]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/blame - net/mac80211/iface.c
Merge remote-tracking branch 'net-next/master' into mac80211-next
[mirror_ubuntu-hirsute-kernel.git] / net / mac80211 / iface.c
CommitLineData
f0706e82 1/*
c5d54fbf 2 * Interface handling
0d143fe1 3 *
f0706e82
JB
4 * Copyright 2002-2005, Instant802 Networks, Inc.
5 * Copyright 2005-2006, Devicescape Software, Inc.
6 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
75636525 7 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
d98ad83e 8 * Copyright 2013-2014 Intel Mobile Communications GmbH
f0706e82
JB
9 *
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2 as
12 * published by the Free Software Foundation.
13 */
5a0e3ad6 14#include <linux/slab.h>
f0706e82
JB
15#include <linux/kernel.h>
16#include <linux/if_arp.h>
17#include <linux/netdevice.h>
18#include <linux/rtnetlink.h>
19#include <net/mac80211.h>
cf0277e7 20#include <net/ieee80211_radiotap.h>
f0706e82
JB
21#include "ieee80211_i.h"
22#include "sta_info.h"
e9f207f0 23#include "debugfs_netdev.h"
ee385855 24#include "mesh.h"
0d143fe1 25#include "led.h"
24487981 26#include "driver-ops.h"
cf0277e7 27#include "wme.h"
1be7fe8d 28#include "rate.h"
0d143fe1 29
c771c9d8
JB
30/**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL
37 * (2) modifications and readers are protected against each other by
38 * the iflist_mtx.
39 * (3) modifications are done in an RCU manner so atomic readers
40 * can traverse the list in RCU-safe blocks.
41 *
42 * As a consequence, reads (traversals) of the list can be protected
43 * by either the RTNL, the iflist_mtx or RCU.
44 */
45
1ea6f9c0
JB
46bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
47{
48 struct ieee80211_chanctx_conf *chanctx_conf;
49 int power;
50
51 rcu_read_lock();
52 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
53 if (!chanctx_conf) {
54 rcu_read_unlock();
55 return false;
56 }
57
0430c883 58 power = ieee80211_chandef_max_power(&chanctx_conf->def);
1ea6f9c0
JB
59 rcu_read_unlock();
60
61 if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
62 power = min(power, sdata->user_power_level);
63
64 if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
65 power = min(power, sdata->ap_power_level);
66
67 if (power != sdata->vif.bss_conf.txpower) {
68 sdata->vif.bss_conf.txpower = power;
69 ieee80211_hw_config(sdata->local, 0);
70 return true;
71 }
72
73 return false;
74}
75
db82d8a9
LB
76void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata,
77 bool update_bss)
1ea6f9c0 78{
db82d8a9 79 if (__ieee80211_recalc_txpower(sdata) || update_bss)
1ea6f9c0
JB
80 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
81}
c771c9d8 82
62a40a15 83static u32 __ieee80211_idle_off(struct ieee80211_local *local)
cc45ae54
JB
84{
85 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
86 return 0;
87
88 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
89 return IEEE80211_CONF_CHANGE_IDLE;
90}
91
62a40a15 92static u32 __ieee80211_idle_on(struct ieee80211_local *local)
cc45ae54
JB
93{
94 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
95 return 0;
96
3b24f4c6 97 ieee80211_flush_queues(local, NULL, false);
cc45ae54
JB
98
99 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
100 return IEEE80211_CONF_CHANGE_IDLE;
101}
102
62a40a15
JB
103static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
104 bool force_active)
cc45ae54 105{
1d5e1266 106 bool working, scanning, active;
cc45ae54 107 unsigned int led_trig_start = 0, led_trig_stop = 0;
cc45ae54 108
cc45ae54
JB
109 lockdep_assert_held(&local->mtx);
110
62a40a15
JB
111 active = force_active ||
112 !list_empty(&local->chanctx_list) ||
113 local->monitors;
cc45ae54 114
1d5e1266
JB
115 working = !local->ops->remain_on_channel &&
116 !list_empty(&local->roc_list);
cc45ae54 117
f1e3e051
JB
118 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
119 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
cc45ae54 120
cc45ae54
JB
121 if (working || scanning)
122 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
123 else
124 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
125
fd0f979a 126 if (active)
cc45ae54
JB
127 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
128 else
129 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
130
131 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
132
fd0f979a 133 if (working || scanning || active)
62a40a15
JB
134 return __ieee80211_idle_off(local);
135 return __ieee80211_idle_on(local);
136}
137
138u32 ieee80211_idle_off(struct ieee80211_local *local)
139{
140 return __ieee80211_recalc_idle(local, true);
141}
142
143void ieee80211_recalc_idle(struct ieee80211_local *local)
144{
145 u32 change = __ieee80211_recalc_idle(local, false);
fd0f979a
JB
146 if (change)
147 ieee80211_hw_config(local, change);
cc45ae54
JB
148}
149
0d143fe1
JB
150static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
151{
09b1426e 152 if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
0d143fe1 153 return -EINVAL;
0d143fe1 154
0d143fe1
JB
155 dev->mtu = new_mtu;
156 return 0;
157}
158
3899ba90 159static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
31eba5bc 160 bool check_dup)
478622e8 161{
ac20976d
HS
162 struct ieee80211_local *local = sdata->local;
163 struct ieee80211_sub_if_data *iter;
478622e8
HS
164 u64 new, mask, tmp;
165 u8 *m;
166 int ret = 0;
167
168 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
169 return 0;
170
171 m = addr;
172 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
173 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
174 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
175
176 m = local->hw.wiphy->addr_mask;
177 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
178 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
179 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
180
31eba5bc
FF
181 if (!check_dup)
182 return ret;
478622e8
HS
183
184 mutex_lock(&local->iflist_mtx);
ac20976d
HS
185 list_for_each_entry(iter, &local->interfaces, list) {
186 if (iter == sdata)
478622e8
HS
187 continue;
188
3899ba90
JL
189 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
190 !(iter->u.mntr_flags & MONITOR_FLAG_ACTIVE))
478622e8
HS
191 continue;
192
ac20976d 193 m = iter->vif.addr;
478622e8
HS
194 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
195 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
196 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
197
198 if ((new & ~mask) != (tmp & ~mask)) {
199 ret = -EINVAL;
200 break;
201 }
202 }
203 mutex_unlock(&local->iflist_mtx);
204
205 return ret;
206}
207
47846c9b
JB
208static int ieee80211_change_mac(struct net_device *dev, void *addr)
209{
210 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
fc5f7577 211 struct sockaddr *sa = addr;
31eba5bc 212 bool check_dup = true;
47846c9b
JB
213 int ret;
214
9607e6b6 215 if (ieee80211_sdata_running(sdata))
47846c9b
JB
216 return -EBUSY;
217
31eba5bc
FF
218 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
219 !(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
220 check_dup = false;
221
3899ba90 222 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
478622e8
HS
223 if (ret)
224 return ret;
225
fc5f7577 226 ret = eth_mac_addr(dev, sa);
47846c9b
JB
227
228 if (ret == 0)
fc5f7577 229 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
47846c9b
JB
230
231 return ret;
232}
233
0d143fe1
JB
234static inline int identical_mac_addr_allowed(int type1, int type2)
235{
236 return type1 == NL80211_IFTYPE_MONITOR ||
237 type2 == NL80211_IFTYPE_MONITOR ||
f142c6b9
JB
238 type1 == NL80211_IFTYPE_P2P_DEVICE ||
239 type2 == NL80211_IFTYPE_P2P_DEVICE ||
0d143fe1
JB
240 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
241 (type1 == NL80211_IFTYPE_WDS &&
242 (type2 == NL80211_IFTYPE_WDS ||
243 type2 == NL80211_IFTYPE_AP)) ||
244 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
245 (type1 == NL80211_IFTYPE_AP_VLAN &&
246 (type2 == NL80211_IFTYPE_AP ||
247 type2 == NL80211_IFTYPE_AP_VLAN));
248}
249
87490f6d
JB
250static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
251 enum nl80211_iftype iftype)
0d143fe1 252{
b4a4bf5d 253 struct ieee80211_local *local = sdata->local;
87490f6d 254 struct ieee80211_sub_if_data *nsdata;
b6a55015 255 int ret;
0d143fe1 256
87490f6d 257 ASSERT_RTNL();
0d143fe1
JB
258
259 /* we hold the RTNL here so can safely walk the list */
260 list_for_each_entry(nsdata, &local->interfaces, list) {
371a255e 261 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
239281f8
RL
262 /*
263 * Only OCB and monitor mode may coexist
264 */
265 if ((sdata->vif.type == NL80211_IFTYPE_OCB &&
266 nsdata->vif.type != NL80211_IFTYPE_MONITOR) ||
267 (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
268 nsdata->vif.type == NL80211_IFTYPE_OCB))
269 return -EBUSY;
270
0d143fe1
JB
271 /*
272 * Allow only a single IBSS interface to be up at any
273 * time. This is restricted because beacon distribution
274 * cannot work properly if both are in the same IBSS.
275 *
276 * To remove this restriction we'd have to disallow them
277 * from setting the same SSID on different IBSS interfaces
278 * belonging to the same hardware. Then, however, we're
279 * faced with having to adopt two different TSF timers...
280 */
87490f6d 281 if (iftype == NL80211_IFTYPE_ADHOC &&
0d143fe1
JB
282 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
283 return -EBUSY;
73da7d5b
SW
284 /*
285 * will not add another interface while any channel
286 * switch is active.
287 */
288 if (nsdata->vif.csa_active)
289 return -EBUSY;
0d143fe1
JB
290
291 /*
292 * The remaining checks are only performed for interfaces
293 * with the same MAC address.
294 */
371a255e
JB
295 if (!ether_addr_equal(sdata->vif.addr,
296 nsdata->vif.addr))
0d143fe1
JB
297 continue;
298
299 /*
300 * check whether it may have the same address
301 */
87490f6d 302 if (!identical_mac_addr_allowed(iftype,
0d143fe1
JB
303 nsdata->vif.type))
304 return -ENOTUNIQ;
305
306 /*
307 * can only add VLANs to enabled APs
308 */
87490f6d 309 if (iftype == NL80211_IFTYPE_AP_VLAN &&
0d143fe1
JB
310 nsdata->vif.type == NL80211_IFTYPE_AP)
311 sdata->bss = &nsdata->u.ap;
312 }
313 }
314
b6a55015
LC
315 mutex_lock(&local->chanctx_mtx);
316 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
317 mutex_unlock(&local->chanctx_mtx);
318 return ret;
87490f6d
JB
319}
320
a9865538
JB
321static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
322 enum nl80211_iftype iftype)
3a25a8c8
JB
323{
324 int n_queues = sdata->local->hw.queues;
325 int i;
326
a9865538 327 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
0ef24e52
IP
328 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
329 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
330 IEEE80211_INVAL_HW_QUEUE))
331 return -EINVAL;
332 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
333 n_queues))
334 return -EINVAL;
335 }
3a25a8c8
JB
336 }
337
a9865538
JB
338 if ((iftype != NL80211_IFTYPE_AP &&
339 iftype != NL80211_IFTYPE_P2P_GO &&
340 iftype != NL80211_IFTYPE_MESH_POINT) ||
bb3e10fb 341 !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
3a25a8c8
JB
342 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
343 return 0;
344 }
345
346 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
347 return -EINVAL;
348
349 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
350 return -EINVAL;
351
352 return 0;
353}
354
85416a4f
CL
355void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
356 const int offset)
357{
358 struct ieee80211_local *local = sdata->local;
359 u32 flags = sdata->u.mntr_flags;
360
361#define ADJUST(_f, _s) do { \
362 if (flags & MONITOR_FLAG_##_f) \
363 local->fif_##_s += offset; \
364 } while (0)
365
366 ADJUST(FCSFAIL, fcsfail);
367 ADJUST(PLCPFAIL, plcpfail);
368 ADJUST(CONTROL, control);
369 ADJUST(CONTROL, pspoll);
370 ADJUST(OTHER_BSS, other_bss);
371
372#undef ADJUST
373}
374
3a25a8c8
JB
375static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
376{
377 struct ieee80211_local *local = sdata->local;
378 int i;
379
380 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
381 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
382 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
a9d3c05c 383 else if (local->hw.queues >= IEEE80211_NUM_ACS)
3a25a8c8 384 sdata->vif.hw_queue[i] = i;
a9d3c05c
JB
385 else
386 sdata->vif.hw_queue[i] = 0;
3a25a8c8
JB
387 }
388 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
389}
390
3c3e21e7 391int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
4b6f1dd6
JB
392{
393 struct ieee80211_sub_if_data *sdata;
8b305780 394 int ret;
4b6f1dd6
JB
395
396 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
397 return 0;
398
8b305780 399 ASSERT_RTNL();
685fb72b 400
4b6f1dd6 401 if (local->monitor_sdata)
8b305780 402 return 0;
4b6f1dd6
JB
403
404 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
8b305780
JB
405 if (!sdata)
406 return -ENOMEM;
4b6f1dd6
JB
407
408 /* set up data */
409 sdata->local = local;
410 sdata->vif.type = NL80211_IFTYPE_MONITOR;
411 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
412 wiphy_name(local->hw.wiphy));
34171dc0 413 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
4b6f1dd6 414
2475b1cc
MS
415 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
416
3a25a8c8
JB
417 ieee80211_set_default_queues(sdata);
418
4b6f1dd6
JB
419 ret = drv_add_interface(local, sdata);
420 if (WARN_ON(ret)) {
421 /* ok .. stupid driver, it asked for this! */
422 kfree(sdata);
8b305780 423 return ret;
4b6f1dd6
JB
424 }
425
a9865538 426 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
3a25a8c8
JB
427 if (ret) {
428 kfree(sdata);
8b305780 429 return ret;
3a25a8c8
JB
430 }
431
fab57a6c
JB
432 mutex_lock(&local->iflist_mtx);
433 rcu_assign_pointer(local->monitor_sdata, sdata);
434 mutex_unlock(&local->iflist_mtx);
435
34a3740d 436 mutex_lock(&local->mtx);
4bf88530 437 ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
55de908a 438 IEEE80211_CHANCTX_EXCLUSIVE);
34a3740d 439 mutex_unlock(&local->mtx);
55de908a 440 if (ret) {
fab57a6c 441 mutex_lock(&local->iflist_mtx);
0c2bef46 442 RCU_INIT_POINTER(local->monitor_sdata, NULL);
fab57a6c
JB
443 mutex_unlock(&local->iflist_mtx);
444 synchronize_net();
55de908a
JB
445 drv_remove_interface(local, sdata);
446 kfree(sdata);
8b305780 447 return ret;
55de908a
JB
448 }
449
8b305780 450 return 0;
4b6f1dd6
JB
451}
452
3c3e21e7 453void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
4b6f1dd6
JB
454{
455 struct ieee80211_sub_if_data *sdata;
456
457 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
458 return;
459
8b305780
JB
460 ASSERT_RTNL();
461
685fb72b 462 mutex_lock(&local->iflist_mtx);
4b6f1dd6 463
685fb72b
JB
464 sdata = rcu_dereference_protected(local->monitor_sdata,
465 lockdep_is_held(&local->iflist_mtx));
8b305780
JB
466 if (!sdata) {
467 mutex_unlock(&local->iflist_mtx);
468 return;
469 }
4b6f1dd6 470
0c2bef46 471 RCU_INIT_POINTER(local->monitor_sdata, NULL);
8b305780
JB
472 mutex_unlock(&local->iflist_mtx);
473
4b6f1dd6
JB
474 synchronize_net();
475
34a3740d 476 mutex_lock(&local->mtx);
55de908a 477 ieee80211_vif_release_channel(sdata);
34a3740d 478 mutex_unlock(&local->mtx);
55de908a 479
4b6f1dd6
JB
480 drv_remove_interface(local, sdata);
481
482 kfree(sdata);
483}
484
34d4bc4d
JB
485/*
486 * NOTE: Be very careful when changing this function, it must NOT return
487 * an error on interface type changes that have been pre-checked, so most
488 * checks should be in ieee80211_check_concurrent_iface.
489 */
f142c6b9 490int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
87490f6d 491{
f142c6b9
JB
492 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
493 struct net_device *dev = wdev->netdev;
87490f6d
JB
494 struct ieee80211_local *local = sdata->local;
495 struct sta_info *sta;
496 u32 changed = 0;
497 int res;
498 u32 hw_reconf_flags = 0;
499
0d143fe1
JB
500 switch (sdata->vif.type) {
501 case NL80211_IFTYPE_WDS:
502 if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
503 return -ENOLINK;
504 break;
665c93a9
JB
505 case NL80211_IFTYPE_AP_VLAN: {
506 struct ieee80211_sub_if_data *master;
507
0d143fe1
JB
508 if (!sdata->bss)
509 return -ENOLINK;
665c93a9 510
4e141dad 511 mutex_lock(&local->mtx);
0d143fe1 512 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
4e141dad 513 mutex_unlock(&local->mtx);
665c93a9
JB
514
515 master = container_of(sdata->bss,
516 struct ieee80211_sub_if_data, u.ap);
517 sdata->control_port_protocol =
518 master->control_port_protocol;
519 sdata->control_port_no_encrypt =
520 master->control_port_no_encrypt;
1351c5d3
JB
521 sdata->vif.cab_queue = master->vif.cab_queue;
522 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
523 sizeof(sdata->vif.hw_queue));
2967e031 524 sdata->vif.bss_conf.chandef = master->vif.bss_conf.chandef;
f9dca80b
MK
525
526 mutex_lock(&local->key_mtx);
527 sdata->crypto_tx_tailroom_needed_cnt +=
528 master->crypto_tx_tailroom_needed_cnt;
529 mutex_unlock(&local->key_mtx);
530
0d143fe1 531 break;
665c93a9 532 }
0d143fe1
JB
533 case NL80211_IFTYPE_AP:
534 sdata->bss = &sdata->u.ap;
535 break;
536 case NL80211_IFTYPE_MESH_POINT:
0d143fe1
JB
537 case NL80211_IFTYPE_STATION:
538 case NL80211_IFTYPE_MONITOR:
539 case NL80211_IFTYPE_ADHOC:
f142c6b9 540 case NL80211_IFTYPE_P2P_DEVICE:
6e0bd6c3 541 case NL80211_IFTYPE_OCB:
0d143fe1
JB
542 /* no special treatment */
543 break;
544 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 545 case NUM_NL80211_IFTYPES:
2ca27bcf
JB
546 case NL80211_IFTYPE_P2P_CLIENT:
547 case NL80211_IFTYPE_P2P_GO:
0d143fe1
JB
548 /* cannot happen */
549 WARN_ON(1);
550 break;
551 }
552
553 if (local->open_count == 0) {
24487981 554 res = drv_start(local);
0d143fe1
JB
555 if (res)
556 goto err_del_bss;
e8975581
JB
557 /* we're brought up, everything changes */
558 hw_reconf_flags = ~0;
1f87f7d3 559 ieee80211_led_radio(local, true);
67408c8c
JB
560 ieee80211_mod_tpt_led_trig(local,
561 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
0d143fe1
JB
562 }
563
564 /*
bf533e0b
JB
565 * Copy the hopefully now-present MAC address to
566 * this interface, if it has the special null one.
0d143fe1 567 */
f142c6b9 568 if (dev && is_zero_ether_addr(dev->dev_addr)) {
bf533e0b
JB
569 memcpy(dev->dev_addr,
570 local->hw.wiphy->perm_addr,
571 ETH_ALEN);
572 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
573
574 if (!is_valid_ether_addr(dev->dev_addr)) {
4d6c36fa
JB
575 res = -EADDRNOTAVAIL;
576 goto err_stop;
0adc23f5 577 }
0d143fe1
JB
578 }
579
0d143fe1
JB
580 switch (sdata->vif.type) {
581 case NL80211_IFTYPE_AP_VLAN:
4d76d21b
JB
582 /* no need to tell driver, but set carrier and chanctx */
583 if (rtnl_dereference(sdata->bss->beacon)) {
584 ieee80211_vif_vlan_copy_chanctx(sdata);
3edaf3e6 585 netif_carrier_on(dev);
4d76d21b 586 } else {
3edaf3e6 587 netif_carrier_off(dev);
4d76d21b 588 }
0d143fe1
JB
589 break;
590 case NL80211_IFTYPE_MONITOR:
591 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
592 local->cooked_mntrs++;
593 break;
594 }
595
31eba5bc
FF
596 if (sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE) {
597 res = drv_add_interface(local, sdata);
598 if (res)
599 goto err_stop;
600 } else if (local->monitors == 0 && local->open_count == 0) {
075e0847
JB
601 res = ieee80211_add_virtual_monitor(local);
602 if (res)
603 goto err_stop;
604 }
605
0d143fe1
JB
606 /* must be before the call to ieee80211_configure_filter */
607 local->monitors++;
e8975581 608 if (local->monitors == 1) {
0869aea0
JB
609 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
610 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
e8975581 611 }
0d143fe1 612
85416a4f 613 ieee80211_adjust_monitor_flags(sdata, 1);
0d143fe1 614 ieee80211_configure_filter(local);
801d929c
FF
615 mutex_lock(&local->mtx);
616 ieee80211_recalc_idle(local);
617 mutex_unlock(&local->mtx);
53e9b1de
DG
618
619 netif_carrier_on(dev);
0d143fe1 620 break;
0d143fe1 621 default:
34d4bc4d 622 if (coming_up) {
075e0847
JB
623 ieee80211_del_virtual_monitor(local);
624
7b7eab6f 625 res = drv_add_interface(local, sdata);
34d4bc4d
JB
626 if (res)
627 goto err_stop;
a9865538
JB
628 res = ieee80211_check_queues(sdata,
629 ieee80211_vif_type_p2p(&sdata->vif));
3a25a8c8
JB
630 if (res)
631 goto err_del_interface;
34d4bc4d 632 }
0d143fe1 633
29cbe68c 634 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e3b90ca2 635 local->fif_pspoll++;
7be5086d 636 local->fif_probe_req++;
e3b90ca2 637
e3b90ca2 638 ieee80211_configure_filter(local);
7be5086d
JB
639 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
640 local->fif_probe_req++;
a3c9aa51 641 }
e3b90ca2 642
f142c6b9
JB
643 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
644 changed |= ieee80211_reset_erp_info(sdata);
0d143fe1 645 ieee80211_bss_info_change_notify(sdata, changed);
0d143fe1 646
c405c629
JB
647 switch (sdata->vif.type) {
648 case NL80211_IFTYPE_STATION:
649 case NL80211_IFTYPE_ADHOC:
650 case NL80211_IFTYPE_AP:
651 case NL80211_IFTYPE_MESH_POINT:
6e0bd6c3 652 case NL80211_IFTYPE_OCB:
0d143fe1 653 netif_carrier_off(dev);
c405c629 654 break;
1411af15 655 case NL80211_IFTYPE_WDS:
f142c6b9 656 case NL80211_IFTYPE_P2P_DEVICE:
1411af15 657 break;
c405c629 658 default:
a2310824
JB
659 /* not reached */
660 WARN_ON(1);
c405c629 661 }
59034591
EP
662
663 /*
664 * set default queue parameters so drivers don't
665 * need to initialise the hardware if the hardware
666 * doesn't start up with sane defaults
667 */
3abead59 668 ieee80211_set_wmm_default(sdata, true);
0d143fe1
JB
669 }
670
2d2080c3
JB
671 set_bit(SDATA_STATE_RUNNING, &sdata->state);
672
0d143fe1
JB
673 if (sdata->vif.type == NL80211_IFTYPE_WDS) {
674 /* Create STA entry for the WDS peer */
675 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
676 GFP_KERNEL);
677 if (!sta) {
678 res = -ENOMEM;
679 goto err_del_interface;
680 }
681
83d5cc01
JB
682 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
683 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
684 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
0d143fe1
JB
685
686 res = sta_info_insert(sta);
687 if (res) {
688 /* STA has been freed */
689 goto err_del_interface;
690 }
1be7fe8d
BJ
691
692 rate_control_rate_init(sta);
1411af15 693 netif_carrier_on(dev);
f142c6b9
JB
694 } else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
695 rcu_assign_pointer(local->p2p_sdata, sdata);
0d143fe1
JB
696 }
697
0d143fe1
JB
698 /*
699 * set_multicast_list will be invoked by the networking core
700 * which will check whether any increments here were done in
701 * error and sync them down to the hardware as filter flags.
702 */
703 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
704 atomic_inc(&local->iff_allmultis);
705
34d4bc4d
JB
706 if (coming_up)
707 local->open_count++;
708
59034591 709 if (hw_reconf_flags)
e8975581 710 ieee80211_hw_config(local, hw_reconf_flags);
0d143fe1 711
10f644a4 712 ieee80211_recalc_ps(local, -1);
965bedad 713
2b436312
JB
714 if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
715 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
716 /* XXX: for AP_VLAN, actually track AP queues */
717 netif_tx_start_all_queues(dev);
718 } else if (dev) {
2b730daa
JB
719 unsigned long flags;
720 int n_acs = IEEE80211_NUM_ACS;
721 int ac;
722
723 if (local->hw.queues < IEEE80211_NUM_ACS)
724 n_acs = 1;
725
726 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
727 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
728 (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
729 skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
730 for (ac = 0; ac < n_acs; ac++) {
731 int ac_queue = sdata->vif.hw_queue[ac];
732
733 if (local->queue_stop_reasons[ac_queue] == 0 &&
734 skb_queue_empty(&local->pending[ac_queue]))
735 netif_start_subqueue(dev, ac);
736 }
737 }
738 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
739 }
0d143fe1
JB
740
741 return 0;
742 err_del_interface:
7b7eab6f 743 drv_remove_interface(local, sdata);
0d143fe1 744 err_stop:
24487981
JB
745 if (!local->open_count)
746 drv_stop(local);
0d143fe1
JB
747 err_del_bss:
748 sdata->bss = NULL;
4e141dad
MK
749 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
750 mutex_lock(&local->mtx);
0d143fe1 751 list_del(&sdata->u.vlan.list);
4e141dad
MK
752 mutex_unlock(&local->mtx);
753 }
4d6c36fa 754 /* might already be clear but that doesn't matter */
2d2080c3 755 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
0d143fe1
JB
756 return res;
757}
758
34d4bc4d 759static int ieee80211_open(struct net_device *dev)
0d143fe1
JB
760{
761 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
34d4bc4d
JB
762 int err;
763
764 /* fail early if user set an invalid address */
2fcf2824 765 if (!is_valid_ether_addr(dev->dev_addr))
34d4bc4d
JB
766 return -EADDRNOTAVAIL;
767
768 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
769 if (err)
770 return err;
771
f142c6b9 772 return ieee80211_do_open(&sdata->wdev, true);
34d4bc4d
JB
773}
774
775static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
776 bool going_down)
777{
0d143fe1 778 struct ieee80211_local *local = sdata->local;
5061b0c2
JB
779 unsigned long flags;
780 struct sk_buff *skb, *tmp;
e8975581 781 u32 hw_reconf_flags = 0;
09f4114e 782 int i, flushed;
397a7a24 783 struct ps_data *ps;
d2859df5 784 struct cfg80211_chan_def chandef;
46238845 785 bool cancel_scan;
0d143fe1 786
c29acf20
RM
787 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
788
46238845
JB
789 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
790 if (cancel_scan)
352ffad6
BC
791 ieee80211_scan_cancel(local);
792
0d143fe1
JB
793 /*
794 * Stop TX on this interface first.
795 */
f142c6b9
JB
796 if (sdata->dev)
797 netif_tx_stop_all_queues(sdata->dev);
0d143fe1 798
c8f994ee 799 ieee80211_roc_purge(local, sdata);
af6b6374 800
8ffcc704
EG
801 switch (sdata->vif.type) {
802 case NL80211_IFTYPE_STATION:
572078be 803 ieee80211_mgd_stop(sdata);
8ffcc704
EG
804 break;
805 case NL80211_IFTYPE_ADHOC:
cd7760e6 806 ieee80211_ibss_stop(sdata);
8ffcc704
EG
807 break;
808 case NL80211_IFTYPE_AP:
809 cancel_work_sync(&sdata->u.ap.request_smps_work);
810 break;
811 default:
812 break;
813 }
cd7760e6 814
0d143fe1
JB
815 /*
816 * Remove all stations associated with this interface.
817 *
818 * This must be done before calling ops->remove_interface()
819 * because otherwise we can later invoke ops->sta_notify()
820 * whenever the STAs are removed, and that invalidates driver
821 * assumptions about always getting a vif pointer that is valid
822 * (because if we remove a STA after ops->remove_interface()
823 * the driver will have removed the vif info already!)
824 *
5eb8f4d7
JB
825 * In WDS mode a station must exist here and be flushed, for
826 * AP_VLANs stations may exist since there's nothing else that
827 * would have removed them, but in other modes there shouldn't
828 * be any stations.
0d143fe1 829 */
d34ba216 830 flushed = sta_info_flush(sdata);
5eb8f4d7
JB
831 WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
832 ((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
833 (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1)));
0d143fe1 834
df140465 835 /* don't count this interface for allmulti while it is down */
0d143fe1
JB
836 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
837 atomic_dec(&local->iff_allmultis);
838
7be5086d 839 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e3b90ca2 840 local->fif_pspoll--;
7be5086d
JB
841 local->fif_probe_req--;
842 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
843 local->fif_probe_req--;
844 }
e3b90ca2 845
f142c6b9
JB
846 if (sdata->dev) {
847 netif_addr_lock_bh(sdata->dev);
848 spin_lock_bh(&local->filter_lock);
849 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
850 sdata->dev->addr_len);
851 spin_unlock_bh(&local->filter_lock);
852 netif_addr_unlock_bh(sdata->dev);
f142c6b9 853 }
3ac64bee 854
7cbf0ba5
VN
855 del_timer_sync(&local->dynamic_ps_timer);
856 cancel_work_sync(&local->dynamic_ps_enable_work);
0d143fe1 857
04ecd257 858 cancel_work_sync(&sdata->recalc_smps);
dbd72850 859 sdata_lock(sdata);
59af6928 860 mutex_lock(&local->mtx);
73da7d5b 861 sdata->vif.csa_active = false;
0c21e632
LC
862 if (sdata->vif.type == NL80211_IFTYPE_STATION)
863 sdata->u.mgd.csa_waiting_bcn = false;
a46992b4
LC
864 if (sdata->csa_block_tx) {
865 ieee80211_wake_vif_queues(local, sdata,
866 IEEE80211_QUEUE_STOP_REASON_CSA);
867 sdata->csa_block_tx = false;
868 }
59af6928 869 mutex_unlock(&local->mtx);
dbd72850 870 sdata_unlock(sdata);
59af6928 871
73da7d5b 872 cancel_work_sync(&sdata->csa_finalize_work);
04ecd257 873
164eb02d
SW
874 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
875
876 if (sdata->wdev.cac_started) {
d2859df5 877 chandef = sdata->vif.bss_conf.chandef;
b2c0958b 878 WARN_ON(local->suspended);
34a3740d 879 mutex_lock(&local->mtx);
164eb02d 880 ieee80211_vif_release_channel(sdata);
34a3740d 881 mutex_unlock(&local->mtx);
d2859df5
JD
882 cfg80211_cac_event(sdata->dev, &chandef,
883 NL80211_RADAR_CAC_ABORTED,
164eb02d
SW
884 GFP_KERNEL);
885 }
886
0d143fe1
JB
887 /* APs need special treatment */
888 if (sdata->vif.type == NL80211_IFTYPE_AP) {
57c9fff3 889 struct ieee80211_sub_if_data *vlan, *tmpsdata;
0d143fe1
JB
890
891 /* down all dependent devices, that is VLANs */
57c9fff3 892 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
0d143fe1
JB
893 u.vlan.list)
894 dev_close(vlan->dev);
895 WARN_ON(!list_empty(&sdata->u.ap.vlans));
397a7a24
MB
896 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
897 /* remove all packets in parent bc_buf pointing to this dev */
898 ps = &sdata->bss->ps;
899
900 spin_lock_irqsave(&ps->bc_buf.lock, flags);
901 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
902 if (skb->dev == sdata->dev) {
903 __skb_unlink(skb, &ps->bc_buf);
904 local->total_ps_buffered--;
905 ieee80211_free_txskb(&local->hw, skb);
906 }
907 }
908 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
0d143fe1
JB
909 }
910
34d4bc4d
JB
911 if (going_down)
912 local->open_count--;
0d143fe1
JB
913
914 switch (sdata->vif.type) {
915 case NL80211_IFTYPE_AP_VLAN:
4e141dad 916 mutex_lock(&local->mtx);
0d143fe1 917 list_del(&sdata->u.vlan.list);
4e141dad 918 mutex_unlock(&local->mtx);
0c2bef46 919 RCU_INIT_POINTER(sdata->vif.chanctx_conf, NULL);
10b68487
FF
920 /* see comment in the default case below */
921 ieee80211_free_keys(sdata, true);
0d143fe1
JB
922 /* no need to tell driver */
923 break;
924 case NL80211_IFTYPE_MONITOR:
925 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
926 local->cooked_mntrs--;
927 break;
928 }
929
930 local->monitors--;
e8975581 931 if (local->monitors == 0) {
0869aea0
JB
932 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
933 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
e8975581 934 }
0d143fe1 935
85416a4f 936 ieee80211_adjust_monitor_flags(sdata, -1);
0d143fe1 937 break;
f142c6b9
JB
938 case NL80211_IFTYPE_P2P_DEVICE:
939 /* relies on synchronize_rcu() below */
0c2bef46 940 RCU_INIT_POINTER(local->p2p_sdata, NULL);
f142c6b9 941 /* fall through */
0d143fe1 942 default:
0b7dff4f 943 cancel_work_sync(&sdata->work);
35f20c14
JB
944 /*
945 * When we get here, the interface is marked down.
7907c7d3 946 * Free the remaining keys, if there are any
10b68487
FF
947 * (which can happen in AP mode if userspace sets
948 * keys before the interface is operating, and maybe
949 * also in WDS mode)
75de9113 950 *
7907c7d3
JB
951 * Force the key freeing to always synchronize_net()
952 * to wait for the RX path in case it is using this
10b68487 953 * interface enqueuing frames at this very time on
75de9113 954 * another CPU.
35f20c14 955 */
7907c7d3 956 ieee80211_free_keys(sdata, true);
1861b845 957 skb_queue_purge(&sdata->skb_queue);
0d143fe1
JB
958 }
959
960 sdata->bss = NULL;
961
5061b0c2
JB
962 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
963 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
964 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
965 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
966 if (info->control.vif == &sdata->vif) {
967 __skb_unlink(skb, &local->pending[i]);
d4fa14cd 968 ieee80211_free_txskb(&local->hw, skb);
5061b0c2
JB
969 }
970 }
971 }
972 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
075e0847 973
ba8c3d6f
FF
974 if (sdata->vif.txq) {
975 struct txq_info *txqi = to_txq_info(sdata->vif.txq);
976
977 ieee80211_purge_tx_queue(&local->hw, &txqi->queue);
978 atomic_set(&sdata->txqs_len[txqi->txq.ac], 0);
979 }
980
b2c0958b
JB
981 if (local->open_count == 0)
982 ieee80211_clear_tx_pending(local);
983
984 /*
985 * If the interface goes down while suspended, presumably because
986 * the device was unplugged and that happens before our resume,
987 * then the driver is already unconfigured and the remainder of
988 * this function isn't needed.
989 * XXX: what about WoWLAN? If the device has software state, e.g.
990 * memory allocated, it might expect teardown commands from
991 * mac80211 here?
992 */
993 if (local->suspended) {
994 WARN_ON(local->wowlan);
995 WARN_ON(rtnl_dereference(local->monitor_sdata));
996 return;
997 }
998
999 switch (sdata->vif.type) {
1000 case NL80211_IFTYPE_AP_VLAN:
1001 break;
1002 case NL80211_IFTYPE_MONITOR:
1003 if (local->monitors == 0)
1004 ieee80211_del_virtual_monitor(local);
1005
1006 mutex_lock(&local->mtx);
1007 ieee80211_recalc_idle(local);
1008 mutex_unlock(&local->mtx);
31eba5bc
FF
1009
1010 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
1011 break;
1012
1013 /* fall through */
b2c0958b
JB
1014 default:
1015 if (going_down)
1016 drv_remove_interface(local, sdata);
1017 }
1018
1019 ieee80211_recalc_ps(local, -1);
1020
46238845
JB
1021 if (cancel_scan)
1022 flush_delayed_work(&local->scan_work);
1023
b2c0958b
JB
1024 if (local->open_count == 0) {
1025 ieee80211_stop_device(local);
1026
1027 /* no reconfiguring after stop! */
1028 return;
1029 }
1030
1031 /* do after stop to avoid reconfiguring when we stop anyway */
1032 ieee80211_configure_filter(local);
1033 ieee80211_hw_config(local, hw_reconf_flags);
1034
1035 if (local->monitors == local->open_count)
075e0847 1036 ieee80211_add_virtual_monitor(local);
34d4bc4d
JB
1037}
1038
1039static int ieee80211_stop(struct net_device *dev)
1040{
1041 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1042
1043 ieee80211_do_stop(sdata, true);
5061b0c2 1044
0d143fe1
JB
1045 return 0;
1046}
1047
1048static void ieee80211_set_multicast_list(struct net_device *dev)
1049{
0d143fe1 1050 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
b4a4bf5d 1051 struct ieee80211_local *local = sdata->local;
df140465 1052 int allmulti, sdata_allmulti;
0d143fe1
JB
1053
1054 allmulti = !!(dev->flags & IFF_ALLMULTI);
0d143fe1 1055 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
0d143fe1
JB
1056
1057 if (allmulti != sdata_allmulti) {
1058 if (dev->flags & IFF_ALLMULTI)
1059 atomic_inc(&local->iff_allmultis);
1060 else
1061 atomic_dec(&local->iff_allmultis);
1062 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
1063 }
1064
3b8d81e0 1065 spin_lock_bh(&local->filter_lock);
22bedad3 1066 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
3b8d81e0 1067 spin_unlock_bh(&local->filter_lock);
3ac64bee 1068 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
0d143fe1
JB
1069}
1070
75636525
JB
1071/*
1072 * Called when the netdev is removed or, by the code below, before
1073 * the interface type changes.
1074 */
f142c6b9 1075static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
f0706e82
JB
1076{
1077 int i;
1078
75636525 1079 /* free extra data */
7907c7d3 1080 ieee80211_free_keys(sdata, false);
75636525 1081
aee14ceb
JM
1082 ieee80211_debugfs_remove_netdev(sdata);
1083
f0706e82 1084 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
75636525
JB
1085 __skb_queue_purge(&sdata->fragments[i].skb_list);
1086 sdata->fragment_next = 0;
11a843b7 1087
b9dcf712
JB
1088 if (ieee80211_vif_is_mesh(&sdata->vif))
1089 mesh_rmc_free(sdata);
f0706e82
JB
1090}
1091
f142c6b9
JB
1092static void ieee80211_uninit(struct net_device *dev)
1093{
1094 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
1095}
1096
cf0277e7 1097static u16 ieee80211_netdev_select_queue(struct net_device *dev,
f663dd9a 1098 struct sk_buff *skb,
99932d4f
DB
1099 void *accel_priv,
1100 select_queue_fallback_t fallback)
cf0277e7
JB
1101{
1102 return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
1103}
1104
5a490510
JB
1105static struct rtnl_link_stats64 *
1106ieee80211_get_stats64(struct net_device *dev, struct rtnl_link_stats64 *stats)
1107{
1108 int i;
1109
1110 for_each_possible_cpu(i) {
1111 const struct pcpu_sw_netstats *tstats;
1112 u64 rx_packets, rx_bytes, tx_packets, tx_bytes;
1113 unsigned int start;
1114
1115 tstats = per_cpu_ptr(dev->tstats, i);
1116
1117 do {
1118 start = u64_stats_fetch_begin_irq(&tstats->syncp);
1119 rx_packets = tstats->rx_packets;
1120 tx_packets = tstats->tx_packets;
1121 rx_bytes = tstats->rx_bytes;
1122 tx_bytes = tstats->tx_bytes;
1123 } while (u64_stats_fetch_retry_irq(&tstats->syncp, start));
1124
1125 stats->rx_packets += rx_packets;
1126 stats->tx_packets += tx_packets;
1127 stats->rx_bytes += rx_bytes;
1128 stats->tx_bytes += tx_bytes;
1129 }
1130
1131 return stats;
1132}
1133
587e729e
JB
1134static const struct net_device_ops ieee80211_dataif_ops = {
1135 .ndo_open = ieee80211_open,
1136 .ndo_stop = ieee80211_stop,
f142c6b9 1137 .ndo_uninit = ieee80211_uninit,
587e729e 1138 .ndo_start_xmit = ieee80211_subif_start_xmit,
afc4b13d 1139 .ndo_set_rx_mode = ieee80211_set_multicast_list,
587e729e 1140 .ndo_change_mtu = ieee80211_change_mtu,
47846c9b 1141 .ndo_set_mac_address = ieee80211_change_mac,
cf0277e7 1142 .ndo_select_queue = ieee80211_netdev_select_queue,
5a490510 1143 .ndo_get_stats64 = ieee80211_get_stats64,
587e729e
JB
1144};
1145
cf0277e7 1146static u16 ieee80211_monitor_select_queue(struct net_device *dev,
f663dd9a 1147 struct sk_buff *skb,
99932d4f
DB
1148 void *accel_priv,
1149 select_queue_fallback_t fallback)
cf0277e7
JB
1150{
1151 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1152 struct ieee80211_local *local = sdata->local;
1153 struct ieee80211_hdr *hdr;
1154 struct ieee80211_radiotap_header *rtap = (void *)skb->data;
1155
32c5057b 1156 if (local->hw.queues < IEEE80211_NUM_ACS)
cf0277e7
JB
1157 return 0;
1158
1159 if (skb->len < 4 ||
b49bb574 1160 skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */)
cf0277e7
JB
1161 return 0; /* doesn't matter, frame will be dropped */
1162
b49bb574 1163 hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len));
cf0277e7 1164
00e96dec 1165 return ieee80211_select_queue_80211(sdata, skb, hdr);
cf0277e7
JB
1166}
1167
587e729e
JB
1168static const struct net_device_ops ieee80211_monitorif_ops = {
1169 .ndo_open = ieee80211_open,
1170 .ndo_stop = ieee80211_stop,
f142c6b9 1171 .ndo_uninit = ieee80211_uninit,
587e729e 1172 .ndo_start_xmit = ieee80211_monitor_start_xmit,
afc4b13d 1173 .ndo_set_rx_mode = ieee80211_set_multicast_list,
587e729e 1174 .ndo_change_mtu = ieee80211_change_mtu,
31eba5bc 1175 .ndo_set_mac_address = ieee80211_change_mac,
cf0277e7 1176 .ndo_select_queue = ieee80211_monitor_select_queue,
5a490510 1177 .ndo_get_stats64 = ieee80211_get_stats64,
587e729e
JB
1178};
1179
5a490510
JB
1180static void ieee80211_if_free(struct net_device *dev)
1181{
1182 free_percpu(dev->tstats);
1183 free_netdev(dev);
1184}
1185
587e729e
JB
1186static void ieee80211_if_setup(struct net_device *dev)
1187{
1188 ether_setup(dev);
550fd08c 1189 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
587e729e 1190 dev->netdev_ops = &ieee80211_dataif_ops;
5a490510 1191 dev->destructor = ieee80211_if_free;
587e729e
JB
1192}
1193
1fa57d01
JB
1194static void ieee80211_iface_work(struct work_struct *work)
1195{
1196 struct ieee80211_sub_if_data *sdata =
1197 container_of(work, struct ieee80211_sub_if_data, work);
1198 struct ieee80211_local *local = sdata->local;
1199 struct sk_buff *skb;
344eec67 1200 struct sta_info *sta;
c1475ca9 1201 struct ieee80211_ra_tid *ra_tid;
08cf42e8 1202 struct ieee80211_rx_agg *rx_agg;
1fa57d01
JB
1203
1204 if (!ieee80211_sdata_running(sdata))
1205 return;
1206
1207 if (local->scanning)
1208 return;
1209
4afaff17 1210 if (!ieee80211_can_run_worker(local))
1fa57d01
JB
1211 return;
1212
1213 /* first process frames */
1214 while ((skb = skb_dequeue(&sdata->skb_queue))) {
bed7ee6e
JB
1215 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1216
c1475ca9
JB
1217 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) {
1218 ra_tid = (void *)&skb->cb;
1219 ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra,
1220 ra_tid->tid);
1221 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) {
1222 ra_tid = (void *)&skb->cb;
1223 ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra,
1224 ra_tid->tid);
08cf42e8
MK
1225 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_START) {
1226 rx_agg = (void *)&skb->cb;
1227 mutex_lock(&local->sta_mtx);
1228 sta = sta_info_get_bss(sdata, rx_agg->addr);
4549cf2b 1229 if (sta)
08cf42e8 1230 __ieee80211_start_rx_ba_session(sta,
4549cf2b 1231 0, 0, 0, 1, rx_agg->tid,
08cf42e8 1232 IEEE80211_MAX_AMPDU_BUF,
4549cf2b 1233 false, true);
08cf42e8
MK
1234 mutex_unlock(&local->sta_mtx);
1235 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_STOP) {
1236 rx_agg = (void *)&skb->cb;
1237 mutex_lock(&local->sta_mtx);
1238 sta = sta_info_get_bss(sdata, rx_agg->addr);
1239 if (sta)
1240 __ieee80211_stop_rx_ba_session(sta,
1241 rx_agg->tid,
1242 WLAN_BACK_RECIPIENT, 0,
1243 false);
1244 mutex_unlock(&local->sta_mtx);
8a4d32f3
AN
1245 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_TDLS_CHSW) {
1246 ieee80211_process_tdls_channel_switch(sdata, skb);
c1475ca9
JB
1247 } else if (ieee80211_is_action(mgmt->frame_control) &&
1248 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
bed7ee6e 1249 int len = skb->len;
bed7ee6e 1250
a93e3644 1251 mutex_lock(&local->sta_mtx);
875ae5f6 1252 sta = sta_info_get_bss(sdata, mgmt->sa);
bed7ee6e
JB
1253 if (sta) {
1254 switch (mgmt->u.action.u.addba_req.action_code) {
1255 case WLAN_ACTION_ADDBA_REQ:
1256 ieee80211_process_addba_request(
1257 local, sta, mgmt, len);
1258 break;
1259 case WLAN_ACTION_ADDBA_RESP:
1260 ieee80211_process_addba_resp(local, sta,
1261 mgmt, len);
1262 break;
1263 case WLAN_ACTION_DELBA:
1264 ieee80211_process_delba(sdata, sta,
1265 mgmt, len);
1266 break;
1267 default:
1268 WARN_ON(1);
1269 break;
1270 }
1271 }
a93e3644 1272 mutex_unlock(&local->sta_mtx);
344eec67
JB
1273 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1274 struct ieee80211_hdr *hdr = (void *)mgmt;
1275 /*
1276 * So the frame isn't mgmt, but frame_control
1277 * is at the right place anyway, of course, so
1278 * the if statement is correct.
1279 *
1280 * Warn if we have other data frame types here,
1281 * they must not get here.
1282 */
1283 WARN_ON(hdr->frame_control &
1284 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1285 WARN_ON(!(hdr->seq_ctrl &
1286 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1287 /*
1288 * This was a fragment of a frame, received while
1289 * a block-ack session was active. That cannot be
1290 * right, so terminate the session.
1291 */
a93e3644 1292 mutex_lock(&local->sta_mtx);
875ae5f6 1293 sta = sta_info_get_bss(sdata, mgmt->sa);
344eec67
JB
1294 if (sta) {
1295 u16 tid = *ieee80211_get_qos_ctl(hdr) &
1296 IEEE80211_QOS_CTL_TID_MASK;
1297
1298 __ieee80211_stop_rx_ba_session(
1299 sta, tid, WLAN_BACK_RECIPIENT,
53f73c09
JB
1300 WLAN_REASON_QSTA_REQUIRE_SETUP,
1301 true);
344eec67 1302 }
a93e3644 1303 mutex_unlock(&local->sta_mtx);
bed7ee6e 1304 } else switch (sdata->vif.type) {
1fa57d01
JB
1305 case NL80211_IFTYPE_STATION:
1306 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1307 break;
1308 case NL80211_IFTYPE_ADHOC:
1309 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1310 break;
1311 case NL80211_IFTYPE_MESH_POINT:
1312 if (!ieee80211_vif_is_mesh(&sdata->vif))
1313 break;
1314 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1315 break;
1316 default:
1317 WARN(1, "frame for unexpected interface type");
1fa57d01
JB
1318 break;
1319 }
36b3a628
JB
1320
1321 kfree_skb(skb);
1fa57d01
JB
1322 }
1323
1324 /* then other type-dependent work */
1325 switch (sdata->vif.type) {
1326 case NL80211_IFTYPE_STATION:
1327 ieee80211_sta_work(sdata);
1328 break;
1329 case NL80211_IFTYPE_ADHOC:
1330 ieee80211_ibss_work(sdata);
1331 break;
1332 case NL80211_IFTYPE_MESH_POINT:
1333 if (!ieee80211_vif_is_mesh(&sdata->vif))
1334 break;
1335 ieee80211_mesh_work(sdata);
1336 break;
239281f8
RL
1337 case NL80211_IFTYPE_OCB:
1338 ieee80211_ocb_work(sdata);
1339 break;
1fa57d01
JB
1340 default:
1341 break;
1342 }
1343}
1344
04ecd257
JB
1345static void ieee80211_recalc_smps_work(struct work_struct *work)
1346{
1347 struct ieee80211_sub_if_data *sdata =
1348 container_of(work, struct ieee80211_sub_if_data, recalc_smps);
1349
1350 ieee80211_recalc_smps(sdata);
1351}
1fa57d01 1352
75636525
JB
1353/*
1354 * Helper function to initialise an interface to a specific type.
1355 */
1356static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
05c914fe 1357 enum nl80211_iftype type)
f0706e82 1358{
239281f8
RL
1359 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff,
1360 0xff, 0xff, 0xff};
1361
75636525
JB
1362 /* clear type-dependent union */
1363 memset(&sdata->u, 0, sizeof(sdata->u));
1364
1365 /* and set some type-dependent values */
1366 sdata->vif.type = type;
2ca27bcf 1367 sdata->vif.p2p = false;
60719ffd 1368 sdata->wdev.iftype = type;
75636525 1369
a621fa4d
JB
1370 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1371 sdata->control_port_no_encrypt = false;
2475b1cc 1372 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
d3a58df8 1373 sdata->vif.bss_conf.idle = true;
a621fa4d 1374
b53be792
SW
1375 sdata->noack_map = 0;
1376
f142c6b9
JB
1377 /* only monitor/p2p-device differ */
1378 if (sdata->dev) {
1379 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1380 sdata->dev->type = ARPHRD_ETHER;
1381 }
75636525 1382
35f20c14 1383 skb_queue_head_init(&sdata->skb_queue);
1fa57d01 1384 INIT_WORK(&sdata->work, ieee80211_iface_work);
04ecd257 1385 INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work);
73da7d5b 1386 INIT_WORK(&sdata->csa_finalize_work, ieee80211_csa_finalize_work);
484298ad 1387 INIT_LIST_HEAD(&sdata->assigned_chanctx_list);
e3afb920 1388 INIT_LIST_HEAD(&sdata->reserved_chanctx_list);
35f20c14 1389
75636525 1390 switch (type) {
2ca27bcf
JB
1391 case NL80211_IFTYPE_P2P_GO:
1392 type = NL80211_IFTYPE_AP;
1393 sdata->vif.type = type;
1394 sdata->vif.p2p = true;
1395 /* fall through */
05c914fe 1396 case NL80211_IFTYPE_AP:
d012a605 1397 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
75636525 1398 INIT_LIST_HEAD(&sdata->u.ap.vlans);
687da132
EG
1399 INIT_WORK(&sdata->u.ap.request_smps_work,
1400 ieee80211_request_smps_ap_work);
ad2d223a 1401 sdata->vif.bss_conf.bssid = sdata->vif.addr;
687da132 1402 sdata->u.ap.req_smps = IEEE80211_SMPS_OFF;
75636525 1403 break;
2ca27bcf
JB
1404 case NL80211_IFTYPE_P2P_CLIENT:
1405 type = NL80211_IFTYPE_STATION;
1406 sdata->vif.type = type;
1407 sdata->vif.p2p = true;
1408 /* fall through */
05c914fe 1409 case NL80211_IFTYPE_STATION:
ad2d223a 1410 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
9c6bd790 1411 ieee80211_sta_setup_sdata(sdata);
472dbc45 1412 break;
6e0bd6c3 1413 case NL80211_IFTYPE_OCB:
239281f8
RL
1414 sdata->vif.bss_conf.bssid = bssid_wildcard;
1415 ieee80211_ocb_setup_sdata(sdata);
6e0bd6c3 1416 break;
46900298 1417 case NL80211_IFTYPE_ADHOC:
ad2d223a 1418 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
46900298
JB
1419 ieee80211_ibss_setup_sdata(sdata);
1420 break;
05c914fe 1421 case NL80211_IFTYPE_MESH_POINT:
75636525
JB
1422 if (ieee80211_vif_is_mesh(&sdata->vif))
1423 ieee80211_mesh_init_sdata(sdata);
1424 break;
05c914fe 1425 case NL80211_IFTYPE_MONITOR:
75636525 1426 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
587e729e 1427 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
75636525
JB
1428 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL |
1429 MONITOR_FLAG_OTHER_BSS;
1430 break;
05c914fe 1431 case NL80211_IFTYPE_WDS:
ad2d223a
JB
1432 sdata->vif.bss_conf.bssid = NULL;
1433 break;
05c914fe 1434 case NL80211_IFTYPE_AP_VLAN:
98104fde 1435 case NL80211_IFTYPE_P2P_DEVICE:
ad2d223a 1436 sdata->vif.bss_conf.bssid = sdata->vif.addr;
f142c6b9 1437 break;
05c914fe 1438 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 1439 case NUM_NL80211_IFTYPES:
75636525
JB
1440 BUG();
1441 break;
1442 }
1443
1444 ieee80211_debugfs_add_netdev(sdata);
1445}
1446
34d4bc4d
JB
1447static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1448 enum nl80211_iftype type)
1449{
1450 struct ieee80211_local *local = sdata->local;
1451 int ret, err;
2ca27bcf
JB
1452 enum nl80211_iftype internal_type = type;
1453 bool p2p = false;
34d4bc4d
JB
1454
1455 ASSERT_RTNL();
1456
1457 if (!local->ops->change_interface)
1458 return -EBUSY;
1459
1460 switch (sdata->vif.type) {
1461 case NL80211_IFTYPE_AP:
1462 case NL80211_IFTYPE_STATION:
1463 case NL80211_IFTYPE_ADHOC:
239281f8 1464 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1465 /*
1466 * Could maybe also all others here?
1467 * Just not sure how that interacts
1468 * with the RX/config path e.g. for
1469 * mesh.
1470 */
1471 break;
1472 default:
1473 return -EBUSY;
1474 }
1475
1476 switch (type) {
1477 case NL80211_IFTYPE_AP:
1478 case NL80211_IFTYPE_STATION:
1479 case NL80211_IFTYPE_ADHOC:
239281f8 1480 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1481 /*
1482 * Could probably support everything
1483 * but WDS here (WDS do_open can fail
1484 * under memory pressure, which this
1485 * code isn't prepared to handle).
1486 */
1487 break;
2ca27bcf
JB
1488 case NL80211_IFTYPE_P2P_CLIENT:
1489 p2p = true;
1490 internal_type = NL80211_IFTYPE_STATION;
1491 break;
1492 case NL80211_IFTYPE_P2P_GO:
1493 p2p = true;
1494 internal_type = NL80211_IFTYPE_AP;
1495 break;
34d4bc4d
JB
1496 default:
1497 return -EBUSY;
1498 }
1499
2ca27bcf 1500 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
34d4bc4d
JB
1501 if (ret)
1502 return ret;
1503
1504 ieee80211_do_stop(sdata, false);
1505
f142c6b9 1506 ieee80211_teardown_sdata(sdata);
34d4bc4d 1507
2ca27bcf 1508 ret = drv_change_interface(local, sdata, internal_type, p2p);
34d4bc4d 1509 if (ret)
a9865538 1510 type = ieee80211_vif_type_p2p(&sdata->vif);
34d4bc4d 1511
3a25a8c8
JB
1512 /*
1513 * Ignore return value here, there's not much we can do since
1514 * the driver changed the interface type internally already.
1515 * The warnings will hopefully make driver authors fix it :-)
1516 */
a9865538 1517 ieee80211_check_queues(sdata, type);
3a25a8c8 1518
34d4bc4d
JB
1519 ieee80211_setup_sdata(sdata, type);
1520
f142c6b9 1521 err = ieee80211_do_open(&sdata->wdev, false);
34d4bc4d
JB
1522 WARN(err, "type change: do_open returned %d", err);
1523
1524 return ret;
1525}
1526
f3947e2d 1527int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
05c914fe 1528 enum nl80211_iftype type)
75636525 1529{
34d4bc4d
JB
1530 int ret;
1531
f3947e2d
JB
1532 ASSERT_RTNL();
1533
2ca27bcf 1534 if (type == ieee80211_vif_type_p2p(&sdata->vif))
f3947e2d
JB
1535 return 0;
1536
34d4bc4d
JB
1537 if (ieee80211_sdata_running(sdata)) {
1538 ret = ieee80211_runtime_change_iftype(sdata, type);
1539 if (ret)
1540 return ret;
1541 } else {
1542 /* Purge and reset type-dependent state. */
f142c6b9 1543 ieee80211_teardown_sdata(sdata);
34d4bc4d
JB
1544 ieee80211_setup_sdata(sdata, type);
1545 }
75636525
JB
1546
1547 /* reset some values that shouldn't be kept across type changes */
9bc383de
JB
1548 if (type == NL80211_IFTYPE_STATION)
1549 sdata->u.mgd.use_4addr = false;
f3947e2d
JB
1550
1551 return 0;
f0706e82
JB
1552}
1553
fa9029f8 1554static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
f142c6b9 1555 u8 *perm_addr, enum nl80211_iftype type)
fa9029f8
JB
1556{
1557 struct ieee80211_sub_if_data *sdata;
1558 u64 mask, start, addr, val, inc;
1559 u8 *m;
1560 u8 tmp_addr[ETH_ALEN];
1561 int i;
1562
1563 /* default ... something at least */
f142c6b9 1564 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
fa9029f8
JB
1565
1566 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1567 local->hw.wiphy->n_addresses <= 1)
1568 return;
1569
fa9029f8
JB
1570 mutex_lock(&local->iflist_mtx);
1571
1572 switch (type) {
1573 case NL80211_IFTYPE_MONITOR:
1574 /* doesn't matter */
1575 break;
1576 case NL80211_IFTYPE_WDS:
1577 case NL80211_IFTYPE_AP_VLAN:
1578 /* match up with an AP interface */
1579 list_for_each_entry(sdata, &local->interfaces, list) {
1580 if (sdata->vif.type != NL80211_IFTYPE_AP)
1581 continue;
f142c6b9 1582 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
fa9029f8
JB
1583 break;
1584 }
1585 /* keep default if no AP interface present */
1586 break;
6d71117a
JB
1587 case NL80211_IFTYPE_P2P_CLIENT:
1588 case NL80211_IFTYPE_P2P_GO:
1589 if (local->hw.flags & IEEE80211_HW_P2P_DEV_ADDR_FOR_INTF) {
1590 list_for_each_entry(sdata, &local->interfaces, list) {
1591 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1592 continue;
1593 if (!ieee80211_sdata_running(sdata))
1594 continue;
1595 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1596 goto out_unlock;
1597 }
1598 }
1599 /* otherwise fall through */
fa9029f8
JB
1600 default:
1601 /* assign a new address if possible -- try n_addresses first */
1602 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1603 bool used = false;
1604
1605 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1606 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1607 sdata->vif.addr)) {
fa9029f8
JB
1608 used = true;
1609 break;
1610 }
1611 }
1612
1613 if (!used) {
f142c6b9 1614 memcpy(perm_addr,
fa9029f8
JB
1615 local->hw.wiphy->addresses[i].addr,
1616 ETH_ALEN);
1617 break;
1618 }
1619 }
1620
1621 /* try mask if available */
1622 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1623 break;
1624
1625 m = local->hw.wiphy->addr_mask;
1626 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1627 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1628 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1629
1630 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1631 /* not a contiguous mask ... not handled now! */
bdcbd8e0 1632 pr_info("not contiguous\n");
fa9029f8
JB
1633 break;
1634 }
1635
ac20976d
HS
1636 /*
1637 * Pick address of existing interface in case user changed
1638 * MAC address manually, default to perm_addr.
1639 */
fa9029f8 1640 m = local->hw.wiphy->perm_addr;
ac20976d
HS
1641 list_for_each_entry(sdata, &local->interfaces, list) {
1642 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
1643 continue;
1644 m = sdata->vif.addr;
1645 break;
1646 }
fa9029f8
JB
1647 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1648 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1649 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1650
1651 inc = 1ULL<<__ffs64(mask);
1652 val = (start & mask);
1653 addr = (start & ~mask) | (val & mask);
1654 do {
1655 bool used = false;
1656
1657 tmp_addr[5] = addr >> 0*8;
1658 tmp_addr[4] = addr >> 1*8;
1659 tmp_addr[3] = addr >> 2*8;
1660 tmp_addr[2] = addr >> 3*8;
1661 tmp_addr[1] = addr >> 4*8;
1662 tmp_addr[0] = addr >> 5*8;
1663
1664 val += inc;
1665
1666 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1667 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
fa9029f8
JB
1668 used = true;
1669 break;
1670 }
1671 }
1672
1673 if (!used) {
f142c6b9 1674 memcpy(perm_addr, tmp_addr, ETH_ALEN);
fa9029f8
JB
1675 break;
1676 }
1677 addr = (start & ~mask) | (val & mask);
1678 } while (addr != start);
1679
1680 break;
1681 }
1682
6d71117a 1683 out_unlock:
fa9029f8
JB
1684 mutex_unlock(&local->iflist_mtx);
1685}
1686
3e122be0 1687int ieee80211_if_add(struct ieee80211_local *local, const char *name,
6bab2e19 1688 unsigned char name_assign_type,
84efbb84 1689 struct wireless_dev **new_wdev, enum nl80211_iftype type,
ee385855 1690 struct vif_params *params)
f0706e82 1691{
f142c6b9 1692 struct net_device *ndev = NULL;
f0706e82 1693 struct ieee80211_sub_if_data *sdata = NULL;
ba8c3d6f 1694 struct txq_info *txqi;
75636525 1695 int ret, i;
ded81f6b 1696 int txqs = 1;
f0706e82
JB
1697
1698 ASSERT_RTNL();
75636525 1699
f142c6b9
JB
1700 if (type == NL80211_IFTYPE_P2P_DEVICE) {
1701 struct wireless_dev *wdev;
1702
1703 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
1704 GFP_KERNEL);
1705 if (!sdata)
1706 return -ENOMEM;
1707 wdev = &sdata->wdev;
1708
1709 sdata->dev = NULL;
1710 strlcpy(sdata->name, name, IFNAMSIZ);
1711 ieee80211_assign_perm_addr(local, wdev->address, type);
1712 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
1713 } else {
ba8c3d6f
FF
1714 int size = ALIGN(sizeof(*sdata) + local->hw.vif_data_size,
1715 sizeof(void *));
1716 int txq_size = 0;
1717
1718 if (local->ops->wake_tx_queue)
1719 txq_size += sizeof(struct txq_info) +
1720 local->hw.txq_data_size;
1721
f142c6b9
JB
1722 if (local->hw.queues >= IEEE80211_NUM_ACS)
1723 txqs = IEEE80211_NUM_ACS;
1724
ba8c3d6f 1725 ndev = alloc_netdev_mqs(size + txq_size,
6bab2e19 1726 name, name_assign_type,
c835a677 1727 ieee80211_if_setup, txqs, 1);
f142c6b9
JB
1728 if (!ndev)
1729 return -ENOMEM;
1730 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
1731
5a490510
JB
1732 ndev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
1733 if (!ndev->tstats) {
1734 free_netdev(ndev);
1735 return -ENOMEM;
1736 }
1737
f142c6b9
JB
1738 ndev->needed_headroom = local->tx_headroom +
1739 4*6 /* four MAC addresses */
1740 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
1741 + 6 /* mesh */
1742 + 8 /* rfc1042/bridge tunnel */
1743 - ETH_HLEN /* ethernet hard_header_len */
1744 + IEEE80211_ENCRYPT_HEADROOM;
1745 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
1746
1747 ret = dev_alloc_name(ndev, ndev->name);
1748 if (ret < 0) {
1749 free_netdev(ndev);
1750 return ret;
1751 }
1752
1753 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
b5dfae02
BG
1754 if (params && is_valid_ether_addr(params->macaddr))
1755 memcpy(ndev->dev_addr, params->macaddr, ETH_ALEN);
1756 else
1757 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN);
f142c6b9
JB
1758 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
1759
1760 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
1761 sdata = netdev_priv(ndev);
1762 ndev->ieee80211_ptr = &sdata->wdev;
1763 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
1764 memcpy(sdata->name, ndev->name, IFNAMSIZ);
1765
ba8c3d6f
FF
1766 if (txq_size) {
1767 txqi = netdev_priv(ndev) + size;
1768 ieee80211_init_tx_queue(sdata, NULL, txqi, 0);
1769 }
1770
f142c6b9
JB
1771 sdata->dev = ndev;
1772 }
75636525
JB
1773
1774 /* initialise type-independent data */
f0706e82 1775 sdata->wdev.wiphy = local->hw.wiphy;
f0706e82 1776 sdata->local = local;
75636525
JB
1777
1778 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1779 skb_queue_head_init(&sdata->fragments[i].skb_list);
1780
1781 INIT_LIST_HEAD(&sdata->key_list);
1782
164eb02d
SW
1783 INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work,
1784 ieee80211_dfs_cac_timer_work);
8d1f7ecd
JB
1785 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk,
1786 ieee80211_delayed_tailroom_dec);
97f97b1f 1787
37eb0b16
JM
1788 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1789 struct ieee80211_supported_band *sband;
1790 sband = local->hw.wiphy->bands[i];
1791 sdata->rc_rateidx_mask[i] =
1792 sband ? (1 << sband->n_bitrates) - 1 : 0;
19468413
SW
1793 if (sband)
1794 memcpy(sdata->rc_rateidx_mcs_mask[i],
1795 sband->ht_cap.mcs.rx_mask,
1796 sizeof(sdata->rc_rateidx_mcs_mask[i]));
1797 else
1798 memset(sdata->rc_rateidx_mcs_mask[i], 0,
1799 sizeof(sdata->rc_rateidx_mcs_mask[i]));
37eb0b16 1800 }
75636525 1801
3a25a8c8
JB
1802 ieee80211_set_default_queues(sdata);
1803
1ea6f9c0
JB
1804 sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
1805 sdata->user_power_level = local->user_power_level;
1806
2475b1cc
MS
1807 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1808
75636525
JB
1809 /* setup type-dependent data */
1810 ieee80211_setup_sdata(sdata, type);
f0706e82 1811
f142c6b9
JB
1812 if (ndev) {
1813 if (params) {
1814 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
1815 if (type == NL80211_IFTYPE_STATION)
1816 sdata->u.mgd.use_4addr = params->use_4addr;
1817 }
9bc383de 1818
f142c6b9 1819 ndev->features |= local->hw.netdev_features;
72d78728 1820
b7ffbd7e
JB
1821 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
1822
f142c6b9
JB
1823 ret = register_netdevice(ndev);
1824 if (ret) {
1825 free_netdev(ndev);
1826 return ret;
1827 }
1828 }
f0706e82 1829
c771c9d8 1830 mutex_lock(&local->iflist_mtx);
79010420 1831 list_add_tail_rcu(&sdata->list, &local->interfaces);
c771c9d8 1832 mutex_unlock(&local->iflist_mtx);
79010420 1833
84efbb84
JB
1834 if (new_wdev)
1835 *new_wdev = &sdata->wdev;
f0706e82 1836
f0706e82 1837 return 0;
f0706e82
JB
1838}
1839
f698d856 1840void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
f0706e82 1841{
f0706e82 1842 ASSERT_RTNL();
11a843b7 1843
c771c9d8 1844 mutex_lock(&sdata->local->iflist_mtx);
75636525 1845 list_del_rcu(&sdata->list);
c771c9d8
JB
1846 mutex_unlock(&sdata->local->iflist_mtx);
1847
75636525 1848 synchronize_rcu();
f142c6b9
JB
1849
1850 if (sdata->dev) {
1851 unregister_netdevice(sdata->dev);
1852 } else {
1853 cfg80211_unregister_wdev(&sdata->wdev);
1854 kfree(sdata);
1855 }
1856}
1857
1858void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
1859{
1860 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
1861 return;
1862 ieee80211_do_stop(sdata, true);
1863 ieee80211_teardown_sdata(sdata);
f0706e82
JB
1864}
1865
75636525
JB
1866/*
1867 * Remove all interfaces, may only be called at hardware unregistration
1868 * time because it doesn't do RCU-safe list removals.
1869 */
1870void ieee80211_remove_interfaces(struct ieee80211_local *local)
f0706e82 1871{
75636525 1872 struct ieee80211_sub_if_data *sdata, *tmp;
efe117ab 1873 LIST_HEAD(unreg_list);
f142c6b9 1874 LIST_HEAD(wdev_list);
f0706e82
JB
1875
1876 ASSERT_RTNL();
1877
c8aa22db
JB
1878 /*
1879 * Close all AP_VLAN interfaces first, as otherwise they
1880 * might be closed while the AP interface they belong to
1881 * is closed, causing unregister_netdevice_many() to crash.
1882 */
1883 list_for_each_entry(sdata, &local->interfaces, list)
1884 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1885 dev_close(sdata->dev);
1886
efe117ab 1887 mutex_lock(&local->iflist_mtx);
75636525
JB
1888 list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) {
1889 list_del(&sdata->list);
c771c9d8 1890
f142c6b9
JB
1891 if (sdata->dev)
1892 unregister_netdevice_queue(sdata->dev, &unreg_list);
1893 else
1894 list_add(&sdata->list, &wdev_list);
f0706e82 1895 }
efe117ab
ED
1896 mutex_unlock(&local->iflist_mtx);
1897 unregister_netdevice_many(&unreg_list);
f142c6b9
JB
1898
1899 list_for_each_entry_safe(sdata, tmp, &wdev_list, list) {
1900 list_del(&sdata->list);
1901 cfg80211_unregister_wdev(&sdata->wdev);
1902 kfree(sdata);
1903 }
f0706e82 1904}
5cff20e6 1905
47846c9b 1906static int netdev_notify(struct notifier_block *nb,
351638e7 1907 unsigned long state, void *ptr)
47846c9b 1908{
351638e7 1909 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
47846c9b
JB
1910 struct ieee80211_sub_if_data *sdata;
1911
1912 if (state != NETDEV_CHANGENAME)
8bd811aa 1913 return NOTIFY_DONE;
47846c9b
JB
1914
1915 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
8bd811aa 1916 return NOTIFY_DONE;
47846c9b
JB
1917
1918 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
8bd811aa 1919 return NOTIFY_DONE;
47846c9b
JB
1920
1921 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2f5265e6 1922 memcpy(sdata->name, dev->name, IFNAMSIZ);
47846c9b 1923 ieee80211_debugfs_rename_netdev(sdata);
8bd811aa
ZG
1924
1925 return NOTIFY_OK;
47846c9b
JB
1926}
1927
1928static struct notifier_block mac80211_netdev_notifier = {
1929 .notifier_call = netdev_notify,
1930};
1931
1932int ieee80211_iface_init(void)
1933{
1934 return register_netdevice_notifier(&mac80211_netdev_notifier);
1935}
1936
1937void ieee80211_iface_exit(void)
1938{
1939 unregister_netdevice_notifier(&mac80211_netdev_notifier);
1940}