]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/blame - net/wireless/nl80211.c
projects / mirror_ubuntu-hirsute-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
cfg80211: remove WARN_ON() in cfg80211_sme_connect
[mirror_ubuntu-hirsute-kernel.git] / net / wireless / nl80211.c
CommitLineData
457c8996 1// SPDX-License-Identifier: GPL-2.0-only
55682965
JB		 2/*
3 * This is the new netlink-based wireless configuration interface.
4 *
026331c4 5 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
2740f0cf 6 * Copyright 2013-2014 Intel Mobile Communications GmbH
66cd794e 7 * Copyright 2015-2017 Intel Deutschland GmbH
959f8f89 8 * Copyright (C) 2018-2021 Intel Corporation
55682965
JB		 9 */
10
11#include <linux/if.h>
12#include <linux/module.h>
13#include <linux/err.h>
5a0e3ad6 14#include <linux/slab.h>
55682965
JB		 15#include <linux/list.h>
16#include <linux/if_ether.h>
17#include <linux/ieee80211.h>
18#include <linux/nl80211.h>
19#include <linux/rtnetlink.h>
20#include <linux/netlink.h>
259d8c1e 21#include <linux/nospec.h>
2a519311 22#include <linux/etherdevice.h>
e3ae39ed 23#include <linux/if_vlan.h>
463d0183 24#include <net/net_namespace.h>
55682965
JB		 25#include <net/genetlink.h>
26#include <net/cfg80211.h>
463d0183 27#include <net/sock.h>
2a0e047e 28#include <net/inet_connection_sock.h>
55682965
JB		 29#include "core.h"
30#include "nl80211.h"
b2e1b302 31#include "reg.h"
e35e4d28 32#include "rdev-ops.h"
55682965 33
5fb628e9
JM		 34static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
35 struct genl_info *info,
36 struct cfg80211_crypto_settings *settings,
37 int cipher_limit);
38
55682965 39/* the netlink family */
489111e5 40static struct genl_family nl80211_fam;
55682965 41
2a94fe48
JB		 42/* multicast groups */
43enum nl80211_multicast_groups {
44 NL80211_MCGRP_CONFIG,
45 NL80211_MCGRP_SCAN,
46 NL80211_MCGRP_REGULATORY,
47 NL80211_MCGRP_MLME,
567ffc35 48 NL80211_MCGRP_VENDOR,
50bcd31d 49 NL80211_MCGRP_NAN,
2a94fe48
JB		 50 NL80211_MCGRP_TESTMODE /* keep last - ifdef! */
51};
52
53static const struct genl_multicast_group nl80211_mcgrps[] = {
71b836ec
JB		 54 [NL80211_MCGRP_CONFIG] = { .name = NL80211_MULTICAST_GROUP_CONFIG },
55 [NL80211_MCGRP_SCAN] = { .name = NL80211_MULTICAST_GROUP_SCAN },
56 [NL80211_MCGRP_REGULATORY] = { .name = NL80211_MULTICAST_GROUP_REG },
57 [NL80211_MCGRP_MLME] = { .name = NL80211_MULTICAST_GROUP_MLME },
58 [NL80211_MCGRP_VENDOR] = { .name = NL80211_MULTICAST_GROUP_VENDOR },
50bcd31d 59 [NL80211_MCGRP_NAN] = { .name = NL80211_MULTICAST_GROUP_NAN },
2a94fe48 60#ifdef CONFIG_NL80211_TESTMODE
71b836ec 61 [NL80211_MCGRP_TESTMODE] = { .name = NL80211_MULTICAST_GROUP_TESTMODE }
2a94fe48
JB		 62#endif
63};
64
89a54e48
JB		 65/* returns ERR_PTR values */
66static struct wireless_dev *
67__cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
55682965 68{
89a54e48
JB		 69 struct cfg80211_registered_device *rdev;
70 struct wireless_dev *result = NULL;
71 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
72 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
73 u64 wdev_id;
74 int wiphy_idx = -1;
75 int ifidx = -1;
55682965 76
5fe231e8 77 ASSERT_RTNL();
55682965 78
89a54e48
JB		 79 if (!have_ifidx && !have_wdev_id)
80 return ERR_PTR(-EINVAL);
55682965 81
89a54e48
JB		 82 if (have_ifidx)
83 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
84 if (have_wdev_id) {
85 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
86 wiphy_idx = wdev_id >> 32;
55682965
JB		 87 }
88
89a54e48
JB		 89 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
90 struct wireless_dev *wdev;
91
92 if (wiphy_net(&rdev->wiphy) != netns)
93 continue;
94
95 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
96 continue;
97
53873f13 98 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
89a54e48
JB		 99 if (have_ifidx && wdev->netdev &&
100 wdev->netdev->ifindex == ifidx) {
101 result = wdev;
102 break;
103 }
104 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
105 result = wdev;
106 break;
107 }
108 }
89a54e48
JB		 109
110 if (result)
111 break;
112 }
113
114 if (result)
115 return result;
116 return ERR_PTR(-ENODEV);
55682965
JB		 117}
118
a9455408 119static struct cfg80211_registered_device *
878d9ec7 120__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 121{
7fee4778
JB		 122 struct cfg80211_registered_device *rdev = NULL, *tmp;
123 struct net_device *netdev;
a9455408 124
5fe231e8 125 ASSERT_RTNL();
a9455408 126
878d9ec7 127 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 128 !attrs[NL80211_ATTR_IFINDEX] &&
129 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 130 return ERR_PTR(-EINVAL);
131
878d9ec7 132 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 133 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 134 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 135
89a54e48
JB		 136 if (attrs[NL80211_ATTR_WDEV]) {
137 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
138 struct wireless_dev *wdev;
139 bool found = false;
140
141 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
142 if (tmp) {
143 /* make sure wdev exists */
53873f13 144 list_for_each_entry(wdev, &tmp->wiphy.wdev_list, list) {
89a54e48
JB		 145 if (wdev->identifier != (u32)wdev_id)
146 continue;
147 found = true;
148 break;
149 }
89a54e48
JB		 150
151 if (!found)
152 tmp = NULL;
153
154 if (rdev && tmp != rdev)
155 return ERR_PTR(-EINVAL);
156 rdev = tmp;
157 }
158 }
159
878d9ec7
JB		 160 if (attrs[NL80211_ATTR_IFINDEX]) {
161 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
7a087e74 162
7f2b8562 163 netdev = __dev_get_by_index(netns, ifindex);
7fee4778
JB		 164 if (netdev) {
165 if (netdev->ieee80211_ptr)
f26cbf40
ZG		 166 tmp = wiphy_to_rdev(
167 netdev->ieee80211_ptr->wiphy);
7fee4778
JB		 168 else
169 tmp = NULL;
170
7fee4778
JB		 171 /* not wireless device -- return error */
172 if (!tmp)
173 return ERR_PTR(-EINVAL);
174
175 /* mismatch -- return error */
176 if (rdev && tmp != rdev)
177 return ERR_PTR(-EINVAL);
178
179 rdev = tmp;
a9455408 180 }
a9455408 181 }
a9455408 182
4f7eff10
JB		 183 if (!rdev)
184 return ERR_PTR(-ENODEV);
a9455408 185
4f7eff10
JB		 186 if (netns != wiphy_net(&rdev->wiphy))
187 return ERR_PTR(-ENODEV);
188
189 return rdev;
a9455408
JB		 190}
191
192/*
193 * This function returns a pointer to the driver
194 * that the genl_info item that is passed refers to.
a9455408
JB		 195 *
196 * The result of this can be a PTR_ERR and hence must
197 * be checked with IS_ERR() for errors.
198 */
199static struct cfg80211_registered_device *
4f7eff10 200cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408 201{
5fe231e8 202 return __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 203}
204
f88eb7c0
JB		 205static int validate_beacon_head(const struct nlattr *attr,
206 struct netlink_ext_ack *extack)
207{
208 const u8 *data = nla_data(attr);
209 unsigned int len = nla_len(attr);
210 const struct element *elem;
211 const struct ieee80211_mgmt *mgmt = (void *)data;
1d47f119 212 unsigned int fixedlen, hdrlen;
016b6b2f 213 bool s1g_bcn;
1d47f119 214
016b6b2f
JB		 215 if (len < offsetofend(typeof(*mgmt), frame_control))
216 goto err;
217
218 s1g_bcn = ieee80211_is_s1g_beacon(mgmt->frame_control);
1d47f119
TP		 219 if (s1g_bcn) {
220 fixedlen = offsetof(struct ieee80211_ext,
221 u.s1g_beacon.variable);
222 hdrlen = offsetof(struct ieee80211_ext, u.s1g_beacon);
223 } else {
224 fixedlen = offsetof(struct ieee80211_mgmt,
225 u.beacon.variable);
226 hdrlen = offsetof(struct ieee80211_mgmt, u.beacon);
227 }
f88eb7c0
JB		 228
229 if (len < fixedlen)
230 goto err;
231
1d47f119 232 if (ieee80211_hdrlen(mgmt->frame_control) != hdrlen)
f88eb7c0
JB		 233 goto err;
234
235 data += fixedlen;
236 len -= fixedlen;
237
238 for_each_element(elem, data, len) {
239 /* nothing */
240 }
241
242 if (for_each_element_completed(elem, data, len))
243 return 0;
244
245err:
246 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed beacon head");
247 return -EINVAL;
248}
249
3d7af878
JB		 250static int validate_ie_attr(const struct nlattr *attr,
251 struct netlink_ext_ack *extack)
252{
9f308616
JB		 253 const u8 *data = nla_data(attr);
254 unsigned int len = nla_len(attr);
7388afe0 255 const struct element *elem;
3d7af878 256
9f308616
JB		 257 for_each_element(elem, data, len) {
258 /* nothing */
3d7af878
JB		 259 }
260
9f308616
JB		 261 if (for_each_element_completed(elem, data, len))
262 return 0;
263
3d7af878
JB		 264 NL_SET_ERR_MSG_ATTR(extack, attr, "malformed information elements");
265 return -EINVAL;
266}
267
55682965 268/* policy for the attributes */
d15da2a2
JB		 269static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR];
270
81e54d08
PKC		 271static const struct nla_policy
272nl80211_ftm_responder_policy[NL80211_FTM_RESP_ATTR_MAX + 1] = {
273 [NL80211_FTM_RESP_ATTR_ENABLED] = { .type = NLA_FLAG, },
274 [NL80211_FTM_RESP_ATTR_LCI] = { .type = NLA_BINARY,
275 .len = U8_MAX },
276 [NL80211_FTM_RESP_ATTR_CIVICLOC] = { .type = NLA_BINARY,
277 .len = U8_MAX },
278};
279
9bb7e0f2
JB		 280static const struct nla_policy
281nl80211_pmsr_ftm_req_attr_policy[NL80211_PMSR_FTM_REQ_ATTR_MAX + 1] = {
282 [NL80211_PMSR_FTM_REQ_ATTR_ASAP] = { .type = NLA_FLAG },
283 [NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE] = { .type = NLA_U32 },
284 [NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP] =
285 NLA_POLICY_MAX(NLA_U8, 15),
286 [NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD] = { .type = NLA_U16 },
287 [NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION] =
288 NLA_POLICY_MAX(NLA_U8, 15),
289 [NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST] =
ea18709a 290 NLA_POLICY_MAX(NLA_U8, 31),
9bb7e0f2
JB		 291 [NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES] = { .type = NLA_U8 },
292 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI] = { .type = NLA_FLAG },
293 [NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC] = { .type = NLA_FLAG },
efb5520d
AS		 294 [NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED] = { .type = NLA_FLAG },
295 [NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED] = { .type = NLA_FLAG },
9bb7e0f2
JB		 296};
297
298static const struct nla_policy
299nl80211_pmsr_req_data_policy[NL80211_PMSR_TYPE_MAX + 1] = {
300 [NL80211_PMSR_TYPE_FTM] =
23323289 301 NLA_POLICY_NESTED(nl80211_pmsr_ftm_req_attr_policy),
9bb7e0f2
JB		 302};
303
304static const struct nla_policy
305nl80211_pmsr_req_attr_policy[NL80211_PMSR_REQ_ATTR_MAX + 1] = {
306 [NL80211_PMSR_REQ_ATTR_DATA] =
23323289 307 NLA_POLICY_NESTED(nl80211_pmsr_req_data_policy),
9bb7e0f2
JB		 308 [NL80211_PMSR_REQ_ATTR_GET_AP_TSF] = { .type = NLA_FLAG },
309};
310
311static const struct nla_policy
312nl80211_psmr_peer_attr_policy[NL80211_PMSR_PEER_ATTR_MAX + 1] = {
313 [NL80211_PMSR_PEER_ATTR_ADDR] = NLA_POLICY_ETH_ADDR,
d15da2a2 314 [NL80211_PMSR_PEER_ATTR_CHAN] = NLA_POLICY_NESTED(nl80211_policy),
9bb7e0f2 315 [NL80211_PMSR_PEER_ATTR_REQ] =
23323289 316 NLA_POLICY_NESTED(nl80211_pmsr_req_attr_policy),
9bb7e0f2
JB		 317 [NL80211_PMSR_PEER_ATTR_RESP] = { .type = NLA_REJECT },
318};
319
320static const struct nla_policy
321nl80211_pmsr_attr_policy[NL80211_PMSR_ATTR_MAX + 1] = {
322 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_REJECT },
323 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_REJECT },
324 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_REJECT },
325 [NL80211_PMSR_ATTR_TYPE_CAPA] = { .type = NLA_REJECT },
326 [NL80211_PMSR_ATTR_PEERS] =
23323289 327 NLA_POLICY_NESTED_ARRAY(nl80211_psmr_peer_attr_policy),
9bb7e0f2
JB		 328};
329
796e90f4
JC		 330static const struct nla_policy
331he_obss_pd_policy[NL80211_HE_OBSS_PD_ATTR_MAX + 1] = {
332 [NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET] =
333 NLA_POLICY_RANGE(NLA_U8, 1, 20),
334 [NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET] =
335 NLA_POLICY_RANGE(NLA_U8, 1, 20),
f5bec330
RM		 336 [NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET] =
337 NLA_POLICY_RANGE(NLA_U8, 1, 20),
338 [NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP] =
339 NLA_POLICY_EXACT_LEN(8),
340 [NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP] =
341 NLA_POLICY_EXACT_LEN(8),
342 [NL80211_HE_OBSS_PD_ATTR_SR_CTRL] = { .type = NLA_U8 },
796e90f4
JC		 343};
344
5c5e52d1
JC		 345static const struct nla_policy
346he_bss_color_policy[NL80211_HE_BSS_COLOR_ATTR_MAX + 1] = {
347 [NL80211_HE_BSS_COLOR_ATTR_COLOR] = NLA_POLICY_RANGE(NLA_U8, 1, 63),
348 [NL80211_HE_BSS_COLOR_ATTR_DISABLED] = { .type = NLA_FLAG },
349 [NL80211_HE_BSS_COLOR_ATTR_PARTIAL] = { .type = NLA_FLAG },
350};
351
9a5f6488
TC		 352static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
353 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
354 .len = NL80211_MAX_SUPP_RATES },
355 [NL80211_TXRATE_HT] = { .type = NLA_BINARY,
356 .len = NL80211_MAX_SUPP_HT_RATES },
357 [NL80211_TXRATE_VHT] = NLA_POLICY_EXACT_LEN_WARN(sizeof(struct nl80211_txrate_vht)),
358 [NL80211_TXRATE_GI] = { .type = NLA_U8 },
eb89a6a6
MH		 359 [NL80211_TXRATE_HE] = NLA_POLICY_EXACT_LEN(sizeof(struct nl80211_txrate_he)),
360 [NL80211_TXRATE_HE_GI] = NLA_POLICY_RANGE(NLA_U8,
361 NL80211_RATE_INFO_HE_GI_0_8,
362 NL80211_RATE_INFO_HE_GI_3_2),
363 [NL80211_TXRATE_HE_LTF] = NLA_POLICY_RANGE(NLA_U8,
364 NL80211_RATE_INFO_HE_1XLTF,
365 NL80211_RATE_INFO_HE_4XLTF),
9a5f6488
TC		 366};
367
77f576de
T		 368static const struct nla_policy
369nl80211_tid_config_attr_policy[NL80211_TID_CONFIG_ATTR_MAX + 1] = {
3710a8a6
JB		 370 [NL80211_TID_CONFIG_ATTR_VIF_SUPP] = { .type = NLA_U64 },
371 [NL80211_TID_CONFIG_ATTR_PEER_SUPP] = { .type = NLA_U64 },
77f576de 372 [NL80211_TID_CONFIG_ATTR_OVERRIDE] = { .type = NLA_FLAG },
3710a8a6 373 [NL80211_TID_CONFIG_ATTR_TIDS] = NLA_POLICY_RANGE(NLA_U16, 1, 0xff),
77f576de
T		 374 [NL80211_TID_CONFIG_ATTR_NOACK] =
375 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
6a21d16c
T		 376 [NL80211_TID_CONFIG_ATTR_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
377 [NL80211_TID_CONFIG_ATTR_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
ade274b2
T		 378 [NL80211_TID_CONFIG_ATTR_AMPDU_CTRL] =
379 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
04f7d142
T		 380 [NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL] =
381 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
33462e68
SM		 382 [NL80211_TID_CONFIG_ATTR_AMSDU_CTRL] =
383 NLA_POLICY_MAX(NLA_U8, NL80211_TID_CONFIG_DISABLE),
9a5f6488
TC		 384 [NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE] =
385 NLA_POLICY_MAX(NLA_U8, NL80211_TX_RATE_FIXED),
386 [NL80211_TID_CONFIG_ATTR_TX_RATE] =
387 NLA_POLICY_NESTED(nl80211_txattr_policy),
77f576de
T		 388};
389
291c49de
AD		 390static const struct nla_policy
391nl80211_fils_discovery_policy[NL80211_FILS_DISCOVERY_ATTR_MAX + 1] = {
392 [NL80211_FILS_DISCOVERY_ATTR_INT_MIN] = NLA_POLICY_MAX(NLA_U32, 10000),
393 [NL80211_FILS_DISCOVERY_ATTR_INT_MAX] = NLA_POLICY_MAX(NLA_U32, 10000),
394 NLA_POLICY_RANGE(NLA_BINARY,
395 NL80211_FILS_DISCOVERY_TMPL_MIN_LEN,
396 IEEE80211_MAX_DATA_LEN),
397};
398
7443dcd1
AD		 399static const struct nla_policy
400nl80211_unsol_bcast_probe_resp_policy[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1] = {
401 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] = NLA_POLICY_MAX(NLA_U32, 20),
402 [NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL] = { .type = NLA_BINARY,
403 .len = IEEE80211_MAX_DATA_LEN }
404};
405
6bdb68ce
CH		 406static const struct nla_policy
407sar_specs_policy[NL80211_SAR_ATTR_SPECS_MAX + 1] = {
408 [NL80211_SAR_ATTR_SPECS_POWER] = { .type = NLA_S32 },
409 [NL80211_SAR_ATTR_SPECS_RANGE_INDEX] = {.type = NLA_U32 },
410};
411
412static const struct nla_policy
413sar_policy[NL80211_SAR_ATTR_MAX + 1] = {
414 [NL80211_SAR_ATTR_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_SAR_TYPE),
415 [NL80211_SAR_ATTR_SPECS] = NLA_POLICY_NESTED_ARRAY(sar_specs_policy),
416};
417
d15da2a2 418static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR] = {
6d4dd4ef 419 [0] = { .strict_start_type = NL80211_ATTR_HE_OBSS_PD },
55682965
JB		 420 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
421 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 422 .len = 20-1 },
31888487 423 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
3d9d1d66 424
72bdcf34 425 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 426 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
2a38075c
AAL		 427 [NL80211_ATTR_WIPHY_EDMG_CHANNELS] = NLA_POLICY_RANGE(NLA_U8,
428 NL80211_EDMG_CHANNELS_MIN,
429 NL80211_EDMG_CHANNELS_MAX),
430 [NL80211_ATTR_WIPHY_EDMG_BW_CONFIG] = NLA_POLICY_RANGE(NLA_U8,
431 NL80211_EDMG_BW_CONFIG_MIN,
432 NL80211_EDMG_BW_CONFIG_MAX),
433
3d9d1d66
JB		 434 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
435 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
942ba88b 436 [NL80211_ATTR_CENTER_FREQ1_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
3d9d1d66
JB		 437 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
438
ab0d76f6
JB		 439 [NL80211_ATTR_WIPHY_RETRY_SHORT] = NLA_POLICY_MIN(NLA_U8, 1),
440 [NL80211_ATTR_WIPHY_RETRY_LONG] = NLA_POLICY_MIN(NLA_U8, 1),
b9a5f8ca
JM		 441 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
442 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 443 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
3057dbfd 444 [NL80211_ATTR_WIPHY_DYN_ACK] = { .type = NLA_FLAG },
55682965 445
ab0d76f6 446 [NL80211_ATTR_IFTYPE] = NLA_POLICY_MAX(NLA_U32, NL80211_IFTYPE_MAX),
55682965
JB		 447 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
448 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 449
c7721c05
JB		 450 [NL80211_ATTR_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
451 [NL80211_ATTR_PREV_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
41ade00f 452
b9454e83 453 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 454 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
455 .len = WLAN_MAX_KEY_LEN },
56be393f 456 [NL80211_ATTR_KEY_IDX] = NLA_POLICY_MAX(NLA_U8, 7),
41ade00f
JB		 457 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
458 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 459 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
ab0d76f6
JB		 460 [NL80211_ATTR_KEY_TYPE] =
461 NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES),
ed1b6cc7
JB		 462
463 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
464 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
f88eb7c0
JB		 465 [NL80211_ATTR_BEACON_HEAD] =
466 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_beacon_head,
467 IEEE80211_MAX_DATA_LEN),
3d7af878
JB		 468 [NL80211_ATTR_BEACON_TAIL] =
469 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
470 IEEE80211_MAX_DATA_LEN),
ab0d76f6
JB		 471 [NL80211_ATTR_STA_AID] =
472 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
5727ef1b
JB		 473 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
474 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
475 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
476 .len = NL80211_MAX_SUPP_RATES },
ab0d76f6
JB		 477 [NL80211_ATTR_STA_PLINK_ACTION] =
478 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_ACTIONS - 1),
e96d1cd2
ARN		 479 [NL80211_ATTR_STA_TX_POWER_SETTING] =
480 NLA_POLICY_RANGE(NLA_U8,
481 NL80211_TX_POWER_AUTOMATIC,
482 NL80211_TX_POWER_FIXED),
483 [NL80211_ATTR_STA_TX_POWER] = { .type = NLA_S16 },
5727ef1b 484 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 485 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 486 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 487 .len = IEEE80211_MAX_MESH_ID_LEN },
1fab1b89 488 [NL80211_ATTR_MPATH_NEXT_HOP] = NLA_POLICY_ETH_ADDR_COMPAT,
9f1ba906 489
b2e1b302
LR		 490 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
491 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
492
9f1ba906
JM		 493 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
494 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
495 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 496 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
497 .len = NL80211_MAX_SUPP_RATES },
50b12f59 498 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 499
24bdd9f4 500 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 501 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 502
c7721c05 503 [NL80211_ATTR_HT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_HT_CAPABILITY_LEN),
9aed3cc1
JM		 504
505 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
3d7af878
JB		 506 [NL80211_ATTR_IE] = NLA_POLICY_VALIDATE_FN(NLA_BINARY,
507 validate_ie_attr,
508 IEEE80211_MAX_DATA_LEN),
2a519311
JB		 509 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
510 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 511
512 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
513 .len = IEEE80211_MAX_SSID_LEN },
514 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
515 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 516 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 517 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
ab0d76f6
JB		 518 [NL80211_ATTR_USE_MFP] = NLA_POLICY_RANGE(NLA_U32,
519 NL80211_MFP_NO,
520 NL80211_MFP_OPTIONAL),
eccb8e8f
JB		 521 [NL80211_ATTR_STA_FLAGS2] = {
522 .len = sizeof(struct nl80211_sta_flag_update),
523 },
3f77316c 524 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 525 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
526 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
64bf3d4b 527 [NL80211_ATTR_CONTROL_PORT_OVER_NL80211] = { .type = NLA_FLAG },
b23aa676 528 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
ea750801 529 [NL80211_ATTR_STATUS_CODE] = { .type = NLA_U16 },
b23aa676
SO		 530 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
531 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 532 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 533 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
c7721c05 534 [NL80211_ATTR_PMKID] = NLA_POLICY_EXACT_LEN_WARN(WLAN_PMKID_LEN),
9588bbd5
JM		 535 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
536 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 537 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 538 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
539 .len = IEEE80211_MAX_DATA_LEN },
540 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ab0d76f6
JB		 541 [NL80211_ATTR_PS_STATE] = NLA_POLICY_RANGE(NLA_U32,
542 NL80211_PS_DISABLED,
543 NL80211_PS_ENABLED),
d6dc1a38 544 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 545 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 546 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 547 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
548 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 549 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 550 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
551 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 552 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 553 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 554 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 555 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
ab0d76f6
JB		 556 [NL80211_ATTR_STA_PLINK_STATE] =
557 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_PLINK_STATES - 1),
056e9375
JK		 558 [NL80211_ATTR_MEASUREMENT_DURATION] = { .type = NLA_U16 },
559 [NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY] = { .type = NLA_FLAG },
ab0d76f6
JB		 560 [NL80211_ATTR_MESH_PEER_AID] =
561 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
bbe6ad6d 562 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 563 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 564 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
ab0d76f6
JB		 565 [NL80211_ATTR_HIDDEN_SSID] =
566 NLA_POLICY_RANGE(NLA_U32,
567 NL80211_HIDDEN_SSID_NOT_IN_USE,
568 NL80211_HIDDEN_SSID_ZERO_CONTENTS),
3d7af878
JB		 569 [NL80211_ATTR_IE_PROBE_RESP] =
570 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
571 IEEE80211_MAX_DATA_LEN),
572 [NL80211_ATTR_IE_ASSOC_RESP] =
573 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
574 IEEE80211_MAX_DATA_LEN),
f4b34b55 575 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 576 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 577 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 578 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
579 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
580 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
581 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
582 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
31fa97c5 583 [NL80211_ATTR_TDLS_INITIATOR] = { .type = NLA_FLAG },
e247bd90 584 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 585 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
586 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 587 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 588 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
589 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
590 .len = NL80211_HT_CAPABILITY_LEN
591 },
1d9d9213 592 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 593 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 594 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 595 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 596 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
cb9abd48
JB		 597
598 /* need to include at least Auth Transaction and Status Code */
599 [NL80211_ATTR_AUTH_DATA] = NLA_POLICY_MIN_LEN(4),
600
c7721c05 601 [NL80211_ATTR_VHT_CAPABILITY] = NLA_POLICY_EXACT_LEN_WARN(NL80211_VHT_CAPABILITY_LEN),
ed473771 602 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
ab0d76f6
JB		 603 [NL80211_ATTR_P2P_CTWINDOW] = NLA_POLICY_MAX(NLA_U8, 127),
604 [NL80211_ATTR_P2P_OPPPS] = NLA_POLICY_MAX(NLA_U8, 1),
605 [NL80211_ATTR_LOCAL_MESH_POWER_MODE] =
606 NLA_POLICY_RANGE(NLA_U32,
607 NL80211_MESH_POWER_UNKNOWN + 1,
608 NL80211_MESH_POWER_MAX),
77765eaf
VT		 609 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
610 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
9d62a986
JM		 611 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
612 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
3713b4e3 613 [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
ee2aca34
JB		 614 [NL80211_ATTR_DISABLE_VHT] = { .type = NLA_FLAG },
615 [NL80211_ATTR_VHT_CAPABILITY_MASK] = {
616 .len = NL80211_VHT_CAPABILITY_LEN,
617 },
355199e0
JM		 618 [NL80211_ATTR_MDID] = { .type = NLA_U16 },
619 [NL80211_ATTR_IE_RIC] = { .type = NLA_BINARY,
620 .len = IEEE80211_MAX_DATA_LEN },
0e1a1d85 621 [NL80211_ATTR_CRIT_PROT_ID] = { .type = NLA_U16 },
cb9abd48
JB		 622 [NL80211_ATTR_MAX_CRIT_PROT_DURATION] =
623 NLA_POLICY_MAX(NLA_U16, NL80211_CRIT_PROTO_MAX_DURATION),
ab0d76f6
JB		 624 [NL80211_ATTR_PEER_AID] =
625 NLA_POLICY_RANGE(NLA_U16, 1, IEEE80211_MAX_AID),
16ef1fe2
SW		 626 [NL80211_ATTR_CH_SWITCH_COUNT] = { .type = NLA_U32 },
627 [NL80211_ATTR_CH_SWITCH_BLOCK_TX] = { .type = NLA_FLAG },
628 [NL80211_ATTR_CSA_IES] = { .type = NLA_NESTED },
00c207ed
JC		 629 [NL80211_ATTR_CNTDWN_OFFS_BEACON] = { .type = NLA_BINARY },
630 [NL80211_ATTR_CNTDWN_OFFS_PRESP] = { .type = NLA_BINARY },
cb9abd48 631 [NL80211_ATTR_STA_SUPPORTED_CHANNELS] = NLA_POLICY_MIN_LEN(2),
c8b82802
JB		 632 /*
633 * The value of the Length field of the Supported Operating
634 * Classes element is between 2 and 253.
635 */
636 [NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES] =
637 NLA_POLICY_RANGE(NLA_BINARY, 2, 253),
5336fa88 638 [NL80211_ATTR_HANDLE_DFS] = { .type = NLA_FLAG },
60f4a7b1 639 [NL80211_ATTR_OPMODE_NOTIF] = { .type = NLA_U8 },
ad7e718c
JB		 640 [NL80211_ATTR_VENDOR_ID] = { .type = NLA_U32 },
641 [NL80211_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
642 [NL80211_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
c8b82802
JB		 643 [NL80211_ATTR_QOS_MAP] = NLA_POLICY_RANGE(NLA_BINARY,
644 IEEE80211_QOS_MAP_LEN_MIN,
645 IEEE80211_QOS_MAP_LEN_MAX),
c7721c05 646 [NL80211_ATTR_MAC_HINT] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1df4a510 647 [NL80211_ATTR_WIPHY_FREQ_HINT] = { .type = NLA_U32 },
df942e7b 648 [NL80211_ATTR_TDLS_PEER_CAPABILITY] = { .type = NLA_U32 },
18e5ca65 649 [NL80211_ATTR_SOCKET_OWNER] = { .type = NLA_FLAG },
34d22ce2 650 [NL80211_ATTR_CSA_C_OFFSETS_TX] = { .type = NLA_BINARY },
bab5ab7d 651 [NL80211_ATTR_USE_RRM] = { .type = NLA_FLAG },
ab0d76f6
JB		 652 [NL80211_ATTR_TSID] = NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_TIDS - 1),
653 [NL80211_ATTR_USER_PRIO] =
654 NLA_POLICY_MAX(NLA_U8, IEEE80211_NUM_UPS - 1),
960d01ac 655 [NL80211_ATTR_ADMITTED_TIME] = { .type = NLA_U16 },
18998c38 656 [NL80211_ATTR_SMPS_MODE] = { .type = NLA_U8 },
5cde05c6 657 [NL80211_ATTR_OPER_CLASS] = { .type = NLA_U8 },
c7721c05 658 [NL80211_ATTR_MAC_MASK] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
1bdd716c 659 [NL80211_ATTR_WIPHY_SELF_MANAGED_REG] = { .type = NLA_FLAG },
4b681c82 660 [NL80211_ATTR_NETNS_FD] = { .type = NLA_U32 },
9c748934 661 [NL80211_ATTR_SCHED_SCAN_DELAY] = { .type = NLA_U32 },
05050753 662 [NL80211_ATTR_REG_INDOOR] = { .type = NLA_FLAG },
34d50519 663 [NL80211_ATTR_PBSS] = { .type = NLA_FLAG },
38de03d2 664 [NL80211_ATTR_BSS_SELECT] = { .type = NLA_NESTED },
ab0d76f6
JB		 665 [NL80211_ATTR_STA_SUPPORT_P2P_PS] =
666 NLA_POLICY_MAX(NLA_U8, NUM_NL80211_P2P_PS_STATUS - 1),
c6e6a0c8
AE		 667 [NL80211_ATTR_MU_MIMO_GROUP_DATA] = {
668 .len = VHT_MUMIMO_GROUPS_DATA_LEN
669 },
c7721c05 670 [NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
ab0d76f6 671 [NL80211_ATTR_NAN_MASTER_PREF] = NLA_POLICY_MIN(NLA_U8, 1),
8585989d 672 [NL80211_ATTR_BANDS] = { .type = NLA_U32 },
a442b761 673 [NL80211_ATTR_NAN_FUNC] = { .type = NLA_NESTED },
348bd456
JM		 674 [NL80211_ATTR_FILS_KEK] = { .type = NLA_BINARY,
675 .len = FILS_MAX_KEK_LEN },
c7721c05 676 [NL80211_ATTR_FILS_NONCES] = NLA_POLICY_EXACT_LEN_WARN(2 * FILS_NONCE_LEN),
ce0ce13a 677 [NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED] = { .type = NLA_FLAG, },
c7721c05 678 [NL80211_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
bf95ecdb 679 [NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] = { .type = NLA_S8 },
680 [NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST] = {
681 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
682 },
3093ebbe 683 [NL80211_ATTR_TIMEOUT_REASON] = { .type = NLA_U32 },
a3caf744
VK		 684 [NL80211_ATTR_FILS_ERP_USERNAME] = { .type = NLA_BINARY,
685 .len = FILS_ERP_MAX_USERNAME_LEN },
686 [NL80211_ATTR_FILS_ERP_REALM] = { .type = NLA_BINARY,
687 .len = FILS_ERP_MAX_REALM_LEN },
688 [NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] = { .type = NLA_U16 },
689 [NL80211_ATTR_FILS_ERP_RRK] = { .type = NLA_BINARY,
690 .len = FILS_ERP_MAX_RRK_LEN },
c7721c05 691 [NL80211_ATTR_FILS_CACHE_ID] = NLA_POLICY_EXACT_LEN_WARN(2),
a3caf744 692 [NL80211_ATTR_PMK] = { .type = NLA_BINARY, .len = PMK_MAX_LEN },
cb9abd48 693 [NL80211_ATTR_PMKR0_NAME] = NLA_POLICY_EXACT_LEN(WLAN_PMK_NAME_LEN),
ca986ad9 694 [NL80211_ATTR_SCHED_SCAN_MULTI] = { .type = NLA_FLAG },
40cbfa90 695 [NL80211_ATTR_EXTERNAL_AUTH_SUPPORT] = { .type = NLA_FLAG },
52539ca8
THJ		 696
697 [NL80211_ATTR_TXQ_LIMIT] = { .type = NLA_U32 },
698 [NL80211_ATTR_TXQ_MEMORY_LIMIT] = { .type = NLA_U32 },
699 [NL80211_ATTR_TXQ_QUANTUM] = { .type = NLA_U32 },
c8b82802
JB		 700 [NL80211_ATTR_HE_CAPABILITY] =
701 NLA_POLICY_RANGE(NLA_BINARY,
702 NL80211_HE_MIN_CAPABILITY_LEN,
703 NL80211_HE_MAX_CAPABILITY_LEN),
0e012b4e
JB		 704 [NL80211_ATTR_FTM_RESPONDER] =
705 NLA_POLICY_NESTED(nl80211_ftm_responder_policy),
9bb7e0f2
JB		 706 [NL80211_ATTR_TIMEOUT] = NLA_POLICY_MIN(NLA_U32, 1),
707 [NL80211_ATTR_PEER_MEASUREMENTS] =
23323289 708 NLA_POLICY_NESTED(nl80211_pmsr_attr_policy),
36647055 709 [NL80211_ATTR_AIRTIME_WEIGHT] = NLA_POLICY_MIN(NLA_U16, 1),
26f7044e
CHH		 710 [NL80211_ATTR_SAE_PASSWORD] = { .type = NLA_BINARY,
711 .len = SAE_PASSWORD_MAX_LEN },
a0de1ca3 712 [NL80211_ATTR_TWT_RESPONDER] = { .type = NLA_FLAG },
796e90f4 713 [NL80211_ATTR_HE_OBSS_PD] = NLA_POLICY_NESTED(he_obss_pd_policy),
14f34e36 714 [NL80211_ATTR_VLAN_ID] = NLA_POLICY_RANGE(NLA_U16, 1, VLAN_N_VID - 2),
5c5e52d1 715 [NL80211_ATTR_HE_BSS_COLOR] = NLA_POLICY_NESTED(he_bss_color_policy),
77f576de
T		 716 [NL80211_ATTR_TID_CONFIG] =
717 NLA_POLICY_NESTED_ARRAY(nl80211_tid_config_attr_policy),
5631d96a 718 [NL80211_ATTR_CONTROL_PORT_NO_PREAUTH] = { .type = NLA_FLAG },
7fc82af8
VJ		 719 [NL80211_ATTR_PMK_LIFETIME] = NLA_POLICY_MIN(NLA_U32, 1),
720 [NL80211_ATTR_PMK_REAUTH_THRESHOLD] = NLA_POLICY_RANGE(NLA_U8, 1, 100),
9dba48a6 721 [NL80211_ATTR_RECEIVE_MULTICAST] = { .type = NLA_FLAG },
942ba88b 722 [NL80211_ATTR_WIPHY_FREQ_OFFSET] = NLA_POLICY_RANGE(NLA_U32, 0, 999),
2032f3b2 723 [NL80211_ATTR_SCAN_FREQ_KHZ] = { .type = NLA_NESTED },
8140860c
JB		 724 [NL80211_ATTR_HE_6GHZ_CAPABILITY] =
725 NLA_POLICY_EXACT_LEN(sizeof(struct ieee80211_he_6ghz_capa)),
291c49de
AD		 726 [NL80211_ATTR_FILS_DISCOVERY] =
727 NLA_POLICY_NESTED(nl80211_fils_discovery_policy),
7443dcd1
AD		 728 [NL80211_ATTR_UNSOL_BCAST_PROBE_RESP] =
729 NLA_POLICY_NESTED(nl80211_unsol_bcast_probe_resp_policy),
d2b7588a
TP		 730 [NL80211_ATTR_S1G_CAPABILITY] =
731 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
732 [NL80211_ATTR_S1G_CAPABILITY_MASK] =
733 NLA_POLICY_EXACT_LEN(IEEE80211_S1G_CAPABILITY_LEN),
9f0ffa41
RD		 734 [NL80211_ATTR_SAE_PWE] =
735 NLA_POLICY_RANGE(NLA_U8, NL80211_SAE_PWE_HUNT_AND_PECK,
736 NL80211_SAE_PWE_BOTH),
3bb02143 737 [NL80211_ATTR_RECONNECT_REQUESTED] = { .type = NLA_REJECT },
6bdb68ce 738 [NL80211_ATTR_SAR_SPEC] = NLA_POLICY_NESTED(sar_policy),
55682965
JB		 739};
740
e31b8213 741/* policy for the key attributes */
b54452b0 742static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 743 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 744 [NL80211_KEY_IDX] = { .type = NLA_U8 },
745 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 746 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 747 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
748 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
ab0d76f6 749 [NL80211_KEY_TYPE] = NLA_POLICY_MAX(NLA_U32, NUM_NL80211_KEYTYPES - 1),
dbd2fd65 750 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
6cdd3979 751 [NL80211_KEY_MODE] = NLA_POLICY_RANGE(NLA_U8, 0, NL80211_KEY_SET_TX),
dbd2fd65
JB		 752};
753
754/* policy for the key default flags */
755static const struct nla_policy
756nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
757 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
758 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 759};
760
f83ace3b 761#ifdef CONFIG_PM
ff1b6e69
JB		 762/* policy for WoWLAN attributes */
763static const struct nla_policy
764nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
765 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
766 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
767 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
768 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 769 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
770 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
771 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
772 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
2a0e047e 773 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
8cd4d456 774 [NL80211_WOWLAN_TRIG_NET_DETECT] = { .type = NLA_NESTED },
2a0e047e
JB		 775};
776
777static const struct nla_policy
778nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
779 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
780 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
c7721c05 781 [NL80211_WOWLAN_TCP_DST_MAC] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
2a0e047e
JB		 782 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
783 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
bc043585 784 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
2a0e047e
JB		 785 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
786 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
787 },
788 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
789 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
790 },
791 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
bc043585
JB		 792 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = NLA_POLICY_MIN_LEN(1),
793 [NL80211_WOWLAN_TCP_WAKE_MASK] = NLA_POLICY_MIN_LEN(1),
ff1b6e69 794};
f83ace3b 795#endif /* CONFIG_PM */
ff1b6e69 796
be29b99a
AK		 797/* policy for coalesce rule attributes */
798static const struct nla_policy
799nl80211_coalesce_policy[NUM_NL80211_ATTR_COALESCE_RULE] = {
800 [NL80211_ATTR_COALESCE_RULE_DELAY] = { .type = NLA_U32 },
ab0d76f6
JB		 801 [NL80211_ATTR_COALESCE_RULE_CONDITION] =
802 NLA_POLICY_RANGE(NLA_U32,
803 NL80211_COALESCE_CONDITION_MATCH,
804 NL80211_COALESCE_CONDITION_NO_MATCH),
be29b99a
AK		 805 [NL80211_ATTR_COALESCE_RULE_PKT_PATTERN] = { .type = NLA_NESTED },
806};
807
e5497d76
JB		 808/* policy for GTK rekey offload attributes */
809static const struct nla_policy
810nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
093a48d2
NE		 811 [NL80211_REKEY_DATA_KEK] = {
812 .type = NLA_BINARY,
813 .len = NL80211_KEK_EXT_LEN
814 },
815 [NL80211_REKEY_DATA_KCK] = {
816 .type = NLA_BINARY,
817 .len = NL80211_KCK_EXT_LEN
818 },
cb9abd48 819 [NL80211_REKEY_DATA_REPLAY_CTR] = NLA_POLICY_EXACT_LEN(NL80211_REPLAY_CTR_LEN),
093a48d2 820 [NL80211_REKEY_DATA_AKM] = { .type = NLA_U32 },
e5497d76
JB		 821};
822
1e1b11b6 823static const struct nla_policy
824nl80211_match_band_rssi_policy[NUM_NL80211_BANDS] = {
825 [NL80211_BAND_2GHZ] = { .type = NLA_S32 },
826 [NL80211_BAND_5GHZ] = { .type = NLA_S32 },
e548a1c3 827 [NL80211_BAND_6GHZ] = { .type = NLA_S32 },
1e1b11b6 828 [NL80211_BAND_60GHZ] = { .type = NLA_S32 },
829};
830
a1f1c21c
LC		 831static const struct nla_policy
832nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 833 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 834 .len = IEEE80211_MAX_SSID_LEN },
c7721c05 835 [NL80211_SCHED_SCAN_MATCH_ATTR_BSSID] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
88e920b4 836 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
1e1b11b6 837 [NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI] =
838 NLA_POLICY_NESTED(nl80211_match_band_rssi_policy),
a1f1c21c
LC		 839};
840
3b06d277
AS		 841static const struct nla_policy
842nl80211_plan_policy[NL80211_SCHED_SCAN_PLAN_MAX + 1] = {
843 [NL80211_SCHED_SCAN_PLAN_INTERVAL] = { .type = NLA_U32 },
844 [NL80211_SCHED_SCAN_PLAN_ITERATIONS] = { .type = NLA_U32 },
845};
846
38de03d2
AS		 847static const struct nla_policy
848nl80211_bss_select_policy[NL80211_BSS_SELECT_ATTR_MAX + 1] = {
849 [NL80211_BSS_SELECT_ATTR_RSSI] = { .type = NLA_FLAG },
850 [NL80211_BSS_SELECT_ATTR_BAND_PREF] = { .type = NLA_U32 },
851 [NL80211_BSS_SELECT_ATTR_RSSI_ADJUST] = {
852 .len = sizeof(struct nl80211_bss_select_rssi_adjust)
853 },
854};
855
a442b761
AB		 856/* policy for NAN function attributes */
857static const struct nla_policy
858nl80211_nan_func_policy[NL80211_NAN_FUNC_ATTR_MAX + 1] = {
cb9abd48
JB		 859 [NL80211_NAN_FUNC_TYPE] =
860 NLA_POLICY_MAX(NLA_U8, NL80211_NAN_FUNC_MAX_TYPE),
0a27844c 861 [NL80211_NAN_FUNC_SERVICE_ID] = {
a442b761
AB		 862 .len = NL80211_NAN_FUNC_SERVICE_ID_LEN },
863 [NL80211_NAN_FUNC_PUBLISH_TYPE] = { .type = NLA_U8 },
864 [NL80211_NAN_FUNC_PUBLISH_BCAST] = { .type = NLA_FLAG },
865 [NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE] = { .type = NLA_FLAG },
866 [NL80211_NAN_FUNC_FOLLOW_UP_ID] = { .type = NLA_U8 },
867 [NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] = { .type = NLA_U8 },
c7721c05 868 [NL80211_NAN_FUNC_FOLLOW_UP_DEST] = NLA_POLICY_EXACT_LEN_WARN(ETH_ALEN),
a442b761
AB		 869 [NL80211_NAN_FUNC_CLOSE_RANGE] = { .type = NLA_FLAG },
870 [NL80211_NAN_FUNC_TTL] = { .type = NLA_U32 },
871 [NL80211_NAN_FUNC_SERVICE_INFO] = { .type = NLA_BINARY,
872 .len = NL80211_NAN_FUNC_SERVICE_SPEC_INFO_MAX_LEN },
873 [NL80211_NAN_FUNC_SRF] = { .type = NLA_NESTED },
874 [NL80211_NAN_FUNC_RX_MATCH_FILTER] = { .type = NLA_NESTED },
875 [NL80211_NAN_FUNC_TX_MATCH_FILTER] = { .type = NLA_NESTED },
876 [NL80211_NAN_FUNC_INSTANCE_ID] = { .type = NLA_U8 },
877 [NL80211_NAN_FUNC_TERM_REASON] = { .type = NLA_U8 },
878};
879
880/* policy for Service Response Filter attributes */
881static const struct nla_policy
882nl80211_nan_srf_policy[NL80211_NAN_SRF_ATTR_MAX + 1] = {
883 [NL80211_NAN_SRF_INCLUDE] = { .type = NLA_FLAG },
884 [NL80211_NAN_SRF_BF] = { .type = NLA_BINARY,
885 .len = NL80211_NAN_FUNC_SRF_MAX_LEN },
886 [NL80211_NAN_SRF_BF_IDX] = { .type = NLA_U8 },
887 [NL80211_NAN_SRF_MAC_ADDRS] = { .type = NLA_NESTED },
888};
889
ad670233
PX		 890/* policy for packet pattern attributes */
891static const struct nla_policy
892nl80211_packet_pattern_policy[MAX_NL80211_PKTPAT + 1] = {
893 [NL80211_PKTPAT_MASK] = { .type = NLA_BINARY, },
894 [NL80211_PKTPAT_PATTERN] = { .type = NLA_BINARY, },
895 [NL80211_PKTPAT_OFFSET] = { .type = NLA_U32 },
896};
897
9bb7e0f2
JB		 898int nl80211_prepare_wdev_dump(struct netlink_callback *cb,
899 struct cfg80211_registered_device **rdev,
900 struct wireless_dev **wdev)
a043897a 901{
97990a06 902 int err;
a043897a 903
97990a06 904 if (!cb->args[0]) {
50508d94
JB		 905 struct nlattr **attrbuf;
906
907 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
908 GFP_KERNEL);
909 if (!attrbuf)
910 return -ENOMEM;
911
8cb08174
JB		 912 err = nlmsg_parse_deprecated(cb->nlh,
913 GENL_HDRLEN + nl80211_fam.hdrsize,
50508d94 914 attrbuf, nl80211_fam.maxattr,
8cb08174 915 nl80211_policy, NULL);
50508d94
JB		 916 if (err) {
917 kfree(attrbuf);
ea90e0dc 918 return err;
50508d94 919 }
67748893 920
50508d94
JB		 921 *wdev = __cfg80211_wdev_from_attrs(sock_net(cb->skb->sk),
922 attrbuf);
923 kfree(attrbuf);
ea90e0dc
JB		 924 if (IS_ERR(*wdev))
925 return PTR_ERR(*wdev);
f26cbf40 926 *rdev = wiphy_to_rdev((*wdev)->wiphy);
c319d50b
JB		 927 /* 0 is the first index - add 1 to parse only once */
928 cb->args[0] = (*rdev)->wiphy_idx + 1;
97990a06
JB		 929 cb->args[1] = (*wdev)->identifier;
930 } else {
c319d50b
JB		 931 /* subtract the 1 again here */
932 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
97990a06 933 struct wireless_dev *tmp;
67748893 934
ea90e0dc
JB		 935 if (!wiphy)
936 return -ENODEV;
f26cbf40 937 *rdev = wiphy_to_rdev(wiphy);
97990a06 938 *wdev = NULL;
67748893 939
53873f13 940 list_for_each_entry(tmp, &(*rdev)->wiphy.wdev_list, list) {
97990a06
JB		 941 if (tmp->identifier == cb->args[1]) {
942 *wdev = tmp;
943 break;
944 }
945 }
67748893 946
ea90e0dc
JB		 947 if (!*wdev)
948 return -ENODEV;
67748893
JB		 949 }
950
67748893 951 return 0;
67748893
JB		 952}
953
55682965 954/* message building helper */
9bb7e0f2
JB		 955void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
956 int flags, u8 cmd)
55682965
JB		 957{
958 /* since there is no private header just add the generic one */
15e47304 959 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 960}
961
50f32718
HD		 962static int nl80211_msg_put_wmm_rules(struct sk_buff *msg,
963 const struct ieee80211_reg_rule *rule)
964{
965 int j;
966 struct nlattr *nl_wmm_rules =
ae0be8de 967 nla_nest_start_noflag(msg, NL80211_FREQUENCY_ATTR_WMM);
50f32718
HD		 968
969 if (!nl_wmm_rules)
970 goto nla_put_failure;
971
972 for (j = 0; j < IEEE80211_NUM_ACS; j++) {
ae0be8de 973 struct nlattr *nl_wmm_rule = nla_nest_start_noflag(msg, j);
50f32718
HD		 974
975 if (!nl_wmm_rule)
976 goto nla_put_failure;
977
978 if (nla_put_u16(msg, NL80211_WMMR_CW_MIN,
38cb87ee 979 rule->wmm_rule.client[j].cw_min) ||
50f32718 980 nla_put_u16(msg, NL80211_WMMR_CW_MAX,
38cb87ee 981 rule->wmm_rule.client[j].cw_max) ||
50f32718 982 nla_put_u8(msg, NL80211_WMMR_AIFSN,
38cb87ee 983 rule->wmm_rule.client[j].aifsn) ||
d3c89bbc
HD		 984 nla_put_u16(msg, NL80211_WMMR_TXOP,
985 rule->wmm_rule.client[j].cot))
50f32718
HD		 986 goto nla_put_failure;
987
988 nla_nest_end(msg, nl_wmm_rule);
989 }
990 nla_nest_end(msg, nl_wmm_rules);
991
992 return 0;
993
994nla_put_failure:
995 return -ENOBUFS;
996}
997
998static int nl80211_msg_put_channel(struct sk_buff *msg, struct wiphy *wiphy,
cdc89b97
JB		 999 struct ieee80211_channel *chan,
1000 bool large)
5dab3b8a 1001{
ea077c1c
RL		 1002 /* Some channels must be completely excluded from the
1003 * list to protect old user-space tools from breaking
1004 */
1005 if (!large && chan->flags &
1006 (IEEE80211_CHAN_NO_10MHZ | IEEE80211_CHAN_NO_20MHZ))
1007 return 0;
f8d504ca
JB		 1008 if (!large && chan->freq_offset)
1009 return 0;
ea077c1c 1010
9360ffd1
DM		 1011 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
1012 chan->center_freq))
1013 goto nla_put_failure;
5dab3b8a 1014
942ba88b
TP		 1015 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_OFFSET, chan->freq_offset))
1016 goto nla_put_failure;
1017
9360ffd1
DM		 1018 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
1019 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
1020 goto nla_put_failure;
8fe02e16
LR		 1021 if (chan->flags & IEEE80211_CHAN_NO_IR) {
1022 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IR))
1023 goto nla_put_failure;
1024 if (nla_put_flag(msg, __NL80211_FREQUENCY_ATTR_NO_IBSS))
1025 goto nla_put_failure;
1026 }
cdc89b97
JB		 1027 if (chan->flags & IEEE80211_CHAN_RADAR) {
1028 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
1029 goto nla_put_failure;
1030 if (large) {
1031 u32 time;
1032
1033 time = elapsed_jiffies_msecs(chan->dfs_state_entered);
1034
1035 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
1036 chan->dfs_state))
1037 goto nla_put_failure;
1038 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
1039 time))
1040 goto nla_put_failure;
089027e5
JD		 1041 if (nla_put_u32(msg,
1042 NL80211_FREQUENCY_ATTR_DFS_CAC_TIME,
1043 chan->dfs_cac_ms))
1044 goto nla_put_failure;
cdc89b97
JB		 1045 }
1046 }
5dab3b8a 1047
fe1abafd
JB		 1048 if (large) {
1049 if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
1050 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
1051 goto nla_put_failure;
1052 if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
1053 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
1054 goto nla_put_failure;
1055 if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
1056 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
1057 goto nla_put_failure;
1058 if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
1059 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
1060 goto nla_put_failure;
570dbde1
DS		 1061 if ((chan->flags & IEEE80211_CHAN_INDOOR_ONLY) &&
1062 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_INDOOR_ONLY))
1063 goto nla_put_failure;
06f207fc
AN		 1064 if ((chan->flags & IEEE80211_CHAN_IR_CONCURRENT) &&
1065 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_IR_CONCURRENT))
570dbde1 1066 goto nla_put_failure;
ea077c1c
RL		 1067 if ((chan->flags & IEEE80211_CHAN_NO_20MHZ) &&
1068 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_20MHZ))
1069 goto nla_put_failure;
1070 if ((chan->flags & IEEE80211_CHAN_NO_10MHZ) &&
1071 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_10MHZ))
1072 goto nla_put_failure;
1e61d82c
HD		 1073 if ((chan->flags & IEEE80211_CHAN_NO_HE) &&
1074 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HE))
1075 goto nla_put_failure;
d65a9770
TP		 1076 if ((chan->flags & IEEE80211_CHAN_1MHZ) &&
1077 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_1MHZ))
1078 goto nla_put_failure;
1079 if ((chan->flags & IEEE80211_CHAN_2MHZ) &&
1080 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_2MHZ))
1081 goto nla_put_failure;
1082 if ((chan->flags & IEEE80211_CHAN_4MHZ) &&
1083 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_4MHZ))
1084 goto nla_put_failure;
1085 if ((chan->flags & IEEE80211_CHAN_8MHZ) &&
1086 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_8MHZ))
1087 goto nla_put_failure;
1088 if ((chan->flags & IEEE80211_CHAN_16MHZ) &&
1089 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_16MHZ))
1090 goto nla_put_failure;
fe1abafd
JB		 1091 }
1092
9360ffd1
DM		 1093 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
1094 DBM_TO_MBM(chan->max_power)))
1095 goto nla_put_failure;
5dab3b8a 1096
50f32718
HD		 1097 if (large) {
1098 const struct ieee80211_reg_rule *rule =
b88d26d9 1099 freq_reg_info(wiphy, MHZ_TO_KHZ(chan->center_freq));
50f32718 1100
38cb87ee 1101 if (!IS_ERR_OR_NULL(rule) && rule->has_wmm) {
50f32718
HD		 1102 if (nl80211_msg_put_wmm_rules(msg, rule))
1103 goto nla_put_failure;
1104 }
1105 }
1106
5dab3b8a
LR		 1107 return 0;
1108
1109 nla_put_failure:
1110 return -ENOBUFS;
1111}
1112
52539ca8
THJ		 1113static bool nl80211_put_txq_stats(struct sk_buff *msg,
1114 struct cfg80211_txq_stats *txqstats,
1115 int attrtype)
1116{
1117 struct nlattr *txqattr;
1118
1119#define PUT_TXQVAL_U32(attr, memb) do { \
1120 if (txqstats->filled & BIT(NL80211_TXQ_STATS_ ## attr) && \
1121 nla_put_u32(msg, NL80211_TXQ_STATS_ ## attr, txqstats->memb)) \
1122 return false; \
1123 } while (0)
1124
ae0be8de 1125 txqattr = nla_nest_start_noflag(msg, attrtype);
52539ca8
THJ		 1126 if (!txqattr)
1127 return false;
1128
1129 PUT_TXQVAL_U32(BACKLOG_BYTES, backlog_bytes);
1130 PUT_TXQVAL_U32(BACKLOG_PACKETS, backlog_packets);
1131 PUT_TXQVAL_U32(FLOWS, flows);
1132 PUT_TXQVAL_U32(DROPS, drops);
1133 PUT_TXQVAL_U32(ECN_MARKS, ecn_marks);
1134 PUT_TXQVAL_U32(OVERLIMIT, overlimit);
1135 PUT_TXQVAL_U32(OVERMEMORY, overmemory);
1136 PUT_TXQVAL_U32(COLLISIONS, collisions);
1137 PUT_TXQVAL_U32(TX_BYTES, tx_bytes);
1138 PUT_TXQVAL_U32(TX_PACKETS, tx_packets);
1139 PUT_TXQVAL_U32(MAX_FLOWS, max_flows);
1140 nla_nest_end(msg, txqattr);
1141
1142#undef PUT_TXQVAL_U32
1143 return true;
1144}
1145
55682965
JB		 1146/* netlink command implementations */
1147
b9454e83
JB		 1148struct key_parse {
1149 struct key_params p;
1150 int idx;
e31b8213 1151 int type;
56be393f 1152 bool def, defmgmt, defbeacon;
dbd2fd65 1153 bool def_uni, def_multi;
b9454e83
JB		 1154};
1155
768075eb
JB		 1156static int nl80211_parse_key_new(struct genl_info *info, struct nlattr *key,
1157 struct key_parse *k)
b9454e83
JB		 1158{
1159 struct nlattr *tb[NL80211_KEY_MAX + 1];
8cb08174
JB		 1160 int err = nla_parse_nested_deprecated(tb, NL80211_KEY_MAX, key,
1161 nl80211_key_policy,
1162 info->extack);
b9454e83
JB		 1163 if (err)
1164 return err;
1165
1166 k->def = !!tb[NL80211_KEY_DEFAULT];
1167 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
56be393f 1168 k->defbeacon = !!tb[NL80211_KEY_DEFAULT_BEACON];
b9454e83 1169
dbd2fd65
JB		 1170 if (k->def) {
1171 k->def_uni = true;
1172 k->def_multi = true;
1173 }
56be393f 1174 if (k->defmgmt || k->defbeacon)
dbd2fd65
JB		 1175 k->def_multi = true;
1176
b9454e83
JB		 1177 if (tb[NL80211_KEY_IDX])
1178 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
1179
1180 if (tb[NL80211_KEY_DATA]) {
1181 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
1182 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
1183 }
1184
1185 if (tb[NL80211_KEY_SEQ]) {
1186 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
1187 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
1188 }
1189
1190 if (tb[NL80211_KEY_CIPHER])
1191 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
1192
ab0d76f6 1193 if (tb[NL80211_KEY_TYPE])
e31b8213 1194 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
e31b8213 1195
dbd2fd65
JB		 1196 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
1197 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
7a087e74 1198
8cb08174
JB		 1199 err = nla_parse_nested_deprecated(kdt,
1200 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1201 tb[NL80211_KEY_DEFAULT_TYPES],
1202 nl80211_key_default_policy,
1203 info->extack);
dbd2fd65
JB		 1204 if (err)
1205 return err;
1206
1207 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1208 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1209 }
1210
6cdd3979
AW		 1211 if (tb[NL80211_KEY_MODE])
1212 k->p.mode = nla_get_u8(tb[NL80211_KEY_MODE]);
1213
b9454e83
JB		 1214 return 0;
1215}
1216
1217static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
1218{
1219 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
1220 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
1221 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
1222 }
1223
1224 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
1225 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
1226 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
1227 }
1228
1229 if (info->attrs[NL80211_ATTR_KEY_IDX])
1230 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1231
1232 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
1233 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
1234
1235 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
1236 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
1237
dbd2fd65
JB		 1238 if (k->def) {
1239 k->def_uni = true;
1240 k->def_multi = true;
1241 }
1242 if (k->defmgmt)
1243 k->def_multi = true;
1244
ab0d76f6 1245 if (info->attrs[NL80211_ATTR_KEY_TYPE])
e31b8213 1246 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
e31b8213 1247
dbd2fd65
JB		 1248 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
1249 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
8cb08174
JB		 1250 int err = nla_parse_nested_deprecated(kdt,
1251 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
1252 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
1253 nl80211_key_default_policy,
1254 info->extack);
dbd2fd65
JB		 1255 if (err)
1256 return err;
1257
1258 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
1259 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
1260 }
1261
b9454e83
JB		 1262 return 0;
1263}
1264
1265static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
1266{
1267 int err;
1268
1269 memset(k, 0, sizeof(*k));
1270 k->idx = -1;
e31b8213 1271 k->type = -1;
b9454e83
JB		 1272
1273 if (info->attrs[NL80211_ATTR_KEY])
768075eb 1274 err = nl80211_parse_key_new(info, info->attrs[NL80211_ATTR_KEY], k);
b9454e83
JB		 1275 else
1276 err = nl80211_parse_key_old(info, k);
1277
1278 if (err)
1279 return err;
1280
56be393f
JM		 1281 if ((k->def ? 1 : 0) + (k->defmgmt ? 1 : 0) +
1282 (k->defbeacon ? 1 : 0) > 1) {
1283 GENL_SET_ERR_MSG(info,
1284 "key with multiple default flags is invalid");
b9454e83 1285 return -EINVAL;
768075eb 1286 }
b9454e83 1287
56be393f 1288 if (k->defmgmt || k->defbeacon) {
768075eb 1289 if (k->def_uni || !k->def_multi) {
56be393f
JM		 1290 GENL_SET_ERR_MSG(info,
1291 "defmgmt/defbeacon key must be mcast");
dbd2fd65 1292 return -EINVAL;
768075eb 1293 }
dbd2fd65
JB		 1294 }
1295
b9454e83
JB		 1296 if (k->idx != -1) {
1297 if (k->defmgmt) {
768075eb
JB		 1298 if (k->idx < 4 || k->idx > 5) {
1299 GENL_SET_ERR_MSG(info,
1300 "defmgmt key idx not 4 or 5");
b9454e83 1301 return -EINVAL;
768075eb 1302 }
56be393f
JM		 1303 } else if (k->defbeacon) {
1304 if (k->idx < 6 || k->idx > 7) {
1305 GENL_SET_ERR_MSG(info,
1306 "defbeacon key idx not 6 or 7");
1307 return -EINVAL;
1308 }
b9454e83 1309 } else if (k->def) {
768075eb
JB		 1310 if (k->idx < 0 || k->idx > 3) {
1311 GENL_SET_ERR_MSG(info, "def key idx not 0-3");
b9454e83 1312 return -EINVAL;
768075eb 1313 }
b9454e83 1314 } else {
56be393f
JM		 1315 if (k->idx < 0 || k->idx > 7) {
1316 GENL_SET_ERR_MSG(info, "key idx not 0-7");
b9454e83 1317 return -EINVAL;
768075eb 1318 }
b9454e83
JB		 1319 }
1320 }
1321
1322 return 0;
1323}
1324
fffd0934
JB		 1325static struct cfg80211_cached_keys *
1326nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
768075eb 1327 struct genl_info *info, bool *no_ht)
fffd0934 1328{
768075eb 1329 struct nlattr *keys = info->attrs[NL80211_ATTR_KEYS];
fffd0934
JB		 1330 struct key_parse parse;
1331 struct nlattr *key;
1332 struct cfg80211_cached_keys *result;
1333 int rem, err, def = 0;
f1c1f17a
JB		 1334 bool have_key = false;
1335
1336 nla_for_each_nested(key, keys, rem) {
1337 have_key = true;
1338 break;
1339 }
1340
1341 if (!have_key)
1342 return NULL;
fffd0934
JB		 1343
1344 result = kzalloc(sizeof(*result), GFP_KERNEL);
1345 if (!result)
1346 return ERR_PTR(-ENOMEM);
1347
1348 result->def = -1;
fffd0934
JB		 1349
1350 nla_for_each_nested(key, keys, rem) {
1351 memset(&parse, 0, sizeof(parse));
1352 parse.idx = -1;
1353
768075eb 1354 err = nl80211_parse_key_new(info, key, &parse);
fffd0934
JB		 1355 if (err)
1356 goto error;
1357 err = -EINVAL;
1358 if (!parse.p.key)
1359 goto error;
768075eb
JB		 1360 if (parse.idx < 0 || parse.idx > 3) {
1361 GENL_SET_ERR_MSG(info, "key index out of range [0-3]");
fffd0934 1362 goto error;
768075eb 1363 }
fffd0934 1364 if (parse.def) {
768075eb
JB		 1365 if (def) {
1366 GENL_SET_ERR_MSG(info,
1367 "only one key can be default");
fffd0934 1368 goto error;
768075eb 1369 }
fffd0934
JB		 1370 def = 1;
1371 result->def = parse.idx;
dbd2fd65
JB		 1372 if (!parse.def_uni || !parse.def_multi)
1373 goto error;
fffd0934
JB		 1374 } else if (parse.defmgmt)
1375 goto error;
1376 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 1377 parse.idx, false, NULL);
fffd0934
JB		 1378 if (err)
1379 goto error;
386b1f27
JB		 1380 if (parse.p.cipher != WLAN_CIPHER_SUITE_WEP40 &&
1381 parse.p.cipher != WLAN_CIPHER_SUITE_WEP104) {
768075eb 1382 GENL_SET_ERR_MSG(info, "connect key must be WEP");
386b1f27
JB		 1383 err = -EINVAL;
1384 goto error;
1385 }
fffd0934
JB		 1386 result->params[parse.idx].cipher = parse.p.cipher;
1387 result->params[parse.idx].key_len = parse.p.key_len;
1388 result->params[parse.idx].key = result->data[parse.idx];
1389 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee 1390
386b1f27
JB		 1391 /* must be WEP key if we got here */
1392 if (no_ht)
1393 *no_ht = true;
fffd0934
JB		 1394 }
1395
f1c1f17a
JB		 1396 if (result->def < 0) {
1397 err = -EINVAL;
768075eb 1398 GENL_SET_ERR_MSG(info, "need a default/TX key");
f1c1f17a
JB		 1399 goto error;
1400 }
1401
fffd0934
JB		 1402 return result;
1403 error:
1404 kfree(result);
1405 return ERR_PTR(err);
1406}
1407
1408static int nl80211_key_allowed(struct wireless_dev *wdev)
1409{
1410 ASSERT_WDEV_LOCK(wdev);
1411
fffd0934
JB		 1412 switch (wdev->iftype) {
1413 case NL80211_IFTYPE_AP:
1414 case NL80211_IFTYPE_AP_VLAN:
074ac8df 1415 case NL80211_IFTYPE_P2P_GO:
ff973af7 1416 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 1417 break;
1418 case NL80211_IFTYPE_ADHOC:
fffd0934 1419 case NL80211_IFTYPE_STATION:
074ac8df 1420 case NL80211_IFTYPE_P2P_CLIENT:
ceca7b71 1421 if (!wdev->current_bss)
fffd0934
JB		 1422 return -ENOLINK;
1423 break;
de4fcbad 1424 case NL80211_IFTYPE_UNSPECIFIED:
6e0bd6c3 1425 case NL80211_IFTYPE_OCB:
de4fcbad 1426 case NL80211_IFTYPE_MONITOR:
cb3b7d87 1427 case NL80211_IFTYPE_NAN:
de4fcbad
JB		 1428 case NL80211_IFTYPE_P2P_DEVICE:
1429 case NL80211_IFTYPE_WDS:
1430 case NUM_NL80211_IFTYPES:
fffd0934
JB		 1431 return -EINVAL;
1432 }
1433
1434 return 0;
1435}
1436
664834de 1437static struct ieee80211_channel *nl80211_get_valid_chan(struct wiphy *wiphy,
942ba88b 1438 u32 freq)
664834de
JM		 1439{
1440 struct ieee80211_channel *chan;
1441
942ba88b 1442 chan = ieee80211_get_channel_khz(wiphy, freq);
664834de
JM		 1443 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
1444 return NULL;
1445 return chan;
1446}
1447
7527a782
JB		 1448static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
1449{
ae0be8de 1450 struct nlattr *nl_modes = nla_nest_start_noflag(msg, attr);
7527a782
JB		 1451 int i;
1452
1453 if (!nl_modes)
1454 goto nla_put_failure;
1455
1456 i = 0;
1457 while (ifmodes) {
9360ffd1
DM		 1458 if ((ifmodes & 1) && nla_put_flag(msg, i))
1459 goto nla_put_failure;
7527a782
JB		 1460 ifmodes >>= 1;
1461 i++;
1462 }
1463
1464 nla_nest_end(msg, nl_modes);
1465 return 0;
1466
1467nla_put_failure:
1468 return -ENOBUFS;
1469}
1470
1471static int nl80211_put_iface_combinations(struct wiphy *wiphy,
cdc89b97
JB		 1472 struct sk_buff *msg,
1473 bool large)
7527a782
JB		 1474{
1475 struct nlattr *nl_combis;
1476 int i, j;
1477
ae0be8de
MK		 1478 nl_combis = nla_nest_start_noflag(msg,
1479 NL80211_ATTR_INTERFACE_COMBINATIONS);
7527a782
JB		 1480 if (!nl_combis)
1481 goto nla_put_failure;
1482
1483 for (i = 0; i < wiphy->n_iface_combinations; i++) {
1484 const struct ieee80211_iface_combination *c;
1485 struct nlattr *nl_combi, *nl_limits;
1486
1487 c = &wiphy->iface_combinations[i];
1488
ae0be8de 1489 nl_combi = nla_nest_start_noflag(msg, i + 1);
7527a782
JB		 1490 if (!nl_combi)
1491 goto nla_put_failure;
1492
ae0be8de
MK		 1493 nl_limits = nla_nest_start_noflag(msg,
1494 NL80211_IFACE_COMB_LIMITS);
7527a782
JB		 1495 if (!nl_limits)
1496 goto nla_put_failure;
1497
1498 for (j = 0; j < c->n_limits; j++) {
1499 struct nlattr *nl_limit;
1500
ae0be8de 1501 nl_limit = nla_nest_start_noflag(msg, j + 1);
7527a782
JB		 1502 if (!nl_limit)
1503 goto nla_put_failure;
9360ffd1
DM		 1504 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
1505 c->limits[j].max))
1506 goto nla_put_failure;
7527a782
JB		 1507 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
1508 c->limits[j].types))
1509 goto nla_put_failure;
1510 nla_nest_end(msg, nl_limit);
1511 }
1512
1513 nla_nest_end(msg, nl_limits);
1514
9360ffd1
DM		 1515 if (c->beacon_int_infra_match &&
1516 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
1517 goto nla_put_failure;
1518 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
1519 c->num_different_channels) ||
1520 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
1521 c->max_interfaces))
1522 goto nla_put_failure;
cdc89b97 1523 if (large &&
8c48b50a
FF		 1524 (nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
1525 c->radar_detect_widths) ||
1526 nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_REGIONS,
1527 c->radar_detect_regions)))
cdc89b97 1528 goto nla_put_failure;
0c317a02
PK		 1529 if (c->beacon_int_min_gcd &&
1530 nla_put_u32(msg, NL80211_IFACE_COMB_BI_MIN_GCD,
1531 c->beacon_int_min_gcd))
1532 goto nla_put_failure;
7527a782
JB		 1533
1534 nla_nest_end(msg, nl_combi);
1535 }
1536
1537 nla_nest_end(msg, nl_combis);
1538
1539 return 0;
1540nla_put_failure:
1541 return -ENOBUFS;
1542}
1543
3713b4e3 1544#ifdef CONFIG_PM
b56cf720
JB		 1545static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
1546 struct sk_buff *msg)
1547{
964dc9e2 1548 const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan->tcp;
b56cf720
JB		 1549 struct nlattr *nl_tcp;
1550
1551 if (!tcp)
1552 return 0;
1553
ae0be8de
MK		 1554 nl_tcp = nla_nest_start_noflag(msg,
1555 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
b56cf720
JB		 1556 if (!nl_tcp)
1557 return -ENOBUFS;
1558
1559 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1560 tcp->data_payload_max))
1561 return -ENOBUFS;
1562
1563 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
1564 tcp->data_payload_max))
1565 return -ENOBUFS;
1566
1567 if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
1568 return -ENOBUFS;
1569
1570 if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
1571 sizeof(*tcp->tok), tcp->tok))
1572 return -ENOBUFS;
1573
1574 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
1575 tcp->data_interval_max))
1576 return -ENOBUFS;
1577
1578 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
1579 tcp->wake_payload_max))
1580 return -ENOBUFS;
1581
1582 nla_nest_end(msg, nl_tcp);
1583 return 0;
1584}
1585
3713b4e3 1586static int nl80211_send_wowlan(struct sk_buff *msg,
1b8ec87a 1587 struct cfg80211_registered_device *rdev,
b56cf720 1588 bool large)
55682965 1589{
3713b4e3 1590 struct nlattr *nl_wowlan;
55682965 1591
1b8ec87a 1592 if (!rdev->wiphy.wowlan)
3713b4e3 1593 return 0;
55682965 1594
ae0be8de
MK		 1595 nl_wowlan = nla_nest_start_noflag(msg,
1596 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
3713b4e3
JB		 1597 if (!nl_wowlan)
1598 return -ENOBUFS;
9360ffd1 1599
1b8ec87a 1600 if (((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_ANY) &&
3713b4e3 1601 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1b8ec87a 1602 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_DISCONNECT) &&
3713b4e3 1603 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1b8ec87a 1604 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT) &&
3713b4e3 1605 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1b8ec87a 1606 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
3713b4e3 1607 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1b8ec87a 1608 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
3713b4e3 1609 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1b8ec87a 1610 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
3713b4e3 1611 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1b8ec87a 1612 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
3713b4e3 1613 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1b8ec87a 1614 ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
3713b4e3
JB		 1615 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1616 return -ENOBUFS;
9360ffd1 1617
1b8ec87a 1618 if (rdev->wiphy.wowlan->n_patterns) {
50ac6607 1619 struct nl80211_pattern_support pat = {
1b8ec87a
ZG		 1620 .max_patterns = rdev->wiphy.wowlan->n_patterns,
1621 .min_pattern_len = rdev->wiphy.wowlan->pattern_min_len,
1622 .max_pattern_len = rdev->wiphy.wowlan->pattern_max_len,
1623 .max_pkt_offset = rdev->wiphy.wowlan->max_pkt_offset,
3713b4e3 1624 };
9360ffd1 1625
3713b4e3
JB		 1626 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1627 sizeof(pat), &pat))
1628 return -ENOBUFS;
1629 }
9360ffd1 1630
75453ccb
LC		 1631 if ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_NET_DETECT) &&
1632 nla_put_u32(msg, NL80211_WOWLAN_TRIG_NET_DETECT,
1633 rdev->wiphy.wowlan->max_nd_match_sets))
1634 return -ENOBUFS;
1635
1b8ec87a 1636 if (large && nl80211_send_wowlan_tcp_caps(rdev, msg))
b56cf720
JB		 1637 return -ENOBUFS;
1638
3713b4e3 1639 nla_nest_end(msg, nl_wowlan);
9360ffd1 1640
3713b4e3
JB		 1641 return 0;
1642}
1643#endif
9360ffd1 1644
be29b99a 1645static int nl80211_send_coalesce(struct sk_buff *msg,
1b8ec87a 1646 struct cfg80211_registered_device *rdev)
be29b99a
AK		 1647{
1648 struct nl80211_coalesce_rule_support rule;
1649
1b8ec87a 1650 if (!rdev->wiphy.coalesce)
be29b99a
AK		 1651 return 0;
1652
1b8ec87a
ZG		 1653 rule.max_rules = rdev->wiphy.coalesce->n_rules;
1654 rule.max_delay = rdev->wiphy.coalesce->max_delay;
1655 rule.pat.max_patterns = rdev->wiphy.coalesce->n_patterns;
1656 rule.pat.min_pattern_len = rdev->wiphy.coalesce->pattern_min_len;
1657 rule.pat.max_pattern_len = rdev->wiphy.coalesce->pattern_max_len;
1658 rule.pat.max_pkt_offset = rdev->wiphy.coalesce->max_pkt_offset;
be29b99a
AK		 1659
1660 if (nla_put(msg, NL80211_ATTR_COALESCE_RULE, sizeof(rule), &rule))
1661 return -ENOBUFS;
1662
1663 return 0;
1664}
1665
c4cbaf79
LC		 1666static int
1667nl80211_send_iftype_data(struct sk_buff *msg,
22395217 1668 const struct ieee80211_supported_band *sband,
c4cbaf79
LC		 1669 const struct ieee80211_sband_iftype_data *iftdata)
1670{
1671 const struct ieee80211_sta_he_cap *he_cap = &iftdata->he_cap;
1672
1673 if (nl80211_put_iftypes(msg, NL80211_BAND_IFTYPE_ATTR_IFTYPES,
1674 iftdata->types_mask))
1675 return -ENOBUFS;
1676
1677 if (he_cap->has_he) {
1678 if (nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MAC,
1679 sizeof(he_cap->he_cap_elem.mac_cap_info),
1680 he_cap->he_cap_elem.mac_cap_info) ||
1681 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PHY,
1682 sizeof(he_cap->he_cap_elem.phy_cap_info),
1683 he_cap->he_cap_elem.phy_cap_info) ||
1684 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET,
1685 sizeof(he_cap->he_mcs_nss_supp),
1686 &he_cap->he_mcs_nss_supp) ||
1687 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_CAP_PPE,
1688 sizeof(he_cap->ppe_thres), he_cap->ppe_thres))
1689 return -ENOBUFS;
1690 }
1691
22395217
JB		 1692 if (sband->band == NL80211_BAND_6GHZ &&
1693 nla_put(msg, NL80211_BAND_IFTYPE_ATTR_HE_6GHZ_CAPA,
1694 sizeof(iftdata->he_6ghz_capa),
1695 &iftdata->he_6ghz_capa))
1696 return -ENOBUFS;
1697
c4cbaf79
LC		 1698 return 0;
1699}
1700
3713b4e3 1701static int nl80211_send_band_rateinfo(struct sk_buff *msg,
f8d504ca
JB		 1702 struct ieee80211_supported_band *sband,
1703 bool large)
3713b4e3
JB		 1704{
1705 struct nlattr *nl_rates, *nl_rate;
1706 struct ieee80211_rate *rate;
1707 int i;
87bbbe22 1708
3713b4e3
JB		 1709 /* add HT info */
1710 if (sband->ht_cap.ht_supported &&
1711 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1712 sizeof(sband->ht_cap.mcs),
1713 &sband->ht_cap.mcs) ||
1714 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1715 sband->ht_cap.cap) ||
1716 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1717 sband->ht_cap.ampdu_factor) ||
1718 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1719 sband->ht_cap.ampdu_density)))
1720 return -ENOBUFS;
afe0cbf8 1721
3713b4e3
JB		 1722 /* add VHT info */
1723 if (sband->vht_cap.vht_supported &&
1724 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1725 sizeof(sband->vht_cap.vht_mcs),
1726 &sband->vht_cap.vht_mcs) ||
1727 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1728 sband->vht_cap.cap)))
1729 return -ENOBUFS;
f59ac048 1730
f8d504ca 1731 if (large && sband->n_iftype_data) {
c4cbaf79 1732 struct nlattr *nl_iftype_data =
ae0be8de
MK		 1733 nla_nest_start_noflag(msg,
1734 NL80211_BAND_ATTR_IFTYPE_DATA);
c4cbaf79
LC		 1735 int err;
1736
1737 if (!nl_iftype_data)
1738 return -ENOBUFS;
1739
1740 for (i = 0; i < sband->n_iftype_data; i++) {
1741 struct nlattr *iftdata;
1742
ae0be8de 1743 iftdata = nla_nest_start_noflag(msg, i + 1);
c4cbaf79
LC		 1744 if (!iftdata)
1745 return -ENOBUFS;
1746
22395217 1747 err = nl80211_send_iftype_data(msg, sband,
c4cbaf79
LC		 1748 &sband->iftype_data[i]);
1749 if (err)
1750 return err;
1751
1752 nla_nest_end(msg, iftdata);
1753 }
1754
1755 nla_nest_end(msg, nl_iftype_data);
1756 }
1757
2a38075c 1758 /* add EDMG info */
f8d504ca 1759 if (large && sband->edmg_cap.channels &&
2a38075c
AAL		 1760 (nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_CHANNELS,
1761 sband->edmg_cap.channels) ||
1762 nla_put_u8(msg, NL80211_BAND_ATTR_EDMG_BW_CONFIG,
1763 sband->edmg_cap.bw_config)))
1764
1765 return -ENOBUFS;
1766
3713b4e3 1767 /* add bitrates */
ae0be8de 1768 nl_rates = nla_nest_start_noflag(msg, NL80211_BAND_ATTR_RATES);
3713b4e3
JB		 1769 if (!nl_rates)
1770 return -ENOBUFS;
ee688b00 1771
3713b4e3 1772 for (i = 0; i < sband->n_bitrates; i++) {
ae0be8de 1773 nl_rate = nla_nest_start_noflag(msg, i);
3713b4e3
JB		 1774 if (!nl_rate)
1775 return -ENOBUFS;
ee688b00 1776
3713b4e3
JB		 1777 rate = &sband->bitrates[i];
1778 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1779 rate->bitrate))
1780 return -ENOBUFS;
1781 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1782 nla_put_flag(msg,
1783 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1784 return -ENOBUFS;
ee688b00 1785
3713b4e3
JB		 1786 nla_nest_end(msg, nl_rate);
1787 }
d51626df 1788
3713b4e3 1789 nla_nest_end(msg, nl_rates);
bf0c111e 1790
3713b4e3
JB		 1791 return 0;
1792}
ee688b00 1793
3713b4e3
JB		 1794static int
1795nl80211_send_mgmt_stypes(struct sk_buff *msg,
1796 const struct ieee80211_txrx_stypes *mgmt_stypes)
1797{
1798 u16 stypes;
1799 struct nlattr *nl_ftypes, *nl_ifs;
1800 enum nl80211_iftype ift;
1801 int i;
ee688b00 1802
3713b4e3
JB		 1803 if (!mgmt_stypes)
1804 return 0;
5dab3b8a 1805
ae0be8de 1806 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_TX_FRAME_TYPES);
3713b4e3
JB		 1807 if (!nl_ifs)
1808 return -ENOBUFS;
e2f367f2 1809
3713b4e3 1810 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1811 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1812 if (!nl_ftypes)
1813 return -ENOBUFS;
1814 i = 0;
1815 stypes = mgmt_stypes[ift].tx;
1816 while (stypes) {
1817 if ((stypes & 1) &&
1818 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1819 (i << 4) | IEEE80211_FTYPE_MGMT))
1820 return -ENOBUFS;
1821 stypes >>= 1;
1822 i++;
ee688b00 1823 }
3713b4e3
JB		 1824 nla_nest_end(msg, nl_ftypes);
1825 }
ee688b00 1826
3713b4e3 1827 nla_nest_end(msg, nl_ifs);
ee688b00 1828
ae0be8de 1829 nl_ifs = nla_nest_start_noflag(msg, NL80211_ATTR_RX_FRAME_TYPES);
3713b4e3
JB		 1830 if (!nl_ifs)
1831 return -ENOBUFS;
ee688b00 1832
3713b4e3 1833 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
ae0be8de 1834 nl_ftypes = nla_nest_start_noflag(msg, ift);
3713b4e3
JB		 1835 if (!nl_ftypes)
1836 return -ENOBUFS;
1837 i = 0;
1838 stypes = mgmt_stypes[ift].rx;
1839 while (stypes) {
1840 if ((stypes & 1) &&
1841 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1842 (i << 4) | IEEE80211_FTYPE_MGMT))
1843 return -ENOBUFS;
1844 stypes >>= 1;
1845 i++;
1846 }
1847 nla_nest_end(msg, nl_ftypes);
1848 }
1849 nla_nest_end(msg, nl_ifs);
ee688b00 1850
3713b4e3
JB		 1851 return 0;
1852}
ee688b00 1853
1794899e
JB		 1854#define CMD(op, n) \
1855 do { \
1856 if (rdev->ops->op) { \
1857 i++; \
1858 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1859 goto nla_put_failure; \
1860 } \
1861 } while (0)
1862
1863static int nl80211_add_commands_unsplit(struct cfg80211_registered_device *rdev,
1864 struct sk_buff *msg)
1865{
1866 int i = 0;
1867
1868 /*
1869 * do *NOT* add anything into this function, new things need to be
1870 * advertised only to new versions of userspace that can deal with
1871 * the split (and they can't possibly care about new features...
1872 */
1873 CMD(add_virtual_intf, NEW_INTERFACE);
1874 CMD(change_virtual_intf, SET_INTERFACE);
1875 CMD(add_key, NEW_KEY);
1876 CMD(start_ap, START_AP);
1877 CMD(add_station, NEW_STATION);
1878 CMD(add_mpath, NEW_MPATH);
1879 CMD(update_mesh_config, SET_MESH_CONFIG);
1880 CMD(change_bss, SET_BSS);
1881 CMD(auth, AUTHENTICATE);
1882 CMD(assoc, ASSOCIATE);
1883 CMD(deauth, DEAUTHENTICATE);
1884 CMD(disassoc, DISASSOCIATE);
1885 CMD(join_ibss, JOIN_IBSS);
1886 CMD(join_mesh, JOIN_MESH);
1887 CMD(set_pmksa, SET_PMKSA);
1888 CMD(del_pmksa, DEL_PMKSA);
1889 CMD(flush_pmksa, FLUSH_PMKSA);
1890 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1891 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
1892 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
1893 CMD(mgmt_tx, FRAME);
1894 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
1895 if (rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
1896 i++;
1897 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
1898 goto nla_put_failure;
1899 }
1900 if (rdev->ops->set_monitor_channel || rdev->ops->start_ap ||
1901 rdev->ops->join_mesh) {
1902 i++;
1903 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1904 goto nla_put_failure;
1905 }
1794899e
JB		 1906 if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1907 CMD(tdls_mgmt, TDLS_MGMT);
1908 CMD(tdls_oper, TDLS_OPER);
1909 }
ca986ad9 1910 if (rdev->wiphy.max_sched_scan_reqs)
1794899e
JB		 1911 CMD(sched_scan_start, START_SCHED_SCAN);
1912 CMD(probe_client, PROBE_CLIENT);
1913 CMD(set_noack_map, SET_NOACK_MAP);
1914 if (rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1915 i++;
1916 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1917 goto nla_put_failure;
1918 }
1919 CMD(start_p2p_device, START_P2P_DEVICE);
1920 CMD(set_mcast_rate, SET_MCAST_RATE);
1921#ifdef CONFIG_NL80211_TESTMODE
1922 CMD(testmode_cmd, TESTMODE);
1923#endif
1924
1925 if (rdev->ops->connect || rdev->ops->auth) {
1926 i++;
1927 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
1928 goto nla_put_failure;
1929 }
1930
1931 if (rdev->ops->disconnect || rdev->ops->deauth) {
1932 i++;
1933 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1934 goto nla_put_failure;
1935 }
1936
1937 return i;
1938 nla_put_failure:
1939 return -ENOBUFS;
1940}
1941
9bb7e0f2
JB		 1942static int
1943nl80211_send_pmsr_ftm_capa(const struct cfg80211_pmsr_capabilities *cap,
1944 struct sk_buff *msg)
1945{
1946 struct nlattr *ftm;
1947
1948 if (!cap->ftm.supported)
1949 return 0;
1950
ae0be8de 1951 ftm = nla_nest_start_noflag(msg, NL80211_PMSR_TYPE_FTM);
9bb7e0f2
JB		 1952 if (!ftm)
1953 return -ENOBUFS;
1954
1955 if (cap->ftm.asap && nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_ASAP))
1956 return -ENOBUFS;
1957 if (cap->ftm.non_asap &&
1958 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP))
1959 return -ENOBUFS;
1960 if (cap->ftm.request_lci &&
1961 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI))
1962 return -ENOBUFS;
1963 if (cap->ftm.request_civicloc &&
1964 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC))
1965 return -ENOBUFS;
1966 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES,
1967 cap->ftm.preambles))
1968 return -ENOBUFS;
1969 if (nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS,
1970 cap->ftm.bandwidths))
1971 return -ENOBUFS;
1972 if (cap->ftm.max_bursts_exponent >= 0 &&
1973 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT,
1974 cap->ftm.max_bursts_exponent))
1975 return -ENOBUFS;
1976 if (cap->ftm.max_ftms_per_burst &&
1977 nla_put_u32(msg, NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST,
1978 cap->ftm.max_ftms_per_burst))
1979 return -ENOBUFS;
efb5520d
AS		 1980 if (cap->ftm.trigger_based &&
1981 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED))
1982 return -ENOBUFS;
1983 if (cap->ftm.non_trigger_based &&
1984 nla_put_flag(msg, NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED))
1985 return -ENOBUFS;
9bb7e0f2
JB		 1986
1987 nla_nest_end(msg, ftm);
1988 return 0;
1989}
1990
1991static int nl80211_send_pmsr_capa(struct cfg80211_registered_device *rdev,
1992 struct sk_buff *msg)
1993{
1994 const struct cfg80211_pmsr_capabilities *cap = rdev->wiphy.pmsr_capa;
1995 struct nlattr *pmsr, *caps;
1996
1997 if (!cap)
1998 return 0;
1999
2000 /*
2001 * we don't need to clean up anything here since the caller
2002 * will genlmsg_cancel() if we fail
2003 */
2004
ae0be8de 2005 pmsr = nla_nest_start_noflag(msg, NL80211_ATTR_PEER_MEASUREMENTS);
9bb7e0f2
JB		 2006 if (!pmsr)
2007 return -ENOBUFS;
2008
2009 if (nla_put_u32(msg, NL80211_PMSR_ATTR_MAX_PEERS, cap->max_peers))
2010 return -ENOBUFS;
2011
2012 if (cap->report_ap_tsf &&
2013 nla_put_flag(msg, NL80211_PMSR_ATTR_REPORT_AP_TSF))
2014 return -ENOBUFS;
2015
2016 if (cap->randomize_mac_addr &&
2017 nla_put_flag(msg, NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR))
2018 return -ENOBUFS;
2019
ae0be8de 2020 caps = nla_nest_start_noflag(msg, NL80211_PMSR_ATTR_TYPE_CAPA);
9bb7e0f2
JB		 2021 if (!caps)
2022 return -ENOBUFS;
2023
2024 if (nl80211_send_pmsr_ftm_capa(cap, msg))
2025 return -ENOBUFS;
2026
2027 nla_nest_end(msg, caps);
2028 nla_nest_end(msg, pmsr);
2029
2030 return 0;
2031}
2032
d6039a34
VJ		 2033static int
2034nl80211_put_iftype_akm_suites(struct cfg80211_registered_device *rdev,
2035 struct sk_buff *msg)
2036{
2037 int i;
2038 struct nlattr *nested, *nested_akms;
2039 const struct wiphy_iftype_akm_suites *iftype_akms;
2040
2041 if (!rdev->wiphy.num_iftype_akm_suites ||
2042 !rdev->wiphy.iftype_akm_suites)
2043 return 0;
2044
2045 nested = nla_nest_start(msg, NL80211_ATTR_IFTYPE_AKM_SUITES);
2046 if (!nested)
2047 return -ENOBUFS;
2048
2049 for (i = 0; i < rdev->wiphy.num_iftype_akm_suites; i++) {
2050 nested_akms = nla_nest_start(msg, i + 1);
2051 if (!nested_akms)
2052 return -ENOBUFS;
2053
2054 iftype_akms = &rdev->wiphy.iftype_akm_suites[i];
2055
2056 if (nl80211_put_iftypes(msg, NL80211_IFTYPE_AKM_ATTR_IFTYPES,
2057 iftype_akms->iftypes_mask))
2058 return -ENOBUFS;
2059
2060 if (nla_put(msg, NL80211_IFTYPE_AKM_ATTR_SUITES,
2061 sizeof(u32) * iftype_akms->n_akm_suites,
2062 iftype_akms->akm_suites)) {
2063 return -ENOBUFS;
2064 }
2065 nla_nest_end(msg, nested_akms);
2066 }
2067
2068 nla_nest_end(msg, nested);
2069
2070 return 0;
2071}
2072
3710a8a6
JB		 2073static int
2074nl80211_put_tid_config_support(struct cfg80211_registered_device *rdev,
2075 struct sk_buff *msg)
2076{
2077 struct nlattr *supp;
2078
2079 if (!rdev->wiphy.tid_config_support.vif &&
2080 !rdev->wiphy.tid_config_support.peer)
2081 return 0;
2082
2083 supp = nla_nest_start(msg, NL80211_ATTR_TID_CONFIG);
2084 if (!supp)
2085 return -ENOSPC;
2086
2087 if (rdev->wiphy.tid_config_support.vif &&
2088 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_VIF_SUPP,
2089 rdev->wiphy.tid_config_support.vif,
2090 NL80211_TID_CONFIG_ATTR_PAD))
2091 goto fail;
2092
2093 if (rdev->wiphy.tid_config_support.peer &&
2094 nla_put_u64_64bit(msg, NL80211_TID_CONFIG_ATTR_PEER_SUPP,
2095 rdev->wiphy.tid_config_support.peer,
2096 NL80211_TID_CONFIG_ATTR_PAD))
2097 goto fail;
2098
6a21d16c
T		 2099 /* for now we just use the same value ... makes more sense */
2100 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_SHORT,
2101 rdev->wiphy.tid_config_support.max_retry))
2102 goto fail;
2103 if (nla_put_u8(msg, NL80211_TID_CONFIG_ATTR_RETRY_LONG,
2104 rdev->wiphy.tid_config_support.max_retry))
2105 goto fail;
2106
3710a8a6
JB		 2107 nla_nest_end(msg, supp);
2108
2109 return 0;
2110fail:
2111 nla_nest_cancel(msg, supp);
2112 return -ENOBUFS;
2113}
2114
6bdb68ce
CH		 2115static int
2116nl80211_put_sar_specs(struct cfg80211_registered_device *rdev,
2117 struct sk_buff *msg)
2118{
2119 struct nlattr *sar_capa, *specs, *sub_freq_range;
2120 u8 num_freq_ranges;
2121 int i;
2122
2123 if (!rdev->wiphy.sar_capa)
2124 return 0;
2125
2126 num_freq_ranges = rdev->wiphy.sar_capa->num_freq_ranges;
2127
2128 sar_capa = nla_nest_start(msg, NL80211_ATTR_SAR_SPEC);
2129 if (!sar_capa)
2130 return -ENOSPC;
2131
2132 if (nla_put_u32(msg, NL80211_SAR_ATTR_TYPE, rdev->wiphy.sar_capa->type))
2133 goto fail;
2134
2135 specs = nla_nest_start(msg, NL80211_SAR_ATTR_SPECS);
2136 if (!specs)
2137 goto fail;
2138
2139 /* report supported freq_ranges */
2140 for (i = 0; i < num_freq_ranges; i++) {
2141 sub_freq_range = nla_nest_start(msg, i + 1);
2142 if (!sub_freq_range)
2143 goto fail;
2144
2145 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_START_FREQ,
2146 rdev->wiphy.sar_capa->freq_ranges[i].start_freq))
2147 goto fail;
2148
2149 if (nla_put_u32(msg, NL80211_SAR_ATTR_SPECS_END_FREQ,
2150 rdev->wiphy.sar_capa->freq_ranges[i].end_freq))
2151 goto fail;
2152
2153 nla_nest_end(msg, sub_freq_range);
2154 }
2155
2156 nla_nest_end(msg, specs);
2157 nla_nest_end(msg, sar_capa);
2158
2159 return 0;
2160fail:
2161 nla_nest_cancel(msg, sar_capa);
2162 return -ENOBUFS;
2163}
2164
86e8cf98
JB		 2165struct nl80211_dump_wiphy_state {
2166 s64 filter_wiphy;
2167 long start;
019ae3a9 2168 long split_start, band_start, chan_start, capa_start;
86e8cf98
JB		 2169 bool split;
2170};
2171
1b8ec87a 2172static int nl80211_send_wiphy(struct cfg80211_registered_device *rdev,
3bb20556 2173 enum nl80211_commands cmd,
3713b4e3 2174 struct sk_buff *msg, u32 portid, u32 seq,
86e8cf98 2175 int flags, struct nl80211_dump_wiphy_state *state)
3713b4e3
JB		 2176{
2177 void *hdr;
2178 struct nlattr *nl_bands, *nl_band;
2179 struct nlattr *nl_freqs, *nl_freq;
2180 struct nlattr *nl_cmds;
57fbcce3 2181 enum nl80211_band band;
3713b4e3
JB		 2182 struct ieee80211_channel *chan;
2183 int i;
2184 const struct ieee80211_txrx_stypes *mgmt_stypes =
1b8ec87a 2185 rdev->wiphy.mgmt_stypes;
fe1abafd 2186 u32 features;
ee688b00 2187
3bb20556 2188 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
3713b4e3
JB		 2189 if (!hdr)
2190 return -ENOBUFS;
ee688b00 2191
86e8cf98
JB		 2192 if (WARN_ON(!state))
2193 return -EINVAL;
ee688b00 2194
1b8ec87a 2195 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3713b4e3 2196 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
1b8ec87a 2197 wiphy_name(&rdev->wiphy)) ||
3713b4e3
JB		 2198 nla_put_u32(msg, NL80211_ATTR_GENERATION,
2199 cfg80211_rdev_list_generation))
8fdc621d
JB		 2200 goto nla_put_failure;
2201
3bb20556
JB		 2202 if (cmd != NL80211_CMD_NEW_WIPHY)
2203 goto finish;
2204
86e8cf98 2205 switch (state->split_start) {
3713b4e3
JB		 2206 case 0:
2207 if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
1b8ec87a 2208 rdev->wiphy.retry_short) ||
3713b4e3 2209 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
1b8ec87a 2210 rdev->wiphy.retry_long) ||
3713b4e3 2211 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
1b8ec87a 2212 rdev->wiphy.frag_threshold) ||
3713b4e3 2213 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
1b8ec87a 2214 rdev->wiphy.rts_threshold) ||
3713b4e3 2215 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
1b8ec87a 2216 rdev->wiphy.coverage_class) ||
3713b4e3 2217 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
1b8ec87a 2218 rdev->wiphy.max_scan_ssids) ||
3713b4e3 2219 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
1b8ec87a 2220 rdev->wiphy.max_sched_scan_ssids) ||
3713b4e3 2221 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
1b8ec87a 2222 rdev->wiphy.max_scan_ie_len) ||
3713b4e3 2223 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
1b8ec87a 2224 rdev->wiphy.max_sched_scan_ie_len) ||
3713b4e3 2225 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
f8d504ca 2226 rdev->wiphy.max_match_sets))
9360ffd1 2227 goto nla_put_failure;
3713b4e3 2228
1b8ec87a 2229 if ((rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
3713b4e3 2230 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
aa430da4 2231 goto nla_put_failure;
1b8ec87a 2232 if ((rdev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
3713b4e3
JB		 2233 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
2234 goto nla_put_failure;
1b8ec87a 2235 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3713b4e3
JB		 2236 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
2237 goto nla_put_failure;
1b8ec87a 2238 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
3713b4e3
JB		 2239 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
2240 goto nla_put_failure;
1b8ec87a 2241 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
3713b4e3
JB		 2242 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
2243 goto nla_put_failure;
1b8ec87a 2244 if ((rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
3713b4e3 2245 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
9360ffd1 2246 goto nla_put_failure;
86e8cf98
JB		 2247 state->split_start++;
2248 if (state->split)
3713b4e3 2249 break;
7b506ff6 2250 fallthrough;
3713b4e3
JB		 2251 case 1:
2252 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
1b8ec87a
ZG		 2253 sizeof(u32) * rdev->wiphy.n_cipher_suites,
2254 rdev->wiphy.cipher_suites))
3713b4e3 2255 goto nla_put_failure;
4745fc09 2256
3713b4e3 2257 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
1b8ec87a 2258 rdev->wiphy.max_num_pmkids))
3713b4e3 2259 goto nla_put_failure;
b23aa676 2260
1b8ec87a 2261 if ((rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
3713b4e3 2262 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
9360ffd1 2263 goto nla_put_failure;
b23aa676 2264
3713b4e3 2265 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
1b8ec87a 2266 rdev->wiphy.available_antennas_tx) ||
3713b4e3 2267 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
1b8ec87a 2268 rdev->wiphy.available_antennas_rx))
9360ffd1 2269 goto nla_put_failure;
b23aa676 2270
1b8ec87a 2271 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
3713b4e3 2272 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
1b8ec87a 2273 rdev->wiphy.probe_resp_offload))
3713b4e3 2274 goto nla_put_failure;
8fdc621d 2275
1b8ec87a
ZG		 2276 if ((rdev->wiphy.available_antennas_tx ||
2277 rdev->wiphy.available_antennas_rx) &&
2278 rdev->ops->get_antenna) {
3713b4e3
JB		 2279 u32 tx_ant = 0, rx_ant = 0;
2280 int res;
7a087e74 2281
1b8ec87a 2282 res = rdev_get_antenna(rdev, &tx_ant, &rx_ant);
3713b4e3
JB		 2283 if (!res) {
2284 if (nla_put_u32(msg,
2285 NL80211_ATTR_WIPHY_ANTENNA_TX,
2286 tx_ant) ||
2287 nla_put_u32(msg,
2288 NL80211_ATTR_WIPHY_ANTENNA_RX,
2289 rx_ant))
2290 goto nla_put_failure;
2291 }
2292 }
a293911d 2293
86e8cf98
JB		 2294 state->split_start++;
2295 if (state->split)
3713b4e3 2296 break;
7b506ff6 2297 fallthrough;
3713b4e3
JB		 2298 case 2:
2299 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1b8ec87a 2300 rdev->wiphy.interface_modes))
3713b4e3 2301 goto nla_put_failure;
86e8cf98
JB		 2302 state->split_start++;
2303 if (state->split)
3713b4e3 2304 break;
7b506ff6 2305 fallthrough;
3713b4e3 2306 case 3:
ae0be8de
MK		 2307 nl_bands = nla_nest_start_noflag(msg,
2308 NL80211_ATTR_WIPHY_BANDS);
3713b4e3
JB		 2309 if (!nl_bands)
2310 goto nla_put_failure;
f7ca38df 2311
86e8cf98 2312 for (band = state->band_start;
57fbcce3 2313 band < NUM_NL80211_BANDS; band++) {
3713b4e3 2314 struct ieee80211_supported_band *sband;
2e161f78 2315
f8d504ca
JB		 2316 /* omit higher bands for ancient software */
2317 if (band > NL80211_BAND_5GHZ && !state->split)
2318 break;
2319
1b8ec87a 2320 sband = rdev->wiphy.bands[band];
2e161f78 2321
3713b4e3
JB		 2322 if (!sband)
2323 continue;
2324
ae0be8de 2325 nl_band = nla_nest_start_noflag(msg, band);
3713b4e3 2326 if (!nl_band)
2e161f78 2327 goto nla_put_failure;
3713b4e3 2328
86e8cf98 2329 switch (state->chan_start) {
3713b4e3 2330 case 0:
f8d504ca
JB		 2331 if (nl80211_send_band_rateinfo(msg, sband,
2332 state->split))
9360ffd1 2333 goto nla_put_failure;
86e8cf98
JB		 2334 state->chan_start++;
2335 if (state->split)
3713b4e3 2336 break;
7b506ff6 2337 fallthrough;
3713b4e3
JB		 2338 default:
2339 /* add frequencies */
ae0be8de
MK		 2340 nl_freqs = nla_nest_start_noflag(msg,
2341 NL80211_BAND_ATTR_FREQS);
3713b4e3
JB		 2342 if (!nl_freqs)
2343 goto nla_put_failure;
2344
86e8cf98 2345 for (i = state->chan_start - 1;
3713b4e3
JB		 2346 i < sband->n_channels;
2347 i++) {
ae0be8de
MK		 2348 nl_freq = nla_nest_start_noflag(msg,
2349 i);
3713b4e3
JB		 2350 if (!nl_freq)
2351 goto nla_put_failure;
2352
2353 chan = &sband->channels[i];
2354
86e8cf98 2355 if (nl80211_msg_put_channel(
50f32718 2356 msg, &rdev->wiphy, chan,
86e8cf98 2357 state->split))
3713b4e3
JB		 2358 goto nla_put_failure;
2359
2360 nla_nest_end(msg, nl_freq);
86e8cf98 2361 if (state->split)
3713b4e3
JB		 2362 break;
2363 }
2364 if (i < sband->n_channels)
86e8cf98 2365 state->chan_start = i + 2;
3713b4e3 2366 else
86e8cf98 2367 state->chan_start = 0;
3713b4e3
JB		 2368 nla_nest_end(msg, nl_freqs);
2369 }
2370
2371 nla_nest_end(msg, nl_band);
2372
86e8cf98 2373 if (state->split) {
3713b4e3 2374 /* start again here */
86e8cf98 2375 if (state->chan_start)
3713b4e3
JB		 2376 band--;
2377 break;
2e161f78 2378 }
2e161f78 2379 }
3713b4e3 2380 nla_nest_end(msg, nl_bands);
2e161f78 2381
57fbcce3 2382 if (band < NUM_NL80211_BANDS)
86e8cf98 2383 state->band_start = band + 1;
3713b4e3 2384 else
86e8cf98 2385 state->band_start = 0;
74b70a4e 2386
3713b4e3 2387 /* if bands & channels are done, continue outside */
86e8cf98
JB		 2388 if (state->band_start == 0 && state->chan_start == 0)
2389 state->split_start++;
2390 if (state->split)
3713b4e3 2391 break;
7b506ff6 2392 fallthrough;
3713b4e3 2393 case 4:
ae0be8de
MK		 2394 nl_cmds = nla_nest_start_noflag(msg,
2395 NL80211_ATTR_SUPPORTED_COMMANDS);
3713b4e3 2396 if (!nl_cmds)
2e161f78
JB		 2397 goto nla_put_failure;
2398
1794899e
JB		 2399 i = nl80211_add_commands_unsplit(rdev, msg);
2400 if (i < 0)
2401 goto nla_put_failure;
86e8cf98 2402 if (state->split) {
5de17984
AS		 2403 CMD(crit_proto_start, CRIT_PROTOCOL_START);
2404 CMD(crit_proto_stop, CRIT_PROTOCOL_STOP);
1b8ec87a 2405 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH)
16ef1fe2 2406 CMD(channel_switch, CHANNEL_SWITCH);
02df00eb 2407 CMD(set_qos_map, SET_QOS_MAP);
723e73ac
JB		 2408 if (rdev->wiphy.features &
2409 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION)
960d01ac 2410 CMD(add_tx_ts, ADD_TX_TS);
ce0ce13a 2411 CMD(set_multicast_to_unicast, SET_MULTICAST_TO_UNICAST);
088e8df8 2412 CMD(update_connect_params, UPDATE_CONNECT_PARAMS);
7010998c 2413 CMD(update_ft_ies, UPDATE_FT_IES);
6bdb68ce
CH		 2414 if (rdev->wiphy.sar_capa)
2415 CMD(set_sar_specs, SET_SAR_SPECS);
5de17984 2416 }
3713b4e3 2417#undef CMD
ff1b6e69 2418
3713b4e3 2419 nla_nest_end(msg, nl_cmds);
86e8cf98
JB		 2420 state->split_start++;
2421 if (state->split)
3713b4e3 2422 break;
7b506ff6 2423 fallthrough;
3713b4e3 2424 case 5:
1b8ec87a
ZG		 2425 if (rdev->ops->remain_on_channel &&
2426 (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
3713b4e3
JB		 2427 nla_put_u32(msg,
2428 NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1b8ec87a 2429 rdev->wiphy.max_remain_on_channel_duration))
3713b4e3
JB		 2430 goto nla_put_failure;
2431
1b8ec87a 2432 if ((rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
3713b4e3
JB		 2433 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
2434 goto nla_put_failure;
2435
86e8cf98
JB		 2436 state->split_start++;
2437 if (state->split)
3713b4e3 2438 break;
7b506ff6 2439 fallthrough;
3713b4e3
JB		 2440 case 6:
2441#ifdef CONFIG_PM
1b8ec87a 2442 if (nl80211_send_wowlan(msg, rdev, state->split))
3713b4e3 2443 goto nla_put_failure;
86e8cf98
JB		 2444 state->split_start++;
2445 if (state->split)
3713b4e3
JB		 2446 break;
2447#else
86e8cf98 2448 state->split_start++;
dfb89c56 2449#endif
7b506ff6 2450 fallthrough;
3713b4e3
JB		 2451 case 7:
2452 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1b8ec87a 2453 rdev->wiphy.software_iftypes))
3713b4e3 2454 goto nla_put_failure;
ff1b6e69 2455
1b8ec87a 2456 if (nl80211_put_iface_combinations(&rdev->wiphy, msg,
86e8cf98 2457 state->split))
3713b4e3 2458 goto nla_put_failure;
7527a782 2459
86e8cf98
JB		 2460 state->split_start++;
2461 if (state->split)
3713b4e3 2462 break;
7b506ff6 2463 fallthrough;
3713b4e3 2464 case 8:
1b8ec87a 2465 if ((rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
3713b4e3 2466 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1b8ec87a 2467 rdev->wiphy.ap_sme_capa))
3713b4e3 2468 goto nla_put_failure;
7527a782 2469
1b8ec87a 2470 features = rdev->wiphy.features;
fe1abafd
JB		 2471 /*
2472 * We can only add the per-channel limit information if the
2473 * dump is split, otherwise it makes it too big. Therefore
2474 * only advertise it in that case.
2475 */
86e8cf98 2476 if (state->split)
fe1abafd
JB		 2477 features |= NL80211_FEATURE_ADVERTISE_CHAN_LIMITS;
2478 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS, features))
3713b4e3 2479 goto nla_put_failure;
562a7480 2480
1b8ec87a 2481 if (rdev->wiphy.ht_capa_mod_mask &&
3713b4e3 2482 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1b8ec87a
ZG		 2483 sizeof(*rdev->wiphy.ht_capa_mod_mask),
2484 rdev->wiphy.ht_capa_mod_mask))
3713b4e3 2485 goto nla_put_failure;
1f074bd8 2486
1b8ec87a
ZG		 2487 if (rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
2488 rdev->wiphy.max_acl_mac_addrs &&
3713b4e3 2489 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1b8ec87a 2490 rdev->wiphy.max_acl_mac_addrs))
3713b4e3 2491 goto nla_put_failure;
7e7c8926 2492
3713b4e3
JB		 2493 /*
2494 * Any information below this point is only available to
2495 * applications that can deal with it being split. This
2496 * helps ensure that newly added capabilities don't break
2497 * older tools by overrunning their buffers.
2498 *
2499 * We still increment split_start so that in the split
2500 * case we'll continue with more data in the next round,
2501 * but break unconditionally so unsplit data stops here.
2502 */
ab10c22b
JB		 2503 if (state->split)
2504 state->split_start++;
2505 else
2506 state->split_start = 0;
3713b4e3
JB		 2507 break;
2508 case 9:
f8d504ca
JB		 2509 if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
2510 goto nla_put_failure;
2511
2512 if (nla_put_u32(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_PLANS,
2513 rdev->wiphy.max_sched_scan_plans) ||
2514 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_INTERVAL,
2515 rdev->wiphy.max_sched_scan_plan_interval) ||
2516 nla_put_u32(msg, NL80211_ATTR_MAX_SCAN_PLAN_ITERATIONS,
2517 rdev->wiphy.max_sched_scan_plan_iterations))
2518 goto nla_put_failure;
2519
1b8ec87a 2520 if (rdev->wiphy.extended_capabilities &&
fe1abafd 2521 (nla_put(msg, NL80211_ATTR_EXT_CAPA,
1b8ec87a
ZG		 2522 rdev->wiphy.extended_capabilities_len,
2523 rdev->wiphy.extended_capabilities) ||
fe1abafd 2524 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
1b8ec87a
ZG		 2525 rdev->wiphy.extended_capabilities_len,
2526 rdev->wiphy.extended_capabilities_mask)))
fe1abafd 2527 goto nla_put_failure;
a50df0c4 2528
1b8ec87a 2529 if (rdev->wiphy.vht_capa_mod_mask &&
ee2aca34 2530 nla_put(msg, NL80211_ATTR_VHT_CAPABILITY_MASK,
1b8ec87a
ZG		 2531 sizeof(*rdev->wiphy.vht_capa_mod_mask),
2532 rdev->wiphy.vht_capa_mod_mask))
ee2aca34
JB		 2533 goto nla_put_failure;
2534
ae6fa4d5
DK		 2535 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN,
2536 rdev->wiphy.perm_addr))
2537 goto nla_put_failure;
2538
2539 if (!is_zero_ether_addr(rdev->wiphy.addr_mask) &&
2540 nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN,
2541 rdev->wiphy.addr_mask))
2542 goto nla_put_failure;
2543
2544 if (rdev->wiphy.n_addresses > 1) {
2545 void *attr;
2546
2547 attr = nla_nest_start(msg, NL80211_ATTR_MAC_ADDRS);
2548 if (!attr)
2549 goto nla_put_failure;
2550
2551 for (i = 0; i < rdev->wiphy.n_addresses; i++)
2552 if (nla_put(msg, i + 1, ETH_ALEN,
2553 rdev->wiphy.addresses[i].addr))
2554 goto nla_put_failure;
2555
2556 nla_nest_end(msg, attr);
2557 }
2558
be29b99a
AK		 2559 state->split_start++;
2560 break;
2561 case 10:
1b8ec87a 2562 if (nl80211_send_coalesce(msg, rdev))
be29b99a
AK		 2563 goto nla_put_failure;
2564
1b8ec87a 2565 if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ) &&
01e0daa4
FF		 2566 (nla_put_flag(msg, NL80211_ATTR_SUPPORT_5_MHZ) ||
2567 nla_put_flag(msg, NL80211_ATTR_SUPPORT_10_MHZ)))
2568 goto nla_put_failure;
b43504cf 2569
1b8ec87a 2570 if (rdev->wiphy.max_ap_assoc_sta &&
b43504cf 2571 nla_put_u32(msg, NL80211_ATTR_MAX_AP_ASSOC_STA,
1b8ec87a 2572 rdev->wiphy.max_ap_assoc_sta))
b43504cf
JM		 2573 goto nla_put_failure;
2574
ad7e718c
JB		 2575 state->split_start++;
2576 break;
2577 case 11:
1b8ec87a 2578 if (rdev->wiphy.n_vendor_commands) {
567ffc35
JB		 2579 const struct nl80211_vendor_cmd_info *info;
2580 struct nlattr *nested;
2581
ae0be8de
MK		 2582 nested = nla_nest_start_noflag(msg,
2583 NL80211_ATTR_VENDOR_DATA);
567ffc35
JB		 2584 if (!nested)
2585 goto nla_put_failure;
2586
1b8ec87a
ZG		 2587 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
2588 info = &rdev->wiphy.vendor_commands[i].info;
567ffc35
JB		 2589 if (nla_put(msg, i + 1, sizeof(*info), info))
2590 goto nla_put_failure;
2591 }
2592 nla_nest_end(msg, nested);
2593 }
2594
1b8ec87a 2595 if (rdev->wiphy.n_vendor_events) {
567ffc35
JB		 2596 const struct nl80211_vendor_cmd_info *info;
2597 struct nlattr *nested;
ad7e718c 2598
ae0be8de
MK		 2599 nested = nla_nest_start_noflag(msg,
2600 NL80211_ATTR_VENDOR_EVENTS);
567ffc35 2601 if (!nested)
ad7e718c 2602 goto nla_put_failure;
567ffc35 2603
1b8ec87a
ZG		 2604 for (i = 0; i < rdev->wiphy.n_vendor_events; i++) {
2605 info = &rdev->wiphy.vendor_events[i];
567ffc35
JB		 2606 if (nla_put(msg, i + 1, sizeof(*info), info))
2607 goto nla_put_failure;
2608 }
2609 nla_nest_end(msg, nested);
2610 }
9a774c78
AO		 2611 state->split_start++;
2612 break;
2613 case 12:
2614 if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH &&
2615 nla_put_u8(msg, NL80211_ATTR_MAX_CSA_COUNTERS,
2616 rdev->wiphy.max_num_csa_counters))
2617 goto nla_put_failure;
01e0daa4 2618
1bdd716c
AN		 2619 if (rdev->wiphy.regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
2620 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
2621 goto nla_put_failure;
2622
ca986ad9
AVS		 2623 if (rdev->wiphy.max_sched_scan_reqs &&
2624 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_MAX_REQS,
2625 rdev->wiphy.max_sched_scan_reqs))
2626 goto nla_put_failure;
2627
d75bb06b
GKS		 2628 if (nla_put(msg, NL80211_ATTR_EXT_FEATURES,
2629 sizeof(rdev->wiphy.ext_features),
2630 rdev->wiphy.ext_features))
2631 goto nla_put_failure;
2632
38de03d2
AS		 2633 if (rdev->wiphy.bss_select_support) {
2634 struct nlattr *nested;
2635 u32 bss_select_support = rdev->wiphy.bss_select_support;
2636
ae0be8de
MK		 2637 nested = nla_nest_start_noflag(msg,
2638 NL80211_ATTR_BSS_SELECT);
38de03d2
AS		 2639 if (!nested)
2640 goto nla_put_failure;
2641
2642 i = 0;
2643 while (bss_select_support) {
2644 if ((bss_select_support & 1) &&
2645 nla_put_flag(msg, i))
2646 goto nla_put_failure;
2647 i++;
2648 bss_select_support >>= 1;
2649 }
2650 nla_nest_end(msg, nested);
2651 }
2652
019ae3a9
KV		 2653 state->split_start++;
2654 break;
2655 case 13:
2656 if (rdev->wiphy.num_iftype_ext_capab &&
2657 rdev->wiphy.iftype_ext_capab) {
2658 struct nlattr *nested_ext_capab, *nested;
2659
ae0be8de
MK		 2660 nested = nla_nest_start_noflag(msg,
2661 NL80211_ATTR_IFTYPE_EXT_CAPA);
019ae3a9
KV		 2662 if (!nested)
2663 goto nla_put_failure;
2664
2665 for (i = state->capa_start;
2666 i < rdev->wiphy.num_iftype_ext_capab; i++) {
2667 const struct wiphy_iftype_ext_capab *capab;
2668
2669 capab = &rdev->wiphy.iftype_ext_capab[i];
2670
ae0be8de
MK		 2671 nested_ext_capab = nla_nest_start_noflag(msg,
2672 i);
019ae3a9
KV		 2673 if (!nested_ext_capab ||
2674 nla_put_u32(msg, NL80211_ATTR_IFTYPE,
2675 capab->iftype) ||
2676 nla_put(msg, NL80211_ATTR_EXT_CAPA,
2677 capab->extended_capabilities_len,
2678 capab->extended_capabilities) ||
2679 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
2680 capab->extended_capabilities_len,
2681 capab->extended_capabilities_mask))
2682 goto nla_put_failure;
2683
2684 nla_nest_end(msg, nested_ext_capab);
2685 if (state->split)
2686 break;
2687 }
2688 nla_nest_end(msg, nested);
2689 if (i < rdev->wiphy.num_iftype_ext_capab) {
2690 state->capa_start = i + 1;
2691 break;
2692 }
2693 }
2694
8585989d
LC		 2695 if (nla_put_u32(msg, NL80211_ATTR_BANDS,
2696 rdev->wiphy.nan_supported_bands))
2697 goto nla_put_failure;
2698
52539ca8
THJ		 2699 if (wiphy_ext_feature_isset(&rdev->wiphy,
2700 NL80211_EXT_FEATURE_TXQS)) {
2701 struct cfg80211_txq_stats txqstats = {};
2702 int res;
2703
2704 res = rdev_get_txq_stats(rdev, NULL, &txqstats);
2705 if (!res &&
2706 !nl80211_put_txq_stats(msg, &txqstats,
2707 NL80211_ATTR_TXQ_STATS))
2708 goto nla_put_failure;
2709
2710 if (nla_put_u32(msg, NL80211_ATTR_TXQ_LIMIT,
2711 rdev->wiphy.txq_limit))
2712 goto nla_put_failure;
2713 if (nla_put_u32(msg, NL80211_ATTR_TXQ_MEMORY_LIMIT,
2714 rdev->wiphy.txq_memory_limit))
2715 goto nla_put_failure;
2716 if (nla_put_u32(msg, NL80211_ATTR_TXQ_QUANTUM,
2717 rdev->wiphy.txq_quantum))
2718 goto nla_put_failure;
2719 }
2720
9bb7e0f2
JB		 2721 state->split_start++;
2722 break;
2723 case 14:
2724 if (nl80211_send_pmsr_capa(rdev, msg))
2725 goto nla_put_failure;
2726
ab4dfa20
VJ		 2727 state->split_start++;
2728 break;
2729 case 15:
2730 if (rdev->wiphy.akm_suites &&
2731 nla_put(msg, NL80211_ATTR_AKM_SUITES,
2732 sizeof(u32) * rdev->wiphy.n_akm_suites,
2733 rdev->wiphy.akm_suites))
2734 goto nla_put_failure;
2735
d6039a34
VJ		 2736 if (nl80211_put_iftype_akm_suites(rdev, msg))
2737 goto nla_put_failure;
2738
3710a8a6
JB		 2739 if (nl80211_put_tid_config_support(rdev, msg))
2740 goto nla_put_failure;
6bdb68ce
CH		 2741 state->split_start++;
2742 break;
2743 case 16:
2744 if (nl80211_put_sar_specs(rdev, msg))
2745 goto nla_put_failure;
3710a8a6 2746
3713b4e3 2747 /* done */
86e8cf98 2748 state->split_start = 0;
3713b4e3
JB		 2749 break;
2750 }
3bb20556 2751 finish:
053c095a
JB		 2752 genlmsg_end(msg, hdr);
2753 return 0;
55682965
JB		 2754
2755 nla_put_failure:
bc3ed28c
TG		 2756 genlmsg_cancel(msg, hdr);
2757 return -EMSGSIZE;
55682965
JB		 2758}
2759
86e8cf98
JB		 2760static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
2761 struct netlink_callback *cb,
2762 struct nl80211_dump_wiphy_state *state)
2763{
50508d94
JB		 2764 struct nlattr **tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
2765 int ret;
2766
2767 if (!tb)
2768 return -ENOMEM;
2769
2770 ret = nlmsg_parse_deprecated(cb->nlh,
2771 GENL_HDRLEN + nl80211_fam.hdrsize,
2772 tb, nl80211_fam.maxattr,
2773 nl80211_policy, NULL);
86e8cf98 2774 /* ignore parse errors for backward compatibility */
50508d94
JB		 2775 if (ret) {
2776 ret = 0;
2777 goto out;
2778 }
86e8cf98
JB		 2779
2780 state->split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
2781 if (tb[NL80211_ATTR_WIPHY])
2782 state->filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
2783 if (tb[NL80211_ATTR_WDEV])
2784 state->filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
2785 if (tb[NL80211_ATTR_IFINDEX]) {
2786 struct net_device *netdev;
2787 struct cfg80211_registered_device *rdev;
2788 int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
2789
7f2b8562 2790 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
50508d94
JB		 2791 if (!netdev) {
2792 ret = -ENODEV;
2793 goto out;
2794 }
86e8cf98 2795 if (netdev->ieee80211_ptr) {
f26cbf40 2796 rdev = wiphy_to_rdev(
86e8cf98
JB		 2797 netdev->ieee80211_ptr->wiphy);
2798 state->filter_wiphy = rdev->wiphy_idx;
2799 }
86e8cf98
JB		 2800 }
2801
50508d94
JB		 2802 ret = 0;
2803out:
2804 kfree(tb);
2805 return ret;
86e8cf98
JB		 2806}
2807
55682965
JB		 2808static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
2809{
645e77de 2810 int idx = 0, ret;
86e8cf98 2811 struct nl80211_dump_wiphy_state *state = (void *)cb->args[0];
1b8ec87a 2812 struct cfg80211_registered_device *rdev;
3a5a423b 2813
5fe231e8 2814 rtnl_lock();
86e8cf98
JB		 2815 if (!state) {
2816 state = kzalloc(sizeof(*state), GFP_KERNEL);
57ed5cd6
JL		 2817 if (!state) {
2818 rtnl_unlock();
86e8cf98 2819 return -ENOMEM;
3713b4e3 2820 }
86e8cf98
JB		 2821 state->filter_wiphy = -1;
2822 ret = nl80211_dump_wiphy_parse(skb, cb, state);
2823 if (ret) {
2824 kfree(state);
2825 rtnl_unlock();
2826 return ret;
3713b4e3 2827 }
86e8cf98 2828 cb->args[0] = (long)state;
3713b4e3
JB		 2829 }
2830
1b8ec87a
ZG		 2831 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
2832 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 2833 continue;
86e8cf98 2834 if (++idx <= state->start)
55682965 2835 continue;
86e8cf98 2836 if (state->filter_wiphy != -1 &&
1b8ec87a 2837 state->filter_wiphy != rdev->wiphy_idx)
3713b4e3
JB		 2838 continue;
2839 /* attempt to fit multiple wiphy data chunks into the skb */
2840 do {
3bb20556
JB		 2841 ret = nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY,
2842 skb,
3713b4e3
JB		 2843 NETLINK_CB(cb->skb).portid,
2844 cb->nlh->nlmsg_seq,
86e8cf98 2845 NLM_F_MULTI, state);
3713b4e3
JB		 2846 if (ret < 0) {
2847 /*
2848 * If sending the wiphy data didn't fit (ENOBUFS
2849 * or EMSGSIZE returned), this SKB is still
2850 * empty (so it's not too big because another
2851 * wiphy dataset is already in the skb) and
2852 * we've not tried to adjust the dump allocation
2853 * yet ... then adjust the alloc size to be
2854 * bigger, and return 1 but with the empty skb.
2855 * This results in an empty message being RX'ed
2856 * in userspace, but that is ignored.
2857 *
2858 * We can then retry with the larger buffer.
2859 */
2860 if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
f12cb289 2861 !skb->len && !state->split &&
3713b4e3
JB		 2862 cb->min_dump_alloc < 4096) {
2863 cb->min_dump_alloc = 4096;
f12cb289 2864 state->split_start = 0;
d98cae64 2865 rtnl_unlock();
3713b4e3
JB		 2866 return 1;
2867 }
2868 idx--;
2869 break;
645e77de 2870 }
86e8cf98 2871 } while (state->split_start > 0);
3713b4e3 2872 break;
55682965 2873 }
5fe231e8 2874 rtnl_unlock();
55682965 2875
86e8cf98 2876 state->start = idx;
55682965
JB		 2877
2878 return skb->len;
2879}
2880
86e8cf98
JB		 2881static int nl80211_dump_wiphy_done(struct netlink_callback *cb)
2882{
2883 kfree((void *)cb->args[0]);
2884 return 0;
2885}
2886
55682965
JB		 2887static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
2888{
2889 struct sk_buff *msg;
1b8ec87a 2890 struct cfg80211_registered_device *rdev = info->user_ptr[0];
86e8cf98 2891 struct nl80211_dump_wiphy_state state = {};
55682965 2892
645e77de 2893 msg = nlmsg_new(4096, GFP_KERNEL);
55682965 2894 if (!msg)
4c476991 2895 return -ENOMEM;
55682965 2896
3bb20556
JB		 2897 if (nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY, msg,
2898 info->snd_portid, info->snd_seq, 0,
86e8cf98 2899 &state) < 0) {
4c476991
JB		 2900 nlmsg_free(msg);
2901 return -ENOBUFS;
2902 }
55682965 2903
134e6375 2904 return genlmsg_reply(msg, info);
55682965
JB		 2905}
2906
31888487
JM		 2907static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
2908 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
2909 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
2910 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
2911 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
2912 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
2913};
2914
2915static int parse_txq_params(struct nlattr *tb[],
2916 struct ieee80211_txq_params *txq_params)
2917{
259d8c1e
DW		 2918 u8 ac;
2919
a3304b0a 2920 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 2921 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
2922 !tb[NL80211_TXQ_ATTR_AIFS])
2923 return -EINVAL;
2924
259d8c1e 2925 ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 2926 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
2927 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
2928 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
2929 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
2930
259d8c1e 2931 if (ac >= NL80211_NUM_ACS)
a3304b0a 2932 return -EINVAL;
259d8c1e 2933 txq_params->ac = array_index_nospec(ac, NL80211_NUM_ACS);
31888487
JM		 2934 return 0;
2935}
2936
f444de05
JB		 2937static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
2938{
2939 /*
e7e0517c
JB		 2940 * You can only set the channel explicitly for some interfaces,
2941 * most have their channel managed via their respective
cc1d2806
JB		 2942 * "establish a connection" command (connect, join, ...)
2943 *
2944 * For AP/GO and mesh mode, the channel can be set with the
2945 * channel userspace API, but is only stored and passed to the
2946 * low-level driver when the AP starts or the mesh is joined.
2947 * This is for backward compatibility, userspace can also give
2948 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 2949 *
2950 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 2951 * whatever else is going on, so they have their own special
2952 * operation to set the monitor channel if possible.
f444de05
JB		 2953 */
2954 return !wdev ||
2955 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 2956 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 2957 wdev->iftype == NL80211_IFTYPE_MONITOR ||
2958 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 2959}
2960
9bb7e0f2
JB		 2961int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
2962 struct genl_info *info,
2963 struct cfg80211_chan_def *chandef)
683b6d3b 2964{
49f9cf0e
JB		 2965 struct netlink_ext_ack *extack = info->extack;
2966 struct nlattr **attrs = info->attrs;
dbeca2ea 2967 u32 control_freq;
683b6d3b 2968
49f9cf0e 2969 if (!attrs[NL80211_ATTR_WIPHY_FREQ])
683b6d3b
JB		 2970 return -EINVAL;
2971
942ba88b
TP		 2972 control_freq = MHZ_TO_KHZ(
2973 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
2974 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
2975 control_freq +=
2976 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
683b6d3b 2977
f43e5210 2978 memset(chandef, 0, sizeof(*chandef));
942ba88b 2979 chandef->chan = ieee80211_get_channel_khz(&rdev->wiphy, control_freq);
3d9d1d66 2980 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
942ba88b
TP		 2981 chandef->center_freq1 = KHZ_TO_MHZ(control_freq);
2982 chandef->freq1_offset = control_freq % 1000;
3d9d1d66 2983 chandef->center_freq2 = 0;
683b6d3b
JB		 2984
2985 /* Primary channel not allowed */
49f9cf0e
JB		 2986 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED) {
2987 NL_SET_ERR_MSG_ATTR(extack, attrs[NL80211_ATTR_WIPHY_FREQ],
2988 "Channel is disabled");
683b6d3b 2989 return -EINVAL;
49f9cf0e 2990 }
683b6d3b 2991
49f9cf0e 2992 if (attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
3d9d1d66
JB		 2993 enum nl80211_channel_type chantype;
2994
49f9cf0e 2995 chantype = nla_get_u32(attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
3d9d1d66
JB		 2996
2997 switch (chantype) {
2998 case NL80211_CHAN_NO_HT:
2999 case NL80211_CHAN_HT20:
3000 case NL80211_CHAN_HT40PLUS:
3001 case NL80211_CHAN_HT40MINUS:
3002 cfg80211_chandef_create(chandef, chandef->chan,
3003 chantype);
ffa4629e 3004 /* user input for center_freq is incorrect */
49f9cf0e
JB		 3005 if (attrs[NL80211_ATTR_CENTER_FREQ1] &&
3006 chandef->center_freq1 != nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1])) {
3007 NL_SET_ERR_MSG_ATTR(extack,
3008 attrs[NL80211_ATTR_CENTER_FREQ1],
3009 "bad center frequency 1");
ffa4629e 3010 return -EINVAL;
49f9cf0e 3011 }
ffa4629e 3012 /* center_freq2 must be zero */
49f9cf0e
JB		 3013 if (attrs[NL80211_ATTR_CENTER_FREQ2] &&
3014 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2])) {
3015 NL_SET_ERR_MSG_ATTR(extack,
3016 attrs[NL80211_ATTR_CENTER_FREQ2],
3017 "center frequency 2 can't be used");
ffa4629e 3018 return -EINVAL;
49f9cf0e 3019 }
3d9d1d66
JB		 3020 break;
3021 default:
49f9cf0e
JB		 3022 NL_SET_ERR_MSG_ATTR(extack,
3023 attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE],
3024 "invalid channel type");
3d9d1d66
JB		 3025 return -EINVAL;
3026 }
49f9cf0e 3027 } else if (attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
3d9d1d66 3028 chandef->width =
49f9cf0e 3029 nla_get_u32(attrs[NL80211_ATTR_CHANNEL_WIDTH]);
942ba88b 3030 if (attrs[NL80211_ATTR_CENTER_FREQ1]) {
3d9d1d66 3031 chandef->center_freq1 =
49f9cf0e 3032 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ1]);
942ba88b
TP		 3033 if (attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET])
3034 chandef->freq1_offset = nla_get_u32(
3035 attrs[NL80211_ATTR_CENTER_FREQ1_OFFSET]);
3036 else
3037 chandef->freq1_offset = 0;
3038 }
49f9cf0e 3039 if (attrs[NL80211_ATTR_CENTER_FREQ2])
3d9d1d66 3040 chandef->center_freq2 =
49f9cf0e 3041 nla_get_u32(attrs[NL80211_ATTR_CENTER_FREQ2]);
3d9d1d66
JB		 3042 }
3043
2a38075c
AAL		 3044 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
3045 chandef->edmg.channels =
3046 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
3047
3048 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
3049 chandef->edmg.bw_config =
3050 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
3051 } else {
3052 chandef->edmg.bw_config = 0;
3053 chandef->edmg.channels = 0;
3054 }
3055
49f9cf0e
JB		 3056 if (!cfg80211_chandef_valid(chandef)) {
3057 NL_SET_ERR_MSG(extack, "invalid channel definition");
3d9d1d66 3058 return -EINVAL;
49f9cf0e 3059 }
3d9d1d66 3060
9f5e8f6e 3061 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
49f9cf0e
JB		 3062 IEEE80211_CHAN_DISABLED)) {
3063 NL_SET_ERR_MSG(extack, "(extension) channel is disabled");
3d9d1d66 3064 return -EINVAL;
49f9cf0e 3065 }
3d9d1d66 3066
2f301ab2
SW		 3067 if ((chandef->width == NL80211_CHAN_WIDTH_5 ||
3068 chandef->width == NL80211_CHAN_WIDTH_10) &&
49f9cf0e
JB		 3069 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ)) {
3070 NL_SET_ERR_MSG(extack, "5/10 MHz not supported");
2f301ab2 3071 return -EINVAL;
49f9cf0e 3072 }
2f301ab2 3073
683b6d3b
JB		 3074 return 0;
3075}
3076
f444de05 3077static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
e16821bc 3078 struct net_device *dev,
f444de05
JB		 3079 struct genl_info *info)
3080{
683b6d3b 3081 struct cfg80211_chan_def chandef;
f444de05 3082 int result;
e8c9bd5b 3083 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
e16821bc 3084 struct wireless_dev *wdev = NULL;
e8c9bd5b 3085
e16821bc
JM		 3086 if (dev)
3087 wdev = dev->ieee80211_ptr;
f444de05
JB		 3088 if (!nl80211_can_set_dev_channel(wdev))
3089 return -EOPNOTSUPP;
e16821bc
JM		 3090 if (wdev)
3091 iftype = wdev->iftype;
f444de05 3092
683b6d3b
JB		 3093 result = nl80211_parse_chandef(rdev, info, &chandef);
3094 if (result)
3095 return result;
f444de05 3096
e8c9bd5b 3097 switch (iftype) {
aa430da4
JB		 3098 case NL80211_IFTYPE_AP:
3099 case NL80211_IFTYPE_P2P_GO:
923b352f
AN		 3100 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
3101 iftype)) {
aa430da4
JB		 3102 result = -EINVAL;
3103 break;
3104 }
e16821bc
JM		 3105 if (wdev->beacon_interval) {
3106 if (!dev || !rdev->ops->set_ap_chanwidth ||
3107 !(rdev->wiphy.features &
3108 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE)) {
3109 result = -EBUSY;
3110 break;
3111 }
3112
3113 /* Only allow dynamic channel width changes */
3114 if (chandef.chan != wdev->preset_chandef.chan) {
3115 result = -EBUSY;
3116 break;
3117 }
3118 result = rdev_set_ap_chanwidth(rdev, dev, &chandef);
3119 if (result)
3120 break;
3121 }
683b6d3b 3122 wdev->preset_chandef = chandef;
aa430da4
JB		 3123 result = 0;
3124 break;
cc1d2806 3125 case NL80211_IFTYPE_MESH_POINT:
683b6d3b 3126 result = cfg80211_set_mesh_channel(rdev, wdev, &chandef);
cc1d2806 3127 break;
e8c9bd5b 3128 case NL80211_IFTYPE_MONITOR:
683b6d3b 3129 result = cfg80211_set_monitor_channel(rdev, &chandef);
e8c9bd5b 3130 break;
aa430da4 3131 default:
e8c9bd5b 3132 result = -EINVAL;
f444de05 3133 }
f444de05
JB		 3134
3135 return result;
3136}
3137
3138static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
3139{
4c476991
JB		 3140 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3141 struct net_device *netdev = info->user_ptr[1];
f444de05 3142
e16821bc 3143 return __nl80211_set_channel(rdev, netdev, info);
f444de05
JB		 3144}
3145
55682965
JB		 3146static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
3147{
3148 struct cfg80211_registered_device *rdev;
f444de05
JB		 3149 struct net_device *netdev = NULL;
3150 struct wireless_dev *wdev;
a1e567c8 3151 int result = 0, rem_txq_params = 0;
31888487 3152 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 3153 u32 changed;
3154 u8 retry_short = 0, retry_long = 0;
3155 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 3156 u8 coverage_class = 0;
52539ca8 3157 u32 txq_limit = 0, txq_memory_limit = 0, txq_quantum = 0;
55682965 3158
5fe231e8
JB		 3159 ASSERT_RTNL();
3160
f444de05
JB		 3161 /*
3162 * Try to find the wiphy and netdev. Normally this
3163 * function shouldn't need the netdev, but this is
3164 * done for backward compatibility -- previously
3165 * setting the channel was done per wiphy, but now
3166 * it is per netdev. Previous userland like hostapd
3167 * also passed a netdev to set_wiphy, so that it is
3168 * possible to let that go to the right netdev!
3169 */
4bbf4d56 3170
f444de05
JB		 3171 if (info->attrs[NL80211_ATTR_IFINDEX]) {
3172 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
3173
7f2b8562 3174 netdev = __dev_get_by_index(genl_info_net(info), ifindex);
5fe231e8 3175 if (netdev && netdev->ieee80211_ptr)
f26cbf40 3176 rdev = wiphy_to_rdev(netdev->ieee80211_ptr->wiphy);
5fe231e8 3177 else
f444de05 3178 netdev = NULL;
4bbf4d56
JB		 3179 }
3180
f444de05 3181 if (!netdev) {
878d9ec7
JB		 3182 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
3183 info->attrs);
5fe231e8 3184 if (IS_ERR(rdev))
4c476991 3185 return PTR_ERR(rdev);
f444de05
JB		 3186 wdev = NULL;
3187 netdev = NULL;
3188 result = 0;
71fe96bf 3189 } else
f444de05 3190 wdev = netdev->ieee80211_ptr;
f444de05
JB		 3191
3192 /*
3193 * end workaround code, by now the rdev is available
3194 * and locked, and wdev may or may not be NULL.
3195 */
4bbf4d56
JB		 3196
3197 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 3198 result = cfg80211_dev_rename(
3199 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56 3200
4bbf4d56 3201 if (result)
7f2b8562 3202 return result;
31888487
JM		 3203
3204 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
3205 struct ieee80211_txq_params txq_params;
3206 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
3207
7f2b8562
YX		 3208 if (!rdev->ops->set_txq_params)
3209 return -EOPNOTSUPP;
31888487 3210
7f2b8562
YX		 3211 if (!netdev)
3212 return -EINVAL;
f70f01c2 3213
133a3ff2 3214 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
7f2b8562
YX		 3215 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3216 return -EINVAL;
133a3ff2 3217
7f2b8562
YX		 3218 if (!netif_running(netdev))
3219 return -ENETDOWN;
2b5f8b0b 3220
31888487
JM		 3221 nla_for_each_nested(nl_txq_params,
3222 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
3223 rem_txq_params) {
8cb08174
JB		 3224 result = nla_parse_nested_deprecated(tb,
3225 NL80211_TXQ_ATTR_MAX,
3226 nl_txq_params,
3227 txq_params_policy,
3228 info->extack);
ae811e21
JB		 3229 if (result)
3230 return result;
31888487
JM		 3231 result = parse_txq_params(tb, &txq_params);
3232 if (result)
7f2b8562 3233 return result;
31888487 3234
e35e4d28
HG		 3235 result = rdev_set_txq_params(rdev, netdev,
3236 &txq_params);
31888487 3237 if (result)
7f2b8562 3238 return result;
31888487
JM		 3239 }
3240 }
55682965 3241
72bdcf34 3242 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
e16821bc
JM		 3243 result = __nl80211_set_channel(
3244 rdev,
3245 nl80211_can_set_dev_channel(wdev) ? netdev : NULL,
3246 info);
72bdcf34 3247 if (result)
7f2b8562 3248 return result;
72bdcf34
JM		 3249 }
3250
98d2ff8b 3251 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 3252 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 3253 enum nl80211_tx_power_setting type;
3254 int idx, mbm = 0;
3255
c8442118
JB		 3256 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
3257 txp_wdev = NULL;
3258
7f2b8562
YX		 3259 if (!rdev->ops->set_tx_power)
3260 return -EOPNOTSUPP;
98d2ff8b
JO		 3261
3262 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
3263 type = nla_get_u32(info->attrs[idx]);
3264
3265 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
7f2b8562
YX		 3266 (type != NL80211_TX_POWER_AUTOMATIC))
3267 return -EINVAL;
98d2ff8b
JO		 3268
3269 if (type != NL80211_TX_POWER_AUTOMATIC) {
3270 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
3271 mbm = nla_get_u32(info->attrs[idx]);
3272 }
3273
c8442118 3274 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b 3275 if (result)
7f2b8562 3276 return result;
98d2ff8b
JO		 3277 }
3278
afe0cbf8
BR		 3279 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
3280 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
3281 u32 tx_ant, rx_ant;
7a087e74 3282
7f531e03
BR		 3283 if ((!rdev->wiphy.available_antennas_tx &&
3284 !rdev->wiphy.available_antennas_rx) ||
7f2b8562
YX		 3285 !rdev->ops->set_antenna)
3286 return -EOPNOTSUPP;
afe0cbf8
BR		 3287
3288 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
3289 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
3290
a7ffac95 3291 /* reject antenna configurations which don't match the
7f531e03
BR		 3292 * available antenna masks, except for the "all" mask */
3293 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
7f2b8562
YX		 3294 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx)))
3295 return -EINVAL;
a7ffac95 3296
7f531e03
BR		 3297 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
3298 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 3299
e35e4d28 3300 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8 3301 if (result)
7f2b8562 3302 return result;
afe0cbf8
BR		 3303 }
3304
b9a5f8ca
JM		 3305 changed = 0;
3306
3307 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
3308 retry_short = nla_get_u8(
3309 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
7f2b8562 3310
b9a5f8ca
JM		 3311 changed |= WIPHY_PARAM_RETRY_SHORT;
3312 }
3313
3314 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
3315 retry_long = nla_get_u8(
3316 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
7f2b8562 3317
b9a5f8ca
JM		 3318 changed |= WIPHY_PARAM_RETRY_LONG;
3319 }
3320
3321 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
3322 frag_threshold = nla_get_u32(
3323 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
7f2b8562
YX		 3324 if (frag_threshold < 256)
3325 return -EINVAL;
3326
b9a5f8ca
JM		 3327 if (frag_threshold != (u32) -1) {
3328 /*
3329 * Fragments (apart from the last one) are required to
3330 * have even length. Make the fragmentation code
3331 * simpler by stripping LSB should someone try to use
3332 * odd threshold value.
3333 */
3334 frag_threshold &= ~0x1;
3335 }
3336 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
3337 }
3338
3339 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
3340 rts_threshold = nla_get_u32(
3341 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
3342 changed |= WIPHY_PARAM_RTS_THRESHOLD;
3343 }
3344
81077e82 3345 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
3057dbfd
LB		 3346 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK])
3347 return -EINVAL;
3348
81077e82
LT		 3349 coverage_class = nla_get_u8(
3350 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
3351 changed |= WIPHY_PARAM_COVERAGE_CLASS;
3352 }
3353
3057dbfd
LB		 3354 if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
3355 if (!(rdev->wiphy.features & NL80211_FEATURE_ACKTO_ESTIMATION))
3356 return -EOPNOTSUPP;
3357
3358 changed |= WIPHY_PARAM_DYN_ACK;
81077e82
LT		 3359 }
3360
52539ca8
THJ		 3361 if (info->attrs[NL80211_ATTR_TXQ_LIMIT]) {
3362 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3363 NL80211_EXT_FEATURE_TXQS))
3364 return -EOPNOTSUPP;
3365 txq_limit = nla_get_u32(
3366 info->attrs[NL80211_ATTR_TXQ_LIMIT]);
3367 changed |= WIPHY_PARAM_TXQ_LIMIT;
3368 }
3369
3370 if (info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]) {
3371 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3372 NL80211_EXT_FEATURE_TXQS))
3373 return -EOPNOTSUPP;
3374 txq_memory_limit = nla_get_u32(
3375 info->attrs[NL80211_ATTR_TXQ_MEMORY_LIMIT]);
3376 changed |= WIPHY_PARAM_TXQ_MEMORY_LIMIT;
3377 }
3378
3379 if (info->attrs[NL80211_ATTR_TXQ_QUANTUM]) {
3380 if (!wiphy_ext_feature_isset(&rdev->wiphy,
3381 NL80211_EXT_FEATURE_TXQS))
3382 return -EOPNOTSUPP;
3383 txq_quantum = nla_get_u32(
3384 info->attrs[NL80211_ATTR_TXQ_QUANTUM]);
3385 changed |= WIPHY_PARAM_TXQ_QUANTUM;
3386 }
3387
b9a5f8ca
JM		 3388 if (changed) {
3389 u8 old_retry_short, old_retry_long;
3390 u32 old_frag_threshold, old_rts_threshold;
81077e82 3391 u8 old_coverage_class;
52539ca8 3392 u32 old_txq_limit, old_txq_memory_limit, old_txq_quantum;
b9a5f8ca 3393
7f2b8562
YX		 3394 if (!rdev->ops->set_wiphy_params)
3395 return -EOPNOTSUPP;
b9a5f8ca
JM		 3396
3397 old_retry_short = rdev->wiphy.retry_short;
3398 old_retry_long = rdev->wiphy.retry_long;
3399 old_frag_threshold = rdev->wiphy.frag_threshold;
3400 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 3401 old_coverage_class = rdev->wiphy.coverage_class;
52539ca8
THJ		 3402 old_txq_limit = rdev->wiphy.txq_limit;
3403 old_txq_memory_limit = rdev->wiphy.txq_memory_limit;
3404 old_txq_quantum = rdev->wiphy.txq_quantum;
b9a5f8ca
JM		 3405
3406 if (changed & WIPHY_PARAM_RETRY_SHORT)
3407 rdev->wiphy.retry_short = retry_short;
3408 if (changed & WIPHY_PARAM_RETRY_LONG)
3409 rdev->wiphy.retry_long = retry_long;
3410 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
3411 rdev->wiphy.frag_threshold = frag_threshold;
3412 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
3413 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 3414 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
3415 rdev->wiphy.coverage_class = coverage_class;
52539ca8
THJ		 3416 if (changed & WIPHY_PARAM_TXQ_LIMIT)
3417 rdev->wiphy.txq_limit = txq_limit;
3418 if (changed & WIPHY_PARAM_TXQ_MEMORY_LIMIT)
3419 rdev->wiphy.txq_memory_limit = txq_memory_limit;
3420 if (changed & WIPHY_PARAM_TXQ_QUANTUM)
3421 rdev->wiphy.txq_quantum = txq_quantum;
b9a5f8ca 3422
e35e4d28 3423 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 3424 if (result) {
3425 rdev->wiphy.retry_short = old_retry_short;
3426 rdev->wiphy.retry_long = old_retry_long;
3427 rdev->wiphy.frag_threshold = old_frag_threshold;
3428 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 3429 rdev->wiphy.coverage_class = old_coverage_class;
52539ca8
THJ		 3430 rdev->wiphy.txq_limit = old_txq_limit;
3431 rdev->wiphy.txq_memory_limit = old_txq_memory_limit;
3432 rdev->wiphy.txq_quantum = old_txq_quantum;
9189ee31 3433 return result;
b9a5f8ca
JM		 3434 }
3435 }
7f2b8562 3436 return 0;
55682965
JB		 3437}
3438
683b6d3b 3439static int nl80211_send_chandef(struct sk_buff *msg,
d2859df5 3440 const struct cfg80211_chan_def *chandef)
683b6d3b 3441{
601555cd
JB		 3442 if (WARN_ON(!cfg80211_chandef_valid(chandef)))
3443 return -EINVAL;
3d9d1d66 3444
683b6d3b
JB		 3445 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
3446 chandef->chan->center_freq))
3447 return -ENOBUFS;
942ba88b
TP		 3448 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
3449 chandef->chan->freq_offset))
3450 return -ENOBUFS;
3d9d1d66
JB		 3451 switch (chandef->width) {
3452 case NL80211_CHAN_WIDTH_20_NOHT:
3453 case NL80211_CHAN_WIDTH_20:
3454 case NL80211_CHAN_WIDTH_40:
3455 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
3456 cfg80211_get_chandef_type(chandef)))
3457 return -ENOBUFS;
3458 break;
3459 default:
3460 break;
3461 }
3462 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
3463 return -ENOBUFS;
3464 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
3465 return -ENOBUFS;
3466 if (chandef->center_freq2 &&
3467 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
683b6d3b
JB		 3468 return -ENOBUFS;
3469 return 0;
3470}
3471
15e47304 3472static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 3473 struct cfg80211_registered_device *rdev,
3d1a5bbf
AZ		 3474 struct wireless_dev *wdev,
3475 enum nl80211_commands cmd)
55682965 3476{
72fb2abc 3477 struct net_device *dev = wdev->netdev;
55682965
JB		 3478 void *hdr;
3479
3d1a5bbf
AZ		 3480 WARN_ON(cmd != NL80211_CMD_NEW_INTERFACE &&
3481 cmd != NL80211_CMD_DEL_INTERFACE &&
3482 cmd != NL80211_CMD_SET_INTERFACE);
8f894be2
TB		 3483
3484 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
55682965
JB		 3485 if (!hdr)
3486 return -1;
3487
72fb2abc
JB		 3488 if (dev &&
3489 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 3490 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 3491 goto nla_put_failure;
3492
3493 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
3494 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
2dad624e
ND		 3495 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
3496 NL80211_ATTR_PAD) ||
98104fde 3497 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 3498 nla_put_u32(msg, NL80211_ATTR_GENERATION,
3499 rdev->devlist_generation ^
446faa15
AQ		 3500 (cfg80211_rdev_list_generation << 2)) ||
3501 nla_put_u8(msg, NL80211_ATTR_4ADDR, wdev->use_4addr))
9360ffd1 3502 goto nla_put_failure;
f5ea9120 3503
5b7ccaf3 3504 if (rdev->ops->get_channel) {
683b6d3b 3505 int ret;
f43e5210 3506 struct cfg80211_chan_def chandef = {};
683b6d3b
JB		 3507
3508 ret = rdev_get_channel(rdev, wdev, &chandef);
3509 if (ret == 0) {
3510 if (nl80211_send_chandef(msg, &chandef))
3511 goto nla_put_failure;
3512 }
d91df0e3
PF		 3513 }
3514
d55d0d59
RM		 3515 if (rdev->ops->get_tx_power) {
3516 int dbm, ret;
3517
3518 ret = rdev_get_tx_power(rdev, wdev, &dbm);
3519 if (ret == 0 &&
3520 nla_put_u32(msg, NL80211_ATTR_WIPHY_TX_POWER_LEVEL,
3521 DBM_TO_MBM(dbm)))
3522 goto nla_put_failure;
3523 }
3524
44905265
JB		 3525 wdev_lock(wdev);
3526 switch (wdev->iftype) {
3527 case NL80211_IFTYPE_AP:
3528 if (wdev->ssid_len &&
3529 nla_put(msg, NL80211_ATTR_SSID, wdev->ssid_len, wdev->ssid))
4564b187 3530 goto nla_put_failure_locked;
44905265
JB		 3531 break;
3532 case NL80211_IFTYPE_STATION:
3533 case NL80211_IFTYPE_P2P_CLIENT:
3534 case NL80211_IFTYPE_ADHOC: {
3535 const u8 *ssid_ie;
3536 if (!wdev->current_bss)
3537 break;
7a94b8c2 3538 rcu_read_lock();
44905265
JB		 3539 ssid_ie = ieee80211_bss_get_ie(&wdev->current_bss->pub,
3540 WLAN_EID_SSID);
7a94b8c2
DB		 3541 if (ssid_ie &&
3542 nla_put(msg, NL80211_ATTR_SSID, ssid_ie[1], ssid_ie + 2))
3543 goto nla_put_failure_rcu_locked;
3544 rcu_read_unlock();
44905265
JB		 3545 break;
3546 }
3547 default:
3548 /* nothing */
3549 break;
b84e7a05 3550 }
44905265 3551 wdev_unlock(wdev);
b84e7a05 3552
52539ca8
THJ		 3553 if (rdev->ops->get_txq_stats) {
3554 struct cfg80211_txq_stats txqstats = {};
3555 int ret = rdev_get_txq_stats(rdev, wdev, &txqstats);
3556
3557 if (ret == 0 &&
3558 !nl80211_put_txq_stats(msg, &txqstats,
3559 NL80211_ATTR_TXQ_STATS))
3560 goto nla_put_failure;
3561 }
3562
053c095a
JB		 3563 genlmsg_end(msg, hdr);
3564 return 0;
55682965 3565
7a94b8c2
DB		 3566 nla_put_failure_rcu_locked:
3567 rcu_read_unlock();
4564b187
JB		 3568 nla_put_failure_locked:
3569 wdev_unlock(wdev);
55682965 3570 nla_put_failure:
bc3ed28c
TG		 3571 genlmsg_cancel(msg, hdr);
3572 return -EMSGSIZE;
55682965
JB		 3573}
3574
3575static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
3576{
3577 int wp_idx = 0;
3578 int if_idx = 0;
3579 int wp_start = cb->args[0];
3580 int if_start = cb->args[1];
b7fb44da 3581 int filter_wiphy = -1;
f5ea9120 3582 struct cfg80211_registered_device *rdev;
55682965 3583 struct wireless_dev *wdev;
ea90e0dc 3584 int ret;
55682965 3585
5fe231e8 3586 rtnl_lock();
b7fb44da
DK		 3587 if (!cb->args[2]) {
3588 struct nl80211_dump_wiphy_state state = {
3589 .filter_wiphy = -1,
3590 };
b7fb44da
DK		 3591
3592 ret = nl80211_dump_wiphy_parse(skb, cb, &state);
3593 if (ret)
ea90e0dc 3594 goto out_unlock;
b7fb44da
DK		 3595
3596 filter_wiphy = state.filter_wiphy;
3597
3598 /*
3599 * if filtering, set cb->args[2] to +1 since 0 is the default
3600 * value needed to determine that parsing is necessary.
3601 */
3602 if (filter_wiphy >= 0)
3603 cb->args[2] = filter_wiphy + 1;
3604 else
3605 cb->args[2] = -1;
3606 } else if (cb->args[2] > 0) {
3607 filter_wiphy = cb->args[2] - 1;
3608 }
3609
f5ea9120
JB		 3610 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
3611 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 3612 continue;
bba95fef
JB		 3613 if (wp_idx < wp_start) {
3614 wp_idx++;
55682965 3615 continue;
bba95fef 3616 }
b7fb44da
DK		 3617
3618 if (filter_wiphy >= 0 && filter_wiphy != rdev->wiphy_idx)
3619 continue;
3620
55682965
JB		 3621 if_idx = 0;
3622
53873f13 3623 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
bba95fef
JB		 3624 if (if_idx < if_start) {
3625 if_idx++;
55682965 3626 continue;
bba95fef 3627 }
15e47304 3628 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 3629 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3d1a5bbf
AZ		 3630 rdev, wdev,
3631 NL80211_CMD_NEW_INTERFACE) < 0) {
bba95fef
JB		 3632 goto out;
3633 }
3634 if_idx++;
55682965 3635 }
bba95fef
JB		 3636
3637 wp_idx++;
55682965 3638 }
bba95fef 3639 out:
55682965
JB		 3640 cb->args[0] = wp_idx;
3641 cb->args[1] = if_idx;
3642
ea90e0dc
JB		 3643 ret = skb->len;
3644 out_unlock:
3645 rtnl_unlock();
3646
3647 return ret;
55682965
JB		 3648}
3649
3650static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
3651{
3652 struct sk_buff *msg;
1b8ec87a 3653 struct cfg80211_registered_device *rdev = info->user_ptr[0];
72fb2abc 3654 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3655
fd2120ca 3656 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 3657 if (!msg)
4c476991 3658 return -ENOMEM;
55682965 3659
15e47304 3660 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3661 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
4c476991
JB		 3662 nlmsg_free(msg);
3663 return -ENOBUFS;
3664 }
55682965 3665
134e6375 3666 return genlmsg_reply(msg, info);
55682965
JB		 3667}
3668
66f7ac50
MW		 3669static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
3670 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
3671 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
3672 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
3673 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
3674 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
e057d3c3 3675 [NL80211_MNTR_FLAG_ACTIVE] = { .type = NLA_FLAG },
66f7ac50
MW		 3676};
3677
3678static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
3679{
3680 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
3681 int flag;
3682
3683 *mntrflags = 0;
3684
3685 if (!nla)
3686 return -EINVAL;
3687
8cb08174 3688 if (nla_parse_nested_deprecated(flags, NL80211_MNTR_FLAG_MAX, nla, mntr_flags_policy, NULL))
66f7ac50
MW		 3689 return -EINVAL;
3690
3691 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
3692 if (flags[flag])
3693 *mntrflags |= (1<<flag);
3694
818a986e
JB		 3695 *mntrflags |= MONITOR_FLAG_CHANGED;
3696
66f7ac50
MW		 3697 return 0;
3698}
3699
1db77596
JB		 3700static int nl80211_parse_mon_options(struct cfg80211_registered_device *rdev,
3701 enum nl80211_iftype type,
3702 struct genl_info *info,
3703 struct vif_params *params)
3704{
3705 bool change = false;
3706 int err;
3707
3708 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
3709 if (type != NL80211_IFTYPE_MONITOR)
3710 return -EINVAL;
3711
3712 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
3713 &params->flags);
3714 if (err)
3715 return err;
3716
3717 change = true;
3718 }
3719
3720 if (params->flags & MONITOR_FLAG_ACTIVE &&
3721 !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
3722 return -EOPNOTSUPP;
3723
3724 if (info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]) {
3725 const u8 *mumimo_groups;
3726 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
3727
3728 if (type != NL80211_IFTYPE_MONITOR)
3729 return -EINVAL;
3730
3731 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
3732 return -EOPNOTSUPP;
3733
3734 mumimo_groups =
3735 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_GROUP_DATA]);
3736
3737 /* bits 0 and 63 are reserved and must be zero */
4954601f
JB		 3738 if ((mumimo_groups[0] & BIT(0)) ||
3739 (mumimo_groups[VHT_MUMIMO_GROUPS_DATA_LEN - 1] & BIT(7)))
1db77596
JB		 3740 return -EINVAL;
3741
3742 params->vht_mumimo_groups = mumimo_groups;
3743 change = true;
3744 }
3745
3746 if (info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]) {
3747 u32 cap_flag = NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER;
3748
3749 if (type != NL80211_IFTYPE_MONITOR)
3750 return -EINVAL;
3751
3752 if (!wiphy_ext_feature_isset(&rdev->wiphy, cap_flag))
3753 return -EOPNOTSUPP;
3754
3755 params->vht_mumimo_follow_addr =
3756 nla_data(info->attrs[NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]);
3757 change = true;
3758 }
3759
3760 return change ? 1 : 0;
3761}
3762
9bc383de 3763static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 3764 struct net_device *netdev, u8 use_4addr,
3765 enum nl80211_iftype iftype)
9bc383de 3766{
ad4bb6f8 3767 if (!use_4addr) {
2e92a2d0 3768 if (netdev && netif_is_bridge_port(netdev))
ad4bb6f8 3769 return -EBUSY;
9bc383de 3770 return 0;
ad4bb6f8 3771 }
9bc383de
JB		 3772
3773 switch (iftype) {
3774 case NL80211_IFTYPE_AP_VLAN:
3775 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
3776 return 0;
3777 break;
3778 case NL80211_IFTYPE_STATION:
3779 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
3780 return 0;
3781 break;
3782 default:
3783 break;
3784 }
3785
3786 return -EOPNOTSUPP;
3787}
3788
55682965
JB		 3789static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
3790{
4c476991 3791 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3792 struct vif_params params;
e36d56b6 3793 int err;
04a773ad 3794 enum nl80211_iftype otype, ntype;
4c476991 3795 struct net_device *dev = info->user_ptr[1];
ac7f9cfa 3796 bool change = false;
55682965 3797
2ec600d6
LCC		 3798 memset(&params, 0, sizeof(params));
3799
04a773ad 3800 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 3801
723b038d 3802 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 3803 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 3804 if (otype != ntype)
ac7f9cfa 3805 change = true;
723b038d
JB		 3806 }
3807
92ffe055 3808 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 3809 struct wireless_dev *wdev = dev->ieee80211_ptr;
3810
4c476991
JB		 3811 if (ntype != NL80211_IFTYPE_MESH_POINT)
3812 return -EINVAL;
29cbe68c
JB		 3813 if (netif_running(dev))
3814 return -EBUSY;
3815
3816 wdev_lock(wdev);
3817 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
3818 IEEE80211_MAX_MESH_ID_LEN);
3819 wdev->mesh_id_up_len =
3820 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
3821 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
3822 wdev->mesh_id_up_len);
3823 wdev_unlock(wdev);
2ec600d6
LCC		 3824 }
3825
8b787643
FF		 3826 if (info->attrs[NL80211_ATTR_4ADDR]) {
3827 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
3828 change = true;
ad4bb6f8 3829 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 3830 if (err)
4c476991 3831 return err;
8b787643
FF		 3832 } else {
3833 params.use_4addr = -1;
3834 }
3835
1db77596
JB		 3836 err = nl80211_parse_mon_options(rdev, ntype, info, &params);
3837 if (err < 0)
3838 return err;
3839 if (err > 0)
c6e6a0c8 3840 change = true;
e057d3c3 3841
ac7f9cfa 3842 if (change)
818a986e 3843 err = cfg80211_change_iface(rdev, dev, ntype, &params);
ac7f9cfa
JB		 3844 else
3845 err = 0;
60719ffd 3846
9bc383de
JB		 3847 if (!err && params.use_4addr != -1)
3848 dev->ieee80211_ptr->use_4addr = params.use_4addr;
3849
3d1a5bbf
AZ		 3850 if (change && !err) {
3851 struct wireless_dev *wdev = dev->ieee80211_ptr;
3852
3853 nl80211_notify_iface(rdev, wdev, NL80211_CMD_SET_INTERFACE);
3854 }
3855
55682965
JB		 3856 return err;
3857}
3858
3859static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
3860{
4c476991 3861 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3862 struct vif_params params;
84efbb84 3863 struct wireless_dev *wdev;
896ff063 3864 struct sk_buff *msg;
55682965
JB		 3865 int err;
3866 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
3867
78f22b6a
JB		 3868 /* to avoid failing a new interface creation due to pending removal */
3869 cfg80211_destroy_ifaces(rdev);
3870
2ec600d6
LCC		 3871 memset(&params, 0, sizeof(params));
3872
55682965
JB		 3873 if (!info->attrs[NL80211_ATTR_IFNAME])
3874 return -EINVAL;
3875
ab0d76f6 3876 if (info->attrs[NL80211_ATTR_IFTYPE])
55682965 3877 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
55682965 3878
33d915d9 3879 if (!rdev->ops->add_virtual_intf)
4c476991 3880 return -EOPNOTSUPP;
55682965 3881
cb3b7d87 3882 if ((type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN ||
e8f479b1
BG		 3883 rdev->wiphy.features & NL80211_FEATURE_MAC_ON_CREATE) &&
3884 info->attrs[NL80211_ATTR_MAC]) {
1c18f145
AS		 3885 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
3886 ETH_ALEN);
3887 if (!is_valid_ether_addr(params.macaddr))
3888 return -EADDRNOTAVAIL;
3889 }
3890
9bc383de 3891 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 3892 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 3893 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 3894 if (err)
4c476991 3895 return err;
9bc383de 3896 }
8b787643 3897
e6f40511 3898 if (!cfg80211_iftype_allowed(&rdev->wiphy, type, params.use_4addr, 0))
33d915d9
MP		 3899 return -EOPNOTSUPP;
3900
1db77596
JB		 3901 err = nl80211_parse_mon_options(rdev, type, info, &params);
3902 if (err < 0)
3903 return err;
e057d3c3 3904
a18c7192
JB		 3905 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
3906 if (!msg)
3907 return -ENOMEM;
3908
e35e4d28
HG		 3909 wdev = rdev_add_virtual_intf(rdev,
3910 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
818a986e 3911 NET_NAME_USER, type, &params);
d687cbb7
RM		 3912 if (WARN_ON(!wdev)) {
3913 nlmsg_free(msg);
3914 return -EPROTO;
3915 } else if (IS_ERR(wdev)) {
1c90f9d4 3916 nlmsg_free(msg);
84efbb84 3917 return PTR_ERR(wdev);
1c90f9d4 3918 }
2ec600d6 3919
18e5ca65 3920 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
78f22b6a
JB		 3921 wdev->owner_nlportid = info->snd_portid;
3922
98104fde
JB		 3923 switch (type) {
3924 case NL80211_IFTYPE_MESH_POINT:
3925 if (!info->attrs[NL80211_ATTR_MESH_ID])
3926 break;
29cbe68c
JB		 3927 wdev_lock(wdev);
3928 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
3929 IEEE80211_MAX_MESH_ID_LEN);
3930 wdev->mesh_id_up_len =
3931 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
3932 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
3933 wdev->mesh_id_up_len);
3934 wdev_unlock(wdev);
98104fde 3935 break;
cb3b7d87 3936 case NL80211_IFTYPE_NAN:
98104fde
JB		 3937 case NL80211_IFTYPE_P2P_DEVICE:
3938 /*
cb3b7d87 3939 * P2P Device and NAN do not have a netdev, so don't go
98104fde
JB		 3940 * through the netdev notifier and must be added here
3941 */
9bdaf3b9
JB		 3942 cfg80211_init_wdev(wdev);
3943 cfg80211_register_wdev(rdev, wdev);
98104fde
JB		 3944 break;
3945 default:
3946 break;
29cbe68c
JB		 3947 }
3948
15e47304 3949 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
3d1a5bbf 3950 rdev, wdev, NL80211_CMD_NEW_INTERFACE) < 0) {
1c90f9d4
JB		 3951 nlmsg_free(msg);
3952 return -ENOBUFS;
3953 }
3954
3955 return genlmsg_reply(msg, info);
55682965
JB		 3956}
3957
3958static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
3959{
4c476991 3960 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 3961 struct wireless_dev *wdev = info->user_ptr[1];
55682965 3962
4c476991
JB		 3963 if (!rdev->ops->del_virtual_intf)
3964 return -EOPNOTSUPP;
55682965 3965
84efbb84
JB		 3966 /*
3967 * If we remove a wireless device without a netdev then clear
3968 * user_ptr[1] so that nl80211_post_doit won't dereference it
3969 * to check if it needs to do dev_put(). Otherwise it crashes
3970 * since the wdev has been freed, unlike with a netdev where
3971 * we need the dev_put() for the netdev to really be freed.
3972 */
3973 if (!wdev->netdev)
3974 info->user_ptr[1] = NULL;
3975
7f8ed01e 3976 return rdev_del_virtual_intf(rdev, wdev);
55682965
JB		 3977}
3978
1d9d9213
SW		 3979static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
3980{
3981 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3982 struct net_device *dev = info->user_ptr[1];
3983 u16 noack_map;
3984
3985 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
3986 return -EINVAL;
3987
3988 if (!rdev->ops->set_noack_map)
3989 return -EOPNOTSUPP;
3990
3991 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
3992
e35e4d28 3993 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 3994}
3995
41ade00f
JB		 3996struct get_key_cookie {
3997 struct sk_buff *msg;
3998 int error;
b9454e83 3999 int idx;
41ade00f
JB		 4000};
4001
4002static void get_key_callback(void *c, struct key_params *params)
4003{
b9454e83 4004 struct nlattr *key;
41ade00f
JB		 4005 struct get_key_cookie *cookie = c;
4006
9360ffd1
DM		 4007 if ((params->key &&
4008 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
4009 params->key_len, params->key)) ||
4010 (params->seq &&
4011 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
4012 params->seq_len, params->seq)) ||
4013 (params->cipher &&
4014 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
4015 params->cipher)))
4016 goto nla_put_failure;
41ade00f 4017
ae0be8de 4018 key = nla_nest_start_noflag(cookie->msg, NL80211_ATTR_KEY);
b9454e83
JB		 4019 if (!key)
4020 goto nla_put_failure;
4021
9360ffd1
DM		 4022 if ((params->key &&
4023 nla_put(cookie->msg, NL80211_KEY_DATA,
4024 params->key_len, params->key)) ||
4025 (params->seq &&
4026 nla_put(cookie->msg, NL80211_KEY_SEQ,
4027 params->seq_len, params->seq)) ||
4028 (params->cipher &&
4029 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
4030 params->cipher)))
4031 goto nla_put_failure;
b9454e83 4032
efdfce72 4033 if (nla_put_u8(cookie->msg, NL80211_KEY_IDX, cookie->idx))
9360ffd1 4034 goto nla_put_failure;
b9454e83
JB		 4035
4036 nla_nest_end(cookie->msg, key);
4037
41ade00f
JB		 4038 return;
4039 nla_put_failure:
4040 cookie->error = 1;
4041}
4042
4043static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
4044{
4c476991 4045 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4046 int err;
4c476991 4047 struct net_device *dev = info->user_ptr[1];
41ade00f 4048 u8 key_idx = 0;
e31b8213
JB		 4049 const u8 *mac_addr = NULL;
4050 bool pairwise;
41ade00f
JB		 4051 struct get_key_cookie cookie = {
4052 .error = 0,
4053 };
4054 void *hdr;
4055 struct sk_buff *msg;
155d7c73
JB		 4056 bool bigtk_support = false;
4057
4058 if (wiphy_ext_feature_isset(&rdev->wiphy,
4059 NL80211_EXT_FEATURE_BEACON_PROTECTION))
4060 bigtk_support = true;
4061
4062 if ((dev->ieee80211_ptr->iftype == NL80211_IFTYPE_STATION ||
4063 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
4064 wiphy_ext_feature_isset(&rdev->wiphy,
4065 NL80211_EXT_FEATURE_BEACON_PROTECTION_CLIENT))
4066 bigtk_support = true;
41ade00f 4067
56be393f 4068 if (info->attrs[NL80211_ATTR_KEY_IDX]) {
41ade00f 4069 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
155d7c73
JB		 4070
4071 if (key_idx >= 6 && key_idx <= 7 && !bigtk_support) {
4072 GENL_SET_ERR_MSG(info, "BIGTK not supported");
56be393f 4073 return -EINVAL;
155d7c73 4074 }
56be393f 4075 }
41ade00f 4076
41ade00f
JB		 4077 if (info->attrs[NL80211_ATTR_MAC])
4078 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4079
e31b8213
JB		 4080 pairwise = !!mac_addr;
4081 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
4082 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
7a087e74 4083
e31b8213
JB		 4084 if (kt != NL80211_KEYTYPE_GROUP &&
4085 kt != NL80211_KEYTYPE_PAIRWISE)
4086 return -EINVAL;
4087 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
4088 }
4089
4c476991
JB		 4090 if (!rdev->ops->get_key)
4091 return -EOPNOTSUPP;
41ade00f 4092
0fa7b391
JB		 4093 if (!pairwise && mac_addr && !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4094 return -ENOENT;
4095
fd2120ca 4096 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 4097 if (!msg)
4098 return -ENOMEM;
41ade00f 4099
15e47304 4100 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 4101 NL80211_CMD_NEW_KEY);
cb35fba3 4102 if (!hdr)
9fe271af 4103 goto nla_put_failure;
41ade00f
JB		 4104
4105 cookie.msg = msg;
b9454e83 4106 cookie.idx = key_idx;
41ade00f 4107
9360ffd1
DM		 4108 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
4109 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
4110 goto nla_put_failure;
4111 if (mac_addr &&
4112 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
4113 goto nla_put_failure;
41ade00f 4114
e35e4d28
HG		 4115 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
4116 get_key_callback);
41ade00f
JB		 4117
4118 if (err)
6c95e2a2 4119 goto free_msg;
41ade00f
JB		 4120
4121 if (cookie.error)
4122 goto nla_put_failure;
4123
4124 genlmsg_end(msg, hdr);
4c476991 4125 return genlmsg_reply(msg, info);
41ade00f
JB		 4126
4127 nla_put_failure:
4128 err = -ENOBUFS;
6c95e2a2 4129 free_msg:
41ade00f 4130 nlmsg_free(msg);
41ade00f
JB		 4131 return err;
4132}
4133
4134static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
4135{
4c476991 4136 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 4137 struct key_parse key;
41ade00f 4138 int err;
4c476991 4139 struct net_device *dev = info->user_ptr[1];
41ade00f 4140
b9454e83
JB		 4141 err = nl80211_parse_key(info, &key);
4142 if (err)
4143 return err;
41ade00f 4144
b9454e83 4145 if (key.idx < 0)
41ade00f
JB		 4146 return -EINVAL;
4147
6cdd3979
AW		 4148 /* Only support setting default key and
4149 * Extended Key ID action NL80211_KEY_SET_TX.
4150 */
56be393f 4151 if (!key.def && !key.defmgmt && !key.defbeacon &&
6cdd3979 4152 !(key.p.mode == NL80211_KEY_SET_TX))
41ade00f
JB		 4153 return -EINVAL;
4154
dbd2fd65 4155 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 4156
dbd2fd65
JB		 4157 if (key.def) {
4158 if (!rdev->ops->set_default_key) {
4159 err = -EOPNOTSUPP;
4160 goto out;
4161 }
41ade00f 4162
dbd2fd65
JB		 4163 err = nl80211_key_allowed(dev->ieee80211_ptr);
4164 if (err)
4165 goto out;
4166
e35e4d28 4167 err = rdev_set_default_key(rdev, dev, key.idx,
dbd2fd65
JB		 4168 key.def_uni, key.def_multi);
4169
4170 if (err)
4171 goto out;
fffd0934 4172
3d23e349 4173#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 4174 dev->ieee80211_ptr->wext.default_key = key.idx;
4175#endif
6cdd3979 4176 } else if (key.defmgmt) {
dbd2fd65
JB		 4177 if (key.def_uni || !key.def_multi) {
4178 err = -EINVAL;
4179 goto out;
4180 }
4181
4182 if (!rdev->ops->set_default_mgmt_key) {
4183 err = -EOPNOTSUPP;
4184 goto out;
4185 }
4186
4187 err = nl80211_key_allowed(dev->ieee80211_ptr);
4188 if (err)
4189 goto out;
4190
e35e4d28 4191 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
dbd2fd65
JB		 4192 if (err)
4193 goto out;
4194
4195#ifdef CONFIG_CFG80211_WEXT
4196 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 4197#endif
56be393f
JM		 4198 } else if (key.defbeacon) {
4199 if (key.def_uni || !key.def_multi) {
4200 err = -EINVAL;
4201 goto out;
4202 }
4203
4204 if (!rdev->ops->set_default_beacon_key) {
4205 err = -EOPNOTSUPP;
4206 goto out;
4207 }
4208
4209 err = nl80211_key_allowed(dev->ieee80211_ptr);
4210 if (err)
4211 goto out;
4212
4213 err = rdev_set_default_beacon_key(rdev, dev, key.idx);
4214 if (err)
4215 goto out;
6cdd3979
AW		 4216 } else if (key.p.mode == NL80211_KEY_SET_TX &&
4217 wiphy_ext_feature_isset(&rdev->wiphy,
4218 NL80211_EXT_FEATURE_EXT_KEY_ID)) {
4219 u8 *mac_addr = NULL;
4220
4221 if (info->attrs[NL80211_ATTR_MAC])
4222 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4223
4224 if (!mac_addr || key.idx < 0 || key.idx > 1) {
4225 err = -EINVAL;
4226 goto out;
4227 }
dbd2fd65 4228
6cdd3979
AW		 4229 err = rdev_add_key(rdev, dev, key.idx,
4230 NL80211_KEYTYPE_PAIRWISE,
4231 mac_addr, &key.p);
4232 } else {
4233 err = -EINVAL;
4234 }
dbd2fd65 4235 out:
fffd0934 4236 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4237
41ade00f
JB		 4238 return err;
4239}
4240
4241static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
4242{
4c476991 4243 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 4244 int err;
4c476991 4245 struct net_device *dev = info->user_ptr[1];
b9454e83 4246 struct key_parse key;
e31b8213 4247 const u8 *mac_addr = NULL;
41ade00f 4248
b9454e83
JB		 4249 err = nl80211_parse_key(info, &key);
4250 if (err)
4251 return err;
41ade00f 4252
f8af764b
JM		 4253 if (!key.p.key) {
4254 GENL_SET_ERR_MSG(info, "no key");
41ade00f 4255 return -EINVAL;
f8af764b 4256 }
41ade00f 4257
41ade00f
JB		 4258 if (info->attrs[NL80211_ATTR_MAC])
4259 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4260
e31b8213
JB		 4261 if (key.type == -1) {
4262 if (mac_addr)
4263 key.type = NL80211_KEYTYPE_PAIRWISE;
4264 else
4265 key.type = NL80211_KEYTYPE_GROUP;
4266 }
4267
4268 /* for now */
4269 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
f8af764b
JM		 4270 key.type != NL80211_KEYTYPE_GROUP) {
4271 GENL_SET_ERR_MSG(info, "key type not pairwise or group");
e31b8213 4272 return -EINVAL;
f8af764b 4273 }
e31b8213 4274
14f34e36
GG		 4275 if (key.type == NL80211_KEYTYPE_GROUP &&
4276 info->attrs[NL80211_ATTR_VLAN_ID])
4277 key.p.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
4278
4c476991
JB		 4279 if (!rdev->ops->add_key)
4280 return -EOPNOTSUPP;
25e47c18 4281
e31b8213
JB		 4282 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
4283 key.type == NL80211_KEYTYPE_PAIRWISE,
f8af764b
JM		 4284 mac_addr)) {
4285 GENL_SET_ERR_MSG(info, "key setting validation failed");
4c476991 4286 return -EINVAL;
f8af764b 4287 }
41ade00f 4288
fffd0934
JB		 4289 wdev_lock(dev->ieee80211_ptr);
4290 err = nl80211_key_allowed(dev->ieee80211_ptr);
f8af764b
JM		 4291 if (err)
4292 GENL_SET_ERR_MSG(info, "key not allowed");
4293 if (!err) {
e35e4d28
HG		 4294 err = rdev_add_key(rdev, dev, key.idx,
4295 key.type == NL80211_KEYTYPE_PAIRWISE,
4296 mac_addr, &key.p);
f8af764b
JM		 4297 if (err)
4298 GENL_SET_ERR_MSG(info, "key addition failed");
4299 }
fffd0934 4300 wdev_unlock(dev->ieee80211_ptr);
41ade00f 4301
41ade00f
JB		 4302 return err;
4303}
4304
4305static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
4306{
4c476991 4307 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 4308 int err;
4c476991 4309 struct net_device *dev = info->user_ptr[1];
41ade00f 4310 u8 *mac_addr = NULL;
b9454e83 4311 struct key_parse key;
41ade00f 4312
b9454e83
JB		 4313 err = nl80211_parse_key(info, &key);
4314 if (err)
4315 return err;
41ade00f
JB		 4316
4317 if (info->attrs[NL80211_ATTR_MAC])
4318 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4319
e31b8213
JB		 4320 if (key.type == -1) {
4321 if (mac_addr)
4322 key.type = NL80211_KEYTYPE_PAIRWISE;
4323 else
4324 key.type = NL80211_KEYTYPE_GROUP;
4325 }
4326
4327 /* for now */
4328 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
4329 key.type != NL80211_KEYTYPE_GROUP)
4330 return -EINVAL;
4331
2d946308
AT		 4332 if (!cfg80211_valid_key_idx(rdev, key.idx,
4333 key.type == NL80211_KEYTYPE_PAIRWISE))
4334 return -EINVAL;
4335
4c476991
JB		 4336 if (!rdev->ops->del_key)
4337 return -EOPNOTSUPP;
41ade00f 4338
fffd0934
JB		 4339 wdev_lock(dev->ieee80211_ptr);
4340 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213 4341
0fa7b391 4342 if (key.type == NL80211_KEYTYPE_GROUP && mac_addr &&
e31b8213
JB		 4343 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
4344 err = -ENOENT;
4345
fffd0934 4346 if (!err)
e35e4d28
HG		 4347 err = rdev_del_key(rdev, dev, key.idx,
4348 key.type == NL80211_KEYTYPE_PAIRWISE,
4349 mac_addr);
41ade00f 4350
3d23e349 4351#ifdef CONFIG_CFG80211_WEXT
08645126 4352 if (!err) {
b9454e83 4353 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 4354 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 4355 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 4356 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
4357 }
4358#endif
fffd0934 4359 wdev_unlock(dev->ieee80211_ptr);
08645126 4360
41ade00f
JB		 4361 return err;
4362}
4363
77765eaf
VT		 4364/* This function returns an error or the number of nested attributes */
4365static int validate_acl_mac_addrs(struct nlattr *nl_attr)
4366{
4367 struct nlattr *attr;
4368 int n_entries = 0, tmp;
4369
4370 nla_for_each_nested(attr, nl_attr, tmp) {
4371 if (nla_len(attr) != ETH_ALEN)
4372 return -EINVAL;
4373
4374 n_entries++;
4375 }
4376
4377 return n_entries;
4378}
4379
4380/*
4381 * This function parses ACL information and allocates memory for ACL data.
4382 * On successful return, the calling function is responsible to free the
4383 * ACL buffer returned by this function.
4384 */
4385static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
4386 struct genl_info *info)
4387{
4388 enum nl80211_acl_policy acl_policy;
4389 struct nlattr *attr;
4390 struct cfg80211_acl_data *acl;
4391 int i = 0, n_entries, tmp;
4392
4393 if (!wiphy->max_acl_mac_addrs)
4394 return ERR_PTR(-EOPNOTSUPP);
4395
4396 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
4397 return ERR_PTR(-EINVAL);
4398
4399 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
4400 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
4401 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
4402 return ERR_PTR(-EINVAL);
4403
4404 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
4405 return ERR_PTR(-EINVAL);
4406
4407 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
4408 if (n_entries < 0)
4409 return ERR_PTR(n_entries);
4410
4411 if (n_entries > wiphy->max_acl_mac_addrs)
4412 return ERR_PTR(-ENOTSUPP);
4413
391d132c 4414 acl = kzalloc(struct_size(acl, mac_addrs, n_entries), GFP_KERNEL);
77765eaf
VT		 4415 if (!acl)
4416 return ERR_PTR(-ENOMEM);
4417
4418 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
4419 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
4420 i++;
4421 }
4422
4423 acl->n_acl_entries = n_entries;
4424 acl->acl_policy = acl_policy;
4425
4426 return acl;
4427}
4428
4429static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
4430{
4431 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4432 struct net_device *dev = info->user_ptr[1];
4433 struct cfg80211_acl_data *acl;
4434 int err;
4435
4436 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4437 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4438 return -EOPNOTSUPP;
4439
4440 if (!dev->ieee80211_ptr->beacon_interval)
4441 return -EINVAL;
4442
4443 acl = parse_acl_data(&rdev->wiphy, info);
4444 if (IS_ERR(acl))
4445 return PTR_ERR(acl);
4446
4447 err = rdev_set_mac_acl(rdev, dev, acl);
4448
4449 kfree(acl);
4450
4451 return err;
4452}
4453
a7c7fbff
PK		 4454static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4455 u8 *rates, u8 rates_len)
4456{
4457 u8 i;
4458 u32 mask = 0;
4459
4460 for (i = 0; i < rates_len; i++) {
4461 int rate = (rates[i] & 0x7f) * 5;
4462 int ridx;
4463
4464 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
4465 struct ieee80211_rate *srate =
4466 &sband->bitrates[ridx];
4467 if (rate == srate->bitrate) {
4468 mask |= 1 << ridx;
4469 break;
4470 }
4471 }
4472 if (ridx == sband->n_bitrates)
4473 return 0; /* rate not found */
4474 }
4475
4476 return mask;
4477}
4478
4479static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
4480 u8 *rates, u8 rates_len,
4481 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
4482{
4483 u8 i;
4484
4485 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
4486
4487 for (i = 0; i < rates_len; i++) {
4488 int ridx, rbit;
4489
4490 ridx = rates[i] / 8;
4491 rbit = BIT(rates[i] % 8);
4492
4493 /* check validity */
4494 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
4495 return false;
4496
4497 /* check availability */
30fe6d50 4498 ridx = array_index_nospec(ridx, IEEE80211_HT_MCS_MASK_LEN);
a7c7fbff
PK		 4499 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
4500 mcs[ridx] |= rbit;
4501 else
4502 return false;
4503 }
4504
4505 return true;
4506}
4507
4508static u16 vht_mcs_map_to_mcs_mask(u8 vht_mcs_map)
4509{
4510 u16 mcs_mask = 0;
4511
4512 switch (vht_mcs_map) {
4513 case IEEE80211_VHT_MCS_NOT_SUPPORTED:
4514 break;
4515 case IEEE80211_VHT_MCS_SUPPORT_0_7:
4516 mcs_mask = 0x00FF;
4517 break;
4518 case IEEE80211_VHT_MCS_SUPPORT_0_8:
4519 mcs_mask = 0x01FF;
4520 break;
4521 case IEEE80211_VHT_MCS_SUPPORT_0_9:
4522 mcs_mask = 0x03FF;
4523 break;
4524 default:
4525 break;
4526 }
4527
4528 return mcs_mask;
4529}
4530
4531static void vht_build_mcs_mask(u16 vht_mcs_map,
4532 u16 vht_mcs_mask[NL80211_VHT_NSS_MAX])
4533{
4534 u8 nss;
4535
4536 for (nss = 0; nss < NL80211_VHT_NSS_MAX; nss++) {
4537 vht_mcs_mask[nss] = vht_mcs_map_to_mcs_mask(vht_mcs_map & 0x03);
4538 vht_mcs_map >>= 2;
4539 }
4540}
4541
4542static bool vht_set_mcs_mask(struct ieee80211_supported_band *sband,
4543 struct nl80211_txrate_vht *txrate,
4544 u16 mcs[NL80211_VHT_NSS_MAX])
4545{
4546 u16 tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4547 u16 tx_mcs_mask[NL80211_VHT_NSS_MAX] = {};
4548 u8 i;
4549
4550 if (!sband->vht_cap.vht_supported)
4551 return false;
4552
4553 memset(mcs, 0, sizeof(u16) * NL80211_VHT_NSS_MAX);
4554
4555 /* Build vht_mcs_mask from VHT capabilities */
4556 vht_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4557
4558 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
4559 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4560 mcs[i] = txrate->mcs[i];
4561 else
4562 return false;
4563 }
4564
4565 return true;
4566}
4567
eb89a6a6
MH		 4568static u16 he_mcs_map_to_mcs_mask(u8 he_mcs_map)
4569{
4570 switch (he_mcs_map) {
4571 case IEEE80211_HE_MCS_NOT_SUPPORTED:
4572 return 0;
4573 case IEEE80211_HE_MCS_SUPPORT_0_7:
4574 return 0x00FF;
4575 case IEEE80211_HE_MCS_SUPPORT_0_9:
4576 return 0x03FF;
4577 case IEEE80211_HE_MCS_SUPPORT_0_11:
4578 return 0xFFF;
4579 default:
4580 break;
4581 }
4582 return 0;
4583}
4584
4585static void he_build_mcs_mask(u16 he_mcs_map,
4586 u16 he_mcs_mask[NL80211_HE_NSS_MAX])
4587{
4588 u8 nss;
4589
4590 for (nss = 0; nss < NL80211_HE_NSS_MAX; nss++) {
4591 he_mcs_mask[nss] = he_mcs_map_to_mcs_mask(he_mcs_map & 0x03);
4592 he_mcs_map >>= 2;
4593 }
4594}
4595
4596static u16 he_get_txmcsmap(struct genl_info *info,
4597 const struct ieee80211_sta_he_cap *he_cap)
4598{
4599 struct net_device *dev = info->user_ptr[1];
4600 struct wireless_dev *wdev = dev->ieee80211_ptr;
4601 __le16 tx_mcs;
4602
4603 switch (wdev->chandef.width) {
4604 case NL80211_CHAN_WIDTH_80P80:
4605 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80p80;
4606 break;
4607 case NL80211_CHAN_WIDTH_160:
4608 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_160;
4609 break;
4610 default:
4611 tx_mcs = he_cap->he_mcs_nss_supp.tx_mcs_80;
4612 break;
4613 }
4614 return le16_to_cpu(tx_mcs);
4615}
4616
4617static bool he_set_mcs_mask(struct genl_info *info,
4618 struct wireless_dev *wdev,
4619 struct ieee80211_supported_band *sband,
4620 struct nl80211_txrate_he *txrate,
4621 u16 mcs[NL80211_HE_NSS_MAX])
4622{
4623 const struct ieee80211_sta_he_cap *he_cap;
4624 u16 tx_mcs_mask[NL80211_HE_NSS_MAX] = {};
4625 u16 tx_mcs_map = 0;
4626 u8 i;
4627
4628 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
4629 if (!he_cap)
4630 return false;
4631
4632 memset(mcs, 0, sizeof(u16) * NL80211_HE_NSS_MAX);
4633
4634 tx_mcs_map = he_get_txmcsmap(info, he_cap);
4635
4636 /* Build he_mcs_mask from HE capabilities */
4637 he_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
4638
4639 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
4640 if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
4641 mcs[i] = txrate->mcs[i];
4642 else
4643 return false;
4644 }
4645
4646 return true;
4647}
4648
a7c7fbff 4649static int nl80211_parse_tx_bitrate_mask(struct genl_info *info,
9a5f6488
TC		 4650 struct nlattr *attrs[],
4651 enum nl80211_attrs attr,
eb89a6a6 4652 struct cfg80211_bitrate_mask *mask,
857b34c4
RM		 4653 struct net_device *dev,
4654 bool default_all_enabled)
a7c7fbff
PK		 4655{
4656 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4657 struct cfg80211_registered_device *rdev = info->user_ptr[0];
eb89a6a6 4658 struct wireless_dev *wdev = dev->ieee80211_ptr;
a7c7fbff
PK		 4659 int rem, i;
4660 struct nlattr *tx_rates;
4661 struct ieee80211_supported_band *sband;
eb89a6a6 4662 u16 vht_tx_mcs_map, he_tx_mcs_map;
a7c7fbff
PK		 4663
4664 memset(mask, 0, sizeof(*mask));
4665 /* Default to all rates enabled */
4666 for (i = 0; i < NUM_NL80211_BANDS; i++) {
eb89a6a6
MH		 4667 const struct ieee80211_sta_he_cap *he_cap;
4668
857b34c4
RM		 4669 if (!default_all_enabled)
4670 break;
4671
a7c7fbff
PK		 4672 sband = rdev->wiphy.bands[i];
4673
4674 if (!sband)
4675 continue;
4676
4677 mask->control[i].legacy = (1 << sband->n_bitrates) - 1;
4678 memcpy(mask->control[i].ht_mcs,
4679 sband->ht_cap.mcs.rx_mask,
4680 sizeof(mask->control[i].ht_mcs));
4681
4682 if (!sband->vht_cap.vht_supported)
4683 continue;
4684
4685 vht_tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
4686 vht_build_mcs_mask(vht_tx_mcs_map, mask->control[i].vht_mcs);
eb89a6a6
MH		 4687
4688 he_cap = ieee80211_get_he_iftype_cap(sband, wdev->iftype);
4689 if (!he_cap)
4690 continue;
4691
4692 he_tx_mcs_map = he_get_txmcsmap(info, he_cap);
4693 he_build_mcs_mask(he_tx_mcs_map, mask->control[i].he_mcs);
4694
4695 mask->control[i].he_gi = 0xFF;
4696 mask->control[i].he_ltf = 0xFF;
a7c7fbff
PK		 4697 }
4698
4699 /* if no rates are given set it back to the defaults */
9a5f6488 4700 if (!attrs[attr])
a7c7fbff
PK		 4701 goto out;
4702
4703 /* The nested attribute uses enum nl80211_band as the index. This maps
4704 * directly to the enum nl80211_band values used in cfg80211.
4705 */
4706 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
9a5f6488 4707 nla_for_each_nested(tx_rates, attrs[attr], rem) {
a7c7fbff
PK		 4708 enum nl80211_band band = nla_type(tx_rates);
4709 int err;
4710
4711 if (band < 0 || band >= NUM_NL80211_BANDS)
4712 return -EINVAL;
4713 sband = rdev->wiphy.bands[band];
4714 if (sband == NULL)
4715 return -EINVAL;
8cb08174
JB		 4716 err = nla_parse_nested_deprecated(tb, NL80211_TXRATE_MAX,
4717 tx_rates,
4718 nl80211_txattr_policy,
4719 info->extack);
a7c7fbff
PK		 4720 if (err)
4721 return err;
4722 if (tb[NL80211_TXRATE_LEGACY]) {
4723 mask->control[band].legacy = rateset_to_mask(
4724 sband,
4725 nla_data(tb[NL80211_TXRATE_LEGACY]),
4726 nla_len(tb[NL80211_TXRATE_LEGACY]));
4727 if ((mask->control[band].legacy == 0) &&
4728 nla_len(tb[NL80211_TXRATE_LEGACY]))
4729 return -EINVAL;
4730 }
4731 if (tb[NL80211_TXRATE_HT]) {
4732 if (!ht_rateset_to_mask(
4733 sband,
4734 nla_data(tb[NL80211_TXRATE_HT]),
4735 nla_len(tb[NL80211_TXRATE_HT]),
4736 mask->control[band].ht_mcs))
4737 return -EINVAL;
4738 }
c4a30446 4739
a7c7fbff
PK		 4740 if (tb[NL80211_TXRATE_VHT]) {
4741 if (!vht_set_mcs_mask(
4742 sband,
4743 nla_data(tb[NL80211_TXRATE_VHT]),
4744 mask->control[band].vht_mcs))
4745 return -EINVAL;
4746 }
c4a30446 4747
a7c7fbff
PK		 4748 if (tb[NL80211_TXRATE_GI]) {
4749 mask->control[band].gi =
4750 nla_get_u8(tb[NL80211_TXRATE_GI]);
4751 if (mask->control[band].gi > NL80211_TXRATE_FORCE_LGI)
4752 return -EINVAL;
4753 }
eb89a6a6
MH		 4754 if (tb[NL80211_TXRATE_HE] &&
4755 !he_set_mcs_mask(info, wdev, sband,
4756 nla_data(tb[NL80211_TXRATE_HE]),
4757 mask->control[band].he_mcs))
4758 return -EINVAL;
c4a30446 4759
eb89a6a6
MH		 4760 if (tb[NL80211_TXRATE_HE_GI])
4761 mask->control[band].he_gi =
4762 nla_get_u8(tb[NL80211_TXRATE_HE_GI]);
4763 if (tb[NL80211_TXRATE_HE_LTF])
4764 mask->control[band].he_ltf =
4765 nla_get_u8(tb[NL80211_TXRATE_HE_LTF]);
a7c7fbff
PK		 4766
4767 if (mask->control[band].legacy == 0) {
eb89a6a6 4768 /* don't allow empty legacy rates if HT, VHT or HE
a7c7fbff
PK		 4769 * are not even supported.
4770 */
4771 if (!(rdev->wiphy.bands[band]->ht_cap.ht_supported ||
eb89a6a6
MH		 4772 rdev->wiphy.bands[band]->vht_cap.vht_supported ||
4773 ieee80211_get_he_iftype_cap(sband, wdev->iftype)))
a7c7fbff
PK		 4774 return -EINVAL;
4775
4776 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
4777 if (mask->control[band].ht_mcs[i])
4778 goto out;
4779
4780 for (i = 0; i < NL80211_VHT_NSS_MAX; i++)
4781 if (mask->control[band].vht_mcs[i])
4782 goto out;
4783
eb89a6a6
MH		 4784 for (i = 0; i < NL80211_HE_NSS_MAX; i++)
4785 if (mask->control[band].he_mcs[i])
4786 goto out;
4787
a7c7fbff
PK		 4788 /* legacy and mcs rates may not be both empty */
4789 return -EINVAL;
4790 }
4791 }
4792
4793out:
4794 return 0;
4795}
4796
8564e382
JB		 4797static int validate_beacon_tx_rate(struct cfg80211_registered_device *rdev,
4798 enum nl80211_band band,
4799 struct cfg80211_bitrate_mask *beacon_rate)
a7c7fbff 4800{
c4a30446 4801 u32 count_ht, count_vht, count_he, i;
8564e382 4802 u32 rate = beacon_rate->control[band].legacy;
a7c7fbff
PK		 4803
4804 /* Allow only one rate */
4805 if (hweight32(rate) > 1)
4806 return -EINVAL;
4807
4808 count_ht = 0;
4809 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
8564e382 4810 if (hweight8(beacon_rate->control[band].ht_mcs[i]) > 1) {
a7c7fbff 4811 return -EINVAL;
8564e382 4812 } else if (beacon_rate->control[band].ht_mcs[i]) {
a7c7fbff
PK		 4813 count_ht++;
4814 if (count_ht > 1)
4815 return -EINVAL;
4816 }
4817 if (count_ht && rate)
4818 return -EINVAL;
4819 }
4820
4821 count_vht = 0;
4822 for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
8564e382 4823 if (hweight16(beacon_rate->control[band].vht_mcs[i]) > 1) {
a7c7fbff 4824 return -EINVAL;
8564e382 4825 } else if (beacon_rate->control[band].vht_mcs[i]) {
a7c7fbff
PK		 4826 count_vht++;
4827 if (count_vht > 1)
4828 return -EINVAL;
4829 }
4830 if (count_vht && rate)
4831 return -EINVAL;
4832 }
4833
c4a30446
RM		 4834 count_he = 0;
4835 for (i = 0; i < NL80211_HE_NSS_MAX; i++) {
4836 if (hweight16(beacon_rate->control[band].he_mcs[i]) > 1) {
4837 return -EINVAL;
4838 } else if (beacon_rate->control[band].he_mcs[i]) {
4839 count_he++;
4840 if (count_he > 1)
4841 return -EINVAL;
4842 }
4843 if (count_he && rate)
4844 return -EINVAL;
4845 }
4846
4847 if ((count_ht && count_vht && count_he) ||
4848 (!rate && !count_ht && !count_vht && !count_he))
a7c7fbff
PK		 4849 return -EINVAL;
4850
8564e382
JB		 4851 if (rate &&
4852 !wiphy_ext_feature_isset(&rdev->wiphy,
4853 NL80211_EXT_FEATURE_BEACON_RATE_LEGACY))
4854 return -EINVAL;
4855 if (count_ht &&
4856 !wiphy_ext_feature_isset(&rdev->wiphy,
4857 NL80211_EXT_FEATURE_BEACON_RATE_HT))
4858 return -EINVAL;
4859 if (count_vht &&
4860 !wiphy_ext_feature_isset(&rdev->wiphy,
4861 NL80211_EXT_FEATURE_BEACON_RATE_VHT))
4862 return -EINVAL;
c4a30446
RM		 4863 if (count_he &&
4864 !wiphy_ext_feature_isset(&rdev->wiphy,
4865 NL80211_EXT_FEATURE_BEACON_RATE_HE))
4866 return -EINVAL;
8564e382 4867
a7c7fbff
PK		 4868 return 0;
4869}
4870
81e54d08
PKC		 4871static int nl80211_parse_beacon(struct cfg80211_registered_device *rdev,
4872 struct nlattr *attrs[],
8860020e 4873 struct cfg80211_beacon_data *bcn)
ed1b6cc7 4874{
8860020e 4875 bool haveinfo = false;
81e54d08 4876 int err;
ed1b6cc7 4877
8860020e 4878 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 4879
a1193be8
SW		 4880 if (attrs[NL80211_ATTR_BEACON_HEAD]) {
4881 bcn->head = nla_data(attrs[NL80211_ATTR_BEACON_HEAD]);
4882 bcn->head_len = nla_len(attrs[NL80211_ATTR_BEACON_HEAD]);
8860020e
JB		 4883 if (!bcn->head_len)
4884 return -EINVAL;
4885 haveinfo = true;
ed1b6cc7
JB		 4886 }
4887
a1193be8
SW		 4888 if (attrs[NL80211_ATTR_BEACON_TAIL]) {
4889 bcn->tail = nla_data(attrs[NL80211_ATTR_BEACON_TAIL]);
4890 bcn->tail_len = nla_len(attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 4891 haveinfo = true;
ed1b6cc7
JB		 4892 }
4893
4c476991
JB		 4894 if (!haveinfo)
4895 return -EINVAL;
3b85875a 4896
a1193be8
SW		 4897 if (attrs[NL80211_ATTR_IE]) {
4898 bcn->beacon_ies = nla_data(attrs[NL80211_ATTR_IE]);
4899 bcn->beacon_ies_len = nla_len(attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 4900 }
4901
a1193be8 4902 if (attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 4903 bcn->proberesp_ies =
a1193be8 4904 nla_data(attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 4905 bcn->proberesp_ies_len =
a1193be8 4906 nla_len(attrs[NL80211_ATTR_IE_PROBE_RESP]);
9946ecfb
JM		 4907 }
4908
a1193be8 4909 if (attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 4910 bcn->assocresp_ies =
a1193be8 4911 nla_data(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 4912 bcn->assocresp_ies_len =
a1193be8 4913 nla_len(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
9946ecfb
JM		 4914 }
4915
a1193be8
SW		 4916 if (attrs[NL80211_ATTR_PROBE_RESP]) {
4917 bcn->probe_resp = nla_data(attrs[NL80211_ATTR_PROBE_RESP]);
4918 bcn->probe_resp_len = nla_len(attrs[NL80211_ATTR_PROBE_RESP]);
00f740e1
AN		 4919 }
4920
81e54d08
PKC		 4921 if (attrs[NL80211_ATTR_FTM_RESPONDER]) {
4922 struct nlattr *tb[NL80211_FTM_RESP_ATTR_MAX + 1];
4923
8cb08174
JB		 4924 err = nla_parse_nested_deprecated(tb,
4925 NL80211_FTM_RESP_ATTR_MAX,
4926 attrs[NL80211_ATTR_FTM_RESPONDER],
4927 NULL, NULL);
81e54d08
PKC		 4928 if (err)
4929 return err;
4930
4931 if (tb[NL80211_FTM_RESP_ATTR_ENABLED] &&
4932 wiphy_ext_feature_isset(&rdev->wiphy,
4933 NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER))
4934 bcn->ftm_responder = 1;
4935 else
4936 return -EOPNOTSUPP;
4937
4938 if (tb[NL80211_FTM_RESP_ATTR_LCI]) {
4939 bcn->lci = nla_data(tb[NL80211_FTM_RESP_ATTR_LCI]);
4940 bcn->lci_len = nla_len(tb[NL80211_FTM_RESP_ATTR_LCI]);
4941 }
4942
4943 if (tb[NL80211_FTM_RESP_ATTR_CIVICLOC]) {
4944 bcn->civicloc = nla_data(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
4945 bcn->civicloc_len = nla_len(tb[NL80211_FTM_RESP_ATTR_CIVICLOC]);
4946 }
4947 } else {
4948 bcn->ftm_responder = -1;
4949 }
4950
8860020e
JB		 4951 return 0;
4952}
4953
796e90f4
JC		 4954static int nl80211_parse_he_obss_pd(struct nlattr *attrs,
4955 struct ieee80211_he_obss_pd *he_obss_pd)
4956{
4957 struct nlattr *tb[NL80211_HE_OBSS_PD_ATTR_MAX + 1];
4958 int err;
4959
4960 err = nla_parse_nested(tb, NL80211_HE_OBSS_PD_ATTR_MAX, attrs,
4961 he_obss_pd_policy, NULL);
4962 if (err)
4963 return err;
4964
f5bec330
RM		 4965 if (!tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL])
4966 return -EINVAL;
4967
4968 he_obss_pd->sr_ctrl = nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_SR_CTRL]);
4969
6c8b6e4a
RM		 4970 if (tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET])
4971 he_obss_pd->min_offset =
4972 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET]);
4973 if (tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET])
4974 he_obss_pd->max_offset =
4975 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET]);
f5bec330
RM		 4976 if (tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET])
4977 he_obss_pd->non_srg_max_offset =
4978 nla_get_u8(tb[NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET]);
6c8b6e4a
RM		 4979
4980 if (he_obss_pd->min_offset > he_obss_pd->max_offset)
796e90f4
JC		 4981 return -EINVAL;
4982
f5bec330
RM		 4983 if (tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP])
4984 memcpy(he_obss_pd->bss_color_bitmap,
4985 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP]),
4986 sizeof(he_obss_pd->bss_color_bitmap));
4987
4988 if (tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP])
4989 memcpy(he_obss_pd->partial_bssid_bitmap,
4990 nla_data(tb[NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP]),
4991 sizeof(he_obss_pd->partial_bssid_bitmap));
4992
796e90f4
JC		 4993 he_obss_pd->enable = true;
4994
4995 return 0;
4996}
4997
5c5e52d1
JC		 4998static int nl80211_parse_he_bss_color(struct nlattr *attrs,
4999 struct cfg80211_he_bss_color *he_bss_color)
5000{
5001 struct nlattr *tb[NL80211_HE_BSS_COLOR_ATTR_MAX + 1];
5002 int err;
5003
5004 err = nla_parse_nested(tb, NL80211_HE_BSS_COLOR_ATTR_MAX, attrs,
5005 he_bss_color_policy, NULL);
5006 if (err)
5007 return err;
5008
5009 if (!tb[NL80211_HE_BSS_COLOR_ATTR_COLOR])
5010 return -EINVAL;
5011
5012 he_bss_color->color =
5013 nla_get_u8(tb[NL80211_HE_BSS_COLOR_ATTR_COLOR]);
75e6b594
JB		 5014 he_bss_color->enabled =
5015 !nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_DISABLED]);
5c5e52d1
JC		 5016 he_bss_color->partial =
5017 nla_get_flag(tb[NL80211_HE_BSS_COLOR_ATTR_PARTIAL]);
5018
5019 return 0;
5020}
5021
291c49de
AD		 5022static int nl80211_parse_fils_discovery(struct cfg80211_registered_device *rdev,
5023 struct nlattr *attrs,
5024 struct cfg80211_ap_settings *params)
5025{
5026 struct nlattr *tb[NL80211_FILS_DISCOVERY_ATTR_MAX + 1];
5027 int ret;
5028 struct cfg80211_fils_discovery *fd = &params->fils_discovery;
5029
5030 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5031 NL80211_EXT_FEATURE_FILS_DISCOVERY))
5032 return -EINVAL;
5033
5034 ret = nla_parse_nested(tb, NL80211_FILS_DISCOVERY_ATTR_MAX, attrs,
5035 NULL, NULL);
5036 if (ret)
5037 return ret;
5038
5039 if (!tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN] ||
5040 !tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX] ||
5041 !tb[NL80211_FILS_DISCOVERY_ATTR_TMPL])
5042 return -EINVAL;
5043
5044 fd->tmpl_len = nla_len(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5045 fd->tmpl = nla_data(tb[NL80211_FILS_DISCOVERY_ATTR_TMPL]);
5046 fd->min_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MIN]);
5047 fd->max_interval = nla_get_u32(tb[NL80211_FILS_DISCOVERY_ATTR_INT_MAX]);
5048
5049 return 0;
5050}
5051
7443dcd1
AD		 5052static int
5053nl80211_parse_unsol_bcast_probe_resp(struct cfg80211_registered_device *rdev,
5054 struct nlattr *attrs,
5055 struct cfg80211_ap_settings *params)
5056{
5057 struct nlattr *tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX + 1];
5058 int ret;
5059 struct cfg80211_unsol_bcast_probe_resp *presp =
5060 &params->unsol_bcast_probe_resp;
5061
5062 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5063 NL80211_EXT_FEATURE_UNSOL_BCAST_PROBE_RESP))
5064 return -EINVAL;
5065
5066 ret = nla_parse_nested(tb, NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_MAX,
5067 attrs, NULL, NULL);
5068 if (ret)
5069 return ret;
5070
5071 if (!tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT] ||
5072 !tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL])
5073 return -EINVAL;
5074
5075 presp->tmpl = nla_data(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5076 presp->tmpl_len = nla_len(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL]);
5077 presp->interval = nla_get_u32(tb[NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT]);
5078 return 0;
5079}
5080
66cd794e
JB		 5081static void nl80211_check_ap_rate_selectors(struct cfg80211_ap_settings *params,
5082 const u8 *rates)
5083{
5084 int i;
5085
5086 if (!rates)
5087 return;
5088
5089 for (i = 0; i < rates[1]; i++) {
5090 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
5091 params->ht_required = true;
5092 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_VHT_PHY)
5093 params->vht_required = true;
2a392596
IP		 5094 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_HE_PHY)
5095 params->he_required = true;
d6587602
IP		 5096 if (rates[2 + i] == BSS_MEMBERSHIP_SELECTOR_SAE_H2E)
5097 params->sae_h2e_required = true;
66cd794e
JB		 5098 }
5099}
5100
5101/*
5102 * Since the nl80211 API didn't include, from the beginning, attributes about
5103 * HT/VHT requirements/capabilities, we parse them out of the IEs for the
5104 * benefit of drivers that rebuild IEs in the firmware.
5105 */
5106static void nl80211_calculate_ap_params(struct cfg80211_ap_settings *params)
5107{
5108 const struct cfg80211_beacon_data *bcn = &params->beacon;
ba83bfb1
IM		 5109 size_t ies_len = bcn->tail_len;
5110 const u8 *ies = bcn->tail;
66cd794e
JB		 5111 const u8 *rates;
5112 const u8 *cap;
5113
5114 rates = cfg80211_find_ie(WLAN_EID_SUPP_RATES, ies, ies_len);
5115 nl80211_check_ap_rate_selectors(params, rates);
5116
5117 rates = cfg80211_find_ie(WLAN_EID_EXT_SUPP_RATES, ies, ies_len);
5118 nl80211_check_ap_rate_selectors(params, rates);
5119
5120 cap = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, ies, ies_len);
5121 if (cap && cap[1] >= sizeof(*params->ht_cap))
5122 params->ht_cap = (void *)(cap + 2);
5123 cap = cfg80211_find_ie(WLAN_EID_VHT_CAPABILITY, ies, ies_len);
5124 if (cap && cap[1] >= sizeof(*params->vht_cap))
5125 params->vht_cap = (void *)(cap + 2);
244eb9ae
ST		 5126 cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_CAPABILITY, ies, ies_len);
5127 if (cap && cap[1] >= sizeof(*params->he_cap) + 1)
5128 params->he_cap = (void *)(cap + 3);
7e8d6f12
ST		 5129 cap = cfg80211_find_ext_ie(WLAN_EID_EXT_HE_OPERATION, ies, ies_len);
5130 if (cap && cap[1] >= sizeof(*params->he_oper) + 1)
5131 params->he_oper = (void *)(cap + 3);
66cd794e
JB		 5132}
5133
46c1dd0c
FF		 5134static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
5135 struct cfg80211_ap_settings *params)
5136{
5137 struct wireless_dev *wdev;
5138 bool ret = false;
5139
53873f13 5140 list_for_each_entry(wdev, &rdev->wiphy.wdev_list, list) {
46c1dd0c
FF		 5141 if (wdev->iftype != NL80211_IFTYPE_AP &&
5142 wdev->iftype != NL80211_IFTYPE_P2P_GO)
5143 continue;
5144
683b6d3b 5145 if (!wdev->preset_chandef.chan)
46c1dd0c
FF		 5146 continue;
5147
683b6d3b 5148 params->chandef = wdev->preset_chandef;
46c1dd0c
FF		 5149 ret = true;
5150 break;
5151 }
5152
46c1dd0c
FF		 5153 return ret;
5154}
5155
e39e5b5e
JM		 5156static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
5157 enum nl80211_auth_type auth_type,
5158 enum nl80211_commands cmd)
5159{
5160 if (auth_type > NL80211_AUTHTYPE_MAX)
5161 return false;
5162
5163 switch (cmd) {
5164 case NL80211_CMD_AUTHENTICATE:
5165 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
5166 auth_type == NL80211_AUTHTYPE_SAE)
5167 return false;
63181060
JM		 5168 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5169 NL80211_EXT_FEATURE_FILS_STA) &&
5170 (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5171 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5172 auth_type == NL80211_AUTHTYPE_FILS_PK))
5173 return false;
e39e5b5e
JM		 5174 return true;
5175 case NL80211_CMD_CONNECT:
10773a7c 5176 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
26f7044e
CHH		 5177 !wiphy_ext_feature_isset(&rdev->wiphy,
5178 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
10773a7c 5179 auth_type == NL80211_AUTHTYPE_SAE)
a3caf744 5180 return false;
10773a7c 5181
a3caf744
VK		 5182 /* FILS with SK PFS or PK not supported yet */
5183 if (auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5184 auth_type == NL80211_AUTHTYPE_FILS_PK)
5185 return false;
5186 if (!wiphy_ext_feature_isset(
5187 &rdev->wiphy,
5188 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
5189 auth_type == NL80211_AUTHTYPE_FILS_SK)
5190 return false;
5191 return true;
e39e5b5e 5192 case NL80211_CMD_START_AP:
2831a631
CHH		 5193 if (!wiphy_ext_feature_isset(&rdev->wiphy,
5194 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP) &&
5195 auth_type == NL80211_AUTHTYPE_SAE)
e39e5b5e 5196 return false;
63181060
JM		 5197 /* FILS not supported yet */
5198 if (auth_type == NL80211_AUTHTYPE_FILS_SK ||
5199 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
5200 auth_type == NL80211_AUTHTYPE_FILS_PK)
5201 return false;
e39e5b5e
JM		 5202 return true;
5203 default:
5204 return false;
5205 }
5206}
5207
8860020e
JB		 5208static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
5209{
5210 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5211 struct net_device *dev = info->user_ptr[1];
5212 struct wireless_dev *wdev = dev->ieee80211_ptr;
5213 struct cfg80211_ap_settings params;
5214 int err;
5215
5216 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5217 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5218 return -EOPNOTSUPP;
5219
5220 if (!rdev->ops->start_ap)
5221 return -EOPNOTSUPP;
5222
5223 if (wdev->beacon_interval)
5224 return -EALREADY;
5225
5226 memset(&params, 0, sizeof(params));
5227
5228 /* these are required for START_AP */
5229 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
5230 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
5231 !info->attrs[NL80211_ATTR_BEACON_HEAD])
5232 return -EINVAL;
5233
81e54d08 5234 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon);
8860020e
JB		 5235 if (err)
5236 return err;
5237
5238 params.beacon_interval =
5239 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
5240 params.dtim_period =
5241 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
5242
0c317a02
PK		 5243 err = cfg80211_validate_beacon_int(rdev, dev->ieee80211_ptr->iftype,
5244 params.beacon_interval);
8860020e
JB		 5245 if (err)
5246 return err;
5247
5248 /*
5249 * In theory, some of these attributes should be required here
5250 * but since they were not used when the command was originally
5251 * added, keep them optional for old user space programs to let
5252 * them continue to work with drivers that do not need the
5253 * additional information -- drivers must check!
5254 */
5255 if (info->attrs[NL80211_ATTR_SSID]) {
5256 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5257 params.ssid_len =
5258 nla_len(info->attrs[NL80211_ATTR_SSID]);
cb9abd48 5259 if (params.ssid_len == 0)
8860020e
JB		 5260 return -EINVAL;
5261 }
5262
ab0d76f6 5263 if (info->attrs[NL80211_ATTR_HIDDEN_SSID])
8860020e
JB		 5264 params.hidden_ssid = nla_get_u32(
5265 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
8860020e
JB		 5266
5267 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
5268
5269 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
5270 params.auth_type = nla_get_u32(
5271 info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 5272 if (!nl80211_valid_auth_type(rdev, params.auth_type,
5273 NL80211_CMD_START_AP))
8860020e
JB		 5274 return -EINVAL;
5275 } else
5276 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
5277
5278 err = nl80211_crypto_settings(rdev, info, &params.crypto,
5279 NL80211_MAX_NR_CIPHER_SUITES);
5280 if (err)
5281 return err;
5282
1b658f11
VT		 5283 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
5284 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
5285 return -EOPNOTSUPP;
5286 params.inactivity_timeout = nla_get_u16(
5287 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
5288 }
5289
53cabad7
JB		 5290 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
5291 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5292 return -EINVAL;
5293 params.p2p_ctwindow =
5294 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 5295 if (params.p2p_ctwindow != 0 &&
5296 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
5297 return -EINVAL;
5298 }
5299
5300 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
5301 u8 tmp;
5302
5303 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5304 return -EINVAL;
5305 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 5306 params.p2p_opp_ps = tmp;
5307 if (params.p2p_opp_ps != 0 &&
5308 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
5309 return -EINVAL;
5310 }
5311
aa430da4 5312 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 5313 err = nl80211_parse_chandef(rdev, info, &params.chandef);
5314 if (err)
5315 return err;
5316 } else if (wdev->preset_chandef.chan) {
5317 params.chandef = wdev->preset_chandef;
46c1dd0c 5318 } else if (!nl80211_get_ap_channel(rdev, &params))
aa430da4
JB		 5319 return -EINVAL;
5320
923b352f
AN		 5321 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
5322 wdev->iftype))
aa430da4
JB		 5323 return -EINVAL;
5324
a7c7fbff 5325 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 5326 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
5327 NL80211_ATTR_TX_RATES,
eb89a6a6 5328 &params.beacon_rate,
857b34c4 5329 dev, false);
a7c7fbff
PK		 5330 if (err)
5331 return err;
5332
8564e382
JB		 5333 err = validate_beacon_tx_rate(rdev, params.chandef.chan->band,
5334 &params.beacon_rate);
a7c7fbff
PK		 5335 if (err)
5336 return err;
5337 }
5338
18998c38
EP		 5339 if (info->attrs[NL80211_ATTR_SMPS_MODE]) {
5340 params.smps_mode =
5341 nla_get_u8(info->attrs[NL80211_ATTR_SMPS_MODE]);
5342 switch (params.smps_mode) {
5343 case NL80211_SMPS_OFF:
5344 break;
5345 case NL80211_SMPS_STATIC:
5346 if (!(rdev->wiphy.features &
5347 NL80211_FEATURE_STATIC_SMPS))
5348 return -EINVAL;
5349 break;
5350 case NL80211_SMPS_DYNAMIC:
5351 if (!(rdev->wiphy.features &
5352 NL80211_FEATURE_DYNAMIC_SMPS))
5353 return -EINVAL;
5354 break;
5355 default:
5356 return -EINVAL;
5357 }
5358 } else {
5359 params.smps_mode = NL80211_SMPS_OFF;
5360 }
5361
6e8ef842
PK		 5362 params.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
5363 if (params.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ])
5364 return -EOPNOTSUPP;
5365
4baf6bea
OO		 5366 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
5367 params.acl = parse_acl_data(&rdev->wiphy, info);
5368 if (IS_ERR(params.acl))
5369 return PTR_ERR(params.acl);
5370 }
5371
a0de1ca3
JC		 5372 params.twt_responder =
5373 nla_get_flag(info->attrs[NL80211_ATTR_TWT_RESPONDER]);
5374
796e90f4
JC		 5375 if (info->attrs[NL80211_ATTR_HE_OBSS_PD]) {
5376 err = nl80211_parse_he_obss_pd(
5377 info->attrs[NL80211_ATTR_HE_OBSS_PD],
5378 &params.he_obss_pd);
bc7a39b4
LC		 5379 if (err)
5380 goto out;
796e90f4
JC		 5381 }
5382
5c5e52d1
JC		 5383 if (info->attrs[NL80211_ATTR_HE_BSS_COLOR]) {
5384 err = nl80211_parse_he_bss_color(
5385 info->attrs[NL80211_ATTR_HE_BSS_COLOR],
5386 &params.he_bss_color);
5387 if (err)
60a0121f 5388 goto out;
5c5e52d1
JC		 5389 }
5390
291c49de
AD		 5391 if (info->attrs[NL80211_ATTR_FILS_DISCOVERY]) {
5392 err = nl80211_parse_fils_discovery(rdev,
5393 info->attrs[NL80211_ATTR_FILS_DISCOVERY],
5394 &params);
5395 if (err)
5396 goto out;
5397 }
5398
7443dcd1
AD		 5399 if (info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP]) {
5400 err = nl80211_parse_unsol_bcast_probe_resp(
5401 rdev, info->attrs[NL80211_ATTR_UNSOL_BCAST_PROBE_RESP],
5402 &params);
5403 if (err)
959f8f89 5404 goto out;
7443dcd1
AD		 5405 }
5406
66cd794e
JB		 5407 nl80211_calculate_ap_params(&params);
5408
fe494370
SD		 5409 if (info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])
5410 params.flags |= AP_SETTINGS_EXTERNAL_AUTH_SUPPORT;
5411
c56589ed 5412 wdev_lock(wdev);
e35e4d28 5413 err = rdev_start_ap(rdev, dev, &params);
46c1dd0c 5414 if (!err) {
683b6d3b 5415 wdev->preset_chandef = params.chandef;
8860020e 5416 wdev->beacon_interval = params.beacon_interval;
9e0e2961 5417 wdev->chandef = params.chandef;
06e191e2
AQ		 5418 wdev->ssid_len = params.ssid_len;
5419 memcpy(wdev->ssid, params.ssid, wdev->ssid_len);
466a3061
DK		 5420
5421 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
5422 wdev->conn_owner_nlportid = info->snd_portid;
46c1dd0c 5423 }
c56589ed 5424 wdev_unlock(wdev);
77765eaf 5425
9951ebfc 5426out:
77765eaf
VT		 5427 kfree(params.acl);
5428
56d1893d 5429 return err;
ed1b6cc7
JB		 5430}
5431
8860020e
JB		 5432static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
5433{
5434 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5435 struct net_device *dev = info->user_ptr[1];
5436 struct wireless_dev *wdev = dev->ieee80211_ptr;
5437 struct cfg80211_beacon_data params;
5438 int err;
5439
5440 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5441 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5442 return -EOPNOTSUPP;
5443
5444 if (!rdev->ops->change_beacon)
5445 return -EOPNOTSUPP;
5446
5447 if (!wdev->beacon_interval)
5448 return -EINVAL;
5449
81e54d08 5450 err = nl80211_parse_beacon(rdev, info->attrs, &params);
8860020e
JB		 5451 if (err)
5452 return err;
5453
c56589ed
SW		 5454 wdev_lock(wdev);
5455 err = rdev_change_beacon(rdev, dev, &params);
5456 wdev_unlock(wdev);
5457
5458 return err;
8860020e
JB		 5459}
5460
5461static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 5462{
4c476991
JB		 5463 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5464 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 5465
7c8d5e03 5466 return cfg80211_stop_ap(rdev, dev, false);
ed1b6cc7
JB		 5467}
5468
5727ef1b
JB		 5469static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
5470 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
5471 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
5472 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 5473 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 5474 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 5475 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 5476};
5477
eccb8e8f 5478static int parse_station_flags(struct genl_info *info,
bdd3ae3d 5479 enum nl80211_iftype iftype,
eccb8e8f 5480 struct station_parameters *params)
5727ef1b
JB		 5481{
5482 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 5483 struct nlattr *nla;
5727ef1b
JB		 5484 int flag;
5485
eccb8e8f
JB		 5486 /*
5487 * Try parsing the new attribute first so userspace
5488 * can specify both for older kernels.
5489 */
5490 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
5491 if (nla) {
5492 struct nl80211_sta_flag_update *sta_flags;
5493
5494 sta_flags = nla_data(nla);
5495 params->sta_flags_mask = sta_flags->mask;
5496 params->sta_flags_set = sta_flags->set;
77ee7c89 5497 params->sta_flags_set &= params->sta_flags_mask;
eccb8e8f
JB		 5498 if ((params->sta_flags_mask |
5499 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
5500 return -EINVAL;
5501 return 0;
5502 }
5503
5504 /* if present, parse the old attribute */
5727ef1b 5505
eccb8e8f 5506 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 5507 if (!nla)
5508 return 0;
5509
8cb08174 5510 if (nla_parse_nested_deprecated(flags, NL80211_STA_FLAG_MAX, nla, sta_flags_policy, info->extack))
5727ef1b
JB		 5511 return -EINVAL;
5512
bdd3ae3d
JB		 5513 /*
5514 * Only allow certain flags for interface types so that
5515 * other attributes are silently ignored. Remember that
5516 * this is backward compatibility code with old userspace
5517 * and shouldn't be hit in other cases anyway.
5518 */
5519 switch (iftype) {
5520 case NL80211_IFTYPE_AP:
5521 case NL80211_IFTYPE_AP_VLAN:
5522 case NL80211_IFTYPE_P2P_GO:
5523 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
5524 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
5525 BIT(NL80211_STA_FLAG_WME) |
5526 BIT(NL80211_STA_FLAG_MFP);
5527 break;
5528 case NL80211_IFTYPE_P2P_CLIENT:
5529 case NL80211_IFTYPE_STATION:
5530 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
5531 BIT(NL80211_STA_FLAG_TDLS_PEER);
5532 break;
5533 case NL80211_IFTYPE_MESH_POINT:
5534 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
5535 BIT(NL80211_STA_FLAG_MFP) |
5536 BIT(NL80211_STA_FLAG_AUTHORIZED);
5cf3006c 5537 break;
bdd3ae3d
JB		 5538 default:
5539 return -EINVAL;
5540 }
5727ef1b 5541
3383b5a6
JB		 5542 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
5543 if (flags[flag]) {
eccb8e8f 5544 params->sta_flags_set |= (1<<flag);
5727ef1b 5545
3383b5a6
JB		 5546 /* no longer support new API additions in old API */
5547 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
5548 return -EINVAL;
5549 }
5550 }
5551
5727ef1b
JB		 5552 return 0;
5553}
5554
9bb7e0f2 5555bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info, int attr)
c8dcfd8a
FF		 5556{
5557 struct nlattr *rate;
8eb41c8d
VK		 5558 u32 bitrate;
5559 u16 bitrate_compat;
bbf67e45 5560 enum nl80211_rate_info rate_flg;
c8dcfd8a 5561
ae0be8de 5562 rate = nla_nest_start_noflag(msg, attr);
c8dcfd8a 5563 if (!rate)
db9c64cf 5564 return false;
c8dcfd8a
FF		 5565
5566 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
5567 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 5568 /* report 16-bit bitrate only if we can */
5569 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
db9c64cf
JB		 5570 if (bitrate > 0 &&
5571 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
5572 return false;
5573 if (bitrate_compat > 0 &&
5574 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
5575 return false;
5576
b51f3bee
JB		 5577 switch (info->bw) {
5578 case RATE_INFO_BW_5:
5579 rate_flg = NL80211_RATE_INFO_5_MHZ_WIDTH;
5580 break;
5581 case RATE_INFO_BW_10:
5582 rate_flg = NL80211_RATE_INFO_10_MHZ_WIDTH;
5583 break;
5584 default:
5585 WARN_ON(1);
7b506ff6 5586 fallthrough;
b51f3bee
JB		 5587 case RATE_INFO_BW_20:
5588 rate_flg = 0;
5589 break;
5590 case RATE_INFO_BW_40:
5591 rate_flg = NL80211_RATE_INFO_40_MHZ_WIDTH;
5592 break;
5593 case RATE_INFO_BW_80:
5594 rate_flg = NL80211_RATE_INFO_80_MHZ_WIDTH;
5595 break;
5596 case RATE_INFO_BW_160:
5597 rate_flg = NL80211_RATE_INFO_160_MHZ_WIDTH;
5598 break;
c4cbaf79
LC		 5599 case RATE_INFO_BW_HE_RU:
5600 rate_flg = 0;
5601 WARN_ON(!(info->flags & RATE_INFO_FLAGS_HE_MCS));
b51f3bee
JB		 5602 }
5603
5604 if (rate_flg && nla_put_flag(msg, rate_flg))
5605 return false;
5606
db9c64cf
JB		 5607 if (info->flags & RATE_INFO_FLAGS_MCS) {
5608 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
5609 return false;
db9c64cf
JB		 5610 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
5611 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
5612 return false;
5613 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
5614 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
5615 return false;
5616 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
5617 return false;
db9c64cf
JB		 5618 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
5619 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
5620 return false;
c4cbaf79
LC		 5621 } else if (info->flags & RATE_INFO_FLAGS_HE_MCS) {
5622 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_MCS, info->mcs))
5623 return false;
5624 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_NSS, info->nss))
5625 return false;
5626 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_GI, info->he_gi))
5627 return false;
5628 if (nla_put_u8(msg, NL80211_RATE_INFO_HE_DCM, info->he_dcm))
5629 return false;
5630 if (info->bw == RATE_INFO_BW_HE_RU &&
5631 nla_put_u8(msg, NL80211_RATE_INFO_HE_RU_ALLOC,
5632 info->he_ru_alloc))
5633 return false;
db9c64cf 5634 }
c8dcfd8a
FF		 5635
5636 nla_nest_end(msg, rate);
5637 return true;
c8dcfd8a
FF		 5638}
5639
119363c7
FF		 5640static bool nl80211_put_signal(struct sk_buff *msg, u8 mask, s8 *signal,
5641 int id)
5642{
5643 void *attr;
5644 int i = 0;
5645
5646 if (!mask)
5647 return true;
5648
ae0be8de 5649 attr = nla_nest_start_noflag(msg, id);
119363c7
FF		 5650 if (!attr)
5651 return false;
5652
5653 for (i = 0; i < IEEE80211_MAX_CHAINS; i++) {
5654 if (!(mask & BIT(i)))
5655 continue;
5656
5657 if (nla_put_u8(msg, i, signal[i]))
5658 return false;
5659 }
5660
5661 nla_nest_end(msg, attr);
5662
5663 return true;
5664}
5665
cf5ead82
JB		 5666static int nl80211_send_station(struct sk_buff *msg, u32 cmd, u32 portid,
5667 u32 seq, int flags,
66266b3a
JL		 5668 struct cfg80211_registered_device *rdev,
5669 struct net_device *dev,
98b62183 5670 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 5671{
5672 void *hdr;
f4263c98 5673 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 5674
cf5ead82 5675 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
f77bf486
AS		 5676 if (!hdr) {
5677 cfg80211_sinfo_release_content(sinfo);
fd5b74dc 5678 return -1;
f77bf486 5679 }
fd5b74dc 5680
9360ffd1
DM		 5681 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
5682 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
5683 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
5684 goto nla_put_failure;
f5ea9120 5685
ae0be8de 5686 sinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_STA_INFO);
2ec600d6 5687 if (!sinfoattr)
fd5b74dc 5688 goto nla_put_failure;
319090bf
JB		 5689
5690#define PUT_SINFO(attr, memb, type) do { \
d686b920 5691 BUILD_BUG_ON(sizeof(type) == sizeof(u64)); \
397c657a 5692 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
319090bf
JB		 5693 nla_put_ ## type(msg, NL80211_STA_INFO_ ## attr, \
5694 sinfo->memb)) \
5695 goto nla_put_failure; \
5696 } while (0)
d686b920 5697#define PUT_SINFO_U64(attr, memb) do { \
397c657a 5698 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_ ## attr) && \
d686b920
JB		 5699 nla_put_u64_64bit(msg, NL80211_STA_INFO_ ## attr, \
5700 sinfo->memb, NL80211_STA_INFO_PAD)) \
5701 goto nla_put_failure; \
5702 } while (0)
319090bf
JB		 5703
5704 PUT_SINFO(CONNECTED_TIME, connected_time, u32);
5705 PUT_SINFO(INACTIVE_TIME, inactive_time, u32);
6c7a0033 5706 PUT_SINFO_U64(ASSOC_AT_BOOTTIME, assoc_at);
319090bf 5707
397c657a
OE		 5708 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_RX_BYTES) |
5709 BIT_ULL(NL80211_STA_INFO_RX_BYTES64)) &&
9360ffd1 5710 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
42745e03 5711 (u32)sinfo->rx_bytes))
9360ffd1 5712 goto nla_put_failure;
319090bf 5713
397c657a
OE		 5714 if (sinfo->filled & (BIT_ULL(NL80211_STA_INFO_TX_BYTES) |
5715 BIT_ULL(NL80211_STA_INFO_TX_BYTES64)) &&
9360ffd1 5716 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
42745e03
VK		 5717 (u32)sinfo->tx_bytes))
5718 goto nla_put_failure;
319090bf 5719
d686b920
JB		 5720 PUT_SINFO_U64(RX_BYTES64, rx_bytes);
5721 PUT_SINFO_U64(TX_BYTES64, tx_bytes);
319090bf
JB		 5722 PUT_SINFO(LLID, llid, u16);
5723 PUT_SINFO(PLID, plid, u16);
5724 PUT_SINFO(PLINK_STATE, plink_state, u8);
d686b920 5725 PUT_SINFO_U64(RX_DURATION, rx_duration);
36647055
THJ		 5726 PUT_SINFO_U64(TX_DURATION, tx_duration);
5727
5728 if (wiphy_ext_feature_isset(&rdev->wiphy,
5729 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
5730 PUT_SINFO(AIRTIME_WEIGHT, airtime_weight, u16);
319090bf 5731
66266b3a
JL		 5732 switch (rdev->wiphy.signal_type) {
5733 case CFG80211_SIGNAL_TYPE_MBM:
319090bf
JB		 5734 PUT_SINFO(SIGNAL, signal, u8);
5735 PUT_SINFO(SIGNAL_AVG, signal_avg, u8);
66266b3a
JL		 5736 break;
5737 default:
5738 break;
5739 }
397c657a 5740 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL)) {
119363c7
FF		 5741 if (!nl80211_put_signal(msg, sinfo->chains,
5742 sinfo->chain_signal,
5743 NL80211_STA_INFO_CHAIN_SIGNAL))
5744 goto nla_put_failure;
5745 }
397c657a 5746 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)) {
119363c7
FF		 5747 if (!nl80211_put_signal(msg, sinfo->chains,
5748 sinfo->chain_signal_avg,
5749 NL80211_STA_INFO_CHAIN_SIGNAL_AVG))
5750 goto nla_put_failure;
5751 }
397c657a 5752 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_TX_BITRATE)) {
c8dcfd8a
FF		 5753 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
5754 NL80211_STA_INFO_TX_BITRATE))
5755 goto nla_put_failure;
5756 }
397c657a 5757 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_RX_BITRATE)) {
c8dcfd8a
FF		 5758 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
5759 NL80211_STA_INFO_RX_BITRATE))
420e7fab 5760 goto nla_put_failure;
420e7fab 5761 }
319090bf
JB		 5762
5763 PUT_SINFO(RX_PACKETS, rx_packets, u32);
5764 PUT_SINFO(TX_PACKETS, tx_packets, u32);
5765 PUT_SINFO(TX_RETRIES, tx_retries, u32);
5766 PUT_SINFO(TX_FAILED, tx_failed, u32);
5767 PUT_SINFO(EXPECTED_THROUGHPUT, expected_throughput, u32);
ab60633c 5768 PUT_SINFO(AIRTIME_LINK_METRIC, airtime_link_metric, u32);
319090bf
JB		 5769 PUT_SINFO(BEACON_LOSS, beacon_loss_count, u32);
5770 PUT_SINFO(LOCAL_PM, local_pm, u32);
5771 PUT_SINFO(PEER_PM, peer_pm, u32);
5772 PUT_SINFO(NONPEER_PM, nonpeer_pm, u32);
dbdaee7a 5773 PUT_SINFO(CONNECTED_TO_GATE, connected_to_gate, u8);
1303a51c 5774 PUT_SINFO(CONNECTED_TO_AS, connected_to_as, u8);
319090bf 5775
397c657a 5776 if (sinfo->filled & BIT_ULL(NL80211_STA_INFO_BSS_PARAM)) {
ae0be8de
MK		 5777 bss_param = nla_nest_start_noflag(msg,
5778 NL80211_STA_INFO_BSS_PARAM);
f4263c98
PS		 5779 if (!bss_param)
5780 goto nla_put_failure;
5781
9360ffd1
DM		 5782 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
5783 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
5784 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
5785 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
5786 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
5787 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
5788 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
5789 sinfo->bss_param.dtim_period) ||
5790 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
5791 sinfo->bss_param.beacon_interval))
5792 goto nla_put_failure;
f4263c98
PS		 5793
5794 nla_nest_end(msg, bss_param);
5795 }
397c657a 5796 if ((sinfo->filled & BIT_ULL(NL80211_STA_INFO_STA_FLAGS)) &&
9360ffd1
DM		 5797 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
5798 sizeof(struct nl80211_sta_flag_update),
5799 &sinfo->sta_flags))
5800 goto nla_put_failure;
319090bf 5801
d686b920
JB		 5802 PUT_SINFO_U64(T_OFFSET, t_offset);
5803 PUT_SINFO_U64(RX_DROP_MISC, rx_dropped_misc);
5804 PUT_SINFO_U64(BEACON_RX, rx_beacon);
a76b1942 5805 PUT_SINFO(BEACON_SIGNAL_AVG, rx_beacon_signal_avg, u8);
0d4e14a3
AB		 5806 PUT_SINFO(RX_MPDUS, rx_mpdu_count, u32);
5807 PUT_SINFO(FCS_ERROR_COUNT, fcs_err_count, u32);
81d5439d 5808 if (wiphy_ext_feature_isset(&rdev->wiphy,
9c06602b
BP		 5809 NL80211_EXT_FEATURE_ACK_SIGNAL_SUPPORT)) {
5810 PUT_SINFO(ACK_SIGNAL, ack_signal, u8);
5811 PUT_SINFO(ACK_SIGNAL_AVG, avg_ack_signal, s8);
5812 }
319090bf
JB		 5813
5814#undef PUT_SINFO
d686b920 5815#undef PUT_SINFO_U64
6de39808 5816
8689c051 5817 if (sinfo->pertid) {
6de39808
JB		 5818 struct nlattr *tidsattr;
5819 int tid;
5820
ae0be8de
MK		 5821 tidsattr = nla_nest_start_noflag(msg,
5822 NL80211_STA_INFO_TID_STATS);
6de39808
JB		 5823 if (!tidsattr)
5824 goto nla_put_failure;
5825
5826 for (tid = 0; tid < IEEE80211_NUM_TIDS + 1; tid++) {
5827 struct cfg80211_tid_stats *tidstats;
5828 struct nlattr *tidattr;
5829
5830 tidstats = &sinfo->pertid[tid];
5831
5832 if (!tidstats->filled)
5833 continue;
5834
ae0be8de 5835 tidattr = nla_nest_start_noflag(msg, tid + 1);
6de39808
JB		 5836 if (!tidattr)
5837 goto nla_put_failure;
5838
d686b920 5839#define PUT_TIDVAL_U64(attr, memb) do { \
6de39808 5840 if (tidstats->filled & BIT(NL80211_TID_STATS_ ## attr) && \
d686b920
JB		 5841 nla_put_u64_64bit(msg, NL80211_TID_STATS_ ## attr, \
5842 tidstats->memb, NL80211_TID_STATS_PAD)) \
6de39808
JB		 5843 goto nla_put_failure; \
5844 } while (0)
5845
d686b920
JB		 5846 PUT_TIDVAL_U64(RX_MSDU, rx_msdu);
5847 PUT_TIDVAL_U64(TX_MSDU, tx_msdu);
5848 PUT_TIDVAL_U64(TX_MSDU_RETRIES, tx_msdu_retries);
5849 PUT_TIDVAL_U64(TX_MSDU_FAILED, tx_msdu_failed);
6de39808 5850
d686b920 5851#undef PUT_TIDVAL_U64
52539ca8
THJ		 5852 if ((tidstats->filled &
5853 BIT(NL80211_TID_STATS_TXQ_STATS)) &&
5854 !nl80211_put_txq_stats(msg, &tidstats->txq_stats,
5855 NL80211_TID_STATS_TXQ_STATS))
5856 goto nla_put_failure;
5857
6de39808
JB		 5858 nla_nest_end(msg, tidattr);
5859 }
5860
5861 nla_nest_end(msg, tidsattr);
5862 }
5863
2ec600d6 5864 nla_nest_end(msg, sinfoattr);
fd5b74dc 5865
319090bf 5866 if (sinfo->assoc_req_ies_len &&
9360ffd1
DM		 5867 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
5868 sinfo->assoc_req_ies))
5869 goto nla_put_failure;
50d3dfb7 5870
7ea3e110 5871 cfg80211_sinfo_release_content(sinfo);
053c095a
JB		 5872 genlmsg_end(msg, hdr);
5873 return 0;
fd5b74dc
JB		 5874
5875 nla_put_failure:
7ea3e110 5876 cfg80211_sinfo_release_content(sinfo);
bc3ed28c
TG		 5877 genlmsg_cancel(msg, hdr);
5878 return -EMSGSIZE;
fd5b74dc
JB		 5879}
5880
2ec600d6 5881static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 5882 struct netlink_callback *cb)
2ec600d6 5883{
73887fd9 5884 struct station_info sinfo;
1b8ec87a 5885 struct cfg80211_registered_device *rdev;
97990a06 5886 struct wireless_dev *wdev;
2ec600d6 5887 u8 mac_addr[ETH_ALEN];
97990a06 5888 int sta_idx = cb->args[2];
2ec600d6 5889 int err;
2ec600d6 5890
ea90e0dc 5891 rtnl_lock();
5297c65c 5892 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 5893 if (err)
ea90e0dc 5894 goto out_err;
bba95fef 5895
97990a06
JB		 5896 if (!wdev->netdev) {
5897 err = -EINVAL;
5898 goto out_err;
5899 }
5900
1b8ec87a 5901 if (!rdev->ops->dump_station) {
eec60b03 5902 err = -EOPNOTSUPP;
bba95fef
JB		 5903 goto out_err;
5904 }
5905
bba95fef 5906 while (1) {
73887fd9 5907 memset(&sinfo, 0, sizeof(sinfo));
1b8ec87a 5908 err = rdev_dump_station(rdev, wdev->netdev, sta_idx,
73887fd9 5909 mac_addr, &sinfo);
bba95fef
JB		 5910 if (err == -ENOENT)
5911 break;
5912 if (err)
3b85875a 5913 goto out_err;
bba95fef 5914
cf5ead82 5915 if (nl80211_send_station(skb, NL80211_CMD_NEW_STATION,
15e47304 5916 NETLINK_CB(cb->skb).portid,
bba95fef 5917 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1b8ec87a 5918 rdev, wdev->netdev, mac_addr,
73887fd9 5919 &sinfo) < 0)
bba95fef
JB		 5920 goto out;
5921
5922 sta_idx++;
5923 }
5924
bba95fef 5925 out:
97990a06 5926 cb->args[2] = sta_idx;
bba95fef 5927 err = skb->len;
bba95fef 5928 out_err:
ea90e0dc 5929 rtnl_unlock();
bba95fef
JB		 5930
5931 return err;
2ec600d6 5932}
fd5b74dc 5933
5727ef1b
JB		 5934static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
5935{
4c476991
JB		 5936 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5937 struct net_device *dev = info->user_ptr[1];
73887fd9 5938 struct station_info sinfo;
fd5b74dc
JB		 5939 struct sk_buff *msg;
5940 u8 *mac_addr = NULL;
4c476991 5941 int err;
fd5b74dc 5942
73887fd9 5943 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc 5944
73887fd9
JB		 5945 if (!info->attrs[NL80211_ATTR_MAC])
5946 return -EINVAL;
fd5b74dc
JB		 5947
5948 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
5949
73887fd9
JB		 5950 if (!rdev->ops->get_station)
5951 return -EOPNOTSUPP;
3b85875a 5952
73887fd9 5953 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 5954 if (err)
73887fd9 5955 return err;
2ec600d6 5956
fd2120ca 5957 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7ea3e110 5958 if (!msg) {
ba8f566a 5959 cfg80211_sinfo_release_content(&sinfo);
73887fd9 5960 return -ENOMEM;
7ea3e110 5961 }
fd5b74dc 5962
cf5ead82
JB		 5963 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION,
5964 info->snd_portid, info->snd_seq, 0,
73887fd9 5965 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991 5966 nlmsg_free(msg);
73887fd9 5967 return -ENOBUFS;
4c476991 5968 }
3b85875a 5969
73887fd9 5970 return genlmsg_reply(msg, info);
5727ef1b
JB		 5971}
5972
77ee7c89
JB		 5973int cfg80211_check_station_change(struct wiphy *wiphy,
5974 struct station_parameters *params,
5975 enum cfg80211_station_type statype)
5976{
e4208427
AB		 5977 if (params->listen_interval != -1 &&
5978 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89 5979 return -EINVAL;
e4208427 5980
17b94247
AB		 5981 if (params->support_p2p_ps != -1 &&
5982 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
5983 return -EINVAL;
5984
c72e1140 5985 if (params->aid &&
e4208427
AB		 5986 !(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) &&
5987 statype != CFG80211_STA_AP_CLIENT_UNASSOC)
77ee7c89
JB		 5988 return -EINVAL;
5989
5990 /* When you run into this, adjust the code below for the new flag */
5991 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
5992
5993 switch (statype) {
eef941e6
TP		 5994 case CFG80211_STA_MESH_PEER_KERNEL:
5995 case CFG80211_STA_MESH_PEER_USER:
77ee7c89
JB		 5996 /*
5997 * No ignoring the TDLS flag here -- the userspace mesh
5998 * code doesn't have the bug of including TDLS in the
5999 * mask everywhere.
6000 */
6001 if (params->sta_flags_mask &
6002 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6003 BIT(NL80211_STA_FLAG_MFP) |
6004 BIT(NL80211_STA_FLAG_AUTHORIZED)))
6005 return -EINVAL;
6006 break;
6007 case CFG80211_STA_TDLS_PEER_SETUP:
6008 case CFG80211_STA_TDLS_PEER_ACTIVE:
6009 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6010 return -EINVAL;
6011 /* ignore since it can't change */
6012 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6013 break;
6014 default:
6015 /* disallow mesh-specific things */
6016 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
6017 return -EINVAL;
6018 if (params->local_pm)
6019 return -EINVAL;
6020 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6021 return -EINVAL;
6022 }
6023
6024 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6025 statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
6026 /* TDLS can't be set, ... */
6027 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
6028 return -EINVAL;
6029 /*
6030 * ... but don't bother the driver with it. This works around
6031 * a hostapd/wpa_supplicant issue -- it always includes the
6032 * TLDS_PEER flag in the mask even for AP mode.
6033 */
6034 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
6035 }
6036
47edb11b
AB		 6037 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
6038 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6039 /* reject other things that can't change */
6040 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
6041 return -EINVAL;
6042 if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
6043 return -EINVAL;
6044 if (params->supported_rates)
6045 return -EINVAL;
c4cbaf79
LC		 6046 if (params->ext_capab || params->ht_capa || params->vht_capa ||
6047 params->he_capa)
77ee7c89
JB		 6048 return -EINVAL;
6049 }
6050
47edb11b
AB		 6051 if (statype != CFG80211_STA_AP_CLIENT &&
6052 statype != CFG80211_STA_AP_CLIENT_UNASSOC) {
77ee7c89
JB		 6053 if (params->vlan)
6054 return -EINVAL;
6055 }
6056
6057 switch (statype) {
6058 case CFG80211_STA_AP_MLME_CLIENT:
6059 /* Use this only for authorizing/unauthorizing a station */
6060 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
6061 return -EOPNOTSUPP;
6062 break;
6063 case CFG80211_STA_AP_CLIENT:
47edb11b 6064 case CFG80211_STA_AP_CLIENT_UNASSOC:
77ee7c89
JB		 6065 /* accept only the listed bits */
6066 if (params->sta_flags_mask &
6067 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6068 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6069 BIT(NL80211_STA_FLAG_ASSOCIATED) |
6070 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
6071 BIT(NL80211_STA_FLAG_WME) |
6072 BIT(NL80211_STA_FLAG_MFP)))
6073 return -EINVAL;
6074
6075 /* but authenticated/associated only if driver handles it */
6076 if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
6077 params->sta_flags_mask &
6078 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6079 BIT(NL80211_STA_FLAG_ASSOCIATED)))
6080 return -EINVAL;
6081 break;
6082 case CFG80211_STA_IBSS:
6083 case CFG80211_STA_AP_STA:
6084 /* reject any changes other than AUTHORIZED */
6085 if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
6086 return -EINVAL;
6087 break;
6088 case CFG80211_STA_TDLS_PEER_SETUP:
6089 /* reject any changes other than AUTHORIZED or WME */
6090 if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
6091 BIT(NL80211_STA_FLAG_WME)))
6092 return -EINVAL;
6093 /* force (at least) rates when authorizing */
6094 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
6095 !params->supported_rates)
6096 return -EINVAL;
6097 break;
6098 case CFG80211_STA_TDLS_PEER_ACTIVE:
6099 /* reject any changes */
6100 return -EINVAL;
eef941e6 6101 case CFG80211_STA_MESH_PEER_KERNEL:
77ee7c89
JB		 6102 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
6103 return -EINVAL;
6104 break;
eef941e6 6105 case CFG80211_STA_MESH_PEER_USER:
42925040
CYY		 6106 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION &&
6107 params->plink_action != NL80211_PLINK_ACTION_BLOCK)
77ee7c89
JB		 6108 return -EINVAL;
6109 break;
6110 }
6111
06f7c88c
BL		 6112 /*
6113 * Older kernel versions ignored this attribute entirely, so don't
6114 * reject attempts to update it but mark it as unused instead so the
6115 * driver won't look at the data.
6116 */
6117 if (statype != CFG80211_STA_AP_CLIENT_UNASSOC &&
6118 statype != CFG80211_STA_TDLS_PEER_SETUP)
6119 params->opmode_notif_used = false;
6120
77ee7c89
JB		 6121 return 0;
6122}
6123EXPORT_SYMBOL(cfg80211_check_station_change);
6124
5727ef1b 6125/*
c258d2de 6126 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 6127 */
80b99899
JB		 6128static struct net_device *get_vlan(struct genl_info *info,
6129 struct cfg80211_registered_device *rdev)
5727ef1b 6130{
463d0183 6131 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 6132 struct net_device *v;
6133 int ret;
6134
6135 if (!vlanattr)
6136 return NULL;
6137
6138 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
6139 if (!v)
6140 return ERR_PTR(-ENODEV);
6141
6142 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
6143 ret = -EINVAL;
6144 goto error;
5727ef1b 6145 }
80b99899 6146
77ee7c89
JB		 6147 if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
6148 v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
6149 v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
6150 ret = -EINVAL;
6151 goto error;
6152 }
6153
80b99899
JB		 6154 if (!netif_running(v)) {
6155 ret = -ENETDOWN;
6156 goto error;
6157 }
6158
6159 return v;
6160 error:
6161 dev_put(v);
6162 return ERR_PTR(ret);
5727ef1b
JB		 6163}
6164
94e860f1
JB		 6165static const struct nla_policy
6166nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] = {
df881293
JM		 6167 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
6168 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
6169};
6170
ff276691
JB		 6171static int nl80211_parse_sta_wme(struct genl_info *info,
6172 struct station_parameters *params)
df881293 6173{
df881293
JM		 6174 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
6175 struct nlattr *nla;
6176 int err;
6177
df881293
JM		 6178 /* parse WME attributes if present */
6179 if (!info->attrs[NL80211_ATTR_STA_WME])
6180 return 0;
6181
6182 nla = info->attrs[NL80211_ATTR_STA_WME];
8cb08174
JB		 6183 err = nla_parse_nested_deprecated(tb, NL80211_STA_WME_MAX, nla,
6184 nl80211_sta_wme_policy,
6185 info->extack);
df881293
JM		 6186 if (err)
6187 return err;
6188
6189 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
6190 params->uapsd_queues = nla_get_u8(
6191 tb[NL80211_STA_WME_UAPSD_QUEUES]);
6192 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
6193 return -EINVAL;
6194
6195 if (tb[NL80211_STA_WME_MAX_SP])
6196 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
6197
6198 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
6199 return -EINVAL;
6200
6201 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
6202
6203 return 0;
6204}
6205
c01fc9ad
SD		 6206static int nl80211_parse_sta_channel_info(struct genl_info *info,
6207 struct station_parameters *params)
6208{
6209 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]) {
6210 params->supported_channels =
6211 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6212 params->supported_channels_len =
6213 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
6214 /*
6215 * Need to include at least one (first channel, number of
cb9abd48
JB		 6216 * channels) tuple for each subband (checked in policy),
6217 * and must have proper tuples for the rest of the data as well.
c01fc9ad 6218 */
c01fc9ad
SD		 6219 if (params->supported_channels_len % 2)
6220 return -EINVAL;
6221 }
6222
6223 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]) {
6224 params->supported_oper_classes =
6225 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
6226 params->supported_oper_classes_len =
6227 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
c01fc9ad
SD		 6228 }
6229 return 0;
6230}
6231
ff276691
JB		 6232static int nl80211_set_station_tdls(struct genl_info *info,
6233 struct station_parameters *params)
6234{
c01fc9ad 6235 int err;
ff276691 6236 /* Dummy STA entry gets updated once the peer capabilities are known */
5e4b6f56
JM		 6237 if (info->attrs[NL80211_ATTR_PEER_AID])
6238 params->aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
ff276691
JB		 6239 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
6240 params->ht_capa =
6241 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
6242 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
6243 params->vht_capa =
6244 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
c4cbaf79
LC		 6245 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
6246 params->he_capa =
6247 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6248 params->he_capa_len =
6249 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
c4cbaf79 6250 }
ff276691 6251
c01fc9ad
SD		 6252 err = nl80211_parse_sta_channel_info(info, params);
6253 if (err)
6254 return err;
6255
ff276691
JB		 6256 return nl80211_parse_sta_wme(info, params);
6257}
6258
e96d1cd2
ARN		 6259static int nl80211_parse_sta_txpower_setting(struct genl_info *info,
6260 struct station_parameters *params)
6261{
6262 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6263 int idx;
6264
6265 if (info->attrs[NL80211_ATTR_STA_TX_POWER_SETTING]) {
6266 if (!rdev->ops->set_tx_power ||
6267 !wiphy_ext_feature_isset(&rdev->wiphy,
6268 NL80211_EXT_FEATURE_STA_TX_PWR))
6269 return -EOPNOTSUPP;
6270
6271 idx = NL80211_ATTR_STA_TX_POWER_SETTING;
6272 params->txpwr.type = nla_get_u8(info->attrs[idx]);
6273
6274 if (params->txpwr.type == NL80211_TX_POWER_LIMITED) {
6275 idx = NL80211_ATTR_STA_TX_POWER;
6276
6277 if (info->attrs[idx])
6278 params->txpwr.power =
6279 nla_get_s16(info->attrs[idx]);
6280 else
6281 return -EINVAL;
6282 }
6283 params->sta_modify_mask |= STATION_PARAM_APPLY_STA_TXPOWER;
6284 }
6285
6286 return 0;
6287}
6288
5727ef1b
JB		 6289static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
6290{
4c476991 6291 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 6292 struct net_device *dev = info->user_ptr[1];
5727ef1b 6293 struct station_parameters params;
77ee7c89
JB		 6294 u8 *mac_addr;
6295 int err;
5727ef1b
JB		 6296
6297 memset(&params, 0, sizeof(params));
6298
77ee7c89
JB		 6299 if (!rdev->ops->change_station)
6300 return -EOPNOTSUPP;
6301
e4208427
AB		 6302 /*
6303 * AID and listen_interval properties can be set only for unassociated
6304 * station. Include these parameters here and will check them in
6305 * cfg80211_check_station_change().
6306 */
a9bc31e4
AB		 6307 if (info->attrs[NL80211_ATTR_STA_AID])
6308 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
e4208427 6309
14f34e36
GG		 6310 if (info->attrs[NL80211_ATTR_VLAN_ID])
6311 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6312
e4208427
AB		 6313 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6314 params.listen_interval =
6315 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
6316 else
6317 params.listen_interval = -1;
5727ef1b 6318
ab0d76f6
JB		 6319 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS])
6320 params.support_p2p_ps =
6321 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
6322 else
17b94247 6323 params.support_p2p_ps = -1;
17b94247 6324
5727ef1b
JB		 6325 if (!info->attrs[NL80211_ATTR_MAC])
6326 return -EINVAL;
6327
6328 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6329
6330 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
6331 params.supported_rates =
6332 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6333 params.supported_rates_len =
6334 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6335 }
6336
9d62a986
JM		 6337 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
6338 params.capability =
6339 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
6340 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
6341 }
6342
6343 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
6344 params.ext_capab =
6345 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6346 params.ext_capab_len =
6347 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6348 }
6349
bdd3ae3d 6350 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 6351 return -EINVAL;
6352
ab0d76f6 6353 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2ec600d6 6354 params.plink_action =
f8bacc21 6355 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2ec600d6 6356
f8bacc21 6357 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
9c3990aa 6358 params.plink_state =
f8bacc21 6359 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
ab0d76f6 6360 if (info->attrs[NL80211_ATTR_MESH_PEER_AID])
7d27a0ba
MH		 6361 params.peer_aid = nla_get_u16(
6362 info->attrs[NL80211_ATTR_MESH_PEER_AID]);
f8bacc21
JB		 6363 params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
6364 }
9c3990aa 6365
ab0d76f6
JB		 6366 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE])
6367 params.local_pm = nla_get_u32(
3b1c5a53
MP		 6368 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
6369
06f7c88c
BL		 6370 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
6371 params.opmode_notif_used = true;
6372 params.opmode_notif =
6373 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6374 }
6375
43e64bf3
RM		 6376 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
6377 params.he_6ghz_capa =
fce2ff72 6378 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
43e64bf3 6379
36647055
THJ		 6380 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6381 params.airtime_weight =
6382 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6383
6384 if (params.airtime_weight &&
6385 !wiphy_ext_feature_isset(&rdev->wiphy,
6386 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6387 return -EOPNOTSUPP;
6388
e96d1cd2
ARN		 6389 err = nl80211_parse_sta_txpower_setting(info, &params);
6390 if (err)
6391 return err;
6392
77ee7c89
JB		 6393 /* Include parameters for TDLS peer (will check later) */
6394 err = nl80211_set_station_tdls(info, &params);
6395 if (err)
6396 return err;
6397
6398 params.vlan = get_vlan(info, rdev);
6399 if (IS_ERR(params.vlan))
6400 return PTR_ERR(params.vlan);
6401
a97f4424
JB		 6402 switch (dev->ieee80211_ptr->iftype) {
6403 case NL80211_IFTYPE_AP:
6404 case NL80211_IFTYPE_AP_VLAN:
074ac8df 6405 case NL80211_IFTYPE_P2P_GO:
074ac8df 6406 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 6407 case NL80211_IFTYPE_STATION:
267335d6 6408 case NL80211_IFTYPE_ADHOC:
a97f4424 6409 case NL80211_IFTYPE_MESH_POINT:
a97f4424
JB		 6410 break;
6411 default:
77ee7c89
JB		 6412 err = -EOPNOTSUPP;
6413 goto out_put_vlan;
034d655e
JB		 6414 }
6415
77ee7c89 6416 /* driver will call cfg80211_check_station_change() */
e35e4d28 6417 err = rdev_change_station(rdev, dev, mac_addr, &params);
5727ef1b 6418
77ee7c89 6419 out_put_vlan:
5727ef1b
JB		 6420 if (params.vlan)
6421 dev_put(params.vlan);
3b85875a 6422
5727ef1b
JB		 6423 return err;
6424}
6425
6426static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
6427{
4c476991 6428 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 6429 int err;
4c476991 6430 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 6431 struct station_parameters params;
6432 u8 *mac_addr = NULL;
bda95eb1
JB		 6433 u32 auth_assoc = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
6434 BIT(NL80211_STA_FLAG_ASSOCIATED);
5727ef1b
JB		 6435
6436 memset(&params, 0, sizeof(params));
6437
984c311b
JB		 6438 if (!rdev->ops->add_station)
6439 return -EOPNOTSUPP;
6440
5727ef1b
JB		 6441 if (!info->attrs[NL80211_ATTR_MAC])
6442 return -EINVAL;
6443
5727ef1b
JB		 6444 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
6445 return -EINVAL;
6446
6447 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
6448 return -EINVAL;
6449
5e4b6f56
JM		 6450 if (!info->attrs[NL80211_ATTR_STA_AID] &&
6451 !info->attrs[NL80211_ATTR_PEER_AID])
0e956c13
TLSC		 6452 return -EINVAL;
6453
5727ef1b
JB		 6454 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6455 params.supported_rates =
6456 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6457 params.supported_rates_len =
6458 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
6459 params.listen_interval =
6460 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 6461
14f34e36
GG		 6462 if (info->attrs[NL80211_ATTR_VLAN_ID])
6463 params.vlan_id = nla_get_u16(info->attrs[NL80211_ATTR_VLAN_ID]);
6464
17b94247 6465 if (info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]) {
ab0d76f6
JB		 6466 params.support_p2p_ps =
6467 nla_get_u8(info->attrs[NL80211_ATTR_STA_SUPPORT_P2P_PS]);
17b94247
AB		 6468 } else {
6469 /*
6470 * if not specified, assume it's supported for P2P GO interface,
6471 * and is NOT supported for AP interface
6472 */
6473 params.support_p2p_ps =
6474 dev->ieee80211_ptr->iftype == NL80211_IFTYPE_P2P_GO;
6475 }
6476
3d124ea2 6477 if (info->attrs[NL80211_ATTR_PEER_AID])
5e4b6f56 6478 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
3d124ea2
JM		 6479 else
6480 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
51b50fbe 6481
9d62a986
JM		 6482 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
6483 params.capability =
6484 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
6485 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
6486 }
6487
6488 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
6489 params.ext_capab =
6490 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6491 params.ext_capab_len =
6492 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
6493 }
6494
36aedc90
JM		 6495 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
6496 params.ht_capa =
6497 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 6498
f461be3e
MP		 6499 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
6500 params.vht_capa =
6501 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
6502
c4cbaf79
LC		 6503 if (info->attrs[NL80211_ATTR_HE_CAPABILITY]) {
6504 params.he_capa =
6505 nla_data(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
6506 params.he_capa_len =
6507 nla_len(info->attrs[NL80211_ATTR_HE_CAPABILITY]);
c4cbaf79
LC		 6508 }
6509
43e64bf3
RM		 6510 if (info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY])
6511 params.he_6ghz_capa =
6512 nla_data(info->attrs[NL80211_ATTR_HE_6GHZ_CAPABILITY]);
6513
60f4a7b1
MK		 6514 if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
6515 params.opmode_notif_used = true;
6516 params.opmode_notif =
6517 nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
6518 }
6519
ab0d76f6 6520 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
96b78dff 6521 params.plink_action =
f8bacc21 6522 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
96b78dff 6523
36647055
THJ		 6524 if (info->attrs[NL80211_ATTR_AIRTIME_WEIGHT])
6525 params.airtime_weight =
6526 nla_get_u16(info->attrs[NL80211_ATTR_AIRTIME_WEIGHT]);
6527
6528 if (params.airtime_weight &&
6529 !wiphy_ext_feature_isset(&rdev->wiphy,
6530 NL80211_EXT_FEATURE_AIRTIME_FAIRNESS))
6531 return -EOPNOTSUPP;
6532
e96d1cd2
ARN		 6533 err = nl80211_parse_sta_txpower_setting(info, &params);
6534 if (err)
6535 return err;
6536
c01fc9ad
SD		 6537 err = nl80211_parse_sta_channel_info(info, &params);
6538 if (err)
6539 return err;
6540
ff276691
JB		 6541 err = nl80211_parse_sta_wme(info, &params);
6542 if (err)
6543 return err;
bdd90d5e 6544
bdd3ae3d 6545 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 6546 return -EINVAL;
6547
496fcc29
JB		 6548 /* HT/VHT requires QoS, but if we don't have that just ignore HT/VHT
6549 * as userspace might just pass through the capabilities from the IEs
6550 * directly, rather than enforcing this restriction and returning an
6551 * error in this case.
6552 */
6553 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME))) {
6554 params.ht_capa = NULL;
6555 params.vht_capa = NULL;
c4cbaf79
LC		 6556
6557 /* HE requires WME */
43e64bf3 6558 if (params.he_capa_len || params.he_6ghz_capa)
c4cbaf79 6559 return -EINVAL;
496fcc29
JB		 6560 }
6561
43e64bf3
RM		 6562 /* Ensure that HT/VHT capabilities are not set for 6 GHz HE STA */
6563 if (params.he_6ghz_capa && (params.ht_capa || params.vht_capa))
6564 return -EINVAL;
6565
77ee7c89
JB		 6566 /* When you run into this, adjust the code below for the new flag */
6567 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
6568
bdd90d5e
JB		 6569 switch (dev->ieee80211_ptr->iftype) {
6570 case NL80211_IFTYPE_AP:
6571 case NL80211_IFTYPE_AP_VLAN:
6572 case NL80211_IFTYPE_P2P_GO:
984c311b
JB		 6573 /* ignore WME attributes if iface/sta is not capable */
6574 if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
6575 !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
6576 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
c75786c9 6577
bdd90d5e 6578 /* TDLS peers cannot be added */
3d124ea2
JM		 6579 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
6580 info->attrs[NL80211_ATTR_PEER_AID])
4319e193 6581 return -EINVAL;
bdd90d5e
JB		 6582 /* but don't bother the driver with it */
6583 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 6584
d582cffb
JB		 6585 /* allow authenticated/associated only if driver handles it */
6586 if (!(rdev->wiphy.features &
6587 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
bda95eb1 6588 params.sta_flags_mask & auth_assoc)
d582cffb
JB		 6589 return -EINVAL;
6590
bda95eb1
JB		 6591 /* Older userspace, or userspace wanting to be compatible with
6592 * !NL80211_FEATURE_FULL_AP_CLIENT_STATE, will not set the auth
6593 * and assoc flags in the mask, but assumes the station will be
6594 * added as associated anyway since this was the required driver
6595 * behaviour before NL80211_FEATURE_FULL_AP_CLIENT_STATE was
6596 * introduced.
6597 * In order to not bother drivers with this quirk in the API
6598 * set the flags in both the mask and set for new stations in
6599 * this case.
6600 */
6601 if (!(params.sta_flags_mask & auth_assoc)) {
6602 params.sta_flags_mask |= auth_assoc;
6603 params.sta_flags_set |= auth_assoc;
6604 }
6605
bdd90d5e
JB		 6606 /* must be last in here for error handling */
6607 params.vlan = get_vlan(info, rdev);
6608 if (IS_ERR(params.vlan))
6609 return PTR_ERR(params.vlan);
6610 break;
6611 case NL80211_IFTYPE_MESH_POINT:
984c311b
JB		 6612 /* ignore uAPSD data */
6613 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
6614
d582cffb
JB		 6615 /* associated is disallowed */
6616 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
6617 return -EINVAL;
bdd90d5e 6618 /* TDLS peers cannot be added */
3d124ea2
JM		 6619 if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
6620 info->attrs[NL80211_ATTR_PEER_AID])
bdd90d5e
JB		 6621 return -EINVAL;
6622 break;
6623 case NL80211_IFTYPE_STATION:
93d08f0b 6624 case NL80211_IFTYPE_P2P_CLIENT:
984c311b
JB		 6625 /* ignore uAPSD data */
6626 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
6627
77ee7c89
JB		 6628 /* these are disallowed */
6629 if (params.sta_flags_mask &
6630 (BIT(NL80211_STA_FLAG_ASSOCIATED) |
6631 BIT(NL80211_STA_FLAG_AUTHENTICATED)))
d582cffb 6632 return -EINVAL;
bdd90d5e
JB		 6633 /* Only TDLS peers can be added */
6634 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
6635 return -EINVAL;
6636 /* Can only add if TDLS ... */
6637 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
6638 return -EOPNOTSUPP;
6639 /* ... with external setup is supported */
6640 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
6641 return -EOPNOTSUPP;
77ee7c89
JB		 6642 /*
6643 * Older wpa_supplicant versions always mark the TDLS peer
6644 * as authorized, but it shouldn't yet be.
6645 */
6646 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
bdd90d5e
JB		 6647 break;
6648 default:
6649 return -EOPNOTSUPP;
c75786c9
EP		 6650 }
6651
bdd90d5e 6652 /* be aware of params.vlan when changing code here */
5727ef1b 6653
e35e4d28 6654 err = rdev_add_station(rdev, dev, mac_addr, &params);
5727ef1b 6655
5727ef1b
JB		 6656 if (params.vlan)
6657 dev_put(params.vlan);
5727ef1b
JB		 6658 return err;
6659}
6660
6661static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
6662{
4c476991
JB		 6663 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6664 struct net_device *dev = info->user_ptr[1];
89c771e5
JM		 6665 struct station_del_parameters params;
6666
6667 memset(&params, 0, sizeof(params));
5727ef1b
JB		 6668
6669 if (info->attrs[NL80211_ATTR_MAC])
89c771e5 6670 params.mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
5727ef1b 6671
306b79ea
JB		 6672 switch (dev->ieee80211_ptr->iftype) {
6673 case NL80211_IFTYPE_AP:
6674 case NL80211_IFTYPE_AP_VLAN:
6675 case NL80211_IFTYPE_MESH_POINT:
6676 case NL80211_IFTYPE_P2P_GO:
6677 /* always accept these */
6678 break;
6679 case NL80211_IFTYPE_ADHOC:
6680 /* conditionally accept */
6681 if (wiphy_ext_feature_isset(&rdev->wiphy,
6682 NL80211_EXT_FEATURE_DEL_IBSS_STA))
6683 break;
edafcf42 6684 return -EINVAL;
306b79ea 6685 default:
4c476991 6686 return -EINVAL;
306b79ea 6687 }
5727ef1b 6688
4c476991
JB		 6689 if (!rdev->ops->del_station)
6690 return -EOPNOTSUPP;
3b85875a 6691
98856866
JM		 6692 if (info->attrs[NL80211_ATTR_MGMT_SUBTYPE]) {
6693 params.subtype =
6694 nla_get_u8(info->attrs[NL80211_ATTR_MGMT_SUBTYPE]);
6695 if (params.subtype != IEEE80211_STYPE_DISASSOC >> 4 &&
6696 params.subtype != IEEE80211_STYPE_DEAUTH >> 4)
6697 return -EINVAL;
6698 } else {
6699 /* Default to Deauthentication frame */
6700 params.subtype = IEEE80211_STYPE_DEAUTH >> 4;
6701 }
6702
6703 if (info->attrs[NL80211_ATTR_REASON_CODE]) {
6704 params.reason_code =
6705 nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
6706 if (params.reason_code == 0)
6707 return -EINVAL; /* 0 is reserved */
6708 } else {
6709 /* Default to reason code 2 */
6710 params.reason_code = WLAN_REASON_PREV_AUTH_NOT_VALID;
6711 }
6712
89c771e5 6713 return rdev_del_station(rdev, dev, &params);
5727ef1b
JB		 6714}
6715
15e47304 6716static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 6717 int flags, struct net_device *dev,
6718 u8 *dst, u8 *next_hop,
6719 struct mpath_info *pinfo)
6720{
6721 void *hdr;
6722 struct nlattr *pinfoattr;
6723
1ef4c850 6724 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_MPATH);
2ec600d6
LCC		 6725 if (!hdr)
6726 return -1;
6727
9360ffd1
DM		 6728 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
6729 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
6730 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
6731 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
6732 goto nla_put_failure;
f5ea9120 6733
ae0be8de 6734 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MPATH_INFO);
2ec600d6
LCC		 6735 if (!pinfoattr)
6736 goto nla_put_failure;
9360ffd1
DM		 6737 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
6738 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
6739 pinfo->frame_qlen))
6740 goto nla_put_failure;
6741 if (((pinfo->filled & MPATH_INFO_SN) &&
6742 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
6743 ((pinfo->filled & MPATH_INFO_METRIC) &&
6744 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
6745 pinfo->metric)) ||
6746 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
6747 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
6748 pinfo->exptime)) ||
6749 ((pinfo->filled & MPATH_INFO_FLAGS) &&
6750 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
6751 pinfo->flags)) ||
6752 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
6753 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
6754 pinfo->discovery_timeout)) ||
6755 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
6756 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
cc241636
JH		 6757 pinfo->discovery_retries)) ||
6758 ((pinfo->filled & MPATH_INFO_HOP_COUNT) &&
6759 nla_put_u8(msg, NL80211_MPATH_INFO_HOP_COUNT,
540bbcb9
JH		 6760 pinfo->hop_count)) ||
6761 ((pinfo->filled & MPATH_INFO_PATH_CHANGE) &&
6762 nla_put_u32(msg, NL80211_MPATH_INFO_PATH_CHANGE,
6763 pinfo->path_change_count)))
9360ffd1 6764 goto nla_put_failure;
2ec600d6
LCC		 6765
6766 nla_nest_end(msg, pinfoattr);
6767
053c095a
JB		 6768 genlmsg_end(msg, hdr);
6769 return 0;
2ec600d6
LCC		 6770
6771 nla_put_failure:
bc3ed28c
TG		 6772 genlmsg_cancel(msg, hdr);
6773 return -EMSGSIZE;
2ec600d6
LCC		 6774}
6775
6776static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 6777 struct netlink_callback *cb)
2ec600d6 6778{
2ec600d6 6779 struct mpath_info pinfo;
1b8ec87a 6780 struct cfg80211_registered_device *rdev;
97990a06 6781 struct wireless_dev *wdev;
2ec600d6
LCC		 6782 u8 dst[ETH_ALEN];
6783 u8 next_hop[ETH_ALEN];
97990a06 6784 int path_idx = cb->args[2];
2ec600d6 6785 int err;
2ec600d6 6786
ea90e0dc 6787 rtnl_lock();
5297c65c 6788 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 6789 if (err)
ea90e0dc 6790 goto out_err;
bba95fef 6791
1b8ec87a 6792 if (!rdev->ops->dump_mpath) {
eec60b03 6793 err = -EOPNOTSUPP;
bba95fef
JB		 6794 goto out_err;
6795 }
6796
97990a06 6797 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
eec60b03 6798 err = -EOPNOTSUPP;
0448b5fc 6799 goto out_err;
eec60b03
JM		 6800 }
6801
bba95fef 6802 while (1) {
1b8ec87a 6803 err = rdev_dump_mpath(rdev, wdev->netdev, path_idx, dst,
97990a06 6804 next_hop, &pinfo);
bba95fef 6805 if (err == -ENOENT)
2ec600d6 6806 break;
bba95fef 6807 if (err)
3b85875a 6808 goto out_err;
2ec600d6 6809
15e47304 6810 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef 6811 cb->nlh->nlmsg_seq, NLM_F_MULTI,
97990a06 6812 wdev->netdev, dst, next_hop,
bba95fef
JB		 6813 &pinfo) < 0)
6814 goto out;
2ec600d6 6815
bba95fef 6816 path_idx++;
2ec600d6 6817 }
2ec600d6 6818
bba95fef 6819 out:
97990a06 6820 cb->args[2] = path_idx;
bba95fef 6821 err = skb->len;
bba95fef 6822 out_err:
ea90e0dc 6823 rtnl_unlock();
bba95fef 6824 return err;
2ec600d6
LCC		 6825}
6826
6827static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
6828{
4c476991 6829 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 6830 int err;
4c476991 6831 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6832 struct mpath_info pinfo;
6833 struct sk_buff *msg;
6834 u8 *dst = NULL;
6835 u8 next_hop[ETH_ALEN];
6836
6837 memset(&pinfo, 0, sizeof(pinfo));
6838
6839 if (!info->attrs[NL80211_ATTR_MAC])
6840 return -EINVAL;
6841
6842 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6843
4c476991
JB		 6844 if (!rdev->ops->get_mpath)
6845 return -EOPNOTSUPP;
2ec600d6 6846
4c476991
JB		 6847 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6848 return -EOPNOTSUPP;
eec60b03 6849
e35e4d28 6850 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 6851 if (err)
4c476991 6852 return err;
2ec600d6 6853
fd2120ca 6854 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 6855 if (!msg)
4c476991 6856 return -ENOMEM;
2ec600d6 6857
15e47304 6858 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 6859 dev, dst, next_hop, &pinfo) < 0) {
6860 nlmsg_free(msg);
6861 return -ENOBUFS;
6862 }
3b85875a 6863
4c476991 6864 return genlmsg_reply(msg, info);
2ec600d6
LCC		 6865}
6866
6867static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
6868{
4c476991
JB		 6869 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6870 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6871 u8 *dst = NULL;
6872 u8 *next_hop = NULL;
6873
6874 if (!info->attrs[NL80211_ATTR_MAC])
6875 return -EINVAL;
6876
6877 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
6878 return -EINVAL;
6879
6880 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6881 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
6882
4c476991
JB		 6883 if (!rdev->ops->change_mpath)
6884 return -EOPNOTSUPP;
35a8efe1 6885
4c476991
JB		 6886 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6887 return -EOPNOTSUPP;
2ec600d6 6888
e35e4d28 6889 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 6890}
4c476991 6891
2ec600d6
LCC		 6892static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
6893{
4c476991
JB		 6894 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6895 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6896 u8 *dst = NULL;
6897 u8 *next_hop = NULL;
6898
6899 if (!info->attrs[NL80211_ATTR_MAC])
6900 return -EINVAL;
6901
6902 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
6903 return -EINVAL;
6904
6905 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6906 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
6907
4c476991
JB		 6908 if (!rdev->ops->add_mpath)
6909 return -EOPNOTSUPP;
35a8efe1 6910
4c476991
JB		 6911 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6912 return -EOPNOTSUPP;
2ec600d6 6913
e35e4d28 6914 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 6915}
6916
6917static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
6918{
4c476991
JB		 6919 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6920 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 6921 u8 *dst = NULL;
6922
6923 if (info->attrs[NL80211_ATTR_MAC])
6924 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6925
4c476991
JB		 6926 if (!rdev->ops->del_mpath)
6927 return -EOPNOTSUPP;
3b85875a 6928
b501426c
MP		 6929 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6930 return -EOPNOTSUPP;
6931
e35e4d28 6932 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 6933}
6934
66be7d2b
HR		 6935static int nl80211_get_mpp(struct sk_buff *skb, struct genl_info *info)
6936{
6937 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6938 int err;
6939 struct net_device *dev = info->user_ptr[1];
6940 struct mpath_info pinfo;
6941 struct sk_buff *msg;
6942 u8 *dst = NULL;
6943 u8 mpp[ETH_ALEN];
6944
6945 memset(&pinfo, 0, sizeof(pinfo));
6946
6947 if (!info->attrs[NL80211_ATTR_MAC])
6948 return -EINVAL;
6949
6950 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
6951
6952 if (!rdev->ops->get_mpp)
6953 return -EOPNOTSUPP;
6954
6955 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6956 return -EOPNOTSUPP;
6957
6958 err = rdev_get_mpp(rdev, dev, dst, mpp, &pinfo);
6959 if (err)
6960 return err;
6961
6962 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6963 if (!msg)
6964 return -ENOMEM;
6965
6966 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
6967 dev, dst, mpp, &pinfo) < 0) {
6968 nlmsg_free(msg);
6969 return -ENOBUFS;
6970 }
6971
6972 return genlmsg_reply(msg, info);
6973}
6974
6975static int nl80211_dump_mpp(struct sk_buff *skb,
6976 struct netlink_callback *cb)
6977{
6978 struct mpath_info pinfo;
6979 struct cfg80211_registered_device *rdev;
6980 struct wireless_dev *wdev;
6981 u8 dst[ETH_ALEN];
6982 u8 mpp[ETH_ALEN];
6983 int path_idx = cb->args[2];
6984 int err;
6985
ea90e0dc 6986 rtnl_lock();
5297c65c 6987 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
66be7d2b 6988 if (err)
ea90e0dc 6989 goto out_err;
66be7d2b
HR		 6990
6991 if (!rdev->ops->dump_mpp) {
6992 err = -EOPNOTSUPP;
6993 goto out_err;
6994 }
6995
6996 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
6997 err = -EOPNOTSUPP;
6998 goto out_err;
6999 }
7000
7001 while (1) {
7002 err = rdev_dump_mpp(rdev, wdev->netdev, path_idx, dst,
7003 mpp, &pinfo);
7004 if (err == -ENOENT)
7005 break;
7006 if (err)
7007 goto out_err;
7008
7009 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
7010 cb->nlh->nlmsg_seq, NLM_F_MULTI,
7011 wdev->netdev, dst, mpp,
7012 &pinfo) < 0)
7013 goto out;
7014
7015 path_idx++;
7016 }
7017
7018 out:
7019 cb->args[2] = path_idx;
7020 err = skb->len;
7021 out_err:
ea90e0dc 7022 rtnl_unlock();
66be7d2b
HR		 7023 return err;
7024}
7025
9f1ba906
JM		 7026static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
7027{
4c476991
JB		 7028 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7029 struct net_device *dev = info->user_ptr[1];
c56589ed 7030 struct wireless_dev *wdev = dev->ieee80211_ptr;
9f1ba906 7031 struct bss_parameters params;
c56589ed 7032 int err;
9f1ba906
JM		 7033
7034 memset(&params, 0, sizeof(params));
7035 /* default to not changing parameters */
7036 params.use_cts_prot = -1;
7037 params.use_short_preamble = -1;
7038 params.use_short_slot_time = -1;
fd8aaaf3 7039 params.ap_isolate = -1;
50b12f59 7040 params.ht_opmode = -1;
53cabad7
JB		 7041 params.p2p_ctwindow = -1;
7042 params.p2p_opp_ps = -1;
9f1ba906
JM		 7043
7044 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
7045 params.use_cts_prot =
7046 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
7047 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
7048 params.use_short_preamble =
7049 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
7050 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
7051 params.use_short_slot_time =
7052 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 7053 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
7054 params.basic_rates =
7055 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7056 params.basic_rates_len =
7057 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
7058 }
fd8aaaf3
FF		 7059 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
7060 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 7061 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
7062 params.ht_opmode =
7063 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 7064
53cabad7
JB		 7065 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
7066 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7067 return -EINVAL;
7068 params.p2p_ctwindow =
ab0d76f6 7069 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
53cabad7
JB		 7070 if (params.p2p_ctwindow != 0 &&
7071 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
7072 return -EINVAL;
7073 }
7074
7075 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
7076 u8 tmp;
7077
7078 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7079 return -EINVAL;
7080 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
53cabad7
JB		 7081 params.p2p_opp_ps = tmp;
7082 if (params.p2p_opp_ps &&
7083 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
7084 return -EINVAL;
7085 }
7086
4c476991
JB		 7087 if (!rdev->ops->change_bss)
7088 return -EOPNOTSUPP;
9f1ba906 7089
074ac8df 7090 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 7091 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
7092 return -EOPNOTSUPP;
3b85875a 7093
c56589ed
SW		 7094 wdev_lock(wdev);
7095 err = rdev_change_bss(rdev, dev, &params);
7096 wdev_unlock(wdev);
7097
7098 return err;
9f1ba906
JM		 7099}
7100
b2e1b302
LR		 7101static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
7102{
b2e1b302 7103 char *data = NULL;
05050753 7104 bool is_indoor;
57b5ce07 7105 enum nl80211_user_reg_hint_type user_reg_hint_type;
05050753
I		 7106 u32 owner_nlportid;
7107
80778f18
LR		 7108 /*
7109 * You should only get this when cfg80211 hasn't yet initialized
7110 * completely when built-in to the kernel right between the time
7111 * window between nl80211_init() and regulatory_init(), if that is
7112 * even possible.
7113 */
458f4f9e 7114 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
fe33eb39 7115 return -EINPROGRESS;
80778f18 7116
57b5ce07
LR		 7117 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
7118 user_reg_hint_type =
7119 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
7120 else
7121 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
7122
7123 switch (user_reg_hint_type) {
7124 case NL80211_USER_REG_HINT_USER:
7125 case NL80211_USER_REG_HINT_CELL_BASE:
52616f2b
IP		 7126 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7127 return -EINVAL;
7128
7129 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7130 return regulatory_hint_user(data, user_reg_hint_type);
7131 case NL80211_USER_REG_HINT_INDOOR:
05050753
I		 7132 if (info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
7133 owner_nlportid = info->snd_portid;
7134 is_indoor = !!info->attrs[NL80211_ATTR_REG_INDOOR];
7135 } else {
7136 owner_nlportid = 0;
7137 is_indoor = true;
7138 }
7139
7140 return regulatory_hint_indoor(is_indoor, owner_nlportid);
57b5ce07
LR		 7141 default:
7142 return -EINVAL;
7143 }
b2e1b302
LR		 7144}
7145
1ea4ff3e
JB		 7146static int nl80211_reload_regdb(struct sk_buff *skb, struct genl_info *info)
7147{
7148 return reg_reload_regdb();
7149}
7150
24bdd9f4 7151static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 7152 struct genl_info *info)
93da9cc1 7153{
4c476991 7154 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 7155 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 7156 struct wireless_dev *wdev = dev->ieee80211_ptr;
7157 struct mesh_config cur_params;
7158 int err = 0;
93da9cc1 7159 void *hdr;
7160 struct nlattr *pinfoattr;
7161 struct sk_buff *msg;
7162
29cbe68c
JB		 7163 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7164 return -EOPNOTSUPP;
7165
24bdd9f4 7166 if (!rdev->ops->get_mesh_config)
4c476991 7167 return -EOPNOTSUPP;
f3f92586 7168
29cbe68c
JB		 7169 wdev_lock(wdev);
7170 /* If not connected, get default parameters */
7171 if (!wdev->mesh_id_len)
7172 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
7173 else
e35e4d28 7174 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 7175 wdev_unlock(wdev);
7176
93da9cc1 7177 if (err)
4c476991 7178 return err;
93da9cc1 7179
7180 /* Draw up a netlink message to send back */
fd2120ca 7181 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 7182 if (!msg)
7183 return -ENOMEM;
15e47304 7184 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 7185 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 7186 if (!hdr)
efe1cf0c 7187 goto out;
ae0be8de 7188 pinfoattr = nla_nest_start_noflag(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 7189 if (!pinfoattr)
7190 goto nla_put_failure;
9360ffd1
DM		 7191 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7192 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
7193 cur_params.dot11MeshRetryTimeout) ||
7194 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
7195 cur_params.dot11MeshConfirmTimeout) ||
7196 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
7197 cur_params.dot11MeshHoldingTimeout) ||
7198 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
7199 cur_params.dot11MeshMaxPeerLinks) ||
7200 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
7201 cur_params.dot11MeshMaxRetries) ||
7202 nla_put_u8(msg, NL80211_MESHCONF_TTL,
7203 cur_params.dot11MeshTTL) ||
7204 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
7205 cur_params.element_ttl) ||
7206 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
7207 cur_params.auto_open_plinks) ||
7eab0f64
JL		 7208 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
7209 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 7210 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
7211 cur_params.dot11MeshHWMPmaxPREQretries) ||
7212 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
7213 cur_params.path_refresh_time) ||
7214 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
7215 cur_params.min_discovery_timeout) ||
7216 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
7217 cur_params.dot11MeshHWMPactivePathTimeout) ||
7218 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
7219 cur_params.dot11MeshHWMPpreqMinInterval) ||
7220 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
7221 cur_params.dot11MeshHWMPperrMinInterval) ||
7222 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
7223 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
7224 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
7225 cur_params.dot11MeshHWMPRootMode) ||
7226 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7227 cur_params.dot11MeshHWMPRannInterval) ||
7228 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
7229 cur_params.dot11MeshGateAnnouncementProtocol) ||
7230 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
7231 cur_params.dot11MeshForwarding) ||
335d5349 7232 nla_put_s32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 7233 cur_params.rssi_threshold) ||
7234 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 7235 cur_params.ht_opmode) ||
7236 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7237 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
7238 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 7239 cur_params.dot11MeshHWMProotInterval) ||
7240 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3b1c5a53
MP		 7241 cur_params.dot11MeshHWMPconfirmationInterval) ||
7242 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
7243 cur_params.power_mode) ||
7244 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
8e7c0538
CT		 7245 cur_params.dot11MeshAwakeWindowDuration) ||
7246 nla_put_u32(msg, NL80211_MESHCONF_PLINK_TIMEOUT,
01d66fbd
BC		 7247 cur_params.plink_timeout) ||
7248 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_GATE,
e3718a61
LL		 7249 cur_params.dot11MeshConnectedToMeshGate) ||
7250 nla_put_u8(msg, NL80211_MESHCONF_NOLEARN,
184eebe6
MT		 7251 cur_params.dot11MeshNolearn) ||
7252 nla_put_u8(msg, NL80211_MESHCONF_CONNECTED_TO_AS,
7253 cur_params.dot11MeshConnectedToAuthServer))
9360ffd1 7254 goto nla_put_failure;
93da9cc1 7255 nla_nest_end(msg, pinfoattr);
7256 genlmsg_end(msg, hdr);
4c476991 7257 return genlmsg_reply(msg, info);
93da9cc1 7258
3b85875a 7259 nla_put_failure:
efe1cf0c 7260 out:
d080e275 7261 nlmsg_free(msg);
4c476991 7262 return -ENOBUFS;
93da9cc1 7263}
7264
ab0d76f6
JB		 7265static const struct nla_policy
7266nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
7267 [NL80211_MESHCONF_RETRY_TIMEOUT] =
7268 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7269 [NL80211_MESHCONF_CONFIRM_TIMEOUT] =
7270 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7271 [NL80211_MESHCONF_HOLDING_TIMEOUT] =
7272 NLA_POLICY_RANGE(NLA_U16, 1, 255),
7273 [NL80211_MESHCONF_MAX_PEER_LINKS] =
7274 NLA_POLICY_RANGE(NLA_U16, 0, 255),
7275 [NL80211_MESHCONF_MAX_RETRIES] = NLA_POLICY_MAX(NLA_U8, 16),
7276 [NL80211_MESHCONF_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
7277 [NL80211_MESHCONF_ELEMENT_TTL] = NLA_POLICY_MIN(NLA_U8, 1),
7278 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = NLA_POLICY_MAX(NLA_U8, 1),
7279 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] =
7280 NLA_POLICY_RANGE(NLA_U32, 1, 255),
93da9cc1 7281 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
7282 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
ab0d76f6 7283 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = NLA_POLICY_MIN(NLA_U16, 1),
93da9cc1 7284 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 7285 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] =
7286 NLA_POLICY_MIN(NLA_U16, 1),
7287 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] =
7288 NLA_POLICY_MIN(NLA_U16, 1),
7289 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] =
7290 NLA_POLICY_MIN(NLA_U16, 1),
7291 [NL80211_MESHCONF_HWMP_ROOTMODE] = NLA_POLICY_MAX(NLA_U8, 4),
7292 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] =
7293 NLA_POLICY_MIN(NLA_U16, 1),
7294 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = NLA_POLICY_MAX(NLA_U8, 1),
7295 [NL80211_MESHCONF_FORWARDING] = NLA_POLICY_MAX(NLA_U8, 1),
7296 [NL80211_MESHCONF_RSSI_THRESHOLD] =
7297 NLA_POLICY_RANGE(NLA_S32, -255, 0),
a4f606ea 7298 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6 7299 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
ab0d76f6
JB		 7300 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] =
7301 NLA_POLICY_MIN(NLA_U16, 1),
7302 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] =
7303 NLA_POLICY_MIN(NLA_U16, 1),
7304 [NL80211_MESHCONF_POWER_MODE] =
7305 NLA_POLICY_RANGE(NLA_U32,
7306 NL80211_MESH_POWER_ACTIVE,
7307 NL80211_MESH_POWER_MAX),
3b1c5a53 7308 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
8e7c0538 7309 [NL80211_MESHCONF_PLINK_TIMEOUT] = { .type = NLA_U32 },
01d66fbd 7310 [NL80211_MESHCONF_CONNECTED_TO_GATE] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
e3718a61 7311 [NL80211_MESHCONF_NOLEARN] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
184eebe6 7312 [NL80211_MESHCONF_CONNECTED_TO_AS] = NLA_POLICY_RANGE(NLA_U8, 0, 1),
93da9cc1 7313};
7314
c80d545d
JC		 7315static const struct nla_policy
7316 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 7317 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 7318 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
7319 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 7320 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
6e16d90b 7321 [NL80211_MESH_SETUP_AUTH_PROTOCOL] = { .type = NLA_U8 },
bb2798d4 7322 [NL80211_MESH_SETUP_USERSPACE_MPM] = { .type = NLA_FLAG },
3d7af878
JB		 7323 [NL80211_MESH_SETUP_IE] =
7324 NLA_POLICY_VALIDATE_FN(NLA_BINARY, validate_ie_attr,
7325 IEEE80211_MAX_DATA_LEN),
b130e5ce 7326 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 7327};
7328
24bdd9f4 7329static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 7330 struct mesh_config *cfg,
7331 u32 *mask_out)
93da9cc1 7332{
93da9cc1 7333 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 7334 u32 mask = 0;
9757235f 7335 u16 ht_opmode;
93da9cc1 7336
ab0d76f6
JB		 7337#define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, mask, attr, fn) \
7338do { \
7339 if (tb[attr]) { \
7340 cfg->param = fn(tb[attr]); \
7341 mask |= BIT((attr) - 1); \
7342 } \
ea54fba2 7343} while (0)
bd90fdcc 7344
24bdd9f4 7345 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 7346 return -EINVAL;
8cb08174 7347 if (nla_parse_nested_deprecated(tb, NL80211_MESHCONF_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_CONFIG], nl80211_meshconf_params_policy, info->extack))
93da9cc1 7348 return -EINVAL;
7349
93da9cc1 7350 /* This makes sure that there aren't more than 32 mesh config
7351 * parameters (otherwise our bitfield scheme would not work.) */
7352 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
7353
7354 /* Fill in the params struct */
ab0d76f6
JB		 7355 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, mask,
7356 NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
7357 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, mask,
7358 NL80211_MESHCONF_CONFIRM_TIMEOUT,
7359 nla_get_u16);
7360 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, mask,
7361 NL80211_MESHCONF_HOLDING_TIMEOUT,
7362 nla_get_u16);
7363 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, mask,
7364 NL80211_MESHCONF_MAX_PEER_LINKS,
7365 nla_get_u16);
7366 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, mask,
7367 NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
7368 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, mask,
7369 NL80211_MESHCONF_TTL, nla_get_u8);
7370 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, mask,
7371 NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
7372 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, mask,
7373 NL80211_MESHCONF_AUTO_OPEN_PLINKS,
7374 nla_get_u8);
ea54fba2 7375 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
ab0d76f6 7376 mask,
a4f606ea 7377 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
ab0d76f6
JB		 7378 nla_get_u32);
7379 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, mask,
7380 NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
7381 nla_get_u8);
7382 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, mask,
7383 NL80211_MESHCONF_PATH_REFRESH_TIME,
7384 nla_get_u32);
7385 if (mask & BIT(NL80211_MESHCONF_PATH_REFRESH_TIME) &&
7386 (cfg->path_refresh_time < 1 || cfg->path_refresh_time > 65535))
7387 return -EINVAL;
7388 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, mask,
7389 NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
7390 nla_get_u16);
ea54fba2 7391 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
ab0d76f6 7392 mask,
a4f606ea 7393 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
ab0d76f6
JB		 7394 nla_get_u32);
7395 if (mask & BIT(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT) &&
7396 (cfg->dot11MeshHWMPactivePathTimeout < 1 ||
7397 cfg->dot11MeshHWMPactivePathTimeout > 65535))
7398 return -EINVAL;
7399 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval, mask,
ea54fba2 7400 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
ab0d76f6
JB		 7401 nla_get_u16);
7402 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval, mask,
ea54fba2 7403 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
ab0d76f6 7404 nla_get_u16);
93da9cc1 7405 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6 7406 dot11MeshHWMPnetDiameterTraversalTime, mask,
a4f606ea 7407 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
ab0d76f6
JB		 7408 nla_get_u16);
7409 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
7410 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
7411 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
7412 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
7413 nla_get_u16);
7414 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshGateAnnouncementProtocol,
ea54fba2 7415 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
ab0d76f6
JB		 7416 nla_get_u8);
7417 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, mask,
7418 NL80211_MESHCONF_FORWARDING, nla_get_u8);
7419 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, mask,
7420 NL80211_MESHCONF_RSSI_THRESHOLD,
7421 nla_get_s32);
01d66fbd
BC		 7422 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToMeshGate, mask,
7423 NL80211_MESHCONF_CONNECTED_TO_GATE,
7424 nla_get_u8);
184eebe6
MT		 7425 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConnectedToAuthServer, mask,
7426 NL80211_MESHCONF_CONNECTED_TO_AS,
7427 nla_get_u8);
9757235f
MH		 7428 /*
7429 * Check HT operation mode based on
188f60ab 7430 * IEEE 802.11-2016 9.4.2.57 HT Operation element.
9757235f
MH		 7431 */
7432 if (tb[NL80211_MESHCONF_HT_OPMODE]) {
7433 ht_opmode = nla_get_u16(tb[NL80211_MESHCONF_HT_OPMODE]);
7434
7435 if (ht_opmode & ~(IEEE80211_HT_OP_MODE_PROTECTION |
7436 IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT |
7437 IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT))
7438 return -EINVAL;
7439
188f60ab
BC		 7440 /* NON_HT_STA bit is reserved, but some programs set it */
7441 ht_opmode &= ~IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
9757235f 7442
9757235f 7443 cfg->ht_opmode = ht_opmode;
fd551bac 7444 mask |= (1 << (NL80211_MESHCONF_HT_OPMODE - 1));
9757235f 7445 }
728b19e5 7446 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ab0d76f6
JB		 7447 dot11MeshHWMPactivePathToRootTimeout, mask,
7448 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
7449 nla_get_u32);
7450 if (mask & BIT(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT) &&
7451 (cfg->dot11MeshHWMPactivePathToRootTimeout < 1 ||
7452 cfg->dot11MeshHWMPactivePathToRootTimeout > 65535))
7453 return -EINVAL;
7454 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, mask,
7455 NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
7456 nla_get_u16);
7457 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPconfirmationInterval,
7458 mask,
728b19e5 7459 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
ab0d76f6
JB		 7460 nla_get_u16);
7461 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode, mask,
7462 NL80211_MESHCONF_POWER_MODE, nla_get_u32);
7463 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration, mask,
7464 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
7465 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, plink_timeout, mask,
7466 NL80211_MESHCONF_PLINK_TIMEOUT, nla_get_u32);
e3718a61
LL		 7467 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNolearn, mask,
7468 NL80211_MESHCONF_NOLEARN, nla_get_u8);
bd90fdcc
JB		 7469 if (mask_out)
7470 *mask_out = mask;
c80d545d 7471
bd90fdcc
JB		 7472 return 0;
7473
7474#undef FILL_IN_MESH_PARAM_IF_SET
7475}
7476
c80d545d
JC		 7477static int nl80211_parse_mesh_setup(struct genl_info *info,
7478 struct mesh_setup *setup)
7479{
bb2798d4 7480 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c80d545d
JC		 7481 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
7482
7483 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
7484 return -EINVAL;
8cb08174 7485 if (nla_parse_nested_deprecated(tb, NL80211_MESH_SETUP_ATTR_MAX, info->attrs[NL80211_ATTR_MESH_SETUP], nl80211_mesh_setup_params_policy, info->extack))
c80d545d
JC		 7486 return -EINVAL;
7487
d299a1f2
JC		 7488 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
7489 setup->sync_method =
7490 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
7491 IEEE80211_SYNC_METHOD_VENDOR :
7492 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
7493
c80d545d
JC		 7494 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
7495 setup->path_sel_proto =
7496 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
7497 IEEE80211_PATH_PROTOCOL_VENDOR :
7498 IEEE80211_PATH_PROTOCOL_HWMP;
7499
7500 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
7501 setup->path_metric =
7502 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
7503 IEEE80211_PATH_METRIC_VENDOR :
7504 IEEE80211_PATH_METRIC_AIRTIME;
7505
581a8b0f 7506 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 7507 struct nlattr *ieattr =
581a8b0f 7508 tb[NL80211_MESH_SETUP_IE];
581a8b0f
JC		 7509 setup->ie = nla_data(ieattr);
7510 setup->ie_len = nla_len(ieattr);
c80d545d 7511 }
bb2798d4
TP		 7512 if (tb[NL80211_MESH_SETUP_USERSPACE_MPM] &&
7513 !(rdev->wiphy.features & NL80211_FEATURE_USERSPACE_MPM))
7514 return -EINVAL;
7515 setup->user_mpm = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_MPM]);
b130e5ce
JC		 7516 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
7517 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
bb2798d4
TP		 7518 if (setup->is_secure)
7519 setup->user_mpm = true;
c80d545d 7520
6e16d90b
CT		 7521 if (tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]) {
7522 if (!setup->user_mpm)
7523 return -EINVAL;
7524 setup->auth_id =
7525 nla_get_u8(tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]);
7526 }
7527
c80d545d
JC		 7528 return 0;
7529}
7530
24bdd9f4 7531static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 7532 struct genl_info *info)
bd90fdcc
JB		 7533{
7534 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7535 struct net_device *dev = info->user_ptr[1];
29cbe68c 7536 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 7537 struct mesh_config cfg;
7538 u32 mask;
7539 int err;
7540
29cbe68c
JB		 7541 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
7542 return -EOPNOTSUPP;
7543
24bdd9f4 7544 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 7545 return -EOPNOTSUPP;
7546
24bdd9f4 7547 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 7548 if (err)
7549 return err;
7550
29cbe68c
JB		 7551 wdev_lock(wdev);
7552 if (!wdev->mesh_id_len)
7553 err = -ENOLINK;
7554
7555 if (!err)
e35e4d28 7556 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 7557
7558 wdev_unlock(wdev);
7559
7560 return err;
93da9cc1 7561}
7562
ad30ca2c
AN		 7563static int nl80211_put_regdom(const struct ieee80211_regdomain *regdom,
7564 struct sk_buff *msg)
f130347c 7565{
f130347c
LR		 7566 struct nlattr *nl_reg_rules;
7567 unsigned int i;
f130347c 7568
458f4f9e
JB		 7569 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
7570 (regdom->dfs_region &&
7571 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
ad30ca2c 7572 goto nla_put_failure;
458f4f9e 7573
ae0be8de 7574 nl_reg_rules = nla_nest_start_noflag(msg, NL80211_ATTR_REG_RULES);
f130347c 7575 if (!nl_reg_rules)
ad30ca2c 7576 goto nla_put_failure;
f130347c 7577
458f4f9e 7578 for (i = 0; i < regdom->n_reg_rules; i++) {
f130347c
LR		 7579 struct nlattr *nl_reg_rule;
7580 const struct ieee80211_reg_rule *reg_rule;
7581 const struct ieee80211_freq_range *freq_range;
7582 const struct ieee80211_power_rule *power_rule;
97524820 7583 unsigned int max_bandwidth_khz;
f130347c 7584
458f4f9e 7585 reg_rule = &regdom->reg_rules[i];
f130347c
LR		 7586 freq_range = &reg_rule->freq_range;
7587 power_rule = &reg_rule->power_rule;
7588
ae0be8de 7589 nl_reg_rule = nla_nest_start_noflag(msg, i);
f130347c 7590 if (!nl_reg_rule)
ad30ca2c 7591 goto nla_put_failure;
f130347c 7592
97524820
JD		 7593 max_bandwidth_khz = freq_range->max_bandwidth_khz;
7594 if (!max_bandwidth_khz)
7595 max_bandwidth_khz = reg_get_max_bandwidth(regdom,
7596 reg_rule);
7597
9360ffd1
DM		 7598 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
7599 reg_rule->flags) ||
7600 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
7601 freq_range->start_freq_khz) ||
7602 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
7603 freq_range->end_freq_khz) ||
7604 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
97524820 7605 max_bandwidth_khz) ||
9360ffd1
DM		 7606 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
7607 power_rule->max_antenna_gain) ||
7608 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
089027e5
JD		 7609 power_rule->max_eirp) ||
7610 nla_put_u32(msg, NL80211_ATTR_DFS_CAC_TIME,
7611 reg_rule->dfs_cac_ms))
ad30ca2c 7612 goto nla_put_failure;
f130347c
LR		 7613
7614 nla_nest_end(msg, nl_reg_rule);
7615 }
7616
7617 nla_nest_end(msg, nl_reg_rules);
ad30ca2c
AN		 7618 return 0;
7619
7620nla_put_failure:
7621 return -EMSGSIZE;
7622}
7623
7624static int nl80211_get_reg_do(struct sk_buff *skb, struct genl_info *info)
7625{
7626 const struct ieee80211_regdomain *regdom = NULL;
7627 struct cfg80211_registered_device *rdev;
7628 struct wiphy *wiphy = NULL;
7629 struct sk_buff *msg;
7630 void *hdr;
7631
7632 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7633 if (!msg)
7634 return -ENOBUFS;
7635
7636 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7637 NL80211_CMD_GET_REG);
7638 if (!hdr)
7639 goto put_failure;
7640
7641 if (info->attrs[NL80211_ATTR_WIPHY]) {
1bdd716c
AN		 7642 bool self_managed;
7643
ad30ca2c
AN		 7644 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
7645 if (IS_ERR(rdev)) {
7646 nlmsg_free(msg);
7647 return PTR_ERR(rdev);
7648 }
7649
7650 wiphy = &rdev->wiphy;
1bdd716c
AN		 7651 self_managed = wiphy->regulatory_flags &
7652 REGULATORY_WIPHY_SELF_MANAGED;
ad30ca2c
AN		 7653 regdom = get_wiphy_regdom(wiphy);
7654
1bdd716c
AN		 7655 /* a self-managed-reg device must have a private regdom */
7656 if (WARN_ON(!regdom && self_managed)) {
7657 nlmsg_free(msg);
7658 return -EINVAL;
7659 }
7660
ad30ca2c
AN		 7661 if (regdom &&
7662 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7663 goto nla_put_failure;
7664 }
7665
7666 if (!wiphy && reg_last_request_cell_base() &&
7667 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
7668 NL80211_USER_REG_HINT_CELL_BASE))
7669 goto nla_put_failure;
7670
7671 rcu_read_lock();
7672
7673 if (!regdom)
7674 regdom = rcu_dereference(cfg80211_regdomain);
7675
7676 if (nl80211_put_regdom(regdom, msg))
7677 goto nla_put_failure_rcu;
7678
7679 rcu_read_unlock();
f130347c
LR		 7680
7681 genlmsg_end(msg, hdr);
5fe231e8 7682 return genlmsg_reply(msg, info);
f130347c 7683
458f4f9e
JB		 7684nla_put_failure_rcu:
7685 rcu_read_unlock();
f130347c 7686nla_put_failure:
efe1cf0c 7687put_failure:
d080e275 7688 nlmsg_free(msg);
5fe231e8 7689 return -EMSGSIZE;
f130347c
LR		 7690}
7691
ad30ca2c
AN		 7692static int nl80211_send_regdom(struct sk_buff *msg, struct netlink_callback *cb,
7693 u32 seq, int flags, struct wiphy *wiphy,
7694 const struct ieee80211_regdomain *regdom)
7695{
7696 void *hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
7697 NL80211_CMD_GET_REG);
7698
7699 if (!hdr)
7700 return -1;
7701
0a833c29 7702 genl_dump_check_consistent(cb, hdr);
ad30ca2c
AN		 7703
7704 if (nl80211_put_regdom(regdom, msg))
7705 goto nla_put_failure;
7706
7707 if (!wiphy && reg_last_request_cell_base() &&
7708 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
7709 NL80211_USER_REG_HINT_CELL_BASE))
7710 goto nla_put_failure;
7711
7712 if (wiphy &&
7713 nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7714 goto nla_put_failure;
7715
1bdd716c
AN		 7716 if (wiphy && wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
7717 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
7718 goto nla_put_failure;
7719
053c095a
JB		 7720 genlmsg_end(msg, hdr);
7721 return 0;
ad30ca2c
AN		 7722
7723nla_put_failure:
7724 genlmsg_cancel(msg, hdr);
7725 return -EMSGSIZE;
7726}
7727
7728static int nl80211_get_reg_dump(struct sk_buff *skb,
7729 struct netlink_callback *cb)
7730{
7731 const struct ieee80211_regdomain *regdom = NULL;
7732 struct cfg80211_registered_device *rdev;
7733 int err, reg_idx, start = cb->args[2];
7734
7735 rtnl_lock();
7736
7737 if (cfg80211_regdomain && start == 0) {
7738 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
7739 NLM_F_MULTI, NULL,
7740 rtnl_dereference(cfg80211_regdomain));
7741 if (err < 0)
7742 goto out_err;
7743 }
7744
7745 /* the global regdom is idx 0 */
7746 reg_idx = 1;
7747 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
7748 regdom = get_wiphy_regdom(&rdev->wiphy);
7749 if (!regdom)
7750 continue;
7751
7752 if (++reg_idx <= start)
7753 continue;
7754
7755 err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
7756 NLM_F_MULTI, &rdev->wiphy, regdom);
7757 if (err < 0) {
7758 reg_idx--;
7759 break;
7760 }
7761 }
7762
7763 cb->args[2] = reg_idx;
7764 err = skb->len;
7765out_err:
7766 rtnl_unlock();
7767 return err;
7768}
7769
b6863036
JB		 7770#ifdef CONFIG_CFG80211_CRDA_SUPPORT
7771static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
7772 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
7773 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
7774 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
7775 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
7776 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
7777 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
7778 [NL80211_ATTR_DFS_CAC_TIME] = { .type = NLA_U32 },
7779};
7780
7781static int parse_reg_rule(struct nlattr *tb[],
7782 struct ieee80211_reg_rule *reg_rule)
7783{
7784 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
7785 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
7786
7787 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
7788 return -EINVAL;
7789 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
7790 return -EINVAL;
7791 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
7792 return -EINVAL;
7793 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
7794 return -EINVAL;
7795 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
7796 return -EINVAL;
7797
7798 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
7799
7800 freq_range->start_freq_khz =
7801 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
7802 freq_range->end_freq_khz =
7803 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
7804 freq_range->max_bandwidth_khz =
7805 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
7806
7807 power_rule->max_eirp =
7808 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
7809
7810 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
7811 power_rule->max_antenna_gain =
7812 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
7813
7814 if (tb[NL80211_ATTR_DFS_CAC_TIME])
7815 reg_rule->dfs_cac_ms =
7816 nla_get_u32(tb[NL80211_ATTR_DFS_CAC_TIME]);
7817
7818 return 0;
7819}
7820
b2e1b302
LR		 7821static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
7822{
7823 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
7824 struct nlattr *nl_reg_rule;
ea372c54
JB		 7825 char *alpha2;
7826 int rem_reg_rules, r;
391d132c 7827 u32 num_rules = 0, rule_idx = 0;
4c7d3982 7828 enum nl80211_dfs_regions dfs_region = NL80211_DFS_UNSET;
ea372c54 7829 struct ieee80211_regdomain *rd;
b2e1b302
LR		 7830
7831 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
7832 return -EINVAL;
7833
7834 if (!info->attrs[NL80211_ATTR_REG_RULES])
7835 return -EINVAL;
7836
7837 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
7838
8b60b078
LR		 7839 if (info->attrs[NL80211_ATTR_DFS_REGION])
7840 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
7841
b2e1b302 7842 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 7843 rem_reg_rules) {
b2e1b302
LR		 7844 num_rules++;
7845 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 7846 return -EINVAL;
b2e1b302
LR		 7847 }
7848
e438768f
LR		 7849 if (!reg_is_valid_request(alpha2))
7850 return -EINVAL;
7851
391d132c 7852 rd = kzalloc(struct_size(rd, reg_rules, num_rules), GFP_KERNEL);
6913b49a
JB		 7853 if (!rd)
7854 return -ENOMEM;
b2e1b302
LR		 7855
7856 rd->n_reg_rules = num_rules;
7857 rd->alpha2[0] = alpha2[0];
7858 rd->alpha2[1] = alpha2[1];
7859
8b60b078
LR		 7860 /*
7861 * Disable DFS master mode if the DFS region was
7862 * not supported or known on this kernel.
7863 */
7864 if (reg_supported_dfs_region(dfs_region))
7865 rd->dfs_region = dfs_region;
7866
b2e1b302 7867 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 7868 rem_reg_rules) {
8cb08174
JB		 7869 r = nla_parse_nested_deprecated(tb, NL80211_REG_RULE_ATTR_MAX,
7870 nl_reg_rule, reg_rule_policy,
7871 info->extack);
ae811e21
JB		 7872 if (r)
7873 goto bad_reg;
b2e1b302
LR		 7874 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
7875 if (r)
7876 goto bad_reg;
7877
7878 rule_idx++;
7879
d0e18f83
LR		 7880 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
7881 r = -EINVAL;
b2e1b302 7882 goto bad_reg;
d0e18f83 7883 }
b2e1b302
LR		 7884 }
7885
06627990
JB		 7886 /* set_regdom takes ownership of rd */
7887 return set_regdom(rd, REGD_SOURCE_CRDA);
d2372b31 7888 bad_reg:
b2e1b302 7889 kfree(rd);
d0e18f83 7890 return r;
b2e1b302 7891}
b6863036 7892#endif /* CONFIG_CFG80211_CRDA_SUPPORT */
b2e1b302 7893
83f5e2cf
JB		 7894static int validate_scan_freqs(struct nlattr *freqs)
7895{
7896 struct nlattr *attr1, *attr2;
7897 int n_channels = 0, tmp1, tmp2;
7898
d7f13f74
SD		 7899 nla_for_each_nested(attr1, freqs, tmp1)
7900 if (nla_len(attr1) != sizeof(u32))
7901 return 0;
7902
83f5e2cf
JB		 7903 nla_for_each_nested(attr1, freqs, tmp1) {
7904 n_channels++;
7905 /*
7906 * Some hardware has a limited channel list for
7907 * scanning, and it is pretty much nonsensical
7908 * to scan for a channel twice, so disallow that
7909 * and don't require drivers to check that the
7910 * channel list they get isn't longer than what
7911 * they can scan, as long as they can scan all
7912 * the channels they registered at once.
7913 */
7914 nla_for_each_nested(attr2, freqs, tmp2)
7915 if (attr1 != attr2 &&
7916 nla_get_u32(attr1) == nla_get_u32(attr2))
7917 return 0;
7918 }
7919
7920 return n_channels;
7921}
7922
57fbcce3 7923static bool is_band_valid(struct wiphy *wiphy, enum nl80211_band b)
38de03d2 7924{
57fbcce3 7925 return b < NUM_NL80211_BANDS && wiphy->bands[b];
38de03d2
AS		 7926}
7927
7928static int parse_bss_select(struct nlattr *nla, struct wiphy *wiphy,
7929 struct cfg80211_bss_selection *bss_select)
7930{
7931 struct nlattr *attr[NL80211_BSS_SELECT_ATTR_MAX + 1];
7932 struct nlattr *nest;
7933 int err;
7934 bool found = false;
7935 int i;
7936
7937 /* only process one nested attribute */
7938 nest = nla_data(nla);
7939 if (!nla_ok(nest, nla_len(nest)))
7940 return -EINVAL;
7941
8cb08174
JB		 7942 err = nla_parse_nested_deprecated(attr, NL80211_BSS_SELECT_ATTR_MAX,
7943 nest, nl80211_bss_select_policy,
7944 NULL);
38de03d2
AS		 7945 if (err)
7946 return err;
7947
7948 /* only one attribute may be given */
7949 for (i = 0; i <= NL80211_BSS_SELECT_ATTR_MAX; i++) {
7950 if (attr[i]) {
7951 if (found)
7952 return -EINVAL;
7953 found = true;
7954 }
7955 }
7956
7957 bss_select->behaviour = __NL80211_BSS_SELECT_ATTR_INVALID;
7958
7959 if (attr[NL80211_BSS_SELECT_ATTR_RSSI])
7960 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI;
7961
7962 if (attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]) {
7963 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_BAND_PREF;
7964 bss_select->param.band_pref =
7965 nla_get_u32(attr[NL80211_BSS_SELECT_ATTR_BAND_PREF]);
7966 if (!is_band_valid(wiphy, bss_select->param.band_pref))
7967 return -EINVAL;
7968 }
7969
7970 if (attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]) {
7971 struct nl80211_bss_select_rssi_adjust *adj_param;
7972
7973 adj_param = nla_data(attr[NL80211_BSS_SELECT_ATTR_RSSI_ADJUST]);
7974 bss_select->behaviour = NL80211_BSS_SELECT_ATTR_RSSI_ADJUST;
7975 bss_select->param.adjust.band = adj_param->band;
7976 bss_select->param.adjust.delta = adj_param->delta;
7977 if (!is_band_valid(wiphy, bss_select->param.adjust.band))
7978 return -EINVAL;
7979 }
7980
7981 /* user-space did not provide behaviour attribute */
7982 if (bss_select->behaviour == __NL80211_BSS_SELECT_ATTR_INVALID)
7983 return -EINVAL;
7984
7985 if (!(wiphy->bss_select_support & BIT(bss_select->behaviour)))
7986 return -EINVAL;
7987
7988 return 0;
7989}
7990
9bb7e0f2
JB		 7991int nl80211_parse_random_mac(struct nlattr **attrs,
7992 u8 *mac_addr, u8 *mac_addr_mask)
ad2b26ab
JB		 7993{
7994 int i;
7995
7996 if (!attrs[NL80211_ATTR_MAC] && !attrs[NL80211_ATTR_MAC_MASK]) {
d2beae10
JP		 7997 eth_zero_addr(mac_addr);
7998 eth_zero_addr(mac_addr_mask);
ad2b26ab
JB		 7999 mac_addr[0] = 0x2;
8000 mac_addr_mask[0] = 0x3;
8001
8002 return 0;
8003 }
8004
8005 /* need both or none */
8006 if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_MAC_MASK])
8007 return -EINVAL;
8008
8009 memcpy(mac_addr, nla_data(attrs[NL80211_ATTR_MAC]), ETH_ALEN);
8010 memcpy(mac_addr_mask, nla_data(attrs[NL80211_ATTR_MAC_MASK]), ETH_ALEN);
8011
8012 /* don't allow or configure an mcast address */
8013 if (!is_multicast_ether_addr(mac_addr_mask) ||
8014 is_multicast_ether_addr(mac_addr))
8015 return -EINVAL;
8016
8017 /*
8018 * allow users to pass a MAC address that has bits set outside
8019 * of the mask, but don't bother drivers with having to deal
8020 * with such bits
8021 */
8022 for (i = 0; i < ETH_ALEN; i++)
8023 mac_addr[i] &= mac_addr_mask[i];
8024
8025 return 0;
8026}
8027
34373d12
VT		 8028static bool cfg80211_off_channel_oper_allowed(struct wireless_dev *wdev)
8029{
8030 ASSERT_WDEV_LOCK(wdev);
8031
8032 if (!cfg80211_beaconing_iface_active(wdev))
8033 return true;
8034
8035 if (!(wdev->chandef.chan->flags & IEEE80211_CHAN_RADAR))
8036 return true;
8037
8038 return regulatory_pre_cac_allowed(wdev->wiphy);
8039}
8040
db0a4ad8
JB		 8041static bool nl80211_check_scan_feat(struct wiphy *wiphy, u32 flags, u32 flag,
8042 enum nl80211_ext_feature_index feat)
8043{
8044 if (!(flags & flag))
8045 return true;
8046 if (wiphy_ext_feature_isset(wiphy, feat))
8047 return true;
8048 return false;
8049}
8050
2d23d073
RZ		 8051static int
8052nl80211_check_scan_flags(struct wiphy *wiphy, struct wireless_dev *wdev,
8053 void *request, struct nlattr **attrs,
8054 bool is_sched_scan)
8055{
8056 u8 *mac_addr, *mac_addr_mask;
8057 u32 *flags;
8058 enum nl80211_feature_flags randomness_flag;
8059
8060 if (!attrs[NL80211_ATTR_SCAN_FLAGS])
8061 return 0;
8062
8063 if (is_sched_scan) {
8064 struct cfg80211_sched_scan_request *req = request;
8065
8066 randomness_flag = wdev ?
8067 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR :
8068 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
8069 flags = &req->flags;
8070 mac_addr = req->mac_addr;
8071 mac_addr_mask = req->mac_addr_mask;
8072 } else {
8073 struct cfg80211_scan_request *req = request;
8074
8075 randomness_flag = NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
8076 flags = &req->flags;
8077 mac_addr = req->mac_addr;
8078 mac_addr_mask = req->mac_addr_mask;
8079 }
8080
8081 *flags = nla_get_u32(attrs[NL80211_ATTR_SCAN_FLAGS]);
8082
5037a009
SD		 8083 if (((*flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
8084 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
db0a4ad8
JB		 8085 !nl80211_check_scan_feat(wiphy, *flags,
8086 NL80211_SCAN_FLAG_LOW_SPAN,
8087 NL80211_EXT_FEATURE_LOW_SPAN_SCAN) ||
8088 !nl80211_check_scan_feat(wiphy, *flags,
8089 NL80211_SCAN_FLAG_LOW_POWER,
8090 NL80211_EXT_FEATURE_LOW_POWER_SCAN) ||
8091 !nl80211_check_scan_feat(wiphy, *flags,
8092 NL80211_SCAN_FLAG_HIGH_ACCURACY,
8093 NL80211_EXT_FEATURE_HIGH_ACCURACY_SCAN) ||
8094 !nl80211_check_scan_feat(wiphy, *flags,
8095 NL80211_SCAN_FLAG_FILS_MAX_CHANNEL_TIME,
8096 NL80211_EXT_FEATURE_FILS_MAX_CHANNEL_TIME) ||
8097 !nl80211_check_scan_feat(wiphy, *flags,
8098 NL80211_SCAN_FLAG_ACCEPT_BCAST_PROBE_RESP,
8099 NL80211_EXT_FEATURE_ACCEPT_BCAST_PROBE_RESP) ||
8100 !nl80211_check_scan_feat(wiphy, *flags,
8101 NL80211_SCAN_FLAG_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION,
8102 NL80211_EXT_FEATURE_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION) ||
8103 !nl80211_check_scan_feat(wiphy, *flags,
8104 NL80211_SCAN_FLAG_OCE_PROBE_REQ_HIGH_TX_RATE,
2e076f19
JB		 8105 NL80211_EXT_FEATURE_OCE_PROBE_REQ_HIGH_TX_RATE) ||
8106 !nl80211_check_scan_feat(wiphy, *flags,
8107 NL80211_SCAN_FLAG_RANDOM_SN,
8108 NL80211_EXT_FEATURE_SCAN_RANDOM_SN) ||
8109 !nl80211_check_scan_feat(wiphy, *flags,
8110 NL80211_SCAN_FLAG_MIN_PREQ_CONTENT,
8111 NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT))
2d23d073
RZ		 8112 return -EOPNOTSUPP;
8113
8114 if (*flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
8115 int err;
8116
8117 if (!(wiphy->features & randomness_flag) ||
8118 (wdev && wdev->current_bss))
8119 return -EOPNOTSUPP;
8120
8121 err = nl80211_parse_random_mac(attrs, mac_addr, mac_addr_mask);
8122 if (err)
8123 return err;
8124 }
8125
2d23d073
RZ		 8126 return 0;
8127}
8128
2a519311
JB		 8129static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
8130{
4c476991 8131 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 8132 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 8133 struct cfg80211_scan_request *request;
2032f3b2
TP		 8134 struct nlattr *scan_freqs = NULL;
8135 bool scan_freqs_khz = false;
2a519311
JB		 8136 struct nlattr *attr;
8137 struct wiphy *wiphy;
83f5e2cf 8138 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 8139 size_t ie_len;
2a519311 8140
79c97e97 8141 wiphy = &rdev->wiphy;
2a519311 8142
cb3b7d87
AB		 8143 if (wdev->iftype == NL80211_IFTYPE_NAN)
8144 return -EOPNOTSUPP;
8145
4c476991
JB		 8146 if (!rdev->ops->scan)
8147 return -EOPNOTSUPP;
2a519311 8148
83286856
CJ		 8149 if (rdev->scan_req || rdev->scan_msg)
8150 return -EBUSY;
2a519311 8151
2032f3b2
TP		 8152 if (info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ]) {
8153 if (!wiphy_ext_feature_isset(wiphy,
8154 NL80211_EXT_FEATURE_SCAN_FREQ_KHZ))
8155 return -EOPNOTSUPP;
8156 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQ_KHZ];
8157 scan_freqs_khz = true;
8158 } else if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES])
8159 scan_freqs = info->attrs[NL80211_ATTR_SCAN_FREQUENCIES];
8160
8161 if (scan_freqs) {
8162 n_channels = validate_scan_freqs(scan_freqs);
83286856
CJ		 8163 if (!n_channels)
8164 return -EINVAL;
2a519311 8165 } else {
bdfbec2d 8166 n_channels = ieee80211_get_num_supported_channels(wiphy);
2a519311
JB		 8167 }
8168
8169 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
8170 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
8171 n_ssids++;
8172
83286856
CJ		 8173 if (n_ssids > wiphy->max_scan_ssids)
8174 return -EINVAL;
2a519311 8175
70692ad2
JM		 8176 if (info->attrs[NL80211_ATTR_IE])
8177 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
8178 else
8179 ie_len = 0;
8180
83286856
CJ		 8181 if (ie_len > wiphy->max_scan_ie_len)
8182 return -EINVAL;
18a83659 8183
2a519311 8184 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 8185 + sizeof(*request->ssids) * n_ssids
8186 + sizeof(*request->channels) * n_channels
70692ad2 8187 + ie_len, GFP_KERNEL);
83286856
CJ		 8188 if (!request)
8189 return -ENOMEM;
2a519311 8190
2a519311 8191 if (n_ssids)
5ba63533 8192 request->ssids = (void *)&request->channels[n_channels];
2a519311 8193 request->n_ssids = n_ssids;
70692ad2 8194 if (ie_len) {
13874e4b 8195 if (n_ssids)
70692ad2
JM		 8196 request->ie = (void *)(request->ssids + n_ssids);
8197 else
8198 request->ie = (void *)(request->channels + n_channels);
8199 }
2a519311 8200
584991dc 8201 i = 0;
2032f3b2 8202 if (scan_freqs) {
2a519311 8203 /* user specified, bail out if channel not found */
2032f3b2 8204 nla_for_each_nested(attr, scan_freqs, tmp) {
584991dc 8205 struct ieee80211_channel *chan;
2032f3b2 8206 int freq = nla_get_u32(attr);
584991dc 8207
2032f3b2
TP		 8208 if (!scan_freqs_khz)
8209 freq = MHZ_TO_KHZ(freq);
584991dc 8210
2032f3b2 8211 chan = ieee80211_get_channel_khz(wiphy, freq);
584991dc 8212 if (!chan) {
2a519311
JB		 8213 err = -EINVAL;
8214 goto out_free;
8215 }
584991dc
JB		 8216
8217 /* ignore disabled channels */
8218 if (chan->flags & IEEE80211_CHAN_DISABLED)
8219 continue;
8220
8221 request->channels[i] = chan;
2a519311
JB		 8222 i++;
8223 }
8224 } else {
57fbcce3 8225 enum nl80211_band band;
34850ab2 8226
2a519311 8227 /* all channels */
57fbcce3 8228 for (band = 0; band < NUM_NL80211_BANDS; band++) {
2a519311 8229 int j;
7a087e74 8230
2a519311
JB		 8231 if (!wiphy->bands[band])
8232 continue;
8233 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 8234 struct ieee80211_channel *chan;
8235
8236 chan = &wiphy->bands[band]->channels[j];
8237
8238 if (chan->flags & IEEE80211_CHAN_DISABLED)
8239 continue;
8240
8241 request->channels[i] = chan;
2a519311
JB		 8242 i++;
8243 }
8244 }
8245 }
8246
584991dc
JB		 8247 if (!i) {
8248 err = -EINVAL;
8249 goto out_free;
8250 }
8251
8252 request->n_channels = i;
8253
34373d12
VT		 8254 wdev_lock(wdev);
8255 if (!cfg80211_off_channel_oper_allowed(wdev)) {
8256 struct ieee80211_channel *chan;
8257
8258 if (request->n_channels != 1) {
8259 wdev_unlock(wdev);
8260 err = -EBUSY;
8261 goto out_free;
8262 }
8263
8264 chan = request->channels[0];
8265 if (chan->center_freq != wdev->chandef.chan->center_freq) {
8266 wdev_unlock(wdev);
8267 err = -EBUSY;
8268 goto out_free;
8269 }
8270 }
8271 wdev_unlock(wdev);
8272
2a519311 8273 i = 0;
13874e4b 8274 if (n_ssids) {
2a519311 8275 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 8276 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 8277 err = -EINVAL;
8278 goto out_free;
8279 }
57a27e1d 8280 request->ssids[i].ssid_len = nla_len(attr);
2a519311 8281 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 8282 i++;
8283 }
8284 }
8285
70692ad2
JM		 8286 if (info->attrs[NL80211_ATTR_IE]) {
8287 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 8288 memcpy((void *)request->ie,
8289 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 8290 request->ie_len);
8291 }
8292
57fbcce3 8293 for (i = 0; i < NUM_NL80211_BANDS; i++)
a401d2bb
JB		 8294 if (wiphy->bands[i])
8295 request->rates[i] =
8296 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 8297
8298 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
8299 nla_for_each_nested(attr,
8300 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
8301 tmp) {
57fbcce3 8302 enum nl80211_band band = nla_type(attr);
34850ab2 8303
57fbcce3 8304 if (band < 0 || band >= NUM_NL80211_BANDS) {
34850ab2
JB		 8305 err = -EINVAL;
8306 goto out_free;
8307 }
1b09cd82
FF		 8308
8309 if (!wiphy->bands[band])
8310 continue;
8311
34850ab2
JB		 8312 err = ieee80211_get_ratemask(wiphy->bands[band],
8313 nla_data(attr),
8314 nla_len(attr),
8315 &request->rates[band]);
8316 if (err)
8317 goto out_free;
8318 }
8319 }
8320
1d76250b 8321 if (info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]) {
1d76250b
AS		 8322 request->duration =
8323 nla_get_u16(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION]);
8324 request->duration_mandatory =
8325 nla_get_flag(info->attrs[NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY]);
8326 }
8327
2d23d073
RZ		 8328 err = nl80211_check_scan_flags(wiphy, wdev, request, info->attrs,
8329 false);
8330 if (err)
8331 goto out_free;
ed473771 8332
e9f935e3
RM		 8333 request->no_cck =
8334 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
8335
2fa436b3
VK		 8336 /* Initial implementation used NL80211_ATTR_MAC to set the specific
8337 * BSSID to scan for. This was problematic because that same attribute
8338 * was already used for another purpose (local random MAC address). The
8339 * NL80211_ATTR_BSSID attribute was added to fix this. For backwards
8340 * compatibility with older userspace components, also use the
8341 * NL80211_ATTR_MAC value here if it can be determined to be used for
8342 * the specific BSSID use case instead of the random MAC address
8343 * (NL80211_ATTR_SCAN_FLAGS is used to enable random MAC address use).
8344 */
8345 if (info->attrs[NL80211_ATTR_BSSID])
8346 memcpy(request->bssid,
8347 nla_data(info->attrs[NL80211_ATTR_BSSID]), ETH_ALEN);
8348 else if (!(request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) &&
8349 info->attrs[NL80211_ATTR_MAC])
818965d3
JM		 8350 memcpy(request->bssid, nla_data(info->attrs[NL80211_ATTR_MAC]),
8351 ETH_ALEN);
8352 else
8353 eth_broadcast_addr(request->bssid);
8354
fd014284 8355 request->wdev = wdev;
79c97e97 8356 request->wiphy = &rdev->wiphy;
15d6030b 8357 request->scan_start = jiffies;
2a519311 8358
79c97e97 8359 rdev->scan_req = request;
c8cb5b85 8360 err = cfg80211_scan(rdev);
2a519311 8361
504776be
CJ		 8362 if (err)
8363 goto out_free;
8364
8365 nl80211_send_scan_start(rdev, wdev);
8366 if (wdev->netdev)
8367 dev_hold(wdev->netdev);
8368
8369 return 0;
8370
2a519311 8371 out_free:
504776be
CJ		 8372 rdev->scan_req = NULL;
8373 kfree(request);
3b85875a 8374
2a519311
JB		 8375 return err;
8376}
8377
91d3ab46
VK		 8378static int nl80211_abort_scan(struct sk_buff *skb, struct genl_info *info)
8379{
8380 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8381 struct wireless_dev *wdev = info->user_ptr[1];
8382
8383 if (!rdev->ops->abort_scan)
8384 return -EOPNOTSUPP;
8385
8386 if (rdev->scan_msg)
8387 return 0;
8388
8389 if (!rdev->scan_req)
8390 return -ENOENT;
8391
8392 rdev_abort_scan(rdev, wdev);
8393 return 0;
8394}
8395
3b06d277
AS		 8396static int
8397nl80211_parse_sched_scan_plans(struct wiphy *wiphy, int n_plans,
8398 struct cfg80211_sched_scan_request *request,
8399 struct nlattr **attrs)
8400{
8401 int tmp, err, i = 0;
8402 struct nlattr *attr;
8403
8404 if (!attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
8405 u32 interval;
8406
8407 /*
8408 * If scan plans are not specified,
5a88de53 8409 * %NL80211_ATTR_SCHED_SCAN_INTERVAL will be specified. In this
3b06d277
AS		 8410 * case one scan plan will be set with the specified scan
8411 * interval and infinite number of iterations.
8412 */
3b06d277
AS		 8413 interval = nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
8414 if (!interval)
8415 return -EINVAL;
8416
8417 request->scan_plans[0].interval =
8418 DIV_ROUND_UP(interval, MSEC_PER_SEC);
8419 if (!request->scan_plans[0].interval)
8420 return -EINVAL;
8421
8422 if (request->scan_plans[0].interval >
8423 wiphy->max_sched_scan_plan_interval)
8424 request->scan_plans[0].interval =
8425 wiphy->max_sched_scan_plan_interval;
8426
8427 return 0;
8428 }
8429
8430 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp) {
8431 struct nlattr *plan[NL80211_SCHED_SCAN_PLAN_MAX + 1];
8432
8433 if (WARN_ON(i >= n_plans))
8434 return -EINVAL;
8435
8cb08174
JB		 8436 err = nla_parse_nested_deprecated(plan,
8437 NL80211_SCHED_SCAN_PLAN_MAX,
8438 attr, nl80211_plan_policy,
8439 NULL);
3b06d277
AS		 8440 if (err)
8441 return err;
8442
8443 if (!plan[NL80211_SCHED_SCAN_PLAN_INTERVAL])
8444 return -EINVAL;
8445
8446 request->scan_plans[i].interval =
8447 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_INTERVAL]);
8448 if (!request->scan_plans[i].interval ||
8449 request->scan_plans[i].interval >
8450 wiphy->max_sched_scan_plan_interval)
8451 return -EINVAL;
8452
8453 if (plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]) {
8454 request->scan_plans[i].iterations =
8455 nla_get_u32(plan[NL80211_SCHED_SCAN_PLAN_ITERATIONS]);
8456 if (!request->scan_plans[i].iterations ||
8457 (request->scan_plans[i].iterations >
8458 wiphy->max_sched_scan_plan_iterations))
8459 return -EINVAL;
8460 } else if (i < n_plans - 1) {
8461 /*
8462 * All scan plans but the last one must specify
8463 * a finite number of iterations
8464 */
8465 return -EINVAL;
8466 }
8467
8468 i++;
8469 }
8470
8471 /*
8472 * The last scan plan must not specify the number of
8473 * iterations, it is supposed to run infinitely
8474 */
8475 if (request->scan_plans[n_plans - 1].iterations)
8476 return -EINVAL;
8477
8478 return 0;
8479}
8480
1e1b11b6 8481static int
8482nl80211_parse_sched_scan_per_band_rssi(struct wiphy *wiphy,
8483 struct cfg80211_match_set *match_sets,
8484 struct nlattr *tb_band_rssi,
8485 s32 rssi_thold)
8486{
8487 struct nlattr *attr;
8488 int i, tmp, ret = 0;
8489
8490 if (!wiphy_ext_feature_isset(wiphy,
8491 NL80211_EXT_FEATURE_SCHED_SCAN_BAND_SPECIFIC_RSSI_THOLD)) {
8492 if (tb_band_rssi)
8493 ret = -EOPNOTSUPP;
8494 else
8495 for (i = 0; i < NUM_NL80211_BANDS; i++)
8496 match_sets->per_band_rssi_thold[i] =
8497 NL80211_SCAN_RSSI_THOLD_OFF;
8498 return ret;
8499 }
8500
8501 for (i = 0; i < NUM_NL80211_BANDS; i++)
8502 match_sets->per_band_rssi_thold[i] = rssi_thold;
8503
8504 nla_for_each_nested(attr, tb_band_rssi, tmp) {
8505 enum nl80211_band band = nla_type(attr);
8506
8507 if (band < 0 || band >= NUM_NL80211_BANDS)
8508 return -EINVAL;
8509
8510 match_sets->per_band_rssi_thold[band] = nla_get_s32(attr);
8511 }
8512
8513 return 0;
8514}
8515
256da02d 8516static struct cfg80211_sched_scan_request *
ad2b26ab 8517nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
aad1e812 8518 struct nlattr **attrs, int max_match_sets)
807f8a8c
LC		 8519{
8520 struct cfg80211_sched_scan_request *request;
807f8a8c 8521 struct nlattr *attr;
3b06d277 8522 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i, n_plans = 0;
57fbcce3 8523 enum nl80211_band band;
807f8a8c 8524 size_t ie_len;
a1f1c21c 8525 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
ea73cbce 8526 s32 default_match_rssi = NL80211_SCAN_RSSI_THOLD_OFF;
807f8a8c 8527
256da02d 8528 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c 8529 n_channels = validate_scan_freqs(
256da02d 8530 attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
807f8a8c 8531 if (!n_channels)
256da02d 8532 return ERR_PTR(-EINVAL);
807f8a8c 8533 } else {
bdfbec2d 8534 n_channels = ieee80211_get_num_supported_channels(wiphy);
807f8a8c
LC		 8535 }
8536
256da02d
LC		 8537 if (attrs[NL80211_ATTR_SCAN_SSIDS])
8538 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c
LC		 8539 tmp)
8540 n_ssids++;
8541
93b6aa69 8542 if (n_ssids > wiphy->max_sched_scan_ssids)
256da02d 8543 return ERR_PTR(-EINVAL);
807f8a8c 8544
ea73cbce
JB		 8545 /*
8546 * First, count the number of 'real' matchsets. Due to an issue with
8547 * the old implementation, matchsets containing only the RSSI attribute
8548 * (NL80211_SCHED_SCAN_MATCH_ATTR_RSSI) are considered as the 'default'
8549 * RSSI for all matchsets, rather than their own matchset for reporting
8550 * all APs with a strong RSSI. This is needed to be compatible with
8551 * older userspace that treated a matchset with only the RSSI as the
8552 * global RSSI for all other matchsets - if there are other matchsets.
8553 */
256da02d 8554 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 8555 nla_for_each_nested(attr,
256da02d 8556 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
ea73cbce
JB		 8557 tmp) {
8558 struct nlattr *rssi;
8559
8cb08174
JB		 8560 err = nla_parse_nested_deprecated(tb,
8561 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
8562 attr,
8563 nl80211_match_policy,
8564 NULL);
ea73cbce 8565 if (err)
256da02d 8566 return ERR_PTR(err);
3007e352
AVS		 8567
8568 /* SSID and BSSID are mutually exclusive */
8569 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] &&
8570 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID])
8571 return ERR_PTR(-EINVAL);
8572
ea73cbce 8573 /* add other standalone attributes here */
3007e352
AVS		 8574 if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID] ||
8575 tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID]) {
ea73cbce
JB		 8576 n_match_sets++;
8577 continue;
8578 }
8579 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
8580 if (rssi)
8581 default_match_rssi = nla_get_s32(rssi);
8582 }
8583 }
8584
8585 /* However, if there's no other matchset, add the RSSI one */
8586 if (!n_match_sets && default_match_rssi != NL80211_SCAN_RSSI_THOLD_OFF)
8587 n_match_sets = 1;
a1f1c21c 8588
aad1e812 8589 if (n_match_sets > max_match_sets)
256da02d 8590 return ERR_PTR(-EINVAL);
a1f1c21c 8591
256da02d
LC		 8592 if (attrs[NL80211_ATTR_IE])
8593 ie_len = nla_len(attrs[NL80211_ATTR_IE]);
807f8a8c
LC		 8594 else
8595 ie_len = 0;
8596
5a865bad 8597 if (ie_len > wiphy->max_sched_scan_ie_len)
256da02d 8598 return ERR_PTR(-EINVAL);
c10841ca 8599
3b06d277
AS		 8600 if (attrs[NL80211_ATTR_SCHED_SCAN_PLANS]) {
8601 /*
8602 * NL80211_ATTR_SCHED_SCAN_INTERVAL must not be specified since
8603 * each scan plan already specifies its own interval
8604 */
8605 if (attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
8606 return ERR_PTR(-EINVAL);
8607
8608 nla_for_each_nested(attr,
8609 attrs[NL80211_ATTR_SCHED_SCAN_PLANS], tmp)
8610 n_plans++;
8611 } else {
8612 /*
8613 * The scan interval attribute is kept for backward
8614 * compatibility. If no scan plans are specified and sched scan
8615 * interval is specified, one scan plan will be set with this
8616 * scan interval and infinite number of iterations.
8617 */
8618 if (!attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
8619 return ERR_PTR(-EINVAL);
8620
8621 n_plans = 1;
8622 }
8623
8624 if (!n_plans || n_plans > wiphy->max_sched_scan_plans)
8625 return ERR_PTR(-EINVAL);
8626
bf95ecdb 8627 if (!wiphy_ext_feature_isset(
8628 wiphy, NL80211_EXT_FEATURE_SCHED_SCAN_RELATIVE_RSSI) &&
8629 (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI] ||
8630 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]))
8631 return ERR_PTR(-EINVAL);
8632
807f8a8c 8633 request = kzalloc(sizeof(*request)
a2cd43c5 8634 + sizeof(*request->ssids) * n_ssids
a1f1c21c 8635 + sizeof(*request->match_sets) * n_match_sets
3b06d277 8636 + sizeof(*request->scan_plans) * n_plans
a2cd43c5 8637 + sizeof(*request->channels) * n_channels
807f8a8c 8638 + ie_len, GFP_KERNEL);
256da02d
LC		 8639 if (!request)
8640 return ERR_PTR(-ENOMEM);
807f8a8c
LC		 8641
8642 if (n_ssids)
8643 request->ssids = (void *)&request->channels[n_channels];
8644 request->n_ssids = n_ssids;
8645 if (ie_len) {
13874e4b 8646 if (n_ssids)
807f8a8c
LC		 8647 request->ie = (void *)(request->ssids + n_ssids);
8648 else
8649 request->ie = (void *)(request->channels + n_channels);
8650 }
8651
a1f1c21c
LC		 8652 if (n_match_sets) {
8653 if (request->ie)
8654 request->match_sets = (void *)(request->ie + ie_len);
13874e4b 8655 else if (n_ssids)
a1f1c21c
LC		 8656 request->match_sets =
8657 (void *)(request->ssids + n_ssids);
8658 else
8659 request->match_sets =
8660 (void *)(request->channels + n_channels);
8661 }
8662 request->n_match_sets = n_match_sets;
8663
3b06d277
AS		 8664 if (n_match_sets)
8665 request->scan_plans = (void *)(request->match_sets +
8666 n_match_sets);
8667 else if (request->ie)
8668 request->scan_plans = (void *)(request->ie + ie_len);
8669 else if (n_ssids)
8670 request->scan_plans = (void *)(request->ssids + n_ssids);
8671 else
8672 request->scan_plans = (void *)(request->channels + n_channels);
8673
8674 request->n_scan_plans = n_plans;
8675
807f8a8c 8676 i = 0;
256da02d 8677 if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
807f8a8c
LC		 8678 /* user specified, bail out if channel not found */
8679 nla_for_each_nested(attr,
256da02d 8680 attrs[NL80211_ATTR_SCAN_FREQUENCIES],
807f8a8c
LC		 8681 tmp) {
8682 struct ieee80211_channel *chan;
8683
8684 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
8685
8686 if (!chan) {
8687 err = -EINVAL;
8688 goto out_free;
8689 }
8690
8691 /* ignore disabled channels */
8692 if (chan->flags & IEEE80211_CHAN_DISABLED)
8693 continue;
8694
8695 request->channels[i] = chan;
8696 i++;
8697 }
8698 } else {
8699 /* all channels */
57fbcce3 8700 for (band = 0; band < NUM_NL80211_BANDS; band++) {
807f8a8c 8701 int j;
7a087e74 8702
807f8a8c
LC		 8703 if (!wiphy->bands[band])
8704 continue;
8705 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
8706 struct ieee80211_channel *chan;
8707
8708 chan = &wiphy->bands[band]->channels[j];
8709
8710 if (chan->flags & IEEE80211_CHAN_DISABLED)
8711 continue;
8712
8713 request->channels[i] = chan;
8714 i++;
8715 }
8716 }
8717 }
8718
8719 if (!i) {
8720 err = -EINVAL;
8721 goto out_free;
8722 }
8723
8724 request->n_channels = i;
8725
8726 i = 0;
13874e4b 8727 if (n_ssids) {
256da02d 8728 nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
807f8a8c 8729 tmp) {
57a27e1d 8730 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 8731 err = -EINVAL;
8732 goto out_free;
8733 }
57a27e1d 8734 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 8735 memcpy(request->ssids[i].ssid, nla_data(attr),
8736 nla_len(attr));
807f8a8c
LC		 8737 i++;
8738 }
8739 }
8740
a1f1c21c 8741 i = 0;
256da02d 8742 if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
a1f1c21c 8743 nla_for_each_nested(attr,
256da02d 8744 attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
a1f1c21c 8745 tmp) {
3007e352 8746 struct nlattr *ssid, *bssid, *rssi;
a1f1c21c 8747
8cb08174
JB		 8748 err = nla_parse_nested_deprecated(tb,
8749 NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
8750 attr,
8751 nl80211_match_policy,
8752 NULL);
ae811e21
JB		 8753 if (err)
8754 goto out_free;
4a4ab0d7 8755 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
3007e352 8756 bssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_BSSID];
d39f3b4f
JB		 8757
8758 if (!ssid && !bssid) {
8759 i++;
8760 continue;
8761 }
8762
8763 if (WARN_ON(i >= n_match_sets)) {
8764 /* this indicates a programming error,
8765 * the loop above should have verified
8766 * things properly
8767 */
8768 err = -EINVAL;
8769 goto out_free;
8770 }
8771
8772 if (ssid) {
d39f3b4f
JB		 8773 memcpy(request->match_sets[i].ssid.ssid,
8774 nla_data(ssid), nla_len(ssid));
8775 request->match_sets[i].ssid.ssid_len =
8776 nla_len(ssid);
8777 }
cb9abd48 8778 if (bssid)
d39f3b4f
JB		 8779 memcpy(request->match_sets[i].bssid,
8780 nla_data(bssid), ETH_ALEN);
3007e352 8781
d39f3b4f
JB		 8782 /* special attribute - old implementation w/a */
8783 request->match_sets[i].rssi_thold = default_match_rssi;
8784 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
8785 if (rssi)
ea73cbce 8786 request->match_sets[i].rssi_thold =
d39f3b4f 8787 nla_get_s32(rssi);
1e1b11b6 8788
8789 /* Parse per band RSSI attribute */
8790 err = nl80211_parse_sched_scan_per_band_rssi(wiphy,
8791 &request->match_sets[i],
8792 tb[NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI],
8793 request->match_sets[i].rssi_thold);
8794 if (err)
8795 goto out_free;
8796
a1f1c21c
LC		 8797 i++;
8798 }
ea73cbce
JB		 8799
8800 /* there was no other matchset, so the RSSI one is alone */
f89f46cf 8801 if (i == 0 && n_match_sets)
ea73cbce
JB		 8802 request->match_sets[0].rssi_thold = default_match_rssi;
8803
8804 request->min_rssi_thold = INT_MAX;
8805 for (i = 0; i < n_match_sets; i++)
8806 request->min_rssi_thold =
8807 min(request->match_sets[i].rssi_thold,
8808 request->min_rssi_thold);
8809 } else {
8810 request->min_rssi_thold = NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 8811 }
8812
9900e484
JB		 8813 if (ie_len) {
8814 request->ie_len = ie_len;
807f8a8c 8815 memcpy((void *)request->ie,
256da02d 8816 nla_data(attrs[NL80211_ATTR_IE]),
807f8a8c
LC		 8817 request->ie_len);
8818 }
8819
2d23d073
RZ		 8820 err = nl80211_check_scan_flags(wiphy, wdev, request, attrs, true);
8821 if (err)
8822 goto out_free;
ed473771 8823
9c748934
LC		 8824 if (attrs[NL80211_ATTR_SCHED_SCAN_DELAY])
8825 request->delay =
8826 nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_DELAY]);
8827
bf95ecdb 8828 if (attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]) {
8829 request->relative_rssi = nla_get_s8(
8830 attrs[NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI]);
8831 request->relative_rssi_set = true;
8832 }
8833
8834 if (request->relative_rssi_set &&
8835 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]) {
8836 struct nl80211_bss_select_rssi_adjust *rssi_adjust;
8837
8838 rssi_adjust = nla_data(
8839 attrs[NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST]);
8840 request->rssi_adjust.band = rssi_adjust->band;
8841 request->rssi_adjust.delta = rssi_adjust->delta;
8842 if (!is_band_valid(wiphy, request->rssi_adjust.band)) {
8843 err = -EINVAL;
8844 goto out_free;
8845 }
8846 }
8847
3b06d277
AS		 8848 err = nl80211_parse_sched_scan_plans(wiphy, n_plans, request, attrs);
8849 if (err)
8850 goto out_free;
8851
15d6030b 8852 request->scan_start = jiffies;
807f8a8c 8853
256da02d 8854 return request;
807f8a8c
LC		 8855
8856out_free:
8857 kfree(request);
256da02d
LC		 8858 return ERR_PTR(err);
8859}
8860
8861static int nl80211_start_sched_scan(struct sk_buff *skb,
8862 struct genl_info *info)
8863{
8864 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8865 struct net_device *dev = info->user_ptr[1];
ad2b26ab 8866 struct wireless_dev *wdev = dev->ieee80211_ptr;
31a60ed1 8867 struct cfg80211_sched_scan_request *sched_scan_req;
ca986ad9 8868 bool want_multi;
256da02d
LC		 8869 int err;
8870
ca986ad9 8871 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_start)
256da02d
LC		 8872 return -EOPNOTSUPP;
8873
ca986ad9
AVS		 8874 want_multi = info->attrs[NL80211_ATTR_SCHED_SCAN_MULTI];
8875 err = cfg80211_sched_scan_req_possible(rdev, want_multi);
8876 if (err)
8877 return err;
256da02d 8878
31a60ed1 8879 sched_scan_req = nl80211_parse_sched_scan(&rdev->wiphy, wdev,
aad1e812
AVS		 8880 info->attrs,
8881 rdev->wiphy.max_match_sets);
31a60ed1
JR		 8882
8883 err = PTR_ERR_OR_ZERO(sched_scan_req);
256da02d
LC		 8884 if (err)
8885 goto out_err;
8886
ca986ad9
AVS		 8887 /* leave request id zero for legacy request
8888 * or if driver does not support multi-scheduled scan
8889 */
2fd351a8
DK		 8890 if (want_multi && rdev->wiphy.max_sched_scan_reqs > 1)
8891 sched_scan_req->reqid = cfg80211_assign_cookie(rdev);
ca986ad9 8892
31a60ed1 8893 err = rdev_sched_scan_start(rdev, dev, sched_scan_req);
256da02d
LC		 8894 if (err)
8895 goto out_free;
8896
31a60ed1
JR		 8897 sched_scan_req->dev = dev;
8898 sched_scan_req->wiphy = &rdev->wiphy;
8899
93a1e86c
JR		 8900 if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
8901 sched_scan_req->owner_nlportid = info->snd_portid;
8902
ca986ad9 8903 cfg80211_add_sched_scan_req(rdev, sched_scan_req);
256da02d 8904
96b08fd6 8905 nl80211_send_sched_scan(sched_scan_req, NL80211_CMD_START_SCHED_SCAN);
256da02d
LC		 8906 return 0;
8907
8908out_free:
31a60ed1 8909 kfree(sched_scan_req);
256da02d 8910out_err:
807f8a8c
LC		 8911 return err;
8912}
8913
8914static int nl80211_stop_sched_scan(struct sk_buff *skb,
8915 struct genl_info *info)
8916{
ca986ad9 8917 struct cfg80211_sched_scan_request *req;
807f8a8c 8918 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ca986ad9 8919 u64 cookie;
807f8a8c 8920
ca986ad9 8921 if (!rdev->wiphy.max_sched_scan_reqs || !rdev->ops->sched_scan_stop)
807f8a8c
LC		 8922 return -EOPNOTSUPP;
8923
ca986ad9
AVS		 8924 if (info->attrs[NL80211_ATTR_COOKIE]) {
8925 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
8926 return __cfg80211_stop_sched_scan(rdev, cookie, false);
8927 }
8928
8929 req = list_first_or_null_rcu(&rdev->sched_scan_req_list,
8930 struct cfg80211_sched_scan_request,
8931 list);
8932 if (!req || req->reqid ||
8933 (req->owner_nlportid &&
8934 req->owner_nlportid != info->snd_portid))
8935 return -ENOENT;
8936
8937 return cfg80211_stop_sched_scan_req(rdev, req, false);
807f8a8c
LC		 8938}
8939
04f39047
SW		 8940static int nl80211_start_radar_detection(struct sk_buff *skb,
8941 struct genl_info *info)
8942{
8943 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8944 struct net_device *dev = info->user_ptr[1];
8945 struct wireless_dev *wdev = dev->ieee80211_ptr;
13cf6dec 8946 struct wiphy *wiphy = wdev->wiphy;
04f39047 8947 struct cfg80211_chan_def chandef;
55f7435c 8948 enum nl80211_dfs_regions dfs_region;
31559f35 8949 unsigned int cac_time_ms;
04f39047
SW		 8950 int err;
8951
13cf6dec 8952 dfs_region = reg_get_dfs_region(wiphy);
55f7435c
LR		 8953 if (dfs_region == NL80211_DFS_UNSET)
8954 return -EINVAL;
8955
04f39047
SW		 8956 err = nl80211_parse_chandef(rdev, info, &chandef);
8957 if (err)
8958 return err;
8959
ff311bc1
SW		 8960 if (netif_carrier_ok(dev))
8961 return -EBUSY;
8962
04f39047
SW		 8963 if (wdev->cac_started)
8964 return -EBUSY;
8965
13cf6dec 8966 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
04f39047
SW		 8967 if (err < 0)
8968 return err;
8969
8970 if (err == 0)
8971 return -EINVAL;
8972
13cf6dec 8973 if (!cfg80211_chandef_dfs_usable(wiphy, &chandef))
04f39047
SW		 8974 return -EINVAL;
8975
13cf6dec
DL		 8976 /* CAC start is offloaded to HW and can't be started manually */
8977 if (wiphy_ext_feature_isset(wiphy, NL80211_EXT_FEATURE_DFS_OFFLOAD))
8978 return -EOPNOTSUPP;
8979
04f39047
SW		 8980 if (!rdev->ops->start_radar_detection)
8981 return -EOPNOTSUPP;
8982
31559f35
JD		 8983 cac_time_ms = cfg80211_chandef_dfs_cac_time(&rdev->wiphy, &chandef);
8984 if (WARN_ON(!cac_time_ms))
8985 cac_time_ms = IEEE80211_DFS_MIN_CAC_TIME_MS;
8986
a1056b1b 8987 err = rdev_start_radar_detection(rdev, dev, &chandef, cac_time_ms);
04f39047 8988 if (!err) {
9e0e2961 8989 wdev->chandef = chandef;
04f39047
SW		 8990 wdev->cac_started = true;
8991 wdev->cac_start_time = jiffies;
31559f35 8992 wdev->cac_time_ms = cac_time_ms;
04f39047 8993 }
04f39047
SW		 8994 return err;
8995}
8996
30c63115
S		 8997static int nl80211_notify_radar_detection(struct sk_buff *skb,
8998 struct genl_info *info)
8999{
9000 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9001 struct net_device *dev = info->user_ptr[1];
9002 struct wireless_dev *wdev = dev->ieee80211_ptr;
9003 struct wiphy *wiphy = wdev->wiphy;
9004 struct cfg80211_chan_def chandef;
9005 enum nl80211_dfs_regions dfs_region;
9006 int err;
9007
9008 dfs_region = reg_get_dfs_region(wiphy);
9009 if (dfs_region == NL80211_DFS_UNSET) {
9010 GENL_SET_ERR_MSG(info,
9011 "DFS Region is not set. Unexpected Radar indication");
9012 return -EINVAL;
9013 }
9014
9015 err = nl80211_parse_chandef(rdev, info, &chandef);
9016 if (err) {
9017 GENL_SET_ERR_MSG(info, "Unable to extract chandef info");
9018 return err;
9019 }
9020
9021 err = cfg80211_chandef_dfs_required(wiphy, &chandef, wdev->iftype);
9022 if (err < 0) {
9023 GENL_SET_ERR_MSG(info, "chandef is invalid");
9024 return err;
9025 }
9026
9027 if (err == 0) {
9028 GENL_SET_ERR_MSG(info,
9029 "Unexpected Radar indication for chandef/iftype");
9030 return -EINVAL;
9031 }
9032
9033 /* Do not process this notification if radar is already detected
9034 * by kernel on this channel, and return success.
9035 */
9036 if (chandef.chan->dfs_state == NL80211_DFS_UNAVAILABLE)
9037 return 0;
9038
9039 cfg80211_set_dfs_state(wiphy, &chandef, NL80211_DFS_UNAVAILABLE);
9040
9041 cfg80211_sched_dfs_chan_update(rdev);
9042
a680fe46 9043 rdev->radar_chandef = chandef;
30c63115
S		 9044
9045 /* Propagate this notification to other radios as well */
9046 queue_work(cfg80211_wq, &rdev->propagate_radar_detect_wk);
9047
9048 return 0;
9049}
9050
16ef1fe2
SW		 9051static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
9052{
9053 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9054 struct net_device *dev = info->user_ptr[1];
9055 struct wireless_dev *wdev = dev->ieee80211_ptr;
9056 struct cfg80211_csa_settings params;
9057 /* csa_attrs is defined static to avoid waste of stack size - this
9058 * function is called under RTNL lock, so this should not be a problem.
9059 */
9060 static struct nlattr *csa_attrs[NL80211_ATTR_MAX+1];
16ef1fe2 9061 int err;
ee4bc9e7 9062 bool need_new_beacon = false;
8d9de16f 9063 bool need_handle_dfs_flag = true;
9a774c78 9064 int len, i;
252e07ca 9065 u32 cs_count;
16ef1fe2
SW		 9066
9067 if (!rdev->ops->channel_switch ||
9068 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH))
9069 return -EOPNOTSUPP;
9070
ee4bc9e7
SW		 9071 switch (dev->ieee80211_ptr->iftype) {
9072 case NL80211_IFTYPE_AP:
9073 case NL80211_IFTYPE_P2P_GO:
9074 need_new_beacon = true;
8d9de16f
BB		 9075 /* For all modes except AP the handle_dfs flag needs to be
9076 * supplied to tell the kernel that userspace will handle radar
9077 * events when they happen. Otherwise a switch to a channel
9078 * requiring DFS will be rejected.
9079 */
9080 need_handle_dfs_flag = false;
ee4bc9e7
SW		 9081
9082 /* useless if AP is not running */
9083 if (!wdev->beacon_interval)
1ff79dfa 9084 return -ENOTCONN;
ee4bc9e7
SW		 9085 break;
9086 case NL80211_IFTYPE_ADHOC:
1ff79dfa
JB		 9087 if (!wdev->ssid_len)
9088 return -ENOTCONN;
9089 break;
c6da674a 9090 case NL80211_IFTYPE_MESH_POINT:
1ff79dfa
JB		 9091 if (!wdev->mesh_id_len)
9092 return -ENOTCONN;
ee4bc9e7
SW		 9093 break;
9094 default:
16ef1fe2 9095 return -EOPNOTSUPP;
ee4bc9e7 9096 }
16ef1fe2
SW		 9097
9098 memset(&params, 0, sizeof(params));
c177db2d 9099 params.beacon_csa.ftm_responder = -1;
16ef1fe2
SW		 9100
9101 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
9102 !info->attrs[NL80211_ATTR_CH_SWITCH_COUNT])
9103 return -EINVAL;
9104
9105 /* only important for AP, IBSS and mesh create IEs internally */
d0a361a5 9106 if (need_new_beacon && !info->attrs[NL80211_ATTR_CSA_IES])
16ef1fe2
SW		 9107 return -EINVAL;
9108
252e07ca
LC		 9109 /* Even though the attribute is u32, the specification says
9110 * u8, so let's make sure we don't overflow.
9111 */
9112 cs_count = nla_get_u32(info->attrs[NL80211_ATTR_CH_SWITCH_COUNT]);
9113 if (cs_count > 255)
9114 return -EINVAL;
9115
9116 params.count = cs_count;
16ef1fe2 9117
ee4bc9e7
SW		 9118 if (!need_new_beacon)
9119 goto skip_beacons;
9120
81e54d08 9121 err = nl80211_parse_beacon(rdev, info->attrs, &params.beacon_after);
16ef1fe2
SW		 9122 if (err)
9123 return err;
9124
8cb08174
JB		 9125 err = nla_parse_nested_deprecated(csa_attrs, NL80211_ATTR_MAX,
9126 info->attrs[NL80211_ATTR_CSA_IES],
9127 nl80211_policy, info->extack);
16ef1fe2
SW		 9128 if (err)
9129 return err;
9130
81e54d08 9131 err = nl80211_parse_beacon(rdev, csa_attrs, &params.beacon_csa);
16ef1fe2
SW		 9132 if (err)
9133 return err;
9134
00c207ed 9135 if (!csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON])
16ef1fe2
SW		 9136 return -EINVAL;
9137
00c207ed 9138 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
9a774c78 9139 if (!len || (len % sizeof(u16)))
16ef1fe2
SW		 9140 return -EINVAL;
9141
9a774c78
AO		 9142 params.n_counter_offsets_beacon = len / sizeof(u16);
9143 if (rdev->wiphy.max_num_csa_counters &&
9144 (params.n_counter_offsets_beacon >
9145 rdev->wiphy.max_num_csa_counters))
16ef1fe2
SW		 9146 return -EINVAL;
9147
9a774c78 9148 params.counter_offsets_beacon =
00c207ed 9149 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_BEACON]);
9a774c78
AO		 9150
9151 /* sanity checks - counters should fit and be the same */
9152 for (i = 0; i < params.n_counter_offsets_beacon; i++) {
9153 u16 offset = params.counter_offsets_beacon[i];
9154
9155 if (offset >= params.beacon_csa.tail_len)
9156 return -EINVAL;
9157
9158 if (params.beacon_csa.tail[offset] != params.count)
9159 return -EINVAL;
9160 }
9161
00c207ed
JC		 9162 if (csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]) {
9163 len = nla_len(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
9a774c78 9164 if (!len || (len % sizeof(u16)))
16ef1fe2
SW		 9165 return -EINVAL;
9166
9a774c78
AO		 9167 params.n_counter_offsets_presp = len / sizeof(u16);
9168 if (rdev->wiphy.max_num_csa_counters &&
ad5987b4 9169 (params.n_counter_offsets_presp >
9a774c78 9170 rdev->wiphy.max_num_csa_counters))
16ef1fe2 9171 return -EINVAL;
9a774c78
AO		 9172
9173 params.counter_offsets_presp =
00c207ed 9174 nla_data(csa_attrs[NL80211_ATTR_CNTDWN_OFFS_PRESP]);
9a774c78
AO		 9175
9176 /* sanity checks - counters should fit and be the same */
9177 for (i = 0; i < params.n_counter_offsets_presp; i++) {
9178 u16 offset = params.counter_offsets_presp[i];
9179
9180 if (offset >= params.beacon_csa.probe_resp_len)
9181 return -EINVAL;
9182
9183 if (params.beacon_csa.probe_resp[offset] !=
9184 params.count)
9185 return -EINVAL;
9186 }
16ef1fe2
SW		 9187 }
9188
ee4bc9e7 9189skip_beacons:
16ef1fe2
SW		 9190 err = nl80211_parse_chandef(rdev, info, &params.chandef);
9191 if (err)
9192 return err;
9193
923b352f
AN		 9194 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &params.chandef,
9195 wdev->iftype))
16ef1fe2
SW		 9196 return -EINVAL;
9197
2beb6dab
LC		 9198 err = cfg80211_chandef_dfs_required(wdev->wiphy,
9199 &params.chandef,
9200 wdev->iftype);
9201 if (err < 0)
9202 return err;
9203
8d9de16f 9204 if (err > 0) {
2beb6dab 9205 params.radar_required = true;
8d9de16f
BB		 9206 if (need_handle_dfs_flag &&
9207 !nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS])) {
9208 return -EINVAL;
9209 }
9210 }
16ef1fe2 9211
16ef1fe2
SW		 9212 if (info->attrs[NL80211_ATTR_CH_SWITCH_BLOCK_TX])
9213 params.block_tx = true;
9214
c56589ed
SW		 9215 wdev_lock(wdev);
9216 err = rdev_channel_switch(rdev, dev, &params);
9217 wdev_unlock(wdev);
9218
9219 return err;
16ef1fe2
SW		 9220}
9221
9720bb3a
JB		 9222static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
9223 u32 seq, int flags,
2a519311 9224 struct cfg80211_registered_device *rdev,
48ab905d
JB		 9225 struct wireless_dev *wdev,
9226 struct cfg80211_internal_bss *intbss)
2a519311 9227{
48ab905d 9228 struct cfg80211_bss *res = &intbss->pub;
9caf0364 9229 const struct cfg80211_bss_ies *ies;
2a519311
JB		 9230 void *hdr;
9231 struct nlattr *bss;
48ab905d
JB		 9232
9233 ASSERT_WDEV_LOCK(wdev);
2a519311 9234
15e47304 9235 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 9236 NL80211_CMD_NEW_SCAN_RESULTS);
9237 if (!hdr)
9238 return -1;
9239
0a833c29 9240 genl_dump_check_consistent(cb, hdr);
9720bb3a 9241
97990a06
JB		 9242 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation))
9243 goto nla_put_failure;
9244 if (wdev->netdev &&
9360ffd1
DM		 9245 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
9246 goto nla_put_failure;
2dad624e
ND		 9247 if (nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
9248 NL80211_ATTR_PAD))
97990a06 9249 goto nla_put_failure;
2a519311 9250
ae0be8de 9251 bss = nla_nest_start_noflag(msg, NL80211_ATTR_BSS);
2a519311
JB		 9252 if (!bss)
9253 goto nla_put_failure;
9360ffd1 9254 if ((!is_zero_ether_addr(res->bssid) &&
9caf0364 9255 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
9360ffd1 9256 goto nla_put_failure;
9caf0364
JB		 9257
9258 rcu_read_lock();
0e227084
JB		 9259 /* indicate whether we have probe response data or not */
9260 if (rcu_access_pointer(res->proberesp_ies) &&
9261 nla_put_flag(msg, NL80211_BSS_PRESP_DATA))
9262 goto fail_unlock_rcu;
9263
9264 /* this pointer prefers to be pointed to probe response data
9265 * but is always valid
9266 */
9caf0364 9267 ies = rcu_dereference(res->ies);
8cef2c9d 9268 if (ies) {
2dad624e
ND		 9269 if (nla_put_u64_64bit(msg, NL80211_BSS_TSF, ies->tsf,
9270 NL80211_BSS_PAD))
8cef2c9d 9271 goto fail_unlock_rcu;
8cef2c9d
JB		 9272 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
9273 ies->len, ies->data))
9274 goto fail_unlock_rcu;
9caf0364 9275 }
0e227084
JB		 9276
9277 /* and this pointer is always (unless driver didn't know) beacon data */
9caf0364 9278 ies = rcu_dereference(res->beacon_ies);
0e227084 9279 if (ies && ies->from_beacon) {
2dad624e
ND		 9280 if (nla_put_u64_64bit(msg, NL80211_BSS_BEACON_TSF, ies->tsf,
9281 NL80211_BSS_PAD))
8cef2c9d
JB		 9282 goto fail_unlock_rcu;
9283 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
9284 ies->len, ies->data))
9285 goto fail_unlock_rcu;
9caf0364
JB		 9286 }
9287 rcu_read_unlock();
9288
9360ffd1
DM		 9289 if (res->beacon_interval &&
9290 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
9291 goto nla_put_failure;
9292 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
9293 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
942ba88b
TP		 9294 nla_put_u32(msg, NL80211_BSS_FREQUENCY_OFFSET,
9295 res->channel->freq_offset) ||
dcd6eac1 9296 nla_put_u32(msg, NL80211_BSS_CHAN_WIDTH, res->scan_width) ||
9360ffd1
DM		 9297 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
9298 jiffies_to_msecs(jiffies - intbss->ts)))
9299 goto nla_put_failure;
2a519311 9300
1d76250b
AS		 9301 if (intbss->parent_tsf &&
9302 (nla_put_u64_64bit(msg, NL80211_BSS_PARENT_TSF,
9303 intbss->parent_tsf, NL80211_BSS_PAD) ||
9304 nla_put(msg, NL80211_BSS_PARENT_BSSID, ETH_ALEN,
9305 intbss->parent_bssid)))
9306 goto nla_put_failure;
9307
6e19bc4b 9308 if (intbss->ts_boottime &&
2dad624e
ND		 9309 nla_put_u64_64bit(msg, NL80211_BSS_LAST_SEEN_BOOTTIME,
9310 intbss->ts_boottime, NL80211_BSS_PAD))
6e19bc4b
DS		 9311 goto nla_put_failure;
9312
983dafaa
SD		 9313 if (!nl80211_put_signal(msg, intbss->pub.chains,
9314 intbss->pub.chain_signal,
9315 NL80211_BSS_CHAIN_SIGNAL))
9316 goto nla_put_failure;
9317
77965c97 9318 switch (rdev->wiphy.signal_type) {
2a519311 9319 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 9320 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
9321 goto nla_put_failure;
2a519311
JB		 9322 break;
9323 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 9324 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
9325 goto nla_put_failure;
2a519311
JB		 9326 break;
9327 default:
9328 break;
9329 }
9330
48ab905d 9331 switch (wdev->iftype) {
074ac8df 9332 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 9333 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 9334 if (intbss == wdev->current_bss &&
9335 nla_put_u32(msg, NL80211_BSS_STATUS,
9336 NL80211_BSS_STATUS_ASSOCIATED))
9337 goto nla_put_failure;
48ab905d
JB		 9338 break;
9339 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 9340 if (intbss == wdev->current_bss &&
9341 nla_put_u32(msg, NL80211_BSS_STATUS,
9342 NL80211_BSS_STATUS_IBSS_JOINED))
9343 goto nla_put_failure;
48ab905d
JB		 9344 break;
9345 default:
9346 break;
9347 }
9348
2a519311
JB		 9349 nla_nest_end(msg, bss);
9350
053c095a
JB		 9351 genlmsg_end(msg, hdr);
9352 return 0;
2a519311 9353
8cef2c9d
JB		 9354 fail_unlock_rcu:
9355 rcu_read_unlock();
2a519311
JB		 9356 nla_put_failure:
9357 genlmsg_cancel(msg, hdr);
9358 return -EMSGSIZE;
9359}
9360
97990a06 9361static int nl80211_dump_scan(struct sk_buff *skb, struct netlink_callback *cb)
2a519311 9362{
48ab905d 9363 struct cfg80211_registered_device *rdev;
2a519311 9364 struct cfg80211_internal_bss *scan;
48ab905d 9365 struct wireless_dev *wdev;
97990a06 9366 int start = cb->args[2], idx = 0;
2a519311
JB		 9367 int err;
9368
ea90e0dc 9369 rtnl_lock();
5297c65c 9370 err = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
ea90e0dc
JB		 9371 if (err) {
9372 rtnl_unlock();
67748893 9373 return err;
ea90e0dc 9374 }
2a519311 9375
48ab905d
JB		 9376 wdev_lock(wdev);
9377 spin_lock_bh(&rdev->bss_lock);
d1e23c94
DK		 9378
9379 /*
9380 * dump_scan will be called multiple times to break up the scan results
9381 * into multiple messages. It is unlikely that any more bss-es will be
9382 * expired after the first call, so only call only call this on the
9383 * first dump_scan invocation.
9384 */
9385 if (start == 0)
9386 cfg80211_bss_expire(rdev);
48ab905d 9387
9720bb3a
JB		 9388 cb->seq = rdev->bss_generation;
9389
48ab905d 9390 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 9391 if (++idx <= start)
9392 continue;
9720bb3a 9393 if (nl80211_send_bss(skb, cb,
2a519311 9394 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 9395 rdev, wdev, scan) < 0) {
2a519311 9396 idx--;
67748893 9397 break;
2a519311
JB		 9398 }
9399 }
9400
48ab905d
JB		 9401 spin_unlock_bh(&rdev->bss_lock);
9402 wdev_unlock(wdev);
2a519311 9403
97990a06 9404 cb->args[2] = idx;
ea90e0dc 9405 rtnl_unlock();
2a519311 9406
67748893 9407 return skb->len;
2a519311
JB		 9408}
9409
15e47304 9410static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
11f78ac3
JB		 9411 int flags, struct net_device *dev,
9412 bool allow_radio_stats,
9413 struct survey_info *survey)
61fa713c
HS		 9414{
9415 void *hdr;
9416 struct nlattr *infoattr;
9417
11f78ac3
JB		 9418 /* skip radio stats if userspace didn't request them */
9419 if (!survey->channel && !allow_radio_stats)
9420 return 0;
9421
15e47304 9422 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 9423 NL80211_CMD_NEW_SURVEY_RESULTS);
9424 if (!hdr)
9425 return -ENOMEM;
9426
9360ffd1
DM		 9427 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9428 goto nla_put_failure;
61fa713c 9429
ae0be8de 9430 infoattr = nla_nest_start_noflag(msg, NL80211_ATTR_SURVEY_INFO);
61fa713c
HS		 9431 if (!infoattr)
9432 goto nla_put_failure;
9433
11f78ac3
JB		 9434 if (survey->channel &&
9435 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
9360ffd1
DM		 9436 survey->channel->center_freq))
9437 goto nla_put_failure;
58ef7c1b
TP		 9438
9439 if (survey->channel && survey->channel->freq_offset &&
9440 nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY_OFFSET,
9441 survey->channel->freq_offset))
9442 goto nla_put_failure;
9360ffd1
DM		 9443
9444 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
9445 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
9446 goto nla_put_failure;
9447 if ((survey->filled & SURVEY_INFO_IN_USE) &&
9448 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
9449 goto nla_put_failure;
4ed20beb 9450 if ((survey->filled & SURVEY_INFO_TIME) &&
2dad624e
ND		 9451 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME,
9452 survey->time, NL80211_SURVEY_INFO_PAD))
9360ffd1 9453 goto nla_put_failure;
4ed20beb 9454 if ((survey->filled & SURVEY_INFO_TIME_BUSY) &&
2dad624e
ND		 9455 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BUSY,
9456 survey->time_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 9457 goto nla_put_failure;
4ed20beb 9458 if ((survey->filled & SURVEY_INFO_TIME_EXT_BUSY) &&
2dad624e
ND		 9459 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_EXT_BUSY,
9460 survey->time_ext_busy, NL80211_SURVEY_INFO_PAD))
9360ffd1 9461 goto nla_put_failure;
4ed20beb 9462 if ((survey->filled & SURVEY_INFO_TIME_RX) &&
2dad624e
ND		 9463 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_RX,
9464 survey->time_rx, NL80211_SURVEY_INFO_PAD))
9360ffd1 9465 goto nla_put_failure;
4ed20beb 9466 if ((survey->filled & SURVEY_INFO_TIME_TX) &&
2dad624e
ND		 9467 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_TX,
9468 survey->time_tx, NL80211_SURVEY_INFO_PAD))
9360ffd1 9469 goto nla_put_failure;
052536ab 9470 if ((survey->filled & SURVEY_INFO_TIME_SCAN) &&
2dad624e
ND		 9471 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_SCAN,
9472 survey->time_scan, NL80211_SURVEY_INFO_PAD))
052536ab 9473 goto nla_put_failure;
c8cd6e7f
FF		 9474 if ((survey->filled & SURVEY_INFO_TIME_BSS_RX) &&
9475 nla_put_u64_64bit(msg, NL80211_SURVEY_INFO_TIME_BSS_RX,
9476 survey->time_bss_rx, NL80211_SURVEY_INFO_PAD))
9477 goto nla_put_failure;
61fa713c
HS		 9478
9479 nla_nest_end(msg, infoattr);
9480
053c095a
JB		 9481 genlmsg_end(msg, hdr);
9482 return 0;
61fa713c
HS		 9483
9484 nla_put_failure:
9485 genlmsg_cancel(msg, hdr);
9486 return -EMSGSIZE;
9487}
9488
11f78ac3 9489static int nl80211_dump_survey(struct sk_buff *skb, struct netlink_callback *cb)
61fa713c 9490{
50508d94 9491 struct nlattr **attrbuf;
61fa713c 9492 struct survey_info survey;
1b8ec87a 9493 struct cfg80211_registered_device *rdev;
97990a06
JB		 9494 struct wireless_dev *wdev;
9495 int survey_idx = cb->args[2];
61fa713c 9496 int res;
11f78ac3 9497 bool radio_stats;
61fa713c 9498
50508d94
JB		 9499 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
9500 if (!attrbuf)
9501 return -ENOMEM;
9502
ea90e0dc 9503 rtnl_lock();
5297c65c 9504 res = nl80211_prepare_wdev_dump(cb, &rdev, &wdev);
67748893 9505 if (res)
ea90e0dc 9506 goto out_err;
61fa713c 9507
11f78ac3 9508 /* prepare_wdev_dump parsed the attributes */
c90c39da 9509 radio_stats = attrbuf[NL80211_ATTR_SURVEY_RADIO_STATS];
11f78ac3 9510
97990a06
JB		 9511 if (!wdev->netdev) {
9512 res = -EINVAL;
9513 goto out_err;
9514 }
9515
1b8ec87a 9516 if (!rdev->ops->dump_survey) {
61fa713c
HS		 9517 res = -EOPNOTSUPP;
9518 goto out_err;
9519 }
9520
9521 while (1) {
1b8ec87a 9522 res = rdev_dump_survey(rdev, wdev->netdev, survey_idx, &survey);
61fa713c
HS		 9523 if (res == -ENOENT)
9524 break;
9525 if (res)
9526 goto out_err;
9527
11f78ac3
JB		 9528 /* don't send disabled channels, but do send non-channel data */
9529 if (survey.channel &&
9530 survey.channel->flags & IEEE80211_CHAN_DISABLED) {
180cdc79
LR		 9531 survey_idx++;
9532 continue;
9533 }
9534
61fa713c 9535 if (nl80211_send_survey(skb,
15e47304 9536 NETLINK_CB(cb->skb).portid,
61fa713c 9537 cb->nlh->nlmsg_seq, NLM_F_MULTI,
11f78ac3 9538 wdev->netdev, radio_stats, &survey) < 0)
61fa713c
HS		 9539 goto out;
9540 survey_idx++;
9541 }
9542
9543 out:
97990a06 9544 cb->args[2] = survey_idx;
61fa713c
HS		 9545 res = skb->len;
9546 out_err:
50508d94 9547 kfree(attrbuf);
ea90e0dc 9548 rtnl_unlock();
61fa713c
HS		 9549 return res;
9550}
9551
b23aa676
SO		 9552static bool nl80211_valid_wpa_versions(u32 wpa_versions)
9553{
9554 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
cc3e14c2
CHH		 9555 NL80211_WPA_VERSION_2 |
9556 NL80211_WPA_VERSION_3));
b23aa676
SO		 9557}
9558
636a5d36
JM		 9559static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
9560{
4c476991
JB		 9561 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9562 struct net_device *dev = info->user_ptr[1];
19957bb3 9563 struct ieee80211_channel *chan;
11b6b5a4
JM		 9564 const u8 *bssid, *ssid, *ie = NULL, *auth_data = NULL;
9565 int err, ssid_len, ie_len = 0, auth_data_len = 0;
19957bb3 9566 enum nl80211_auth_type auth_type;
fffd0934 9567 struct key_parse key;
d5cdfacb 9568 bool local_state_change;
942ba88b 9569 u32 freq;
636a5d36 9570
f4a11bb0
JB		 9571 if (!info->attrs[NL80211_ATTR_MAC])
9572 return -EINVAL;
9573
1778092e
JM		 9574 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
9575 return -EINVAL;
9576
19957bb3
JB		 9577 if (!info->attrs[NL80211_ATTR_SSID])
9578 return -EINVAL;
9579
9580 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
9581 return -EINVAL;
9582
fffd0934
JB		 9583 err = nl80211_parse_key(info, &key);
9584 if (err)
9585 return err;
9586
9587 if (key.idx >= 0) {
e31b8213
JB		 9588 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
9589 return -EINVAL;
fffd0934
JB		 9590 if (!key.p.key || !key.p.key_len)
9591 return -EINVAL;
9592 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
9593 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
9594 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
9595 key.p.key_len != WLAN_KEY_LEN_WEP104))
9596 return -EINVAL;
b6b5555b 9597 if (key.idx > 3)
fffd0934
JB		 9598 return -EINVAL;
9599 } else {
9600 key.p.key_len = 0;
9601 key.p.key = NULL;
9602 }
9603
afea0b7a
JB		 9604 if (key.idx >= 0) {
9605 int i;
9606 bool ok = false;
7a087e74 9607
afea0b7a
JB		 9608 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
9609 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
9610 ok = true;
9611 break;
9612 }
9613 }
4c476991
JB		 9614 if (!ok)
9615 return -EINVAL;
afea0b7a
JB		 9616 }
9617
4c476991
JB		 9618 if (!rdev->ops->auth)
9619 return -EOPNOTSUPP;
636a5d36 9620
074ac8df 9621 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9622 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9623 return -EOPNOTSUPP;
eec60b03 9624
19957bb3 9625 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
942ba88b
TP		 9626 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
9627 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
9628 freq +=
9629 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
9630
9631 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 9632 if (!chan)
4c476991 9633 return -EINVAL;
636a5d36 9634
19957bb3
JB		 9635 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9636 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 9637
9638 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9639 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9640 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9641 }
9642
19957bb3 9643 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 9644 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 9645 return -EINVAL;
636a5d36 9646
63181060
JM		 9647 if ((auth_type == NL80211_AUTHTYPE_SAE ||
9648 auth_type == NL80211_AUTHTYPE_FILS_SK ||
9649 auth_type == NL80211_AUTHTYPE_FILS_SK_PFS ||
9650 auth_type == NL80211_AUTHTYPE_FILS_PK) &&
11b6b5a4 9651 !info->attrs[NL80211_ATTR_AUTH_DATA])
e39e5b5e
JM		 9652 return -EINVAL;
9653
11b6b5a4 9654 if (info->attrs[NL80211_ATTR_AUTH_DATA]) {
63181060
JM		 9655 if (auth_type != NL80211_AUTHTYPE_SAE &&
9656 auth_type != NL80211_AUTHTYPE_FILS_SK &&
9657 auth_type != NL80211_AUTHTYPE_FILS_SK_PFS &&
9658 auth_type != NL80211_AUTHTYPE_FILS_PK)
e39e5b5e 9659 return -EINVAL;
11b6b5a4
JM		 9660 auth_data = nla_data(info->attrs[NL80211_ATTR_AUTH_DATA]);
9661 auth_data_len = nla_len(info->attrs[NL80211_ATTR_AUTH_DATA]);
e39e5b5e
JM		 9662 }
9663
d5cdfacb
JM		 9664 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
9665
95de817b
JB		 9666 /*
9667 * Since we no longer track auth state, ignore
9668 * requests to only change local state.
9669 */
9670 if (local_state_change)
9671 return 0;
9672
91bf9b26
JB		 9673 wdev_lock(dev->ieee80211_ptr);
9674 err = cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
9675 ssid, ssid_len, ie, ie_len,
9676 key.p.key, key.p.key_len, key.idx,
11b6b5a4 9677 auth_data, auth_data_len);
91bf9b26
JB		 9678 wdev_unlock(dev->ieee80211_ptr);
9679 return err;
636a5d36
JM		 9680}
9681
64bf3d4b
DK		 9682static int validate_pae_over_nl80211(struct cfg80211_registered_device *rdev,
9683 struct genl_info *info)
9684{
9685 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
9686 GENL_SET_ERR_MSG(info, "SOCKET_OWNER not set");
9687 return -EINVAL;
9688 }
9689
9690 if (!rdev->ops->tx_control_port ||
9691 !wiphy_ext_feature_isset(&rdev->wiphy,
9692 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
9693 return -EOPNOTSUPP;
9694
9695 return 0;
9696}
9697
c0692b8f
JB		 9698static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
9699 struct genl_info *info,
3dc27d25
JB		 9700 struct cfg80211_crypto_settings *settings,
9701 int cipher_limit)
b23aa676 9702{
c0b2bbd8
JB		 9703 memset(settings, 0, sizeof(*settings));
9704
b23aa676
SO		 9705 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
9706
c0692b8f
JB		 9707 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
9708 u16 proto;
7a087e74 9709
c0692b8f
JB		 9710 proto = nla_get_u16(
9711 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
9712 settings->control_port_ethertype = cpu_to_be16(proto);
9713 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
9714 proto != ETH_P_PAE)
9715 return -EINVAL;
9716 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
9717 settings->control_port_no_encrypt = true;
9718 } else
9719 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
9720
64bf3d4b
DK		 9721 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
9722 int r = validate_pae_over_nl80211(rdev, info);
9723
9724 if (r < 0)
9725 return r;
9726
9727 settings->control_port_over_nl80211 = true;
7f3f96ce
MT		 9728
9729 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_PREAUTH])
9730 settings->control_port_no_preauth = true;
64bf3d4b
DK		 9731 }
9732
b23aa676
SO		 9733 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
9734 void *data;
9735 int len, i;
9736
9737 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
9738 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
9739 settings->n_ciphers_pairwise = len / sizeof(u32);
9740
9741 if (len % sizeof(u32))
9742 return -EINVAL;
9743
3dc27d25 9744 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 9745 return -EINVAL;
9746
9747 memcpy(settings->ciphers_pairwise, data, len);
9748
9749 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 9750 if (!cfg80211_supported_cipher_suite(
9751 &rdev->wiphy,
b23aa676
SO		 9752 settings->ciphers_pairwise[i]))
9753 return -EINVAL;
9754 }
9755
9756 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
9757 settings->cipher_group =
9758 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 9759 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
9760 settings->cipher_group))
b23aa676
SO		 9761 return -EINVAL;
9762 }
9763
9764 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
9765 settings->wpa_versions =
9766 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
9767 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
9768 return -EINVAL;
9769 }
9770
9771 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
9772 void *data;
6d30240e 9773 int len;
b23aa676
SO		 9774
9775 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
9776 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
9777 settings->n_akm_suites = len / sizeof(u32);
9778
9779 if (len % sizeof(u32))
9780 return -EINVAL;
9781
1b9ca027
JM		 9782 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
9783 return -EINVAL;
9784
b23aa676 9785 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 9786 }
9787
91b5ab62
EP		 9788 if (info->attrs[NL80211_ATTR_PMK]) {
9789 if (nla_len(info->attrs[NL80211_ATTR_PMK]) != WLAN_PMK_LEN)
9790 return -EINVAL;
9791 if (!wiphy_ext_feature_isset(&rdev->wiphy,
f9662274
CHH		 9792 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_PSK) &&
9793 !wiphy_ext_feature_isset(&rdev->wiphy,
9794 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_AP_PSK))
91b5ab62
EP		 9795 return -EINVAL;
9796 settings->psk = nla_data(info->attrs[NL80211_ATTR_PMK]);
9797 }
9798
26f7044e
CHH		 9799 if (info->attrs[NL80211_ATTR_SAE_PASSWORD]) {
9800 if (!wiphy_ext_feature_isset(&rdev->wiphy,
2831a631
CHH		 9801 NL80211_EXT_FEATURE_SAE_OFFLOAD) &&
9802 !wiphy_ext_feature_isset(&rdev->wiphy,
9803 NL80211_EXT_FEATURE_SAE_OFFLOAD_AP))
26f7044e
CHH		 9804 return -EINVAL;
9805 settings->sae_pwd =
9806 nla_data(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
9807 settings->sae_pwd_len =
9808 nla_len(info->attrs[NL80211_ATTR_SAE_PASSWORD]);
9809 }
9810
9f0ffa41
RD		 9811 if (info->attrs[NL80211_ATTR_SAE_PWE])
9812 settings->sae_pwe =
9813 nla_get_u8(info->attrs[NL80211_ATTR_SAE_PWE]);
9814 else
9815 settings->sae_pwe = NL80211_SAE_PWE_UNSPECIFIED;
9816
b23aa676
SO		 9817 return 0;
9818}
9819
636a5d36
JM		 9820static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
9821{
4c476991
JB		 9822 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9823 struct net_device *dev = info->user_ptr[1];
f444de05 9824 struct ieee80211_channel *chan;
f62fab73
JB		 9825 struct cfg80211_assoc_request req = {};
9826 const u8 *bssid, *ssid;
9827 int err, ssid_len = 0;
942ba88b 9828 u32 freq;
636a5d36 9829
bad29297
AZ		 9830 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9831 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9832 return -EPERM;
9833
f4a11bb0 9834 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 9835 !info->attrs[NL80211_ATTR_SSID] ||
9836 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 9837 return -EINVAL;
9838
4c476991
JB		 9839 if (!rdev->ops->assoc)
9840 return -EOPNOTSUPP;
636a5d36 9841
074ac8df 9842 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9843 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9844 return -EOPNOTSUPP;
eec60b03 9845
19957bb3 9846 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9847
942ba88b
TP		 9848 freq = MHZ_TO_KHZ(nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
9849 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
9850 freq +=
9851 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
9852 chan = nl80211_get_valid_chan(&rdev->wiphy, freq);
664834de 9853 if (!chan)
4c476991 9854 return -EINVAL;
636a5d36 9855
19957bb3
JB		 9856 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
9857 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 9858
9859 if (info->attrs[NL80211_ATTR_IE]) {
f62fab73
JB		 9860 req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9861 req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 9862 }
9863
dc6382ce 9864 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 9865 enum nl80211_mfp mfp =
dc6382ce 9866 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 9867 if (mfp == NL80211_MFP_REQUIRED)
f62fab73 9868 req.use_mfp = true;
4c476991
JB		 9869 else if (mfp != NL80211_MFP_NO)
9870 return -EINVAL;
dc6382ce
JM		 9871 }
9872
3e5d7649 9873 if (info->attrs[NL80211_ATTR_PREV_BSSID])
f62fab73 9874 req.prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3e5d7649 9875
7e7c8926 9876 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
f62fab73 9877 req.flags |= ASSOC_REQ_DISABLE_HT;
7e7c8926
BG		 9878
9879 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
f62fab73
JB		 9880 memcpy(&req.ht_capa_mask,
9881 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
9882 sizeof(req.ht_capa_mask));
7e7c8926
BG		 9883
9884 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
f62fab73 9885 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
7e7c8926 9886 return -EINVAL;
f62fab73
JB		 9887 memcpy(&req.ht_capa,
9888 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
9889 sizeof(req.ht_capa));
7e7c8926
BG		 9890 }
9891
ee2aca34 9892 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
f62fab73 9893 req.flags |= ASSOC_REQ_DISABLE_VHT;
ee2aca34
JB		 9894
9895 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
f62fab73
JB		 9896 memcpy(&req.vht_capa_mask,
9897 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
9898 sizeof(req.vht_capa_mask));
ee2aca34
JB		 9899
9900 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
f62fab73 9901 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
ee2aca34 9902 return -EINVAL;
f62fab73
JB		 9903 memcpy(&req.vht_capa,
9904 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
9905 sizeof(req.vht_capa));
ee2aca34
JB		 9906 }
9907
bab5ab7d 9908 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 9909 if (!((rdev->wiphy.features &
9910 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
9911 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
9912 !wiphy_ext_feature_isset(&rdev->wiphy,
9913 NL80211_EXT_FEATURE_RRM))
bab5ab7d
AK		 9914 return -EINVAL;
9915 req.flags |= ASSOC_REQ_USE_RRM;
9916 }
9917
348bd456
JM		 9918 if (info->attrs[NL80211_ATTR_FILS_KEK]) {
9919 req.fils_kek = nla_data(info->attrs[NL80211_ATTR_FILS_KEK]);
9920 req.fils_kek_len = nla_len(info->attrs[NL80211_ATTR_FILS_KEK]);
9921 if (!info->attrs[NL80211_ATTR_FILS_NONCES])
9922 return -EINVAL;
9923 req.fils_nonces =
9924 nla_data(info->attrs[NL80211_ATTR_FILS_NONCES]);
9925 }
9926
d2b7588a
TP		 9927 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]) {
9928 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY])
9929 return -EINVAL;
9930 memcpy(&req.s1g_capa_mask,
9931 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK]),
9932 sizeof(req.s1g_capa_mask));
9933 }
9934
9935 if (info->attrs[NL80211_ATTR_S1G_CAPABILITY]) {
9936 if (!info->attrs[NL80211_ATTR_S1G_CAPABILITY_MASK])
9937 return -EINVAL;
9938 memcpy(&req.s1g_capa,
9939 nla_data(info->attrs[NL80211_ATTR_S1G_CAPABILITY]),
9940 sizeof(req.s1g_capa));
9941 }
9942
f62fab73 9943 err = nl80211_crypto_settings(rdev, info, &req.crypto, 1);
91bf9b26
JB		 9944 if (!err) {
9945 wdev_lock(dev->ieee80211_ptr);
bd2522b1 9946
f62fab73
JB		 9947 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid,
9948 ssid, ssid_len, &req);
bd2522b1
AZ		 9949
9950 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
9951 dev->ieee80211_ptr->conn_owner_nlportid =
9952 info->snd_portid;
9953 memcpy(dev->ieee80211_ptr->disconnect_bssid,
9954 bssid, ETH_ALEN);
9955 }
9956
91bf9b26
JB		 9957 wdev_unlock(dev->ieee80211_ptr);
9958 }
636a5d36 9959
636a5d36
JM		 9960 return err;
9961}
9962
9963static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
9964{
4c476991
JB		 9965 struct cfg80211_registered_device *rdev = info->user_ptr[0];
9966 struct net_device *dev = info->user_ptr[1];
19957bb3 9967 const u8 *ie = NULL, *bssid;
91bf9b26 9968 int ie_len = 0, err;
19957bb3 9969 u16 reason_code;
d5cdfacb 9970 bool local_state_change;
636a5d36 9971
bad29297
AZ		 9972 if (dev->ieee80211_ptr->conn_owner_nlportid &&
9973 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
9974 return -EPERM;
9975
f4a11bb0
JB		 9976 if (!info->attrs[NL80211_ATTR_MAC])
9977 return -EINVAL;
9978
9979 if (!info->attrs[NL80211_ATTR_REASON_CODE])
9980 return -EINVAL;
9981
4c476991
JB		 9982 if (!rdev->ops->deauth)
9983 return -EOPNOTSUPP;
636a5d36 9984
074ac8df 9985 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 9986 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
9987 return -EOPNOTSUPP;
eec60b03 9988
19957bb3 9989 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 9990
19957bb3
JB		 9991 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
9992 if (reason_code == 0) {
f4a11bb0 9993 /* Reason Code 0 is reserved */
4c476991 9994 return -EINVAL;
255e737e 9995 }
636a5d36
JM		 9996
9997 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 9998 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
9999 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10000 }
10001
d5cdfacb
JM		 10002 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10003
91bf9b26
JB		 10004 wdev_lock(dev->ieee80211_ptr);
10005 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
10006 local_state_change);
10007 wdev_unlock(dev->ieee80211_ptr);
10008 return err;
636a5d36
JM		 10009}
10010
10011static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
10012{
4c476991
JB		 10013 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10014 struct net_device *dev = info->user_ptr[1];
19957bb3 10015 const u8 *ie = NULL, *bssid;
91bf9b26 10016 int ie_len = 0, err;
19957bb3 10017 u16 reason_code;
d5cdfacb 10018 bool local_state_change;
636a5d36 10019
bad29297
AZ		 10020 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10021 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10022 return -EPERM;
10023
f4a11bb0
JB		 10024 if (!info->attrs[NL80211_ATTR_MAC])
10025 return -EINVAL;
10026
10027 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10028 return -EINVAL;
10029
4c476991
JB		 10030 if (!rdev->ops->disassoc)
10031 return -EOPNOTSUPP;
636a5d36 10032
074ac8df 10033 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10034 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10035 return -EOPNOTSUPP;
eec60b03 10036
19957bb3 10037 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 10038
19957bb3
JB		 10039 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10040 if (reason_code == 0) {
f4a11bb0 10041 /* Reason Code 0 is reserved */
4c476991 10042 return -EINVAL;
255e737e 10043 }
636a5d36
JM		 10044
10045 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 10046 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10047 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 10048 }
10049
d5cdfacb
JM		 10050 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
10051
91bf9b26
JB		 10052 wdev_lock(dev->ieee80211_ptr);
10053 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
10054 local_state_change);
10055 wdev_unlock(dev->ieee80211_ptr);
10056 return err;
636a5d36
JM		 10057}
10058
dd5b4cc7
FF		 10059static bool
10060nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
57fbcce3 10061 int mcast_rate[NUM_NL80211_BANDS],
dd5b4cc7
FF		 10062 int rateval)
10063{
10064 struct wiphy *wiphy = &rdev->wiphy;
10065 bool found = false;
10066 int band, i;
10067
57fbcce3 10068 for (band = 0; band < NUM_NL80211_BANDS; band++) {
dd5b4cc7
FF		 10069 struct ieee80211_supported_band *sband;
10070
10071 sband = wiphy->bands[band];
10072 if (!sband)
10073 continue;
10074
10075 for (i = 0; i < sband->n_bitrates; i++) {
10076 if (sband->bitrates[i].bitrate == rateval) {
10077 mcast_rate[band] = i + 1;
10078 found = true;
10079 break;
10080 }
10081 }
10082 }
10083
10084 return found;
10085}
10086
04a773ad
JB		 10087static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
10088{
4c476991
JB		 10089 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10090 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 10091 struct cfg80211_ibss_params ibss;
10092 struct wiphy *wiphy;
fffd0934 10093 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 10094 int err;
10095
8e30bc55
JB		 10096 memset(&ibss, 0, sizeof(ibss));
10097
683b6d3b 10098 if (!info->attrs[NL80211_ATTR_SSID] ||
04a773ad
JB		 10099 !nla_len(info->attrs[NL80211_ATTR_SSID]))
10100 return -EINVAL;
10101
8e30bc55
JB		 10102 ibss.beacon_interval = 100;
10103
12d20fc9 10104 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL])
8e30bc55
JB		 10105 ibss.beacon_interval =
10106 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 10107
0c317a02
PK		 10108 err = cfg80211_validate_beacon_int(rdev, NL80211_IFTYPE_ADHOC,
10109 ibss.beacon_interval);
12d20fc9
PK		 10110 if (err)
10111 return err;
8e30bc55 10112
4c476991
JB		 10113 if (!rdev->ops->join_ibss)
10114 return -EOPNOTSUPP;
04a773ad 10115
4c476991
JB		 10116 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
10117 return -EOPNOTSUPP;
04a773ad 10118
79c97e97 10119 wiphy = &rdev->wiphy;
04a773ad 10120
39193498 10121 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 10122 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 10123
10124 if (!is_valid_ether_addr(ibss.bssid))
10125 return -EINVAL;
10126 }
04a773ad
JB		 10127 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10128 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10129
10130 if (info->attrs[NL80211_ATTR_IE]) {
10131 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10132 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10133 }
10134
683b6d3b
JB		 10135 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
10136 if (err)
10137 return err;
04a773ad 10138
174e0cd2
IP		 10139 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef,
10140 NL80211_IFTYPE_ADHOC))
54858ee5
AS		 10141 return -EINVAL;
10142
2f301ab2 10143 switch (ibss.chandef.width) {
bf372645
SW		 10144 case NL80211_CHAN_WIDTH_5:
10145 case NL80211_CHAN_WIDTH_10:
2f301ab2
SW		 10146 case NL80211_CHAN_WIDTH_20_NOHT:
10147 break;
10148 case NL80211_CHAN_WIDTH_20:
10149 case NL80211_CHAN_WIDTH_40:
ffc11991
JD		 10150 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
10151 return -EINVAL;
10152 break;
10153 case NL80211_CHAN_WIDTH_80:
10154 case NL80211_CHAN_WIDTH_80P80:
10155 case NL80211_CHAN_WIDTH_160:
10156 if (!(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
10157 return -EINVAL;
10158 if (!wiphy_ext_feature_isset(&rdev->wiphy,
10159 NL80211_EXT_FEATURE_VHT_IBSS))
10160 return -EINVAL;
10161 break;
2f301ab2 10162 default:
c04d6150 10163 return -EINVAL;
2f301ab2 10164 }
db9c64cf 10165
04a773ad 10166 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 10167 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
10168
fbd2c8dc
TP		 10169 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
10170 u8 *rates =
10171 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
10172 int n_rates =
10173 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
10174 struct ieee80211_supported_band *sband =
683b6d3b 10175 wiphy->bands[ibss.chandef.chan->band];
fbd2c8dc 10176
34850ab2
JB		 10177 err = ieee80211_get_ratemask(sband, rates, n_rates,
10178 &ibss.basic_rates);
10179 if (err)
10180 return err;
fbd2c8dc 10181 }
dd5b4cc7 10182
803768f5
SW		 10183 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
10184 memcpy(&ibss.ht_capa_mask,
10185 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10186 sizeof(ibss.ht_capa_mask));
10187
10188 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
10189 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
10190 return -EINVAL;
10191 memcpy(&ibss.ht_capa,
10192 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10193 sizeof(ibss.ht_capa));
10194 }
10195
dd5b4cc7
FF		 10196 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
10197 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
10198 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
10199 return -EINVAL;
fbd2c8dc 10200
4c476991 10201 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 10202 bool no_ht = false;
10203
768075eb 10204 connkeys = nl80211_parse_connkeys(rdev, info, &no_ht);
4c476991
JB		 10205 if (IS_ERR(connkeys))
10206 return PTR_ERR(connkeys);
de7044ee 10207
3d9d1d66
JB		 10208 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
10209 no_ht) {
453431a5 10210 kfree_sensitive(connkeys);
de7044ee
SM		 10211 return -EINVAL;
10212 }
4c476991 10213 }
04a773ad 10214
267335d6
AQ		 10215 ibss.control_port =
10216 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
10217
c3bfe1f6
DK		 10218 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
10219 int r = validate_pae_over_nl80211(rdev, info);
10220
d350a0f4 10221 if (r < 0) {
453431a5 10222 kfree_sensitive(connkeys);
c3bfe1f6 10223 return r;
d350a0f4 10224 }
c3bfe1f6
DK		 10225
10226 ibss.control_port_over_nl80211 = true;
10227 }
10228
5336fa88
SW		 10229 ibss.userspace_handles_dfs =
10230 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
10231
f8d16d3e
DK		 10232 wdev_lock(dev->ieee80211_ptr);
10233 err = __cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934 10234 if (err)
453431a5 10235 kfree_sensitive(connkeys);
f8d16d3e
DK		 10236 else if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
10237 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
10238 wdev_unlock(dev->ieee80211_ptr);
10239
04a773ad
JB		 10240 return err;
10241}
10242
10243static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
10244{
4c476991
JB		 10245 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10246 struct net_device *dev = info->user_ptr[1];
04a773ad 10247
4c476991
JB		 10248 if (!rdev->ops->leave_ibss)
10249 return -EOPNOTSUPP;
04a773ad 10250
4c476991
JB		 10251 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
10252 return -EOPNOTSUPP;
04a773ad 10253
4c476991 10254 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 10255}
10256
f4e583c8
AQ		 10257static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
10258{
10259 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10260 struct net_device *dev = info->user_ptr[1];
57fbcce3 10261 int mcast_rate[NUM_NL80211_BANDS];
f4e583c8
AQ		 10262 u32 nla_rate;
10263 int err;
10264
10265 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
876dc930
BVB		 10266 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
10267 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_OCB)
f4e583c8
AQ		 10268 return -EOPNOTSUPP;
10269
10270 if (!rdev->ops->set_mcast_rate)
10271 return -EOPNOTSUPP;
10272
10273 memset(mcast_rate, 0, sizeof(mcast_rate));
10274
10275 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
10276 return -EINVAL;
10277
10278 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
10279 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
10280 return -EINVAL;
10281
a1056b1b 10282 err = rdev_set_mcast_rate(rdev, dev, mcast_rate);
f4e583c8
AQ		 10283
10284 return err;
10285}
10286
ad7e718c
JB		 10287static struct sk_buff *
10288__cfg80211_alloc_vendor_skb(struct cfg80211_registered_device *rdev,
6c09e791
AK		 10289 struct wireless_dev *wdev, int approxlen,
10290 u32 portid, u32 seq, enum nl80211_commands cmd,
567ffc35
JB		 10291 enum nl80211_attrs attr,
10292 const struct nl80211_vendor_cmd_info *info,
10293 gfp_t gfp)
ad7e718c
JB		 10294{
10295 struct sk_buff *skb;
10296 void *hdr;
10297 struct nlattr *data;
10298
10299 skb = nlmsg_new(approxlen + 100, gfp);
10300 if (!skb)
10301 return NULL;
10302
10303 hdr = nl80211hdr_put(skb, portid, seq, 0, cmd);
10304 if (!hdr) {
10305 kfree_skb(skb);
10306 return NULL;
10307 }
10308
10309 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
10310 goto nla_put_failure;
567ffc35
JB		 10311
10312 if (info) {
10313 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_ID,
10314 info->vendor_id))
10315 goto nla_put_failure;
10316 if (nla_put_u32(skb, NL80211_ATTR_VENDOR_SUBCMD,
10317 info->subcmd))
10318 goto nla_put_failure;
10319 }
10320
6c09e791 10321 if (wdev) {
2dad624e
ND		 10322 if (nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
10323 wdev_id(wdev), NL80211_ATTR_PAD))
6c09e791
AK		 10324 goto nla_put_failure;
10325 if (wdev->netdev &&
10326 nla_put_u32(skb, NL80211_ATTR_IFINDEX,
10327 wdev->netdev->ifindex))
10328 goto nla_put_failure;
10329 }
10330
ae0be8de 10331 data = nla_nest_start_noflag(skb, attr);
76e1fb4b
JB		 10332 if (!data)
10333 goto nla_put_failure;
ad7e718c
JB		 10334
10335 ((void **)skb->cb)[0] = rdev;
10336 ((void **)skb->cb)[1] = hdr;
10337 ((void **)skb->cb)[2] = data;
10338
10339 return skb;
10340
10341 nla_put_failure:
10342 kfree_skb(skb);
10343 return NULL;
10344}
f4e583c8 10345
e03ad6ea 10346struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
6c09e791 10347 struct wireless_dev *wdev,
e03ad6ea
JB		 10348 enum nl80211_commands cmd,
10349 enum nl80211_attrs attr,
55c1fdf0 10350 unsigned int portid,
e03ad6ea
JB		 10351 int vendor_event_idx,
10352 int approxlen, gfp_t gfp)
10353{
f26cbf40 10354 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
e03ad6ea
JB		 10355 const struct nl80211_vendor_cmd_info *info;
10356
10357 switch (cmd) {
10358 case NL80211_CMD_TESTMODE:
10359 if (WARN_ON(vendor_event_idx != -1))
10360 return NULL;
10361 info = NULL;
10362 break;
10363 case NL80211_CMD_VENDOR:
10364 if (WARN_ON(vendor_event_idx < 0 ||
10365 vendor_event_idx >= wiphy->n_vendor_events))
10366 return NULL;
10367 info = &wiphy->vendor_events[vendor_event_idx];
10368 break;
10369 default:
10370 WARN_ON(1);
10371 return NULL;
10372 }
10373
55c1fdf0 10374 return __cfg80211_alloc_vendor_skb(rdev, wdev, approxlen, portid, 0,
e03ad6ea
JB		 10375 cmd, attr, info, gfp);
10376}
10377EXPORT_SYMBOL(__cfg80211_alloc_event_skb);
10378
10379void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp)
10380{
10381 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
10382 void *hdr = ((void **)skb->cb)[1];
55c1fdf0 10383 struct nlmsghdr *nlhdr = nlmsg_hdr(skb);
e03ad6ea
JB		 10384 struct nlattr *data = ((void **)skb->cb)[2];
10385 enum nl80211_multicast_groups mcgrp = NL80211_MCGRP_TESTMODE;
10386
bd8c78e7
JB		 10387 /* clear CB data for netlink core to own from now on */
10388 memset(skb->cb, 0, sizeof(skb->cb));
10389
e03ad6ea
JB		 10390 nla_nest_end(skb, data);
10391 genlmsg_end(skb, hdr);
10392
55c1fdf0
JB		 10393 if (nlhdr->nlmsg_pid) {
10394 genlmsg_unicast(wiphy_net(&rdev->wiphy), skb,
10395 nlhdr->nlmsg_pid);
10396 } else {
10397 if (data->nla_type == NL80211_ATTR_VENDOR_DATA)
10398 mcgrp = NL80211_MCGRP_VENDOR;
e03ad6ea 10399
55c1fdf0
JB		 10400 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
10401 skb, 0, mcgrp, gfp);
10402 }
e03ad6ea
JB		 10403}
10404EXPORT_SYMBOL(__cfg80211_send_event_skb);
10405
aff89a9b 10406#ifdef CONFIG_NL80211_TESTMODE
aff89a9b
JB		 10407static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
10408{
4c476991 10409 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fc73f11f
DS		 10410 struct wireless_dev *wdev =
10411 __cfg80211_wdev_from_attrs(genl_info_net(info), info->attrs);
aff89a9b
JB		 10412 int err;
10413
fc73f11f
DS		 10414 if (!rdev->ops->testmode_cmd)
10415 return -EOPNOTSUPP;
10416
10417 if (IS_ERR(wdev)) {
10418 err = PTR_ERR(wdev);
10419 if (err != -EINVAL)
10420 return err;
10421 wdev = NULL;
10422 } else if (wdev->wiphy != &rdev->wiphy) {
10423 return -EINVAL;
10424 }
10425
aff89a9b
JB		 10426 if (!info->attrs[NL80211_ATTR_TESTDATA])
10427 return -EINVAL;
10428
ad7e718c 10429 rdev->cur_cmd_info = info;
fc73f11f 10430 err = rdev_testmode_cmd(rdev, wdev,
aff89a9b
JB		 10431 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
10432 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
ad7e718c 10433 rdev->cur_cmd_info = NULL;
aff89a9b 10434
aff89a9b
JB		 10435 return err;
10436}
10437
71063f0e
WYG		 10438static int nl80211_testmode_dump(struct sk_buff *skb,
10439 struct netlink_callback *cb)
10440{
00918d33 10441 struct cfg80211_registered_device *rdev;
50508d94 10442 struct nlattr **attrbuf = NULL;
71063f0e
WYG		 10443 int err;
10444 long phy_idx;
10445 void *data = NULL;
10446 int data_len = 0;
10447
5fe231e8
JB		 10448 rtnl_lock();
10449
71063f0e
WYG		 10450 if (cb->args[0]) {
10451 /*
10452 * 0 is a valid index, but not valid for args[0],
10453 * so we need to offset by 1.
10454 */
10455 phy_idx = cb->args[0] - 1;
a4956dca
LC		 10456
10457 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
10458 if (!rdev) {
10459 err = -ENOENT;
10460 goto out_err;
10461 }
71063f0e 10462 } else {
50508d94
JB		 10463 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf),
10464 GFP_KERNEL);
10465 if (!attrbuf) {
10466 err = -ENOMEM;
10467 goto out_err;
10468 }
c90c39da 10469
8cb08174
JB		 10470 err = nlmsg_parse_deprecated(cb->nlh,
10471 GENL_HDRLEN + nl80211_fam.hdrsize,
10472 attrbuf, nl80211_fam.maxattr,
10473 nl80211_policy, NULL);
71063f0e 10474 if (err)
5fe231e8 10475 goto out_err;
00918d33 10476
c90c39da 10477 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
2bd7e35d 10478 if (IS_ERR(rdev)) {
5fe231e8
JB		 10479 err = PTR_ERR(rdev);
10480 goto out_err;
00918d33 10481 }
2bd7e35d 10482 phy_idx = rdev->wiphy_idx;
2bd7e35d 10483
c90c39da
JB		 10484 if (attrbuf[NL80211_ATTR_TESTDATA])
10485 cb->args[1] = (long)attrbuf[NL80211_ATTR_TESTDATA];
71063f0e
WYG		 10486 }
10487
10488 if (cb->args[1]) {
10489 data = nla_data((void *)cb->args[1]);
10490 data_len = nla_len((void *)cb->args[1]);
10491 }
10492
00918d33 10493 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 10494 err = -EOPNOTSUPP;
10495 goto out_err;
10496 }
10497
10498 while (1) {
15e47304 10499 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 10500 cb->nlh->nlmsg_seq, NLM_F_MULTI,
10501 NL80211_CMD_TESTMODE);
10502 struct nlattr *tmdata;
10503
cb35fba3
DC		 10504 if (!hdr)
10505 break;
10506
9360ffd1 10507 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 10508 genlmsg_cancel(skb, hdr);
10509 break;
10510 }
10511
ae0be8de 10512 tmdata = nla_nest_start_noflag(skb, NL80211_ATTR_TESTDATA);
71063f0e
WYG		 10513 if (!tmdata) {
10514 genlmsg_cancel(skb, hdr);
10515 break;
10516 }
e35e4d28 10517 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 10518 nla_nest_end(skb, tmdata);
10519
10520 if (err == -ENOBUFS || err == -ENOENT) {
10521 genlmsg_cancel(skb, hdr);
10522 break;
10523 } else if (err) {
10524 genlmsg_cancel(skb, hdr);
10525 goto out_err;
10526 }
10527
10528 genlmsg_end(skb, hdr);
10529 }
10530
10531 err = skb->len;
10532 /* see above */
10533 cb->args[0] = phy_idx + 1;
10534 out_err:
50508d94 10535 kfree(attrbuf);
5fe231e8 10536 rtnl_unlock();
71063f0e
WYG		 10537 return err;
10538}
aff89a9b
JB		 10539#endif
10540
b23aa676
SO		 10541static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
10542{
4c476991
JB		 10543 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10544 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 10545 struct cfg80211_connect_params connect;
10546 struct wiphy *wiphy;
fffd0934 10547 struct cfg80211_cached_keys *connkeys = NULL;
942ba88b 10548 u32 freq = 0;
b23aa676
SO		 10549 int err;
10550
10551 memset(&connect, 0, sizeof(connect));
10552
b23aa676
SO		 10553 if (!info->attrs[NL80211_ATTR_SSID] ||
10554 !nla_len(info->attrs[NL80211_ATTR_SSID]))
10555 return -EINVAL;
10556
10557 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
10558 connect.auth_type =
10559 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 10560 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
10561 NL80211_CMD_CONNECT))
b23aa676
SO		 10562 return -EINVAL;
10563 } else
10564 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
10565
10566 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
10567
3a00df57
AS		 10568 if (info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS] &&
10569 !wiphy_ext_feature_isset(&rdev->wiphy,
10570 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
10571 return -EINVAL;
10572 connect.want_1x = info->attrs[NL80211_ATTR_WANT_1X_4WAY_HS];
10573
c0692b8f 10574 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 10575 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 10576 if (err)
10577 return err;
b23aa676 10578
074ac8df 10579 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10580 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10581 return -EOPNOTSUPP;
b23aa676 10582
79c97e97 10583 wiphy = &rdev->wiphy;
b23aa676 10584
4486ea98
BS		 10585 connect.bg_scan_period = -1;
10586 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
10587 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
10588 connect.bg_scan_period =
10589 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
10590 }
10591
b23aa676
SO		 10592 if (info->attrs[NL80211_ATTR_MAC])
10593 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
1df4a510
JM		 10594 else if (info->attrs[NL80211_ATTR_MAC_HINT])
10595 connect.bssid_hint =
10596 nla_data(info->attrs[NL80211_ATTR_MAC_HINT]);
b23aa676
SO		 10597 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10598 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10599
10600 if (info->attrs[NL80211_ATTR_IE]) {
10601 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10602 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10603 }
10604
cee00a95
JM		 10605 if (info->attrs[NL80211_ATTR_USE_MFP]) {
10606 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
65026002
EG		 10607 if (connect.mfp == NL80211_MFP_OPTIONAL &&
10608 !wiphy_ext_feature_isset(&rdev->wiphy,
10609 NL80211_EXT_FEATURE_MFP_OPTIONAL))
10610 return -EOPNOTSUPP;
cee00a95
JM		 10611 } else {
10612 connect.mfp = NL80211_MFP_NO;
10613 }
10614
ba6fbacf
JM		 10615 if (info->attrs[NL80211_ATTR_PREV_BSSID])
10616 connect.prev_bssid =
10617 nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
10618
942ba88b
TP		 10619 if (info->attrs[NL80211_ATTR_WIPHY_FREQ])
10620 freq = MHZ_TO_KHZ(nla_get_u32(
10621 info->attrs[NL80211_ATTR_WIPHY_FREQ]));
10622 if (info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET])
10623 freq +=
10624 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_OFFSET]);
10625
10626 if (freq) {
10627 connect.channel = nl80211_get_valid_chan(wiphy, freq);
664834de 10628 if (!connect.channel)
1df4a510
JM		 10629 return -EINVAL;
10630 } else if (info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]) {
942ba88b
TP		 10631 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]);
10632 freq = MHZ_TO_KHZ(freq);
10633 connect.channel_hint = nl80211_get_valid_chan(wiphy, freq);
664834de 10634 if (!connect.channel_hint)
4c476991 10635 return -EINVAL;
b23aa676
SO		 10636 }
10637
2a38075c
AAL		 10638 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]) {
10639 connect.edmg.channels =
10640 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_CHANNELS]);
10641
10642 if (info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG])
10643 connect.edmg.bw_config =
10644 nla_get_u8(info->attrs[NL80211_ATTR_WIPHY_EDMG_BW_CONFIG]);
10645 }
10646
fffd0934 10647 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
768075eb 10648 connkeys = nl80211_parse_connkeys(rdev, info, NULL);
4c476991
JB		 10649 if (IS_ERR(connkeys))
10650 return PTR_ERR(connkeys);
fffd0934
JB		 10651 }
10652
7e7c8926
BG		 10653 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
10654 connect.flags |= ASSOC_REQ_DISABLE_HT;
10655
10656 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
10657 memcpy(&connect.ht_capa_mask,
10658 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
10659 sizeof(connect.ht_capa_mask));
10660
10661 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e 10662 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
453431a5 10663 kfree_sensitive(connkeys);
7e7c8926 10664 return -EINVAL;
b4e4f47e 10665 }
7e7c8926
BG		 10666 memcpy(&connect.ht_capa,
10667 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
10668 sizeof(connect.ht_capa));
10669 }
10670
ee2aca34
JB		 10671 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
10672 connect.flags |= ASSOC_REQ_DISABLE_VHT;
10673
10674 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
10675 memcpy(&connect.vht_capa_mask,
10676 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
10677 sizeof(connect.vht_capa_mask));
10678
10679 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
10680 if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]) {
453431a5 10681 kfree_sensitive(connkeys);
ee2aca34
JB		 10682 return -EINVAL;
10683 }
10684 memcpy(&connect.vht_capa,
10685 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
10686 sizeof(connect.vht_capa));
10687 }
10688
bab5ab7d 10689 if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
0c9ca11b
BL		 10690 if (!((rdev->wiphy.features &
10691 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) &&
10692 (rdev->wiphy.features & NL80211_FEATURE_QUIET)) &&
10693 !wiphy_ext_feature_isset(&rdev->wiphy,
10694 NL80211_EXT_FEATURE_RRM)) {
453431a5 10695 kfree_sensitive(connkeys);
bab5ab7d 10696 return -EINVAL;
707554b4 10697 }
bab5ab7d
AK		 10698 connect.flags |= ASSOC_REQ_USE_RRM;
10699 }
10700
34d50519 10701 connect.pbss = nla_get_flag(info->attrs[NL80211_ATTR_PBSS]);
57fbcce3 10702 if (connect.pbss && !rdev->wiphy.bands[NL80211_BAND_60GHZ]) {
453431a5 10703 kfree_sensitive(connkeys);
34d50519
LD		 10704 return -EOPNOTSUPP;
10705 }
10706
38de03d2
AS		 10707 if (info->attrs[NL80211_ATTR_BSS_SELECT]) {
10708 /* bss selection makes no sense if bssid is set */
10709 if (connect.bssid) {
453431a5 10710 kfree_sensitive(connkeys);
38de03d2
AS		 10711 return -EINVAL;
10712 }
10713
10714 err = parse_bss_select(info->attrs[NL80211_ATTR_BSS_SELECT],
10715 wiphy, &connect.bss_select);
10716 if (err) {
453431a5 10717 kfree_sensitive(connkeys);
38de03d2
AS		 10718 return err;
10719 }
10720 }
10721
a3caf744
VK		 10722 if (wiphy_ext_feature_isset(&rdev->wiphy,
10723 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD) &&
10724 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
10725 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
10726 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
10727 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10728 connect.fils_erp_username =
10729 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10730 connect.fils_erp_username_len =
10731 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10732 connect.fils_erp_realm =
10733 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10734 connect.fils_erp_realm_len =
10735 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10736 connect.fils_erp_next_seq_num =
10737 nla_get_u16(
10738 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
10739 connect.fils_erp_rrk =
10740 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10741 connect.fils_erp_rrk_len =
10742 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10743 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
10744 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
10745 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
10746 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
453431a5 10747 kfree_sensitive(connkeys);
a3caf744
VK		 10748 return -EINVAL;
10749 }
10750
40cbfa90
SD		 10751 if (nla_get_flag(info->attrs[NL80211_ATTR_EXTERNAL_AUTH_SUPPORT])) {
10752 if (!info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
453431a5 10753 kfree_sensitive(connkeys);
40cbfa90
SD		 10754 GENL_SET_ERR_MSG(info,
10755 "external auth requires connection ownership");
10756 return -EINVAL;
10757 }
10758 connect.flags |= CONNECT_REQ_EXTERNAL_AUTH_SUPPORT;
10759 }
10760
83739b03 10761 wdev_lock(dev->ieee80211_ptr);
bd2522b1 10762
4ce2bd9c
JM		 10763 err = cfg80211_connect(rdev, dev, &connect, connkeys,
10764 connect.prev_bssid);
fffd0934 10765 if (err)
453431a5 10766 kfree_sensitive(connkeys);
bd2522b1
AZ		 10767
10768 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER]) {
10769 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
10770 if (connect.bssid)
10771 memcpy(dev->ieee80211_ptr->disconnect_bssid,
10772 connect.bssid, ETH_ALEN);
10773 else
3b1648f1 10774 eth_zero_addr(dev->ieee80211_ptr->disconnect_bssid);
bd2522b1
AZ		 10775 }
10776
10777 wdev_unlock(dev->ieee80211_ptr);
10778
b23aa676
SO		 10779 return err;
10780}
10781
088e8df8 10782static int nl80211_update_connect_params(struct sk_buff *skb,
10783 struct genl_info *info)
10784{
10785 struct cfg80211_connect_params connect = {};
10786 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10787 struct net_device *dev = info->user_ptr[1];
10788 struct wireless_dev *wdev = dev->ieee80211_ptr;
7f9a3e15
VK		 10789 bool fils_sk_offload;
10790 u32 auth_type;
088e8df8 10791 u32 changed = 0;
10792 int ret;
10793
10794 if (!rdev->ops->update_connect_params)
10795 return -EOPNOTSUPP;
10796
10797 if (info->attrs[NL80211_ATTR_IE]) {
088e8df8 10798 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
10799 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
10800 changed |= UPDATE_ASSOC_IES;
10801 }
10802
7f9a3e15
VK		 10803 fils_sk_offload = wiphy_ext_feature_isset(&rdev->wiphy,
10804 NL80211_EXT_FEATURE_FILS_SK_OFFLOAD);
10805
10806 /*
10807 * when driver supports fils-sk offload all attributes must be
10808 * provided. So the else covers "fils-sk-not-all" and
10809 * "no-fils-sk-any".
10810 */
10811 if (fils_sk_offload &&
10812 info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] &&
10813 info->attrs[NL80211_ATTR_FILS_ERP_REALM] &&
10814 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] &&
10815 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10816 connect.fils_erp_username =
10817 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10818 connect.fils_erp_username_len =
10819 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_USERNAME]);
10820 connect.fils_erp_realm =
10821 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10822 connect.fils_erp_realm_len =
10823 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_REALM]);
10824 connect.fils_erp_next_seq_num =
10825 nla_get_u16(
10826 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM]);
10827 connect.fils_erp_rrk =
10828 nla_data(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10829 connect.fils_erp_rrk_len =
10830 nla_len(info->attrs[NL80211_ATTR_FILS_ERP_RRK]);
10831 changed |= UPDATE_FILS_ERP_INFO;
10832 } else if (info->attrs[NL80211_ATTR_FILS_ERP_USERNAME] ||
10833 info->attrs[NL80211_ATTR_FILS_ERP_REALM] ||
10834 info->attrs[NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM] ||
10835 info->attrs[NL80211_ATTR_FILS_ERP_RRK]) {
10836 return -EINVAL;
10837 }
10838
10839 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
10840 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
10841 if (!nl80211_valid_auth_type(rdev, auth_type,
10842 NL80211_CMD_CONNECT))
10843 return -EINVAL;
10844
10845 if (auth_type == NL80211_AUTHTYPE_FILS_SK &&
10846 fils_sk_offload && !(changed & UPDATE_FILS_ERP_INFO))
10847 return -EINVAL;
10848
10849 connect.auth_type = auth_type;
10850 changed |= UPDATE_AUTH_TYPE;
10851 }
10852
088e8df8 10853 wdev_lock(dev->ieee80211_ptr);
10854 if (!wdev->current_bss)
10855 ret = -ENOLINK;
10856 else
10857 ret = rdev_update_connect_params(rdev, dev, &connect, changed);
10858 wdev_unlock(dev->ieee80211_ptr);
10859
10860 return ret;
10861}
10862
b23aa676
SO		 10863static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
10864{
4c476991
JB		 10865 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10866 struct net_device *dev = info->user_ptr[1];
b23aa676 10867 u16 reason;
83739b03 10868 int ret;
b23aa676 10869
bad29297
AZ		 10870 if (dev->ieee80211_ptr->conn_owner_nlportid &&
10871 dev->ieee80211_ptr->conn_owner_nlportid != info->snd_portid)
10872 return -EPERM;
10873
b23aa676
SO		 10874 if (!info->attrs[NL80211_ATTR_REASON_CODE])
10875 reason = WLAN_REASON_DEAUTH_LEAVING;
10876 else
10877 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
10878
10879 if (reason == 0)
10880 return -EINVAL;
10881
074ac8df 10882 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10883 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10884 return -EOPNOTSUPP;
b23aa676 10885
83739b03
JB		 10886 wdev_lock(dev->ieee80211_ptr);
10887 ret = cfg80211_disconnect(rdev, dev, reason, true);
10888 wdev_unlock(dev->ieee80211_ptr);
10889 return ret;
b23aa676
SO		 10890}
10891
463d0183
JB		 10892static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
10893{
4c476991 10894 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 10895 struct net *net;
10896 int err;
463d0183 10897
4b681c82
VK		 10898 if (info->attrs[NL80211_ATTR_PID]) {
10899 u32 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
10900
10901 net = get_net_ns_by_pid(pid);
10902 } else if (info->attrs[NL80211_ATTR_NETNS_FD]) {
10903 u32 fd = nla_get_u32(info->attrs[NL80211_ATTR_NETNS_FD]);
463d0183 10904
4b681c82
VK		 10905 net = get_net_ns_by_fd(fd);
10906 } else {
10907 return -EINVAL;
10908 }
463d0183 10909
4c476991
JB		 10910 if (IS_ERR(net))
10911 return PTR_ERR(net);
463d0183
JB		 10912
10913 err = 0;
10914
10915 /* check if anything to do */
4c476991
JB		 10916 if (!net_eq(wiphy_net(&rdev->wiphy), net))
10917 err = cfg80211_switch_netns(rdev, net);
463d0183 10918
463d0183 10919 put_net(net);
463d0183
JB		 10920 return err;
10921}
10922
67fbb16b
SO		 10923static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
10924{
4c476991 10925 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 10926 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
10927 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 10928 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 10929 struct cfg80211_pmksa pmksa;
10930
10931 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
10932
67fbb16b
SO		 10933 if (!info->attrs[NL80211_ATTR_PMKID])
10934 return -EINVAL;
10935
67fbb16b 10936 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
a3caf744
VK		 10937
10938 if (info->attrs[NL80211_ATTR_MAC]) {
10939 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
10940 } else if (info->attrs[NL80211_ATTR_SSID] &&
10941 info->attrs[NL80211_ATTR_FILS_CACHE_ID] &&
10942 (info->genlhdr->cmd == NL80211_CMD_DEL_PMKSA ||
10943 info->attrs[NL80211_ATTR_PMK])) {
10944 pmksa.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
10945 pmksa.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
10946 pmksa.cache_id =
10947 nla_data(info->attrs[NL80211_ATTR_FILS_CACHE_ID]);
10948 } else {
10949 return -EINVAL;
10950 }
10951 if (info->attrs[NL80211_ATTR_PMK]) {
10952 pmksa.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
10953 pmksa.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
10954 }
67fbb16b 10955
7fc82af8
VJ		 10956 if (info->attrs[NL80211_ATTR_PMK_LIFETIME])
10957 pmksa.pmk_lifetime =
10958 nla_get_u32(info->attrs[NL80211_ATTR_PMK_LIFETIME]);
10959
10960 if (info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD])
10961 pmksa.pmk_reauth_threshold =
10962 nla_get_u8(
10963 info->attrs[NL80211_ATTR_PMK_REAUTH_THRESHOLD]);
10964
074ac8df 10965 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6c900360
LD		 10966 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
10967 !(dev->ieee80211_ptr->iftype == NL80211_IFTYPE_AP &&
10968 wiphy_ext_feature_isset(&rdev->wiphy,
10969 NL80211_EXT_FEATURE_AP_PMKSA_CACHING)))
4c476991 10970 return -EOPNOTSUPP;
67fbb16b
SO		 10971
10972 switch (info->genlhdr->cmd) {
10973 case NL80211_CMD_SET_PMKSA:
10974 rdev_ops = rdev->ops->set_pmksa;
10975 break;
10976 case NL80211_CMD_DEL_PMKSA:
10977 rdev_ops = rdev->ops->del_pmksa;
10978 break;
10979 default:
10980 WARN_ON(1);
10981 break;
10982 }
10983
4c476991
JB		 10984 if (!rdev_ops)
10985 return -EOPNOTSUPP;
67fbb16b 10986
4c476991 10987 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 10988}
10989
10990static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
10991{
4c476991
JB		 10992 struct cfg80211_registered_device *rdev = info->user_ptr[0];
10993 struct net_device *dev = info->user_ptr[1];
67fbb16b 10994
074ac8df 10995 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 10996 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
10997 return -EOPNOTSUPP;
67fbb16b 10998
4c476991
JB		 10999 if (!rdev->ops->flush_pmksa)
11000 return -EOPNOTSUPP;
67fbb16b 11001
e35e4d28 11002 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 11003}
11004
109086ce
AN		 11005static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
11006{
11007 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11008 struct net_device *dev = info->user_ptr[1];
11009 u8 action_code, dialog_token;
df942e7b 11010 u32 peer_capability = 0;
109086ce
AN		 11011 u16 status_code;
11012 u8 *peer;
31fa97c5 11013 bool initiator;
109086ce
AN		 11014
11015 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
11016 !rdev->ops->tdls_mgmt)
11017 return -EOPNOTSUPP;
11018
11019 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
11020 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
11021 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
11022 !info->attrs[NL80211_ATTR_IE] ||
11023 !info->attrs[NL80211_ATTR_MAC])
11024 return -EINVAL;
11025
11026 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
11027 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
11028 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
11029 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
31fa97c5 11030 initiator = nla_get_flag(info->attrs[NL80211_ATTR_TDLS_INITIATOR]);
df942e7b
SDU		 11031 if (info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY])
11032 peer_capability =
11033 nla_get_u32(info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY]);
109086ce 11034
e35e4d28 11035 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
df942e7b 11036 dialog_token, status_code, peer_capability,
31fa97c5 11037 initiator,
e35e4d28
HG		 11038 nla_data(info->attrs[NL80211_ATTR_IE]),
11039 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 11040}
11041
11042static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
11043{
11044 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11045 struct net_device *dev = info->user_ptr[1];
11046 enum nl80211_tdls_operation operation;
11047 u8 *peer;
11048
11049 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
11050 !rdev->ops->tdls_oper)
11051 return -EOPNOTSUPP;
11052
11053 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
11054 !info->attrs[NL80211_ATTR_MAC])
11055 return -EINVAL;
11056
11057 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
11058 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
11059
e35e4d28 11060 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 11061}
11062
9588bbd5
JM		 11063static int nl80211_remain_on_channel(struct sk_buff *skb,
11064 struct genl_info *info)
11065{
4c476991 11066 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11067 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 11068 struct cfg80211_chan_def chandef;
34373d12 11069 const struct cfg80211_chan_def *compat_chandef;
9588bbd5
JM		 11070 struct sk_buff *msg;
11071 void *hdr;
11072 u64 cookie;
683b6d3b 11073 u32 duration;
9588bbd5
JM		 11074 int err;
11075
11076 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
11077 !info->attrs[NL80211_ATTR_DURATION])
11078 return -EINVAL;
11079
11080 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
11081
ebf348fc
JB		 11082 if (!rdev->ops->remain_on_channel ||
11083 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
11084 return -EOPNOTSUPP;
11085
9588bbd5 11086 /*
ebf348fc
JB		 11087 * We should be on that channel for at least a minimum amount of
11088 * time (10ms) but no longer than the driver supports.
9588bbd5 11089 */
ebf348fc 11090 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 11091 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 11092 return -EINVAL;
11093
683b6d3b
JB		 11094 err = nl80211_parse_chandef(rdev, info, &chandef);
11095 if (err)
11096 return err;
9588bbd5 11097
34373d12
VT		 11098 wdev_lock(wdev);
11099 if (!cfg80211_off_channel_oper_allowed(wdev) &&
11100 !cfg80211_chandef_identical(&wdev->chandef, &chandef)) {
11101 compat_chandef = cfg80211_chandef_compatible(&wdev->chandef,
11102 &chandef);
11103 if (compat_chandef != &chandef) {
11104 wdev_unlock(wdev);
11105 return -EBUSY;
11106 }
11107 }
11108 wdev_unlock(wdev);
11109
9588bbd5 11110 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 11111 if (!msg)
11112 return -ENOMEM;
9588bbd5 11113
15e47304 11114 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5 11115 NL80211_CMD_REMAIN_ON_CHANNEL);
cb35fba3
DC		 11116 if (!hdr) {
11117 err = -ENOBUFS;
9588bbd5
JM		 11118 goto free_msg;
11119 }
11120
683b6d3b
JB		 11121 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
11122 duration, &cookie);
9588bbd5
JM		 11123
11124 if (err)
11125 goto free_msg;
11126
2dad624e
ND		 11127 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
11128 NL80211_ATTR_PAD))
9360ffd1 11129 goto nla_put_failure;
9588bbd5
JM		 11130
11131 genlmsg_end(msg, hdr);
4c476991
JB		 11132
11133 return genlmsg_reply(msg, info);
9588bbd5
JM		 11134
11135 nla_put_failure:
11136 err = -ENOBUFS;
11137 free_msg:
11138 nlmsg_free(msg);
9588bbd5
JM		 11139 return err;
11140}
11141
11142static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
11143 struct genl_info *info)
11144{
4c476991 11145 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11146 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 11147 u64 cookie;
9588bbd5
JM		 11148
11149 if (!info->attrs[NL80211_ATTR_COOKIE])
11150 return -EINVAL;
11151
4c476991
JB		 11152 if (!rdev->ops->cancel_remain_on_channel)
11153 return -EOPNOTSUPP;
9588bbd5 11154
9588bbd5
JM		 11155 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
11156
e35e4d28 11157 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 11158}
11159
13ae75b1
JM		 11160static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
11161 struct genl_info *info)
11162{
13ae75b1 11163 struct cfg80211_bitrate_mask mask;
a7c7fbff 11164 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 11165 struct net_device *dev = info->user_ptr[1];
a7c7fbff 11166 int err;
13ae75b1 11167
4c476991
JB		 11168 if (!rdev->ops->set_bitrate_mask)
11169 return -EOPNOTSUPP;
13ae75b1 11170
9a5f6488 11171 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
eb89a6a6 11172 NL80211_ATTR_TX_RATES, &mask,
857b34c4 11173 dev, true);
a7c7fbff
PK		 11174 if (err)
11175 return err;
13ae75b1 11176
e35e4d28 11177 return rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
13ae75b1
JM		 11178}
11179
2e161f78 11180static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 11181{
4c476991 11182 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11183 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 11184 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 11185
11186 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
11187 return -EINVAL;
11188
2e161f78
JB		 11189 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
11190 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 11191
71bbc994
JB		 11192 switch (wdev->iftype) {
11193 case NL80211_IFTYPE_STATION:
11194 case NL80211_IFTYPE_ADHOC:
11195 case NL80211_IFTYPE_P2P_CLIENT:
11196 case NL80211_IFTYPE_AP:
11197 case NL80211_IFTYPE_AP_VLAN:
11198 case NL80211_IFTYPE_MESH_POINT:
11199 case NL80211_IFTYPE_P2P_GO:
98104fde 11200 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 11201 break;
cb3b7d87 11202 case NL80211_IFTYPE_NAN:
71bbc994 11203 default:
4c476991 11204 return -EOPNOTSUPP;
71bbc994 11205 }
026331c4
JM		 11206
11207 /* not much point in registering if we can't reply */
4c476991
JB		 11208 if (!rdev->ops->mgmt_tx)
11209 return -EOPNOTSUPP;
026331c4 11210
9dba48a6
JB		 11211 if (info->attrs[NL80211_ATTR_RECEIVE_MULTICAST] &&
11212 !wiphy_ext_feature_isset(&rdev->wiphy,
11213 NL80211_EXT_FEATURE_MULTICAST_REGISTRATIONS)) {
11214 GENL_SET_ERR_MSG(info,
11215 "multicast RX registrations are not supported");
11216 return -EOPNOTSUPP;
11217 }
11218
15e47304 11219 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
ff74c51e
IP		 11220 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
11221 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]),
9dba48a6 11222 info->attrs[NL80211_ATTR_RECEIVE_MULTICAST],
ff74c51e 11223 info->extack);
026331c4
JM		 11224}
11225
2e161f78 11226static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 11227{
4c476991 11228 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11229 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 11230 struct cfg80211_chan_def chandef;
026331c4 11231 int err;
d64d373f 11232 void *hdr = NULL;
026331c4 11233 u64 cookie;
e247bd90 11234 struct sk_buff *msg = NULL;
b176e629
AO		 11235 struct cfg80211_mgmt_tx_params params = {
11236 .dont_wait_for_ack =
11237 info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK],
11238 };
026331c4 11239
683b6d3b 11240 if (!info->attrs[NL80211_ATTR_FRAME])
026331c4
JM		 11241 return -EINVAL;
11242
4c476991
JB		 11243 if (!rdev->ops->mgmt_tx)
11244 return -EOPNOTSUPP;
026331c4 11245
71bbc994 11246 switch (wdev->iftype) {
ea141b75
AQ		 11247 case NL80211_IFTYPE_P2P_DEVICE:
11248 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
11249 return -EINVAL;
d7832c71 11250 break;
71bbc994
JB		 11251 case NL80211_IFTYPE_STATION:
11252 case NL80211_IFTYPE_ADHOC:
11253 case NL80211_IFTYPE_P2P_CLIENT:
11254 case NL80211_IFTYPE_AP:
11255 case NL80211_IFTYPE_AP_VLAN:
11256 case NL80211_IFTYPE_MESH_POINT:
11257 case NL80211_IFTYPE_P2P_GO:
11258 break;
cb3b7d87 11259 case NL80211_IFTYPE_NAN:
71bbc994 11260 default:
4c476991 11261 return -EOPNOTSUPP;
71bbc994 11262 }
026331c4 11263
f7ca38df 11264 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 11265 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df 11266 return -EINVAL;
b176e629 11267 params.wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 11268
11269 /*
11270 * We should wait on the channel for at least a minimum amount
11271 * of time (10ms) but no longer than the driver supports.
11272 */
b176e629
AO		 11273 if (params.wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
11274 params.wait > rdev->wiphy.max_remain_on_channel_duration)
ebf348fc 11275 return -EINVAL;
f7ca38df
JB		 11276 }
11277
b176e629 11278 params.offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
f7ca38df 11279
b176e629 11280 if (params.offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
7c4ef712
JB		 11281 return -EINVAL;
11282
b176e629 11283 params.no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
e9f935e3 11284
ea141b75
AQ		 11285 /* get the channel if any has been specified, otherwise pass NULL to
11286 * the driver. The latter will use the current one
11287 */
11288 chandef.chan = NULL;
11289 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
11290 err = nl80211_parse_chandef(rdev, info, &chandef);
11291 if (err)
11292 return err;
11293 }
11294
b176e629 11295 if (!chandef.chan && params.offchan)
ea141b75 11296 return -EINVAL;
026331c4 11297
34373d12
VT		 11298 wdev_lock(wdev);
11299 if (params.offchan && !cfg80211_off_channel_oper_allowed(wdev)) {
11300 wdev_unlock(wdev);
11301 return -EBUSY;
11302 }
11303 wdev_unlock(wdev);
11304
34d22ce2
AO		 11305 params.buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
11306 params.len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
11307
11308 if (info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]) {
11309 int len = nla_len(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
11310 int i;
11311
11312 if (len % sizeof(u16))
11313 return -EINVAL;
11314
11315 params.n_csa_offsets = len / sizeof(u16);
11316 params.csa_offsets =
11317 nla_data(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
11318
11319 /* check that all the offsets fit the frame */
11320 for (i = 0; i < params.n_csa_offsets; i++) {
11321 if (params.csa_offsets[i] >= params.len)
11322 return -EINVAL;
11323 }
11324 }
11325
b176e629 11326 if (!params.dont_wait_for_ack) {
e247bd90
JB		 11327 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
11328 if (!msg)
11329 return -ENOMEM;
026331c4 11330
15e47304 11331 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 11332 NL80211_CMD_FRAME);
cb35fba3
DC		 11333 if (!hdr) {
11334 err = -ENOBUFS;
e247bd90
JB		 11335 goto free_msg;
11336 }
026331c4 11337 }
e247bd90 11338
b176e629
AO		 11339 params.chan = chandef.chan;
11340 err = cfg80211_mlme_mgmt_tx(rdev, wdev, &params, &cookie);
026331c4
JM		 11341 if (err)
11342 goto free_msg;
11343
e247bd90 11344 if (msg) {
2dad624e
ND		 11345 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
11346 NL80211_ATTR_PAD))
9360ffd1 11347 goto nla_put_failure;
026331c4 11348
e247bd90
JB		 11349 genlmsg_end(msg, hdr);
11350 return genlmsg_reply(msg, info);
11351 }
11352
11353 return 0;
026331c4
JM		 11354
11355 nla_put_failure:
11356 err = -ENOBUFS;
11357 free_msg:
11358 nlmsg_free(msg);
026331c4
JM		 11359 return err;
11360}
11361
f7ca38df
JB		 11362static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
11363{
11364 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 11365 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 11366 u64 cookie;
11367
11368 if (!info->attrs[NL80211_ATTR_COOKIE])
11369 return -EINVAL;
11370
11371 if (!rdev->ops->mgmt_tx_cancel_wait)
11372 return -EOPNOTSUPP;
11373
71bbc994
JB		 11374 switch (wdev->iftype) {
11375 case NL80211_IFTYPE_STATION:
11376 case NL80211_IFTYPE_ADHOC:
11377 case NL80211_IFTYPE_P2P_CLIENT:
11378 case NL80211_IFTYPE_AP:
11379 case NL80211_IFTYPE_AP_VLAN:
11380 case NL80211_IFTYPE_P2P_GO:
98104fde 11381 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994 11382 break;
cb3b7d87 11383 case NL80211_IFTYPE_NAN:
71bbc994 11384 default:
f7ca38df 11385 return -EOPNOTSUPP;
71bbc994 11386 }
f7ca38df
JB		 11387
11388 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
11389
e35e4d28 11390 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 11391}
11392
ffb9eb3d
KV		 11393static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
11394{
4c476991 11395 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 11396 struct wireless_dev *wdev;
4c476991 11397 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 11398 u8 ps_state;
11399 bool state;
11400 int err;
11401
4c476991
JB		 11402 if (!info->attrs[NL80211_ATTR_PS_STATE])
11403 return -EINVAL;
ffb9eb3d
KV		 11404
11405 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
11406
ffb9eb3d
KV		 11407 wdev = dev->ieee80211_ptr;
11408
4c476991
JB		 11409 if (!rdev->ops->set_power_mgmt)
11410 return -EOPNOTSUPP;
ffb9eb3d
KV		 11411
11412 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
11413
11414 if (state == wdev->ps)
4c476991 11415 return 0;
ffb9eb3d 11416
e35e4d28 11417 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 11418 if (!err)
11419 wdev->ps = state;
ffb9eb3d
KV		 11420 return err;
11421}
11422
11423static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
11424{
4c476991 11425 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 11426 enum nl80211_ps_state ps_state;
11427 struct wireless_dev *wdev;
4c476991 11428 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 11429 struct sk_buff *msg;
11430 void *hdr;
11431 int err;
11432
ffb9eb3d
KV		 11433 wdev = dev->ieee80211_ptr;
11434
4c476991
JB		 11435 if (!rdev->ops->set_power_mgmt)
11436 return -EOPNOTSUPP;
ffb9eb3d
KV		 11437
11438 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 11439 if (!msg)
11440 return -ENOMEM;
ffb9eb3d 11441
15e47304 11442 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 11443 NL80211_CMD_GET_POWER_SAVE);
11444 if (!hdr) {
4c476991 11445 err = -ENOBUFS;
ffb9eb3d
KV		 11446 goto free_msg;
11447 }
11448
11449 if (wdev->ps)
11450 ps_state = NL80211_PS_ENABLED;
11451 else
11452 ps_state = NL80211_PS_DISABLED;
11453
9360ffd1
DM		 11454 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
11455 goto nla_put_failure;
ffb9eb3d
KV		 11456
11457 genlmsg_end(msg, hdr);
4c476991 11458 return genlmsg_reply(msg, info);
ffb9eb3d 11459
4c476991 11460 nla_put_failure:
ffb9eb3d 11461 err = -ENOBUFS;
4c476991 11462 free_msg:
ffb9eb3d 11463 nlmsg_free(msg);
ffb9eb3d
KV		 11464 return err;
11465}
11466
94e860f1
JB		 11467static const struct nla_policy
11468nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
4a4b8169 11469 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_BINARY },
d6dc1a38
JO		 11470 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
11471 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 11472 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
11473 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
11474 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
bee427b8 11475 [NL80211_ATTR_CQM_RSSI_LEVEL] = { .type = NLA_S32 },
d6dc1a38
JO		 11476};
11477
84f10708 11478static int nl80211_set_cqm_txe(struct genl_info *info,
d9d8b019 11479 u32 rate, u32 pkts, u32 intvl)
84f10708
TP		 11480{
11481 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84f10708 11482 struct net_device *dev = info->user_ptr[1];
1da5fcc8 11483 struct wireless_dev *wdev = dev->ieee80211_ptr;
84f10708 11484
d9d8b019 11485 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
84f10708
TP		 11486 return -EINVAL;
11487
84f10708
TP		 11488 if (!rdev->ops->set_cqm_txe_config)
11489 return -EOPNOTSUPP;
11490
11491 if (wdev->iftype != NL80211_IFTYPE_STATION &&
11492 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
11493 return -EOPNOTSUPP;
11494
e35e4d28 11495 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 11496}
11497
4a4b8169
AZ		 11498static int cfg80211_cqm_rssi_update(struct cfg80211_registered_device *rdev,
11499 struct net_device *dev)
11500{
11501 struct wireless_dev *wdev = dev->ieee80211_ptr;
11502 s32 last, low, high;
11503 u32 hyst;
1222a160 11504 int i, n, low_index;
4a4b8169
AZ		 11505 int err;
11506
11507 /* RSSI reporting disabled? */
11508 if (!wdev->cqm_config)
11509 return rdev_set_cqm_rssi_range_config(rdev, dev, 0, 0);
11510
11511 /*
11512 * Obtain current RSSI value if possible, if not and no RSSI threshold
11513 * event has been received yet, we should receive an event after a
11514 * connection is established and enough beacons received to calculate
11515 * the average.
11516 */
11517 if (!wdev->cqm_config->last_rssi_event_value && wdev->current_bss &&
11518 rdev->ops->get_station) {
73887fd9 11519 struct station_info sinfo = {};
4a4b8169
AZ		 11520 u8 *mac_addr;
11521
11522 mac_addr = wdev->current_bss->pub.bssid;
11523
73887fd9
JB		 11524 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
11525 if (err)
4a4b8169
AZ		 11526 return err;
11527
df16737d 11528 cfg80211_sinfo_release_content(&sinfo);
397c657a 11529 if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_BEACON_SIGNAL_AVG))
4a4b8169 11530 wdev->cqm_config->last_rssi_event_value =
73887fd9 11531 (s8) sinfo.rx_beacon_signal_avg;
4a4b8169
AZ		 11532 }
11533
11534 last = wdev->cqm_config->last_rssi_event_value;
11535 hyst = wdev->cqm_config->rssi_hyst;
11536 n = wdev->cqm_config->n_rssi_thresholds;
11537
4b2c5a14
MH		 11538 for (i = 0; i < n; i++) {
11539 i = array_index_nospec(i, n);
4a4b8169
AZ		 11540 if (last < wdev->cqm_config->rssi_thresholds[i])
11541 break;
4b2c5a14 11542 }
4a4b8169 11543
1222a160
MH		 11544 low_index = i - 1;
11545 if (low_index >= 0) {
11546 low_index = array_index_nospec(low_index, n);
11547 low = wdev->cqm_config->rssi_thresholds[low_index] - hyst;
11548 } else {
11549 low = S32_MIN;
11550 }
11551 if (i < n) {
11552 i = array_index_nospec(i, n);
11553 high = wdev->cqm_config->rssi_thresholds[i] + hyst - 1;
11554 } else {
11555 high = S32_MAX;
11556 }
4a4b8169
AZ		 11557
11558 return rdev_set_cqm_rssi_range_config(rdev, dev, low, high);
11559}
11560
d6dc1a38 11561static int nl80211_set_cqm_rssi(struct genl_info *info,
4a4b8169
AZ		 11562 const s32 *thresholds, int n_thresholds,
11563 u32 hysteresis)
d6dc1a38 11564{
4c476991 11565 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 11566 struct net_device *dev = info->user_ptr[1];
1da5fcc8 11567 struct wireless_dev *wdev = dev->ieee80211_ptr;
4a4b8169
AZ		 11568 int i, err;
11569 s32 prev = S32_MIN;
d6dc1a38 11570
4a4b8169
AZ		 11571 /* Check all values negative and sorted */
11572 for (i = 0; i < n_thresholds; i++) {
11573 if (thresholds[i] > 0 || thresholds[i] <= prev)
11574 return -EINVAL;
d6dc1a38 11575
4a4b8169
AZ		 11576 prev = thresholds[i];
11577 }
d6dc1a38 11578
074ac8df 11579 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 11580 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
11581 return -EOPNOTSUPP;
d6dc1a38 11582
4a4b8169
AZ		 11583 wdev_lock(wdev);
11584 cfg80211_cqm_config_free(wdev);
11585 wdev_unlock(wdev);
11586
11587 if (n_thresholds <= 1 && rdev->ops->set_cqm_rssi_config) {
11588 if (n_thresholds == 0 || thresholds[0] == 0) /* Disabling */
11589 return rdev_set_cqm_rssi_config(rdev, dev, 0, 0);
11590
11591 return rdev_set_cqm_rssi_config(rdev, dev,
11592 thresholds[0], hysteresis);
11593 }
11594
11595 if (!wiphy_ext_feature_isset(&rdev->wiphy,
11596 NL80211_EXT_FEATURE_CQM_RSSI_LIST))
11597 return -EOPNOTSUPP;
11598
11599 if (n_thresholds == 1 && thresholds[0] == 0) /* Disabling */
11600 n_thresholds = 0;
11601
11602 wdev_lock(wdev);
11603 if (n_thresholds) {
11604 struct cfg80211_cqm_config *cqm_config;
11605
11606 cqm_config = kzalloc(sizeof(struct cfg80211_cqm_config) +
11607 n_thresholds * sizeof(s32), GFP_KERNEL);
11608 if (!cqm_config) {
11609 err = -ENOMEM;
11610 goto unlock;
11611 }
11612
11613 cqm_config->rssi_hyst = hysteresis;
11614 cqm_config->n_rssi_thresholds = n_thresholds;
11615 memcpy(cqm_config->rssi_thresholds, thresholds,
11616 n_thresholds * sizeof(s32));
11617
11618 wdev->cqm_config = cqm_config;
11619 }
11620
11621 err = cfg80211_cqm_rssi_update(rdev, dev);
11622
11623unlock:
11624 wdev_unlock(wdev);
11625
11626 return err;
d6dc1a38
JO		 11627}
11628
11629static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
11630{
11631 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
11632 struct nlattr *cqm;
11633 int err;
11634
11635 cqm = info->attrs[NL80211_ATTR_CQM];
1da5fcc8
JB		 11636 if (!cqm)
11637 return -EINVAL;
d6dc1a38 11638
8cb08174
JB		 11639 err = nla_parse_nested_deprecated(attrs, NL80211_ATTR_CQM_MAX, cqm,
11640 nl80211_attr_cqm_policy,
11641 info->extack);
d6dc1a38 11642 if (err)
1da5fcc8 11643 return err;
d6dc1a38
JO		 11644
11645 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
11646 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
4a4b8169
AZ		 11647 const s32 *thresholds =
11648 nla_data(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
11649 int len = nla_len(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
1da5fcc8 11650 u32 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
d6dc1a38 11651
4a4b8169
AZ		 11652 if (len % 4)
11653 return -EINVAL;
11654
11655 return nl80211_set_cqm_rssi(info, thresholds, len / 4,
11656 hysteresis);
1da5fcc8
JB		 11657 }
11658
11659 if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
11660 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
11661 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
11662 u32 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
11663 u32 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
11664 u32 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
11665
11666 return nl80211_set_cqm_txe(info, rate, pkts, intvl);
11667 }
11668
11669 return -EINVAL;
d6dc1a38
JO		 11670}
11671
6e0bd6c3
RL		 11672static int nl80211_join_ocb(struct sk_buff *skb, struct genl_info *info)
11673{
11674 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11675 struct net_device *dev = info->user_ptr[1];
11676 struct ocb_setup setup = {};
11677 int err;
11678
11679 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
11680 if (err)
11681 return err;
11682
11683 return cfg80211_join_ocb(rdev, dev, &setup);
11684}
11685
11686static int nl80211_leave_ocb(struct sk_buff *skb, struct genl_info *info)
11687{
11688 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11689 struct net_device *dev = info->user_ptr[1];
11690
11691 return cfg80211_leave_ocb(rdev, dev);
11692}
11693
29cbe68c
JB		 11694static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
11695{
11696 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11697 struct net_device *dev = info->user_ptr[1];
11698 struct mesh_config cfg;
c80d545d 11699 struct mesh_setup setup;
29cbe68c
JB		 11700 int err;
11701
11702 /* start with default */
11703 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 11704 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 11705
24bdd9f4 11706 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 11707 /* and parse parameters if given */
24bdd9f4 11708 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 11709 if (err)
11710 return err;
11711 }
11712
11713 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
11714 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
11715 return -EINVAL;
11716
c80d545d
JC		 11717 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
11718 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
11719
4bb62344
CYY		 11720 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
11721 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
11722 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
11723 return -EINVAL;
11724
9bdbf04d
MP		 11725 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
11726 setup.beacon_interval =
11727 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
12d20fc9 11728
0c317a02
PK		 11729 err = cfg80211_validate_beacon_int(rdev,
11730 NL80211_IFTYPE_MESH_POINT,
11731 setup.beacon_interval);
12d20fc9
PK		 11732 if (err)
11733 return err;
9bdbf04d
MP		 11734 }
11735
11736 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
11737 setup.dtim_period =
11738 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
11739 if (setup.dtim_period < 1 || setup.dtim_period > 100)
11740 return -EINVAL;
11741 }
11742
c80d545d
JC		 11743 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
11744 /* parse additional setup parameters if given */
11745 err = nl80211_parse_mesh_setup(info, &setup);
11746 if (err)
11747 return err;
11748 }
11749
d37bb18a
TP		 11750 if (setup.user_mpm)
11751 cfg.auto_open_plinks = false;
11752
cc1d2806 11753 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 11754 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
11755 if (err)
11756 return err;
cc1d2806 11757 } else {
188c1b3c 11758 /* __cfg80211_join_mesh() will sort it out */
683b6d3b 11759 setup.chandef.chan = NULL;
cc1d2806
JB		 11760 }
11761
ffb3cf30
AN		 11762 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
11763 u8 *rates = nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11764 int n_rates =
11765 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
11766 struct ieee80211_supported_band *sband;
11767
11768 if (!setup.chandef.chan)
11769 return -EINVAL;
11770
11771 sband = rdev->wiphy.bands[setup.chandef.chan->band];
11772
11773 err = ieee80211_get_ratemask(sband, rates, n_rates,
11774 &setup.basic_rates);
11775 if (err)
11776 return err;
11777 }
11778
8564e382 11779 if (info->attrs[NL80211_ATTR_TX_RATES]) {
9a5f6488
TC		 11780 err = nl80211_parse_tx_bitrate_mask(info, info->attrs,
11781 NL80211_ATTR_TX_RATES,
eb89a6a6 11782 &setup.beacon_rate,
857b34c4 11783 dev, false);
8564e382
JB		 11784 if (err)
11785 return err;
11786
265698d7
JB		 11787 if (!setup.chandef.chan)
11788 return -EINVAL;
11789
8564e382
JB		 11790 err = validate_beacon_tx_rate(rdev, setup.chandef.chan->band,
11791 &setup.beacon_rate);
11792 if (err)
11793 return err;
11794 }
11795
d37d49c2
BB		 11796 setup.userspace_handles_dfs =
11797 nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
11798
1224f583
DK		 11799 if (info->attrs[NL80211_ATTR_CONTROL_PORT_OVER_NL80211]) {
11800 int r = validate_pae_over_nl80211(rdev, info);
11801
11802 if (r < 0)
11803 return r;
11804
11805 setup.control_port_over_nl80211 = true;
11806 }
11807
188c1b3c
DK		 11808 wdev_lock(dev->ieee80211_ptr);
11809 err = __cfg80211_join_mesh(rdev, dev, &setup, &cfg);
11810 if (!err && info->attrs[NL80211_ATTR_SOCKET_OWNER])
11811 dev->ieee80211_ptr->conn_owner_nlportid = info->snd_portid;
11812 wdev_unlock(dev->ieee80211_ptr);
11813
11814 return err;
29cbe68c
JB		 11815}
11816
11817static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
11818{
11819 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11820 struct net_device *dev = info->user_ptr[1];
11821
11822 return cfg80211_leave_mesh(rdev, dev);
11823}
11824
dfb89c56 11825#ifdef CONFIG_PM
bb92d199
AK		 11826static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
11827 struct cfg80211_registered_device *rdev)
11828{
6abb9cb9 11829 struct cfg80211_wowlan *wowlan = rdev->wiphy.wowlan_config;
bb92d199
AK		 11830 struct nlattr *nl_pats, *nl_pat;
11831 int i, pat_len;
11832
6abb9cb9 11833 if (!wowlan->n_patterns)
bb92d199
AK		 11834 return 0;
11835
ae0be8de 11836 nl_pats = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
bb92d199
AK		 11837 if (!nl_pats)
11838 return -ENOBUFS;
11839
6abb9cb9 11840 for (i = 0; i < wowlan->n_patterns; i++) {
ae0be8de 11841 nl_pat = nla_nest_start_noflag(msg, i + 1);
bb92d199
AK		 11842 if (!nl_pat)
11843 return -ENOBUFS;
6abb9cb9 11844 pat_len = wowlan->patterns[i].pattern_len;
50ac6607 11845 if (nla_put(msg, NL80211_PKTPAT_MASK, DIV_ROUND_UP(pat_len, 8),
6abb9cb9 11846 wowlan->patterns[i].mask) ||
50ac6607
AK		 11847 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
11848 wowlan->patterns[i].pattern) ||
11849 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
6abb9cb9 11850 wowlan->patterns[i].pkt_offset))
bb92d199
AK		 11851 return -ENOBUFS;
11852 nla_nest_end(msg, nl_pat);
11853 }
11854 nla_nest_end(msg, nl_pats);
11855
11856 return 0;
11857}
11858
2a0e047e
JB		 11859static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
11860 struct cfg80211_wowlan_tcp *tcp)
11861{
11862 struct nlattr *nl_tcp;
11863
11864 if (!tcp)
11865 return 0;
11866
ae0be8de
MK		 11867 nl_tcp = nla_nest_start_noflag(msg,
11868 NL80211_WOWLAN_TRIG_TCP_CONNECTION);
2a0e047e
JB		 11869 if (!nl_tcp)
11870 return -ENOBUFS;
11871
930345ea
JB		 11872 if (nla_put_in_addr(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
11873 nla_put_in_addr(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
2a0e047e
JB		 11874 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
11875 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
11876 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
11877 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
11878 tcp->payload_len, tcp->payload) ||
11879 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
11880 tcp->data_interval) ||
11881 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
11882 tcp->wake_len, tcp->wake_data) ||
11883 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
11884 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
11885 return -ENOBUFS;
11886
11887 if (tcp->payload_seq.len &&
11888 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
11889 sizeof(tcp->payload_seq), &tcp->payload_seq))
11890 return -ENOBUFS;
11891
11892 if (tcp->payload_tok.len &&
11893 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
11894 sizeof(tcp->payload_tok) + tcp->tokens_size,
11895 &tcp->payload_tok))
11896 return -ENOBUFS;
11897
e248ad30
JB		 11898 nla_nest_end(msg, nl_tcp);
11899
2a0e047e
JB		 11900 return 0;
11901}
11902
75453ccb
LC		 11903static int nl80211_send_wowlan_nd(struct sk_buff *msg,
11904 struct cfg80211_sched_scan_request *req)
11905{
3b06d277 11906 struct nlattr *nd, *freqs, *matches, *match, *scan_plans, *scan_plan;
75453ccb
LC		 11907 int i;
11908
11909 if (!req)
11910 return 0;
11911
ae0be8de 11912 nd = nla_nest_start_noflag(msg, NL80211_WOWLAN_TRIG_NET_DETECT);
75453ccb
LC		 11913 if (!nd)
11914 return -ENOBUFS;
11915
3b06d277
AS		 11916 if (req->n_scan_plans == 1 &&
11917 nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_INTERVAL,
11918 req->scan_plans[0].interval * 1000))
75453ccb
LC		 11919 return -ENOBUFS;
11920
21fea567
LC		 11921 if (nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_DELAY, req->delay))
11922 return -ENOBUFS;
11923
bf95ecdb 11924 if (req->relative_rssi_set) {
11925 struct nl80211_bss_select_rssi_adjust rssi_adjust;
11926
11927 if (nla_put_s8(msg, NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI,
11928 req->relative_rssi))
11929 return -ENOBUFS;
11930
11931 rssi_adjust.band = req->rssi_adjust.band;
11932 rssi_adjust.delta = req->rssi_adjust.delta;
11933 if (nla_put(msg, NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST,
11934 sizeof(rssi_adjust), &rssi_adjust))
11935 return -ENOBUFS;
11936 }
11937
ae0be8de 11938 freqs = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_FREQUENCIES);
75453ccb
LC		 11939 if (!freqs)
11940 return -ENOBUFS;
11941
53b18980
JB		 11942 for (i = 0; i < req->n_channels; i++) {
11943 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
11944 return -ENOBUFS;
11945 }
75453ccb
LC		 11946
11947 nla_nest_end(msg, freqs);
11948
11949 if (req->n_match_sets) {
ae0be8de
MK		 11950 matches = nla_nest_start_noflag(msg,
11951 NL80211_ATTR_SCHED_SCAN_MATCH);
76e1fb4b
JB		 11952 if (!matches)
11953 return -ENOBUFS;
11954
75453ccb 11955 for (i = 0; i < req->n_match_sets; i++) {
ae0be8de 11956 match = nla_nest_start_noflag(msg, i);
76e1fb4b
JB		 11957 if (!match)
11958 return -ENOBUFS;
11959
53b18980
JB		 11960 if (nla_put(msg, NL80211_SCHED_SCAN_MATCH_ATTR_SSID,
11961 req->match_sets[i].ssid.ssid_len,
11962 req->match_sets[i].ssid.ssid))
11963 return -ENOBUFS;
75453ccb
LC		 11964 nla_nest_end(msg, match);
11965 }
11966 nla_nest_end(msg, matches);
11967 }
11968
ae0be8de 11969 scan_plans = nla_nest_start_noflag(msg, NL80211_ATTR_SCHED_SCAN_PLANS);
3b06d277
AS		 11970 if (!scan_plans)
11971 return -ENOBUFS;
11972
11973 for (i = 0; i < req->n_scan_plans; i++) {
ae0be8de 11974 scan_plan = nla_nest_start_noflag(msg, i + 1);
76e1fb4b
JB		 11975 if (!scan_plan)
11976 return -ENOBUFS;
11977
67626964 11978 if (nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_INTERVAL,
3b06d277
AS		 11979 req->scan_plans[i].interval) ||
11980 (req->scan_plans[i].iterations &&
11981 nla_put_u32(msg, NL80211_SCHED_SCAN_PLAN_ITERATIONS,
11982 req->scan_plans[i].iterations)))
11983 return -ENOBUFS;
11984 nla_nest_end(msg, scan_plan);
11985 }
11986 nla_nest_end(msg, scan_plans);
11987
75453ccb
LC		 11988 nla_nest_end(msg, nd);
11989
11990 return 0;
11991}
11992
ff1b6e69
JB		 11993static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
11994{
11995 struct cfg80211_registered_device *rdev = info->user_ptr[0];
11996 struct sk_buff *msg;
11997 void *hdr;
2a0e047e 11998 u32 size = NLMSG_DEFAULT_SIZE;
ff1b6e69 11999
964dc9e2 12000 if (!rdev->wiphy.wowlan)
ff1b6e69
JB		 12001 return -EOPNOTSUPP;
12002
6abb9cb9 12003 if (rdev->wiphy.wowlan_config && rdev->wiphy.wowlan_config->tcp) {
2a0e047e 12004 /* adjust size to have room for all the data */
6abb9cb9
JB		 12005 size += rdev->wiphy.wowlan_config->tcp->tokens_size +
12006 rdev->wiphy.wowlan_config->tcp->payload_len +
12007 rdev->wiphy.wowlan_config->tcp->wake_len +
12008 rdev->wiphy.wowlan_config->tcp->wake_len / 8;
2a0e047e
JB		 12009 }
12010
12011 msg = nlmsg_new(size, GFP_KERNEL);
ff1b6e69
JB		 12012 if (!msg)
12013 return -ENOMEM;
12014
15e47304 12015 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 12016 NL80211_CMD_GET_WOWLAN);
12017 if (!hdr)
12018 goto nla_put_failure;
12019
6abb9cb9 12020 if (rdev->wiphy.wowlan_config) {
ff1b6e69
JB		 12021 struct nlattr *nl_wowlan;
12022
ae0be8de
MK		 12023 nl_wowlan = nla_nest_start_noflag(msg,
12024 NL80211_ATTR_WOWLAN_TRIGGERS);
ff1b6e69
JB		 12025 if (!nl_wowlan)
12026 goto nla_put_failure;
12027
6abb9cb9 12028 if ((rdev->wiphy.wowlan_config->any &&
9360ffd1 12029 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6abb9cb9 12030 (rdev->wiphy.wowlan_config->disconnect &&
9360ffd1 12031 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6abb9cb9 12032 (rdev->wiphy.wowlan_config->magic_pkt &&
9360ffd1 12033 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6abb9cb9 12034 (rdev->wiphy.wowlan_config->gtk_rekey_failure &&
9360ffd1 12035 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6abb9cb9 12036 (rdev->wiphy.wowlan_config->eap_identity_req &&
9360ffd1 12037 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6abb9cb9 12038 (rdev->wiphy.wowlan_config->four_way_handshake &&
9360ffd1 12039 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6abb9cb9 12040 (rdev->wiphy.wowlan_config->rfkill_release &&
9360ffd1
DM		 12041 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
12042 goto nla_put_failure;
2a0e047e 12043
bb92d199
AK		 12044 if (nl80211_send_wowlan_patterns(msg, rdev))
12045 goto nla_put_failure;
2a0e047e 12046
6abb9cb9
JB		 12047 if (nl80211_send_wowlan_tcp(msg,
12048 rdev->wiphy.wowlan_config->tcp))
2a0e047e 12049 goto nla_put_failure;
75453ccb
LC		 12050
12051 if (nl80211_send_wowlan_nd(
12052 msg,
12053 rdev->wiphy.wowlan_config->nd_config))
12054 goto nla_put_failure;
2a0e047e 12055
ff1b6e69
JB		 12056 nla_nest_end(msg, nl_wowlan);
12057 }
12058
12059 genlmsg_end(msg, hdr);
12060 return genlmsg_reply(msg, info);
12061
12062nla_put_failure:
12063 nlmsg_free(msg);
12064 return -ENOBUFS;
12065}
12066
2a0e047e
JB		 12067static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
12068 struct nlattr *attr,
12069 struct cfg80211_wowlan *trig)
12070{
12071 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
12072 struct cfg80211_wowlan_tcp *cfg;
12073 struct nl80211_wowlan_tcp_data_token *tok = NULL;
12074 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
12075 u32 size;
12076 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
12077 int err, port;
12078
964dc9e2 12079 if (!rdev->wiphy.wowlan->tcp)
2a0e047e
JB		 12080 return -EINVAL;
12081
8cb08174
JB		 12082 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TCP, attr,
12083 nl80211_wowlan_tcp_policy, NULL);
2a0e047e
JB		 12084 if (err)
12085 return err;
12086
12087 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
12088 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
12089 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
12090 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
12091 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
12092 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
12093 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
12094 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
12095 return -EINVAL;
12096
12097 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
964dc9e2 12098 if (data_size > rdev->wiphy.wowlan->tcp->data_payload_max)
2a0e047e
JB		 12099 return -EINVAL;
12100
12101 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
964dc9e2 12102 rdev->wiphy.wowlan->tcp->data_interval_max ||
723d568a 12103 nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) == 0)
2a0e047e
JB		 12104 return -EINVAL;
12105
12106 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
964dc9e2 12107 if (wake_size > rdev->wiphy.wowlan->tcp->wake_payload_max)
2a0e047e
JB		 12108 return -EINVAL;
12109
12110 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
12111 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
12112 return -EINVAL;
12113
12114 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
12115 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
12116
12117 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
12118 tokens_size = tokln - sizeof(*tok);
12119
12120 if (!tok->len || tokens_size % tok->len)
12121 return -EINVAL;
964dc9e2 12122 if (!rdev->wiphy.wowlan->tcp->tok)
2a0e047e 12123 return -EINVAL;
964dc9e2 12124 if (tok->len > rdev->wiphy.wowlan->tcp->tok->max_len)
2a0e047e 12125 return -EINVAL;
964dc9e2 12126 if (tok->len < rdev->wiphy.wowlan->tcp->tok->min_len)
2a0e047e 12127 return -EINVAL;
964dc9e2 12128 if (tokens_size > rdev->wiphy.wowlan->tcp->tok->bufsize)
2a0e047e
JB		 12129 return -EINVAL;
12130 if (tok->offset + tok->len > data_size)
12131 return -EINVAL;
12132 }
12133
12134 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
12135 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
964dc9e2 12136 if (!rdev->wiphy.wowlan->tcp->seq)
2a0e047e
JB		 12137 return -EINVAL;
12138 if (seq->len == 0 || seq->len > 4)
12139 return -EINVAL;
12140 if (seq->len + seq->offset > data_size)
12141 return -EINVAL;
12142 }
12143
12144 size = sizeof(*cfg);
12145 size += data_size;
12146 size += wake_size + wake_mask_size;
12147 size += tokens_size;
12148
12149 cfg = kzalloc(size, GFP_KERNEL);
12150 if (!cfg)
12151 return -ENOMEM;
67b61f6c
JB		 12152 cfg->src = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
12153 cfg->dst = nla_get_in_addr(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
2a0e047e
JB		 12154 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
12155 ETH_ALEN);
12156 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
12157 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
12158 else
12159 port = 0;
12160#ifdef CONFIG_INET
12161 /* allocate a socket and port for it and use it */
12162 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
12163 IPPROTO_TCP, &cfg->sock, 1);
12164 if (err) {
12165 kfree(cfg);
12166 return err;
12167 }
12168 if (inet_csk_get_port(cfg->sock->sk, port)) {
12169 sock_release(cfg->sock);
12170 kfree(cfg);
12171 return -EADDRINUSE;
12172 }
12173 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
12174#else
12175 if (!port) {
12176 kfree(cfg);
12177 return -EINVAL;
12178 }
12179 cfg->src_port = port;
12180#endif
12181
12182 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
12183 cfg->payload_len = data_size;
12184 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
12185 memcpy((void *)cfg->payload,
12186 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
12187 data_size);
12188 if (seq)
12189 cfg->payload_seq = *seq;
12190 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
12191 cfg->wake_len = wake_size;
12192 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
12193 memcpy((void *)cfg->wake_data,
12194 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
12195 wake_size);
12196 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
12197 data_size + wake_size;
12198 memcpy((void *)cfg->wake_mask,
12199 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
12200 wake_mask_size);
12201 if (tok) {
12202 cfg->tokens_size = tokens_size;
12203 memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
12204 }
12205
12206 trig->tcp = cfg;
12207
12208 return 0;
12209}
12210
8cd4d456
LC		 12211static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
12212 const struct wiphy_wowlan_support *wowlan,
12213 struct nlattr *attr,
12214 struct cfg80211_wowlan *trig)
12215{
12216 struct nlattr **tb;
12217 int err;
12218
6396bb22 12219 tb = kcalloc(NUM_NL80211_ATTR, sizeof(*tb), GFP_KERNEL);
8cd4d456
LC		 12220 if (!tb)
12221 return -ENOMEM;
12222
12223 if (!(wowlan->flags & WIPHY_WOWLAN_NET_DETECT)) {
12224 err = -EOPNOTSUPP;
12225 goto out;
12226 }
12227
8cb08174
JB		 12228 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_MAX, attr,
12229 nl80211_policy, NULL);
8cd4d456
LC		 12230 if (err)
12231 goto out;
12232
aad1e812
AVS		 12233 trig->nd_config = nl80211_parse_sched_scan(&rdev->wiphy, NULL, tb,
12234 wowlan->max_nd_match_sets);
8cd4d456
LC		 12235 err = PTR_ERR_OR_ZERO(trig->nd_config);
12236 if (err)
12237 trig->nd_config = NULL;
12238
12239out:
12240 kfree(tb);
12241 return err;
12242}
12243
ff1b6e69
JB		 12244static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
12245{
12246 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12247 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 12248 struct cfg80211_wowlan new_triggers = {};
ae33bd81 12249 struct cfg80211_wowlan *ntrig;
964dc9e2 12250 const struct wiphy_wowlan_support *wowlan = rdev->wiphy.wowlan;
ff1b6e69 12251 int err, i;
6abb9cb9 12252 bool prev_enabled = rdev->wiphy.wowlan_config;
98fc4386 12253 bool regular = false;
ff1b6e69 12254
964dc9e2 12255 if (!wowlan)
ff1b6e69
JB		 12256 return -EOPNOTSUPP;
12257
ae33bd81
JB		 12258 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
12259 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 12260 rdev->wiphy.wowlan_config = NULL;
ae33bd81
JB		 12261 goto set_wakeup;
12262 }
ff1b6e69 12263
8cb08174
JB		 12264 err = nla_parse_nested_deprecated(tb, MAX_NL80211_WOWLAN_TRIG,
12265 info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS],
12266 nl80211_wowlan_policy, info->extack);
ff1b6e69
JB		 12267 if (err)
12268 return err;
12269
12270 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
12271 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
12272 return -EINVAL;
12273 new_triggers.any = true;
12274 }
12275
12276 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
12277 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
12278 return -EINVAL;
12279 new_triggers.disconnect = true;
98fc4386 12280 regular = true;
ff1b6e69
JB		 12281 }
12282
12283 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
12284 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
12285 return -EINVAL;
12286 new_triggers.magic_pkt = true;
98fc4386 12287 regular = true;
ff1b6e69
JB		 12288 }
12289
77dbbb13
JB		 12290 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
12291 return -EINVAL;
12292
12293 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
12294 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
12295 return -EINVAL;
12296 new_triggers.gtk_rekey_failure = true;
98fc4386 12297 regular = true;
77dbbb13
JB		 12298 }
12299
12300 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
12301 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
12302 return -EINVAL;
12303 new_triggers.eap_identity_req = true;
98fc4386 12304 regular = true;
77dbbb13
JB		 12305 }
12306
12307 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
12308 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
12309 return -EINVAL;
12310 new_triggers.four_way_handshake = true;
98fc4386 12311 regular = true;
77dbbb13
JB		 12312 }
12313
12314 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
12315 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
12316 return -EINVAL;
12317 new_triggers.rfkill_release = true;
98fc4386 12318 regular = true;
77dbbb13
JB		 12319 }
12320
ff1b6e69
JB		 12321 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
12322 struct nlattr *pat;
12323 int n_patterns = 0;
bb92d199 12324 int rem, pat_len, mask_len, pkt_offset;
50ac6607 12325 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
ff1b6e69 12326
98fc4386
JB		 12327 regular = true;
12328
ff1b6e69
JB		 12329 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
12330 rem)
12331 n_patterns++;
12332 if (n_patterns > wowlan->n_patterns)
12333 return -EINVAL;
12334
12335 new_triggers.patterns = kcalloc(n_patterns,
12336 sizeof(new_triggers.patterns[0]),
12337 GFP_KERNEL);
12338 if (!new_triggers.patterns)
12339 return -ENOMEM;
12340
12341 new_triggers.n_patterns = n_patterns;
12342 i = 0;
12343
12344 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
12345 rem) {
922bd80f
JB		 12346 u8 *mask_pat;
12347
8cb08174
JB		 12348 err = nla_parse_nested_deprecated(pat_tb,
12349 MAX_NL80211_PKTPAT,
12350 pat,
12351 nl80211_packet_pattern_policy,
12352 info->extack);
95bca62f
JB		 12353 if (err)
12354 goto error;
12355
ff1b6e69 12356 err = -EINVAL;
50ac6607
AK		 12357 if (!pat_tb[NL80211_PKTPAT_MASK] ||
12358 !pat_tb[NL80211_PKTPAT_PATTERN])
ff1b6e69 12359 goto error;
50ac6607 12360 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
ff1b6e69 12361 mask_len = DIV_ROUND_UP(pat_len, 8);
50ac6607 12362 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
ff1b6e69
JB		 12363 goto error;
12364 if (pat_len > wowlan->pattern_max_len ||
12365 pat_len < wowlan->pattern_min_len)
12366 goto error;
12367
50ac6607 12368 if (!pat_tb[NL80211_PKTPAT_OFFSET])
bb92d199
AK		 12369 pkt_offset = 0;
12370 else
12371 pkt_offset = nla_get_u32(
50ac6607 12372 pat_tb[NL80211_PKTPAT_OFFSET]);
bb92d199
AK		 12373 if (pkt_offset > wowlan->max_pkt_offset)
12374 goto error;
12375 new_triggers.patterns[i].pkt_offset = pkt_offset;
12376
922bd80f
JB		 12377 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
12378 if (!mask_pat) {
ff1b6e69
JB		 12379 err = -ENOMEM;
12380 goto error;
12381 }
922bd80f
JB		 12382 new_triggers.patterns[i].mask = mask_pat;
12383 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
ff1b6e69 12384 mask_len);
922bd80f
JB		 12385 mask_pat += mask_len;
12386 new_triggers.patterns[i].pattern = mask_pat;
ff1b6e69 12387 new_triggers.patterns[i].pattern_len = pat_len;
922bd80f 12388 memcpy(mask_pat,
50ac6607 12389 nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
ff1b6e69
JB		 12390 pat_len);
12391 i++;
12392 }
12393 }
12394
2a0e047e 12395 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
98fc4386 12396 regular = true;
2a0e047e
JB		 12397 err = nl80211_parse_wowlan_tcp(
12398 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
12399 &new_triggers);
12400 if (err)
12401 goto error;
12402 }
12403
8cd4d456 12404 if (tb[NL80211_WOWLAN_TRIG_NET_DETECT]) {
98fc4386 12405 regular = true;
8cd4d456
LC		 12406 err = nl80211_parse_wowlan_nd(
12407 rdev, wowlan, tb[NL80211_WOWLAN_TRIG_NET_DETECT],
12408 &new_triggers);
12409 if (err)
12410 goto error;
12411 }
12412
98fc4386
JB		 12413 /* The 'any' trigger means the device continues operating more or less
12414 * as in its normal operation mode and wakes up the host on most of the
12415 * normal interrupts (like packet RX, ...)
12416 * It therefore makes little sense to combine with the more constrained
12417 * wakeup trigger modes.
12418 */
12419 if (new_triggers.any && regular) {
12420 err = -EINVAL;
12421 goto error;
12422 }
12423
ae33bd81
JB		 12424 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
12425 if (!ntrig) {
12426 err = -ENOMEM;
12427 goto error;
ff1b6e69 12428 }
ae33bd81 12429 cfg80211_rdev_free_wowlan(rdev);
6abb9cb9 12430 rdev->wiphy.wowlan_config = ntrig;
ff1b6e69 12431
ae33bd81 12432 set_wakeup:
6abb9cb9
JB		 12433 if (rdev->ops->set_wakeup &&
12434 prev_enabled != !!rdev->wiphy.wowlan_config)
12435 rdev_set_wakeup(rdev, rdev->wiphy.wowlan_config);
6d52563f 12436
ff1b6e69
JB		 12437 return 0;
12438 error:
12439 for (i = 0; i < new_triggers.n_patterns; i++)
12440 kfree(new_triggers.patterns[i].mask);
12441 kfree(new_triggers.patterns);
2a0e047e
JB		 12442 if (new_triggers.tcp && new_triggers.tcp->sock)
12443 sock_release(new_triggers.tcp->sock);
12444 kfree(new_triggers.tcp);
e5dbe070 12445 kfree(new_triggers.nd_config);
ff1b6e69
JB		 12446 return err;
12447}
dfb89c56 12448#endif
ff1b6e69 12449
be29b99a
AK		 12450static int nl80211_send_coalesce_rules(struct sk_buff *msg,
12451 struct cfg80211_registered_device *rdev)
12452{
12453 struct nlattr *nl_pats, *nl_pat, *nl_rule, *nl_rules;
12454 int i, j, pat_len;
12455 struct cfg80211_coalesce_rules *rule;
12456
12457 if (!rdev->coalesce->n_rules)
12458 return 0;
12459
ae0be8de 12460 nl_rules = nla_nest_start_noflag(msg, NL80211_ATTR_COALESCE_RULE);
be29b99a
AK		 12461 if (!nl_rules)
12462 return -ENOBUFS;
12463
12464 for (i = 0; i < rdev->coalesce->n_rules; i++) {
ae0be8de 12465 nl_rule = nla_nest_start_noflag(msg, i + 1);
be29b99a
AK		 12466 if (!nl_rule)
12467 return -ENOBUFS;
12468
12469 rule = &rdev->coalesce->rules[i];
12470 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_DELAY,
12471 rule->delay))
12472 return -ENOBUFS;
12473
12474 if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_CONDITION,
12475 rule->condition))
12476 return -ENOBUFS;
12477
ae0be8de
MK		 12478 nl_pats = nla_nest_start_noflag(msg,
12479 NL80211_ATTR_COALESCE_RULE_PKT_PATTERN);
be29b99a
AK		 12480 if (!nl_pats)
12481 return -ENOBUFS;
12482
12483 for (j = 0; j < rule->n_patterns; j++) {
ae0be8de 12484 nl_pat = nla_nest_start_noflag(msg, j + 1);
be29b99a
AK		 12485 if (!nl_pat)
12486 return -ENOBUFS;
12487 pat_len = rule->patterns[j].pattern_len;
12488 if (nla_put(msg, NL80211_PKTPAT_MASK,
12489 DIV_ROUND_UP(pat_len, 8),
12490 rule->patterns[j].mask) ||
12491 nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
12492 rule->patterns[j].pattern) ||
12493 nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
12494 rule->patterns[j].pkt_offset))
12495 return -ENOBUFS;
12496 nla_nest_end(msg, nl_pat);
12497 }
12498 nla_nest_end(msg, nl_pats);
12499 nla_nest_end(msg, nl_rule);
12500 }
12501 nla_nest_end(msg, nl_rules);
12502
12503 return 0;
12504}
12505
12506static int nl80211_get_coalesce(struct sk_buff *skb, struct genl_info *info)
12507{
12508 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12509 struct sk_buff *msg;
12510 void *hdr;
12511
12512 if (!rdev->wiphy.coalesce)
12513 return -EOPNOTSUPP;
12514
12515 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12516 if (!msg)
12517 return -ENOMEM;
12518
12519 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
12520 NL80211_CMD_GET_COALESCE);
12521 if (!hdr)
12522 goto nla_put_failure;
12523
12524 if (rdev->coalesce && nl80211_send_coalesce_rules(msg, rdev))
12525 goto nla_put_failure;
12526
12527 genlmsg_end(msg, hdr);
12528 return genlmsg_reply(msg, info);
12529
12530nla_put_failure:
12531 nlmsg_free(msg);
12532 return -ENOBUFS;
12533}
12534
12535void cfg80211_rdev_free_coalesce(struct cfg80211_registered_device *rdev)
12536{
12537 struct cfg80211_coalesce *coalesce = rdev->coalesce;
12538 int i, j;
12539 struct cfg80211_coalesce_rules *rule;
12540
12541 if (!coalesce)
12542 return;
12543
12544 for (i = 0; i < coalesce->n_rules; i++) {
12545 rule = &coalesce->rules[i];
12546 for (j = 0; j < rule->n_patterns; j++)
12547 kfree(rule->patterns[j].mask);
12548 kfree(rule->patterns);
12549 }
12550 kfree(coalesce->rules);
12551 kfree(coalesce);
12552 rdev->coalesce = NULL;
12553}
12554
12555static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
12556 struct nlattr *rule,
12557 struct cfg80211_coalesce_rules *new_rule)
12558{
12559 int err, i;
12560 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
12561 struct nlattr *tb[NUM_NL80211_ATTR_COALESCE_RULE], *pat;
12562 int rem, pat_len, mask_len, pkt_offset, n_patterns = 0;
12563 struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
12564
8cb08174
JB		 12565 err = nla_parse_nested_deprecated(tb, NL80211_ATTR_COALESCE_RULE_MAX,
12566 rule, nl80211_coalesce_policy, NULL);
be29b99a
AK		 12567 if (err)
12568 return err;
12569
12570 if (tb[NL80211_ATTR_COALESCE_RULE_DELAY])
12571 new_rule->delay =
12572 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_DELAY]);
12573 if (new_rule->delay > coalesce->max_delay)
12574 return -EINVAL;
12575
12576 if (tb[NL80211_ATTR_COALESCE_RULE_CONDITION])
12577 new_rule->condition =
12578 nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_CONDITION]);
be29b99a
AK		 12579
12580 if (!tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN])
12581 return -EINVAL;
12582
12583 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
12584 rem)
12585 n_patterns++;
12586 if (n_patterns > coalesce->n_patterns)
12587 return -EINVAL;
12588
12589 new_rule->patterns = kcalloc(n_patterns, sizeof(new_rule->patterns[0]),
12590 GFP_KERNEL);
12591 if (!new_rule->patterns)
12592 return -ENOMEM;
12593
12594 new_rule->n_patterns = n_patterns;
12595 i = 0;
12596
12597 nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
12598 rem) {
922bd80f
JB		 12599 u8 *mask_pat;
12600
8cb08174
JB		 12601 err = nla_parse_nested_deprecated(pat_tb, MAX_NL80211_PKTPAT,
12602 pat,
12603 nl80211_packet_pattern_policy,
12604 NULL);
95bca62f
JB		 12605 if (err)
12606 return err;
12607
be29b99a
AK		 12608 if (!pat_tb[NL80211_PKTPAT_MASK] ||
12609 !pat_tb[NL80211_PKTPAT_PATTERN])
12610 return -EINVAL;
12611 pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
12612 mask_len = DIV_ROUND_UP(pat_len, 8);
12613 if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
12614 return -EINVAL;
12615 if (pat_len > coalesce->pattern_max_len ||
12616 pat_len < coalesce->pattern_min_len)
12617 return -EINVAL;
12618
12619 if (!pat_tb[NL80211_PKTPAT_OFFSET])
12620 pkt_offset = 0;
12621 else
12622 pkt_offset = nla_get_u32(pat_tb[NL80211_PKTPAT_OFFSET]);
12623 if (pkt_offset > coalesce->max_pkt_offset)
12624 return -EINVAL;
12625 new_rule->patterns[i].pkt_offset = pkt_offset;
12626
922bd80f
JB		 12627 mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
12628 if (!mask_pat)
be29b99a 12629 return -ENOMEM;
922bd80f
JB		 12630
12631 new_rule->patterns[i].mask = mask_pat;
12632 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
12633 mask_len);
12634
12635 mask_pat += mask_len;
12636 new_rule->patterns[i].pattern = mask_pat;
be29b99a 12637 new_rule->patterns[i].pattern_len = pat_len;
922bd80f
JB		 12638 memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
12639 pat_len);
be29b99a
AK		 12640 i++;
12641 }
12642
12643 return 0;
12644}
12645
12646static int nl80211_set_coalesce(struct sk_buff *skb, struct genl_info *info)
12647{
12648 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12649 const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
12650 struct cfg80211_coalesce new_coalesce = {};
12651 struct cfg80211_coalesce *n_coalesce;
12652 int err, rem_rule, n_rules = 0, i, j;
12653 struct nlattr *rule;
12654 struct cfg80211_coalesce_rules *tmp_rule;
12655
12656 if (!rdev->wiphy.coalesce || !rdev->ops->set_coalesce)
12657 return -EOPNOTSUPP;
12658
12659 if (!info->attrs[NL80211_ATTR_COALESCE_RULE]) {
12660 cfg80211_rdev_free_coalesce(rdev);
a1056b1b 12661 rdev_set_coalesce(rdev, NULL);
be29b99a
AK		 12662 return 0;
12663 }
12664
12665 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
12666 rem_rule)
12667 n_rules++;
12668 if (n_rules > coalesce->n_rules)
12669 return -EINVAL;
12670
12671 new_coalesce.rules = kcalloc(n_rules, sizeof(new_coalesce.rules[0]),
12672 GFP_KERNEL);
12673 if (!new_coalesce.rules)
12674 return -ENOMEM;
12675
12676 new_coalesce.n_rules = n_rules;
12677 i = 0;
12678
12679 nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
12680 rem_rule) {
12681 err = nl80211_parse_coalesce_rule(rdev, rule,
12682 &new_coalesce.rules[i]);
12683 if (err)
12684 goto error;
12685
12686 i++;
12687 }
12688
a1056b1b 12689 err = rdev_set_coalesce(rdev, &new_coalesce);
be29b99a
AK		 12690 if (err)
12691 goto error;
12692
12693 n_coalesce = kmemdup(&new_coalesce, sizeof(new_coalesce), GFP_KERNEL);
12694 if (!n_coalesce) {
12695 err = -ENOMEM;
12696 goto error;
12697 }
12698 cfg80211_rdev_free_coalesce(rdev);
12699 rdev->coalesce = n_coalesce;
12700
12701 return 0;
12702error:
12703 for (i = 0; i < new_coalesce.n_rules; i++) {
12704 tmp_rule = &new_coalesce.rules[i];
12705 for (j = 0; j < tmp_rule->n_patterns; j++)
12706 kfree(tmp_rule->patterns[j].mask);
12707 kfree(tmp_rule->patterns);
12708 }
12709 kfree(new_coalesce.rules);
12710
12711 return err;
12712}
12713
e5497d76
JB		 12714static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
12715{
12716 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12717 struct net_device *dev = info->user_ptr[1];
12718 struct wireless_dev *wdev = dev->ieee80211_ptr;
12719 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
f495acd8 12720 struct cfg80211_gtk_rekey_data rekey_data = {};
e5497d76
JB		 12721 int err;
12722
12723 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
12724 return -EINVAL;
12725
8cb08174
JB		 12726 err = nla_parse_nested_deprecated(tb, MAX_NL80211_REKEY_DATA,
12727 info->attrs[NL80211_ATTR_REKEY_DATA],
12728 nl80211_rekey_policy, info->extack);
e5497d76
JB		 12729 if (err)
12730 return err;
12731
e785fa0a
VD		 12732 if (!tb[NL80211_REKEY_DATA_REPLAY_CTR] || !tb[NL80211_REKEY_DATA_KEK] ||
12733 !tb[NL80211_REKEY_DATA_KCK])
12734 return -EINVAL;
093a48d2
NE		 12735 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN &&
12736 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
12737 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KEK_EXT_LEN))
e5497d76 12738 return -ERANGE;
093a48d2
NE		 12739 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN &&
12740 !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK &&
12741 nla_len(tb[NL80211_REKEY_DATA_KEK]) == NL80211_KCK_EXT_LEN))
e5497d76
JB		 12742 return -ERANGE;
12743
78f686ca
JB		 12744 rekey_data.kek = nla_data(tb[NL80211_REKEY_DATA_KEK]);
12745 rekey_data.kck = nla_data(tb[NL80211_REKEY_DATA_KCK]);
12746 rekey_data.replay_ctr = nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]);
093a48d2
NE		 12747 rekey_data.kek_len = nla_len(tb[NL80211_REKEY_DATA_KEK]);
12748 rekey_data.kck_len = nla_len(tb[NL80211_REKEY_DATA_KCK]);
12749 if (tb[NL80211_REKEY_DATA_AKM])
12750 rekey_data.akm = nla_get_u32(tb[NL80211_REKEY_DATA_AKM]);
e5497d76
JB		 12751
12752 wdev_lock(wdev);
12753 if (!wdev->current_bss) {
12754 err = -ENOTCONN;
12755 goto out;
12756 }
12757
12758 if (!rdev->ops->set_rekey_data) {
12759 err = -EOPNOTSUPP;
12760 goto out;
12761 }
12762
e35e4d28 12763 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 12764 out:
12765 wdev_unlock(wdev);
12766 return err;
12767}
12768
28946da7
JB		 12769static int nl80211_register_unexpected_frame(struct sk_buff *skb,
12770 struct genl_info *info)
12771{
12772 struct net_device *dev = info->user_ptr[1];
12773 struct wireless_dev *wdev = dev->ieee80211_ptr;
12774
12775 if (wdev->iftype != NL80211_IFTYPE_AP &&
12776 wdev->iftype != NL80211_IFTYPE_P2P_GO)
12777 return -EINVAL;
12778
15e47304 12779 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 12780 return -EBUSY;
12781
15e47304 12782 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 12783 return 0;
12784}
12785
7f6cf311
JB		 12786static int nl80211_probe_client(struct sk_buff *skb,
12787 struct genl_info *info)
12788{
12789 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12790 struct net_device *dev = info->user_ptr[1];
12791 struct wireless_dev *wdev = dev->ieee80211_ptr;
12792 struct sk_buff *msg;
12793 void *hdr;
12794 const u8 *addr;
12795 u64 cookie;
12796 int err;
12797
12798 if (wdev->iftype != NL80211_IFTYPE_AP &&
12799 wdev->iftype != NL80211_IFTYPE_P2P_GO)
12800 return -EOPNOTSUPP;
12801
12802 if (!info->attrs[NL80211_ATTR_MAC])
12803 return -EINVAL;
12804
12805 if (!rdev->ops->probe_client)
12806 return -EOPNOTSUPP;
12807
12808 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
12809 if (!msg)
12810 return -ENOMEM;
12811
15e47304 12812 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311 12813 NL80211_CMD_PROBE_CLIENT);
cb35fba3
DC		 12814 if (!hdr) {
12815 err = -ENOBUFS;
7f6cf311
JB		 12816 goto free_msg;
12817 }
12818
12819 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
12820
e35e4d28 12821 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 12822 if (err)
12823 goto free_msg;
12824
2dad624e
ND		 12825 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
12826 NL80211_ATTR_PAD))
9360ffd1 12827 goto nla_put_failure;
7f6cf311
JB		 12828
12829 genlmsg_end(msg, hdr);
12830
12831 return genlmsg_reply(msg, info);
12832
12833 nla_put_failure:
12834 err = -ENOBUFS;
12835 free_msg:
12836 nlmsg_free(msg);
12837 return err;
12838}
12839
5e760230
JB		 12840static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
12841{
12842 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 12843 struct cfg80211_beacon_registration *reg, *nreg;
12844 int rv;
5e760230
JB		 12845
12846 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
12847 return -EOPNOTSUPP;
12848
37c73b5f
BG		 12849 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
12850 if (!nreg)
12851 return -ENOMEM;
12852
12853 /* First, check if already registered. */
12854 spin_lock_bh(&rdev->beacon_registrations_lock);
12855 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
12856 if (reg->nlportid == info->snd_portid) {
12857 rv = -EALREADY;
12858 goto out_err;
12859 }
12860 }
12861 /* Add it to the list */
12862 nreg->nlportid = info->snd_portid;
12863 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 12864
37c73b5f 12865 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 12866
12867 return 0;
37c73b5f
BG		 12868out_err:
12869 spin_unlock_bh(&rdev->beacon_registrations_lock);
12870 kfree(nreg);
12871 return rv;
5e760230
JB		 12872}
12873
98104fde
JB		 12874static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
12875{
12876 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12877 struct wireless_dev *wdev = info->user_ptr[1];
12878 int err;
12879
12880 if (!rdev->ops->start_p2p_device)
12881 return -EOPNOTSUPP;
12882
12883 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
12884 return -EOPNOTSUPP;
12885
73c7da3d 12886 if (wdev_running(wdev))
98104fde
JB		 12887 return 0;
12888
b6a55015
LC		 12889 if (rfkill_blocked(rdev->rfkill))
12890 return -ERFKILL;
98104fde 12891
eeb126e9 12892 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 12893 if (err)
12894 return err;
12895
73c7da3d 12896 wdev->is_running = true;
98104fde 12897 rdev->opencount++;
98104fde
JB		 12898
12899 return 0;
12900}
12901
12902static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
12903{
12904 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12905 struct wireless_dev *wdev = info->user_ptr[1];
12906
12907 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
12908 return -EOPNOTSUPP;
12909
12910 if (!rdev->ops->stop_p2p_device)
12911 return -EOPNOTSUPP;
12912
f9f47529 12913 cfg80211_stop_p2p_device(rdev, wdev);
98104fde
JB		 12914
12915 return 0;
12916}
12917
cb3b7d87
AB		 12918static int nl80211_start_nan(struct sk_buff *skb, struct genl_info *info)
12919{
12920 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12921 struct wireless_dev *wdev = info->user_ptr[1];
12922 struct cfg80211_nan_conf conf = {};
12923 int err;
12924
12925 if (wdev->iftype != NL80211_IFTYPE_NAN)
12926 return -EOPNOTSUPP;
12927
eeb04a96 12928 if (wdev_running(wdev))
cb3b7d87
AB		 12929 return -EEXIST;
12930
12931 if (rfkill_blocked(rdev->rfkill))
12932 return -ERFKILL;
12933
12934 if (!info->attrs[NL80211_ATTR_NAN_MASTER_PREF])
12935 return -EINVAL;
12936
cb3b7d87
AB		 12937 conf.master_pref =
12938 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
cb3b7d87 12939
8585989d
LC		 12940 if (info->attrs[NL80211_ATTR_BANDS]) {
12941 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
12942
12943 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
12944 return -EOPNOTSUPP;
12945
12946 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
12947 return -EINVAL;
12948
12949 conf.bands = bands;
12950 }
cb3b7d87
AB		 12951
12952 err = rdev_start_nan(rdev, wdev, &conf);
12953 if (err)
12954 return err;
12955
73c7da3d 12956 wdev->is_running = true;
cb3b7d87
AB		 12957 rdev->opencount++;
12958
12959 return 0;
12960}
12961
12962static int nl80211_stop_nan(struct sk_buff *skb, struct genl_info *info)
12963{
12964 struct cfg80211_registered_device *rdev = info->user_ptr[0];
12965 struct wireless_dev *wdev = info->user_ptr[1];
12966
12967 if (wdev->iftype != NL80211_IFTYPE_NAN)
12968 return -EOPNOTSUPP;
12969
12970 cfg80211_stop_nan(rdev, wdev);
12971
12972 return 0;
12973}
12974
a442b761
AB		 12975static int validate_nan_filter(struct nlattr *filter_attr)
12976{
12977 struct nlattr *attr;
12978 int len = 0, n_entries = 0, rem;
12979
12980 nla_for_each_nested(attr, filter_attr, rem) {
12981 len += nla_len(attr);
12982 n_entries++;
12983 }
12984
12985 if (len >= U8_MAX)
12986 return -EINVAL;
12987
12988 return n_entries;
12989}
12990
12991static int handle_nan_filter(struct nlattr *attr_filter,
12992 struct cfg80211_nan_func *func,
12993 bool tx)
12994{
12995 struct nlattr *attr;
12996 int n_entries, rem, i;
12997 struct cfg80211_nan_func_filter *filter;
12998
12999 n_entries = validate_nan_filter(attr_filter);
13000 if (n_entries < 0)
13001 return n_entries;
13002
13003 BUILD_BUG_ON(sizeof(*func->rx_filters) != sizeof(*func->tx_filters));
13004
13005 filter = kcalloc(n_entries, sizeof(*func->rx_filters), GFP_KERNEL);
13006 if (!filter)
13007 return -ENOMEM;
13008
13009 i = 0;
13010 nla_for_each_nested(attr, attr_filter, rem) {
b15ca182 13011 filter[i].filter = nla_memdup(attr, GFP_KERNEL);
a442b761
AB		 13012 filter[i].len = nla_len(attr);
13013 i++;
13014 }
13015 if (tx) {
13016 func->num_tx_filters = n_entries;
13017 func->tx_filters = filter;
13018 } else {
13019 func->num_rx_filters = n_entries;
13020 func->rx_filters = filter;
13021 }
13022
13023 return 0;
13024}
13025
13026static int nl80211_nan_add_func(struct sk_buff *skb,
13027 struct genl_info *info)
13028{
13029 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13030 struct wireless_dev *wdev = info->user_ptr[1];
13031 struct nlattr *tb[NUM_NL80211_NAN_FUNC_ATTR], *func_attr;
13032 struct cfg80211_nan_func *func;
13033 struct sk_buff *msg = NULL;
13034 void *hdr = NULL;
13035 int err = 0;
13036
13037 if (wdev->iftype != NL80211_IFTYPE_NAN)
13038 return -EOPNOTSUPP;
13039
73c7da3d 13040 if (!wdev_running(wdev))
a442b761
AB		 13041 return -ENOTCONN;
13042
13043 if (!info->attrs[NL80211_ATTR_NAN_FUNC])
13044 return -EINVAL;
13045
8cb08174
JB		 13046 err = nla_parse_nested_deprecated(tb, NL80211_NAN_FUNC_ATTR_MAX,
13047 info->attrs[NL80211_ATTR_NAN_FUNC],
13048 nl80211_nan_func_policy,
13049 info->extack);
a442b761
AB		 13050 if (err)
13051 return err;
13052
13053 func = kzalloc(sizeof(*func), GFP_KERNEL);
13054 if (!func)
13055 return -ENOMEM;
13056
b60ad348 13057 func->cookie = cfg80211_assign_cookie(rdev);
a442b761 13058
cb9abd48 13059 if (!tb[NL80211_NAN_FUNC_TYPE]) {
a442b761
AB		 13060 err = -EINVAL;
13061 goto out;
13062 }
13063
13064
13065 func->type = nla_get_u8(tb[NL80211_NAN_FUNC_TYPE]);
13066
13067 if (!tb[NL80211_NAN_FUNC_SERVICE_ID]) {
13068 err = -EINVAL;
13069 goto out;
13070 }
13071
13072 memcpy(func->service_id, nla_data(tb[NL80211_NAN_FUNC_SERVICE_ID]),
13073 sizeof(func->service_id));
13074
13075 func->close_range =
13076 nla_get_flag(tb[NL80211_NAN_FUNC_CLOSE_RANGE]);
13077
13078 if (tb[NL80211_NAN_FUNC_SERVICE_INFO]) {
13079 func->serv_spec_info_len =
13080 nla_len(tb[NL80211_NAN_FUNC_SERVICE_INFO]);
13081 func->serv_spec_info =
13082 kmemdup(nla_data(tb[NL80211_NAN_FUNC_SERVICE_INFO]),
13083 func->serv_spec_info_len,
13084 GFP_KERNEL);
13085 if (!func->serv_spec_info) {
13086 err = -ENOMEM;
13087 goto out;
13088 }
13089 }
13090
13091 if (tb[NL80211_NAN_FUNC_TTL])
13092 func->ttl = nla_get_u32(tb[NL80211_NAN_FUNC_TTL]);
13093
13094 switch (func->type) {
13095 case NL80211_NAN_FUNC_PUBLISH:
13096 if (!tb[NL80211_NAN_FUNC_PUBLISH_TYPE]) {
13097 err = -EINVAL;
13098 goto out;
13099 }
13100
13101 func->publish_type =
13102 nla_get_u8(tb[NL80211_NAN_FUNC_PUBLISH_TYPE]);
13103 func->publish_bcast =
13104 nla_get_flag(tb[NL80211_NAN_FUNC_PUBLISH_BCAST]);
13105
13106 if ((!(func->publish_type & NL80211_NAN_SOLICITED_PUBLISH)) &&
13107 func->publish_bcast) {
13108 err = -EINVAL;
13109 goto out;
13110 }
13111 break;
13112 case NL80211_NAN_FUNC_SUBSCRIBE:
13113 func->subscribe_active =
13114 nla_get_flag(tb[NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE]);
13115 break;
13116 case NL80211_NAN_FUNC_FOLLOW_UP:
13117 if (!tb[NL80211_NAN_FUNC_FOLLOW_UP_ID] ||
3ea15452
HC		 13118 !tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID] ||
13119 !tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]) {
a442b761
AB		 13120 err = -EINVAL;
13121 goto out;
13122 }
13123
13124 func->followup_id =
13125 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_ID]);
13126 func->followup_reqid =
13127 nla_get_u8(tb[NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID]);
13128 memcpy(func->followup_dest.addr,
13129 nla_data(tb[NL80211_NAN_FUNC_FOLLOW_UP_DEST]),
13130 sizeof(func->followup_dest.addr));
13131 if (func->ttl) {
13132 err = -EINVAL;
13133 goto out;
13134 }
13135 break;
13136 default:
13137 err = -EINVAL;
13138 goto out;
13139 }
13140
13141 if (tb[NL80211_NAN_FUNC_SRF]) {
13142 struct nlattr *srf_tb[NUM_NL80211_NAN_SRF_ATTR];
13143
8cb08174
JB		 13144 err = nla_parse_nested_deprecated(srf_tb,
13145 NL80211_NAN_SRF_ATTR_MAX,
13146 tb[NL80211_NAN_FUNC_SRF],
13147 nl80211_nan_srf_policy,
13148 info->extack);
a442b761
AB		 13149 if (err)
13150 goto out;
13151
13152 func->srf_include =
13153 nla_get_flag(srf_tb[NL80211_NAN_SRF_INCLUDE]);
13154
13155 if (srf_tb[NL80211_NAN_SRF_BF]) {
13156 if (srf_tb[NL80211_NAN_SRF_MAC_ADDRS] ||
13157 !srf_tb[NL80211_NAN_SRF_BF_IDX]) {
13158 err = -EINVAL;
13159 goto out;
13160 }
13161
13162 func->srf_bf_len =
13163 nla_len(srf_tb[NL80211_NAN_SRF_BF]);
13164 func->srf_bf =
13165 kmemdup(nla_data(srf_tb[NL80211_NAN_SRF_BF]),
13166 func->srf_bf_len, GFP_KERNEL);
13167 if (!func->srf_bf) {
13168 err = -ENOMEM;
13169 goto out;
13170 }
13171
13172 func->srf_bf_idx =
13173 nla_get_u8(srf_tb[NL80211_NAN_SRF_BF_IDX]);
13174 } else {
13175 struct nlattr *attr, *mac_attr =
13176 srf_tb[NL80211_NAN_SRF_MAC_ADDRS];
13177 int n_entries, rem, i = 0;
13178
13179 if (!mac_attr) {
13180 err = -EINVAL;
13181 goto out;
13182 }
13183
13184 n_entries = validate_acl_mac_addrs(mac_attr);
13185 if (n_entries <= 0) {
13186 err = -EINVAL;
13187 goto out;
13188 }
13189
13190 func->srf_num_macs = n_entries;
13191 func->srf_macs =
6396bb22 13192 kcalloc(n_entries, sizeof(*func->srf_macs),
a442b761
AB		 13193 GFP_KERNEL);
13194 if (!func->srf_macs) {
13195 err = -ENOMEM;
13196 goto out;
13197 }
13198
13199 nla_for_each_nested(attr, mac_attr, rem)
13200 memcpy(func->srf_macs[i++].addr, nla_data(attr),
13201 sizeof(*func->srf_macs));
13202 }
13203 }
13204
13205 if (tb[NL80211_NAN_FUNC_TX_MATCH_FILTER]) {
13206 err = handle_nan_filter(tb[NL80211_NAN_FUNC_TX_MATCH_FILTER],
13207 func, true);
13208 if (err)
13209 goto out;
13210 }
13211
13212 if (tb[NL80211_NAN_FUNC_RX_MATCH_FILTER]) {
13213 err = handle_nan_filter(tb[NL80211_NAN_FUNC_RX_MATCH_FILTER],
13214 func, false);
13215 if (err)
13216 goto out;
13217 }
13218
13219 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13220 if (!msg) {
13221 err = -ENOMEM;
13222 goto out;
13223 }
13224
13225 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13226 NL80211_CMD_ADD_NAN_FUNCTION);
13227 /* This can't really happen - we just allocated 4KB */
13228 if (WARN_ON(!hdr)) {
13229 err = -ENOMEM;
13230 goto out;
13231 }
13232
13233 err = rdev_add_nan_func(rdev, wdev, func);
13234out:
13235 if (err < 0) {
13236 cfg80211_free_nan_func(func);
13237 nlmsg_free(msg);
13238 return err;
13239 }
13240
13241 /* propagate the instance id and cookie to userspace */
13242 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, func->cookie,
13243 NL80211_ATTR_PAD))
13244 goto nla_put_failure;
13245
ae0be8de 13246 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
a442b761
AB		 13247 if (!func_attr)
13248 goto nla_put_failure;
13249
13250 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID,
13251 func->instance_id))
13252 goto nla_put_failure;
13253
13254 nla_nest_end(msg, func_attr);
13255
13256 genlmsg_end(msg, hdr);
13257 return genlmsg_reply(msg, info);
13258
13259nla_put_failure:
13260 nlmsg_free(msg);
13261 return -ENOBUFS;
13262}
13263
13264static int nl80211_nan_del_func(struct sk_buff *skb,
13265 struct genl_info *info)
13266{
13267 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13268 struct wireless_dev *wdev = info->user_ptr[1];
13269 u64 cookie;
13270
13271 if (wdev->iftype != NL80211_IFTYPE_NAN)
13272 return -EOPNOTSUPP;
13273
73c7da3d 13274 if (!wdev_running(wdev))
a442b761
AB		 13275 return -ENOTCONN;
13276
13277 if (!info->attrs[NL80211_ATTR_COOKIE])
13278 return -EINVAL;
13279
a442b761
AB		 13280 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
13281
13282 rdev_del_nan_func(rdev, wdev, cookie);
13283
13284 return 0;
13285}
13286
a5a9dcf2
AB		 13287static int nl80211_nan_change_config(struct sk_buff *skb,
13288 struct genl_info *info)
13289{
13290 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13291 struct wireless_dev *wdev = info->user_ptr[1];
13292 struct cfg80211_nan_conf conf = {};
13293 u32 changed = 0;
13294
13295 if (wdev->iftype != NL80211_IFTYPE_NAN)
13296 return -EOPNOTSUPP;
13297
73c7da3d 13298 if (!wdev_running(wdev))
a5a9dcf2
AB		 13299 return -ENOTCONN;
13300
13301 if (info->attrs[NL80211_ATTR_NAN_MASTER_PREF]) {
13302 conf.master_pref =
13303 nla_get_u8(info->attrs[NL80211_ATTR_NAN_MASTER_PREF]);
13304 if (conf.master_pref <= 1 || conf.master_pref == 255)
13305 return -EINVAL;
13306
13307 changed |= CFG80211_NAN_CONF_CHANGED_PREF;
13308 }
13309
8585989d
LC		 13310 if (info->attrs[NL80211_ATTR_BANDS]) {
13311 u32 bands = nla_get_u32(info->attrs[NL80211_ATTR_BANDS]);
13312
13313 if (bands & ~(u32)wdev->wiphy->nan_supported_bands)
13314 return -EOPNOTSUPP;
13315
13316 if (bands && !(bands & BIT(NL80211_BAND_2GHZ)))
13317 return -EINVAL;
13318
13319 conf.bands = bands;
13320 changed |= CFG80211_NAN_CONF_CHANGED_BANDS;
a5a9dcf2
AB		 13321 }
13322
13323 if (!changed)
13324 return -EINVAL;
13325
13326 return rdev_nan_change_conf(rdev, wdev, &conf, changed);
13327}
13328
50bcd31d
AB		 13329void cfg80211_nan_match(struct wireless_dev *wdev,
13330 struct cfg80211_nan_match_params *match, gfp_t gfp)
13331{
13332 struct wiphy *wiphy = wdev->wiphy;
13333 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
13334 struct nlattr *match_attr, *local_func_attr, *peer_func_attr;
13335 struct sk_buff *msg;
13336 void *hdr;
13337
13338 if (WARN_ON(!match->inst_id || !match->peer_inst_id || !match->addr))
13339 return;
13340
13341 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
13342 if (!msg)
13343 return;
13344
13345 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NAN_MATCH);
13346 if (!hdr) {
13347 nlmsg_free(msg);
13348 return;
13349 }
13350
13351 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
13352 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
13353 wdev->netdev->ifindex)) ||
13354 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
13355 NL80211_ATTR_PAD))
13356 goto nla_put_failure;
13357
13358 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, match->cookie,
13359 NL80211_ATTR_PAD) ||
13360 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, match->addr))
13361 goto nla_put_failure;
13362
ae0be8de 13363 match_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_MATCH);
50bcd31d
AB		 13364 if (!match_attr)
13365 goto nla_put_failure;
13366
ae0be8de
MK		 13367 local_func_attr = nla_nest_start_noflag(msg,
13368 NL80211_NAN_MATCH_FUNC_LOCAL);
50bcd31d
AB		 13369 if (!local_func_attr)
13370 goto nla_put_failure;
13371
13372 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->inst_id))
13373 goto nla_put_failure;
13374
13375 nla_nest_end(msg, local_func_attr);
13376
ae0be8de
MK		 13377 peer_func_attr = nla_nest_start_noflag(msg,
13378 NL80211_NAN_MATCH_FUNC_PEER);
50bcd31d
AB		 13379 if (!peer_func_attr)
13380 goto nla_put_failure;
13381
13382 if (nla_put_u8(msg, NL80211_NAN_FUNC_TYPE, match->type) ||
13383 nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, match->peer_inst_id))
13384 goto nla_put_failure;
13385
13386 if (match->info && match->info_len &&
13387 nla_put(msg, NL80211_NAN_FUNC_SERVICE_INFO, match->info_len,
13388 match->info))
13389 goto nla_put_failure;
13390
13391 nla_nest_end(msg, peer_func_attr);
13392 nla_nest_end(msg, match_attr);
13393 genlmsg_end(msg, hdr);
13394
13395 if (!wdev->owner_nlportid)
13396 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
13397 msg, 0, NL80211_MCGRP_NAN, gfp);
13398 else
13399 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
13400 wdev->owner_nlportid);
13401
13402 return;
13403
13404nla_put_failure:
13405 nlmsg_free(msg);
13406}
13407EXPORT_SYMBOL(cfg80211_nan_match);
13408
368e5a7b
AB		 13409void cfg80211_nan_func_terminated(struct wireless_dev *wdev,
13410 u8 inst_id,
13411 enum nl80211_nan_func_term_reason reason,
13412 u64 cookie, gfp_t gfp)
13413{
13414 struct wiphy *wiphy = wdev->wiphy;
13415 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
13416 struct sk_buff *msg;
13417 struct nlattr *func_attr;
13418 void *hdr;
13419
13420 if (WARN_ON(!inst_id))
13421 return;
13422
13423 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
13424 if (!msg)
13425 return;
13426
13427 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_NAN_FUNCTION);
13428 if (!hdr) {
13429 nlmsg_free(msg);
13430 return;
13431 }
13432
13433 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
13434 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
13435 wdev->netdev->ifindex)) ||
13436 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
13437 NL80211_ATTR_PAD))
13438 goto nla_put_failure;
13439
13440 if (nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
13441 NL80211_ATTR_PAD))
13442 goto nla_put_failure;
13443
ae0be8de 13444 func_attr = nla_nest_start_noflag(msg, NL80211_ATTR_NAN_FUNC);
368e5a7b
AB		 13445 if (!func_attr)
13446 goto nla_put_failure;
13447
13448 if (nla_put_u8(msg, NL80211_NAN_FUNC_INSTANCE_ID, inst_id) ||
13449 nla_put_u8(msg, NL80211_NAN_FUNC_TERM_REASON, reason))
13450 goto nla_put_failure;
13451
13452 nla_nest_end(msg, func_attr);
13453 genlmsg_end(msg, hdr);
13454
13455 if (!wdev->owner_nlportid)
13456 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
13457 msg, 0, NL80211_MCGRP_NAN, gfp);
13458 else
13459 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
13460 wdev->owner_nlportid);
13461
13462 return;
13463
13464nla_put_failure:
13465 nlmsg_free(msg);
13466}
13467EXPORT_SYMBOL(cfg80211_nan_func_terminated);
13468
3713b4e3
JB		 13469static int nl80211_get_protocol_features(struct sk_buff *skb,
13470 struct genl_info *info)
13471{
13472 void *hdr;
13473 struct sk_buff *msg;
13474
13475 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
13476 if (!msg)
13477 return -ENOMEM;
13478
13479 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
13480 NL80211_CMD_GET_PROTOCOL_FEATURES);
13481 if (!hdr)
13482 goto nla_put_failure;
13483
13484 if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
13485 NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
13486 goto nla_put_failure;
13487
13488 genlmsg_end(msg, hdr);
13489 return genlmsg_reply(msg, info);
13490
13491 nla_put_failure:
13492 kfree_skb(msg);
13493 return -ENOBUFS;
13494}
13495
355199e0
JM		 13496static int nl80211_update_ft_ies(struct sk_buff *skb, struct genl_info *info)
13497{
13498 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13499 struct cfg80211_update_ft_ies_params ft_params;
13500 struct net_device *dev = info->user_ptr[1];
13501
13502 if (!rdev->ops->update_ft_ies)
13503 return -EOPNOTSUPP;
13504
13505 if (!info->attrs[NL80211_ATTR_MDID] ||
3d7af878 13506 !info->attrs[NL80211_ATTR_IE])
355199e0
JM		 13507 return -EINVAL;
13508
13509 memset(&ft_params, 0, sizeof(ft_params));
13510 ft_params.md = nla_get_u16(info->attrs[NL80211_ATTR_MDID]);
13511 ft_params.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
13512 ft_params.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
13513
13514 return rdev_update_ft_ies(rdev, dev, &ft_params);
13515}
13516
5de17984
AS		 13517static int nl80211_crit_protocol_start(struct sk_buff *skb,
13518 struct genl_info *info)
13519{
13520 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13521 struct wireless_dev *wdev = info->user_ptr[1];
13522 enum nl80211_crit_proto_id proto = NL80211_CRIT_PROTO_UNSPEC;
13523 u16 duration;
13524 int ret;
13525
13526 if (!rdev->ops->crit_proto_start)
13527 return -EOPNOTSUPP;
13528
13529 if (WARN_ON(!rdev->ops->crit_proto_stop))
13530 return -EINVAL;
13531
13532 if (rdev->crit_proto_nlportid)
13533 return -EBUSY;
13534
13535 /* determine protocol if provided */
13536 if (info->attrs[NL80211_ATTR_CRIT_PROT_ID])
13537 proto = nla_get_u16(info->attrs[NL80211_ATTR_CRIT_PROT_ID]);
13538
13539 if (proto >= NUM_NL80211_CRIT_PROTO)
13540 return -EINVAL;
13541
13542 /* timeout must be provided */
13543 if (!info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION])
13544 return -EINVAL;
13545
13546 duration =
13547 nla_get_u16(info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION]);
13548
5de17984
AS		 13549 ret = rdev_crit_proto_start(rdev, wdev, proto, duration);
13550 if (!ret)
13551 rdev->crit_proto_nlportid = info->snd_portid;
13552
13553 return ret;
13554}
13555
13556static int nl80211_crit_protocol_stop(struct sk_buff *skb,
13557 struct genl_info *info)
13558{
13559 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13560 struct wireless_dev *wdev = info->user_ptr[1];
13561
13562 if (!rdev->ops->crit_proto_stop)
13563 return -EOPNOTSUPP;
13564
13565 if (rdev->crit_proto_nlportid) {
13566 rdev->crit_proto_nlportid = 0;
13567 rdev_crit_proto_stop(rdev, wdev);
13568 }
13569 return 0;
13570}
13571
901bb989
JB		 13572static int nl80211_vendor_check_policy(const struct wiphy_vendor_command *vcmd,
13573 struct nlattr *attr,
13574 struct netlink_ext_ack *extack)
13575{
13576 if (vcmd->policy == VENDOR_CMD_RAW_DATA) {
13577 if (attr->nla_type & NLA_F_NESTED) {
13578 NL_SET_ERR_MSG_ATTR(extack, attr,
13579 "unexpected nested data");
13580 return -EINVAL;
13581 }
13582
13583 return 0;
13584 }
13585
13586 if (!(attr->nla_type & NLA_F_NESTED)) {
13587 NL_SET_ERR_MSG_ATTR(extack, attr, "expected nested data");
13588 return -EINVAL;
13589 }
13590
32d5109a 13591 return nla_validate_nested(attr, vcmd->maxattr, vcmd->policy, extack);
901bb989
JB		 13592}
13593
ad7e718c
JB		 13594static int nl80211_vendor_cmd(struct sk_buff *skb, struct genl_info *info)
13595{
13596 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13597 struct wireless_dev *wdev =
13598 __cfg80211_wdev_from_attrs(genl_info_net(info), info->attrs);
13599 int i, err;
13600 u32 vid, subcmd;
13601
13602 if (!rdev->wiphy.vendor_commands)
13603 return -EOPNOTSUPP;
13604
13605 if (IS_ERR(wdev)) {
13606 err = PTR_ERR(wdev);
13607 if (err != -EINVAL)
13608 return err;
13609 wdev = NULL;
13610 } else if (wdev->wiphy != &rdev->wiphy) {
13611 return -EINVAL;
13612 }
13613
13614 if (!info->attrs[NL80211_ATTR_VENDOR_ID] ||
13615 !info->attrs[NL80211_ATTR_VENDOR_SUBCMD])
13616 return -EINVAL;
13617
13618 vid = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_ID]);
13619 subcmd = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_SUBCMD]);
13620 for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
13621 const struct wiphy_vendor_command *vcmd;
13622 void *data = NULL;
13623 int len = 0;
13624
13625 vcmd = &rdev->wiphy.vendor_commands[i];
13626
13627 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
13628 continue;
13629
13630 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
13631 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
13632 if (!wdev)
13633 return -EINVAL;
13634 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
13635 !wdev->netdev)
13636 return -EINVAL;
13637
13638 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
73c7da3d 13639 if (!wdev_running(wdev))
ad7e718c
JB		 13640 return -ENETDOWN;
13641 }
13642 } else {
13643 wdev = NULL;
13644 }
13645
4052d3d2
JS		 13646 if (!vcmd->doit)
13647 return -EOPNOTSUPP;
13648
ad7e718c
JB		 13649 if (info->attrs[NL80211_ATTR_VENDOR_DATA]) {
13650 data = nla_data(info->attrs[NL80211_ATTR_VENDOR_DATA]);
13651 len = nla_len(info->attrs[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 13652
13653 err = nl80211_vendor_check_policy(vcmd,
13654 info->attrs[NL80211_ATTR_VENDOR_DATA],
13655 info->extack);
13656 if (err)
13657 return err;
ad7e718c
JB		 13658 }
13659
13660 rdev->cur_cmd_info = info;
901bb989 13661 err = vcmd->doit(&rdev->wiphy, wdev, data, len);
ad7e718c
JB		 13662 rdev->cur_cmd_info = NULL;
13663 return err;
13664 }
13665
13666 return -EOPNOTSUPP;
13667}
13668
7bdbe400
JB		 13669static int nl80211_prepare_vendor_dump(struct sk_buff *skb,
13670 struct netlink_callback *cb,
13671 struct cfg80211_registered_device **rdev,
13672 struct wireless_dev **wdev)
13673{
50508d94 13674 struct nlattr **attrbuf;
7bdbe400
JB		 13675 u32 vid, subcmd;
13676 unsigned int i;
13677 int vcmd_idx = -1;
13678 int err;
13679 void *data = NULL;
13680 unsigned int data_len = 0;
13681
7bdbe400
JB		 13682 if (cb->args[0]) {
13683 /* subtract the 1 again here */
13684 struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
13685 struct wireless_dev *tmp;
13686
ea90e0dc
JB		 13687 if (!wiphy)
13688 return -ENODEV;
7bdbe400
JB		 13689 *rdev = wiphy_to_rdev(wiphy);
13690 *wdev = NULL;
13691
13692 if (cb->args[1]) {
53873f13 13693 list_for_each_entry(tmp, &wiphy->wdev_list, list) {
7bdbe400
JB		 13694 if (tmp->identifier == cb->args[1] - 1) {
13695 *wdev = tmp;
13696 break;
13697 }
13698 }
13699 }
13700
13701 /* keep rtnl locked in successful case */
13702 return 0;
13703 }
13704
50508d94
JB		 13705 attrbuf = kcalloc(NUM_NL80211_ATTR, sizeof(*attrbuf), GFP_KERNEL);
13706 if (!attrbuf)
13707 return -ENOMEM;
13708
8cb08174
JB		 13709 err = nlmsg_parse_deprecated(cb->nlh,
13710 GENL_HDRLEN + nl80211_fam.hdrsize,
13711 attrbuf, nl80211_fam.maxattr,
13712 nl80211_policy, NULL);
7bdbe400 13713 if (err)
50508d94 13714 goto out;
7bdbe400 13715
c90c39da 13716 if (!attrbuf[NL80211_ATTR_VENDOR_ID] ||
50508d94
JB		 13717 !attrbuf[NL80211_ATTR_VENDOR_SUBCMD]) {
13718 err = -EINVAL;
13719 goto out;
13720 }
7bdbe400 13721
c90c39da 13722 *wdev = __cfg80211_wdev_from_attrs(sock_net(skb->sk), attrbuf);
7bdbe400
JB		 13723 if (IS_ERR(*wdev))
13724 *wdev = NULL;
13725
c90c39da 13726 *rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk), attrbuf);
50508d94
JB		 13727 if (IS_ERR(*rdev)) {
13728 err = PTR_ERR(*rdev);
13729 goto out;
13730 }
7bdbe400 13731
c90c39da
JB		 13732 vid = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_ID]);
13733 subcmd = nla_get_u32(attrbuf[NL80211_ATTR_VENDOR_SUBCMD]);
7bdbe400
JB		 13734
13735 for (i = 0; i < (*rdev)->wiphy.n_vendor_commands; i++) {
13736 const struct wiphy_vendor_command *vcmd;
13737
13738 vcmd = &(*rdev)->wiphy.vendor_commands[i];
13739
13740 if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
13741 continue;
13742
50508d94
JB		 13743 if (!vcmd->dumpit) {
13744 err = -EOPNOTSUPP;
13745 goto out;
13746 }
7bdbe400
JB		 13747
13748 vcmd_idx = i;
13749 break;
13750 }
13751
50508d94
JB		 13752 if (vcmd_idx < 0) {
13753 err = -EOPNOTSUPP;
13754 goto out;
13755 }
7bdbe400 13756
c90c39da
JB		 13757 if (attrbuf[NL80211_ATTR_VENDOR_DATA]) {
13758 data = nla_data(attrbuf[NL80211_ATTR_VENDOR_DATA]);
13759 data_len = nla_len(attrbuf[NL80211_ATTR_VENDOR_DATA]);
901bb989
JB		 13760
13761 err = nl80211_vendor_check_policy(
13762 &(*rdev)->wiphy.vendor_commands[vcmd_idx],
13763 attrbuf[NL80211_ATTR_VENDOR_DATA],
13764 cb->extack);
13765 if (err)
50508d94 13766 goto out;
7bdbe400
JB		 13767 }
13768
13769 /* 0 is the first index - add 1 to parse only once */
13770 cb->args[0] = (*rdev)->wiphy_idx + 1;
13771 /* add 1 to know if it was NULL */
13772 cb->args[1] = *wdev ? (*wdev)->identifier + 1 : 0;
13773 cb->args[2] = vcmd_idx;
13774 cb->args[3] = (unsigned long)data;
13775 cb->args[4] = data_len;
13776
13777 /* keep rtnl locked in successful case */
50508d94
JB		 13778 err = 0;
13779out:
13780 kfree(attrbuf);
13781 return err;
7bdbe400
JB		 13782}
13783
13784static int nl80211_vendor_cmd_dump(struct sk_buff *skb,
13785 struct netlink_callback *cb)
13786{
13787 struct cfg80211_registered_device *rdev;
13788 struct wireless_dev *wdev;
13789 unsigned int vcmd_idx;
13790 const struct wiphy_vendor_command *vcmd;
13791 void *data;
13792 int data_len;
13793 int err;
13794 struct nlattr *vendor_data;
13795
ea90e0dc 13796 rtnl_lock();
7bdbe400
JB		 13797 err = nl80211_prepare_vendor_dump(skb, cb, &rdev, &wdev);
13798 if (err)
ea90e0dc 13799 goto out;
7bdbe400
JB		 13800
13801 vcmd_idx = cb->args[2];
13802 data = (void *)cb->args[3];
13803 data_len = cb->args[4];
13804 vcmd = &rdev->wiphy.vendor_commands[vcmd_idx];
13805
13806 if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
13807 WIPHY_VENDOR_CMD_NEED_NETDEV)) {
ea90e0dc
JB		 13808 if (!wdev) {
13809 err = -EINVAL;
13810 goto out;
13811 }
7bdbe400 13812 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
ea90e0dc
JB		 13813 !wdev->netdev) {
13814 err = -EINVAL;
13815 goto out;
13816 }
7bdbe400
JB		 13817
13818 if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
ea90e0dc
JB		 13819 if (!wdev_running(wdev)) {
13820 err = -ENETDOWN;
13821 goto out;
13822 }
7bdbe400
JB		 13823 }
13824 }
13825
13826 while (1) {
13827 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
13828 cb->nlh->nlmsg_seq, NLM_F_MULTI,
13829 NL80211_CMD_VENDOR);
13830 if (!hdr)
13831 break;
13832
13833 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 13834 (wdev && nla_put_u64_64bit(skb, NL80211_ATTR_WDEV,
13835 wdev_id(wdev),
13836 NL80211_ATTR_PAD))) {
7bdbe400
JB		 13837 genlmsg_cancel(skb, hdr);
13838 break;
13839 }
13840
ae0be8de
MK		 13841 vendor_data = nla_nest_start_noflag(skb,
13842 NL80211_ATTR_VENDOR_DATA);
7bdbe400
JB		 13843 if (!vendor_data) {
13844 genlmsg_cancel(skb, hdr);
13845 break;
13846 }
13847
13848 err = vcmd->dumpit(&rdev->wiphy, wdev, skb, data, data_len,
13849 (unsigned long *)&cb->args[5]);
13850 nla_nest_end(skb, vendor_data);
13851
13852 if (err == -ENOBUFS || err == -ENOENT) {
13853 genlmsg_cancel(skb, hdr);
13854 break;
9c167b2d 13855 } else if (err <= 0) {
7bdbe400
JB		 13856 genlmsg_cancel(skb, hdr);
13857 goto out;
13858 }
13859
13860 genlmsg_end(skb, hdr);
13861 }
13862
13863 err = skb->len;
13864 out:
13865 rtnl_unlock();
13866 return err;
13867}
13868
ad7e718c
JB		 13869struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
13870 enum nl80211_commands cmd,
13871 enum nl80211_attrs attr,
13872 int approxlen)
13873{
f26cbf40 13874 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ad7e718c
JB		 13875
13876 if (WARN_ON(!rdev->cur_cmd_info))
13877 return NULL;
13878
6c09e791 13879 return __cfg80211_alloc_vendor_skb(rdev, NULL, approxlen,
ad7e718c
JB		 13880 rdev->cur_cmd_info->snd_portid,
13881 rdev->cur_cmd_info->snd_seq,
567ffc35 13882 cmd, attr, NULL, GFP_KERNEL);
ad7e718c
JB		 13883}
13884EXPORT_SYMBOL(__cfg80211_alloc_reply_skb);
13885
13886int cfg80211_vendor_cmd_reply(struct sk_buff *skb)
13887{
13888 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
13889 void *hdr = ((void **)skb->cb)[1];
13890 struct nlattr *data = ((void **)skb->cb)[2];
13891
bd8c78e7
JB		 13892 /* clear CB data for netlink core to own from now on */
13893 memset(skb->cb, 0, sizeof(skb->cb));
13894
ad7e718c
JB		 13895 if (WARN_ON(!rdev->cur_cmd_info)) {
13896 kfree_skb(skb);
13897 return -EINVAL;
13898 }
13899
13900 nla_nest_end(skb, data);
13901 genlmsg_end(skb, hdr);
13902 return genlmsg_reply(skb, rdev->cur_cmd_info);
13903}
13904EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_reply);
13905
55c1fdf0
JB		 13906unsigned int cfg80211_vendor_cmd_get_sender(struct wiphy *wiphy)
13907{
13908 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
13909
13910 if (WARN_ON(!rdev->cur_cmd_info))
13911 return 0;
13912
13913 return rdev->cur_cmd_info->snd_portid;
13914}
13915EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_get_sender);
13916
fa9ffc74
KP		 13917static int nl80211_set_qos_map(struct sk_buff *skb,
13918 struct genl_info *info)
13919{
13920 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13921 struct cfg80211_qos_map *qos_map = NULL;
13922 struct net_device *dev = info->user_ptr[1];
13923 u8 *pos, len, num_des, des_len, des;
13924 int ret;
13925
13926 if (!rdev->ops->set_qos_map)
13927 return -EOPNOTSUPP;
13928
13929 if (info->attrs[NL80211_ATTR_QOS_MAP]) {
13930 pos = nla_data(info->attrs[NL80211_ATTR_QOS_MAP]);
13931 len = nla_len(info->attrs[NL80211_ATTR_QOS_MAP]);
13932
c8b82802 13933 if (len % 2)
fa9ffc74
KP		 13934 return -EINVAL;
13935
13936 qos_map = kzalloc(sizeof(struct cfg80211_qos_map), GFP_KERNEL);
13937 if (!qos_map)
13938 return -ENOMEM;
13939
13940 num_des = (len - IEEE80211_QOS_MAP_LEN_MIN) >> 1;
13941 if (num_des) {
13942 des_len = num_des *
13943 sizeof(struct cfg80211_dscp_exception);
13944 memcpy(qos_map->dscp_exception, pos, des_len);
13945 qos_map->num_des = num_des;
13946 for (des = 0; des < num_des; des++) {
13947 if (qos_map->dscp_exception[des].up > 7) {
13948 kfree(qos_map);
13949 return -EINVAL;
13950 }
13951 }
13952 pos += des_len;
13953 }
13954 memcpy(qos_map->up, pos, IEEE80211_QOS_MAP_LEN_MIN);
13955 }
13956
13957 wdev_lock(dev->ieee80211_ptr);
13958 ret = nl80211_key_allowed(dev->ieee80211_ptr);
13959 if (!ret)
13960 ret = rdev_set_qos_map(rdev, dev, qos_map);
13961 wdev_unlock(dev->ieee80211_ptr);
13962
13963 kfree(qos_map);
13964 return ret;
13965}
13966
960d01ac
JB		 13967static int nl80211_add_tx_ts(struct sk_buff *skb, struct genl_info *info)
13968{
13969 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13970 struct net_device *dev = info->user_ptr[1];
13971 struct wireless_dev *wdev = dev->ieee80211_ptr;
13972 const u8 *peer;
13973 u8 tsid, up;
13974 u16 admitted_time = 0;
13975 int err;
13976
723e73ac 13977 if (!(rdev->wiphy.features & NL80211_FEATURE_SUPPORTS_WMM_ADMISSION))
960d01ac
JB		 13978 return -EOPNOTSUPP;
13979
13980 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC] ||
13981 !info->attrs[NL80211_ATTR_USER_PRIO])
13982 return -EINVAL;
13983
13984 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
960d01ac 13985 up = nla_get_u8(info->attrs[NL80211_ATTR_USER_PRIO]);
960d01ac
JB		 13986
13987 /* WMM uses TIDs 0-7 even for TSPEC */
723e73ac 13988 if (tsid >= IEEE80211_FIRST_TSPEC_TSID) {
960d01ac 13989 /* TODO: handle 802.11 TSPEC/admission control
723e73ac
JB		 13990 * need more attributes for that (e.g. BA session requirement);
13991 * change the WMM adminssion test above to allow both then
960d01ac
JB		 13992 */
13993 return -EINVAL;
13994 }
13995
13996 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
13997
13998 if (info->attrs[NL80211_ATTR_ADMITTED_TIME]) {
13999 admitted_time =
14000 nla_get_u16(info->attrs[NL80211_ATTR_ADMITTED_TIME]);
14001 if (!admitted_time)
14002 return -EINVAL;
14003 }
14004
14005 wdev_lock(wdev);
14006 switch (wdev->iftype) {
14007 case NL80211_IFTYPE_STATION:
14008 case NL80211_IFTYPE_P2P_CLIENT:
14009 if (wdev->current_bss)
14010 break;
14011 err = -ENOTCONN;
14012 goto out;
14013 default:
14014 err = -EOPNOTSUPP;
14015 goto out;
14016 }
14017
14018 err = rdev_add_tx_ts(rdev, dev, tsid, peer, up, admitted_time);
14019
14020 out:
14021 wdev_unlock(wdev);
14022 return err;
14023}
14024
14025static int nl80211_del_tx_ts(struct sk_buff *skb, struct genl_info *info)
14026{
14027 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14028 struct net_device *dev = info->user_ptr[1];
14029 struct wireless_dev *wdev = dev->ieee80211_ptr;
14030 const u8 *peer;
14031 u8 tsid;
14032 int err;
14033
14034 if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC])
14035 return -EINVAL;
14036
14037 tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
14038 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14039
14040 wdev_lock(wdev);
14041 err = rdev_del_tx_ts(rdev, dev, tsid, peer);
14042 wdev_unlock(wdev);
14043
14044 return err;
14045}
14046
1057d35e
AN		 14047static int nl80211_tdls_channel_switch(struct sk_buff *skb,
14048 struct genl_info *info)
14049{
14050 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14051 struct net_device *dev = info->user_ptr[1];
14052 struct wireless_dev *wdev = dev->ieee80211_ptr;
14053 struct cfg80211_chan_def chandef = {};
14054 const u8 *addr;
14055 u8 oper_class;
14056 int err;
14057
14058 if (!rdev->ops->tdls_channel_switch ||
14059 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
14060 return -EOPNOTSUPP;
14061
14062 switch (dev->ieee80211_ptr->iftype) {
14063 case NL80211_IFTYPE_STATION:
14064 case NL80211_IFTYPE_P2P_CLIENT:
14065 break;
14066 default:
14067 return -EOPNOTSUPP;
14068 }
14069
14070 if (!info->attrs[NL80211_ATTR_MAC] ||
14071 !info->attrs[NL80211_ATTR_OPER_CLASS])
14072 return -EINVAL;
14073
14074 err = nl80211_parse_chandef(rdev, info, &chandef);
14075 if (err)
14076 return err;
14077
14078 /*
14079 * Don't allow wide channels on the 2.4Ghz band, as per IEEE802.11-2012
14080 * section 10.22.6.2.1. Disallow 5/10Mhz channels as well for now, the
14081 * specification is not defined for them.
14082 */
57fbcce3 14083 if (chandef.chan->band == NL80211_BAND_2GHZ &&
1057d35e
AN		 14084 chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
14085 chandef.width != NL80211_CHAN_WIDTH_20)
14086 return -EINVAL;
14087
14088 /* we will be active on the TDLS link */
923b352f
AN		 14089 if (!cfg80211_reg_can_beacon_relax(&rdev->wiphy, &chandef,
14090 wdev->iftype))
1057d35e
AN		 14091 return -EINVAL;
14092
14093 /* don't allow switching to DFS channels */
14094 if (cfg80211_chandef_dfs_required(wdev->wiphy, &chandef, wdev->iftype))
14095 return -EINVAL;
14096
14097 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
14098 oper_class = nla_get_u8(info->attrs[NL80211_ATTR_OPER_CLASS]);
14099
14100 wdev_lock(wdev);
14101 err = rdev_tdls_channel_switch(rdev, dev, addr, oper_class, &chandef);
14102 wdev_unlock(wdev);
14103
14104 return err;
14105}
14106
14107static int nl80211_tdls_cancel_channel_switch(struct sk_buff *skb,
14108 struct genl_info *info)
14109{
14110 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14111 struct net_device *dev = info->user_ptr[1];
14112 struct wireless_dev *wdev = dev->ieee80211_ptr;
14113 const u8 *addr;
14114
14115 if (!rdev->ops->tdls_channel_switch ||
14116 !rdev->ops->tdls_cancel_channel_switch ||
14117 !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
14118 return -EOPNOTSUPP;
14119
14120 switch (dev->ieee80211_ptr->iftype) {
14121 case NL80211_IFTYPE_STATION:
14122 case NL80211_IFTYPE_P2P_CLIENT:
14123 break;
14124 default:
14125 return -EOPNOTSUPP;
14126 }
14127
14128 if (!info->attrs[NL80211_ATTR_MAC])
14129 return -EINVAL;
14130
14131 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
14132
14133 wdev_lock(wdev);
14134 rdev_tdls_cancel_channel_switch(rdev, dev, addr);
14135 wdev_unlock(wdev);
14136
14137 return 0;
14138}
14139
ce0ce13a
MB		 14140static int nl80211_set_multicast_to_unicast(struct sk_buff *skb,
14141 struct genl_info *info)
14142{
14143 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14144 struct net_device *dev = info->user_ptr[1];
14145 struct wireless_dev *wdev = dev->ieee80211_ptr;
14146 const struct nlattr *nla;
14147 bool enabled;
14148
ce0ce13a
MB		 14149 if (!rdev->ops->set_multicast_to_unicast)
14150 return -EOPNOTSUPP;
14151
14152 if (wdev->iftype != NL80211_IFTYPE_AP &&
14153 wdev->iftype != NL80211_IFTYPE_P2P_GO)
14154 return -EOPNOTSUPP;
14155
14156 nla = info->attrs[NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED];
14157 enabled = nla_get_flag(nla);
14158
14159 return rdev_set_multicast_to_unicast(rdev, dev, enabled);
14160}
14161
3a00df57
AS		 14162static int nl80211_set_pmk(struct sk_buff *skb, struct genl_info *info)
14163{
14164 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14165 struct net_device *dev = info->user_ptr[1];
14166 struct wireless_dev *wdev = dev->ieee80211_ptr;
14167 struct cfg80211_pmk_conf pmk_conf = {};
14168 int ret;
14169
14170 if (wdev->iftype != NL80211_IFTYPE_STATION &&
14171 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
14172 return -EOPNOTSUPP;
14173
14174 if (!wiphy_ext_feature_isset(&rdev->wiphy,
14175 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
14176 return -EOPNOTSUPP;
14177
14178 if (!info->attrs[NL80211_ATTR_MAC] || !info->attrs[NL80211_ATTR_PMK])
14179 return -EINVAL;
14180
14181 wdev_lock(wdev);
14182 if (!wdev->current_bss) {
14183 ret = -ENOTCONN;
14184 goto out;
14185 }
14186
14187 pmk_conf.aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
14188 if (memcmp(pmk_conf.aa, wdev->current_bss->pub.bssid, ETH_ALEN)) {
14189 ret = -EINVAL;
14190 goto out;
14191 }
14192
14193 pmk_conf.pmk = nla_data(info->attrs[NL80211_ATTR_PMK]);
14194 pmk_conf.pmk_len = nla_len(info->attrs[NL80211_ATTR_PMK]);
14195 if (pmk_conf.pmk_len != WLAN_PMK_LEN &&
14196 pmk_conf.pmk_len != WLAN_PMK_LEN_SUITE_B_192) {
14197 ret = -EINVAL;
14198 goto out;
14199 }
14200
cb9abd48 14201 if (info->attrs[NL80211_ATTR_PMKR0_NAME])
3a00df57
AS		 14202 pmk_conf.pmk_r0_name =
14203 nla_data(info->attrs[NL80211_ATTR_PMKR0_NAME]);
3a00df57
AS		 14204
14205 ret = rdev_set_pmk(rdev, dev, &pmk_conf);
14206out:
14207 wdev_unlock(wdev);
14208 return ret;
14209}
14210
14211static int nl80211_del_pmk(struct sk_buff *skb, struct genl_info *info)
14212{
14213 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14214 struct net_device *dev = info->user_ptr[1];
14215 struct wireless_dev *wdev = dev->ieee80211_ptr;
14216 const u8 *aa;
14217 int ret;
14218
14219 if (wdev->iftype != NL80211_IFTYPE_STATION &&
14220 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
14221 return -EOPNOTSUPP;
14222
14223 if (!wiphy_ext_feature_isset(&rdev->wiphy,
14224 NL80211_EXT_FEATURE_4WAY_HANDSHAKE_STA_1X))
14225 return -EOPNOTSUPP;
14226
14227 if (!info->attrs[NL80211_ATTR_MAC])
14228 return -EINVAL;
14229
14230 wdev_lock(wdev);
14231 aa = nla_data(info->attrs[NL80211_ATTR_MAC]);
14232 ret = rdev_del_pmk(rdev, dev, aa);
14233 wdev_unlock(wdev);
14234
14235 return ret;
14236}
14237
40cbfa90
SD		 14238static int nl80211_external_auth(struct sk_buff *skb, struct genl_info *info)
14239{
14240 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14241 struct net_device *dev = info->user_ptr[1];
14242 struct cfg80211_external_auth_params params;
14243
db8d93a7 14244 if (!rdev->ops->external_auth)
40cbfa90
SD		 14245 return -EOPNOTSUPP;
14246
fe494370
SD		 14247 if (!info->attrs[NL80211_ATTR_SSID] &&
14248 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
14249 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
40cbfa90
SD		 14250 return -EINVAL;
14251
14252 if (!info->attrs[NL80211_ATTR_BSSID])
14253 return -EINVAL;
14254
14255 if (!info->attrs[NL80211_ATTR_STATUS_CODE])
14256 return -EINVAL;
14257
14258 memset(&params, 0, sizeof(params));
14259
fe494370
SD		 14260 if (info->attrs[NL80211_ATTR_SSID]) {
14261 params.ssid.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
cb9abd48 14262 if (params.ssid.ssid_len == 0)
fe494370
SD		 14263 return -EINVAL;
14264 memcpy(params.ssid.ssid,
14265 nla_data(info->attrs[NL80211_ATTR_SSID]),
14266 params.ssid.ssid_len);
14267 }
40cbfa90
SD		 14268
14269 memcpy(params.bssid, nla_data(info->attrs[NL80211_ATTR_BSSID]),
14270 ETH_ALEN);
14271
14272 params.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
14273
fe494370
SD		 14274 if (info->attrs[NL80211_ATTR_PMKID])
14275 params.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
14276
40cbfa90
SD		 14277 return rdev_external_auth(rdev, dev, &params);
14278}
14279
2576a9ac
DK		 14280static int nl80211_tx_control_port(struct sk_buff *skb, struct genl_info *info)
14281{
dca9ca2d 14282 bool dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
2576a9ac
DK		 14283 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14284 struct net_device *dev = info->user_ptr[1];
14285 struct wireless_dev *wdev = dev->ieee80211_ptr;
14286 const u8 *buf;
14287 size_t len;
14288 u8 *dest;
14289 u16 proto;
14290 bool noencrypt;
dca9ca2d 14291 u64 cookie = 0;
2576a9ac
DK		 14292 int err;
14293
14294 if (!wiphy_ext_feature_isset(&rdev->wiphy,
14295 NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211))
14296 return -EOPNOTSUPP;
14297
14298 if (!rdev->ops->tx_control_port)
14299 return -EOPNOTSUPP;
14300
14301 if (!info->attrs[NL80211_ATTR_FRAME] ||
14302 !info->attrs[NL80211_ATTR_MAC] ||
14303 !info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
14304 GENL_SET_ERR_MSG(info, "Frame, MAC or ethertype missing");
14305 return -EINVAL;
14306 }
14307
14308 wdev_lock(wdev);
14309
14310 switch (wdev->iftype) {
14311 case NL80211_IFTYPE_AP:
14312 case NL80211_IFTYPE_P2P_GO:
14313 case NL80211_IFTYPE_MESH_POINT:
14314 break;
14315 case NL80211_IFTYPE_ADHOC:
14316 case NL80211_IFTYPE_STATION:
14317 case NL80211_IFTYPE_P2P_CLIENT:
14318 if (wdev->current_bss)
14319 break;
14320 err = -ENOTCONN;
14321 goto out;
14322 default:
14323 err = -EOPNOTSUPP;
14324 goto out;
14325 }
14326
14327 wdev_unlock(wdev);
14328
14329 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
14330 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
14331 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
14332 proto = nla_get_u16(info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
14333 noencrypt =
14334 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT]);
14335
dca9ca2d
MT		 14336 err = rdev_tx_control_port(rdev, dev, buf, len,
14337 dest, cpu_to_be16(proto), noencrypt,
14338 dont_wait_for_ack ? NULL : &cookie);
14339 if (!err && !dont_wait_for_ack)
14340 nl_set_extack_cookie_u64(info->extack, cookie);
14341 return err;
2576a9ac
DK		 14342 out:
14343 wdev_unlock(wdev);
14344 return err;
14345}
14346
81e54d08
PKC		 14347static int nl80211_get_ftm_responder_stats(struct sk_buff *skb,
14348 struct genl_info *info)
14349{
14350 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14351 struct net_device *dev = info->user_ptr[1];
14352 struct wireless_dev *wdev = dev->ieee80211_ptr;
14353 struct cfg80211_ftm_responder_stats ftm_stats = {};
14354 struct sk_buff *msg;
14355 void *hdr;
14356 struct nlattr *ftm_stats_attr;
14357 int err;
14358
14359 if (wdev->iftype != NL80211_IFTYPE_AP || !wdev->beacon_interval)
14360 return -EOPNOTSUPP;
14361
14362 err = rdev_get_ftm_responder_stats(rdev, dev, &ftm_stats);
14363 if (err)
14364 return err;
14365
14366 if (!ftm_stats.filled)
14367 return -ENODATA;
14368
14369 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
14370 if (!msg)
14371 return -ENOMEM;
14372
14373 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
14374 NL80211_CMD_GET_FTM_RESPONDER_STATS);
14375 if (!hdr)
1399c59f 14376 goto nla_put_failure;
81e54d08
PKC		 14377
14378 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
14379 goto nla_put_failure;
14380
ae0be8de
MK		 14381 ftm_stats_attr = nla_nest_start_noflag(msg,
14382 NL80211_ATTR_FTM_RESPONDER_STATS);
81e54d08
PKC		 14383 if (!ftm_stats_attr)
14384 goto nla_put_failure;
14385
14386#define SET_FTM(field, name, type) \
14387 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
14388 nla_put_ ## type(msg, NL80211_FTM_STATS_ ## name, \
14389 ftm_stats.field)) \
14390 goto nla_put_failure; } while (0)
14391#define SET_FTM_U64(field, name) \
14392 do { if ((ftm_stats.filled & BIT(NL80211_FTM_STATS_ ## name)) && \
14393 nla_put_u64_64bit(msg, NL80211_FTM_STATS_ ## name, \
14394 ftm_stats.field, NL80211_FTM_STATS_PAD)) \
14395 goto nla_put_failure; } while (0)
14396
14397 SET_FTM(success_num, SUCCESS_NUM, u32);
14398 SET_FTM(partial_num, PARTIAL_NUM, u32);
14399 SET_FTM(failed_num, FAILED_NUM, u32);
14400 SET_FTM(asap_num, ASAP_NUM, u32);
14401 SET_FTM(non_asap_num, NON_ASAP_NUM, u32);
14402 SET_FTM_U64(total_duration_ms, TOTAL_DURATION_MSEC);
14403 SET_FTM(unknown_triggers_num, UNKNOWN_TRIGGERS_NUM, u32);
14404 SET_FTM(reschedule_requests_num, RESCHEDULE_REQUESTS_NUM, u32);
14405 SET_FTM(out_of_window_triggers_num, OUT_OF_WINDOW_TRIGGERS_NUM, u32);
14406#undef SET_FTM
14407
14408 nla_nest_end(msg, ftm_stats_attr);
14409
14410 genlmsg_end(msg, hdr);
14411 return genlmsg_reply(msg, info);
14412
14413nla_put_failure:
14414 nlmsg_free(msg);
14415 return -ENOBUFS;
14416}
14417
cb74e977
SD		 14418static int nl80211_update_owe_info(struct sk_buff *skb, struct genl_info *info)
14419{
14420 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14421 struct cfg80211_update_owe_info owe_info;
14422 struct net_device *dev = info->user_ptr[1];
14423
14424 if (!rdev->ops->update_owe_info)
14425 return -EOPNOTSUPP;
14426
14427 if (!info->attrs[NL80211_ATTR_STATUS_CODE] ||
14428 !info->attrs[NL80211_ATTR_MAC])
14429 return -EINVAL;
14430
14431 memset(&owe_info, 0, sizeof(owe_info));
14432 owe_info.status = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
14433 nla_memcpy(owe_info.peer, info->attrs[NL80211_ATTR_MAC], ETH_ALEN);
14434
14435 if (info->attrs[NL80211_ATTR_IE]) {
14436 owe_info.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
14437 owe_info.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
14438 }
14439
14440 return rdev_update_owe_info(rdev, dev, &owe_info);
14441}
14442
5ab92e7f
RM		 14443static int nl80211_probe_mesh_link(struct sk_buff *skb, struct genl_info *info)
14444{
14445 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14446 struct net_device *dev = info->user_ptr[1];
14447 struct wireless_dev *wdev = dev->ieee80211_ptr;
14448 struct station_info sinfo = {};
14449 const u8 *buf;
14450 size_t len;
14451 u8 *dest;
14452 int err;
14453
14454 if (!rdev->ops->probe_mesh_link || !rdev->ops->get_station)
14455 return -EOPNOTSUPP;
14456
14457 if (!info->attrs[NL80211_ATTR_MAC] ||
14458 !info->attrs[NL80211_ATTR_FRAME]) {
14459 GENL_SET_ERR_MSG(info, "Frame or MAC missing");
14460 return -EINVAL;
14461 }
14462
14463 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
14464 return -EOPNOTSUPP;
14465
14466 dest = nla_data(info->attrs[NL80211_ATTR_MAC]);
14467 buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
14468 len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
14469
14470 if (len < sizeof(struct ethhdr))
14471 return -EINVAL;
14472
14473 if (!ether_addr_equal(buf, dest) || is_multicast_ether_addr(buf) ||
14474 !ether_addr_equal(buf + ETH_ALEN, dev->dev_addr))
14475 return -EINVAL;
14476
14477 err = rdev_get_station(rdev, dev, dest, &sinfo);
14478 if (err)
14479 return err;
14480
2a279b34
FF		 14481 cfg80211_sinfo_release_content(&sinfo);
14482
5ab92e7f
RM		 14483 return rdev_probe_mesh_link(rdev, dev, dest, buf, len);
14484}
14485
77f576de
T		 14486static int parse_tid_conf(struct cfg80211_registered_device *rdev,
14487 struct nlattr *attrs[], struct net_device *dev,
3710a8a6 14488 struct cfg80211_tid_cfg *tid_conf,
77f576de
T		 14489 struct genl_info *info, const u8 *peer)
14490{
14491 struct netlink_ext_ack *extack = info->extack;
3710a8a6 14492 u64 mask;
77f576de
T		 14493 int err;
14494
14495 if (!attrs[NL80211_TID_CONFIG_ATTR_TIDS])
14496 return -EINVAL;
14497
14498 tid_conf->config_override =
14499 nla_get_flag(attrs[NL80211_TID_CONFIG_ATTR_OVERRIDE]);
3710a8a6 14500 tid_conf->tids = nla_get_u16(attrs[NL80211_TID_CONFIG_ATTR_TIDS]);
77f576de
T		 14501
14502 if (tid_conf->config_override) {
14503 if (rdev->ops->reset_tid_config) {
14504 err = rdev_reset_tid_config(rdev, dev, peer,
3710a8a6 14505 tid_conf->tids);
c0336955 14506 if (err)
77f576de
T		 14507 return err;
14508 } else {
14509 return -EINVAL;
14510 }
14511 }
14512
14513 if (attrs[NL80211_TID_CONFIG_ATTR_NOACK]) {
3710a8a6 14514 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_NOACK);
77f576de
T		 14515 tid_conf->noack =
14516 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_NOACK]);
14517 }
14518
6a21d16c
T		 14519 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]) {
14520 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_SHORT);
14521 tid_conf->retry_short =
14522 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_SHORT]);
14523
14524 if (tid_conf->retry_short > rdev->wiphy.max_data_retry_count)
14525 return -EINVAL;
14526 }
14527
14528 if (attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]) {
14529 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RETRY_LONG);
14530 tid_conf->retry_long =
14531 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RETRY_LONG]);
14532
14533 if (tid_conf->retry_long > rdev->wiphy.max_data_retry_count)
14534 return -EINVAL;
14535 }
14536
ade274b2
T		 14537 if (attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]) {
14538 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMPDU_CTRL);
14539 tid_conf->ampdu =
14540 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMPDU_CTRL]);
14541 }
14542
04f7d142
T		 14543 if (attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]) {
14544 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL);
14545 tid_conf->rtscts =
14546 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL]);
14547 }
14548
33462e68
SM		 14549 if (attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]) {
14550 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_AMSDU_CTRL);
14551 tid_conf->amsdu =
14552 nla_get_u8(attrs[NL80211_TID_CONFIG_ATTR_AMSDU_CTRL]);
14553 }
14554
9a5f6488
TC		 14555 if (attrs[NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE]) {
14556 u32 idx = NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE, attr;
14557
14558 tid_conf->txrate_type = nla_get_u8(attrs[idx]);
14559
14560 if (tid_conf->txrate_type != NL80211_TX_RATE_AUTOMATIC) {
14561 attr = NL80211_TID_CONFIG_ATTR_TX_RATE;
14562 err = nl80211_parse_tx_bitrate_mask(info, attrs, attr,
857b34c4
RM		 14563 &tid_conf->txrate_mask, dev,
14564 true);
9a5f6488
TC		 14565 if (err)
14566 return err;
14567
14568 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE);
14569 }
14570 tid_conf->mask |= BIT(NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE);
14571 }
14572
3710a8a6
JB		 14573 if (peer)
14574 mask = rdev->wiphy.tid_config_support.peer;
14575 else
14576 mask = rdev->wiphy.tid_config_support.vif;
14577
14578 if (tid_conf->mask & ~mask) {
14579 NL_SET_ERR_MSG(extack, "unsupported TID configuration");
14580 return -ENOTSUPP;
14581 }
14582
77f576de
T		 14583 return 0;
14584}
14585
14586static int nl80211_set_tid_config(struct sk_buff *skb,
14587 struct genl_info *info)
14588{
14589 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14590 struct nlattr *attrs[NL80211_TID_CONFIG_ATTR_MAX + 1];
14591 struct net_device *dev = info->user_ptr[1];
3710a8a6 14592 struct cfg80211_tid_config *tid_config;
77f576de
T		 14593 struct nlattr *tid;
14594 int conf_idx = 0, rem_conf;
14595 int ret = -EINVAL;
14596 u32 num_conf = 0;
14597
14598 if (!info->attrs[NL80211_ATTR_TID_CONFIG])
14599 return -EINVAL;
14600
14601 if (!rdev->ops->set_tid_config)
14602 return -EOPNOTSUPP;
14603
14604 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
14605 rem_conf)
14606 num_conf++;
14607
14608 tid_config = kzalloc(struct_size(tid_config, tid_conf, num_conf),
14609 GFP_KERNEL);
14610 if (!tid_config)
14611 return -ENOMEM;
14612
14613 tid_config->n_tid_conf = num_conf;
14614
14615 if (info->attrs[NL80211_ATTR_MAC])
14616 tid_config->peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
14617
14618 nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
14619 rem_conf) {
14620 ret = nla_parse_nested(attrs, NL80211_TID_CONFIG_ATTR_MAX,
14621 tid, NULL, NULL);
14622
14623 if (ret)
14624 goto bad_tid_conf;
14625
14626 ret = parse_tid_conf(rdev, attrs, dev,
14627 &tid_config->tid_conf[conf_idx],
14628 info, tid_config->peer);
14629 if (ret)
14630 goto bad_tid_conf;
14631
14632 conf_idx++;
14633 }
14634
14635 ret = rdev_set_tid_config(rdev, dev, tid_config);
14636
14637bad_tid_conf:
14638 kfree(tid_config);
14639 return ret;
14640}
14641
4c476991
JB		 14642#define NL80211_FLAG_NEED_WIPHY 0x01
14643#define NL80211_FLAG_NEED_NETDEV 0x02
14644#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 14645#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
14646#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
14647 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 14648#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 14649/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 14650#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
14651 NL80211_FLAG_CHECK_NETDEV_UP)
5393b917 14652#define NL80211_FLAG_CLEAR_SKB 0x20
4c476991 14653
f84f771d 14654static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 14655 struct genl_info *info)
14656{
14657 struct cfg80211_registered_device *rdev;
89a54e48 14658 struct wireless_dev *wdev;
4c476991 14659 struct net_device *dev;
4c476991
JB		 14660 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
14661
14662 if (rtnl)
14663 rtnl_lock();
14664
14665 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 14666 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991
JB		 14667 if (IS_ERR(rdev)) {
14668 if (rtnl)
14669 rtnl_unlock();
14670 return PTR_ERR(rdev);
14671 }
14672 info->user_ptr[0] = rdev;
1bf614ef
JB		 14673 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
14674 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
5fe231e8
JB		 14675 ASSERT_RTNL();
14676
89a54e48
JB		 14677 wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
14678 info->attrs);
14679 if (IS_ERR(wdev)) {
4c476991
JB		 14680 if (rtnl)
14681 rtnl_unlock();
89a54e48 14682 return PTR_ERR(wdev);
4c476991 14683 }
89a54e48 14684
89a54e48 14685 dev = wdev->netdev;
f26cbf40 14686 rdev = wiphy_to_rdev(wdev->wiphy);
89a54e48 14687
1bf614ef
JB		 14688 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
14689 if (!dev) {
1bf614ef
JB		 14690 if (rtnl)
14691 rtnl_unlock();
14692 return -EINVAL;
14693 }
14694
14695 info->user_ptr[1] = dev;
14696 } else {
14697 info->user_ptr[1] = wdev;
41265714 14698 }
1bf614ef 14699
73c7da3d
AVS		 14700 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
14701 !wdev_running(wdev)) {
14702 if (rtnl)
14703 rtnl_unlock();
14704 return -ENETDOWN;
14705 }
1bf614ef 14706
73c7da3d 14707 if (dev)
1bf614ef 14708 dev_hold(dev);
89a54e48 14709
4c476991 14710 info->user_ptr[0] = rdev;
4c476991
JB		 14711 }
14712
14713 return 0;
14714}
14715
f84f771d 14716static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
4c476991
JB		 14717 struct genl_info *info)
14718{
1bf614ef
JB		 14719 if (info->user_ptr[1]) {
14720 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
14721 struct wireless_dev *wdev = info->user_ptr[1];
14722
14723 if (wdev->netdev)
14724 dev_put(wdev->netdev);
14725 } else {
14726 dev_put(info->user_ptr[1]);
14727 }
14728 }
5393b917 14729
4c476991
JB		 14730 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
14731 rtnl_unlock();
5393b917
JB		 14732
14733 /* If needed, clear the netlink message payload from the SKB
14734 * as it might contain key data that shouldn't stick around on
14735 * the heap after the SKB is freed. The netlink message header
14736 * is still needed for further processing, so leave it intact.
14737 */
14738 if (ops->internal_flags & NL80211_FLAG_CLEAR_SKB) {
14739 struct nlmsghdr *nlh = nlmsg_hdr(skb);
14740
14741 memset(nlmsg_data(nlh), 0, nlmsg_len(nlh));
14742 }
4c476991
JB		 14743}
14744
6bdb68ce
CH		 14745static int nl80211_set_sar_sub_specs(struct cfg80211_registered_device *rdev,
14746 struct cfg80211_sar_specs *sar_specs,
14747 struct nlattr *spec[], int index)
14748{
14749 u32 range_index, i;
14750
14751 if (!sar_specs || !spec)
14752 return -EINVAL;
14753
14754 if (!spec[NL80211_SAR_ATTR_SPECS_POWER] ||
14755 !spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX])
14756 return -EINVAL;
14757
14758 range_index = nla_get_u32(spec[NL80211_SAR_ATTR_SPECS_RANGE_INDEX]);
14759
14760 /* check if range_index exceeds num_freq_ranges */
14761 if (range_index >= rdev->wiphy.sar_capa->num_freq_ranges)
14762 return -EINVAL;
14763
14764 /* check if range_index duplicates */
14765 for (i = 0; i < index; i++) {
14766 if (sar_specs->sub_specs[i].freq_range_index == range_index)
14767 return -EINVAL;
14768 }
14769
14770 sar_specs->sub_specs[index].power =
14771 nla_get_s32(spec[NL80211_SAR_ATTR_SPECS_POWER]);
14772
14773 sar_specs->sub_specs[index].freq_range_index = range_index;
14774
14775 return 0;
14776}
14777
14778static int nl80211_set_sar_specs(struct sk_buff *skb, struct genl_info *info)
14779{
14780 struct cfg80211_registered_device *rdev = info->user_ptr[0];
14781 struct nlattr *spec[NL80211_SAR_ATTR_SPECS_MAX + 1];
14782 struct nlattr *tb[NL80211_SAR_ATTR_MAX + 1];
14783 struct cfg80211_sar_specs *sar_spec;
14784 enum nl80211_sar_type type;
14785 struct nlattr *spec_list;
14786 u32 specs;
14787 int rem, err;
14788
14789 if (!rdev->wiphy.sar_capa || !rdev->ops->set_sar_specs)
14790 return -EOPNOTSUPP;
14791
14792 if (!info->attrs[NL80211_ATTR_SAR_SPEC])
14793 return -EINVAL;
14794
14795 nla_parse_nested(tb, NL80211_SAR_ATTR_MAX,
14796 info->attrs[NL80211_ATTR_SAR_SPEC],
14797 NULL, NULL);
14798
14799 if (!tb[NL80211_SAR_ATTR_TYPE] || !tb[NL80211_SAR_ATTR_SPECS])
14800 return -EINVAL;
14801
14802 type = nla_get_u32(tb[NL80211_SAR_ATTR_TYPE]);
14803 if (type != rdev->wiphy.sar_capa->type)
14804 return -EINVAL;
14805
14806 specs = 0;
14807 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem)
14808 specs++;
14809
14810 if (specs > rdev->wiphy.sar_capa->num_freq_ranges)
14811 return -EINVAL;
14812
14813 sar_spec = kzalloc(sizeof(*sar_spec) +
14814 specs * sizeof(struct cfg80211_sar_sub_specs),
14815 GFP_KERNEL);
14816 if (!sar_spec)
14817 return -ENOMEM;
14818
14819 sar_spec->type = type;
14820 specs = 0;
14821 nla_for_each_nested(spec_list, tb[NL80211_SAR_ATTR_SPECS], rem) {
14822 nla_parse_nested(spec, NL80211_SAR_ATTR_SPECS_MAX,
14823 spec_list, NULL, NULL);
14824
14825 switch (type) {
14826 case NL80211_SAR_TYPE_POWER:
14827 if (nl80211_set_sar_sub_specs(rdev, sar_spec,
14828 spec, specs)) {
14829 err = -EINVAL;
14830 goto error;
14831 }
14832 break;
14833 default:
14834 err = -EINVAL;
14835 goto error;
14836 }
14837 specs++;
14838 }
14839
14840 sar_spec->num_sub_specs = specs;
14841
14842 rdev->cur_cmd_info = info;
14843 err = rdev_set_sar_specs(rdev, sar_spec);
14844 rdev->cur_cmd_info = NULL;
14845error:
14846 kfree(sar_spec);
14847 return err;
14848}
14849
4534de83 14850static const struct genl_ops nl80211_ops[] = {
55682965
JB		 14851 {
14852 .cmd = NL80211_CMD_GET_WIPHY,
ef6243ac 14853 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 14854 .doit = nl80211_get_wiphy,
14855 .dumpit = nl80211_dump_wiphy,
86e8cf98 14856 .done = nl80211_dump_wiphy_done,
55682965 14857 /* can be retrieved by unprivileged users */
5fe231e8
JB		 14858 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14859 NL80211_FLAG_NEED_RTNL,
55682965 14860 },
66a9b928
JK		 14861};
14862
14863static const struct genl_small_ops nl80211_small_ops[] = {
55682965
JB		 14864 {
14865 .cmd = NL80211_CMD_SET_WIPHY,
ef6243ac 14866 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14867 .doit = nl80211_set_wiphy,
5617c6cd 14868 .flags = GENL_UNS_ADMIN_PERM,
4c476991 14869 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 14870 },
14871 {
14872 .cmd = NL80211_CMD_GET_INTERFACE,
ef6243ac 14873 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965
JB		 14874 .doit = nl80211_get_interface,
14875 .dumpit = nl80211_dump_interface,
55682965 14876 /* can be retrieved by unprivileged users */
5fe231e8
JB		 14877 .internal_flags = NL80211_FLAG_NEED_WDEV |
14878 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14879 },
14880 {
14881 .cmd = NL80211_CMD_SET_INTERFACE,
ef6243ac 14882 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14883 .doit = nl80211_set_interface,
5617c6cd 14884 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14885 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14886 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14887 },
14888 {
14889 .cmd = NL80211_CMD_NEW_INTERFACE,
ef6243ac 14890 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14891 .doit = nl80211_new_interface,
5617c6cd 14892 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 14893 .internal_flags = NL80211_FLAG_NEED_WIPHY |
14894 NL80211_FLAG_NEED_RTNL,
55682965
JB		 14895 },
14896 {
14897 .cmd = NL80211_CMD_DEL_INTERFACE,
ef6243ac 14898 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
55682965 14899 .doit = nl80211_del_interface,
5617c6cd 14900 .flags = GENL_UNS_ADMIN_PERM,
84efbb84 14901 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 14902 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 14903 },
14904 {
14905 .cmd = NL80211_CMD_GET_KEY,
ef6243ac 14906 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14907 .doit = nl80211_get_key,
5617c6cd 14908 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14909 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14910 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 14911 },
14912 {
14913 .cmd = NL80211_CMD_SET_KEY,
ef6243ac 14914 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14915 .doit = nl80211_set_key,
5617c6cd 14916 .flags = GENL_UNS_ADMIN_PERM,
41265714 14917 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14918 NL80211_FLAG_NEED_RTNL |
14919 NL80211_FLAG_CLEAR_SKB,
41ade00f
JB		 14920 },
14921 {
14922 .cmd = NL80211_CMD_NEW_KEY,
ef6243ac 14923 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14924 .doit = nl80211_new_key,
5617c6cd 14925 .flags = GENL_UNS_ADMIN_PERM,
41265714 14926 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 14927 NL80211_FLAG_NEED_RTNL |
14928 NL80211_FLAG_CLEAR_SKB,
41ade00f
JB		 14929 },
14930 {
14931 .cmd = NL80211_CMD_DEL_KEY,
ef6243ac 14932 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
41ade00f 14933 .doit = nl80211_del_key,
5617c6cd 14934 .flags = GENL_UNS_ADMIN_PERM,
41265714 14935 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14936 NL80211_FLAG_NEED_RTNL,
55682965 14937 },
ed1b6cc7
JB		 14938 {
14939 .cmd = NL80211_CMD_SET_BEACON,
ef6243ac 14940 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14941 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14942 .doit = nl80211_set_beacon,
2b5f8b0b 14943 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14944 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 14945 },
14946 {
8860020e 14947 .cmd = NL80211_CMD_START_AP,
ef6243ac 14948 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14949 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14950 .doit = nl80211_start_ap,
2b5f8b0b 14951 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14952 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 14953 },
14954 {
8860020e 14955 .cmd = NL80211_CMD_STOP_AP,
ef6243ac 14956 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5617c6cd 14957 .flags = GENL_UNS_ADMIN_PERM,
8860020e 14958 .doit = nl80211_stop_ap,
2b5f8b0b 14959 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14960 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 14961 },
5727ef1b
JB		 14962 {
14963 .cmd = NL80211_CMD_GET_STATION,
ef6243ac 14964 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14965 .doit = nl80211_get_station,
2ec600d6 14966 .dumpit = nl80211_dump_station,
4c476991
JB		 14967 .internal_flags = NL80211_FLAG_NEED_NETDEV |
14968 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14969 },
14970 {
14971 .cmd = NL80211_CMD_SET_STATION,
ef6243ac 14972 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14973 .doit = nl80211_set_station,
5617c6cd 14974 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14975 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14976 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14977 },
14978 {
14979 .cmd = NL80211_CMD_NEW_STATION,
ef6243ac 14980 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14981 .doit = nl80211_new_station,
5617c6cd 14982 .flags = GENL_UNS_ADMIN_PERM,
41265714 14983 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14984 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 14985 },
14986 {
14987 .cmd = NL80211_CMD_DEL_STATION,
ef6243ac 14988 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5727ef1b 14989 .doit = nl80211_del_station,
5617c6cd 14990 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 14991 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 14992 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 14993 },
14994 {
14995 .cmd = NL80211_CMD_GET_MPATH,
ef6243ac 14996 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6
LCC		 14997 .doit = nl80211_get_mpath,
14998 .dumpit = nl80211_dump_mpath,
5617c6cd 14999 .flags = GENL_UNS_ADMIN_PERM,
41265714 15000 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15001 NL80211_FLAG_NEED_RTNL,
2ec600d6 15002 },
66be7d2b
HR		 15003 {
15004 .cmd = NL80211_CMD_GET_MPP,
ef6243ac 15005 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
66be7d2b
HR		 15006 .doit = nl80211_get_mpp,
15007 .dumpit = nl80211_dump_mpp,
5617c6cd 15008 .flags = GENL_UNS_ADMIN_PERM,
66be7d2b
HR		 15009 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15010 NL80211_FLAG_NEED_RTNL,
15011 },
2ec600d6
LCC		 15012 {
15013 .cmd = NL80211_CMD_SET_MPATH,
ef6243ac 15014 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 15015 .doit = nl80211_set_mpath,
5617c6cd 15016 .flags = GENL_UNS_ADMIN_PERM,
41265714 15017 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15018 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 15019 },
15020 {
15021 .cmd = NL80211_CMD_NEW_MPATH,
ef6243ac 15022 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 15023 .doit = nl80211_new_mpath,
5617c6cd 15024 .flags = GENL_UNS_ADMIN_PERM,
41265714 15025 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15026 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 15027 },
15028 {
15029 .cmd = NL80211_CMD_DEL_MPATH,
ef6243ac 15030 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2ec600d6 15031 .doit = nl80211_del_mpath,
5617c6cd 15032 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 15033 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15034 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 15035 },
15036 {
15037 .cmd = NL80211_CMD_SET_BSS,
ef6243ac 15038 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9f1ba906 15039 .doit = nl80211_set_bss,
5617c6cd 15040 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 15041 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15042 NL80211_FLAG_NEED_RTNL,
b2e1b302 15043 },
f130347c
LR		 15044 {
15045 .cmd = NL80211_CMD_GET_REG,
ef6243ac 15046 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad30ca2c
AN		 15047 .doit = nl80211_get_reg_do,
15048 .dumpit = nl80211_get_reg_dump,
5fe231e8 15049 .internal_flags = NL80211_FLAG_NEED_RTNL,
f130347c
LR		 15050 /* can be retrieved by unprivileged users */
15051 },
b6863036 15052#ifdef CONFIG_CFG80211_CRDA_SUPPORT
b2e1b302
LR		 15053 {
15054 .cmd = NL80211_CMD_SET_REG,
ef6243ac 15055 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 15056 .doit = nl80211_set_reg,
b2e1b302 15057 .flags = GENL_ADMIN_PERM,
5fe231e8 15058 .internal_flags = NL80211_FLAG_NEED_RTNL,
b2e1b302 15059 },
b6863036 15060#endif
b2e1b302
LR		 15061 {
15062 .cmd = NL80211_CMD_REQ_SET_REG,
ef6243ac 15063 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b2e1b302 15064 .doit = nl80211_req_set_reg,
93da9cc1 15065 .flags = GENL_ADMIN_PERM,
15066 },
1ea4ff3e
JB		 15067 {
15068 .cmd = NL80211_CMD_RELOAD_REGDB,
ef6243ac 15069 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1ea4ff3e 15070 .doit = nl80211_reload_regdb,
1ea4ff3e
JB		 15071 .flags = GENL_ADMIN_PERM,
15072 },
93da9cc1 15073 {
24bdd9f4 15074 .cmd = NL80211_CMD_GET_MESH_CONFIG,
ef6243ac 15075 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 15076 .doit = nl80211_get_mesh_config,
93da9cc1 15077 /* can be retrieved by unprivileged users */
2b5f8b0b 15078 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15079 NL80211_FLAG_NEED_RTNL,
93da9cc1 15080 },
15081 {
24bdd9f4 15082 .cmd = NL80211_CMD_SET_MESH_CONFIG,
ef6243ac 15083 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
24bdd9f4 15084 .doit = nl80211_update_mesh_config,
5617c6cd 15085 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c 15086 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15087 NL80211_FLAG_NEED_RTNL,
9aed3cc1 15088 },
2a519311
JB		 15089 {
15090 .cmd = NL80211_CMD_TRIGGER_SCAN,
ef6243ac 15091 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311 15092 .doit = nl80211_trigger_scan,
5617c6cd 15093 .flags = GENL_UNS_ADMIN_PERM,
fd014284 15094 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 15095 NL80211_FLAG_NEED_RTNL,
2a519311 15096 },
91d3ab46
VK		 15097 {
15098 .cmd = NL80211_CMD_ABORT_SCAN,
ef6243ac 15099 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
91d3ab46 15100 .doit = nl80211_abort_scan,
5617c6cd 15101 .flags = GENL_UNS_ADMIN_PERM,
91d3ab46
VK		 15102 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15103 NL80211_FLAG_NEED_RTNL,
15104 },
2a519311
JB		 15105 {
15106 .cmd = NL80211_CMD_GET_SCAN,
ef6243ac 15107 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2a519311
JB		 15108 .dumpit = nl80211_dump_scan,
15109 },
807f8a8c
LC		 15110 {
15111 .cmd = NL80211_CMD_START_SCHED_SCAN,
ef6243ac 15112 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 15113 .doit = nl80211_start_sched_scan,
5617c6cd 15114 .flags = GENL_UNS_ADMIN_PERM,
807f8a8c
LC		 15115 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15116 NL80211_FLAG_NEED_RTNL,
15117 },
15118 {
15119 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
ef6243ac 15120 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
807f8a8c 15121 .doit = nl80211_stop_sched_scan,
5617c6cd 15122 .flags = GENL_UNS_ADMIN_PERM,
807f8a8c
LC		 15123 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15124 NL80211_FLAG_NEED_RTNL,
15125 },
636a5d36
JM		 15126 {
15127 .cmd = NL80211_CMD_AUTHENTICATE,
ef6243ac 15128 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 15129 .doit = nl80211_authenticate,
5617c6cd 15130 .flags = GENL_UNS_ADMIN_PERM,
41265714 15131 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 15132 NL80211_FLAG_NEED_RTNL |
15133 NL80211_FLAG_CLEAR_SKB,
636a5d36
JM		 15134 },
15135 {
15136 .cmd = NL80211_CMD_ASSOCIATE,
ef6243ac 15137 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 15138 .doit = nl80211_associate,
5617c6cd 15139 .flags = GENL_UNS_ADMIN_PERM,
41265714 15140 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 15141 NL80211_FLAG_NEED_RTNL |
15142 NL80211_FLAG_CLEAR_SKB,
636a5d36
JM		 15143 },
15144 {
15145 .cmd = NL80211_CMD_DEAUTHENTICATE,
ef6243ac 15146 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 15147 .doit = nl80211_deauthenticate,
5617c6cd 15148 .flags = GENL_UNS_ADMIN_PERM,
41265714 15149 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15150 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 15151 },
15152 {
15153 .cmd = NL80211_CMD_DISASSOCIATE,
ef6243ac 15154 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
636a5d36 15155 .doit = nl80211_disassociate,
5617c6cd 15156 .flags = GENL_UNS_ADMIN_PERM,
41265714 15157 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15158 NL80211_FLAG_NEED_RTNL,
636a5d36 15159 },
04a773ad
JB		 15160 {
15161 .cmd = NL80211_CMD_JOIN_IBSS,
ef6243ac 15162 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 15163 .doit = nl80211_join_ibss,
5617c6cd 15164 .flags = GENL_UNS_ADMIN_PERM,
41265714 15165 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15166 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 15167 },
15168 {
15169 .cmd = NL80211_CMD_LEAVE_IBSS,
ef6243ac 15170 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04a773ad 15171 .doit = nl80211_leave_ibss,
5617c6cd 15172 .flags = GENL_UNS_ADMIN_PERM,
41265714 15173 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15174 NL80211_FLAG_NEED_RTNL,
04a773ad 15175 },
aff89a9b
JB		 15176#ifdef CONFIG_NL80211_TESTMODE
15177 {
15178 .cmd = NL80211_CMD_TESTMODE,
ef6243ac 15179 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
aff89a9b 15180 .doit = nl80211_testmode_do,
71063f0e 15181 .dumpit = nl80211_testmode_dump,
5617c6cd 15182 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 15183 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15184 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 15185 },
15186#endif
b23aa676
SO		 15187 {
15188 .cmd = NL80211_CMD_CONNECT,
ef6243ac 15189 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 15190 .doit = nl80211_connect,
5617c6cd 15191 .flags = GENL_UNS_ADMIN_PERM,
41265714 15192 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 15193 NL80211_FLAG_NEED_RTNL |
15194 NL80211_FLAG_CLEAR_SKB,
b23aa676 15195 },
088e8df8 15196 {
15197 .cmd = NL80211_CMD_UPDATE_CONNECT_PARAMS,
ef6243ac 15198 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
088e8df8 15199 .doit = nl80211_update_connect_params,
088e8df8 15200 .flags = GENL_ADMIN_PERM,
15201 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 15202 NL80211_FLAG_NEED_RTNL |
15203 NL80211_FLAG_CLEAR_SKB,
088e8df8 15204 },
b23aa676
SO		 15205 {
15206 .cmd = NL80211_CMD_DISCONNECT,
ef6243ac 15207 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
b23aa676 15208 .doit = nl80211_disconnect,
5617c6cd 15209 .flags = GENL_UNS_ADMIN_PERM,
41265714 15210 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15211 NL80211_FLAG_NEED_RTNL,
b23aa676 15212 },
463d0183
JB		 15213 {
15214 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
ef6243ac 15215 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
463d0183 15216 .doit = nl80211_wiphy_netns,
5617c6cd 15217 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 15218 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15219 NL80211_FLAG_NEED_RTNL,
463d0183 15220 },
61fa713c
HS		 15221 {
15222 .cmd = NL80211_CMD_GET_SURVEY,
ef6243ac 15223 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
61fa713c
HS		 15224 .dumpit = nl80211_dump_survey,
15225 },
67fbb16b
SO		 15226 {
15227 .cmd = NL80211_CMD_SET_PMKSA,
ef6243ac 15228 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 15229 .doit = nl80211_setdel_pmksa,
5617c6cd 15230 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 15231 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 15232 NL80211_FLAG_NEED_RTNL |
15233 NL80211_FLAG_CLEAR_SKB,
67fbb16b
SO		 15234 },
15235 {
15236 .cmd = NL80211_CMD_DEL_PMKSA,
ef6243ac 15237 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 15238 .doit = nl80211_setdel_pmksa,
5617c6cd 15239 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 15240 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15241 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 15242 },
15243 {
15244 .cmd = NL80211_CMD_FLUSH_PMKSA,
ef6243ac 15245 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
67fbb16b 15246 .doit = nl80211_flush_pmksa,
5617c6cd 15247 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 15248 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 15249 NL80211_FLAG_NEED_RTNL,
67fbb16b 15250 },
9588bbd5
JM		 15251 {
15252 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
ef6243ac 15253 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 15254 .doit = nl80211_remain_on_channel,
5617c6cd 15255 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 15256 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 15257 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 15258 },
15259 {
15260 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
ef6243ac 15261 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9588bbd5 15262 .doit = nl80211_cancel_remain_on_channel,
5617c6cd 15263 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 15264 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 15265 NL80211_FLAG_NEED_RTNL,
9588bbd5 15266 },
13ae75b1
JM		 15267 {
15268 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
ef6243ac 15269 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
13ae75b1 15270 .doit = nl80211_set_tx_bitrate_mask,
5617c6cd 15271 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 15272 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15273 NL80211_FLAG_NEED_RTNL,
13ae75b1 15274 },
026331c4 15275 {
2e161f78 15276 .cmd = NL80211_CMD_REGISTER_FRAME,
ef6243ac 15277 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 15278 .doit = nl80211_register_mgmt,
5617c6cd 15279 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 15280 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 15281 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 15282 },
15283 {
2e161f78 15284 .cmd = NL80211_CMD_FRAME,
ef6243ac 15285 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2e161f78 15286 .doit = nl80211_tx_mgmt,
5617c6cd 15287 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 15288 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
f7ca38df
JB		 15289 NL80211_FLAG_NEED_RTNL,
15290 },
15291 {
15292 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
ef6243ac 15293 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f7ca38df 15294 .doit = nl80211_tx_mgmt_cancel_wait,
5617c6cd 15295 .flags = GENL_UNS_ADMIN_PERM,
71bbc994 15296 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 15297 NL80211_FLAG_NEED_RTNL,
026331c4 15298 },
ffb9eb3d
KV		 15299 {
15300 .cmd = NL80211_CMD_SET_POWER_SAVE,
ef6243ac 15301 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 15302 .doit = nl80211_set_power_save,
5617c6cd 15303 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 15304 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15305 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 15306 },
15307 {
15308 .cmd = NL80211_CMD_GET_POWER_SAVE,
ef6243ac 15309 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ffb9eb3d 15310 .doit = nl80211_get_power_save,
ffb9eb3d 15311 /* can be retrieved by unprivileged users */
4c476991
JB		 15312 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15313 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 15314 },
d6dc1a38
JO		 15315 {
15316 .cmd = NL80211_CMD_SET_CQM,
ef6243ac 15317 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
d6dc1a38 15318 .doit = nl80211_set_cqm,
5617c6cd 15319 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 15320 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15321 NL80211_FLAG_NEED_RTNL,
d6dc1a38 15322 },
f444de05
JB		 15323 {
15324 .cmd = NL80211_CMD_SET_CHANNEL,
ef6243ac 15325 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f444de05 15326 .doit = nl80211_set_channel,
5617c6cd 15327 .flags = GENL_UNS_ADMIN_PERM,
4c476991
JB		 15328 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15329 NL80211_FLAG_NEED_RTNL,
f444de05 15330 },
29cbe68c
JB		 15331 {
15332 .cmd = NL80211_CMD_JOIN_MESH,
ef6243ac 15333 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 15334 .doit = nl80211_join_mesh,
5617c6cd 15335 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c
JB		 15336 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15337 NL80211_FLAG_NEED_RTNL,
15338 },
15339 {
15340 .cmd = NL80211_CMD_LEAVE_MESH,
ef6243ac 15341 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
29cbe68c 15342 .doit = nl80211_leave_mesh,
5617c6cd 15343 .flags = GENL_UNS_ADMIN_PERM,
29cbe68c
JB		 15344 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15345 NL80211_FLAG_NEED_RTNL,
15346 },
6e0bd6c3
RL		 15347 {
15348 .cmd = NL80211_CMD_JOIN_OCB,
ef6243ac 15349 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 15350 .doit = nl80211_join_ocb,
5617c6cd 15351 .flags = GENL_UNS_ADMIN_PERM,
6e0bd6c3
RL		 15352 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15353 NL80211_FLAG_NEED_RTNL,
15354 },
15355 {
15356 .cmd = NL80211_CMD_LEAVE_OCB,
ef6243ac 15357 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
6e0bd6c3 15358 .doit = nl80211_leave_ocb,
5617c6cd 15359 .flags = GENL_UNS_ADMIN_PERM,
6e0bd6c3
RL		 15360 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15361 NL80211_FLAG_NEED_RTNL,
15362 },
dfb89c56 15363#ifdef CONFIG_PM
ff1b6e69
JB		 15364 {
15365 .cmd = NL80211_CMD_GET_WOWLAN,
ef6243ac 15366 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 15367 .doit = nl80211_get_wowlan,
ff1b6e69
JB		 15368 /* can be retrieved by unprivileged users */
15369 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15370 NL80211_FLAG_NEED_RTNL,
15371 },
15372 {
15373 .cmd = NL80211_CMD_SET_WOWLAN,
ef6243ac 15374 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ff1b6e69 15375 .doit = nl80211_set_wowlan,
5617c6cd 15376 .flags = GENL_UNS_ADMIN_PERM,
ff1b6e69
JB		 15377 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15378 NL80211_FLAG_NEED_RTNL,
15379 },
dfb89c56 15380#endif
e5497d76
JB		 15381 {
15382 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
ef6243ac 15383 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
e5497d76 15384 .doit = nl80211_set_rekey_data,
5617c6cd 15385 .flags = GENL_UNS_ADMIN_PERM,
e5497d76 15386 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5393b917
JB		 15387 NL80211_FLAG_NEED_RTNL |
15388 NL80211_FLAG_CLEAR_SKB,
e5497d76 15389 },
109086ce
AN		 15390 {
15391 .cmd = NL80211_CMD_TDLS_MGMT,
ef6243ac 15392 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 15393 .doit = nl80211_tdls_mgmt,
5617c6cd 15394 .flags = GENL_UNS_ADMIN_PERM,
109086ce
AN		 15395 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15396 NL80211_FLAG_NEED_RTNL,
15397 },
15398 {
15399 .cmd = NL80211_CMD_TDLS_OPER,
ef6243ac 15400 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
109086ce 15401 .doit = nl80211_tdls_oper,
5617c6cd 15402 .flags = GENL_UNS_ADMIN_PERM,
109086ce
AN		 15403 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15404 NL80211_FLAG_NEED_RTNL,
15405 },
28946da7
JB		 15406 {
15407 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
ef6243ac 15408 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
28946da7 15409 .doit = nl80211_register_unexpected_frame,
5617c6cd 15410 .flags = GENL_UNS_ADMIN_PERM,
28946da7
JB		 15411 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15412 NL80211_FLAG_NEED_RTNL,
15413 },
7f6cf311
JB		 15414 {
15415 .cmd = NL80211_CMD_PROBE_CLIENT,
ef6243ac 15416 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
7f6cf311 15417 .doit = nl80211_probe_client,
5617c6cd 15418 .flags = GENL_UNS_ADMIN_PERM,
2b5f8b0b 15419 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7f6cf311
JB		 15420 NL80211_FLAG_NEED_RTNL,
15421 },
5e760230
JB		 15422 {
15423 .cmd = NL80211_CMD_REGISTER_BEACONS,
ef6243ac 15424 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5e760230 15425 .doit = nl80211_register_beacons,
5617c6cd 15426 .flags = GENL_UNS_ADMIN_PERM,
5e760230
JB		 15427 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15428 NL80211_FLAG_NEED_RTNL,
15429 },
1d9d9213
SW		 15430 {
15431 .cmd = NL80211_CMD_SET_NOACK_MAP,
ef6243ac 15432 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1d9d9213 15433 .doit = nl80211_set_noack_map,
5617c6cd 15434 .flags = GENL_UNS_ADMIN_PERM,
1d9d9213
SW		 15435 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15436 NL80211_FLAG_NEED_RTNL,
15437 },
98104fde
JB		 15438 {
15439 .cmd = NL80211_CMD_START_P2P_DEVICE,
ef6243ac 15440 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 15441 .doit = nl80211_start_p2p_device,
5617c6cd 15442 .flags = GENL_UNS_ADMIN_PERM,
98104fde
JB		 15443 .internal_flags = NL80211_FLAG_NEED_WDEV |
15444 NL80211_FLAG_NEED_RTNL,
15445 },
15446 {
15447 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
ef6243ac 15448 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
98104fde 15449 .doit = nl80211_stop_p2p_device,
5617c6cd 15450 .flags = GENL_UNS_ADMIN_PERM,
98104fde
JB		 15451 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15452 NL80211_FLAG_NEED_RTNL,
cb3b7d87
AB		 15453 },
15454 {
15455 .cmd = NL80211_CMD_START_NAN,
ef6243ac 15456 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 15457 .doit = nl80211_start_nan,
cb3b7d87
AB		 15458 .flags = GENL_ADMIN_PERM,
15459 .internal_flags = NL80211_FLAG_NEED_WDEV |
15460 NL80211_FLAG_NEED_RTNL,
15461 },
15462 {
15463 .cmd = NL80211_CMD_STOP_NAN,
ef6243ac 15464 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
cb3b7d87 15465 .doit = nl80211_stop_nan,
cb3b7d87
AB		 15466 .flags = GENL_ADMIN_PERM,
15467 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15468 NL80211_FLAG_NEED_RTNL,
a442b761
AB		 15469 },
15470 {
15471 .cmd = NL80211_CMD_ADD_NAN_FUNCTION,
ef6243ac 15472 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 15473 .doit = nl80211_nan_add_func,
a442b761
AB		 15474 .flags = GENL_ADMIN_PERM,
15475 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15476 NL80211_FLAG_NEED_RTNL,
15477 },
15478 {
15479 .cmd = NL80211_CMD_DEL_NAN_FUNCTION,
ef6243ac 15480 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a442b761 15481 .doit = nl80211_nan_del_func,
a442b761
AB		 15482 .flags = GENL_ADMIN_PERM,
15483 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15484 NL80211_FLAG_NEED_RTNL,
a5a9dcf2
AB		 15485 },
15486 {
15487 .cmd = NL80211_CMD_CHANGE_NAN_CONFIG,
ef6243ac 15488 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
a5a9dcf2 15489 .doit = nl80211_nan_change_config,
a5a9dcf2
AB		 15490 .flags = GENL_ADMIN_PERM,
15491 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15492 NL80211_FLAG_NEED_RTNL,
98104fde 15493 },
f4e583c8
AQ		 15494 {
15495 .cmd = NL80211_CMD_SET_MCAST_RATE,
ef6243ac 15496 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
f4e583c8 15497 .doit = nl80211_set_mcast_rate,
5617c6cd 15498 .flags = GENL_UNS_ADMIN_PERM,
77765eaf
VT		 15499 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15500 NL80211_FLAG_NEED_RTNL,
15501 },
15502 {
15503 .cmd = NL80211_CMD_SET_MAC_ACL,
ef6243ac 15504 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
77765eaf 15505 .doit = nl80211_set_mac_acl,
5617c6cd 15506 .flags = GENL_UNS_ADMIN_PERM,
f4e583c8
AQ		 15507 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15508 NL80211_FLAG_NEED_RTNL,
15509 },
04f39047
SW		 15510 {
15511 .cmd = NL80211_CMD_RADAR_DETECT,
ef6243ac 15512 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
04f39047 15513 .doit = nl80211_start_radar_detection,
5617c6cd 15514 .flags = GENL_UNS_ADMIN_PERM,
04f39047
SW		 15515 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15516 NL80211_FLAG_NEED_RTNL,
15517 },
3713b4e3
JB		 15518 {
15519 .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
ef6243ac 15520 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3713b4e3 15521 .doit = nl80211_get_protocol_features,
3713b4e3 15522 },
355199e0
JM		 15523 {
15524 .cmd = NL80211_CMD_UPDATE_FT_IES,
ef6243ac 15525 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
355199e0 15526 .doit = nl80211_update_ft_ies,
5617c6cd 15527 .flags = GENL_UNS_ADMIN_PERM,
355199e0
JM		 15528 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15529 NL80211_FLAG_NEED_RTNL,
15530 },
5de17984
AS		 15531 {
15532 .cmd = NL80211_CMD_CRIT_PROTOCOL_START,
ef6243ac 15533 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 15534 .doit = nl80211_crit_protocol_start,
5617c6cd 15535 .flags = GENL_UNS_ADMIN_PERM,
5de17984
AS		 15536 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15537 NL80211_FLAG_NEED_RTNL,
15538 },
15539 {
15540 .cmd = NL80211_CMD_CRIT_PROTOCOL_STOP,
ef6243ac 15541 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
5de17984 15542 .doit = nl80211_crit_protocol_stop,
5617c6cd 15543 .flags = GENL_UNS_ADMIN_PERM,
5de17984
AS		 15544 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15545 NL80211_FLAG_NEED_RTNL,
be29b99a
AK		 15546 },
15547 {
15548 .cmd = NL80211_CMD_GET_COALESCE,
ef6243ac 15549 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 15550 .doit = nl80211_get_coalesce,
be29b99a
AK		 15551 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15552 NL80211_FLAG_NEED_RTNL,
15553 },
15554 {
15555 .cmd = NL80211_CMD_SET_COALESCE,
ef6243ac 15556 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
be29b99a 15557 .doit = nl80211_set_coalesce,
5617c6cd 15558 .flags = GENL_UNS_ADMIN_PERM,
be29b99a
AK		 15559 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15560 NL80211_FLAG_NEED_RTNL,
16ef1fe2
SW		 15561 },
15562 {
15563 .cmd = NL80211_CMD_CHANNEL_SWITCH,
ef6243ac 15564 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
16ef1fe2 15565 .doit = nl80211_channel_switch,
5617c6cd 15566 .flags = GENL_UNS_ADMIN_PERM,
16ef1fe2
SW		 15567 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15568 NL80211_FLAG_NEED_RTNL,
15569 },
ad7e718c
JB		 15570 {
15571 .cmd = NL80211_CMD_VENDOR,
ef6243ac 15572 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ad7e718c 15573 .doit = nl80211_vendor_cmd,
7bdbe400 15574 .dumpit = nl80211_vendor_cmd_dump,
5617c6cd 15575 .flags = GENL_UNS_ADMIN_PERM,
ad7e718c 15576 .internal_flags = NL80211_FLAG_NEED_WIPHY |
d6db02a8
SD		 15577 NL80211_FLAG_NEED_RTNL |
15578 NL80211_FLAG_CLEAR_SKB,
ad7e718c 15579 },
fa9ffc74
KP		 15580 {
15581 .cmd = NL80211_CMD_SET_QOS_MAP,
ef6243ac 15582 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
fa9ffc74 15583 .doit = nl80211_set_qos_map,
5617c6cd 15584 .flags = GENL_UNS_ADMIN_PERM,
fa9ffc74
KP		 15585 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15586 NL80211_FLAG_NEED_RTNL,
15587 },
960d01ac
JB		 15588 {
15589 .cmd = NL80211_CMD_ADD_TX_TS,
ef6243ac 15590 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 15591 .doit = nl80211_add_tx_ts,
5617c6cd 15592 .flags = GENL_UNS_ADMIN_PERM,
960d01ac
JB		 15593 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15594 NL80211_FLAG_NEED_RTNL,
15595 },
15596 {
15597 .cmd = NL80211_CMD_DEL_TX_TS,
ef6243ac 15598 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
960d01ac 15599 .doit = nl80211_del_tx_ts,
5617c6cd 15600 .flags = GENL_UNS_ADMIN_PERM,
960d01ac
JB		 15601 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15602 NL80211_FLAG_NEED_RTNL,
15603 },
1057d35e
AN		 15604 {
15605 .cmd = NL80211_CMD_TDLS_CHANNEL_SWITCH,
ef6243ac 15606 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 15607 .doit = nl80211_tdls_channel_switch,
5617c6cd 15608 .flags = GENL_UNS_ADMIN_PERM,
1057d35e
AN		 15609 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15610 NL80211_FLAG_NEED_RTNL,
15611 },
15612 {
15613 .cmd = NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH,
ef6243ac 15614 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1057d35e 15615 .doit = nl80211_tdls_cancel_channel_switch,
5617c6cd 15616 .flags = GENL_UNS_ADMIN_PERM,
1057d35e
AN		 15617 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15618 NL80211_FLAG_NEED_RTNL,
15619 },
ce0ce13a
MB		 15620 {
15621 .cmd = NL80211_CMD_SET_MULTICAST_TO_UNICAST,
ef6243ac 15622 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
ce0ce13a 15623 .doit = nl80211_set_multicast_to_unicast,
ce0ce13a
MB		 15624 .flags = GENL_UNS_ADMIN_PERM,
15625 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15626 NL80211_FLAG_NEED_RTNL,
15627 },
3a00df57
AS		 15628 {
15629 .cmd = NL80211_CMD_SET_PMK,
ef6243ac 15630 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 15631 .doit = nl80211_set_pmk,
3a00df57 15632 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
d6db02a8
SD		 15633 NL80211_FLAG_NEED_RTNL |
15634 NL80211_FLAG_CLEAR_SKB,
3a00df57
AS		 15635 },
15636 {
15637 .cmd = NL80211_CMD_DEL_PMK,
ef6243ac 15638 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
3a00df57 15639 .doit = nl80211_del_pmk,
3a00df57
AS		 15640 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15641 NL80211_FLAG_NEED_RTNL,
15642 },
40cbfa90
SD		 15643 {
15644 .cmd = NL80211_CMD_EXTERNAL_AUTH,
ef6243ac 15645 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
40cbfa90 15646 .doit = nl80211_external_auth,
40cbfa90
SD		 15647 .flags = GENL_ADMIN_PERM,
15648 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15649 NL80211_FLAG_NEED_RTNL,
15650 },
2576a9ac
DK		 15651 {
15652 .cmd = NL80211_CMD_CONTROL_PORT_FRAME,
ef6243ac 15653 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
2576a9ac 15654 .doit = nl80211_tx_control_port,
2576a9ac
DK		 15655 .flags = GENL_UNS_ADMIN_PERM,
15656 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15657 NL80211_FLAG_NEED_RTNL,
15658 },
81e54d08
PKC		 15659 {
15660 .cmd = NL80211_CMD_GET_FTM_RESPONDER_STATS,
ef6243ac 15661 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
81e54d08 15662 .doit = nl80211_get_ftm_responder_stats,
81e54d08
PKC		 15663 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15664 NL80211_FLAG_NEED_RTNL,
15665 },
9bb7e0f2
JB		 15666 {
15667 .cmd = NL80211_CMD_PEER_MEASUREMENT_START,
ef6243ac 15668 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
9bb7e0f2 15669 .doit = nl80211_pmsr_start,
9bb7e0f2
JB		 15670 .flags = GENL_UNS_ADMIN_PERM,
15671 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
15672 NL80211_FLAG_NEED_RTNL,
15673 },
30c63115
S		 15674 {
15675 .cmd = NL80211_CMD_NOTIFY_RADAR,
ef6243ac 15676 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
30c63115 15677 .doit = nl80211_notify_radar_detection,
30c63115
S		 15678 .flags = GENL_UNS_ADMIN_PERM,
15679 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15680 NL80211_FLAG_NEED_RTNL,
15681 },
cb74e977
SD		 15682 {
15683 .cmd = NL80211_CMD_UPDATE_OWE_INFO,
15684 .doit = nl80211_update_owe_info,
15685 .flags = GENL_ADMIN_PERM,
5ab92e7f
RM		 15686 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15687 NL80211_FLAG_NEED_RTNL,
15688 },
15689 {
15690 .cmd = NL80211_CMD_PROBE_MESH_LINK,
15691 .doit = nl80211_probe_mesh_link,
15692 .flags = GENL_UNS_ADMIN_PERM,
cb74e977
SD		 15693 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
15694 NL80211_FLAG_NEED_RTNL,
15695 },
77f576de
T		 15696 {
15697 .cmd = NL80211_CMD_SET_TID_CONFIG,
15698 .doit = nl80211_set_tid_config,
15699 .flags = GENL_UNS_ADMIN_PERM,
15700 .internal_flags = NL80211_FLAG_NEED_NETDEV |
15701 NL80211_FLAG_NEED_RTNL,
15702 },
6bdb68ce
CH		 15703 {
15704 .cmd = NL80211_CMD_SET_SAR_SPECS,
15705 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
15706 .doit = nl80211_set_sar_specs,
15707 .flags = GENL_UNS_ADMIN_PERM,
15708 .internal_flags = NL80211_FLAG_NEED_WIPHY |
15709 NL80211_FLAG_NEED_RTNL,
15710 },
55682965 15711};
9588bbd5 15712
56989f6d 15713static struct genl_family nl80211_fam __ro_after_init = {
489111e5
JB		 15714 .name = NL80211_GENL_NAME, /* have users key off the name instead */
15715 .hdrsize = 0, /* no private header */
15716 .version = 1, /* no particular meaning now */
15717 .maxattr = NL80211_ATTR_MAX,
3b0f31f2 15718 .policy = nl80211_policy,
489111e5
JB		 15719 .netnsok = true,
15720 .pre_doit = nl80211_pre_doit,
15721 .post_doit = nl80211_post_doit,
15722 .module = THIS_MODULE,
15723 .ops = nl80211_ops,
15724 .n_ops = ARRAY_SIZE(nl80211_ops),
66a9b928
JK		 15725 .small_ops = nl80211_small_ops,
15726 .n_small_ops = ARRAY_SIZE(nl80211_small_ops),
489111e5
JB		 15727 .mcgrps = nl80211_mcgrps,
15728 .n_mcgrps = ARRAY_SIZE(nl80211_mcgrps),
50508d94 15729 .parallel_ops = true,
489111e5
JB		 15730};
15731
55682965
JB		 15732/* notification functions */
15733
3bb20556
JB		 15734void nl80211_notify_wiphy(struct cfg80211_registered_device *rdev,
15735 enum nl80211_commands cmd)
55682965
JB		 15736{
15737 struct sk_buff *msg;
86e8cf98 15738 struct nl80211_dump_wiphy_state state = {};
55682965 15739
3bb20556
JB		 15740 WARN_ON(cmd != NL80211_CMD_NEW_WIPHY &&
15741 cmd != NL80211_CMD_DEL_WIPHY);
15742
fd2120ca 15743 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 15744 if (!msg)
15745 return;
15746
3bb20556 15747 if (nl80211_send_wiphy(rdev, cmd, msg, 0, 0, 0, &state) < 0) {
55682965
JB		 15748 nlmsg_free(msg);
15749 return;
15750 }
15751
68eb5503 15752 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15753 NL80211_MCGRP_CONFIG, GFP_KERNEL);
55682965
JB		 15754}
15755
896ff063
DK		 15756void nl80211_notify_iface(struct cfg80211_registered_device *rdev,
15757 struct wireless_dev *wdev,
15758 enum nl80211_commands cmd)
15759{
15760 struct sk_buff *msg;
15761
896ff063
DK		 15762 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
15763 if (!msg)
15764 return;
15765
3d1a5bbf 15766 if (nl80211_send_iface(msg, 0, 0, 0, rdev, wdev, cmd) < 0) {
896ff063
DK		 15767 nlmsg_free(msg);
15768 return;
15769 }
15770
15771 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
15772 NL80211_MCGRP_CONFIG, GFP_KERNEL);
15773}
15774
362a415d
JB		 15775static int nl80211_add_scan_req(struct sk_buff *msg,
15776 struct cfg80211_registered_device *rdev)
15777{
15778 struct cfg80211_scan_request *req = rdev->scan_req;
15779 struct nlattr *nest;
15780 int i;
c8cb5b85 15781 struct cfg80211_scan_info *info;
362a415d
JB		 15782
15783 if (WARN_ON(!req))
15784 return 0;
15785
ae0be8de 15786 nest = nla_nest_start_noflag(msg, NL80211_ATTR_SCAN_SSIDS);
362a415d
JB		 15787 if (!nest)
15788 goto nla_put_failure;
9360ffd1
DM		 15789 for (i = 0; i < req->n_ssids; i++) {
15790 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
15791 goto nla_put_failure;
15792 }
362a415d
JB		 15793 nla_nest_end(msg, nest);
15794
2032f3b2
TP		 15795 if (req->flags & NL80211_SCAN_FLAG_FREQ_KHZ) {
15796 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQ_KHZ);
15797 if (!nest)
15798 goto nla_put_failure;
15799 for (i = 0; i < req->n_channels; i++) {
15800 if (nla_put_u32(msg, i,
15801 ieee80211_channel_to_khz(req->channels[i])))
15802 goto nla_put_failure;
15803 }
15804 nla_nest_end(msg, nest);
15805 } else {
15806 nest = nla_nest_start_noflag(msg,
15807 NL80211_ATTR_SCAN_FREQUENCIES);
15808 if (!nest)
9360ffd1 15809 goto nla_put_failure;
2032f3b2
TP		 15810 for (i = 0; i < req->n_channels; i++) {
15811 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
15812 goto nla_put_failure;
15813 }
15814 nla_nest_end(msg, nest);
9360ffd1 15815 }
362a415d 15816
9360ffd1
DM		 15817 if (req->ie &&
15818 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
15819 goto nla_put_failure;
362a415d 15820
ae917c9f
JB		 15821 if (req->flags &&
15822 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags))
15823 goto nla_put_failure;
ed473771 15824
c8cb5b85
TM		 15825 info = rdev->int_scan_req ? &rdev->int_scan_req->info :
15826 &rdev->scan_req->info;
15827 if (info->scan_start_tsf &&
1d76250b 15828 (nla_put_u64_64bit(msg, NL80211_ATTR_SCAN_START_TIME_TSF,
c8cb5b85 15829 info->scan_start_tsf, NL80211_BSS_PAD) ||
1d76250b 15830 nla_put(msg, NL80211_ATTR_SCAN_START_TIME_TSF_BSSID, ETH_ALEN,
c8cb5b85 15831 info->tsf_bssid)))
1d76250b
AS		 15832 goto nla_put_failure;
15833
362a415d
JB		 15834 return 0;
15835 nla_put_failure:
15836 return -ENOBUFS;
15837}
15838
505a2e88 15839static int nl80211_prep_scan_msg(struct sk_buff *msg,
a538e2d5 15840 struct cfg80211_registered_device *rdev,
fd014284 15841 struct wireless_dev *wdev,
15e47304 15842 u32 portid, u32 seq, int flags,
a538e2d5 15843 u32 cmd)
2a519311
JB		 15844{
15845 void *hdr;
15846
15e47304 15847 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 15848 if (!hdr)
15849 return -1;
15850
9360ffd1 15851 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 15852 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
15853 wdev->netdev->ifindex)) ||
2dad624e
ND		 15854 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
15855 NL80211_ATTR_PAD))
9360ffd1 15856 goto nla_put_failure;
2a519311 15857
362a415d
JB		 15858 /* ignore errors and send incomplete event anyway */
15859 nl80211_add_scan_req(msg, rdev);
2a519311 15860
053c095a
JB		 15861 genlmsg_end(msg, hdr);
15862 return 0;
2a519311
JB		 15863
15864 nla_put_failure:
15865 genlmsg_cancel(msg, hdr);
15866 return -EMSGSIZE;
15867}
15868
807f8a8c 15869static int
505a2e88 15870nl80211_prep_sched_scan_msg(struct sk_buff *msg,
96b08fd6 15871 struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 15872{
15873 void *hdr;
15874
96b08fd6 15875 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
807f8a8c
LC		 15876 if (!hdr)
15877 return -1;
15878
96b08fd6
AVS		 15879 if (nla_put_u32(msg, NL80211_ATTR_WIPHY,
15880 wiphy_to_rdev(req->wiphy)->wiphy_idx) ||
15881 nla_put_u32(msg, NL80211_ATTR_IFINDEX, req->dev->ifindex) ||
15882 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, req->reqid,
15883 NL80211_ATTR_PAD))
9360ffd1 15884 goto nla_put_failure;
807f8a8c 15885
053c095a
JB		 15886 genlmsg_end(msg, hdr);
15887 return 0;
807f8a8c
LC		 15888
15889 nla_put_failure:
15890 genlmsg_cancel(msg, hdr);
15891 return -EMSGSIZE;
15892}
15893
a538e2d5 15894void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 15895 struct wireless_dev *wdev)
a538e2d5
JB		 15896{
15897 struct sk_buff *msg;
15898
58050fce 15899 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 15900 if (!msg)
15901 return;
15902
505a2e88 15903 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 15904 NL80211_CMD_TRIGGER_SCAN) < 0) {
15905 nlmsg_free(msg);
15906 return;
15907 }
15908
68eb5503 15909 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15910 NL80211_MCGRP_SCAN, GFP_KERNEL);
a538e2d5
JB		 15911}
15912
f9d15d16
JB		 15913struct sk_buff *nl80211_build_scan_msg(struct cfg80211_registered_device *rdev,
15914 struct wireless_dev *wdev, bool aborted)
2a519311
JB		 15915{
15916 struct sk_buff *msg;
15917
fd2120ca 15918 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311 15919 if (!msg)
f9d15d16 15920 return NULL;
2a519311 15921
505a2e88 15922 if (nl80211_prep_scan_msg(msg, rdev, wdev, 0, 0, 0,
f9d15d16
JB		 15923 aborted ? NL80211_CMD_SCAN_ABORTED :
15924 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311 15925 nlmsg_free(msg);
f9d15d16 15926 return NULL;
2a519311
JB		 15927 }
15928
f9d15d16 15929 return msg;
2a519311
JB		 15930}
15931
505a2e88
AVS		 15932/* send message created by nl80211_build_scan_msg() */
15933void nl80211_send_scan_msg(struct cfg80211_registered_device *rdev,
15934 struct sk_buff *msg)
807f8a8c 15935{
807f8a8c
LC		 15936 if (!msg)
15937 return;
15938
68eb5503 15939 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 15940 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 15941}
15942
96b08fd6 15943void nl80211_send_sched_scan(struct cfg80211_sched_scan_request *req, u32 cmd)
807f8a8c
LC		 15944{
15945 struct sk_buff *msg;
15946
58050fce 15947 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 15948 if (!msg)
15949 return;
15950
96b08fd6 15951 if (nl80211_prep_sched_scan_msg(msg, req, cmd) < 0) {
807f8a8c
LC		 15952 nlmsg_free(msg);
15953 return;
15954 }
15955
96b08fd6 15956 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(req->wiphy), msg, 0,
2a94fe48 15957 NL80211_MCGRP_SCAN, GFP_KERNEL);
807f8a8c
LC		 15958}
15959
b0d7aa59
JD		 15960static bool nl80211_reg_change_event_fill(struct sk_buff *msg,
15961 struct regulatory_request *request)
73d54c9e 15962{
73d54c9e 15963 /* Userspace can always count this one always being set */
9360ffd1
DM		 15964 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
15965 goto nla_put_failure;
15966
15967 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
15968 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15969 NL80211_REGDOM_TYPE_WORLD))
15970 goto nla_put_failure;
15971 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
15972 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15973 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
15974 goto nla_put_failure;
15975 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
15976 request->intersect) {
15977 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15978 NL80211_REGDOM_TYPE_INTERSECTION))
15979 goto nla_put_failure;
15980 } else {
15981 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
15982 NL80211_REGDOM_TYPE_COUNTRY) ||
15983 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
15984 request->alpha2))
15985 goto nla_put_failure;
15986 }
15987
ad30ca2c
AN		 15988 if (request->wiphy_idx != WIPHY_IDX_INVALID) {
15989 struct wiphy *wiphy = wiphy_idx_to_wiphy(request->wiphy_idx);
15990
15991 if (wiphy &&
15992 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
15993 goto nla_put_failure;
1bdd716c
AN		 15994
15995 if (wiphy &&
15996 wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
15997 nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
15998 goto nla_put_failure;
ad30ca2c 15999 }
73d54c9e 16000
b0d7aa59
JD		 16001 return true;
16002
16003nla_put_failure:
16004 return false;
16005}
16006
16007/*
16008 * This can happen on global regulatory changes or device specific settings
16009 * based on custom regulatory domains.
16010 */
16011void nl80211_common_reg_change_event(enum nl80211_commands cmd_id,
16012 struct regulatory_request *request)
16013{
16014 struct sk_buff *msg;
16015 void *hdr;
16016
16017 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
16018 if (!msg)
16019 return;
16020
16021 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd_id);
24f6d765 16022 if (!hdr)
16023 goto nla_put_failure;
b0d7aa59 16024
24f6d765 16025 if (!nl80211_reg_change_event_fill(msg, request))
b0d7aa59
JD		 16026 goto nla_put_failure;
16027
3b7b72ee 16028 genlmsg_end(msg, hdr);
73d54c9e 16029
bc43b28c 16030 rcu_read_lock();
68eb5503 16031 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 16032 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
bc43b28c 16033 rcu_read_unlock();
73d54c9e
LR		 16034
16035 return;
16036
16037nla_put_failure:
73d54c9e
LR		 16038 nlmsg_free(msg);
16039}
16040
6039f6d2
JM		 16041static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
16042 struct net_device *netdev,
16043 const u8 *buf, size_t len,
b0b6aa2c 16044 enum nl80211_commands cmd, gfp_t gfp,
4d9ec73d 16045 int uapsd_queues, const u8 *req_ies,
3bb02143 16046 size_t req_ies_len, bool reconnect)
6039f6d2
JM		 16047{
16048 struct sk_buff *msg;
16049 void *hdr;
16050
4d9ec73d 16051 msg = nlmsg_new(100 + len + req_ies_len, gfp);
6039f6d2
JM		 16052 if (!msg)
16053 return;
16054
16055 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
16056 if (!hdr) {
16057 nlmsg_free(msg);
16058 return;
16059 }
16060
9360ffd1
DM		 16061 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16062 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
4d9ec73d
JM		 16063 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
16064 (req_ies &&
16065 nla_put(msg, NL80211_ATTR_REQ_IE, req_ies_len, req_ies)))
9360ffd1 16066 goto nla_put_failure;
6039f6d2 16067
3bb02143
JB		 16068 if (reconnect && nla_put_flag(msg, NL80211_ATTR_RECONNECT_REQUESTED))
16069 goto nla_put_failure;
16070
b0b6aa2c
EP		 16071 if (uapsd_queues >= 0) {
16072 struct nlattr *nla_wmm =
ae0be8de 16073 nla_nest_start_noflag(msg, NL80211_ATTR_STA_WME);
b0b6aa2c
EP		 16074 if (!nla_wmm)
16075 goto nla_put_failure;
16076
16077 if (nla_put_u8(msg, NL80211_STA_WME_UAPSD_QUEUES,
16078 uapsd_queues))
16079 goto nla_put_failure;
16080
16081 nla_nest_end(msg, nla_wmm);
16082 }
16083
3b7b72ee 16084 genlmsg_end(msg, hdr);
6039f6d2 16085
68eb5503 16086 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16087 NL80211_MCGRP_MLME, gfp);
6039f6d2
JM		 16088 return;
16089
16090 nla_put_failure:
6039f6d2
JM		 16091 nlmsg_free(msg);
16092}
16093
16094void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 16095 struct net_device *netdev, const u8 *buf,
16096 size_t len, gfp_t gfp)
6039f6d2
JM		 16097{
16098 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 16099 NL80211_CMD_AUTHENTICATE, gfp, -1, NULL, 0,
16100 false);
6039f6d2
JM		 16101}
16102
16103void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
16104 struct net_device *netdev, const u8 *buf,
4d9ec73d
JM		 16105 size_t len, gfp_t gfp, int uapsd_queues,
16106 const u8 *req_ies, size_t req_ies_len)
6039f6d2 16107{
e6d6e342 16108 nl80211_send_mlme_event(rdev, netdev, buf, len,
4d9ec73d 16109 NL80211_CMD_ASSOCIATE, gfp, uapsd_queues,
3bb02143 16110 req_ies, req_ies_len, false);
6039f6d2
JM		 16111}
16112
53b46b84 16113void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342 16114 struct net_device *netdev, const u8 *buf,
3bb02143 16115 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 16116{
16117 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 16118 NL80211_CMD_DEAUTHENTICATE, gfp, -1, NULL, 0,
16119 reconnect);
6039f6d2
JM		 16120}
16121
53b46b84
JM		 16122void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
16123 struct net_device *netdev, const u8 *buf,
3bb02143 16124 size_t len, bool reconnect, gfp_t gfp)
6039f6d2
JM		 16125{
16126 nl80211_send_mlme_event(rdev, netdev, buf, len,
3bb02143
JB		 16127 NL80211_CMD_DISASSOCIATE, gfp, -1, NULL, 0,
16128 reconnect);
6039f6d2
JM		 16129}
16130
6ff57cf8
JB		 16131void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev, const u8 *buf,
16132 size_t len)
cf4e594e 16133{
947add36
JB		 16134 struct wireless_dev *wdev = dev->ieee80211_ptr;
16135 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16136 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
6ff57cf8
JB		 16137 const struct ieee80211_mgmt *mgmt = (void *)buf;
16138 u32 cmd;
947add36 16139
6ff57cf8
JB		 16140 if (WARN_ON(len < 2))
16141 return;
cf4e594e 16142
4d797fce 16143 if (ieee80211_is_deauth(mgmt->frame_control)) {
6ff57cf8 16144 cmd = NL80211_CMD_UNPROT_DEAUTHENTICATE;
4d797fce 16145 } else if (ieee80211_is_disassoc(mgmt->frame_control)) {
6ff57cf8 16146 cmd = NL80211_CMD_UNPROT_DISASSOCIATE;
4d797fce
JM		 16147 } else if (ieee80211_is_beacon(mgmt->frame_control)) {
16148 if (wdev->unprot_beacon_reported &&
16149 elapsed_jiffies_msecs(wdev->unprot_beacon_reported) < 10000)
16150 return;
16151 cmd = NL80211_CMD_UNPROT_BEACON;
16152 wdev->unprot_beacon_reported = jiffies;
16153 } else {
16154 return;
16155 }
947add36 16156
6ff57cf8 16157 trace_cfg80211_rx_unprot_mlme_mgmt(dev, buf, len);
4d9ec73d 16158 nl80211_send_mlme_event(rdev, dev, buf, len, cmd, GFP_ATOMIC, -1,
3bb02143 16159 NULL, 0, false);
cf4e594e 16160}
6ff57cf8 16161EXPORT_SYMBOL(cfg80211_rx_unprot_mlme_mgmt);
cf4e594e 16162
1b06bb40
LR		 16163static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
16164 struct net_device *netdev, int cmd,
e6d6e342 16165 const u8 *addr, gfp_t gfp)
1965c853
JM		 16166{
16167 struct sk_buff *msg;
16168 void *hdr;
16169
e6d6e342 16170 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 16171 if (!msg)
16172 return;
16173
16174 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
16175 if (!hdr) {
16176 nlmsg_free(msg);
16177 return;
16178 }
16179
9360ffd1
DM		 16180 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16181 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16182 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
16183 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
16184 goto nla_put_failure;
1965c853 16185
3b7b72ee 16186 genlmsg_end(msg, hdr);
1965c853 16187
68eb5503 16188 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16189 NL80211_MCGRP_MLME, gfp);
1965c853
JM		 16190 return;
16191
16192 nla_put_failure:
1965c853
JM		 16193 nlmsg_free(msg);
16194}
16195
16196void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 16197 struct net_device *netdev, const u8 *addr,
16198 gfp_t gfp)
1965c853
JM		 16199{
16200 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 16201 addr, gfp);
1965c853
JM		 16202}
16203
16204void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 16205 struct net_device *netdev, const u8 *addr,
16206 gfp_t gfp)
1965c853 16207{
e6d6e342
JB		 16208 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
16209 addr, gfp);
1965c853
JM		 16210}
16211
b23aa676 16212void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
5349a0f7
VK		 16213 struct net_device *netdev,
16214 struct cfg80211_connect_resp_params *cr,
3093ebbe 16215 gfp_t gfp)
b23aa676
SO		 16216{
16217 struct sk_buff *msg;
16218 void *hdr;
16219
a3caf744 16220 msg = nlmsg_new(100 + cr->req_ie_len + cr->resp_ie_len +
76804d28
AVS		 16221 cr->fils.kek_len + cr->fils.pmk_len +
16222 (cr->fils.pmkid ? WLAN_PMKID_LEN : 0), gfp);
b23aa676
SO		 16223 if (!msg)
16224 return;
16225
16226 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
16227 if (!hdr) {
16228 nlmsg_free(msg);
16229 return;
16230 }
16231
9360ffd1
DM		 16232 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16233 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
5349a0f7
VK		 16234 (cr->bssid &&
16235 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, cr->bssid)) ||
bf1ecd21 16236 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE,
5349a0f7
VK		 16237 cr->status < 0 ? WLAN_STATUS_UNSPECIFIED_FAILURE :
16238 cr->status) ||
16239 (cr->status < 0 &&
3093ebbe 16240 (nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
5349a0f7
VK		 16241 nla_put_u32(msg, NL80211_ATTR_TIMEOUT_REASON,
16242 cr->timeout_reason))) ||
16243 (cr->req_ie &&
16244 nla_put(msg, NL80211_ATTR_REQ_IE, cr->req_ie_len, cr->req_ie)) ||
16245 (cr->resp_ie &&
16246 nla_put(msg, NL80211_ATTR_RESP_IE, cr->resp_ie_len,
a3caf744 16247 cr->resp_ie)) ||
76804d28 16248 (cr->fils.update_erp_next_seq_num &&
a3caf744 16249 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
76804d28 16250 cr->fils.erp_next_seq_num)) ||
a3caf744 16251 (cr->status == WLAN_STATUS_SUCCESS &&
76804d28
AVS		 16252 ((cr->fils.kek &&
16253 nla_put(msg, NL80211_ATTR_FILS_KEK, cr->fils.kek_len,
16254 cr->fils.kek)) ||
16255 (cr->fils.pmk &&
16256 nla_put(msg, NL80211_ATTR_PMK, cr->fils.pmk_len, cr->fils.pmk)) ||
16257 (cr->fils.pmkid &&
16258 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, cr->fils.pmkid)))))
9360ffd1 16259 goto nla_put_failure;
b23aa676 16260
3b7b72ee 16261 genlmsg_end(msg, hdr);
b23aa676 16262
68eb5503 16263 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16264 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 16265 return;
16266
16267 nla_put_failure:
b23aa676 16268 nlmsg_free(msg);
b23aa676
SO		 16269}
16270
16271void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
29ce6ecb
AS		 16272 struct net_device *netdev,
16273 struct cfg80211_roam_info *info, gfp_t gfp)
b23aa676
SO		 16274{
16275 struct sk_buff *msg;
16276 void *hdr;
29ce6ecb 16277 const u8 *bssid = info->bss ? info->bss->bssid : info->bssid;
b23aa676 16278
e841b7b1
AVS		 16279 msg = nlmsg_new(100 + info->req_ie_len + info->resp_ie_len +
16280 info->fils.kek_len + info->fils.pmk_len +
16281 (info->fils.pmkid ? WLAN_PMKID_LEN : 0), gfp);
b23aa676
SO		 16282 if (!msg)
16283 return;
16284
16285 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
16286 if (!hdr) {
16287 nlmsg_free(msg);
16288 return;
16289 }
16290
9360ffd1
DM		 16291 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16292 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16293 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
29ce6ecb
AS		 16294 (info->req_ie &&
16295 nla_put(msg, NL80211_ATTR_REQ_IE, info->req_ie_len,
16296 info->req_ie)) ||
16297 (info->resp_ie &&
16298 nla_put(msg, NL80211_ATTR_RESP_IE, info->resp_ie_len,
e841b7b1
AVS		 16299 info->resp_ie)) ||
16300 (info->fils.update_erp_next_seq_num &&
16301 nla_put_u16(msg, NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM,
16302 info->fils.erp_next_seq_num)) ||
16303 (info->fils.kek &&
16304 nla_put(msg, NL80211_ATTR_FILS_KEK, info->fils.kek_len,
16305 info->fils.kek)) ||
16306 (info->fils.pmk &&
16307 nla_put(msg, NL80211_ATTR_PMK, info->fils.pmk_len, info->fils.pmk)) ||
16308 (info->fils.pmkid &&
16309 nla_put(msg, NL80211_ATTR_PMKID, WLAN_PMKID_LEN, info->fils.pmkid)))
9360ffd1 16310 goto nla_put_failure;
b23aa676 16311
3b7b72ee 16312 genlmsg_end(msg, hdr);
b23aa676 16313
68eb5503 16314 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16315 NL80211_MCGRP_MLME, gfp);
b23aa676
SO		 16316 return;
16317
503c1fb9 16318 nla_put_failure:
503c1fb9
AS		 16319 nlmsg_free(msg);
16320}
16321
16322void nl80211_send_port_authorized(struct cfg80211_registered_device *rdev,
16323 struct net_device *netdev, const u8 *bssid)
16324{
16325 struct sk_buff *msg;
16326 void *hdr;
16327
16328 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
16329 if (!msg)
16330 return;
16331
16332 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PORT_AUTHORIZED);
16333 if (!hdr) {
16334 nlmsg_free(msg);
16335 return;
16336 }
16337
f4d75993
CHH		 16338 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16339 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16340 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
503c1fb9
AS		 16341 goto nla_put_failure;
16342
16343 genlmsg_end(msg, hdr);
16344
16345 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
16346 NL80211_MCGRP_MLME, GFP_KERNEL);
16347 return;
16348
b23aa676 16349 nla_put_failure:
b23aa676 16350 nlmsg_free(msg);
b23aa676
SO		 16351}
16352
16353void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
16354 struct net_device *netdev, u16 reason,
667503dd 16355 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 16356{
16357 struct sk_buff *msg;
16358 void *hdr;
16359
4ef8c1c9 16360 msg = nlmsg_new(100 + ie_len, GFP_KERNEL);
b23aa676
SO		 16361 if (!msg)
16362 return;
16363
16364 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
16365 if (!hdr) {
16366 nlmsg_free(msg);
16367 return;
16368 }
16369
9360ffd1
DM		 16370 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16371 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
86b6c465 16372 (reason &&
9360ffd1
DM		 16373 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
16374 (from_ap &&
16375 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
16376 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
16377 goto nla_put_failure;
b23aa676 16378
3b7b72ee 16379 genlmsg_end(msg, hdr);
b23aa676 16380
68eb5503 16381 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16382 NL80211_MCGRP_MLME, GFP_KERNEL);
b23aa676
SO		 16383 return;
16384
16385 nla_put_failure:
b23aa676 16386 nlmsg_free(msg);
b23aa676
SO		 16387}
16388
04a773ad
JB		 16389void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
16390 struct net_device *netdev, const u8 *bssid,
16391 gfp_t gfp)
16392{
16393 struct sk_buff *msg;
16394 void *hdr;
16395
fd2120ca 16396 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 16397 if (!msg)
16398 return;
16399
16400 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
16401 if (!hdr) {
16402 nlmsg_free(msg);
16403 return;
16404 }
16405
9360ffd1
DM		 16406 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16407 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16408 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
16409 goto nla_put_failure;
04a773ad 16410
3b7b72ee 16411 genlmsg_end(msg, hdr);
04a773ad 16412
68eb5503 16413 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16414 NL80211_MCGRP_MLME, gfp);
04a773ad
JB		 16415 return;
16416
16417 nla_put_failure:
04a773ad
JB		 16418 nlmsg_free(msg);
16419}
16420
947add36 16421void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
ecbc12ad
BC		 16422 const u8 *ie, u8 ie_len,
16423 int sig_dbm, gfp_t gfp)
c93b5e71 16424{
947add36 16425 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 16426 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
c93b5e71
JC		 16427 struct sk_buff *msg;
16428 void *hdr;
16429
947add36
JB		 16430 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_MESH_POINT))
16431 return;
16432
16433 trace_cfg80211_notify_new_peer_candidate(dev, addr);
16434
4ef8c1c9 16435 msg = nlmsg_new(100 + ie_len, gfp);
c93b5e71
JC		 16436 if (!msg)
16437 return;
16438
16439 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
16440 if (!hdr) {
16441 nlmsg_free(msg);
16442 return;
16443 }
16444
9360ffd1 16445 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36
JB		 16446 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16447 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
9360ffd1 16448 (ie_len && ie &&
ecbc12ad
BC		 16449 nla_put(msg, NL80211_ATTR_IE, ie_len, ie)) ||
16450 (sig_dbm &&
16451 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)))
9360ffd1 16452 goto nla_put_failure;
c93b5e71 16453
3b7b72ee 16454 genlmsg_end(msg, hdr);
c93b5e71 16455
68eb5503 16456 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16457 NL80211_MCGRP_MLME, gfp);
c93b5e71
JC		 16458 return;
16459
16460 nla_put_failure:
c93b5e71
JC		 16461 nlmsg_free(msg);
16462}
947add36 16463EXPORT_SYMBOL(cfg80211_notify_new_peer_candidate);
c93b5e71 16464
a3b8b056
JM		 16465void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
16466 struct net_device *netdev, const u8 *addr,
16467 enum nl80211_key_type key_type, int key_id,
e6d6e342 16468 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 16469{
16470 struct sk_buff *msg;
16471 void *hdr;
16472
e6d6e342 16473 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 16474 if (!msg)
16475 return;
16476
16477 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
16478 if (!hdr) {
16479 nlmsg_free(msg);
16480 return;
16481 }
16482
9360ffd1
DM		 16483 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16484 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
16485 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
16486 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
16487 (key_id != -1 &&
16488 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
16489 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
16490 goto nla_put_failure;
a3b8b056 16491
3b7b72ee 16492 genlmsg_end(msg, hdr);
a3b8b056 16493
68eb5503 16494 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16495 NL80211_MCGRP_MLME, gfp);
a3b8b056
JM		 16496 return;
16497
16498 nla_put_failure:
a3b8b056
JM		 16499 nlmsg_free(msg);
16500}
16501
6bad8766
LR		 16502void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
16503 struct ieee80211_channel *channel_before,
16504 struct ieee80211_channel *channel_after)
16505{
16506 struct sk_buff *msg;
16507 void *hdr;
16508 struct nlattr *nl_freq;
16509
fd2120ca 16510 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 16511 if (!msg)
16512 return;
16513
16514 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
16515 if (!hdr) {
16516 nlmsg_free(msg);
16517 return;
16518 }
16519
16520 /*
16521 * Since we are applying the beacon hint to a wiphy we know its
16522 * wiphy_idx is valid
16523 */
9360ffd1
DM		 16524 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
16525 goto nla_put_failure;
6bad8766
LR		 16526
16527 /* Before */
ae0be8de 16528 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_BEFORE);
6bad8766
LR		 16529 if (!nl_freq)
16530 goto nla_put_failure;
50f32718
HD		 16531
16532 if (nl80211_msg_put_channel(msg, wiphy, channel_before, false))
6bad8766
LR		 16533 goto nla_put_failure;
16534 nla_nest_end(msg, nl_freq);
16535
16536 /* After */
ae0be8de 16537 nl_freq = nla_nest_start_noflag(msg, NL80211_ATTR_FREQ_AFTER);
6bad8766
LR		 16538 if (!nl_freq)
16539 goto nla_put_failure;
50f32718
HD		 16540
16541 if (nl80211_msg_put_channel(msg, wiphy, channel_after, false))
6bad8766
LR		 16542 goto nla_put_failure;
16543 nla_nest_end(msg, nl_freq);
16544
3b7b72ee 16545 genlmsg_end(msg, hdr);
6bad8766 16546
463d0183 16547 rcu_read_lock();
68eb5503 16548 genlmsg_multicast_allns(&nl80211_fam, msg, 0,
2a94fe48 16549 NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
463d0183 16550 rcu_read_unlock();
6bad8766
LR		 16551
16552 return;
16553
16554nla_put_failure:
6bad8766
LR		 16555 nlmsg_free(msg);
16556}
16557
9588bbd5
JM		 16558static void nl80211_send_remain_on_chan_event(
16559 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 16560 struct wireless_dev *wdev, u64 cookie,
9588bbd5 16561 struct ieee80211_channel *chan,
9588bbd5
JM		 16562 unsigned int duration, gfp_t gfp)
16563{
16564 struct sk_buff *msg;
16565 void *hdr;
16566
16567 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16568 if (!msg)
16569 return;
16570
16571 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
16572 if (!hdr) {
16573 nlmsg_free(msg);
16574 return;
16575 }
16576
9360ffd1 16577 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16578 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16579 wdev->netdev->ifindex)) ||
2dad624e
ND		 16580 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16581 NL80211_ATTR_PAD) ||
9360ffd1 16582 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
42d97a59
JB		 16583 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
16584 NL80211_CHAN_NO_HT) ||
2dad624e
ND		 16585 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16586 NL80211_ATTR_PAD))
9360ffd1 16587 goto nla_put_failure;
9588bbd5 16588
9360ffd1
DM		 16589 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
16590 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
16591 goto nla_put_failure;
9588bbd5 16592
3b7b72ee 16593 genlmsg_end(msg, hdr);
9588bbd5 16594
68eb5503 16595 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16596 NL80211_MCGRP_MLME, gfp);
9588bbd5
JM		 16597 return;
16598
16599 nla_put_failure:
9588bbd5
JM		 16600 nlmsg_free(msg);
16601}
16602
947add36
JB		 16603void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
16604 struct ieee80211_channel *chan,
16605 unsigned int duration, gfp_t gfp)
9588bbd5 16606{
947add36 16607 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16608 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16609
16610 trace_cfg80211_ready_on_channel(wdev, cookie, chan, duration);
9588bbd5 16611 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 16612 rdev, wdev, cookie, chan,
42d97a59 16613 duration, gfp);
9588bbd5 16614}
947add36 16615EXPORT_SYMBOL(cfg80211_ready_on_channel);
9588bbd5 16616
947add36
JB		 16617void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
16618 struct ieee80211_channel *chan,
16619 gfp_t gfp)
9588bbd5 16620{
947add36 16621 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16622 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 16623
16624 trace_cfg80211_ready_on_channel_expired(wdev, cookie, chan);
9588bbd5 16625 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
42d97a59 16626 rdev, wdev, cookie, chan, 0, gfp);
9588bbd5 16627}
947add36 16628EXPORT_SYMBOL(cfg80211_remain_on_channel_expired);
9588bbd5 16629
1c38c7f2
JP		 16630void cfg80211_tx_mgmt_expired(struct wireless_dev *wdev, u64 cookie,
16631 struct ieee80211_channel *chan,
16632 gfp_t gfp)
16633{
16634 struct wiphy *wiphy = wdev->wiphy;
16635 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
16636
16637 trace_cfg80211_tx_mgmt_expired(wdev, cookie, chan);
16638 nl80211_send_remain_on_chan_event(NL80211_CMD_FRAME_WAIT_CANCEL,
16639 rdev, wdev, cookie, chan, 0, gfp);
16640}
16641EXPORT_SYMBOL(cfg80211_tx_mgmt_expired);
16642
947add36
JB		 16643void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
16644 struct station_info *sinfo, gfp_t gfp)
98b62183 16645{
947add36 16646 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16647 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
98b62183
JB		 16648 struct sk_buff *msg;
16649
947add36
JB		 16650 trace_cfg80211_new_sta(dev, mac_addr, sinfo);
16651
58050fce 16652 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 16653 if (!msg)
16654 return;
16655
cf5ead82 16656 if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION, 0, 0, 0,
66266b3a 16657 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 16658 nlmsg_free(msg);
16659 return;
16660 }
16661
68eb5503 16662 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16663 NL80211_MCGRP_MLME, gfp);
98b62183 16664}
947add36 16665EXPORT_SYMBOL(cfg80211_new_sta);
98b62183 16666
cf5ead82
JB		 16667void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
16668 struct station_info *sinfo, gfp_t gfp)
ec15e68b 16669{
947add36 16670 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16671 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ec15e68b 16672 struct sk_buff *msg;
73887fd9 16673 struct station_info empty_sinfo = {};
cf5ead82 16674
73887fd9
JB		 16675 if (!sinfo)
16676 sinfo = &empty_sinfo;
ec15e68b 16677
947add36
JB		 16678 trace_cfg80211_del_sta(dev, mac_addr);
16679
58050fce 16680 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7ea3e110
JB		 16681 if (!msg) {
16682 cfg80211_sinfo_release_content(sinfo);
73887fd9 16683 return;
7ea3e110 16684 }
ec15e68b 16685
cf5ead82 16686 if (nl80211_send_station(msg, NL80211_CMD_DEL_STATION, 0, 0, 0,
57007121 16687 rdev, dev, mac_addr, sinfo) < 0) {
ec15e68b 16688 nlmsg_free(msg);
73887fd9 16689 return;
ec15e68b
JM		 16690 }
16691
68eb5503 16692 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16693 NL80211_MCGRP_MLME, gfp);
ec15e68b 16694}
cf5ead82 16695EXPORT_SYMBOL(cfg80211_del_sta_sinfo);
ec15e68b 16696
947add36
JB		 16697void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
16698 enum nl80211_connect_failed_reason reason,
16699 gfp_t gfp)
ed44a951 16700{
947add36 16701 struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
f26cbf40 16702 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
ed44a951
PP		 16703 struct sk_buff *msg;
16704 void *hdr;
16705
16706 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
16707 if (!msg)
16708 return;
16709
16710 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
16711 if (!hdr) {
16712 nlmsg_free(msg);
16713 return;
16714 }
16715
16716 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16717 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
16718 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
16719 goto nla_put_failure;
16720
16721 genlmsg_end(msg, hdr);
16722
68eb5503 16723 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16724 NL80211_MCGRP_MLME, gfp);
ed44a951
PP		 16725 return;
16726
16727 nla_put_failure:
ed44a951
PP		 16728 nlmsg_free(msg);
16729}
947add36 16730EXPORT_SYMBOL(cfg80211_conn_failed);
ed44a951 16731
b92ab5d8
JB		 16732static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
16733 const u8 *addr, gfp_t gfp)
28946da7
JB		 16734{
16735 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 16736 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
28946da7
JB		 16737 struct sk_buff *msg;
16738 void *hdr;
6aa7de05 16739 u32 nlportid = READ_ONCE(wdev->ap_unexpected_nlportid);
28946da7 16740
15e47304 16741 if (!nlportid)
28946da7
JB		 16742 return false;
16743
16744 msg = nlmsg_new(100, gfp);
16745 if (!msg)
16746 return true;
16747
b92ab5d8 16748 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 16749 if (!hdr) {
16750 nlmsg_free(msg);
16751 return true;
16752 }
16753
9360ffd1
DM		 16754 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16755 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16756 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
16757 goto nla_put_failure;
28946da7 16758
9c90a9f6 16759 genlmsg_end(msg, hdr);
15e47304 16760 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 16761 return true;
16762
16763 nla_put_failure:
28946da7
JB		 16764 nlmsg_free(msg);
16765 return true;
16766}
16767
947add36
JB		 16768bool cfg80211_rx_spurious_frame(struct net_device *dev,
16769 const u8 *addr, gfp_t gfp)
b92ab5d8 16770{
947add36
JB		 16771 struct wireless_dev *wdev = dev->ieee80211_ptr;
16772 bool ret;
16773
16774 trace_cfg80211_rx_spurious_frame(dev, addr);
16775
16776 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
16777 wdev->iftype != NL80211_IFTYPE_P2P_GO)) {
16778 trace_cfg80211_return_bool(false);
16779 return false;
16780 }
16781 ret = __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
16782 addr, gfp);
16783 trace_cfg80211_return_bool(ret);
16784 return ret;
b92ab5d8 16785}
947add36 16786EXPORT_SYMBOL(cfg80211_rx_spurious_frame);
b92ab5d8 16787
947add36
JB		 16788bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
16789 const u8 *addr, gfp_t gfp)
b92ab5d8 16790{
947add36
JB		 16791 struct wireless_dev *wdev = dev->ieee80211_ptr;
16792 bool ret;
16793
16794 trace_cfg80211_rx_unexpected_4addr_frame(dev, addr);
16795
16796 if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
16797 wdev->iftype != NL80211_IFTYPE_P2P_GO &&
16798 wdev->iftype != NL80211_IFTYPE_AP_VLAN)) {
16799 trace_cfg80211_return_bool(false);
16800 return false;
16801 }
16802 ret = __nl80211_unexpected_frame(dev,
16803 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
16804 addr, gfp);
16805 trace_cfg80211_return_bool(ret);
16806 return ret;
b92ab5d8 16807}
947add36 16808EXPORT_SYMBOL(cfg80211_rx_unexpected_4addr_frame);
b92ab5d8 16809
2e161f78 16810int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 16811 struct wireless_dev *wdev, u32 nlportid,
804483e9 16812 int freq, int sig_dbm,
19504cf5 16813 const u8 *buf, size_t len, u32 flags, gfp_t gfp)
026331c4 16814{
71bbc994 16815 struct net_device *netdev = wdev->netdev;
026331c4
JM		 16816 struct sk_buff *msg;
16817 void *hdr;
026331c4 16818
4ef8c1c9 16819 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 16820 if (!msg)
16821 return -ENOMEM;
16822
2e161f78 16823 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 16824 if (!hdr) {
16825 nlmsg_free(msg);
16826 return -ENOMEM;
16827 }
16828
9360ffd1 16829 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16830 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16831 netdev->ifindex)) ||
2dad624e
ND		 16832 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16833 NL80211_ATTR_PAD) ||
e76fede8 16834 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, KHZ_TO_MHZ(freq)) ||
942ba88b 16835 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET, freq % 1000) ||
9360ffd1
DM		 16836 (sig_dbm &&
16837 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
19504cf5
VK		 16838 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
16839 (flags &&
16840 nla_put_u32(msg, NL80211_ATTR_RXMGMT_FLAGS, flags)))
9360ffd1 16841 goto nla_put_failure;
026331c4 16842
3b7b72ee 16843 genlmsg_end(msg, hdr);
026331c4 16844
15e47304 16845 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 16846
16847 nla_put_failure:
026331c4
JM		 16848 nlmsg_free(msg);
16849 return -ENOBUFS;
16850}
16851
dca9ca2d
MT		 16852static void nl80211_frame_tx_status(struct wireless_dev *wdev, u64 cookie,
16853 const u8 *buf, size_t len, bool ack,
16854 gfp_t gfp, enum nl80211_commands command)
026331c4 16855{
947add36 16856 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 16857 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
71bbc994 16858 struct net_device *netdev = wdev->netdev;
026331c4
JM		 16859 struct sk_buff *msg;
16860 void *hdr;
16861
dca9ca2d
MT		 16862 if (command == NL80211_CMD_FRAME_TX_STATUS)
16863 trace_cfg80211_mgmt_tx_status(wdev, cookie, ack);
16864 else
16865 trace_cfg80211_control_port_tx_status(wdev, cookie, ack);
947add36 16866
4ef8c1c9 16867 msg = nlmsg_new(100 + len, gfp);
026331c4
JM		 16868 if (!msg)
16869 return;
16870
dca9ca2d 16871 hdr = nl80211hdr_put(msg, 0, 0, 0, command);
026331c4
JM		 16872 if (!hdr) {
16873 nlmsg_free(msg);
16874 return;
16875 }
16876
9360ffd1 16877 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 16878 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
16879 netdev->ifindex)) ||
2dad624e
ND		 16880 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16881 NL80211_ATTR_PAD) ||
9360ffd1 16882 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
2dad624e
ND		 16883 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
16884 NL80211_ATTR_PAD) ||
9360ffd1
DM		 16885 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
16886 goto nla_put_failure;
026331c4 16887
3b7b72ee 16888 genlmsg_end(msg, hdr);
026331c4 16889
68eb5503 16890 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 16891 NL80211_MCGRP_MLME, gfp);
026331c4
JM		 16892 return;
16893
dca9ca2d 16894nla_put_failure:
026331c4
JM		 16895 nlmsg_free(msg);
16896}
dca9ca2d
MT		 16897
16898void cfg80211_control_port_tx_status(struct wireless_dev *wdev, u64 cookie,
16899 const u8 *buf, size_t len, bool ack,
16900 gfp_t gfp)
16901{
16902 nl80211_frame_tx_status(wdev, cookie, buf, len, ack, gfp,
16903 NL80211_CMD_CONTROL_PORT_FRAME_TX_STATUS);
16904}
16905EXPORT_SYMBOL(cfg80211_control_port_tx_status);
16906
16907void cfg80211_mgmt_tx_status(struct wireless_dev *wdev, u64 cookie,
16908 const u8 *buf, size_t len, bool ack, gfp_t gfp)
16909{
16910 nl80211_frame_tx_status(wdev, cookie, buf, len, ack, gfp,
16911 NL80211_CMD_FRAME_TX_STATUS);
16912}
947add36 16913EXPORT_SYMBOL(cfg80211_mgmt_tx_status);
026331c4 16914
6a671a50 16915static int __nl80211_rx_control_port(struct net_device *dev,
a948f713 16916 struct sk_buff *skb,
6a671a50
DK		 16917 bool unencrypted, gfp_t gfp)
16918{
16919 struct wireless_dev *wdev = dev->ieee80211_ptr;
16920 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
a948f713 16921 struct ethhdr *ehdr = eth_hdr(skb);
8d74a623 16922 const u8 *addr = ehdr->h_source;
a948f713 16923 u16 proto = be16_to_cpu(skb->protocol);
6a671a50
DK		 16924 struct sk_buff *msg;
16925 void *hdr;
a948f713
DK		 16926 struct nlattr *frame;
16927
6a671a50
DK		 16928 u32 nlportid = READ_ONCE(wdev->conn_owner_nlportid);
16929
16930 if (!nlportid)
16931 return -ENOENT;
16932
a948f713 16933 msg = nlmsg_new(100 + skb->len, gfp);
6a671a50
DK		 16934 if (!msg)
16935 return -ENOMEM;
16936
16937 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONTROL_PORT_FRAME);
16938 if (!hdr) {
16939 nlmsg_free(msg);
16940 return -ENOBUFS;
16941 }
16942
16943 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
16944 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
16945 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
16946 NL80211_ATTR_PAD) ||
8d74a623 16947 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
6a671a50
DK		 16948 nla_put_u16(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE, proto) ||
16949 (unencrypted && nla_put_flag(msg,
16950 NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT)))
16951 goto nla_put_failure;
16952
a948f713
DK		 16953 frame = nla_reserve(msg, NL80211_ATTR_FRAME, skb->len);
16954 if (!frame)
16955 goto nla_put_failure;
16956
16957 skb_copy_bits(skb, 0, nla_data(frame), skb->len);
6a671a50
DK		 16958 genlmsg_end(msg, hdr);
16959
16960 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
16961
16962 nla_put_failure:
16963 nlmsg_free(msg);
16964 return -ENOBUFS;
16965}
16966
16967bool cfg80211_rx_control_port(struct net_device *dev,
a948f713 16968 struct sk_buff *skb, bool unencrypted)
6a671a50
DK		 16969{
16970 int ret;
16971
a948f713
DK		 16972 trace_cfg80211_rx_control_port(dev, skb, unencrypted);
16973 ret = __nl80211_rx_control_port(dev, skb, unencrypted, GFP_ATOMIC);
6a671a50
DK		 16974 trace_cfg80211_return_bool(ret == 0);
16975 return ret == 0;
16976}
16977EXPORT_SYMBOL(cfg80211_rx_control_port);
16978
5b97f49d
JB		 16979static struct sk_buff *cfg80211_prepare_cqm(struct net_device *dev,
16980 const char *mac, gfp_t gfp)
d6dc1a38 16981{
947add36 16982 struct wireless_dev *wdev = dev->ieee80211_ptr;
5b97f49d
JB		 16983 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
16984 struct sk_buff *msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
16985 void **cb;
947add36 16986
d6dc1a38 16987 if (!msg)
5b97f49d 16988 return NULL;
d6dc1a38 16989
5b97f49d
JB		 16990 cb = (void **)msg->cb;
16991
16992 cb[0] = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
16993 if (!cb[0]) {
d6dc1a38 16994 nlmsg_free(msg);
5b97f49d 16995 return NULL;
d6dc1a38
JO		 16996 }
16997
9360ffd1 16998 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
947add36 16999 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
9360ffd1 17000 goto nla_put_failure;
d6dc1a38 17001
5b97f49d 17002 if (mac && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
d6dc1a38
JO		 17003 goto nla_put_failure;
17004
ae0be8de 17005 cb[1] = nla_nest_start_noflag(msg, NL80211_ATTR_CQM);
5b97f49d 17006 if (!cb[1])
9360ffd1 17007 goto nla_put_failure;
d6dc1a38 17008
5b97f49d 17009 cb[2] = rdev;
d6dc1a38 17010
5b97f49d
JB		 17011 return msg;
17012 nla_put_failure:
17013 nlmsg_free(msg);
17014 return NULL;
17015}
17016
17017static void cfg80211_send_cqm(struct sk_buff *msg, gfp_t gfp)
17018{
17019 void **cb = (void **)msg->cb;
17020 struct cfg80211_registered_device *rdev = cb[2];
17021
17022 nla_nest_end(msg, cb[1]);
17023 genlmsg_end(msg, cb[0]);
17024
17025 memset(msg->cb, 0, sizeof(msg->cb));
d6dc1a38 17026
68eb5503 17027 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17028 NL80211_MCGRP_MLME, gfp);
5b97f49d
JB		 17029}
17030
17031void cfg80211_cqm_rssi_notify(struct net_device *dev,
17032 enum nl80211_cqm_rssi_threshold_event rssi_event,
bee427b8 17033 s32 rssi_level, gfp_t gfp)
5b97f49d
JB		 17034{
17035 struct sk_buff *msg;
4a4b8169
AZ		 17036 struct wireless_dev *wdev = dev->ieee80211_ptr;
17037 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
5b97f49d 17038
bee427b8 17039 trace_cfg80211_cqm_rssi_notify(dev, rssi_event, rssi_level);
5b97f49d 17040
98f03342
JB		 17041 if (WARN_ON(rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW &&
17042 rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH))
17043 return;
17044
4a4b8169
AZ		 17045 if (wdev->cqm_config) {
17046 wdev->cqm_config->last_rssi_event_value = rssi_level;
17047
17048 cfg80211_cqm_rssi_update(rdev, dev);
17049
17050 if (rssi_level == 0)
17051 rssi_level = wdev->cqm_config->last_rssi_event_value;
17052 }
17053
5b97f49d
JB		 17054 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
17055 if (!msg)
17056 return;
17057
17058 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
17059 rssi_event))
17060 goto nla_put_failure;
17061
bee427b8
AZ		 17062 if (rssi_level && nla_put_s32(msg, NL80211_ATTR_CQM_RSSI_LEVEL,
17063 rssi_level))
17064 goto nla_put_failure;
17065
5b97f49d
JB		 17066 cfg80211_send_cqm(msg, gfp);
17067
d6dc1a38
JO		 17068 return;
17069
17070 nla_put_failure:
d6dc1a38
JO		 17071 nlmsg_free(msg);
17072}
947add36 17073EXPORT_SYMBOL(cfg80211_cqm_rssi_notify);
d6dc1a38 17074
5b97f49d
JB		 17075void cfg80211_cqm_txe_notify(struct net_device *dev,
17076 const u8 *peer, u32 num_packets,
17077 u32 rate, u32 intvl, gfp_t gfp)
17078{
17079 struct sk_buff *msg;
17080
17081 msg = cfg80211_prepare_cqm(dev, peer, gfp);
17082 if (!msg)
17083 return;
17084
17085 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
17086 goto nla_put_failure;
17087
17088 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
17089 goto nla_put_failure;
17090
17091 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
17092 goto nla_put_failure;
17093
17094 cfg80211_send_cqm(msg, gfp);
17095 return;
17096
17097 nla_put_failure:
17098 nlmsg_free(msg);
17099}
17100EXPORT_SYMBOL(cfg80211_cqm_txe_notify);
17101
17102void cfg80211_cqm_pktloss_notify(struct net_device *dev,
17103 const u8 *peer, u32 num_packets, gfp_t gfp)
17104{
17105 struct sk_buff *msg;
17106
17107 trace_cfg80211_cqm_pktloss_notify(dev, peer, num_packets);
17108
17109 msg = cfg80211_prepare_cqm(dev, peer, gfp);
17110 if (!msg)
17111 return;
17112
17113 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
17114 goto nla_put_failure;
17115
17116 cfg80211_send_cqm(msg, gfp);
17117 return;
17118
17119 nla_put_failure:
17120 nlmsg_free(msg);
17121}
17122EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify);
17123
98f03342
JB		 17124void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp)
17125{
17126 struct sk_buff *msg;
17127
17128 msg = cfg80211_prepare_cqm(dev, NULL, gfp);
17129 if (!msg)
17130 return;
17131
17132 if (nla_put_flag(msg, NL80211_ATTR_CQM_BEACON_LOSS_EVENT))
17133 goto nla_put_failure;
17134
17135 cfg80211_send_cqm(msg, gfp);
17136 return;
17137
17138 nla_put_failure:
17139 nlmsg_free(msg);
17140}
17141EXPORT_SYMBOL(cfg80211_cqm_beacon_loss_notify);
17142
947add36
JB		 17143static void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
17144 struct net_device *netdev, const u8 *bssid,
17145 const u8 *replay_ctr, gfp_t gfp)
e5497d76
JB		 17146{
17147 struct sk_buff *msg;
17148 struct nlattr *rekey_attr;
17149 void *hdr;
17150
58050fce 17151 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 17152 if (!msg)
17153 return;
17154
17155 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
17156 if (!hdr) {
17157 nlmsg_free(msg);
17158 return;
17159 }
17160
9360ffd1
DM		 17161 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17162 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17163 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
17164 goto nla_put_failure;
e5497d76 17165
ae0be8de 17166 rekey_attr = nla_nest_start_noflag(msg, NL80211_ATTR_REKEY_DATA);
e5497d76
JB		 17167 if (!rekey_attr)
17168 goto nla_put_failure;
17169
9360ffd1
DM		 17170 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
17171 NL80211_REPLAY_CTR_LEN, replay_ctr))
17172 goto nla_put_failure;
e5497d76
JB		 17173
17174 nla_nest_end(msg, rekey_attr);
17175
3b7b72ee 17176 genlmsg_end(msg, hdr);
e5497d76 17177
68eb5503 17178 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17179 NL80211_MCGRP_MLME, gfp);
e5497d76
JB		 17180 return;
17181
17182 nla_put_failure:
e5497d76
JB		 17183 nlmsg_free(msg);
17184}
17185
947add36
JB		 17186void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
17187 const u8 *replay_ctr, gfp_t gfp)
17188{
17189 struct wireless_dev *wdev = dev->ieee80211_ptr;
17190 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17191 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 17192
17193 trace_cfg80211_gtk_rekey_notify(dev, bssid);
17194 nl80211_gtk_rekey_notify(rdev, dev, bssid, replay_ctr, gfp);
17195}
17196EXPORT_SYMBOL(cfg80211_gtk_rekey_notify);
17197
17198static void
17199nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
17200 struct net_device *netdev, int index,
17201 const u8 *bssid, bool preauth, gfp_t gfp)
c9df56b4
JM		 17202{
17203 struct sk_buff *msg;
17204 struct nlattr *attr;
17205 void *hdr;
17206
58050fce 17207 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 17208 if (!msg)
17209 return;
17210
17211 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
17212 if (!hdr) {
17213 nlmsg_free(msg);
17214 return;
17215 }
17216
9360ffd1
DM		 17217 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17218 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
17219 goto nla_put_failure;
c9df56b4 17220
ae0be8de 17221 attr = nla_nest_start_noflag(msg, NL80211_ATTR_PMKSA_CANDIDATE);
c9df56b4
JM		 17222 if (!attr)
17223 goto nla_put_failure;
17224
9360ffd1
DM		 17225 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
17226 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
17227 (preauth &&
17228 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
17229 goto nla_put_failure;
c9df56b4
JM		 17230
17231 nla_nest_end(msg, attr);
17232
3b7b72ee 17233 genlmsg_end(msg, hdr);
c9df56b4 17234
68eb5503 17235 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17236 NL80211_MCGRP_MLME, gfp);
c9df56b4
JM		 17237 return;
17238
17239 nla_put_failure:
c9df56b4
JM		 17240 nlmsg_free(msg);
17241}
17242
947add36
JB		 17243void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
17244 const u8 *bssid, bool preauth, gfp_t gfp)
17245{
17246 struct wireless_dev *wdev = dev->ieee80211_ptr;
17247 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17248 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36
JB		 17249
17250 trace_cfg80211_pmksa_candidate_notify(dev, index, bssid, preauth);
17251 nl80211_pmksa_candidate_notify(rdev, dev, index, bssid, preauth, gfp);
17252}
17253EXPORT_SYMBOL(cfg80211_pmksa_candidate_notify);
17254
17255static void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
17256 struct net_device *netdev,
17257 struct cfg80211_chan_def *chandef,
f8d7552e
LC		 17258 gfp_t gfp,
17259 enum nl80211_commands notif,
669b8413 17260 u8 count, bool quiet)
5314526b
TP		 17261{
17262 struct sk_buff *msg;
17263 void *hdr;
17264
58050fce 17265 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 17266 if (!msg)
17267 return;
17268
f8d7552e 17269 hdr = nl80211hdr_put(msg, 0, 0, 0, notif);
5314526b
TP		 17270 if (!hdr) {
17271 nlmsg_free(msg);
17272 return;
17273 }
17274
683b6d3b
JB		 17275 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
17276 goto nla_put_failure;
17277
17278 if (nl80211_send_chandef(msg, chandef))
7eab0f64 17279 goto nla_put_failure;
5314526b 17280
669b8413
JB		 17281 if (notif == NL80211_CMD_CH_SWITCH_STARTED_NOTIFY) {
17282 if (nla_put_u32(msg, NL80211_ATTR_CH_SWITCH_COUNT, count))
f8d7552e 17283 goto nla_put_failure;
669b8413
JB		 17284 if (quiet &&
17285 nla_put_flag(msg, NL80211_ATTR_CH_SWITCH_BLOCK_TX))
f8d7552e 17286 goto nla_put_failure;
669b8413 17287 }
f8d7552e 17288
5314526b
TP		 17289 genlmsg_end(msg, hdr);
17290
68eb5503 17291 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17292 NL80211_MCGRP_MLME, gfp);
5314526b
TP		 17293 return;
17294
17295 nla_put_failure:
5314526b
TP		 17296 nlmsg_free(msg);
17297}
17298
947add36
JB		 17299void cfg80211_ch_switch_notify(struct net_device *dev,
17300 struct cfg80211_chan_def *chandef)
84f10708 17301{
947add36
JB		 17302 struct wireless_dev *wdev = dev->ieee80211_ptr;
17303 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17304 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
947add36 17305
e487eaeb 17306 ASSERT_WDEV_LOCK(wdev);
947add36 17307
e487eaeb 17308 trace_cfg80211_ch_switch_notify(dev, chandef);
947add36 17309
9e0e2961 17310 wdev->chandef = *chandef;
96f55f12 17311 wdev->preset_chandef = *chandef;
5dc8cdce
SM		 17312
17313 if (wdev->iftype == NL80211_IFTYPE_STATION &&
17314 !WARN_ON(!wdev->current_bss))
0afd425b 17315 cfg80211_update_assoc_bss_entry(wdev, chandef->chan);
5dc8cdce 17316
d34990bb
MV		 17317 cfg80211_sched_dfs_chan_update(rdev);
17318
f8d7552e 17319 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
669b8413 17320 NL80211_CMD_CH_SWITCH_NOTIFY, 0, false);
947add36
JB		 17321}
17322EXPORT_SYMBOL(cfg80211_ch_switch_notify);
17323
f8d7552e
LC		 17324void cfg80211_ch_switch_started_notify(struct net_device *dev,
17325 struct cfg80211_chan_def *chandef,
669b8413 17326 u8 count, bool quiet)
f8d7552e
LC		 17327{
17328 struct wireless_dev *wdev = dev->ieee80211_ptr;
17329 struct wiphy *wiphy = wdev->wiphy;
17330 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
17331
17332 trace_cfg80211_ch_switch_started_notify(dev, chandef);
17333
17334 nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
669b8413
JB		 17335 NL80211_CMD_CH_SWITCH_STARTED_NOTIFY,
17336 count, quiet);
f8d7552e
LC		 17337}
17338EXPORT_SYMBOL(cfg80211_ch_switch_started_notify);
17339
04f39047
SW		 17340void
17341nl80211_radar_notify(struct cfg80211_registered_device *rdev,
d2859df5 17342 const struct cfg80211_chan_def *chandef,
04f39047
SW		 17343 enum nl80211_radar_event event,
17344 struct net_device *netdev, gfp_t gfp)
17345{
17346 struct sk_buff *msg;
17347 void *hdr;
17348
17349 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17350 if (!msg)
17351 return;
17352
17353 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
17354 if (!hdr) {
17355 nlmsg_free(msg);
17356 return;
17357 }
17358
17359 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
17360 goto nla_put_failure;
17361
17362 /* NOP and radar events don't need a netdev parameter */
17363 if (netdev) {
17364 struct wireless_dev *wdev = netdev->ieee80211_ptr;
17365
17366 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
2dad624e
ND		 17367 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17368 NL80211_ATTR_PAD))
04f39047
SW		 17369 goto nla_put_failure;
17370 }
17371
17372 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
17373 goto nla_put_failure;
17374
17375 if (nl80211_send_chandef(msg, chandef))
17376 goto nla_put_failure;
17377
9c90a9f6 17378 genlmsg_end(msg, hdr);
04f39047 17379
68eb5503 17380 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17381 NL80211_MCGRP_MLME, gfp);
04f39047
SW		 17382 return;
17383
17384 nla_put_failure:
04f39047
SW		 17385 nlmsg_free(msg);
17386}
17387
466b9936 17388void cfg80211_sta_opmode_change_notify(struct net_device *dev, const u8 *mac,
17389 struct sta_opmode_info *sta_opmode,
17390 gfp_t gfp)
17391{
17392 struct sk_buff *msg;
17393 struct wireless_dev *wdev = dev->ieee80211_ptr;
17394 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
17395 void *hdr;
17396
17397 if (WARN_ON(!mac))
17398 return;
17399
17400 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17401 if (!msg)
17402 return;
17403
17404 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STA_OPMODE_CHANGED);
17405 if (!hdr) {
17406 nlmsg_free(msg);
17407 return;
17408 }
17409
17410 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
17411 goto nla_put_failure;
17412
17413 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
17414 goto nla_put_failure;
17415
17416 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
17417 goto nla_put_failure;
17418
17419 if ((sta_opmode->changed & STA_OPMODE_SMPS_MODE_CHANGED) &&
17420 nla_put_u8(msg, NL80211_ATTR_SMPS_MODE, sta_opmode->smps_mode))
17421 goto nla_put_failure;
17422
17423 if ((sta_opmode->changed & STA_OPMODE_MAX_BW_CHANGED) &&
0016d320 17424 nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, sta_opmode->bw))
466b9936 17425 goto nla_put_failure;
17426
17427 if ((sta_opmode->changed & STA_OPMODE_N_SS_CHANGED) &&
17428 nla_put_u8(msg, NL80211_ATTR_NSS, sta_opmode->rx_nss))
17429 goto nla_put_failure;
17430
17431 genlmsg_end(msg, hdr);
17432
17433 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17434 NL80211_MCGRP_MLME, gfp);
17435
17436 return;
17437
17438nla_put_failure:
17439 nlmsg_free(msg);
17440}
17441EXPORT_SYMBOL(cfg80211_sta_opmode_change_notify);
17442
7f6cf311 17443void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
c4b50cd3
VN		 17444 u64 cookie, bool acked, s32 ack_signal,
17445 bool is_valid_ack_signal, gfp_t gfp)
7f6cf311
JB		 17446{
17447 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 17448 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
7f6cf311
JB		 17449 struct sk_buff *msg;
17450 void *hdr;
7f6cf311 17451
4ee3e063
BL		 17452 trace_cfg80211_probe_status(dev, addr, cookie, acked);
17453
58050fce 17454 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 17455
7f6cf311
JB		 17456 if (!msg)
17457 return;
17458
17459 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
17460 if (!hdr) {
17461 nlmsg_free(msg);
17462 return;
17463 }
17464
9360ffd1
DM		 17465 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17466 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17467 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
2dad624e
ND		 17468 nla_put_u64_64bit(msg, NL80211_ATTR_COOKIE, cookie,
17469 NL80211_ATTR_PAD) ||
c4b50cd3
VN		 17470 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)) ||
17471 (is_valid_ack_signal && nla_put_s32(msg, NL80211_ATTR_ACK_SIGNAL,
17472 ack_signal)))
9360ffd1 17473 goto nla_put_failure;
7f6cf311 17474
9c90a9f6 17475 genlmsg_end(msg, hdr);
7f6cf311 17476
68eb5503 17477 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17478 NL80211_MCGRP_MLME, gfp);
7f6cf311
JB		 17479 return;
17480
17481 nla_put_failure:
7f6cf311
JB		 17482 nlmsg_free(msg);
17483}
17484EXPORT_SYMBOL(cfg80211_probe_status);
17485
e76fede8
TP		 17486void cfg80211_report_obss_beacon_khz(struct wiphy *wiphy, const u8 *frame,
17487 size_t len, int freq, int sig_dbm)
5e760230 17488{
f26cbf40 17489 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
5e760230
JB		 17490 struct sk_buff *msg;
17491 void *hdr;
37c73b5f 17492 struct cfg80211_beacon_registration *reg;
5e760230 17493
4ee3e063
BL		 17494 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
17495
37c73b5f
BG		 17496 spin_lock_bh(&rdev->beacon_registrations_lock);
17497 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
17498 msg = nlmsg_new(len + 100, GFP_ATOMIC);
17499 if (!msg) {
17500 spin_unlock_bh(&rdev->beacon_registrations_lock);
17501 return;
17502 }
5e760230 17503
37c73b5f
BG		 17504 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
17505 if (!hdr)
17506 goto nla_put_failure;
5e760230 17507
37c73b5f
BG		 17508 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17509 (freq &&
942ba88b
TP		 17510 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
17511 KHZ_TO_MHZ(freq)) ||
17512 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ_OFFSET,
17513 freq % 1000))) ||
37c73b5f
BG		 17514 (sig_dbm &&
17515 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
17516 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
17517 goto nla_put_failure;
5e760230 17518
37c73b5f 17519 genlmsg_end(msg, hdr);
5e760230 17520
37c73b5f
BG		 17521 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
17522 }
17523 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 17524 return;
17525
17526 nla_put_failure:
37c73b5f 17527 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 17528 nlmsg_free(msg);
17529}
e76fede8 17530EXPORT_SYMBOL(cfg80211_report_obss_beacon_khz);
5e760230 17531
cd8f7cb4 17532#ifdef CONFIG_PM
8cd4d456
LC		 17533static int cfg80211_net_detect_results(struct sk_buff *msg,
17534 struct cfg80211_wowlan_wakeup *wakeup)
17535{
17536 struct cfg80211_wowlan_nd_info *nd = wakeup->net_detect;
17537 struct nlattr *nl_results, *nl_match, *nl_freqs;
17538 int i, j;
17539
ae0be8de
MK		 17540 nl_results = nla_nest_start_noflag(msg,
17541 NL80211_WOWLAN_TRIG_NET_DETECT_RESULTS);
8cd4d456
LC		 17542 if (!nl_results)
17543 return -EMSGSIZE;
17544
17545 for (i = 0; i < nd->n_matches; i++) {
17546 struct cfg80211_wowlan_nd_match *match = nd->matches[i];
17547
ae0be8de 17548 nl_match = nla_nest_start_noflag(msg, i);
8cd4d456
LC		 17549 if (!nl_match)
17550 break;
17551
17552 /* The SSID attribute is optional in nl80211, but for
17553 * simplicity reasons it's always present in the
17554 * cfg80211 structure. If a driver can't pass the
17555 * SSID, that needs to be changed. A zero length SSID
17556 * is still a valid SSID (wildcard), so it cannot be
17557 * used for this purpose.
17558 */
17559 if (nla_put(msg, NL80211_ATTR_SSID, match->ssid.ssid_len,
17560 match->ssid.ssid)) {
17561 nla_nest_cancel(msg, nl_match);
17562 goto out;
17563 }
17564
17565 if (match->n_channels) {
ae0be8de
MK		 17566 nl_freqs = nla_nest_start_noflag(msg,
17567 NL80211_ATTR_SCAN_FREQUENCIES);
8cd4d456
LC		 17568 if (!nl_freqs) {
17569 nla_nest_cancel(msg, nl_match);
17570 goto out;
17571 }
17572
17573 for (j = 0; j < match->n_channels; j++) {
5528fae8 17574 if (nla_put_u32(msg, j, match->channels[j])) {
8cd4d456
LC		 17575 nla_nest_cancel(msg, nl_freqs);
17576 nla_nest_cancel(msg, nl_match);
17577 goto out;
17578 }
17579 }
17580
17581 nla_nest_end(msg, nl_freqs);
17582 }
17583
17584 nla_nest_end(msg, nl_match);
17585 }
17586
17587out:
17588 nla_nest_end(msg, nl_results);
17589 return 0;
17590}
17591
cd8f7cb4
JB		 17592void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
17593 struct cfg80211_wowlan_wakeup *wakeup,
17594 gfp_t gfp)
17595{
f26cbf40 17596 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
cd8f7cb4
JB		 17597 struct sk_buff *msg;
17598 void *hdr;
9c90a9f6 17599 int size = 200;
cd8f7cb4
JB		 17600
17601 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
17602
17603 if (wakeup)
17604 size += wakeup->packet_present_len;
17605
17606 msg = nlmsg_new(size, gfp);
17607 if (!msg)
17608 return;
17609
17610 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
17611 if (!hdr)
17612 goto free_msg;
17613
17614 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 17615 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17616 NL80211_ATTR_PAD))
cd8f7cb4
JB		 17617 goto free_msg;
17618
17619 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
17620 wdev->netdev->ifindex))
17621 goto free_msg;
17622
17623 if (wakeup) {
17624 struct nlattr *reasons;
17625
ae0be8de
MK		 17626 reasons = nla_nest_start_noflag(msg,
17627 NL80211_ATTR_WOWLAN_TRIGGERS);
7fa322c8
JB		 17628 if (!reasons)
17629 goto free_msg;
cd8f7cb4
JB		 17630
17631 if (wakeup->disconnect &&
17632 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
17633 goto free_msg;
17634 if (wakeup->magic_pkt &&
17635 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
17636 goto free_msg;
17637 if (wakeup->gtk_rekey_failure &&
17638 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
17639 goto free_msg;
17640 if (wakeup->eap_identity_req &&
17641 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
17642 goto free_msg;
17643 if (wakeup->four_way_handshake &&
17644 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
17645 goto free_msg;
17646 if (wakeup->rfkill_release &&
17647 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
17648 goto free_msg;
17649
17650 if (wakeup->pattern_idx >= 0 &&
17651 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
17652 wakeup->pattern_idx))
17653 goto free_msg;
17654
ae917c9f
JB		 17655 if (wakeup->tcp_match &&
17656 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH))
17657 goto free_msg;
2a0e047e 17658
ae917c9f
JB		 17659 if (wakeup->tcp_connlost &&
17660 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST))
17661 goto free_msg;
2a0e047e 17662
ae917c9f
JB		 17663 if (wakeup->tcp_nomoretokens &&
17664 nla_put_flag(msg,
17665 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS))
17666 goto free_msg;
2a0e047e 17667
cd8f7cb4
JB		 17668 if (wakeup->packet) {
17669 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
17670 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
17671
17672 if (!wakeup->packet_80211) {
17673 pkt_attr =
17674 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
17675 len_attr =
17676 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
17677 }
17678
17679 if (wakeup->packet_len &&
17680 nla_put_u32(msg, len_attr, wakeup->packet_len))
17681 goto free_msg;
17682
17683 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
17684 wakeup->packet))
17685 goto free_msg;
17686 }
17687
8cd4d456
LC		 17688 if (wakeup->net_detect &&
17689 cfg80211_net_detect_results(msg, wakeup))
17690 goto free_msg;
17691
cd8f7cb4
JB		 17692 nla_nest_end(msg, reasons);
17693 }
17694
9c90a9f6 17695 genlmsg_end(msg, hdr);
cd8f7cb4 17696
68eb5503 17697 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17698 NL80211_MCGRP_MLME, gfp);
cd8f7cb4
JB		 17699 return;
17700
17701 free_msg:
17702 nlmsg_free(msg);
17703}
17704EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
17705#endif
17706
3475b094
JM		 17707void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
17708 enum nl80211_tdls_operation oper,
17709 u16 reason_code, gfp_t gfp)
17710{
17711 struct wireless_dev *wdev = dev->ieee80211_ptr;
f26cbf40 17712 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
3475b094
JM		 17713 struct sk_buff *msg;
17714 void *hdr;
3475b094
JM		 17715
17716 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
17717 reason_code);
17718
17719 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17720 if (!msg)
17721 return;
17722
17723 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
17724 if (!hdr) {
17725 nlmsg_free(msg);
17726 return;
17727 }
17728
17729 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17730 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17731 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
17732 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
17733 (reason_code > 0 &&
17734 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
17735 goto nla_put_failure;
17736
9c90a9f6 17737 genlmsg_end(msg, hdr);
3475b094 17738
68eb5503 17739 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17740 NL80211_MCGRP_MLME, gfp);
3475b094
JM		 17741 return;
17742
17743 nla_put_failure:
3475b094
JM		 17744 nlmsg_free(msg);
17745}
17746EXPORT_SYMBOL(cfg80211_tdls_oper_request);
17747
026331c4
JM		 17748static int nl80211_netlink_notify(struct notifier_block * nb,
17749 unsigned long state,
17750 void *_notify)
17751{
17752 struct netlink_notify *notify = _notify;
17753 struct cfg80211_registered_device *rdev;
17754 struct wireless_dev *wdev;
37c73b5f 17755 struct cfg80211_beacon_registration *reg, *tmp;
026331c4 17756
8f815cdd 17757 if (state != NETLINK_URELEASE || notify->protocol != NETLINK_GENERIC)
026331c4
JM		 17758 return NOTIFY_DONE;
17759
17760 rcu_read_lock();
17761
5e760230 17762 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
ca986ad9 17763 struct cfg80211_sched_scan_request *sched_scan_req;
753aacfd 17764
ca986ad9
AVS		 17765 list_for_each_entry_rcu(sched_scan_req,
17766 &rdev->sched_scan_req_list,
17767 list) {
17768 if (sched_scan_req->owner_nlportid == notify->portid) {
17769 sched_scan_req->nl_owner_dead = true;
753aacfd 17770 schedule_work(&rdev->sched_scan_stop_wk);
ca986ad9 17771 }
753aacfd 17772 }
78f22b6a 17773
53873f13 17774 list_for_each_entry_rcu(wdev, &rdev->wiphy.wdev_list, list) {
15e47304 17775 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f 17776
ab81007a
JB		 17777 if (wdev->owner_nlportid == notify->portid) {
17778 wdev->nl_owner_dead = true;
17779 schedule_work(&rdev->destroy_work);
17780 } else if (wdev->conn_owner_nlportid == notify->portid) {
bd2522b1 17781 schedule_work(&wdev->disconnect_wk);
ab81007a 17782 }
9bb7e0f2
JB		 17783
17784 cfg80211_release_pmsr(wdev, notify->portid);
78f22b6a
JB		 17785 }
17786
37c73b5f
BG		 17787 spin_lock_bh(&rdev->beacon_registrations_lock);
17788 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
17789 list) {
17790 if (reg->nlportid == notify->portid) {
17791 list_del(&reg->list);
17792 kfree(reg);
17793 break;
17794 }
17795 }
17796 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 17797 }
026331c4
JM		 17798
17799 rcu_read_unlock();
17800
05050753
I		 17801 /*
17802 * It is possible that the user space process that is controlling the
17803 * indoor setting disappeared, so notify the regulatory core.
17804 */
17805 regulatory_netlink_notify(notify->portid);
6784c7db 17806 return NOTIFY_OK;
026331c4
JM		 17807}
17808
17809static struct notifier_block nl80211_netlink_notifier = {
17810 .notifier_call = nl80211_netlink_notify,
17811};
17812
355199e0
JM		 17813void cfg80211_ft_event(struct net_device *netdev,
17814 struct cfg80211_ft_event_params *ft_event)
17815{
17816 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
f26cbf40 17817 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
355199e0
JM		 17818 struct sk_buff *msg;
17819 void *hdr;
355199e0
JM		 17820
17821 trace_cfg80211_ft_event(wiphy, netdev, ft_event);
17822
17823 if (!ft_event->target_ap)
17824 return;
17825
1039d081
DL		 17826 msg = nlmsg_new(100 + ft_event->ies_len + ft_event->ric_ies_len,
17827 GFP_KERNEL);
355199e0
JM		 17828 if (!msg)
17829 return;
17830
17831 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FT_EVENT);
ae917c9f
JB		 17832 if (!hdr)
17833 goto out;
355199e0 17834
ae917c9f
JB		 17835 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17836 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17837 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ft_event->target_ap))
17838 goto out;
355199e0 17839
ae917c9f
JB		 17840 if (ft_event->ies &&
17841 nla_put(msg, NL80211_ATTR_IE, ft_event->ies_len, ft_event->ies))
17842 goto out;
17843 if (ft_event->ric_ies &&
17844 nla_put(msg, NL80211_ATTR_IE_RIC, ft_event->ric_ies_len,
17845 ft_event->ric_ies))
17846 goto out;
355199e0 17847
9c90a9f6 17848 genlmsg_end(msg, hdr);
355199e0 17849
68eb5503 17850 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
2a94fe48 17851 NL80211_MCGRP_MLME, GFP_KERNEL);
ae917c9f
JB		 17852 return;
17853 out:
17854 nlmsg_free(msg);
355199e0
JM		 17855}
17856EXPORT_SYMBOL(cfg80211_ft_event);
17857
5de17984
AS		 17858void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp)
17859{
17860 struct cfg80211_registered_device *rdev;
17861 struct sk_buff *msg;
17862 void *hdr;
17863 u32 nlportid;
17864
f26cbf40 17865 rdev = wiphy_to_rdev(wdev->wiphy);
5de17984
AS		 17866 if (!rdev->crit_proto_nlportid)
17867 return;
17868
17869 nlportid = rdev->crit_proto_nlportid;
17870 rdev->crit_proto_nlportid = 0;
17871
17872 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17873 if (!msg)
17874 return;
17875
17876 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CRIT_PROTOCOL_STOP);
17877 if (!hdr)
17878 goto nla_put_failure;
17879
17880 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2dad624e
ND		 17881 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17882 NL80211_ATTR_PAD))
5de17984
AS		 17883 goto nla_put_failure;
17884
17885 genlmsg_end(msg, hdr);
17886
17887 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
17888 return;
17889
17890 nla_put_failure:
5de17984 17891 nlmsg_free(msg);
5de17984
AS		 17892}
17893EXPORT_SYMBOL(cfg80211_crit_proto_stopped);
17894
348baf0e
JB		 17895void nl80211_send_ap_stopped(struct wireless_dev *wdev)
17896{
17897 struct wiphy *wiphy = wdev->wiphy;
f26cbf40 17898 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
348baf0e
JB		 17899 struct sk_buff *msg;
17900 void *hdr;
17901
17902 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
17903 if (!msg)
17904 return;
17905
17906 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STOP_AP);
17907 if (!hdr)
17908 goto out;
17909
17910 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17911 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex) ||
2dad624e
ND		 17912 nla_put_u64_64bit(msg, NL80211_ATTR_WDEV, wdev_id(wdev),
17913 NL80211_ATTR_PAD))
348baf0e
JB		 17914 goto out;
17915
17916 genlmsg_end(msg, hdr);
17917
17918 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(wiphy), msg, 0,
17919 NL80211_MCGRP_MLME, GFP_KERNEL);
17920 return;
17921 out:
17922 nlmsg_free(msg);
17923}
17924
40cbfa90
SD		 17925int cfg80211_external_auth_request(struct net_device *dev,
17926 struct cfg80211_external_auth_params *params,
17927 gfp_t gfp)
17928{
17929 struct wireless_dev *wdev = dev->ieee80211_ptr;
17930 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
17931 struct sk_buff *msg;
17932 void *hdr;
17933
17934 if (!wdev->conn_owner_nlportid)
17935 return -EINVAL;
17936
17937 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17938 if (!msg)
17939 return -ENOMEM;
17940
17941 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_EXTERNAL_AUTH);
17942 if (!hdr)
17943 goto nla_put_failure;
17944
17945 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17946 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
17947 nla_put_u32(msg, NL80211_ATTR_AKM_SUITES, params->key_mgmt_suite) ||
17948 nla_put_u32(msg, NL80211_ATTR_EXTERNAL_AUTH_ACTION,
17949 params->action) ||
17950 nla_put(msg, NL80211_ATTR_BSSID, ETH_ALEN, params->bssid) ||
17951 nla_put(msg, NL80211_ATTR_SSID, params->ssid.ssid_len,
17952 params->ssid.ssid))
17953 goto nla_put_failure;
17954
17955 genlmsg_end(msg, hdr);
17956 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg,
17957 wdev->conn_owner_nlportid);
17958 return 0;
17959
17960 nla_put_failure:
17961 nlmsg_free(msg);
17962 return -ENOBUFS;
17963}
17964EXPORT_SYMBOL(cfg80211_external_auth_request);
17965
cb74e977
SD		 17966void cfg80211_update_owe_info_event(struct net_device *netdev,
17967 struct cfg80211_update_owe_info *owe_info,
17968 gfp_t gfp)
17969{
17970 struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
17971 struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
17972 struct sk_buff *msg;
17973 void *hdr;
17974
17975 trace_cfg80211_update_owe_info_event(wiphy, netdev, owe_info);
17976
17977 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
17978 if (!msg)
17979 return;
17980
17981 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_UPDATE_OWE_INFO);
17982 if (!hdr)
17983 goto nla_put_failure;
17984
17985 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
17986 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
17987 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, owe_info->peer))
17988 goto nla_put_failure;
17989
17990 if (!owe_info->ie_len ||
17991 nla_put(msg, NL80211_ATTR_IE, owe_info->ie_len, owe_info->ie))
17992 goto nla_put_failure;
17993
17994 genlmsg_end(msg, hdr);
17995
17996 genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
17997 NL80211_MCGRP_MLME, gfp);
17998 return;
17999
18000nla_put_failure:
18001 genlmsg_cancel(msg, hdr);
18002 nlmsg_free(msg);
18003}
18004EXPORT_SYMBOL(cfg80211_update_owe_info_event);
18005
55682965
JB		 18006/* initialisation/exit functions */
18007
56989f6d 18008int __init nl80211_init(void)
55682965 18009{
0d63cbb5 18010 int err;
55682965 18011
489111e5 18012 err = genl_register_family(&nl80211_fam);
55682965
JB		 18013 if (err)
18014 return err;
18015
026331c4
JM		 18016 err = netlink_register_notifier(&nl80211_netlink_notifier);
18017 if (err)
18018 goto err_out;
18019
55682965
JB		 18020 return 0;
18021 err_out:
18022 genl_unregister_family(&nl80211_fam);
18023 return err;
18024}
18025
18026void nl80211_exit(void)
18027{
026331c4 18028 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 18029 genl_unregister_family(&nl80211_fam);
18030}
Ubuntu Hirsute Linux kernel mirror