]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - net/mac80211/cfg.c
mac80211: fix VHT MCS mask array overrun
[mirror_ubuntu-bionic-kernel.git] / net / mac80211 / cfg.c
CommitLineData
f0706e82
JB
1/*
2 * mac80211 configuration hooks for cfg80211
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
b2eb0ee6 5 * Copyright 2013-2015 Intel Mobile Communications GmbH
f0706e82
JB
6 *
7 * This file is GPLv2 as found in COPYING.
8 */
9
e8cbb4cb 10#include <linux/ieee80211.h>
f0706e82
JB
11#include <linux/nl80211.h>
12#include <linux/rtnetlink.h>
5a0e3ad6 13#include <linux/slab.h>
881d966b 14#include <net/net_namespace.h>
5dfdaf58 15#include <linux/rcupdate.h>
dfe018bf 16#include <linux/if_ether.h>
f0706e82
JB
17#include <net/cfg80211.h>
18#include "ieee80211_i.h"
24487981 19#include "driver-ops.h"
e0eb6859 20#include "cfg.h"
2c8dccc7 21#include "rate.h"
c5dd9c2b 22#include "mesh.h"
02219b3a 23#include "wme.h"
c5dd9c2b 24
552bff0c
JB
25static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy,
26 const char *name,
6bab2e19 27 unsigned char name_assign_type,
84efbb84
JB
28 enum nl80211_iftype type,
29 u32 *flags,
30 struct vif_params *params)
f0706e82
JB
31{
32 struct ieee80211_local *local = wiphy_priv(wiphy);
84efbb84 33 struct wireless_dev *wdev;
8cc9a739
MW
34 struct ieee80211_sub_if_data *sdata;
35 int err;
f0706e82 36
6bab2e19 37 err = ieee80211_if_add(local, name, name_assign_type, &wdev, type, params);
f9e10ce4
JB
38 if (err)
39 return ERR_PTR(err);
8cc9a739 40
f9e10ce4 41 if (type == NL80211_IFTYPE_MONITOR && flags) {
84efbb84 42 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
f9e10ce4
JB
43 sdata->u.mntr_flags = *flags;
44 }
45
84efbb84 46 return wdev;
f0706e82
JB
47}
48
84efbb84 49static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
f0706e82 50{
84efbb84 51 ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev));
f0706e82 52
75636525 53 return 0;
f0706e82
JB
54}
55
e36d56b6
JB
56static int ieee80211_change_iface(struct wiphy *wiphy,
57 struct net_device *dev,
2ec600d6
LCC
58 enum nl80211_iftype type, u32 *flags,
59 struct vif_params *params)
42613db7 60{
9607e6b6 61 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
f3947e2d 62 int ret;
42613db7 63
05c914fe 64 ret = ieee80211_if_change_type(sdata, type);
f3947e2d
JB
65 if (ret)
66 return ret;
42613db7 67
9bc383de
JB
68 if (type == NL80211_IFTYPE_AP_VLAN &&
69 params && params->use_4addr == 0)
a9b3cd7f 70 RCU_INIT_POINTER(sdata->u.vlan.sta, NULL);
9bc383de
JB
71 else if (type == NL80211_IFTYPE_STATION &&
72 params && params->use_4addr >= 0)
73 sdata->u.mgd.use_4addr = params->use_4addr;
74
85416a4f
CL
75 if (sdata->vif.type == NL80211_IFTYPE_MONITOR && flags) {
76 struct ieee80211_local *local = sdata->local;
77
78 if (ieee80211_sdata_running(sdata)) {
31eba5bc
FF
79 u32 mask = MONITOR_FLAG_COOK_FRAMES |
80 MONITOR_FLAG_ACTIVE;
81
85416a4f 82 /*
31eba5bc
FF
83 * Prohibit MONITOR_FLAG_COOK_FRAMES and
84 * MONITOR_FLAG_ACTIVE to be changed while the
85 * interface is up.
85416a4f
CL
86 * Else we would need to add a lot of cruft
87 * to update everything:
88 * cooked_mntrs, monitor and all fif_* counters
89 * reconfigure hardware
90 */
31eba5bc 91 if ((*flags & mask) != (sdata->u.mntr_flags & mask))
85416a4f
CL
92 return -EBUSY;
93
94 ieee80211_adjust_monitor_flags(sdata, -1);
95 sdata->u.mntr_flags = *flags;
96 ieee80211_adjust_monitor_flags(sdata, 1);
97
98 ieee80211_configure_filter(local);
99 } else {
100 /*
101 * Because the interface is down, ieee80211_do_stop
102 * and ieee80211_do_open take care of "everything"
103 * mentioned in the comment above.
104 */
105 sdata->u.mntr_flags = *flags;
106 }
107 }
f7917af9 108
42613db7
JB
109 return 0;
110}
111
f142c6b9
JB
112static int ieee80211_start_p2p_device(struct wiphy *wiphy,
113 struct wireless_dev *wdev)
114{
b6a55015
LC
115 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
116 int ret;
117
118 mutex_lock(&sdata->local->chanctx_mtx);
119 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
120 mutex_unlock(&sdata->local->chanctx_mtx);
121 if (ret < 0)
122 return ret;
123
f142c6b9
JB
124 return ieee80211_do_open(wdev, true);
125}
126
127static void ieee80211_stop_p2p_device(struct wiphy *wiphy,
128 struct wireless_dev *wdev)
129{
130 ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev));
131}
132
b53be792
SW
133static int ieee80211_set_noack_map(struct wiphy *wiphy,
134 struct net_device *dev,
135 u16 noack_map)
136{
137 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
138
139 sdata->noack_map = noack_map;
17c18bf8
JB
140
141 ieee80211_check_fast_xmit_iface(sdata);
142
b53be792
SW
143 return 0;
144}
145
e8cbb4cb 146static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev,
e31b8213 147 u8 key_idx, bool pairwise, const u8 *mac_addr,
e8cbb4cb
JB
148 struct key_params *params)
149{
26a58456 150 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2475b1cc 151 struct ieee80211_local *local = sdata->local;
e8cbb4cb 152 struct sta_info *sta = NULL;
2475b1cc 153 const struct ieee80211_cipher_scheme *cs = NULL;
db4d1169 154 struct ieee80211_key *key;
3b96766f 155 int err;
e8cbb4cb 156
26a58456 157 if (!ieee80211_sdata_running(sdata))
ad0e2b5a
JB
158 return -ENETDOWN;
159
97359d12 160 /* reject WEP and TKIP keys if WEP failed to initialize */
e8cbb4cb
JB
161 switch (params->cipher) {
162 case WLAN_CIPHER_SUITE_WEP40:
e8cbb4cb 163 case WLAN_CIPHER_SUITE_TKIP:
97359d12 164 case WLAN_CIPHER_SUITE_WEP104:
2475b1cc 165 if (IS_ERR(local->wep_tx_tfm))
97359d12 166 return -EINVAL;
3cfcf6ac 167 break;
2475b1cc 168 case WLAN_CIPHER_SUITE_CCMP:
2b2ba0db 169 case WLAN_CIPHER_SUITE_CCMP_256:
2475b1cc 170 case WLAN_CIPHER_SUITE_AES_CMAC:
56c52da2 171 case WLAN_CIPHER_SUITE_BIP_CMAC_256:
8ade538b
JM
172 case WLAN_CIPHER_SUITE_BIP_GMAC_128:
173 case WLAN_CIPHER_SUITE_BIP_GMAC_256:
2475b1cc 174 case WLAN_CIPHER_SUITE_GCMP:
00b9cfa3 175 case WLAN_CIPHER_SUITE_GCMP_256:
2475b1cc 176 break;
e8cbb4cb 177 default:
2475b1cc 178 cs = ieee80211_cs_get(local, params->cipher, sdata->vif.type);
97359d12 179 break;
e8cbb4cb
JB
180 }
181
97359d12 182 key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len,
2475b1cc
MS
183 params->key, params->seq_len, params->seq,
184 cs);
1ac62ba7
BH
185 if (IS_ERR(key))
186 return PTR_ERR(key);
db4d1169 187
e31b8213
JB
188 if (pairwise)
189 key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE;
190
2475b1cc 191 mutex_lock(&local->sta_mtx);
3b96766f 192
e8cbb4cb 193 if (mac_addr) {
ff973af7
TP
194 if (ieee80211_vif_is_mesh(&sdata->vif))
195 sta = sta_info_get(sdata, mac_addr);
196 else
197 sta = sta_info_get_bss(sdata, mac_addr);
1626e0fa
JB
198 /*
199 * The ASSOC test makes sure the driver is ready to
200 * receive the key. When wpa_supplicant has roamed
201 * using FT, it attempts to set the key before
202 * association has completed, this rejects that attempt
d070f913 203 * so it will set the key again after association.
1626e0fa
JB
204 *
205 * TODO: accept the key if we have a station entry and
206 * add it to the device after the station.
207 */
208 if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) {
79cf2dfa 209 ieee80211_key_free_unused(key);
3b96766f
JB
210 err = -ENOENT;
211 goto out_unlock;
db4d1169 212 }
e8cbb4cb
JB
213 }
214
e548c49e
JB
215 switch (sdata->vif.type) {
216 case NL80211_IFTYPE_STATION:
217 if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED)
218 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
219 break;
220 case NL80211_IFTYPE_AP:
221 case NL80211_IFTYPE_AP_VLAN:
222 /* Keys without a station are used for TX only */
223 if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP))
224 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
225 break;
226 case NL80211_IFTYPE_ADHOC:
227 /* no MFP (yet) */
228 break;
229 case NL80211_IFTYPE_MESH_POINT:
230#ifdef CONFIG_MAC80211_MESH
231 if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE)
232 key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
233 break;
234#endif
235 case NL80211_IFTYPE_WDS:
236 case NL80211_IFTYPE_MONITOR:
237 case NL80211_IFTYPE_P2P_DEVICE:
238 case NL80211_IFTYPE_UNSPECIFIED:
239 case NUM_NL80211_IFTYPES:
240 case NL80211_IFTYPE_P2P_CLIENT:
241 case NL80211_IFTYPE_P2P_GO:
6e0bd6c3 242 case NL80211_IFTYPE_OCB:
e548c49e
JB
243 /* shouldn't happen */
244 WARN_ON_ONCE(1);
245 break;
246 }
247
2475b1cc
MS
248 if (sta)
249 sta->cipher_scheme = cs;
250
3ffc2a90 251 err = ieee80211_key_link(key, sdata, sta);
db4d1169 252
3b96766f 253 out_unlock:
2475b1cc 254 mutex_unlock(&local->sta_mtx);
3b96766f
JB
255
256 return err;
e8cbb4cb
JB
257}
258
259static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev,
e31b8213 260 u8 key_idx, bool pairwise, const u8 *mac_addr)
e8cbb4cb 261{
5c0c3641
JB
262 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
263 struct ieee80211_local *local = sdata->local;
e8cbb4cb 264 struct sta_info *sta;
5c0c3641 265 struct ieee80211_key *key = NULL;
e8cbb4cb
JB
266 int ret;
267
5c0c3641
JB
268 mutex_lock(&local->sta_mtx);
269 mutex_lock(&local->key_mtx);
3b96766f 270
e8cbb4cb 271 if (mac_addr) {
3b96766f
JB
272 ret = -ENOENT;
273
0e5ded5a 274 sta = sta_info_get_bss(sdata, mac_addr);
e8cbb4cb 275 if (!sta)
3b96766f 276 goto out_unlock;
e8cbb4cb 277
5c0c3641 278 if (pairwise)
2475b1cc 279 key = key_mtx_dereference(local, sta->ptk[key_idx]);
5c0c3641 280 else
40b275b6 281 key = key_mtx_dereference(local, sta->gtk[key_idx]);
5c0c3641 282 } else
40b275b6 283 key = key_mtx_dereference(local, sdata->keys[key_idx]);
e8cbb4cb 284
5c0c3641 285 if (!key) {
3b96766f
JB
286 ret = -ENOENT;
287 goto out_unlock;
288 }
e8cbb4cb 289
3b8d9c29 290 ieee80211_key_free(key, true);
e8cbb4cb 291
3b96766f
JB
292 ret = 0;
293 out_unlock:
5c0c3641
JB
294 mutex_unlock(&local->key_mtx);
295 mutex_unlock(&local->sta_mtx);
3b96766f
JB
296
297 return ret;
e8cbb4cb
JB
298}
299
62da92fb 300static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev,
e31b8213
JB
301 u8 key_idx, bool pairwise, const u8 *mac_addr,
302 void *cookie,
62da92fb
JB
303 void (*callback)(void *cookie,
304 struct key_params *params))
305{
14db74bc 306 struct ieee80211_sub_if_data *sdata;
62da92fb
JB
307 struct sta_info *sta = NULL;
308 u8 seq[6] = {0};
309 struct key_params params;
e31b8213 310 struct ieee80211_key *key = NULL;
aba83a0b 311 u64 pn64;
62da92fb
JB
312 u32 iv32;
313 u16 iv16;
314 int err = -ENOENT;
9352c19f 315 struct ieee80211_key_seq kseq = {};
62da92fb 316
14db74bc
JB
317 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
318
3b96766f
JB
319 rcu_read_lock();
320
62da92fb 321 if (mac_addr) {
0e5ded5a 322 sta = sta_info_get_bss(sdata, mac_addr);
62da92fb
JB
323 if (!sta)
324 goto out;
325
354e159d 326 if (pairwise && key_idx < NUM_DEFAULT_KEYS)
2475b1cc 327 key = rcu_dereference(sta->ptk[key_idx]);
31f1f4ec
MS
328 else if (!pairwise &&
329 key_idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS)
a3836e02 330 key = rcu_dereference(sta->gtk[key_idx]);
62da92fb 331 } else
a3836e02 332 key = rcu_dereference(sdata->keys[key_idx]);
62da92fb
JB
333
334 if (!key)
335 goto out;
336
337 memset(&params, 0, sizeof(params));
338
97359d12 339 params.cipher = key->conf.cipher;
62da92fb 340
97359d12
JB
341 switch (key->conf.cipher) {
342 case WLAN_CIPHER_SUITE_TKIP:
b0f76b33
HH
343 iv32 = key->u.tkip.tx.iv32;
344 iv16 = key->u.tkip.tx.iv16;
62da92fb 345
9352c19f
JB
346 if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE &&
347 !(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
348 drv_get_key_seq(sdata->local, key, &kseq);
349 iv32 = kseq.tkip.iv32;
350 iv16 = kseq.tkip.iv16;
351 }
62da92fb
JB
352
353 seq[0] = iv16 & 0xff;
354 seq[1] = (iv16 >> 8) & 0xff;
355 seq[2] = iv32 & 0xff;
356 seq[3] = (iv32 >> 8) & 0xff;
357 seq[4] = (iv32 >> 16) & 0xff;
358 seq[5] = (iv32 >> 24) & 0xff;
359 params.seq = seq;
360 params.seq_len = 6;
361 break;
97359d12 362 case WLAN_CIPHER_SUITE_CCMP:
2b2ba0db 363 case WLAN_CIPHER_SUITE_CCMP_256:
97359d12 364 case WLAN_CIPHER_SUITE_AES_CMAC:
56c52da2 365 case WLAN_CIPHER_SUITE_BIP_CMAC_256:
db388a56
JB
366 BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
367 offsetof(typeof(kseq), aes_cmac));
8ade538b
JM
368 case WLAN_CIPHER_SUITE_BIP_GMAC_128:
369 case WLAN_CIPHER_SUITE_BIP_GMAC_256:
db388a56
JB
370 BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
371 offsetof(typeof(kseq), aes_gmac));
00b9cfa3
JM
372 case WLAN_CIPHER_SUITE_GCMP:
373 case WLAN_CIPHER_SUITE_GCMP_256:
db388a56
JB
374 BUILD_BUG_ON(offsetof(typeof(kseq), ccmp) !=
375 offsetof(typeof(kseq), gcmp));
376
9352c19f
JB
377 if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE &&
378 !(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
379 drv_get_key_seq(sdata->local, key, &kseq);
db388a56 380 memcpy(seq, kseq.ccmp.pn, 6);
9352c19f 381 } else {
db388a56 382 pn64 = atomic64_read(&key->conf.tx_pn);
9352c19f
JB
383 seq[0] = pn64;
384 seq[1] = pn64 >> 8;
385 seq[2] = pn64 >> 16;
386 seq[3] = pn64 >> 24;
387 seq[4] = pn64 >> 32;
388 seq[5] = pn64 >> 40;
389 }
00b9cfa3
JM
390 params.seq = seq;
391 params.seq_len = 6;
392 break;
a31cf1c6
JB
393 default:
394 if (!(key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE))
395 break;
396 if (WARN_ON(key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV))
397 break;
398 drv_get_key_seq(sdata->local, key, &kseq);
399 params.seq = kseq.hw.seq;
400 params.seq_len = kseq.hw.seq_len;
401 break;
62da92fb
JB
402 }
403
404 params.key = key->conf.key;
405 params.key_len = key->conf.keylen;
406
407 callback(cookie, &params);
408 err = 0;
409
410 out:
3b96766f 411 rcu_read_unlock();
62da92fb
JB
412 return err;
413}
414
e8cbb4cb
JB
415static int ieee80211_config_default_key(struct wiphy *wiphy,
416 struct net_device *dev,
dbd2fd65
JB
417 u8 key_idx, bool uni,
418 bool multi)
e8cbb4cb 419{
ad0e2b5a 420 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3b96766f 421
f7e0104c 422 ieee80211_set_default_key(sdata, key_idx, uni, multi);
e8cbb4cb
JB
423
424 return 0;
425}
426
3cfcf6ac
JM
427static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy,
428 struct net_device *dev,
429 u8 key_idx)
430{
66c52421 431 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3cfcf6ac 432
3cfcf6ac
JM
433 ieee80211_set_default_mgmt_key(sdata, key_idx);
434
3cfcf6ac
JM
435 return 0;
436}
437
6b62bf32
TP
438void sta_set_rate_info_tx(struct sta_info *sta,
439 const struct ieee80211_tx_rate *rate,
440 struct rate_info *rinfo)
441{
442 rinfo->flags = 0;
8bc83c24 443 if (rate->flags & IEEE80211_TX_RC_MCS) {
6b62bf32 444 rinfo->flags |= RATE_INFO_FLAGS_MCS;
8bc83c24
JB
445 rinfo->mcs = rate->idx;
446 } else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) {
447 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
448 rinfo->mcs = ieee80211_rate_get_vht_mcs(rate);
449 rinfo->nss = ieee80211_rate_get_vht_nss(rate);
450 } else {
451 struct ieee80211_supported_band *sband;
2103dec1
SW
452 int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
453 u16 brate;
454
8bc83c24
JB
455 sband = sta->local->hw.wiphy->bands[
456 ieee80211_get_sdata_band(sta->sdata)];
2103dec1
SW
457 brate = sband->bitrates[rate->idx].bitrate;
458 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
8bc83c24 459 }
6b62bf32 460 if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
b51f3bee
JB
461 rinfo->bw = RATE_INFO_BW_40;
462 else if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
463 rinfo->bw = RATE_INFO_BW_80;
464 else if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
465 rinfo->bw = RATE_INFO_BW_160;
466 else
467 rinfo->bw = RATE_INFO_BW_20;
6b62bf32
TP
468 if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
469 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
6b62bf32
TP
470}
471
003e676a
S
472void sta_set_rate_info_rx(struct sta_info *sta, struct rate_info *rinfo)
473{
474 rinfo->flags = 0;
475
476 if (sta->last_rx_rate_flag & RX_FLAG_HT) {
477 rinfo->flags |= RATE_INFO_FLAGS_MCS;
478 rinfo->mcs = sta->last_rx_rate_idx;
479 } else if (sta->last_rx_rate_flag & RX_FLAG_VHT) {
480 rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
481 rinfo->nss = sta->last_rx_rate_vht_nss;
482 rinfo->mcs = sta->last_rx_rate_idx;
483 } else {
484 struct ieee80211_supported_band *sband;
2103dec1
SW
485 int shift = ieee80211_vif_get_shift(&sta->sdata->vif);
486 u16 brate;
003e676a
S
487
488 sband = sta->local->hw.wiphy->bands[
489 ieee80211_get_sdata_band(sta->sdata)];
2103dec1
SW
490 brate = sband->bitrates[sta->last_rx_rate_idx].bitrate;
491 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift);
003e676a
S
492 }
493
003e676a
S
494 if (sta->last_rx_rate_flag & RX_FLAG_SHORT_GI)
495 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
b51f3bee
JB
496
497 if (sta->last_rx_rate_flag & RX_FLAG_5MHZ)
498 rinfo->bw = RATE_INFO_BW_5;
499 else if (sta->last_rx_rate_flag & RX_FLAG_10MHZ)
500 rinfo->bw = RATE_INFO_BW_10;
501 else if (sta->last_rx_rate_flag & RX_FLAG_40MHZ)
502 rinfo->bw = RATE_INFO_BW_40;
503 else if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_80MHZ)
504 rinfo->bw = RATE_INFO_BW_80;
505 else if (sta->last_rx_rate_vht_flag & RX_VHT_FLAG_160MHZ)
506 rinfo->bw = RATE_INFO_BW_160;
507 else
508 rinfo->bw = RATE_INFO_BW_20;
003e676a
S
509}
510
c5dd9c2b 511static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev,
3b3a0162 512 int idx, u8 *mac, struct station_info *sinfo)
c5dd9c2b 513{
3b53fde8 514 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
66572cfc 515 struct ieee80211_local *local = sdata->local;
c5dd9c2b 516 struct sta_info *sta;
d0709a65
JB
517 int ret = -ENOENT;
518
66572cfc 519 mutex_lock(&local->sta_mtx);
c5dd9c2b 520
3b53fde8 521 sta = sta_info_get_by_idx(sdata, idx);
d0709a65
JB
522 if (sta) {
523 ret = 0;
17741cdc 524 memcpy(mac, sta->sta.addr, ETH_ALEN);
d0709a65
JB
525 sta_set_sinfo(sta, sinfo);
526 }
c5dd9c2b 527
66572cfc 528 mutex_unlock(&local->sta_mtx);
c5dd9c2b 529
d0709a65 530 return ret;
c5dd9c2b
LCC
531}
532
1289723e
HS
533static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev,
534 int idx, struct survey_info *survey)
535{
536 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
537
1289723e
HS
538 return drv_get_survey(local, idx, survey);
539}
540
7bbdd2d9 541static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev,
3b3a0162 542 const u8 *mac, struct station_info *sinfo)
7bbdd2d9 543{
abe60632 544 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
66572cfc 545 struct ieee80211_local *local = sdata->local;
7bbdd2d9 546 struct sta_info *sta;
d0709a65 547 int ret = -ENOENT;
7bbdd2d9 548
66572cfc 549 mutex_lock(&local->sta_mtx);
7bbdd2d9 550
0e5ded5a 551 sta = sta_info_get_bss(sdata, mac);
d0709a65
JB
552 if (sta) {
553 ret = 0;
554 sta_set_sinfo(sta, sinfo);
555 }
556
66572cfc 557 mutex_unlock(&local->sta_mtx);
d0709a65
JB
558
559 return ret;
7bbdd2d9
JB
560}
561
55de908a 562static int ieee80211_set_monitor_channel(struct wiphy *wiphy,
683b6d3b 563 struct cfg80211_chan_def *chandef)
3d9e6e12
JB
564{
565 struct ieee80211_local *local = wiphy_priv(wiphy);
55de908a
JB
566 struct ieee80211_sub_if_data *sdata;
567 int ret = 0;
3d9e6e12 568
4bf88530 569 if (cfg80211_chandef_identical(&local->monitor_chandef, chandef))
55de908a 570 return 0;
3d9e6e12 571
34a3740d 572 mutex_lock(&local->mtx);
55de908a
JB
573 mutex_lock(&local->iflist_mtx);
574 if (local->use_chanctx) {
575 sdata = rcu_dereference_protected(
576 local->monitor_sdata,
577 lockdep_is_held(&local->iflist_mtx));
578 if (sdata) {
579 ieee80211_vif_release_channel(sdata);
4bf88530 580 ret = ieee80211_vif_use_channel(sdata, chandef,
55de908a
JB
581 IEEE80211_CHANCTX_EXCLUSIVE);
582 }
583 } else if (local->open_count == local->monitors) {
675a0b04 584 local->_oper_chandef = *chandef;
55de908a
JB
585 ieee80211_hw_config(local, 0);
586 }
3d9e6e12 587
4bf88530
JB
588 if (ret == 0)
589 local->monitor_chandef = *chandef;
55de908a 590 mutex_unlock(&local->iflist_mtx);
34a3740d 591 mutex_unlock(&local->mtx);
3d9e6e12 592
55de908a 593 return ret;
e8c9bd5b
JB
594}
595
02945821 596static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata,
af296bdb
MK
597 const u8 *resp, size_t resp_len,
598 const struct ieee80211_csa_settings *csa)
02945821 599{
aa7a0080 600 struct probe_resp *new, *old;
02945821
AN
601
602 if (!resp || !resp_len)
aba4e6ff 603 return 1;
02945821 604
7ca133bc 605 old = sdata_dereference(sdata->u.ap.probe_resp, sdata);
02945821 606
aa7a0080 607 new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL);
02945821
AN
608 if (!new)
609 return -ENOMEM;
610
aa7a0080
ES
611 new->len = resp_len;
612 memcpy(new->data, resp, resp_len);
02945821 613
af296bdb
MK
614 if (csa)
615 memcpy(new->csa_counter_offsets, csa->counter_offsets_presp,
616 csa->n_counter_offsets_presp *
617 sizeof(new->csa_counter_offsets[0]));
618
02945821 619 rcu_assign_pointer(sdata->u.ap.probe_resp, new);
aa7a0080
ES
620 if (old)
621 kfree_rcu(old, rcu_head);
02945821
AN
622
623 return 0;
624}
625
0ae07968 626static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata,
af296bdb
MK
627 struct cfg80211_beacon_data *params,
628 const struct ieee80211_csa_settings *csa)
5dfdaf58
JB
629{
630 struct beacon_data *new, *old;
631 int new_head_len, new_tail_len;
8860020e
JB
632 int size, err;
633 u32 changed = BSS_CHANGED_BEACON;
5dfdaf58 634
7ca133bc
SW
635 old = sdata_dereference(sdata->u.ap.beacon, sdata);
636
5dfdaf58 637
5dfdaf58
JB
638 /* Need to have a beacon head if we don't have one yet */
639 if (!params->head && !old)
8860020e 640 return -EINVAL;
5dfdaf58
JB
641
642 /* new or old head? */
643 if (params->head)
644 new_head_len = params->head_len;
645 else
646 new_head_len = old->head_len;
647
648 /* new or old tail? */
649 if (params->tail || !old)
650 /* params->tail_len will be zero for !params->tail */
651 new_tail_len = params->tail_len;
652 else
653 new_tail_len = old->tail_len;
654
655 size = sizeof(*new) + new_head_len + new_tail_len;
656
657 new = kzalloc(size, GFP_KERNEL);
658 if (!new)
659 return -ENOMEM;
660
661 /* start filling the new info now */
662
5dfdaf58
JB
663 /*
664 * pointers go into the block we allocated,
665 * memory is | beacon_data | head | tail |
666 */
667 new->head = ((u8 *) new) + sizeof(*new);
668 new->tail = new->head + new_head_len;
669 new->head_len = new_head_len;
670 new->tail_len = new_tail_len;
671
af296bdb
MK
672 if (csa) {
673 new->csa_current_counter = csa->count;
674 memcpy(new->csa_counter_offsets, csa->counter_offsets_beacon,
675 csa->n_counter_offsets_beacon *
676 sizeof(new->csa_counter_offsets[0]));
677 }
678
5dfdaf58
JB
679 /* copy in head */
680 if (params->head)
681 memcpy(new->head, params->head, new_head_len);
682 else
683 memcpy(new->head, old->head, new_head_len);
684
685 /* copy in optional tail */
686 if (params->tail)
687 memcpy(new->tail, params->tail, new_tail_len);
688 else
689 if (old)
690 memcpy(new->tail, old->tail, new_tail_len);
691
02945821 692 err = ieee80211_set_probe_resp(sdata, params->probe_resp,
af296bdb 693 params->probe_resp_len, csa);
8860020e
JB
694 if (err < 0)
695 return err;
696 if (err == 0)
02945821
AN
697 changed |= BSS_CHANGED_AP_PROBE_RESP;
698
8860020e
JB
699 rcu_assign_pointer(sdata->u.ap.beacon, new);
700
701 if (old)
702 kfree_rcu(old, rcu_head);
7827493b 703
8860020e 704 return changed;
5dfdaf58
JB
705}
706
8860020e
JB
707static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev,
708 struct cfg80211_ap_settings *params)
5dfdaf58 709{
8860020e 710 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
34a3740d 711 struct ieee80211_local *local = sdata->local;
5dfdaf58 712 struct beacon_data *old;
665c93a9 713 struct ieee80211_sub_if_data *vlan;
8860020e
JB
714 u32 changed = BSS_CHANGED_BEACON_INT |
715 BSS_CHANGED_BEACON_ENABLED |
716 BSS_CHANGED_BEACON |
339afbf4 717 BSS_CHANGED_SSID |
4bcc56bb
JB
718 BSS_CHANGED_P2P_PS |
719 BSS_CHANGED_TXPOWER;
8860020e 720 int err;
14db74bc 721
7ca133bc 722 old = sdata_dereference(sdata->u.ap.beacon, sdata);
5dfdaf58
JB
723 if (old)
724 return -EALREADY;
725
f6993174
EP
726 switch (params->smps_mode) {
727 case NL80211_SMPS_OFF:
728 sdata->smps_mode = IEEE80211_SMPS_OFF;
729 break;
730 case NL80211_SMPS_STATIC:
731 sdata->smps_mode = IEEE80211_SMPS_STATIC;
732 break;
733 case NL80211_SMPS_DYNAMIC:
734 sdata->smps_mode = IEEE80211_SMPS_DYNAMIC;
735 break;
736 default:
737 return -EINVAL;
738 }
04ecd257
JB
739 sdata->needed_rx_chains = sdata->local->rx_chains;
740
34a3740d 741 mutex_lock(&local->mtx);
4bf88530 742 err = ieee80211_vif_use_channel(sdata, &params->chandef,
55de908a 743 IEEE80211_CHANCTX_SHARED);
4e141dad
MK
744 if (!err)
745 ieee80211_vif_copy_chanctx_to_vlans(sdata, false);
34a3740d 746 mutex_unlock(&local->mtx);
aa430da4
JB
747 if (err)
748 return err;
749
665c93a9
JB
750 /*
751 * Apply control port protocol, this allows us to
752 * not encrypt dynamic WEP control frames.
753 */
754 sdata->control_port_protocol = params->crypto.control_port_ethertype;
755 sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt;
2475b1cc
MS
756 sdata->encrypt_headroom = ieee80211_cs_headroom(sdata->local,
757 &params->crypto,
758 sdata->vif.type);
759
665c93a9
JB
760 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) {
761 vlan->control_port_protocol =
762 params->crypto.control_port_ethertype;
763 vlan->control_port_no_encrypt =
764 params->crypto.control_port_no_encrypt;
2475b1cc
MS
765 vlan->encrypt_headroom =
766 ieee80211_cs_headroom(sdata->local,
767 &params->crypto,
768 vlan->vif.type);
665c93a9
JB
769 }
770
8860020e
JB
771 sdata->vif.bss_conf.beacon_int = params->beacon_interval;
772 sdata->vif.bss_conf.dtim_period = params->dtim_period;
d6a83228 773 sdata->vif.bss_conf.enable_beacon = true;
8860020e
JB
774
775 sdata->vif.bss_conf.ssid_len = params->ssid_len;
776 if (params->ssid_len)
777 memcpy(sdata->vif.bss_conf.ssid, params->ssid,
778 params->ssid_len);
779 sdata->vif.bss_conf.hidden_ssid =
780 (params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE);
781
67baf663
JD
782 memset(&sdata->vif.bss_conf.p2p_noa_attr, 0,
783 sizeof(sdata->vif.bss_conf.p2p_noa_attr));
784 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow =
785 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
786 if (params->p2p_opp_ps)
787 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
788 IEEE80211_P2P_OPPPS_ENABLE_BIT;
339afbf4 789
af296bdb 790 err = ieee80211_assign_beacon(sdata, &params->beacon, NULL);
0297ea17
EG
791 if (err < 0) {
792 ieee80211_vif_release_channel(sdata);
8860020e 793 return err;
0297ea17 794 }
8860020e
JB
795 changed |= err;
796
1041638f
JB
797 err = drv_start_ap(sdata->local, sdata);
798 if (err) {
7ca133bc
SW
799 old = sdata_dereference(sdata->u.ap.beacon, sdata);
800
1041638f
JB
801 if (old)
802 kfree_rcu(old, rcu_head);
803 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
0297ea17 804 ieee80211_vif_release_channel(sdata);
1041638f
JB
805 return err;
806 }
807
057d5f4b 808 ieee80211_recalc_dtim(local, sdata);
8860020e
JB
809 ieee80211_bss_info_change_notify(sdata, changed);
810
3edaf3e6
JB
811 netif_carrier_on(dev);
812 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
813 netif_carrier_on(vlan->dev);
814
665c93a9 815 return 0;
5dfdaf58
JB
816}
817
8860020e
JB
818static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev,
819 struct cfg80211_beacon_data *params)
5dfdaf58 820{
14db74bc 821 struct ieee80211_sub_if_data *sdata;
5dfdaf58 822 struct beacon_data *old;
8860020e 823 int err;
5dfdaf58 824
14db74bc 825 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
dbd72850 826 sdata_assert_lock(sdata);
14db74bc 827
73da7d5b
SW
828 /* don't allow changing the beacon while CSA is in place - offset
829 * of channel switch counter may change
830 */
831 if (sdata->vif.csa_active)
832 return -EBUSY;
833
7ca133bc 834 old = sdata_dereference(sdata->u.ap.beacon, sdata);
5dfdaf58
JB
835 if (!old)
836 return -ENOENT;
837
af296bdb 838 err = ieee80211_assign_beacon(sdata, params, NULL);
8860020e
JB
839 if (err < 0)
840 return err;
841 ieee80211_bss_info_change_notify(sdata, err);
842 return 0;
5dfdaf58
JB
843}
844
8860020e 845static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev)
5dfdaf58 846{
7b20b8e8
JB
847 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
848 struct ieee80211_sub_if_data *vlan;
849 struct ieee80211_local *local = sdata->local;
850 struct beacon_data *old_beacon;
851 struct probe_resp *old_probe_resp;
d2859df5 852 struct cfg80211_chan_def chandef;
14db74bc 853
dbd72850
MK
854 sdata_assert_lock(sdata);
855
7ca133bc 856 old_beacon = sdata_dereference(sdata->u.ap.beacon, sdata);
7b20b8e8 857 if (!old_beacon)
5dfdaf58 858 return -ENOENT;
7ca133bc 859 old_probe_resp = sdata_dereference(sdata->u.ap.probe_resp, sdata);
5dfdaf58 860
73da7d5b 861 /* abort any running channel switch */
59af6928 862 mutex_lock(&local->mtx);
73da7d5b 863 sdata->vif.csa_active = false;
a46992b4
LC
864 if (sdata->csa_block_tx) {
865 ieee80211_wake_vif_queues(local, sdata,
866 IEEE80211_QUEUE_STOP_REASON_CSA);
867 sdata->csa_block_tx = false;
868 }
869
59af6928
MK
870 mutex_unlock(&local->mtx);
871
1f3b8a2b
SW
872 kfree(sdata->u.ap.next_beacon);
873 sdata->u.ap.next_beacon = NULL;
874
7b20b8e8 875 /* turn off carrier for this interface and dependent VLANs */
3edaf3e6
JB
876 list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
877 netif_carrier_off(vlan->dev);
878 netif_carrier_off(dev);
879
7b20b8e8 880 /* remove beacon and probe response */
a9b3cd7f 881 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
7b20b8e8
JB
882 RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL);
883 kfree_rcu(old_beacon, rcu_head);
884 if (old_probe_resp)
885 kfree_rcu(old_probe_resp, rcu_head);
8ffcc704 886 sdata->u.ap.driver_smps_mode = IEEE80211_SMPS_OFF;
8860020e 887
e716251d 888 __sta_info_flush(sdata, true);
7907c7d3 889 ieee80211_free_keys(sdata, true);
75de9113 890
d6a83228 891 sdata->vif.bss_conf.enable_beacon = false;
0eabccd9 892 sdata->vif.bss_conf.ssid_len = 0;
d6a83228 893 clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
2d0ddec5 894 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
8860020e 895
a6b368f6 896 if (sdata->wdev.cac_started) {
d2859df5 897 chandef = sdata->vif.bss_conf.chandef;
a6b368f6 898 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
d2859df5
JD
899 cfg80211_cac_event(sdata->dev, &chandef,
900 NL80211_RADAR_CAC_ABORTED,
a6b368f6
SW
901 GFP_KERNEL);
902 }
903
1041638f
JB
904 drv_stop_ap(sdata->local, sdata);
905
7b20b8e8
JB
906 /* free all potentially still buffered bcast frames */
907 local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf);
908 skb_queue_purge(&sdata->u.ap.ps.bc_buf);
909
34a3740d 910 mutex_lock(&local->mtx);
4e141dad 911 ieee80211_vif_copy_chanctx_to_vlans(sdata, true);
55de908a 912 ieee80211_vif_release_channel(sdata);
34a3740d 913 mutex_unlock(&local->mtx);
55de908a 914
2d0ddec5 915 return 0;
5dfdaf58
JB
916}
917
4fd6931e
JB
918/* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */
919struct iapp_layer2_update {
920 u8 da[ETH_ALEN]; /* broadcast */
921 u8 sa[ETH_ALEN]; /* STA addr */
922 __be16 len; /* 6 */
923 u8 dsap; /* 0 */
924 u8 ssap; /* 0 */
925 u8 control;
926 u8 xid_info[3];
bc10502d 927} __packed;
4fd6931e
JB
928
929static void ieee80211_send_layer2_update(struct sta_info *sta)
930{
931 struct iapp_layer2_update *msg;
932 struct sk_buff *skb;
933
934 /* Send Level 2 Update Frame to update forwarding tables in layer 2
935 * bridge devices */
936
937 skb = dev_alloc_skb(sizeof(*msg));
938 if (!skb)
939 return;
940 msg = (struct iapp_layer2_update *)skb_put(skb, sizeof(*msg));
941
942 /* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID)
943 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */
944
e83e6541 945 eth_broadcast_addr(msg->da);
17741cdc 946 memcpy(msg->sa, sta->sta.addr, ETH_ALEN);
4fd6931e
JB
947 msg->len = htons(6);
948 msg->dsap = 0;
949 msg->ssap = 0x01; /* NULL LSAP, CR Bit: Response */
950 msg->control = 0xaf; /* XID response lsb.1111F101.
951 * F=0 (no poll command; unsolicited frame) */
952 msg->xid_info[0] = 0x81; /* XID format identifier */
953 msg->xid_info[1] = 1; /* LLC types/classes: Type 1 LLC */
954 msg->xid_info[2] = 0; /* XID sender's receive window size (RW) */
955
d0709a65
JB
956 skb->dev = sta->sdata->dev;
957 skb->protocol = eth_type_trans(skb, sta->sdata->dev);
4fd6931e 958 memset(skb->cb, 0, sizeof(skb->cb));
06ee1c26 959 netif_rx_ni(skb);
4fd6931e
JB
960}
961
d582cffb
JB
962static int sta_apply_auth_flags(struct ieee80211_local *local,
963 struct sta_info *sta,
964 u32 mask, u32 set)
965{
966 int ret;
967
968 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
969 set & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
970 !test_sta_flag(sta, WLAN_STA_AUTH)) {
971 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
972 if (ret)
973 return ret;
974 }
975
976 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
977 set & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
978 !test_sta_flag(sta, WLAN_STA_ASSOC)) {
c23e31cf
MP
979 /*
980 * When peer becomes associated, init rate control as
981 * well. Some drivers require rate control initialized
982 * before drv_sta_state() is called.
983 */
984 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER))
985 rate_control_rate_init(sta);
986
d582cffb
JB
987 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
988 if (ret)
989 return ret;
990 }
991
992 if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
993 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED))
994 ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED);
995 else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
996 ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
997 else
998 ret = 0;
999 if (ret)
1000 return ret;
1001 }
1002
1003 if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1004 !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
1005 test_sta_flag(sta, WLAN_STA_ASSOC)) {
1006 ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
1007 if (ret)
1008 return ret;
1009 }
1010
1011 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1012 !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) &&
1013 test_sta_flag(sta, WLAN_STA_AUTH)) {
1014 ret = sta_info_move_state(sta, IEEE80211_STA_NONE);
1015 if (ret)
1016 return ret;
1017 }
1018
1019 return 0;
1020}
1021
13657702
JB
1022static void sta_apply_mesh_params(struct ieee80211_local *local,
1023 struct sta_info *sta,
1024 struct station_parameters *params)
1025{
1026#ifdef CONFIG_MAC80211_MESH
1027 struct ieee80211_sub_if_data *sdata = sta->sdata;
1028 u32 changed = 0;
1029
1030 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) {
1031 switch (params->plink_state) {
1032 case NL80211_PLINK_ESTAB:
1033 if (sta->mesh->plink_state != NL80211_PLINK_ESTAB)
1034 changed = mesh_plink_inc_estab_count(sdata);
1035 sta->mesh->plink_state = params->plink_state;
1036
1037 ieee80211_mps_sta_status_update(sta);
1038 changed |= ieee80211_mps_set_sta_local_pm(sta,
1039 sdata->u.mesh.mshcfg.power_mode);
1040 break;
1041 case NL80211_PLINK_LISTEN:
1042 case NL80211_PLINK_BLOCKED:
1043 case NL80211_PLINK_OPN_SNT:
1044 case NL80211_PLINK_OPN_RCVD:
1045 case NL80211_PLINK_CNF_RCVD:
1046 case NL80211_PLINK_HOLDING:
1047 if (sta->mesh->plink_state == NL80211_PLINK_ESTAB)
1048 changed = mesh_plink_dec_estab_count(sdata);
1049 sta->mesh->plink_state = params->plink_state;
1050
1051 ieee80211_mps_sta_status_update(sta);
1052 changed |= ieee80211_mps_set_sta_local_pm(sta,
1053 NL80211_MESH_POWER_UNKNOWN);
1054 break;
1055 default:
1056 /* nothing */
1057 break;
1058 }
1059 }
1060
1061 switch (params->plink_action) {
1062 case NL80211_PLINK_ACTION_NO_ACTION:
1063 /* nothing */
1064 break;
1065 case NL80211_PLINK_ACTION_OPEN:
1066 changed |= mesh_plink_open(sta);
1067 break;
1068 case NL80211_PLINK_ACTION_BLOCK:
1069 changed |= mesh_plink_block(sta);
1070 break;
1071 }
1072
1073 if (params->local_pm)
1074 changed |= ieee80211_mps_set_sta_local_pm(sta,
1075 params->local_pm);
1076
1077 ieee80211_mbss_info_change_notify(sdata, changed);
1078#endif
1079}
1080
d9a7ddb0
JB
1081static int sta_apply_parameters(struct ieee80211_local *local,
1082 struct sta_info *sta,
1083 struct station_parameters *params)
4fd6931e 1084{
d9a7ddb0 1085 int ret = 0;
8318d78a 1086 struct ieee80211_supported_band *sband;
d0709a65 1087 struct ieee80211_sub_if_data *sdata = sta->sdata;
55de908a 1088 enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
eccb8e8f 1089 u32 mask, set;
4fd6931e 1090
55de908a 1091 sband = local->hw.wiphy->bands[band];
ae5eb026 1092
eccb8e8f
JB
1093 mask = params->sta_flags_mask;
1094 set = params->sta_flags_set;
73651ee6 1095
d582cffb
JB
1096 if (ieee80211_vif_is_mesh(&sdata->vif)) {
1097 /*
1098 * In mesh mode, ASSOCIATED isn't part of the nl80211
1099 * API but must follow AUTHENTICATED for driver state.
1100 */
1101 if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1102 mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
1103 if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1104 set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
77ee7c89
JB
1105 } else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1106 /*
1107 * TDLS -- everything follows authorized, but
1108 * only becoming authorized is possible, not
1109 * going back
1110 */
1111 if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1112 set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1113 BIT(NL80211_STA_FLAG_ASSOCIATED);
1114 mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1115 BIT(NL80211_STA_FLAG_ASSOCIATED);
1116 }
eccb8e8f 1117 }
4fd6931e 1118
2c44be81
JB
1119 if (mask & BIT(NL80211_STA_FLAG_WME) &&
1120 local->hw.queues >= IEEE80211_NUM_ACS)
1121 sta->sta.wme = set & BIT(NL80211_STA_FLAG_WME);
1122
68885a54
AN
1123 /* auth flags will be set later for TDLS stations */
1124 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1125 ret = sta_apply_auth_flags(local, sta, mask, set);
1126 if (ret)
1127 return ret;
1128 }
d9a7ddb0 1129
eccb8e8f 1130 if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) {
eccb8e8f 1131 if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
c2c98fde
JB
1132 set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1133 else
1134 clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
eccb8e8f 1135 }
4fd6931e 1136
eccb8e8f 1137 if (mask & BIT(NL80211_STA_FLAG_MFP)) {
eccb8e8f 1138 if (set & BIT(NL80211_STA_FLAG_MFP))
c2c98fde
JB
1139 set_sta_flag(sta, WLAN_STA_MFP);
1140 else
1141 clear_sta_flag(sta, WLAN_STA_MFP);
4fd6931e 1142 }
b39c48fa 1143
07ba55d7 1144 if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) {
07ba55d7 1145 if (set & BIT(NL80211_STA_FLAG_TDLS_PEER))
c2c98fde
JB
1146 set_sta_flag(sta, WLAN_STA_TDLS_PEER);
1147 else
1148 clear_sta_flag(sta, WLAN_STA_TDLS_PEER);
07ba55d7 1149 }
4fd6931e 1150
9041c1fa
AN
1151 /* mark TDLS channel switch support, if the AP allows it */
1152 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1153 !sdata->u.mgd.tdls_chan_switch_prohibited &&
1154 params->ext_capab_len >= 4 &&
1155 params->ext_capab[3] & WLAN_EXT_CAPA4_TDLS_CHAN_SWITCH)
1156 set_sta_flag(sta, WLAN_STA_TDLS_CHAN_SWITCH);
1157
b98fb44f
AN
1158 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1159 ieee80211_hw_check(&local->hw, TDLS_WIDER_BW) &&
1160 params->ext_capab_len >= 8 &&
1161 params->ext_capab[7] & WLAN_EXT_CAPA8_TDLS_WIDE_BW_ENABLED)
1162 set_sta_flag(sta, WLAN_STA_TDLS_WIDER_BW);
1163
3b9ce80c
JB
1164 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) {
1165 sta->sta.uapsd_queues = params->uapsd_queues;
1166 sta->sta.max_sp = params->max_sp;
1167 }
9533b4ac 1168
51b50fbe
JB
1169 /*
1170 * cfg80211 validates this (1-2007) and allows setting the AID
1171 * only when creating a new station entry
1172 */
1173 if (params->aid)
1174 sta->sta.aid = params->aid;
1175
73651ee6 1176 /*
ba23d206
JB
1177 * Some of the following updates would be racy if called on an
1178 * existing station, via ieee80211_change_station(). However,
1179 * all such changes are rejected by cfg80211 except for updates
1180 * changing the supported rates on an existing but not yet used
1181 * TDLS peer.
73651ee6
JB
1182 */
1183
4fd6931e
JB
1184 if (params->listen_interval >= 0)
1185 sta->listen_interval = params->listen_interval;
1186
1187 if (params->supported_rates) {
2103dec1
SW
1188 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1189 sband, params->supported_rates,
1190 params->supported_rates_len,
1191 &sta->sta.supp_rates[band]);
4fd6931e 1192 }
c5dd9c2b 1193
d9fe60de 1194 if (params->ht_capa)
ef96a842 1195 ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband,
e1a0c6b3 1196 params->ht_capa, sta);
36aedc90 1197
f461be3e
MP
1198 if (params->vht_capa)
1199 ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband,
4a34215e 1200 params->vht_capa, sta);
f461be3e 1201
b1bce14a 1202 if (params->opmode_notif_used) {
b1bce14a
MK
1203 /* returned value is only needed for rc update, but the
1204 * rc isn't initialized here yet, so ignore it
1205 */
1206 __ieee80211_vht_handle_opmode(sdata, sta,
1207 params->opmode_notif,
1208 band, false);
1209 }
1210
13657702
JB
1211 if (ieee80211_vif_is_mesh(&sdata->vif))
1212 sta_apply_mesh_params(local, sta, params);
d9a7ddb0 1213
68885a54
AN
1214 /* set the STA state after all sta info from usermode has been set */
1215 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1216 ret = sta_apply_auth_flags(local, sta, mask, set);
1217 if (ret)
1218 return ret;
1219 }
1220
d9a7ddb0 1221 return 0;
4fd6931e
JB
1222}
1223
1224static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
3b3a0162
JB
1225 const u8 *mac,
1226 struct station_parameters *params)
4fd6931e 1227{
14db74bc 1228 struct ieee80211_local *local = wiphy_priv(wiphy);
4fd6931e
JB
1229 struct sta_info *sta;
1230 struct ieee80211_sub_if_data *sdata;
73651ee6 1231 int err;
b8d476c8 1232 int layer2_update;
4fd6931e 1233
4fd6931e
JB
1234 if (params->vlan) {
1235 sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1236
05c914fe
JB
1237 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1238 sdata->vif.type != NL80211_IFTYPE_AP)
4fd6931e
JB
1239 return -EINVAL;
1240 } else
1241 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1242
b203ca39 1243 if (ether_addr_equal(mac, sdata->vif.addr))
03e4497e
JB
1244 return -EINVAL;
1245
1246 if (is_multicast_ether_addr(mac))
1247 return -EINVAL;
1248
1249 sta = sta_info_alloc(sdata, mac, GFP_KERNEL);
73651ee6
JB
1250 if (!sta)
1251 return -ENOMEM;
4fd6931e 1252
d582cffb
JB
1253 /*
1254 * defaults -- if userspace wants something else we'll
1255 * change it accordingly in sta_apply_parameters()
1256 */
77ee7c89
JB
1257 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))) {
1258 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
1259 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
0c4972cc
AN
1260 } else {
1261 sta->sta.tdls = true;
77ee7c89 1262 }
4fd6931e 1263
d9a7ddb0
JB
1264 err = sta_apply_parameters(local, sta, params);
1265 if (err) {
1266 sta_info_free(local, sta);
1267 return err;
1268 }
4fd6931e 1269
d64cf63e 1270 /*
77ee7c89
JB
1271 * for TDLS, rate control should be initialized only when
1272 * rates are known and station is marked authorized
d64cf63e
AN
1273 */
1274 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER))
1275 rate_control_rate_init(sta);
4fd6931e 1276
b8d476c8
JM
1277 layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1278 sdata->vif.type == NL80211_IFTYPE_AP;
1279
34e89507 1280 err = sta_info_insert_rcu(sta);
73651ee6 1281 if (err) {
73651ee6
JB
1282 rcu_read_unlock();
1283 return err;
1284 }
1285
b8d476c8 1286 if (layer2_update)
73651ee6
JB
1287 ieee80211_send_layer2_update(sta);
1288
1289 rcu_read_unlock();
1290
4fd6931e
JB
1291 return 0;
1292}
1293
1294static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev,
89c771e5 1295 struct station_del_parameters *params)
4fd6931e 1296{
14db74bc 1297 struct ieee80211_sub_if_data *sdata;
4fd6931e 1298
14db74bc
JB
1299 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1300
89c771e5
JM
1301 if (params->mac)
1302 return sta_info_destroy_addr_bss(sdata, params->mac);
4fd6931e 1303
b998e8bb 1304 sta_info_flush(sdata);
4fd6931e
JB
1305 return 0;
1306}
1307
1308static int ieee80211_change_station(struct wiphy *wiphy,
3b3a0162 1309 struct net_device *dev, const u8 *mac,
4fd6931e
JB
1310 struct station_parameters *params)
1311{
abe60632 1312 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
14db74bc 1313 struct ieee80211_local *local = wiphy_priv(wiphy);
4fd6931e
JB
1314 struct sta_info *sta;
1315 struct ieee80211_sub_if_data *vlansdata;
77ee7c89 1316 enum cfg80211_station_type statype;
35b88623 1317 int err;
4fd6931e 1318
87be1e1e 1319 mutex_lock(&local->sta_mtx);
98dd6a57 1320
0e5ded5a 1321 sta = sta_info_get_bss(sdata, mac);
98dd6a57 1322 if (!sta) {
77ee7c89
JB
1323 err = -ENOENT;
1324 goto out_err;
98dd6a57 1325 }
4fd6931e 1326
77ee7c89
JB
1327 switch (sdata->vif.type) {
1328 case NL80211_IFTYPE_MESH_POINT:
a6dad6a2 1329 if (sdata->u.mesh.user_mpm)
eef941e6 1330 statype = CFG80211_STA_MESH_PEER_USER;
77ee7c89 1331 else
eef941e6 1332 statype = CFG80211_STA_MESH_PEER_KERNEL;
77ee7c89
JB
1333 break;
1334 case NL80211_IFTYPE_ADHOC:
1335 statype = CFG80211_STA_IBSS;
1336 break;
1337 case NL80211_IFTYPE_STATION:
1338 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1339 statype = CFG80211_STA_AP_STA;
1340 break;
1341 }
1342 if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1343 statype = CFG80211_STA_TDLS_PEER_ACTIVE;
1344 else
1345 statype = CFG80211_STA_TDLS_PEER_SETUP;
1346 break;
1347 case NL80211_IFTYPE_AP:
1348 case NL80211_IFTYPE_AP_VLAN:
1349 statype = CFG80211_STA_AP_CLIENT;
1350 break;
1351 default:
1352 err = -EOPNOTSUPP;
1353 goto out_err;
bdd90d5e
JB
1354 }
1355
77ee7c89
JB
1356 err = cfg80211_check_station_change(wiphy, params, statype);
1357 if (err)
1358 goto out_err;
1359
d0709a65 1360 if (params->vlan && params->vlan != sta->sdata->dev) {
7e3ed02c
FF
1361 bool prev_4addr = false;
1362 bool new_4addr = false;
1363
4fd6931e
JB
1364 vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1365
9bc383de 1366 if (params->vlan->ieee80211_ptr->use_4addr) {
3305443c 1367 if (vlansdata->u.vlan.sta) {
77ee7c89
JB
1368 err = -EBUSY;
1369 goto out_err;
3305443c 1370 }
f14543ee 1371
cf778b00 1372 rcu_assign_pointer(vlansdata->u.vlan.sta, sta);
7e3ed02c
FF
1373 new_4addr = true;
1374 }
1375
1376 if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN &&
1377 sta->sdata->u.vlan.sta) {
0c2bef46 1378 RCU_INIT_POINTER(sta->sdata->u.vlan.sta, NULL);
7e3ed02c 1379 prev_4addr = true;
f14543ee
FF
1380 }
1381
14db74bc 1382 sta->sdata = vlansdata;
464daaf0 1383 ieee80211_check_fast_xmit(sta);
7e3ed02c
FF
1384
1385 if (sta->sta_state == IEEE80211_STA_AUTHORIZED &&
1386 prev_4addr != new_4addr) {
1387 if (new_4addr)
1388 atomic_dec(&sta->sdata->bss->num_mcast_sta);
1389 else
1390 atomic_inc(&sta->sdata->bss->num_mcast_sta);
1391 }
1392
4fd6931e
JB
1393 ieee80211_send_layer2_update(sta);
1394 }
1395
35b88623 1396 err = sta_apply_parameters(local, sta, params);
77ee7c89
JB
1397 if (err)
1398 goto out_err;
4fd6931e 1399
87be1e1e 1400 mutex_unlock(&local->sta_mtx);
98dd6a57 1401
687da132
EG
1402 if ((sdata->vif.type == NL80211_IFTYPE_AP ||
1403 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) &&
1404 sta->known_smps_mode != sta->sdata->bss->req_smps &&
1405 test_sta_flag(sta, WLAN_STA_AUTHORIZED) &&
1406 sta_info_tx_streams(sta) != 1) {
1407 ht_dbg(sta->sdata,
1408 "%pM just authorized and MIMO capable - update SMPS\n",
1409 sta->sta.addr);
1410 ieee80211_send_smps_action(sta->sdata,
1411 sta->sdata->bss->req_smps,
1412 sta->sta.addr,
1413 sta->sdata->vif.bss_conf.bssid);
1414 }
1415
808118cb 1416 if (sdata->vif.type == NL80211_IFTYPE_STATION &&
ab095877 1417 params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
808118cb 1418 ieee80211_recalc_ps(local, -1);
ab095877
EP
1419 ieee80211_recalc_ps_vif(sdata);
1420 }
77ee7c89 1421
4fd6931e 1422 return 0;
77ee7c89
JB
1423out_err:
1424 mutex_unlock(&local->sta_mtx);
1425 return err;
4fd6931e
JB
1426}
1427
c5dd9c2b
LCC
1428#ifdef CONFIG_MAC80211_MESH
1429static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev,
3b3a0162 1430 const u8 *dst, const u8 *next_hop)
c5dd9c2b 1431{
14db74bc 1432 struct ieee80211_sub_if_data *sdata;
c5dd9c2b
LCC
1433 struct mesh_path *mpath;
1434 struct sta_info *sta;
c5dd9c2b 1435
14db74bc
JB
1436 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1437
d0709a65 1438 rcu_read_lock();
abe60632 1439 sta = sta_info_get(sdata, next_hop);
d0709a65
JB
1440 if (!sta) {
1441 rcu_read_unlock();
c5dd9c2b 1442 return -ENOENT;
d0709a65 1443 }
c5dd9c2b 1444
ae76eef0
BC
1445 mpath = mesh_path_add(sdata, dst);
1446 if (IS_ERR(mpath)) {
d0709a65 1447 rcu_read_unlock();
ae76eef0 1448 return PTR_ERR(mpath);
d0709a65 1449 }
c5dd9c2b 1450
c5dd9c2b 1451 mesh_path_fix_nexthop(mpath, sta);
d0709a65 1452
c5dd9c2b
LCC
1453 rcu_read_unlock();
1454 return 0;
1455}
1456
1457static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev,
3b3a0162 1458 const u8 *dst)
c5dd9c2b 1459{
f698d856
JBG
1460 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1461
c5dd9c2b 1462 if (dst)
bf7cd94d 1463 return mesh_path_del(sdata, dst);
c5dd9c2b 1464
ece1a2e7 1465 mesh_path_flush_by_iface(sdata);
c5dd9c2b
LCC
1466 return 0;
1467}
1468
3b3a0162
JB
1469static int ieee80211_change_mpath(struct wiphy *wiphy, struct net_device *dev,
1470 const u8 *dst, const u8 *next_hop)
c5dd9c2b 1471{
14db74bc 1472 struct ieee80211_sub_if_data *sdata;
c5dd9c2b
LCC
1473 struct mesh_path *mpath;
1474 struct sta_info *sta;
1475
14db74bc
JB
1476 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1477
d0709a65
JB
1478 rcu_read_lock();
1479
abe60632 1480 sta = sta_info_get(sdata, next_hop);
d0709a65
JB
1481 if (!sta) {
1482 rcu_read_unlock();
c5dd9c2b 1483 return -ENOENT;
d0709a65 1484 }
c5dd9c2b 1485
bf7cd94d 1486 mpath = mesh_path_lookup(sdata, dst);
c5dd9c2b
LCC
1487 if (!mpath) {
1488 rcu_read_unlock();
c5dd9c2b
LCC
1489 return -ENOENT;
1490 }
1491
1492 mesh_path_fix_nexthop(mpath, sta);
d0709a65 1493
c5dd9c2b
LCC
1494 rcu_read_unlock();
1495 return 0;
1496}
1497
1498static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop,
1499 struct mpath_info *pinfo)
1500{
a3836e02
JB
1501 struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop);
1502
1503 if (next_hop_sta)
1504 memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN);
c5dd9c2b 1505 else
c84a67a2 1506 eth_zero_addr(next_hop);
c5dd9c2b 1507
7ce8c7a3
LAYS
1508 memset(pinfo, 0, sizeof(*pinfo));
1509
f5ea9120
JB
1510 pinfo->generation = mesh_paths_generation;
1511
c5dd9c2b 1512 pinfo->filled = MPATH_INFO_FRAME_QLEN |
d19b3bf6 1513 MPATH_INFO_SN |
c5dd9c2b
LCC
1514 MPATH_INFO_METRIC |
1515 MPATH_INFO_EXPTIME |
1516 MPATH_INFO_DISCOVERY_TIMEOUT |
1517 MPATH_INFO_DISCOVERY_RETRIES |
1518 MPATH_INFO_FLAGS;
1519
1520 pinfo->frame_qlen = mpath->frame_queue.qlen;
d19b3bf6 1521 pinfo->sn = mpath->sn;
c5dd9c2b
LCC
1522 pinfo->metric = mpath->metric;
1523 if (time_before(jiffies, mpath->exp_time))
1524 pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies);
1525 pinfo->discovery_timeout =
1526 jiffies_to_msecs(mpath->discovery_timeout);
1527 pinfo->discovery_retries = mpath->discovery_retries;
c5dd9c2b
LCC
1528 if (mpath->flags & MESH_PATH_ACTIVE)
1529 pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE;
1530 if (mpath->flags & MESH_PATH_RESOLVING)
1531 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING;
d19b3bf6
RP
1532 if (mpath->flags & MESH_PATH_SN_VALID)
1533 pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID;
c5dd9c2b
LCC
1534 if (mpath->flags & MESH_PATH_FIXED)
1535 pinfo->flags |= NL80211_MPATH_FLAG_FIXED;
7ce8c7a3
LAYS
1536 if (mpath->flags & MESH_PATH_RESOLVED)
1537 pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED;
c5dd9c2b
LCC
1538}
1539
1540static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev,
1541 u8 *dst, u8 *next_hop, struct mpath_info *pinfo)
1542
1543{
14db74bc 1544 struct ieee80211_sub_if_data *sdata;
c5dd9c2b
LCC
1545 struct mesh_path *mpath;
1546
14db74bc
JB
1547 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1548
c5dd9c2b 1549 rcu_read_lock();
bf7cd94d 1550 mpath = mesh_path_lookup(sdata, dst);
c5dd9c2b
LCC
1551 if (!mpath) {
1552 rcu_read_unlock();
1553 return -ENOENT;
1554 }
1555 memcpy(dst, mpath->dst, ETH_ALEN);
1556 mpath_set_pinfo(mpath, next_hop, pinfo);
1557 rcu_read_unlock();
1558 return 0;
1559}
1560
1561static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev,
3b3a0162
JB
1562 int idx, u8 *dst, u8 *next_hop,
1563 struct mpath_info *pinfo)
c5dd9c2b 1564{
14db74bc 1565 struct ieee80211_sub_if_data *sdata;
c5dd9c2b
LCC
1566 struct mesh_path *mpath;
1567
14db74bc
JB
1568 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1569
c5dd9c2b 1570 rcu_read_lock();
bf7cd94d 1571 mpath = mesh_path_lookup_by_idx(sdata, idx);
c5dd9c2b
LCC
1572 if (!mpath) {
1573 rcu_read_unlock();
1574 return -ENOENT;
1575 }
1576 memcpy(dst, mpath->dst, ETH_ALEN);
1577 mpath_set_pinfo(mpath, next_hop, pinfo);
1578 rcu_read_unlock();
1579 return 0;
1580}
93da9cc1 1581
a2db2ed3
HR
1582static void mpp_set_pinfo(struct mesh_path *mpath, u8 *mpp,
1583 struct mpath_info *pinfo)
1584{
1585 memset(pinfo, 0, sizeof(*pinfo));
1586 memcpy(mpp, mpath->mpp, ETH_ALEN);
1587
1588 pinfo->generation = mpp_paths_generation;
1589}
1590
1591static int ieee80211_get_mpp(struct wiphy *wiphy, struct net_device *dev,
1592 u8 *dst, u8 *mpp, struct mpath_info *pinfo)
1593
1594{
1595 struct ieee80211_sub_if_data *sdata;
1596 struct mesh_path *mpath;
1597
1598 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1599
1600 rcu_read_lock();
1601 mpath = mpp_path_lookup(sdata, dst);
1602 if (!mpath) {
1603 rcu_read_unlock();
1604 return -ENOENT;
1605 }
1606 memcpy(dst, mpath->dst, ETH_ALEN);
1607 mpp_set_pinfo(mpath, mpp, pinfo);
1608 rcu_read_unlock();
1609 return 0;
1610}
1611
1612static int ieee80211_dump_mpp(struct wiphy *wiphy, struct net_device *dev,
1613 int idx, u8 *dst, u8 *mpp,
1614 struct mpath_info *pinfo)
1615{
1616 struct ieee80211_sub_if_data *sdata;
1617 struct mesh_path *mpath;
1618
1619 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1620
1621 rcu_read_lock();
1622 mpath = mpp_path_lookup_by_idx(sdata, idx);
1623 if (!mpath) {
1624 rcu_read_unlock();
1625 return -ENOENT;
1626 }
1627 memcpy(dst, mpath->dst, ETH_ALEN);
1628 mpp_set_pinfo(mpath, mpp, pinfo);
1629 rcu_read_unlock();
1630 return 0;
1631}
1632
24bdd9f4 1633static int ieee80211_get_mesh_config(struct wiphy *wiphy,
93da9cc1 1634 struct net_device *dev,
1635 struct mesh_config *conf)
1636{
1637 struct ieee80211_sub_if_data *sdata;
1638 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1639
93da9cc1 1640 memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config));
1641 return 0;
1642}
1643
1644static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask)
1645{
1646 return (mask >> (parm-1)) & 0x1;
1647}
1648
c80d545d
JC
1649static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh,
1650 const struct mesh_setup *setup)
1651{
1652 u8 *new_ie;
1653 const u8 *old_ie;
4bb62344
CYY
1654 struct ieee80211_sub_if_data *sdata = container_of(ifmsh,
1655 struct ieee80211_sub_if_data, u.mesh);
c80d545d 1656
581a8b0f 1657 /* allocate information elements */
c80d545d 1658 new_ie = NULL;
581a8b0f 1659 old_ie = ifmsh->ie;
c80d545d 1660
581a8b0f
JC
1661 if (setup->ie_len) {
1662 new_ie = kmemdup(setup->ie, setup->ie_len,
c80d545d
JC
1663 GFP_KERNEL);
1664 if (!new_ie)
1665 return -ENOMEM;
1666 }
581a8b0f
JC
1667 ifmsh->ie_len = setup->ie_len;
1668 ifmsh->ie = new_ie;
1669 kfree(old_ie);
c80d545d
JC
1670
1671 /* now copy the rest of the setup parameters */
1672 ifmsh->mesh_id_len = setup->mesh_id_len;
1673 memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len);
d299a1f2 1674 ifmsh->mesh_sp_id = setup->sync_method;
c80d545d
JC
1675 ifmsh->mesh_pp_id = setup->path_sel_proto;
1676 ifmsh->mesh_pm_id = setup->path_metric;
a6dad6a2 1677 ifmsh->user_mpm = setup->user_mpm;
0d4261ad 1678 ifmsh->mesh_auth_id = setup->auth_id;
b130e5ce
JC
1679 ifmsh->security = IEEE80211_MESH_SEC_NONE;
1680 if (setup->is_authenticated)
1681 ifmsh->security |= IEEE80211_MESH_SEC_AUTHED;
1682 if (setup->is_secure)
1683 ifmsh->security |= IEEE80211_MESH_SEC_SECURED;
c80d545d 1684
4bb62344
CYY
1685 /* mcast rate setting in Mesh Node */
1686 memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate,
1687 sizeof(setup->mcast_rate));
ffb3cf30 1688 sdata->vif.bss_conf.basic_rates = setup->basic_rates;
4bb62344 1689
9bdbf04d
MP
1690 sdata->vif.bss_conf.beacon_int = setup->beacon_interval;
1691 sdata->vif.bss_conf.dtim_period = setup->dtim_period;
1692
c80d545d
JC
1693 return 0;
1694}
1695
24bdd9f4 1696static int ieee80211_update_mesh_config(struct wiphy *wiphy,
29cbe68c
JB
1697 struct net_device *dev, u32 mask,
1698 const struct mesh_config *nconf)
93da9cc1 1699{
1700 struct mesh_config *conf;
1701 struct ieee80211_sub_if_data *sdata;
63c5723b
RP
1702 struct ieee80211_if_mesh *ifmsh;
1703
93da9cc1 1704 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
63c5723b 1705 ifmsh = &sdata->u.mesh;
93da9cc1 1706
93da9cc1 1707 /* Set the config options which we are interested in setting */
1708 conf = &(sdata->u.mesh.mshcfg);
1709 if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask))
1710 conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout;
1711 if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask))
1712 conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout;
1713 if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask))
1714 conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout;
1715 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask))
1716 conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks;
1717 if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask))
1718 conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries;
1719 if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask))
1720 conf->dot11MeshTTL = nconf->dot11MeshTTL;
45904f21 1721 if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask))
58886a90 1722 conf->element_ttl = nconf->element_ttl;
146bb483
TP
1723 if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) {
1724 if (ifmsh->user_mpm)
1725 return -EBUSY;
93da9cc1 1726 conf->auto_open_plinks = nconf->auto_open_plinks;
146bb483 1727 }
d299a1f2
JC
1728 if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask))
1729 conf->dot11MeshNbrOffsetMaxNeighbor =
1730 nconf->dot11MeshNbrOffsetMaxNeighbor;
93da9cc1 1731 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask))
1732 conf->dot11MeshHWMPmaxPREQretries =
1733 nconf->dot11MeshHWMPmaxPREQretries;
1734 if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask))
1735 conf->path_refresh_time = nconf->path_refresh_time;
1736 if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask))
1737 conf->min_discovery_timeout = nconf->min_discovery_timeout;
1738 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask))
1739 conf->dot11MeshHWMPactivePathTimeout =
1740 nconf->dot11MeshHWMPactivePathTimeout;
1741 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask))
1742 conf->dot11MeshHWMPpreqMinInterval =
1743 nconf->dot11MeshHWMPpreqMinInterval;
dca7e943
TP
1744 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask))
1745 conf->dot11MeshHWMPperrMinInterval =
1746 nconf->dot11MeshHWMPperrMinInterval;
93da9cc1 1747 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
1748 mask))
1749 conf->dot11MeshHWMPnetDiameterTraversalTime =
1750 nconf->dot11MeshHWMPnetDiameterTraversalTime;
63c5723b
RP
1751 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) {
1752 conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode;
1753 ieee80211_mesh_root_setup(ifmsh);
1754 }
16dd7267 1755 if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) {
c6133661
TP
1756 /* our current gate announcement implementation rides on root
1757 * announcements, so require this ifmsh to also be a root node
1758 * */
1759 if (nconf->dot11MeshGateAnnouncementProtocol &&
dbb912cd
CYY
1760 !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) {
1761 conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN;
c6133661
TP
1762 ieee80211_mesh_root_setup(ifmsh);
1763 }
16dd7267
JC
1764 conf->dot11MeshGateAnnouncementProtocol =
1765 nconf->dot11MeshGateAnnouncementProtocol;
1766 }
a4f606ea 1767 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask))
0507e159
JC
1768 conf->dot11MeshHWMPRannInterval =
1769 nconf->dot11MeshHWMPRannInterval;
94f90656
CYY
1770 if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask))
1771 conf->dot11MeshForwarding = nconf->dot11MeshForwarding;
55335137
AN
1772 if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) {
1773 /* our RSSI threshold implementation is supported only for
1774 * devices that report signal in dBm.
1775 */
30686bf7 1776 if (!ieee80211_hw_check(&sdata->local->hw, SIGNAL_DBM))
55335137
AN
1777 return -ENOTSUPP;
1778 conf->rssi_threshold = nconf->rssi_threshold;
1779 }
70c33eaa
AN
1780 if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) {
1781 conf->ht_opmode = nconf->ht_opmode;
1782 sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode;
1783 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT);
1784 }
ac1073a6
CYY
1785 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask))
1786 conf->dot11MeshHWMPactivePathToRootTimeout =
1787 nconf->dot11MeshHWMPactivePathToRootTimeout;
1788 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask))
1789 conf->dot11MeshHWMProotInterval =
1790 nconf->dot11MeshHWMProotInterval;
728b19e5
CYY
1791 if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask))
1792 conf->dot11MeshHWMPconfirmationInterval =
1793 nconf->dot11MeshHWMPconfirmationInterval;
3f52b7e3
MP
1794 if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) {
1795 conf->power_mode = nconf->power_mode;
1796 ieee80211_mps_local_status_update(sdata);
1797 }
2b5e1967 1798 if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask))
3f52b7e3
MP
1799 conf->dot11MeshAwakeWindowDuration =
1800 nconf->dot11MeshAwakeWindowDuration;
66de6713
CT
1801 if (_chg_mesh_attr(NL80211_MESHCONF_PLINK_TIMEOUT, mask))
1802 conf->plink_timeout = nconf->plink_timeout;
2b5e1967 1803 ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON);
93da9cc1 1804 return 0;
1805}
1806
29cbe68c
JB
1807static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev,
1808 const struct mesh_config *conf,
1809 const struct mesh_setup *setup)
1810{
1811 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1812 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
c80d545d 1813 int err;
29cbe68c 1814
c80d545d
JC
1815 memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config));
1816 err = copy_mesh_setup(ifmsh, setup);
1817 if (err)
1818 return err;
cc1d2806 1819
04ecd257
JB
1820 /* can mesh use other SMPS modes? */
1821 sdata->smps_mode = IEEE80211_SMPS_OFF;
1822 sdata->needed_rx_chains = sdata->local->rx_chains;
1823
34a3740d 1824 mutex_lock(&sdata->local->mtx);
4bf88530 1825 err = ieee80211_vif_use_channel(sdata, &setup->chandef,
55de908a 1826 IEEE80211_CHANCTX_SHARED);
34a3740d 1827 mutex_unlock(&sdata->local->mtx);
cc1d2806
JB
1828 if (err)
1829 return err;
1830
2b5e1967 1831 return ieee80211_start_mesh(sdata);
29cbe68c
JB
1832}
1833
1834static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev)
1835{
1836 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1837
1838 ieee80211_stop_mesh(sdata);
34a3740d 1839 mutex_lock(&sdata->local->mtx);
55de908a 1840 ieee80211_vif_release_channel(sdata);
34a3740d 1841 mutex_unlock(&sdata->local->mtx);
29cbe68c
JB
1842
1843 return 0;
1844}
c5dd9c2b
LCC
1845#endif
1846
9f1ba906
JM
1847static int ieee80211_change_bss(struct wiphy *wiphy,
1848 struct net_device *dev,
1849 struct bss_parameters *params)
1850{
55de908a
JB
1851 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1852 enum ieee80211_band band;
9f1ba906
JM
1853 u32 changed = 0;
1854
7ca133bc 1855 if (!sdata_dereference(sdata->u.ap.beacon, sdata))
55de908a
JB
1856 return -ENOENT;
1857
1858 band = ieee80211_get_sdata_band(sdata);
9f1ba906 1859
9f1ba906 1860 if (params->use_cts_prot >= 0) {
bda3933a 1861 sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot;
9f1ba906
JM
1862 changed |= BSS_CHANGED_ERP_CTS_PROT;
1863 }
1864 if (params->use_short_preamble >= 0) {
bda3933a 1865 sdata->vif.bss_conf.use_short_preamble =
9f1ba906
JM
1866 params->use_short_preamble;
1867 changed |= BSS_CHANGED_ERP_PREAMBLE;
1868 }
43d35343
FF
1869
1870 if (!sdata->vif.bss_conf.use_short_slot &&
55de908a 1871 band == IEEE80211_BAND_5GHZ) {
43d35343
FF
1872 sdata->vif.bss_conf.use_short_slot = true;
1873 changed |= BSS_CHANGED_ERP_SLOT;
1874 }
1875
9f1ba906 1876 if (params->use_short_slot_time >= 0) {
bda3933a 1877 sdata->vif.bss_conf.use_short_slot =
9f1ba906
JM
1878 params->use_short_slot_time;
1879 changed |= BSS_CHANGED_ERP_SLOT;
1880 }
1881
90c97a04 1882 if (params->basic_rates) {
2103dec1
SW
1883 ieee80211_parse_bitrates(&sdata->vif.bss_conf.chandef,
1884 wiphy->bands[band],
1885 params->basic_rates,
1886 params->basic_rates_len,
1887 &sdata->vif.bss_conf.basic_rates);
90c97a04
JM
1888 changed |= BSS_CHANGED_BASIC_RATES;
1889 }
1890
7b7b5e56
FF
1891 if (params->ap_isolate >= 0) {
1892 if (params->ap_isolate)
1893 sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1894 else
1895 sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1896 }
1897
80d7e403
HS
1898 if (params->ht_opmode >= 0) {
1899 sdata->vif.bss_conf.ht_operation_mode =
1900 (u16) params->ht_opmode;
1901 changed |= BSS_CHANGED_HT;
1902 }
1903
339afbf4 1904 if (params->p2p_ctwindow >= 0) {
67baf663
JD
1905 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1906 ~IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
1907 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1908 params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
339afbf4
JB
1909 changed |= BSS_CHANGED_P2P_PS;
1910 }
1911
67baf663
JD
1912 if (params->p2p_opp_ps > 0) {
1913 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1914 IEEE80211_P2P_OPPPS_ENABLE_BIT;
1915 changed |= BSS_CHANGED_P2P_PS;
1916 } else if (params->p2p_opp_ps == 0) {
1917 sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1918 ~IEEE80211_P2P_OPPPS_ENABLE_BIT;
339afbf4
JB
1919 changed |= BSS_CHANGED_P2P_PS;
1920 }
1921
9f1ba906
JM
1922 ieee80211_bss_info_change_notify(sdata, changed);
1923
1924 return 0;
1925}
1926
31888487 1927static int ieee80211_set_txq_params(struct wiphy *wiphy,
f70f01c2 1928 struct net_device *dev,
31888487
JM
1929 struct ieee80211_txq_params *params)
1930{
1931 struct ieee80211_local *local = wiphy_priv(wiphy);
f6f3def3 1932 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
31888487
JM
1933 struct ieee80211_tx_queue_params p;
1934
1935 if (!local->ops->conf_tx)
1936 return -EOPNOTSUPP;
1937
54bcbc69
JB
1938 if (local->hw.queues < IEEE80211_NUM_ACS)
1939 return -EOPNOTSUPP;
1940
31888487
JM
1941 memset(&p, 0, sizeof(p));
1942 p.aifs = params->aifs;
1943 p.cw_max = params->cwmax;
1944 p.cw_min = params->cwmin;
1945 p.txop = params->txop;
ab13315a
KV
1946
1947 /*
1948 * Setting tx queue params disables u-apsd because it's only
1949 * called in master mode.
1950 */
1951 p.uapsd = false;
1952
a3304b0a
JB
1953 sdata->tx_conf[params->ac] = p;
1954 if (drv_conf_tx(local, sdata, params->ac, &p)) {
0fb9a9ec 1955 wiphy_debug(local->hw.wiphy,
a3304b0a
JB
1956 "failed to set TX queue parameters for AC %d\n",
1957 params->ac);
31888487
JM
1958 return -EINVAL;
1959 }
1960
7d25745d
JB
1961 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS);
1962
31888487
JM
1963 return 0;
1964}
1965
665af4fc 1966#ifdef CONFIG_PM
ff1b6e69
JB
1967static int ieee80211_suspend(struct wiphy *wiphy,
1968 struct cfg80211_wowlan *wowlan)
665af4fc 1969{
eecc4800 1970 return __ieee80211_suspend(wiphy_priv(wiphy), wowlan);
665af4fc
BC
1971}
1972
1973static int ieee80211_resume(struct wiphy *wiphy)
1974{
1975 return __ieee80211_resume(wiphy_priv(wiphy));
1976}
1977#else
1978#define ieee80211_suspend NULL
1979#define ieee80211_resume NULL
1980#endif
1981
2a519311 1982static int ieee80211_scan(struct wiphy *wiphy,
2a519311
JB
1983 struct cfg80211_scan_request *req)
1984{
fd014284
JB
1985 struct ieee80211_sub_if_data *sdata;
1986
1987 sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev);
2a519311 1988
2ca27bcf
JB
1989 switch (ieee80211_vif_type_p2p(&sdata->vif)) {
1990 case NL80211_IFTYPE_STATION:
1991 case NL80211_IFTYPE_ADHOC:
1992 case NL80211_IFTYPE_MESH_POINT:
1993 case NL80211_IFTYPE_P2P_CLIENT:
f142c6b9 1994 case NL80211_IFTYPE_P2P_DEVICE:
2ca27bcf
JB
1995 break;
1996 case NL80211_IFTYPE_P2P_GO:
1997 if (sdata->local->ops->hw_scan)
1998 break;
e9d7732e
JB
1999 /*
2000 * FIXME: implement NoA while scanning in software,
2001 * for now fall through to allow scanning only when
2002 * beaconing hasn't been configured yet
2003 */
2ca27bcf 2004 case NL80211_IFTYPE_AP:
5c95b940
AQ
2005 /*
2006 * If the scan has been forced (and the driver supports
2007 * forcing), don't care about being beaconing already.
2008 * This will create problems to the attached stations (e.g. all
2009 * the frames sent while scanning on other channel will be
2010 * lost)
2011 */
2012 if (sdata->u.ap.beacon &&
2013 (!(wiphy->features & NL80211_FEATURE_AP_SCAN) ||
2014 !(req->flags & NL80211_SCAN_FLAG_AP)))
2ca27bcf
JB
2015 return -EOPNOTSUPP;
2016 break;
2017 default:
2018 return -EOPNOTSUPP;
2019 }
2a519311
JB
2020
2021 return ieee80211_request_scan(sdata, req);
2022}
2023
79f460ca
LC
2024static int
2025ieee80211_sched_scan_start(struct wiphy *wiphy,
2026 struct net_device *dev,
2027 struct cfg80211_sched_scan_request *req)
2028{
2029 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2030
2031 if (!sdata->local->ops->sched_scan_start)
2032 return -EOPNOTSUPP;
2033
2034 return ieee80211_request_sched_scan_start(sdata, req);
2035}
2036
2037static int
85a9994a 2038ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev)
79f460ca
LC
2039{
2040 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2041
2042 if (!sdata->local->ops->sched_scan_stop)
2043 return -EOPNOTSUPP;
2044
85a9994a 2045 return ieee80211_request_sched_scan_stop(sdata);
79f460ca
LC
2046}
2047
636a5d36
JM
2048static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev,
2049 struct cfg80211_auth_request *req)
2050{
77fdaa12 2051 return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req);
636a5d36
JM
2052}
2053
2054static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev,
2055 struct cfg80211_assoc_request *req)
2056{
77fdaa12 2057 return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
636a5d36
JM
2058}
2059
2060static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev,
63c9c5e7 2061 struct cfg80211_deauth_request *req)
636a5d36 2062{
63c9c5e7 2063 return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req);
636a5d36
JM
2064}
2065
2066static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev,
63c9c5e7 2067 struct cfg80211_disassoc_request *req)
636a5d36 2068{
63c9c5e7 2069 return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
636a5d36
JM
2070}
2071
af8cdcd8
JB
2072static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
2073 struct cfg80211_ibss_params *params)
2074{
55de908a 2075 return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params);
af8cdcd8
JB
2076}
2077
2078static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
2079{
55de908a 2080 return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev));
af8cdcd8
JB
2081}
2082
239281f8
RL
2083static int ieee80211_join_ocb(struct wiphy *wiphy, struct net_device *dev,
2084 struct ocb_setup *setup)
2085{
2086 return ieee80211_ocb_join(IEEE80211_DEV_TO_SUB_IF(dev), setup);
2087}
2088
2089static int ieee80211_leave_ocb(struct wiphy *wiphy, struct net_device *dev)
2090{
2091 return ieee80211_ocb_leave(IEEE80211_DEV_TO_SUB_IF(dev));
2092}
2093
391e53e3
AQ
2094static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev,
2095 int rate[IEEE80211_NUM_BANDS])
2096{
2097 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2098
9887dbf5
CD
2099 memcpy(sdata->vif.bss_conf.mcast_rate, rate,
2100 sizeof(int) * IEEE80211_NUM_BANDS);
391e53e3
AQ
2101
2102 return 0;
2103}
2104
b9a5f8ca
JM
2105static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
2106{
2107 struct ieee80211_local *local = wiphy_priv(wiphy);
24487981 2108 int err;
b9a5f8ca 2109
f23a4780 2110 if (changed & WIPHY_PARAM_FRAG_THRESHOLD) {
17c18bf8
JB
2111 ieee80211_check_fast_xmit_all(local);
2112
f23a4780
AN
2113 err = drv_set_frag_threshold(local, wiphy->frag_threshold);
2114
17c18bf8
JB
2115 if (err) {
2116 ieee80211_check_fast_xmit_all(local);
f23a4780 2117 return err;
17c18bf8 2118 }
f23a4780
AN
2119 }
2120
a4bcaf55
LB
2121 if ((changed & WIPHY_PARAM_COVERAGE_CLASS) ||
2122 (changed & WIPHY_PARAM_DYN_ACK)) {
2123 s16 coverage_class;
2124
2125 coverage_class = changed & WIPHY_PARAM_COVERAGE_CLASS ?
2126 wiphy->coverage_class : -1;
2127 err = drv_set_coverage_class(local, coverage_class);
310bc676
LT
2128
2129 if (err)
2130 return err;
2131 }
2132
b9a5f8ca 2133 if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
24487981 2134 err = drv_set_rts_threshold(local, wiphy->rts_threshold);
b9a5f8ca 2135
24487981
JB
2136 if (err)
2137 return err;
b9a5f8ca
JM
2138 }
2139
8bc83c24
JB
2140 if (changed & WIPHY_PARAM_RETRY_SHORT) {
2141 if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY)
2142 return -EINVAL;
b9a5f8ca 2143 local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
8bc83c24
JB
2144 }
2145 if (changed & WIPHY_PARAM_RETRY_LONG) {
2146 if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY)
2147 return -EINVAL;
b9a5f8ca 2148 local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
8bc83c24 2149 }
b9a5f8ca
JM
2150 if (changed &
2151 (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG))
2152 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS);
2153
2154 return 0;
2155}
2156
7643a2c3 2157static int ieee80211_set_tx_power(struct wiphy *wiphy,
c8442118 2158 struct wireless_dev *wdev,
fa61cf70 2159 enum nl80211_tx_power_setting type, int mbm)
7643a2c3
JB
2160{
2161 struct ieee80211_local *local = wiphy_priv(wiphy);
1ea6f9c0 2162 struct ieee80211_sub_if_data *sdata;
db82d8a9
LB
2163 enum nl80211_tx_power_setting txp_type = type;
2164 bool update_txp_type = false;
7643a2c3 2165
1ea6f9c0
JB
2166 if (wdev) {
2167 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2168
2169 switch (type) {
2170 case NL80211_TX_POWER_AUTOMATIC:
2171 sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
db82d8a9 2172 txp_type = NL80211_TX_POWER_LIMITED;
1ea6f9c0
JB
2173 break;
2174 case NL80211_TX_POWER_LIMITED:
2175 case NL80211_TX_POWER_FIXED:
2176 if (mbm < 0 || (mbm % 100))
2177 return -EOPNOTSUPP;
2178 sdata->user_power_level = MBM_TO_DBM(mbm);
2179 break;
2180 }
2181
db82d8a9
LB
2182 if (txp_type != sdata->vif.bss_conf.txpower_type) {
2183 update_txp_type = true;
2184 sdata->vif.bss_conf.txpower_type = txp_type;
2185 }
2186
2187 ieee80211_recalc_txpower(sdata, update_txp_type);
1ea6f9c0
JB
2188
2189 return 0;
2190 }
55de908a 2191
7643a2c3 2192 switch (type) {
fa61cf70 2193 case NL80211_TX_POWER_AUTOMATIC:
1ea6f9c0 2194 local->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
db82d8a9 2195 txp_type = NL80211_TX_POWER_LIMITED;
7643a2c3 2196 break;
fa61cf70 2197 case NL80211_TX_POWER_LIMITED:
fa61cf70
JO
2198 case NL80211_TX_POWER_FIXED:
2199 if (mbm < 0 || (mbm % 100))
2200 return -EOPNOTSUPP;
fa61cf70 2201 local->user_power_level = MBM_TO_DBM(mbm);
7643a2c3 2202 break;
7643a2c3
JB
2203 }
2204
1ea6f9c0 2205 mutex_lock(&local->iflist_mtx);
db82d8a9 2206 list_for_each_entry(sdata, &local->interfaces, list) {
1ea6f9c0 2207 sdata->user_power_level = local->user_power_level;
db82d8a9
LB
2208 if (txp_type != sdata->vif.bss_conf.txpower_type)
2209 update_txp_type = true;
2210 sdata->vif.bss_conf.txpower_type = txp_type;
2211 }
1ea6f9c0 2212 list_for_each_entry(sdata, &local->interfaces, list)
db82d8a9 2213 ieee80211_recalc_txpower(sdata, update_txp_type);
1ea6f9c0 2214 mutex_unlock(&local->iflist_mtx);
7643a2c3
JB
2215
2216 return 0;
2217}
2218
c8442118
JB
2219static int ieee80211_get_tx_power(struct wiphy *wiphy,
2220 struct wireless_dev *wdev,
2221 int *dbm)
7643a2c3
JB
2222{
2223 struct ieee80211_local *local = wiphy_priv(wiphy);
1ea6f9c0 2224 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
7643a2c3 2225
5b3dc42b
FF
2226 if (local->ops->get_txpower)
2227 return drv_get_txpower(local, sdata, dbm);
2228
1ea6f9c0
JB
2229 if (!local->use_chanctx)
2230 *dbm = local->hw.conf.power_level;
2231 else
2232 *dbm = sdata->vif.bss_conf.txpower;
7643a2c3 2233
7643a2c3
JB
2234 return 0;
2235}
2236
ab737a4f 2237static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev,
388ac775 2238 const u8 *addr)
ab737a4f
JB
2239{
2240 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2241
2242 memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN);
2243
2244 return 0;
2245}
2246
1f87f7d3
JB
2247static void ieee80211_rfkill_poll(struct wiphy *wiphy)
2248{
2249 struct ieee80211_local *local = wiphy_priv(wiphy);
2250
2251 drv_rfkill_poll(local);
2252}
2253
aff89a9b 2254#ifdef CONFIG_NL80211_TESTMODE
fc73f11f
DS
2255static int ieee80211_testmode_cmd(struct wiphy *wiphy,
2256 struct wireless_dev *wdev,
2257 void *data, int len)
aff89a9b
JB
2258{
2259 struct ieee80211_local *local = wiphy_priv(wiphy);
52981cd7 2260 struct ieee80211_vif *vif = NULL;
aff89a9b
JB
2261
2262 if (!local->ops->testmode_cmd)
2263 return -EOPNOTSUPP;
2264
52981cd7
DS
2265 if (wdev) {
2266 struct ieee80211_sub_if_data *sdata;
2267
2268 sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2269 if (sdata->flags & IEEE80211_SDATA_IN_DRIVER)
2270 vif = &sdata->vif;
2271 }
2272
2273 return local->ops->testmode_cmd(&local->hw, vif, data, len);
aff89a9b 2274}
71063f0e
WYG
2275
2276static int ieee80211_testmode_dump(struct wiphy *wiphy,
2277 struct sk_buff *skb,
2278 struct netlink_callback *cb,
2279 void *data, int len)
2280{
2281 struct ieee80211_local *local = wiphy_priv(wiphy);
2282
2283 if (!local->ops->testmode_dump)
2284 return -EOPNOTSUPP;
2285
2286 return local->ops->testmode_dump(&local->hw, skb, cb, data, len);
2287}
aff89a9b
JB
2288#endif
2289
687da132
EG
2290int __ieee80211_request_smps_ap(struct ieee80211_sub_if_data *sdata,
2291 enum ieee80211_smps_mode smps_mode)
2292{
2293 struct sta_info *sta;
2294 enum ieee80211_smps_mode old_req;
687da132
EG
2295
2296 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP))
2297 return -EINVAL;
2298
2299 if (sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2300 return 0;
2301
2302 old_req = sdata->u.ap.req_smps;
2303 sdata->u.ap.req_smps = smps_mode;
2304
2305 /* AUTOMATIC doesn't mean much for AP - don't allow it */
2306 if (old_req == smps_mode ||
2307 smps_mode == IEEE80211_SMPS_AUTOMATIC)
2308 return 0;
2309
2310 /* If no associated stations, there's no need to do anything */
2311 if (!atomic_read(&sdata->u.ap.num_mcast_sta)) {
2312 sdata->smps_mode = smps_mode;
2313 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2314 return 0;
2315 }
2316
2317 ht_dbg(sdata,
6a8b4adb 2318 "SMPS %d requested in AP mode, sending Action frame to %d stations\n",
687da132
EG
2319 smps_mode, atomic_read(&sdata->u.ap.num_mcast_sta));
2320
2321 mutex_lock(&sdata->local->sta_mtx);
7d9bb2f0
JB
2322 list_for_each_entry(sta, &sdata->local->sta_list, list) {
2323 /*
2324 * Only stations associated to our AP and
2325 * associated VLANs
2326 */
2327 if (sta->sdata->bss != &sdata->u.ap)
2328 continue;
687da132 2329
7d9bb2f0
JB
2330 /* This station doesn't support MIMO - skip it */
2331 if (sta_info_tx_streams(sta) == 1)
2332 continue;
687da132 2333
7d9bb2f0
JB
2334 /*
2335 * Don't wake up a STA just to send the action frame
2336 * unless we are getting more restrictive.
2337 */
2338 if (test_sta_flag(sta, WLAN_STA_PS_STA) &&
2339 !ieee80211_smps_is_restrictive(sta->known_smps_mode,
2340 smps_mode)) {
2341 ht_dbg(sdata, "Won't send SMPS to sleeping STA %pM\n",
2342 sta->sta.addr);
2343 continue;
2344 }
687da132 2345
7d9bb2f0
JB
2346 /*
2347 * If the STA is not authorized, wait until it gets
2348 * authorized and the action frame will be sent then.
2349 */
2350 if (!test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2351 continue;
687da132 2352
7d9bb2f0
JB
2353 ht_dbg(sdata, "Sending SMPS to %pM\n", sta->sta.addr);
2354 ieee80211_send_smps_action(sdata, smps_mode, sta->sta.addr,
2355 sdata->vif.bss_conf.bssid);
687da132
EG
2356 }
2357 mutex_unlock(&sdata->local->sta_mtx);
2358
2359 sdata->smps_mode = smps_mode;
2360 ieee80211_queue_work(&sdata->local->hw, &sdata->recalc_smps);
2361
2362 return 0;
2363}
2364
2365int __ieee80211_request_smps_mgd(struct ieee80211_sub_if_data *sdata,
2366 enum ieee80211_smps_mode smps_mode)
0f78231b
JB
2367{
2368 const u8 *ap;
2369 enum ieee80211_smps_mode old_req;
2370 int err;
d51c2ea3
AN
2371 struct sta_info *sta;
2372 bool tdls_peer_found = false;
0f78231b 2373
8d61ffa5 2374 lockdep_assert_held(&sdata->wdev.mtx);
243e6df4 2375
687da132
EG
2376 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION))
2377 return -EINVAL;
2378
0f78231b
JB
2379 old_req = sdata->u.mgd.req_smps;
2380 sdata->u.mgd.req_smps = smps_mode;
2381
2382 if (old_req == smps_mode &&
2383 smps_mode != IEEE80211_SMPS_AUTOMATIC)
2384 return 0;
2385
2386 /*
2387 * If not associated, or current association is not an HT
04ecd257
JB
2388 * association, there's no need to do anything, just store
2389 * the new value until we associate.
0f78231b
JB
2390 */
2391 if (!sdata->u.mgd.associated ||
4bf88530 2392 sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
0f78231b 2393 return 0;
0f78231b 2394
0c1ad2ca 2395 ap = sdata->u.mgd.associated->bssid;
0f78231b 2396
d51c2ea3
AN
2397 rcu_read_lock();
2398 list_for_each_entry_rcu(sta, &sdata->local->sta_list, list) {
2399 if (!sta->sta.tdls || sta->sdata != sdata || !sta->uploaded ||
2400 !test_sta_flag(sta, WLAN_STA_AUTHORIZED))
2401 continue;
2402
2403 tdls_peer_found = true;
2404 break;
2405 }
2406 rcu_read_unlock();
2407
0f78231b 2408 if (smps_mode == IEEE80211_SMPS_AUTOMATIC) {
d51c2ea3 2409 if (tdls_peer_found || !sdata->u.mgd.powersave)
0f78231b 2410 smps_mode = IEEE80211_SMPS_OFF;
d51c2ea3
AN
2411 else
2412 smps_mode = IEEE80211_SMPS_DYNAMIC;
0f78231b
JB
2413 }
2414
2415 /* send SM PS frame to AP */
2416 err = ieee80211_send_smps_action(sdata, smps_mode,
2417 ap, ap);
2418 if (err)
2419 sdata->u.mgd.req_smps = old_req;
d51c2ea3
AN
2420 else if (smps_mode != IEEE80211_SMPS_OFF && tdls_peer_found)
2421 ieee80211_teardown_tdls_peers(sdata);
0f78231b
JB
2422
2423 return err;
2424}
2425
bc92afd9
JB
2426static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev,
2427 bool enabled, int timeout)
2428{
2429 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2430 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
bc92afd9 2431
2d3db210 2432 if (sdata->vif.type != NL80211_IFTYPE_STATION)
e5de30c9
BP
2433 return -EOPNOTSUPP;
2434
30686bf7 2435 if (!ieee80211_hw_check(&local->hw, SUPPORTS_PS))
bc92afd9
JB
2436 return -EOPNOTSUPP;
2437
2438 if (enabled == sdata->u.mgd.powersave &&
ff616381 2439 timeout == local->dynamic_ps_forced_timeout)
bc92afd9
JB
2440 return 0;
2441
2442 sdata->u.mgd.powersave = enabled;
ff616381 2443 local->dynamic_ps_forced_timeout = timeout;
bc92afd9 2444
0f78231b 2445 /* no change, but if automatic follow powersave */
ed405be5 2446 sdata_lock(sdata);
687da132 2447 __ieee80211_request_smps_mgd(sdata, sdata->u.mgd.req_smps);
ed405be5 2448 sdata_unlock(sdata);
0f78231b 2449
30686bf7 2450 if (ieee80211_hw_check(&local->hw, SUPPORTS_DYNAMIC_PS))
bc92afd9
JB
2451 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2452
2453 ieee80211_recalc_ps(local, -1);
ab095877 2454 ieee80211_recalc_ps_vif(sdata);
bc92afd9
JB
2455
2456 return 0;
2457}
2458
a97c13c3
JO
2459static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy,
2460 struct net_device *dev,
2461 s32 rssi_thold, u32 rssi_hyst)
2462{
2463 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
a97c13c3
JO
2464 struct ieee80211_vif *vif = &sdata->vif;
2465 struct ieee80211_bss_conf *bss_conf = &vif->bss_conf;
2466
a97c13c3
JO
2467 if (rssi_thold == bss_conf->cqm_rssi_thold &&
2468 rssi_hyst == bss_conf->cqm_rssi_hyst)
2469 return 0;
2470
ef9be10c
JB
2471 if (sdata->vif.driver_flags & IEEE80211_VIF_BEACON_FILTER &&
2472 !(sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI))
2473 return -EOPNOTSUPP;
2474
a97c13c3
JO
2475 bss_conf->cqm_rssi_thold = rssi_thold;
2476 bss_conf->cqm_rssi_hyst = rssi_hyst;
2477
2478 /* tell the driver upon association, unless already associated */
ea086359
JB
2479 if (sdata->u.mgd.associated &&
2480 sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI)
a97c13c3
JO
2481 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM);
2482
2483 return 0;
2484}
2485
9930380f
JB
2486static int ieee80211_set_bitrate_mask(struct wiphy *wiphy,
2487 struct net_device *dev,
2488 const u8 *addr,
2489 const struct cfg80211_bitrate_mask *mask)
2490{
2491 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2492 struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
bdbfd6b5 2493 int i, ret;
2c7e6bc9 2494
554a43d5
EP
2495 if (!ieee80211_sdata_running(sdata))
2496 return -ENETDOWN;
2497
30686bf7 2498 if (ieee80211_hw_check(&local->hw, HAS_RATE_CONTROL)) {
bdbfd6b5
SM
2499 ret = drv_set_bitrate_mask(local, sdata, mask);
2500 if (ret)
2501 return ret;
2502 }
9930380f 2503
19468413 2504 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
2ffbe6d3
FF
2505 struct ieee80211_supported_band *sband = wiphy->bands[i];
2506 int j;
2507
37eb0b16 2508 sdata->rc_rateidx_mask[i] = mask->control[i].legacy;
d1e33e65
JD
2509 memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].ht_mcs,
2510 sizeof(mask->control[i].ht_mcs));
b119ad6e
LB
2511 memcpy(sdata->rc_rateidx_vht_mcs_mask[i],
2512 mask->control[i].vht_mcs,
2513 sizeof(mask->control[i].vht_mcs));
2ffbe6d3
FF
2514
2515 sdata->rc_has_mcs_mask[i] = false;
b119ad6e 2516 sdata->rc_has_vht_mcs_mask[i] = false;
2ffbe6d3
FF
2517 if (!sband)
2518 continue;
2519
b119ad6e 2520 for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++) {
2df1b131 2521 if (~sdata->rc_rateidx_mcs_mask[i][j]) {
2ffbe6d3 2522 sdata->rc_has_mcs_mask[i] = true;
2df1b131
JB
2523 break;
2524 }
2525 }
b119ad6e 2526
2df1b131
JB
2527 for (j = 0; j < NL80211_VHT_NSS_MAX; j++) {
2528 if (~sdata->rc_rateidx_vht_mcs_mask[i][j]) {
b119ad6e 2529 sdata->rc_has_vht_mcs_mask[i] = true;
2ffbe6d3 2530 break;
2df1b131 2531 }
b119ad6e 2532 }
19468413 2533 }
9930380f 2534
37eb0b16 2535 return 0;
9930380f
JB
2536}
2537
eaa336b0
EP
2538static bool ieee80211_coalesce_started_roc(struct ieee80211_local *local,
2539 struct ieee80211_roc_work *new_roc,
2540 struct ieee80211_roc_work *cur_roc)
2541{
252ec2b3
JB
2542 unsigned long now = jiffies;
2543 unsigned long remaining = cur_roc->hw_start_time +
2544 msecs_to_jiffies(cur_roc->duration) -
2545 now;
eaa336b0
EP
2546
2547 if (WARN_ON(!cur_roc->started || !cur_roc->hw_begun))
2548 return false;
2549
252ec2b3
JB
2550 /* if it doesn't fit entirely, schedule a new one */
2551 if (new_roc->duration > jiffies_to_msecs(remaining))
eaa336b0
EP
2552 return false;
2553
2554 ieee80211_handle_roc_started(new_roc);
2555
252ec2b3
JB
2556 /* add to dependents so we send the expired event properly */
2557 list_add_tail(&new_roc->list, &cur_roc->dependents);
eaa336b0
EP
2558 return true;
2559}
2560
3b79af97
JB
2561static u64 ieee80211_mgmt_tx_cookie(struct ieee80211_local *local)
2562{
2563 lockdep_assert_held(&local->mtx);
2564
2565 local->roc_cookie_counter++;
2566
2567 /* wow, you wrapped 64 bits ... more likely a bug */
2568 if (WARN_ON(local->roc_cookie_counter == 0))
2569 local->roc_cookie_counter++;
2570
2571 return local->roc_cookie_counter;
2572}
2573
2eb278e0
JB
2574static int ieee80211_start_roc_work(struct ieee80211_local *local,
2575 struct ieee80211_sub_if_data *sdata,
2576 struct ieee80211_channel *channel,
2eb278e0 2577 unsigned int duration, u64 *cookie,
d339d5ca
IP
2578 struct sk_buff *txskb,
2579 enum ieee80211_roc_type type)
2eb278e0
JB
2580{
2581 struct ieee80211_roc_work *roc, *tmp;
2582 bool queued = false;
21f83589 2583 int ret;
21f83589
JB
2584
2585 lockdep_assert_held(&local->mtx);
2586
fe57d9f5
JB
2587 if (local->use_chanctx && !local->ops->remain_on_channel)
2588 return -EOPNOTSUPP;
2589
2eb278e0
JB
2590 roc = kzalloc(sizeof(*roc), GFP_KERNEL);
2591 if (!roc)
2592 return -ENOMEM;
2593
2fae062e
IP
2594 /*
2595 * If the duration is zero, then the driver
2596 * wouldn't actually do anything. Set it to
2597 * 10 for now.
2598 *
2599 * TODO: cancel the off-channel operation
2600 * when we get the SKB's TX status and
2601 * the wait time was zero before.
2602 */
2603 if (!duration)
2604 duration = 10;
2605
2eb278e0 2606 roc->chan = channel;
2eb278e0
JB
2607 roc->duration = duration;
2608 roc->req_duration = duration;
2609 roc->frame = txskb;
d339d5ca 2610 roc->type = type;
2eb278e0
JB
2611 roc->sdata = sdata;
2612 INIT_DELAYED_WORK(&roc->work, ieee80211_sw_roc_work);
2613 INIT_LIST_HEAD(&roc->dependents);
2614
2f617435
EP
2615 /*
2616 * cookie is either the roc cookie (for normal roc)
2617 * or the SKB (for mgmt TX)
2618 */
2619 if (!txskb) {
3b79af97 2620 roc->cookie = ieee80211_mgmt_tx_cookie(local);
2f617435
EP
2621 *cookie = roc->cookie;
2622 } else {
3b79af97 2623 roc->mgmt_tx_cookie = *cookie;
2f617435
EP
2624 }
2625
2eb278e0 2626 /* if there's one pending or we're scanning, queue this one */
164eb02d 2627 if (!list_empty(&local->roc_list) ||
5cbc95a7 2628 local->scanning || ieee80211_is_radar_required(local))
2eb278e0
JB
2629 goto out_check_combine;
2630
2631 /* if not HW assist, just queue & schedule work */
2632 if (!local->ops->remain_on_channel) {
2633 ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);
2634 goto out_queue;
2635 }
2636
2637 /* otherwise actually kick it off here (for error handling) */
2638
d339d5ca 2639 ret = drv_remain_on_channel(local, sdata, channel, duration, type);
21f83589 2640 if (ret) {
2eb278e0
JB
2641 kfree(roc);
2642 return ret;
21f83589
JB
2643 }
2644
2eb278e0
JB
2645 roc->started = true;
2646 goto out_queue;
2647
2648 out_check_combine:
2649 list_for_each_entry(tmp, &local->roc_list, list) {
42d97a59 2650 if (tmp->chan != channel || tmp->sdata != sdata)
2eb278e0
JB
2651 continue;
2652
2653 /*
2654 * Extend this ROC if possible:
2655 *
2656 * If it hasn't started yet, just increase the duration
2657 * and add the new one to the list of dependents.
d339d5ca
IP
2658 * If the type of the new ROC has higher priority, modify the
2659 * type of the previous one to match that of the new one.
2eb278e0
JB
2660 */
2661 if (!tmp->started) {
2662 list_add_tail(&roc->list, &tmp->dependents);
2663 tmp->duration = max(tmp->duration, roc->duration);
d339d5ca 2664 tmp->type = max(tmp->type, roc->type);
2eb278e0
JB
2665 queued = true;
2666 break;
2667 }
2668
2669 /* If it has already started, it's more difficult ... */
2670 if (local->ops->remain_on_channel) {
2eb278e0
JB
2671 /*
2672 * In the offloaded ROC case, if it hasn't begun, add
2673 * this new one to the dependent list to be handled
d339d5ca 2674 * when the master one begins. If it has begun,
252ec2b3
JB
2675 * check if it fits entirely within the existing one,
2676 * in which case it will just be dependent as well.
2677 * Otherwise, schedule it by itself.
2eb278e0
JB
2678 */
2679 if (!tmp->hw_begun) {
2680 list_add_tail(&roc->list, &tmp->dependents);
2681 queued = true;
2682 break;
2683 }
2684
eaa336b0 2685 if (ieee80211_coalesce_started_roc(local, roc, tmp))
2eb278e0 2686 queued = true;
2eb278e0
JB
2687 } else if (del_timer_sync(&tmp->work.timer)) {
2688 unsigned long new_end;
2689
2690 /*
2691 * In the software ROC case, cancel the timer, if
2692 * that fails then the finish work is already
2693 * queued/pending and thus we queue the new ROC
2694 * normally, if that succeeds then we can extend
2695 * the timer duration and TX the frame (if any.)
2696 */
2697
2698 list_add_tail(&roc->list, &tmp->dependents);
2699 queued = true;
2700
2701 new_end = jiffies + msecs_to_jiffies(roc->duration);
2702
2703 /* ok, it was started & we canceled timer */
2704 if (time_after(new_end, tmp->work.timer.expires))
2705 mod_timer(&tmp->work.timer, new_end);
2706 else
2707 add_timer(&tmp->work.timer);
2708
2709 ieee80211_handle_roc_started(roc);
2710 }
2711 break;
2712 }
2713
2714 out_queue:
2715 if (!queued)
2716 list_add_tail(&roc->list, &local->roc_list);
2717
2eb278e0 2718 return 0;
21f83589
JB
2719}
2720
b8bc4b0a 2721static int ieee80211_remain_on_channel(struct wiphy *wiphy,
71bbc994 2722 struct wireless_dev *wdev,
b8bc4b0a 2723 struct ieee80211_channel *chan,
b8bc4b0a
JB
2724 unsigned int duration,
2725 u64 *cookie)
2726{
71bbc994 2727 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
21f83589 2728 struct ieee80211_local *local = sdata->local;
2eb278e0 2729 int ret;
21f83589 2730
2eb278e0 2731 mutex_lock(&local->mtx);
42d97a59 2732 ret = ieee80211_start_roc_work(local, sdata, chan,
d339d5ca
IP
2733 duration, cookie, NULL,
2734 IEEE80211_ROC_TYPE_NORMAL);
2eb278e0 2735 mutex_unlock(&local->mtx);
b8bc4b0a 2736
2eb278e0 2737 return ret;
b8bc4b0a
JB
2738}
2739
2eb278e0
JB
2740static int ieee80211_cancel_roc(struct ieee80211_local *local,
2741 u64 cookie, bool mgmt_tx)
21f83589 2742{
2eb278e0 2743 struct ieee80211_roc_work *roc, *tmp, *found = NULL;
21f83589
JB
2744 int ret;
2745
2eb278e0
JB
2746 mutex_lock(&local->mtx);
2747 list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
e979e33c
JB
2748 struct ieee80211_roc_work *dep, *tmp2;
2749
2750 list_for_each_entry_safe(dep, tmp2, &roc->dependents, list) {
50febf6a 2751 if (!mgmt_tx && dep->cookie != cookie)
e979e33c
JB
2752 continue;
2753 else if (mgmt_tx && dep->mgmt_tx_cookie != cookie)
2754 continue;
2755 /* found dependent item -- just remove it */
2756 list_del(&dep->list);
2757 mutex_unlock(&local->mtx);
2758
3fbd45ca 2759 ieee80211_roc_notify_destroy(dep, true);
e979e33c
JB
2760 return 0;
2761 }
2762
50febf6a 2763 if (!mgmt_tx && roc->cookie != cookie)
2eb278e0
JB
2764 continue;
2765 else if (mgmt_tx && roc->mgmt_tx_cookie != cookie)
2766 continue;
21f83589 2767
2eb278e0
JB
2768 found = roc;
2769 break;
2770 }
21f83589 2771
2eb278e0
JB
2772 if (!found) {
2773 mutex_unlock(&local->mtx);
2774 return -ENOENT;
2775 }
21f83589 2776
e979e33c
JB
2777 /*
2778 * We found the item to cancel, so do that. Note that it
2779 * may have dependents, which we also cancel (and send
2780 * the expired signal for.) Not doing so would be quite
2781 * tricky here, but we may need to fix it later.
2782 */
2783
2eb278e0
JB
2784 if (local->ops->remain_on_channel) {
2785 if (found->started) {
2786 ret = drv_cancel_remain_on_channel(local);
2787 if (WARN_ON_ONCE(ret)) {
2788 mutex_unlock(&local->mtx);
2789 return ret;
2790 }
2791 }
21f83589 2792
2eb278e0 2793 list_del(&found->list);
21f83589 2794
0f6b3f59
JB
2795 if (found->started)
2796 ieee80211_start_next_roc(local);
2eb278e0 2797 mutex_unlock(&local->mtx);
21f83589 2798
3fbd45ca 2799 ieee80211_roc_notify_destroy(found, true);
2eb278e0
JB
2800 } else {
2801 /* work may be pending so use it all the time */
2802 found->abort = true;
2803 ieee80211_queue_delayed_work(&local->hw, &found->work, 0);
21f83589 2804
21f83589
JB
2805 mutex_unlock(&local->mtx);
2806
2eb278e0
JB
2807 /* work will clean up etc */
2808 flush_delayed_work(&found->work);
3fbd45ca
JB
2809 WARN_ON(!found->to_be_freed);
2810 kfree(found);
21f83589 2811 }
b8bc4b0a 2812
2eb278e0 2813 return 0;
b8bc4b0a
JB
2814}
2815
2eb278e0 2816static int ieee80211_cancel_remain_on_channel(struct wiphy *wiphy,
71bbc994 2817 struct wireless_dev *wdev,
2eb278e0 2818 u64 cookie)
f30221e4 2819{
71bbc994 2820 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2eb278e0 2821 struct ieee80211_local *local = sdata->local;
f30221e4 2822
2eb278e0 2823 return ieee80211_cancel_roc(local, cookie, false);
f30221e4
JB
2824}
2825
164eb02d
SW
2826static int ieee80211_start_radar_detection(struct wiphy *wiphy,
2827 struct net_device *dev,
31559f35
JD
2828 struct cfg80211_chan_def *chandef,
2829 u32 cac_time_ms)
164eb02d
SW
2830{
2831 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2832 struct ieee80211_local *local = sdata->local;
164eb02d
SW
2833 int err;
2834
34a3740d
JB
2835 mutex_lock(&local->mtx);
2836 if (!list_empty(&local->roc_list) || local->scanning) {
2837 err = -EBUSY;
2838 goto out_unlock;
2839 }
164eb02d
SW
2840
2841 /* whatever, but channel contexts should not complain about that one */
2842 sdata->smps_mode = IEEE80211_SMPS_OFF;
2843 sdata->needed_rx_chains = local->rx_chains;
164eb02d 2844
164eb02d
SW
2845 err = ieee80211_vif_use_channel(sdata, chandef,
2846 IEEE80211_CHANCTX_SHARED);
164eb02d 2847 if (err)
34a3740d 2848 goto out_unlock;
164eb02d 2849
164eb02d 2850 ieee80211_queue_delayed_work(&sdata->local->hw,
31559f35
JD
2851 &sdata->dfs_cac_timer_work,
2852 msecs_to_jiffies(cac_time_ms));
164eb02d 2853
34a3740d
JB
2854 out_unlock:
2855 mutex_unlock(&local->mtx);
2856 return err;
164eb02d
SW
2857}
2858
73da7d5b
SW
2859static struct cfg80211_beacon_data *
2860cfg80211_beacon_dup(struct cfg80211_beacon_data *beacon)
2861{
2862 struct cfg80211_beacon_data *new_beacon;
2863 u8 *pos;
2864 int len;
2865
2866 len = beacon->head_len + beacon->tail_len + beacon->beacon_ies_len +
2867 beacon->proberesp_ies_len + beacon->assocresp_ies_len +
2868 beacon->probe_resp_len;
2869
2870 new_beacon = kzalloc(sizeof(*new_beacon) + len, GFP_KERNEL);
2871 if (!new_beacon)
2872 return NULL;
2873
2874 pos = (u8 *)(new_beacon + 1);
2875 if (beacon->head_len) {
2876 new_beacon->head_len = beacon->head_len;
2877 new_beacon->head = pos;
2878 memcpy(pos, beacon->head, beacon->head_len);
2879 pos += beacon->head_len;
2880 }
2881 if (beacon->tail_len) {
2882 new_beacon->tail_len = beacon->tail_len;
2883 new_beacon->tail = pos;
2884 memcpy(pos, beacon->tail, beacon->tail_len);
2885 pos += beacon->tail_len;
2886 }
2887 if (beacon->beacon_ies_len) {
2888 new_beacon->beacon_ies_len = beacon->beacon_ies_len;
2889 new_beacon->beacon_ies = pos;
2890 memcpy(pos, beacon->beacon_ies, beacon->beacon_ies_len);
2891 pos += beacon->beacon_ies_len;
2892 }
2893 if (beacon->proberesp_ies_len) {
2894 new_beacon->proberesp_ies_len = beacon->proberesp_ies_len;
2895 new_beacon->proberesp_ies = pos;
2896 memcpy(pos, beacon->proberesp_ies, beacon->proberesp_ies_len);
2897 pos += beacon->proberesp_ies_len;
2898 }
2899 if (beacon->assocresp_ies_len) {
2900 new_beacon->assocresp_ies_len = beacon->assocresp_ies_len;
2901 new_beacon->assocresp_ies = pos;
2902 memcpy(pos, beacon->assocresp_ies, beacon->assocresp_ies_len);
2903 pos += beacon->assocresp_ies_len;
2904 }
2905 if (beacon->probe_resp_len) {
2906 new_beacon->probe_resp_len = beacon->probe_resp_len;
2907 beacon->probe_resp = pos;
2908 memcpy(pos, beacon->probe_resp, beacon->probe_resp_len);
2909 pos += beacon->probe_resp_len;
2910 }
2911
2912 return new_beacon;
2913}
2914
66e01cf9 2915void ieee80211_csa_finish(struct ieee80211_vif *vif)
73da7d5b 2916{
66e01cf9 2917 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
73da7d5b 2918
66e01cf9
LC
2919 ieee80211_queue_work(&sdata->local->hw,
2920 &sdata->csa_finalize_work);
2921}
2922EXPORT_SYMBOL(ieee80211_csa_finish);
e487eaeb 2923
66199506
MK
2924static int ieee80211_set_after_csa_beacon(struct ieee80211_sub_if_data *sdata,
2925 u32 *changed)
66e01cf9 2926{
66199506 2927 int err;
7578d575 2928
cd7760e6
SW
2929 switch (sdata->vif.type) {
2930 case NL80211_IFTYPE_AP:
af296bdb
MK
2931 err = ieee80211_assign_beacon(sdata, sdata->u.ap.next_beacon,
2932 NULL);
97518af1
MK
2933 kfree(sdata->u.ap.next_beacon);
2934 sdata->u.ap.next_beacon = NULL;
2935
cd7760e6 2936 if (err < 0)
66199506
MK
2937 return err;
2938 *changed |= err;
cd7760e6
SW
2939 break;
2940 case NL80211_IFTYPE_ADHOC:
faf046e7
MK
2941 err = ieee80211_ibss_finish_csa(sdata);
2942 if (err < 0)
66199506
MK
2943 return err;
2944 *changed |= err;
cd7760e6 2945 break;
b8456a14
CYY
2946#ifdef CONFIG_MAC80211_MESH
2947 case NL80211_IFTYPE_MESH_POINT:
2948 err = ieee80211_mesh_finish_csa(sdata);
2949 if (err < 0)
66199506
MK
2950 return err;
2951 *changed |= err;
b8456a14
CYY
2952 break;
2953#endif
cd7760e6
SW
2954 default:
2955 WARN_ON(1);
66199506
MK
2956 return -EINVAL;
2957 }
2958
2959 return 0;
2960}
2961
cf8767dd 2962static int __ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
66199506
MK
2963{
2964 struct ieee80211_local *local = sdata->local;
2965 u32 changed = 0;
2966 int err;
2967
2968 sdata_assert_lock(sdata);
2969 lockdep_assert_held(&local->mtx);
03078de4 2970 lockdep_assert_held(&local->chanctx_mtx);
66199506 2971
03078de4
MK
2972 /*
2973 * using reservation isn't immediate as it may be deferred until later
2974 * with multi-vif. once reservation is complete it will re-schedule the
2975 * work with no reserved_chanctx so verify chandef to check if it
2976 * completed successfully
2977 */
66199506 2978
03078de4
MK
2979 if (sdata->reserved_chanctx) {
2980 /*
2981 * with multi-vif csa driver may call ieee80211_csa_finish()
2982 * many times while waiting for other interfaces to use their
2983 * reservations
2984 */
2985 if (sdata->reserved_ready)
2986 return 0;
2987
408b18ab 2988 return ieee80211_vif_use_reserved_context(sdata);
cd7760e6 2989 }
73da7d5b 2990
03078de4
MK
2991 if (!cfg80211_chandef_identical(&sdata->vif.bss_conf.chandef,
2992 &sdata->csa_chandef))
2993 return -EINVAL;
2994
66199506
MK
2995 sdata->vif.csa_active = false;
2996
2997 err = ieee80211_set_after_csa_beacon(sdata, &changed);
2998 if (err)
cf8767dd 2999 return err;
faf046e7 3000
66199506 3001 ieee80211_bss_info_change_notify(sdata, changed);
59af6928 3002
a46992b4
LC
3003 if (sdata->csa_block_tx) {
3004 ieee80211_wake_vif_queues(local, sdata,
3005 IEEE80211_QUEUE_STOP_REASON_CSA);
3006 sdata->csa_block_tx = false;
3007 }
cf8767dd 3008
f1d65583
LC
3009 err = drv_post_channel_switch(sdata);
3010 if (err)
3011 return err;
3012
3013 cfg80211_ch_switch_notify(sdata->dev, &sdata->csa_chandef);
3014
cf8767dd
MK
3015 return 0;
3016}
3017
3018static void ieee80211_csa_finalize(struct ieee80211_sub_if_data *sdata)
3019{
3020 if (__ieee80211_csa_finalize(sdata)) {
3021 sdata_info(sdata, "failed to finalize CSA, disconnecting\n");
3022 cfg80211_stop_iface(sdata->local->hw.wiphy, &sdata->wdev,
3023 GFP_KERNEL);
3024 }
66e01cf9
LC
3025}
3026
3027void ieee80211_csa_finalize_work(struct work_struct *work)
3028{
3029 struct ieee80211_sub_if_data *sdata =
3030 container_of(work, struct ieee80211_sub_if_data,
3031 csa_finalize_work);
59af6928 3032 struct ieee80211_local *local = sdata->local;
66e01cf9
LC
3033
3034 sdata_lock(sdata);
59af6928 3035 mutex_lock(&local->mtx);
03078de4 3036 mutex_lock(&local->chanctx_mtx);
59af6928 3037
66e01cf9
LC
3038 /* AP might have been stopped while waiting for the lock. */
3039 if (!sdata->vif.csa_active)
3040 goto unlock;
3041
3042 if (!ieee80211_sdata_running(sdata))
3043 goto unlock;
3044
3045 ieee80211_csa_finalize(sdata);
e487eaeb
SW
3046
3047unlock:
03078de4 3048 mutex_unlock(&local->chanctx_mtx);
59af6928 3049 mutex_unlock(&local->mtx);
e487eaeb 3050 sdata_unlock(sdata);
73da7d5b
SW
3051}
3052
37fa2bdd
MK
3053static int ieee80211_set_csa_beacon(struct ieee80211_sub_if_data *sdata,
3054 struct cfg80211_csa_settings *params,
3055 u32 *changed)
73da7d5b 3056{
af296bdb 3057 struct ieee80211_csa_settings csa = {};
37fa2bdd 3058 int err;
73da7d5b 3059
73da7d5b
SW
3060 switch (sdata->vif.type) {
3061 case NL80211_IFTYPE_AP:
cd7760e6
SW
3062 sdata->u.ap.next_beacon =
3063 cfg80211_beacon_dup(&params->beacon_after);
3064 if (!sdata->u.ap.next_beacon)
3065 return -ENOMEM;
3066
66e01cf9
LC
3067 /*
3068 * With a count of 0, we don't have to wait for any
3069 * TBTT before switching, so complete the CSA
3070 * immediately. In theory, with a count == 1 we
3071 * should delay the switch until just before the next
3072 * TBTT, but that would complicate things so we switch
3073 * immediately too. If we would delay the switch
3074 * until the next TBTT, we would have to set the probe
3075 * response here.
3076 *
3077 * TODO: A channel switch with count <= 1 without
3078 * sending a CSA action frame is kind of useless,
3079 * because the clients won't know we're changing
3080 * channels. The action frame must be implemented
3081 * either here or in the userspace.
3082 */
3083 if (params->count <= 1)
3084 break;
3085
0d06d9ba
AO
3086 if ((params->n_counter_offsets_beacon >
3087 IEEE80211_MAX_CSA_COUNTERS_NUM) ||
3088 (params->n_counter_offsets_presp >
3089 IEEE80211_MAX_CSA_COUNTERS_NUM))
3090 return -EINVAL;
9a774c78 3091
af296bdb
MK
3092 csa.counter_offsets_beacon = params->counter_offsets_beacon;
3093 csa.counter_offsets_presp = params->counter_offsets_presp;
3094 csa.n_counter_offsets_beacon = params->n_counter_offsets_beacon;
3095 csa.n_counter_offsets_presp = params->n_counter_offsets_presp;
3096 csa.count = params->count;
9a774c78 3097
af296bdb 3098 err = ieee80211_assign_beacon(sdata, &params->beacon_csa, &csa);
cd7760e6
SW
3099 if (err < 0) {
3100 kfree(sdata->u.ap.next_beacon);
3101 return err;
3102 }
37fa2bdd 3103 *changed |= err;
66e01cf9 3104
cd7760e6
SW
3105 break;
3106 case NL80211_IFTYPE_ADHOC:
3107 if (!sdata->vif.bss_conf.ibss_joined)
3108 return -EINVAL;
3109
3110 if (params->chandef.width != sdata->u.ibss.chandef.width)
3111 return -EINVAL;
3112
3113 switch (params->chandef.width) {
3114 case NL80211_CHAN_WIDTH_40:
3115 if (cfg80211_get_chandef_type(&params->chandef) !=
3116 cfg80211_get_chandef_type(&sdata->u.ibss.chandef))
3117 return -EINVAL;
3118 case NL80211_CHAN_WIDTH_5:
3119 case NL80211_CHAN_WIDTH_10:
3120 case NL80211_CHAN_WIDTH_20_NOHT:
3121 case NL80211_CHAN_WIDTH_20:
3122 break;
3123 default:
3124 return -EINVAL;
3125 }
3126
3127 /* changes into another band are not supported */
3128 if (sdata->u.ibss.chandef.chan->band !=
3129 params->chandef.chan->band)
3130 return -EINVAL;
3131
66e01cf9
LC
3132 /* see comments in the NL80211_IFTYPE_AP block */
3133 if (params->count > 1) {
3134 err = ieee80211_ibss_csa_beacon(sdata, params);
3135 if (err < 0)
3136 return err;
37fa2bdd 3137 *changed |= err;
66e01cf9
LC
3138 }
3139
3140 ieee80211_send_action_csa(sdata, params);
3141
73da7d5b 3142 break;
c6da674a 3143#ifdef CONFIG_MAC80211_MESH
37fa2bdd
MK
3144 case NL80211_IFTYPE_MESH_POINT: {
3145 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
c6da674a 3146
c6da674a
CYY
3147 if (params->chandef.width != sdata->vif.bss_conf.chandef.width)
3148 return -EINVAL;
3149
3150 /* changes into another band are not supported */
3151 if (sdata->vif.bss_conf.chandef.chan->band !=
3152 params->chandef.chan->band)
3153 return -EINVAL;
3154
c782bf8c 3155 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_NONE) {
0cb4d4dc 3156 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_INIT;
c782bf8c
CYY
3157 if (!ifmsh->pre_value)
3158 ifmsh->pre_value = 1;
3159 else
3160 ifmsh->pre_value++;
3161 }
0cb4d4dc 3162
66e01cf9
LC
3163 /* see comments in the NL80211_IFTYPE_AP block */
3164 if (params->count > 1) {
3165 err = ieee80211_mesh_csa_beacon(sdata, params);
3166 if (err < 0) {
3167 ifmsh->csa_role = IEEE80211_MESH_CSA_ROLE_NONE;
3168 return err;
3169 }
37fa2bdd 3170 *changed |= err;
3f718fd8 3171 }
66e01cf9
LC
3172
3173 if (ifmsh->csa_role == IEEE80211_MESH_CSA_ROLE_INIT)
3174 ieee80211_send_action_csa(sdata, params);
3175
c6da674a 3176 break;
37fa2bdd 3177 }
c6da674a 3178#endif
73da7d5b
SW
3179 default:
3180 return -EOPNOTSUPP;
3181 }
3182
37fa2bdd
MK
3183 return 0;
3184}
3185
f29f58a9
LC
3186static int
3187__ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3188 struct cfg80211_csa_settings *params)
37fa2bdd
MK
3189{
3190 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3191 struct ieee80211_local *local = sdata->local;
6d027bcc 3192 struct ieee80211_channel_switch ch_switch;
2b32713d 3193 struct ieee80211_chanctx_conf *conf;
37fa2bdd 3194 struct ieee80211_chanctx *chanctx;
b08cc24e
JB
3195 u32 changed = 0;
3196 int err;
37fa2bdd
MK
3197
3198 sdata_assert_lock(sdata);
59af6928 3199 lockdep_assert_held(&local->mtx);
37fa2bdd
MK
3200
3201 if (!list_empty(&local->roc_list) || local->scanning)
3202 return -EBUSY;
3203
3204 if (sdata->wdev.cac_started)
3205 return -EBUSY;
3206
3207 if (cfg80211_chandef_identical(&params->chandef,
3208 &sdata->vif.bss_conf.chandef))
3209 return -EINVAL;
3210
03078de4
MK
3211 /* don't allow another channel switch if one is already active. */
3212 if (sdata->vif.csa_active)
3213 return -EBUSY;
3214
2b32713d
MK
3215 mutex_lock(&local->chanctx_mtx);
3216 conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
3217 lockdep_is_held(&local->chanctx_mtx));
3218 if (!conf) {
03078de4
MK
3219 err = -EBUSY;
3220 goto out;
37fa2bdd
MK
3221 }
3222
2b32713d 3223 chanctx = container_of(conf, struct ieee80211_chanctx, conf);
03078de4
MK
3224 if (!chanctx) {
3225 err = -EBUSY;
3226 goto out;
37fa2bdd 3227 }
37fa2bdd 3228
000baa5d
LC
3229 ch_switch.timestamp = 0;
3230 ch_switch.device_timestamp = 0;
3231 ch_switch.block_tx = params->block_tx;
3232 ch_switch.chandef = params->chandef;
3233 ch_switch.count = params->count;
3234
6d027bcc
LC
3235 err = drv_pre_channel_switch(sdata, &ch_switch);
3236 if (err)
3237 goto out;
3238
03078de4
MK
3239 err = ieee80211_vif_reserve_chanctx(sdata, &params->chandef,
3240 chanctx->mode,
3241 params->radar_required);
3242 if (err)
3243 goto out;
37fa2bdd 3244
03078de4
MK
3245 /* if reservation is invalid then this will fail */
3246 err = ieee80211_check_combinations(sdata, NULL, chanctx->mode, 0);
3247 if (err) {
3248 ieee80211_vif_unreserve_chanctx(sdata);
3249 goto out;
3250 }
37fa2bdd
MK
3251
3252 err = ieee80211_set_csa_beacon(sdata, params, &changed);
03078de4
MK
3253 if (err) {
3254 ieee80211_vif_unreserve_chanctx(sdata);
3255 goto out;
3256 }
37fa2bdd 3257
33787fc4 3258 sdata->csa_chandef = params->chandef;
59af6928 3259 sdata->csa_block_tx = params->block_tx;
73da7d5b
SW
3260 sdata->vif.csa_active = true;
3261
59af6928 3262 if (sdata->csa_block_tx)
a46992b4
LC
3263 ieee80211_stop_vif_queues(local, sdata,
3264 IEEE80211_QUEUE_STOP_REASON_CSA);
59af6928 3265
2f457293
LC
3266 cfg80211_ch_switch_started_notify(sdata->dev, &sdata->csa_chandef,
3267 params->count);
3268
66e01cf9
LC
3269 if (changed) {
3270 ieee80211_bss_info_change_notify(sdata, changed);
3271 drv_channel_switch_beacon(sdata, &params->chandef);
3272 } else {
3273 /* if the beacon didn't change, we can finalize immediately */
3274 ieee80211_csa_finalize(sdata);
3275 }
73da7d5b 3276
03078de4
MK
3277out:
3278 mutex_unlock(&local->chanctx_mtx);
3279 return err;
73da7d5b
SW
3280}
3281
59af6928
MK
3282int ieee80211_channel_switch(struct wiphy *wiphy, struct net_device *dev,
3283 struct cfg80211_csa_settings *params)
3284{
3285 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3286 struct ieee80211_local *local = sdata->local;
3287 int err;
3288
3289 mutex_lock(&local->mtx);
3290 err = __ieee80211_channel_switch(wiphy, dev, params);
3291 mutex_unlock(&local->mtx);
3292
3293 return err;
3294}
3295
3b79af97
JB
3296static struct sk_buff *ieee80211_make_ack_skb(struct ieee80211_local *local,
3297 struct sk_buff *skb, u64 *cookie,
3298 gfp_t gfp)
3299{
3300 unsigned long spin_flags;
3301 struct sk_buff *ack_skb;
3302 int id;
3303
3304 ack_skb = skb_copy(skb, gfp);
3305 if (!ack_skb)
3306 return ERR_PTR(-ENOMEM);
3307
3308 spin_lock_irqsave(&local->ack_status_lock, spin_flags);
3309 id = idr_alloc(&local->ack_status_frames, ack_skb,
3310 1, 0x10000, GFP_ATOMIC);
3311 spin_unlock_irqrestore(&local->ack_status_lock, spin_flags);
3312
3313 if (id < 0) {
3314 kfree_skb(ack_skb);
3315 return ERR_PTR(-ENOMEM);
3316 }
3317
3318 IEEE80211_SKB_CB(skb)->ack_frame_id = id;
3319
3320 *cookie = ieee80211_mgmt_tx_cookie(local);
3321 IEEE80211_SKB_CB(ack_skb)->ack.cookie = *cookie;
3322
3323 return ack_skb;
3324}
3325
71bbc994 3326static int ieee80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
b176e629
AO
3327 struct cfg80211_mgmt_tx_params *params,
3328 u64 *cookie)
026331c4 3329{
71bbc994 3330 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
9d38d85d 3331 struct ieee80211_local *local = sdata->local;
b2eb0ee6 3332 struct sk_buff *skb, *ack_skb;
9d38d85d 3333 struct sta_info *sta;
b176e629 3334 const struct ieee80211_mgmt *mgmt = (void *)params->buf;
2eb278e0 3335 bool need_offchan = false;
e247bd90 3336 u32 flags;
2eb278e0 3337 int ret;
387910cc 3338 u8 *data;
f7ca38df 3339
b176e629 3340 if (params->dont_wait_for_ack)
e247bd90
JB
3341 flags = IEEE80211_TX_CTL_NO_ACK;
3342 else
3343 flags = IEEE80211_TX_INTFL_NL80211_FRAME_TX |
3344 IEEE80211_TX_CTL_REQ_TX_STATUS;
3345
b176e629 3346 if (params->no_cck)
aad14ceb
RM
3347 flags |= IEEE80211_TX_CTL_NO_CCK_RATE;
3348
9d38d85d
JB
3349 switch (sdata->vif.type) {
3350 case NL80211_IFTYPE_ADHOC:
2eb278e0
JB
3351 if (!sdata->vif.bss_conf.ibss_joined)
3352 need_offchan = true;
3353 /* fall through */
3354#ifdef CONFIG_MAC80211_MESH
3355 case NL80211_IFTYPE_MESH_POINT:
3356 if (ieee80211_vif_is_mesh(&sdata->vif) &&
3357 !sdata->u.mesh.mesh_id_len)
3358 need_offchan = true;
3359 /* fall through */
3360#endif
663fcafd
JB
3361 case NL80211_IFTYPE_AP:
3362 case NL80211_IFTYPE_AP_VLAN:
3363 case NL80211_IFTYPE_P2P_GO:
2eb278e0
JB
3364 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
3365 !ieee80211_vif_is_mesh(&sdata->vif) &&
3366 !rcu_access_pointer(sdata->bss->beacon))
3367 need_offchan = true;
663fcafd 3368 if (!ieee80211_is_action(mgmt->frame_control) ||
ac49e1a8 3369 mgmt->u.action.category == WLAN_CATEGORY_PUBLIC ||
cd7760e6
SW
3370 mgmt->u.action.category == WLAN_CATEGORY_SELF_PROTECTED ||
3371 mgmt->u.action.category == WLAN_CATEGORY_SPECTRUM_MGMT)
9d38d85d
JB
3372 break;
3373 rcu_read_lock();
3374 sta = sta_info_get(sdata, mgmt->da);
3375 rcu_read_unlock();
3376 if (!sta)
3377 return -ENOLINK;
3378 break;
3379 case NL80211_IFTYPE_STATION:
663fcafd 3380 case NL80211_IFTYPE_P2P_CLIENT:
b8e69d51
MG
3381 sdata_lock(sdata);
3382 if (!sdata->u.mgd.associated ||
3383 (params->offchan && params->wait &&
3384 local->ops->remain_on_channel &&
3385 memcmp(sdata->u.mgd.associated->bssid,
3386 mgmt->bssid, ETH_ALEN)))
2eb278e0 3387 need_offchan = true;
b8e69d51 3388 sdata_unlock(sdata);
9d38d85d 3389 break;
f142c6b9
JB
3390 case NL80211_IFTYPE_P2P_DEVICE:
3391 need_offchan = true;
3392 break;
9d38d85d
JB
3393 default:
3394 return -EOPNOTSUPP;
3395 }
3396
f7aeb6fb
AQ
3397 /* configurations requiring offchan cannot work if no channel has been
3398 * specified
3399 */
b176e629 3400 if (need_offchan && !params->chan)
f7aeb6fb
AQ
3401 return -EINVAL;
3402
2eb278e0
JB
3403 mutex_lock(&local->mtx);
3404
3405 /* Check if the operating channel is the requested channel */
3406 if (!need_offchan) {
55de908a
JB
3407 struct ieee80211_chanctx_conf *chanctx_conf;
3408
3409 rcu_read_lock();
3410 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3411
f7aeb6fb 3412 if (chanctx_conf) {
b176e629
AO
3413 need_offchan = params->chan &&
3414 (params->chan !=
3415 chanctx_conf->def.chan);
3416 } else if (!params->chan) {
f7aeb6fb
AQ
3417 ret = -EINVAL;
3418 rcu_read_unlock();
3419 goto out_unlock;
3420 } else {
2eb278e0 3421 need_offchan = true;
f7aeb6fb 3422 }
55de908a 3423 rcu_read_unlock();
2eb278e0
JB
3424 }
3425
b176e629 3426 if (need_offchan && !params->offchan) {
2eb278e0
JB
3427 ret = -EBUSY;
3428 goto out_unlock;
3429 }
3430
b176e629 3431 skb = dev_alloc_skb(local->hw.extra_tx_headroom + params->len);
2eb278e0
JB
3432 if (!skb) {
3433 ret = -ENOMEM;
3434 goto out_unlock;
3435 }
9d38d85d
JB
3436 skb_reserve(skb, local->hw.extra_tx_headroom);
3437
387910cc
AO
3438 data = skb_put(skb, params->len);
3439 memcpy(data, params->buf, params->len);
3440
3441 /* Update CSA counters */
3442 if (sdata->vif.csa_active &&
3443 (sdata->vif.type == NL80211_IFTYPE_AP ||
8df734e8 3444 sdata->vif.type == NL80211_IFTYPE_MESH_POINT ||
387910cc
AO
3445 sdata->vif.type == NL80211_IFTYPE_ADHOC) &&
3446 params->n_csa_offsets) {
3447 int i;
af296bdb 3448 struct beacon_data *beacon = NULL;
387910cc 3449
af296bdb
MK
3450 rcu_read_lock();
3451
3452 if (sdata->vif.type == NL80211_IFTYPE_AP)
3453 beacon = rcu_dereference(sdata->u.ap.beacon);
3454 else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
3455 beacon = rcu_dereference(sdata->u.ibss.presp);
3456 else if (ieee80211_vif_is_mesh(&sdata->vif))
3457 beacon = rcu_dereference(sdata->u.mesh.beacon);
3458
3459 if (beacon)
3460 for (i = 0; i < params->n_csa_offsets; i++)
3461 data[params->csa_offsets[i]] =
3462 beacon->csa_current_counter;
3463
3464 rcu_read_unlock();
387910cc 3465 }
9d38d85d
JB
3466
3467 IEEE80211_SKB_CB(skb)->flags = flags;
3468
3469 skb->dev = sdata->dev;
9d38d85d 3470
b2eb0ee6 3471 if (!params->dont_wait_for_ack) {
3b79af97 3472 /* make a copy to preserve the frame contents
b2eb0ee6
JB
3473 * in case of encryption.
3474 */
3b79af97
JB
3475 ack_skb = ieee80211_make_ack_skb(local, skb, cookie,
3476 GFP_KERNEL);
3477 if (IS_ERR(ack_skb)) {
3478 ret = PTR_ERR(ack_skb);
b2eb0ee6
JB
3479 kfree_skb(skb);
3480 goto out_unlock;
3481 }
b2eb0ee6
JB
3482 } else {
3483 /* for cookie below */
3484 ack_skb = skb;
3485 }
3486
2eb278e0 3487 if (!need_offchan) {
f30221e4 3488 ieee80211_tx_skb(sdata, skb);
2eb278e0
JB
3489 ret = 0;
3490 goto out_unlock;
f30221e4
JB
3491 }
3492
6c17b77b
SF
3493 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_TX_OFFCHAN |
3494 IEEE80211_TX_INTFL_OFFCHAN_TX_OK;
30686bf7 3495 if (ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
2eb278e0
JB
3496 IEEE80211_SKB_CB(skb)->hw_queue =
3497 local->hw.offchannel_tx_hw_queue;
f30221e4 3498
2eb278e0 3499 /* This will handle all kinds of coalescing and immediate TX */
b176e629
AO
3500 ret = ieee80211_start_roc_work(local, sdata, params->chan,
3501 params->wait, cookie, skb,
d339d5ca 3502 IEEE80211_ROC_TYPE_MGMT_TX);
2eb278e0
JB
3503 if (ret)
3504 kfree_skb(skb);
3505 out_unlock:
3506 mutex_unlock(&local->mtx);
3507 return ret;
026331c4
JM
3508}
3509
f30221e4 3510static int ieee80211_mgmt_tx_cancel_wait(struct wiphy *wiphy,
71bbc994 3511 struct wireless_dev *wdev,
f30221e4
JB
3512 u64 cookie)
3513{
71bbc994 3514 struct ieee80211_local *local = wiphy_priv(wiphy);
f30221e4 3515
2eb278e0 3516 return ieee80211_cancel_roc(local, cookie, true);
f30221e4
JB
3517}
3518
7be5086d 3519static void ieee80211_mgmt_frame_register(struct wiphy *wiphy,
71bbc994 3520 struct wireless_dev *wdev,
7be5086d
JB
3521 u16 frame_type, bool reg)
3522{
3523 struct ieee80211_local *local = wiphy_priv(wiphy);
3524
6abe0563 3525 switch (frame_type) {
6abe0563
WH
3526 case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ:
3527 if (reg)
3528 local->probe_req_reg++;
3529 else
3530 local->probe_req_reg--;
7be5086d 3531
35f5149e
FF
3532 if (!local->open_count)
3533 break;
3534
6abe0563
WH
3535 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
3536 break;
3537 default:
3538 break;
3539 }
7be5086d
JB
3540}
3541
15d96753
BR
3542static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant)
3543{
3544 struct ieee80211_local *local = wiphy_priv(wiphy);
3545
3546 if (local->started)
3547 return -EOPNOTSUPP;
3548
3549 return drv_set_antenna(local, tx_ant, rx_ant);
3550}
3551
3552static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant)
3553{
3554 struct ieee80211_local *local = wiphy_priv(wiphy);
3555
3556 return drv_get_antenna(local, tx_ant, rx_ant);
3557}
3558
c68f4b89
JB
3559static int ieee80211_set_rekey_data(struct wiphy *wiphy,
3560 struct net_device *dev,
3561 struct cfg80211_gtk_rekey_data *data)
3562{
3563 struct ieee80211_local *local = wiphy_priv(wiphy);
3564 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3565
3566 if (!local->ops->set_rekey_data)
3567 return -EOPNOTSUPP;
3568
3569 drv_set_rekey_data(local, sdata, data);
3570
3571 return 0;
3572}
3573
06500736
JB
3574static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev,
3575 const u8 *peer, u64 *cookie)
3576{
3577 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3578 struct ieee80211_local *local = sdata->local;
3579 struct ieee80211_qos_hdr *nullfunc;
3b79af97 3580 struct sk_buff *skb, *ack_skb;
06500736
JB
3581 int size = sizeof(*nullfunc);
3582 __le16 fc;
3583 bool qos;
3584 struct ieee80211_tx_info *info;
3585 struct sta_info *sta;
55de908a
JB
3586 struct ieee80211_chanctx_conf *chanctx_conf;
3587 enum ieee80211_band band;
3b79af97
JB
3588 int ret;
3589
3590 /* the lock is needed to assign the cookie later */
3591 mutex_lock(&local->mtx);
06500736
JB
3592
3593 rcu_read_lock();
55de908a
JB
3594 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3595 if (WARN_ON(!chanctx_conf)) {
3b79af97
JB
3596 ret = -EINVAL;
3597 goto unlock;
55de908a 3598 }
4bf88530 3599 band = chanctx_conf->def.chan->band;
03bb7f42 3600 sta = sta_info_get_bss(sdata, peer);
b4487c2d 3601 if (sta) {
a74a8c84 3602 qos = sta->sta.wme;
b4487c2d 3603 } else {
3b79af97
JB
3604 ret = -ENOLINK;
3605 goto unlock;
b4487c2d 3606 }
06500736
JB
3607
3608 if (qos) {
3609 fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3610 IEEE80211_STYPE_QOS_NULLFUNC |
3611 IEEE80211_FCTL_FROMDS);
3612 } else {
3613 size -= 2;
3614 fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3615 IEEE80211_STYPE_NULLFUNC |
3616 IEEE80211_FCTL_FROMDS);
3617 }
3618
3619 skb = dev_alloc_skb(local->hw.extra_tx_headroom + size);
55de908a 3620 if (!skb) {
3b79af97
JB
3621 ret = -ENOMEM;
3622 goto unlock;
55de908a 3623 }
06500736
JB
3624
3625 skb->dev = dev;
3626
3627 skb_reserve(skb, local->hw.extra_tx_headroom);
3628
3629 nullfunc = (void *) skb_put(skb, size);
3630 nullfunc->frame_control = fc;
3631 nullfunc->duration_id = 0;
3632 memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
3633 memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
3634 memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN);
3635 nullfunc->seq_ctrl = 0;
3636
3637 info = IEEE80211_SKB_CB(skb);
3638
3639 info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS |
3640 IEEE80211_TX_INTFL_NL80211_FRAME_TX;
73c4e195 3641 info->band = band;
06500736
JB
3642
3643 skb_set_queue_mapping(skb, IEEE80211_AC_VO);
3644 skb->priority = 7;
3645 if (qos)
3646 nullfunc->qos_ctrl = cpu_to_le16(7);
3647
3b79af97
JB
3648 ack_skb = ieee80211_make_ack_skb(local, skb, cookie, GFP_ATOMIC);
3649 if (IS_ERR(ack_skb)) {
3650 kfree_skb(skb);
3651 ret = PTR_ERR(ack_skb);
3652 goto unlock;
3653 }
3654
06500736 3655 local_bh_disable();
7c10770f 3656 ieee80211_xmit(sdata, sta, skb);
06500736 3657 local_bh_enable();
3b79af97
JB
3658
3659 ret = 0;
3660unlock:
55de908a 3661 rcu_read_unlock();
3b79af97 3662 mutex_unlock(&local->mtx);
06500736 3663
3b79af97 3664 return ret;
06500736
JB
3665}
3666
683b6d3b
JB
3667static int ieee80211_cfg_get_channel(struct wiphy *wiphy,
3668 struct wireless_dev *wdev,
3669 struct cfg80211_chan_def *chandef)
5b7ccaf3 3670{
55de908a 3671 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
cb601ffa 3672 struct ieee80211_local *local = wiphy_priv(wiphy);
55de908a 3673 struct ieee80211_chanctx_conf *chanctx_conf;
683b6d3b 3674 int ret = -ENODATA;
55de908a
JB
3675
3676 rcu_read_lock();
feda3027
JB
3677 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3678 if (chanctx_conf) {
c12bc488 3679 *chandef = sdata->vif.bss_conf.chandef;
feda3027
JB
3680 ret = 0;
3681 } else if (local->open_count > 0 &&
3682 local->open_count == local->monitors &&
3683 sdata->vif.type == NL80211_IFTYPE_MONITOR) {
3684 if (local->use_chanctx)
3685 *chandef = local->monitor_chandef;
3686 else
675a0b04 3687 *chandef = local->_oper_chandef;
683b6d3b 3688 ret = 0;
55de908a
JB
3689 }
3690 rcu_read_unlock();
5b7ccaf3 3691
683b6d3b 3692 return ret;
5b7ccaf3
JB
3693}
3694
6d52563f
JB
3695#ifdef CONFIG_PM
3696static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled)
3697{
3698 drv_set_wakeup(wiphy_priv(wiphy), enabled);
3699}
3700#endif
3701
32db6b54
KP
3702static int ieee80211_set_qos_map(struct wiphy *wiphy,
3703 struct net_device *dev,
3704 struct cfg80211_qos_map *qos_map)
3705{
3706 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3707 struct mac80211_qos_map *new_qos_map, *old_qos_map;
3708
3709 if (qos_map) {
3710 new_qos_map = kzalloc(sizeof(*new_qos_map), GFP_KERNEL);
3711 if (!new_qos_map)
3712 return -ENOMEM;
3713 memcpy(&new_qos_map->qos_map, qos_map, sizeof(*qos_map));
3714 } else {
3715 /* A NULL qos_map was passed to disable QoS mapping */
3716 new_qos_map = NULL;
3717 }
3718
194ff52d 3719 old_qos_map = sdata_dereference(sdata->qos_map, sdata);
32db6b54
KP
3720 rcu_assign_pointer(sdata->qos_map, new_qos_map);
3721 if (old_qos_map)
3722 kfree_rcu(old_qos_map, rcu_head);
3723
3724 return 0;
3725}
3726
3b1700bd
JM
3727static int ieee80211_set_ap_chanwidth(struct wiphy *wiphy,
3728 struct net_device *dev,
3729 struct cfg80211_chan_def *chandef)
3730{
3731 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3732 int ret;
3733 u32 changed = 0;
3734
3735 ret = ieee80211_vif_change_bandwidth(sdata, chandef, &changed);
3736 if (ret == 0)
3737 ieee80211_bss_info_change_notify(sdata, changed);
3738
3739 return ret;
3740}
3741
02219b3a
JB
3742static int ieee80211_add_tx_ts(struct wiphy *wiphy, struct net_device *dev,
3743 u8 tsid, const u8 *peer, u8 up,
3744 u16 admitted_time)
3745{
3746 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3747 struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
3748 int ac = ieee802_1d_to_ac[up];
3749
3750 if (sdata->vif.type != NL80211_IFTYPE_STATION)
3751 return -EOPNOTSUPP;
3752
3753 if (!(sdata->wmm_acm & BIT(up)))
3754 return -EINVAL;
3755
3756 if (ifmgd->tx_tspec[ac].admitted_time)
3757 return -EBUSY;
3758
3759 if (admitted_time) {
3760 ifmgd->tx_tspec[ac].admitted_time = 32 * admitted_time;
3761 ifmgd->tx_tspec[ac].tsid = tsid;
3762 ifmgd->tx_tspec[ac].up = up;
3763 }
3764
3765 return 0;
3766}
3767
3768static int ieee80211_del_tx_ts(struct wiphy *wiphy, struct net_device *dev,
3769 u8 tsid, const u8 *peer)
3770{
3771 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3772 struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
3773 struct ieee80211_local *local = wiphy_priv(wiphy);
3774 int ac;
3775
3776 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
3777 struct ieee80211_sta_tx_tspec *tx_tspec = &ifmgd->tx_tspec[ac];
3778
3779 /* skip unused entries */
3780 if (!tx_tspec->admitted_time)
3781 continue;
3782
3783 if (tx_tspec->tsid != tsid)
3784 continue;
3785
3786 /* due to this new packets will be reassigned to non-ACM ACs */
3787 tx_tspec->up = -1;
3788
3789 /* Make sure that all packets have been sent to avoid to
3790 * restore the QoS params on packets that are still on the
3791 * queues.
3792 */
3793 synchronize_net();
3b24f4c6 3794 ieee80211_flush_queues(local, sdata, false);
02219b3a
JB
3795
3796 /* restore the normal QoS parameters
3797 * (unconditionally to avoid races)
3798 */
3799 tx_tspec->action = TX_TSPEC_ACTION_STOP_DOWNGRADE;
3800 tx_tspec->downgraded = false;
3801 ieee80211_sta_handle_tspec_ac_params(sdata);
3802
3803 /* finally clear all the data */
3804 memset(tx_tspec, 0, sizeof(*tx_tspec));
3805
3806 return 0;
3807 }
3808
3809 return -ENOENT;
3810}
3811
8a47cea7 3812const struct cfg80211_ops mac80211_config_ops = {
f0706e82
JB
3813 .add_virtual_intf = ieee80211_add_iface,
3814 .del_virtual_intf = ieee80211_del_iface,
42613db7 3815 .change_virtual_intf = ieee80211_change_iface,
f142c6b9
JB
3816 .start_p2p_device = ieee80211_start_p2p_device,
3817 .stop_p2p_device = ieee80211_stop_p2p_device,
e8cbb4cb
JB
3818 .add_key = ieee80211_add_key,
3819 .del_key = ieee80211_del_key,
62da92fb 3820 .get_key = ieee80211_get_key,
e8cbb4cb 3821 .set_default_key = ieee80211_config_default_key,
3cfcf6ac 3822 .set_default_mgmt_key = ieee80211_config_default_mgmt_key,
8860020e
JB
3823 .start_ap = ieee80211_start_ap,
3824 .change_beacon = ieee80211_change_beacon,
3825 .stop_ap = ieee80211_stop_ap,
4fd6931e
JB
3826 .add_station = ieee80211_add_station,
3827 .del_station = ieee80211_del_station,
3828 .change_station = ieee80211_change_station,
7bbdd2d9 3829 .get_station = ieee80211_get_station,
c5dd9c2b 3830 .dump_station = ieee80211_dump_station,
1289723e 3831 .dump_survey = ieee80211_dump_survey,
c5dd9c2b
LCC
3832#ifdef CONFIG_MAC80211_MESH
3833 .add_mpath = ieee80211_add_mpath,
3834 .del_mpath = ieee80211_del_mpath,
3835 .change_mpath = ieee80211_change_mpath,
3836 .get_mpath = ieee80211_get_mpath,
3837 .dump_mpath = ieee80211_dump_mpath,
a2db2ed3
HR
3838 .get_mpp = ieee80211_get_mpp,
3839 .dump_mpp = ieee80211_dump_mpp,
24bdd9f4
JC
3840 .update_mesh_config = ieee80211_update_mesh_config,
3841 .get_mesh_config = ieee80211_get_mesh_config,
29cbe68c
JB
3842 .join_mesh = ieee80211_join_mesh,
3843 .leave_mesh = ieee80211_leave_mesh,
c5dd9c2b 3844#endif
239281f8
RL
3845 .join_ocb = ieee80211_join_ocb,
3846 .leave_ocb = ieee80211_leave_ocb,
9f1ba906 3847 .change_bss = ieee80211_change_bss,
31888487 3848 .set_txq_params = ieee80211_set_txq_params,
e8c9bd5b 3849 .set_monitor_channel = ieee80211_set_monitor_channel,
665af4fc
BC
3850 .suspend = ieee80211_suspend,
3851 .resume = ieee80211_resume,
2a519311 3852 .scan = ieee80211_scan,
79f460ca
LC
3853 .sched_scan_start = ieee80211_sched_scan_start,
3854 .sched_scan_stop = ieee80211_sched_scan_stop,
636a5d36
JM
3855 .auth = ieee80211_auth,
3856 .assoc = ieee80211_assoc,
3857 .deauth = ieee80211_deauth,
3858 .disassoc = ieee80211_disassoc,
af8cdcd8
JB
3859 .join_ibss = ieee80211_join_ibss,
3860 .leave_ibss = ieee80211_leave_ibss,
391e53e3 3861 .set_mcast_rate = ieee80211_set_mcast_rate,
b9a5f8ca 3862 .set_wiphy_params = ieee80211_set_wiphy_params,
7643a2c3
JB
3863 .set_tx_power = ieee80211_set_tx_power,
3864 .get_tx_power = ieee80211_get_tx_power,
ab737a4f 3865 .set_wds_peer = ieee80211_set_wds_peer,
1f87f7d3 3866 .rfkill_poll = ieee80211_rfkill_poll,
aff89a9b 3867 CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd)
71063f0e 3868 CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump)
bc92afd9 3869 .set_power_mgmt = ieee80211_set_power_mgmt,
9930380f 3870 .set_bitrate_mask = ieee80211_set_bitrate_mask,
b8bc4b0a
JB
3871 .remain_on_channel = ieee80211_remain_on_channel,
3872 .cancel_remain_on_channel = ieee80211_cancel_remain_on_channel,
2e161f78 3873 .mgmt_tx = ieee80211_mgmt_tx,
f30221e4 3874 .mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait,
a97c13c3 3875 .set_cqm_rssi_config = ieee80211_set_cqm_rssi_config,
7be5086d 3876 .mgmt_frame_register = ieee80211_mgmt_frame_register,
15d96753
BR
3877 .set_antenna = ieee80211_set_antenna,
3878 .get_antenna = ieee80211_get_antenna,
c68f4b89 3879 .set_rekey_data = ieee80211_set_rekey_data,
dfe018bf
AN
3880 .tdls_oper = ieee80211_tdls_oper,
3881 .tdls_mgmt = ieee80211_tdls_mgmt,
a7a6bdd0
AN
3882 .tdls_channel_switch = ieee80211_tdls_channel_switch,
3883 .tdls_cancel_channel_switch = ieee80211_tdls_cancel_channel_switch,
06500736 3884 .probe_client = ieee80211_probe_client,
b53be792 3885 .set_noack_map = ieee80211_set_noack_map,
6d52563f
JB
3886#ifdef CONFIG_PM
3887 .set_wakeup = ieee80211_set_wakeup,
3888#endif
5b7ccaf3 3889 .get_channel = ieee80211_cfg_get_channel,
164eb02d 3890 .start_radar_detection = ieee80211_start_radar_detection,
73da7d5b 3891 .channel_switch = ieee80211_channel_switch,
32db6b54 3892 .set_qos_map = ieee80211_set_qos_map,
3b1700bd 3893 .set_ap_chanwidth = ieee80211_set_ap_chanwidth,
02219b3a
JB
3894 .add_tx_ts = ieee80211_add_tx_ts,
3895 .del_tx_ts = ieee80211_del_tx_ts,
f0706e82 3896};