_U64(TX_MSDU_FAILED, tx_msdu_failed);
6de39808 6413
d686b920 6414#undef PUT_TIDVAL_U64
52539ca8
THJ		 6415 if ((tidstats->filled &
6416 BIT(NL80211_TID_STATS_TXQ_STATS)) &&
6417 !nl80211_put_txq_stats(msg, &tidstats->txq_stats,
6418 NL80211_TID_STATS_TXQ_STATS))
6419 goto nla_put_failure;
6420
6de39808
JB		 6421 nla_nest_end(msg, tidattr);
6422 }
6423
6424 nla_nest_end(msg, tidsattr);
6425 }
6426
2ec600d6 6427 nla_nest_end(msg, sinfoattr);
fd5b74dc 6428
319090bf 6429 if (sinfo->assoc_req_ies_len &&
9360ffd1
DM		 6430 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
6431 sinfo->assoc_req_ies))
6432 goto nla_put_failure;
50d3dfb7 6433
7ea3e110 6434 cfg80211_sinfo_release_content(sinfo);
053c095a
JB		 6435 genlmsg_end(msg, hdr);
6436 return 0;
fd5b74dc
JB		 6437
6438 nla_put_failure:
7ea3e110 6439 cfg80211_sinfo_release_content(sinfo);
bc3ed28c
TG		 6440 genlmsg_cancel(msg, hdr);
6441 return -EMSGSIZE;
fd5b74dc
JB		 6442}
6443
2ec600d6 6444static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 6445 struct netlink_callback *cb)
2ec600d6 6446{
73887fd9 6447 struct station_info sinfo;
1b8ec87a 6448 struct cfg80211_registered_device *rdev;
97990a06 6449 struct wireless_dev *wdev;
2ec600d6 6450 u8 mac_addr[ETH_ALEN];
97990a06 6451 int sta_idx = cb->args[2];
2ec600d6 6452 int err;
2ec600d6 6453
ce6b6974 6454 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
67748893 6455 if (err)
a05829a7
JB		 6456 return err;
6457 /* nl80211_prepare_wdev_dump acquired it in the successful case */
6458 __acquire(&rdev->wiphy.mtx);
bba95fef 6459
97990a06
JB		 6460 if (!wdev->netdev) {
6461 err = -EINVAL;
6462 goto out_err;
6463 }
6464
1b8ec87a 6465 if (!rdev->ops->dump_station) {
eec60b03 6466 err = -EOPNOTSUPP;
bba95fef
JB		 6467 goto out_err;
6468 }
6469
bba95fef 6470 while (1) {
73887fd9 6471 memset(&sinfo, 0, sizeof(sinfo));
1b8ec87a 6472 err = rdev_dump_station(rdev, wdev->netdev, sta_idx,
73887fd9 6473 mac_addr, &sinfo);
bba95fef
JB		 6474 if (err == -ENOENT)
6475 break;
6476 if (err)
3b85875a 6477 goto out_err;
bba95fef 6478
cf5ead82 6479 if (nl80211_send_station(skb, NL80211_CMD_NEW_STATION,
15e47304 6480 NETLINK_CB(cb->skb).portid,
bba95fef 6481 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1b8ec87a 6482 rdev, wdev->netdev, mac_addr,
73887fd9 6483 &sinfo) < 0)
bba95fef
JB		 6484 goto out;
6485
6486 sta_idx++;
6487 }
6488
bba95fef 6489 out:
97990a06 6490 cb->args[2] = sta_idx;
bba95fef 6491 err = skb->len;
bba95fef 6492 out_err:
a05829a7 6493 wiphy_unlock(&rdev->wiphy);
bba95fef
JB		 6494
6495 return err;
2ec600d6 6496}
fd5b74dc 6497
5727ef1b
JB		 6498static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
6499{
4c476991
JB		 6500 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6501 struct net_device *dev = info->user_ptr[1];
73887fd9 6502 struct station_info sinfo;
fd5b74dc
JB		 6503 struct sk_buff *msg;
6504 u8 *mac_addr = NULL;
4c476991 6505 int err;
fd5b74dc 6506
73887fd9 6507 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc 6508
73887fd9
JB		 6509 if (!info->attrs[NL80211_ATTR_MAC])
6510 return -EINVAL;
fd5b74dc
JB		 6511
6512 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6513
73887fd9
JB		 6514 if (!rdev->ops->get_station)
6515 return -EOPNOTSUPP;
3b85875a 6516
73887fd9 6517 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 6518 if (err)
73887fd9 6519 return err;
2ec600d6 6520
fd2120ca 6521 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7ea3e110 6522 if (!msg) {
ba8f566a 6523 cfg80211_sinfo_release_content(&sinfo);
73887fd9 6524 return -ENOMEM;
7ea3e110 6525 }
fd5b74dc 6526
cf5ead82
JB		 6527 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION,
6528 info->snd_portid, info->snd_seq, 0,
73887fd9 6529 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991 6530 nlmsg_free(msg);
73887fd9 6531 return -ENOBUFS;
4c476991 6532 }
3b85875a 6533
73887fd9 6534 return genlmsg_reply(msg, info);
5727ef1b
JB		 6535}
6536
77ee7c89
JB		 6537int cfg80211_check_station_change(struct wiphy *wiphy,
6538 struct station_parameters *params,
6539 enum cfg80211_station_type statype)
6540{
e4208427
AB		 6541 if (params->listen_interval != -1 &&
6542 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89 6543 return -EINVAL;
e4208427 6544
17b94247
AB		 6545 if (params->support_p2p_ps != -1 &&
6546 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
6547 return -EINVAL;
6548
c72e1140 6549 if (params->aid &&
e4208427
AB		 6550 !(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) &&
6551 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89
JB		 6552 return -EINVAL;
6553
6554 /* When you run into this, adjust the code below for the new flag */
6555 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
6556
6557 switch (statype) {
eef941e6
TP		 6558 case CFG80211_STA_MESH_PEER_KERNEL:
6559 case CFG80211_STA_MESH_PEER_USER:
77ee7c89
JB		 6560 /*
6561 * No ignoring the TDLS flag here -- the userspace mesh
6562 * code doesn't have the bug of including TDLS in the
6563 * mask everywhere.
6564 */
6565 if (params->sta_flags_mask &
6566 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6567 BIT(NL80211_STA_FLAG_MFP) |
6568 BIT(NL80211_STA_FLAG_AUTHORIZED)))
6569 return -EINVAL;
6570 break;
6571 case CFG80211_STA_TDLS_PEER_SETUP:
6572 case CFG80211_STA_TDLS_PEER_ACTIVE:
6573 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6574 return -EINVAL;
6575 /* ignore since it can't change */
6576 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6577 break;
6578 default:
6579 /* disallow mesh-specific things */
6580 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
6581 return -EINVAL;
6582 if (params->local_pm)
6583 return -EINVAL;
6584 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6585 return -EINVAL;
6586 }
6587
6588 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6589 statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
6590 /* TDLS can't be set, ... */
6591 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
6592 return -EINVAL;
6593 /*
6594 * ... but don't bother the driver with it. This works around
6595 * a hostapd/wpa_supplicant issue -- it always includes the
6596 * TLDS_PEER flag in the mask even for AP mode.
6597 */
6598 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6599 }
6600
47edb11b
AB		 6601 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6602 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6603 /* reject other things that can't change */
6604 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
6605 return -EINVAL;
6606 if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
6607 return -EINVAL;
b95eb7f0 6608 if (params->link_sta_params.supported_rates)
77ee7c89 6609 return -EINVAL;
b95eb7f0
ST		 6610 if (params->ext_capab || params->link_sta_params.ht_capa ||
6611 params->link_sta_params.vht_capa ||
6612 params->link_sta_params.he_capa ||
6613 params->link_sta_params.eht_capa)
77ee7c89
JB		 6614 return -EINVAL;
6615 }
6616
47edb11b
AB		 6617 if (statype != CFG80211_STA_AP_CLIENT &&
6618 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6619 if (params->vlan)
6620 return -EINVAL;
6621 }
6622
6623 switch (statype) {
6624 case CFG80211_STA_AP_MLME_CLIENT:
6625 /* Use this only for authorizing/unauthorizing a station */
6626 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
6627 return -EOPNOTSUPP;
6628 break;
6629 case CFG80211_STA_AP_CLIENT:
47edb11b 6630 case CFG80211_STA_AP_CLIENT_UNASSOC:
77ee7c89
JB		 6631 /* accept only the listed bits */
6632 if (params->sta_flags_mask &
6633 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6634 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6635 BIT(NL80211_STA_FLAG_ASSOCIATED) |
6636 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
6637 BIT(NL80211_STA_FLAG_WME) |
6638 BIT(NL80211_STA_FLAG_MFP)))
6639 return -EINVAL;
6640
6641 /* but authenticated/associated only if driver handles it */
6642 if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
6643 params->sta_flags_mask &
6644 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6645 BIT(NL80211_STA_FLAG_ASSOCIATED)))
6646 return -EINVAL;
6647 break;
6648 case CFG80211_STA_IBSS:
6649 case CFG80211_STA_AP_STA:
6650 /* reject any changes other than AUTHORIZED */
6651 if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
6652 return -EINVAL;
6653 break;
6654 case CFG80211_STA_TDLS_PEER_SETUP:
6655 /* reject any changes other than AUTHORIZED or WME */
6656 if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6657 BIT(NL80211_STA_FLAG_WME)))
6658 return -EINVAL;
6659 /* force (at least) rates when authorizing */
6660 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
b95eb7f0 6661 !params->link_sta_params.supported_rates)
77ee7c89
JB		 6662 return -EINVAL;
6663 break;
6664 case CFG80211_STA_TDLS_PEER_ACTIVE:
6665 /* reject any changes */
6666 return -EINVAL;
eef941e6 6667 case CFG80211_STA_MESH_PEER_KERNEL:
77ee7c89
JB		 6668 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6669 return -EINVAL;
6670 break;
eef941e6 6671 case CFG80211_STA_MESH_PEER_USER:
42925040
CYY		 6672 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION &&
6673 params->plink_action != NL80211_PLINK_ACTION_BLOCK)
77ee7c89
JB		 6674 return -EINVAL;
6675 break;
6676 }
6677
06f7c88c
BL		 6678 /*
6679 * Older kernel versions ignored this attribute entirely, so don't
6680 * reject attempts to update it but mark it as unused instead so the
6681 * driver won't look at the data.
6682 */
6683 if (statype != CFG80211_STA_AP_CLIENT_UNASSOC &&
6684 statype != CFG80211_STA_TDLS_PEER_SETUP)
b95eb7f0 6685 params->link_sta_params.opmode_notif_used = false;
06f7c88c 6686
77ee7c89
JB		 6687 return 0;
6688}
6689EXPORT_SYMBOL(cfg80211_check_station_change);
6690
5727ef1b 6691/*
c258d2de 6692 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 6693 */
80b99899
JB		 6694static struct net_device *get_vlan(struct genl_info *info,
6695 struct cfg80211_registered_device *rdev)
5727ef1b 6696{
463d0183 6697 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 6698 struct net_device *v;
6699 int ret;
6700
6701 if (!vlanattr)
6702 return NULL;
6703
6704 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
6705 if (!v)
6706 return ERR_PTR(-ENODEV);
6707
6708 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
6709 ret = -EINVAL;
6710 goto error;
5727ef1b 6711 }
80b99899 6712
77ee7c89
JB		 6713 if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
6714 v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
6715 v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
6716 ret = -EINVAL;
6717 goto error;
6718 }
6719
80b99899
JB		 6720 if (!netif_running(v)) {
6721 ret = -ENETDOWN;
6722 goto error;
6723 }
6724
6725 return v;
6726 error:
6727 dev_put(v);
6728 return ERR_PTR(ret);
5727ef1b
JB		 6729}
6730
ff276691
JB		 6731static int nl80211_parse_sta_wme(struct genl_info *info,
6732 struct station_parameters *params)
df881293 6733{
df881293
JM		 6734 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
6735 struct nlattr *nla;
6736 int err;
6737
df881293
JM		 6738 /* parse WME attributes if present */
6739 if (!info->attrs[NL80211_ATTR_STA_WME])
6740 return 0;
6741
6742 nla = info->attrs[NL80211_ATTR_STA_WME];
8cb08174
JB		 6743 err = nla_parse_nested_deprecated(tb, NL80211_STA_WME_MAX, nla,
6744 nl80211_sta_wme_policy,
6745 info->extack);
df881293
JM		 6746 if (err)
6747 return err;
6748
6749 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
6750 params->uapsd_queues = nla_get_u8(
6751 tb[NL80211_STA_WME_UAPSD_QUEUES]);
6752 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
6753 return -EINVAL;
6754
6755 if (tb[NL80211_STA_WME_MAX_SP])
6756 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
6757
6758 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
6759 return -EINVAL;
6760
6761 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
6762
6763 return 0;
6764}
6765
c01fc9ad
SD		 6766static int nl80211_parse_sta_channel_info(struct genl_info *info,
6767 struct station_parameters *params)
6768{
6769 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]) {
6770 params->supported_channels =
6771 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6772 params->supported_channels_len =
6773 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6774 /*
6775 * Need to include at least one (first channel, number of
cb9abd48
JB		 6776 * channels) tuple for each subband (checked in policy),
6777 * and must have proper tuples for the rest of the data as well.
c01fc9ad 6778 */
c01fc9ad
SD		 6779 if (params->supported_channels_len % 2)
6780 return -EINVAL;
6781 }
6782
6783 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]) {
6784 params->supported_oper_classes =
6785 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
6786 params->supported_oper_classes_len =
6787 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
c01fc9ad
SD		 6788 }
6789 return 0;
6790}
6791
ff276691
JB		 6792static int nl80211_set_station_tdls(struct genl_info *info,
6793 struct station_parameters *params)
6794{
c01fc9ad 6795 int err;
ff276691 6796 /* Dummy STA entry gets updated once the peer capabilities are known */
5e4b6f56
JM		 6797 if (info->attrs[NL80211_ATTR_PEER_AID])
6798 params->aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
ff276691 6799 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
b95eb7f0 6800 params->link_sta_params.ht_capa =
ff276691
JB		 6801 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
6802 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
b95eb7f0 6803 params->link_sta_params.vht_capa =
ff276691 6804 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
c4cbaf79 6805 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
b95eb7f0 6806 params->link_sta_params.he_capa =
c4cbaf79 6807 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
b95eb7f0 6808 params->link_sta_params.he_capa_len =
c4cbaf79 6809 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
ea05fd35
IP		 6810
6811 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
b95eb7f0 6812 params->link_sta_params.eht_capa =
ea05fd35 6813 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
b95eb7f0 6814 params->link_sta_params.eht_capa_len =
ea05fd35
IP		 6815 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
6816
b95eb7f0
ST		 6817 if (!ieee80211_eht_capa_size_ok((const u8 *)params->link_sta_params.he_capa,
6818 (const u8 *)params->link_sta_params.eht_capa,
6819 params->link_sta_params.eht_capa_len))
ea05fd35
IP		 6820 return -EINVAL;
6821 }
c4cbaf79 6822 }
ff276691 6823
c01fc9ad
SD		 6824 err = nl80211_parse_sta_channel_info(info, params);
6825 if (err)
6826 return err;
6827
ff276691
JB		 6828 return nl80211_parse_sta_wme(info, params);
6829}
6830
e96d1cd2 6831static int nl80211_parse_sta_txpower_setting(struct genl_info *info,
577e5b8c
ST		 6832 struct sta_txpwr *txpwr,
6833 bool *txpwr_set)
e96d1cd2
ARN		 6834{
6835 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6836 int idx;
6837
6838 if (info->attrs[NL80211_ATTR_STA_TX_POWER_SETTING]) {
6839 if (!rdev->ops->set_tx_power ||
6840 !wiphy_ext_feature_isset(&rdev->wiphy,
6841 NL80211_EXT_FEATURE_STA_TX_PWR))
6842 return -EOPNOTSUPP;
6843
6844 idx = NL80211_ATTR_STA_TX_POWER_SETTING;
577e5b8c 6845 txpwr->type = nla_get_u8(info->attrs[idx]);
e96d1cd2 6846
577e5b8c 6847 if (txpwr->type == NL80211_TX_POWER_LIMITED) {
e96d1cd2
ARN		 6848 idx = NL80211_ATTR_STA_TX_POWER;
6849
6850 if (info->attrs[idx])
577e5b8c 6851 txpwr->power = nla_get_s16(info->attrs[idx]);
e96d1cd2
ARN		 6852 else
6853 return -EINVAL;
6854 }
577e5b8c
ST		 6855
6856 *txpwr_set = true;
6857 } else {
6858 *txpwr_set = false;
e96d1cd2
ARN		 6859 }
6860
6861 return 0;
6862}
6863
5727ef1b
JB		 6864static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
6865{
4c476991 6866 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 6867 struct net_device *dev = info->user_ptr[1];
5727ef1b 6868 struct station_parameters params;
77ee7c89
JB		 6869 u8 *mac_addr;
6870 int err;
5727ef1b
JB		 6871
6872 memset(&params, 0, sizeof(params));
6873
77ee7c89
JB		 6874 if (!rdev->ops->change_station)
6875 return -EOPNOTSUPP;
6876
e4208427
AB		 6877 /*
6878 * AID and listen_interval properties can be set only for unassociated
6879 * station. Include these parameters here and will check them in
6880 * cfg80211_check_station_change().
6881 */
a9bc31e4
AB		 6882 if (info->attrs[NL80211_ATTR_STA_AID])
6883 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
e4208427 6884
14f34e36
GG		 6885 if (info->attrs[NL80211_ATTR_VLAN_ID])
6886 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6887
e4208427
AB		 6888 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6889 params.listen_interval =
6890 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
6891 else
6892 params.listen_interval = -1;
5727ef1b 6893
ab0d76f6
JB		 6894 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS])
6895 params.support_p2p_ps =
6896 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
6897 else
17b94247 6898 params.support_p2p_ps = -1;
17b94247 6899
5727ef1b
JB		 6900 if (!info->attrs[NL80211_ATTR_MAC])
6901 return -EINVAL;
6902
d2bc5249
AO		 6903 params.link_sta_params.link_id =
6904 nl80211_link_id_or_invalid(info->attrs);
6905
6906 if (info->attrs[NL80211_ATTR_MLD_ADDR]) {
6907 /* If MLD_ADDR attribute is set then this is an MLD station
6908 * and the MLD_ADDR attribute holds the MLD address and the
6909 * MAC attribute holds for the LINK address.
6910 * In that case, the link_id is also expected to be valid.
6911 */
6912 if (params.link_sta_params.link_id < 0)
6913 return -EINVAL;
6914
6915 mac_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
6916 params.link_sta_params.mld_mac = mac_addr;
6917 params.link_sta_params.link_mac =
6918 nla_data(info->attrs[NL80211_ATTR_MAC]);
6919 if (!is_valid_ether_addr(params.link_sta_params.link_mac))
6920 return -EINVAL;
6921 } else {
6922 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6923 }
6924
5727ef1b
JB		 6925
6926 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
b95eb7f0 6927 params.link_sta_params.supported_rates =
5727ef1b 6928 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
b95eb7f0 6929 params.link_sta_params.supported_rates_len =
5727ef1b
JB		 6930 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6931 }
6932
9d62a986
JM		 6933 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
6934 params.capability =
6935 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
6936 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
6937 }
6938
6939 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
6940 params.ext_capab =
6941 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6942 params.ext_capab_len =
6943 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6944 }
6945
bdd3ae3d 6946 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 6947 return -EINVAL;
6948
ab0d76f6 6949 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2ec600d6 6950 params.plink_action =
f8bacc21 6951 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2ec600d6 6952
f8bacc21 6953 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
9c3990aa 6954 params.plink_state =
f8bacc21 6955 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
ab0d76f6 6956 if (info->attrs[NL80211_ATTR_MESH_PEER_AID])
7d27a0ba
MH		 6957 params.peer_aid = nla_get_u16(
6958 info->attrs[NL80211_ATTR_MESH_PEER_AID]);
f8bacc21
JB		 6959 params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
6960 }
9c3990aa 6961
ab0d76f6
JB		 6962 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE])
6963 params.local_pm = nla_get_u32(
3b1c5a53
MP		 6964 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
6965
06f7c88c 6966 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
b95eb7f0
ST		 6967 params.link_sta_params.opmode_notif_used = true;
6968 params.link_sta_params.opmode_notif =
06f7c88c
BL		 6969 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6970 }
6971
43e64bf3 6972 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
b95eb7f0 6973 params.link_sta_params.he_6ghz_capa =
fce2ff72 6974 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
43e64bf3 6975
36647055
THJ		 6976 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6977 params.airtime_weight =
6978 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6979
6980 if (params.airtime_weight &&
6981 !wiphy_ext_feature_isset(&rdev->wiphy,
6982 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6983 return -EOPNOTSUPP;
6984
b95eb7f0
ST		 6985 err = nl80211_parse_sta_txpower_setting(info,
6986 &params.link_sta_params.txpwr,
6987 &params.link_sta_params.txpwr_set);
e96d1cd2
ARN		 6988 if (err)
6989 return err;
6990
77ee7c89
JB		 6991 /* Include parameters for TDLS peer (will check later) */
6992 err = nl80211_set_station_tdls(info, &params);
6993 if (err)
6994 return err;
6995
6996 params.vlan = get_vlan(info, rdev);
6997 if (IS_ERR(params.vlan))
6998 return PTR_ERR(params.vlan);
6999
a97f4424
JB		 7000 switch (dev->ieee80211_ptr->iftype) {
7001 case NL80211_IFTYPE_AP:
7002 case NL80211_IFTYPE_AP_VLAN:
074ac8df 7003 case NL80211_IFTYPE_P2P_GO:
074ac8df 7004 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 7005 case NL80211_IFTYPE_STATION:
267335d6 7006 case NL80211_IFTYPE_ADHOC:
a97f4424 7007 case NL80211_IFTYPE_MESH_POINT:
a97f4424
JB		 7008 break;
7009 default:
77ee7c89
JB		 7010 err = -EOPNOTSUPP;
7011 goto out_put_vlan;
034d655e
JB		 7012 }
7013
77ee7c89 7014 /* driver will call cfg80211_check_station_change() */
3d1cc7cd 7015 wdev_lock(dev->ieee80211_ptr);
e35e4d28 7016 err = rdev_change_station(rdev, dev, mac_addr, &params);
3d1cc7cd 7017 wdev_unlock(dev->ieee80211_ptr);
5727ef1b 7018
77ee7c89 7019 out_put_vlan:
1160dfa1 7020 dev_put(params.vlan);
3b85875a 7021
5727ef1b
JB		 7022 return err;
7023}
7024
7025static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
7026{
4c476991 7027 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 7028 int err;
4c476991 7029 struct net_device *dev = info->user_ptr[1];
efbfe516 7030 struct wireless_dev *wdev = dev->ieee80211_ptr;
5727ef1b
JB		 7031 struct station_parameters params;
7032 u8 *mac_addr = NULL;
bda95eb1
JB		 7033 u32 auth_assoc = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
7034 BIT(NL80211_STA_FLAG_ASSOCIATED);
5727ef1b
JB		 7035
7036 memset(&params, 0, sizeof(params));
7037
984c311b
JB		 7038 if (!rdev->ops->add_station)
7039 return -EOPNOTSUPP;
7040
5727ef1b
JB		 7041 if (!info->attrs[NL80211_ATTR_MAC])
7042 return -EINVAL;
7043
5727ef1b
JB		 7044 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
7045 return -EINVAL;
7046
7047 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
7048 return -EINVAL;
7049
5e4b6f56
JM		 7050 if (!info->attrs[NL80211_ATTR_STA_AID] &&
7051 !info->attrs[NL80211_ATTR_PEER_AID])
0e956c13
TLSC		 7052 return -EINVAL;
7053
b95eb7f0
ST		 7054 params.link_sta_params.link_id =
7055 nl80211_link_id_or_invalid(info->attrs);
7056
c0d67012 7057 if (info->attrs[NL80211_ATTR_MLD_ADDR]) {
c0d67012
ST		 7058 mac_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
7059 params.link_sta_params.mld_mac = mac_addr;
7060 params.link_sta_params.link_mac =
7061 nla_data(info->attrs[NL80211_ATTR_MAC]);
7062 if (!is_valid_ether_addr(params.link_sta_params.link_mac))
7063 return -EINVAL;
7064 } else {
7065 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
7066 }
7067
b95eb7f0 7068 params.link_sta_params.supported_rates =
5727ef1b 7069 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
b95eb7f0 7070 params.link_sta_params.supported_rates_len =
5727ef1b
JB		 7071 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
7072 params.listen_interval =
7073 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 7074
14f34e36
GG		 7075 if (info->attrs[NL80211_ATTR_VLAN_ID])
7076 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
7077
17b94247 7078 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]) {
ab0d76f6
JB		 7079 params.support_p2p_ps =
7080 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
17b94247
AB		 7081 } else {
7082 /*
7083 * if not specified, assume it's supported for P2P GO interface,
7084 * and is NOT supported for AP interface
7085 */
7086 params.support_p2p_ps =
7087 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO;
7088 }
7089
3d124ea2 7090 if (info->attrs[NL80211_ATTR_PEER_AID])
5e4b6f56 7091 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
3d124ea2
JM		 7092 else
7093 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
51b50fbe 7094
9d62a986
JM		 7095 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
7096 params.capability =
7097 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
7098 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
7099 }
7100
7101 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
7102 params.ext_capab =
7103 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
7104 params.ext_capab_len =
7105 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
7106 }
7107
36aedc90 7108 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
b95eb7f0 7109 params.link_sta_params.ht_capa =
36aedc90 7110 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 7111
f461be3e 7112 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
b95eb7f0 7113 params.link_sta_params.vht_capa =
f461be3e
MP		 7114 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
7115
c4cbaf79 7116 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
b95eb7f0 7117 params.link_sta_params.he_capa =
c4cbaf79 7118 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
b95eb7f0 7119 params.link_sta_params.he_capa_len =
c4cbaf79 7120 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
ea05fd35
IP		 7121
7122 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
b95eb7f0 7123 params.link_sta_params.eht_capa =
ea05fd35 7124 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
b95eb7f0 7125 params.link_sta_params.eht_capa_len =
ea05fd35
IP		 7126 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
7127
b95eb7f0
ST		 7128 if (!ieee80211_eht_capa_size_ok((const u8 *)params.link_sta_params.he_capa,
7129 (const u8 *)params.link_sta_params.eht_capa,
7130 params.link_sta_params.eht_capa_len))
ea05fd35
IP		 7131 return -EINVAL;
7132 }
c4cbaf79
LC		 7133 }
7134
43e64bf3 7135 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
b95eb7f0 7136 params.link_sta_params.he_6ghz_capa =
43e64bf3
RM		 7137 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
7138
60f4a7b1 7139 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
b95eb7f0
ST		 7140 params.link_sta_params.opmode_notif_used = true;
7141 params.link_sta_params.opmode_notif =
60f4a7b1
MK		 7142 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
7143 }
7144
ab0d76f6 7145 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
96b78dff 7146 params.plink_action =
f8bacc21 7147 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
96b78dff 7148
36647055
THJ		 7149 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
7150 params.airtime_weight =
7151 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
7152
7153 if (params.airtime_weight &&
7154 !wiphy_ext_feature_isset(&rdev->wiphy,
7155 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
7156 return -EOPNOTSUPP;
7157
b95eb7f0
ST		 7158 err = nl80211_parse_sta_txpower_setting(info,
7159 &params.link_sta_params.txpwr,
7160 &params.link_sta_params.txpwr_set);
e96d1cd2
ARN		 7161 if (err)
7162 return err;
7163
c01fc9ad
SD		 7164 err = nl80211_parse_sta_channel_info(info, &params);
7165 if (err)
7166 return err;
7167
ff276691
JB		 7168 err = nl80211_parse_sta_wme(info, &params);
7169 if (err)
7170 return err;
bdd90d5e 7171
bdd3ae3d 7172 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 7173 return -EINVAL;
7174
496fcc29
JB		 7175 /* HT/VHT requires QoS, but if we don't have that just ignore HT/VHT
7176 * as userspace might just pass through the capabilities from the IEs
7177 * directly, rather than enforcing this restriction and returning an
7178 * error in this case.
7179 */
7180 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME))) {
b95eb7f0
ST		 7181 params.link_sta_params.ht_capa = NULL;
7182 params.link_sta_params.vht_capa = NULL;
c4cbaf79 7183
ea05fd35 7184 /* HE and EHT require WME */
b95eb7f0
ST		 7185 if (params.link_sta_params.he_capa_len ||
7186 params.link_sta_params.he_6ghz_capa ||
7187 params.link_sta_params.eht_capa_len)
c4cbaf79 7188 return -EINVAL;
496fcc29
JB		 7189 }
7190
43e64bf3 7191 /* Ensure that HT/VHT capabilities are not set for 6 GHz HE STA */
b95eb7f0
ST		 7192 if (params.link_sta_params.he_6ghz_capa &&
7193 (params.link_sta_params.ht_capa || params.link_sta_params.vht_capa))
43e64bf3
RM		 7194 return -EINVAL;
7195
77ee7c89
JB		 7196 /* When you run into this, adjust the code below for the new flag */
7197 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
7198
bdd90d5e
JB		 7199 switch (dev->ieee80211_ptr->iftype) {
7200 case NL80211_IFTYPE_AP:
7201 case NL80211_IFTYPE_AP_VLAN:
7202 case NL80211_IFTYPE_P2P_GO:
984c311b
JB		 7203 /* ignore WME attributes if iface/sta is not capable */
7204 if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
7205 !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
7206 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
c75786c9 7207
bdd90d5e 7208 /* TDLS peers cannot be added */
3d124ea2
JM		 7209 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
7210 info->attrs[NL80211_ATTR_PEER_AID])
4319e193 7211 return -EINVAL;
bdd90d5e
JB		 7212 /* but don't bother the driver with it */
7213 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 7214
d582cffb
JB		 7215 /* allow authenticated/associated only if driver handles it */
7216 if (!(rdev->wiphy.features &
7217 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
bda95eb1 7218 params.sta_flags_mask & auth_assoc)
d582cffb
JB		 7219 return -EINVAL;
7220
bda95eb1
JB		 7221 /* Older userspace, or userspace wanting to be compatible with
7222 * !NL80211_FEATURE_FULL_AP_CLIENT_STATE, will not set the auth
7223 * and assoc flags in the mask, but assumes the station will be
7224 * added as associated anyway since this was the required driver
7225 * behaviour before NL80211_FEATURE_FULL_AP_CLIENT_STATE was
7226 * introduced.
7227 * In order to not bother drivers with this quirk in the API
7228 * set the flags in both the mask and set for new stations in
7229 * this case.
7230 */
7231 if (!(params.sta_flags_mask & auth_assoc)) {
7232 params.sta_flags_mask |= auth_assoc;
7233 params.sta_flags_set |= auth_assoc;
7234 }
7235
bdd90d5e
JB		 7236 /* must be last in here for error handling */
7237 params.vlan = get_vlan(info, rdev);
7238 if (IS_ERR(params.vlan))
7239 return PTR_ERR(params.vlan);
7240 break;
7241 case NL80211_IFTYPE_MESH_POINT:
984c311b
JB		 7242 /* ignore uAPSD data */
7243 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
7244
d582cffb
JB		 7245 /* associated is disallowed */
7246 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
7247 return -EINVAL;
bdd90d5e 7248 /* TDLS peers cannot be added */
3d124ea2
JM		 7249 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
7250 info->attrs[NL80211_ATTR_PEER_AID])
bdd90d5e
JB		 7251 return -EINVAL;
7252 break;
7253 case NL80211_IFTYPE_STATION:
93d08f0b 7254 case NL80211_IFTYPE_P2P_CLIENT:
984c311b
JB		 7255 /* ignore uAPSD data */
7256 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
7257
77ee7c89
JB		 7258 /* these are disallowed */
7259 if (params.sta_flags_mask &
7260 (BIT(NL80211_STA_FLAG_ASSOCIATED) |
7261 BIT(NL80211_STA_FLAG_AUTHENTICATED)))
d582cffb 7262 return -EINVAL;
bdd90d5e
JB		 7263 /* Only TDLS peers can be added */
7264 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
7265 return -EINVAL;
7266 /* Can only add if TDLS ... */
7267 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
7268 return -EOPNOTSUPP;
7269 /* ... with external setup is supported */
7270 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
7271 return -EOPNOTSUPP;
77ee7c89
JB		 7272 /*
7273 * Older wpa_supplicant versions always mark the TDLS peer
7274 * as authorized, but it shouldn't yet be.
7275 */
7276 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
bdd90d5e
JB		 7277 break;
7278 default:
7279 return -EOPNOTSUPP;
c75786c9
EP		 7280 }
7281
bdd90d5e 7282 /* be aware of params.vlan when changing code here */
5727ef1b 7283
3d1cc7cd 7284 wdev_lock(dev->ieee80211_ptr);
efbfe516
JB		 7285 if (wdev->valid_links) {
7286 if (params.link_sta_params.link_id < 0) {
7287 err = -EINVAL;
7288 goto out;
7289 }
7290 if (!(wdev->valid_links & BIT(params.link_sta_params.link_id))) {
7291 err = -ENOLINK;
7292 goto out;
7293 }
7294 } else {
7295 if (params.link_sta_params.link_id >= 0) {
7296 err = -EINVAL;
7297 goto out;
7298 }
7299 }
e35e4d28 7300 err = rdev_add_station(rdev, dev, mac_addr, &params);
efbfe516 7301out:
3d1cc7cd 7302 wdev_unlock(dev->ieee80211_ptr);
1160dfa1 7303 dev_put(params.vlan);
5727ef1b
JB		 7304 return err;
7305}
7306
7307static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
7308{
4c476991
JB		 7309 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7310 struct net_device *dev = info->user_ptr[1];
89c771e5 7311 struct station_del_parameters params;
3d1cc7cd 7312 int ret;
89c771e5
JM		 7313
7314 memset(&params, 0, sizeof(params));
5727ef1b
JB		 7315
7316 if (info->attrs[NL80211_ATTR_MAC])
89c771e5 7317 params.mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
5727ef1b 7318
306b79ea
JB		 7319 switch (dev->ieee80211_ptr->iftype) {
7320 case NL80211_IFTYPE_AP:
7321 case NL80211_IFTYPE_AP_VLAN:
7322 case NL80211_IFTYPE_MESH_POINT:
7323 case NL80211_IFTYPE_P2P_GO:
7324 /* always accept these */
7325 break;
7326 case NL80211_IFTYPE_ADHOC:
7327 /* conditionally accept */
7328 if (wiphy_ext_feature_isset(&rdev->wiphy,
7329 NL80211_EXT_FEATURE_DEL_IBSS_STA))
7330 break;
edafcf42 7331 return -EINVAL;
306b79ea 7332 default:
4c476991 7333 return -EINVAL;
306b79ea 7334 }
5727ef1b 7335
4c476991
JB		 7336 if (!rdev->ops->del_station)
7337 return -EOPNOTSUPP;
3b85875a 7338
98856866
JM		 7339 if (info->attrs[NL80211_ATTR_MGMT_SUBTYPE]) {
7340 params.subtype =
7341 nla_get_u8(info->attrs[NL80211_ATTR_MGMT_SUBTYPE]);
7342 if (params.subtype != IEEE80211_STYPE_DISASSOC >> 4 &&
7343 params.subtype != IEEE80211_STYPE_DEAUTH >> 4)
7344 return -EINVAL;
7345 } else {
7346 /* Default to Deauthentication frame */
7347 params.subtype = IEEE80211_STYPE_DEAUTH >> 4;
7348 }
7349
7350 if (info->attrs[NL80211_ATTR_REASON_CODE]) {
7351 params.reason_code =
7352 nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
7353 if (params.reason_code == 0)
7354 return -EINVAL; /* 0 is reserved */
7355 } else {
7356 /* Default to reason code 2 */
7357 params.reason_code = WLAN_REASON_PREV_AUTH_NOT_VALID;
7358 }
7359
3d1cc7cd
JB		 7360 wdev_lock(dev->ieee80211_ptr);
7361 ret = rdev_del_station(rdev, dev, &params);
7362 wdev_unlock(dev->ieee80211_ptr);
7363
7364 return ret;
5727ef1b
JB		 7365}
7366
15e47304 7367static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 7368 int flags, struct net_device *dev,
7369 u8 *dst, u8 *next_hop,
7370 struct mpath_info *pinfo)
7371{
7372 void *hdr;
7373 struct nlattr *pinfoattr;
7374
1ef4c850 7375 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_MPATH);
2ec600d6
LCC		 7376 if (!hdr)
7377 return -1;
7378
9360ffd1
DM		 7379 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7380 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
7381 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
7382 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
7383 goto nla_put_failure;
f5ea9120 7384
ae0be8de 7385 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MPATH_INFO);
2ec600d6
LCC		 7386 if (!pinfoattr)
7387 goto nla_put_failure;
9360ffd1
DM		 7388 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
7389 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
7390 pinfo->frame_qlen))
7391 goto nla_put_failure;
7392 if (((pinfo->filled & MPATH_INFO_SN) &&
7393 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
7394 ((pinfo->filled & MPATH_INFO_METRIC) &&
7395 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
7396 pinfo->metric)) ||
7397 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
7398 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
7399 pinfo->exptime)) ||
7400 ((pinfo->filled & MPATH_INFO_FLAGS) &&
7401 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
7402 pinfo->flags)) ||
7403 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
7404 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
7405 pinfo->discovery_timeout)) ||
7406 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
7407 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
cc241636
JH		 7408 pinfo->discovery_retries)) ||
7409 ((pinfo->filled & MPATH_INFO_HOP_COUNT) &&
7410 nla_put_u8(msg, NL80211_MPATH_INFO_HOP_COUNT,
540bbcb9
JH		 7411 pinfo->hop_count)) ||
7412 ((pinfo->filled & MPATH_INFO_PATH_CHANGE) &&
7413 nla_put_u32(msg, NL80211_MPATH_INFO_PATH_CHANGE,
7414 pinfo->path_change_count)))
9360ffd1 7415 goto nla_put_failure;
2ec600d6
LCC		 7416
7417 nla_nest_end(msg, pinfoattr);
7418
053c095a
JB		 7419 genlmsg_end(msg, hdr);
7420 return 0;
2ec600d6
LCC		 7421
7422 nla_put_failure:
bc3ed28c
TG		 7423 genlmsg_cancel(msg, hdr);
7424 return -EMSGSIZE;
2ec600d6
LCC		 7425}
7426
7427static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 7428 struct netlink_callback *cb)
2ec600d6 7429{
2ec600d6 7430 struct mpath_info pinfo;
1b8ec87a 7431 struct cfg80211_registered_device *rdev;
97990a06 7432 struct wireless_dev *wdev;
2ec600d6
LCC		 7433 u8 dst[ETH_ALEN];
7434 u8 next_hop[ETH_ALEN];
97990a06 7435 int path_idx = cb->args[2];
2ec600d6 7436 int err;
2ec600d6 7437
ce6b6974 7438 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
67748893 7439 if (err)
a05829a7
JB		 7440 return err;
7441 /* nl80211_prepare_wdev_dump acquired it in the successful case */
7442 __acquire(&rdev->wiphy.mtx);
bba95fef 7443
1b8ec87a 7444 if (!rdev->ops->dump_mpath) {
eec60b03 7445 err = -EOPNOTSUPP;
bba95fef
JB		 7446 goto out_err;
7447 }
7448
97990a06 7449 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
eec60b03 7450 err = -EOPNOTSUPP;
0448b5fc 7451 goto out_err;
eec60b03
JM		 7452 }
7453
bba95fef 7454 while (1) {
1b8ec87a 7455 err = rdev_dump_mpath(rdev, wdev->netdev, path_idx, dst,
97990a06 7456 next_hop, &pinfo);
bba95fef 7457 if (err == -ENOENT)
2ec600d6 7458 break;
bba95fef 7459 if (err)
3b85875a 7460 goto out_err;
2ec600d6 7461
15e47304 7462 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef 7463 cb->nlh->nlmsg_seq, NLM_F_MULTI,
97990a06 7464 wdev->netdev, dst, next_hop,
bba95fef
JB		 7465 &pinfo) < 0)
7466 goto out;
2ec600d6 7467
bba95fef 7468 path_idx++;
2ec600d6 7469 }
2ec600d6 7470
bba95fef 7471 out:
97990a06 7472 cb->args[2] = path_idx;
bba95fef 7473 err = skb->len;
bba95fef 7474 out_err:
a05829a7 7475 wiphy_unlock(&rdev->wiphy);
bba95fef 7476 return err;
2ec600d6
LCC		 7477}
7478
7479static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
7480{
4c476991 7481 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 7482 int err;
4c476991 7483 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7484 struct mpath_info pinfo;
7485 struct sk_buff *msg;
7486 u8 *dst = NULL;
7487 u8 next_hop[ETH_ALEN];
7488
7489 memset(&pinfo, 0, sizeof(pinfo));
7490
7491 if (!info->attrs[NL80211_ATTR_MAC])
7492 return -EINVAL;
7493
7494 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7495
4c476991
JB		 7496 if (!rdev->ops->get_mpath)
7497 return -EOPNOTSUPP;
2ec600d6 7498
4c476991
JB		 7499 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7500 return -EOPNOTSUPP;
eec60b03 7501
e35e4d28 7502 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 7503 if (err)
4c476991 7504 return err;
2ec600d6 7505
fd2120ca 7506 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 7507 if (!msg)
4c476991 7508 return -ENOMEM;
2ec600d6 7509
15e47304 7510 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 7511 dev, dst, next_hop, &pinfo) < 0) {
7512 nlmsg_free(msg);
7513 return -ENOBUFS;
7514 }
3b85875a 7515
4c476991 7516 return genlmsg_reply(msg, info);
2ec600d6
LCC		 7517}
7518
7519static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
7520{
4c476991
JB		 7521 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7522 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7523 u8 *dst = NULL;
7524 u8 *next_hop = NULL;
7525
7526 if (!info->attrs[NL80211_ATTR_MAC])
7527 return -EINVAL;
7528
7529 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
7530 return -EINVAL;
7531
7532 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7533 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
7534
4c476991
JB		 7535 if (!rdev->ops->change_mpath)
7536 return -EOPNOTSUPP;
35a8efe1 7537
4c476991
JB		 7538 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7539 return -EOPNOTSUPP;
2ec600d6 7540
e35e4d28 7541 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 7542}
4c476991 7543
2ec600d6
LCC		 7544static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
7545{
4c476991
JB		 7546 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7547 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7548 u8 *dst = NULL;
7549 u8 *next_hop = NULL;
7550
7551 if (!info->attrs[NL80211_ATTR_MAC])
7552 return -EINVAL;
7553
7554 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
7555 return -EINVAL;
7556
7557 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7558 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
7559
4c476991
JB		 7560 if (!rdev->ops->add_mpath)
7561 return -EOPNOTSUPP;
35a8efe1 7562
4c476991
JB		 7563 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7564 return -EOPNOTSUPP;
2ec600d6 7565
e35e4d28 7566 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 7567}
7568
7569static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
7570{
4c476991
JB		 7571 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7572 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 7573 u8 *dst = NULL;
7574
7575 if (info->attrs[NL80211_ATTR_MAC])
7576 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7577
4c476991
JB		 7578 if (!rdev->ops->del_mpath)
7579 return -EOPNOTSUPP;
3b85875a 7580
b501426c
MP		 7581 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7582 return -EOPNOTSUPP;
7583
e35e4d28 7584 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 7585}
7586
66be7d2b
HR		 7587static int nl80211_get_mpp(struct sk_buff *skb, struct genl_info *info)
7588{
7589 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7590 int err;
7591 struct net_device *dev = info->user_ptr[1];
7592 struct mpath_info pinfo;
7593 struct sk_buff *msg;
7594 u8 *dst = NULL;
7595 u8 mpp[ETH_ALEN];
7596
7597 memset(&pinfo, 0, sizeof(pinfo));
7598
7599 if (!info->attrs[NL80211_ATTR_MAC])
7600 return -EINVAL;
7601
7602 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
7603
7604 if (!rdev->ops->get_mpp)
7605 return -EOPNOTSUPP;
7606
7607 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
7608 return -EOPNOTSUPP;
7609
7610 err = rdev_get_mpp(rdev, dev, dst, mpp, &pinfo);
7611 if (err)
7612 return err;
7613
7614 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7615 if (!msg)
7616 return -ENOMEM;
7617
7618 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
7619 dev, dst, mpp, &pinfo) < 0) {
7620 nlmsg_free(msg);
7621 return -ENOBUFS;
7622 }
7623
7624 return genlmsg_reply(msg, info);
7625}
7626
7627static int nl80211_dump_mpp(struct sk_buff *skb,
7628 struct netlink_callback *cb)
7629{
7630 struct mpath_info pinfo;
7631 struct cfg80211_registered_device *rdev;
7632 struct wireless_dev *wdev;
7633 u8 dst[ETH_ALEN];
7634 u8 mpp[ETH_ALEN];
7635 int path_idx = cb->args[2];
7636 int err;
7637
ce6b6974 7638 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
66be7d2b 7639 if (err)
a05829a7
JB		 7640 return err;
7641 /* nl80211_prepare_wdev_dump acquired it in the successful case */
7642 __acquire(&rdev->wiphy.mtx);
66be7d2b
HR		 7643
7644 if (!rdev->ops->dump_mpp) {
7645 err = -EOPNOTSUPP;
7646 goto out_err;
7647 }
7648
7649 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
7650 err = -EOPNOTSUPP;
7651 goto out_err;
7652 }
7653
7654 while (1) {
7655 err = rdev_dump_mpp(rdev, wdev->netdev, path_idx, dst,
7656 mpp, &pinfo);
7657 if (err == -ENOENT)
7658 break;
7659 if (err)
7660 goto out_err;
7661
7662 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
7663 cb->nlh->nlmsg_seq, NLM_F_MULTI,
7664 wdev->netdev, dst, mpp,
7665 &pinfo) < 0)
7666 goto out;
7667
7668 path_idx++;
7669 }
7670
7671 out:
7672 cb->args[2] = path_idx;
7673 err = skb->len;
7674 out_err:
a05829a7 7675 wiphy_unlock(&rdev->wiphy);
66be7d2b
HR		 7676 return err;
7677}
7678
9f1ba906
JM		 7679static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
7680{
4c476991
JB		 7681 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7682 struct net_device *dev = info->user_ptr[1];
c56589ed 7683 struct wireless_dev *wdev = dev->ieee80211_ptr;
9f1ba906 7684 struct bss_parameters params;
c56589ed 7685 int err;
9f1ba906
JM		 7686
7687 memset(&params, 0, sizeof(params));
7688 /* default to not changing parameters */
7689 params.use_cts_prot = -1;
7690 params.use_short_preamble = -1;
7691 params.use_short_slot_time = -1;
fd8aaaf3 7692 params.ap_isolate = -1;
50b12f59 7693 params.ht_opmode = -1;
53cabad7
JB		 7694 params.p2p_ctwindow = -1;
7695 params.p2p_opp_ps = -1;
9f1ba906
JM		 7696
7697 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
7698 params.use_cts_prot =
7699 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
7700 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
7701 params.use_short_preamble =
7702 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
7703 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
7704 params.use_short_slot_time =
7705 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 7706 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
7707 params.basic_rates =
7708 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7709 params.basic_rates_len =
7710 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7711 }
fd8aaaf3
FF		 7712 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
7713 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 7714 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
7715 params.ht_opmode =
7716 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 7717
53cabad7
JB		 7718 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
7719 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7720 return -EINVAL;
7721 params.p2p_ctwindow =
ab0d76f6 7722 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 7723 if (params.p2p_ctwindow != 0 &&
7724 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
7725 return -EINVAL;
7726 }
7727
7728 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
7729 u8 tmp;
7730
7731 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7732 return -EINVAL;
7733 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 7734 params.p2p_opp_ps = tmp;
7735 if (params.p2p_opp_ps &&
7736 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
7737 return -EINVAL;
7738 }
7739
4c476991
JB		 7740 if (!rdev->ops->change_bss)
7741 return -EOPNOTSUPP;
9f1ba906 7742
074ac8df 7743 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 7744 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7745 return -EOPNOTSUPP;
3b85875a 7746
c56589ed
SW		 7747 wdev_lock(wdev);
7748 err = rdev_change_bss(rdev, dev, &params);
7749 wdev_unlock(wdev);
7750
7751 return err;
9f1ba906
JM		 7752}
7753
b2e1b302
LR		 7754static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
7755{
b2e1b302 7756 char *data = NULL;
05050753 7757 bool is_indoor;
57b5ce07 7758 enum nl80211_user_reg_hint_type user_reg_hint_type;
05050753
I		 7759 u32 owner_nlportid;
7760
80778f18
LR		 7761 /*
7762 * You should only get this when cfg80211 hasn't yet initialized
7763 * completely when built-in to the kernel right between the time
7764 * window between nl80211_init() and regulatory_init(), if that is
7765 * even possible.
7766 */
458f4f9e 7767 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
fe33eb39 7768 return -EINPROGRESS;
80778f18 7769
57b5ce07
LR		 7770 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
7771 user_reg_hint_type =
7772 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
7773 else
7774 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
7775
7776 switch (user_reg_hint_type) {
7777 case NL80211_USER_REG_HINT_USER:
7778 case NL80211_USER_REG_HINT_CELL_BASE:
52616f2b
IP		 7779 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7780 return -EINVAL;
7781
7782 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7783 return regulatory_hint_user(data, user_reg_hint_type);
7784 case NL80211_USER_REG_HINT_INDOOR:
05050753
I		 7785 if (info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
7786 owner_nlportid = info->snd_portid;
7787 is_indoor = !!info->attrs[NL80211_ATTR_REG_INDOOR];
7788 } else {
7789 owner_nlportid = 0;
7790 is_indoor = true;
7791 }
7792
7793 return regulatory_hint_indoor(is_indoor, owner_nlportid);
57b5ce07
LR		 7794 default:
7795 return -EINVAL;
7796 }
b2e1b302
LR		 7797}
7798
1ea4ff3e
JB		 7799static int nl80211_reload_regdb(struct sk_buff *skb, struct genl_info *info)
7800{
7801 return reg_reload_regdb();
7802}
7803
24bdd9f4 7804static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 7805 struct genl_info *info)
93da9cc1 7806{
4c476991 7807 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 7808 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 7809 struct wireless_dev *wdev = dev->ieee80211_ptr;
7810 struct mesh_config cur_params;
7811 int err = 0;
93da9cc1 7812 void *hdr;
7813 struct nlattr *pinfoattr;
7814 struct sk_buff *msg;
7815
29cbe68c
JB		 7816 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7817 return -EOPNOTSUPP;
7818
24bdd9f4 7819 if (!rdev->ops->get_mesh_config)
4c476991 7820 return -EOPNOTSUPP;
f3f92586 7821
29cbe68c
JB		 7822 wdev_lock(wdev);
7823 /* If not connected, get default parameters */
7b0a0e3c 7824 if (!wdev->u.mesh.id_len)
29cbe68c
JB		 7825 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
7826 else
e35e4d28 7827 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 7828 wdev_unlock(wdev);
7829
93da9cc1 7830 if (err)
4c476991 7831 return err;
93da9cc1 7832
7833 /* Draw up a netlink message to send back */
fd2120ca 7834 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 7835 if (!msg)
7836 return -ENOMEM;
15e47304 7837 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 7838 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 7839 if (!hdr)
efe1cf0c 7840 goto out;
ae0be8de 7841 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 7842 if (!pinfoattr)
7843 goto nla_put_failure;
9360ffd1
DM		 7844 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7845 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
7846 cur_params.dot11MeshRetryTimeout) ||
7847 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
7848 cur_params.dot11MeshConfirmTimeout) ||
7849 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
7850 cur_params.dot11MeshHoldingTimeout) ||
7851 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
7852 cur_params.dot11MeshMaxPeerLinks) ||
7853 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
7854 cur_params.dot11MeshMaxRetries) ||
7855 nla_put_u8(msg, NL80211_MESHCONF_TTL,
7856 cur_params.dot11MeshTTL) ||
7857 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
7858 cur_params.element_ttl) ||
7859 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
7860 cur_params.auto_open_plinks) ||
7eab0f64
JL		 7861 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
7862 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 7863 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
7864 cur_params.dot11MeshHWMPmaxPREQretries) ||
7865 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
7866 cur_params.path_refresh_time) ||
7867 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
7868 cur_params.min_discovery_timeout) ||
7869 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
7870 cur_params.dot11MeshHWMPactivePathTimeout) ||
7871 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
7872 cur_params.dot11MeshHWMPpreqMinInterval) ||
7873 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
7874 cur_params.dot11MeshHWMPperrMinInterval) ||
7875 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
7876 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
7877 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
7878 cur_params.dot11MeshHWMPRootMode) ||
7879 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7880 cur_params.dot11MeshHWMPRannInterval) ||
7881 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
7882 cur_params.dot11MeshGateAnnouncementProtocol) ||
7883 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
7884 cur_params.dot11MeshForwarding) ||
335d5349 7885 nla_put_s32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 7886 cur_params.rssi_threshold) ||
7887 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 7888 cur_params.ht_opmode) ||
7889 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7890 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
7891 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 7892 cur_params.dot11MeshHWMProotInterval) ||
7893 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3b1c5a53
MP		 7894 cur_params.dot11MeshHWMPconfirmationInterval) ||
7895 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
7896 cur_params.power_mode) ||
7897 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
8e7c0538
CT		 7898 cur_params.dot11MeshAwakeWindowDuration) ||
7899 nla_put_u32(msg, NL80211_MESHCONF_PLINK_TIMEOUT,
01d66fbd
BC		 7900 cur_params.plink_timeout) ||
7901 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_GATE,
e3718a61
LL		 7902 cur_params.dot11MeshConnectedToMeshGate) ||
7903 nla_put_u8(msg, NL80211_MESHCONF_NOLEARN,
184eebe6
MT		 7904 cur_params.dot11MeshNolearn) ||
7905 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_AS,
7906 cur_params.dot11MeshConnectedToAuthServer))
9360ffd1 7907 goto nla_put_failure;
93da9cc1 7908 nla_nest_end(msg, pinfoattr);
7909 genlmsg_end(msg, hdr);
4c476991 7910 return genlmsg_reply(msg, info);
93da9cc1 7911
3b85875a 7912 nla_put_failure:
efe1cf0c 7913 out:
d080e275 7914 nlmsg_free(msg);
4c476991 7915 return -ENOBUFS;
93da9cc1 7916}
7917
ab0d76f6
JB		 7918static const struct nla_policy
7919nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
7920 [NL80211_MESHCONF_RETRY_TIMEOUT] =
7921 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7922 [NL80211_MESHCONF_CONFIRM_TIMEOUT] =
7923 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7924 [NL80211_MESHCONF_HOLDING_TIMEOUT] =
7925 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7926 [NL80211_MESHCONF_MAX_PEER_LINKS] =
7927 NLA_POLICY_RANGE(NLA_U16, 0, 255),
7928 [NL80211_MESHCONF_MAX_RETRIES] = NLA_POLICY_MAX(NLA_U8, 16),
7929 [NL80211_MESHCONF_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
7930 [NL80211_MESHCONF_ELEMENT_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
7931 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = NLA_POLICY_MAX(NLA_U8, 1),
7932 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] =
7933 NLA_POLICY_RANGE(NLA_U32, 1, 255),
93da9cc1 7934 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
7935 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
ab0d76f6 7936 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = NLA_POLICY_MIN(NLA_U16, 1),
93da9cc1 7937 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 7938 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] =
7939 NLA_POLICY_MIN(NLA_U16, 1),
7940 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] =
7941 NLA_POLICY_MIN(NLA_U16, 1),
7942 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] =
7943 NLA_POLICY_MIN(NLA_U16, 1),
7944 [NL80211_MESHCONF_HWMP_ROOTMODE] = NLA_POLICY_MAX(NLA_U8, 4),
7945 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] =
7946 NLA_POLICY_MIN(NLA_U16, 1),
7947 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = NLA_POLICY_MAX(NLA_U8, 1),
7948 [NL80211_MESHCONF_FORWARDING] = NLA_POLICY_MAX(NLA_U8, 1),
7949 [NL80211_MESHCONF_RSSI_THRESHOLD] =
7950 NLA_POLICY_RANGE(NLA_S32, -255, 0),
a4f606ea 7951 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6 7952 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 7953 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] =
7954 NLA_POLICY_MIN(NLA_U16, 1),
7955 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] =
7956 NLA_POLICY_MIN(NLA_U16, 1),
7957 [NL80211_MESHCONF_POWER_MODE] =
7958 NLA_POLICY_RANGE(NLA_U32,
7959 NL80211_MESH_POWER_ACTIVE,
7960 NL80211_MESH_POWER_MAX),
3b1c5a53 7961 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
8e7c0538 7962 [NL80211_MESHCONF_PLINK_TIMEOUT] = { .type = NLA_U32 },
01d66fbd 7963 [NL80211_MESHCONF_CONNECTED_TO_GATE] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
e3718a61 7964 [NL80211_MESHCONF_NOLEARN] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
184eebe6 7965 [NL80211_MESHCONF_CONNECTED_TO_AS] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
93da9cc1 7966};
7967
c80d545d
JC		 7968static const struct nla_policy
7969 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 7970 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 7971 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
7972 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 7973 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
6e16d90b 7974 [NL80211_MESH_SETUP_AUTH_PROTOCOL] = { .type = NLA_U8 },
bb2798d4 7975 [NL80211_MESH_SETUP_USERSPACE_MPM] = { .type = NLA_FLAG },
3d7af878
JB		 7976 [NL80211_MESH_SETUP_IE] =
7977 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
7978 IEEE80211_MAX_DATA_LEN),
b130e5ce 7979 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 7980};
7981
24bdd9f4 7982static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 7983 struct mesh_config *cfg,
7984 u32 *mask_out)
93da9cc1 7985{
93da9cc1 7986 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 7987 u32 mask = 0;
9757235f 7988 u16 ht_opmode;
93da9cc1 7989
ab0d76f6
JB		 7990#define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, mask, attr, fn) \
7991do { \
7992 if (tb[attr]) { \
7993 cfg->param = fn(tb[attr]); \
7994 mask |= BIT((attr) - 1); \
7995 } \
ea54fba2 7996} while (0)
bd90fdcc 7997
24bdd9f4 7998 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 7999 return -EINVAL;
8cb08174 8000 if (nla_parse_nested_deprecated(tb, NL80211_MESHCONF_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_CONFIG], nl80211_meshconf_params_policy, info->extack))
93da9cc1 8001 return -EINVAL;
8002
93da9cc1 8003 /* This makes sure that there aren't more than 32 mesh config
8004 * parameters (otherwise our bitfield scheme would not work.) */
8005 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
8006
8007 /* Fill in the params struct */
ab0d76f6
JB		 8008 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, mask,
8009 NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
8010 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, mask,
8011 NL80211_MESHCONF_CONFIRM_TIMEOUT,
8012 nla_get_u16);
8013 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, mask,
8014 NL80211_MESHCONF_HOLDING_TIMEOUT,
8015 nla_get_u16);
8016 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, mask,
8017 NL80211_MESHCONF_MAX_PEER_LINKS,
8018 nla_get_u16);
8019 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, mask,
8020 NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
8021 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, mask,
8022 NL80211_MESHCONF_TTL, nla_get_u8);
8023 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, mask,
8024 NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
8025 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, mask,
8026 NL80211_MESHCONF_AUTO_OPEN_PLINKS,
8027 nla_get_u8);
ea54fba2 8028 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
ab0d76f6 8029 mask,
a4f606ea 8030 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
ab0d76f6
JB		 8031 nla_get_u32);
8032 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, mask,
8033 NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
8034 nla_get_u8);
8035 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, mask,
8036 NL80211_MESHCONF_PATH_REFRESH_TIME,
8037 nla_get_u32);
8038 if (mask & BIT(NL80211_MESHCONF_PATH_REFRESH_TIME) &&
8039 (cfg->path_refresh_time < 1 || cfg->path_refresh_time > 65535))
8040 return -EINVAL;
8041 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, mask,
8042 NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
8043 nla_get_u16);
ea54fba2 8044 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
ab0d76f6 8045 mask,
a4f606ea 8046 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
ab0d76f6
JB		 8047 nla_get_u32);
8048 if (mask & BIT(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT) &&
8049 (cfg->dot11MeshHWMPactivePathTimeout < 1 ||
8050 cfg->dot11MeshHWMPactivePathTimeout > 65535))
8051 return -EINVAL;
8052 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval, mask,
ea54fba2 8053 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
ab0d76f6
JB		 8054 nla_get_u16);
8055 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval, mask,
ea54fba2 8056 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
ab0d76f6 8057 nla_get_u16);
93da9cc1 8058 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6 8059 dot11MeshHWMPnetDiameterTraversalTime, mask,
a4f606ea 8060 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
ab0d76f6
JB		 8061 nla_get_u16);
8062 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
8063 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
8064 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
8065 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
8066 nla_get_u16);
8067 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshGateAnnouncementProtocol,
ea54fba2 8068 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
ab0d76f6
JB		 8069 nla_get_u8);
8070 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, mask,
8071 NL80211_MESHCONF_FORWARDING, nla_get_u8);
8072 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, mask,
8073 NL80211_MESHCONF_RSSI_THRESHOLD,
8074 nla_get_s32);
01d66fbd
BC		 8075 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToMeshGate, mask,
8076 NL80211_MESHCONF_CONNECTED_TO_GATE,
8077 nla_get_u8);
184eebe6
MT		 8078 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToAuthServer, mask,
8079 NL80211_MESHCONF_CONNECTED_TO_AS,
8080 nla_get_u8);
9757235f
MH		 8081 /*
8082 * Check HT operation mode based on
188f60ab 8083 * IEEE 802.11-2016 9.4.2.57 HT Operation element.
9757235f
MH		 8084 */
8085 if (tb[NL80211_MESHCONF_HT_OPMODE]) {
8086 ht_opmode = nla_get_u16(tb[NL80211_MESHCONF_HT_OPMODE]);
8087
8088 if (ht_opmode & ~(IEEE80211_HT_OP_MODE_PROTECTION |
8089 IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT |
8090 IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT))
8091 return -EINVAL;
8092
188f60ab
BC		 8093 /* NON_HT_STA bit is reserved, but some programs set it */
8094 ht_opmode &= ~IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
9757235f 8095
9757235f 8096 cfg->ht_opmode = ht_opmode;
fd551bac 8097 mask |= (1 << (NL80211_MESHCONF_HT_OPMODE - 1));
9757235f 8098 }
728b19e5 8099 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6
JB		 8100 dot11MeshHWMPactivePathToRootTimeout, mask,
8101 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
8102 nla_get_u32);
8103 if (mask & BIT(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT) &&
8104 (cfg->dot11MeshHWMPactivePathToRootTimeout < 1 ||
8105 cfg->dot11MeshHWMPactivePathToRootTimeout > 65535))
8106 return -EINVAL;
8107 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, mask,
8108 NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
8109 nla_get_u16);
8110 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPconfirmationInterval,
8111 mask,
728b19e5 8112 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
ab0d76f6
JB		 8113 nla_get_u16);
8114 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode, mask,
8115 NL80211_MESHCONF_POWER_MODE, nla_get_u32);
8116 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration, mask,
8117 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
8118 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, plink_timeout, mask,
8119 NL80211_MESHCONF_PLINK_TIMEOUT, nla_get_u32);
e3718a61
LL		 8120 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNolearn, mask,
8121 NL80211_MESHCONF_NOLEARN, nla_get_u8);
bd90fdcc
JB		 8122 if (mask_out)
8123 *mask_out = mask;
c80d545d 8124
bd90fdcc
JB		 8125 return 0;
8126
8127#undef FILL_IN_MESH_PARAM_IF_SET
8128}
8129
c80d545d
JC		 8130static int nl80211_parse_mesh_setup(struct genl_info *info,
8131 struct mesh_setup *setup)
8132{
bb2798d4 8133 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c80d545d
JC		 8134 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
8135
8136 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
8137 return -EINVAL;
8cb08174 8138 if (nla_parse_nested_deprecated(tb, NL80211_MESH_SETUP_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_SETUP], nl80211_mesh_setup_params_policy, info->extack))
c80d545d
JC		 8139 return -EINVAL;
8140
d299a1f2
JC		 8141 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
8142 setup->sync_method =
8143 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
8144 IEEE80211_SYNC_METHOD_VENDOR :
8145 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
8146
c80d545d
JC		 8147 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
8148 setup->path_sel_proto =
8149 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
8150 IEEE80211_PATH_PROTOCOL_VENDOR :
8151 IEEE80211_PATH_PROTOCOL_HWMP;
8152
8153 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
8154 setup->path_metric =
8155 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
8156 IEEE80211_PATH_METRIC_VENDOR :
8157 IEEE80211_PATH_METRIC_AIRTIME;
8158
581a8b0f 8159 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 8160 struct nlattr *ieattr =
581a8b0f 8161 tb[NL80211_MESH_SETUP_IE];
581a8b0f
JC		 8162 setup->ie = nla_data(ieattr);
8163 setup->ie_len = nla_len(ieattr);
c80d545d 8164 }
bb2798d4
TP		 8165 if (tb[NL80211_MESH_SETUP_USERSPACE_MPM] &&
8166 !(rdev->wiphy.features & NL80211_FEATURE_USERSPACE_MPM))
8167 return -EINVAL;
8168 setup->user_mpm = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_MPM]);
b130e5ce
JC		 8169 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
8170 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
bb2798d4
TP		 8171 if (setup->is_secure)
8172 setup->user_mpm = true;
c80d545d 8173
6e16d90b
CT		 8174 if (tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]) {
8175 if (!setup->user_mpm)
8176 return -EINVAL;
8177 setup->auth_id =
8178 nla_get_u8(tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]);
8179 }
8180
c80d545d
JC		 8181 return 0;
8182}
8183
24bdd9f4 8184static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 8185 struct genl_info *info)
bd90fdcc
JB		 8186{
8187 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8188 struct net_device *dev = info->user_ptr[1];
29cbe68c 8189 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 8190 struct mesh_config cfg;
8191 u32 mask;
8192 int err;
8193
29cbe68c
JB		 8194 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
8195 return -EOPNOTSUPP;
8196
24bdd9f4 8197 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 8198 return -EOPNOTSUPP;
8199
24bdd9f4 8200 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 8201 if (err)
8202 return err;
8203
29cbe68c 8204 wdev_lock(wdev);
7b0a0e3c 8205 if (!wdev->u.mesh.id_len)
29cbe68c
JB		 8206 err = -ENOLINK;
8207
8208 if (!err)
e35e4d28 8209 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 8210
8211 wdev_unlock(wdev);
8212
8213 return err;
93da9cc1 8214}
8215
ad30ca2c
AN		 8216static int nl80211_put_regdom(const struct ieee80211_regdomain *regdom,
8217 struct sk_buff *msg)
f130347c 8218{
f130347c
LR		 8219 struct nlattr *nl_reg_rules;
8220 unsigned int i;
f130347c 8221
458f4f9e
JB		 8222 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
8223 (regdom->dfs_region &&
8224 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
ad30ca2c 8225 goto nla_put_failure;
458f4f9e 8226
ae0be8de 8227 nl_reg_rules = nla_nest_start_noflag(msg, NL80211_ATTR_REG_RULES);
f130347c 8228 if (!nl_reg_rules)
ad30ca2c 8229 goto nla_put_failure;
f130347c 8230
458f4f9e 8231 for (i = 0; i < regdom->n_reg_rules; i++) {
f130347c
LR		 8232 struct nlattr *nl_reg_rule;
8233 const struct ieee80211_reg_rule *reg_rule;
8234 const struct ieee80211_freq_range *freq_range;
8235 const struct ieee80211_power_rule *power_rule;
97524820 8236 unsigned int max_bandwidth_khz;
f130347c 8237
458f4f9e 8238 reg_rule = &regdom->reg_rules[i];
f130347c
LR		 8239 freq_range = &reg_rule->freq_range;
8240 power_rule = &reg_rule->power_rule;
8241
ae0be8de 8242 nl_reg_rule = nla_nest_start_noflag(msg, i);
f130347c 8243 if (!nl_reg_rule)
ad30ca2c 8244 goto nla_put_failure;
f130347c 8245
97524820
JD		 8246 max_bandwidth_khz = freq_range->max_bandwidth_khz;
8247 if (!max_bandwidth_khz)
8248 max_bandwidth_khz = reg_get_max_bandwidth(regdom,
8249 reg_rule);
8250
9360ffd1
DM		 8251 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
8252 reg_rule->flags) ||
8253 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
8254 freq_range->start_freq_khz) ||
8255 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
8256 freq_range->end_freq_khz) ||
8257 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
97524820 8258 max_bandwidth_khz) ||
9360ffd1
DM		 8259 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
8260 power_rule->max_antenna_gain) ||
8261 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
089027e5
JD		 8262 power_rule->max_eirp) ||
8263 nla_put_u32(msg, NL80211_ATTR_DFS_CAC_TIME,
8264 reg_rule->dfs_cac_ms))
ad30ca2c 8265 goto nla_put_failure;
f130347c
LR		 8266
8267 nla_nest_end(msg, nl_reg_rule);
8268 }
8269
8270 nla_nest_end(msg, nl_reg_rules);
ad30ca2c
AN		 8271 return 0;
8272
8273nla_put_failure:
8274 return -EMSGSIZE;
8275}
8276
8277static int nl80211_get_reg_do(struct sk_buff *skb, struct genl_info *info)
8278{
8279 const struct ieee80211_regdomain *regdom = NULL;
8280 struct cfg80211_registered_device *rdev;
8281 struct wiphy *wiphy = NULL;
8282 struct sk_buff *msg;
024fcf5e 8283 int err = -EMSGSIZE;
ad30ca2c
AN		 8284 void *hdr;
8285
8286 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8287 if (!msg)
8288 return -ENOBUFS;
8289
8290 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
8291 NL80211_CMD_GET_REG);
8292 if (!hdr)
8293 goto put_failure;
8294
a05829a7
JB		 8295 rtnl_lock();
8296
ad30ca2c 8297 if (info->attrs[NL80211_ATTR_WIPHY]) {
1bdd716c
AN		 8298 bool self_managed;
8299
ad30ca2c
AN		 8300 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
8301 if (IS_ERR(rdev)) {
024fcf5e
JB		 8302 err = PTR_ERR(rdev);
8303 goto nla_put_failure;
ad30ca2c
AN		 8304 }
8305
8306 wiphy = &rdev->wiphy;
1bdd716c
AN		 8307 self_managed = wiphy->regulatory_flags &
8308 REGULATORY_WIPHY_SELF_MANAGED;
024fcf5e
JB		 8309
8310 rcu_read_lock();
8311
ad30ca2c
AN		 8312 regdom = get_wiphy_regdom(wiphy);
8313
1bdd716c
AN		 8314 /* a self-managed-reg device must have a private regdom */
8315 if (WARN_ON(!regdom && self_managed)) {
024fcf5e
JB		 8316 err = -EINVAL;
8317 goto nla_put_failure_rcu;
1bdd716c
AN		 8318 }
8319
ad30ca2c
AN		 8320 if (regdom &&
8321 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
024fcf5e
JB		 8322 goto nla_put_failure_rcu;
8323 } else {
8324 rcu_read_lock();
ad30ca2c
AN		 8325 }
8326
8327 if (!wiphy && reg_last_request_cell_base() &&
8328 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
8329 NL80211_USER_REG_HINT_CELL_BASE))
024fcf5e 8330 goto nla_put_failure_rcu;
ad30ca2c
AN		 8331
8332 if (!regdom)
8333 regdom = rcu_dereference(cfg80211_regdomain);
8334
8335 if (nl80211_put_regdom(regdom, msg))
8336 goto nla_put_failure_rcu;
8337
8338 rcu_read_unlock();
f130347c
LR		 8339
8340 genlmsg_end(msg, hdr);
a05829a7 8341 rtnl_unlock();
5fe231e8 8342 return genlmsg_reply(msg, info);
f130347c 8343
458f4f9e
JB		 8344nla_put_failure_rcu:
8345 rcu_read_unlock();
f130347c 8346nla_put_failure:
a05829a7 8347 rtnl_unlock();
efe1cf0c 8348put_failure:
d080e275 8349 nlmsg_free(msg);
024fcf5e 8350 return err;
f130347c
LR		 8351}
8352
ad30ca2c
AN		 8353static int nl80211_send_regdom(struct sk_buff *msg, struct netlink_callback *cb,
8354 u32 seq, int flags, struct wiphy *wiphy,
8355 const struct ieee80211_regdomain *regdom)
8356{
8357 void *hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
8358 NL80211_CMD_GET_REG);
8359
8360 if (!hdr)
8361 return -1;
8362
0a833c29 8363 genl_dump_check_consistent(cb, hdr);
ad30ca2c
AN		 8364
8365 if (nl80211_put_regdom(regdom, msg))
8366 goto nla_put_failure;
8367
8368 if (!wiphy && reg_last_request_cell_base() &&
8369 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
8370 NL80211_USER_REG_HINT_CELL_BASE))
8371 goto nla_put_failure;
8372
8373 if (wiphy &&
8374 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
8375 goto nla_put_failure;
8376
1bdd716c
AN		 8377 if (wiphy && wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
8378 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
8379 goto nla_put_failure;
8380
053c095a
JB		 8381 genlmsg_end(msg, hdr);
8382 return 0;
ad30ca2c
AN		 8383
8384nla_put_failure:
8385 genlmsg_cancel(msg, hdr);
8386 return -EMSGSIZE;
8387}
8388
8389static int nl80211_get_reg_dump(struct sk_buff *skb,
8390 struct netlink_callback *cb)
8391{
8392 const struct ieee80211_regdomain *regdom = NULL;
8393 struct cfg80211_registered_device *rdev;
8394 int err, reg_idx, start = cb->args[2];
8395
024fcf5e 8396 rcu_read_lock();
ad30ca2c
AN		 8397
8398 if (cfg80211_regdomain && start == 0) {
8399 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
8400 NLM_F_MULTI, NULL,
024fcf5e 8401 rcu_dereference(cfg80211_regdomain));
ad30ca2c
AN		 8402 if (err < 0)
8403 goto out_err;
8404 }
8405
8406 /* the global regdom is idx 0 */
8407 reg_idx = 1;
024fcf5e 8408 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ad30ca2c
AN		 8409 regdom = get_wiphy_regdom(&rdev->wiphy);
8410 if (!regdom)
8411 continue;
8412
8413 if (++reg_idx <= start)
8414 continue;
8415
8416 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
8417 NLM_F_MULTI, &rdev->wiphy, regdom);
8418 if (err < 0) {
8419 reg_idx--;
8420 break;
8421 }
8422 }
8423
8424 cb->args[2] = reg_idx;
8425 err = skb->len;
8426out_err:
024fcf5e 8427 rcu_read_unlock();
ad30ca2c
AN		 8428 return err;
8429}
8430
b6863036
JB		 8431#ifdef CONFIG_CFG80211_CRDA_SUPPORT
8432static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
8433 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
8434 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
8435 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
8436 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
8437 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
8438 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
8439 [NL80211_ATTR_DFS_CAC_TIME] = { .type = NLA_U32 },
8440};
8441
8442static int parse_reg_rule(struct nlattr *tb[],
8443 struct ieee80211_reg_rule *reg_rule)
8444{
8445 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
8446 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
8447
8448 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
8449 return -EINVAL;
8450 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
8451 return -EINVAL;
8452 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
8453 return -EINVAL;
8454 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
8455 return -EINVAL;
8456 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
8457 return -EINVAL;
8458
8459 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
8460
8461 freq_range->start_freq_khz =
8462 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
8463 freq_range->end_freq_khz =
8464 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
8465 freq_range->max_bandwidth_khz =
8466 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
8467
8468 power_rule->max_eirp =
8469 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
8470
8471 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
8472 power_rule->max_antenna_gain =
8473 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
8474
8475 if (tb[NL80211_ATTR_DFS_CAC_TIME])
8476 reg_rule->dfs_cac_ms =
8477 nla_get_u32(tb[NL80211_ATTR_DFS_CAC_TIME]);
8478
8479 return 0;
8480}
8481
b2e1b302
LR		 8482static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
8483{
8484 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
8485 struct nlattr *nl_reg_rule;
ea372c54
JB		 8486 char *alpha2;
8487 int rem_reg_rules, r;
391d132c 8488 u32 num_rules = 0, rule_idx = 0;
4c7d3982 8489 enum nl80211_dfs_regions dfs_region = NL80211_DFS_UNSET;
ea372c54 8490 struct ieee80211_regdomain *rd;
b2e1b302
LR		 8491
8492 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
8493 return -EINVAL;
8494
8495 if (!info->attrs[NL80211_ATTR_REG_RULES])
8496 return -EINVAL;
8497
8498 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
8499
8b60b078
LR		 8500 if (info->attrs[NL80211_ATTR_DFS_REGION])
8501 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
8502
b2e1b302 8503 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 8504 rem_reg_rules) {
b2e1b302
LR		 8505 num_rules++;
8506 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 8507 return -EINVAL;
b2e1b302
LR		 8508 }
8509
a05829a7
JB		 8510 rtnl_lock();
8511 if (!reg_is_valid_request(alpha2)) {
8512 r = -EINVAL;
8513 goto out;
8514 }
e438768f 8515
391d132c 8516 rd = kzalloc(struct_size(rd, reg_rules, num_rules), GFP_KERNEL);
a05829a7
JB		 8517 if (!rd) {
8518 r = -ENOMEM;
8519 goto out;
8520 }
b2e1b302
LR		 8521
8522 rd->n_reg_rules = num_rules;
8523 rd->alpha2[0] = alpha2[0];
8524 rd->alpha2[1] = alpha2[1];
8525
8b60b078
LR		 8526 /*
8527 * Disable DFS master mode if the DFS region was
8528 * not supported or known on this kernel.
8529 */
8530 if (reg_supported_dfs_region(dfs_region))
8531 rd->dfs_region = dfs_region;
8532
b2e1b302 8533 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 8534 rem_reg_rules) {
8cb08174
JB		 8535 r = nla_parse_nested_deprecated(tb, NL80211_REG_RULE_ATTR_MAX,
8536 nl_reg_rule, reg_rule_policy,
8537 info->extack);
ae811e21
JB		 8538 if (r)
8539 goto bad_reg;
b2e1b302
LR		 8540 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
8541 if (r)
8542 goto bad_reg;
8543
8544 rule_idx++;
8545
d0e18f83
LR		 8546 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
8547 r = -EINVAL;
b2e1b302 8548 goto bad_reg;
d0e18f83 8549 }
b2e1b302
LR		 8550 }
8551
a05829a7 8552 r = set_regdom(rd, REGD_SOURCE_CRDA);
06627990 8553 /* set_regdom takes ownership of rd */
a05829a7 8554 rd = NULL;
d2372b31 8555 bad_reg:
b2e1b302 8556 kfree(rd);
a05829a7
JB		 8557 out:
8558 rtnl_unlock();
d0e18f83 8559 return r;
b2e1b302 8560}
b6863036 8561#endif /* CONFIG_CFG80211_CRDA_SUPPORT */
b2e1b302 8562
83f5e2cf
JB		 8563static int validate_scan_freqs(struct nlattr *freqs)
8564{
8565 struct nlattr *attr1, *attr2;
8566 int n_channels = 0, tmp1, tmp2;
8567
d7f13f74
SD		 8568 nla_for_each_nested(attr1, freqs, tmp1)
8569 if (nla_len(attr1) != sizeof(u32))
8570 return 0;
8571
83f5e2cf
JB		 8572 nla_for_each_nested(attr1, freqs, tmp1) {
8573 n_channels++;
8574 /*
8575 * Some hardware has a limited channel list for
8576 * scanning, and it is pretty much nonsensical
8577 * to scan for a channel twice, so disallow that
8578 * and don't require drivers to check that the
8579 * channel list they get isn't longer than what
8580 * they can scan, as long as they can scan all
8581 * the channels they registered at once.
8582 */
8583 nla_for_each_nested(attr2, freqs, tmp2)
8584 if (attr1 != attr2 &&
8585 nla_get_u32(attr1) == nla_get_u32(attr2))
8586 return 0;
8587 }
8588
8589 return n_channels;
8590}
8591
57fbcce3 8592static bool is_band_valid(struct wiphy *wiphy, enum nl80211_band b)
38de03d2 8593{
57fbcce3 8594 return b < NUM_NL80211_BANDS && wiphy->bands[b];
38de03d2
AS		 8595}
8596
8597static int parse_bss_select(struct nlattr *nla, struct wiphy *wiphy,
8598 struct cfg80211_bss_selection *bss_select)
8599{
8600 struct nlattr *attr[NL80211_BSS_SELECT_ATTR_MAX + 1];
8601 struct nlattr *nest;
8602 int err;
8603 bool found = false;
8604 int i;
8605
8606 /* only process one nested attribute */
8607 nest = nla_data(nla);
8608 if (!nla_ok(nest, nla_len(nest)))
8609 return -EINVAL;
8610
8cb08174
JB		 8611 err = nla_parse_nested_deprecated(attr, NL80211_BSS_SELECT_ATTR_MAX,
8612 nest, nl80211_bss_select_policy,
8613 NULL);
38de03d2
AS		 8614 if (err)
8615 return err;
8616
8617 /* only one attribute may be given */
8618 for (i = 0; i <= NL80211_BSS_SELECT_ATTR_MAX; i++) {
8619 if (attr[i]) {
8620 if (found)
8621 return -EINVAL;
8622 found = true;
8623 }
8624 }
8625
8626 bss_select->behaviour = __NL80211_BSS_SELECT_ATTR_INVALID;
8627
8628 if (attr[NL80211_BSS_SELECT_ATTR_RSSI])
8629 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI;
8630
8631 if (attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]) {
8632 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_BAND_PREF;
8633 bss_select->param.band_pref =
8634 nla_get_u32(attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]);
8635 if (!is_band_valid(wiphy, bss_select->param.band_pref))
8636 return -EINVAL;
8637 }
8638
8639 if (attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]) {
8640 struct nl80211_bss_select_rssi_adjust *adj_param;
8641
8642 adj_param = nla_data(attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]);
8643 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI_ADJUST;
8644 bss_select->param.adjust.band = adj_param->band;
8645 bss_select->param.adjust.delta = adj_param->delta;
8646 if (!is_band_valid(wiphy, bss_select->param.adjust.band))
8647 return -EINVAL;
8648 }
8649
8650 /* user-space did not provide behaviour attribute */
8651 if (bss_select->behaviour == __NL80211_BSS_SELECT_ATTR_INVALID)
8652 return -EINVAL;
8653
8654 if (!(wiphy->bss_select_support & BIT(bss_select->behaviour)))
8655 return -EINVAL;
8656
8657 return 0;
8658}
8659
9bb7e0f2
JB		 8660int nl80211_parse_random_mac(struct nlattr **attrs,
8661 u8 *mac_addr, u8 *mac_addr_mask)
ad2b26ab
JB		 8662{
8663 int i;
8664
8665 if (!attrs[NL80211_ATTR_MAC] && !attrs[NL80211_ATTR_MAC_MASK]) {
d2beae10
JP		 8666 eth_zero_addr(mac_addr);
8667 eth_zero_addr(mac_addr_mask);
ad2b26ab
JB		 8668 mac_addr[0] = 0x2;
8669 mac_addr_mask[0] = 0x3;
8670
8671 return 0;
8672 }
8673
8674 /* need both or none */
8675 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_MAC_MASK])
8676 return -EINVAL;
8677
8678 memcpy(mac_addr, nla_data(attrs[NL80211_ATTR_MAC]), ETH_ALEN);
8679 memcpy(mac_addr_mask, nla_data(attrs[NL80211_ATTR_MAC_MASK]), ETH_ALEN);
8680
8681 /* don't allow or configure an mcast address */
8682 if (!is_multicast_ether_addr(mac_addr_mask) ||
8683 is_multicast_ether_addr(mac_addr))
8684 return -EINVAL;
8685
8686 /*
8687 * allow users to pass a MAC address that has bits set outside
8688 * of the mask, but don't bother drivers with having to deal
8689 * with such bits
8690 */
8691 for (i = 0; i < ETH_ALEN; i++)
8692 mac_addr[i] &= mac_addr_mask[i];
8693
8694 return 0;
8695}
8696
7b0a0e3c
JB		 8697static bool cfg80211_off_channel_oper_allowed(struct wireless_dev *wdev,
8698 struct ieee80211_channel *chan)
34373d12 8699{
7b0a0e3c
JB		 8700 unsigned int link_id;
8701 bool all_ok = true;
8702
34373d12
VT		 8703 ASSERT_WDEV_LOCK(wdev);
8704
8705 if (!cfg80211_beaconing_iface_active(wdev))
8706 return true;
8707
7b0a0e3c
JB		 8708 /*
8709 * FIXME: check if we have a free HW resource/link for chan
8710 *
8711 * This, as well as the FIXME below, requires knowing the link
8712 * capabilities of the hardware.
8713 */
8714
8715 /* we cannot leave radar channels */
8716 for_each_valid_link(wdev, link_id) {
8717 struct cfg80211_chan_def *chandef;
8718
8719 chandef = wdev_chandef(wdev, link_id);
8720 if (!chandef)
8721 continue;
8722
8723 /*
8724 * FIXME: don't require all_ok, but rather check only the
8725 * correct HW resource/link onto which 'chan' falls,
8726 * as only that link leaves the channel for doing
8727 * the off-channel operation.
8728 */
8729
8730 if (chandef->chan->flags & IEEE80211_CHAN_RADAR)
8731 all_ok = false;
8732 }
8733
8734 if (all_ok)
34373d12
VT		 8735 return true;
8736
8737 return regulatory_pre_cac_allowed(wdev->wiphy);
8738}
8739
db0a4ad8
JB		 8740static bool nl80211_check_scan_feat(struct wiphy *wiphy, u32 flags, u32 flag,
8741 enum nl80211_ext_feature_index feat)
8742{
8743 if (!(flags & flag))
8744 return true;
8745 if (wiphy_ext_feature_isset(wiphy, feat))
8746 return true;
8747 return false;
8748}
8749
2d23d073
RZ		 8750static int
8751nl80211_check_scan_flags(struct wiphy *wiphy, struct wireless_dev *wdev,
8752 void *request, struct nlattr **attrs,
8753 bool is_sched_scan)
8754{
8755 u8 *mac_addr, *mac_addr_mask;
8756 u32 *flags;
8757 enum nl80211_feature_flags randomness_flag;
8758
8759 if (!attrs[NL80211_ATTR_SCAN_FLAGS])
8760 return 0;
8761
8762 if (is_sched_scan) {
8763 struct cfg80211_sched_scan_request *req = request;
8764
8765 randomness_flag = wdev ?
8766 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR :
8767 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
8768 flags = &req->flags;
8769 mac_addr = req->mac_addr;
8770 mac_addr_mask = req->mac_addr_mask;
8771 } else {
8772 struct cfg80211_scan_request *req = request;
8773
8774 randomness_flag = NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
8775 flags = &req->flags;
8776 mac_addr = req->mac_addr;
8777 mac_addr_mask = req->mac_addr_mask;
8778 }
8779
8780 *flags = nla_get_u32(attrs[NL80211_ATTR_SCAN_FLAGS]);
8781
5037a009
SD		 8782 if (((*flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
8783 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
db0a4ad8
JB		 8784 !nl80211_check_scan_feat(wiphy, *flags,
8785 NL80211_SCAN_FLAG_LOW_SPAN,
8786 NL80211_EXT_FEATURE_LOW_SPAN_SCAN) ||
8787 !nl80211_check_scan_feat(wiphy, *flags,
8788 NL80211_SCAN_FLAG_LOW_POWER,
8789 NL80211_EXT_FEATURE_LOW_POWER_SCAN) ||
8790 !nl80211_check_scan_feat(wiphy, *flags,
8791 NL80211_SCAN_FLAG_HIGH_ACCURACY,
8792 NL80211_EXT_FEATURE_HIGH_ACCURACY_SCAN) ||
8793 !nl80211_check_scan_feat(wiphy, *flags,
8794 NL80211_SCAN_FLAG_FILS_MAX_CHANNEL_TIME,
8795 NL80211_EXT_FEATURE_FILS_MAX_CHANNEL_TIME) ||
8796 !nl80211_check_scan_feat(wiphy, *flags,
8797 NL80211_SCAN_FLAG_ACCEPT_BCAST_PROBE_RESP,
8798 NL80211_EXT_FEATURE_ACCEPT_BCAST_PROBE_RESP) ||
8799 !nl80211_check_scan_feat(wiphy, *flags,
8800 NL80211_SCAN_FLAG_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION,
8801 NL80211_EXT_FEATURE_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION) ||
8802 !nl80211_check_scan_feat(wiphy, *flags,
8803 NL80211_SCAN_FLAG_OCE_PROBE_REQ_HIGH_TX_RATE,
2e076f19
JB		 8804 NL80211_EXT_FEATURE_OCE_PROBE_REQ_HIGH_TX_RATE) ||
8805 !nl80211_check_scan_feat(wiphy, *flags,
8806 NL80211_SCAN_FLAG_RANDOM_SN,
8807 NL80211_EXT_FEATURE_SCAN_RANDOM_SN) ||
8808 !nl80211_check_scan_feat(wiphy, *flags,
8809 NL80211_SCAN_FLAG_MIN_PREQ_CONTENT,
8810 NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT))
2d23d073
RZ		 8811 return -EOPNOTSUPP;
8812
8813 if (*flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
8814 int err;
8815
8816 if (!(wiphy->features & randomness_flag) ||
7b0a0e3c 8817 (wdev && wdev->connected))
2d23d073
RZ		 8818 return -EOPNOTSUPP;
8819
8820 err = nl80211_parse_random_mac(attrs, mac_addr, mac_addr_mask);
8821 if (err)
8822 return err;
8823 }
8824
2d23d073
RZ		 8825 return 0;
8826}
8827
2a519311
JB		 8828static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
8829{
4c476991 8830 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 8831 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 8832 struct cfg80211_scan_request *request;
2032f3b2
TP		 8833 struct nlattr *scan_freqs = NULL;
8834 bool scan_freqs_khz = false;
2a519311
JB		 8835 struct nlattr *attr;
8836 struct wiphy *wiphy;
83f5e2cf 8837 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 8838 size_t ie_len;
2a519311 8839
79c97e97 8840 wiphy = &rdev->wiphy;
2a519311 8841
cb3b7d87
AB		 8842 if (wdev->iftype == NL80211_IFTYPE_NAN)
8843 return -EOPNOTSUPP;
8844
4c476991
JB		 8845 if (!rdev->ops->scan)
8846 return -EOPNOTSUPP;
2a519311 8847
83286856
CJ		 8848 if (rdev->scan_req || rdev->scan_msg)
8849 return -EBUSY;
2a519311 8850
2032f3b2
TP		 8851 if (info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ]) {
8852 if (!wiphy_ext_feature_isset(wiphy,
8853 NL80211_EXT_FEATURE_SCAN_FREQ_KHZ))
8854 return -EOPNOTSUPP;
8855 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ];
8856 scan_freqs_khz = true;
8857 } else if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES])
8858 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQUENCIES];
8859
8860 if (scan_freqs) {
8861 n_channels = validate_scan_freqs(scan_freqs);
83286856
CJ		 8862 if (!n_channels)
8863 return -EINVAL;
2a519311 8864 } else {
bdfbec2d 8865 n_channels = ieee80211_get_num_supported_channels(wiphy);
2a519311
JB		 8866 }
8867
8868 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
8869 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
8870 n_ssids++;
8871
83286856
CJ		 8872 if (n_ssids > wiphy->max_scan_ssids)
8873 return -EINVAL;
2a519311 8874
70692ad2
JM		 8875 if (info->attrs[NL80211_ATTR_IE])
8876 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
8877 else
8878 ie_len = 0;
8879
83286856
CJ		 8880 if (ie_len > wiphy->max_scan_ie_len)
8881 return -EINVAL;
18a83659 8882
2a519311 8883 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 8884 + sizeof(*request->ssids) * n_ssids
8885 + sizeof(*request->channels) * n_channels
70692ad2 8886 + ie_len, GFP_KERNEL);
83286856
CJ		 8887 if (!request)
8888 return -ENOMEM;
2a519311 8889
2a519311 8890 if (n_ssids)
5ba63533 8891 request->ssids = (void *)&request->channels[n_channels];
2a519311 8892 request->n_ssids = n_ssids;
70692ad2 8893 if (ie_len) {
13874e4b 8894 if (n_ssids)
70692ad2
JM		 8895 request->ie = (void *)(request->ssids + n_ssids);
8896 else
8897 request->ie = (void *)(request->channels + n_channels);
8898 }
2a519311 8899
584991dc 8900 i = 0;
2032f3b2 8901 if (scan_freqs) {
2a519311 8902 /* user specified, bail out if channel not found */
2032f3b2 8903 nla_for_each_nested(attr, scan_freqs, tmp) {
584991dc 8904 struct ieee80211_channel *chan;
2032f3b2 8905 int freq = nla_get_u32(attr);
584991dc 8906
2032f3b2
TP		 8907 if (!scan_freqs_khz)
8908 freq = MHZ_TO_KHZ(freq);
584991dc 8909
2032f3b2 8910 chan = ieee80211_get_channel_khz(wiphy, freq);
584991dc 8911 if (!chan) {
2a519311
JB		 8912 err = -EINVAL;
8913 goto out_free;
8914 }
584991dc
JB		 8915
8916 /* ignore disabled channels */
8917 if (chan->flags & IEEE80211_CHAN_DISABLED)
8918 continue;
8919
8920 request->channels[i] = chan;
2a519311
JB		 8921 i++;
8922 }
8923 } else {
57fbcce3 8924 enum nl80211_band band;
34850ab2 8925
2a519311 8926 /* all channels */
57fbcce3 8927 for (band = 0; band < NUM_NL80211_BANDS; band++) {
2a519311 8928 int j;
7a087e74 8929
2a519311
JB		 8930 if (!wiphy->bands[band])
8931 continue;
8932 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 8933 struct ieee80211_channel *chan;
8934
8935 chan = &wiphy->bands[band]->channels[j];
8936
8937 if (chan->flags & IEEE80211_CHAN_DISABLED)
8938 continue;
8939
8940 request->channels[i] = chan;
2a519311
JB		 8941 i++;
8942 }
8943 }
8944 }
8945
584991dc
JB		 8946 if (!i) {
8947 err = -EINVAL;
8948 goto out_free;
8949 }
8950
8951 request->n_channels = i;
8952
34373d12 8953 wdev_lock(wdev);
7b0a0e3c
JB		 8954 for (i = 0; i < request->n_channels; i++) {
8955 struct ieee80211_channel *chan = request->channels[i];
34373d12 8956
7b0a0e3c
JB		 8957 /* if we can go off-channel to the target channel we're good */
8958 if (cfg80211_off_channel_oper_allowed(wdev, chan))
8959 continue;
34373d12 8960
7b0a0e3c 8961 if (!cfg80211_wdev_on_sub_chan(wdev, chan, true)) {
34373d12
VT		 8962 wdev_unlock(wdev);
8963 err = -EBUSY;
8964 goto out_free;
8965 }
8966 }
8967 wdev_unlock(wdev);
8968
2a519311 8969 i = 0;
13874e4b 8970 if (n_ssids) {
2a519311 8971 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 8972 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 8973 err = -EINVAL;
8974 goto out_free;
8975 }
57a27e1d 8976 request->ssids[i].ssid_len = nla_len(attr);
2a519311 8977 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 8978 i++;
8979 }
8980 }
8981
70692ad2
JM		 8982 if (info->attrs[NL80211_ATTR_IE]) {
8983 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 8984 memcpy((void *)request->ie,
8985 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 8986 request->ie_len);
8987 }
8988
57fbcce3 8989 for (i = 0; i < NUM_NL80211_BANDS; i++)
a401d2bb
JB		 8990 if (wiphy->bands[i])
8991 request->rates[i] =
8992 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 8993
8994 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
8995 nla_for_each_nested(attr,
8996 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
8997 tmp) {
57fbcce3 8998 enum nl80211_band band = nla_type(attr);
34850ab2 8999
57fbcce3 9000 if (band < 0 || band >= NUM_NL80211_BANDS) {
34850ab2
JB		 9001 err = -EINVAL;
9002 goto out_free;
9003 }
1b09cd82
FF		 9004
9005 if (!wiphy->bands[band])
9006 continue;
9007
34850ab2
JB		 9008 err = ieee80211_get_ratemask(wiphy->bands[band],
9009 nla_data(attr),
9010 nla_len(attr),
9011 &request->rates[band]);
9012 if (err)
9013 goto out_free;
9014 }
9015 }
9016
1d76250b 9017 if (info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]) {
1d76250b
AS		 9018 request->duration =
9019 nla_get_u16(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]);
9020 request->duration_mandatory =
9021 nla_get_flag(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY]);
9022 }
9023
2d23d073
RZ		 9024 err = nl80211_check_scan_flags(wiphy, wdev, request, info->attrs,
9025 false);
9026 if (err)
9027 goto out_free;
ed473771 9028
e9f935e3
RM		 9029 request->no_cck =
9030 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
9031
2fa436b3
VK		 9032 /* Initial implementation used NL80211_ATTR_MAC to set the specific
9033 * BSSID to scan for. This was problematic because that same attribute
9034 * was already used for another purpose (local random MAC address). The
9035 * NL80211_ATTR_BSSID attribute was added to fix this. For backwards
9036 * compatibility with older userspace components, also use the
9037 * NL80211_ATTR_MAC value here if it can be determined to be used for
9038 * the specific BSSID use case instead of the random MAC address
9039 * (NL80211_ATTR_SCAN_FLAGS is used to enable random MAC address use).
9040 */
9041 if (info->attrs[NL80211_ATTR_BSSID])
9042 memcpy(request->bssid,
9043 nla_data(info->attrs[NL80211_ATTR_BSSID]), ETH_ALEN);
9044 else if (!(request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) &&
9045 info->attrs[NL80211_ATTR_MAC])
818965d3
JM		 9046 memcpy(request->bssid, nla_data(info->attrs[NL80211_ATTR_MAC]),
9047 ETH_ALEN);
9048 else
9049 eth_broadcast_addr(request->bssid);
9050
fd014284 9051 request->wdev = wdev;
79c97e97 9052 request->wiphy = &rdev->wiphy;
15d6030b 9053 request->scan_start = jiffies;
2a519311 9054
79c97e97 9055 rdev->scan_req = request;
c8cb5b85 9056 err = cfg80211_scan(rdev);
2a519311 9057
504776be
CJ		 9058 if (err)
9059 goto out_free;
9060
9061 nl80211_send_scan_start(rdev, wdev);
1160dfa1 9062 dev_hold(wdev->netdev);
504776be
CJ		 9063
9064 return 0;
9065
2a519311 9066 out_free:
504776be
CJ		 9067 rdev->scan_req = NULL;
9068 kfree(request);
3b85875a 9069
2a519311
JB		 9070 return err;
9071}
9072
91d3ab46
VK		 9073static int nl80211_abort_scan(struct sk_buff *skb, struct genl_info *info)
9074{
9075 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9076 struct wireless_dev *wdev = info->user_ptr[1];
9077
9078 if (!rdev->ops->abort_scan)
9079 return -EOPNOTSUPP;
9080
9081 if (rdev->scan_msg)
9082 return 0;
9083
9084 if (!rdev->scan_req)
9085 return -ENOENT;
9086
9087 rdev_abort_scan(rdev, wdev);
9088 return 0;
9089}
9090
3b06d277
AS		 9091static int
9092nl80211_parse_sched_scan_plans(struct wiphy *wiphy, int n_plans,
9093 struct cfg80211_sched_scan_request *request,
9094 struct nlattr **attrs)
9095{
9096 int tmp, err, i = 0;
9097 struct nlattr *attr;
9098
9099 if (!attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
9100 u32 interval;
9101
9102 /*
9103 * If scan plans are not specified,
5a88de53 9104 * %NL80211_ATTR_SCHED_SCAN_INTERVAL will be specified. In this
3b06d277
AS		 9105 * case one scan plan will be set with the specified scan
9106 * interval and infinite number of iterations.
9107 */
3b06d277
AS		 9108 interval = nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
9109 if (!interval)
9110 return -EINVAL;
9111
9112 request->scan_plans[0].interval =
9113 DIV_ROUND_UP(interval, MSEC_PER_SEC);
9114 if (!request->scan_plans[0].interval)
9115 return -EINVAL;
9116
9117 if (request->scan_plans[0].interval >
9118 wiphy->max_sched_scan_plan_interval)
9119 request->scan_plans[0].interval =
9120 wiphy->max_sched_scan_plan_interval;
9121
9122 return 0;
9123 }
9124
9125 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp) {
9126 struct nlattr *plan[NL80211_SCHED_SCAN_PLAN_MAX + 1];
9127
9128 if (WARN_ON(i >= n_plans))
9129 return -EINVAL;
9130
8cb08174
JB		 9131 err = nla_parse_nested_deprecated(plan,
9132 NL80211_SCHED_SCAN_PLAN_MAX,
9133 attr, nl80211_plan_policy,
9134 NULL);
3b06d277
AS		 9135 if (err)
9136 return err;
9137
9138 if (!plan[NL80211_SCHED_SCAN_PLAN_INTERVAL])
9139 return -EINVAL;
9140
9141 request->scan_plans[i].interval =
9142 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_INTERVAL]);
9143 if (!request->scan_plans[i].interval ||
9144 request->scan_plans[i].interval >
9145 wiphy->max_sched_scan_plan_interval)
9146 return -EINVAL;
9147
9148 if (plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]) {
9149 request->scan_plans[i].iterations =
9150 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]);
9151 if (!request->scan_plans[i].iterations ||
9152 (request->scan_plans[i].iterations >
9153 wiphy->max_sched_scan_plan_iterations))
9154 return -EINVAL;
9155 } else if (i < n_plans - 1) {
9156 /*
9157 * All scan plans but the last one must specify
9158 * a finite number of iterations
9159 */
9160 return -EINVAL;
9161 }
9162
9163 i++;
9164 }
9165
9166 /*
9167 * The last scan plan must not specify the number of
9168 * iterations, it is supposed to run infinitely
9169 */
9170 if (request->scan_plans[n_plans - 1].iterations)
9171 return -EINVAL;
9172
9173 return 0;
9174}
9175
1e1b11b6 9176static int
9177nl80211_parse_sched_scan_per_band_rssi(struct wiphy *wiphy,
9178 struct cfg80211_match_set *match_sets,
9179 struct nlattr *tb_band_rssi,
9180 s32 rssi_thold)
9181{
9182 struct nlattr *attr;
9183 int i, tmp, ret = 0;
9184
9185 if (!wiphy_ext_feature_isset(wiphy,
9186 NL80211_EXT_FEATURE_SCHED_SCAN_BAND_SPECIFIC_RSSI_THOLD)) {
9187 if (tb_band_rssi)
9188 ret = -EOPNOTSUPP;
9189 else
9190 for (i = 0; i < NUM_NL80211_BANDS; i++)
9191 match_sets->per_band_rssi_thold[i] =
9192 NL80211_SCAN_RSSI_THOLD_OFF;
9193 return ret;
9194 }
9195
9196 for (i = 0; i < NUM_NL80211_BANDS; i++)
9197 match_sets->per_band_rssi_thold[i] = rssi_thold;
9198
9199 nla_for_each_nested(attr, tb_band_rssi, tmp) {
9200 enum nl80211_band band = nla_type(attr);
9201
9202 if (band < 0 || band >= NUM_NL80211_BANDS)
9203 return -EINVAL;
9204
9205 match_sets->per_band_rssi_thold[band] = nla_get_s32(attr);
9206 }
9207
9208 return 0;
9209}
9210
256da02d 9211static struct cfg80211_sched_scan_request *
ad2b26ab 9212nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
aad1e812 9213 struct nlattr **attrs, int max_match_sets)
807f8a8c
LC		 9214{
9215 struct cfg80211_sched_scan_request *request;
807f8a8c 9216 struct nlattr *attr;
3b06d277 9217 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i, n_plans = 0;
57fbcce3 9218 enum nl80211_band band;
807f8a8c 9219 size_t ie_len;
a1f1c21c 9220 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
ea73cbce 9221 s32 default_match_rssi = NL80211_SCAN_RSSI_THOLD_OFF;
807f8a8c 9222
256da02d 9223 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c 9224 n_channels = validate_scan_freqs(
256da02d 9225 attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
807f8a8c 9226 if (!n_channels)
256da02d 9227 return ERR_PTR(-EINVAL);
807f8a8c 9228 } else {
bdfbec2d 9229 n_channels = ieee80211_get_num_supported_channels(wiphy);
807f8a8c
LC		 9230 }
9231
256da02d
LC		 9232 if (attrs[NL80211_ATTR_SCAN_SSIDS])
9233 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c
LC		 9234 tmp)
9235 n_ssids++;
9236
93b6aa69 9237 if (n_ssids > wiphy->max_sched_scan_ssids)
256da02d 9238 return ERR_PTR(-EINVAL);
807f8a8c 9239
ea73cbce
JB		 9240 /*
9241 * First, count the number of 'real' matchsets. Due to an issue with
9242 * the old implementation, matchsets containing only the RSSI attribute
9243 * (NL80211_SCHED_SCAN_MATCH_ATTR_RSSI) are considered as the 'default'
9244 * RSSI for all matchsets, rather than their own matchset for reporting
9245 * all APs with a strong RSSI. This is needed to be compatible with
9246 * older userspace that treated a matchset with only the RSSI as the
9247 * global RSSI for all other matchsets - if there are other matchsets.
9248 */
256da02d 9249 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 9250 nla_for_each_nested(attr,
256da02d 9251 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
ea73cbce
JB		 9252 tmp) {
9253 struct nlattr *rssi;
9254
8cb08174
JB		 9255 err = nla_parse_nested_deprecated(tb,
9256 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
9257 attr,
9258 nl80211_match_policy,
9259 NULL);
ea73cbce 9260 if (err)
256da02d 9261 return ERR_PTR(err);
3007e352
AVS		 9262
9263 /* SSID and BSSID are mutually exclusive */
9264 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] &&
9265 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID])
9266 return ERR_PTR(-EINVAL);
9267
ea73cbce 9268 /* add other standalone attributes here */
3007e352
AVS		 9269 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] ||
9270 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID]) {
ea73cbce
JB		 9271 n_match_sets++;
9272 continue;
9273 }
9274 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
9275 if (rssi)
9276 default_match_rssi = nla_get_s32(rssi);
9277 }
9278 }
9279
9280 /* However, if there's no other matchset, add the RSSI one */
9281 if (!n_match_sets && default_match_rssi != NL80211_SCAN_RSSI_THOLD_OFF)
9282 n_match_sets = 1;
a1f1c21c 9283
aad1e812 9284 if (n_match_sets > max_match_sets)
256da02d 9285 return ERR_PTR(-EINVAL);
a1f1c21c 9286
256da02d
LC		 9287 if (attrs[NL80211_ATTR_IE])
9288 ie_len = nla_len(attrs[NL80211_ATTR_IE]);
807f8a8c
LC		 9289 else
9290 ie_len = 0;
9291
5a865bad 9292 if (ie_len > wiphy->max_sched_scan_ie_len)
256da02d 9293 return ERR_PTR(-EINVAL);
c10841ca 9294
3b06d277
AS		 9295 if (attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
9296 /*
9297 * NL80211_ATTR_SCHED_SCAN_INTERVAL must not be specified since
9298 * each scan plan already specifies its own interval
9299 */
9300 if (attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
9301 return ERR_PTR(-EINVAL);
9302
9303 nla_for_each_nested(attr,
9304 attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp)
9305 n_plans++;
9306 } else {
9307 /*
9308 * The scan interval attribute is kept for backward
9309 * compatibility. If no scan plans are specified and sched scan
9310 * interval is specified, one scan plan will be set with this
9311 * scan interval and infinite number of iterations.
9312 */
9313 if (!attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
9314 return ERR_PTR(-EINVAL);
9315
9316 n_plans = 1;
9317 }
9318
9319 if (!n_plans || n_plans > wiphy->max_sched_scan_plans)
9320 return ERR_PTR(-EINVAL);
9321
bf95ecdb 9322 if (!wiphy_ext_feature_isset(
9323 wiphy, NL80211_EXT_FEATURE_SCHED_SCAN_RELATIVE_RSSI) &&
9324 (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] ||
9325 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]))
9326 return ERR_PTR(-EINVAL);
9327
807f8a8c 9328 request = kzalloc(sizeof(*request)
a2cd43c5 9329 + sizeof(*request->ssids) * n_ssids
a1f1c21c 9330 + sizeof(*request->match_sets) * n_match_sets
3b06d277 9331 + sizeof(*request->scan_plans) * n_plans
a2cd43c5 9332 + sizeof(*request->channels) * n_channels
807f8a8c 9333 + ie_len, GFP_KERNEL);
256da02d
LC		 9334 if (!request)
9335 return ERR_PTR(-ENOMEM);
807f8a8c
LC		 9336
9337 if (n_ssids)
9338 request->ssids = (void *)&request->channels[n_channels];
9339 request->n_ssids = n_ssids;
9340 if (ie_len) {
13874e4b 9341 if (n_ssids)
807f8a8c
LC		 9342 request->ie = (void *)(request->ssids + n_ssids);
9343 else
9344 request->ie = (void *)(request->channels + n_channels);
9345 }
9346
a1f1c21c
LC		 9347 if (n_match_sets) {
9348 if (request->ie)
9349 request->match_sets = (void *)(request->ie + ie_len);
13874e4b 9350 else if (n_ssids)
a1f1c21c
LC		 9351 request->match_sets =
9352 (void *)(request->ssids + n_ssids);
9353 else
9354 request->match_sets =
9355 (void *)(request->channels + n_channels);
9356 }
9357 request->n_match_sets = n_match_sets;
9358
3b06d277
AS		 9359 if (n_match_sets)
9360 request->scan_plans = (void *)(request->match_sets +
9361 n_match_sets);
9362 else if (request->ie)
9363 request->scan_plans = (void *)(request->ie + ie_len);
9364 else if (n_ssids)
9365 request->scan_plans = (void *)(request->ssids + n_ssids);
9366 else
9367 request->scan_plans = (void *)(request->channels + n_channels);
9368
9369 request->n_scan_plans = n_plans;
9370
807f8a8c 9371 i = 0;
256da02d 9372 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c
LC		 9373 /* user specified, bail out if channel not found */
9374 nla_for_each_nested(attr,
256da02d 9375 attrs[NL80211_ATTR_SCAN_FREQUENCIES],
807f8a8c
LC		 9376 tmp) {
9377 struct ieee80211_channel *chan;
9378
9379 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
9380
9381 if (!chan) {
9382 err = -EINVAL;
9383 goto out_free;
9384 }
9385
9386 /* ignore disabled channels */
9387 if (chan->flags & IEEE80211_CHAN_DISABLED)
9388 continue;
9389
9390 request->channels[i] = chan;
9391 i++;
9392 }
9393 } else {
9394 /* all channels */
57fbcce3 9395 for (band = 0; band < NUM_NL80211_BANDS; band++) {
807f8a8c 9396 int j;
7a087e74 9397
807f8a8c
LC		 9398 if (!wiphy->bands[band])
9399 continue;
9400 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
9401 struct ieee80211_channel *chan;
9402
9403 chan = &wiphy->bands[band]->channels[j];
9404
9405 if (chan->flags & IEEE80211_CHAN_DISABLED)
9406 continue;
9407
9408 request->channels[i] = chan;
9409 i++;
9410 }
9411 }
9412 }
9413
9414 if (!i) {
9415 err = -EINVAL;
9416 goto out_free;
9417 }
9418
9419 request->n_channels = i;
9420
9421 i = 0;
13874e4b 9422 if (n_ssids) {
256da02d 9423 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c 9424 tmp) {
57a27e1d 9425 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 9426 err = -EINVAL;
9427 goto out_free;
9428 }
57a27e1d 9429 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 9430 memcpy(request->ssids[i].ssid, nla_data(attr),
9431 nla_len(attr));
807f8a8c
LC		 9432 i++;
9433 }
9434 }
9435
a1f1c21c 9436 i = 0;
256da02d 9437 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 9438 nla_for_each_nested(attr,
256da02d 9439 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
a1f1c21c 9440 tmp) {
3007e352 9441 struct nlattr *ssid, *bssid, *rssi;
a1f1c21c 9442
8cb08174
JB		 9443 err = nla_parse_nested_deprecated(tb,
9444 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
9445 attr,
9446 nl80211_match_policy,
9447 NULL);
ae811e21
JB		 9448 if (err)
9449 goto out_free;
4a4ab0d7 9450 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
3007e352 9451 bssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID];
d39f3b4f
JB		 9452
9453 if (!ssid && !bssid) {
9454 i++;
9455 continue;
9456 }
9457
9458 if (WARN_ON(i >= n_match_sets)) {
9459 /* this indicates a programming error,
9460 * the loop above should have verified
9461 * things properly
9462 */
9463 err = -EINVAL;
9464 goto out_free;
9465 }
9466
9467 if (ssid) {
d39f3b4f
JB		 9468 memcpy(request->match_sets[i].ssid.ssid,
9469 nla_data(ssid), nla_len(ssid));
9470 request->match_sets[i].ssid.ssid_len =
9471 nla_len(ssid);
9472 }
cb9abd48 9473 if (bssid)
d39f3b4f
JB		 9474 memcpy(request->match_sets[i].bssid,
9475 nla_data(bssid), ETH_ALEN);
3007e352 9476
d39f3b4f
JB		 9477 /* special attribute - old implementation w/a */
9478 request->match_sets[i].rssi_thold = default_match_rssi;
9479 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
9480 if (rssi)
ea73cbce 9481 request->match_sets[i].rssi_thold =
d39f3b4f 9482 nla_get_s32(rssi);
1e1b11b6 9483
9484 /* Parse per band RSSI attribute */
9485 err = nl80211_parse_sched_scan_per_band_rssi(wiphy,
9486 &request->match_sets[i],
9487 tb[NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI],
9488 request->match_sets[i].rssi_thold);
9489 if (err)
9490 goto out_free;
9491
a1f1c21c
LC		 9492 i++;
9493 }
ea73cbce
JB		 9494
9495 /* there was no other matchset, so the RSSI one is alone */
f89f46cf 9496 if (i == 0 && n_match_sets)
ea73cbce
JB		 9497 request->match_sets[0].rssi_thold = default_match_rssi;
9498
9499 request->min_rssi_thold = INT_MAX;
9500 for (i = 0; i < n_match_sets; i++)
9501 request->min_rssi_thold =
9502 min(request->match_sets[i].rssi_thold,
9503 request->min_rssi_thold);
9504 } else {
9505 request->min_rssi_thold = NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 9506 }
9507
9900e484
JB		 9508 if (ie_len) {
9509 request->ie_len = ie_len;
807f8a8c 9510 memcpy((void *)request->ie,
256da02d 9511 nla_data(attrs[NL80211_ATTR_IE]),
807f8a8c
LC		 9512 request->ie_len);
9513 }
9514
2d23d073
RZ		 9515 err = nl80211_check_scan_flags(wiphy, wdev, request, attrs, true);
9516 if (err)
9517 goto out_free;
ed473771 9518
9c748934
LC		 9519 if (attrs[NL80211_ATTR_SCHED_SCAN_DELAY])
9520 request->delay =
9521 nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_DELAY]);
9522
bf95ecdb 9523 if (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]) {
9524 request->relative_rssi = nla_get_s8(
9525 attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]);
9526 request->relative_rssi_set = true;
9527 }
9528
9529 if (request->relative_rssi_set &&
9530 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]) {
9531 struct nl80211_bss_select_rssi_adjust *rssi_adjust;
9532
9533 rssi_adjust = nla_data(
9534 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]);
9535 request->rssi_adjust.band = rssi_adjust->band;
9536 request->rssi_adjust.delta = rssi_adjust->delta;
9537 if (!is_band_valid(wiphy, request->rssi_adjust.band)) {
9538 err = -EINVAL;
9539 goto out_free;
9540 }
9541 }
9542
3b06d277
AS		 9543 err = nl80211_parse_sched_scan_plans(wiphy, n_plans, request, attrs);
9544 if (err)
9545 goto out_free;
9546
15d6030b 9547 request->scan_start = jiffies;
807f8a8c 9548
256da02d 9549 return request;
807f8a8c
LC		 9550
9551out_free:
9552 kfree(request);
256da02d
LC		 9553 return ERR_PTR(err);
9554}
9555
9556static int nl80211_start_sched_scan(struct sk_buff *skb,
9557 struct genl_info *info)
9558{
9559 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9560 struct net_device *dev = info->user_ptr[1];
ad2b26ab 9561 struct wireless_dev *wdev = dev->ieee80211_ptr;
31a60ed1 9562 struct cfg80211_sched_scan_request *sched_scan_req;
ca986ad9 9563 bool want_multi;
256da02d
LC		 9564 int err;
9565
ca986ad9 9566 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_start)
256da02d
LC		 9567 return -EOPNOTSUPP;
9568
ca986ad9
AVS		 9569 want_multi = info->attrs[NL80211_ATTR_SCHED_SCAN_MULTI];
9570 err = cfg80211_sched_scan_req_possible(rdev, want_multi);
9571 if (err)
9572 return err;
256da02d 9573
31a60ed1 9574 sched_scan_req = nl80211_parse_sched_scan(&rdev->wiphy, wdev,
aad1e812
AVS		 9575 info->attrs,
9576 rdev->wiphy.max_match_sets);
31a60ed1
JR		 9577
9578 err = PTR_ERR_OR_ZERO(sched_scan_req);
256da02d
LC		 9579 if (err)
9580 goto out_err;
9581
ca986ad9
AVS		 9582 /* leave request id zero for legacy request
9583 * or if driver does not support multi-scheduled scan
9584 */
2fd351a8
DK		 9585 if (want_multi && rdev->wiphy.max_sched_scan_reqs > 1)
9586 sched_scan_req->reqid = cfg80211_assign_cookie(rdev);
ca986ad9 9587
31a60ed1 9588 err = rdev_sched_scan_start(rdev, dev, sched_scan_req);
256da02d
LC		 9589 if (err)
9590 goto out_free;
9591
31a60ed1
JR		 9592 sched_scan_req->dev = dev;
9593 sched_scan_req->wiphy = &rdev->wiphy;
9594
93a1e86c
JR		 9595 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
9596 sched_scan_req->owner_nlportid = info->snd_portid;
9597
ca986ad9 9598 cfg80211_add_sched_scan_req(rdev, sched_scan_req);
256da02d 9599
96b08fd6 9600 nl80211_send_sched_scan(sched_scan_req, NL80211_CMD_START_SCHED_SCAN);
256da02d
LC		 9601 return 0;
9602
9603out_free:
31a60ed1 9604 kfree(sched_scan_req);
256da02d 9605out_err:
807f8a8c
LC		 9606 return err;
9607}
9608
9609static int nl80211_stop_sched_scan(struct sk_buff *skb,
9610 struct genl_info *info)
9611{
ca986ad9 9612 struct cfg80211_sched_scan_request *req;
807f8a8c 9613 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ca986ad9 9614 u64 cookie;
807f8a8c 9615
ca986ad9 9616 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_stop)
807f8a8c
LC		 9617 return -EOPNOTSUPP;
9618
ca986ad9
AVS		 9619 if (info->attrs[NL80211_ATTR_COOKIE]) {
9620 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
9621 return __cfg80211_stop_sched_scan(rdev, cookie, false);
9622 }
9623
9624 req = list_first_or_null_rcu(&rdev->sched_scan_req_list,
9625 struct cfg80211_sched_scan_request,
9626 list);
9627 if (!req || req->reqid ||
9628 (req->owner_nlportid &&
9629 req->owner_nlportid != info->snd_portid))
9630 return -ENOENT;
9631
9632 return cfg80211_stop_sched_scan_req(rdev, req, false);
807f8a8c
LC		 9633}
9634
04f39047
SW		 9635static int nl80211_start_radar_detection(struct sk_buff *skb,
9636 struct genl_info *info)
9637{
9638 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9639 struct net_device *dev = info->user_ptr[1];
9640 struct wireless_dev *wdev = dev->ieee80211_ptr;
13cf6dec 9641 struct wiphy *wiphy = wdev->wiphy;
04f39047 9642 struct cfg80211_chan_def chandef;
55f7435c 9643 enum nl80211_dfs_regions dfs_region;
31559f35 9644 unsigned int cac_time_ms;
84158164
LB		 9645 int err = -EINVAL;
9646
9647 flush_delayed_work(&rdev->dfs_update_channels_wk);
9648
9649 wiphy_lock(wiphy);
04f39047 9650
13cf6dec 9651 dfs_region = reg_get_dfs_region(wiphy);
55f7435c 9652 if (dfs_region == NL80211_DFS_UNSET)
84158164 9653 goto unlock;
55f7435c 9654
04f39047
SW		 9655 err = nl80211_parse_chandef(rdev, info, &chandef);
9656 if (err)
84158164 9657 goto unlock;
04f39047 9658
13cf6dec 9659 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
04f39047 9660 if (err < 0)
84158164 9661 goto unlock;
04f39047 9662
84158164
LB		 9663 if (err == 0) {
9664 err = -EINVAL;
9665 goto unlock;
9666 }
04f39047 9667
84158164
LB		 9668 if (!cfg80211_chandef_dfs_usable(wiphy, &chandef)) {
9669 err = -EINVAL;
9670 goto unlock;
9671 }
04f39047 9672
a95bfb87
LB		 9673 if (nla_get_flag(info->attrs[NL80211_ATTR_RADAR_BACKGROUND])) {
9674 err = cfg80211_start_background_radar_detection(rdev, wdev,
9675 &chandef);
84158164
LB		 9676 goto unlock;
9677 }
bc2dfc02 9678
84158164
LB		 9679 if (netif_carrier_ok(dev)) {
9680 err = -EBUSY;
9681 goto unlock;
9682 }
bc2dfc02 9683
84158164
LB		 9684 if (wdev->cac_started) {
9685 err = -EBUSY;
9686 goto unlock;
9687 }
bc2dfc02 9688
13cf6dec 9689 /* CAC start is offloaded to HW and can't be started manually */
84158164
LB		 9690 if (wiphy_ext_feature_isset(wiphy, NL80211_EXT_FEATURE_DFS_OFFLOAD)) {
9691 err = -EOPNOTSUPP;
9692 goto unlock;
9693 }
13cf6dec 9694
84158164
LB		 9695 if (!rdev->ops->start_radar_detection) {
9696 err = -EOPNOTSUPP;
9697 goto unlock;
9698 }
04f39047 9699
31559f35
JD		 9700 cac_time_ms = cfg80211_chandef_dfs_cac_time(&rdev->wiphy, &chandef);
9701 if (WARN_ON(!cac_time_ms))
9702 cac_time_ms = IEEE80211_DFS_MIN_CAC_TIME_MS;
9703
a1056b1b 9704 err = rdev_start_radar_detection(rdev, dev, &chandef, cac_time_ms);
04f39047 9705 if (!err) {
7b0a0e3c 9706 wdev->links[0].ap.chandef = chandef;
04f39047
SW		 9707 wdev->cac_started = true;
9708 wdev->cac_start_time = jiffies;
31559f35 9709 wdev->cac_time_ms = cac_time_ms;
04f39047 9710 }
84158164
LB		 9711unlock:
9712 wiphy_unlock(wiphy);
9713
04f39047
SW		 9714 return err;
9715}
9716
30c63115
S		 9717static int nl80211_notify_radar_detection(struct sk_buff *skb,
9718 struct genl_info *info)
9719{
9720 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9721 struct net_device *dev = info->user_ptr[1];
9722 struct wireless_dev *wdev = dev->ieee80211_ptr;
9723 struct wiphy *wiphy = wdev->wiphy;
9724 struct cfg80211_chan_def chandef;
9725 enum nl80211_dfs_regions dfs_region;
9726 int err;
9727
9728 dfs_region = reg_get_dfs_region(wiphy);
9729 if (dfs_region == NL80211_DFS_UNSET) {
9730 GENL_SET_ERR_MSG(info,
9731 "DFS Region is not set. Unexpected Radar indication");
9732 return -EINVAL;
9733 }
9734
9735 err = nl80211_parse_chandef(rdev, info, &chandef);
9736 if (err) {
9737 GENL_SET_ERR_MSG(info, "Unable to extract chandef info");
9738 return err;
9739 }
9740
9741 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
9742 if (err < 0) {
9743 GENL_SET_ERR_MSG(info, "chandef is invalid");
9744 return err;
9745 }
9746
9747 if (err == 0) {
9748 GENL_SET_ERR_MSG(info,
9749 "Unexpected Radar indication for chandef/iftype");
9750 return -EINVAL;
9751 }
9752
9753 /* Do not process this notification if radar is already detected
9754 * by kernel on this channel, and return success.
9755 */
9756 if (chandef.chan->dfs_state == NL80211_DFS_UNAVAILABLE)
9757 return 0;
9758
9759 cfg80211_set_dfs_state(wiphy, &chandef, NL80211_DFS_UNAVAILABLE);
9760
9761 cfg80211_sched_dfs_chan_update(rdev);
9762
a680fe46 9763 rdev->radar_chandef = chandef;
30c63115
S		 9764
9765 /* Propagate this notification to other radios as well */
9766 queue_work(cfg80211_wq, &rdev->propagate_radar_detect_wk);
9767
9768 return 0;
9769}
9770
16ef1fe2
SW		 9771static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
9772{
9773 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 9774 unsigned int link_id = nl80211_link_id(info->attrs);
16ef1fe2
SW		 9775 struct net_device *dev = info->user_ptr[1];
9776 struct wireless_dev *wdev = dev->ieee80211_ptr;
9777 struct cfg80211_csa_settings params;
a05829a7 9778 struct nlattr **csa_attrs = NULL;
16ef1fe2 9779 int err;
ee4bc9e7 9780 bool need_new_beacon = false;
8d9de16f 9781 bool need_handle_dfs_flag = true;
9a774c78 9782 int len, i;
252e07ca 9783 u32 cs_count;
16ef1fe2
SW		 9784
9785 if (!rdev->ops->channel_switch ||
9786 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH))
9787 return -EOPNOTSUPP;
9788
ee4bc9e7
SW		 9789 switch (dev->ieee80211_ptr->iftype) {
9790 case NL80211_IFTYPE_AP:
9791 case NL80211_IFTYPE_P2P_GO:
9792 need_new_beacon = true;
8d9de16f
BB		 9793 /* For all modes except AP the handle_dfs flag needs to be
9794 * supplied to tell the kernel that userspace will handle radar
9795 * events when they happen. Otherwise a switch to a channel
9796 * requiring DFS will be rejected.
9797 */
9798 need_handle_dfs_flag = false;
ee4bc9e7
SW		 9799
9800 /* useless if AP is not running */
7b0a0e3c 9801 if (!wdev->links[link_id].ap.beacon_interval)
1ff79dfa 9802 return -ENOTCONN;
ee4bc9e7
SW		 9803 break;
9804 case NL80211_IFTYPE_ADHOC:
7b0a0e3c 9805 if (!wdev->u.ibss.ssid_len)
1ff79dfa
JB		 9806 return -ENOTCONN;
9807 break;
c6da674a 9808 case NL80211_IFTYPE_MESH_POINT:
7b0a0e3c 9809 if (!wdev->u.mesh.id_len)
1ff79dfa 9810 return -ENOTCONN;
ee4bc9e7
SW		 9811 break;
9812 default:
16ef1fe2 9813 return -EOPNOTSUPP;
ee4bc9e7 9814 }
16ef1fe2
SW		 9815
9816 memset(&params, 0, sizeof(params));
c177db2d 9817 params.beacon_csa.ftm_responder = -1;
16ef1fe2
SW		 9818
9819 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
9820 !info->attrs[NL80211_ATTR_CH_SWITCH_COUNT])
9821 return -EINVAL;
9822
9823 /* only important for AP, IBSS and mesh create IEs internally */
d0a361a5 9824 if (need_new_beacon && !info->attrs[NL80211_ATTR_CSA_IES])
16ef1fe2
SW		 9825 return -EINVAL;
9826
252e07ca
LC		 9827 /* Even though the attribute is u32, the specification says
9828 * u8, so let's make sure we don't overflow.
9829 */
9830 cs_count = nla_get_u32(info->attrs[NL80211_ATTR_CH_SWITCH_COUNT]);
9831 if (cs_count > 255)
9832 return -EINVAL;
9833
9834 params.count = cs_count;
16ef1fe2 9835
ee4bc9e7
SW		 9836 if (!need_new_beacon)
9837 goto skip_beacons;
9838
81e54d08 9839 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_after);
16ef1fe2 9840 if (err)
dc1e3cb8 9841 goto free;
16ef1fe2 9842
a05829a7
JB		 9843 csa_attrs = kcalloc(NL80211_ATTR_MAX + 1, sizeof(*csa_attrs),
9844 GFP_KERNEL);
dc1e3cb8
JC		 9845 if (!csa_attrs) {
9846 err = -ENOMEM;
9847 goto free;
9848 }
a05829a7 9849
8cb08174
JB		 9850 err = nla_parse_nested_deprecated(csa_attrs, NL80211_ATTR_MAX,
9851 info->attrs[NL80211_ATTR_CSA_IES],
9852 nl80211_policy, info->extack);
16ef1fe2 9853 if (err)
a05829a7 9854 goto free;
16ef1fe2 9855
81e54d08 9856 err = nl80211_parse_beacon(rdev, csa_attrs, &params.beacon_csa);
16ef1fe2 9857 if (err)
a05829a7 9858 goto free;
16ef1fe2 9859
a05829a7
JB		 9860 if (!csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]) {
9861 err = -EINVAL;
9862 goto free;
9863 }
16ef1fe2 9864
00c207ed 9865 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
a05829a7
JB		 9866 if (!len || (len % sizeof(u16))) {
9867 err = -EINVAL;
9868 goto free;
9869 }
16ef1fe2 9870
9a774c78
AO		 9871 params.n_counter_offsets_beacon = len / sizeof(u16);
9872 if (rdev->wiphy.max_num_csa_counters &&
9873 (params.n_counter_offsets_beacon >
a05829a7
JB		 9874 rdev->wiphy.max_num_csa_counters)) {
9875 err = -EINVAL;
9876 goto free;
9877 }
16ef1fe2 9878
9a774c78 9879 params.counter_offsets_beacon =
00c207ed 9880 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
9a774c78
AO		 9881
9882 /* sanity checks - counters should fit and be the same */
9883 for (i = 0; i < params.n_counter_offsets_beacon; i++) {
9884 u16 offset = params.counter_offsets_beacon[i];
9885
a05829a7
JB		 9886 if (offset >= params.beacon_csa.tail_len) {
9887 err = -EINVAL;
9888 goto free;
9889 }
9a774c78 9890
a05829a7
JB		 9891 if (params.beacon_csa.tail[offset] != params.count) {
9892 err = -EINVAL;
9893 goto free;
9894 }
9a774c78
AO		 9895 }
9896
00c207ed
JC		 9897 if (csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]) {
9898 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
a05829a7
JB		 9899 if (!len || (len % sizeof(u16))) {
9900 err = -EINVAL;
9901 goto free;
9902 }
16ef1fe2 9903
9a774c78
AO		 9904 params.n_counter_offsets_presp = len / sizeof(u16);
9905 if (rdev->wiphy.max_num_csa_counters &&
ad5987b4 9906 (params.n_counter_offsets_presp >
a05829a7
JB		 9907 rdev->wiphy.max_num_csa_counters)) {
9908 err = -EINVAL;
9909 goto free;
9910 }
9a774c78
AO		 9911
9912 params.counter_offsets_presp =
00c207ed 9913 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
9a774c78
AO		 9914
9915 /* sanity checks - counters should fit and be the same */
9916 for (i = 0; i < params.n_counter_offsets_presp; i++) {
9917 u16 offset = params.counter_offsets_presp[i];
9918
a05829a7
JB		 9919 if (offset >= params.beacon_csa.probe_resp_len) {
9920 err = -EINVAL;
9921 goto free;
9922 }
9a774c78
AO		 9923
9924 if (params.beacon_csa.probe_resp[offset] !=
a05829a7
JB		 9925 params.count) {
9926 err = -EINVAL;
9927 goto free;
9928 }
9a774c78 9929 }
16ef1fe2
SW		 9930 }
9931
ee4bc9e7 9932skip_beacons:
16ef1fe2
SW		 9933 err = nl80211_parse_chandef(rdev, info, &params.chandef);
9934 if (err)
a05829a7 9935 goto free;
16ef1fe2 9936
923b352f 9937 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
a05829a7
JB		 9938 wdev->iftype)) {
9939 err = -EINVAL;
9940 goto free;
9941 }
16ef1fe2 9942
2beb6dab
LC		 9943 err = cfg80211_chandef_dfs_required(wdev->wiphy,
9944 &params.chandef,
9945 wdev->iftype);
9946 if (err < 0)
a05829a7 9947 goto free;
2beb6dab 9948
8d9de16f 9949 if (err > 0) {
2beb6dab 9950 params.radar_required = true;
8d9de16f
BB		 9951 if (need_handle_dfs_flag &&
9952 !nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS])) {
a05829a7
JB		 9953 err = -EINVAL;
9954 goto free;
8d9de16f
BB		 9955 }
9956 }
16ef1fe2 9957
16ef1fe2
SW		 9958 if (info->attrs[NL80211_ATTR_CH_SWITCH_BLOCK_TX])
9959 params.block_tx = true;
9960
c56589ed
SW		 9961 wdev_lock(wdev);
9962 err = rdev_channel_switch(rdev, dev, &params);
9963 wdev_unlock(wdev);
9964
a05829a7 9965free:
dc1e3cb8
JC		 9966 kfree(params.beacon_after.mbssid_ies);
9967 kfree(params.beacon_csa.mbssid_ies);
a05829a7 9968 kfree(csa_attrs);
c56589ed 9969 return err;
16ef1fe2
SW		 9970}
9971
9720bb3a
JB		 9972static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
9973 u32 seq, int flags,
2a519311 9974 struct cfg80211_registered_device *rdev,
48ab905d
JB		 9975 struct wireless_dev *wdev,
9976 struct cfg80211_internal_bss *intbss)
2a519311 9977{
48ab905d 9978 struct cfg80211_bss *res = &intbss->pub;
9caf0364 9979 const struct cfg80211_bss_ies *ies;
7b0a0e3c 9980 unsigned int link_id;
2a519311
JB		 9981 void *hdr;
9982 struct nlattr *bss;
48ab905d
JB		 9983
9984 ASSERT_WDEV_LOCK(wdev);
2a519311 9985
15e47304 9986 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 9987 NL80211_CMD_NEW_SCAN_RESULTS);
9988 if (!hdr)
9989 return -1;
9990
0a833c29 9991 genl_dump_check_consistent(cb, hdr);
9720bb3a 9992
97990a06
JB		 9993 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation))
9994 goto nla_put_failure;
9995 if (wdev->netdev &&
9360ffd1
DM		 9996 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
9997 goto nla_put_failure;
2dad624e
ND		 9998 if (nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
9999 NL80211_ATTR_PAD))
97990a06 10000 goto nla_put_failure;
2a519311 10001
ae0be8de 10002 bss = nla_nest_start_noflag(msg, NL80211_ATTR_BSS);
2a519311
JB		 10003 if (!bss)
10004 goto nla_put_failure;
9360ffd1 10005 if ((!is_zero_ether_addr(res->bssid) &&
9caf0364 10006 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
9360ffd1 10007 goto nla_put_failure;
9caf0364
JB		 10008
10009 rcu_read_lock();
0e227084
JB		 10010 /* indicate whether we have probe response data or not */
10011 if (rcu_access_pointer(res->proberesp_ies) &&
10012 nla_put_flag(msg, NL80211_BSS_PRESP_DATA))
10013 goto fail_unlock_rcu;
10014
10015 /* this pointer prefers to be pointed to probe response data
10016 * but is always valid
10017 */
9caf0364 10018 ies = rcu_dereference(res->ies);
8cef2c9d 10019 if (ies) {
2dad624e
ND		 10020 if (nla_put_u64_64bit(msg, NL80211_BSS_TSF, ies->tsf,
10021 NL80211_BSS_PAD))
8cef2c9d 10022 goto fail_unlock_rcu;
8cef2c9d
JB		 10023 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
10024 ies->len, ies->data))
10025 goto fail_unlock_rcu;
9caf0364 10026 }
0e227084
JB		 10027
10028 /* and this pointer is always (unless driver didn't know) beacon data */
9caf0364 10029 ies = rcu_dereference(res->beacon_ies);
0e227084 10030 if (ies && ies->from_beacon) {
2dad624e
ND		 10031 if (nla_put_u64_64bit(msg, NL80211_BSS_BEACON_TSF, ies->tsf,
10032 NL80211_BSS_PAD))
8cef2c9d
JB		 10033 goto fail_unlock_rcu;
10034 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
10035 ies->len, ies->data))
10036 goto fail_unlock_rcu;
9caf0364
JB		 10037 }
10038 rcu_read_unlock();
10039
9360ffd1
DM		 10040 if (res->beacon_interval &&
10041 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
10042 goto nla_put_failure;
10043 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
10044 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
942ba88b
TP		 10045 nla_put_u32(msg, NL80211_BSS_FREQUENCY_OFFSET,
10046 res->channel->freq_offset) ||
dcd6eac1 10047 nla_put_u32(msg, NL80211_BSS_CHAN_WIDTH, res->scan_width) ||
9360ffd1
DM		 10048 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
10049 jiffies_to_msecs(jiffies - intbss->ts)))
10050 goto nla_put_failure;
2a519311 10051
1d76250b
AS		 10052 if (intbss->parent_tsf &&
10053 (nla_put_u64_64bit(msg, NL80211_BSS_PARENT_TSF,
10054 intbss->parent_tsf, NL80211_BSS_PAD) ||
10055 nla_put(msg, NL80211_BSS_PARENT_BSSID, ETH_ALEN,
10056 intbss->parent_bssid)))
10057 goto nla_put_failure;
10058
6e19bc4b 10059 if (intbss->ts_boottime &&
2dad624e
ND		 10060 nla_put_u64_64bit(msg, NL80211_BSS_LAST_SEEN_BOOTTIME,
10061 intbss->ts_boottime, NL80211_BSS_PAD))
6e19bc4b
DS		 10062 goto nla_put_failure;
10063
983dafaa
SD		 10064 if (!nl80211_put_signal(msg, intbss->pub.chains,
10065 intbss->pub.chain_signal,
10066 NL80211_BSS_CHAIN_SIGNAL))
10067 goto nla_put_failure;
10068
77965c97 10069 switch (rdev->wiphy.signal_type) {
2a519311 10070 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 10071 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
10072 goto nla_put_failure;
2a519311
JB		 10073 break;
10074 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 10075 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
10076 goto nla_put_failure;
2a519311
JB		 10077 break;
10078 default:
10079 break;
10080 }
10081
48ab905d 10082 switch (wdev->iftype) {
074ac8df 10083 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 10084 case NL80211_IFTYPE_STATION:
7b0a0e3c
JB		 10085 for_each_valid_link(wdev, link_id) {
10086 if (intbss == wdev->links[link_id].client.current_bss &&
dd374f84
JB		 10087 (nla_put_u32(msg, NL80211_BSS_STATUS,
10088 NL80211_BSS_STATUS_ASSOCIATED) ||
10089 (wdev->valid_links &&
3c512307
VJ		 10090 nla_put_u8(msg, NL80211_BSS_MLO_LINK_ID,
10091 link_id))))
7b0a0e3c
JB		 10092 goto nla_put_failure;
10093 }
48ab905d
JB		 10094 break;
10095 case NL80211_IFTYPE_ADHOC:
7b0a0e3c 10096 if (intbss == wdev->u.ibss.current_bss &&
9360ffd1
DM		 10097 nla_put_u32(msg, NL80211_BSS_STATUS,
10098 NL80211_BSS_STATUS_IBSS_JOINED))
10099 goto nla_put_failure;
48ab905d
JB		 10100 break;
10101 default:
10102 break;
10103 }
10104
2a519311
JB		 10105 nla_nest_end(msg, bss);
10106
053c095a
JB		 10107 genlmsg_end(msg, hdr);
10108 return 0;
2a519311 10109
8cef2c9d
JB		 10110 fail_unlock_rcu:
10111 rcu_read_unlock();
2a519311
JB		 10112 nla_put_failure:
10113 genlmsg_cancel(msg, hdr);
10114 return -EMSGSIZE;
10115}
10116
97990a06 10117static int nl80211_dump_scan(struct sk_buff *skb, struct netlink_callback *cb)
2a519311 10118{
48ab905d 10119 struct cfg80211_registered_device *rdev;
2a519311 10120 struct cfg80211_internal_bss *scan;
48ab905d 10121 struct wireless_dev *wdev;
97990a06 10122 int start = cb->args[2], idx = 0;
2a519311
JB		 10123 int err;
10124
ce6b6974 10125 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, NULL);
a05829a7 10126 if (err)
67748893 10127 return err;
a05829a7
JB		 10128 /* nl80211_prepare_wdev_dump acquired it in the successful case */
10129 __acquire(&rdev->wiphy.mtx);
2a519311 10130
48ab905d
JB		 10131 wdev_lock(wdev);
10132 spin_lock_bh(&rdev->bss_lock);
d1e23c94
DK		 10133
10134 /*
10135 * dump_scan will be called multiple times to break up the scan results
10136 * into multiple messages. It is unlikely that any more bss-es will be
10137 * expired after the first call, so only call only call this on the
10138 * first dump_scan invocation.
10139 */
10140 if (start == 0)
10141 cfg80211_bss_expire(rdev);
48ab905d 10142
9720bb3a
JB		 10143 cb->seq = rdev->bss_generation;
10144
48ab905d 10145 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 10146 if (++idx <= start)
10147 continue;
9720bb3a 10148 if (nl80211_send_bss(skb, cb,
2a519311 10149 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 10150 rdev, wdev, scan) < 0) {
2a519311 10151 idx--;
67748893 10152 break;
2a519311
JB		 10153 }
10154 }
10155
48ab905d
JB		 10156 spin_unlock_bh(&rdev->bss_lock);
10157 wdev_unlock(wdev);
2a519311 10158
97990a06 10159 cb->args[2] = idx;
a05829a7 10160 wiphy_unlock(&rdev->wiphy);
2a519311 10161
67748893 10162 return skb->len;
2a519311
JB		 10163}
10164
15e47304 10165static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
11f78ac3
JB		 10166 int flags, struct net_device *dev,
10167 bool allow_radio_stats,
10168 struct survey_info *survey)
61fa713c
HS		 10169{
10170 void *hdr;
10171 struct nlattr *infoattr;
10172
11f78ac3
JB		 10173 /* skip radio stats if userspace didn't request them */
10174 if (!survey->channel && !allow_radio_stats)
10175 return 0;
10176
15e47304 10177 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 10178 NL80211_CMD_NEW_SURVEY_RESULTS);
10179 if (!hdr)
10180 return -ENOMEM;
10181
9360ffd1
DM		 10182 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
10183 goto nla_put_failure;
61fa713c 10184
ae0be8de 10185 infoattr = nla_nest_start_noflag(msg, NL80211_ATTR_SURVEY_INFO);
61fa713c
HS		 10186 if (!infoattr)
10187 goto nla_put_failure;
10188
11f78ac3
JB		 10189 if (survey->channel &&
10190 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
9360ffd1
DM		 10191 survey->channel->center_freq))
10192 goto nla_put_failure;
58ef7c1b
TP		 10193
10194 if (survey->channel && survey->channel->freq_offset &&
10195 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY_OFFSET,
10196 survey->channel->freq_offset))
10197 goto nla_put_failure;
9360ffd1
DM		 10198
10199 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
10200 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
10201 goto nla_put_failure;
10202 if ((survey->filled & SURVEY_INFO_IN_USE) &&
10203 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
10204 goto nla_put_failure;
4ed20beb 10205 if ((survey->filled & SURVEY_INFO_TIME) &&
2dad624e
ND		 10206 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME,
10207 survey->time, NL80211_SURVEY_INFO_PAD))
9360ffd1 10208 goto nla_put_failure;
4ed20beb 10209 if ((survey->filled & SURVEY_INFO_TIME_BUSY) &&
2dad624e
ND		 10210 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BUSY,
10211 survey->time_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 10212 goto nla_put_failure;
4ed20beb 10213 if ((survey->filled & SURVEY_INFO_TIME_EXT_BUSY) &&
2dad624e
ND		 10214 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_EXT_BUSY,
10215 survey->time_ext_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 10216 goto nla_put_failure;
4ed20beb 10217 if ((survey->filled & SURVEY_INFO_TIME_RX) &&
2dad624e
ND		 10218 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_RX,
10219 survey->time_rx, NL80211_SURVEY_INFO_PAD))
9360ffd1 10220 goto nla_put_failure;
4ed20beb 10221 if ((survey->filled & SURVEY_INFO_TIME_TX) &&
2dad624e
ND		 10222 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_TX,
10223 survey->time_tx, NL80211_SURVEY_INFO_PAD))
9360ffd1 10224 goto nla_put_failure;
052536ab 10225 if ((survey->filled & SURVEY_INFO_TIME_SCAN) &&
2dad624e
ND		 10226 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_SCAN,
10227 survey->time_scan, NL80211_SURVEY_INFO_PAD))
052536ab 10228 goto nla_put_failure;
c8cd6e7f
FF		 10229 if ((survey->filled & SURVEY_INFO_TIME_BSS_RX) &&
10230 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BSS_RX,
10231 survey->time_bss_rx, NL80211_SURVEY_INFO_PAD))
10232 goto nla_put_failure;
61fa713c
HS		 10233
10234 nla_nest_end(msg, infoattr);
10235
053c095a
JB		 10236 genlmsg_end(msg, hdr);
10237 return 0;
61fa713c
HS		 10238
10239 nla_put_failure:
10240 genlmsg_cancel(msg, hdr);
10241 return -EMSGSIZE;
10242}
10243
11f78ac3 10244static int nl80211_dump_survey(struct sk_buff *skb, struct netlink_callback *cb)
61fa713c 10245{
50508d94 10246 struct nlattr **attrbuf;
61fa713c 10247 struct survey_info survey;
1b8ec87a 10248 struct cfg80211_registered_device *rdev;
97990a06
JB		 10249 struct wireless_dev *wdev;
10250 int survey_idx = cb->args[2];
61fa713c 10251 int res;
11f78ac3 10252 bool radio_stats;
61fa713c 10253
50508d94
JB		 10254 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
10255 if (!attrbuf)
10256 return -ENOMEM;
10257
ce6b6974 10258 res = nl80211_prepare_wdev_dump(cb, &rdev, &wdev, attrbuf);
a05829a7
JB		 10259 if (res) {
10260 kfree(attrbuf);
10261 return res;
10262 }
10263 /* nl80211_prepare_wdev_dump acquired it in the successful case */
10264 __acquire(&rdev->wiphy.mtx);
61fa713c 10265
11f78ac3 10266 /* prepare_wdev_dump parsed the attributes */
c90c39da 10267 radio_stats = attrbuf[NL80211_ATTR_SURVEY_RADIO_STATS];
11f78ac3 10268
97990a06
JB		 10269 if (!wdev->netdev) {
10270 res = -EINVAL;
10271 goto out_err;
10272 }
10273
1b8ec87a 10274 if (!rdev->ops->dump_survey) {
61fa713c
HS		 10275 res = -EOPNOTSUPP;
10276 goto out_err;
10277 }
10278
10279 while (1) {
284b38b6 10280 wdev_lock(wdev);
1b8ec87a 10281 res = rdev_dump_survey(rdev, wdev->netdev, survey_idx, &survey);
284b38b6 10282 wdev_unlock(wdev);
61fa713c
HS		 10283 if (res == -ENOENT)
10284 break;
10285 if (res)
10286 goto out_err;
10287
11f78ac3
JB		 10288 /* don't send disabled channels, but do send non-channel data */
10289 if (survey.channel &&
10290 survey.channel->flags & IEEE80211_CHAN_DISABLED) {
180cdc79
LR		 10291 survey_idx++;
10292 continue;
10293 }
10294
61fa713c 10295 if (nl80211_send_survey(skb,
15e47304 10296 NETLINK_CB(cb->skb).portid,
61fa713c 10297 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11f78ac3 10298 wdev->netdev, radio_stats, &survey) < 0)
61fa713c
HS		 10299 goto out;
10300 survey_idx++;
10301 }
10302
10303 out:
97990a06 10304 cb->args[2] = survey_idx;
61fa713c
HS		 10305 res = skb->len;
10306 out_err:
50508d94 10307 kfree(attrbuf);
a05829a7 10308 wiphy_unlock(&rdev->wiphy);
61fa713c
HS		 10309 return res;
10310}
10311
b23aa676
SO		 10312static bool nl80211_valid_wpa_versions(u32 wpa_versions)
10313{
10314 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
cc3e14c2
CHH		 10315 NL80211_WPA_VERSION_2 |
10316 NL80211_WPA_VERSION_3));
b23aa676
SO		 10317}
10318
636a5d36
JM		 10319static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
10320{
4c476991
JB		 10321 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10322 struct net_device *dev = info->user_ptr[1];
19957bb3 10323 struct ieee80211_channel *chan;
325839da
JB		 10324 const u8 *bssid, *ssid;
10325 int err, ssid_len;
19957bb3 10326 enum nl80211_auth_type auth_type;
fffd0934 10327 struct key_parse key;
d5cdfacb 10328 bool local_state_change;
325839da 10329 struct cfg80211_auth_request req = {};
942ba88b 10330 u32 freq;
636a5d36 10331
f4a11bb0
JB		 10332 if (!info->attrs[NL80211_ATTR_MAC])
10333 return -EINVAL;
10334
1778092e
JM		 10335 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
10336 return -EINVAL;
10337
19957bb3
JB		 10338 if (!info->attrs[NL80211_ATTR_SSID])
10339 return -EINVAL;
10340
10341 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
10342 return -EINVAL;
10343
fffd0934
JB		 10344 err = nl80211_parse_key(info, &key);
10345 if (err)
10346 return err;
10347
10348 if (key.idx >= 0) {
e31b8213
JB		 10349 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
10350 return -EINVAL;
fffd0934
JB		 10351 if (!key.p.key || !key.p.key_len)
10352 return -EINVAL;
10353 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
10354 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
10355 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
10356 key.p.key_len != WLAN_KEY_LEN_WEP104))
10357 return -EINVAL;
b6b5555b 10358 if (key.idx > 3)
fffd0934
JB		 10359 return -EINVAL;
10360 } else {
10361 key.p.key_len = 0;
10362 key.p.key = NULL;
10363 }
10364
afea0b7a
JB		 10365 if (key.idx >= 0) {
10366 int i;
10367 bool ok = false;
7a087e74 10368
afea0b7a
JB		 10369 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
10370 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
10371 ok = true;
10372 break;
10373 }
10374 }
4c476991
JB		 10375 if (!ok)
10376 return -EINVAL;
afea0b7a
JB		 10377 }
10378
4c476991
JB		 10379 if (!rdev->ops->auth)
10380 return -EOPNOTSUPP;
636a5d36 10381
074ac8df 10382 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10383 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10384 return -EOPNOTSUPP;
eec60b03 10385
19957bb3 10386 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
942ba88b
TP		 10387 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
10388 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10389 freq +=
10390 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10391
10392 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 10393 if (!chan)
4c476991 10394 return -EINVAL;
636a5d36 10395
19957bb3
JB		 10396 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10397 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 10398
10399 if (info->attrs[NL80211_ATTR_IE]) {
325839da
JB		 10400 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10401 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10402 }
10403
19957bb3 10404 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 10405 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 10406 return -EINVAL;
636a5d36 10407
63181060
JM		 10408 if ((auth_type == NL80211_AUTHTYPE_SAE ||
10409 auth_type == NL80211_AUTHTYPE_FILS_SK ||
10410 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
10411 auth_type == NL80211_AUTHTYPE_FILS_PK) &&
11b6b5a4 10412 !info->attrs[NL80211_ATTR_AUTH_DATA])
e39e5b5e
JM		 10413 return -EINVAL;
10414
11b6b5a4 10415 if (info->attrs[NL80211_ATTR_AUTH_DATA]) {
63181060
JM		 10416 if (auth_type != NL80211_AUTHTYPE_SAE &&
10417 auth_type != NL80211_AUTHTYPE_FILS_SK &&
10418 auth_type != NL80211_AUTHTYPE_FILS_SK_PFS &&
10419 auth_type != NL80211_AUTHTYPE_FILS_PK)
e39e5b5e 10420 return -EINVAL;
325839da
JB		 10421 req.auth_data = nla_data(info->attrs[NL80211_ATTR_AUTH_DATA]);
10422 req.auth_data_len = nla_len(info->attrs[NL80211_ATTR_AUTH_DATA]);
e39e5b5e
JM		 10423 }
10424
d5cdfacb
JM		 10425 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10426
95de817b
JB		 10427 /*
10428 * Since we no longer track auth state, ignore
10429 * requests to only change local state.
10430 */
10431 if (local_state_change)
10432 return 0;
10433
325839da
JB		 10434 req.auth_type = auth_type;
10435 req.key = key.p.key;
10436 req.key_len = key.p.key_len;
10437 req.key_idx = key.idx;
d648c230
JB		 10438 req.link_id = nl80211_link_id_or_invalid(info->attrs);
10439 if (req.link_id >= 0) {
45aaf17c
JB		 10440 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO))
10441 return -EINVAL;
d648c230
JB		 10442 if (!info->attrs[NL80211_ATTR_MLD_ADDR])
10443 return -EINVAL;
10444 req.ap_mld_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
10445 }
325839da
JB		 10446
10447 req.bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid, ssid, ssid_len,
10448 IEEE80211_BSS_TYPE_ESS,
10449 IEEE80211_PRIVACY_ANY);
10450 if (!req.bss)
10451 return -ENOENT;
10452
91bf9b26 10453 wdev_lock(dev->ieee80211_ptr);
325839da 10454 err = cfg80211_mlme_auth(rdev, dev, &req);
91bf9b26 10455 wdev_unlock(dev->ieee80211_ptr);
325839da
JB		 10456
10457 cfg80211_put_bss(&rdev->wiphy, req.bss);
10458
91bf9b26 10459 return err;
636a5d36
JM		 10460}
10461
64bf3d4b
DK		 10462static int validate_pae_over_nl80211(struct cfg80211_registered_device *rdev,
10463 struct genl_info *info)
10464{
10465 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10466 GENL_SET_ERR_MSG(info, "SOCKET_OWNER not set");
10467 return -EINVAL;
10468 }
10469
10470 if (!rdev->ops->tx_control_port ||
10471 !wiphy_ext_feature_isset(&rdev->wiphy,
10472 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
10473 return -EOPNOTSUPP;
10474
10475 return 0;
10476}
10477
c0692b8f
JB		 10478static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
10479 struct genl_info *info,
3dc27d25
JB		 10480 struct cfg80211_crypto_settings *settings,
10481 int cipher_limit)
b23aa676 10482{
c0b2bbd8
JB		 10483 memset(settings, 0, sizeof(*settings));
10484
b23aa676
SO		 10485 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
10486
c0692b8f
JB		 10487 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
10488 u16 proto;
7a087e74 10489
c0692b8f
JB		 10490 proto = nla_get_u16(
10491 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
10492 settings->control_port_ethertype = cpu_to_be16(proto);
10493 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
10494 proto != ETH_P_PAE)
10495 return -EINVAL;
10496 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
10497 settings->control_port_no_encrypt = true;
10498 } else
10499 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
10500
64bf3d4b
DK		 10501 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
10502 int r = validate_pae_over_nl80211(rdev, info);
10503
10504 if (r < 0)
10505 return r;
10506
10507 settings->control_port_over_nl80211 = true;
7f3f96ce
MT		 10508
10509 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_PREAUTH])
10510 settings->control_port_no_preauth = true;
64bf3d4b
DK		 10511 }
10512
b23aa676
SO		 10513 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
10514 void *data;
10515 int len, i;
10516
10517 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
10518 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
10519 settings->n_ciphers_pairwise = len / sizeof(u32);
10520
10521 if (len % sizeof(u32))
10522 return -EINVAL;
10523
3dc27d25 10524 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 10525 return -EINVAL;
10526
10527 memcpy(settings->ciphers_pairwise, data, len);
10528
10529 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 10530 if (!cfg80211_supported_cipher_suite(
10531 &rdev->wiphy,
b23aa676
SO		 10532 settings->ciphers_pairwise[i]))
10533 return -EINVAL;
10534 }
10535
10536 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
10537 settings->cipher_group =
10538 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 10539 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
10540 settings->cipher_group))
b23aa676
SO		 10541 return -EINVAL;
10542 }
10543
10544 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
10545 settings->wpa_versions =
10546 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
10547 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
10548 return -EINVAL;
10549 }
10550
10551 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
10552 void *data;
6d30240e 10553 int len;
b23aa676
SO		 10554
10555 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
10556 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
10557 settings->n_akm_suites = len / sizeof(u32);
10558
10559 if (len % sizeof(u32))
10560 return -EINVAL;
10561
ecad3b0b 10562 if (settings->n_akm_suites > rdev->wiphy.max_num_akm_suites)
1b9ca027
JM		 10563 return -EINVAL;
10564
b23aa676 10565 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 10566 }
10567
91b5ab62
EP		 10568 if (info->attrs[NL80211_ATTR_PMK]) {
10569 if (nla_len(info->attrs[NL80211_ATTR_PMK]) != WLAN_PMK_LEN)
10570 return -EINVAL;
10571 if (!wiphy_ext_feature_isset(&rdev->wiphy,
f9662274
CHH		 10572 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_PSK) &&
10573 !wiphy_ext_feature_isset(&rdev->wiphy,
10574 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_AP_PSK))
91b5ab62
EP		 10575 return -EINVAL;
10576 settings->psk = nla_data(info->attrs[NL80211_ATTR_PMK]);
10577 }
10578
26f7044e
CHH		 10579 if (info->attrs[NL80211_ATTR_SAE_PASSWORD]) {
10580 if (!wiphy_ext_feature_isset(&rdev->wiphy,
2831a631
CHH		 10581 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10582 !wiphy_ext_feature_isset(&rdev->wiphy,
10583 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP))
26f7044e
CHH		 10584 return -EINVAL;
10585 settings->sae_pwd =
10586 nla_data(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
10587 settings->sae_pwd_len =
10588 nla_len(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
10589 }
10590
9f0ffa41
RD		 10591 if (info->attrs[NL80211_ATTR_SAE_PWE])
10592 settings->sae_pwe =
10593 nla_get_u8(info->attrs[NL80211_ATTR_SAE_PWE]);
10594 else
10595 settings->sae_pwe = NL80211_SAE_PWE_UNSPECIFIED;
10596
b23aa676
SO		 10597 return 0;
10598}
10599
9ecff10e
JB		 10600static struct cfg80211_bss *nl80211_assoc_bss(struct cfg80211_registered_device *rdev,
10601 const u8 *ssid, int ssid_len,
10602 struct nlattr **attrs,
10603 const u8 **bssid_out)
10604{
10605 struct ieee80211_channel *chan;
10606 struct cfg80211_bss *bss;
10607 const u8 *bssid;
10608 u32 freq;
10609
10610 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_WIPHY_FREQ])
10611 return ERR_PTR(-EINVAL);
10612
10613 bssid = nla_data(attrs[NL80211_ATTR_MAC]);
10614
10615 freq = MHZ_TO_KHZ(nla_get_u32(attrs[NL80211_ATTR_WIPHY_FREQ]));
10616 if (attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10617 freq += nla_get_u32(attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10618
10619 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
10620 if (!chan)
10621 return ERR_PTR(-EINVAL);
10622
10623 bss = cfg80211_get_bss(&rdev->wiphy, chan, bssid,
10624 ssid, ssid_len,
10625 IEEE80211_BSS_TYPE_ESS,
10626 IEEE80211_PRIVACY_ANY);
10627 if (!bss)
10628 return ERR_PTR(-ENOENT);
10629
10630 *bssid_out = bssid;
10631 return bss;
10632}
10633
636a5d36
JM		 10634static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
10635{
4c476991
JB		 10636 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10637 struct net_device *dev = info->user_ptr[1];
f62fab73 10638 struct cfg80211_assoc_request req = {};
d648c230 10639 struct nlattr **attrs = NULL;
f62fab73 10640 const u8 *bssid, *ssid;
d648c230 10641 unsigned int link_id;
0f759448 10642 int err, ssid_len;
636a5d36 10643
bad29297
AZ		 10644 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10645 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10646 return -EPERM;
10647
9ecff10e 10648 if (!info->attrs[NL80211_ATTR_SSID])
f4a11bb0
JB		 10649 return -EINVAL;
10650
4c476991
JB		 10651 if (!rdev->ops->assoc)
10652 return -EOPNOTSUPP;
636a5d36 10653
074ac8df 10654 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10655 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10656 return -EOPNOTSUPP;
eec60b03 10657
19957bb3
JB		 10658 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10659 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 10660
10661 if (info->attrs[NL80211_ATTR_IE]) {
f62fab73
JB		 10662 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10663 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
df35f316
JB		 10664
10665 if (cfg80211_find_ext_elem(WLAN_EID_EXT_NON_INHERITANCE,
10666 req.ie, req.ie_len)) {
10667 GENL_SET_ERR_MSG(info,
10668 "non-inheritance makes no sense");
10669 return -EINVAL;
10670 }
636a5d36
JM		 10671 }
10672
dc6382ce 10673 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 10674 enum nl80211_mfp mfp =
dc6382ce 10675 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 10676 if (mfp == NL80211_MFP_REQUIRED)
f62fab73 10677 req.use_mfp = true;
4c476991
JB		 10678 else if (mfp != NL80211_MFP_NO)
10679 return -EINVAL;
dc6382ce
JM		 10680 }
10681
3e5d7649 10682 if (info->attrs[NL80211_ATTR_PREV_BSSID])
f62fab73 10683 req.prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3e5d7649 10684
7e7c8926 10685 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
f62fab73 10686 req.flags |= ASSOC_REQ_DISABLE_HT;
7e7c8926
BG		 10687
10688 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
f62fab73
JB		 10689 memcpy(&req.ht_capa_mask,
10690 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10691 sizeof(req.ht_capa_mask));
7e7c8926
BG		 10692
10693 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
f62fab73 10694 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
7e7c8926 10695 return -EINVAL;
f62fab73
JB		 10696 memcpy(&req.ht_capa,
10697 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10698 sizeof(req.ht_capa));
7e7c8926
BG		 10699 }
10700
ee2aca34 10701 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
f62fab73 10702 req.flags |= ASSOC_REQ_DISABLE_VHT;
ee2aca34 10703
b6db0f89
BG		 10704 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HE]))
10705 req.flags |= ASSOC_REQ_DISABLE_HE;
10706
36f84235
MS		 10707 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_EHT]))
10708 req.flags |= ASSOC_REQ_DISABLE_EHT;
10709
ee2aca34 10710 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
f62fab73
JB		 10711 memcpy(&req.vht_capa_mask,
10712 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
10713 sizeof(req.vht_capa_mask));
ee2aca34
JB		 10714
10715 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
f62fab73 10716 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
ee2aca34 10717 return -EINVAL;
f62fab73
JB		 10718 memcpy(&req.vht_capa,
10719 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
10720 sizeof(req.vht_capa));
ee2aca34
JB		 10721 }
10722
bab5ab7d 10723 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 10724 if (!((rdev->wiphy.features &
10725 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
10726 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
10727 !wiphy_ext_feature_isset(&rdev->wiphy,
10728 NL80211_EXT_FEATURE_RRM))
bab5ab7d
AK		 10729 return -EINVAL;
10730 req.flags |= ASSOC_REQ_USE_RRM;
10731 }
10732
348bd456
JM		 10733 if (info->attrs[NL80211_ATTR_FILS_KEK]) {
10734 req.fils_kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
10735 req.fils_kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
10736 if (!info->attrs[NL80211_ATTR_FILS_NONCES])
10737 return -EINVAL;
10738 req.fils_nonces =
10739 nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
10740 }
10741
d2b7588a
TP		 10742 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]) {
10743 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY])
10744 return -EINVAL;
10745 memcpy(&req.s1g_capa_mask,
10746 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]),
10747 sizeof(req.s1g_capa_mask));
10748 }
10749
10750 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY]) {
10751 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK])
10752 return -EINVAL;
10753 memcpy(&req.s1g_capa,
10754 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY]),
10755 sizeof(req.s1g_capa));
10756 }
10757
d648c230
JB		 10758 req.link_id = nl80211_link_id_or_invalid(info->attrs);
10759
10760 if (info->attrs[NL80211_ATTR_MLO_LINKS]) {
10761 unsigned int attrsize = NUM_NL80211_ATTR * sizeof(*attrs);
10762 struct nlattr *link;
10763 int rem = 0;
10764
10765 if (req.link_id < 0)
10766 return -EINVAL;
10767
10768 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_MLO))
10769 return -EINVAL;
10770
10771 if (info->attrs[NL80211_ATTR_MAC] ||
10772 info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
10773 !info->attrs[NL80211_ATTR_MLD_ADDR])
10774 return -EINVAL;
10775
10776 req.ap_mld_addr = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
10777
10778 attrs = kzalloc(attrsize, GFP_KERNEL);
10779 if (!attrs)
10780 return -ENOMEM;
10781
10782 nla_for_each_nested(link,
10783 info->attrs[NL80211_ATTR_MLO_LINKS],
10784 rem) {
10785 memset(attrs, 0, attrsize);
10786
10787 nla_parse_nested(attrs, NL80211_ATTR_MAX,
10788 link, NULL, NULL);
10789
10790 if (!attrs[NL80211_ATTR_MLO_LINK_ID]) {
10791 err = -EINVAL;
10792 goto free;
10793 }
10794
10795 link_id = nla_get_u8(attrs[NL80211_ATTR_MLO_LINK_ID]);
10796 /* cannot use the same link ID again */
10797 if (req.links[link_id].bss) {
10798 err = -EINVAL;
10799 goto free;
10800 }
10801 req.links[link_id].bss =
10802 nl80211_assoc_bss(rdev, ssid, ssid_len, attrs,
10803 &bssid);
10804 if (IS_ERR(req.links[link_id].bss)) {
10805 err = PTR_ERR(req.links[link_id].bss);
9b6bf4d6 10806 req.links[link_id].bss = NULL;
d648c230
JB		 10807 goto free;
10808 }
10809
10810 if (attrs[NL80211_ATTR_IE]) {
10811 req.links[link_id].elems =
10812 nla_data(attrs[NL80211_ATTR_IE]);
10813 req.links[link_id].elems_len =
10814 nla_len(attrs[NL80211_ATTR_IE]);
df35f316
JB		 10815
10816 if (cfg80211_find_elem(WLAN_EID_FRAGMENT,
10817 req.links[link_id].elems,
10818 req.links[link_id].elems_len)) {
10819 GENL_SET_ERR_MSG(info,
10820 "cannot deal with fragmentation");
10821 err = -EINVAL;
10822 goto free;
10823 }
10824
10825 if (cfg80211_find_ext_elem(WLAN_EID_EXT_NON_INHERITANCE,
10826 req.links[link_id].elems,
10827 req.links[link_id].elems_len)) {
10828 GENL_SET_ERR_MSG(info,
10829 "cannot deal with non-inheritance");
10830 err = -EINVAL;
10831 goto free;
10832 }
d648c230
JB		 10833 }
10834 }
10835
10836 if (!req.links[req.link_id].bss) {
10837 err = -EINVAL;
10838 goto free;
10839 }
10840
34d76a14
JB		 10841 if (req.links[req.link_id].elems_len) {
10842 GENL_SET_ERR_MSG(info,
10843 "cannot have per-link elems on assoc link");
10844 err = -EINVAL;
10845 goto free;
10846 }
10847
d648c230
JB		 10848 kfree(attrs);
10849 attrs = NULL;
10850 } else {
10851 if (req.link_id >= 0)
10852 return -EINVAL;
10853
10854 req.bss = nl80211_assoc_bss(rdev, ssid, ssid_len, info->attrs,
10855 &bssid);
10856 if (IS_ERR(req.bss))
10857 return PTR_ERR(req.bss);
10858 }
0f759448 10859
f62fab73 10860 err = nl80211_crypto_settings(rdev, info, &req.crypto, 1);
91bf9b26
JB		 10861 if (!err) {
10862 wdev_lock(dev->ieee80211_ptr);
bd2522b1 10863
0f759448 10864 err = cfg80211_mlme_assoc(rdev, dev, &req);
bd2522b1
AZ		 10865
10866 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10867 dev->ieee80211_ptr->conn_owner_nlportid =
10868 info->snd_portid;
10869 memcpy(dev->ieee80211_ptr->disconnect_bssid,
10870 bssid, ETH_ALEN);
10871 }
10872
91bf9b26
JB		 10873 wdev_unlock(dev->ieee80211_ptr);
10874 }
636a5d36 10875
d648c230
JB		 10876free:
10877 for (link_id = 0; link_id < ARRAY_SIZE(req.links); link_id++)
10878 cfg80211_put_bss(&rdev->wiphy, req.links[link_id].bss);
0f759448 10879 cfg80211_put_bss(&rdev->wiphy, req.bss);
d648c230 10880 kfree(attrs);
0f759448 10881
636a5d36
JM		 10882 return err;
10883}
10884
10885static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
10886{
4c476991
JB		 10887 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10888 struct net_device *dev = info->user_ptr[1];
19957bb3 10889 const u8 *ie = NULL, *bssid;
91bf9b26 10890 int ie_len = 0, err;
19957bb3 10891 u16 reason_code;
d5cdfacb 10892 bool local_state_change;
636a5d36 10893
bad29297
AZ		 10894 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10895 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10896 return -EPERM;
10897
f4a11bb0
JB		 10898 if (!info->attrs[NL80211_ATTR_MAC])
10899 return -EINVAL;
10900
10901 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10902 return -EINVAL;
10903
4c476991
JB		 10904 if (!rdev->ops->deauth)
10905 return -EOPNOTSUPP;
636a5d36 10906
074ac8df 10907 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10908 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10909 return -EOPNOTSUPP;
eec60b03 10910
19957bb3 10911 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 10912
19957bb3
JB		 10913 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10914 if (reason_code == 0) {
f4a11bb0 10915 /* Reason Code 0 is reserved */
4c476991 10916 return -EINVAL;
255e737e 10917 }
636a5d36
JM		 10918
10919 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 10920 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10921 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10922 }
10923
d5cdfacb
JM		 10924 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10925
91bf9b26
JB		 10926 wdev_lock(dev->ieee80211_ptr);
10927 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
10928 local_state_change);
10929 wdev_unlock(dev->ieee80211_ptr);
10930 return err;
636a5d36
JM		 10931}
10932
10933static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
10934{
4c476991
JB		 10935 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10936 struct net_device *dev = info->user_ptr[1];
19957bb3 10937 const u8 *ie = NULL, *bssid;
91bf9b26 10938 int ie_len = 0, err;
19957bb3 10939 u16 reason_code;
d5cdfacb 10940 bool local_state_change;
636a5d36 10941
bad29297
AZ		 10942 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10943 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10944 return -EPERM;
10945
f4a11bb0
JB		 10946 if (!info->attrs[NL80211_ATTR_MAC])
10947 return -EINVAL;
10948
10949 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10950 return -EINVAL;
10951
4c476991
JB		 10952 if (!rdev->ops->disassoc)
10953 return -EOPNOTSUPP;
636a5d36 10954
074ac8df 10955 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10956 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10957 return -EOPNOTSUPP;
eec60b03 10958
19957bb3 10959 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 10960
19957bb3
JB		 10961 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10962 if (reason_code == 0) {
f4a11bb0 10963 /* Reason Code 0 is reserved */
4c476991 10964 return -EINVAL;
255e737e 10965 }
636a5d36
JM		 10966
10967 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 10968 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10969 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10970 }
10971
d5cdfacb
JM		 10972 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10973
91bf9b26
JB		 10974 wdev_lock(dev->ieee80211_ptr);
10975 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
10976 local_state_change);
10977 wdev_unlock(dev->ieee80211_ptr);
10978 return err;
636a5d36
JM		 10979}
10980
dd5b4cc7
FF		 10981static bool
10982nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
57fbcce3 10983 int mcast_rate[NUM_NL80211_BANDS],
dd5b4cc7
FF		 10984 int rateval)
10985{
10986 struct wiphy *wiphy = &rdev->wiphy;
10987 bool found = false;
10988 int band, i;
10989
57fbcce3 10990 for (band = 0; band < NUM_NL80211_BANDS; band++) {
dd5b4cc7
FF		 10991 struct ieee80211_supported_band *sband;
10992
10993 sband = wiphy->bands[band];
10994 if (!sband)
10995 continue;
10996
10997 for (i = 0; i < sband->n_bitrates; i++) {
10998 if (sband->bitrates[i].bitrate == rateval) {
10999 mcast_rate[band] = i + 1;
11000 found = true;
11001 break;
11002 }
11003 }
11004 }
11005
11006 return found;
11007}
11008
04a773ad
JB		 11009static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
11010{
4c476991
JB		 11011 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11012 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 11013 struct cfg80211_ibss_params ibss;
11014 struct wiphy *wiphy;
fffd0934 11015 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 11016 int err;
11017
8e30bc55
JB		 11018 memset(&ibss, 0, sizeof(ibss));
11019
683b6d3b 11020 if (!info->attrs[NL80211_ATTR_SSID] ||
04a773ad
JB		 11021 !nla_len(info->attrs[NL80211_ATTR_SSID]))
11022 return -EINVAL;
11023
8e30bc55
JB		 11024 ibss.beacon_interval = 100;
11025
12d20fc9 11026 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL])
8e30bc55
JB		 11027 ibss.beacon_interval =
11028 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 11029
0c317a02
PK		 11030 err = cfg80211_validate_beacon_int(rdev, NL80211_IFTYPE_ADHOC,
11031 ibss.beacon_interval);
12d20fc9
PK		 11032 if (err)
11033 return err;
8e30bc55 11034
4c476991
JB		 11035 if (!rdev->ops->join_ibss)
11036 return -EOPNOTSUPP;
04a773ad 11037
4c476991
JB		 11038 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
11039 return -EOPNOTSUPP;
04a773ad 11040
79c97e97 11041 wiphy = &rdev->wiphy;
04a773ad 11042
39193498 11043 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 11044 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 11045
11046 if (!is_valid_ether_addr(ibss.bssid))
11047 return -EINVAL;
11048 }
04a773ad
JB		 11049 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11050 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11051
11052 if (info->attrs[NL80211_ATTR_IE]) {
11053 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11054 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11055 }
11056
683b6d3b
JB		 11057 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
11058 if (err)
11059 return err;
04a773ad 11060
174e0cd2
IP		 11061 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef,
11062 NL80211_IFTYPE_ADHOC))
54858ee5
AS		 11063 return -EINVAL;
11064
2f301ab2 11065 switch (ibss.chandef.width) {
bf372645
SW		 11066 case NL80211_CHAN_WIDTH_5:
11067 case NL80211_CHAN_WIDTH_10:
2f301ab2
SW		 11068 case NL80211_CHAN_WIDTH_20_NOHT:
11069 break;
11070 case NL80211_CHAN_WIDTH_20:
11071 case NL80211_CHAN_WIDTH_40:
ffc11991
JD		 11072 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
11073 return -EINVAL;
11074 break;
11075 case NL80211_CHAN_WIDTH_80:
11076 case NL80211_CHAN_WIDTH_80P80:
11077 case NL80211_CHAN_WIDTH_160:
11078 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
11079 return -EINVAL;
11080 if (!wiphy_ext_feature_isset(&rdev->wiphy,
11081 NL80211_EXT_FEATURE_VHT_IBSS))
11082 return -EINVAL;
11083 break;
3743bec6
JD		 11084 case NL80211_CHAN_WIDTH_320:
11085 return -EINVAL;
2f301ab2 11086 default:
c04d6150 11087 return -EINVAL;
2f301ab2 11088 }
db9c64cf 11089
04a773ad 11090 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 11091 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
11092
fbd2c8dc
TP		 11093 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
11094 u8 *rates =
11095 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11096 int n_rates =
11097 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11098 struct ieee80211_supported_band *sband =
683b6d3b 11099 wiphy->bands[ibss.chandef.chan->band];
fbd2c8dc 11100
34850ab2
JB		 11101 err = ieee80211_get_ratemask(sband, rates, n_rates,
11102 &ibss.basic_rates);
11103 if (err)
11104 return err;
fbd2c8dc 11105 }
dd5b4cc7 11106
803768f5
SW		 11107 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11108 memcpy(&ibss.ht_capa_mask,
11109 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
11110 sizeof(ibss.ht_capa_mask));
11111
11112 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
11113 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11114 return -EINVAL;
11115 memcpy(&ibss.ht_capa,
11116 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
11117 sizeof(ibss.ht_capa));
11118 }
11119
dd5b4cc7
FF		 11120 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
11121 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
11122 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
11123 return -EINVAL;
fbd2c8dc 11124
4c476991 11125 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 11126 bool no_ht = false;
11127
768075eb 11128 connkeys = nl80211_parse_connkeys(rdev, info, &no_ht);
4c476991
JB		 11129 if (IS_ERR(connkeys))
11130 return PTR_ERR(connkeys);
de7044ee 11131
3d9d1d66
JB		 11132 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
11133 no_ht) {
453431a5 11134 kfree_sensitive(connkeys);
de7044ee
SM		 11135 return -EINVAL;
11136 }
4c476991 11137 }
04a773ad 11138
267335d6
AQ		 11139 ibss.control_port =
11140 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
11141
c3bfe1f6
DK		 11142 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
11143 int r = validate_pae_over_nl80211(rdev, info);
11144
d350a0f4 11145 if (r < 0) {
453431a5 11146 kfree_sensitive(connkeys);
c3bfe1f6 11147 return r;
d350a0f4 11148 }
c3bfe1f6
DK		 11149
11150 ibss.control_port_over_nl80211 = true;
11151 }
11152
5336fa88
SW		 11153 ibss.userspace_handles_dfs =
11154 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
11155
f8d16d3e
DK		 11156 wdev_lock(dev->ieee80211_ptr);
11157 err = __cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934 11158 if (err)
453431a5 11159 kfree_sensitive(connkeys);
f8d16d3e
DK		 11160 else if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
11161 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11162 wdev_unlock(dev->ieee80211_ptr);
11163
04a773ad
JB		 11164 return err;
11165}
11166
11167static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
11168{
4c476991
JB		 11169 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11170 struct net_device *dev = info->user_ptr[1];
04a773ad 11171
4c476991
JB		 11172 if (!rdev->ops->leave_ibss)
11173 return -EOPNOTSUPP;
04a773ad 11174
4c476991
JB		 11175 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
11176 return -EOPNOTSUPP;
04a773ad 11177
4c476991 11178 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 11179}
11180
f4e583c8
AQ		 11181static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
11182{
11183 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11184 struct net_device *dev = info->user_ptr[1];
57fbcce3 11185 int mcast_rate[NUM_NL80211_BANDS];
f4e583c8
AQ		 11186 u32 nla_rate;
11187 int err;
11188
11189 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
876dc930
BVB		 11190 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
11191 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_OCB)
f4e583c8
AQ		 11192 return -EOPNOTSUPP;
11193
11194 if (!rdev->ops->set_mcast_rate)
11195 return -EOPNOTSUPP;
11196
11197 memset(mcast_rate, 0, sizeof(mcast_rate));
11198
11199 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
11200 return -EINVAL;
11201
11202 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
11203 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
11204 return -EINVAL;
11205
a1056b1b 11206 err = rdev_set_mcast_rate(rdev, dev, mcast_rate);
f4e583c8
AQ		 11207
11208 return err;
11209}
11210
ad7e718c
JB		 11211static struct sk_buff *
11212__cfg80211_alloc_vendor_skb(struct cfg80211_registered_device *rdev,
6c09e791
AK		 11213 struct wireless_dev *wdev, int approxlen,
11214 u32 portid, u32 seq, enum nl80211_commands cmd,
567ffc35
JB		 11215 enum nl80211_attrs attr,
11216 const struct nl80211_vendor_cmd_info *info,
11217 gfp_t gfp)
ad7e718c
JB		 11218{
11219 struct sk_buff *skb;
11220 void *hdr;
11221 struct nlattr *data;
11222
11223 skb = nlmsg_new(approxlen + 100, gfp);
11224 if (!skb)
11225 return NULL;
11226
11227 hdr = nl80211hdr_put(skb, portid, seq, 0, cmd);
11228 if (!hdr) {
11229 kfree_skb(skb);
11230 return NULL;
11231 }
11232
11233 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
11234 goto nla_put_failure;
567ffc35
JB		 11235
11236 if (info) {
11237 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_ID,
11238 info->vendor_id))
11239 goto nla_put_failure;
11240 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_SUBCMD,
11241 info->subcmd))
11242 goto nla_put_failure;
11243 }
11244
6c09e791 11245 if (wdev) {
2dad624e
ND		 11246 if (nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
11247 wdev_id(wdev), NL80211_ATTR_PAD))
6c09e791
AK		 11248 goto nla_put_failure;
11249 if (wdev->netdev &&
11250 nla_put_u32(skb, NL80211_ATTR_IFINDEX,
11251 wdev->netdev->ifindex))
11252 goto nla_put_failure;
11253 }
11254
ae0be8de 11255 data = nla_nest_start_noflag(skb, attr);
76e1fb4b
JB		 11256 if (!data)
11257 goto nla_put_failure;
ad7e718c
JB		 11258
11259 ((void **)skb->cb)[0] = rdev;
11260 ((void **)skb->cb)[1] = hdr;
11261 ((void **)skb->cb)[2] = data;
11262
11263 return skb;
11264
11265 nla_put_failure:
11266 kfree_skb(skb);
11267 return NULL;
11268}
f4e583c8 11269
e03ad6ea 11270struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
6c09e791 11271 struct wireless_dev *wdev,
e03ad6ea
JB		 11272 enum nl80211_commands cmd,
11273 enum nl80211_attrs attr,
55c1fdf0 11274 unsigned int portid,
e03ad6ea
JB		 11275 int vendor_event_idx,
11276 int approxlen, gfp_t gfp)
11277{
f26cbf40 11278 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
e03ad6ea
JB		 11279 const struct nl80211_vendor_cmd_info *info;
11280
11281 switch (cmd) {
11282 case NL80211_CMD_TESTMODE:
11283 if (WARN_ON(vendor_event_idx != -1))
11284 return NULL;
11285 info = NULL;
11286 break;
11287 case NL80211_CMD_VENDOR:
11288 if (WARN_ON(vendor_event_idx < 0 ||
11289 vendor_event_idx >= wiphy->n_vendor_events))
11290 return NULL;
11291 info = &wiphy->vendor_events[vendor_event_idx];
11292 break;
11293 default:
11294 WARN_ON(1);
11295 return NULL;
11296 }
11297
55c1fdf0 11298 return __cfg80211_alloc_vendor_skb(rdev, wdev, approxlen, portid, 0,
e03ad6ea
JB		 11299 cmd, attr, info, gfp);
11300}
11301EXPORT_SYMBOL(__cfg80211_alloc_event_skb);
11302
11303void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp)
11304{
11305 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
11306 void *hdr = ((void **)skb->cb)[1];
55c1fdf0 11307 struct nlmsghdr *nlhdr = nlmsg_hdr(skb);
e03ad6ea
JB		 11308 struct nlattr *data = ((void **)skb->cb)[2];
11309 enum nl80211_multicast_groups mcgrp = NL80211_MCGRP_TESTMODE;
11310
bd8c78e7
JB		 11311 /* clear CB data for netlink core to own from now on */
11312 memset(skb->cb, 0, sizeof(skb->cb));
11313
e03ad6ea
JB		 11314 nla_nest_end(skb, data);
11315 genlmsg_end(skb, hdr);
11316
55c1fdf0
JB		 11317 if (nlhdr->nlmsg_pid) {
11318 genlmsg_unicast(wiphy_net(&rdev->wiphy), skb,
11319 nlhdr->nlmsg_pid);
11320 } else {
11321 if (data->nla_type == NL80211_ATTR_VENDOR_DATA)
11322 mcgrp = NL80211_MCGRP_VENDOR;
e03ad6ea 11323
55c1fdf0
JB		 11324 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
11325 skb, 0, mcgrp, gfp);
11326 }
e03ad6ea
JB		 11327}
11328EXPORT_SYMBOL(__cfg80211_send_event_skb);
11329
aff89a9b 11330#ifdef CONFIG_NL80211_TESTMODE
aff89a9b
JB		 11331static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
11332{
4c476991 11333 struct cfg80211_registered_device *rdev = info->user_ptr[0];
a05829a7 11334 struct wireless_dev *wdev;
aff89a9b
JB		 11335 int err;
11336
a05829a7
JB		 11337 lockdep_assert_held(&rdev->wiphy.mtx);
11338
11339 wdev = __cfg80211_wdev_from_attrs(rdev, genl_info_net(info),
11340 info->attrs);
11341
fc73f11f
DS		 11342 if (!rdev->ops->testmode_cmd)
11343 return -EOPNOTSUPP;
11344
11345 if (IS_ERR(wdev)) {
11346 err = PTR_ERR(wdev);
11347 if (err != -EINVAL)
11348 return err;
11349 wdev = NULL;
11350 } else if (wdev->wiphy != &rdev->wiphy) {
11351 return -EINVAL;
11352 }
11353
aff89a9b
JB		 11354 if (!info->attrs[NL80211_ATTR_TESTDATA])
11355 return -EINVAL;
11356
ad7e718c 11357 rdev->cur_cmd_info = info;
fc73f11f 11358 err = rdev_testmode_cmd(rdev, wdev,
aff89a9b
JB		 11359 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
11360 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
ad7e718c 11361 rdev->cur_cmd_info = NULL;
aff89a9b 11362
aff89a9b
JB		 11363 return err;
11364}
11365
71063f0e
WYG		 11366static int nl80211_testmode_dump(struct sk_buff *skb,
11367 struct netlink_callback *cb)
11368{
00918d33 11369 struct cfg80211_registered_device *rdev;
50508d94 11370 struct nlattr **attrbuf = NULL;
71063f0e
WYG		 11371 int err;
11372 long phy_idx;
11373 void *data = NULL;
11374 int data_len = 0;
11375
5fe231e8
JB		 11376 rtnl_lock();
11377
71063f0e
WYG		 11378 if (cb->args[0]) {
11379 /*
11380 * 0 is a valid index, but not valid for args[0],
11381 * so we need to offset by 1.
11382 */
11383 phy_idx = cb->args[0] - 1;
a4956dca
LC		 11384
11385 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
11386 if (!rdev) {
11387 err = -ENOENT;
11388 goto out_err;
11389 }
71063f0e 11390 } else {
50508d94
JB		 11391 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
11392 GFP_KERNEL);
11393 if (!attrbuf) {
11394 err = -ENOMEM;
11395 goto out_err;
11396 }
c90c39da 11397
8cb08174
JB		 11398 err = nlmsg_parse_deprecated(cb->nlh,
11399 GENL_HDRLEN + nl80211_fam.hdrsize,
11400 attrbuf, nl80211_fam.maxattr,
11401 nl80211_policy, NULL);
71063f0e 11402 if (err)
5fe231e8 11403 goto out_err;
00918d33 11404
c90c39da 11405 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
2bd7e35d 11406 if (IS_ERR(rdev)) {
5fe231e8
JB		 11407 err = PTR_ERR(rdev);
11408 goto out_err;
00918d33 11409 }
2bd7e35d 11410 phy_idx = rdev->wiphy_idx;
2bd7e35d 11411
c90c39da
JB		 11412 if (attrbuf[NL80211_ATTR_TESTDATA])
11413 cb->args[1] = (long)attrbuf[NL80211_ATTR_TESTDATA];
71063f0e
WYG		 11414 }
11415
11416 if (cb->args[1]) {
11417 data = nla_data((void *)cb->args[1]);
11418 data_len = nla_len((void *)cb->args[1]);
11419 }
11420
00918d33 11421 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 11422 err = -EOPNOTSUPP;
11423 goto out_err;
11424 }
11425
11426 while (1) {
15e47304 11427 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 11428 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11429 NL80211_CMD_TESTMODE);
11430 struct nlattr *tmdata;
11431
cb35fba3
DC		 11432 if (!hdr)
11433 break;
11434
9360ffd1 11435 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 11436 genlmsg_cancel(skb, hdr);
11437 break;
11438 }
11439
ae0be8de 11440 tmdata = nla_nest_start_noflag(skb, NL80211_ATTR_TESTDATA);
71063f0e
WYG		 11441 if (!tmdata) {
11442 genlmsg_cancel(skb, hdr);
11443 break;
11444 }
e35e4d28 11445 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 11446 nla_nest_end(skb, tmdata);
11447
11448 if (err == -ENOBUFS || err == -ENOENT) {
11449 genlmsg_cancel(skb, hdr);
11450 break;
11451 } else if (err) {
11452 genlmsg_cancel(skb, hdr);
11453 goto out_err;
11454 }
11455
11456 genlmsg_end(skb, hdr);
11457 }
11458
11459 err = skb->len;
11460 /* see above */
11461 cb->args[0] = phy_idx + 1;
11462 out_err:
50508d94 11463 kfree(attrbuf);
5fe231e8 11464 rtnl_unlock();
71063f0e
WYG		 11465 return err;
11466}
aff89a9b
JB		 11467#endif
11468
b23aa676
SO		 11469static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
11470{
4c476991
JB		 11471 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11472 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 11473 struct cfg80211_connect_params connect;
11474 struct wiphy *wiphy;
fffd0934 11475 struct cfg80211_cached_keys *connkeys = NULL;
942ba88b 11476 u32 freq = 0;
b23aa676
SO		 11477 int err;
11478
11479 memset(&connect, 0, sizeof(connect));
11480
b23aa676
SO		 11481 if (!info->attrs[NL80211_ATTR_SSID] ||
11482 !nla_len(info->attrs[NL80211_ATTR_SSID]))
11483 return -EINVAL;
11484
11485 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
11486 connect.auth_type =
11487 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 11488 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
11489 NL80211_CMD_CONNECT))
b23aa676
SO		 11490 return -EINVAL;
11491 } else
11492 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
11493
11494 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
11495
3a00df57
AS		 11496 if (info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS] &&
11497 !wiphy_ext_feature_isset(&rdev->wiphy,
11498 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
11499 return -EINVAL;
11500 connect.want_1x = info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS];
11501
c0692b8f 11502 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 11503 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 11504 if (err)
11505 return err;
b23aa676 11506
074ac8df 11507 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11508 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11509 return -EOPNOTSUPP;
b23aa676 11510
79c97e97 11511 wiphy = &rdev->wiphy;
b23aa676 11512
4486ea98
BS		 11513 connect.bg_scan_period = -1;
11514 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
11515 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
11516 connect.bg_scan_period =
11517 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
11518 }
11519
b23aa676
SO		 11520 if (info->attrs[NL80211_ATTR_MAC])
11521 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
1df4a510
JM		 11522 else if (info->attrs[NL80211_ATTR_MAC_HINT])
11523 connect.bssid_hint =
11524 nla_data(info->attrs[NL80211_ATTR_MAC_HINT]);
b23aa676
SO		 11525 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11526 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11527
11528 if (info->attrs[NL80211_ATTR_IE]) {
11529 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11530 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11531 }
11532
cee00a95
JM		 11533 if (info->attrs[NL80211_ATTR_USE_MFP]) {
11534 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
65026002
EG		 11535 if (connect.mfp == NL80211_MFP_OPTIONAL &&
11536 !wiphy_ext_feature_isset(&rdev->wiphy,
11537 NL80211_EXT_FEATURE_MFP_OPTIONAL))
11538 return -EOPNOTSUPP;
cee00a95
JM		 11539 } else {
11540 connect.mfp = NL80211_MFP_NO;
11541 }
11542
ba6fbacf
JM		 11543 if (info->attrs[NL80211_ATTR_PREV_BSSID])
11544 connect.prev_bssid =
11545 nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
11546
942ba88b
TP		 11547 if (info->attrs[NL80211_ATTR_WIPHY_FREQ])
11548 freq = MHZ_TO_KHZ(nla_get_u32(
11549 info->attrs[NL80211_ATTR_WIPHY_FREQ]));
11550 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
11551 freq +=
11552 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
11553
11554 if (freq) {
11555 connect.channel = nl80211_get_valid_chan(wiphy, freq);
664834de 11556 if (!connect.channel)
1df4a510
JM		 11557 return -EINVAL;
11558 } else if (info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]) {
942ba88b
TP		 11559 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]);
11560 freq = MHZ_TO_KHZ(freq);
11561 connect.channel_hint = nl80211_get_valid_chan(wiphy, freq);
664834de 11562 if (!connect.channel_hint)
4c476991 11563 return -EINVAL;
b23aa676
SO		 11564 }
11565
2a38075c
AAL		 11566 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
11567 connect.edmg.channels =
11568 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
11569
11570 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
11571 connect.edmg.bw_config =
11572 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
11573 }
11574
fffd0934 11575 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
768075eb 11576 connkeys = nl80211_parse_connkeys(rdev, info, NULL);
4c476991
JB		 11577 if (IS_ERR(connkeys))
11578 return PTR_ERR(connkeys);
fffd0934
JB		 11579 }
11580
7e7c8926
BG		 11581 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
11582 connect.flags |= ASSOC_REQ_DISABLE_HT;
11583
11584 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
11585 memcpy(&connect.ht_capa_mask,
11586 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
11587 sizeof(connect.ht_capa_mask));
11588
11589 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e 11590 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
453431a5 11591 kfree_sensitive(connkeys);
7e7c8926 11592 return -EINVAL;
b4e4f47e 11593 }
7e7c8926
BG		 11594 memcpy(&connect.ht_capa,
11595 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
11596 sizeof(connect.ht_capa));
11597 }
11598
ee2aca34
JB		 11599 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
11600 connect.flags |= ASSOC_REQ_DISABLE_VHT;
11601
b6db0f89
BG		 11602 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HE]))
11603 connect.flags |= ASSOC_REQ_DISABLE_HE;
11604
36f84235
MS		 11605 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_EHT]))
11606 connect.flags |= ASSOC_REQ_DISABLE_EHT;
11607
ee2aca34
JB		 11608 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
11609 memcpy(&connect.vht_capa_mask,
11610 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
11611 sizeof(connect.vht_capa_mask));
11612
11613 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
11614 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]) {
453431a5 11615 kfree_sensitive(connkeys);
ee2aca34
JB		 11616 return -EINVAL;
11617 }
11618 memcpy(&connect.vht_capa,
11619 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
11620 sizeof(connect.vht_capa));
11621 }
11622
bab5ab7d 11623 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 11624 if (!((rdev->wiphy.features &
11625 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
11626 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
11627 !wiphy_ext_feature_isset(&rdev->wiphy,
11628 NL80211_EXT_FEATURE_RRM)) {
453431a5 11629 kfree_sensitive(connkeys);
bab5ab7d 11630 return -EINVAL;
707554b4 11631 }
bab5ab7d
AK		 11632 connect.flags |= ASSOC_REQ_USE_RRM;
11633 }
11634
34d50519 11635 connect.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
57fbcce3 11636 if (connect.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
453431a5 11637 kfree_sensitive(connkeys);
34d50519
LD		 11638 return -EOPNOTSUPP;
11639 }
11640
38de03d2
AS		 11641 if (info->attrs[NL80211_ATTR_BSS_SELECT]) {
11642 /* bss selection makes no sense if bssid is set */
11643 if (connect.bssid) {
453431a5 11644 kfree_sensitive(connkeys);
38de03d2
AS		 11645 return -EINVAL;
11646 }
11647
11648 err = parse_bss_select(info->attrs[NL80211_ATTR_BSS_SELECT],
11649 wiphy, &connect.bss_select);
11650 if (err) {
453431a5 11651 kfree_sensitive(connkeys);
38de03d2
AS		 11652 return err;
11653 }
11654 }
11655
a3caf744
VK		 11656 if (wiphy_ext_feature_isset(&rdev->wiphy,
11657 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
11658 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
11659 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
11660 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
11661 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11662 connect.fils_erp_username =
11663 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11664 connect.fils_erp_username_len =
11665 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11666 connect.fils_erp_realm =
11667 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11668 connect.fils_erp_realm_len =
11669 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11670 connect.fils_erp_next_seq_num =
11671 nla_get_u16(
11672 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
11673 connect.fils_erp_rrk =
11674 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11675 connect.fils_erp_rrk_len =
11676 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11677 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
11678 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
11679 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
11680 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
453431a5 11681 kfree_sensitive(connkeys);
a3caf744
VK		 11682 return -EINVAL;
11683 }
11684
40cbfa90
SD		 11685 if (nla_get_flag(info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])) {
11686 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
453431a5 11687 kfree_sensitive(connkeys);
40cbfa90
SD		 11688 GENL_SET_ERR_MSG(info,
11689 "external auth requires connection ownership");
11690 return -EINVAL;
11691 }
11692 connect.flags |= CONNECT_REQ_EXTERNAL_AUTH_SUPPORT;
11693 }
11694
efbabc11
VJ		 11695 if (nla_get_flag(info->attrs[NL80211_ATTR_MLO_SUPPORT]))
11696 connect.flags |= CONNECT_REQ_MLO_SUPPORT;
11697
83739b03 11698 wdev_lock(dev->ieee80211_ptr);
bd2522b1 11699
4ce2bd9c
JM		 11700 err = cfg80211_connect(rdev, dev, &connect, connkeys,
11701 connect.prev_bssid);
fffd0934 11702 if (err)
453431a5 11703 kfree_sensitive(connkeys);
bd2522b1
AZ		 11704
11705 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
11706 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11707 if (connect.bssid)
11708 memcpy(dev->ieee80211_ptr->disconnect_bssid,
11709 connect.bssid, ETH_ALEN);
11710 else
3b1648f1 11711 eth_zero_addr(dev->ieee80211_ptr->disconnect_bssid);
bd2522b1
AZ		 11712 }
11713
11714 wdev_unlock(dev->ieee80211_ptr);
11715
b23aa676
SO		 11716 return err;
11717}
11718
088e8df8 11719static int nl80211_update_connect_params(struct sk_buff *skb,
11720 struct genl_info *info)
11721{
11722 struct cfg80211_connect_params connect = {};
11723 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11724 struct net_device *dev = info->user_ptr[1];
11725 struct wireless_dev *wdev = dev->ieee80211_ptr;
7f9a3e15
VK		 11726 bool fils_sk_offload;
11727 u32 auth_type;
088e8df8 11728 u32 changed = 0;
11729 int ret;
11730
11731 if (!rdev->ops->update_connect_params)
11732 return -EOPNOTSUPP;
11733
11734 if (info->attrs[NL80211_ATTR_IE]) {
088e8df8 11735 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
11736 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
11737 changed |= UPDATE_ASSOC_IES;
11738 }
11739
7f9a3e15
VK		 11740 fils_sk_offload = wiphy_ext_feature_isset(&rdev->wiphy,
11741 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD);
11742
11743 /*
11744 * when driver supports fils-sk offload all attributes must be
11745 * provided. So the else covers "fils-sk-not-all" and
11746 * "no-fils-sk-any".
11747 */
11748 if (fils_sk_offload &&
11749 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
11750 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
11751 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
11752 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11753 connect.fils_erp_username =
11754 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11755 connect.fils_erp_username_len =
11756 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
11757 connect.fils_erp_realm =
11758 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11759 connect.fils_erp_realm_len =
11760 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
11761 connect.fils_erp_next_seq_num =
11762 nla_get_u16(
11763 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
11764 connect.fils_erp_rrk =
11765 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11766 connect.fils_erp_rrk_len =
11767 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
11768 changed |= UPDATE_FILS_ERP_INFO;
11769 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
11770 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
11771 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
11772 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
11773 return -EINVAL;
11774 }
11775
11776 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
11777 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
11778 if (!nl80211_valid_auth_type(rdev, auth_type,
11779 NL80211_CMD_CONNECT))
11780 return -EINVAL;
11781
11782 if (auth_type == NL80211_AUTHTYPE_FILS_SK &&
11783 fils_sk_offload && !(changed & UPDATE_FILS_ERP_INFO))
11784 return -EINVAL;
11785
11786 connect.auth_type = auth_type;
11787 changed |= UPDATE_AUTH_TYPE;
11788 }
11789
088e8df8 11790 wdev_lock(dev->ieee80211_ptr);
7b0a0e3c 11791 if (!wdev->connected)
088e8df8 11792 ret = -ENOLINK;
11793 else
11794 ret = rdev_update_connect_params(rdev, dev, &connect, changed);
11795 wdev_unlock(dev->ieee80211_ptr);
11796
11797 return ret;
11798}
11799
b23aa676
SO		 11800static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
11801{
4c476991
JB		 11802 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11803 struct net_device *dev = info->user_ptr[1];
b23aa676 11804 u16 reason;
83739b03 11805 int ret;
b23aa676 11806
bad29297
AZ		 11807 if (dev->ieee80211_ptr->conn_owner_nlportid &&
11808 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
11809 return -EPERM;
11810
b23aa676
SO		 11811 if (!info->attrs[NL80211_ATTR_REASON_CODE])
11812 reason = WLAN_REASON_DEAUTH_LEAVING;
11813 else
11814 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
11815
11816 if (reason == 0)
11817 return -EINVAL;
11818
074ac8df 11819 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11820 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11821 return -EOPNOTSUPP;
b23aa676 11822
83739b03
JB		 11823 wdev_lock(dev->ieee80211_ptr);
11824 ret = cfg80211_disconnect(rdev, dev, reason, true);
11825 wdev_unlock(dev->ieee80211_ptr);
11826 return ret;
b23aa676
SO		 11827}
11828
463d0183
JB		 11829static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
11830{
4c476991 11831 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 11832 struct net *net;
11833 int err;
463d0183 11834
4b681c82
VK		 11835 if (info->attrs[NL80211_ATTR_PID]) {
11836 u32 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
11837
11838 net = get_net_ns_by_pid(pid);
11839 } else if (info->attrs[NL80211_ATTR_NETNS_FD]) {
11840 u32 fd = nla_get_u32(info->attrs[NL80211_ATTR_NETNS_FD]);
463d0183 11841
4b681c82
VK		 11842 net = get_net_ns_by_fd(fd);
11843 } else {
11844 return -EINVAL;
11845 }
463d0183 11846
4c476991
JB		 11847 if (IS_ERR(net))
11848 return PTR_ERR(net);
463d0183
JB		 11849
11850 err = 0;
11851
11852 /* check if anything to do */
4c476991
JB		 11853 if (!net_eq(wiphy_net(&rdev->wiphy), net))
11854 err = cfg80211_switch_netns(rdev, net);
463d0183 11855
463d0183 11856 put_net(net);
463d0183
JB		 11857 return err;
11858}
11859
67fbb16b
SO		 11860static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
11861{
4c476991 11862 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 11863 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
11864 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 11865 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 11866 struct cfg80211_pmksa pmksa;
11867
11868 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
11869
67fbb16b
SO		 11870 if (!info->attrs[NL80211_ATTR_PMKID])
11871 return -EINVAL;
11872
67fbb16b 11873 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
a3caf744
VK		 11874
11875 if (info->attrs[NL80211_ATTR_MAC]) {
11876 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
11877 } else if (info->attrs[NL80211_ATTR_SSID] &&
11878 info->attrs[NL80211_ATTR_FILS_CACHE_ID] &&
11879 (info->genlhdr->cmd == NL80211_CMD_DEL_PMKSA ||
11880 info->attrs[NL80211_ATTR_PMK])) {
11881 pmksa.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
11882 pmksa.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
11883 pmksa.cache_id =
11884 nla_data(info->attrs[NL80211_ATTR_FILS_CACHE_ID]);
11885 } else {
11886 return -EINVAL;
11887 }
11888 if (info->attrs[NL80211_ATTR_PMK]) {
11889 pmksa.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
11890 pmksa.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
11891 }
67fbb16b 11892
7fc82af8
VJ		 11893 if (info->attrs[NL80211_ATTR_PMK_LIFETIME])
11894 pmksa.pmk_lifetime =
11895 nla_get_u32(info->attrs[NL80211_ATTR_PMK_LIFETIME]);
11896
11897 if (info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD])
11898 pmksa.pmk_reauth_threshold =
11899 nla_get_u8(
11900 info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD]);
11901
074ac8df 11902 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6c900360
LD		 11903 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
11904 !(dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP &&
11905 wiphy_ext_feature_isset(&rdev->wiphy,
11906 NL80211_EXT_FEATURE_AP_PMKSA_CACHING)))
4c476991 11907 return -EOPNOTSUPP;
67fbb16b
SO		 11908
11909 switch (info->genlhdr->cmd) {
11910 case NL80211_CMD_SET_PMKSA:
11911 rdev_ops = rdev->ops->set_pmksa;
11912 break;
11913 case NL80211_CMD_DEL_PMKSA:
11914 rdev_ops = rdev->ops->del_pmksa;
11915 break;
11916 default:
11917 WARN_ON(1);
11918 break;
11919 }
11920
4c476991
JB		 11921 if (!rdev_ops)
11922 return -EOPNOTSUPP;
67fbb16b 11923
4c476991 11924 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 11925}
11926
11927static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
11928{
4c476991
JB		 11929 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11930 struct net_device *dev = info->user_ptr[1];
67fbb16b 11931
074ac8df 11932 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11933 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
11934 return -EOPNOTSUPP;
67fbb16b 11935
4c476991
JB		 11936 if (!rdev->ops->flush_pmksa)
11937 return -EOPNOTSUPP;
67fbb16b 11938
e35e4d28 11939 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 11940}
11941
109086ce
AN		 11942static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
11943{
11944 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11945 struct net_device *dev = info->user_ptr[1];
11946 u8 action_code, dialog_token;
df942e7b 11947 u32 peer_capability = 0;
109086ce
AN		 11948 u16 status_code;
11949 u8 *peer;
31fa97c5 11950 bool initiator;
109086ce
AN		 11951
11952 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
11953 !rdev->ops->tdls_mgmt)
11954 return -EOPNOTSUPP;
11955
11956 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
11957 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
11958 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
11959 !info->attrs[NL80211_ATTR_IE] ||
11960 !info->attrs[NL80211_ATTR_MAC])
11961 return -EINVAL;
11962
11963 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
11964 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
11965 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
11966 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
31fa97c5 11967 initiator = nla_get_flag(info->attrs[NL80211_ATTR_TDLS_INITIATOR]);
df942e7b
SDU		 11968 if (info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY])
11969 peer_capability =
11970 nla_get_u32(info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY]);
109086ce 11971
e35e4d28 11972 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
df942e7b 11973 dialog_token, status_code, peer_capability,
31fa97c5 11974 initiator,
e35e4d28
HG		 11975 nla_data(info->attrs[NL80211_ATTR_IE]),
11976 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 11977}
11978
11979static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
11980{
11981 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11982 struct net_device *dev = info->user_ptr[1];
11983 enum nl80211_tdls_operation operation;
11984 u8 *peer;
11985
11986 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
11987 !rdev->ops->tdls_oper)
11988 return -EOPNOTSUPP;
11989
11990 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
11991 !info->attrs[NL80211_ATTR_MAC])
11992 return -EINVAL;
11993
11994 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
11995 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
11996
e35e4d28 11997 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 11998}
11999
9588bbd5
JM		 12000static int nl80211_remain_on_channel(struct sk_buff *skb,
12001 struct genl_info *info)
12002{
4c476991 12003 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c 12004 unsigned int link_id = nl80211_link_id(info->attrs);
71bbc994 12005 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 12006 struct cfg80211_chan_def chandef;
9588bbd5
JM		 12007 struct sk_buff *msg;
12008 void *hdr;
12009 u64 cookie;
683b6d3b 12010 u32 duration;
9588bbd5
JM		 12011 int err;
12012
12013 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
12014 !info->attrs[NL80211_ATTR_DURATION])
12015 return -EINVAL;
12016
12017 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
12018
ebf348fc
JB		 12019 if (!rdev->ops->remain_on_channel ||
12020 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
12021 return -EOPNOTSUPP;
12022
9588bbd5 12023 /*
ebf348fc
JB		 12024 * We should be on that channel for at least a minimum amount of
12025 * time (10ms) but no longer than the driver supports.
9588bbd5 12026 */
ebf348fc 12027 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 12028 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 12029 return -EINVAL;
12030
683b6d3b
JB		 12031 err = nl80211_parse_chandef(rdev, info, &chandef);
12032 if (err)
12033 return err;
9588bbd5 12034
34373d12 12035 wdev_lock(wdev);
7b0a0e3c
JB		 12036 if (!cfg80211_off_channel_oper_allowed(wdev, chandef.chan)) {
12037 const struct cfg80211_chan_def *oper_chandef, *compat_chandef;
12038
12039 oper_chandef = wdev_chandef(wdev, link_id);
12040
12041 if (WARN_ON(!oper_chandef)) {
12042 /* cannot happen since we must beacon to get here */
12043 WARN_ON(1);
12044 wdev_unlock(wdev);
12045 return -EBUSY;
12046 }
12047
12048 /* note: returns first one if identical chandefs */
12049 compat_chandef = cfg80211_chandef_compatible(&chandef,
12050 oper_chandef);
12051
34373d12
VT		 12052 if (compat_chandef != &chandef) {
12053 wdev_unlock(wdev);
12054 return -EBUSY;
12055 }
12056 }
12057 wdev_unlock(wdev);
12058
9588bbd5 12059 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 12060 if (!msg)
12061 return -ENOMEM;
9588bbd5 12062
15e47304 12063 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5 12064 NL80211_CMD_REMAIN_ON_CHANNEL);
cb35fba3
DC		 12065 if (!hdr) {
12066 err = -ENOBUFS;
9588bbd5
JM		 12067 goto free_msg;
12068 }
12069
683b6d3b
JB		 12070 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
12071 duration, &cookie);
9588bbd5
JM		 12072
12073 if (err)
12074 goto free_msg;
12075
2dad624e
ND		 12076 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12077 NL80211_ATTR_PAD))
9360ffd1 12078 goto nla_put_failure;
9588bbd5
JM		 12079
12080 genlmsg_end(msg, hdr);
4c476991
JB		 12081
12082 return genlmsg_reply(msg, info);
9588bbd5
JM		 12083
12084 nla_put_failure:
12085 err = -ENOBUFS;
12086 free_msg:
12087 nlmsg_free(msg);
9588bbd5
JM		 12088 return err;
12089}
12090
12091static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
12092 struct genl_info *info)
12093{
4c476991 12094 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12095 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 12096 u64 cookie;
9588bbd5
JM		 12097
12098 if (!info->attrs[NL80211_ATTR_COOKIE])
12099 return -EINVAL;
12100
4c476991
JB		 12101 if (!rdev->ops->cancel_remain_on_channel)
12102 return -EOPNOTSUPP;
9588bbd5 12103
9588bbd5
JM		 12104 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
12105
e35e4d28 12106 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 12107}
12108
13ae75b1
JM		 12109static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
12110 struct genl_info *info)
12111{
13ae75b1 12112 struct cfg80211_bitrate_mask mask;
7b0a0e3c 12113 unsigned int link_id = nl80211_link_id(info->attrs);
a7c7fbff 12114 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 12115 struct net_device *dev = info->user_ptr[1];
f971e188 12116 struct wireless_dev *wdev = dev->ieee80211_ptr;
a7c7fbff 12117 int err;
13ae75b1 12118
4c476991
JB		 12119 if (!rdev->ops->set_bitrate_mask)
12120 return -EOPNOTSUPP;
13ae75b1 12121
f971e188 12122 wdev_lock(wdev);
9a5f6488 12123 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
eb89a6a6 12124 NL80211_ATTR_TX_RATES, &mask,
7b0a0e3c 12125 dev, true, link_id);
a7c7fbff 12126 if (err)
f971e188 12127 goto out;
13ae75b1 12128
7b0a0e3c 12129 err = rdev_set_bitrate_mask(rdev, dev, link_id, NULL, &mask);
f971e188
JB		 12130out:
12131 wdev_unlock(wdev);
12132 return err;
13ae75b1
JM		 12133}
12134
2e161f78 12135static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 12136{
4c476991 12137 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12138 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 12139 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 12140
12141 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
12142 return -EINVAL;
12143
2e161f78
JB		 12144 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
12145 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 12146
71bbc994
JB		 12147 switch (wdev->iftype) {
12148 case NL80211_IFTYPE_STATION:
12149 case NL80211_IFTYPE_ADHOC:
12150 case NL80211_IFTYPE_P2P_CLIENT:
12151 case NL80211_IFTYPE_AP:
12152 case NL80211_IFTYPE_AP_VLAN:
12153 case NL80211_IFTYPE_MESH_POINT:
12154 case NL80211_IFTYPE_P2P_GO:
98104fde 12155 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 12156 break;
cb3b7d87 12157 case NL80211_IFTYPE_NAN:
71bbc994 12158 default:
4c476991 12159 return -EOPNOTSUPP;
71bbc994 12160 }
026331c4
JM		 12161
12162 /* not much point in registering if we can't reply */
4c476991
JB		 12163 if (!rdev->ops->mgmt_tx)
12164 return -EOPNOTSUPP;
026331c4 12165
9dba48a6
JB		 12166 if (info->attrs[NL80211_ATTR_RECEIVE_MULTICAST] &&
12167 !wiphy_ext_feature_isset(&rdev->wiphy,
12168 NL80211_EXT_FEATURE_MULTICAST_REGISTRATIONS)) {
12169 GENL_SET_ERR_MSG(info,
12170 "multicast RX registrations are not supported");
12171 return -EOPNOTSUPP;
12172 }
12173
15e47304 12174 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
ff74c51e
IP		 12175 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
12176 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]),
9dba48a6 12177 info->attrs[NL80211_ATTR_RECEIVE_MULTICAST],
ff74c51e 12178 info->extack);
026331c4
JM		 12179}
12180
2e161f78 12181static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 12182{
4c476991 12183 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12184 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 12185 struct cfg80211_chan_def chandef;
026331c4 12186 int err;
d64d373f 12187 void *hdr = NULL;
026331c4 12188 u64 cookie;
e247bd90 12189 struct sk_buff *msg = NULL;
b176e629
AO		 12190 struct cfg80211_mgmt_tx_params params = {
12191 .dont_wait_for_ack =
12192 info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK],
12193 };
026331c4 12194
683b6d3b 12195 if (!info->attrs[NL80211_ATTR_FRAME])
026331c4
JM		 12196 return -EINVAL;
12197
4c476991
JB		 12198 if (!rdev->ops->mgmt_tx)
12199 return -EOPNOTSUPP;
026331c4 12200
71bbc994 12201 switch (wdev->iftype) {
ea141b75
AQ		 12202 case NL80211_IFTYPE_P2P_DEVICE:
12203 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
12204 return -EINVAL;
d7832c71 12205 break;
71bbc994
JB		 12206 case NL80211_IFTYPE_STATION:
12207 case NL80211_IFTYPE_ADHOC:
12208 case NL80211_IFTYPE_P2P_CLIENT:
12209 case NL80211_IFTYPE_AP:
12210 case NL80211_IFTYPE_AP_VLAN:
12211 case NL80211_IFTYPE_MESH_POINT:
12212 case NL80211_IFTYPE_P2P_GO:
12213 break;
cb3b7d87 12214 case NL80211_IFTYPE_NAN:
71bbc994 12215 default:
4c476991 12216 return -EOPNOTSUPP;
71bbc994 12217 }
026331c4 12218
f7ca38df 12219 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 12220 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df 12221 return -EINVAL;
b176e629 12222 params.wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 12223
12224 /*
12225 * We should wait on the channel for at least a minimum amount
12226 * of time (10ms) but no longer than the driver supports.
12227 */
b176e629
AO		 12228 if (params.wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
12229 params.wait > rdev->wiphy.max_remain_on_channel_duration)
ebf348fc 12230 return -EINVAL;
f7ca38df
JB		 12231 }
12232
b176e629 12233 params.offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
f7ca38df 12234
b176e629 12235 if (params.offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
7c4ef712
JB		 12236 return -EINVAL;
12237
b176e629 12238 params.no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
e9f935e3 12239
ea141b75
AQ		 12240 /* get the channel if any has been specified, otherwise pass NULL to
12241 * the driver. The latter will use the current one
12242 */
12243 chandef.chan = NULL;
12244 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
12245 err = nl80211_parse_chandef(rdev, info, &chandef);
12246 if (err)
12247 return err;
12248 }
12249
b176e629 12250 if (!chandef.chan && params.offchan)
ea141b75 12251 return -EINVAL;
026331c4 12252
34373d12 12253 wdev_lock(wdev);
7b0a0e3c
JB		 12254 if (params.offchan &&
12255 !cfg80211_off_channel_oper_allowed(wdev, chandef.chan)) {
34373d12
VT		 12256 wdev_unlock(wdev);
12257 return -EBUSY;
12258 }
12259 wdev_unlock(wdev);
12260
34d22ce2
AO		 12261 params.buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
12262 params.len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
12263
12264 if (info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]) {
12265 int len = nla_len(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
12266 int i;
12267
12268 if (len % sizeof(u16))
12269 return -EINVAL;
12270
12271 params.n_csa_offsets = len / sizeof(u16);
12272 params.csa_offsets =
12273 nla_data(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
12274
12275 /* check that all the offsets fit the frame */
12276 for (i = 0; i < params.n_csa_offsets; i++) {
12277 if (params.csa_offsets[i] >= params.len)
12278 return -EINVAL;
12279 }
12280 }
12281
b176e629 12282 if (!params.dont_wait_for_ack) {
e247bd90
JB		 12283 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12284 if (!msg)
12285 return -ENOMEM;
026331c4 12286
15e47304 12287 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 12288 NL80211_CMD_FRAME);
cb35fba3
DC		 12289 if (!hdr) {
12290 err = -ENOBUFS;
e247bd90
JB		 12291 goto free_msg;
12292 }
026331c4 12293 }
e247bd90 12294
b176e629
AO		 12295 params.chan = chandef.chan;
12296 err = cfg80211_mlme_mgmt_tx(rdev, wdev, &params, &cookie);
026331c4
JM		 12297 if (err)
12298 goto free_msg;
12299
e247bd90 12300 if (msg) {
2dad624e
ND		 12301 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12302 NL80211_ATTR_PAD))
9360ffd1 12303 goto nla_put_failure;
026331c4 12304
e247bd90
JB		 12305 genlmsg_end(msg, hdr);
12306 return genlmsg_reply(msg, info);
12307 }
12308
12309 return 0;
026331c4
JM		 12310
12311 nla_put_failure:
12312 err = -ENOBUFS;
12313 free_msg:
12314 nlmsg_free(msg);
026331c4
JM		 12315 return err;
12316}
12317
f7ca38df
JB		 12318static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
12319{
12320 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 12321 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 12322 u64 cookie;
12323
12324 if (!info->attrs[NL80211_ATTR_COOKIE])
12325 return -EINVAL;
12326
12327 if (!rdev->ops->mgmt_tx_cancel_wait)
12328 return -EOPNOTSUPP;
12329
71bbc994
JB		 12330 switch (wdev->iftype) {
12331 case NL80211_IFTYPE_STATION:
12332 case NL80211_IFTYPE_ADHOC:
12333 case NL80211_IFTYPE_P2P_CLIENT:
12334 case NL80211_IFTYPE_AP:
12335 case NL80211_IFTYPE_AP_VLAN:
12336 case NL80211_IFTYPE_P2P_GO:
98104fde 12337 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 12338 break;
cb3b7d87 12339 case NL80211_IFTYPE_NAN:
71bbc994 12340 default:
f7ca38df 12341 return -EOPNOTSUPP;
71bbc994 12342 }
f7ca38df
JB		 12343
12344 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
12345
e35e4d28 12346 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 12347}
12348
ffb9eb3d
KV		 12349static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
12350{
4c476991 12351 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 12352 struct wireless_dev *wdev;
4c476991 12353 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 12354 u8 ps_state;
12355 bool state;
12356 int err;
12357
4c476991
JB		 12358 if (!info->attrs[NL80211_ATTR_PS_STATE])
12359 return -EINVAL;
ffb9eb3d
KV		 12360
12361 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
12362
ffb9eb3d
KV		 12363 wdev = dev->ieee80211_ptr;
12364
4c476991
JB		 12365 if (!rdev->ops->set_power_mgmt)
12366 return -EOPNOTSUPP;
ffb9eb3d
KV		 12367
12368 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
12369
12370 if (state == wdev->ps)
4c476991 12371 return 0;
ffb9eb3d 12372
e35e4d28 12373 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 12374 if (!err)
12375 wdev->ps = state;
ffb9eb3d
KV		 12376 return err;
12377}
12378
12379static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
12380{
4c476991 12381 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 12382 enum nl80211_ps_state ps_state;
12383 struct wireless_dev *wdev;
4c476991 12384 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 12385 struct sk_buff *msg;
12386 void *hdr;
12387 int err;
12388
ffb9eb3d
KV		 12389 wdev = dev->ieee80211_ptr;
12390
4c476991
JB		 12391 if (!rdev->ops->set_power_mgmt)
12392 return -EOPNOTSUPP;
ffb9eb3d
KV		 12393
12394 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 12395 if (!msg)
12396 return -ENOMEM;
ffb9eb3d 12397
15e47304 12398 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 12399 NL80211_CMD_GET_POWER_SAVE);
12400 if (!hdr) {
4c476991 12401 err = -ENOBUFS;
ffb9eb3d
KV		 12402 goto free_msg;
12403 }
12404
12405 if (wdev->ps)
12406 ps_state = NL80211_PS_ENABLED;
12407 else
12408 ps_state = NL80211_PS_DISABLED;
12409
9360ffd1
DM		 12410 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
12411 goto nla_put_failure;
ffb9eb3d
KV		 12412
12413 genlmsg_end(msg, hdr);
4c476991 12414 return genlmsg_reply(msg, info);
ffb9eb3d 12415
4c476991 12416 nla_put_failure:
ffb9eb3d 12417 err = -ENOBUFS;
4c476991 12418 free_msg:
ffb9eb3d 12419 nlmsg_free(msg);
ffb9eb3d
KV		 12420 return err;
12421}
12422
94e860f1
JB		 12423static const struct nla_policy
12424nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
4a4b8169 12425 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_BINARY },
d6dc1a38
JO		 12426 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
12427 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 12428 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
12429 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
12430 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
bee427b8 12431 [NL80211_ATTR_CQM_RSSI_LEVEL] = { .type = NLA_S32 },
d6dc1a38
JO		 12432};
12433
84f10708 12434static int nl80211_set_cqm_txe(struct genl_info *info,
d9d8b019 12435 u32 rate, u32 pkts, u32 intvl)
84f10708
TP		 12436{
12437 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84f10708 12438 struct net_device *dev = info->user_ptr[1];
1da5fcc8 12439 struct wireless_dev *wdev = dev->ieee80211_ptr;
84f10708 12440
d9d8b019 12441 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
84f10708
TP		 12442 return -EINVAL;
12443
84f10708
TP		 12444 if (!rdev->ops->set_cqm_txe_config)
12445 return -EOPNOTSUPP;
12446
12447 if (wdev->iftype != NL80211_IFTYPE_STATION &&
12448 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
12449 return -EOPNOTSUPP;
12450
e35e4d28 12451 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 12452}
12453
4a4b8169
AZ		 12454static int cfg80211_cqm_rssi_update(struct cfg80211_registered_device *rdev,
12455 struct net_device *dev)
12456{
12457 struct wireless_dev *wdev = dev->ieee80211_ptr;
12458 s32 last, low, high;
12459 u32 hyst;
1222a160 12460 int i, n, low_index;
4a4b8169
AZ		 12461 int err;
12462
12463 /* RSSI reporting disabled? */
12464 if (!wdev->cqm_config)
12465 return rdev_set_cqm_rssi_range_config(rdev, dev, 0, 0);
12466
12467 /*
12468 * Obtain current RSSI value if possible, if not and no RSSI threshold
12469 * event has been received yet, we should receive an event after a
12470 * connection is established and enough beacons received to calculate
12471 * the average.
12472 */
7b0a0e3c
JB		 12473 if (!wdev->cqm_config->last_rssi_event_value &&
12474 wdev->links[0].client.current_bss &&
4a4b8169 12475 rdev->ops->get_station) {
73887fd9 12476 struct station_info sinfo = {};
4a4b8169
AZ		 12477 u8 *mac_addr;
12478
7b0a0e3c 12479 mac_addr = wdev->links[0].client.current_bss->pub.bssid;
4a4b8169 12480
73887fd9
JB		 12481 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
12482 if (err)
4a4b8169
AZ		 12483 return err;
12484
df16737d 12485 cfg80211_sinfo_release_content(&sinfo);
397c657a 12486 if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_BEACON_SIGNAL_AVG))
4a4b8169 12487 wdev->cqm_config->last_rssi_event_value =
73887fd9 12488 (s8) sinfo.rx_beacon_signal_avg;
4a4b8169
AZ		 12489 }
12490
12491 last = wdev->cqm_config->last_rssi_event_value;
12492 hyst = wdev->cqm_config->rssi_hyst;
12493 n = wdev->cqm_config->n_rssi_thresholds;
12494
4b2c5a14
MH		 12495 for (i = 0; i < n; i++) {
12496 i = array_index_nospec(i, n);
4a4b8169
AZ		 12497 if (last < wdev->cqm_config->rssi_thresholds[i])
12498 break;
4b2c5a14 12499 }
4a4b8169 12500
1222a160
MH		 12501 low_index = i - 1;
12502 if (low_index >= 0) {
12503 low_index = array_index_nospec(low_index, n);
12504 low = wdev->cqm_config->rssi_thresholds[low_index] - hyst;
12505 } else {
12506 low = S32_MIN;
12507 }
12508 if (i < n) {
12509 i = array_index_nospec(i, n);
12510 high = wdev->cqm_config->rssi_thresholds[i] + hyst - 1;
12511 } else {
12512 high = S32_MAX;
12513 }
4a4b8169
AZ		 12514
12515 return rdev_set_cqm_rssi_range_config(rdev, dev, low, high);
12516}
12517
d6dc1a38 12518static int nl80211_set_cqm_rssi(struct genl_info *info,
4a4b8169
AZ		 12519 const s32 *thresholds, int n_thresholds,
12520 u32 hysteresis)
d6dc1a38 12521{
4c476991 12522 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 12523 struct net_device *dev = info->user_ptr[1];
1da5fcc8 12524 struct wireless_dev *wdev = dev->ieee80211_ptr;
4a4b8169
AZ		 12525 int i, err;
12526 s32 prev = S32_MIN;
d6dc1a38 12527
4a4b8169
AZ		 12528 /* Check all values negative and sorted */
12529 for (i = 0; i < n_thresholds; i++) {
12530 if (thresholds[i] > 0 || thresholds[i] <= prev)
12531 return -EINVAL;
d6dc1a38 12532
4a4b8169
AZ		 12533 prev = thresholds[i];
12534 }
d6dc1a38 12535
074ac8df 12536 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 12537 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
12538 return -EOPNOTSUPP;
d6dc1a38 12539
4a4b8169
AZ		 12540 wdev_lock(wdev);
12541 cfg80211_cqm_config_free(wdev);
12542 wdev_unlock(wdev);
12543
12544 if (n_thresholds <= 1 && rdev->ops->set_cqm_rssi_config) {
12545 if (n_thresholds == 0 || thresholds[0] == 0) /* Disabling */
12546 return rdev_set_cqm_rssi_config(rdev, dev, 0, 0);
12547
12548 return rdev_set_cqm_rssi_config(rdev, dev,
12549 thresholds[0], hysteresis);
12550 }
12551
12552 if (!wiphy_ext_feature_isset(&rdev->wiphy,
12553 NL80211_EXT_FEATURE_CQM_RSSI_LIST))
12554 return -EOPNOTSUPP;
12555
12556 if (n_thresholds == 1 && thresholds[0] == 0) /* Disabling */
12557 n_thresholds = 0;
12558
12559 wdev_lock(wdev);
12560 if (n_thresholds) {
12561 struct cfg80211_cqm_config *cqm_config;
12562
40f231e7
LB		 12563 cqm_config = kzalloc(struct_size(cqm_config, rssi_thresholds,
12564 n_thresholds),
12565 GFP_KERNEL);
4a4b8169
AZ		 12566 if (!cqm_config) {
12567 err = -ENOMEM;
12568 goto unlock;
12569 }
12570
12571 cqm_config->rssi_hyst = hysteresis;
12572 cqm_config->n_rssi_thresholds = n_thresholds;
12573 memcpy(cqm_config->rssi_thresholds, thresholds,
40f231e7
LB		 12574 flex_array_size(cqm_config, rssi_thresholds,
12575 n_thresholds));
4a4b8169
AZ		 12576
12577 wdev->cqm_config = cqm_config;
12578 }
12579
12580 err = cfg80211_cqm_rssi_update(rdev, dev);
12581
12582unlock:
12583 wdev_unlock(wdev);
12584
12585 return err;
d6dc1a38
JO		 12586}
12587
12588static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
12589{
12590 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
12591 struct nlattr *cqm;
12592 int err;
12593
12594 cqm = info->attrs[NL80211_ATTR_CQM];
1da5fcc8
JB		 12595 if (!cqm)
12596 return -EINVAL;
d6dc1a38 12597
8cb08174
JB		 12598 err = nla_parse_nested_deprecated(attrs, NL80211_ATTR_CQM_MAX, cqm,
12599 nl80211_attr_cqm_policy,
12600 info->extack);
d6dc1a38 12601 if (err)
1da5fcc8 12602 return err;
d6dc1a38
JO		 12603
12604 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
12605 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
4a4b8169
AZ		 12606 const s32 *thresholds =
12607 nla_data(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
12608 int len = nla_len(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
1da5fcc8 12609 u32 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
d6dc1a38 12610
4a4b8169
AZ		 12611 if (len % 4)
12612 return -EINVAL;
12613
12614 return nl80211_set_cqm_rssi(info, thresholds, len / 4,
12615 hysteresis);
1da5fcc8
JB		 12616 }
12617
12618 if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
12619 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
12620 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
12621 u32 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
12622 u32 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
12623 u32 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
12624
12625 return nl80211_set_cqm_txe(info, rate, pkts, intvl);
12626 }
12627
12628 return -EINVAL;
d6dc1a38
JO		 12629}
12630
6e0bd6c3
RL		 12631static int nl80211_join_ocb(struct sk_buff *skb, struct genl_info *info)
12632{
12633 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12634 struct net_device *dev = info->user_ptr[1];
12635 struct ocb_setup setup = {};
12636 int err;
12637
12638 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
12639 if (err)
12640 return err;
12641
12642 return cfg80211_join_ocb(rdev, dev, &setup);
12643}
12644
12645static int nl80211_leave_ocb(struct sk_buff *skb, struct genl_info *info)
12646{
12647 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12648 struct net_device *dev = info->user_ptr[1];
12649
12650 return cfg80211_leave_ocb(rdev, dev);
12651}
12652
29cbe68c
JB		 12653static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
12654{
12655 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12656 struct net_device *dev = info->user_ptr[1];
12657 struct mesh_config cfg;
c80d545d 12658 struct mesh_setup setup;
29cbe68c
JB		 12659 int err;
12660
12661 /* start with default */
12662 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 12663 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 12664
24bdd9f4 12665 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 12666 /* and parse parameters if given */
24bdd9f4 12667 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 12668 if (err)
12669 return err;
12670 }
12671
12672 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
12673 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
12674 return -EINVAL;
12675
c80d545d
JC		 12676 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
12677 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
12678
4bb62344
CYY		 12679 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
12680 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
12681 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
12682 return -EINVAL;
12683
9bdbf04d
MP		 12684 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
12685 setup.beacon_interval =
12686 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 12687
0c317a02
PK		 12688 err = cfg80211_validate_beacon_int(rdev,
12689 NL80211_IFTYPE_MESH_POINT,
12690 setup.beacon_interval);
12d20fc9
PK		 12691 if (err)
12692 return err;
9bdbf04d
MP		 12693 }
12694
12695 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
12696 setup.dtim_period =
12697 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
12698 if (setup.dtim_period < 1 || setup.dtim_period > 100)
12699 return -EINVAL;
12700 }
12701
c80d545d
JC		 12702 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
12703 /* parse additional setup parameters if given */
12704 err = nl80211_parse_mesh_setup(info, &setup);
12705 if (err)
12706 return err;
12707 }
12708
d37bb18a
TP		 12709 if (setup.user_mpm)
12710 cfg.auto_open_plinks = false;
12711
cc1d2806 12712 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 12713 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
12714 if (err)
12715 return err;
cc1d2806 12716 } else {
188c1b3c 12717 /* __cfg80211_join_mesh() will sort it out */
683b6d3b 12718 setup.chandef.chan = NULL;
cc1d2806
JB		 12719 }
12720
ffb3cf30
AN		 12721 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
12722 u8 *rates = nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
12723 int n_rates =
12724 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
12725 struct ieee80211_supported_band *sband;
12726
12727 if (!setup.chandef.chan)
12728 return -EINVAL;
12729
12730 sband = rdev->wiphy.bands[setup.chandef.chan->band];
12731
12732 err = ieee80211_get_ratemask(sband, rates, n_rates,
12733 &setup.basic_rates);
12734 if (err)
12735 return err;
12736 }
12737
8564e382 12738 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 12739 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
12740 NL80211_ATTR_TX_RATES,
eb89a6a6 12741 &setup.beacon_rate,
7b0a0e3c 12742 dev, false, 0);
8564e382
JB		 12743 if (err)
12744 return err;
12745
265698d7
JB		 12746 if (!setup.chandef.chan)
12747 return -EINVAL;
12748
8564e382
JB		 12749 err = validate_beacon_tx_rate(rdev, setup.chandef.chan->band,
12750 &setup.beacon_rate);
12751 if (err)
12752 return err;
12753 }
12754
d37d49c2
BB		 12755 setup.userspace_handles_dfs =
12756 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
12757
1224f583
DK		 12758 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
12759 int r = validate_pae_over_nl80211(rdev, info);
12760
12761 if (r < 0)
12762 return r;
12763
12764 setup.control_port_over_nl80211 = true;
12765 }
12766
188c1b3c
DK		 12767 wdev_lock(dev->ieee80211_ptr);
12768 err = __cfg80211_join_mesh(rdev, dev, &setup, &cfg);
12769 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER])
12770 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
12771 wdev_unlock(dev->ieee80211_ptr);
12772
12773 return err;
29cbe68c
JB		 12774}
12775
12776static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
12777{
12778 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12779 struct net_device *dev = info->user_ptr[1];
12780
12781 return cfg80211_leave_mesh(rdev, dev);
12782}
12783
dfb89c56 12784#ifdef CONFIG_PM
bb92d199
AK		 12785static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
12786 struct cfg80211_registered_device *rdev)
12787{
6abb9cb9 12788 struct cfg80211_wowlan *wowlan = rdev->wiphy.wowlan_config;
bb92d199
AK		 12789 struct nlattr *nl_pats, *nl_pat;
12790 int i, pat_len;
12791
6abb9cb9 12792 if (!wowlan->n_patterns)
bb92d199
AK		 12793 return 0;
12794
ae0be8de 12795 nl_pats = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
bb92d199
AK		 12796 if (!nl_pats)
12797 return -ENOBUFS;
12798
6abb9cb9 12799 for (i = 0; i < wowlan->n_patterns; i++) {
ae0be8de 12800 nl_pat = nla_nest_start_noflag(msg, i + 1);
bb92d199
AK		 12801 if (!nl_pat)
12802 return -ENOBUFS;
6abb9cb9 12803 pat_len = wowlan->patterns[i].pattern_len;
50ac6607 12804 if (nla_put(msg, NL80211_PKTPAT_MASK, DIV_ROUND_UP(pat_len, 8),
6abb9cb9 12805 wowlan->patterns[i].mask) ||
50ac6607
AK		 12806 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
12807 wowlan->patterns[i].pattern) ||
12808 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
6abb9cb9 12809 wowlan->patterns[i].pkt_offset))
bb92d199
AK		 12810 return -ENOBUFS;
12811 nla_nest_end(msg, nl_pat);
12812 }
12813 nla_nest_end(msg, nl_pats);
12814
12815 return 0;
12816}
12817
2a0e047e
JB		 12818static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
12819 struct cfg80211_wowlan_tcp *tcp)
12820{
12821 struct nlattr *nl_tcp;
12822
12823 if (!tcp)
12824 return 0;
12825
ae0be8de
MK		 12826 nl_tcp = nla_nest_start_noflag(msg,
12827 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
2a0e047e
JB		 12828 if (!nl_tcp)
12829 return -ENOBUFS;
12830
930345ea
JB		 12831 if (nla_put_in_addr(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
12832 nla_put_in_addr(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
2a0e047e
JB		 12833 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
12834 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
12835 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
12836 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
12837 tcp->payload_len, tcp->payload) ||
12838 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
12839 tcp->data_interval) ||
12840 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
12841 tcp->wake_len, tcp->wake_data) ||
12842 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
12843 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
12844 return -ENOBUFS;
12845
12846 if (tcp->payload_seq.len &&
12847 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
12848 sizeof(tcp->payload_seq), &tcp->payload_seq))
12849 return -ENOBUFS;
12850
12851 if (tcp->payload_tok.len &&
12852 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
12853 sizeof(tcp->payload_tok) + tcp->tokens_size,
12854 &tcp->payload_tok))
12855 return -ENOBUFS;
12856
e248ad30
JB		 12857 nla_nest_end(msg, nl_tcp);
12858
2a0e047e
JB		 12859 return 0;
12860}
12861
75453ccb
LC		 12862static int nl80211_send_wowlan_nd(struct sk_buff *msg,
12863 struct cfg80211_sched_scan_request *req)
12864{
3b06d277 12865 struct nlattr *nd, *freqs, *matches, *match, *scan_plans, *scan_plan;
75453ccb
LC		 12866 int i;
12867
12868 if (!req)
12869 return 0;
12870
ae0be8de 12871 nd = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_NET_DETECT);
75453ccb
LC		 12872 if (!nd)
12873 return -ENOBUFS;
12874
3b06d277
AS		 12875 if (req->n_scan_plans == 1 &&
12876 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_INTERVAL,
12877 req->scan_plans[0].interval * 1000))
75453ccb
LC		 12878 return -ENOBUFS;
12879
21fea567
LC		 12880 if (nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_DELAY, req->delay))
12881 return -ENOBUFS;
12882
bf95ecdb 12883 if (req->relative_rssi_set) {
12884 struct nl80211_bss_select_rssi_adjust rssi_adjust;
12885
12886 if (nla_put_s8(msg, NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI,
12887 req->relative_rssi))
12888 return -ENOBUFS;
12889
12890 rssi_adjust.band = req->rssi_adjust.band;
12891 rssi_adjust.delta = req->rssi_adjust.delta;
12892 if (nla_put(msg, NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST,
12893 sizeof(rssi_adjust), &rssi_adjust))
12894 return -ENOBUFS;
12895 }
12896
ae0be8de 12897 freqs = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_FREQUENCIES);
75453ccb
LC		 12898 if (!freqs)
12899 return -ENOBUFS;
12900
53b18980
JB		 12901 for (i = 0; i < req->n_channels; i++) {
12902 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
12903 return -ENOBUFS;
12904 }
75453ccb
LC		 12905
12906 nla_nest_end(msg, freqs);
12907
12908 if (req->n_match_sets) {
ae0be8de
MK		 12909 matches = nla_nest_start_noflag(msg,
12910 NL80211_ATTR_SCHED_SCAN_MATCH);
76e1fb4b
JB		 12911 if (!matches)
12912 return -ENOBUFS;
12913
75453ccb 12914 for (i = 0; i < req->n_match_sets; i++) {
ae0be8de 12915 match = nla_nest_start_noflag(msg, i);
76e1fb4b
JB		 12916 if (!match)
12917 return -ENOBUFS;
12918
53b18980
JB		 12919 if (nla_put(msg, NL80211_SCHED_SCAN_MATCH_ATTR_SSID,
12920 req->match_sets[i].ssid.ssid_len,
12921 req->match_sets[i].ssid.ssid))
12922 return -ENOBUFS;
75453ccb
LC		 12923 nla_nest_end(msg, match);
12924 }
12925 nla_nest_end(msg, matches);
12926 }
12927
ae0be8de 12928 scan_plans = nla_nest_start_noflag(msg, NL80211_ATTR_SCHED_SCAN_PLANS);
3b06d277
AS		 12929 if (!scan_plans)
12930 return -ENOBUFS;
12931
12932 for (i = 0; i < req->n_scan_plans; i++) {
ae0be8de 12933 scan_plan = nla_nest_start_noflag(msg, i + 1);
76e1fb4b
JB		 12934 if (!scan_plan)
12935 return -ENOBUFS;
12936
67626964 12937 if (nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_INTERVAL,
3b06d277
AS		 12938 req->scan_plans[i].interval) ||
12939 (req->scan_plans[i].iterations &&
12940 nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_ITERATIONS,
12941 req->scan_plans[i].iterations)))
12942 return -ENOBUFS;
12943 nla_nest_end(msg, scan_plan);
12944 }
12945 nla_nest_end(msg, scan_plans);
12946
75453ccb
LC		 12947 nla_nest_end(msg, nd);
12948
12949 return 0;
12950}
12951
ff1b6e69
JB		 12952static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
12953{
12954 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12955 struct sk_buff *msg;
12956 void *hdr;
2a0e047e 12957 u32 size = NLMSG_DEFAULT_SIZE;
ff1b6e69 12958
964dc9e2 12959 if (!rdev->wiphy.wowlan)
ff1b6e69
JB		 12960 return -EOPNOTSUPP;
12961
6abb9cb9 12962 if (rdev->wiphy.wowlan_config && rdev->wiphy.wowlan_config->tcp) {
2a0e047e 12963 /* adjust size to have room for all the data */
6abb9cb9
JB		 12964 size += rdev->wiphy.wowlan_config->tcp->tokens_size +
12965 rdev->wiphy.wowlan_config->tcp->payload_len +
12966 rdev->wiphy.wowlan_config->tcp->wake_len +
12967 rdev->wiphy.wowlan_config->tcp->wake_len / 8;
2a0e047e
JB		 12968 }
12969
12970 msg = nlmsg_new(size, GFP_KERNEL);
ff1b6e69
JB		 12971 if (!msg)
12972 return -ENOMEM;
12973
15e47304 12974 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 12975 NL80211_CMD_GET_WOWLAN);
12976 if (!hdr)
12977 goto nla_put_failure;
12978
6abb9cb9 12979 if (rdev->wiphy.wowlan_config) {
ff1b6e69
JB		 12980 struct nlattr *nl_wowlan;
12981
ae0be8de
MK		 12982 nl_wowlan = nla_nest_start_noflag(msg,
12983 NL80211_ATTR_WOWLAN_TRIGGERS);
ff1b6e69
JB		 12984 if (!nl_wowlan)
12985 goto nla_put_failure;
12986
6abb9cb9 12987 if ((rdev->wiphy.wowlan_config->any &&
9360ffd1 12988 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6abb9cb9 12989 (rdev->wiphy.wowlan_config->disconnect &&
9360ffd1 12990 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6abb9cb9 12991 (rdev->wiphy.wowlan_config->magic_pkt &&
9360ffd1 12992 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6abb9cb9 12993 (rdev->wiphy.wowlan_config->gtk_rekey_failure &&
9360ffd1 12994 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6abb9cb9 12995 (rdev->wiphy.wowlan_config->eap_identity_req &&
9360ffd1 12996 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6abb9cb9 12997 (rdev->wiphy.wowlan_config->four_way_handshake &&
9360ffd1 12998 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6abb9cb9 12999 (rdev->wiphy.wowlan_config->rfkill_release &&
9360ffd1
DM		 13000 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
13001 goto nla_put_failure;
2a0e047e 13002
bb92d199
AK		 13003 if (nl80211_send_wowlan_patterns(msg, rdev))
13004 goto nla_put_failure;
2a0e047e 13005
6abb9cb9
JB		 13006 if (nl80211_send_wowlan_tcp(msg,
13007 rdev->wiphy.wowlan_config->tcp))
2a0e047e 13008 goto nla_put_failure;
75453ccb
LC		 13009
13010 if (nl80211_send_wowlan_nd(
13011 msg,
13012 rdev->wiphy.wowlan_config->nd_config))
13013 goto nla_put_failure;
2a0e047e 13014
ff1b6e69
JB		 13015 nla_nest_end(msg, nl_wowlan);
13016 }
13017
13018 genlmsg_end(msg, hdr);
13019 return genlmsg_reply(msg, info);
13020
13021nla_put_failure:
13022 nlmsg_free(msg);
13023 return -ENOBUFS;
13024}
13025
2a0e047e
JB		 13026static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
13027 struct nlattr *attr,
13028 struct cfg80211_wowlan *trig)
13029{
13030 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
13031 struct cfg80211_wowlan_tcp *cfg;
13032 struct nl80211_wowlan_tcp_data_token *tok = NULL;
13033 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
13034 u32 size;
13035 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
13036 int err, port;
13037
964dc9e2 13038 if (!rdev->wiphy.wowlan->tcp)
2a0e047e
JB		 13039 return -EINVAL;
13040
8cb08174
JB		 13041 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TCP, attr,
13042 nl80211_wowlan_tcp_policy, NULL);
2a0e047e
JB		 13043 if (err)
13044 return err;
13045
13046 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
13047 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
13048 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
13049 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
13050 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
13051 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
13052 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
13053 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
13054 return -EINVAL;
13055
13056 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
964dc9e2 13057 if (data_size > rdev->wiphy.wowlan->tcp->data_payload_max)
2a0e047e
JB		 13058 return -EINVAL;
13059
13060 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
964dc9e2 13061 rdev->wiphy.wowlan->tcp->data_interval_max ||
723d568a 13062 nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) == 0)
2a0e047e
JB		 13063 return -EINVAL;
13064
13065 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
964dc9e2 13066 if (wake_size > rdev->wiphy.wowlan->tcp->wake_payload_max)
2a0e047e
JB		 13067 return -EINVAL;
13068
13069 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
13070 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
13071 return -EINVAL;
13072
13073 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
13074 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
13075
13076 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
13077 tokens_size = tokln - sizeof(*tok);
13078
13079 if (!tok->len || tokens_size % tok->len)
13080 return -EINVAL;
964dc9e2 13081 if (!rdev->wiphy.wowlan->tcp->tok)
2a0e047e 13082 return -EINVAL;
964dc9e2 13083 if (tok->len > rdev->wiphy.wowlan->tcp->tok->max_len)
2a0e047e 13084 return -EINVAL;
964dc9e2 13085 if (tok->len < rdev->wiphy.wowlan->tcp->tok->min_len)
2a0e047e 13086 return -EINVAL;
964dc9e2 13087 if (tokens_size > rdev->wiphy.wowlan->tcp->tok->bufsize)
2a0e047e
JB		 13088 return -EINVAL;
13089 if (tok->offset + tok->len > data_size)
13090 return -EINVAL;
13091 }
13092
13093 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
13094 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
964dc9e2 13095 if (!rdev->wiphy.wowlan->tcp->seq)
2a0e047e
JB		 13096 return -EINVAL;
13097 if (seq->len == 0 || seq->len > 4)
13098 return -EINVAL;
13099 if (seq->len + seq->offset > data_size)
13100 return -EINVAL;
13101 }
13102
13103 size = sizeof(*cfg);
13104 size += data_size;
13105 size += wake_size + wake_mask_size;
13106 size += tokens_size;
13107
13108 cfg = kzalloc(size, GFP_KERNEL);
13109 if (!cfg)
13110 return -ENOMEM;
67b61f6c
JB		 13111 cfg->src = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
13112 cfg->dst = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
2a0e047e
JB		 13113 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
13114 ETH_ALEN);
13115 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
13116 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
13117 else
13118 port = 0;
13119#ifdef CONFIG_INET
13120 /* allocate a socket and port for it and use it */
13121 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
13122 IPPROTO_TCP, &cfg->sock, 1);
13123 if (err) {
13124 kfree(cfg);
13125 return err;
13126 }
13127 if (inet_csk_get_port(cfg->sock->sk, port)) {
13128 sock_release(cfg->sock);
13129 kfree(cfg);
13130 return -EADDRINUSE;
13131 }
13132 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
13133#else
13134 if (!port) {
13135 kfree(cfg);
13136 return -EINVAL;
13137 }
13138 cfg->src_port = port;
13139#endif
13140
13141 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
13142 cfg->payload_len = data_size;
13143 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
13144 memcpy((void *)cfg->payload,
13145 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
13146 data_size);
13147 if (seq)
13148 cfg->payload_seq = *seq;
13149 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
13150 cfg->wake_len = wake_size;
13151 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
13152 memcpy((void *)cfg->wake_data,
13153 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
13154 wake_size);
13155 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
13156 data_size + wake_size;
13157 memcpy((void *)cfg->wake_mask,
13158 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
13159 wake_mask_size);
13160 if (tok) {
13161 cfg->tokens_size = tokens_size;
13162 memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
13163 }
13164
13165 trig->tcp = cfg;
13166
13167 return 0;
13168}
13169
8cd4d456
LC		 13170static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
13171 const struct wiphy_wowlan_support *wowlan,
13172 struct nlattr *attr,
13173 struct cfg80211_wowlan *trig)
13174{
13175 struct nlattr **tb;
13176 int err;
13177
6396bb22 13178 tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
8cd4d456
LC		 13179 if (!tb)
13180 return -ENOMEM;
13181
13182 if (!(wowlan->flags & WIPHY_WOWLAN_NET_DETECT)) {
13183 err = -EOPNOTSUPP;
13184 goto out;
13185 }
13186
8cb08174
JB		 13187 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_MAX, attr,
13188 nl80211_policy, NULL);
8cd4d456
LC		 13189 if (err)
13190 goto out;
13191
aad1e812
AVS		 13192 trig->nd_config = nl80211_parse_sched_scan(&rdev->wiphy, NULL, tb,
13193 wowlan->max_nd_match_sets);
8cd4d456
LC		 13194 err = PTR_ERR_OR_ZERO(trig->nd_config);
13195 if (err)
13196 trig->nd_config = NULL;
13197
13198out:
13199 kfree(tb);
13200 return err;
13201}
13202
ff1b6e69
JB		 13203static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
13204{
13205 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13206 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 13207 struct cfg80211_wowlan new_triggers = {};
ae33bd81 13208 struct cfg80211_wowlan *ntrig;
964dc9e2 13209 const struct wiphy_wowlan_support *wowlan = rdev->wiphy.wowlan;
ff1b6e69 13210 int err, i;
6abb9cb9 13211 bool prev_enabled = rdev->wiphy.wowlan_config;
98fc4386 13212 bool regular = false;
ff1b6e69 13213
964dc9e2 13214 if (!wowlan)
ff1b6e69
JB		 13215 return -EOPNOTSUPP;
13216
ae33bd81
JB		 13217 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
13218 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 13219 rdev->wiphy.wowlan_config = NULL;
ae33bd81
JB		 13220 goto set_wakeup;
13221 }
ff1b6e69 13222
8cb08174
JB		 13223 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TRIG,
13224 info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS],
13225 nl80211_wowlan_policy, info->extack);
ff1b6e69
JB		 13226 if (err)
13227 return err;
13228
13229 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
13230 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
13231 return -EINVAL;
13232 new_triggers.any = true;
13233 }
13234
13235 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
13236 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
13237 return -EINVAL;
13238 new_triggers.disconnect = true;
98fc4386 13239 regular = true;
ff1b6e69
JB		 13240 }
13241
13242 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
13243 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
13244 return -EINVAL;
13245 new_triggers.magic_pkt = true;
98fc4386 13246 regular = true;
ff1b6e69
JB		 13247 }
13248
77dbbb13
JB		 13249 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
13250 return -EINVAL;
13251
13252 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
13253 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
13254 return -EINVAL;
13255 new_triggers.gtk_rekey_failure = true;
98fc4386 13256 regular = true;
77dbbb13
JB		 13257 }
13258
13259 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
13260 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
13261 return -EINVAL;
13262 new_triggers.eap_identity_req = true;
98fc4386 13263 regular = true;
77dbbb13
JB		 13264 }
13265
13266 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
13267 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
13268 return -EINVAL;
13269 new_triggers.four_way_handshake = true;
98fc4386 13270 regular = true;
77dbbb13
JB		 13271 }
13272
13273 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
13274 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
13275 return -EINVAL;
13276 new_triggers.rfkill_release = true;
98fc4386 13277 regular = true;
77dbbb13
JB		 13278 }
13279
ff1b6e69
JB		 13280 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
13281 struct nlattr *pat;
13282 int n_patterns = 0;
bb92d199 13283 int rem, pat_len, mask_len, pkt_offset;
50ac6607 13284 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
ff1b6e69 13285
98fc4386
JB		 13286 regular = true;
13287
ff1b6e69
JB		 13288 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
13289 rem)
13290 n_patterns++;
13291 if (n_patterns > wowlan->n_patterns)
13292 return -EINVAL;
13293
13294 new_triggers.patterns = kcalloc(n_patterns,
13295 sizeof(new_triggers.patterns[0]),
13296 GFP_KERNEL);
13297 if (!new_triggers.patterns)
13298 return -ENOMEM;
13299
13300 new_triggers.n_patterns = n_patterns;
13301 i = 0;
13302
13303 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
13304 rem) {
922bd80f
JB		 13305 u8 *mask_pat;
13306
8cb08174
JB		 13307 err = nla_parse_nested_deprecated(pat_tb,
13308 MAX_NL80211_PKTPAT,
13309 pat,
13310 nl80211_packet_pattern_policy,
13311 info->extack);
95bca62f
JB		 13312 if (err)
13313 goto error;
13314
ff1b6e69 13315 err = -EINVAL;
50ac6607
AK		 13316 if (!pat_tb[NL80211_PKTPAT_MASK] ||
13317 !pat_tb[NL80211_PKTPAT_PATTERN])
ff1b6e69 13318 goto error;
50ac6607 13319 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
ff1b6e69 13320 mask_len = DIV_ROUND_UP(pat_len, 8);
50ac6607 13321 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
ff1b6e69
JB		 13322 goto error;
13323 if (pat_len > wowlan->pattern_max_len ||
13324 pat_len < wowlan->pattern_min_len)
13325 goto error;
13326
50ac6607 13327 if (!pat_tb[NL80211_PKTPAT_OFFSET])
bb92d199
AK		 13328 pkt_offset = 0;
13329 else
13330 pkt_offset = nla_get_u32(
50ac6607 13331 pat_tb[NL80211_PKTPAT_OFFSET]);
bb92d199
AK		 13332 if (pkt_offset > wowlan->max_pkt_offset)
13333 goto error;
13334 new_triggers.patterns[i].pkt_offset = pkt_offset;
13335
922bd80f
JB		 13336 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
13337 if (!mask_pat) {
ff1b6e69
JB		 13338 err = -ENOMEM;
13339 goto error;
13340 }
922bd80f
JB		 13341 new_triggers.patterns[i].mask = mask_pat;
13342 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
ff1b6e69 13343 mask_len);
922bd80f
JB		 13344 mask_pat += mask_len;
13345 new_triggers.patterns[i].pattern = mask_pat;
ff1b6e69 13346 new_triggers.patterns[i].pattern_len = pat_len;
922bd80f 13347 memcpy(mask_pat,
50ac6607 13348 nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
ff1b6e69
JB		 13349 pat_len);
13350 i++;
13351 }
13352 }
13353
2a0e047e 13354 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
98fc4386 13355 regular = true;
2a0e047e
JB		 13356 err = nl80211_parse_wowlan_tcp(
13357 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
13358 &new_triggers);
13359 if (err)
13360 goto error;
13361 }
13362
8cd4d456 13363 if (tb[NL80211_WOWLAN_TRIG_NET_DETECT]) {
98fc4386 13364 regular = true;
8cd4d456
LC		 13365 err = nl80211_parse_wowlan_nd(
13366 rdev, wowlan, tb[NL80211_WOWLAN_TRIG_NET_DETECT],
13367 &new_triggers);
13368 if (err)
13369 goto error;
13370 }
13371
98fc4386
JB		 13372 /* The 'any' trigger means the device continues operating more or less
13373 * as in its normal operation mode and wakes up the host on most of the
13374 * normal interrupts (like packet RX, ...)
13375 * It therefore makes little sense to combine with the more constrained
13376 * wakeup trigger modes.
13377 */
13378 if (new_triggers.any && regular) {
13379 err = -EINVAL;
13380 goto error;
13381 }
13382
ae33bd81
JB		 13383 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
13384 if (!ntrig) {
13385 err = -ENOMEM;
13386 goto error;
ff1b6e69 13387 }
ae33bd81 13388 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 13389 rdev->wiphy.wowlan_config = ntrig;
ff1b6e69 13390
ae33bd81 13391 set_wakeup:
6abb9cb9
JB		 13392 if (rdev->ops->set_wakeup &&
13393 prev_enabled != !!rdev->wiphy.wowlan_config)
13394 rdev_set_wakeup(rdev, rdev->wiphy.wowlan_config);
6d52563f 13395
ff1b6e69
JB		 13396 return 0;
13397 error:
13398 for (i = 0; i < new_triggers.n_patterns; i++)
13399 kfree(new_triggers.patterns[i].mask);
13400 kfree(new_triggers.patterns);
2a0e047e
JB		 13401 if (new_triggers.tcp && new_triggers.tcp->sock)
13402 sock_release(new_triggers.tcp->sock);
13403 kfree(new_triggers.tcp);
e5dbe070 13404 kfree(new_triggers.nd_config);
ff1b6e69
JB		 13405 return err;
13406}
dfb89c56 13407#endif
ff1b6e69 13408
be29b99a
AK		 13409static int nl80211_send_coalesce_rules(struct sk_buff *msg,
13410 struct cfg80211_registered_device *rdev)
13411{
13412 struct nlattr *nl_pats, *nl_pat, *nl_rule, *nl_rules;
13413 int i, j, pat_len;
13414 struct cfg80211_coalesce_rules *rule;
13415
13416 if (!rdev->coalesce->n_rules)
13417 return 0;
13418
ae0be8de 13419 nl_rules = nla_nest_start_noflag(msg, NL80211_ATTR_COALESCE_RULE);
be29b99a
AK		 13420 if (!nl_rules)
13421 return -ENOBUFS;
13422
13423 for (i = 0; i < rdev->coalesce->n_rules; i++) {
ae0be8de 13424 nl_rule = nla_nest_start_noflag(msg, i + 1);
be29b99a
AK		 13425 if (!nl_rule)
13426 return -ENOBUFS;
13427
13428 rule = &rdev->coalesce->rules[i];
13429 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_DELAY,
13430 rule->delay))
13431 return -ENOBUFS;
13432
13433 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_CONDITION,
13434 rule->condition))
13435 return -ENOBUFS;
13436
ae0be8de
MK		 13437 nl_pats = nla_nest_start_noflag(msg,
13438 NL80211_ATTR_COALESCE_RULE_PKT_PATTERN);
be29b99a
AK		 13439 if (!nl_pats)
13440 return -ENOBUFS;
13441
13442 for (j = 0; j < rule->n_patterns; j++) {
ae0be8de 13443 nl_pat = nla_nest_start_noflag(msg, j + 1);
be29b99a
AK		 13444 if (!nl_pat)
13445 return -ENOBUFS;
13446 pat_len = rule->patterns[j].pattern_len;
13447 if (nla_put(msg, NL80211_PKTPAT_MASK,
13448 DIV_ROUND_UP(pat_len, 8),
13449 rule->patterns[j].mask) ||
13450 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
13451 rule->patterns[j].pattern) ||
13452 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
13453 rule->patterns[j].pkt_offset))
13454 return -ENOBUFS;
13455 nla_nest_end(msg, nl_pat);
13456 }
13457 nla_nest_end(msg, nl_pats);
13458 nla_nest_end(msg, nl_rule);
13459 }
13460 nla_nest_end(msg, nl_rules);
13461
13462 return 0;
13463}
13464
13465static int nl80211_get_coalesce(struct sk_buff *skb, struct genl_info *info)
13466{
13467 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13468 struct sk_buff *msg;
13469 void *hdr;
13470
13471 if (!rdev->wiphy.coalesce)
13472 return -EOPNOTSUPP;
13473
13474 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13475 if (!msg)
13476 return -ENOMEM;
13477
13478 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13479 NL80211_CMD_GET_COALESCE);
13480 if (!hdr)
13481 goto nla_put_failure;
13482
13483 if (rdev->coalesce && nl80211_send_coalesce_rules(msg, rdev))
13484 goto nla_put_failure;
13485
13486 genlmsg_end(msg, hdr);
13487 return genlmsg_reply(msg, info);
13488
13489nla_put_failure:
13490 nlmsg_free(msg);
13491 return -ENOBUFS;
13492}
13493
13494void cfg80211_rdev_free_coalesce(struct cfg80211_registered_device *rdev)
13495{
13496 struct cfg80211_coalesce *coalesce = rdev->coalesce;
13497 int i, j;
13498 struct cfg80211_coalesce_rules *rule;
13499
13500 if (!coalesce)
13501 return;
13502
13503 for (i = 0; i < coalesce->n_rules; i++) {
13504 rule = &coalesce->rules[i];
13505 for (j = 0; j < rule->n_patterns; j++)
13506 kfree(rule->patterns[j].mask);
13507 kfree(rule->patterns);
13508 }
13509 kfree(coalesce->rules);
13510 kfree(coalesce);
13511 rdev->coalesce = NULL;
13512}
13513
13514static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
13515 struct nlattr *rule,
13516 struct cfg80211_coalesce_rules *new_rule)
13517{
13518 int err, i;
13519 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
13520 struct nlattr *tb[NUM_NL80211_ATTR_COALESCE_RULE], *pat;
13521 int rem, pat_len, mask_len, pkt_offset, n_patterns = 0;
13522 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
13523
8cb08174
JB		 13524 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_COALESCE_RULE_MAX,
13525 rule, nl80211_coalesce_policy, NULL);
be29b99a
AK		 13526 if (err)
13527 return err;
13528
13529 if (tb[NL80211_ATTR_COALESCE_RULE_DELAY])
13530 new_rule->delay =
13531 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_DELAY]);
13532 if (new_rule->delay > coalesce->max_delay)
13533 return -EINVAL;
13534
13535 if (tb[NL80211_ATTR_COALESCE_RULE_CONDITION])
13536 new_rule->condition =
13537 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_CONDITION]);
be29b99a
AK		 13538
13539 if (!tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN])
13540 return -EINVAL;
13541
13542 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
13543 rem)
13544 n_patterns++;
13545 if (n_patterns > coalesce->n_patterns)
13546 return -EINVAL;
13547
13548 new_rule->patterns = kcalloc(n_patterns, sizeof(new_rule->patterns[0]),
13549 GFP_KERNEL);
13550 if (!new_rule->patterns)
13551 return -ENOMEM;
13552
13553 new_rule->n_patterns = n_patterns;
13554 i = 0;
13555
13556 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
13557 rem) {
922bd80f
JB		 13558 u8 *mask_pat;
13559
8cb08174
JB		 13560 err = nla_parse_nested_deprecated(pat_tb, MAX_NL80211_PKTPAT,
13561 pat,
13562 nl80211_packet_pattern_policy,
13563 NULL);
95bca62f
JB		 13564 if (err)
13565 return err;
13566
be29b99a
AK		 13567 if (!pat_tb[NL80211_PKTPAT_MASK] ||
13568 !pat_tb[NL80211_PKTPAT_PATTERN])
13569 return -EINVAL;
13570 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
13571 mask_len = DIV_ROUND_UP(pat_len, 8);
13572 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
13573 return -EINVAL;
13574 if (pat_len > coalesce->pattern_max_len ||
13575 pat_len < coalesce->pattern_min_len)
13576 return -EINVAL;
13577
13578 if (!pat_tb[NL80211_PKTPAT_OFFSET])
13579 pkt_offset = 0;
13580 else
13581 pkt_offset = nla_get_u32(pat_tb[NL80211_PKTPAT_OFFSET]);
13582 if (pkt_offset > coalesce->max_pkt_offset)
13583 return -EINVAL;
13584 new_rule->patterns[i].pkt_offset = pkt_offset;
13585
922bd80f
JB		 13586 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
13587 if (!mask_pat)
be29b99a 13588 return -ENOMEM;
922bd80f
JB		 13589
13590 new_rule->patterns[i].mask = mask_pat;
13591 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
13592 mask_len);
13593
13594 mask_pat += mask_len;
13595 new_rule->patterns[i].pattern = mask_pat;
be29b99a 13596 new_rule->patterns[i].pattern_len = pat_len;
922bd80f
JB		 13597 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
13598 pat_len);
be29b99a
AK		 13599 i++;
13600 }
13601
13602 return 0;
13603}
13604
13605static int nl80211_set_coalesce(struct sk_buff *skb, struct genl_info *info)
13606{
13607 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13608 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
13609 struct cfg80211_coalesce new_coalesce = {};
13610 struct cfg80211_coalesce *n_coalesce;
13611 int err, rem_rule, n_rules = 0, i, j;
13612 struct nlattr *rule;
13613 struct cfg80211_coalesce_rules *tmp_rule;
13614
13615 if (!rdev->wiphy.coalesce || !rdev->ops->set_coalesce)
13616 return -EOPNOTSUPP;
13617
13618 if (!info->attrs[NL80211_ATTR_COALESCE_RULE]) {
13619 cfg80211_rdev_free_coalesce(rdev);
a1056b1b 13620 rdev_set_coalesce(rdev, NULL);
be29b99a
AK		 13621 return 0;
13622 }
13623
13624 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
13625 rem_rule)
13626 n_rules++;
13627 if (n_rules > coalesce->n_rules)
13628 return -EINVAL;
13629
13630 new_coalesce.rules = kcalloc(n_rules, sizeof(new_coalesce.rules[0]),
13631 GFP_KERNEL);
13632 if (!new_coalesce.rules)
13633 return -ENOMEM;
13634
13635 new_coalesce.n_rules = n_rules;
13636 i = 0;
13637
13638 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
13639 rem_rule) {
13640 err = nl80211_parse_coalesce_rule(rdev, rule,
13641 &new_coalesce.rules[i]);
13642 if (err)
13643 goto error;
13644
13645 i++;
13646 }
13647
a1056b1b 13648 err = rdev_set_coalesce(rdev, &new_coalesce);
be29b99a
AK		 13649 if (err)
13650 goto error;
13651
13652 n_coalesce = kmemdup(&new_coalesce, sizeof(new_coalesce), GFP_KERNEL);
13653 if (!n_coalesce) {
13654 err = -ENOMEM;
13655 goto error;
13656 }
13657 cfg80211_rdev_free_coalesce(rdev);
13658 rdev->coalesce = n_coalesce;
13659
13660 return 0;
13661error:
13662 for (i = 0; i < new_coalesce.n_rules; i++) {
13663 tmp_rule = &new_coalesce.rules[i];
13664 for (j = 0; j < tmp_rule->n_patterns; j++)
13665 kfree(tmp_rule->patterns[j].mask);
13666 kfree(tmp_rule->patterns);
13667 }
13668 kfree(new_coalesce.rules);
13669
13670 return err;
13671}
13672
e5497d76
JB		 13673static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
13674{
13675 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13676 struct net_device *dev = info->user_ptr[1];
13677 struct wireless_dev *wdev = dev->ieee80211_ptr;
13678 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
f495acd8 13679 struct cfg80211_gtk_rekey_data rekey_data = {};
e5497d76
JB		 13680 int err;
13681
13682 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
13683 return -EINVAL;
13684
8cb08174
JB		 13685 err = nla_parse_nested_deprecated(tb, MAX_NL80211_REKEY_DATA,
13686 info->attrs[NL80211_ATTR_REKEY_DATA],
13687 nl80211_rekey_policy, info->extack);
e5497d76
JB		 13688 if (err)
13689 return err;
13690
e785fa0a
VD		 13691 if (!tb[NL80211_REKEY_DATA_REPLAY_CTR] || !tb[NL80211_REKEY_DATA_KEK] ||
13692 !tb[NL80211_REKEY_DATA_KCK])
13693 return -EINVAL;
093a48d2
NE		 13694 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN &&
13695 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
13696 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KEK_EXT_LEN))
e5497d76 13697 return -ERANGE;
093a48d2
NE		 13698 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN &&
13699 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
13700 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KCK_EXT_LEN))
e5497d76
JB		 13701 return -ERANGE;
13702
78f686ca
JB		 13703 rekey_data.kek = nla_data(tb[NL80211_REKEY_DATA_KEK]);
13704 rekey_data.kck = nla_data(tb[NL80211_REKEY_DATA_KCK]);
13705 rekey_data.replay_ctr = nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]);
093a48d2
NE		 13706 rekey_data.kek_len = nla_len(tb[NL80211_REKEY_DATA_KEK]);
13707 rekey_data.kck_len = nla_len(tb[NL80211_REKEY_DATA_KCK]);
13708 if (tb[NL80211_REKEY_DATA_AKM])
13709 rekey_data.akm = nla_get_u32(tb[NL80211_REKEY_DATA_AKM]);
e5497d76
JB		 13710
13711 wdev_lock(wdev);
7b0a0e3c 13712 if (!wdev->connected) {
e5497d76
JB		 13713 err = -ENOTCONN;
13714 goto out;
13715 }
13716
13717 if (!rdev->ops->set_rekey_data) {
13718 err = -EOPNOTSUPP;
13719 goto out;
13720 }
13721
e35e4d28 13722 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 13723 out:
13724 wdev_unlock(wdev);
13725 return err;
13726}
13727
28946da7
JB		 13728static int nl80211_register_unexpected_frame(struct sk_buff *skb,
13729 struct genl_info *info)
13730{
13731 struct net_device *dev = info->user_ptr[1];
13732 struct wireless_dev *wdev = dev->ieee80211_ptr;
13733
13734 if (wdev->iftype != NL80211_IFTYPE_AP &&
13735 wdev->iftype != NL80211_IFTYPE_P2P_GO)
13736 return -EINVAL;
13737
15e47304 13738 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 13739 return -EBUSY;
13740
15e47304 13741 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 13742 return 0;
13743}
13744
7f6cf311
JB		 13745static int nl80211_probe_client(struct sk_buff *skb,
13746 struct genl_info *info)
13747{
13748 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13749 struct net_device *dev = info->user_ptr[1];
13750 struct wireless_dev *wdev = dev->ieee80211_ptr;
13751 struct sk_buff *msg;
13752 void *hdr;
13753 const u8 *addr;
13754 u64 cookie;
13755 int err;
13756
13757 if (wdev->iftype != NL80211_IFTYPE_AP &&
13758 wdev->iftype != NL80211_IFTYPE_P2P_GO)
13759 return -EOPNOTSUPP;
13760
13761 if (!info->attrs[NL80211_ATTR_MAC])
13762 return -EINVAL;
13763
13764 if (!rdev->ops->probe_client)
13765 return -EOPNOTSUPP;
13766
13767 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13768 if (!msg)
13769 return -ENOMEM;
13770
15e47304 13771 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311 13772 NL80211_CMD_PROBE_CLIENT);
cb35fba3
DC		 13773 if (!hdr) {
13774 err = -ENOBUFS;
7f6cf311
JB		 13775 goto free_msg;
13776 }
13777
13778 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
13779
e35e4d28 13780 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 13781 if (err)
13782 goto free_msg;
13783
2dad624e
ND		 13784 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
13785 NL80211_ATTR_PAD))
9360ffd1 13786 goto nla_put_failure;
7f6cf311
JB		 13787
13788 genlmsg_end(msg, hdr);
13789
13790 return genlmsg_reply(msg, info);
13791
13792 nla_put_failure:
13793 err = -ENOBUFS;
13794 free_msg:
13795 nlmsg_free(msg);
13796 return err;
13797}
13798
5e760230
JB		 13799static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
13800{
13801 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 13802 struct cfg80211_beacon_registration *reg, *nreg;
13803 int rv;
5e760230
JB		 13804
13805 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
13806 return -EOPNOTSUPP;
13807
37c73b5f
BG		 13808 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
13809 if (!nreg)
13810 return -ENOMEM;
13811
13812 /* First, check if already registered. */
13813 spin_lock_bh(&rdev->beacon_registrations_lock);
13814 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
13815 if (reg->nlportid == info->snd_portid) {
13816 rv = -EALREADY;
13817 goto out_err;
13818 }
13819 }
13820 /* Add it to the list */
13821 nreg->nlportid = info->snd_portid;
13822 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 13823
37c73b5f 13824 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 13825
13826 return 0;
37c73b5f
BG		 13827out_err:
13828 spin_unlock_bh(&rdev->beacon_registrations_lock);
13829 kfree(nreg);
13830 return rv;
5e760230
JB		 13831}
13832
98104fde
JB		 13833static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
13834{
13835 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13836 struct wireless_dev *wdev = info->user_ptr[1];
13837 int err;
13838
13839 if (!rdev->ops->start_p2p_device)
13840 return -EOPNOTSUPP;
13841
13842 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
13843 return -EOPNOTSUPP;
13844
73c7da3d 13845 if (wdev_running(wdev))
98104fde
JB		 13846 return 0;
13847
358ae888 13848 if (rfkill_blocked(rdev->wiphy.rfkill))
b6a55015 13849 return -ERFKILL;
98104fde 13850
eeb126e9 13851 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 13852 if (err)
13853 return err;
13854
73c7da3d 13855 wdev->is_running = true;
98104fde 13856 rdev->opencount++;
98104fde
JB		 13857
13858 return 0;
13859}
13860
13861static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
13862{
13863 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13864 struct wireless_dev *wdev = info->user_ptr[1];
13865
13866 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
13867 return -EOPNOTSUPP;
13868
13869 if (!rdev->ops->stop_p2p_device)
13870 return -EOPNOTSUPP;
13871
f9f47529 13872 cfg80211_stop_p2p_device(rdev, wdev);
98104fde
JB		 13873
13874 return 0;
13875}
13876
cb3b7d87
AB		 13877static int nl80211_start_nan(struct sk_buff *skb, struct genl_info *info)
13878{
13879 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13880 struct wireless_dev *wdev = info->user_ptr[1];
13881 struct cfg80211_nan_conf conf = {};
13882 int err;
13883
13884 if (wdev->iftype != NL80211_IFTYPE_NAN)
13885 return -EOPNOTSUPP;
13886
eeb04a96 13887 if (wdev_running(wdev))
cb3b7d87
AB		 13888 return -EEXIST;
13889
358ae888 13890 if (rfkill_blocked(rdev->wiphy.rfkill))
cb3b7d87
AB		 13891 return -ERFKILL;
13892
13893 if (!info->attrs[NL80211_ATTR_NAN_MASTER_PREF])
13894 return -EINVAL;
13895
cb3b7d87
AB		 13896 conf.master_pref =
13897 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
cb3b7d87 13898
8585989d
LC		 13899 if (info->attrs[NL80211_ATTR_BANDS]) {
13900 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
13901
13902 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
13903 return -EOPNOTSUPP;
13904
13905 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
13906 return -EINVAL;
13907
13908 conf.bands = bands;
13909 }
cb3b7d87
AB		 13910
13911 err = rdev_start_nan(rdev, wdev, &conf);
13912 if (err)
13913 return err;
13914
73c7da3d 13915 wdev->is_running = true;
cb3b7d87
AB		 13916 rdev->opencount++;
13917
13918 return 0;
13919}
13920
13921static int nl80211_stop_nan(struct sk_buff *skb, struct genl_info *info)
13922{
13923 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13924 struct wireless_dev *wdev = info->user_ptr[1];
13925
13926 if (wdev->iftype != NL80211_IFTYPE_NAN)
13927 return -EOPNOTSUPP;
13928
13929 cfg80211_stop_nan(rdev, wdev);
13930
13931 return 0;
13932}
13933
a442b761
AB		 13934static int validate_nan_filter(struct nlattr *filter_attr)
13935{
13936 struct nlattr *attr;
13937 int len = 0, n_entries = 0, rem;
13938
13939 nla_for_each_nested(attr, filter_attr, rem) {
13940 len += nla_len(attr);
13941 n_entries++;
13942 }
13943
13944 if (len >= U8_MAX)
13945 return -EINVAL;
13946
13947 return n_entries;
13948}
13949
13950static int handle_nan_filter(struct nlattr *attr_filter,
13951 struct cfg80211_nan_func *func,
13952 bool tx)
13953{
13954 struct nlattr *attr;
13955 int n_entries, rem, i;
13956 struct cfg80211_nan_func_filter *filter;
13957
13958 n_entries = validate_nan_filter(attr_filter);
13959 if (n_entries < 0)
13960 return n_entries;
13961
13962 BUILD_BUG_ON(sizeof(*func->rx_filters) != sizeof(*func->tx_filters));
13963
13964 filter = kcalloc(n_entries, sizeof(*func->rx_filters), GFP_KERNEL);
13965 if (!filter)
13966 return -ENOMEM;
13967
13968 i = 0;
13969 nla_for_each_nested(attr, attr_filter, rem) {
b15ca182 13970 filter[i].filter = nla_memdup(attr, GFP_KERNEL);
6ad27f52
JJ		 13971 if (!filter[i].filter)
13972 goto err;
13973
a442b761
AB		 13974 filter[i].len = nla_len(attr);
13975 i++;
13976 }
13977 if (tx) {
13978 func->num_tx_filters = n_entries;
13979 func->tx_filters = filter;
13980 } else {
13981 func->num_rx_filters = n_entries;
13982 func->rx_filters = filter;
13983 }
13984
13985 return 0;
6ad27f52
JJ		 13986
13987err:
13988 i = 0;
13989 nla_for_each_nested(attr, attr_filter, rem) {
13990 kfree(filter[i].filter);
13991 i++;
13992 }
13993 kfree(filter);
13994 return -ENOMEM;
a442b761
AB		 13995}
13996
13997static int nl80211_nan_add_func(struct sk_buff *skb,
13998 struct genl_info *info)
13999{
14000 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14001 struct wireless_dev *wdev = info->user_ptr[1];
14002 struct nlattr *tb[NUM_NL80211_NAN_FUNC_ATTR], *func_attr;
14003 struct cfg80211_nan_func *func;
14004 struct sk_buff *msg = NULL;
14005 void *hdr = NULL;
14006 int err = 0;
14007
14008 if (wdev->iftype != NL80211_IFTYPE_NAN)
14009 return -EOPNOTSUPP;
14010
73c7da3d 14011 if (!wdev_running(wdev))
a442b761
AB		 14012 return -ENOTCONN;
14013
14014 if (!info->attrs[NL80211_ATTR_NAN_FUNC])
14015 return -EINVAL;
14016
8cb08174
JB		 14017 err = nla_parse_nested_deprecated(tb, NL80211_NAN_FUNC_ATTR_MAX,
14018 info->attrs[NL80211_ATTR_NAN_FUNC],
14019 nl80211_nan_func_policy,
14020 info->extack);
a442b761
AB		 14021 if (err)
14022 return err;
14023
14024 func = kzalloc(sizeof(*func), GFP_KERNEL);
14025 if (!func)
14026 return -ENOMEM;
14027
b60ad348 14028 func->cookie = cfg80211_assign_cookie(rdev);
a442b761 14029
cb9abd48 14030 if (!tb[NL80211_NAN_FUNC_TYPE]) {
a442b761
AB		 14031 err = -EINVAL;
14032 goto out;
14033 }
14034
14035
14036 func->type = nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]);
14037
14038 if (!tb[NL80211_NAN_FUNC_SERVICE_ID]) {
14039 err = -EINVAL;
14040 goto out;
14041 }
14042
14043 memcpy(func->service_id, nla_data(tb[NL80211_NAN_FUNC_SERVICE_ID]),
14044 sizeof(func->service_id));
14045
14046 func->close_range =
14047 nla_get_flag(tb[NL80211_NAN_FUNC_CLOSE_RANGE]);
14048
14049 if (tb[NL80211_NAN_FUNC_SERVICE_INFO]) {
14050 func->serv_spec_info_len =
14051 nla_len(tb[NL80211_NAN_FUNC_SERVICE_INFO]);
14052 func->serv_spec_info =
14053 kmemdup(nla_data(tb[NL80211_NAN_FUNC_SERVICE_INFO]),
14054 func->serv_spec_info_len,
14055 GFP_KERNEL);
14056 if (!func->serv_spec_info) {
14057 err = -ENOMEM;
14058 goto out;
14059 }
14060 }
14061
14062 if (tb[NL80211_NAN_FUNC_TTL])
14063 func->ttl = nla_get_u32(tb[NL80211_NAN_FUNC_TTL]);
14064
14065 switch (func->type) {
14066 case NL80211_NAN_FUNC_PUBLISH:
14067 if (!tb[NL80211_NAN_FUNC_PUBLISH_TYPE]) {
14068 err = -EINVAL;
14069 goto out;
14070 }
14071
14072 func->publish_type =
14073 nla_get_u8(tb[NL80211_NAN_FUNC_PUBLISH_TYPE]);
14074 func->publish_bcast =
14075 nla_get_flag(tb[NL80211_NAN_FUNC_PUBLISH_BCAST]);
14076
14077 if ((!(func->publish_type & NL80211_NAN_SOLICITED_PUBLISH)) &&
14078 func->publish_bcast) {
14079 err = -EINVAL;
14080 goto out;
14081 }
14082 break;
14083 case NL80211_NAN_FUNC_SUBSCRIBE:
14084 func->subscribe_active =
14085 nla_get_flag(tb[NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE]);
14086 break;
14087 case NL80211_NAN_FUNC_FOLLOW_UP:
14088 if (!tb[NL80211_NAN_FUNC_FOLLOW_UP_ID] ||
3ea15452
HC		 14089 !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] ||
14090 !tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]) {
a442b761
AB		 14091 err = -EINVAL;
14092 goto out;
14093 }
14094
14095 func->followup_id =
14096 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_ID]);
14097 func->followup_reqid =
14098 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID]);
14099 memcpy(func->followup_dest.addr,
14100 nla_data(tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]),
14101 sizeof(func->followup_dest.addr));
14102 if (func->ttl) {
14103 err = -EINVAL;
14104 goto out;
14105 }
14106 break;
14107 default:
14108 err = -EINVAL;
14109 goto out;
14110 }
14111
14112 if (tb[NL80211_NAN_FUNC_SRF]) {
14113 struct nlattr *srf_tb[NUM_NL80211_NAN_SRF_ATTR];
14114
8cb08174
JB		 14115 err = nla_parse_nested_deprecated(srf_tb,
14116 NL80211_NAN_SRF_ATTR_MAX,
14117 tb[NL80211_NAN_FUNC_SRF],
14118 nl80211_nan_srf_policy,
14119 info->extack);
a442b761
AB		 14120 if (err)
14121 goto out;
14122
14123 func->srf_include =
14124 nla_get_flag(srf_tb[NL80211_NAN_SRF_INCLUDE]);
14125
14126 if (srf_tb[NL80211_NAN_SRF_BF]) {
14127 if (srf_tb[NL80211_NAN_SRF_MAC_ADDRS] ||
14128 !srf_tb[NL80211_NAN_SRF_BF_IDX]) {
14129 err = -EINVAL;
14130 goto out;
14131 }
14132
14133 func->srf_bf_len =
14134 nla_len(srf_tb[NL80211_NAN_SRF_BF]);
14135 func->srf_bf =
14136 kmemdup(nla_data(srf_tb[NL80211_NAN_SRF_BF]),
14137 func->srf_bf_len, GFP_KERNEL);
14138 if (!func->srf_bf) {
14139 err = -ENOMEM;
14140 goto out;
14141 }
14142
14143 func->srf_bf_idx =
14144 nla_get_u8(srf_tb[NL80211_NAN_SRF_BF_IDX]);
14145 } else {
14146 struct nlattr *attr, *mac_attr =
14147 srf_tb[NL80211_NAN_SRF_MAC_ADDRS];
14148 int n_entries, rem, i = 0;
14149
14150 if (!mac_attr) {
14151 err = -EINVAL;
14152 goto out;
14153 }
14154
14155 n_entries = validate_acl_mac_addrs(mac_attr);
14156 if (n_entries <= 0) {
14157 err = -EINVAL;
14158 goto out;
14159 }
14160
14161 func->srf_num_macs = n_entries;
14162 func->srf_macs =
6396bb22 14163 kcalloc(n_entries, sizeof(*func->srf_macs),
a442b761
AB		 14164 GFP_KERNEL);
14165 if (!func->srf_macs) {
14166 err = -ENOMEM;
14167 goto out;
14168 }
14169
14170 nla_for_each_nested(attr, mac_attr, rem)
14171 memcpy(func->srf_macs[i++].addr, nla_data(attr),
14172 sizeof(*func->srf_macs));
14173 }
14174 }
14175
14176 if (tb[NL80211_NAN_FUNC_TX_MATCH_FILTER]) {
14177 err = handle_nan_filter(tb[NL80211_NAN_FUNC_TX_MATCH_FILTER],
14178 func, true);
14179 if (err)
14180 goto out;
14181 }
14182
14183 if (tb[NL80211_NAN_FUNC_RX_MATCH_FILTER]) {
14184 err = handle_nan_filter(tb[NL80211_NAN_FUNC_RX_MATCH_FILTER],
14185 func, false);
14186 if (err)
14187 goto out;
14188 }
14189
14190 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14191 if (!msg) {
14192 err = -ENOMEM;
14193 goto out;
14194 }
14195
14196 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14197 NL80211_CMD_ADD_NAN_FUNCTION);
14198 /* This can't really happen - we just allocated 4KB */
14199 if (WARN_ON(!hdr)) {
14200 err = -ENOMEM;
14201 goto out;
14202 }
14203
14204 err = rdev_add_nan_func(rdev, wdev, func);
14205out:
14206 if (err < 0) {
14207 cfg80211_free_nan_func(func);
14208 nlmsg_free(msg);
14209 return err;
14210 }
14211
14212 /* propagate the instance id and cookie to userspace */
14213 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, func->cookie,
14214 NL80211_ATTR_PAD))
14215 goto nla_put_failure;
14216
ae0be8de 14217 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
a442b761
AB		 14218 if (!func_attr)
14219 goto nla_put_failure;
14220
14221 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID,
14222 func->instance_id))
14223 goto nla_put_failure;
14224
14225 nla_nest_end(msg, func_attr);
14226
14227 genlmsg_end(msg, hdr);
14228 return genlmsg_reply(msg, info);
14229
14230nla_put_failure:
14231 nlmsg_free(msg);
14232 return -ENOBUFS;
14233}
14234
14235static int nl80211_nan_del_func(struct sk_buff *skb,
14236 struct genl_info *info)
14237{
14238 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14239 struct wireless_dev *wdev = info->user_ptr[1];
14240 u64 cookie;
14241
14242 if (wdev->iftype != NL80211_IFTYPE_NAN)
14243 return -EOPNOTSUPP;
14244
73c7da3d 14245 if (!wdev_running(wdev))
a442b761
AB		 14246 return -ENOTCONN;
14247
14248 if (!info->attrs[NL80211_ATTR_COOKIE])
14249 return -EINVAL;
14250
a442b761
AB		 14251 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
14252
14253 rdev_del_nan_func(rdev, wdev, cookie);
14254
14255 return 0;
14256}
14257
a5a9dcf2
AB		 14258static int nl80211_nan_change_config(struct sk_buff *skb,
14259 struct genl_info *info)
14260{
14261 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14262 struct wireless_dev *wdev = info->user_ptr[1];
14263 struct cfg80211_nan_conf conf = {};
14264 u32 changed = 0;
14265
14266 if (wdev->iftype != NL80211_IFTYPE_NAN)
14267 return -EOPNOTSUPP;
14268
73c7da3d 14269 if (!wdev_running(wdev))
a5a9dcf2
AB		 14270 return -ENOTCONN;
14271
14272 if (info->attrs[NL80211_ATTR_NAN_MASTER_PREF]) {
14273 conf.master_pref =
14274 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
14275 if (conf.master_pref <= 1 || conf.master_pref == 255)
14276 return -EINVAL;
14277
14278 changed |= CFG80211_NAN_CONF_CHANGED_PREF;
14279 }
14280
8585989d
LC		 14281 if (info->attrs[NL80211_ATTR_BANDS]) {
14282 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
14283
14284 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
14285 return -EOPNOTSUPP;
14286
14287 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
14288 return -EINVAL;
14289
14290 conf.bands = bands;
14291 changed |= CFG80211_NAN_CONF_CHANGED_BANDS;
a5a9dcf2
AB		 14292 }
14293
14294 if (!changed)
14295 return -EINVAL;
14296
14297 return rdev_nan_change_conf(rdev, wdev, &conf, changed);
14298}
14299
50bcd31d
AB		 14300void cfg80211_nan_match(struct wireless_dev *wdev,
14301 struct cfg80211_nan_match_params *match, gfp_t gfp)
14302{
14303 struct wiphy *wiphy = wdev->wiphy;
14304 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14305 struct nlattr *match_attr, *local_func_attr, *peer_func_attr;
14306 struct sk_buff *msg;
14307 void *hdr;
14308
14309 if (WARN_ON(!match->inst_id || !match->peer_inst_id || !match->addr))
14310 return;
14311
14312 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
14313 if (!msg)
14314 return;
14315
14316 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NAN_MATCH);
14317 if (!hdr) {
14318 nlmsg_free(msg);
14319 return;
14320 }
14321
14322 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
14323 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
14324 wdev->netdev->ifindex)) ||
14325 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
14326 NL80211_ATTR_PAD))
14327 goto nla_put_failure;
14328
14329 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, match->cookie,
14330 NL80211_ATTR_PAD) ||
14331 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, match->addr))
14332 goto nla_put_failure;
14333
ae0be8de 14334 match_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_MATCH);
50bcd31d
AB		 14335 if (!match_attr)
14336 goto nla_put_failure;
14337
ae0be8de
MK		 14338 local_func_attr = nla_nest_start_noflag(msg,
14339 NL80211_NAN_MATCH_FUNC_LOCAL);
50bcd31d
AB		 14340 if (!local_func_attr)
14341 goto nla_put_failure;
14342
14343 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->inst_id))
14344 goto nla_put_failure;
14345
14346 nla_nest_end(msg, local_func_attr);
14347
ae0be8de
MK		 14348 peer_func_attr = nla_nest_start_noflag(msg,
14349 NL80211_NAN_MATCH_FUNC_PEER);
50bcd31d
AB		 14350 if (!peer_func_attr)
14351 goto nla_put_failure;
14352
14353 if (nla_put_u8(msg, NL80211_NAN_FUNC_TYPE, match->type) ||
14354 nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->peer_inst_id))
14355 goto nla_put_failure;
14356
14357 if (match->info && match->info_len &&
14358 nla_put(msg, NL80211_NAN_FUNC_SERVICE_INFO, match->info_len,
14359 match->info))
14360 goto nla_put_failure;
14361
14362 nla_nest_end(msg, peer_func_attr);
14363 nla_nest_end(msg, match_attr);
14364 genlmsg_end(msg, hdr);
14365
14366 if (!wdev->owner_nlportid)
14367 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
14368 msg, 0, NL80211_MCGRP_NAN, gfp);
14369 else
14370 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
14371 wdev->owner_nlportid);
14372
14373 return;
14374
14375nla_put_failure:
14376 nlmsg_free(msg);
14377}
14378EXPORT_SYMBOL(cfg80211_nan_match);
14379
368e5a7b
AB		 14380void cfg80211_nan_func_terminated(struct wireless_dev *wdev,
14381 u8 inst_id,
14382 enum nl80211_nan_func_term_reason reason,
14383 u64 cookie, gfp_t gfp)
14384{
14385 struct wiphy *wiphy = wdev->wiphy;
14386 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14387 struct sk_buff *msg;
14388 struct nlattr *func_attr;
14389 void *hdr;
14390
14391 if (WARN_ON(!inst_id))
14392 return;
14393
14394 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
14395 if (!msg)
14396 return;
14397
14398 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_NAN_FUNCTION);
14399 if (!hdr) {
14400 nlmsg_free(msg);
14401 return;
14402 }
14403
14404 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
14405 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
14406 wdev->netdev->ifindex)) ||
14407 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
14408 NL80211_ATTR_PAD))
14409 goto nla_put_failure;
14410
14411 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
14412 NL80211_ATTR_PAD))
14413 goto nla_put_failure;
14414
ae0be8de 14415 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
368e5a7b
AB		 14416 if (!func_attr)
14417 goto nla_put_failure;
14418
14419 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, inst_id) ||
14420 nla_put_u8(msg, NL80211_NAN_FUNC_TERM_REASON, reason))
14421 goto nla_put_failure;
14422
14423 nla_nest_end(msg, func_attr);
14424 genlmsg_end(msg, hdr);
14425
14426 if (!wdev->owner_nlportid)
14427 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
14428 msg, 0, NL80211_MCGRP_NAN, gfp);
14429 else
14430 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
14431 wdev->owner_nlportid);
14432
14433 return;
14434
14435nla_put_failure:
14436 nlmsg_free(msg);
14437}
14438EXPORT_SYMBOL(cfg80211_nan_func_terminated);
14439
3713b4e3
JB		 14440static int nl80211_get_protocol_features(struct sk_buff *skb,
14441 struct genl_info *info)
14442{
14443 void *hdr;
14444 struct sk_buff *msg;
14445
14446 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14447 if (!msg)
14448 return -ENOMEM;
14449
14450 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14451 NL80211_CMD_GET_PROTOCOL_FEATURES);
14452 if (!hdr)
14453 goto nla_put_failure;
14454
14455 if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
14456 NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
14457 goto nla_put_failure;
14458
14459 genlmsg_end(msg, hdr);
14460 return genlmsg_reply(msg, info);
14461
14462 nla_put_failure:
14463 kfree_skb(msg);
14464 return -ENOBUFS;
14465}
14466
355199e0
JM		 14467static int nl80211_update_ft_ies(struct sk_buff *skb, struct genl_info *info)
14468{
14469 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14470 struct cfg80211_update_ft_ies_params ft_params;
14471 struct net_device *dev = info->user_ptr[1];
14472
14473 if (!rdev->ops->update_ft_ies)
14474 return -EOPNOTSUPP;
14475
14476 if (!info->attrs[NL80211_ATTR_MDID] ||
3d7af878 14477 !info->attrs[NL80211_ATTR_IE])
355199e0
JM		 14478 return -EINVAL;
14479
14480 memset(&ft_params, 0, sizeof(ft_params));
14481 ft_params.md = nla_get_u16(info->attrs[NL80211_ATTR_MDID]);
14482 ft_params.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
14483 ft_params.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
14484
14485 return rdev_update_ft_ies(rdev, dev, &ft_params);
14486}
14487
5de17984
AS		 14488static int nl80211_crit_protocol_start(struct sk_buff *skb,
14489 struct genl_info *info)
14490{
14491 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14492 struct wireless_dev *wdev = info->user_ptr[1];
14493 enum nl80211_crit_proto_id proto = NL80211_CRIT_PROTO_UNSPEC;
14494 u16 duration;
14495 int ret;
14496
14497 if (!rdev->ops->crit_proto_start)
14498 return -EOPNOTSUPP;
14499
14500 if (WARN_ON(!rdev->ops->crit_proto_stop))
14501 return -EINVAL;
14502
14503 if (rdev->crit_proto_nlportid)
14504 return -EBUSY;
14505
14506 /* determine protocol if provided */
14507 if (info->attrs[NL80211_ATTR_CRIT_PROT_ID])
14508 proto = nla_get_u16(info->attrs[NL80211_ATTR_CRIT_PROT_ID]);
14509
14510 if (proto >= NUM_NL80211_CRIT_PROTO)
14511 return -EINVAL;
14512
14513 /* timeout must be provided */
14514 if (!info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION])
14515 return -EINVAL;
14516
14517 duration =
14518 nla_get_u16(info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION]);
14519
5de17984
AS		 14520 ret = rdev_crit_proto_start(rdev, wdev, proto, duration);
14521 if (!ret)
14522 rdev->crit_proto_nlportid = info->snd_portid;
14523
14524 return ret;
14525}
14526
14527static int nl80211_crit_protocol_stop(struct sk_buff *skb,
14528 struct genl_info *info)
14529{
14530 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14531 struct wireless_dev *wdev = info->user_ptr[1];
14532
14533 if (!rdev->ops->crit_proto_stop)
14534 return -EOPNOTSUPP;
14535
14536 if (rdev->crit_proto_nlportid) {
14537 rdev->crit_proto_nlportid = 0;
14538 rdev_crit_proto_stop(rdev, wdev);
14539 }
14540 return 0;
14541}
14542
901bb989
JB		 14543static int nl80211_vendor_check_policy(const struct wiphy_vendor_command *vcmd,
14544 struct nlattr *attr,
14545 struct netlink_ext_ack *extack)
14546{
14547 if (vcmd->policy == VENDOR_CMD_RAW_DATA) {
14548 if (attr->nla_type & NLA_F_NESTED) {
14549 NL_SET_ERR_MSG_ATTR(extack, attr,
14550 "unexpected nested data");
14551 return -EINVAL;
14552 }
14553
14554 return 0;
14555 }
14556
14557 if (!(attr->nla_type & NLA_F_NESTED)) {
14558 NL_SET_ERR_MSG_ATTR(extack, attr, "expected nested data");
14559 return -EINVAL;
14560 }
14561
32d5109a 14562 return nla_validate_nested(attr, vcmd->maxattr, vcmd->policy, extack);
901bb989
JB		 14563}
14564
ad7e718c
JB		 14565static int nl80211_vendor_cmd(struct sk_buff *skb, struct genl_info *info)
14566{
14567 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14568 struct wireless_dev *wdev =
a05829a7
JB		 14569 __cfg80211_wdev_from_attrs(rdev, genl_info_net(info),
14570 info->attrs);
ad7e718c
JB		 14571 int i, err;
14572 u32 vid, subcmd;
14573
14574 if (!rdev->wiphy.vendor_commands)
14575 return -EOPNOTSUPP;
14576
14577 if (IS_ERR(wdev)) {
14578 err = PTR_ERR(wdev);
14579 if (err != -EINVAL)
14580 return err;
14581 wdev = NULL;
14582 } else if (wdev->wiphy != &rdev->wiphy) {
14583 return -EINVAL;
14584 }
14585
14586 if (!info->attrs[NL80211_ATTR_VENDOR_ID] ||
14587 !info->attrs[NL80211_ATTR_VENDOR_SUBCMD])
14588 return -EINVAL;
14589
14590 vid = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_ID]);
14591 subcmd = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_SUBCMD]);
14592 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
14593 const struct wiphy_vendor_command *vcmd;
14594 void *data = NULL;
14595 int len = 0;
14596
14597 vcmd = &rdev->wiphy.vendor_commands[i];
14598
14599 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
14600 continue;
14601
14602 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
14603 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
14604 if (!wdev)
14605 return -EINVAL;
14606 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
14607 !wdev->netdev)
14608 return -EINVAL;
14609
14610 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
73c7da3d 14611 if (!wdev_running(wdev))
ad7e718c
JB		 14612 return -ENETDOWN;
14613 }
14614 } else {
14615 wdev = NULL;
14616 }
14617
4052d3d2
JS		 14618 if (!vcmd->doit)
14619 return -EOPNOTSUPP;
14620
ad7e718c
JB		 14621 if (info->attrs[NL80211_ATTR_VENDOR_DATA]) {
14622 data = nla_data(info->attrs[NL80211_ATTR_VENDOR_DATA]);
14623 len = nla_len(info->attrs[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 14624
14625 err = nl80211_vendor_check_policy(vcmd,
14626 info->attrs[NL80211_ATTR_VENDOR_DATA],
14627 info->extack);
14628 if (err)
14629 return err;
ad7e718c
JB		 14630 }
14631
14632 rdev->cur_cmd_info = info;
901bb989 14633 err = vcmd->doit(&rdev->wiphy, wdev, data, len);
ad7e718c
JB		 14634 rdev->cur_cmd_info = NULL;
14635 return err;
14636 }
14637
14638 return -EOPNOTSUPP;
14639}
14640
7bdbe400
JB		 14641static int nl80211_prepare_vendor_dump(struct sk_buff *skb,
14642 struct netlink_callback *cb,
14643 struct cfg80211_registered_device **rdev,
14644 struct wireless_dev **wdev)
14645{
50508d94 14646 struct nlattr **attrbuf;
7bdbe400
JB		 14647 u32 vid, subcmd;
14648 unsigned int i;
14649 int vcmd_idx = -1;
14650 int err;
14651 void *data = NULL;
14652 unsigned int data_len = 0;
14653
7bdbe400
JB		 14654 if (cb->args[0]) {
14655 /* subtract the 1 again here */
14656 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
14657 struct wireless_dev *tmp;
14658
ea90e0dc
JB		 14659 if (!wiphy)
14660 return -ENODEV;
7bdbe400
JB		 14661 *rdev = wiphy_to_rdev(wiphy);
14662 *wdev = NULL;
14663
14664 if (cb->args[1]) {
53873f13 14665 list_for_each_entry(tmp, &wiphy->wdev_list, list) {
7bdbe400
JB		 14666 if (tmp->identifier == cb->args[1] - 1) {
14667 *wdev = tmp;
14668 break;
14669 }
14670 }
14671 }
14672
14673 /* keep rtnl locked in successful case */
14674 return 0;
14675 }
14676
50508d94
JB		 14677 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
14678 if (!attrbuf)
14679 return -ENOMEM;
14680
8cb08174
JB		 14681 err = nlmsg_parse_deprecated(cb->nlh,
14682 GENL_HDRLEN + nl80211_fam.hdrsize,
14683 attrbuf, nl80211_fam.maxattr,
14684 nl80211_policy, NULL);
7bdbe400 14685 if (err)
50508d94 14686 goto out;
7bdbe400 14687
c90c39da 14688 if (!attrbuf[NL80211_ATTR_VENDOR_ID] ||
50508d94
JB		 14689 !attrbuf[NL80211_ATTR_VENDOR_SUBCMD]) {
14690 err = -EINVAL;
14691 goto out;
14692 }
7bdbe400 14693
a05829a7 14694 *wdev = __cfg80211_wdev_from_attrs(NULL, sock_net(skb->sk), attrbuf);
7bdbe400
JB		 14695 if (IS_ERR(*wdev))
14696 *wdev = NULL;
14697
c90c39da 14698 *rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
50508d94
JB		 14699 if (IS_ERR(*rdev)) {
14700 err = PTR_ERR(*rdev);
14701 goto out;
14702 }
7bdbe400 14703
c90c39da
JB		 14704 vid = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_ID]);
14705 subcmd = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_SUBCMD]);
7bdbe400
JB		 14706
14707 for (i = 0; i < (*rdev)->wiphy.n_vendor_commands; i++) {
14708 const struct wiphy_vendor_command *vcmd;
14709
14710 vcmd = &(*rdev)->wiphy.vendor_commands[i];
14711
14712 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
14713 continue;
14714
50508d94
JB		 14715 if (!vcmd->dumpit) {
14716 err = -EOPNOTSUPP;
14717 goto out;
14718 }
7bdbe400
JB		 14719
14720 vcmd_idx = i;
14721 break;
14722 }
14723
50508d94
JB		 14724 if (vcmd_idx < 0) {
14725 err = -EOPNOTSUPP;
14726 goto out;
14727 }
7bdbe400 14728
c90c39da
JB		 14729 if (attrbuf[NL80211_ATTR_VENDOR_DATA]) {
14730 data = nla_data(attrbuf[NL80211_ATTR_VENDOR_DATA]);
14731 data_len = nla_len(attrbuf[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 14732
14733 err = nl80211_vendor_check_policy(
14734 &(*rdev)->wiphy.vendor_commands[vcmd_idx],
14735 attrbuf[NL80211_ATTR_VENDOR_DATA],
14736 cb->extack);
14737 if (err)
50508d94 14738 goto out;
7bdbe400
JB		 14739 }
14740
14741 /* 0 is the first index - add 1 to parse only once */
14742 cb->args[0] = (*rdev)->wiphy_idx + 1;
14743 /* add 1 to know if it was NULL */
14744 cb->args[1] = *wdev ? (*wdev)->identifier + 1 : 0;
14745 cb->args[2] = vcmd_idx;
14746 cb->args[3] = (unsigned long)data;
14747 cb->args[4] = data_len;
14748
14749 /* keep rtnl locked in successful case */
50508d94
JB		 14750 err = 0;
14751out:
14752 kfree(attrbuf);
14753 return err;
7bdbe400
JB		 14754}
14755
14756static int nl80211_vendor_cmd_dump(struct sk_buff *skb,
14757 struct netlink_callback *cb)
14758{
14759 struct cfg80211_registered_device *rdev;
14760 struct wireless_dev *wdev;
14761 unsigned int vcmd_idx;
14762 const struct wiphy_vendor_command *vcmd;
14763 void *data;
14764 int data_len;
14765 int err;
14766 struct nlattr *vendor_data;
14767
ea90e0dc 14768 rtnl_lock();
7bdbe400
JB		 14769 err = nl80211_prepare_vendor_dump(skb, cb, &rdev, &wdev);
14770 if (err)
ea90e0dc 14771 goto out;
7bdbe400
JB		 14772
14773 vcmd_idx = cb->args[2];
14774 data = (void *)cb->args[3];
14775 data_len = cb->args[4];
14776 vcmd = &rdev->wiphy.vendor_commands[vcmd_idx];
14777
14778 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
14779 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
ea90e0dc
JB		 14780 if (!wdev) {
14781 err = -EINVAL;
14782 goto out;
14783 }
7bdbe400 14784 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
ea90e0dc
JB		 14785 !wdev->netdev) {
14786 err = -EINVAL;
14787 goto out;
14788 }
7bdbe400
JB		 14789
14790 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
ea90e0dc
JB		 14791 if (!wdev_running(wdev)) {
14792 err = -ENETDOWN;
14793 goto out;
14794 }
7bdbe400
JB		 14795 }
14796 }
14797
14798 while (1) {
14799 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
14800 cb->nlh->nlmsg_seq, NLM_F_MULTI,
14801 NL80211_CMD_VENDOR);
14802 if (!hdr)
14803 break;
14804
14805 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 14806 (wdev && nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
14807 wdev_id(wdev),
14808 NL80211_ATTR_PAD))) {
7bdbe400
JB		 14809 genlmsg_cancel(skb, hdr);
14810 break;
14811 }
14812
ae0be8de
MK		 14813 vendor_data = nla_nest_start_noflag(skb,
14814 NL80211_ATTR_VENDOR_DATA);
7bdbe400
JB		 14815 if (!vendor_data) {
14816 genlmsg_cancel(skb, hdr);
14817 break;
14818 }
14819
14820 err = vcmd->dumpit(&rdev->wiphy, wdev, skb, data, data_len,
14821 (unsigned long *)&cb->args[5]);
14822 nla_nest_end(skb, vendor_data);
14823
14824 if (err == -ENOBUFS || err == -ENOENT) {
14825 genlmsg_cancel(skb, hdr);
14826 break;
9c167b2d 14827 } else if (err <= 0) {
7bdbe400
JB		 14828 genlmsg_cancel(skb, hdr);
14829 goto out;
14830 }
14831
14832 genlmsg_end(skb, hdr);
14833 }
14834
14835 err = skb->len;
14836 out:
14837 rtnl_unlock();
14838 return err;
14839}
14840
ad7e718c
JB		 14841struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
14842 enum nl80211_commands cmd,
14843 enum nl80211_attrs attr,
14844 int approxlen)
14845{
f26cbf40 14846 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ad7e718c
JB		 14847
14848 if (WARN_ON(!rdev->cur_cmd_info))
14849 return NULL;
14850
6c09e791 14851 return __cfg80211_alloc_vendor_skb(rdev, NULL, approxlen,
ad7e718c
JB		 14852 rdev->cur_cmd_info->snd_portid,
14853 rdev->cur_cmd_info->snd_seq,
567ffc35 14854 cmd, attr, NULL, GFP_KERNEL);
ad7e718c
JB		 14855}
14856EXPORT_SYMBOL(__cfg80211_alloc_reply_skb);
14857
14858int cfg80211_vendor_cmd_reply(struct sk_buff *skb)
14859{
14860 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
14861 void *hdr = ((void **)skb->cb)[1];
14862 struct nlattr *data = ((void **)skb->cb)[2];
14863
bd8c78e7
JB		 14864 /* clear CB data for netlink core to own from now on */
14865 memset(skb->cb, 0, sizeof(skb->cb));
14866
ad7e718c
JB		 14867 if (WARN_ON(!rdev->cur_cmd_info)) {
14868 kfree_skb(skb);
14869 return -EINVAL;
14870 }
14871
14872 nla_nest_end(skb, data);
14873 genlmsg_end(skb, hdr);
14874 return genlmsg_reply(skb, rdev->cur_cmd_info);
14875}
14876EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_reply);
14877
55c1fdf0
JB		 14878unsigned int cfg80211_vendor_cmd_get_sender(struct wiphy *wiphy)
14879{
14880 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
14881
14882 if (WARN_ON(!rdev->cur_cmd_info))
14883 return 0;
14884
14885 return rdev->cur_cmd_info->snd_portid;
14886}
14887EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_get_sender);
14888
fa9ffc74
KP		 14889static int nl80211_set_qos_map(struct sk_buff *skb,
14890 struct genl_info *info)
14891{
14892 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14893 struct cfg80211_qos_map *qos_map = NULL;
14894 struct net_device *dev = info->user_ptr[1];
14895 u8 *pos, len, num_des, des_len, des;
14896 int ret;
14897
14898 if (!rdev->ops->set_qos_map)
14899 return -EOPNOTSUPP;
14900
14901 if (info->attrs[NL80211_ATTR_QOS_MAP]) {
14902 pos = nla_data(info->attrs[NL80211_ATTR_QOS_MAP]);
14903 len = nla_len(info->attrs[NL80211_ATTR_QOS_MAP]);
14904
c8b82802 14905 if (len % 2)
fa9ffc74
KP		 14906 return -EINVAL;
14907
14908 qos_map = kzalloc(sizeof(struct cfg80211_qos_map), GFP_KERNEL);
14909 if (!qos_map)
14910 return -ENOMEM;
14911
14912 num_des = (len - IEEE80211_QOS_MAP_LEN_MIN) >> 1;
14913 if (num_des) {
14914 des_len = num_des *
14915 sizeof(struct cfg80211_dscp_exception);
14916 memcpy(qos_map->dscp_exception, pos, des_len);
14917 qos_map->num_des = num_des;
14918 for (des = 0; des < num_des; des++) {
14919 if (qos_map->dscp_exception[des].up > 7) {
14920 kfree(qos_map);
14921 return -EINVAL;
14922 }
14923 }
14924 pos += des_len;
14925 }
14926 memcpy(qos_map->up, pos, IEEE80211_QOS_MAP_LEN_MIN);
14927 }
14928
14929 wdev_lock(dev->ieee80211_ptr);
14930 ret = nl80211_key_allowed(dev->ieee80211_ptr);
14931 if (!ret)
14932 ret = rdev_set_qos_map(rdev, dev, qos_map);
14933 wdev_unlock(dev->ieee80211_ptr);
14934
14935 kfree(qos_map);
14936 return ret;
14937}
14938
960d01ac
JB		 14939static int nl80211_add_tx_ts(struct sk_buff *skb, struct genl_info *info)
14940{
14941 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14942 struct net_device *dev = info->user_ptr[1];
14943 struct wireless_dev *wdev = dev->ieee80211_ptr;
14944 const u8 *peer;
14945 u8 tsid, up;
14946 u16 admitted_time = 0;
14947 int err;
14948
723e73ac 14949 if (!(rdev->wiphy.features & NL80211_FEATURE_SUPPORTS_WMM_ADMISSION))
960d01ac
JB		 14950 return -EOPNOTSUPP;
14951
14952 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC] ||
14953 !info->attrs[NL80211_ATTR_USER_PRIO])
14954 return -EINVAL;
14955
14956 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
960d01ac 14957 up = nla_get_u8(info->attrs[NL80211_ATTR_USER_PRIO]);
960d01ac
JB		 14958
14959 /* WMM uses TIDs 0-7 even for TSPEC */
723e73ac 14960 if (tsid >= IEEE80211_FIRST_TSPEC_TSID) {
960d01ac 14961 /* TODO: handle 802.11 TSPEC/admission control
723e73ac
JB		 14962 * need more attributes for that (e.g. BA session requirement);
14963 * change the WMM adminssion test above to allow both then
960d01ac
JB		 14964 */
14965 return -EINVAL;
14966 }
14967
14968 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14969
14970 if (info->attrs[NL80211_ATTR_ADMITTED_TIME]) {
14971 admitted_time =
14972 nla_get_u16(info->attrs[NL80211_ATTR_ADMITTED_TIME]);
14973 if (!admitted_time)
14974 return -EINVAL;
14975 }
14976
14977 wdev_lock(wdev);
14978 switch (wdev->iftype) {
14979 case NL80211_IFTYPE_STATION:
14980 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c 14981 if (wdev->connected)
960d01ac
JB		 14982 break;
14983 err = -ENOTCONN;
14984 goto out;
14985 default:
14986 err = -EOPNOTSUPP;
14987 goto out;
14988 }
14989
14990 err = rdev_add_tx_ts(rdev, dev, tsid, peer, up, admitted_time);
14991
14992 out:
14993 wdev_unlock(wdev);
14994 return err;
14995}
14996
14997static int nl80211_del_tx_ts(struct sk_buff *skb, struct genl_info *info)
14998{
14999 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15000 struct net_device *dev = info->user_ptr[1];
15001 struct wireless_dev *wdev = dev->ieee80211_ptr;
15002 const u8 *peer;
15003 u8 tsid;
15004 int err;
15005
15006 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC])
15007 return -EINVAL;
15008
15009 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
15010 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
15011
15012 wdev_lock(wdev);
15013 err = rdev_del_tx_ts(rdev, dev, tsid, peer);
15014 wdev_unlock(wdev);
15015
15016 return err;
15017}
15018
1057d35e
AN		 15019static int nl80211_tdls_channel_switch(struct sk_buff *skb,
15020 struct genl_info *info)
15021{
15022 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15023 struct net_device *dev = info->user_ptr[1];
15024 struct wireless_dev *wdev = dev->ieee80211_ptr;
15025 struct cfg80211_chan_def chandef = {};
15026 const u8 *addr;
15027 u8 oper_class;
15028 int err;
15029
15030 if (!rdev->ops->tdls_channel_switch ||
15031 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
15032 return -EOPNOTSUPP;
15033
15034 switch (dev->ieee80211_ptr->iftype) {
15035 case NL80211_IFTYPE_STATION:
15036 case NL80211_IFTYPE_P2P_CLIENT:
15037 break;
15038 default:
15039 return -EOPNOTSUPP;
15040 }
15041
15042 if (!info->attrs[NL80211_ATTR_MAC] ||
15043 !info->attrs[NL80211_ATTR_OPER_CLASS])
15044 return -EINVAL;
15045
15046 err = nl80211_parse_chandef(rdev, info, &chandef);
15047 if (err)
15048 return err;
15049
15050 /*
15051 * Don't allow wide channels on the 2.4Ghz band, as per IEEE802.11-2012
15052 * section 10.22.6.2.1. Disallow 5/10Mhz channels as well for now, the
15053 * specification is not defined for them.
15054 */
57fbcce3 15055 if (chandef.chan->band == NL80211_BAND_2GHZ &&
1057d35e
AN		 15056 chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
15057 chandef.width != NL80211_CHAN_WIDTH_20)
15058 return -EINVAL;
15059
15060 /* we will be active on the TDLS link */
923b352f
AN		 15061 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
15062 wdev->iftype))
1057d35e
AN		 15063 return -EINVAL;
15064
15065 /* don't allow switching to DFS channels */
15066 if (cfg80211_chandef_dfs_required(wdev->wiphy, &chandef, wdev->iftype))
15067 return -EINVAL;
15068
15069 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15070 oper_class = nla_get_u8(info->attrs[NL80211_ATTR_OPER_CLASS]);
15071
15072 wdev_lock(wdev);
15073 err = rdev_tdls_channel_switch(rdev, dev, addr, oper_class, &chandef);
15074 wdev_unlock(wdev);
15075
15076 return err;
15077}
15078
15079static int nl80211_tdls_cancel_channel_switch(struct sk_buff *skb,
15080 struct genl_info *info)
15081{
15082 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15083 struct net_device *dev = info->user_ptr[1];
15084 struct wireless_dev *wdev = dev->ieee80211_ptr;
15085 const u8 *addr;
15086
15087 if (!rdev->ops->tdls_channel_switch ||
15088 !rdev->ops->tdls_cancel_channel_switch ||
15089 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
15090 return -EOPNOTSUPP;
15091
15092 switch (dev->ieee80211_ptr->iftype) {
15093 case NL80211_IFTYPE_STATION:
15094 case NL80211_IFTYPE_P2P_CLIENT:
15095 break;
15096 default:
15097 return -EOPNOTSUPP;
15098 }
15099
15100 if (!info->attrs[NL80211_ATTR_MAC])
15101 return -EINVAL;
15102
15103 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15104
15105 wdev_lock(wdev);
15106 rdev_tdls_cancel_channel_switch(rdev, dev, addr);
15107 wdev_unlock(wdev);
15108
15109 return 0;
15110}
15111
ce0ce13a
MB		 15112static int nl80211_set_multicast_to_unicast(struct sk_buff *skb,
15113 struct genl_info *info)
15114{
15115 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15116 struct net_device *dev = info->user_ptr[1];
15117 struct wireless_dev *wdev = dev->ieee80211_ptr;
15118 const struct nlattr *nla;
15119 bool enabled;
15120
ce0ce13a
MB		 15121 if (!rdev->ops->set_multicast_to_unicast)
15122 return -EOPNOTSUPP;
15123
15124 if (wdev->iftype != NL80211_IFTYPE_AP &&
15125 wdev->iftype != NL80211_IFTYPE_P2P_GO)
15126 return -EOPNOTSUPP;
15127
15128 nla = info->attrs[NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED];
15129 enabled = nla_get_flag(nla);
15130
15131 return rdev_set_multicast_to_unicast(rdev, dev, enabled);
15132}
15133
3a00df57
AS		 15134static int nl80211_set_pmk(struct sk_buff *skb, struct genl_info *info)
15135{
15136 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15137 struct net_device *dev = info->user_ptr[1];
15138 struct wireless_dev *wdev = dev->ieee80211_ptr;
15139 struct cfg80211_pmk_conf pmk_conf = {};
15140 int ret;
15141
15142 if (wdev->iftype != NL80211_IFTYPE_STATION &&
15143 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
15144 return -EOPNOTSUPP;
15145
15146 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15147 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
15148 return -EOPNOTSUPP;
15149
15150 if (!info->attrs[NL80211_ATTR_MAC] || !info->attrs[NL80211_ATTR_PMK])
15151 return -EINVAL;
15152
15153 wdev_lock(wdev);
7b0a0e3c 15154 if (!wdev->connected) {
3a00df57
AS		 15155 ret = -ENOTCONN;
15156 goto out;
15157 }
15158
15159 pmk_conf.aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
7b0a0e3c 15160 if (memcmp(pmk_conf.aa, wdev->u.client.connected_addr, ETH_ALEN)) {
3a00df57
AS		 15161 ret = -EINVAL;
15162 goto out;
15163 }
15164
15165 pmk_conf.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
15166 pmk_conf.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
15167 if (pmk_conf.pmk_len != WLAN_PMK_LEN &&
15168 pmk_conf.pmk_len != WLAN_PMK_LEN_SUITE_B_192) {
15169 ret = -EINVAL;
15170 goto out;
15171 }
15172
cb9abd48 15173 if (info->attrs[NL80211_ATTR_PMKR0_NAME])
3a00df57
AS		 15174 pmk_conf.pmk_r0_name =
15175 nla_data(info->attrs[NL80211_ATTR_PMKR0_NAME]);
3a00df57
AS		 15176
15177 ret = rdev_set_pmk(rdev, dev, &pmk_conf);
15178out:
15179 wdev_unlock(wdev);
15180 return ret;
15181}
15182
15183static int nl80211_del_pmk(struct sk_buff *skb, struct genl_info *info)
15184{
15185 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15186 struct net_device *dev = info->user_ptr[1];
15187 struct wireless_dev *wdev = dev->ieee80211_ptr;
15188 const u8 *aa;
15189 int ret;
15190
15191 if (wdev->iftype != NL80211_IFTYPE_STATION &&
15192 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
15193 return -EOPNOTSUPP;
15194
15195 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15196 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
15197 return -EOPNOTSUPP;
15198
15199 if (!info->attrs[NL80211_ATTR_MAC])
15200 return -EINVAL;
15201
15202 wdev_lock(wdev);
15203 aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
15204 ret = rdev_del_pmk(rdev, dev, aa);
15205 wdev_unlock(wdev);
15206
15207 return ret;
15208}
15209
40cbfa90
SD		 15210static int nl80211_external_auth(struct sk_buff *skb, struct genl_info *info)
15211{
15212 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15213 struct net_device *dev = info->user_ptr[1];
15214 struct cfg80211_external_auth_params params;
15215
db8d93a7 15216 if (!rdev->ops->external_auth)
40cbfa90
SD		 15217 return -EOPNOTSUPP;
15218
fe494370
SD		 15219 if (!info->attrs[NL80211_ATTR_SSID] &&
15220 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
15221 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
40cbfa90
SD		 15222 return -EINVAL;
15223
15224 if (!info->attrs[NL80211_ATTR_BSSID])
15225 return -EINVAL;
15226
15227 if (!info->attrs[NL80211_ATTR_STATUS_CODE])
15228 return -EINVAL;
15229
15230 memset(&params, 0, sizeof(params));
15231
fe494370
SD		 15232 if (info->attrs[NL80211_ATTR_SSID]) {
15233 params.ssid.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
cb9abd48 15234 if (params.ssid.ssid_len == 0)
fe494370
SD		 15235 return -EINVAL;
15236 memcpy(params.ssid.ssid,
15237 nla_data(info->attrs[NL80211_ATTR_SSID]),
15238 params.ssid.ssid_len);
15239 }
40cbfa90
SD		 15240
15241 memcpy(params.bssid, nla_data(info->attrs[NL80211_ATTR_BSSID]),
15242 ETH_ALEN);
15243
15244 params.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
15245
fe494370
SD		 15246 if (info->attrs[NL80211_ATTR_PMKID])
15247 params.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
15248
40cbfa90
SD		 15249 return rdev_external_auth(rdev, dev, &params);
15250}
15251
2576a9ac
DK		 15252static int nl80211_tx_control_port(struct sk_buff *skb, struct genl_info *info)
15253{
dca9ca2d 15254 bool dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
2576a9ac
DK		 15255 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15256 struct net_device *dev = info->user_ptr[1];
15257 struct wireless_dev *wdev = dev->ieee80211_ptr;
15258 const u8 *buf;
15259 size_t len;
15260 u8 *dest;
15261 u16 proto;
15262 bool noencrypt;
dca9ca2d 15263 u64 cookie = 0;
67207bab 15264 int link_id;
2576a9ac
DK		 15265 int err;
15266
15267 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15268 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
15269 return -EOPNOTSUPP;
15270
15271 if (!rdev->ops->tx_control_port)
15272 return -EOPNOTSUPP;
15273
15274 if (!info->attrs[NL80211_ATTR_FRAME] ||
15275 !info->attrs[NL80211_ATTR_MAC] ||
15276 !info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
15277 GENL_SET_ERR_MSG(info, "Frame, MAC or ethertype missing");
15278 return -EINVAL;
15279 }
15280
15281 wdev_lock(wdev);
15282
15283 switch (wdev->iftype) {
15284 case NL80211_IFTYPE_AP:
15285 case NL80211_IFTYPE_P2P_GO:
15286 case NL80211_IFTYPE_MESH_POINT:
15287 break;
15288 case NL80211_IFTYPE_ADHOC:
7b0a0e3c
JB		 15289 if (wdev->u.ibss.current_bss)
15290 break;
15291 err = -ENOTCONN;
15292 goto out;
2576a9ac
DK		 15293 case NL80211_IFTYPE_STATION:
15294 case NL80211_IFTYPE_P2P_CLIENT:
7b0a0e3c 15295 if (wdev->connected)
2576a9ac
DK		 15296 break;
15297 err = -ENOTCONN;
15298 goto out;
15299 default:
15300 err = -EOPNOTSUPP;
15301 goto out;
15302 }
15303
15304 wdev_unlock(wdev);
15305
15306 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
15307 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
15308 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
15309 proto = nla_get_u16(info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
15310 noencrypt =
15311 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]);
15312
67207bab
AO		 15313 link_id = nl80211_link_id_or_invalid(info->attrs);
15314
dca9ca2d 15315 err = rdev_tx_control_port(rdev, dev, buf, len,
67207bab 15316 dest, cpu_to_be16(proto), noencrypt, link_id,
dca9ca2d
MT		 15317 dont_wait_for_ack ? NULL : &cookie);
15318 if (!err && !dont_wait_for_ack)
15319 nl_set_extack_cookie_u64(info->extack, cookie);
15320 return err;
2576a9ac
DK		 15321 out:
15322 wdev_unlock(wdev);
15323 return err;
15324}
15325
81e54d08
PKC		 15326static int nl80211_get_ftm_responder_stats(struct sk_buff *skb,
15327 struct genl_info *info)
15328{
15329 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15330 struct net_device *dev = info->user_ptr[1];
15331 struct wireless_dev *wdev = dev->ieee80211_ptr;
15332 struct cfg80211_ftm_responder_stats ftm_stats = {};
7b0a0e3c 15333 unsigned int link_id = nl80211_link_id(info->attrs);
81e54d08
PKC		 15334 struct sk_buff *msg;
15335 void *hdr;
15336 struct nlattr *ftm_stats_attr;
15337 int err;
15338
7b0a0e3c
JB		 15339 if (wdev->iftype != NL80211_IFTYPE_AP ||
15340 !wdev->links[link_id].ap.beacon_interval)
81e54d08
PKC		 15341 return -EOPNOTSUPP;
15342
15343 err = rdev_get_ftm_responder_stats(rdev, dev, &ftm_stats);
15344 if (err)
15345 return err;
15346
15347 if (!ftm_stats.filled)
15348 return -ENODATA;
15349
15350 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15351 if (!msg)
15352 return -ENOMEM;
15353
15354 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
15355 NL80211_CMD_GET_FTM_RESPONDER_STATS);
15356 if (!hdr)
1399c59f 15357 goto nla_put_failure;
81e54d08
PKC		 15358
15359 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
15360 goto nla_put_failure;
15361
ae0be8de
MK		 15362 ftm_stats_attr = nla_nest_start_noflag(msg,
15363 NL80211_ATTR_FTM_RESPONDER_STATS);
81e54d08
PKC		 15364 if (!ftm_stats_attr)
15365 goto nla_put_failure;
15366
15367#define SET_FTM(field, name, type) \
15368 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
15369 nla_put_ ## type(msg, NL80211_FTM_STATS_ ## name, \
15370 ftm_stats.field)) \
15371 goto nla_put_failure; } while (0)
15372#define SET_FTM_U64(field, name) \
15373 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
15374 nla_put_u64_64bit(msg, NL80211_FTM_STATS_ ## name, \
15375 ftm_stats.field, NL80211_FTM_STATS_PAD)) \
15376 goto nla_put_failure; } while (0)
15377
15378 SET_FTM(success_num, SUCCESS_NUM, u32);
15379 SET_FTM(partial_num, PARTIAL_NUM, u32);
15380 SET_FTM(failed_num, FAILED_NUM, u32);
15381 SET_FTM(asap_num, ASAP_NUM, u32);
15382 SET_FTM(non_asap_num, NON_ASAP_NUM, u32);
15383 SET_FTM_U64(total_duration_ms, TOTAL_DURATION_MSEC);
15384 SET_FTM(unknown_triggers_num, UNKNOWN_TRIGGERS_NUM, u32);
15385 SET_FTM(reschedule_requests_num, RESCHEDULE_REQUESTS_NUM, u32);
15386 SET_FTM(out_of_window_triggers_num, OUT_OF_WINDOW_TRIGGERS_NUM, u32);
15387#undef SET_FTM
15388
15389 nla_nest_end(msg, ftm_stats_attr);
15390
15391 genlmsg_end(msg, hdr);
15392 return genlmsg_reply(msg, info);
15393
15394nla_put_failure:
15395 nlmsg_free(msg);
15396 return -ENOBUFS;
15397}
15398
cb74e977
SD		 15399static int nl80211_update_owe_info(struct sk_buff *skb, struct genl_info *info)
15400{
15401 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15402 struct cfg80211_update_owe_info owe_info;
15403 struct net_device *dev = info->user_ptr[1];
15404
15405 if (!rdev->ops->update_owe_info)
15406 return -EOPNOTSUPP;
15407
15408 if (!info->attrs[NL80211_ATTR_STATUS_CODE] ||
15409 !info->attrs[NL80211_ATTR_MAC])
15410 return -EINVAL;
15411
15412 memset(&owe_info, 0, sizeof(owe_info));
15413 owe_info.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
15414 nla_memcpy(owe_info.peer, info->attrs[NL80211_ATTR_MAC], ETH_ALEN);
15415
15416 if (info->attrs[NL80211_ATTR_IE]) {
15417 owe_info.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
15418 owe_info.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
15419 }
15420
15421 return rdev_update_owe_info(rdev, dev, &owe_info);
15422}
15423
5ab92e7f
RM		 15424static int nl80211_probe_mesh_link(struct sk_buff *skb, struct genl_info *info)
15425{
15426 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15427 struct net_device *dev = info->user_ptr[1];
15428 struct wireless_dev *wdev = dev->ieee80211_ptr;
15429 struct station_info sinfo = {};
15430 const u8 *buf;
15431 size_t len;
15432 u8 *dest;
15433 int err;
15434
15435 if (!rdev->ops->probe_mesh_link || !rdev->ops->get_station)
15436 return -EOPNOTSUPP;
15437
15438 if (!info->attrs[NL80211_ATTR_MAC] ||
15439 !info->attrs[NL80211_ATTR_FRAME]) {
15440 GENL_SET_ERR_MSG(info, "Frame or MAC missing");
15441 return -EINVAL;
15442 }
15443
15444 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
15445 return -EOPNOTSUPP;
15446
15447 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
15448 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
15449 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
15450
15451 if (len < sizeof(struct ethhdr))
15452 return -EINVAL;
15453
15454 if (!ether_addr_equal(buf, dest) || is_multicast_ether_addr(buf) ||
15455 !ether_addr_equal(buf + ETH_ALEN, dev->dev_addr))
15456 return -EINVAL;
15457
15458 err = rdev_get_station(rdev, dev, dest, &sinfo);
15459 if (err)
15460 return err;
15461
2a279b34
FF		 15462 cfg80211_sinfo_release_content(&sinfo);
15463
5ab92e7f
RM		 15464 return rdev_probe_mesh_link(rdev, dev, dest, buf, len);
15465}
15466
77f576de
T		 15467static int parse_tid_conf(struct cfg80211_registered_device *rdev,
15468 struct nlattr *attrs[], struct net_device *dev,
3710a8a6 15469 struct cfg80211_tid_cfg *tid_conf,
7b0a0e3c
JB		 15470 struct genl_info *info, const u8 *peer,
15471 unsigned int link_id)
77f576de
T		 15472{
15473 struct netlink_ext_ack *extack = info->extack;
3710a8a6 15474 u64 mask;
77f576de
T		 15475 int err;
15476
15477 if (!attrs[NL80211_TID_CONFIG_ATTR_TIDS])
15478 return -EINVAL;
15479
15480 tid_conf->config_override =
15481 nla_get_flag(attrs[NL80211_TID_CONFIG_ATTR_OVERRIDE]);
3710a8a6 15482 tid_conf->tids = nla_get_u16(attrs[NL80211_TID_CONFIG_ATTR_TIDS]);
77f576de
T		 15483
15484 if (tid_conf->config_override) {
15485 if (rdev->ops->reset_tid_config) {
15486 err = rdev_reset_tid_config(rdev, dev, peer,
3710a8a6 15487 tid_conf->tids);
c0336955 15488 if (err)
77f576de
T		 15489 return err;
15490 } else {
15491 return -EINVAL;
15492 }
15493 }
15494
15495 if (attrs[NL80211_TID_CONFIG_ATTR_NOACK]) {
3710a8a6 15496 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_NOACK);
77f576de
T		 15497 tid_conf->noack =
15498 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_NOACK]);
15499 }
15500
6a21d16c
T		 15501 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]) {
15502 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_SHORT);
15503 tid_conf->retry_short =
15504 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]);
15505
15506 if (tid_conf->retry_short > rdev->wiphy.max_data_retry_count)
15507 return -EINVAL;
15508 }
15509
15510 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]) {
15511 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_LONG);
15512 tid_conf->retry_long =
15513 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]);
15514
15515 if (tid_conf->retry_long > rdev->wiphy.max_data_retry_count)
15516 return -EINVAL;
15517 }
15518
ade274b2
T		 15519 if (attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]) {
15520 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMPDU_CTRL);
15521 tid_conf->ampdu =
15522 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]);
15523 }
15524
04f7d142
T		 15525 if (attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]) {
15526 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL);
15527 tid_conf->rtscts =
15528 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]);
15529 }
15530
33462e68
SM		 15531 if (attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]) {
15532 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMSDU_CTRL);
15533 tid_conf->amsdu =
15534 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]);
15535 }
15536
9a5f6488
TC		 15537 if (attrs[NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE]) {
15538 u32 idx = NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE, attr;
15539
15540 tid_conf->txrate_type = nla_get_u8(attrs[idx]);
15541
15542 if (tid_conf->txrate_type != NL80211_TX_RATE_AUTOMATIC) {
15543 attr = NL80211_TID_CONFIG_ATTR_TX_RATE;
15544 err = nl80211_parse_tx_bitrate_mask(info, attrs, attr,
857b34c4 15545 &tid_conf->txrate_mask, dev,
7b0a0e3c 15546 true, link_id);
9a5f6488
TC		 15547 if (err)
15548 return err;
15549
15550 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE);
15551 }
15552 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE);
15553 }
15554
3710a8a6
JB		 15555 if (peer)
15556 mask = rdev->wiphy.tid_config_support.peer;
15557 else
15558 mask = rdev->wiphy.tid_config_support.vif;
15559
15560 if (tid_conf->mask & ~mask) {
15561 NL_SET_ERR_MSG(extack, "unsupported TID configuration");
15562 return -ENOTSUPP;
15563 }
15564
77f576de
T		 15565 return 0;
15566}
15567
15568static int nl80211_set_tid_config(struct sk_buff *skb,
15569 struct genl_info *info)
15570{
15571 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15572 struct nlattr *attrs[NL80211_TID_CONFIG_ATTR_MAX + 1];
7b0a0e3c 15573 unsigned int link_id = nl80211_link_id(info->attrs);
77f576de 15574 struct net_device *dev = info->user_ptr[1];
3710a8a6 15575 struct cfg80211_tid_config *tid_config;
77f576de
T		 15576 struct nlattr *tid;
15577 int conf_idx = 0, rem_conf;
15578 int ret = -EINVAL;
15579 u32 num_conf = 0;
15580
15581 if (!info->attrs[NL80211_ATTR_TID_CONFIG])
15582 return -EINVAL;
15583
15584 if (!rdev->ops->set_tid_config)
15585 return -EOPNOTSUPP;
15586
15587 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
15588 rem_conf)
15589 num_conf++;
15590
15591 tid_config = kzalloc(struct_size(tid_config, tid_conf, num_conf),
15592 GFP_KERNEL);
15593 if (!tid_config)
15594 return -ENOMEM;
15595
15596 tid_config->n_tid_conf = num_conf;
15597
15598 if (info->attrs[NL80211_ATTR_MAC])
15599 tid_config->peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
15600
206bbcf7
JB		 15601 wdev_lock(dev->ieee80211_ptr);
15602
77f576de
T		 15603 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
15604 rem_conf) {
15605 ret = nla_parse_nested(attrs, NL80211_TID_CONFIG_ATTR_MAX,
15606 tid, NULL, NULL);
15607
15608 if (ret)
15609 goto bad_tid_conf;
15610
15611 ret = parse_tid_conf(rdev, attrs, dev,
15612 &tid_config->tid_conf[conf_idx],
7b0a0e3c 15613 info, tid_config->peer, link_id);
77f576de
T		 15614 if (ret)
15615 goto bad_tid_conf;
15616
15617 conf_idx++;
15618 }
15619
15620 ret = rdev_set_tid_config(rdev, dev, tid_config);
15621
15622bad_tid_conf:
15623 kfree(tid_config);
206bbcf7 15624 wdev_unlock(dev->ieee80211_ptr);
77f576de
T		 15625 return ret;
15626}
15627
0d2ab3ae
JC		 15628static int nl80211_color_change(struct sk_buff *skb, struct genl_info *info)
15629{
15630 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15631 struct cfg80211_color_change_settings params = {};
15632 struct net_device *dev = info->user_ptr[1];
15633 struct wireless_dev *wdev = dev->ieee80211_ptr;
15634 struct nlattr **tb;
15635 u16 offset;
15636 int err;
15637
15638 if (!rdev->ops->color_change)
15639 return -EOPNOTSUPP;
15640
15641 if (!wiphy_ext_feature_isset(&rdev->wiphy,
15642 NL80211_EXT_FEATURE_BSS_COLOR))
15643 return -EOPNOTSUPP;
15644
15645 if (wdev->iftype != NL80211_IFTYPE_AP)
15646 return -EOPNOTSUPP;
15647
15648 if (!info->attrs[NL80211_ATTR_COLOR_CHANGE_COUNT] ||
15649 !info->attrs[NL80211_ATTR_COLOR_CHANGE_COLOR] ||
15650 !info->attrs[NL80211_ATTR_COLOR_CHANGE_ELEMS])
15651 return -EINVAL;
15652
15653 params.count = nla_get_u8(info->attrs[NL80211_ATTR_COLOR_CHANGE_COUNT]);
15654 params.color = nla_get_u8(info->attrs[NL80211_ATTR_COLOR_CHANGE_COLOR]);
15655
15656 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_next);
15657 if (err)
15658 return err;
15659
15660 tb = kcalloc(NL80211_ATTR_MAX + 1, sizeof(*tb), GFP_KERNEL);
15661 if (!tb)
15662 return -ENOMEM;
15663
15664 err = nla_parse_nested(tb, NL80211_ATTR_MAX,
15665 info->attrs[NL80211_ATTR_COLOR_CHANGE_ELEMS],
15666 nl80211_policy, info->extack);
15667 if (err)
15668 goto out;
15669
15670 err = nl80211_parse_beacon(rdev, tb, &params.beacon_color_change);
15671 if (err)
15672 goto out;
15673
15674 if (!tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]) {
15675 err = -EINVAL;
15676 goto out;
15677 }
15678
15679 if (nla_len(tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]) != sizeof(u16)) {
15680 err = -EINVAL;
15681 goto out;
15682 }
15683
15684 offset = nla_get_u16(tb[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
15685 if (offset >= params.beacon_color_change.tail_len) {
15686 err = -EINVAL;
15687 goto out;
15688 }
15689
15690 if (params.beacon_color_change.tail[offset] != params.count) {
15691 err = -EINVAL;
15692 goto out;
15693 }
15694
15695 params.counter_offset_beacon = offset;
15696
15697 if (tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]) {
15698 if (nla_len(tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]) !=
15699 sizeof(u16)) {
15700 err = -EINVAL;
15701 goto out;
15702 }
15703
15704 offset = nla_get_u16(tb[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
15705 if (offset >= params.beacon_color_change.probe_resp_len) {
15706 err = -EINVAL;
15707 goto out;
15708 }
15709
15710 if (params.beacon_color_change.probe_resp[offset] !=
15711 params.count) {
15712 err = -EINVAL;
15713 goto out;
15714 }
15715
15716 params.counter_offset_presp = offset;
15717 }
15718
15719 wdev_lock(wdev);
15720 err = rdev_color_change(rdev, dev, &params);
15721 wdev_unlock(wdev);
15722
15723out:
dc1e3cb8
JC		 15724 kfree(params.beacon_next.mbssid_ies);
15725 kfree(params.beacon_color_change.mbssid_ies);
0d2ab3ae
JC		 15726 kfree(tb);
15727 return err;
15728}
15729
e306784a
SM		 15730static int nl80211_set_fils_aad(struct sk_buff *skb,
15731 struct genl_info *info)
15732{
15733 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15734 struct net_device *dev = info->user_ptr[1];
15735 struct cfg80211_fils_aad fils_aad = {};
15736 u8 *nonces;
15737
15738 if (!info->attrs[NL80211_ATTR_MAC] ||
15739 !info->attrs[NL80211_ATTR_FILS_KEK] ||
15740 !info->attrs[NL80211_ATTR_FILS_NONCES])
15741 return -EINVAL;
15742
15743 fils_aad.macaddr = nla_data(info->attrs[NL80211_ATTR_MAC]);
15744 fils_aad.kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
15745 fils_aad.kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
15746 nonces = nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
15747 fils_aad.snonce = nonces;
15748 fils_aad.anonce = nonces + FILS_NONCE_LEN;
15749
15750 return rdev_set_fils_aad(rdev, dev, &fils_aad);
15751}
15752
7b0a0e3c
JB		 15753static int nl80211_add_link(struct sk_buff *skb, struct genl_info *info)
15754{
f2a0290b 15755 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7b0a0e3c
JB		 15756 unsigned int link_id = nl80211_link_id(info->attrs);
15757 struct net_device *dev = info->user_ptr[1];
15758 struct wireless_dev *wdev = dev->ieee80211_ptr;
f2a0290b 15759 int ret;
7b0a0e3c
JB		 15760
15761 if (!(wdev->wiphy->flags & WIPHY_FLAG_SUPPORTS_MLO))
15762 return -EINVAL;
15763
15764 switch (wdev->iftype) {
15765 case NL80211_IFTYPE_AP:
15766 break;
15767 default:
15768 return -EINVAL;
15769 }
15770
15771 if (!info->attrs[NL80211_ATTR_MAC] ||
15772 !is_valid_ether_addr(nla_data(info->attrs[NL80211_ATTR_MAC])))
15773 return -EINVAL;
15774
15775 wdev_lock(wdev);
15776 wdev->valid_links |= BIT(link_id);
15777 ether_addr_copy(wdev->links[link_id].addr,
15778 nla_data(info->attrs[NL80211_ATTR_MAC]));
f2a0290b
JB		 15779
15780 ret = rdev_add_intf_link(rdev, wdev, link_id);
15781 if (ret) {
15782 wdev->valid_links &= ~BIT(link_id);
15783 eth_zero_addr(wdev->links[link_id].addr);
15784 }
7b0a0e3c
JB		 15785 wdev_unlock(wdev);
15786
f2a0290b 15787 return ret;
7b0a0e3c
JB		 15788}
15789
15790static int nl80211_remove_link(struct sk_buff *skb, struct genl_info *info)
15791{
15792 unsigned int link_id = nl80211_link_id(info->attrs);
15793 struct net_device *dev = info->user_ptr[1];
15794 struct wireless_dev *wdev = dev->ieee80211_ptr;
15795
15796 /* cannot remove if there's no link */
15797 if (!info->attrs[NL80211_ATTR_MLO_LINK_ID])
15798 return -EINVAL;
15799
15800 switch (wdev->iftype) {
15801 case NL80211_IFTYPE_AP:
15802 break;
15803 default:
15804 return -EINVAL;
15805 }
15806
7b0a0e3c 15807 wdev_lock(wdev);
cdf0a0a8 15808 cfg80211_remove_link(wdev, link_id);
7b0a0e3c
JB		 15809 wdev_unlock(wdev);
15810
15811 return 0;
15812}
15813
577e5b8c
ST		 15814static int
15815nl80211_add_mod_link_station(struct sk_buff *skb, struct genl_info *info,
15816 bool add)
15817{
15818 struct link_station_parameters params = {};
15819 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15820 struct net_device *dev = info->user_ptr[1];
15821 int err;
15822
15823 if ((add && !rdev->ops->add_link_station) ||
15824 (!add && !rdev->ops->mod_link_station))
15825 return -EOPNOTSUPP;
15826
15827 if (add && !info->attrs[NL80211_ATTR_MAC])
15828 return -EINVAL;
15829
8876c67e 15830 if (!info->attrs[NL80211_ATTR_MLD_ADDR])
577e5b8c
ST		 15831 return -EINVAL;
15832
15833 if (add && !info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
15834 return -EINVAL;
15835
8876c67e 15836 params.mld_mac = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
577e5b8c
ST		 15837
15838 if (info->attrs[NL80211_ATTR_MAC]) {
15839 params.link_mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
15840 if (!is_valid_ether_addr(params.link_mac))
15841 return -EINVAL;
15842 }
15843
15844 if (!info->attrs[NL80211_ATTR_MLO_LINK_ID])
15845 return -EINVAL;
15846
15847 params.link_id = nla_get_u8(info->attrs[NL80211_ATTR_MLO_LINK_ID]);
15848
15849 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
15850 params.supported_rates =
15851 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
15852 params.supported_rates_len =
15853 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
15854 }
15855
15856 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
15857 params.ht_capa =
15858 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
15859
15860 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
15861 params.vht_capa =
15862 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
15863
15864 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
15865 params.he_capa =
15866 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
15867 params.he_capa_len =
15868 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
15869
15870 if (info->attrs[NL80211_ATTR_EHT_CAPABILITY]) {
15871 params.eht_capa =
15872 nla_data(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
15873 params.eht_capa_len =
15874 nla_len(info->attrs[NL80211_ATTR_EHT_CAPABILITY]);
15875
15876 if (!ieee80211_eht_capa_size_ok((const u8 *)params.he_capa,
15877 (const u8 *)params.eht_capa,
15878 params.eht_capa_len))
15879 return -EINVAL;
15880 }
15881 }
15882
15883 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
15884 params.he_6ghz_capa =
15885 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
15886
15887 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
15888 params.opmode_notif_used = true;
15889 params.opmode_notif =
15890 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
15891 }
15892
15893 err = nl80211_parse_sta_txpower_setting(info, &params.txpwr,
15894 &params.txpwr_set);
15895 if (err)
15896 return err;
15897
858fd188 15898 wdev_lock(dev->ieee80211_ptr);
577e5b8c 15899 if (add)
858fd188
JB		 15900 err = rdev_add_link_station(rdev, dev, &params);
15901 else
15902 err = rdev_mod_link_station(rdev, dev, &params);
15903 wdev_unlock(dev->ieee80211_ptr);
15904
15905 return err;
577e5b8c
ST		 15906}
15907
15908static int
15909nl80211_add_link_station(struct sk_buff *skb, struct genl_info *info)
15910{
15911 return nl80211_add_mod_link_station(skb, info, true);
15912}
15913
15914static int
15915nl80211_modify_link_station(struct sk_buff *skb, struct genl_info *info)
15916{
15917 return nl80211_add_mod_link_station(skb, info, false);
15918}
15919
15920static int
15921nl80211_remove_link_station(struct sk_buff *skb, struct genl_info *info)
15922{
15923 struct link_station_del_parameters params = {};
15924 struct cfg80211_registered_device *rdev = info->user_ptr[0];
15925 struct net_device *dev = info->user_ptr[1];
858fd188 15926 int ret;
577e5b8c
ST		 15927
15928 if (!rdev->ops->del_link_station)
15929 return -EOPNOTSUPP;
15930
15931 if (!info->attrs[NL80211_ATTR_MLD_ADDR] ||
15932 !info->attrs[NL80211_ATTR_MLO_LINK_ID])
15933 return -EINVAL;
15934
15935 params.mld_mac = nla_data(info->attrs[NL80211_ATTR_MLD_ADDR]);
15936 params.link_id = nla_get_u8(info->attrs[NL80211_ATTR_MLO_LINK_ID]);
15937
858fd188
JB		 15938 wdev_lock(dev->ieee80211_ptr);
15939 ret = rdev_del_link_station(rdev, dev, &params);
15940 wdev_unlock(dev->ieee80211_ptr);
15941
15942 return ret;
577e5b8c
ST		 15943}
15944
4c476991
JB		 15945#define NL80211_FLAG_NEED_WIPHY 0x01
15946#define NL80211_FLAG_NEED_NETDEV 0x02
15947#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 15948#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
15949#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
15950 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 15951#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 15952/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 15953#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
15954 NL80211_FLAG_CHECK_NETDEV_UP)
5393b917 15955#define NL80211_FLAG_CLEAR_SKB 0x20
77cbf790 15956#define NL80211_FLAG_NO_WIPHY_MTX 0x40
7b0a0e3c
JB		 15957#define NL80211_FLAG_MLO_VALID_LINK_ID 0x80
15958#define NL80211_FLAG_MLO_UNSUPPORTED 0x100
4c476991 15959
2182db91
JB		 15960#define INTERNAL_FLAG_SELECTORS(__sel) \
15961 SELECTOR(__sel, NONE, 0) /* must be first */ \
15962 SELECTOR(__sel, WIPHY, \
15963 NL80211_FLAG_NEED_WIPHY) \
15964 SELECTOR(__sel, WDEV, \
15965 NL80211_FLAG_NEED_WDEV) \
15966 SELECTOR(__sel, NETDEV, \
15967 NL80211_FLAG_NEED_NETDEV) \
7b0a0e3c
JB		 15968 SELECTOR(__sel, NETDEV_LINK, \
15969 NL80211_FLAG_NEED_NETDEV | \
15970 NL80211_FLAG_MLO_VALID_LINK_ID) \
15971 SELECTOR(__sel, NETDEV_NO_MLO, \
15972 NL80211_FLAG_NEED_NETDEV | \
15973 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 15974 SELECTOR(__sel, WIPHY_RTNL, \
15975 NL80211_FLAG_NEED_WIPHY | \
15976 NL80211_FLAG_NEED_RTNL) \
15977 SELECTOR(__sel, WIPHY_RTNL_NOMTX, \
15978 NL80211_FLAG_NEED_WIPHY | \
15979 NL80211_FLAG_NEED_RTNL | \
15980 NL80211_FLAG_NO_WIPHY_MTX) \
15981 SELECTOR(__sel, WDEV_RTNL, \
15982 NL80211_FLAG_NEED_WDEV | \
15983 NL80211_FLAG_NEED_RTNL) \
15984 SELECTOR(__sel, NETDEV_RTNL, \
15985 NL80211_FLAG_NEED_NETDEV | \
15986 NL80211_FLAG_NEED_RTNL) \
15987 SELECTOR(__sel, NETDEV_UP, \
15988 NL80211_FLAG_NEED_NETDEV_UP) \
7b0a0e3c
JB		 15989 SELECTOR(__sel, NETDEV_UP_LINK, \
15990 NL80211_FLAG_NEED_NETDEV_UP | \
15991 NL80211_FLAG_MLO_VALID_LINK_ID) \
15992 SELECTOR(__sel, NETDEV_UP_NO_MLO, \
15993 NL80211_FLAG_NEED_NETDEV_UP | \
15994 NL80211_FLAG_MLO_UNSUPPORTED) \
15995 SELECTOR(__sel, NETDEV_UP_NO_MLO_CLEAR, \
15996 NL80211_FLAG_NEED_NETDEV_UP | \
15997 NL80211_FLAG_CLEAR_SKB | \
15998 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 15999 SELECTOR(__sel, NETDEV_UP_NOTMX, \
16000 NL80211_FLAG_NEED_NETDEV_UP | \
16001 NL80211_FLAG_NO_WIPHY_MTX) \
7b0a0e3c
JB		 16002 SELECTOR(__sel, NETDEV_UP_NOTMX_NOMLO, \
16003 NL80211_FLAG_NEED_NETDEV_UP | \
16004 NL80211_FLAG_NO_WIPHY_MTX | \
16005 NL80211_FLAG_MLO_UNSUPPORTED) \
2182db91
JB		 16006 SELECTOR(__sel, NETDEV_UP_CLEAR, \
16007 NL80211_FLAG_NEED_NETDEV_UP | \
16008 NL80211_FLAG_CLEAR_SKB) \
16009 SELECTOR(__sel, WDEV_UP, \
16010 NL80211_FLAG_NEED_WDEV_UP) \
7b0a0e3c
JB		 16011 SELECTOR(__sel, WDEV_UP_LINK, \
16012 NL80211_FLAG_NEED_WDEV_UP | \
16013 NL80211_FLAG_MLO_VALID_LINK_ID) \
2182db91
JB		 16014 SELECTOR(__sel, WDEV_UP_RTNL, \
16015 NL80211_FLAG_NEED_WDEV_UP | \
16016 NL80211_FLAG_NEED_RTNL) \
16017 SELECTOR(__sel, WIPHY_CLEAR, \
16018 NL80211_FLAG_NEED_WIPHY | \
16019 NL80211_FLAG_CLEAR_SKB)
16020
16021enum nl80211_internal_flags_selector {
16022#define SELECTOR(_, name, value) NL80211_IFL_SEL_##name,
16023 INTERNAL_FLAG_SELECTORS(_)
16024#undef SELECTOR
16025};
16026
16027static u32 nl80211_internal_flags[] = {
16028#define SELECTOR(_, name, value) [NL80211_IFL_SEL_##name] = value,
16029 INTERNAL_FLAG_SELECTORS(_)
16030#undef SELECTOR
16031};
16032
f84f771d 16033static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 16034 struct genl_info *info)
16035{
a05829a7 16036 struct cfg80211_registered_device *rdev = NULL;
7b0a0e3c
JB		 16037 struct wireless_dev *wdev = NULL;
16038 struct net_device *dev = NULL;
2182db91 16039 u32 internal_flags;
7b0a0e3c 16040 int err;
2182db91
JB		 16041
16042 if (WARN_ON(ops->internal_flags >= ARRAY_SIZE(nl80211_internal_flags)))
16043 return -EINVAL;
16044
16045 internal_flags = nl80211_internal_flags[ops->internal_flags];
4c476991 16046
a05829a7 16047 rtnl_lock();
2182db91 16048 if (internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 16049 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991 16050 if (IS_ERR(rdev)) {
7b0a0e3c
JB		 16051 err = PTR_ERR(rdev);
16052 goto out_unlock;
4c476991
JB		 16053 }
16054 info->user_ptr[0] = rdev;
2182db91
JB		 16055 } else if (internal_flags & NL80211_FLAG_NEED_NETDEV ||
16056 internal_flags & NL80211_FLAG_NEED_WDEV) {
a05829a7 16057 wdev = __cfg80211_wdev_from_attrs(NULL, genl_info_net(info),
89a54e48
JB		 16058 info->attrs);
16059 if (IS_ERR(wdev)) {
7b0a0e3c
JB		 16060 err = PTR_ERR(wdev);
16061 goto out_unlock;
4c476991 16062 }
89a54e48 16063
89a54e48 16064 dev = wdev->netdev;
7b0a0e3c 16065 dev_hold(dev);
f26cbf40 16066 rdev = wiphy_to_rdev(wdev->wiphy);
89a54e48 16067
2182db91 16068 if (internal_flags & NL80211_FLAG_NEED_NETDEV) {
1bf614ef 16069 if (!dev) {
7b0a0e3c
JB		 16070 err = -EINVAL;
16071 goto out_unlock;
1bf614ef
JB		 16072 }
16073
16074 info->user_ptr[1] = dev;
16075 } else {
16076 info->user_ptr[1] = wdev;
41265714 16077 }
1bf614ef 16078
2182db91 16079 if (internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
73c7da3d 16080 !wdev_running(wdev)) {
7b0a0e3c
JB		 16081 err = -ENETDOWN;
16082 goto out_unlock;
73c7da3d 16083 }
1bf614ef 16084
4c476991 16085 info->user_ptr[0] = rdev;
4c476991
JB		 16086 }
16087
7b0a0e3c
JB		 16088 if (internal_flags & NL80211_FLAG_MLO_VALID_LINK_ID) {
16089 struct nlattr *link_id = info->attrs[NL80211_ATTR_MLO_LINK_ID];
16090
16091 if (!wdev) {
16092 err = -EINVAL;
16093 goto out_unlock;
16094 }
16095
16096 /* MLO -> require valid link ID */
16097 if (wdev->valid_links &&
16098 (!link_id ||
ff3821bc 16099 !(wdev->valid_links & BIT(nla_get_u8(link_id))))) {
7b0a0e3c
JB		 16100 err = -EINVAL;
16101 goto out_unlock;
16102 }
16103
16104 /* non-MLO -> no link ID attribute accepted */
16105 if (!wdev->valid_links && link_id) {
16106 err = -EINVAL;
16107 goto out_unlock;
16108 }
16109 }
16110
16111 if (internal_flags & NL80211_FLAG_MLO_UNSUPPORTED) {
16112 if (info->attrs[NL80211_ATTR_MLO_LINK_ID] ||
16113 (wdev && wdev->valid_links)) {
16114 err = -EINVAL;
16115 goto out_unlock;
16116 }
16117 }
16118
2182db91 16119 if (rdev && !(internal_flags & NL80211_FLAG_NO_WIPHY_MTX)) {
a05829a7
JB		 16120 wiphy_lock(&rdev->wiphy);
16121 /* we keep the mutex locked until post_doit */
16122 __release(&rdev->wiphy.mtx);
16123 }
2182db91 16124 if (!(internal_flags & NL80211_FLAG_NEED_RTNL))
a05829a7
JB		 16125 rtnl_unlock();
16126
4c476991 16127 return 0;
7b0a0e3c
JB		 16128out_unlock:
16129 rtnl_unlock();
16130 dev_put(dev);
16131 return err;
4c476991
JB		 16132}
16133
f84f771d 16134static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 16135 struct genl_info *info)
16136{
2182db91
JB		 16137 u32 internal_flags = nl80211_internal_flags[ops->internal_flags];
16138
1bf614ef 16139 if (info->user_ptr[1]) {
2182db91 16140 if (internal_flags & NL80211_FLAG_NEED_WDEV) {
1bf614ef
JB		 16141 struct wireless_dev *wdev = info->user_ptr[1];
16142
1160dfa1 16143 dev_put(wdev->netdev);
1bf614ef
JB		 16144 } else {
16145 dev_put(info->user_ptr[1]);
16146 }
16147 }
5393b917 16148
77cbf790 16149 if (info->user_ptr[0] &&
2182db91 16150 !(internal_flags & NL80211_FLAG_NO_WIPHY_MTX)) {
a05829a7
JB		 16151 struct cfg80211_registered_device *rdev = info->user_ptr[0];
16152
16153 /* we kept the mutex locked since pre_doit */
16154 __acquire(&rdev->wiphy.mtx);
16155 wiphy_unlock(&rdev->wiphy);
16156 }
16157
2182db91 16158 if (internal_flags & NL80211_FLAG_NEED_RTNL)
4c476991 16159 rtnl_unlock();
5393b917
JB		 16160
16161 /* If needed, clear the netlink message payload from the SKB
16162 * as it might contain key data that shouldn't stick around on
16163 * the heap after the SKB is freed. The netlink message header
16164 * is still needed for further processing, so leave it intact.
16165 */
2182db91 16166 if (internal_flags & NL80211_FLAG_CLEAR_SKB) {
5393b917
JB		 16167 struct nlmsghdr *nlh = nlmsg_hdr(skb);
16168
16169 memset(nlmsg_data(nlh), 0, nlmsg_len(nlh));
16170 }
4c476991
JB		 16171}
16172
6bdb68ce
CH		 16173static int nl80211_set_sar_sub_specs(struct cfg80211_registered_device *rdev,
16174 struct cfg80211_sar_specs *sar_specs,
16175 struct nlattr *spec[], int index)
16176{
16177 u32 range_index, i;
16178
16179 if (!sar_specs || !spec)
16180 return -EINVAL;
16181
16182 if (!spec[NL80211_SAR_ATTR_SPECS_POWER] ||
16183 !spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX])
16184 return -EINVAL;
16185
16186 range_index = nla_get_u32(spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX]);
16187
16188 /* check if range_index exceeds num_freq_ranges */
16189 if (range_index >= rdev->wiphy.sar_capa->num_freq_ranges)
16190 return -EINVAL;
16191
16192 /* check if range_index duplicates */
16193 for (i = 0; i < index; i++) {
16194 if (sar_specs->sub_specs[i].freq_range_index == range_index)
16195 return -EINVAL;
16196 }
16197
16198 sar_specs->sub_specs[index].power =
16199 nla_get_s32(spec[NL80211_SAR_ATTR_SPECS_POWER]);
16200
16201 sar_specs->sub_specs[index].freq_range_index = range_index;
16202
16203 return 0;
16204}
16205
16206static int nl80211_set_sar_specs(struct sk_buff *skb, struct genl_info *info)
16207{
16208 struct cfg80211_registered_device *rdev = info->user_ptr[0];
16209 struct nlattr *spec[NL80211_SAR_ATTR_SPECS_MAX + 1];
16210 struct nlattr *tb[NL80211_SAR_ATTR_MAX + 1];
16211 struct cfg80211_sar_specs *sar_spec;
16212 enum nl80211_sar_type type;
16213 struct nlattr *spec_list;
16214 u32 specs;
16215 int rem, err;
16216
16217 if (!rdev->wiphy.sar_capa || !rdev->ops->set_sar_specs)
16218 return -EOPNOTSUPP;
16219
16220 if (!info->attrs[NL80211_ATTR_SAR_SPEC])
16221 return -EINVAL;
16222
16223 nla_parse_nested(tb, NL80211_SAR_ATTR_MAX,
16224 info->attrs[NL80211_ATTR_SAR_SPEC],
16225 NULL, NULL);
16226
16227 if (!tb[NL80211_SAR_ATTR_TYPE] || !tb[NL80211_SAR_ATTR_SPECS])
16228 return -EINVAL;
16229
16230 type = nla_get_u32(tb[NL80211_SAR_ATTR_TYPE]);
16231 if (type != rdev->wiphy.sar_capa->type)
16232 return -EINVAL;
16233
16234 specs = 0;
16235 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem)
16236 specs++;
16237
16238 if (specs > rdev->wiphy.sar_capa->num_freq_ranges)
16239 return -EINVAL;
16240
40f231e7 16241 sar_spec = kzalloc(struct_size(sar_spec, sub_specs, specs), GFP_KERNEL);
6bdb68ce
CH		 16242 if (!sar_spec)
16243 return -ENOMEM;
16244
16245 sar_spec->type = type;
16246 specs = 0;
16247 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem) {
16248 nla_parse_nested(spec, NL80211_SAR_ATTR_SPECS_MAX,
16249 spec_list, NULL, NULL);
16250
16251 switch (type) {
16252 case NL80211_SAR_TYPE_POWER:
16253 if (nl80211_set_sar_sub_specs(rdev, sar_spec,
16254 spec, specs)) {
16255 err = -EINVAL;
16256 goto error;
16257 }
16258 break;
16259 default:
16260 err = -EINVAL;
16261 goto error;
16262 }
16263 specs++;
16264 }
16265
16266 sar_spec->num_sub_specs = specs;
16267
16268 rdev->cur_cmd_info = info;
16269 err = rdev_set_sar_specs(rdev, sar_spec);
16270 rdev->cur_cmd_info = NULL;
16271error:
16272 kfree(sar_spec);
16273 return err;
16274}
16275
2182db91
JB		 16276#define SELECTOR(__sel, name, value) \
16277 ((__sel) == (value)) ? NL80211_IFL_SEL_##name :
16278int __missing_selector(void);
16279#define IFLAGS(__val) INTERNAL_FLAG_SELECTORS(__val) __missing_selector()
16280
4534de83 16281static const struct genl_ops nl80211_ops[] = {
55682965
JB		 16282 {
16283 .cmd = NL80211_CMD_GET_WIPHY,
ef6243ac 16284 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 16285 .doit = nl80211_get_wiphy,
16286 .dumpit = nl80211_dump_wiphy,
86e8cf98 16287 .done = nl80211_dump_wiphy_done,
55682965 16288 /* can be retrieved by unprivileged users */
2182db91 16289 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
55682965 16290 },
66a9b928
JK		 16291};
16292
16293static const struct genl_small_ops nl80211_small_ops[] = {
55682965
JB		 16294 {
16295 .cmd = NL80211_CMD_SET_WIPHY,
ef6243ac 16296 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16297 .doit = nl80211_set_wiphy,
5617c6cd 16298 .flags = GENL_UNS_ADMIN_PERM,
55682965
JB		 16299 },
16300 {
16301 .cmd = NL80211_CMD_GET_INTERFACE,
ef6243ac 16302 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 16303 .doit = nl80211_get_interface,
16304 .dumpit = nl80211_dump_interface,
55682965 16305 /* can be retrieved by unprivileged users */
2182db91 16306 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV),
55682965
JB		 16307 },
16308 {
16309 .cmd = NL80211_CMD_SET_INTERFACE,
ef6243ac 16310 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16311 .doit = nl80211_set_interface,
5617c6cd 16312 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16313 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16314 NL80211_FLAG_NEED_RTNL),
55682965
JB		 16315 },
16316 {
16317 .cmd = NL80211_CMD_NEW_INTERFACE,
ef6243ac 16318 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16319 .doit = nl80211_new_interface,
5617c6cd 16320 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16321 .internal_flags =
16322 IFLAGS(NL80211_FLAG_NEED_WIPHY |
16323 NL80211_FLAG_NEED_RTNL |
16324 /* we take the wiphy mutex later ourselves */
16325 NL80211_FLAG_NO_WIPHY_MTX),
55682965
JB		 16326 },
16327 {
16328 .cmd = NL80211_CMD_DEL_INTERFACE,
ef6243ac 16329 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 16330 .doit = nl80211_del_interface,
5617c6cd 16331 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16332 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16333 NL80211_FLAG_NEED_RTNL),
41ade00f
JB		 16334 },
16335 {
16336 .cmd = NL80211_CMD_GET_KEY,
ef6243ac 16337 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16338 .doit = nl80211_get_key,
5617c6cd 16339 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16340 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
41ade00f
JB		 16341 },
16342 {
16343 .cmd = NL80211_CMD_SET_KEY,
ef6243ac 16344 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16345 .doit = nl80211_set_key,
5617c6cd 16346 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c 16347 /* cannot use NL80211_FLAG_MLO_VALID_LINK_ID, depends on key */
2182db91
JB		 16348 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16349 NL80211_FLAG_CLEAR_SKB),
41ade00f
JB		 16350 },
16351 {
16352 .cmd = NL80211_CMD_NEW_KEY,
ef6243ac 16353 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16354 .doit = nl80211_new_key,
5617c6cd 16355 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16356 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16357 NL80211_FLAG_CLEAR_SKB),
41ade00f
JB		 16358 },
16359 {
16360 .cmd = NL80211_CMD_DEL_KEY,
ef6243ac 16361 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 16362 .doit = nl80211_del_key,
5617c6cd 16363 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16364 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
55682965 16365 },
ed1b6cc7
JB		 16366 {
16367 .cmd = NL80211_CMD_SET_BEACON,
ef6243ac 16368 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16369 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16370 .doit = nl80211_set_beacon,
7b0a0e3c
JB		 16371 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16372 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7
JB		 16373 },
16374 {
8860020e 16375 .cmd = NL80211_CMD_START_AP,
ef6243ac 16376 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16377 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16378 .doit = nl80211_start_ap,
7b0a0e3c
JB		 16379 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16380 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7
JB		 16381 },
16382 {
8860020e 16383 .cmd = NL80211_CMD_STOP_AP,
ef6243ac 16384 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 16385 .flags = GENL_UNS_ADMIN_PERM,
8860020e 16386 .doit = nl80211_stop_ap,
7b0a0e3c
JB		 16387 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16388 NL80211_FLAG_MLO_VALID_LINK_ID),
ed1b6cc7 16389 },
5727ef1b
JB		 16390 {
16391 .cmd = NL80211_CMD_GET_STATION,
ef6243ac 16392 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16393 .doit = nl80211_get_station,
2ec600d6 16394 .dumpit = nl80211_dump_station,
2182db91 16395 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
5727ef1b
JB		 16396 },
16397 {
16398 .cmd = NL80211_CMD_SET_STATION,
ef6243ac 16399 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16400 .doit = nl80211_set_station,
5617c6cd 16401 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16402 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5727ef1b
JB		 16403 },
16404 {
16405 .cmd = NL80211_CMD_NEW_STATION,
ef6243ac 16406 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16407 .doit = nl80211_new_station,
5617c6cd 16408 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16409 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5727ef1b
JB		 16410 },
16411 {
16412 .cmd = NL80211_CMD_DEL_STATION,
ef6243ac 16413 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 16414 .doit = nl80211_del_station,
5617c6cd 16415 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16416 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16417 },
16418 {
16419 .cmd = NL80211_CMD_GET_MPATH,
ef6243ac 16420 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6
LCC		 16421 .doit = nl80211_get_mpath,
16422 .dumpit = nl80211_dump_mpath,
5617c6cd 16423 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16424 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6 16425 },
66be7d2b
HR		 16426 {
16427 .cmd = NL80211_CMD_GET_MPP,
ef6243ac 16428 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
66be7d2b
HR		 16429 .doit = nl80211_get_mpp,
16430 .dumpit = nl80211_dump_mpp,
5617c6cd 16431 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16432 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
66be7d2b 16433 },
2ec600d6
LCC		 16434 {
16435 .cmd = NL80211_CMD_SET_MPATH,
ef6243ac 16436 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16437 .doit = nl80211_set_mpath,
5617c6cd 16438 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16439 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16440 },
16441 {
16442 .cmd = NL80211_CMD_NEW_MPATH,
ef6243ac 16443 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16444 .doit = nl80211_new_mpath,
5617c6cd 16445 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16446 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2ec600d6
LCC		 16447 },
16448 {
16449 .cmd = NL80211_CMD_DEL_MPATH,
ef6243ac 16450 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 16451 .doit = nl80211_del_mpath,
5617c6cd 16452 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16453 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
9f1ba906
JM		 16454 },
16455 {
16456 .cmd = NL80211_CMD_SET_BSS,
ef6243ac 16457 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9f1ba906 16458 .doit = nl80211_set_bss,
5617c6cd 16459 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16460 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
b2e1b302 16461 },
f130347c
LR		 16462 {
16463 .cmd = NL80211_CMD_GET_REG,
ef6243ac 16464 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad30ca2c
AN		 16465 .doit = nl80211_get_reg_do,
16466 .dumpit = nl80211_get_reg_dump,
f130347c
LR		 16467 /* can be retrieved by unprivileged users */
16468 },
b6863036 16469#ifdef CONFIG_CFG80211_CRDA_SUPPORT
b2e1b302
LR		 16470 {
16471 .cmd = NL80211_CMD_SET_REG,
ef6243ac 16472 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 16473 .doit = nl80211_set_reg,
b2e1b302
LR		 16474 .flags = GENL_ADMIN_PERM,
16475 },
b6863036 16476#endif
b2e1b302
LR		 16477 {
16478 .cmd = NL80211_CMD_REQ_SET_REG,
ef6243ac 16479 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 16480 .doit = nl80211_req_set_reg,
93da9cc1 16481 .flags = GENL_ADMIN_PERM,
16482 },
1ea4ff3e
JB		 16483 {
16484 .cmd = NL80211_CMD_RELOAD_REGDB,
ef6243ac 16485 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1ea4ff3e 16486 .doit = nl80211_reload_regdb,
1ea4ff3e
JB		 16487 .flags = GENL_ADMIN_PERM,
16488 },
93da9cc1 16489 {
24bdd9f4 16490 .cmd = NL80211_CMD_GET_MESH_CONFIG,
ef6243ac 16491 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 16492 .doit = nl80211_get_mesh_config,
93da9cc1 16493 /* can be retrieved by unprivileged users */
2182db91 16494 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
93da9cc1 16495 },
16496 {
24bdd9f4 16497 .cmd = NL80211_CMD_SET_MESH_CONFIG,
ef6243ac 16498 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 16499 .doit = nl80211_update_mesh_config,
5617c6cd 16500 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16501 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
9aed3cc1 16502 },
2a519311
JB		 16503 {
16504 .cmd = NL80211_CMD_TRIGGER_SCAN,
ef6243ac 16505 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311 16506 .doit = nl80211_trigger_scan,
5617c6cd 16507 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16508 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
2a519311 16509 },
91d3ab46
VK		 16510 {
16511 .cmd = NL80211_CMD_ABORT_SCAN,
ef6243ac 16512 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
91d3ab46 16513 .doit = nl80211_abort_scan,
5617c6cd 16514 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16515 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
91d3ab46 16516 },
2a519311
JB		 16517 {
16518 .cmd = NL80211_CMD_GET_SCAN,
ef6243ac 16519 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311
JB		 16520 .dumpit = nl80211_dump_scan,
16521 },
807f8a8c
LC		 16522 {
16523 .cmd = NL80211_CMD_START_SCHED_SCAN,
ef6243ac 16524 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 16525 .doit = nl80211_start_sched_scan,
5617c6cd 16526 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16527 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
807f8a8c
LC		 16528 },
16529 {
16530 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
ef6243ac 16531 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 16532 .doit = nl80211_stop_sched_scan,
5617c6cd 16533 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16534 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
807f8a8c 16535 },
636a5d36
JM		 16536 {
16537 .cmd = NL80211_CMD_AUTHENTICATE,
ef6243ac 16538 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16539 .doit = nl80211_authenticate,
5617c6cd 16540 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16541 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16542 NL80211_FLAG_CLEAR_SKB),
636a5d36
JM		 16543 },
16544 {
16545 .cmd = NL80211_CMD_ASSOCIATE,
ef6243ac 16546 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16547 .doit = nl80211_associate,
5617c6cd 16548 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16549 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16550 NL80211_FLAG_CLEAR_SKB),
636a5d36
JM		 16551 },
16552 {
16553 .cmd = NL80211_CMD_DEAUTHENTICATE,
ef6243ac 16554 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16555 .doit = nl80211_deauthenticate,
5617c6cd 16556 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16557 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
636a5d36
JM		 16558 },
16559 {
16560 .cmd = NL80211_CMD_DISASSOCIATE,
ef6243ac 16561 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 16562 .doit = nl80211_disassociate,
5617c6cd 16563 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16564 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
636a5d36 16565 },
04a773ad
JB		 16566 {
16567 .cmd = NL80211_CMD_JOIN_IBSS,
ef6243ac 16568 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 16569 .doit = nl80211_join_ibss,
5617c6cd 16570 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16571 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
04a773ad
JB		 16572 },
16573 {
16574 .cmd = NL80211_CMD_LEAVE_IBSS,
ef6243ac 16575 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 16576 .doit = nl80211_leave_ibss,
5617c6cd 16577 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16578 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
04a773ad 16579 },
aff89a9b
JB		 16580#ifdef CONFIG_NL80211_TESTMODE
16581 {
16582 .cmd = NL80211_CMD_TESTMODE,
ef6243ac 16583 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
aff89a9b 16584 .doit = nl80211_testmode_do,
71063f0e 16585 .dumpit = nl80211_testmode_dump,
5617c6cd 16586 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16587 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
aff89a9b
JB		 16588 },
16589#endif
b23aa676
SO		 16590 {
16591 .cmd = NL80211_CMD_CONNECT,
ef6243ac 16592 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 16593 .doit = nl80211_connect,
5617c6cd 16594 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16595 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16596 NL80211_FLAG_CLEAR_SKB),
b23aa676 16597 },
088e8df8 16598 {
16599 .cmd = NL80211_CMD_UPDATE_CONNECT_PARAMS,
ef6243ac 16600 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
088e8df8 16601 .doit = nl80211_update_connect_params,
088e8df8 16602 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16603 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16604 NL80211_FLAG_CLEAR_SKB),
088e8df8 16605 },
b23aa676
SO		 16606 {
16607 .cmd = NL80211_CMD_DISCONNECT,
ef6243ac 16608 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 16609 .doit = nl80211_disconnect,
5617c6cd 16610 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16611 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
b23aa676 16612 },
463d0183
JB		 16613 {
16614 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
ef6243ac 16615 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
463d0183 16616 .doit = nl80211_wiphy_netns,
5617c6cd 16617 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16618 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
16619 NL80211_FLAG_NEED_RTNL |
16620 NL80211_FLAG_NO_WIPHY_MTX),
463d0183 16621 },
61fa713c
HS		 16622 {
16623 .cmd = NL80211_CMD_GET_SURVEY,
ef6243ac 16624 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
61fa713c
HS		 16625 .dumpit = nl80211_dump_survey,
16626 },
67fbb16b
SO		 16627 {
16628 .cmd = NL80211_CMD_SET_PMKSA,
ef6243ac 16629 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16630 .doit = nl80211_setdel_pmksa,
5617c6cd 16631 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16632 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16633 NL80211_FLAG_CLEAR_SKB),
67fbb16b
SO		 16634 },
16635 {
16636 .cmd = NL80211_CMD_DEL_PMKSA,
ef6243ac 16637 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16638 .doit = nl80211_setdel_pmksa,
5617c6cd 16639 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16640 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
67fbb16b
SO		 16641 },
16642 {
16643 .cmd = NL80211_CMD_FLUSH_PMKSA,
ef6243ac 16644 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 16645 .doit = nl80211_flush_pmksa,
5617c6cd 16646 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16647 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
67fbb16b 16648 },
9588bbd5
JM		 16649 {
16650 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
ef6243ac 16651 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 16652 .doit = nl80211_remain_on_channel,
5617c6cd 16653 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16654 /* FIXME: requiring a link ID here is probably not good */
16655 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16656 NL80211_FLAG_MLO_VALID_LINK_ID),
9588bbd5
JM		 16657 },
16658 {
16659 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
ef6243ac 16660 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 16661 .doit = nl80211_cancel_remain_on_channel,
5617c6cd 16662 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16663 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
9588bbd5 16664 },
13ae75b1
JM		 16665 {
16666 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
ef6243ac 16667 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
13ae75b1 16668 .doit = nl80211_set_tx_bitrate_mask,
5617c6cd 16669 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16670 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16671 NL80211_FLAG_MLO_VALID_LINK_ID),
13ae75b1 16672 },
026331c4 16673 {
2e161f78 16674 .cmd = NL80211_CMD_REGISTER_FRAME,
ef6243ac 16675 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 16676 .doit = nl80211_register_mgmt,
5617c6cd 16677 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16678 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV),
026331c4
JM		 16679 },
16680 {
2e161f78 16681 .cmd = NL80211_CMD_FRAME,
ef6243ac 16682 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 16683 .doit = nl80211_tx_mgmt,
5617c6cd 16684 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16685 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
f7ca38df
JB		 16686 },
16687 {
16688 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
ef6243ac 16689 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f7ca38df 16690 .doit = nl80211_tx_mgmt_cancel_wait,
5617c6cd 16691 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16692 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
026331c4 16693 },
ffb9eb3d
KV		 16694 {
16695 .cmd = NL80211_CMD_SET_POWER_SAVE,
ef6243ac 16696 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 16697 .doit = nl80211_set_power_save,
5617c6cd 16698 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16699 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ffb9eb3d
KV		 16700 },
16701 {
16702 .cmd = NL80211_CMD_GET_POWER_SAVE,
ef6243ac 16703 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 16704 .doit = nl80211_get_power_save,
ffb9eb3d 16705 /* can be retrieved by unprivileged users */
2182db91 16706 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ffb9eb3d 16707 },
d6dc1a38
JO		 16708 {
16709 .cmd = NL80211_CMD_SET_CQM,
ef6243ac 16710 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
d6dc1a38 16711 .doit = nl80211_set_cqm,
5617c6cd 16712 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16713 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
d6dc1a38 16714 },
f444de05
JB		 16715 {
16716 .cmd = NL80211_CMD_SET_CHANNEL,
ef6243ac 16717 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f444de05 16718 .doit = nl80211_set_channel,
5617c6cd 16719 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16720 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16721 NL80211_FLAG_MLO_VALID_LINK_ID),
f444de05 16722 },
29cbe68c
JB		 16723 {
16724 .cmd = NL80211_CMD_JOIN_MESH,
ef6243ac 16725 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 16726 .doit = nl80211_join_mesh,
5617c6cd 16727 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16728 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
29cbe68c
JB		 16729 },
16730 {
16731 .cmd = NL80211_CMD_LEAVE_MESH,
ef6243ac 16732 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 16733 .doit = nl80211_leave_mesh,
5617c6cd 16734 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16735 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
29cbe68c 16736 },
6e0bd6c3
RL		 16737 {
16738 .cmd = NL80211_CMD_JOIN_OCB,
ef6243ac 16739 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 16740 .doit = nl80211_join_ocb,
5617c6cd 16741 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16742 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
6e0bd6c3
RL		 16743 },
16744 {
16745 .cmd = NL80211_CMD_LEAVE_OCB,
ef6243ac 16746 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 16747 .doit = nl80211_leave_ocb,
5617c6cd 16748 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16749 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
6e0bd6c3 16750 },
dfb89c56 16751#ifdef CONFIG_PM
ff1b6e69
JB		 16752 {
16753 .cmd = NL80211_CMD_GET_WOWLAN,
ef6243ac 16754 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 16755 .doit = nl80211_get_wowlan,
ff1b6e69 16756 /* can be retrieved by unprivileged users */
2182db91 16757 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
ff1b6e69
JB		 16758 },
16759 {
16760 .cmd = NL80211_CMD_SET_WOWLAN,
ef6243ac 16761 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 16762 .doit = nl80211_set_wowlan,
5617c6cd 16763 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16764 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
ff1b6e69 16765 },
dfb89c56 16766#endif
e5497d76
JB		 16767 {
16768 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
ef6243ac 16769 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e5497d76 16770 .doit = nl80211_set_rekey_data,
5617c6cd 16771 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16772 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16773 NL80211_FLAG_CLEAR_SKB),
e5497d76 16774 },
109086ce
AN		 16775 {
16776 .cmd = NL80211_CMD_TDLS_MGMT,
ef6243ac 16777 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 16778 .doit = nl80211_tdls_mgmt,
5617c6cd 16779 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16780 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
109086ce
AN		 16781 },
16782 {
16783 .cmd = NL80211_CMD_TDLS_OPER,
ef6243ac 16784 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 16785 .doit = nl80211_tdls_oper,
5617c6cd 16786 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16787 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
109086ce 16788 },
28946da7
JB		 16789 {
16790 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
ef6243ac 16791 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
28946da7 16792 .doit = nl80211_register_unexpected_frame,
5617c6cd 16793 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16794 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
28946da7 16795 },
7f6cf311
JB		 16796 {
16797 .cmd = NL80211_CMD_PROBE_CLIENT,
ef6243ac 16798 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
7f6cf311 16799 .doit = nl80211_probe_client,
5617c6cd 16800 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16801 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
7f6cf311 16802 },
5e760230
JB		 16803 {
16804 .cmd = NL80211_CMD_REGISTER_BEACONS,
ef6243ac 16805 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5e760230 16806 .doit = nl80211_register_beacons,
5617c6cd 16807 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16808 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
5e760230 16809 },
1d9d9213
SW		 16810 {
16811 .cmd = NL80211_CMD_SET_NOACK_MAP,
ef6243ac 16812 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1d9d9213 16813 .doit = nl80211_set_noack_map,
5617c6cd 16814 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16815 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
1d9d9213 16816 },
98104fde
JB		 16817 {
16818 .cmd = NL80211_CMD_START_P2P_DEVICE,
ef6243ac 16819 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 16820 .doit = nl80211_start_p2p_device,
5617c6cd 16821 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16822 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16823 NL80211_FLAG_NEED_RTNL),
98104fde
JB		 16824 },
16825 {
16826 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
ef6243ac 16827 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 16828 .doit = nl80211_stop_p2p_device,
5617c6cd 16829 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16830 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16831 NL80211_FLAG_NEED_RTNL),
cb3b7d87
AB		 16832 },
16833 {
16834 .cmd = NL80211_CMD_START_NAN,
ef6243ac 16835 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 16836 .doit = nl80211_start_nan,
cb3b7d87 16837 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16838 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV |
16839 NL80211_FLAG_NEED_RTNL),
cb3b7d87
AB		 16840 },
16841 {
16842 .cmd = NL80211_CMD_STOP_NAN,
ef6243ac 16843 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 16844 .doit = nl80211_stop_nan,
cb3b7d87 16845 .flags = GENL_ADMIN_PERM,
2182db91
JB		 16846 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP |
16847 NL80211_FLAG_NEED_RTNL),
a442b761
AB		 16848 },
16849 {
16850 .cmd = NL80211_CMD_ADD_NAN_FUNCTION,
ef6243ac 16851 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 16852 .doit = nl80211_nan_add_func,
a442b761 16853 .flags = GENL_ADMIN_PERM,
2182db91 16854 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
a442b761
AB		 16855 },
16856 {
16857 .cmd = NL80211_CMD_DEL_NAN_FUNCTION,
ef6243ac 16858 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 16859 .doit = nl80211_nan_del_func,
a442b761 16860 .flags = GENL_ADMIN_PERM,
2182db91 16861 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
a5a9dcf2
AB		 16862 },
16863 {
16864 .cmd = NL80211_CMD_CHANGE_NAN_CONFIG,
ef6243ac 16865 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a5a9dcf2 16866 .doit = nl80211_nan_change_config,
a5a9dcf2 16867 .flags = GENL_ADMIN_PERM,
2182db91 16868 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
98104fde 16869 },
f4e583c8
AQ		 16870 {
16871 .cmd = NL80211_CMD_SET_MCAST_RATE,
ef6243ac 16872 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f4e583c8 16873 .doit = nl80211_set_mcast_rate,
5617c6cd 16874 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16875 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
77765eaf
VT		 16876 },
16877 {
16878 .cmd = NL80211_CMD_SET_MAC_ACL,
ef6243ac 16879 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
77765eaf 16880 .doit = nl80211_set_mac_acl,
5617c6cd 16881 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16882 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
16883 NL80211_FLAG_MLO_UNSUPPORTED),
f4e583c8 16884 },
04f39047
SW		 16885 {
16886 .cmd = NL80211_CMD_RADAR_DETECT,
ef6243ac 16887 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04f39047 16888 .doit = nl80211_start_radar_detection,
5617c6cd 16889 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16890 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
7b0a0e3c
JB		 16891 NL80211_FLAG_NO_WIPHY_MTX |
16892 NL80211_FLAG_MLO_UNSUPPORTED),
04f39047 16893 },
3713b4e3
JB		 16894 {
16895 .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
ef6243ac 16896 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3713b4e3 16897 .doit = nl80211_get_protocol_features,
3713b4e3 16898 },
355199e0
JM		 16899 {
16900 .cmd = NL80211_CMD_UPDATE_FT_IES,
ef6243ac 16901 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
355199e0 16902 .doit = nl80211_update_ft_ies,
5617c6cd 16903 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16904 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
355199e0 16905 },
5de17984
AS		 16906 {
16907 .cmd = NL80211_CMD_CRIT_PROTOCOL_START,
ef6243ac 16908 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 16909 .doit = nl80211_crit_protocol_start,
5617c6cd 16910 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16911 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
5de17984
AS		 16912 },
16913 {
16914 .cmd = NL80211_CMD_CRIT_PROTOCOL_STOP,
ef6243ac 16915 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 16916 .doit = nl80211_crit_protocol_stop,
5617c6cd 16917 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16918 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
be29b99a
AK		 16919 },
16920 {
16921 .cmd = NL80211_CMD_GET_COALESCE,
ef6243ac 16922 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 16923 .doit = nl80211_get_coalesce,
2182db91 16924 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
be29b99a
AK		 16925 },
16926 {
16927 .cmd = NL80211_CMD_SET_COALESCE,
ef6243ac 16928 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 16929 .doit = nl80211_set_coalesce,
5617c6cd 16930 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16931 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY),
16ef1fe2
SW		 16932 },
16933 {
16934 .cmd = NL80211_CMD_CHANNEL_SWITCH,
ef6243ac 16935 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
16ef1fe2 16936 .doit = nl80211_channel_switch,
5617c6cd 16937 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16938 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16939 NL80211_FLAG_MLO_VALID_LINK_ID),
16ef1fe2 16940 },
ad7e718c
JB		 16941 {
16942 .cmd = NL80211_CMD_VENDOR,
ef6243ac 16943 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad7e718c 16944 .doit = nl80211_vendor_cmd,
7bdbe400 16945 .dumpit = nl80211_vendor_cmd_dump,
5617c6cd 16946 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 16947 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
16948 NL80211_FLAG_CLEAR_SKB),
ad7e718c 16949 },
fa9ffc74
KP		 16950 {
16951 .cmd = NL80211_CMD_SET_QOS_MAP,
ef6243ac 16952 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
fa9ffc74 16953 .doit = nl80211_set_qos_map,
5617c6cd 16954 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16955 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
fa9ffc74 16956 },
960d01ac
JB		 16957 {
16958 .cmd = NL80211_CMD_ADD_TX_TS,
ef6243ac 16959 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 16960 .doit = nl80211_add_tx_ts,
5617c6cd 16961 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 16962 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16963 NL80211_FLAG_MLO_UNSUPPORTED),
960d01ac
JB		 16964 },
16965 {
16966 .cmd = NL80211_CMD_DEL_TX_TS,
ef6243ac 16967 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 16968 .doit = nl80211_del_tx_ts,
5617c6cd 16969 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16970 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
960d01ac 16971 },
1057d35e
AN		 16972 {
16973 .cmd = NL80211_CMD_TDLS_CHANNEL_SWITCH,
ef6243ac 16974 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 16975 .doit = nl80211_tdls_channel_switch,
5617c6cd 16976 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16977 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
1057d35e
AN		 16978 },
16979 {
16980 .cmd = NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH,
ef6243ac 16981 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 16982 .doit = nl80211_tdls_cancel_channel_switch,
5617c6cd 16983 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16984 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
1057d35e 16985 },
ce0ce13a
MB		 16986 {
16987 .cmd = NL80211_CMD_SET_MULTICAST_TO_UNICAST,
ef6243ac 16988 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ce0ce13a 16989 .doit = nl80211_set_multicast_to_unicast,
ce0ce13a 16990 .flags = GENL_UNS_ADMIN_PERM,
2182db91 16991 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV),
ce0ce13a 16992 },
3a00df57
AS		 16993 {
16994 .cmd = NL80211_CMD_SET_PMK,
ef6243ac 16995 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 16996 .doit = nl80211_set_pmk,
2182db91
JB		 16997 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
16998 NL80211_FLAG_CLEAR_SKB),
3a00df57
AS		 16999 },
17000 {
17001 .cmd = NL80211_CMD_DEL_PMK,
ef6243ac 17002 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 17003 .doit = nl80211_del_pmk,
2182db91 17004 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
3a00df57 17005 },
40cbfa90
SD		 17006 {
17007 .cmd = NL80211_CMD_EXTERNAL_AUTH,
ef6243ac 17008 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
40cbfa90 17009 .doit = nl80211_external_auth,
40cbfa90 17010 .flags = GENL_ADMIN_PERM,
2182db91 17011 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
40cbfa90 17012 },
2576a9ac
DK		 17013 {
17014 .cmd = NL80211_CMD_CONTROL_PORT_FRAME,
ef6243ac 17015 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2576a9ac 17016 .doit = nl80211_tx_control_port,
2576a9ac 17017 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17018 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
2576a9ac 17019 },
81e54d08
PKC		 17020 {
17021 .cmd = NL80211_CMD_GET_FTM_RESPONDER_STATS,
ef6243ac 17022 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
81e54d08 17023 .doit = nl80211_get_ftm_responder_stats,
7b0a0e3c
JB		 17024 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
17025 NL80211_FLAG_MLO_VALID_LINK_ID),
81e54d08 17026 },
9bb7e0f2
JB		 17027 {
17028 .cmd = NL80211_CMD_PEER_MEASUREMENT_START,
ef6243ac 17029 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9bb7e0f2 17030 .doit = nl80211_pmsr_start,
9bb7e0f2 17031 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17032 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WDEV_UP),
9bb7e0f2 17033 },
30c63115
S		 17034 {
17035 .cmd = NL80211_CMD_NOTIFY_RADAR,
ef6243ac 17036 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
30c63115 17037 .doit = nl80211_notify_radar_detection,
30c63115 17038 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17039 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
30c63115 17040 },
cb74e977
SD		 17041 {
17042 .cmd = NL80211_CMD_UPDATE_OWE_INFO,
17043 .doit = nl80211_update_owe_info,
17044 .flags = GENL_ADMIN_PERM,
2182db91 17045 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
5ab92e7f
RM		 17046 },
17047 {
17048 .cmd = NL80211_CMD_PROBE_MESH_LINK,
17049 .doit = nl80211_probe_mesh_link,
17050 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17051 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
cb74e977 17052 },
77f576de
T		 17053 {
17054 .cmd = NL80211_CMD_SET_TID_CONFIG,
17055 .doit = nl80211_set_tid_config,
17056 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 17057 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV |
17058 NL80211_FLAG_MLO_VALID_LINK_ID),
77f576de 17059 },
6bdb68ce
CH		 17060 {
17061 .cmd = NL80211_CMD_SET_SAR_SPECS,
17062 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17063 .doit = nl80211_set_sar_specs,
17064 .flags = GENL_UNS_ADMIN_PERM,
2182db91
JB		 17065 .internal_flags = IFLAGS(NL80211_FLAG_NEED_WIPHY |
17066 NL80211_FLAG_NEED_RTNL),
6bdb68ce 17067 },
0d2ab3ae
JC		 17068 {
17069 .cmd = NL80211_CMD_COLOR_CHANGE_REQUEST,
17070 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17071 .doit = nl80211_color_change,
17072 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17073 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
0d2ab3ae 17074 },
e306784a
SM		 17075 {
17076 .cmd = NL80211_CMD_SET_FILS_AAD,
17077 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
17078 .doit = nl80211_set_fils_aad,
17079 .flags = GENL_UNS_ADMIN_PERM,
2182db91 17080 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
e306784a 17081 },
7b0a0e3c
JB		 17082 {
17083 .cmd = NL80211_CMD_ADD_LINK,
17084 .doit = nl80211_add_link,
17085 .flags = GENL_UNS_ADMIN_PERM,
17086 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP),
17087 },
17088 {
17089 .cmd = NL80211_CMD_REMOVE_LINK,
17090 .doit = nl80211_remove_link,
17091 .flags = GENL_UNS_ADMIN_PERM,
577e5b8c
ST		 17092 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17093 NL80211_FLAG_MLO_VALID_LINK_ID),
17094 },
17095 {
17096 .cmd = NL80211_CMD_ADD_LINK_STA,
17097 .doit = nl80211_add_link_station,
17098 .flags = GENL_UNS_ADMIN_PERM,
17099 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17100 NL80211_FLAG_MLO_VALID_LINK_ID),
17101 },
17102 {
17103 .cmd = NL80211_CMD_MODIFY_LINK_STA,
17104 .doit = nl80211_modify_link_station,
17105 .flags = GENL_UNS_ADMIN_PERM,
17106 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17107 NL80211_FLAG_MLO_VALID_LINK_ID),
17108 },
17109 {
17110 .cmd = NL80211_CMD_REMOVE_LINK_STA,
17111 .doit = nl80211_remove_link_station,
17112 .flags = GENL_UNS_ADMIN_PERM,
7b0a0e3c
JB		 17113 .internal_flags = IFLAGS(NL80211_FLAG_NEED_NETDEV_UP |
17114 NL80211_FLAG_MLO_VALID_LINK_ID),
17115 },
55682965 17116};
9588bbd5 17117
56989f6d 17118static struct genl_family nl80211_fam __ro_after_init = {
489111e5
JB		 17119 .name = NL80211_GENL_NAME, /* have users key off the name instead */
17120 .hdrsize = 0, /* no private header */
17121 .version = 1, /* no particular meaning now */
17122 .maxattr = NL80211_ATTR_MAX,
3b0f31f2 17123 .policy = nl80211_policy,
489111e5
JB		 17124 .netnsok = true,
17125 .pre_doit = nl80211_pre_doit,
17126 .post_doit = nl80211_post_doit,
17127 .module = THIS_MODULE,
17128 .ops = nl80211_ops,
17129 .n_ops = ARRAY_SIZE(nl80211_ops),
66a9b928
JK		 17130 .small_ops = nl80211_small_ops,
17131 .n_small_ops = ARRAY_SIZE(nl80211_small_ops),
489111e5
JB		 17132 .mcgrps = nl80211_mcgrps,
17133 .n_mcgrps = ARRAY_SIZE(nl80211_mcgrps),
50508d94 17134 .parallel_ops = true,
489111e5
JB		 17135};
17136
55682965
JB		 17137/* notification functions */
17138
3bb20556
JB		 17139void nl80211_notify_wiphy(struct cfg80211_registered_device *rdev,
17140 enum nl80211_commands cmd)
55682965
JB		 17141{
17142 struct sk_buff *msg;
86e8cf98 17143 struct nl80211_dump_wiphy_state state = {};
55682965 17144
3bb20556
JB		 17145 WARN_ON(cmd != NL80211_CMD_NEW_WIPHY &&
17146 cmd != NL80211_CMD_DEL_WIPHY);
17147
fd2120ca 17148 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 17149 if (!msg)
17150 return;
17151
3bb20556 17152 if (nl80211_send_wiphy(rdev, cmd, msg, 0, 0, 0, &state) < 0) {
55682965
JB		 17153 nlmsg_free(msg);
17154 return;
17155 }
17156
68eb5503 17157 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17158 NL80211_MCGRP_CONFIG, GFP_KERNEL);
55682965
JB		 17159}
17160
896ff063
DK		 17161void nl80211_notify_iface(struct cfg80211_registered_device *rdev,
17162 struct wireless_dev *wdev,
17163 enum nl80211_commands cmd)
17164{
17165 struct sk_buff *msg;
17166
896ff063
DK		 17167 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17168 if (!msg)
17169 return;
17170
3d1a5bbf 17171 if (nl80211_send_iface(msg, 0, 0, 0, rdev, wdev, cmd) < 0) {
896ff063
DK		 17172 nlmsg_free(msg);
17173 return;
17174 }
17175
17176 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17177 NL80211_MCGRP_CONFIG, GFP_KERNEL);
17178}
17179
362a415d
JB		 17180static int nl80211_add_scan_req(struct sk_buff *msg,
17181 struct cfg80211_registered_device *rdev)
17182{
17183 struct cfg80211_scan_request *req = rdev->scan_req;
17184 struct nlattr *nest;
17185 int i;
c8cb5b85 17186 struct cfg80211_scan_info *info;
362a415d
JB		 17187
17188 if (WARN_ON(!req))
17189 return 0;
17190
ae0be8de 17191 nest = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_SSIDS);
362a415d
JB		 17192 if (!nest)
17193 goto nla_put_failure;
9360ffd1
DM		 17194 for (i = 0; i < req->n_ssids; i++) {
17195 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
17196 goto nla_put_failure;
17197 }
362a415d
JB		 17198 nla_nest_end(msg, nest);
17199
2032f3b2
TP		 17200 if (req->flags & NL80211_SCAN_FLAG_FREQ_KHZ) {
17201 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQ_KHZ);
17202 if (!nest)
17203 goto nla_put_failure;
17204 for (i = 0; i < req->n_channels; i++) {
17205 if (nla_put_u32(msg, i,
17206 ieee80211_channel_to_khz(req->channels[i])))
17207 goto nla_put_failure;
17208 }
17209 nla_nest_end(msg, nest);
17210 } else {
17211 nest = nla_nest_start_noflag(msg,
17212 NL80211_ATTR_SCAN_FREQUENCIES);
17213 if (!nest)
9360ffd1 17214 goto nla_put_failure;
2032f3b2
TP		 17215 for (i = 0; i < req->n_channels; i++) {
17216 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
17217 goto nla_put_failure;
17218 }
17219 nla_nest_end(msg, nest);
9360ffd1 17220 }
362a415d 17221
9360ffd1
DM		 17222 if (req->ie &&
17223 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
17224 goto nla_put_failure;
362a415d 17225
ae917c9f
JB		 17226 if (req->flags &&
17227 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags))
17228 goto nla_put_failure;
ed473771 17229
c8cb5b85
TM		 17230 info = rdev->int_scan_req ? &rdev->int_scan_req->info :
17231 &rdev->scan_req->info;
17232 if (info->scan_start_tsf &&
1d76250b 17233 (nla_put_u64_64bit(msg, NL80211_ATTR_SCAN_START_TIME_TSF,
c8cb5b85 17234 info->scan_start_tsf, NL80211_BSS_PAD) ||
1d76250b 17235 nla_put(msg, NL80211_ATTR_SCAN_START_TIME_TSF_BSSID, ETH_ALEN,
c8cb5b85 17236 info->tsf_bssid)))
1d76250b
AS		 17237 goto nla_put_failure;
17238
362a415d
JB		 17239 return 0;
17240 nla_put_failure:
17241 return -ENOBUFS;
17242}
17243
505a2e88 17244static int nl80211_prep_scan_msg(struct sk_buff *msg,
a538e2d5 17245 struct cfg80211_registered_device *rdev,
fd014284 17246 struct wireless_dev *wdev,
15e47304 17247 u32 portid, u32 seq, int flags,
a538e2d5 17248 u32 cmd)
2a519311
JB		 17249{
17250 void *hdr;
17251
15e47304 17252 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 17253 if (!hdr)
17254 return -1;
17255
9360ffd1 17256 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 17257 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
17258 wdev->netdev->ifindex)) ||
2dad624e
ND		 17259 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17260 NL80211_ATTR_PAD))
9360ffd1 17261 goto nla_put_failure;
2a519311 17262
362a415d
JB		 17263 /* ignore errors and send incomplete event anyway */
17264 nl80211_add_scan_req(msg, rdev);
2a519311 17265
053c095a
JB		 17266 genlmsg_end(msg, hdr);
17267 return 0;
2a519311
JB		 17268
17269 nla_put_failure:
17270 genlmsg_cancel(msg, hdr);
17271 return -EMSGSIZE;
17272}
17273
807f8a8c 17274static int
505a2e88 17275nl80211_prep_sched_scan_msg(struct sk_buff *msg,
96b08fd6 17276 struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 17277{
17278 void *hdr;
17279
96b08fd6 17280 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
807f8a8c
LC		 17281 if (!hdr)
17282 return -1;
17283
96b08fd6
AVS		 17284 if (nla_put_u32(msg, NL80211_ATTR_WIPHY,
17285 wiphy_to_rdev(req->wiphy)->wiphy_idx) ||
17286 nla_put_u32(msg, NL80211_ATTR_IFINDEX, req->dev->ifindex) ||
17287 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, req->reqid,
17288 NL80211_ATTR_PAD))
9360ffd1 17289 goto nla_put_failure;
807f8a8c 17290
053c095a
JB		 17291 genlmsg_end(msg, hdr);
17292 return 0;
807f8a8c
LC		 17293
17294 nla_put_failure:
17295 genlmsg_cancel(msg, hdr);
17296 return -EMSGSIZE;
17297}
17298
a538e2d5 17299void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 17300 struct wireless_dev *wdev)
a538e2d5
JB		 17301{
17302 struct sk_buff *msg;
17303
58050fce 17304 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 17305 if (!msg)
17306 return;
17307
505a2e88 17308 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 17309 NL80211_CMD_TRIGGER_SCAN) < 0) {
17310 nlmsg_free(msg);
17311 return;
17312 }
17313
68eb5503 17314 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17315 NL80211_MCGRP_SCAN, GFP_KERNEL);
a538e2d5
JB		 17316}
17317
f9d15d16
JB		 17318struct sk_buff *nl80211_build_scan_msg(struct cfg80211_registered_device *rdev,
17319 struct wireless_dev *wdev, bool aborted)
2a519311
JB		 17320{
17321 struct sk_buff *msg;
17322
fd2120ca 17323 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311 17324 if (!msg)
f9d15d16 17325 return NULL;
2a519311 17326
505a2e88 17327 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
f9d15d16
JB		 17328 aborted ? NL80211_CMD_SCAN_ABORTED :
17329 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311 17330 nlmsg_free(msg);
f9d15d16 17331 return NULL;
2a519311
JB		 17332 }
17333
f9d15d16 17334 return msg;
2a519311
JB		 17335}
17336
505a2e88
AVS		 17337/* send message created by nl80211_build_scan_msg() */
17338void nl80211_send_scan_msg(struct cfg80211_registered_device *rdev,
17339 struct sk_buff *msg)
807f8a8c 17340{
807f8a8c
LC		 17341 if (!msg)
17342 return;
17343
68eb5503 17344 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17345 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 17346}
17347
96b08fd6 17348void nl80211_send_sched_scan(struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 17349{
17350 struct sk_buff *msg;
17351
58050fce 17352 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 17353 if (!msg)
17354 return;
17355
96b08fd6 17356 if (nl80211_prep_sched_scan_msg(msg, req, cmd) < 0) {
807f8a8c
LC		 17357 nlmsg_free(msg);
17358 return;
17359 }
17360
96b08fd6 17361 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(req->wiphy), msg, 0,
2a94fe48 17362 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 17363}
17364
b0d7aa59
JD		 17365static bool nl80211_reg_change_event_fill(struct sk_buff *msg,
17366 struct regulatory_request *request)
73d54c9e 17367{
73d54c9e 17368 /* Userspace can always count this one always being set */
9360ffd1
DM		 17369 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
17370 goto nla_put_failure;
17371
17372 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
17373 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17374 NL80211_REGDOM_TYPE_WORLD))
17375 goto nla_put_failure;
17376 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
17377 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17378 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
17379 goto nla_put_failure;
17380 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
17381 request->intersect) {
17382 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17383 NL80211_REGDOM_TYPE_INTERSECTION))
17384 goto nla_put_failure;
17385 } else {
17386 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
17387 NL80211_REGDOM_TYPE_COUNTRY) ||
17388 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
17389 request->alpha2))
17390 goto nla_put_failure;
17391 }
17392
ad30ca2c
AN		 17393 if (request->wiphy_idx != WIPHY_IDX_INVALID) {
17394 struct wiphy *wiphy = wiphy_idx_to_wiphy(request->wiphy_idx);
17395
17396 if (wiphy &&
17397 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
17398 goto nla_put_failure;
1bdd716c
AN		 17399
17400 if (wiphy &&
17401 wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
17402 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
17403 goto nla_put_failure;
ad30ca2c 17404 }
73d54c9e 17405
b0d7aa59
JD		 17406 return true;
17407
17408nla_put_failure:
17409 return false;
17410}
17411
17412/*
17413 * This can happen on global regulatory changes or device specific settings
17414 * based on custom regulatory domains.
17415 */
17416void nl80211_common_reg_change_event(enum nl80211_commands cmd_id,
17417 struct regulatory_request *request)
17418{
17419 struct sk_buff *msg;
17420 void *hdr;
17421
17422 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17423 if (!msg)
17424 return;
17425
17426 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd_id);
24f6d765 17427 if (!hdr)
17428 goto nla_put_failure;
b0d7aa59 17429
24f6d765 17430 if (!nl80211_reg_change_event_fill(msg, request))
b0d7aa59
JD		 17431 goto nla_put_failure;
17432
3b7b72ee 17433 genlmsg_end(msg, hdr);
73d54c9e 17434
bc43b28c 17435 rcu_read_lock();
68eb5503 17436 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 17437 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
bc43b28c 17438 rcu_read_unlock();
73d54c9e
LR		 17439
17440 return;
17441
17442nla_put_failure:
73d54c9e
LR		 17443 nlmsg_free(msg);
17444}
17445
6039f6d2
JM		 17446static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
17447 struct net_device *netdev,
17448 const u8 *buf, size_t len,
b0b6aa2c 17449 enum nl80211_commands cmd, gfp_t gfp,
4d9ec73d 17450 int uapsd_queues, const u8 *req_ies,
3bb02143 17451 size_t req_ies_len, bool reconnect)
6039f6d2
JM		 17452{
17453 struct sk_buff *msg;
17454 void *hdr;
17455
4d9ec73d 17456 msg = nlmsg_new(100 + len + req_ies_len, gfp);
6039f6d2
JM		 17457 if (!msg)
17458 return;
17459
17460 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
17461 if (!hdr) {
17462 nlmsg_free(msg);
17463 return;
17464 }
17465
9360ffd1
DM		 17466 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17467 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
4d9ec73d
JM		 17468 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
17469 (req_ies &&
17470 nla_put(msg, NL80211_ATTR_REQ_IE, req_ies_len, req_ies)))
9360ffd1 17471 goto nla_put_failure;
6039f6d2 17472
3bb02143
JB		 17473 if (reconnect && nla_put_flag(msg, NL80211_ATTR_RECONNECT_REQUESTED))
17474 goto nla_put_failure;
17475
b0b6aa2c
EP		 17476 if (uapsd_queues >= 0) {
17477 struct nlattr *nla_wmm =
ae0be8de 17478 nla_nest_start_noflag(msg, NL80211_ATTR_STA_WME);
b0b6aa2c
EP		 17479 if (!nla_wmm)
17480 goto nla_put_failure;
17481
17482 if (nla_put_u8(msg, NL80211_STA_WME_UAPSD_QUEUES,
17483 uapsd_queues))
17484 goto nla_put_failure;
17485
17486 nla_nest_end(msg, nla_wmm);
17487 }
17488
3b7b72ee 17489 genlmsg_end(msg, hdr);
6039f6d2 17490
68eb5503 17491 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17492 NL80211_MCGRP_MLME, gfp);
6039f6d2
JM		 17493 return;
17494
17495 nla_put_failure:
6039f6d2
JM		 17496 nlmsg_free(msg);
17497}
17498
17499void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17500 struct net_device *netdev, const u8 *buf,
17501 size_t len, gfp_t gfp)
6039f6d2
JM		 17502{
17503 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17504 NL80211_CMD_AUTHENTICATE, gfp, -1, NULL, 0,
17505 false);
6039f6d2
JM		 17506}
17507
17508void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
cd47c0f5
JB		 17509 struct net_device *netdev,
17510 struct cfg80211_rx_assoc_resp *data)
6039f6d2 17511{
cd47c0f5
JB		 17512 nl80211_send_mlme_event(rdev, netdev, data->buf, data->len,
17513 NL80211_CMD_ASSOCIATE, GFP_KERNEL,
17514 data->uapsd_queues,
17515 data->req_ies, data->req_ies_len, false);
6039f6d2
JM		 17516}
17517
53b46b84 17518void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342 17519 struct net_device *netdev, const u8 *buf,
3bb02143 17520 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 17521{
17522 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17523 NL80211_CMD_DEAUTHENTICATE, gfp, -1, NULL, 0,
17524 reconnect);
6039f6d2
JM		 17525}
17526
53b46b84
JM		 17527void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
17528 struct net_device *netdev, const u8 *buf,
3bb02143 17529 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 17530{
17531 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 17532 NL80211_CMD_DISASSOCIATE, gfp, -1, NULL, 0,
17533 reconnect);
6039f6d2
JM		 17534}
17535
6ff57cf8
JB		 17536void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev, const u8 *buf,
17537 size_t len)
cf4e594e 17538{
947add36
JB		 17539 struct wireless_dev *wdev = dev->ieee80211_ptr;
17540 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17541 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
6ff57cf8
JB		 17542 const struct ieee80211_mgmt *mgmt = (void *)buf;
17543 u32 cmd;
947add36 17544
6ff57cf8
JB		 17545 if (WARN_ON(len < 2))
17546 return;
cf4e594e 17547
4d797fce 17548 if (ieee80211_is_deauth(mgmt->frame_control)) {
6ff57cf8 17549 cmd = NL80211_CMD_UNPROT_DEAUTHENTICATE;
4d797fce 17550 } else if (ieee80211_is_disassoc(mgmt->frame_control)) {
6ff57cf8 17551 cmd = NL80211_CMD_UNPROT_DISASSOCIATE;
4d797fce
JM		 17552 } else if (ieee80211_is_beacon(mgmt->frame_control)) {
17553 if (wdev->unprot_beacon_reported &&
17554 elapsed_jiffies_msecs(wdev->unprot_beacon_reported) < 10000)
17555 return;
17556 cmd = NL80211_CMD_UNPROT_BEACON;
17557 wdev->unprot_beacon_reported = jiffies;
17558 } else {
17559 return;
17560 }
947add36 17561
6ff57cf8 17562 trace_cfg80211_rx_unprot_mlme_mgmt(dev, buf, len);
4d9ec73d 17563 nl80211_send_mlme_event(rdev, dev, buf, len, cmd, GFP_ATOMIC, -1,
3bb02143 17564 NULL, 0, false);
cf4e594e 17565}
6ff57cf8 17566EXPORT_SYMBOL(cfg80211_rx_unprot_mlme_mgmt);
cf4e594e 17567
1b06bb40
LR		 17568static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
17569 struct net_device *netdev, int cmd,
e6d6e342 17570 const u8 *addr, gfp_t gfp)
1965c853
JM		 17571{
17572 struct sk_buff *msg;
17573 void *hdr;
17574
e6d6e342 17575 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 17576 if (!msg)
17577 return;
17578
17579 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
17580 if (!hdr) {
17581 nlmsg_free(msg);
17582 return;
17583 }
17584
9360ffd1
DM		 17585 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17586 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17587 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
17588 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
17589 goto nla_put_failure;
1965c853 17590
3b7b72ee 17591 genlmsg_end(msg, hdr);
1965c853 17592
68eb5503 17593 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17594 NL80211_MCGRP_MLME, gfp);
1965c853
JM		 17595 return;
17596
17597 nla_put_failure:
1965c853
JM		 17598 nlmsg_free(msg);
17599}
17600
17601void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17602 struct net_device *netdev, const u8 *addr,
17603 gfp_t gfp)
1965c853
JM		 17604{
17605 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 17606 addr, gfp);
1965c853
JM		 17607}
17608
17609void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 17610 struct net_device *netdev, const u8 *addr,
17611 gfp_t gfp)
1965c853 17612{
e6d6e342
JB		 17613 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
17614 addr, gfp);
1965c853
JM		 17615}
17616
b23aa676 17617void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
5349a0f7
VK		 17618 struct net_device *netdev,
17619 struct cfg80211_connect_resp_params *cr,
3093ebbe 17620 gfp_t gfp)
b23aa676
SO		 17621{
17622 struct sk_buff *msg;
17623 void *hdr;
efbabc11
VJ		 17624 unsigned int link;
17625 size_t link_info_size = 0;
17626 const u8 *connected_addr = cr->valid_links ?
17627 cr->ap_mld_addr : cr->links[0].bssid;
17628
17629 if (cr->valid_links) {
17630 for_each_valid_link(cr, link) {
17631 /* Nested attribute header */
17632 link_info_size += NLA_HDRLEN;
17633 /* Link ID */
17634 link_info_size += nla_total_size(sizeof(u8));
17635 link_info_size += cr->links[link].addr ?
17636 nla_total_size(ETH_ALEN) : 0;
17637 link_info_size += (cr->links[link].bssid ||
17638 cr->links[link].bss) ?
17639 nla_total_size(ETH_ALEN) : 0;
17640 }
17641 }
b23aa676 17642
a3caf744 17643 msg = nlmsg_new(100 + cr->req_ie_len + cr->resp_ie_len +
76804d28 17644 cr->fils.kek_len + cr->fils.pmk_len +
efbabc11
VJ		 17645 (cr->fils.pmkid ? WLAN_PMKID_LEN : 0) + link_info_size,
17646 gfp);
b23aa676
SO		 17647 if (!msg)
17648 return;
17649
17650 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
17651 if (!hdr) {
17652 nlmsg_free(msg);
17653 return;
17654 }
17655
9360ffd1
DM		 17656 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17657 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
efbabc11
VJ		 17658 (connected_addr &&
17659 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, connected_addr)) ||
bf1ecd21 17660 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE,
5349a0f7
VK		 17661 cr->status < 0 ? WLAN_STATUS_UNSPECIFIED_FAILURE :
17662 cr->status) ||
17663 (cr->status < 0 &&
3093ebbe 17664 (nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
5349a0f7
VK		 17665 nla_put_u32(msg, NL80211_ATTR_TIMEOUT_REASON,
17666 cr->timeout_reason))) ||
17667 (cr->req_ie &&
17668 nla_put(msg, NL80211_ATTR_REQ_IE, cr->req_ie_len, cr->req_ie)) ||
17669 (cr->resp_ie &&
17670 nla_put(msg, NL80211_ATTR_RESP_IE, cr->resp_ie_len,
a3caf744 17671 cr->resp_ie)) ||
76804d28 17672 (cr->fils.update_erp_next_seq_num &&
a3caf744 17673 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
76804d28 17674 cr->fils.erp_next_seq_num)) ||
a3caf744 17675 (cr->status == WLAN_STATUS_SUCCESS &&
76804d28
AVS		 17676 ((cr->fils.kek &&
17677 nla_put(msg, NL80211_ATTR_FILS_KEK, cr->fils.kek_len,
17678 cr->fils.kek)) ||
17679 (cr->fils.pmk &&
17680 nla_put(msg, NL80211_ATTR_PMK, cr->fils.pmk_len, cr->fils.pmk)) ||
17681 (cr->fils.pmkid &&
17682 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, cr->fils.pmkid)))))
9360ffd1 17683 goto nla_put_failure;
b23aa676 17684
efbabc11
VJ		 17685 if (cr->valid_links) {
17686 int i = 1;
17687 struct nlattr *nested;
17688
17689 nested = nla_nest_start(msg, NL80211_ATTR_MLO_LINKS);
17690 if (!nested)
17691 goto nla_put_failure;
17692
17693 for_each_valid_link(cr, link) {
17694 struct nlattr *nested_mlo_links;
17695 const u8 *bssid = cr->links[link].bss ?
17696 cr->links[link].bss->bssid :
17697 cr->links[link].bssid;
17698
17699 nested_mlo_links = nla_nest_start(msg, i);
17700 if (!nested_mlo_links)
17701 goto nla_put_failure;
17702
17703 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link) ||
17704 (bssid &&
17705 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, bssid)) ||
17706 (cr->links[link].addr &&
17707 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
17708 cr->links[link].addr)))
17709 goto nla_put_failure;
17710
17711 nla_nest_end(msg, nested_mlo_links);
17712 i++;
17713 }
17714 nla_nest_end(msg, nested);
17715 }
17716
3b7b72ee 17717 genlmsg_end(msg, hdr);
b23aa676 17718
68eb5503 17719 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17720 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 17721 return;
17722
17723 nla_put_failure:
b23aa676 17724 nlmsg_free(msg);
b23aa676
SO		 17725}
17726
17727void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
29ce6ecb
AS		 17728 struct net_device *netdev,
17729 struct cfg80211_roam_info *info, gfp_t gfp)
b23aa676
SO		 17730{
17731 struct sk_buff *msg;
17732 void *hdr;
efbabc11
VJ		 17733 size_t link_info_size = 0;
17734 unsigned int link;
17735 const u8 *connected_addr = info->ap_mld_addr ?
17736 info->ap_mld_addr :
17737 (info->links[0].bss ?
17738 info->links[0].bss->bssid :
17739 info->links[0].bssid);
17740
17741 if (info->valid_links) {
17742 for_each_valid_link(info, link) {
17743 /* Nested attribute header */
17744 link_info_size += NLA_HDRLEN;
17745 /* Link ID */
17746 link_info_size += nla_total_size(sizeof(u8));
17747 link_info_size += info->links[link].addr ?
17748 nla_total_size(ETH_ALEN) : 0;
17749 link_info_size += (info->links[link].bssid ||
17750 info->links[link].bss) ?
17751 nla_total_size(ETH_ALEN) : 0;
17752 }
17753 }
b23aa676 17754
e841b7b1
AVS		 17755 msg = nlmsg_new(100 + info->req_ie_len + info->resp_ie_len +
17756 info->fils.kek_len + info->fils.pmk_len +
efbabc11
VJ		 17757 (info->fils.pmkid ? WLAN_PMKID_LEN : 0) +
17758 link_info_size, gfp);
b23aa676
SO		 17759 if (!msg)
17760 return;
17761
17762 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
17763 if (!hdr) {
17764 nlmsg_free(msg);
17765 return;
17766 }
17767
9360ffd1
DM		 17768 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17769 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
efbabc11 17770 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, connected_addr) ||
29ce6ecb
AS		 17771 (info->req_ie &&
17772 nla_put(msg, NL80211_ATTR_REQ_IE, info->req_ie_len,
17773 info->req_ie)) ||
17774 (info->resp_ie &&
17775 nla_put(msg, NL80211_ATTR_RESP_IE, info->resp_ie_len,
e841b7b1
AVS		 17776 info->resp_ie)) ||
17777 (info->fils.update_erp_next_seq_num &&
17778 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
17779 info->fils.erp_next_seq_num)) ||
17780 (info->fils.kek &&
17781 nla_put(msg, NL80211_ATTR_FILS_KEK, info->fils.kek_len,
17782 info->fils.kek)) ||
17783 (info->fils.pmk &&
17784 nla_put(msg, NL80211_ATTR_PMK, info->fils.pmk_len, info->fils.pmk)) ||
17785 (info->fils.pmkid &&
17786 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, info->fils.pmkid)))
9360ffd1 17787 goto nla_put_failure;
b23aa676 17788
efbabc11
VJ		 17789 if (info->valid_links) {
17790 int i = 1;
17791 struct nlattr *nested;
17792
17793 nested = nla_nest_start(msg, NL80211_ATTR_MLO_LINKS);
17794 if (!nested)
17795 goto nla_put_failure;
17796
17797 for_each_valid_link(info, link) {
17798 struct nlattr *nested_mlo_links;
17799 const u8 *bssid = info->links[link].bss ?
17800 info->links[link].bss->bssid :
17801 info->links[link].bssid;
17802
17803 nested_mlo_links = nla_nest_start(msg, i);
17804 if (!nested_mlo_links)
17805 goto nla_put_failure;
17806
17807 if (nla_put_u8(msg, NL80211_ATTR_MLO_LINK_ID, link) ||
17808 (bssid &&
17809 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, bssid)) ||
17810 (info->links[link].addr &&
17811 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
17812 info->links[link].addr)))
17813 goto nla_put_failure;
17814
17815 nla_nest_end(msg, nested_mlo_links);
17816 i++;
17817 }
17818 nla_nest_end(msg, nested);
17819 }
17820
3b7b72ee 17821 genlmsg_end(msg, hdr);
b23aa676 17822
68eb5503 17823 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17824 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 17825 return;
17826
503c1fb9 17827 nla_put_failure:
503c1fb9
AS		 17828 nlmsg_free(msg);
17829}
17830
17831void nl80211_send_port_authorized(struct cfg80211_registered_device *rdev,
17832 struct net_device *netdev, const u8 *bssid)
17833{
17834 struct sk_buff *msg;
17835 void *hdr;
17836
17837 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17838 if (!msg)
17839 return;
17840
17841 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PORT_AUTHORIZED);
17842 if (!hdr) {
17843 nlmsg_free(msg);
17844 return;
17845 }
17846
f4d75993
CHH		 17847 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17848 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17849 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
503c1fb9
AS		 17850 goto nla_put_failure;
17851
17852 genlmsg_end(msg, hdr);
17853
17854 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17855 NL80211_MCGRP_MLME, GFP_KERNEL);
17856 return;
17857
b23aa676 17858 nla_put_failure:
b23aa676 17859 nlmsg_free(msg);
b23aa676
SO		 17860}
17861
17862void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
17863 struct net_device *netdev, u16 reason,
667503dd 17864 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 17865{
17866 struct sk_buff *msg;
17867 void *hdr;
17868
4ef8c1c9 17869 msg = nlmsg_new(100 + ie_len, GFP_KERNEL);
b23aa676
SO		 17870 if (!msg)
17871 return;
17872
17873 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
17874 if (!hdr) {
17875 nlmsg_free(msg);
17876 return;
17877 }
17878
9360ffd1
DM		 17879 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17880 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
86b6c465 17881 (reason &&
9360ffd1
DM		 17882 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
17883 (from_ap &&
17884 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
17885 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
17886 goto nla_put_failure;
b23aa676 17887
3b7b72ee 17888 genlmsg_end(msg, hdr);
b23aa676 17889
68eb5503 17890 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17891 NL80211_MCGRP_MLME, GFP_KERNEL);
b23aa676
SO		 17892 return;
17893
17894 nla_put_failure:
b23aa676 17895 nlmsg_free(msg);
b23aa676
SO		 17896}
17897
04a773ad
JB		 17898void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
17899 struct net_device *netdev, const u8 *bssid,
17900 gfp_t gfp)
17901{
17902 struct sk_buff *msg;
17903 void *hdr;
17904
fd2120ca 17905 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 17906 if (!msg)
17907 return;
17908
17909 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
17910 if (!hdr) {
17911 nlmsg_free(msg);
17912 return;
17913 }
17914
9360ffd1
DM		 17915 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17916 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17917 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
17918 goto nla_put_failure;
04a773ad 17919
3b7b72ee 17920 genlmsg_end(msg, hdr);
04a773ad 17921
68eb5503 17922 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17923 NL80211_MCGRP_MLME, gfp);
04a773ad
JB		 17924 return;
17925
17926 nla_put_failure:
04a773ad
JB		 17927 nlmsg_free(msg);
17928}
17929
947add36 17930void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
ecbc12ad
BC		 17931 const u8 *ie, u8 ie_len,
17932 int sig_dbm, gfp_t gfp)
c93b5e71 17933{
947add36 17934 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 17935 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
c93b5e71
JC		 17936 struct sk_buff *msg;
17937 void *hdr;
17938
947add36
JB		 17939 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_MESH_POINT))
17940 return;
17941
17942 trace_cfg80211_notify_new_peer_candidate(dev, addr);
17943
4ef8c1c9 17944 msg = nlmsg_new(100 + ie_len, gfp);
c93b5e71
JC		 17945 if (!msg)
17946 return;
17947
17948 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
17949 if (!hdr) {
17950 nlmsg_free(msg);
17951 return;
17952 }
17953
9360ffd1 17954 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36
JB		 17955 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17956 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
9360ffd1 17957 (ie_len && ie &&
ecbc12ad
BC		 17958 nla_put(msg, NL80211_ATTR_IE, ie_len, ie)) ||
17959 (sig_dbm &&
17960 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)))
9360ffd1 17961 goto nla_put_failure;
c93b5e71 17962
3b7b72ee 17963 genlmsg_end(msg, hdr);
c93b5e71 17964
68eb5503 17965 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17966 NL80211_MCGRP_MLME, gfp);
c93b5e71
JC		 17967 return;
17968
17969 nla_put_failure:
c93b5e71
JC		 17970 nlmsg_free(msg);
17971}
947add36 17972EXPORT_SYMBOL(cfg80211_notify_new_peer_candidate);
c93b5e71 17973
a3b8b056
JM		 17974void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
17975 struct net_device *netdev, const u8 *addr,
17976 enum nl80211_key_type key_type, int key_id,
e6d6e342 17977 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 17978{
17979 struct sk_buff *msg;
17980 void *hdr;
17981
e6d6e342 17982 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 17983 if (!msg)
17984 return;
17985
17986 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
17987 if (!hdr) {
17988 nlmsg_free(msg);
17989 return;
17990 }
17991
9360ffd1
DM		 17992 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17993 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17994 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
17995 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
17996 (key_id != -1 &&
17997 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
17998 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
17999 goto nla_put_failure;
a3b8b056 18000
3b7b72ee 18001 genlmsg_end(msg, hdr);
a3b8b056 18002
68eb5503 18003 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18004 NL80211_MCGRP_MLME, gfp);
a3b8b056
JM		 18005 return;
18006
18007 nla_put_failure:
a3b8b056
JM		 18008 nlmsg_free(msg);
18009}
18010
6bad8766
LR		 18011void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
18012 struct ieee80211_channel *channel_before,
18013 struct ieee80211_channel *channel_after)
18014{
18015 struct sk_buff *msg;
18016 void *hdr;
18017 struct nlattr *nl_freq;
18018
fd2120ca 18019 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 18020 if (!msg)
18021 return;
18022
18023 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
18024 if (!hdr) {
18025 nlmsg_free(msg);
18026 return;
18027 }
18028
18029 /*
18030 * Since we are applying the beacon hint to a wiphy we know its
18031 * wiphy_idx is valid
18032 */
9360ffd1
DM		 18033 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
18034 goto nla_put_failure;
6bad8766
LR		 18035
18036 /* Before */
ae0be8de 18037 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_BEFORE);
6bad8766
LR		 18038 if (!nl_freq)
18039 goto nla_put_failure;
50f32718
HD		 18040
18041 if (nl80211_msg_put_channel(msg, wiphy, channel_before, false))
6bad8766
LR		 18042 goto nla_put_failure;
18043 nla_nest_end(msg, nl_freq);
18044
18045 /* After */
ae0be8de 18046 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_AFTER);
6bad8766
LR		 18047 if (!nl_freq)
18048 goto nla_put_failure;
50f32718
HD		 18049
18050 if (nl80211_msg_put_channel(msg, wiphy, channel_after, false))
6bad8766
LR		 18051 goto nla_put_failure;
18052 nla_nest_end(msg, nl_freq);
18053
3b7b72ee 18054 genlmsg_end(msg, hdr);
6bad8766 18055
463d0183 18056 rcu_read_lock();
68eb5503 18057 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 18058 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
463d0183 18059 rcu_read_unlock();
6bad8766
LR		 18060
18061 return;
18062
18063nla_put_failure:
6bad8766
LR		 18064 nlmsg_free(msg);
18065}
18066
9588bbd5
JM		 18067static void nl80211_send_remain_on_chan_event(
18068 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 18069 struct wireless_dev *wdev, u64 cookie,
9588bbd5 18070 struct ieee80211_channel *chan,
9588bbd5
JM		 18071 unsigned int duration, gfp_t gfp)
18072{
18073 struct sk_buff *msg;
18074 void *hdr;
18075
18076 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18077 if (!msg)
18078 return;
18079
18080 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
18081 if (!hdr) {
18082 nlmsg_free(msg);
18083 return;
18084 }
18085
9360ffd1 18086 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18087 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18088 wdev->netdev->ifindex)) ||
2dad624e
ND		 18089 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18090 NL80211_ATTR_PAD) ||
9360ffd1 18091 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
42d97a59
JB		 18092 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
18093 NL80211_CHAN_NO_HT) ||
2dad624e
ND		 18094 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
18095 NL80211_ATTR_PAD))
9360ffd1 18096 goto nla_put_failure;
9588bbd5 18097
9360ffd1
DM		 18098 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
18099 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
18100 goto nla_put_failure;
9588bbd5 18101
3b7b72ee 18102 genlmsg_end(msg, hdr);
9588bbd5 18103
68eb5503 18104 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18105 NL80211_MCGRP_MLME, gfp);
9588bbd5
JM		 18106 return;
18107
18108 nla_put_failure:
9588bbd5
JM		 18109 nlmsg_free(msg);
18110}
18111
a083ee8a 18112void cfg80211_assoc_comeback(struct net_device *netdev,
e69dac88 18113 const u8 *ap_addr, u32 timeout)
a083ee8a
IP		 18114{
18115 struct wireless_dev *wdev = netdev->ieee80211_ptr;
18116 struct wiphy *wiphy = wdev->wiphy;
18117 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18118 struct sk_buff *msg;
18119 void *hdr;
18120
e69dac88 18121 trace_cfg80211_assoc_comeback(wdev, ap_addr, timeout);
a083ee8a
IP		 18122
18123 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
18124 if (!msg)
18125 return;
18126
18127 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ASSOC_COMEBACK);
18128 if (!hdr) {
18129 nlmsg_free(msg);
18130 return;
18131 }
18132
18133 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18134 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
e69dac88 18135 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ap_addr) ||
a083ee8a
IP		 18136 nla_put_u32(msg, NL80211_ATTR_TIMEOUT, timeout))
18137 goto nla_put_failure;
18138
18139 genlmsg_end(msg, hdr);
18140
18141 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
18142 NL80211_MCGRP_MLME, GFP_KERNEL);
18143 return;
18144
18145 nla_put_failure:
18146 nlmsg_free(msg);
18147}
18148EXPORT_SYMBOL(cfg80211_assoc_comeback);
18149
947add36
JB		 18150void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
18151 struct ieee80211_channel *chan,
18152 unsigned int duration, gfp_t gfp)
9588bbd5 18153{
947add36 18154 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18155 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18156
18157 trace_cfg80211_ready_on_channel(wdev, cookie, chan, duration);
9588bbd5 18158 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 18159 rdev, wdev, cookie, chan,
42d97a59 18160 duration, gfp);
9588bbd5 18161}
947add36 18162EXPORT_SYMBOL(cfg80211_ready_on_channel);
9588bbd5 18163
947add36
JB		 18164void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
18165 struct ieee80211_channel *chan,
18166 gfp_t gfp)
9588bbd5 18167{
947add36 18168 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18169 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18170
18171 trace_cfg80211_ready_on_channel_expired(wdev, cookie, chan);
9588bbd5 18172 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
42d97a59 18173 rdev, wdev, cookie, chan, 0, gfp);
9588bbd5 18174}
947add36 18175EXPORT_SYMBOL(cfg80211_remain_on_channel_expired);
9588bbd5 18176
1c38c7f2
JP		 18177void cfg80211_tx_mgmt_expired(struct wireless_dev *wdev, u64 cookie,
18178 struct ieee80211_channel *chan,
18179 gfp_t gfp)
18180{
18181 struct wiphy *wiphy = wdev->wiphy;
18182 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18183
18184 trace_cfg80211_tx_mgmt_expired(wdev, cookie, chan);
18185 nl80211_send_remain_on_chan_event(NL80211_CMD_FRAME_WAIT_CANCEL,
18186 rdev, wdev, cookie, chan, 0, gfp);
18187}
18188EXPORT_SYMBOL(cfg80211_tx_mgmt_expired);
18189
947add36
JB		 18190void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
18191 struct station_info *sinfo, gfp_t gfp)
98b62183 18192{
947add36 18193 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18194 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
98b62183
JB		 18195 struct sk_buff *msg;
18196
947add36
JB		 18197 trace_cfg80211_new_sta(dev, mac_addr, sinfo);
18198
58050fce 18199 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 18200 if (!msg)
18201 return;
18202
cf5ead82 18203 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION, 0, 0, 0,
66266b3a 18204 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 18205 nlmsg_free(msg);
18206 return;
18207 }
18208
68eb5503 18209 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18210 NL80211_MCGRP_MLME, gfp);
98b62183 18211}
947add36 18212EXPORT_SYMBOL(cfg80211_new_sta);
98b62183 18213
cf5ead82
JB		 18214void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
18215 struct station_info *sinfo, gfp_t gfp)
ec15e68b 18216{
947add36 18217 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18218 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ec15e68b 18219 struct sk_buff *msg;
73887fd9 18220 struct station_info empty_sinfo = {};
cf5ead82 18221
73887fd9
JB		 18222 if (!sinfo)
18223 sinfo = &empty_sinfo;
ec15e68b 18224
947add36
JB		 18225 trace_cfg80211_del_sta(dev, mac_addr);
18226
58050fce 18227 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7ea3e110
JB		 18228 if (!msg) {
18229 cfg80211_sinfo_release_content(sinfo);
73887fd9 18230 return;
7ea3e110 18231 }
ec15e68b 18232
cf5ead82 18233 if (nl80211_send_station(msg, NL80211_CMD_DEL_STATION, 0, 0, 0,
57007121 18234 rdev, dev, mac_addr, sinfo) < 0) {
ec15e68b 18235 nlmsg_free(msg);
73887fd9 18236 return;
ec15e68b
JM		 18237 }
18238
68eb5503 18239 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18240 NL80211_MCGRP_MLME, gfp);
ec15e68b 18241}
cf5ead82 18242EXPORT_SYMBOL(cfg80211_del_sta_sinfo);
ec15e68b 18243
947add36
JB		 18244void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
18245 enum nl80211_connect_failed_reason reason,
18246 gfp_t gfp)
ed44a951 18247{
947add36 18248 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 18249 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ed44a951
PP		 18250 struct sk_buff *msg;
18251 void *hdr;
18252
18253 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
18254 if (!msg)
18255 return;
18256
18257 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
18258 if (!hdr) {
18259 nlmsg_free(msg);
18260 return;
18261 }
18262
18263 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18264 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
18265 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
18266 goto nla_put_failure;
18267
18268 genlmsg_end(msg, hdr);
18269
68eb5503 18270 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18271 NL80211_MCGRP_MLME, gfp);
ed44a951
PP		 18272 return;
18273
18274 nla_put_failure:
ed44a951
PP		 18275 nlmsg_free(msg);
18276}
947add36 18277EXPORT_SYMBOL(cfg80211_conn_failed);
ed44a951 18278
b92ab5d8
JB		 18279static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
18280 const u8 *addr, gfp_t gfp)
28946da7
JB		 18281{
18282 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 18283 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
28946da7
JB		 18284 struct sk_buff *msg;
18285 void *hdr;
6aa7de05 18286 u32 nlportid = READ_ONCE(wdev->ap_unexpected_nlportid);
28946da7 18287
15e47304 18288 if (!nlportid)
28946da7
JB		 18289 return false;
18290
18291 msg = nlmsg_new(100, gfp);
18292 if (!msg)
18293 return true;
18294
b92ab5d8 18295 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 18296 if (!hdr) {
18297 nlmsg_free(msg);
18298 return true;
18299 }
18300
9360ffd1
DM		 18301 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18302 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18303 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
18304 goto nla_put_failure;
28946da7 18305
9c90a9f6 18306 genlmsg_end(msg, hdr);
15e47304 18307 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 18308 return true;
18309
18310 nla_put_failure:
28946da7
JB		 18311 nlmsg_free(msg);
18312 return true;
18313}
18314
947add36
JB		 18315bool cfg80211_rx_spurious_frame(struct net_device *dev,
18316 const u8 *addr, gfp_t gfp)
b92ab5d8 18317{
947add36
JB		 18318 struct wireless_dev *wdev = dev->ieee80211_ptr;
18319 bool ret;
18320
18321 trace_cfg80211_rx_spurious_frame(dev, addr);
18322
18323 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
18324 wdev->iftype != NL80211_IFTYPE_P2P_GO)) {
18325 trace_cfg80211_return_bool(false);
18326 return false;
18327 }
18328 ret = __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
18329 addr, gfp);
18330 trace_cfg80211_return_bool(ret);
18331 return ret;
b92ab5d8 18332}
947add36 18333EXPORT_SYMBOL(cfg80211_rx_spurious_frame);
b92ab5d8 18334
947add36
JB		 18335bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
18336 const u8 *addr, gfp_t gfp)
b92ab5d8 18337{
947add36
JB		 18338 struct wireless_dev *wdev = dev->ieee80211_ptr;
18339 bool ret;
18340
18341 trace_cfg80211_rx_unexpected_4addr_frame(dev, addr);
18342
18343 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
18344 wdev->iftype != NL80211_IFTYPE_P2P_GO &&
18345 wdev->iftype != NL80211_IFTYPE_AP_VLAN)) {
18346 trace_cfg80211_return_bool(false);
18347 return false;
18348 }
18349 ret = __nl80211_unexpected_frame(dev,
18350 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
18351 addr, gfp);
18352 trace_cfg80211_return_bool(ret);
18353 return ret;
b92ab5d8 18354}
947add36 18355EXPORT_SYMBOL(cfg80211_rx_unexpected_4addr_frame);
b92ab5d8 18356
2e161f78 18357int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 18358 struct wireless_dev *wdev, u32 nlportid,
00b3d840 18359 struct cfg80211_rx_info *info, gfp_t gfp)
026331c4 18360{
71bbc994 18361 struct net_device *netdev = wdev->netdev;
026331c4
JM		 18362 struct sk_buff *msg;
18363 void *hdr;
026331c4 18364
00b3d840 18365 msg = nlmsg_new(100 + info->len, gfp);
026331c4
JM		 18366 if (!msg)
18367 return -ENOMEM;
18368
2e161f78 18369 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 18370 if (!hdr) {
18371 nlmsg_free(msg);
18372 return -ENOMEM;
18373 }
18374
9360ffd1 18375 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18376 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18377 netdev->ifindex)) ||
2dad624e
ND		 18378 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18379 NL80211_ATTR_PAD) ||
00b3d840
AS		 18380 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, KHZ_TO_MHZ(info->freq)) ||
18381 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET, info->freq % 1000) ||
18382 (info->sig_dbm &&
18383 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, info->sig_dbm)) ||
18384 nla_put(msg, NL80211_ATTR_FRAME, info->len, info->buf) ||
18385 (info->flags &&
1ff715ff
AS		 18386 nla_put_u32(msg, NL80211_ATTR_RXMGMT_FLAGS, info->flags)) ||
18387 (info->rx_tstamp && nla_put_u64_64bit(msg,
18388 NL80211_ATTR_RX_HW_TIMESTAMP,
18389 info->rx_tstamp,
18390 NL80211_ATTR_PAD)) ||
18391 (info->ack_tstamp && nla_put_u64_64bit(msg,
18392 NL80211_ATTR_TX_HW_TIMESTAMP,
18393 info->ack_tstamp,
18394 NL80211_ATTR_PAD)))
9360ffd1 18395 goto nla_put_failure;
026331c4 18396
3b7b72ee 18397 genlmsg_end(msg, hdr);
026331c4 18398
15e47304 18399 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 18400
18401 nla_put_failure:
026331c4
JM		 18402 nlmsg_free(msg);
18403 return -ENOBUFS;
18404}
18405
ea7d50c9
AS		 18406static void nl80211_frame_tx_status(struct wireless_dev *wdev,
18407 struct cfg80211_tx_status *status,
dca9ca2d 18408 gfp_t gfp, enum nl80211_commands command)
026331c4 18409{
947add36 18410 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18411 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
71bbc994 18412 struct net_device *netdev = wdev->netdev;
026331c4
JM		 18413 struct sk_buff *msg;
18414 void *hdr;
18415
dca9ca2d 18416 if (command == NL80211_CMD_FRAME_TX_STATUS)
ea7d50c9
AS		 18417 trace_cfg80211_mgmt_tx_status(wdev, status->cookie,
18418 status->ack);
dca9ca2d 18419 else
ea7d50c9
AS		 18420 trace_cfg80211_control_port_tx_status(wdev, status->cookie,
18421 status->ack);
947add36 18422
ea7d50c9 18423 msg = nlmsg_new(100 + status->len, gfp);
026331c4
JM		 18424 if (!msg)
18425 return;
18426
dca9ca2d 18427 hdr = nl80211hdr_put(msg, 0, 0, 0, command);
026331c4
JM		 18428 if (!hdr) {
18429 nlmsg_free(msg);
18430 return;
18431 }
18432
9360ffd1 18433 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 18434 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
18435 netdev->ifindex)) ||
2dad624e
ND		 18436 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18437 NL80211_ATTR_PAD) ||
ea7d50c9
AS		 18438 nla_put(msg, NL80211_ATTR_FRAME, status->len, status->buf) ||
18439 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, status->cookie,
2dad624e 18440 NL80211_ATTR_PAD) ||
ea7d50c9
AS		 18441 (status->ack && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
18442 (status->tx_tstamp &&
18443 nla_put_u64_64bit(msg, NL80211_ATTR_TX_HW_TIMESTAMP,
18444 status->tx_tstamp, NL80211_ATTR_PAD)) ||
18445 (status->ack_tstamp &&
18446 nla_put_u64_64bit(msg, NL80211_ATTR_RX_HW_TIMESTAMP,
18447 status->ack_tstamp, NL80211_ATTR_PAD)))
9360ffd1 18448 goto nla_put_failure;
026331c4 18449
3b7b72ee 18450 genlmsg_end(msg, hdr);
026331c4 18451
68eb5503 18452 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18453 NL80211_MCGRP_MLME, gfp);
026331c4
JM		 18454 return;
18455
dca9ca2d 18456nla_put_failure:
026331c4
JM		 18457 nlmsg_free(msg);
18458}
dca9ca2d
MT		 18459
18460void cfg80211_control_port_tx_status(struct wireless_dev *wdev, u64 cookie,
18461 const u8 *buf, size_t len, bool ack,
18462 gfp_t gfp)
18463{
ea7d50c9
AS		 18464 struct cfg80211_tx_status status = {
18465 .cookie = cookie,
18466 .buf = buf,
18467 .len = len,
18468 .ack = ack
18469 };
18470
18471 nl80211_frame_tx_status(wdev, &status, gfp,
dca9ca2d
MT		 18472 NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS);
18473}
18474EXPORT_SYMBOL(cfg80211_control_port_tx_status);
18475
ea7d50c9
AS		 18476void cfg80211_mgmt_tx_status_ext(struct wireless_dev *wdev,
18477 struct cfg80211_tx_status *status, gfp_t gfp)
dca9ca2d 18478{
ea7d50c9 18479 nl80211_frame_tx_status(wdev, status, gfp, NL80211_CMD_FRAME_TX_STATUS);
dca9ca2d 18480}
ea7d50c9 18481EXPORT_SYMBOL(cfg80211_mgmt_tx_status_ext);
026331c4 18482
6a671a50 18483static int __nl80211_rx_control_port(struct net_device *dev,
a948f713 18484 struct sk_buff *skb,
6a671a50
DK		 18485 bool unencrypted, gfp_t gfp)
18486{
18487 struct wireless_dev *wdev = dev->ieee80211_ptr;
18488 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
a948f713 18489 struct ethhdr *ehdr = eth_hdr(skb);
8d74a623 18490 const u8 *addr = ehdr->h_source;
a948f713 18491 u16 proto = be16_to_cpu(skb->protocol);
6a671a50
DK		 18492 struct sk_buff *msg;
18493 void *hdr;
a948f713
DK		 18494 struct nlattr *frame;
18495
6a671a50
DK		 18496 u32 nlportid = READ_ONCE(wdev->conn_owner_nlportid);
18497
18498 if (!nlportid)
18499 return -ENOENT;
18500
a948f713 18501 msg = nlmsg_new(100 + skb->len, gfp);
6a671a50
DK		 18502 if (!msg)
18503 return -ENOMEM;
18504
18505 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONTROL_PORT_FRAME);
18506 if (!hdr) {
18507 nlmsg_free(msg);
18508 return -ENOBUFS;
18509 }
18510
18511 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18512 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
18513 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18514 NL80211_ATTR_PAD) ||
8d74a623 18515 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
6a671a50
DK		 18516 nla_put_u16(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE, proto) ||
18517 (unencrypted && nla_put_flag(msg,
18518 NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT)))
18519 goto nla_put_failure;
18520
a948f713
DK		 18521 frame = nla_reserve(msg, NL80211_ATTR_FRAME, skb->len);
18522 if (!frame)
18523 goto nla_put_failure;
18524
18525 skb_copy_bits(skb, 0, nla_data(frame), skb->len);
6a671a50
DK		 18526 genlmsg_end(msg, hdr);
18527
18528 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
18529
18530 nla_put_failure:
18531 nlmsg_free(msg);
18532 return -ENOBUFS;
18533}
18534
18535bool cfg80211_rx_control_port(struct net_device *dev,
a948f713 18536 struct sk_buff *skb, bool unencrypted)
6a671a50
DK		 18537{
18538 int ret;
18539
a948f713
DK		 18540 trace_cfg80211_rx_control_port(dev, skb, unencrypted);
18541 ret = __nl80211_rx_control_port(dev, skb, unencrypted, GFP_ATOMIC);
6a671a50
DK		 18542 trace_cfg80211_return_bool(ret == 0);
18543 return ret == 0;
18544}
18545EXPORT_SYMBOL(cfg80211_rx_control_port);
18546
5b97f49d
JB		 18547static struct sk_buff *cfg80211_prepare_cqm(struct net_device *dev,
18548 const char *mac, gfp_t gfp)
d6dc1a38 18549{
947add36 18550 struct wireless_dev *wdev = dev->ieee80211_ptr;
5b97f49d
JB		 18551 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
18552 struct sk_buff *msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18553 void **cb;
947add36 18554
d6dc1a38 18555 if (!msg)
5b97f49d 18556 return NULL;
d6dc1a38 18557
5b97f49d
JB		 18558 cb = (void **)msg->cb;
18559
18560 cb[0] = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
18561 if (!cb[0]) {
d6dc1a38 18562 nlmsg_free(msg);
5b97f49d 18563 return NULL;
d6dc1a38
JO		 18564 }
18565
9360ffd1 18566 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36 18567 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9360ffd1 18568 goto nla_put_failure;
d6dc1a38 18569
5b97f49d 18570 if (mac && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
d6dc1a38
JO		 18571 goto nla_put_failure;
18572
ae0be8de 18573 cb[1] = nla_nest_start_noflag(msg, NL80211_ATTR_CQM);
5b97f49d 18574 if (!cb[1])
9360ffd1 18575 goto nla_put_failure;
d6dc1a38 18576
5b97f49d 18577 cb[2] = rdev;
d6dc1a38 18578
5b97f49d
JB		 18579 return msg;
18580 nla_put_failure:
18581 nlmsg_free(msg);
18582 return NULL;
18583}
18584
18585static void cfg80211_send_cqm(struct sk_buff *msg, gfp_t gfp)
18586{
18587 void **cb = (void **)msg->cb;
18588 struct cfg80211_registered_device *rdev = cb[2];
18589
18590 nla_nest_end(msg, cb[1]);
18591 genlmsg_end(msg, cb[0]);
18592
18593 memset(msg->cb, 0, sizeof(msg->cb));
d6dc1a38 18594
68eb5503 18595 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18596 NL80211_MCGRP_MLME, gfp);
5b97f49d
JB		 18597}
18598
18599void cfg80211_cqm_rssi_notify(struct net_device *dev,
18600 enum nl80211_cqm_rssi_threshold_event rssi_event,
bee427b8 18601 s32 rssi_level, gfp_t gfp)
5b97f49d
JB		 18602{
18603 struct sk_buff *msg;
4a4b8169
AZ		 18604 struct wireless_dev *wdev = dev->ieee80211_ptr;
18605 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
5b97f49d 18606
bee427b8 18607 trace_cfg80211_cqm_rssi_notify(dev, rssi_event, rssi_level);
5b97f49d 18608
98f03342
JB		 18609 if (WARN_ON(rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW &&
18610 rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH))
18611 return;
18612
4a4b8169
AZ		 18613 if (wdev->cqm_config) {
18614 wdev->cqm_config->last_rssi_event_value = rssi_level;
18615
18616 cfg80211_cqm_rssi_update(rdev, dev);
18617
18618 if (rssi_level == 0)
18619 rssi_level = wdev->cqm_config->last_rssi_event_value;
18620 }
18621
5b97f49d
JB		 18622 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
18623 if (!msg)
18624 return;
18625
18626 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
18627 rssi_event))
18628 goto nla_put_failure;
18629
bee427b8
AZ		 18630 if (rssi_level && nla_put_s32(msg, NL80211_ATTR_CQM_RSSI_LEVEL,
18631 rssi_level))
18632 goto nla_put_failure;
18633
5b97f49d
JB		 18634 cfg80211_send_cqm(msg, gfp);
18635
d6dc1a38
JO		 18636 return;
18637
18638 nla_put_failure:
d6dc1a38
JO		 18639 nlmsg_free(msg);
18640}
947add36 18641EXPORT_SYMBOL(cfg80211_cqm_rssi_notify);
d6dc1a38 18642
5b97f49d
JB		 18643void cfg80211_cqm_txe_notify(struct net_device *dev,
18644 const u8 *peer, u32 num_packets,
18645 u32 rate, u32 intvl, gfp_t gfp)
18646{
18647 struct sk_buff *msg;
18648
18649 msg = cfg80211_prepare_cqm(dev, peer, gfp);
18650 if (!msg)
18651 return;
18652
18653 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
18654 goto nla_put_failure;
18655
18656 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
18657 goto nla_put_failure;
18658
18659 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
18660 goto nla_put_failure;
18661
18662 cfg80211_send_cqm(msg, gfp);
18663 return;
18664
18665 nla_put_failure:
18666 nlmsg_free(msg);
18667}
18668EXPORT_SYMBOL(cfg80211_cqm_txe_notify);
18669
18670void cfg80211_cqm_pktloss_notify(struct net_device *dev,
18671 const u8 *peer, u32 num_packets, gfp_t gfp)
18672{
18673 struct sk_buff *msg;
18674
18675 trace_cfg80211_cqm_pktloss_notify(dev, peer, num_packets);
18676
18677 msg = cfg80211_prepare_cqm(dev, peer, gfp);
18678 if (!msg)
18679 return;
18680
18681 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
18682 goto nla_put_failure;
18683
18684 cfg80211_send_cqm(msg, gfp);
18685 return;
18686
18687 nla_put_failure:
18688 nlmsg_free(msg);
18689}
18690EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify);
18691
98f03342
JB		 18692void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp)
18693{
18694 struct sk_buff *msg;
18695
18696 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
18697 if (!msg)
18698 return;
18699
18700 if (nla_put_flag(msg, NL80211_ATTR_CQM_BEACON_LOSS_EVENT))
18701 goto nla_put_failure;
18702
18703 cfg80211_send_cqm(msg, gfp);
18704 return;
18705
18706 nla_put_failure:
18707 nlmsg_free(msg);
18708}
18709EXPORT_SYMBOL(cfg80211_cqm_beacon_loss_notify);
18710
947add36
JB		 18711static void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
18712 struct net_device *netdev, const u8 *bssid,
18713 const u8 *replay_ctr, gfp_t gfp)
e5497d76
JB		 18714{
18715 struct sk_buff *msg;
18716 struct nlattr *rekey_attr;
18717 void *hdr;
18718
58050fce 18719 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 18720 if (!msg)
18721 return;
18722
18723 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
18724 if (!hdr) {
18725 nlmsg_free(msg);
18726 return;
18727 }
18728
9360ffd1
DM		 18729 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18730 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
18731 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
18732 goto nla_put_failure;
e5497d76 18733
ae0be8de 18734 rekey_attr = nla_nest_start_noflag(msg, NL80211_ATTR_REKEY_DATA);
e5497d76
JB		 18735 if (!rekey_attr)
18736 goto nla_put_failure;
18737
9360ffd1
DM		 18738 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
18739 NL80211_REPLAY_CTR_LEN, replay_ctr))
18740 goto nla_put_failure;
e5497d76
JB		 18741
18742 nla_nest_end(msg, rekey_attr);
18743
3b7b72ee 18744 genlmsg_end(msg, hdr);
e5497d76 18745
68eb5503 18746 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18747 NL80211_MCGRP_MLME, gfp);
e5497d76
JB		 18748 return;
18749
18750 nla_put_failure:
e5497d76
JB		 18751 nlmsg_free(msg);
18752}
18753
947add36
JB		 18754void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
18755 const u8 *replay_ctr, gfp_t gfp)
18756{
18757 struct wireless_dev *wdev = dev->ieee80211_ptr;
18758 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18759 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18760
18761 trace_cfg80211_gtk_rekey_notify(dev, bssid);
18762 nl80211_gtk_rekey_notify(rdev, dev, bssid, replay_ctr, gfp);
18763}
18764EXPORT_SYMBOL(cfg80211_gtk_rekey_notify);
18765
18766static void
18767nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
18768 struct net_device *netdev, int index,
18769 const u8 *bssid, bool preauth, gfp_t gfp)
c9df56b4
JM		 18770{
18771 struct sk_buff *msg;
18772 struct nlattr *attr;
18773 void *hdr;
18774
58050fce 18775 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 18776 if (!msg)
18777 return;
18778
18779 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
18780 if (!hdr) {
18781 nlmsg_free(msg);
18782 return;
18783 }
18784
9360ffd1
DM		 18785 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
18786 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
18787 goto nla_put_failure;
c9df56b4 18788
ae0be8de 18789 attr = nla_nest_start_noflag(msg, NL80211_ATTR_PMKSA_CANDIDATE);
c9df56b4
JM		 18790 if (!attr)
18791 goto nla_put_failure;
18792
9360ffd1
DM		 18793 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
18794 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
18795 (preauth &&
18796 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
18797 goto nla_put_failure;
c9df56b4
JM		 18798
18799 nla_nest_end(msg, attr);
18800
3b7b72ee 18801 genlmsg_end(msg, hdr);
c9df56b4 18802
68eb5503 18803 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18804 NL80211_MCGRP_MLME, gfp);
c9df56b4
JM		 18805 return;
18806
18807 nla_put_failure:
c9df56b4
JM		 18808 nlmsg_free(msg);
18809}
18810
947add36
JB		 18811void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
18812 const u8 *bssid, bool preauth, gfp_t gfp)
18813{
18814 struct wireless_dev *wdev = dev->ieee80211_ptr;
18815 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18816 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 18817
18818 trace_cfg80211_pmksa_candidate_notify(dev, index, bssid, preauth);
18819 nl80211_pmksa_candidate_notify(rdev, dev, index, bssid, preauth, gfp);
18820}
18821EXPORT_SYMBOL(cfg80211_pmksa_candidate_notify);
18822
18823static void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
18824 struct net_device *netdev,
18825 struct cfg80211_chan_def *chandef,
f8d7552e
LC		 18826 gfp_t gfp,
18827 enum nl80211_commands notif,
669b8413 18828 u8 count, bool quiet)
5314526b
TP		 18829{
18830 struct sk_buff *msg;
18831 void *hdr;
18832
58050fce 18833 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 18834 if (!msg)
18835 return;
18836
f8d7552e 18837 hdr = nl80211hdr_put(msg, 0, 0, 0, notif);
5314526b
TP		 18838 if (!hdr) {
18839 nlmsg_free(msg);
18840 return;
18841 }
18842
683b6d3b
JB		 18843 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
18844 goto nla_put_failure;
18845
18846 if (nl80211_send_chandef(msg, chandef))
7eab0f64 18847 goto nla_put_failure;
5314526b 18848
669b8413
JB		 18849 if (notif == NL80211_CMD_CH_SWITCH_STARTED_NOTIFY) {
18850 if (nla_put_u32(msg, NL80211_ATTR_CH_SWITCH_COUNT, count))
f8d7552e 18851 goto nla_put_failure;
669b8413
JB		 18852 if (quiet &&
18853 nla_put_flag(msg, NL80211_ATTR_CH_SWITCH_BLOCK_TX))
f8d7552e 18854 goto nla_put_failure;
669b8413 18855 }
f8d7552e 18856
5314526b
TP		 18857 genlmsg_end(msg, hdr);
18858
68eb5503 18859 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 18860 NL80211_MCGRP_MLME, gfp);
5314526b
TP		 18861 return;
18862
18863 nla_put_failure:
5314526b
TP		 18864 nlmsg_free(msg);
18865}
18866
947add36 18867void cfg80211_ch_switch_notify(struct net_device *dev,
7b0a0e3c
JB		 18868 struct cfg80211_chan_def *chandef,
18869 unsigned int link_id)
84f10708 18870{
947add36
JB		 18871 struct wireless_dev *wdev = dev->ieee80211_ptr;
18872 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 18873 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36 18874
e487eaeb 18875 ASSERT_WDEV_LOCK(wdev);
7b0a0e3c 18876 WARN_INVALID_LINK_ID(wdev, link_id);
947add36 18877
7b0a0e3c 18878 trace_cfg80211_ch_switch_notify(dev, chandef, link_id);
5dc8cdce 18879
7b0a0e3c
JB		 18880 switch (wdev->iftype) {
18881 case NL80211_IFTYPE_STATION:
18882 case NL80211_IFTYPE_P2P_CLIENT:
18883 if (!WARN_ON(!wdev->links[link_id].client.current_bss))
18884 cfg80211_update_assoc_bss_entry(wdev, link_id,
18885 chandef->chan);
18886 break;
18887 case NL80211_IFTYPE_MESH_POINT:
18888 wdev->u.mesh.chandef = *chandef;
18889 wdev->u.mesh.preset_chandef = *chandef;
18890 break;
18891 case NL80211_IFTYPE_AP:
18892 case NL80211_IFTYPE_P2P_GO:
18893 wdev->links[link_id].ap.chandef = *chandef;
18894 break;
77e7b6ba
JB		 18895 case NL80211_IFTYPE_ADHOC:
18896 wdev->u.ibss.chandef = *chandef;
18897 break;
7b0a0e3c
JB		 18898 default:
18899 WARN_ON(1);
18900 break;
18901 }
5dc8cdce 18902
d34990bb
MV		 18903 cfg80211_sched_dfs_chan_update(rdev);
18904
f8d7552e 18905 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
669b8413 18906 NL80211_CMD_CH_SWITCH_NOTIFY, 0, false);
947add36
JB		 18907}
18908EXPORT_SYMBOL(cfg80211_ch_switch_notify);
18909
f8d7552e
LC		 18910void cfg80211_ch_switch_started_notify(struct net_device *dev,
18911 struct cfg80211_chan_def *chandef,
669b8413 18912 u8 count, bool quiet)
f8d7552e
LC		 18913{
18914 struct wireless_dev *wdev = dev->ieee80211_ptr;
18915 struct wiphy *wiphy = wdev->wiphy;
18916 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18917
18918 trace_cfg80211_ch_switch_started_notify(dev, chandef);
18919
18920 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
669b8413
JB		 18921 NL80211_CMD_CH_SWITCH_STARTED_NOTIFY,
18922 count, quiet);
f8d7552e
LC		 18923}
18924EXPORT_SYMBOL(cfg80211_ch_switch_started_notify);
18925
0d2ab3ae
JC		 18926int cfg80211_bss_color_notify(struct net_device *dev, gfp_t gfp,
18927 enum nl80211_commands cmd, u8 count,
18928 u64 color_bitmap)
18929{
18930 struct wireless_dev *wdev = dev->ieee80211_ptr;
18931 struct wiphy *wiphy = wdev->wiphy;
18932 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
18933 struct sk_buff *msg;
18934 void *hdr;
18935
18936 ASSERT_WDEV_LOCK(wdev);
18937
18938 trace_cfg80211_bss_color_notify(dev, cmd, count, color_bitmap);
18939
18940 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18941 if (!msg)
18942 return -ENOMEM;
18943
18944 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
18945 if (!hdr)
18946 goto nla_put_failure;
18947
18948 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
18949 goto nla_put_failure;
18950
18951 if (cmd == NL80211_CMD_COLOR_CHANGE_STARTED &&
18952 nla_put_u32(msg, NL80211_ATTR_COLOR_CHANGE_COUNT, count))
18953 goto nla_put_failure;
18954
18955 if (cmd == NL80211_CMD_OBSS_COLOR_COLLISION &&
18956 nla_put_u64_64bit(msg, NL80211_ATTR_OBSS_COLOR_BITMAP,
18957 color_bitmap, NL80211_ATTR_PAD))
18958 goto nla_put_failure;
18959
18960 genlmsg_end(msg, hdr);
18961
18962 return genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
18963 msg, 0, NL80211_MCGRP_MLME, gfp);
18964
18965nla_put_failure:
18966 nlmsg_free(msg);
18967 return -EINVAL;
18968}
18969EXPORT_SYMBOL(cfg80211_bss_color_notify);
18970
04f39047
SW		 18971void
18972nl80211_radar_notify(struct cfg80211_registered_device *rdev,
d2859df5 18973 const struct cfg80211_chan_def *chandef,
04f39047
SW		 18974 enum nl80211_radar_event event,
18975 struct net_device *netdev, gfp_t gfp)
18976{
18977 struct sk_buff *msg;
18978 void *hdr;
18979
18980 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
18981 if (!msg)
18982 return;
18983
18984 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
18985 if (!hdr) {
18986 nlmsg_free(msg);
18987 return;
18988 }
18989
18990 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
18991 goto nla_put_failure;
18992
18993 /* NOP and radar events don't need a netdev parameter */
18994 if (netdev) {
18995 struct wireless_dev *wdev = netdev->ieee80211_ptr;
18996
18997 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
2dad624e
ND		 18998 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
18999 NL80211_ATTR_PAD))
04f39047
SW		 19000 goto nla_put_failure;
19001 }
19002
19003 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
19004 goto nla_put_failure;
19005
19006 if (nl80211_send_chandef(msg, chandef))
19007 goto nla_put_failure;
19008
9c90a9f6 19009 genlmsg_end(msg, hdr);
04f39047 19010
68eb5503 19011 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19012 NL80211_MCGRP_MLME, gfp);
04f39047
SW		 19013 return;
19014
19015 nla_put_failure:
04f39047
SW		 19016 nlmsg_free(msg);
19017}
19018
466b9936 19019void cfg80211_sta_opmode_change_notify(struct net_device *dev, const u8 *mac,
19020 struct sta_opmode_info *sta_opmode,
19021 gfp_t gfp)
19022{
19023 struct sk_buff *msg;
19024 struct wireless_dev *wdev = dev->ieee80211_ptr;
19025 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
19026 void *hdr;
19027
19028 if (WARN_ON(!mac))
19029 return;
19030
19031 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19032 if (!msg)
19033 return;
19034
19035 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STA_OPMODE_CHANGED);
19036 if (!hdr) {
19037 nlmsg_free(msg);
19038 return;
19039 }
19040
19041 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
19042 goto nla_put_failure;
19043
19044 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
19045 goto nla_put_failure;
19046
19047 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
19048 goto nla_put_failure;
19049
19050 if ((sta_opmode->changed & STA_OPMODE_SMPS_MODE_CHANGED) &&
19051 nla_put_u8(msg, NL80211_ATTR_SMPS_MODE, sta_opmode->smps_mode))
19052 goto nla_put_failure;
19053
19054 if ((sta_opmode->changed & STA_OPMODE_MAX_BW_CHANGED) &&
0016d320 19055 nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, sta_opmode->bw))
466b9936 19056 goto nla_put_failure;
19057
19058 if ((sta_opmode->changed & STA_OPMODE_N_SS_CHANGED) &&
19059 nla_put_u8(msg, NL80211_ATTR_NSS, sta_opmode->rx_nss))
19060 goto nla_put_failure;
19061
19062 genlmsg_end(msg, hdr);
19063
19064 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
19065 NL80211_MCGRP_MLME, gfp);
19066
19067 return;
19068
19069nla_put_failure:
19070 nlmsg_free(msg);
19071}
19072EXPORT_SYMBOL(cfg80211_sta_opmode_change_notify);
19073
7f6cf311 19074void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
c4b50cd3
VN		 19075 u64 cookie, bool acked, s32 ack_signal,
19076 bool is_valid_ack_signal, gfp_t gfp)
7f6cf311
JB		 19077{
19078 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 19079 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
7f6cf311
JB		 19080 struct sk_buff *msg;
19081 void *hdr;
7f6cf311 19082
4ee3e063
BL		 19083 trace_cfg80211_probe_status(dev, addr, cookie, acked);
19084
58050fce 19085 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 19086
7f6cf311
JB		 19087 if (!msg)
19088 return;
19089
19090 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
19091 if (!hdr) {
19092 nlmsg_free(msg);
19093 return;
19094 }
19095
9360ffd1
DM		 19096 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19097 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19098 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
2dad624e
ND		 19099 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
19100 NL80211_ATTR_PAD) ||
c4b50cd3
VN		 19101 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
19102 (is_valid_ack_signal && nla_put_s32(msg, NL80211_ATTR_ACK_SIGNAL,
19103 ack_signal)))
9360ffd1 19104 goto nla_put_failure;
7f6cf311 19105
9c90a9f6 19106 genlmsg_end(msg, hdr);
7f6cf311 19107
68eb5503 19108 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19109 NL80211_MCGRP_MLME, gfp);
7f6cf311
JB		 19110 return;
19111
19112 nla_put_failure:
7f6cf311
JB		 19113 nlmsg_free(msg);
19114}
19115EXPORT_SYMBOL(cfg80211_probe_status);
19116
e76fede8
TP		 19117void cfg80211_report_obss_beacon_khz(struct wiphy *wiphy, const u8 *frame,
19118 size_t len, int freq, int sig_dbm)
5e760230 19119{
f26cbf40 19120 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
5e760230
JB		 19121 struct sk_buff *msg;
19122 void *hdr;
37c73b5f 19123 struct cfg80211_beacon_registration *reg;
5e760230 19124
4ee3e063
BL		 19125 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
19126
37c73b5f
BG		 19127 spin_lock_bh(&rdev->beacon_registrations_lock);
19128 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
19129 msg = nlmsg_new(len + 100, GFP_ATOMIC);
19130 if (!msg) {
19131 spin_unlock_bh(&rdev->beacon_registrations_lock);
19132 return;
19133 }
5e760230 19134
37c73b5f
BG		 19135 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
19136 if (!hdr)
19137 goto nla_put_failure;
5e760230 19138
37c73b5f
BG		 19139 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19140 (freq &&
942ba88b
TP		 19141 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
19142 KHZ_TO_MHZ(freq)) ||
19143 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
19144 freq % 1000))) ||
37c73b5f
BG		 19145 (sig_dbm &&
19146 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
19147 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
19148 goto nla_put_failure;
5e760230 19149
37c73b5f 19150 genlmsg_end(msg, hdr);
5e760230 19151
37c73b5f
BG		 19152 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
19153 }
19154 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 19155 return;
19156
19157 nla_put_failure:
37c73b5f 19158 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 19159 nlmsg_free(msg);
19160}
e76fede8 19161EXPORT_SYMBOL(cfg80211_report_obss_beacon_khz);
5e760230 19162
cd8f7cb4 19163#ifdef CONFIG_PM
8cd4d456
LC		 19164static int cfg80211_net_detect_results(struct sk_buff *msg,
19165 struct cfg80211_wowlan_wakeup *wakeup)
19166{
19167 struct cfg80211_wowlan_nd_info *nd = wakeup->net_detect;
19168 struct nlattr *nl_results, *nl_match, *nl_freqs;
19169 int i, j;
19170
ae0be8de
MK		 19171 nl_results = nla_nest_start_noflag(msg,
19172 NL80211_WOWLAN_TRIG_NET_DETECT_RESULTS);
8cd4d456
LC		 19173 if (!nl_results)
19174 return -EMSGSIZE;
19175
19176 for (i = 0; i < nd->n_matches; i++) {
19177 struct cfg80211_wowlan_nd_match *match = nd->matches[i];
19178
ae0be8de 19179 nl_match = nla_nest_start_noflag(msg, i);
8cd4d456
LC		 19180 if (!nl_match)
19181 break;
19182
19183 /* The SSID attribute is optional in nl80211, but for
19184 * simplicity reasons it's always present in the
19185 * cfg80211 structure. If a driver can't pass the
19186 * SSID, that needs to be changed. A zero length SSID
19187 * is still a valid SSID (wildcard), so it cannot be
19188 * used for this purpose.
19189 */
19190 if (nla_put(msg, NL80211_ATTR_SSID, match->ssid.ssid_len,
19191 match->ssid.ssid)) {
19192 nla_nest_cancel(msg, nl_match);
19193 goto out;
19194 }
19195
19196 if (match->n_channels) {
ae0be8de
MK		 19197 nl_freqs = nla_nest_start_noflag(msg,
19198 NL80211_ATTR_SCAN_FREQUENCIES);
8cd4d456
LC		 19199 if (!nl_freqs) {
19200 nla_nest_cancel(msg, nl_match);
19201 goto out;
19202 }
19203
19204 for (j = 0; j < match->n_channels; j++) {
5528fae8 19205 if (nla_put_u32(msg, j, match->channels[j])) {
8cd4d456
LC		 19206 nla_nest_cancel(msg, nl_freqs);
19207 nla_nest_cancel(msg, nl_match);
19208 goto out;
19209 }
19210 }
19211
19212 nla_nest_end(msg, nl_freqs);
19213 }
19214
19215 nla_nest_end(msg, nl_match);
19216 }
19217
19218out:
19219 nla_nest_end(msg, nl_results);
19220 return 0;
19221}
19222
cd8f7cb4
JB		 19223void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
19224 struct cfg80211_wowlan_wakeup *wakeup,
19225 gfp_t gfp)
19226{
f26cbf40 19227 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
cd8f7cb4
JB		 19228 struct sk_buff *msg;
19229 void *hdr;
9c90a9f6 19230 int size = 200;
cd8f7cb4
JB		 19231
19232 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
19233
19234 if (wakeup)
19235 size += wakeup->packet_present_len;
19236
19237 msg = nlmsg_new(size, gfp);
19238 if (!msg)
19239 return;
19240
19241 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
19242 if (!hdr)
19243 goto free_msg;
19244
19245 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 19246 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19247 NL80211_ATTR_PAD))
cd8f7cb4
JB		 19248 goto free_msg;
19249
19250 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
19251 wdev->netdev->ifindex))
19252 goto free_msg;
19253
19254 if (wakeup) {
19255 struct nlattr *reasons;
19256
ae0be8de
MK		 19257 reasons = nla_nest_start_noflag(msg,
19258 NL80211_ATTR_WOWLAN_TRIGGERS);
7fa322c8
JB		 19259 if (!reasons)
19260 goto free_msg;
cd8f7cb4
JB		 19261
19262 if (wakeup->disconnect &&
19263 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
19264 goto free_msg;
19265 if (wakeup->magic_pkt &&
19266 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
19267 goto free_msg;
19268 if (wakeup->gtk_rekey_failure &&
19269 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
19270 goto free_msg;
19271 if (wakeup->eap_identity_req &&
19272 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
19273 goto free_msg;
19274 if (wakeup->four_way_handshake &&
19275 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
19276 goto free_msg;
19277 if (wakeup->rfkill_release &&
19278 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
19279 goto free_msg;
19280
19281 if (wakeup->pattern_idx >= 0 &&
19282 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
19283 wakeup->pattern_idx))
19284 goto free_msg;
19285
ae917c9f
JB		 19286 if (wakeup->tcp_match &&
19287 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH))
19288 goto free_msg;
2a0e047e 19289
ae917c9f
JB		 19290 if (wakeup->tcp_connlost &&
19291 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST))
19292 goto free_msg;
2a0e047e 19293
ae917c9f
JB		 19294 if (wakeup->tcp_nomoretokens &&
19295 nla_put_flag(msg,
19296 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS))
19297 goto free_msg;
2a0e047e 19298
cd8f7cb4
JB		 19299 if (wakeup->packet) {
19300 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
19301 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
19302
19303 if (!wakeup->packet_80211) {
19304 pkt_attr =
19305 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
19306 len_attr =
19307 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
19308 }
19309
19310 if (wakeup->packet_len &&
19311 nla_put_u32(msg, len_attr, wakeup->packet_len))
19312 goto free_msg;
19313
19314 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
19315 wakeup->packet))
19316 goto free_msg;
19317 }
19318
8cd4d456
LC		 19319 if (wakeup->net_detect &&
19320 cfg80211_net_detect_results(msg, wakeup))
19321 goto free_msg;
19322
cd8f7cb4
JB		 19323 nla_nest_end(msg, reasons);
19324 }
19325
9c90a9f6 19326 genlmsg_end(msg, hdr);
cd8f7cb4 19327
68eb5503 19328 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19329 NL80211_MCGRP_MLME, gfp);
cd8f7cb4
JB		 19330 return;
19331
19332 free_msg:
19333 nlmsg_free(msg);
19334}
19335EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
19336#endif
19337
3475b094
JM		 19338void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
19339 enum nl80211_tdls_operation oper,
19340 u16 reason_code, gfp_t gfp)
19341{
19342 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 19343 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
3475b094
JM		 19344 struct sk_buff *msg;
19345 void *hdr;
3475b094
JM		 19346
19347 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
19348 reason_code);
19349
19350 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19351 if (!msg)
19352 return;
19353
19354 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
19355 if (!hdr) {
19356 nlmsg_free(msg);
19357 return;
19358 }
19359
19360 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19361 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19362 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
19363 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
19364 (reason_code > 0 &&
19365 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
19366 goto nla_put_failure;
19367
9c90a9f6 19368 genlmsg_end(msg, hdr);
3475b094 19369
68eb5503 19370 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19371 NL80211_MCGRP_MLME, gfp);
3475b094
JM		 19372 return;
19373
19374 nla_put_failure:
3475b094
JM		 19375 nlmsg_free(msg);
19376}
19377EXPORT_SYMBOL(cfg80211_tdls_oper_request);
19378
026331c4
JM		 19379static int nl80211_netlink_notify(struct notifier_block * nb,
19380 unsigned long state,
19381 void *_notify)
19382{
19383 struct netlink_notify *notify = _notify;
19384 struct cfg80211_registered_device *rdev;
19385 struct wireless_dev *wdev;
37c73b5f 19386 struct cfg80211_beacon_registration *reg, *tmp;
026331c4 19387
8f815cdd 19388 if (state != NETLINK_URELEASE || notify->protocol != NETLINK_GENERIC)
026331c4
JM		 19389 return NOTIFY_DONE;
19390
19391 rcu_read_lock();
19392
5e760230 19393 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ca986ad9 19394 struct cfg80211_sched_scan_request *sched_scan_req;
753aacfd 19395
ca986ad9
AVS		 19396 list_for_each_entry_rcu(sched_scan_req,
19397 &rdev->sched_scan_req_list,
19398 list) {
19399 if (sched_scan_req->owner_nlportid == notify->portid) {
19400 sched_scan_req->nl_owner_dead = true;
753aacfd 19401 schedule_work(&rdev->sched_scan_stop_wk);
ca986ad9 19402 }
753aacfd 19403 }
78f22b6a 19404
53873f13 19405 list_for_each_entry_rcu(wdev, &rdev->wiphy.wdev_list, list) {
15e47304 19406 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f 19407
ab81007a
JB		 19408 if (wdev->owner_nlportid == notify->portid) {
19409 wdev->nl_owner_dead = true;
19410 schedule_work(&rdev->destroy_work);
19411 } else if (wdev->conn_owner_nlportid == notify->portid) {
bd2522b1 19412 schedule_work(&wdev->disconnect_wk);
ab81007a 19413 }
9bb7e0f2
JB		 19414
19415 cfg80211_release_pmsr(wdev, notify->portid);
78f22b6a
JB		 19416 }
19417
37c73b5f
BG		 19418 spin_lock_bh(&rdev->beacon_registrations_lock);
19419 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
19420 list) {
19421 if (reg->nlportid == notify->portid) {
19422 list_del(&reg->list);
19423 kfree(reg);
19424 break;
19425 }
19426 }
19427 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 19428 }
026331c4
JM		 19429
19430 rcu_read_unlock();
19431
05050753
I		 19432 /*
19433 * It is possible that the user space process that is controlling the
19434 * indoor setting disappeared, so notify the regulatory core.
19435 */
19436 regulatory_netlink_notify(notify->portid);
6784c7db 19437 return NOTIFY_OK;
026331c4
JM		 19438}
19439
19440static struct notifier_block nl80211_netlink_notifier = {
19441 .notifier_call = nl80211_netlink_notify,
19442};
19443
355199e0
JM		 19444void cfg80211_ft_event(struct net_device *netdev,
19445 struct cfg80211_ft_event_params *ft_event)
19446{
19447 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
f26cbf40 19448 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
355199e0
JM		 19449 struct sk_buff *msg;
19450 void *hdr;
355199e0
JM		 19451
19452 trace_cfg80211_ft_event(wiphy, netdev, ft_event);
19453
19454 if (!ft_event->target_ap)
19455 return;
19456
1039d081
DL		 19457 msg = nlmsg_new(100 + ft_event->ies_len + ft_event->ric_ies_len,
19458 GFP_KERNEL);
355199e0
JM		 19459 if (!msg)
19460 return;
19461
19462 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FT_EVENT);
ae917c9f
JB		 19463 if (!hdr)
19464 goto out;
355199e0 19465
ae917c9f
JB		 19466 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19467 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
19468 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ft_event->target_ap))
19469 goto out;
355199e0 19470
ae917c9f
JB		 19471 if (ft_event->ies &&
19472 nla_put(msg, NL80211_ATTR_IE, ft_event->ies_len, ft_event->ies))
19473 goto out;
19474 if (ft_event->ric_ies &&
19475 nla_put(msg, NL80211_ATTR_IE_RIC, ft_event->ric_ies_len,
19476 ft_event->ric_ies))
19477 goto out;
355199e0 19478
9c90a9f6 19479 genlmsg_end(msg, hdr);
355199e0 19480
68eb5503 19481 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 19482 NL80211_MCGRP_MLME, GFP_KERNEL);
ae917c9f
JB		 19483 return;
19484 out:
19485 nlmsg_free(msg);
355199e0
JM		 19486}
19487EXPORT_SYMBOL(cfg80211_ft_event);
19488
5de17984
AS		 19489void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp)
19490{
19491 struct cfg80211_registered_device *rdev;
19492 struct sk_buff *msg;
19493 void *hdr;
19494 u32 nlportid;
19495
f26cbf40 19496 rdev = wiphy_to_rdev(wdev->wiphy);
5de17984
AS		 19497 if (!rdev->crit_proto_nlportid)
19498 return;
19499
19500 nlportid = rdev->crit_proto_nlportid;
19501 rdev->crit_proto_nlportid = 0;
19502
19503 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19504 if (!msg)
19505 return;
19506
19507 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CRIT_PROTOCOL_STOP);
19508 if (!hdr)
19509 goto nla_put_failure;
19510
19511 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 19512 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19513 NL80211_ATTR_PAD))
5de17984
AS		 19514 goto nla_put_failure;
19515
19516 genlmsg_end(msg, hdr);
19517
19518 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
19519 return;
19520
19521 nla_put_failure:
5de17984 19522 nlmsg_free(msg);
5de17984
AS		 19523}
19524EXPORT_SYMBOL(cfg80211_crit_proto_stopped);
19525
348baf0e
JB		 19526void nl80211_send_ap_stopped(struct wireless_dev *wdev)
19527{
19528 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 19529 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
348baf0e
JB		 19530 struct sk_buff *msg;
19531 void *hdr;
19532
19533 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
19534 if (!msg)
19535 return;
19536
19537 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STOP_AP);
19538 if (!hdr)
19539 goto out;
19540
19541 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19542 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex) ||
2dad624e
ND		 19543 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
19544 NL80211_ATTR_PAD))
348baf0e
JB		 19545 goto out;
19546
19547 genlmsg_end(msg, hdr);
19548
19549 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(wiphy), msg, 0,
19550 NL80211_MCGRP_MLME, GFP_KERNEL);
19551 return;
19552 out:
19553 nlmsg_free(msg);
19554}
19555
40cbfa90
SD		 19556int cfg80211_external_auth_request(struct net_device *dev,
19557 struct cfg80211_external_auth_params *params,
19558 gfp_t gfp)
19559{
19560 struct wireless_dev *wdev = dev->ieee80211_ptr;
19561 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
19562 struct sk_buff *msg;
19563 void *hdr;
19564
19565 if (!wdev->conn_owner_nlportid)
19566 return -EINVAL;
19567
19568 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19569 if (!msg)
19570 return -ENOMEM;
19571
19572 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_EXTERNAL_AUTH);
19573 if (!hdr)
19574 goto nla_put_failure;
19575
19576 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19577 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
19578 nla_put_u32(msg, NL80211_ATTR_AKM_SUITES, params->key_mgmt_suite) ||
19579 nla_put_u32(msg, NL80211_ATTR_EXTERNAL_AUTH_ACTION,
19580 params->action) ||
19581 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, params->bssid) ||
19582 nla_put(msg, NL80211_ATTR_SSID, params->ssid.ssid_len,
19583 params->ssid.ssid))
19584 goto nla_put_failure;
19585
19586 genlmsg_end(msg, hdr);
19587 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
19588 wdev->conn_owner_nlportid);
19589 return 0;
19590
19591 nla_put_failure:
19592 nlmsg_free(msg);
19593 return -ENOBUFS;
19594}
19595EXPORT_SYMBOL(cfg80211_external_auth_request);
19596
cb74e977
SD		 19597void cfg80211_update_owe_info_event(struct net_device *netdev,
19598 struct cfg80211_update_owe_info *owe_info,
19599 gfp_t gfp)
19600{
19601 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
19602 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
19603 struct sk_buff *msg;
19604 void *hdr;
19605
19606 trace_cfg80211_update_owe_info_event(wiphy, netdev, owe_info);
19607
19608 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
19609 if (!msg)
19610 return;
19611
19612 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_UPDATE_OWE_INFO);
19613 if (!hdr)
19614 goto nla_put_failure;
19615
19616 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
19617 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
19618 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, owe_info->peer))
19619 goto nla_put_failure;
19620
19621 if (!owe_info->ie_len ||
19622 nla_put(msg, NL80211_ATTR_IE, owe_info->ie_len, owe_info->ie))
19623 goto nla_put_failure;
19624
19625 genlmsg_end(msg, hdr);
19626
19627 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
19628 NL80211_MCGRP_MLME, gfp);
19629 return;
19630
19631nla_put_failure:
19632 genlmsg_cancel(msg, hdr);
19633 nlmsg_free(msg);
19634}
19635EXPORT_SYMBOL(cfg80211_update_owe_info_event);
19636
55682965
JB		 19637/* initialisation/exit functions */
19638
56989f6d 19639int __init nl80211_init(void)
55682965 19640{
0d63cbb5 19641 int err;
55682965 19642
489111e5 19643 err = genl_register_family(&nl80211_fam);
55682965
JB		 19644 if (err)
19645 return err;
19646
026331c4
JM		 19647 err = netlink_register_notifier(&nl80211_netlink_notifier);
19648 if (err)
19649 goto err_out;
19650
55682965
JB		 19651 return 0;
19652 err_out:
19653 genl_unregister_family(&nl80211_fam);
19654 return err;
19655}
19656
19657void nl80211_exit(void)
19658{
026331c4 19659 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 19660 genl_unregister_family(&nl80211_fam);
19661}
Linux 6.x block layer and io_uring tree(s)