]> git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/blame - net/wireless/nl80211.c
projects / mirror_ubuntu-focal-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
mac80211: VHT peer STA caps
[mirror_ubuntu-focal-kernel.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
5a0e3ad6 10#include <linux/slab.h>
55682965
JB		 11#include <linux/list.h>
12#include <linux/if_ether.h>
13#include <linux/ieee80211.h>
14#include <linux/nl80211.h>
15#include <linux/rtnetlink.h>
16#include <linux/netlink.h>
2a519311 17#include <linux/etherdevice.h>
463d0183 18#include <net/net_namespace.h>
55682965
JB		 19#include <net/genetlink.h>
20#include <net/cfg80211.h>
463d0183 21#include <net/sock.h>
55682965
JB		 22#include "core.h"
23#include "nl80211.h"
b2e1b302 24#include "reg.h"
55682965 25
5fb628e9
JM		 26static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
27 struct genl_info *info,
28 struct cfg80211_crypto_settings *settings,
29 int cipher_limit);
30
4c476991
JB		 31static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
32 struct genl_info *info);
33static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
34 struct genl_info *info);
35
55682965
JB		 36/* the netlink family */
37static struct genl_family nl80211_fam = {
38 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
39 .name = "nl80211", /* have users key off the name instead */
40 .hdrsize = 0, /* no private header */
41 .version = 1, /* no particular meaning now */
42 .maxattr = NL80211_ATTR_MAX,
463d0183 43 .netnsok = true,
4c476991
JB		 44 .pre_doit = nl80211_pre_doit,
45 .post_doit = nl80211_post_doit,
55682965
JB		 46};
47
89a54e48
JB		 48/* returns ERR_PTR values */
49static struct wireless_dev *
50__cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
55682965 51{
89a54e48
JB		 52 struct cfg80211_registered_device *rdev;
53 struct wireless_dev *result = NULL;
54 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
55 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
56 u64 wdev_id;
57 int wiphy_idx = -1;
58 int ifidx = -1;
55682965 59
89a54e48 60 assert_cfg80211_lock();
55682965 61
89a54e48
JB		 62 if (!have_ifidx && !have_wdev_id)
63 return ERR_PTR(-EINVAL);
55682965 64
89a54e48
JB		 65 if (have_ifidx)
66 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
67 if (have_wdev_id) {
68 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
69 wiphy_idx = wdev_id >> 32;
55682965
JB		 70 }
71
89a54e48
JB		 72 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
73 struct wireless_dev *wdev;
74
75 if (wiphy_net(&rdev->wiphy) != netns)
76 continue;
77
78 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
79 continue;
80
81 mutex_lock(&rdev->devlist_mtx);
82 list_for_each_entry(wdev, &rdev->wdev_list, list) {
83 if (have_ifidx && wdev->netdev &&
84 wdev->netdev->ifindex == ifidx) {
85 result = wdev;
86 break;
87 }
88 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
89 result = wdev;
90 break;
91 }
92 }
93 mutex_unlock(&rdev->devlist_mtx);
94
95 if (result)
96 break;
97 }
98
99 if (result)
100 return result;
101 return ERR_PTR(-ENODEV);
55682965
JB		 102}
103
a9455408 104static struct cfg80211_registered_device *
878d9ec7 105__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 106{
7fee4778
JB		 107 struct cfg80211_registered_device *rdev = NULL, *tmp;
108 struct net_device *netdev;
a9455408
JB		 109
110 assert_cfg80211_lock();
111
878d9ec7 112 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 113 !attrs[NL80211_ATTR_IFINDEX] &&
114 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 115 return ERR_PTR(-EINVAL);
116
878d9ec7 117 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 118 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 119 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 120
89a54e48
JB		 121 if (attrs[NL80211_ATTR_WDEV]) {
122 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
123 struct wireless_dev *wdev;
124 bool found = false;
125
126 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
127 if (tmp) {
128 /* make sure wdev exists */
129 mutex_lock(&tmp->devlist_mtx);
130 list_for_each_entry(wdev, &tmp->wdev_list, list) {
131 if (wdev->identifier != (u32)wdev_id)
132 continue;
133 found = true;
134 break;
135 }
136 mutex_unlock(&tmp->devlist_mtx);
137
138 if (!found)
139 tmp = NULL;
140
141 if (rdev && tmp != rdev)
142 return ERR_PTR(-EINVAL);
143 rdev = tmp;
144 }
145 }
146
878d9ec7
JB		 147 if (attrs[NL80211_ATTR_IFINDEX]) {
148 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
4f7eff10 149 netdev = dev_get_by_index(netns, ifindex);
7fee4778
JB		 150 if (netdev) {
151 if (netdev->ieee80211_ptr)
152 tmp = wiphy_to_dev(
153 netdev->ieee80211_ptr->wiphy);
154 else
155 tmp = NULL;
156
157 dev_put(netdev);
158
159 /* not wireless device -- return error */
160 if (!tmp)
161 return ERR_PTR(-EINVAL);
162
163 /* mismatch -- return error */
164 if (rdev && tmp != rdev)
165 return ERR_PTR(-EINVAL);
166
167 rdev = tmp;
a9455408 168 }
a9455408 169 }
a9455408 170
4f7eff10
JB		 171 if (!rdev)
172 return ERR_PTR(-ENODEV);
a9455408 173
4f7eff10
JB		 174 if (netns != wiphy_net(&rdev->wiphy))
175 return ERR_PTR(-ENODEV);
176
177 return rdev;
a9455408
JB		 178}
179
180/*
181 * This function returns a pointer to the driver
182 * that the genl_info item that is passed refers to.
183 * If successful, it returns non-NULL and also locks
184 * the driver's mutex!
185 *
186 * This means that you need to call cfg80211_unlock_rdev()
187 * before being allowed to acquire &cfg80211_mutex!
188 *
189 * This is necessary because we need to lock the global
190 * mutex to get an item off the list safely, and then
191 * we lock the rdev mutex so it doesn't go away under us.
192 *
193 * We don't want to keep cfg80211_mutex locked
194 * for all the time in order to allow requests on
195 * other interfaces to go through at the same time.
196 *
197 * The result of this can be a PTR_ERR and hence must
198 * be checked with IS_ERR() for errors.
199 */
200static struct cfg80211_registered_device *
4f7eff10 201cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408
JB		 202{
203 struct cfg80211_registered_device *rdev;
204
205 mutex_lock(&cfg80211_mutex);
878d9ec7 206 rdev = __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 207
208 /* if it is not an error we grab the lock on
209 * it to assure it won't be going away while
210 * we operate on it */
211 if (!IS_ERR(rdev))
212 mutex_lock(&rdev->mtx);
213
214 mutex_unlock(&cfg80211_mutex);
215
216 return rdev;
217}
218
55682965 219/* policy for the attributes */
b54452b0 220static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
55682965
JB		 221 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
222 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 223 .len = 20-1 },
31888487 224 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
72bdcf34 225 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 226 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
b9a5f8ca
JM		 227 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
228 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
229 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
230 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 231 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
55682965
JB		 232
233 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
234 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
235 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 236
e007b857
EP		 237 [NL80211_ATTR_MAC] = { .len = ETH_ALEN },
238 [NL80211_ATTR_PREV_BSSID] = { .len = ETH_ALEN },
41ade00f 239
b9454e83 240 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 241 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
242 .len = WLAN_MAX_KEY_LEN },
243 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
244 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
245 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 246 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
e31b8213 247 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
ed1b6cc7
JB		 248
249 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
250 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
251 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
252 .len = IEEE80211_MAX_DATA_LEN },
253 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
254 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 255 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
256 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
257 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
258 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
259 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 260 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 261 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 262 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 263 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 264 .len = IEEE80211_MAX_MESH_ID_LEN },
2ec600d6 265 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 266
b2e1b302
LR		 267 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
268 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
269
9f1ba906
JM		 270 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
271 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
272 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 273 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
274 .len = NL80211_MAX_SUPP_RATES },
50b12f59 275 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 276
24bdd9f4 277 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 278 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 279
6c739419 280 [NL80211_ATTR_HT_CAPABILITY] = { .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 281
282 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
283 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
284 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 285 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
286 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 287
288 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
289 .len = IEEE80211_MAX_SSID_LEN },
290 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
291 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 292 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 293 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 294 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 295 [NL80211_ATTR_STA_FLAGS2] = {
296 .len = sizeof(struct nl80211_sta_flag_update),
297 },
3f77316c 298 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 299 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
300 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
b23aa676
SO		 301 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
302 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
303 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 304 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 305 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
67fbb16b
SO		 306 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
307 .len = WLAN_PMKID_LEN },
9588bbd5
JM		 308 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
309 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 310 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 311 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
312 .len = IEEE80211_MAX_DATA_LEN },
313 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ffb9eb3d 314 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
d6dc1a38 315 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 316 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 317 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 318 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
319 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 320 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 321 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
322 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 323 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 324 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 325 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 326 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
9c3990aa 327 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
bbe6ad6d 328 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 329 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 330 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
32e9de84 331 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
9946ecfb
JM		 332 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
333 .len = IEEE80211_MAX_DATA_LEN },
334 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
335 .len = IEEE80211_MAX_DATA_LEN },
f4b34b55 336 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 337 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 338 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 339 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
340 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
341 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
342 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
343 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
e247bd90 344 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 345 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
346 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 347 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 348 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
349 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
350 .len = NL80211_HT_CAPABILITY_LEN
351 },
1d9d9213 352 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 353 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 354 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 355 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 356 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
e39e5b5e 357 [NL80211_ATTR_SAE_DATA] = { .type = NLA_BINARY, },
55682965
JB		 358};
359
e31b8213 360/* policy for the key attributes */
b54452b0 361static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 362 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 363 [NL80211_KEY_IDX] = { .type = NLA_U8 },
364 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 365 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 366 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
367 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
e31b8213 368 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
dbd2fd65
JB		 369 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
370};
371
372/* policy for the key default flags */
373static const struct nla_policy
374nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
375 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
376 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 377};
378
ff1b6e69
JB		 379/* policy for WoWLAN attributes */
380static const struct nla_policy
381nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
382 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
383 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
384 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
385 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 386 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
387 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
388 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
389 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
ff1b6e69
JB		 390};
391
e5497d76
JB		 392/* policy for GTK rekey offload attributes */
393static const struct nla_policy
394nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
395 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
396 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
397 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
398};
399
a1f1c21c
LC		 400static const struct nla_policy
401nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 402 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 403 .len = IEEE80211_MAX_SSID_LEN },
88e920b4 404 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
a1f1c21c
LC		 405};
406
a043897a
HS		 407/* ifidx get helper */
408static int nl80211_get_ifidx(struct netlink_callback *cb)
409{
410 int res;
411
412 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
413 nl80211_fam.attrbuf, nl80211_fam.maxattr,
414 nl80211_policy);
415 if (res)
416 return res;
417
418 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
419 return -EINVAL;
420
421 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
422 if (!res)
423 return -EINVAL;
424 return res;
425}
426
67748893
JB		 427static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
428 struct netlink_callback *cb,
429 struct cfg80211_registered_device **rdev,
430 struct net_device **dev)
431{
432 int ifidx = cb->args[0];
433 int err;
434
435 if (!ifidx)
436 ifidx = nl80211_get_ifidx(cb);
437 if (ifidx < 0)
438 return ifidx;
439
440 cb->args[0] = ifidx;
441
442 rtnl_lock();
443
444 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
445 if (!*dev) {
446 err = -ENODEV;
447 goto out_rtnl;
448 }
449
450 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3cc25e51
FF		 451 if (IS_ERR(*rdev)) {
452 err = PTR_ERR(*rdev);
67748893
JB		 453 goto out_rtnl;
454 }
455
456 return 0;
457 out_rtnl:
458 rtnl_unlock();
459 return err;
460}
461
462static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
463{
464 cfg80211_unlock_rdev(rdev);
465 rtnl_unlock();
466}
467
f4a11bb0
JB		 468/* IE validation */
469static bool is_valid_ie_attr(const struct nlattr *attr)
470{
471 const u8 *pos;
472 int len;
473
474 if (!attr)
475 return true;
476
477 pos = nla_data(attr);
478 len = nla_len(attr);
479
480 while (len) {
481 u8 elemlen;
482
483 if (len < 2)
484 return false;
485 len -= 2;
486
487 elemlen = pos[1];
488 if (elemlen > len)
489 return false;
490
491 len -= elemlen;
492 pos += 2 + elemlen;
493 }
494
495 return true;
496}
497
55682965 498/* message building helper */
15e47304 499static inline void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
55682965
JB		 500 int flags, u8 cmd)
501{
502 /* since there is no private header just add the generic one */
15e47304 503 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 504}
505
5dab3b8a
LR		 506static int nl80211_msg_put_channel(struct sk_buff *msg,
507 struct ieee80211_channel *chan)
508{
9360ffd1
DM		 509 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
510 chan->center_freq))
511 goto nla_put_failure;
5dab3b8a 512
9360ffd1
DM		 513 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
514 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
515 goto nla_put_failure;
516 if ((chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) &&
517 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN))
518 goto nla_put_failure;
519 if ((chan->flags & IEEE80211_CHAN_NO_IBSS) &&
520 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IBSS))
521 goto nla_put_failure;
522 if ((chan->flags & IEEE80211_CHAN_RADAR) &&
523 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
524 goto nla_put_failure;
5dab3b8a 525
9360ffd1
DM		 526 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
527 DBM_TO_MBM(chan->max_power)))
528 goto nla_put_failure;
5dab3b8a
LR		 529
530 return 0;
531
532 nla_put_failure:
533 return -ENOBUFS;
534}
535
55682965
JB		 536/* netlink command implementations */
537
b9454e83
JB		 538struct key_parse {
539 struct key_params p;
540 int idx;
e31b8213 541 int type;
b9454e83 542 bool def, defmgmt;
dbd2fd65 543 bool def_uni, def_multi;
b9454e83
JB		 544};
545
546static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
547{
548 struct nlattr *tb[NL80211_KEY_MAX + 1];
549 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
550 nl80211_key_policy);
551 if (err)
552 return err;
553
554 k->def = !!tb[NL80211_KEY_DEFAULT];
555 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
556
dbd2fd65
JB		 557 if (k->def) {
558 k->def_uni = true;
559 k->def_multi = true;
560 }
561 if (k->defmgmt)
562 k->def_multi = true;
563
b9454e83
JB		 564 if (tb[NL80211_KEY_IDX])
565 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
566
567 if (tb[NL80211_KEY_DATA]) {
568 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
569 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
570 }
571
572 if (tb[NL80211_KEY_SEQ]) {
573 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
574 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
575 }
576
577 if (tb[NL80211_KEY_CIPHER])
578 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
579
e31b8213
JB		 580 if (tb[NL80211_KEY_TYPE]) {
581 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
582 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
583 return -EINVAL;
584 }
585
dbd2fd65
JB		 586 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
587 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
2da8f419
JB		 588 err = nla_parse_nested(kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
589 tb[NL80211_KEY_DEFAULT_TYPES],
590 nl80211_key_default_policy);
dbd2fd65
JB		 591 if (err)
592 return err;
593
594 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
595 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
596 }
597
b9454e83
JB		 598 return 0;
599}
600
601static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
602{
603 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
604 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
605 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
606 }
607
608 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
609 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
610 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
611 }
612
613 if (info->attrs[NL80211_ATTR_KEY_IDX])
614 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
615
616 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
617 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
618
619 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
620 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
621
dbd2fd65
JB		 622 if (k->def) {
623 k->def_uni = true;
624 k->def_multi = true;
625 }
626 if (k->defmgmt)
627 k->def_multi = true;
628
e31b8213
JB		 629 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
630 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
631 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
632 return -EINVAL;
633 }
634
dbd2fd65
JB		 635 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
636 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
637 int err = nla_parse_nested(
638 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
639 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
640 nl80211_key_default_policy);
641 if (err)
642 return err;
643
644 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
645 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
646 }
647
b9454e83
JB		 648 return 0;
649}
650
651static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
652{
653 int err;
654
655 memset(k, 0, sizeof(*k));
656 k->idx = -1;
e31b8213 657 k->type = -1;
b9454e83
JB		 658
659 if (info->attrs[NL80211_ATTR_KEY])
660 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
661 else
662 err = nl80211_parse_key_old(info, k);
663
664 if (err)
665 return err;
666
667 if (k->def && k->defmgmt)
668 return -EINVAL;
669
dbd2fd65
JB		 670 if (k->defmgmt) {
671 if (k->def_uni || !k->def_multi)
672 return -EINVAL;
673 }
674
b9454e83
JB		 675 if (k->idx != -1) {
676 if (k->defmgmt) {
677 if (k->idx < 4 || k->idx > 5)
678 return -EINVAL;
679 } else if (k->def) {
680 if (k->idx < 0 || k->idx > 3)
681 return -EINVAL;
682 } else {
683 if (k->idx < 0 || k->idx > 5)
684 return -EINVAL;
685 }
686 }
687
688 return 0;
689}
690
fffd0934
JB		 691static struct cfg80211_cached_keys *
692nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
693 struct nlattr *keys)
694{
695 struct key_parse parse;
696 struct nlattr *key;
697 struct cfg80211_cached_keys *result;
698 int rem, err, def = 0;
699
700 result = kzalloc(sizeof(*result), GFP_KERNEL);
701 if (!result)
702 return ERR_PTR(-ENOMEM);
703
704 result->def = -1;
705 result->defmgmt = -1;
706
707 nla_for_each_nested(key, keys, rem) {
708 memset(&parse, 0, sizeof(parse));
709 parse.idx = -1;
710
711 err = nl80211_parse_key_new(key, &parse);
712 if (err)
713 goto error;
714 err = -EINVAL;
715 if (!parse.p.key)
716 goto error;
717 if (parse.idx < 0 || parse.idx > 4)
718 goto error;
719 if (parse.def) {
720 if (def)
721 goto error;
722 def = 1;
723 result->def = parse.idx;
dbd2fd65
JB		 724 if (!parse.def_uni || !parse.def_multi)
725 goto error;
fffd0934
JB		 726 } else if (parse.defmgmt)
727 goto error;
728 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 729 parse.idx, false, NULL);
fffd0934
JB		 730 if (err)
731 goto error;
732 result->params[parse.idx].cipher = parse.p.cipher;
733 result->params[parse.idx].key_len = parse.p.key_len;
734 result->params[parse.idx].key = result->data[parse.idx];
735 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
736 }
737
738 return result;
739 error:
740 kfree(result);
741 return ERR_PTR(err);
742}
743
744static int nl80211_key_allowed(struct wireless_dev *wdev)
745{
746 ASSERT_WDEV_LOCK(wdev);
747
fffd0934
JB		 748 switch (wdev->iftype) {
749 case NL80211_IFTYPE_AP:
750 case NL80211_IFTYPE_AP_VLAN:
074ac8df 751 case NL80211_IFTYPE_P2P_GO:
ff973af7 752 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 753 break;
754 case NL80211_IFTYPE_ADHOC:
755 if (!wdev->current_bss)
756 return -ENOLINK;
757 break;
758 case NL80211_IFTYPE_STATION:
074ac8df 759 case NL80211_IFTYPE_P2P_CLIENT:
fffd0934
JB		 760 if (wdev->sme_state != CFG80211_SME_CONNECTED)
761 return -ENOLINK;
762 break;
763 default:
764 return -EINVAL;
765 }
766
767 return 0;
768}
769
7527a782
JB		 770static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
771{
772 struct nlattr *nl_modes = nla_nest_start(msg, attr);
773 int i;
774
775 if (!nl_modes)
776 goto nla_put_failure;
777
778 i = 0;
779 while (ifmodes) {
9360ffd1
DM		 780 if ((ifmodes & 1) && nla_put_flag(msg, i))
781 goto nla_put_failure;
7527a782
JB		 782 ifmodes >>= 1;
783 i++;
784 }
785
786 nla_nest_end(msg, nl_modes);
787 return 0;
788
789nla_put_failure:
790 return -ENOBUFS;
791}
792
793static int nl80211_put_iface_combinations(struct wiphy *wiphy,
794 struct sk_buff *msg)
795{
796 struct nlattr *nl_combis;
797 int i, j;
798
799 nl_combis = nla_nest_start(msg,
800 NL80211_ATTR_INTERFACE_COMBINATIONS);
801 if (!nl_combis)
802 goto nla_put_failure;
803
804 for (i = 0; i < wiphy->n_iface_combinations; i++) {
805 const struct ieee80211_iface_combination *c;
806 struct nlattr *nl_combi, *nl_limits;
807
808 c = &wiphy->iface_combinations[i];
809
810 nl_combi = nla_nest_start(msg, i + 1);
811 if (!nl_combi)
812 goto nla_put_failure;
813
814 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
815 if (!nl_limits)
816 goto nla_put_failure;
817
818 for (j = 0; j < c->n_limits; j++) {
819 struct nlattr *nl_limit;
820
821 nl_limit = nla_nest_start(msg, j + 1);
822 if (!nl_limit)
823 goto nla_put_failure;
9360ffd1
DM		 824 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
825 c->limits[j].max))
826 goto nla_put_failure;
7527a782
JB		 827 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
828 c->limits[j].types))
829 goto nla_put_failure;
830 nla_nest_end(msg, nl_limit);
831 }
832
833 nla_nest_end(msg, nl_limits);
834
9360ffd1
DM		 835 if (c->beacon_int_infra_match &&
836 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
837 goto nla_put_failure;
838 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
839 c->num_different_channels) ||
840 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
841 c->max_interfaces))
842 goto nla_put_failure;
7527a782
JB		 843
844 nla_nest_end(msg, nl_combi);
845 }
846
847 nla_nest_end(msg, nl_combis);
848
849 return 0;
850nla_put_failure:
851 return -ENOBUFS;
852}
853
15e47304 854static int nl80211_send_wiphy(struct sk_buff *msg, u32 portid, u32 seq, int flags,
55682965
JB		 855 struct cfg80211_registered_device *dev)
856{
857 void *hdr;
ee688b00
JB		 858 struct nlattr *nl_bands, *nl_band;
859 struct nlattr *nl_freqs, *nl_freq;
860 struct nlattr *nl_rates, *nl_rate;
8fdc621d 861 struct nlattr *nl_cmds;
ee688b00
JB		 862 enum ieee80211_band band;
863 struct ieee80211_channel *chan;
864 struct ieee80211_rate *rate;
865 int i;
2e161f78
JB		 866 const struct ieee80211_txrx_stypes *mgmt_stypes =
867 dev->wiphy.mgmt_stypes;
55682965 868
15e47304 869 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_WIPHY);
55682965
JB		 870 if (!hdr)
871 return -1;
872
9360ffd1
DM		 873 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx) ||
874 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy)) ||
875 nla_put_u32(msg, NL80211_ATTR_GENERATION,
876 cfg80211_rdev_list_generation) ||
877 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
878 dev->wiphy.retry_short) ||
879 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
880 dev->wiphy.retry_long) ||
881 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
882 dev->wiphy.frag_threshold) ||
883 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
884 dev->wiphy.rts_threshold) ||
885 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
886 dev->wiphy.coverage_class) ||
887 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
888 dev->wiphy.max_scan_ssids) ||
889 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
890 dev->wiphy.max_sched_scan_ssids) ||
891 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
892 dev->wiphy.max_scan_ie_len) ||
893 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
894 dev->wiphy.max_sched_scan_ie_len) ||
895 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
896 dev->wiphy.max_match_sets))
897 goto nla_put_failure;
898
899 if ((dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
900 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
901 goto nla_put_failure;
902 if ((dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
903 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
904 goto nla_put_failure;
905 if ((dev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
906 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
907 goto nla_put_failure;
908 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
909 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
910 goto nla_put_failure;
911 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
912 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
913 goto nla_put_failure;
914 if ((dev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
915 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
916 goto nla_put_failure;
917
918 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
919 sizeof(u32) * dev->wiphy.n_cipher_suites,
920 dev->wiphy.cipher_suites))
921 goto nla_put_failure;
922
923 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
924 dev->wiphy.max_num_pmkids))
925 goto nla_put_failure;
926
927 if ((dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
928 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
929 goto nla_put_failure;
930
931 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
932 dev->wiphy.available_antennas_tx) ||
933 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
934 dev->wiphy.available_antennas_rx))
935 goto nla_put_failure;
936
937 if ((dev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
938 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
939 dev->wiphy.probe_resp_offload))
940 goto nla_put_failure;
87bbbe22 941
7f531e03
BR		 942 if ((dev->wiphy.available_antennas_tx ||
943 dev->wiphy.available_antennas_rx) && dev->ops->get_antenna) {
afe0cbf8
BR		 944 u32 tx_ant = 0, rx_ant = 0;
945 int res;
946 res = dev->ops->get_antenna(&dev->wiphy, &tx_ant, &rx_ant);
947 if (!res) {
9360ffd1
DM		 948 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_TX,
949 tx_ant) ||
950 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_RX,
951 rx_ant))
952 goto nla_put_failure;
afe0cbf8
BR		 953 }
954 }
955
7527a782
JB		 956 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
957 dev->wiphy.interface_modes))
f59ac048
LR		 958 goto nla_put_failure;
959
ee688b00
JB		 960 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
961 if (!nl_bands)
962 goto nla_put_failure;
963
964 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
965 if (!dev->wiphy.bands[band])
966 continue;
967
968 nl_band = nla_nest_start(msg, band);
969 if (!nl_band)
970 goto nla_put_failure;
971
d51626df 972 /* add HT info */
9360ffd1
DM		 973 if (dev->wiphy.bands[band]->ht_cap.ht_supported &&
974 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
975 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
976 &dev->wiphy.bands[band]->ht_cap.mcs) ||
977 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
978 dev->wiphy.bands[band]->ht_cap.cap) ||
979 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
980 dev->wiphy.bands[band]->ht_cap.ampdu_factor) ||
981 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
982 dev->wiphy.bands[band]->ht_cap.ampdu_density)))
983 goto nla_put_failure;
d51626df 984
bf0c111e
MP		 985 /* add VHT info */
986 if (dev->wiphy.bands[band]->vht_cap.vht_supported &&
987 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
988 sizeof(dev->wiphy.bands[band]->vht_cap.vht_mcs),
989 &dev->wiphy.bands[band]->vht_cap.vht_mcs) ||
990 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
991 dev->wiphy.bands[band]->vht_cap.cap)))
992 goto nla_put_failure;
993
ee688b00
JB		 994 /* add frequencies */
995 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
996 if (!nl_freqs)
997 goto nla_put_failure;
998
999 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
1000 nl_freq = nla_nest_start(msg, i);
1001 if (!nl_freq)
1002 goto nla_put_failure;
1003
1004 chan = &dev->wiphy.bands[band]->channels[i];
5dab3b8a
LR		 1005
1006 if (nl80211_msg_put_channel(msg, chan))
1007 goto nla_put_failure;
e2f367f2 1008
ee688b00
JB		 1009 nla_nest_end(msg, nl_freq);
1010 }
1011
1012 nla_nest_end(msg, nl_freqs);
1013
1014 /* add bitrates */
1015 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
1016 if (!nl_rates)
1017 goto nla_put_failure;
1018
1019 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
1020 nl_rate = nla_nest_start(msg, i);
1021 if (!nl_rate)
1022 goto nla_put_failure;
1023
1024 rate = &dev->wiphy.bands[band]->bitrates[i];
9360ffd1
DM		 1025 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1026 rate->bitrate))
1027 goto nla_put_failure;
1028 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1029 nla_put_flag(msg,
1030 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1031 goto nla_put_failure;
ee688b00
JB		 1032
1033 nla_nest_end(msg, nl_rate);
1034 }
1035
1036 nla_nest_end(msg, nl_rates);
1037
1038 nla_nest_end(msg, nl_band);
1039 }
1040 nla_nest_end(msg, nl_bands);
1041
8fdc621d
JB		 1042 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
1043 if (!nl_cmds)
1044 goto nla_put_failure;
1045
1046 i = 0;
1047#define CMD(op, n) \
1048 do { \
1049 if (dev->ops->op) { \
1050 i++; \
9360ffd1
DM		 1051 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1052 goto nla_put_failure; \
8fdc621d
JB		 1053 } \
1054 } while (0)
1055
1056 CMD(add_virtual_intf, NEW_INTERFACE);
1057 CMD(change_virtual_intf, SET_INTERFACE);
1058 CMD(add_key, NEW_KEY);
8860020e 1059 CMD(start_ap, START_AP);
8fdc621d
JB		 1060 CMD(add_station, NEW_STATION);
1061 CMD(add_mpath, NEW_MPATH);
24bdd9f4 1062 CMD(update_mesh_config, SET_MESH_CONFIG);
8fdc621d 1063 CMD(change_bss, SET_BSS);
636a5d36
JM		 1064 CMD(auth, AUTHENTICATE);
1065 CMD(assoc, ASSOCIATE);
1066 CMD(deauth, DEAUTHENTICATE);
1067 CMD(disassoc, DISASSOCIATE);
04a773ad 1068 CMD(join_ibss, JOIN_IBSS);
29cbe68c 1069 CMD(join_mesh, JOIN_MESH);
67fbb16b
SO		 1070 CMD(set_pmksa, SET_PMKSA);
1071 CMD(del_pmksa, DEL_PMKSA);
1072 CMD(flush_pmksa, FLUSH_PMKSA);
7c4ef712
JB		 1073 if (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1074 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
13ae75b1 1075 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2e161f78 1076 CMD(mgmt_tx, FRAME);
f7ca38df 1077 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
5be83de5 1078 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
463d0183 1079 i++;
9360ffd1
DM		 1080 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
1081 goto nla_put_failure;
463d0183 1082 }
e8c9bd5b 1083 if (dev->ops->set_monitor_channel || dev->ops->start_ap ||
cc1d2806 1084 dev->ops->join_mesh) {
aa430da4
JB		 1085 i++;
1086 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1087 goto nla_put_failure;
1088 }
e8347eba 1089 CMD(set_wds_peer, SET_WDS_PEER);
109086ce
AN		 1090 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1091 CMD(tdls_mgmt, TDLS_MGMT);
1092 CMD(tdls_oper, TDLS_OPER);
1093 }
807f8a8c
LC		 1094 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
1095 CMD(sched_scan_start, START_SCHED_SCAN);
7f6cf311 1096 CMD(probe_client, PROBE_CLIENT);
1d9d9213 1097 CMD(set_noack_map, SET_NOACK_MAP);
5e760230
JB		 1098 if (dev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1099 i++;
9360ffd1
DM		 1100 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1101 goto nla_put_failure;
5e760230 1102 }
98104fde 1103 CMD(start_p2p_device, START_P2P_DEVICE);
8fdc621d 1104
4745fc09
KV		 1105#ifdef CONFIG_NL80211_TESTMODE
1106 CMD(testmode_cmd, TESTMODE);
1107#endif
1108
8fdc621d 1109#undef CMD
b23aa676 1110
6829c878 1111 if (dev->ops->connect || dev->ops->auth) {
b23aa676 1112 i++;
9360ffd1
DM		 1113 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
1114 goto nla_put_failure;
b23aa676
SO		 1115 }
1116
6829c878 1117 if (dev->ops->disconnect || dev->ops->deauth) {
b23aa676 1118 i++;
9360ffd1
DM		 1119 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1120 goto nla_put_failure;
b23aa676
SO		 1121 }
1122
8fdc621d
JB		 1123 nla_nest_end(msg, nl_cmds);
1124
7c4ef712 1125 if (dev->ops->remain_on_channel &&
9360ffd1
DM		 1126 (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
1127 nla_put_u32(msg, NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1128 dev->wiphy.max_remain_on_channel_duration))
1129 goto nla_put_failure;
a293911d 1130
9360ffd1
DM		 1131 if ((dev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
1132 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
1133 goto nla_put_failure;
f7ca38df 1134
2e161f78
JB		 1135 if (mgmt_stypes) {
1136 u16 stypes;
1137 struct nlattr *nl_ftypes, *nl_ifs;
1138 enum nl80211_iftype ift;
1139
1140 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
1141 if (!nl_ifs)
1142 goto nla_put_failure;
1143
1144 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1145 nl_ftypes = nla_nest_start(msg, ift);
1146 if (!nl_ftypes)
1147 goto nla_put_failure;
1148 i = 0;
1149 stypes = mgmt_stypes[ift].tx;
1150 while (stypes) {
9360ffd1
DM		 1151 if ((stypes & 1) &&
1152 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1153 (i << 4) | IEEE80211_FTYPE_MGMT))
1154 goto nla_put_failure;
2e161f78
JB		 1155 stypes >>= 1;
1156 i++;
1157 }
1158 nla_nest_end(msg, nl_ftypes);
1159 }
1160
74b70a4e
JB		 1161 nla_nest_end(msg, nl_ifs);
1162
2e161f78
JB		 1163 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
1164 if (!nl_ifs)
1165 goto nla_put_failure;
1166
1167 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1168 nl_ftypes = nla_nest_start(msg, ift);
1169 if (!nl_ftypes)
1170 goto nla_put_failure;
1171 i = 0;
1172 stypes = mgmt_stypes[ift].rx;
1173 while (stypes) {
9360ffd1
DM		 1174 if ((stypes & 1) &&
1175 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1176 (i << 4) | IEEE80211_FTYPE_MGMT))
1177 goto nla_put_failure;
2e161f78
JB		 1178 stypes >>= 1;
1179 i++;
1180 }
1181 nla_nest_end(msg, nl_ftypes);
1182 }
1183 nla_nest_end(msg, nl_ifs);
1184 }
1185
dfb89c56 1186#ifdef CONFIG_PM
ff1b6e69
JB		 1187 if (dev->wiphy.wowlan.flags || dev->wiphy.wowlan.n_patterns) {
1188 struct nlattr *nl_wowlan;
1189
1190 nl_wowlan = nla_nest_start(msg,
1191 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
1192 if (!nl_wowlan)
1193 goto nla_put_failure;
1194
9360ffd1
DM		 1195 if (((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY) &&
1196 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1197 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT) &&
1198 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1199 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT) &&
1200 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1201 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
1202 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1203 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
1204 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1205 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
1206 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1207 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
1208 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1209 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
1210 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1211 goto nla_put_failure;
ff1b6e69
JB		 1212 if (dev->wiphy.wowlan.n_patterns) {
1213 struct nl80211_wowlan_pattern_support pat = {
1214 .max_patterns = dev->wiphy.wowlan.n_patterns,
1215 .min_pattern_len =
1216 dev->wiphy.wowlan.pattern_min_len,
1217 .max_pattern_len =
1218 dev->wiphy.wowlan.pattern_max_len,
1219 };
9360ffd1
DM		 1220 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1221 sizeof(pat), &pat))
1222 goto nla_put_failure;
ff1b6e69
JB		 1223 }
1224
1225 nla_nest_end(msg, nl_wowlan);
1226 }
dfb89c56 1227#endif
ff1b6e69 1228
7527a782
JB		 1229 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1230 dev->wiphy.software_iftypes))
1231 goto nla_put_failure;
1232
1233 if (nl80211_put_iface_combinations(&dev->wiphy, msg))
1234 goto nla_put_failure;
1235
9360ffd1
DM		 1236 if ((dev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
1237 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1238 dev->wiphy.ap_sme_capa))
1239 goto nla_put_failure;
562a7480 1240
9360ffd1
DM		 1241 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS,
1242 dev->wiphy.features))
1243 goto nla_put_failure;
1f074bd8 1244
9360ffd1
DM		 1245 if (dev->wiphy.ht_capa_mod_mask &&
1246 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1247 sizeof(*dev->wiphy.ht_capa_mod_mask),
1248 dev->wiphy.ht_capa_mod_mask))
1249 goto nla_put_failure;
7e7c8926 1250
55682965
JB		 1251 return genlmsg_end(msg, hdr);
1252
1253 nla_put_failure:
bc3ed28c
TG		 1254 genlmsg_cancel(msg, hdr);
1255 return -EMSGSIZE;
55682965
JB		 1256}
1257
1258static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
1259{
1260 int idx = 0;
1261 int start = cb->args[0];
1262 struct cfg80211_registered_device *dev;
1263
a1794390 1264 mutex_lock(&cfg80211_mutex);
79c97e97 1265 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 1266 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
1267 continue;
b4637271 1268 if (++idx <= start)
55682965 1269 continue;
15e47304 1270 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).portid,
55682965 1271 cb->nlh->nlmsg_seq, NLM_F_MULTI,
b4637271
JV		 1272 dev) < 0) {
1273 idx--;
55682965 1274 break;
b4637271 1275 }
55682965 1276 }
a1794390 1277 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1278
1279 cb->args[0] = idx;
1280
1281 return skb->len;
1282}
1283
1284static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1285{
1286 struct sk_buff *msg;
4c476991 1287 struct cfg80211_registered_device *dev = info->user_ptr[0];
55682965 1288
fd2120ca 1289 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1290 if (!msg)
4c476991 1291 return -ENOMEM;
55682965 1292
15e47304 1293 if (nl80211_send_wiphy(msg, info->snd_portid, info->snd_seq, 0, dev) < 0) {
4c476991
JB		 1294 nlmsg_free(msg);
1295 return -ENOBUFS;
1296 }
55682965 1297
134e6375 1298 return genlmsg_reply(msg, info);
55682965
JB		 1299}
1300
31888487
JM		 1301static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1302 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1303 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1304 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1305 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1306 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1307};
1308
1309static int parse_txq_params(struct nlattr *tb[],
1310 struct ieee80211_txq_params *txq_params)
1311{
a3304b0a 1312 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 1313 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1314 !tb[NL80211_TXQ_ATTR_AIFS])
1315 return -EINVAL;
1316
a3304b0a 1317 txq_params->ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 1318 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1319 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1320 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1321 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1322
a3304b0a
JB		 1323 if (txq_params->ac >= NL80211_NUM_ACS)
1324 return -EINVAL;
1325
31888487
JM		 1326 return 0;
1327}
1328
f444de05
JB		 1329static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1330{
1331 /*
cc1d2806
JB		 1332 * You can only set the channel explicitly for WDS interfaces,
1333 * all others have their channel managed via their respective
1334 * "establish a connection" command (connect, join, ...)
1335 *
1336 * For AP/GO and mesh mode, the channel can be set with the
1337 * channel userspace API, but is only stored and passed to the
1338 * low-level driver when the AP starts or the mesh is joined.
1339 * This is for backward compatibility, userspace can also give
1340 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 1341 *
1342 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 1343 * whatever else is going on, so they have their own special
1344 * operation to set the monitor channel if possible.
f444de05
JB		 1345 */
1346 return !wdev ||
1347 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 1348 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 1349 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1350 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 1351}
1352
cd6c6598
JB		 1353static bool nl80211_valid_channel_type(struct genl_info *info,
1354 enum nl80211_channel_type *channel_type)
1355{
1356 enum nl80211_channel_type tmp;
1357
1358 if (!info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE])
1359 return false;
1360
1361 tmp = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1362 if (tmp != NL80211_CHAN_NO_HT &&
1363 tmp != NL80211_CHAN_HT20 &&
1364 tmp != NL80211_CHAN_HT40PLUS &&
1365 tmp != NL80211_CHAN_HT40MINUS)
1366 return false;
1367
1368 if (channel_type)
1369 *channel_type = tmp;
1370
1371 return true;
1372}
1373
f444de05
JB		 1374static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1375 struct wireless_dev *wdev,
1376 struct genl_info *info)
1377{
aa430da4 1378 struct ieee80211_channel *channel;
f444de05
JB		 1379 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
1380 u32 freq;
1381 int result;
e8c9bd5b
JB		 1382 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
1383
1384 if (wdev)
1385 iftype = wdev->iftype;
f444de05
JB		 1386
1387 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1388 return -EINVAL;
1389
1390 if (!nl80211_can_set_dev_channel(wdev))
1391 return -EOPNOTSUPP;
1392
cd6c6598
JB		 1393 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
1394 !nl80211_valid_channel_type(info, &channel_type))
1395 return -EINVAL;
f444de05
JB		 1396
1397 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1398
1399 mutex_lock(&rdev->devlist_mtx);
e8c9bd5b 1400 switch (iftype) {
aa430da4
JB		 1401 case NL80211_IFTYPE_AP:
1402 case NL80211_IFTYPE_P2P_GO:
1403 if (wdev->beacon_interval) {
1404 result = -EBUSY;
1405 break;
1406 }
1407 channel = rdev_freq_to_chan(rdev, freq, channel_type);
1408 if (!channel || !cfg80211_can_beacon_sec_chan(&rdev->wiphy,
1409 channel,
1410 channel_type)) {
1411 result = -EINVAL;
1412 break;
1413 }
1414 wdev->preset_chan = channel;
1415 wdev->preset_chantype = channel_type;
1416 result = 0;
1417 break;
cc1d2806
JB		 1418 case NL80211_IFTYPE_MESH_POINT:
1419 result = cfg80211_set_mesh_freq(rdev, wdev, freq, channel_type);
1420 break;
e8c9bd5b
JB		 1421 case NL80211_IFTYPE_MONITOR:
1422 result = cfg80211_set_monitor_channel(rdev, freq, channel_type);
1423 break;
aa430da4 1424 default:
e8c9bd5b 1425 result = -EINVAL;
f444de05
JB		 1426 }
1427 mutex_unlock(&rdev->devlist_mtx);
1428
1429 return result;
1430}
1431
1432static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1433{
4c476991
JB		 1434 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1435 struct net_device *netdev = info->user_ptr[1];
f444de05 1436
4c476991 1437 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
f444de05
JB		 1438}
1439
e8347eba
BJ		 1440static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1441{
43b19952
JB		 1442 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1443 struct net_device *dev = info->user_ptr[1];
1444 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 1445 const u8 *bssid;
e8347eba
BJ		 1446
1447 if (!info->attrs[NL80211_ATTR_MAC])
1448 return -EINVAL;
1449
43b19952
JB		 1450 if (netif_running(dev))
1451 return -EBUSY;
e8347eba 1452
43b19952
JB		 1453 if (!rdev->ops->set_wds_peer)
1454 return -EOPNOTSUPP;
e8347eba 1455
43b19952
JB		 1456 if (wdev->iftype != NL80211_IFTYPE_WDS)
1457 return -EOPNOTSUPP;
e8347eba
BJ		 1458
1459 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
43b19952 1460 return rdev->ops->set_wds_peer(wdev->wiphy, dev, bssid);
e8347eba
BJ		 1461}
1462
1463
55682965
JB		 1464static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1465{
1466 struct cfg80211_registered_device *rdev;
f444de05
JB		 1467 struct net_device *netdev = NULL;
1468 struct wireless_dev *wdev;
a1e567c8 1469 int result = 0, rem_txq_params = 0;
31888487 1470 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 1471 u32 changed;
1472 u8 retry_short = 0, retry_long = 0;
1473 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 1474 u8 coverage_class = 0;
55682965 1475
f444de05
JB		 1476 /*
1477 * Try to find the wiphy and netdev. Normally this
1478 * function shouldn't need the netdev, but this is
1479 * done for backward compatibility -- previously
1480 * setting the channel was done per wiphy, but now
1481 * it is per netdev. Previous userland like hostapd
1482 * also passed a netdev to set_wiphy, so that it is
1483 * possible to let that go to the right netdev!
1484 */
4bbf4d56
JB		 1485 mutex_lock(&cfg80211_mutex);
1486
f444de05
JB		 1487 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1488 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1489
1490 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1491 if (netdev && netdev->ieee80211_ptr) {
1492 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1493 mutex_lock(&rdev->mtx);
1494 } else
1495 netdev = NULL;
4bbf4d56
JB		 1496 }
1497
f444de05 1498 if (!netdev) {
878d9ec7
JB		 1499 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
1500 info->attrs);
f444de05
JB		 1501 if (IS_ERR(rdev)) {
1502 mutex_unlock(&cfg80211_mutex);
4c476991 1503 return PTR_ERR(rdev);
f444de05
JB		 1504 }
1505 wdev = NULL;
1506 netdev = NULL;
1507 result = 0;
1508
1509 mutex_lock(&rdev->mtx);
cc1d2806 1510 } else if (nl80211_can_set_dev_channel(netdev->ieee80211_ptr))
f444de05
JB		 1511 wdev = netdev->ieee80211_ptr;
1512 else
1513 wdev = NULL;
1514
1515 /*
1516 * end workaround code, by now the rdev is available
1517 * and locked, and wdev may or may not be NULL.
1518 */
4bbf4d56
JB		 1519
1520 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 1521 result = cfg80211_dev_rename(
1522 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 1523
1524 mutex_unlock(&cfg80211_mutex);
1525
1526 if (result)
1527 goto bad_res;
31888487
JM		 1528
1529 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1530 struct ieee80211_txq_params txq_params;
1531 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1532
1533 if (!rdev->ops->set_txq_params) {
1534 result = -EOPNOTSUPP;
1535 goto bad_res;
1536 }
1537
f70f01c2
EP		 1538 if (!netdev) {
1539 result = -EINVAL;
1540 goto bad_res;
1541 }
1542
133a3ff2
JB		 1543 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
1544 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
1545 result = -EINVAL;
1546 goto bad_res;
1547 }
1548
2b5f8b0b
JB		 1549 if (!netif_running(netdev)) {
1550 result = -ENETDOWN;
1551 goto bad_res;
1552 }
1553
31888487
JM		 1554 nla_for_each_nested(nl_txq_params,
1555 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1556 rem_txq_params) {
1557 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1558 nla_data(nl_txq_params),
1559 nla_len(nl_txq_params),
1560 txq_params_policy);
1561 result = parse_txq_params(tb, &txq_params);
1562 if (result)
1563 goto bad_res;
1564
1565 result = rdev->ops->set_txq_params(&rdev->wiphy,
f70f01c2 1566 netdev,
31888487
JM		 1567 &txq_params);
1568 if (result)
1569 goto bad_res;
1570 }
1571 }
55682965 1572
72bdcf34 1573 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
f444de05 1574 result = __nl80211_set_channel(rdev, wdev, info);
72bdcf34
JM		 1575 if (result)
1576 goto bad_res;
1577 }
1578
98d2ff8b
JO		 1579 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
1580 enum nl80211_tx_power_setting type;
1581 int idx, mbm = 0;
1582
1583 if (!rdev->ops->set_tx_power) {
60ea385f 1584 result = -EOPNOTSUPP;
98d2ff8b
JO		 1585 goto bad_res;
1586 }
1587
1588 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1589 type = nla_get_u32(info->attrs[idx]);
1590
1591 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1592 (type != NL80211_TX_POWER_AUTOMATIC)) {
1593 result = -EINVAL;
1594 goto bad_res;
1595 }
1596
1597 if (type != NL80211_TX_POWER_AUTOMATIC) {
1598 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1599 mbm = nla_get_u32(info->attrs[idx]);
1600 }
1601
1602 result = rdev->ops->set_tx_power(&rdev->wiphy, type, mbm);
1603 if (result)
1604 goto bad_res;
1605 }
1606
afe0cbf8
BR		 1607 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1608 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1609 u32 tx_ant, rx_ant;
7f531e03
BR		 1610 if ((!rdev->wiphy.available_antennas_tx &&
1611 !rdev->wiphy.available_antennas_rx) ||
1612 !rdev->ops->set_antenna) {
afe0cbf8
BR		 1613 result = -EOPNOTSUPP;
1614 goto bad_res;
1615 }
1616
1617 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1618 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1619
a7ffac95 1620 /* reject antenna configurations which don't match the
7f531e03
BR		 1621 * available antenna masks, except for the "all" mask */
1622 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1623 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
a7ffac95
BR		 1624 result = -EINVAL;
1625 goto bad_res;
1626 }
1627
7f531e03
BR		 1628 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1629 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 1630
afe0cbf8
BR		 1631 result = rdev->ops->set_antenna(&rdev->wiphy, tx_ant, rx_ant);
1632 if (result)
1633 goto bad_res;
1634 }
1635
b9a5f8ca
JM		 1636 changed = 0;
1637
1638 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1639 retry_short = nla_get_u8(
1640 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1641 if (retry_short == 0) {
1642 result = -EINVAL;
1643 goto bad_res;
1644 }
1645 changed |= WIPHY_PARAM_RETRY_SHORT;
1646 }
1647
1648 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1649 retry_long = nla_get_u8(
1650 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1651 if (retry_long == 0) {
1652 result = -EINVAL;
1653 goto bad_res;
1654 }
1655 changed |= WIPHY_PARAM_RETRY_LONG;
1656 }
1657
1658 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
1659 frag_threshold = nla_get_u32(
1660 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
1661 if (frag_threshold < 256) {
1662 result = -EINVAL;
1663 goto bad_res;
1664 }
1665 if (frag_threshold != (u32) -1) {
1666 /*
1667 * Fragments (apart from the last one) are required to
1668 * have even length. Make the fragmentation code
1669 * simpler by stripping LSB should someone try to use
1670 * odd threshold value.
1671 */
1672 frag_threshold &= ~0x1;
1673 }
1674 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
1675 }
1676
1677 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
1678 rts_threshold = nla_get_u32(
1679 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
1680 changed |= WIPHY_PARAM_RTS_THRESHOLD;
1681 }
1682
81077e82
LT		 1683 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
1684 coverage_class = nla_get_u8(
1685 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
1686 changed |= WIPHY_PARAM_COVERAGE_CLASS;
1687 }
1688
b9a5f8ca
JM		 1689 if (changed) {
1690 u8 old_retry_short, old_retry_long;
1691 u32 old_frag_threshold, old_rts_threshold;
81077e82 1692 u8 old_coverage_class;
b9a5f8ca
JM		 1693
1694 if (!rdev->ops->set_wiphy_params) {
1695 result = -EOPNOTSUPP;
1696 goto bad_res;
1697 }
1698
1699 old_retry_short = rdev->wiphy.retry_short;
1700 old_retry_long = rdev->wiphy.retry_long;
1701 old_frag_threshold = rdev->wiphy.frag_threshold;
1702 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 1703 old_coverage_class = rdev->wiphy.coverage_class;
b9a5f8ca
JM		 1704
1705 if (changed & WIPHY_PARAM_RETRY_SHORT)
1706 rdev->wiphy.retry_short = retry_short;
1707 if (changed & WIPHY_PARAM_RETRY_LONG)
1708 rdev->wiphy.retry_long = retry_long;
1709 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1710 rdev->wiphy.frag_threshold = frag_threshold;
1711 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1712 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 1713 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1714 rdev->wiphy.coverage_class = coverage_class;
b9a5f8ca
JM		 1715
1716 result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
1717 if (result) {
1718 rdev->wiphy.retry_short = old_retry_short;
1719 rdev->wiphy.retry_long = old_retry_long;
1720 rdev->wiphy.frag_threshold = old_frag_threshold;
1721 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 1722 rdev->wiphy.coverage_class = old_coverage_class;
b9a5f8ca
JM		 1723 }
1724 }
72bdcf34 1725
306d6112 1726 bad_res:
4bbf4d56 1727 mutex_unlock(&rdev->mtx);
f444de05
JB		 1728 if (netdev)
1729 dev_put(netdev);
55682965
JB		 1730 return result;
1731}
1732
71bbc994
JB		 1733static inline u64 wdev_id(struct wireless_dev *wdev)
1734{
1735 return (u64)wdev->identifier |
1736 ((u64)wiphy_to_dev(wdev->wiphy)->wiphy_idx << 32);
1737}
55682965 1738
15e47304 1739static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 1740 struct cfg80211_registered_device *rdev,
72fb2abc 1741 struct wireless_dev *wdev)
55682965 1742{
72fb2abc 1743 struct net_device *dev = wdev->netdev;
55682965
JB		 1744 void *hdr;
1745
15e47304 1746 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_INTERFACE);
55682965
JB		 1747 if (!hdr)
1748 return -1;
1749
72fb2abc
JB		 1750 if (dev &&
1751 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 1752 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 1753 goto nla_put_failure;
1754
1755 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
1756 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
71bbc994 1757 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
98104fde 1758 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 1759 nla_put_u32(msg, NL80211_ATTR_GENERATION,
1760 rdev->devlist_generation ^
1761 (cfg80211_rdev_list_generation << 2)))
1762 goto nla_put_failure;
f5ea9120 1763
5b7ccaf3
JB		 1764 if (rdev->ops->get_channel) {
1765 struct ieee80211_channel *chan;
1766 enum nl80211_channel_type channel_type;
1767
1768 chan = rdev->ops->get_channel(&rdev->wiphy, wdev,
1769 &channel_type);
1770 if (chan &&
1771 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
1772 chan->center_freq) ||
1773 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
1774 channel_type)))
59ef43e6 1775 goto nla_put_failure;
d91df0e3
PF		 1776 }
1777
55682965
JB		 1778 return genlmsg_end(msg, hdr);
1779
1780 nla_put_failure:
bc3ed28c
TG		 1781 genlmsg_cancel(msg, hdr);
1782 return -EMSGSIZE;
55682965
JB		 1783}
1784
1785static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
1786{
1787 int wp_idx = 0;
1788 int if_idx = 0;
1789 int wp_start = cb->args[0];
1790 int if_start = cb->args[1];
f5ea9120 1791 struct cfg80211_registered_device *rdev;
55682965
JB		 1792 struct wireless_dev *wdev;
1793
a1794390 1794 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 1795 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1796 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 1797 continue;
bba95fef
JB		 1798 if (wp_idx < wp_start) {
1799 wp_idx++;
55682965 1800 continue;
bba95fef 1801 }
55682965
JB		 1802 if_idx = 0;
1803
f5ea9120 1804 mutex_lock(&rdev->devlist_mtx);
89a54e48 1805 list_for_each_entry(wdev, &rdev->wdev_list, list) {
bba95fef
JB		 1806 if (if_idx < if_start) {
1807 if_idx++;
55682965 1808 continue;
bba95fef 1809 }
15e47304 1810 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 1811 cb->nlh->nlmsg_seq, NLM_F_MULTI,
72fb2abc 1812 rdev, wdev) < 0) {
f5ea9120 1813 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1814 goto out;
1815 }
1816 if_idx++;
55682965 1817 }
f5ea9120 1818 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1819
1820 wp_idx++;
55682965 1821 }
bba95fef 1822 out:
a1794390 1823 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1824
1825 cb->args[0] = wp_idx;
1826 cb->args[1] = if_idx;
1827
1828 return skb->len;
1829}
1830
1831static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
1832{
1833 struct sk_buff *msg;
4c476991 1834 struct cfg80211_registered_device *dev = info->user_ptr[0];
72fb2abc 1835 struct wireless_dev *wdev = info->user_ptr[1];
55682965 1836
fd2120ca 1837 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1838 if (!msg)
4c476991 1839 return -ENOMEM;
55682965 1840
15e47304 1841 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
72fb2abc 1842 dev, wdev) < 0) {
4c476991
JB		 1843 nlmsg_free(msg);
1844 return -ENOBUFS;
1845 }
55682965 1846
134e6375 1847 return genlmsg_reply(msg, info);
55682965
JB		 1848}
1849
66f7ac50
MW		 1850static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
1851 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
1852 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
1853 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
1854 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
1855 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
1856};
1857
1858static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
1859{
1860 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
1861 int flag;
1862
1863 *mntrflags = 0;
1864
1865 if (!nla)
1866 return -EINVAL;
1867
1868 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
1869 nla, mntr_flags_policy))
1870 return -EINVAL;
1871
1872 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
1873 if (flags[flag])
1874 *mntrflags |= (1<<flag);
1875
1876 return 0;
1877}
1878
9bc383de 1879static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 1880 struct net_device *netdev, u8 use_4addr,
1881 enum nl80211_iftype iftype)
9bc383de 1882{
ad4bb6f8 1883 if (!use_4addr) {
f350a0a8 1884 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
ad4bb6f8 1885 return -EBUSY;
9bc383de 1886 return 0;
ad4bb6f8 1887 }
9bc383de
JB		 1888
1889 switch (iftype) {
1890 case NL80211_IFTYPE_AP_VLAN:
1891 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
1892 return 0;
1893 break;
1894 case NL80211_IFTYPE_STATION:
1895 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
1896 return 0;
1897 break;
1898 default:
1899 break;
1900 }
1901
1902 return -EOPNOTSUPP;
1903}
1904
55682965
JB		 1905static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
1906{
4c476991 1907 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1908 struct vif_params params;
e36d56b6 1909 int err;
04a773ad 1910 enum nl80211_iftype otype, ntype;
4c476991 1911 struct net_device *dev = info->user_ptr[1];
92ffe055 1912 u32 _flags, *flags = NULL;
ac7f9cfa 1913 bool change = false;
55682965 1914
2ec600d6
LCC		 1915 memset(&params, 0, sizeof(params));
1916
04a773ad 1917 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 1918
723b038d 1919 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 1920 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 1921 if (otype != ntype)
ac7f9cfa 1922 change = true;
4c476991
JB		 1923 if (ntype > NL80211_IFTYPE_MAX)
1924 return -EINVAL;
723b038d
JB		 1925 }
1926
92ffe055 1927 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 1928 struct wireless_dev *wdev = dev->ieee80211_ptr;
1929
4c476991
JB		 1930 if (ntype != NL80211_IFTYPE_MESH_POINT)
1931 return -EINVAL;
29cbe68c
JB		 1932 if (netif_running(dev))
1933 return -EBUSY;
1934
1935 wdev_lock(wdev);
1936 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1937 IEEE80211_MAX_MESH_ID_LEN);
1938 wdev->mesh_id_up_len =
1939 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1940 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1941 wdev->mesh_id_up_len);
1942 wdev_unlock(wdev);
2ec600d6
LCC		 1943 }
1944
8b787643
FF		 1945 if (info->attrs[NL80211_ATTR_4ADDR]) {
1946 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1947 change = true;
ad4bb6f8 1948 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 1949 if (err)
4c476991 1950 return err;
8b787643
FF		 1951 } else {
1952 params.use_4addr = -1;
1953 }
1954
92ffe055 1955 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4c476991
JB		 1956 if (ntype != NL80211_IFTYPE_MONITOR)
1957 return -EINVAL;
92ffe055
JB		 1958 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1959 &_flags);
ac7f9cfa 1960 if (err)
4c476991 1961 return err;
ac7f9cfa
JB		 1962
1963 flags = &_flags;
1964 change = true;
92ffe055 1965 }
3b85875a 1966
ac7f9cfa 1967 if (change)
3d54d255 1968 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
ac7f9cfa
JB		 1969 else
1970 err = 0;
60719ffd 1971
9bc383de
JB		 1972 if (!err && params.use_4addr != -1)
1973 dev->ieee80211_ptr->use_4addr = params.use_4addr;
1974
55682965
JB		 1975 return err;
1976}
1977
1978static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1979{
4c476991 1980 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1981 struct vif_params params;
84efbb84 1982 struct wireless_dev *wdev;
1c90f9d4 1983 struct sk_buff *msg;
55682965
JB		 1984 int err;
1985 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 1986 u32 flags;
55682965 1987
2ec600d6
LCC		 1988 memset(&params, 0, sizeof(params));
1989
55682965
JB		 1990 if (!info->attrs[NL80211_ATTR_IFNAME])
1991 return -EINVAL;
1992
1993 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1994 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1995 if (type > NL80211_IFTYPE_MAX)
1996 return -EINVAL;
1997 }
1998
79c97e97 1999 if (!rdev->ops->add_virtual_intf ||
4c476991
JB		 2000 !(rdev->wiphy.interface_modes & (1 << type)))
2001 return -EOPNOTSUPP;
55682965 2002
9bc383de 2003 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 2004 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 2005 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 2006 if (err)
4c476991 2007 return err;
9bc383de 2008 }
8b787643 2009
1c90f9d4
JB		 2010 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2011 if (!msg)
2012 return -ENOMEM;
2013
66f7ac50
MW		 2014 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
2015 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
2016 &flags);
84efbb84 2017 wdev = rdev->ops->add_virtual_intf(&rdev->wiphy,
66f7ac50 2018 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2ec600d6 2019 type, err ? NULL : &flags, &params);
1c90f9d4
JB		 2020 if (IS_ERR(wdev)) {
2021 nlmsg_free(msg);
84efbb84 2022 return PTR_ERR(wdev);
1c90f9d4 2023 }
2ec600d6 2024
98104fde
JB		 2025 switch (type) {
2026 case NL80211_IFTYPE_MESH_POINT:
2027 if (!info->attrs[NL80211_ATTR_MESH_ID])
2028 break;
29cbe68c
JB		 2029 wdev_lock(wdev);
2030 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
2031 IEEE80211_MAX_MESH_ID_LEN);
2032 wdev->mesh_id_up_len =
2033 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
2034 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
2035 wdev->mesh_id_up_len);
2036 wdev_unlock(wdev);
98104fde
JB		 2037 break;
2038 case NL80211_IFTYPE_P2P_DEVICE:
2039 /*
2040 * P2P Device doesn't have a netdev, so doesn't go
2041 * through the netdev notifier and must be added here
2042 */
2043 mutex_init(&wdev->mtx);
2044 INIT_LIST_HEAD(&wdev->event_list);
2045 spin_lock_init(&wdev->event_lock);
2046 INIT_LIST_HEAD(&wdev->mgmt_registrations);
2047 spin_lock_init(&wdev->mgmt_registrations_lock);
2048
2049 mutex_lock(&rdev->devlist_mtx);
2050 wdev->identifier = ++rdev->wdev_id;
2051 list_add_rcu(&wdev->list, &rdev->wdev_list);
2052 rdev->devlist_generation++;
2053 mutex_unlock(&rdev->devlist_mtx);
2054 break;
2055 default:
2056 break;
29cbe68c
JB		 2057 }
2058
15e47304 2059 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
1c90f9d4
JB		 2060 rdev, wdev) < 0) {
2061 nlmsg_free(msg);
2062 return -ENOBUFS;
2063 }
2064
2065 return genlmsg_reply(msg, info);
55682965
JB		 2066}
2067
2068static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
2069{
4c476991 2070 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 2071 struct wireless_dev *wdev = info->user_ptr[1];
55682965 2072
4c476991
JB		 2073 if (!rdev->ops->del_virtual_intf)
2074 return -EOPNOTSUPP;
55682965 2075
84efbb84
JB		 2076 /*
2077 * If we remove a wireless device without a netdev then clear
2078 * user_ptr[1] so that nl80211_post_doit won't dereference it
2079 * to check if it needs to do dev_put(). Otherwise it crashes
2080 * since the wdev has been freed, unlike with a netdev where
2081 * we need the dev_put() for the netdev to really be freed.
2082 */
2083 if (!wdev->netdev)
2084 info->user_ptr[1] = NULL;
2085
2086 return rdev->ops->del_virtual_intf(&rdev->wiphy, wdev);
55682965
JB		 2087}
2088
1d9d9213
SW		 2089static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
2090{
2091 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2092 struct net_device *dev = info->user_ptr[1];
2093 u16 noack_map;
2094
2095 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
2096 return -EINVAL;
2097
2098 if (!rdev->ops->set_noack_map)
2099 return -EOPNOTSUPP;
2100
2101 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
2102
2103 return rdev->ops->set_noack_map(&rdev->wiphy, dev, noack_map);
2104}
2105
41ade00f
JB		 2106struct get_key_cookie {
2107 struct sk_buff *msg;
2108 int error;
b9454e83 2109 int idx;
41ade00f
JB		 2110};
2111
2112static void get_key_callback(void *c, struct key_params *params)
2113{
b9454e83 2114 struct nlattr *key;
41ade00f
JB		 2115 struct get_key_cookie *cookie = c;
2116
9360ffd1
DM		 2117 if ((params->key &&
2118 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
2119 params->key_len, params->key)) ||
2120 (params->seq &&
2121 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
2122 params->seq_len, params->seq)) ||
2123 (params->cipher &&
2124 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
2125 params->cipher)))
2126 goto nla_put_failure;
41ade00f 2127
b9454e83
JB		 2128 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
2129 if (!key)
2130 goto nla_put_failure;
2131
9360ffd1
DM		 2132 if ((params->key &&
2133 nla_put(cookie->msg, NL80211_KEY_DATA,
2134 params->key_len, params->key)) ||
2135 (params->seq &&
2136 nla_put(cookie->msg, NL80211_KEY_SEQ,
2137 params->seq_len, params->seq)) ||
2138 (params->cipher &&
2139 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
2140 params->cipher)))
2141 goto nla_put_failure;
b9454e83 2142
9360ffd1
DM		 2143 if (nla_put_u8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx))
2144 goto nla_put_failure;
b9454e83
JB		 2145
2146 nla_nest_end(cookie->msg, key);
2147
41ade00f
JB		 2148 return;
2149 nla_put_failure:
2150 cookie->error = 1;
2151}
2152
2153static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
2154{
4c476991 2155 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2156 int err;
4c476991 2157 struct net_device *dev = info->user_ptr[1];
41ade00f 2158 u8 key_idx = 0;
e31b8213
JB		 2159 const u8 *mac_addr = NULL;
2160 bool pairwise;
41ade00f
JB		 2161 struct get_key_cookie cookie = {
2162 .error = 0,
2163 };
2164 void *hdr;
2165 struct sk_buff *msg;
2166
2167 if (info->attrs[NL80211_ATTR_KEY_IDX])
2168 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
2169
3cfcf6ac 2170 if (key_idx > 5)
41ade00f
JB		 2171 return -EINVAL;
2172
2173 if (info->attrs[NL80211_ATTR_MAC])
2174 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2175
e31b8213
JB		 2176 pairwise = !!mac_addr;
2177 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
2178 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
2179 if (kt >= NUM_NL80211_KEYTYPES)
2180 return -EINVAL;
2181 if (kt != NL80211_KEYTYPE_GROUP &&
2182 kt != NL80211_KEYTYPE_PAIRWISE)
2183 return -EINVAL;
2184 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
2185 }
2186
4c476991
JB		 2187 if (!rdev->ops->get_key)
2188 return -EOPNOTSUPP;
41ade00f 2189
fd2120ca 2190 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 2191 if (!msg)
2192 return -ENOMEM;
41ade00f 2193
15e47304 2194 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 2195 NL80211_CMD_NEW_KEY);
4c476991
JB		 2196 if (IS_ERR(hdr))
2197 return PTR_ERR(hdr);
41ade00f
JB		 2198
2199 cookie.msg = msg;
b9454e83 2200 cookie.idx = key_idx;
41ade00f 2201
9360ffd1
DM		 2202 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2203 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
2204 goto nla_put_failure;
2205 if (mac_addr &&
2206 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
2207 goto nla_put_failure;
41ade00f 2208
e31b8213
JB		 2209 if (pairwise && mac_addr &&
2210 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2211 return -ENOENT;
2212
2213 err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, pairwise,
2214 mac_addr, &cookie, get_key_callback);
41ade00f
JB		 2215
2216 if (err)
6c95e2a2 2217 goto free_msg;
41ade00f
JB		 2218
2219 if (cookie.error)
2220 goto nla_put_failure;
2221
2222 genlmsg_end(msg, hdr);
4c476991 2223 return genlmsg_reply(msg, info);
41ade00f
JB		 2224
2225 nla_put_failure:
2226 err = -ENOBUFS;
6c95e2a2 2227 free_msg:
41ade00f 2228 nlmsg_free(msg);
41ade00f
JB		 2229 return err;
2230}
2231
2232static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
2233{
4c476991 2234 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 2235 struct key_parse key;
41ade00f 2236 int err;
4c476991 2237 struct net_device *dev = info->user_ptr[1];
41ade00f 2238
b9454e83
JB		 2239 err = nl80211_parse_key(info, &key);
2240 if (err)
2241 return err;
41ade00f 2242
b9454e83 2243 if (key.idx < 0)
41ade00f
JB		 2244 return -EINVAL;
2245
b9454e83
JB		 2246 /* only support setting default key */
2247 if (!key.def && !key.defmgmt)
41ade00f
JB		 2248 return -EINVAL;
2249
dbd2fd65 2250 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 2251
dbd2fd65
JB		 2252 if (key.def) {
2253 if (!rdev->ops->set_default_key) {
2254 err = -EOPNOTSUPP;
2255 goto out;
2256 }
41ade00f 2257
dbd2fd65
JB		 2258 err = nl80211_key_allowed(dev->ieee80211_ptr);
2259 if (err)
2260 goto out;
2261
dbd2fd65
JB		 2262 err = rdev->ops->set_default_key(&rdev->wiphy, dev, key.idx,
2263 key.def_uni, key.def_multi);
2264
2265 if (err)
2266 goto out;
fffd0934 2267
3d23e349 2268#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 2269 dev->ieee80211_ptr->wext.default_key = key.idx;
2270#endif
2271 } else {
2272 if (key.def_uni || !key.def_multi) {
2273 err = -EINVAL;
2274 goto out;
2275 }
2276
2277 if (!rdev->ops->set_default_mgmt_key) {
2278 err = -EOPNOTSUPP;
2279 goto out;
2280 }
2281
2282 err = nl80211_key_allowed(dev->ieee80211_ptr);
2283 if (err)
2284 goto out;
2285
2286 err = rdev->ops->set_default_mgmt_key(&rdev->wiphy,
2287 dev, key.idx);
2288 if (err)
2289 goto out;
2290
2291#ifdef CONFIG_CFG80211_WEXT
2292 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 2293#endif
dbd2fd65
JB		 2294 }
2295
2296 out:
fffd0934 2297 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2298
41ade00f
JB		 2299 return err;
2300}
2301
2302static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
2303{
4c476991 2304 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 2305 int err;
4c476991 2306 struct net_device *dev = info->user_ptr[1];
b9454e83 2307 struct key_parse key;
e31b8213 2308 const u8 *mac_addr = NULL;
41ade00f 2309
b9454e83
JB		 2310 err = nl80211_parse_key(info, &key);
2311 if (err)
2312 return err;
41ade00f 2313
b9454e83 2314 if (!key.p.key)
41ade00f
JB		 2315 return -EINVAL;
2316
41ade00f
JB		 2317 if (info->attrs[NL80211_ATTR_MAC])
2318 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2319
e31b8213
JB		 2320 if (key.type == -1) {
2321 if (mac_addr)
2322 key.type = NL80211_KEYTYPE_PAIRWISE;
2323 else
2324 key.type = NL80211_KEYTYPE_GROUP;
2325 }
2326
2327 /* for now */
2328 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2329 key.type != NL80211_KEYTYPE_GROUP)
2330 return -EINVAL;
2331
4c476991
JB		 2332 if (!rdev->ops->add_key)
2333 return -EOPNOTSUPP;
25e47c18 2334
e31b8213
JB		 2335 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
2336 key.type == NL80211_KEYTYPE_PAIRWISE,
2337 mac_addr))
4c476991 2338 return -EINVAL;
41ade00f 2339
fffd0934
JB		 2340 wdev_lock(dev->ieee80211_ptr);
2341 err = nl80211_key_allowed(dev->ieee80211_ptr);
2342 if (!err)
2343 err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
e31b8213 2344 key.type == NL80211_KEYTYPE_PAIRWISE,
fffd0934
JB		 2345 mac_addr, &key.p);
2346 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2347
41ade00f
JB		 2348 return err;
2349}
2350
2351static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
2352{
4c476991 2353 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2354 int err;
4c476991 2355 struct net_device *dev = info->user_ptr[1];
41ade00f 2356 u8 *mac_addr = NULL;
b9454e83 2357 struct key_parse key;
41ade00f 2358
b9454e83
JB		 2359 err = nl80211_parse_key(info, &key);
2360 if (err)
2361 return err;
41ade00f
JB		 2362
2363 if (info->attrs[NL80211_ATTR_MAC])
2364 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2365
e31b8213
JB		 2366 if (key.type == -1) {
2367 if (mac_addr)
2368 key.type = NL80211_KEYTYPE_PAIRWISE;
2369 else
2370 key.type = NL80211_KEYTYPE_GROUP;
2371 }
2372
2373 /* for now */
2374 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2375 key.type != NL80211_KEYTYPE_GROUP)
2376 return -EINVAL;
2377
4c476991
JB		 2378 if (!rdev->ops->del_key)
2379 return -EOPNOTSUPP;
41ade00f 2380
fffd0934
JB		 2381 wdev_lock(dev->ieee80211_ptr);
2382 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213
JB		 2383
2384 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
2385 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2386 err = -ENOENT;
2387
fffd0934 2388 if (!err)
e31b8213
JB		 2389 err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx,
2390 key.type == NL80211_KEYTYPE_PAIRWISE,
2391 mac_addr);
41ade00f 2392
3d23e349 2393#ifdef CONFIG_CFG80211_WEXT
08645126 2394 if (!err) {
b9454e83 2395 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 2396 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 2397 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 2398 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
2399 }
2400#endif
fffd0934 2401 wdev_unlock(dev->ieee80211_ptr);
08645126 2402
41ade00f
JB		 2403 return err;
2404}
2405
8860020e
JB		 2406static int nl80211_parse_beacon(struct genl_info *info,
2407 struct cfg80211_beacon_data *bcn)
ed1b6cc7 2408{
8860020e 2409 bool haveinfo = false;
ed1b6cc7 2410
9946ecfb
JM		 2411 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
2412 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2413 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2414 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
f4a11bb0
JB		 2415 return -EINVAL;
2416
8860020e 2417 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 2418
ed1b6cc7 2419 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
8860020e
JB		 2420 bcn->head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2421 bcn->head_len = nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2422 if (!bcn->head_len)
2423 return -EINVAL;
2424 haveinfo = true;
ed1b6cc7
JB		 2425 }
2426
2427 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
8860020e
JB		 2428 bcn->tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2429 bcn->tail_len =
ed1b6cc7 2430 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 2431 haveinfo = true;
ed1b6cc7
JB		 2432 }
2433
4c476991
JB		 2434 if (!haveinfo)
2435 return -EINVAL;
3b85875a 2436
9946ecfb 2437 if (info->attrs[NL80211_ATTR_IE]) {
8860020e
JB		 2438 bcn->beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2439 bcn->beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 2440 }
2441
2442 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 2443 bcn->proberesp_ies =
9946ecfb 2444 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 2445 bcn->proberesp_ies_len =
9946ecfb
JM		 2446 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2447 }
2448
2449 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 2450 bcn->assocresp_ies =
9946ecfb 2451 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 2452 bcn->assocresp_ies_len =
9946ecfb
JM		 2453 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2454 }
2455
00f740e1 2456 if (info->attrs[NL80211_ATTR_PROBE_RESP]) {
8860020e 2457 bcn->probe_resp =
00f740e1 2458 nla_data(info->attrs[NL80211_ATTR_PROBE_RESP]);
8860020e 2459 bcn->probe_resp_len =
00f740e1
AN		 2460 nla_len(info->attrs[NL80211_ATTR_PROBE_RESP]);
2461 }
2462
8860020e
JB		 2463 return 0;
2464}
2465
46c1dd0c
FF		 2466static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
2467 struct cfg80211_ap_settings *params)
2468{
2469 struct wireless_dev *wdev;
2470 bool ret = false;
2471
2472 mutex_lock(&rdev->devlist_mtx);
2473
89a54e48 2474 list_for_each_entry(wdev, &rdev->wdev_list, list) {
46c1dd0c
FF		 2475 if (wdev->iftype != NL80211_IFTYPE_AP &&
2476 wdev->iftype != NL80211_IFTYPE_P2P_GO)
2477 continue;
2478
2479 if (!wdev->preset_chan)
2480 continue;
2481
2482 params->channel = wdev->preset_chan;
2483 params->channel_type = wdev->preset_chantype;
2484 ret = true;
2485 break;
2486 }
2487
2488 mutex_unlock(&rdev->devlist_mtx);
2489
2490 return ret;
2491}
2492
e39e5b5e
JM		 2493static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
2494 enum nl80211_auth_type auth_type,
2495 enum nl80211_commands cmd)
2496{
2497 if (auth_type > NL80211_AUTHTYPE_MAX)
2498 return false;
2499
2500 switch (cmd) {
2501 case NL80211_CMD_AUTHENTICATE:
2502 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
2503 auth_type == NL80211_AUTHTYPE_SAE)
2504 return false;
2505 return true;
2506 case NL80211_CMD_CONNECT:
2507 case NL80211_CMD_START_AP:
2508 /* SAE not supported yet */
2509 if (auth_type == NL80211_AUTHTYPE_SAE)
2510 return false;
2511 return true;
2512 default:
2513 return false;
2514 }
2515}
2516
8860020e
JB		 2517static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
2518{
2519 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2520 struct net_device *dev = info->user_ptr[1];
2521 struct wireless_dev *wdev = dev->ieee80211_ptr;
2522 struct cfg80211_ap_settings params;
2523 int err;
2524
2525 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2526 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2527 return -EOPNOTSUPP;
2528
2529 if (!rdev->ops->start_ap)
2530 return -EOPNOTSUPP;
2531
2532 if (wdev->beacon_interval)
2533 return -EALREADY;
2534
2535 memset(&params, 0, sizeof(params));
2536
2537 /* these are required for START_AP */
2538 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
2539 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
2540 !info->attrs[NL80211_ATTR_BEACON_HEAD])
2541 return -EINVAL;
2542
2543 err = nl80211_parse_beacon(info, &params.beacon);
2544 if (err)
2545 return err;
2546
2547 params.beacon_interval =
2548 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
2549 params.dtim_period =
2550 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
2551
2552 err = cfg80211_validate_beacon_int(rdev, params.beacon_interval);
2553 if (err)
2554 return err;
2555
2556 /*
2557 * In theory, some of these attributes should be required here
2558 * but since they were not used when the command was originally
2559 * added, keep them optional for old user space programs to let
2560 * them continue to work with drivers that do not need the
2561 * additional information -- drivers must check!
2562 */
2563 if (info->attrs[NL80211_ATTR_SSID]) {
2564 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
2565 params.ssid_len =
2566 nla_len(info->attrs[NL80211_ATTR_SSID]);
2567 if (params.ssid_len == 0 ||
2568 params.ssid_len > IEEE80211_MAX_SSID_LEN)
2569 return -EINVAL;
2570 }
2571
2572 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
2573 params.hidden_ssid = nla_get_u32(
2574 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
2575 if (params.hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE &&
2576 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_LEN &&
2577 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_CONTENTS)
2578 return -EINVAL;
2579 }
2580
2581 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
2582
2583 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
2584 params.auth_type = nla_get_u32(
2585 info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 2586 if (!nl80211_valid_auth_type(rdev, params.auth_type,
2587 NL80211_CMD_START_AP))
8860020e
JB		 2588 return -EINVAL;
2589 } else
2590 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
2591
2592 err = nl80211_crypto_settings(rdev, info, &params.crypto,
2593 NL80211_MAX_NR_CIPHER_SUITES);
2594 if (err)
2595 return err;
2596
1b658f11
VT		 2597 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
2598 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
2599 return -EOPNOTSUPP;
2600 params.inactivity_timeout = nla_get_u16(
2601 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
2602 }
2603
aa430da4
JB		 2604 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
2605 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
2606
2607 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
2608 !nl80211_valid_channel_type(info, &channel_type))
2609 return -EINVAL;
2610
2611 params.channel = rdev_freq_to_chan(rdev,
2612 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
2613 channel_type);
2614 if (!params.channel)
2615 return -EINVAL;
2616 params.channel_type = channel_type;
2617 } else if (wdev->preset_chan) {
2618 params.channel = wdev->preset_chan;
2619 params.channel_type = wdev->preset_chantype;
46c1dd0c 2620 } else if (!nl80211_get_ap_channel(rdev, &params))
aa430da4
JB		 2621 return -EINVAL;
2622
2623 if (!cfg80211_can_beacon_sec_chan(&rdev->wiphy, params.channel,
2624 params.channel_type))
2625 return -EINVAL;
2626
e4e32459
MK		 2627 mutex_lock(&rdev->devlist_mtx);
2628 err = cfg80211_can_use_chan(rdev, wdev, params.channel,
2629 CHAN_MODE_SHARED);
2630 mutex_unlock(&rdev->devlist_mtx);
2631
2632 if (err)
2633 return err;
2634
8860020e 2635 err = rdev->ops->start_ap(&rdev->wiphy, dev, &params);
46c1dd0c
FF		 2636 if (!err) {
2637 wdev->preset_chan = params.channel;
2638 wdev->preset_chantype = params.channel_type;
8860020e 2639 wdev->beacon_interval = params.beacon_interval;
f4489ebe 2640 wdev->channel = params.channel;
46c1dd0c 2641 }
56d1893d 2642 return err;
ed1b6cc7
JB		 2643}
2644
8860020e
JB		 2645static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
2646{
2647 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2648 struct net_device *dev = info->user_ptr[1];
2649 struct wireless_dev *wdev = dev->ieee80211_ptr;
2650 struct cfg80211_beacon_data params;
2651 int err;
2652
2653 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2654 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2655 return -EOPNOTSUPP;
2656
2657 if (!rdev->ops->change_beacon)
2658 return -EOPNOTSUPP;
2659
2660 if (!wdev->beacon_interval)
2661 return -EINVAL;
2662
2663 err = nl80211_parse_beacon(info, &params);
2664 if (err)
2665 return err;
2666
2667 return rdev->ops->change_beacon(&rdev->wiphy, dev, &params);
2668}
2669
2670static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 2671{
4c476991
JB		 2672 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2673 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 2674
60771780 2675 return cfg80211_stop_ap(rdev, dev);
ed1b6cc7
JB		 2676}
2677
5727ef1b
JB		 2678static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
2679 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
2680 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
2681 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 2682 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 2683 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 2684 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 2685};
2686
eccb8e8f 2687static int parse_station_flags(struct genl_info *info,
bdd3ae3d 2688 enum nl80211_iftype iftype,
eccb8e8f 2689 struct station_parameters *params)
5727ef1b
JB		 2690{
2691 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 2692 struct nlattr *nla;
5727ef1b
JB		 2693 int flag;
2694
eccb8e8f
JB		 2695 /*
2696 * Try parsing the new attribute first so userspace
2697 * can specify both for older kernels.
2698 */
2699 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
2700 if (nla) {
2701 struct nl80211_sta_flag_update *sta_flags;
2702
2703 sta_flags = nla_data(nla);
2704 params->sta_flags_mask = sta_flags->mask;
2705 params->sta_flags_set = sta_flags->set;
2706 if ((params->sta_flags_mask |
2707 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
2708 return -EINVAL;
2709 return 0;
2710 }
2711
2712 /* if present, parse the old attribute */
5727ef1b 2713
eccb8e8f 2714 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 2715 if (!nla)
2716 return 0;
2717
2718 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
2719 nla, sta_flags_policy))
2720 return -EINVAL;
2721
bdd3ae3d
JB		 2722 /*
2723 * Only allow certain flags for interface types so that
2724 * other attributes are silently ignored. Remember that
2725 * this is backward compatibility code with old userspace
2726 * and shouldn't be hit in other cases anyway.
2727 */
2728 switch (iftype) {
2729 case NL80211_IFTYPE_AP:
2730 case NL80211_IFTYPE_AP_VLAN:
2731 case NL80211_IFTYPE_P2P_GO:
2732 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2733 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
2734 BIT(NL80211_STA_FLAG_WME) |
2735 BIT(NL80211_STA_FLAG_MFP);
2736 break;
2737 case NL80211_IFTYPE_P2P_CLIENT:
2738 case NL80211_IFTYPE_STATION:
2739 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2740 BIT(NL80211_STA_FLAG_TDLS_PEER);
2741 break;
2742 case NL80211_IFTYPE_MESH_POINT:
2743 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
2744 BIT(NL80211_STA_FLAG_MFP) |
2745 BIT(NL80211_STA_FLAG_AUTHORIZED);
2746 default:
2747 return -EINVAL;
2748 }
5727ef1b 2749
3383b5a6
JB		 2750 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
2751 if (flags[flag]) {
eccb8e8f 2752 params->sta_flags_set |= (1<<flag);
5727ef1b 2753
3383b5a6
JB		 2754 /* no longer support new API additions in old API */
2755 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
2756 return -EINVAL;
2757 }
2758 }
2759
5727ef1b
JB		 2760 return 0;
2761}
2762
c8dcfd8a
FF		 2763static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
2764 int attr)
2765{
2766 struct nlattr *rate;
8eb41c8d
VK		 2767 u32 bitrate;
2768 u16 bitrate_compat;
c8dcfd8a
FF		 2769
2770 rate = nla_nest_start(msg, attr);
2771 if (!rate)
2772 goto nla_put_failure;
2773
2774 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
2775 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 2776 /* report 16-bit bitrate only if we can */
2777 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
9360ffd1 2778 if ((bitrate > 0 &&
8eb41c8d
VK		 2779 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate)) ||
2780 (bitrate_compat > 0 &&
2781 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat)) ||
9360ffd1
DM		 2782 ((info->flags & RATE_INFO_FLAGS_MCS) &&
2783 nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs)) ||
2784 ((info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH) &&
2785 nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH)) ||
2786 ((info->flags & RATE_INFO_FLAGS_SHORT_GI) &&
2787 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI)))
2788 goto nla_put_failure;
c8dcfd8a
FF		 2789
2790 nla_nest_end(msg, rate);
2791 return true;
2792
2793nla_put_failure:
2794 return false;
2795}
2796
15e47304 2797static int nl80211_send_station(struct sk_buff *msg, u32 portid, u32 seq,
66266b3a
JL		 2798 int flags,
2799 struct cfg80211_registered_device *rdev,
2800 struct net_device *dev,
98b62183 2801 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 2802{
2803 void *hdr;
f4263c98 2804 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 2805
15e47304 2806 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_STATION);
fd5b74dc
JB		 2807 if (!hdr)
2808 return -1;
2809
9360ffd1
DM		 2810 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2811 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
2812 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
2813 goto nla_put_failure;
f5ea9120 2814
2ec600d6
LCC		 2815 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
2816 if (!sinfoattr)
fd5b74dc 2817 goto nla_put_failure;
9360ffd1
DM		 2818 if ((sinfo->filled & STATION_INFO_CONNECTED_TIME) &&
2819 nla_put_u32(msg, NL80211_STA_INFO_CONNECTED_TIME,
2820 sinfo->connected_time))
2821 goto nla_put_failure;
2822 if ((sinfo->filled & STATION_INFO_INACTIVE_TIME) &&
2823 nla_put_u32(msg, NL80211_STA_INFO_INACTIVE_TIME,
2824 sinfo->inactive_time))
2825 goto nla_put_failure;
2826 if ((sinfo->filled & STATION_INFO_RX_BYTES) &&
2827 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
2828 sinfo->rx_bytes))
2829 goto nla_put_failure;
2830 if ((sinfo->filled & STATION_INFO_TX_BYTES) &&
2831 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
2832 sinfo->tx_bytes))
2833 goto nla_put_failure;
2834 if ((sinfo->filled & STATION_INFO_LLID) &&
2835 nla_put_u16(msg, NL80211_STA_INFO_LLID, sinfo->llid))
2836 goto nla_put_failure;
2837 if ((sinfo->filled & STATION_INFO_PLID) &&
2838 nla_put_u16(msg, NL80211_STA_INFO_PLID, sinfo->plid))
2839 goto nla_put_failure;
2840 if ((sinfo->filled & STATION_INFO_PLINK_STATE) &&
2841 nla_put_u8(msg, NL80211_STA_INFO_PLINK_STATE,
2842 sinfo->plink_state))
2843 goto nla_put_failure;
66266b3a
JL		 2844 switch (rdev->wiphy.signal_type) {
2845 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 2846 if ((sinfo->filled & STATION_INFO_SIGNAL) &&
2847 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL,
2848 sinfo->signal))
2849 goto nla_put_failure;
2850 if ((sinfo->filled & STATION_INFO_SIGNAL_AVG) &&
2851 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL_AVG,
2852 sinfo->signal_avg))
2853 goto nla_put_failure;
66266b3a
JL		 2854 break;
2855 default:
2856 break;
2857 }
420e7fab 2858 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
c8dcfd8a
FF		 2859 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
2860 NL80211_STA_INFO_TX_BITRATE))
2861 goto nla_put_failure;
2862 }
2863 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
2864 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
2865 NL80211_STA_INFO_RX_BITRATE))
420e7fab 2866 goto nla_put_failure;
420e7fab 2867 }
9360ffd1
DM		 2868 if ((sinfo->filled & STATION_INFO_RX_PACKETS) &&
2869 nla_put_u32(msg, NL80211_STA_INFO_RX_PACKETS,
2870 sinfo->rx_packets))
2871 goto nla_put_failure;
2872 if ((sinfo->filled & STATION_INFO_TX_PACKETS) &&
2873 nla_put_u32(msg, NL80211_STA_INFO_TX_PACKETS,
2874 sinfo->tx_packets))
2875 goto nla_put_failure;
2876 if ((sinfo->filled & STATION_INFO_TX_RETRIES) &&
2877 nla_put_u32(msg, NL80211_STA_INFO_TX_RETRIES,
2878 sinfo->tx_retries))
2879 goto nla_put_failure;
2880 if ((sinfo->filled & STATION_INFO_TX_FAILED) &&
2881 nla_put_u32(msg, NL80211_STA_INFO_TX_FAILED,
2882 sinfo->tx_failed))
2883 goto nla_put_failure;
2884 if ((sinfo->filled & STATION_INFO_BEACON_LOSS_COUNT) &&
2885 nla_put_u32(msg, NL80211_STA_INFO_BEACON_LOSS,
2886 sinfo->beacon_loss_count))
2887 goto nla_put_failure;
f4263c98
PS		 2888 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
2889 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
2890 if (!bss_param)
2891 goto nla_put_failure;
2892
9360ffd1
DM		 2893 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
2894 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
2895 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
2896 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
2897 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
2898 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
2899 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
2900 sinfo->bss_param.dtim_period) ||
2901 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
2902 sinfo->bss_param.beacon_interval))
2903 goto nla_put_failure;
f4263c98
PS		 2904
2905 nla_nest_end(msg, bss_param);
2906 }
9360ffd1
DM		 2907 if ((sinfo->filled & STATION_INFO_STA_FLAGS) &&
2908 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
2909 sizeof(struct nl80211_sta_flag_update),
2910 &sinfo->sta_flags))
2911 goto nla_put_failure;
7eab0f64
JL		 2912 if ((sinfo->filled & STATION_INFO_T_OFFSET) &&
2913 nla_put_u64(msg, NL80211_STA_INFO_T_OFFSET,
2914 sinfo->t_offset))
2915 goto nla_put_failure;
2ec600d6 2916 nla_nest_end(msg, sinfoattr);
fd5b74dc 2917
9360ffd1
DM		 2918 if ((sinfo->filled & STATION_INFO_ASSOC_REQ_IES) &&
2919 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
2920 sinfo->assoc_req_ies))
2921 goto nla_put_failure;
50d3dfb7 2922
fd5b74dc
JB		 2923 return genlmsg_end(msg, hdr);
2924
2925 nla_put_failure:
bc3ed28c
TG		 2926 genlmsg_cancel(msg, hdr);
2927 return -EMSGSIZE;
fd5b74dc
JB		 2928}
2929
2ec600d6 2930static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 2931 struct netlink_callback *cb)
2ec600d6 2932{
2ec600d6
LCC		 2933 struct station_info sinfo;
2934 struct cfg80211_registered_device *dev;
bba95fef 2935 struct net_device *netdev;
2ec600d6 2936 u8 mac_addr[ETH_ALEN];
bba95fef 2937 int sta_idx = cb->args[1];
2ec600d6 2938 int err;
2ec600d6 2939
67748893
JB		 2940 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2941 if (err)
2942 return err;
bba95fef
JB		 2943
2944 if (!dev->ops->dump_station) {
eec60b03 2945 err = -EOPNOTSUPP;
bba95fef
JB		 2946 goto out_err;
2947 }
2948
bba95fef 2949 while (1) {
f612cedf 2950 memset(&sinfo, 0, sizeof(sinfo));
bba95fef
JB		 2951 err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
2952 mac_addr, &sinfo);
2953 if (err == -ENOENT)
2954 break;
2955 if (err)
3b85875a 2956 goto out_err;
bba95fef
JB		 2957
2958 if (nl80211_send_station(skb,
15e47304 2959 NETLINK_CB(cb->skb).portid,
bba95fef 2960 cb->nlh->nlmsg_seq, NLM_F_MULTI,
66266b3a 2961 dev, netdev, mac_addr,
bba95fef
JB		 2962 &sinfo) < 0)
2963 goto out;
2964
2965 sta_idx++;
2966 }
2967
2968
2969 out:
2970 cb->args[1] = sta_idx;
2971 err = skb->len;
bba95fef 2972 out_err:
67748893 2973 nl80211_finish_netdev_dump(dev);
bba95fef
JB		 2974
2975 return err;
2ec600d6 2976}
fd5b74dc 2977
5727ef1b
JB		 2978static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
2979{
4c476991
JB		 2980 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2981 struct net_device *dev = info->user_ptr[1];
2ec600d6 2982 struct station_info sinfo;
fd5b74dc
JB		 2983 struct sk_buff *msg;
2984 u8 *mac_addr = NULL;
4c476991 2985 int err;
fd5b74dc 2986
2ec600d6 2987 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 2988
2989 if (!info->attrs[NL80211_ATTR_MAC])
2990 return -EINVAL;
2991
2992 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2993
4c476991
JB		 2994 if (!rdev->ops->get_station)
2995 return -EOPNOTSUPP;
3b85875a 2996
4c476991 2997 err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
fd5b74dc 2998 if (err)
4c476991 2999 return err;
2ec600d6 3000
fd2120ca 3001 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc 3002 if (!msg)
4c476991 3003 return -ENOMEM;
fd5b74dc 3004
15e47304 3005 if (nl80211_send_station(msg, info->snd_portid, info->snd_seq, 0,
66266b3a 3006 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991
JB		 3007 nlmsg_free(msg);
3008 return -ENOBUFS;
3009 }
3b85875a 3010
4c476991 3011 return genlmsg_reply(msg, info);
5727ef1b
JB		 3012}
3013
3014/*
c258d2de 3015 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 3016 */
80b99899
JB		 3017static struct net_device *get_vlan(struct genl_info *info,
3018 struct cfg80211_registered_device *rdev)
5727ef1b 3019{
463d0183 3020 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 3021 struct net_device *v;
3022 int ret;
3023
3024 if (!vlanattr)
3025 return NULL;
3026
3027 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
3028 if (!v)
3029 return ERR_PTR(-ENODEV);
3030
3031 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
3032 ret = -EINVAL;
3033 goto error;
5727ef1b 3034 }
80b99899
JB		 3035
3036 if (!netif_running(v)) {
3037 ret = -ENETDOWN;
3038 goto error;
3039 }
3040
3041 return v;
3042 error:
3043 dev_put(v);
3044 return ERR_PTR(ret);
5727ef1b
JB		 3045}
3046
3047static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
3048{
4c476991 3049 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 3050 int err;
4c476991 3051 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3052 struct station_parameters params;
3053 u8 *mac_addr = NULL;
3054
3055 memset(&params, 0, sizeof(params));
3056
3057 params.listen_interval = -1;
57cf8043 3058 params.plink_state = -1;
5727ef1b
JB		 3059
3060 if (info->attrs[NL80211_ATTR_STA_AID])
3061 return -EINVAL;
3062
3063 if (!info->attrs[NL80211_ATTR_MAC])
3064 return -EINVAL;
3065
3066 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3067
3068 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
3069 params.supported_rates =
3070 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3071 params.supported_rates_len =
3072 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3073 }
3074
3075 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3076 params.listen_interval =
3077 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
3078
36aedc90
JM		 3079 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3080 params.ht_capa =
3081 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
3082
bdd90d5e
JB		 3083 if (!rdev->ops->change_station)
3084 return -EOPNOTSUPP;
3085
bdd3ae3d 3086 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 3087 return -EINVAL;
3088
2ec600d6
LCC		 3089 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
3090 params.plink_action =
3091 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3092
9c3990aa
JC		 3093 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE])
3094 params.plink_state =
3095 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
3096
a97f4424
JB		 3097 switch (dev->ieee80211_ptr->iftype) {
3098 case NL80211_IFTYPE_AP:
3099 case NL80211_IFTYPE_AP_VLAN:
074ac8df 3100 case NL80211_IFTYPE_P2P_GO:
a97f4424
JB		 3101 /* disallow mesh-specific things */
3102 if (params.plink_action)
bdd90d5e
JB		 3103 return -EINVAL;
3104
3105 /* TDLS can't be set, ... */
3106 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3107 return -EINVAL;
3108 /*
3109 * ... but don't bother the driver with it. This works around
3110 * a hostapd/wpa_supplicant issue -- it always includes the
3111 * TLDS_PEER flag in the mask even for AP mode.
3112 */
3113 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3114
3115 /* accept only the listed bits */
3116 if (params.sta_flags_mask &
3117 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
3118 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
3119 BIT(NL80211_STA_FLAG_WME) |
3120 BIT(NL80211_STA_FLAG_MFP)))
3121 return -EINVAL;
3122
3123 /* must be last in here for error handling */
3124 params.vlan = get_vlan(info, rdev);
3125 if (IS_ERR(params.vlan))
3126 return PTR_ERR(params.vlan);
a97f4424 3127 break;
074ac8df 3128 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 3129 case NL80211_IFTYPE_STATION:
bdd90d5e
JB		 3130 /*
3131 * Don't allow userspace to change the TDLS_PEER flag,
3132 * but silently ignore attempts to change it since we
3133 * don't have state here to verify that it doesn't try
3134 * to change the flag.
3135 */
3136 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
267335d6
AQ		 3137 /* fall through */
3138 case NL80211_IFTYPE_ADHOC:
3139 /* disallow things sta doesn't support */
3140 if (params.plink_action)
3141 return -EINVAL;
3142 if (params.ht_capa)
3143 return -EINVAL;
3144 if (params.listen_interval >= 0)
3145 return -EINVAL;
bdd90d5e
JB		 3146 /* reject any changes other than AUTHORIZED */
3147 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
3148 return -EINVAL;
a97f4424
JB		 3149 break;
3150 case NL80211_IFTYPE_MESH_POINT:
3151 /* disallow things mesh doesn't support */
3152 if (params.vlan)
bdd90d5e 3153 return -EINVAL;
a97f4424 3154 if (params.ht_capa)
bdd90d5e 3155 return -EINVAL;
a97f4424 3156 if (params.listen_interval >= 0)
bdd90d5e
JB		 3157 return -EINVAL;
3158 /*
3159 * No special handling for TDLS here -- the userspace
3160 * mesh code doesn't have this bug.
3161 */
b39c48fa
JC		 3162 if (params.sta_flags_mask &
3163 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
8429828e 3164 BIT(NL80211_STA_FLAG_MFP) |
b39c48fa 3165 BIT(NL80211_STA_FLAG_AUTHORIZED)))
bdd90d5e 3166 return -EINVAL;
a97f4424
JB		 3167 break;
3168 default:
bdd90d5e 3169 return -EOPNOTSUPP;
034d655e
JB		 3170 }
3171
bdd90d5e 3172 /* be aware of params.vlan when changing code here */
5727ef1b 3173
79c97e97 3174 err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b 3175
5727ef1b
JB		 3176 if (params.vlan)
3177 dev_put(params.vlan);
3b85875a 3178
5727ef1b
JB		 3179 return err;
3180}
3181
c75786c9
EP		 3182static struct nla_policy
3183nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] __read_mostly = {
3184 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
3185 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
3186};
3187
5727ef1b
JB		 3188static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
3189{
4c476991 3190 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 3191 int err;
4c476991 3192 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3193 struct station_parameters params;
3194 u8 *mac_addr = NULL;
3195
3196 memset(&params, 0, sizeof(params));
3197
3198 if (!info->attrs[NL80211_ATTR_MAC])
3199 return -EINVAL;
3200
5727ef1b
JB		 3201 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3202 return -EINVAL;
3203
3204 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
3205 return -EINVAL;
3206
0e956c13
TLSC		 3207 if (!info->attrs[NL80211_ATTR_STA_AID])
3208 return -EINVAL;
3209
5727ef1b
JB		 3210 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3211 params.supported_rates =
3212 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3213 params.supported_rates_len =
3214 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3215 params.listen_interval =
3216 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 3217
0e956c13
TLSC		 3218 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
3219 if (!params.aid || params.aid > IEEE80211_MAX_AID)
3220 return -EINVAL;
51b50fbe 3221
36aedc90
JM		 3222 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3223 params.ht_capa =
3224 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 3225
96b78dff
JC		 3226 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
3227 params.plink_action =
3228 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3229
bdd90d5e
JB		 3230 if (!rdev->ops->add_station)
3231 return -EOPNOTSUPP;
3232
bdd3ae3d 3233 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 3234 return -EINVAL;
3235
bdd90d5e
JB		 3236 switch (dev->ieee80211_ptr->iftype) {
3237 case NL80211_IFTYPE_AP:
3238 case NL80211_IFTYPE_AP_VLAN:
3239 case NL80211_IFTYPE_P2P_GO:
3240 /* parse WME attributes if sta is WME capable */
3241 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3242 (params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)) &&
3243 info->attrs[NL80211_ATTR_STA_WME]) {
3244 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
3245 struct nlattr *nla;
3246
3247 nla = info->attrs[NL80211_ATTR_STA_WME];
3248 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
3249 nl80211_sta_wme_policy);
3250 if (err)
3251 return err;
3252
3253 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
3254 params.uapsd_queues =
3255 nla_get_u8(tb[NL80211_STA_WME_UAPSD_QUEUES]);
3256 if (params.uapsd_queues &
3257 ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
3258 return -EINVAL;
c75786c9 3259
bdd90d5e
JB		 3260 if (tb[NL80211_STA_WME_MAX_SP])
3261 params.max_sp =
3262 nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
c75786c9 3263
bdd90d5e
JB		 3264 if (params.max_sp &
3265 ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
3266 return -EINVAL;
4319e193 3267
bdd90d5e
JB		 3268 params.sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
3269 }
3270 /* TDLS peers cannot be added */
3271 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
4319e193 3272 return -EINVAL;
bdd90d5e
JB		 3273 /* but don't bother the driver with it */
3274 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 3275
bdd90d5e
JB		 3276 /* must be last in here for error handling */
3277 params.vlan = get_vlan(info, rdev);
3278 if (IS_ERR(params.vlan))
3279 return PTR_ERR(params.vlan);
3280 break;
3281 case NL80211_IFTYPE_MESH_POINT:
3282 /* TDLS peers cannot be added */
3283 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3284 return -EINVAL;
3285 break;
3286 case NL80211_IFTYPE_STATION:
3287 /* Only TDLS peers can be added */
3288 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
3289 return -EINVAL;
3290 /* Can only add if TDLS ... */
3291 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
3292 return -EOPNOTSUPP;
3293 /* ... with external setup is supported */
3294 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
3295 return -EOPNOTSUPP;
3296 break;
3297 default:
3298 return -EOPNOTSUPP;
c75786c9
EP		 3299 }
3300
bdd90d5e 3301 /* be aware of params.vlan when changing code here */
5727ef1b 3302
79c97e97 3303 err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b 3304
5727ef1b
JB		 3305 if (params.vlan)
3306 dev_put(params.vlan);
5727ef1b
JB		 3307 return err;
3308}
3309
3310static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
3311{
4c476991
JB		 3312 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3313 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3314 u8 *mac_addr = NULL;
3315
3316 if (info->attrs[NL80211_ATTR_MAC])
3317 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3318
e80cf853 3319 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 3320 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 3321 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 3322 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3323 return -EINVAL;
5727ef1b 3324
4c476991
JB		 3325 if (!rdev->ops->del_station)
3326 return -EOPNOTSUPP;
3b85875a 3327
4c476991 3328 return rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
5727ef1b
JB		 3329}
3330
15e47304 3331static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 3332 int flags, struct net_device *dev,
3333 u8 *dst, u8 *next_hop,
3334 struct mpath_info *pinfo)
3335{
3336 void *hdr;
3337 struct nlattr *pinfoattr;
3338
15e47304 3339 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_STATION);
2ec600d6
LCC		 3340 if (!hdr)
3341 return -1;
3342
9360ffd1
DM		 3343 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3344 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
3345 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
3346 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
3347 goto nla_put_failure;
f5ea9120 3348
2ec600d6
LCC		 3349 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
3350 if (!pinfoattr)
3351 goto nla_put_failure;
9360ffd1
DM		 3352 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
3353 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
3354 pinfo->frame_qlen))
3355 goto nla_put_failure;
3356 if (((pinfo->filled & MPATH_INFO_SN) &&
3357 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
3358 ((pinfo->filled & MPATH_INFO_METRIC) &&
3359 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
3360 pinfo->metric)) ||
3361 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
3362 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
3363 pinfo->exptime)) ||
3364 ((pinfo->filled & MPATH_INFO_FLAGS) &&
3365 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
3366 pinfo->flags)) ||
3367 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
3368 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
3369 pinfo->discovery_timeout)) ||
3370 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
3371 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
3372 pinfo->discovery_retries)))
3373 goto nla_put_failure;
2ec600d6
LCC		 3374
3375 nla_nest_end(msg, pinfoattr);
3376
3377 return genlmsg_end(msg, hdr);
3378
3379 nla_put_failure:
bc3ed28c
TG		 3380 genlmsg_cancel(msg, hdr);
3381 return -EMSGSIZE;
2ec600d6
LCC		 3382}
3383
3384static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 3385 struct netlink_callback *cb)
2ec600d6 3386{
2ec600d6
LCC		 3387 struct mpath_info pinfo;
3388 struct cfg80211_registered_device *dev;
bba95fef 3389 struct net_device *netdev;
2ec600d6
LCC		 3390 u8 dst[ETH_ALEN];
3391 u8 next_hop[ETH_ALEN];
bba95fef 3392 int path_idx = cb->args[1];
2ec600d6 3393 int err;
2ec600d6 3394
67748893
JB		 3395 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
3396 if (err)
3397 return err;
bba95fef
JB		 3398
3399 if (!dev->ops->dump_mpath) {
eec60b03 3400 err = -EOPNOTSUPP;
bba95fef
JB		 3401 goto out_err;
3402 }
3403
eec60b03
JM		 3404 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
3405 err = -EOPNOTSUPP;
0448b5fc 3406 goto out_err;
eec60b03
JM		 3407 }
3408
bba95fef
JB		 3409 while (1) {
3410 err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
3411 dst, next_hop, &pinfo);
3412 if (err == -ENOENT)
2ec600d6 3413 break;
bba95fef 3414 if (err)
3b85875a 3415 goto out_err;
2ec600d6 3416
15e47304 3417 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef
JB		 3418 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3419 netdev, dst, next_hop,
3420 &pinfo) < 0)
3421 goto out;
2ec600d6 3422
bba95fef 3423 path_idx++;
2ec600d6 3424 }
2ec600d6 3425
2ec600d6 3426
bba95fef
JB		 3427 out:
3428 cb->args[1] = path_idx;
3429 err = skb->len;
bba95fef 3430 out_err:
67748893 3431 nl80211_finish_netdev_dump(dev);
bba95fef 3432 return err;
2ec600d6
LCC		 3433}
3434
3435static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
3436{
4c476991 3437 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3438 int err;
4c476991 3439 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3440 struct mpath_info pinfo;
3441 struct sk_buff *msg;
3442 u8 *dst = NULL;
3443 u8 next_hop[ETH_ALEN];
3444
3445 memset(&pinfo, 0, sizeof(pinfo));
3446
3447 if (!info->attrs[NL80211_ATTR_MAC])
3448 return -EINVAL;
3449
3450 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3451
4c476991
JB		 3452 if (!rdev->ops->get_mpath)
3453 return -EOPNOTSUPP;
2ec600d6 3454
4c476991
JB		 3455 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3456 return -EOPNOTSUPP;
eec60b03 3457
79c97e97 3458 err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
2ec600d6 3459 if (err)
4c476991 3460 return err;
2ec600d6 3461
fd2120ca 3462 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 3463 if (!msg)
4c476991 3464 return -ENOMEM;
2ec600d6 3465
15e47304 3466 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 3467 dev, dst, next_hop, &pinfo) < 0) {
3468 nlmsg_free(msg);
3469 return -ENOBUFS;
3470 }
3b85875a 3471
4c476991 3472 return genlmsg_reply(msg, info);
2ec600d6
LCC		 3473}
3474
3475static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
3476{
4c476991
JB		 3477 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3478 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3479 u8 *dst = NULL;
3480 u8 *next_hop = NULL;
3481
3482 if (!info->attrs[NL80211_ATTR_MAC])
3483 return -EINVAL;
3484
3485 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3486 return -EINVAL;
3487
3488 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3489 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3490
4c476991
JB		 3491 if (!rdev->ops->change_mpath)
3492 return -EOPNOTSUPP;
35a8efe1 3493
4c476991
JB		 3494 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3495 return -EOPNOTSUPP;
2ec600d6 3496
4c476991 3497 return rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6 3498}
4c476991 3499
2ec600d6
LCC		 3500static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
3501{
4c476991
JB		 3502 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3503 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3504 u8 *dst = NULL;
3505 u8 *next_hop = NULL;
3506
3507 if (!info->attrs[NL80211_ATTR_MAC])
3508 return -EINVAL;
3509
3510 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3511 return -EINVAL;
3512
3513 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3514 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3515
4c476991
JB		 3516 if (!rdev->ops->add_mpath)
3517 return -EOPNOTSUPP;
35a8efe1 3518
4c476991
JB		 3519 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3520 return -EOPNOTSUPP;
2ec600d6 3521
4c476991 3522 return rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6
LCC		 3523}
3524
3525static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
3526{
4c476991
JB		 3527 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3528 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3529 u8 *dst = NULL;
3530
3531 if (info->attrs[NL80211_ATTR_MAC])
3532 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3533
4c476991
JB		 3534 if (!rdev->ops->del_mpath)
3535 return -EOPNOTSUPP;
3b85875a 3536
4c476991 3537 return rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
2ec600d6
LCC		 3538}
3539
9f1ba906
JM		 3540static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
3541{
4c476991
JB		 3542 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3543 struct net_device *dev = info->user_ptr[1];
9f1ba906
JM		 3544 struct bss_parameters params;
3545
3546 memset(&params, 0, sizeof(params));
3547 /* default to not changing parameters */
3548 params.use_cts_prot = -1;
3549 params.use_short_preamble = -1;
3550 params.use_short_slot_time = -1;
fd8aaaf3 3551 params.ap_isolate = -1;
50b12f59 3552 params.ht_opmode = -1;
9f1ba906
JM		 3553
3554 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
3555 params.use_cts_prot =
3556 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
3557 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
3558 params.use_short_preamble =
3559 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
3560 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
3561 params.use_short_slot_time =
3562 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 3563 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
3564 params.basic_rates =
3565 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
3566 params.basic_rates_len =
3567 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
3568 }
fd8aaaf3
FF		 3569 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
3570 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 3571 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
3572 params.ht_opmode =
3573 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 3574
4c476991
JB		 3575 if (!rdev->ops->change_bss)
3576 return -EOPNOTSUPP;
9f1ba906 3577
074ac8df 3578 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 3579 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3580 return -EOPNOTSUPP;
3b85875a 3581
4c476991 3582 return rdev->ops->change_bss(&rdev->wiphy, dev, &params);
9f1ba906
JM		 3583}
3584
b54452b0 3585static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
b2e1b302
LR		 3586 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
3587 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
3588 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
3589 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
3590 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
3591 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
3592};
3593
3594static int parse_reg_rule(struct nlattr *tb[],
3595 struct ieee80211_reg_rule *reg_rule)
3596{
3597 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
3598 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
3599
3600 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
3601 return -EINVAL;
3602 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
3603 return -EINVAL;
3604 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
3605 return -EINVAL;
3606 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
3607 return -EINVAL;
3608 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
3609 return -EINVAL;
3610
3611 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
3612
3613 freq_range->start_freq_khz =
3614 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
3615 freq_range->end_freq_khz =
3616 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
3617 freq_range->max_bandwidth_khz =
3618 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
3619
3620 power_rule->max_eirp =
3621 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
3622
3623 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
3624 power_rule->max_antenna_gain =
3625 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
3626
3627 return 0;
3628}
3629
3630static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
3631{
3632 int r;
3633 char *data = NULL;
57b5ce07 3634 enum nl80211_user_reg_hint_type user_reg_hint_type;
b2e1b302 3635
80778f18
LR		 3636 /*
3637 * You should only get this when cfg80211 hasn't yet initialized
3638 * completely when built-in to the kernel right between the time
3639 * window between nl80211_init() and regulatory_init(), if that is
3640 * even possible.
3641 */
3642 mutex_lock(&cfg80211_mutex);
3643 if (unlikely(!cfg80211_regdomain)) {
fe33eb39
LR		 3644 mutex_unlock(&cfg80211_mutex);
3645 return -EINPROGRESS;
80778f18 3646 }
fe33eb39 3647 mutex_unlock(&cfg80211_mutex);
80778f18 3648
fe33eb39
LR		 3649 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3650 return -EINVAL;
b2e1b302
LR		 3651
3652 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3653
57b5ce07
LR		 3654 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
3655 user_reg_hint_type =
3656 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
3657 else
3658 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
3659
3660 switch (user_reg_hint_type) {
3661 case NL80211_USER_REG_HINT_USER:
3662 case NL80211_USER_REG_HINT_CELL_BASE:
3663 break;
3664 default:
3665 return -EINVAL;
3666 }
3667
3668 r = regulatory_hint_user(data, user_reg_hint_type);
fe33eb39 3669
b2e1b302
LR		 3670 return r;
3671}
3672
24bdd9f4 3673static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 3674 struct genl_info *info)
93da9cc1 3675{
4c476991 3676 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 3677 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 3678 struct wireless_dev *wdev = dev->ieee80211_ptr;
3679 struct mesh_config cur_params;
3680 int err = 0;
93da9cc1 3681 void *hdr;
3682 struct nlattr *pinfoattr;
3683 struct sk_buff *msg;
3684
29cbe68c
JB		 3685 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3686 return -EOPNOTSUPP;
3687
24bdd9f4 3688 if (!rdev->ops->get_mesh_config)
4c476991 3689 return -EOPNOTSUPP;
f3f92586 3690
29cbe68c
JB		 3691 wdev_lock(wdev);
3692 /* If not connected, get default parameters */
3693 if (!wdev->mesh_id_len)
3694 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
3695 else
24bdd9f4 3696 err = rdev->ops->get_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3697 &cur_params);
3698 wdev_unlock(wdev);
3699
93da9cc1 3700 if (err)
4c476991 3701 return err;
93da9cc1 3702
3703 /* Draw up a netlink message to send back */
fd2120ca 3704 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 3705 if (!msg)
3706 return -ENOMEM;
15e47304 3707 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 3708 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 3709 if (!hdr)
efe1cf0c 3710 goto out;
24bdd9f4 3711 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 3712 if (!pinfoattr)
3713 goto nla_put_failure;
9360ffd1
DM		 3714 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3715 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
3716 cur_params.dot11MeshRetryTimeout) ||
3717 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3718 cur_params.dot11MeshConfirmTimeout) ||
3719 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
3720 cur_params.dot11MeshHoldingTimeout) ||
3721 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
3722 cur_params.dot11MeshMaxPeerLinks) ||
3723 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
3724 cur_params.dot11MeshMaxRetries) ||
3725 nla_put_u8(msg, NL80211_MESHCONF_TTL,
3726 cur_params.dot11MeshTTL) ||
3727 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
3728 cur_params.element_ttl) ||
3729 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3730 cur_params.auto_open_plinks) ||
7eab0f64
JL		 3731 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
3732 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 3733 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3734 cur_params.dot11MeshHWMPmaxPREQretries) ||
3735 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
3736 cur_params.path_refresh_time) ||
3737 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3738 cur_params.min_discovery_timeout) ||
3739 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3740 cur_params.dot11MeshHWMPactivePathTimeout) ||
3741 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3742 cur_params.dot11MeshHWMPpreqMinInterval) ||
3743 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
3744 cur_params.dot11MeshHWMPperrMinInterval) ||
3745 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3746 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
3747 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
3748 cur_params.dot11MeshHWMPRootMode) ||
3749 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3750 cur_params.dot11MeshHWMPRannInterval) ||
3751 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3752 cur_params.dot11MeshGateAnnouncementProtocol) ||
3753 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
3754 cur_params.dot11MeshForwarding) ||
3755 nla_put_u32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 3756 cur_params.rssi_threshold) ||
3757 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 3758 cur_params.ht_opmode) ||
3759 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
3760 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
3761 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 3762 cur_params.dot11MeshHWMProotInterval) ||
3763 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3764 cur_params.dot11MeshHWMPconfirmationInterval))
9360ffd1 3765 goto nla_put_failure;
93da9cc1 3766 nla_nest_end(msg, pinfoattr);
3767 genlmsg_end(msg, hdr);
4c476991 3768 return genlmsg_reply(msg, info);
93da9cc1 3769
3b85875a 3770 nla_put_failure:
93da9cc1 3771 genlmsg_cancel(msg, hdr);
efe1cf0c 3772 out:
d080e275 3773 nlmsg_free(msg);
4c476991 3774 return -ENOBUFS;
93da9cc1 3775}
3776
b54452b0 3777static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
93da9cc1 3778 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
3779 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
3780 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
3781 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
3782 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
3783 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
45904f21 3784 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
93da9cc1 3785 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
d299a1f2 3786 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] = { .type = NLA_U32 },
93da9cc1 3787 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
3788 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
3789 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
3790 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
3791 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
dca7e943 3792 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] = { .type = NLA_U16 },
93da9cc1 3793 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
699403db 3794 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
0507e159 3795 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
16dd7267 3796 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
94f90656 3797 [NL80211_MESHCONF_FORWARDING] = { .type = NLA_U8 },
a4f606ea
CYY		 3798 [NL80211_MESHCONF_RSSI_THRESHOLD] = { .type = NLA_U32 },
3799 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6
CYY		 3800 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
3801 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] = { .type = NLA_U16 },
728b19e5 3802 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] = { .type = NLA_U16 },
93da9cc1 3803};
3804
c80d545d
JC		 3805static const struct nla_policy
3806 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 3807 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 3808 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
3809 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 3810 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
581a8b0f 3811 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
a4f606ea 3812 .len = IEEE80211_MAX_DATA_LEN },
b130e5ce 3813 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 3814};
3815
24bdd9f4 3816static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 3817 struct mesh_config *cfg,
3818 u32 *mask_out)
93da9cc1 3819{
93da9cc1 3820 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 3821 u32 mask = 0;
93da9cc1 3822
bd90fdcc
JB		 3823#define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
3824do {\
3825 if (table[attr_num]) {\
3826 cfg->param = nla_fn(table[attr_num]); \
3827 mask |= (1 << (attr_num - 1)); \
3828 } \
3829} while (0);\
3830
3831
24bdd9f4 3832 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 3833 return -EINVAL;
3834 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
24bdd9f4 3835 info->attrs[NL80211_ATTR_MESH_CONFIG],
bd90fdcc 3836 nl80211_meshconf_params_policy))
93da9cc1 3837 return -EINVAL;
3838
93da9cc1 3839 /* This makes sure that there aren't more than 32 mesh config
3840 * parameters (otherwise our bitfield scheme would not work.) */
3841 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
3842
3843 /* Fill in the params struct */
93da9cc1 3844 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
a4f606ea
CYY		 3845 mask, NL80211_MESHCONF_RETRY_TIMEOUT,
3846 nla_get_u16);
93da9cc1 3847 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
a4f606ea
CYY		 3848 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3849 nla_get_u16);
93da9cc1 3850 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
a4f606ea
CYY		 3851 mask, NL80211_MESHCONF_HOLDING_TIMEOUT,
3852 nla_get_u16);
93da9cc1 3853 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
a4f606ea
CYY		 3854 mask, NL80211_MESHCONF_MAX_PEER_LINKS,
3855 nla_get_u16);
93da9cc1 3856 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
a4f606ea
CYY		 3857 mask, NL80211_MESHCONF_MAX_RETRIES,
3858 nla_get_u8);
93da9cc1 3859 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
a4f606ea 3860 mask, NL80211_MESHCONF_TTL, nla_get_u8);
45904f21 3861 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl,
a4f606ea
CYY		 3862 mask, NL80211_MESHCONF_ELEMENT_TTL,
3863 nla_get_u8);
93da9cc1 3864 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
a4f606ea
CYY		 3865 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3866 nla_get_u8);
3867 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor, mask,
3868 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
3869 nla_get_u32);
93da9cc1 3870 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
a4f606ea
CYY		 3871 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3872 nla_get_u8);
93da9cc1 3873 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
a4f606ea
CYY		 3874 mask, NL80211_MESHCONF_PATH_REFRESH_TIME,
3875 nla_get_u32);
93da9cc1 3876 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
a4f606ea
CYY		 3877 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3878 nla_get_u16);
3879 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout, mask,
3880 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3881 nla_get_u32);
93da9cc1 3882 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
a4f606ea
CYY		 3883 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3884 nla_get_u16);
dca7e943 3885 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval,
a4f606ea
CYY		 3886 mask, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
3887 nla_get_u16);
93da9cc1 3888 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
a4f606ea
CYY		 3889 dot11MeshHWMPnetDiameterTraversalTime, mask,
3890 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3891 nla_get_u16);
3892 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, mask,
3893 NL80211_MESHCONF_HWMP_ROOTMODE, nla_get_u8);
3894 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, mask,
3895 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3896 nla_get_u16);
63c5723b 3897 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
a4f606ea
CYY		 3898 dot11MeshGateAnnouncementProtocol, mask,
3899 NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3900 nla_get_u8);
94f90656 3901 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding,
a4f606ea
CYY		 3902 mask, NL80211_MESHCONF_FORWARDING,
3903 nla_get_u8);
55335137 3904 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold,
a4f606ea
CYY		 3905 mask, NL80211_MESHCONF_RSSI_THRESHOLD,
3906 nla_get_u32);
70c33eaa 3907 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, ht_opmode,
a4f606ea 3908 mask, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 3909 nla_get_u16);
3910 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathToRootTimeout,
3911 mask,
3912 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
3913 nla_get_u32);
3914 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval,
3915 mask, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 3916 nla_get_u16);
3917 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3918 dot11MeshHWMPconfirmationInterval, mask,
3919 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
a4f606ea 3920 nla_get_u16);
bd90fdcc
JB		 3921 if (mask_out)
3922 *mask_out = mask;
c80d545d 3923
bd90fdcc
JB		 3924 return 0;
3925
3926#undef FILL_IN_MESH_PARAM_IF_SET
3927}
3928
c80d545d
JC		 3929static int nl80211_parse_mesh_setup(struct genl_info *info,
3930 struct mesh_setup *setup)
3931{
3932 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
3933
3934 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
3935 return -EINVAL;
3936 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
3937 info->attrs[NL80211_ATTR_MESH_SETUP],
3938 nl80211_mesh_setup_params_policy))
3939 return -EINVAL;
3940
d299a1f2
JC		 3941 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
3942 setup->sync_method =
3943 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
3944 IEEE80211_SYNC_METHOD_VENDOR :
3945 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
3946
c80d545d
JC		 3947 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
3948 setup->path_sel_proto =
3949 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
3950 IEEE80211_PATH_PROTOCOL_VENDOR :
3951 IEEE80211_PATH_PROTOCOL_HWMP;
3952
3953 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
3954 setup->path_metric =
3955 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
3956 IEEE80211_PATH_METRIC_VENDOR :
3957 IEEE80211_PATH_METRIC_AIRTIME;
3958
581a8b0f
JC		 3959
3960 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 3961 struct nlattr *ieattr =
581a8b0f 3962 tb[NL80211_MESH_SETUP_IE];
c80d545d
JC		 3963 if (!is_valid_ie_attr(ieattr))
3964 return -EINVAL;
581a8b0f
JC		 3965 setup->ie = nla_data(ieattr);
3966 setup->ie_len = nla_len(ieattr);
c80d545d 3967 }
b130e5ce
JC		 3968 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
3969 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
c80d545d
JC		 3970
3971 return 0;
3972}
3973
24bdd9f4 3974static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 3975 struct genl_info *info)
bd90fdcc
JB		 3976{
3977 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3978 struct net_device *dev = info->user_ptr[1];
29cbe68c 3979 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 3980 struct mesh_config cfg;
3981 u32 mask;
3982 int err;
3983
29cbe68c
JB		 3984 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3985 return -EOPNOTSUPP;
3986
24bdd9f4 3987 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 3988 return -EOPNOTSUPP;
3989
24bdd9f4 3990 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 3991 if (err)
3992 return err;
3993
29cbe68c
JB		 3994 wdev_lock(wdev);
3995 if (!wdev->mesh_id_len)
3996 err = -ENOLINK;
3997
3998 if (!err)
24bdd9f4 3999 err = rdev->ops->update_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 4000 mask, &cfg);
4001
4002 wdev_unlock(wdev);
4003
4004 return err;
93da9cc1 4005}
4006
f130347c
LR		 4007static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
4008{
4009 struct sk_buff *msg;
4010 void *hdr = NULL;
4011 struct nlattr *nl_reg_rules;
4012 unsigned int i;
4013 int err = -EINVAL;
4014
a1794390 4015 mutex_lock(&cfg80211_mutex);
f130347c
LR		 4016
4017 if (!cfg80211_regdomain)
4018 goto out;
4019
fd2120ca 4020 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 4021 if (!msg) {
4022 err = -ENOBUFS;
4023 goto out;
4024 }
4025
15e47304 4026 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
f130347c
LR		 4027 NL80211_CMD_GET_REG);
4028 if (!hdr)
efe1cf0c 4029 goto put_failure;
f130347c 4030
9360ffd1
DM		 4031 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
4032 cfg80211_regdomain->alpha2) ||
4033 (cfg80211_regdomain->dfs_region &&
4034 nla_put_u8(msg, NL80211_ATTR_DFS_REGION,
4035 cfg80211_regdomain->dfs_region)))
4036 goto nla_put_failure;
f130347c 4037
57b5ce07
LR		 4038 if (reg_last_request_cell_base() &&
4039 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
4040 NL80211_USER_REG_HINT_CELL_BASE))
4041 goto nla_put_failure;
4042
f130347c
LR		 4043 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
4044 if (!nl_reg_rules)
4045 goto nla_put_failure;
4046
4047 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
4048 struct nlattr *nl_reg_rule;
4049 const struct ieee80211_reg_rule *reg_rule;
4050 const struct ieee80211_freq_range *freq_range;
4051 const struct ieee80211_power_rule *power_rule;
4052
4053 reg_rule = &cfg80211_regdomain->reg_rules[i];
4054 freq_range = &reg_rule->freq_range;
4055 power_rule = &reg_rule->power_rule;
4056
4057 nl_reg_rule = nla_nest_start(msg, i);
4058 if (!nl_reg_rule)
4059 goto nla_put_failure;
4060
9360ffd1
DM		 4061 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
4062 reg_rule->flags) ||
4063 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
4064 freq_range->start_freq_khz) ||
4065 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
4066 freq_range->end_freq_khz) ||
4067 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
4068 freq_range->max_bandwidth_khz) ||
4069 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
4070 power_rule->max_antenna_gain) ||
4071 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
4072 power_rule->max_eirp))
4073 goto nla_put_failure;
f130347c
LR		 4074
4075 nla_nest_end(msg, nl_reg_rule);
4076 }
4077
4078 nla_nest_end(msg, nl_reg_rules);
4079
4080 genlmsg_end(msg, hdr);
134e6375 4081 err = genlmsg_reply(msg, info);
f130347c
LR		 4082 goto out;
4083
4084nla_put_failure:
4085 genlmsg_cancel(msg, hdr);
efe1cf0c 4086put_failure:
d080e275 4087 nlmsg_free(msg);
f130347c
LR		 4088 err = -EMSGSIZE;
4089out:
a1794390 4090 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 4091 return err;
4092}
4093
b2e1b302
LR		 4094static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
4095{
4096 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
4097 struct nlattr *nl_reg_rule;
4098 char *alpha2 = NULL;
4099 int rem_reg_rules = 0, r = 0;
4100 u32 num_rules = 0, rule_idx = 0, size_of_regd;
8b60b078 4101 u8 dfs_region = 0;
b2e1b302
LR		 4102 struct ieee80211_regdomain *rd = NULL;
4103
4104 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
4105 return -EINVAL;
4106
4107 if (!info->attrs[NL80211_ATTR_REG_RULES])
4108 return -EINVAL;
4109
4110 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
4111
8b60b078
LR		 4112 if (info->attrs[NL80211_ATTR_DFS_REGION])
4113 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
4114
b2e1b302
LR		 4115 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
4116 rem_reg_rules) {
4117 num_rules++;
4118 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 4119 return -EINVAL;
b2e1b302
LR		 4120 }
4121
61405e97
LR		 4122 mutex_lock(&cfg80211_mutex);
4123
d0e18f83
LR		 4124 if (!reg_is_valid_request(alpha2)) {
4125 r = -EINVAL;
4126 goto bad_reg;
4127 }
b2e1b302
LR		 4128
4129 size_of_regd = sizeof(struct ieee80211_regdomain) +
4130 (num_rules * sizeof(struct ieee80211_reg_rule));
4131
4132 rd = kzalloc(size_of_regd, GFP_KERNEL);
d0e18f83
LR		 4133 if (!rd) {
4134 r = -ENOMEM;
4135 goto bad_reg;
4136 }
b2e1b302
LR		 4137
4138 rd->n_reg_rules = num_rules;
4139 rd->alpha2[0] = alpha2[0];
4140 rd->alpha2[1] = alpha2[1];
4141
8b60b078
LR		 4142 /*
4143 * Disable DFS master mode if the DFS region was
4144 * not supported or known on this kernel.
4145 */
4146 if (reg_supported_dfs_region(dfs_region))
4147 rd->dfs_region = dfs_region;
4148
b2e1b302
LR		 4149 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
4150 rem_reg_rules) {
4151 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
4152 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
4153 reg_rule_policy);
4154 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
4155 if (r)
4156 goto bad_reg;
4157
4158 rule_idx++;
4159
d0e18f83
LR		 4160 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
4161 r = -EINVAL;
b2e1b302 4162 goto bad_reg;
d0e18f83 4163 }
b2e1b302
LR		 4164 }
4165
4166 BUG_ON(rule_idx != num_rules);
4167
b2e1b302 4168 r = set_regdom(rd);
61405e97 4169
a1794390 4170 mutex_unlock(&cfg80211_mutex);
d0e18f83 4171
b2e1b302
LR		 4172 return r;
4173
d2372b31 4174 bad_reg:
61405e97 4175 mutex_unlock(&cfg80211_mutex);
b2e1b302 4176 kfree(rd);
d0e18f83 4177 return r;
b2e1b302
LR		 4178}
4179
83f5e2cf
JB		 4180static int validate_scan_freqs(struct nlattr *freqs)
4181{
4182 struct nlattr *attr1, *attr2;
4183 int n_channels = 0, tmp1, tmp2;
4184
4185 nla_for_each_nested(attr1, freqs, tmp1) {
4186 n_channels++;
4187 /*
4188 * Some hardware has a limited channel list for
4189 * scanning, and it is pretty much nonsensical
4190 * to scan for a channel twice, so disallow that
4191 * and don't require drivers to check that the
4192 * channel list they get isn't longer than what
4193 * they can scan, as long as they can scan all
4194 * the channels they registered at once.
4195 */
4196 nla_for_each_nested(attr2, freqs, tmp2)
4197 if (attr1 != attr2 &&
4198 nla_get_u32(attr1) == nla_get_u32(attr2))
4199 return 0;
4200 }
4201
4202 return n_channels;
4203}
4204
2a519311
JB		 4205static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
4206{
4c476991 4207 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 4208 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 4209 struct cfg80211_scan_request *request;
2a519311
JB		 4210 struct nlattr *attr;
4211 struct wiphy *wiphy;
83f5e2cf 4212 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 4213 size_t ie_len;
2a519311 4214
f4a11bb0
JB		 4215 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4216 return -EINVAL;
4217
79c97e97 4218 wiphy = &rdev->wiphy;
2a519311 4219
4c476991
JB		 4220 if (!rdev->ops->scan)
4221 return -EOPNOTSUPP;
2a519311 4222
4c476991
JB		 4223 if (rdev->scan_req)
4224 return -EBUSY;
2a519311
JB		 4225
4226 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 4227 n_channels = validate_scan_freqs(
4228 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4c476991
JB		 4229 if (!n_channels)
4230 return -EINVAL;
2a519311 4231 } else {
34850ab2 4232 enum ieee80211_band band;
83f5e2cf
JB		 4233 n_channels = 0;
4234
2a519311
JB		 4235 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4236 if (wiphy->bands[band])
4237 n_channels += wiphy->bands[band]->n_channels;
4238 }
4239
4240 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4241 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
4242 n_ssids++;
4243
4c476991
JB		 4244 if (n_ssids > wiphy->max_scan_ssids)
4245 return -EINVAL;
2a519311 4246
70692ad2
JM		 4247 if (info->attrs[NL80211_ATTR_IE])
4248 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4249 else
4250 ie_len = 0;
4251
4c476991
JB		 4252 if (ie_len > wiphy->max_scan_ie_len)
4253 return -EINVAL;
18a83659 4254
2a519311 4255 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 4256 + sizeof(*request->ssids) * n_ssids
4257 + sizeof(*request->channels) * n_channels
70692ad2 4258 + ie_len, GFP_KERNEL);
4c476991
JB		 4259 if (!request)
4260 return -ENOMEM;
2a519311 4261
2a519311 4262 if (n_ssids)
5ba63533 4263 request->ssids = (void *)&request->channels[n_channels];
2a519311 4264 request->n_ssids = n_ssids;
70692ad2
JM		 4265 if (ie_len) {
4266 if (request->ssids)
4267 request->ie = (void *)(request->ssids + n_ssids);
4268 else
4269 request->ie = (void *)(request->channels + n_channels);
4270 }
2a519311 4271
584991dc 4272 i = 0;
2a519311
JB		 4273 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4274 /* user specified, bail out if channel not found */
2a519311 4275 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 4276 struct ieee80211_channel *chan;
4277
4278 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
4279
4280 if (!chan) {
2a519311
JB		 4281 err = -EINVAL;
4282 goto out_free;
4283 }
584991dc
JB		 4284
4285 /* ignore disabled channels */
4286 if (chan->flags & IEEE80211_CHAN_DISABLED)
4287 continue;
4288
4289 request->channels[i] = chan;
2a519311
JB		 4290 i++;
4291 }
4292 } else {
34850ab2
JB		 4293 enum ieee80211_band band;
4294
2a519311 4295 /* all channels */
2a519311
JB		 4296 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4297 int j;
4298 if (!wiphy->bands[band])
4299 continue;
4300 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 4301 struct ieee80211_channel *chan;
4302
4303 chan = &wiphy->bands[band]->channels[j];
4304
4305 if (chan->flags & IEEE80211_CHAN_DISABLED)
4306 continue;
4307
4308 request->channels[i] = chan;
2a519311
JB		 4309 i++;
4310 }
4311 }
4312 }
4313
584991dc
JB		 4314 if (!i) {
4315 err = -EINVAL;
4316 goto out_free;
4317 }
4318
4319 request->n_channels = i;
4320
2a519311
JB		 4321 i = 0;
4322 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4323 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 4324 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 4325 err = -EINVAL;
4326 goto out_free;
4327 }
57a27e1d 4328 request->ssids[i].ssid_len = nla_len(attr);
2a519311 4329 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 4330 i++;
4331 }
4332 }
4333
70692ad2
JM		 4334 if (info->attrs[NL80211_ATTR_IE]) {
4335 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 4336 memcpy((void *)request->ie,
4337 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 4338 request->ie_len);
4339 }
4340
34850ab2 4341 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
a401d2bb
JB		 4342 if (wiphy->bands[i])
4343 request->rates[i] =
4344 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 4345
4346 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
4347 nla_for_each_nested(attr,
4348 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
4349 tmp) {
4350 enum ieee80211_band band = nla_type(attr);
4351
84404623 4352 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
34850ab2
JB		 4353 err = -EINVAL;
4354 goto out_free;
4355 }
4356 err = ieee80211_get_ratemask(wiphy->bands[band],
4357 nla_data(attr),
4358 nla_len(attr),
4359 &request->rates[band]);
4360 if (err)
4361 goto out_free;
4362 }
4363 }
4364
e9f935e3
RM		 4365 request->no_cck =
4366 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
4367
fd014284 4368 request->wdev = wdev;
79c97e97 4369 request->wiphy = &rdev->wiphy;
2a519311 4370
79c97e97 4371 rdev->scan_req = request;
fd014284 4372 err = rdev->ops->scan(&rdev->wiphy, request);
2a519311 4373
463d0183 4374 if (!err) {
fd014284
JB		 4375 nl80211_send_scan_start(rdev, wdev);
4376 if (wdev->netdev)
4377 dev_hold(wdev->netdev);
4c476991 4378 } else {
2a519311 4379 out_free:
79c97e97 4380 rdev->scan_req = NULL;
2a519311
JB		 4381 kfree(request);
4382 }
3b85875a 4383
2a519311
JB		 4384 return err;
4385}
4386
807f8a8c
LC		 4387static int nl80211_start_sched_scan(struct sk_buff *skb,
4388 struct genl_info *info)
4389{
4390 struct cfg80211_sched_scan_request *request;
4391 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4392 struct net_device *dev = info->user_ptr[1];
807f8a8c
LC		 4393 struct nlattr *attr;
4394 struct wiphy *wiphy;
a1f1c21c 4395 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i;
bbe6ad6d 4396 u32 interval;
807f8a8c
LC		 4397 enum ieee80211_band band;
4398 size_t ie_len;
a1f1c21c 4399 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
807f8a8c
LC		 4400
4401 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4402 !rdev->ops->sched_scan_start)
4403 return -EOPNOTSUPP;
4404
4405 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4406 return -EINVAL;
4407
bbe6ad6d
LC		 4408 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
4409 return -EINVAL;
4410
4411 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
4412 if (interval == 0)
4413 return -EINVAL;
4414
807f8a8c
LC		 4415 wiphy = &rdev->wiphy;
4416
4417 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4418 n_channels = validate_scan_freqs(
4419 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4420 if (!n_channels)
4421 return -EINVAL;
4422 } else {
4423 n_channels = 0;
4424
4425 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4426 if (wiphy->bands[band])
4427 n_channels += wiphy->bands[band]->n_channels;
4428 }
4429
4430 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4431 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4432 tmp)
4433 n_ssids++;
4434
93b6aa69 4435 if (n_ssids > wiphy->max_sched_scan_ssids)
807f8a8c
LC		 4436 return -EINVAL;
4437
a1f1c21c
LC		 4438 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH])
4439 nla_for_each_nested(attr,
4440 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4441 tmp)
4442 n_match_sets++;
4443
4444 if (n_match_sets > wiphy->max_match_sets)
4445 return -EINVAL;
4446
807f8a8c
LC		 4447 if (info->attrs[NL80211_ATTR_IE])
4448 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4449 else
4450 ie_len = 0;
4451
5a865bad 4452 if (ie_len > wiphy->max_sched_scan_ie_len)
807f8a8c
LC		 4453 return -EINVAL;
4454
c10841ca
LC		 4455 mutex_lock(&rdev->sched_scan_mtx);
4456
4457 if (rdev->sched_scan_req) {
4458 err = -EINPROGRESS;
4459 goto out;
4460 }
4461
807f8a8c 4462 request = kzalloc(sizeof(*request)
a2cd43c5 4463 + sizeof(*request->ssids) * n_ssids
a1f1c21c 4464 + sizeof(*request->match_sets) * n_match_sets
a2cd43c5 4465 + sizeof(*request->channels) * n_channels
807f8a8c 4466 + ie_len, GFP_KERNEL);
c10841ca
LC		 4467 if (!request) {
4468 err = -ENOMEM;
4469 goto out;
4470 }
807f8a8c
LC		 4471
4472 if (n_ssids)
4473 request->ssids = (void *)&request->channels[n_channels];
4474 request->n_ssids = n_ssids;
4475 if (ie_len) {
4476 if (request->ssids)
4477 request->ie = (void *)(request->ssids + n_ssids);
4478 else
4479 request->ie = (void *)(request->channels + n_channels);
4480 }
4481
a1f1c21c
LC		 4482 if (n_match_sets) {
4483 if (request->ie)
4484 request->match_sets = (void *)(request->ie + ie_len);
4485 else if (request->ssids)
4486 request->match_sets =
4487 (void *)(request->ssids + n_ssids);
4488 else
4489 request->match_sets =
4490 (void *)(request->channels + n_channels);
4491 }
4492 request->n_match_sets = n_match_sets;
4493
807f8a8c
LC		 4494 i = 0;
4495 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4496 /* user specified, bail out if channel not found */
4497 nla_for_each_nested(attr,
4498 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
4499 tmp) {
4500 struct ieee80211_channel *chan;
4501
4502 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
4503
4504 if (!chan) {
4505 err = -EINVAL;
4506 goto out_free;
4507 }
4508
4509 /* ignore disabled channels */
4510 if (chan->flags & IEEE80211_CHAN_DISABLED)
4511 continue;
4512
4513 request->channels[i] = chan;
4514 i++;
4515 }
4516 } else {
4517 /* all channels */
4518 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4519 int j;
4520 if (!wiphy->bands[band])
4521 continue;
4522 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
4523 struct ieee80211_channel *chan;
4524
4525 chan = &wiphy->bands[band]->channels[j];
4526
4527 if (chan->flags & IEEE80211_CHAN_DISABLED)
4528 continue;
4529
4530 request->channels[i] = chan;
4531 i++;
4532 }
4533 }
4534 }
4535
4536 if (!i) {
4537 err = -EINVAL;
4538 goto out_free;
4539 }
4540
4541 request->n_channels = i;
4542
4543 i = 0;
4544 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4545 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4546 tmp) {
57a27e1d 4547 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 4548 err = -EINVAL;
4549 goto out_free;
4550 }
57a27e1d 4551 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 4552 memcpy(request->ssids[i].ssid, nla_data(attr),
4553 nla_len(attr));
807f8a8c
LC		 4554 i++;
4555 }
4556 }
4557
a1f1c21c
LC		 4558 i = 0;
4559 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
4560 nla_for_each_nested(attr,
4561 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4562 tmp) {
88e920b4 4563 struct nlattr *ssid, *rssi;
a1f1c21c
LC		 4564
4565 nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
4566 nla_data(attr), nla_len(attr),
4567 nl80211_match_policy);
4a4ab0d7 4568 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
a1f1c21c
LC		 4569 if (ssid) {
4570 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
4571 err = -EINVAL;
4572 goto out_free;
4573 }
4574 memcpy(request->match_sets[i].ssid.ssid,
4575 nla_data(ssid), nla_len(ssid));
4576 request->match_sets[i].ssid.ssid_len =
4577 nla_len(ssid);
4578 }
88e920b4
TP		 4579 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
4580 if (rssi)
4581 request->rssi_thold = nla_get_u32(rssi);
4582 else
4583 request->rssi_thold =
4584 NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 4585 i++;
4586 }
4587 }
4588
807f8a8c
LC		 4589 if (info->attrs[NL80211_ATTR_IE]) {
4590 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4591 memcpy((void *)request->ie,
4592 nla_data(info->attrs[NL80211_ATTR_IE]),
4593 request->ie_len);
4594 }
4595
4596 request->dev = dev;
4597 request->wiphy = &rdev->wiphy;
bbe6ad6d 4598 request->interval = interval;
807f8a8c
LC		 4599
4600 err = rdev->ops->sched_scan_start(&rdev->wiphy, dev, request);
4601 if (!err) {
4602 rdev->sched_scan_req = request;
4603 nl80211_send_sched_scan(rdev, dev,
4604 NL80211_CMD_START_SCHED_SCAN);
4605 goto out;
4606 }
4607
4608out_free:
4609 kfree(request);
4610out:
c10841ca 4611 mutex_unlock(&rdev->sched_scan_mtx);
807f8a8c
LC		 4612 return err;
4613}
4614
4615static int nl80211_stop_sched_scan(struct sk_buff *skb,
4616 struct genl_info *info)
4617{
4618 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c10841ca 4619 int err;
807f8a8c
LC		 4620
4621 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4622 !rdev->ops->sched_scan_stop)
4623 return -EOPNOTSUPP;
4624
c10841ca
LC		 4625 mutex_lock(&rdev->sched_scan_mtx);
4626 err = __cfg80211_stop_sched_scan(rdev, false);
4627 mutex_unlock(&rdev->sched_scan_mtx);
4628
4629 return err;
807f8a8c
LC		 4630}
4631
9720bb3a
JB		 4632static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
4633 u32 seq, int flags,
2a519311 4634 struct cfg80211_registered_device *rdev,
48ab905d
JB		 4635 struct wireless_dev *wdev,
4636 struct cfg80211_internal_bss *intbss)
2a519311 4637{
48ab905d 4638 struct cfg80211_bss *res = &intbss->pub;
2a519311
JB		 4639 void *hdr;
4640 struct nlattr *bss;
48ab905d
JB		 4641
4642 ASSERT_WDEV_LOCK(wdev);
2a519311 4643
15e47304 4644 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 4645 NL80211_CMD_NEW_SCAN_RESULTS);
4646 if (!hdr)
4647 return -1;
4648
9720bb3a
JB		 4649 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
4650
9360ffd1
DM		 4651 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation) ||
4652 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
4653 goto nla_put_failure;
2a519311
JB		 4654
4655 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
4656 if (!bss)
4657 goto nla_put_failure;
9360ffd1
DM		 4658 if ((!is_zero_ether_addr(res->bssid) &&
4659 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)) ||
4660 (res->information_elements && res->len_information_elements &&
4661 nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
4662 res->len_information_elements,
4663 res->information_elements)) ||
4664 (res->beacon_ies && res->len_beacon_ies &&
4665 res->beacon_ies != res->information_elements &&
4666 nla_put(msg, NL80211_BSS_BEACON_IES,
4667 res->len_beacon_ies, res->beacon_ies)))
4668 goto nla_put_failure;
4669 if (res->tsf &&
4670 nla_put_u64(msg, NL80211_BSS_TSF, res->tsf))
4671 goto nla_put_failure;
4672 if (res->beacon_interval &&
4673 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
4674 goto nla_put_failure;
4675 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
4676 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
4677 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
4678 jiffies_to_msecs(jiffies - intbss->ts)))
4679 goto nla_put_failure;
2a519311 4680
77965c97 4681 switch (rdev->wiphy.signal_type) {
2a519311 4682 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 4683 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
4684 goto nla_put_failure;
2a519311
JB		 4685 break;
4686 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 4687 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
4688 goto nla_put_failure;
2a519311
JB		 4689 break;
4690 default:
4691 break;
4692 }
4693
48ab905d 4694 switch (wdev->iftype) {
074ac8df 4695 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 4696 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 4697 if (intbss == wdev->current_bss &&
4698 nla_put_u32(msg, NL80211_BSS_STATUS,
4699 NL80211_BSS_STATUS_ASSOCIATED))
4700 goto nla_put_failure;
48ab905d
JB		 4701 break;
4702 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 4703 if (intbss == wdev->current_bss &&
4704 nla_put_u32(msg, NL80211_BSS_STATUS,
4705 NL80211_BSS_STATUS_IBSS_JOINED))
4706 goto nla_put_failure;
48ab905d
JB		 4707 break;
4708 default:
4709 break;
4710 }
4711
2a519311
JB		 4712 nla_nest_end(msg, bss);
4713
4714 return genlmsg_end(msg, hdr);
4715
4716 nla_put_failure:
4717 genlmsg_cancel(msg, hdr);
4718 return -EMSGSIZE;
4719}
4720
4721static int nl80211_dump_scan(struct sk_buff *skb,
4722 struct netlink_callback *cb)
4723{
48ab905d
JB		 4724 struct cfg80211_registered_device *rdev;
4725 struct net_device *dev;
2a519311 4726 struct cfg80211_internal_bss *scan;
48ab905d 4727 struct wireless_dev *wdev;
2a519311
JB		 4728 int start = cb->args[1], idx = 0;
4729 int err;
4730
67748893
JB		 4731 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
4732 if (err)
4733 return err;
2a519311 4734
48ab905d 4735 wdev = dev->ieee80211_ptr;
2a519311 4736
48ab905d
JB		 4737 wdev_lock(wdev);
4738 spin_lock_bh(&rdev->bss_lock);
4739 cfg80211_bss_expire(rdev);
4740
9720bb3a
JB		 4741 cb->seq = rdev->bss_generation;
4742
48ab905d 4743 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 4744 if (++idx <= start)
4745 continue;
9720bb3a 4746 if (nl80211_send_bss(skb, cb,
2a519311 4747 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 4748 rdev, wdev, scan) < 0) {
2a519311 4749 idx--;
67748893 4750 break;
2a519311
JB		 4751 }
4752 }
4753
48ab905d
JB		 4754 spin_unlock_bh(&rdev->bss_lock);
4755 wdev_unlock(wdev);
2a519311
JB		 4756
4757 cb->args[1] = idx;
67748893 4758 nl80211_finish_netdev_dump(rdev);
2a519311 4759
67748893 4760 return skb->len;
2a519311
JB		 4761}
4762
15e47304 4763static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
61fa713c
HS		 4764 int flags, struct net_device *dev,
4765 struct survey_info *survey)
4766{
4767 void *hdr;
4768 struct nlattr *infoattr;
4769
15e47304 4770 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 4771 NL80211_CMD_NEW_SURVEY_RESULTS);
4772 if (!hdr)
4773 return -ENOMEM;
4774
9360ffd1
DM		 4775 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
4776 goto nla_put_failure;
61fa713c
HS		 4777
4778 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
4779 if (!infoattr)
4780 goto nla_put_failure;
4781
9360ffd1
DM		 4782 if (nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
4783 survey->channel->center_freq))
4784 goto nla_put_failure;
4785
4786 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
4787 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
4788 goto nla_put_failure;
4789 if ((survey->filled & SURVEY_INFO_IN_USE) &&
4790 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
4791 goto nla_put_failure;
4792 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME) &&
4793 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
4794 survey->channel_time))
4795 goto nla_put_failure;
4796 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY) &&
4797 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
4798 survey->channel_time_busy))
4799 goto nla_put_failure;
4800 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY) &&
4801 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
4802 survey->channel_time_ext_busy))
4803 goto nla_put_failure;
4804 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_RX) &&
4805 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
4806 survey->channel_time_rx))
4807 goto nla_put_failure;
4808 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_TX) &&
4809 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
4810 survey->channel_time_tx))
4811 goto nla_put_failure;
61fa713c
HS		 4812
4813 nla_nest_end(msg, infoattr);
4814
4815 return genlmsg_end(msg, hdr);
4816
4817 nla_put_failure:
4818 genlmsg_cancel(msg, hdr);
4819 return -EMSGSIZE;
4820}
4821
4822static int nl80211_dump_survey(struct sk_buff *skb,
4823 struct netlink_callback *cb)
4824{
4825 struct survey_info survey;
4826 struct cfg80211_registered_device *dev;
4827 struct net_device *netdev;
61fa713c
HS		 4828 int survey_idx = cb->args[1];
4829 int res;
4830
67748893
JB		 4831 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
4832 if (res)
4833 return res;
61fa713c
HS		 4834
4835 if (!dev->ops->dump_survey) {
4836 res = -EOPNOTSUPP;
4837 goto out_err;
4838 }
4839
4840 while (1) {
180cdc79
LR		 4841 struct ieee80211_channel *chan;
4842
61fa713c
HS		 4843 res = dev->ops->dump_survey(&dev->wiphy, netdev, survey_idx,
4844 &survey);
4845 if (res == -ENOENT)
4846 break;
4847 if (res)
4848 goto out_err;
4849
180cdc79
LR		 4850 /* Survey without a channel doesn't make sense */
4851 if (!survey.channel) {
4852 res = -EINVAL;
4853 goto out;
4854 }
4855
4856 chan = ieee80211_get_channel(&dev->wiphy,
4857 survey.channel->center_freq);
4858 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
4859 survey_idx++;
4860 continue;
4861 }
4862
61fa713c 4863 if (nl80211_send_survey(skb,
15e47304 4864 NETLINK_CB(cb->skb).portid,
61fa713c
HS		 4865 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4866 netdev,
4867 &survey) < 0)
4868 goto out;
4869 survey_idx++;
4870 }
4871
4872 out:
4873 cb->args[1] = survey_idx;
4874 res = skb->len;
4875 out_err:
67748893 4876 nl80211_finish_netdev_dump(dev);
61fa713c
HS		 4877 return res;
4878}
4879
b23aa676
SO		 4880static bool nl80211_valid_wpa_versions(u32 wpa_versions)
4881{
4882 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
4883 NL80211_WPA_VERSION_2));
4884}
4885
636a5d36
JM		 4886static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
4887{
4c476991
JB		 4888 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4889 struct net_device *dev = info->user_ptr[1];
19957bb3 4890 struct ieee80211_channel *chan;
e39e5b5e
JM		 4891 const u8 *bssid, *ssid, *ie = NULL, *sae_data = NULL;
4892 int err, ssid_len, ie_len = 0, sae_data_len = 0;
19957bb3 4893 enum nl80211_auth_type auth_type;
fffd0934 4894 struct key_parse key;
d5cdfacb 4895 bool local_state_change;
636a5d36 4896
f4a11bb0
JB		 4897 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4898 return -EINVAL;
4899
4900 if (!info->attrs[NL80211_ATTR_MAC])
4901 return -EINVAL;
4902
1778092e
JM		 4903 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
4904 return -EINVAL;
4905
19957bb3
JB		 4906 if (!info->attrs[NL80211_ATTR_SSID])
4907 return -EINVAL;
4908
4909 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
4910 return -EINVAL;
4911
fffd0934
JB		 4912 err = nl80211_parse_key(info, &key);
4913 if (err)
4914 return err;
4915
4916 if (key.idx >= 0) {
e31b8213
JB		 4917 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
4918 return -EINVAL;
fffd0934
JB		 4919 if (!key.p.key || !key.p.key_len)
4920 return -EINVAL;
4921 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
4922 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
4923 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
4924 key.p.key_len != WLAN_KEY_LEN_WEP104))
4925 return -EINVAL;
4926 if (key.idx > 4)
4927 return -EINVAL;
4928 } else {
4929 key.p.key_len = 0;
4930 key.p.key = NULL;
4931 }
4932
afea0b7a
JB		 4933 if (key.idx >= 0) {
4934 int i;
4935 bool ok = false;
4936 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
4937 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
4938 ok = true;
4939 break;
4940 }
4941 }
4c476991
JB		 4942 if (!ok)
4943 return -EINVAL;
afea0b7a
JB		 4944 }
4945
4c476991
JB		 4946 if (!rdev->ops->auth)
4947 return -EOPNOTSUPP;
636a5d36 4948
074ac8df 4949 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4950 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4951 return -EOPNOTSUPP;
eec60b03 4952
19957bb3 4953 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 4954 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3 4955 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4956 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4957 return -EINVAL;
636a5d36 4958
19957bb3
JB		 4959 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4960 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4961
4962 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4963 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4964 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4965 }
4966
19957bb3 4967 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 4968 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 4969 return -EINVAL;
636a5d36 4970
e39e5b5e
JM		 4971 if (auth_type == NL80211_AUTHTYPE_SAE &&
4972 !info->attrs[NL80211_ATTR_SAE_DATA])
4973 return -EINVAL;
4974
4975 if (info->attrs[NL80211_ATTR_SAE_DATA]) {
4976 if (auth_type != NL80211_AUTHTYPE_SAE)
4977 return -EINVAL;
4978 sae_data = nla_data(info->attrs[NL80211_ATTR_SAE_DATA]);
4979 sae_data_len = nla_len(info->attrs[NL80211_ATTR_SAE_DATA]);
4980 /* need to include at least Auth Transaction and Status Code */
4981 if (sae_data_len < 4)
4982 return -EINVAL;
4983 }
4984
d5cdfacb
JM		 4985 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4986
95de817b
JB		 4987 /*
4988 * Since we no longer track auth state, ignore
4989 * requests to only change local state.
4990 */
4991 if (local_state_change)
4992 return 0;
4993
4c476991
JB		 4994 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
4995 ssid, ssid_len, ie, ie_len,
e39e5b5e
JM		 4996 key.p.key, key.p.key_len, key.idx,
4997 sae_data, sae_data_len);
636a5d36
JM		 4998}
4999
c0692b8f
JB		 5000static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
5001 struct genl_info *info,
3dc27d25
JB		 5002 struct cfg80211_crypto_settings *settings,
5003 int cipher_limit)
b23aa676 5004{
c0b2bbd8
JB		 5005 memset(settings, 0, sizeof(*settings));
5006
b23aa676
SO		 5007 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
5008
c0692b8f
JB		 5009 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
5010 u16 proto;
5011 proto = nla_get_u16(
5012 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
5013 settings->control_port_ethertype = cpu_to_be16(proto);
5014 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
5015 proto != ETH_P_PAE)
5016 return -EINVAL;
5017 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
5018 settings->control_port_no_encrypt = true;
5019 } else
5020 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
5021
b23aa676
SO		 5022 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
5023 void *data;
5024 int len, i;
5025
5026 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
5027 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
5028 settings->n_ciphers_pairwise = len / sizeof(u32);
5029
5030 if (len % sizeof(u32))
5031 return -EINVAL;
5032
3dc27d25 5033 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 5034 return -EINVAL;
5035
5036 memcpy(settings->ciphers_pairwise, data, len);
5037
5038 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 5039 if (!cfg80211_supported_cipher_suite(
5040 &rdev->wiphy,
b23aa676
SO		 5041 settings->ciphers_pairwise[i]))
5042 return -EINVAL;
5043 }
5044
5045 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
5046 settings->cipher_group =
5047 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 5048 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
5049 settings->cipher_group))
b23aa676
SO		 5050 return -EINVAL;
5051 }
5052
5053 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
5054 settings->wpa_versions =
5055 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
5056 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
5057 return -EINVAL;
5058 }
5059
5060 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
5061 void *data;
6d30240e 5062 int len;
b23aa676
SO		 5063
5064 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
5065 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
5066 settings->n_akm_suites = len / sizeof(u32);
5067
5068 if (len % sizeof(u32))
5069 return -EINVAL;
5070
1b9ca027
JM		 5071 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
5072 return -EINVAL;
5073
b23aa676 5074 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 5075 }
5076
5077 return 0;
5078}
5079
636a5d36
JM		 5080static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
5081{
4c476991
JB		 5082 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5083 struct net_device *dev = info->user_ptr[1];
19957bb3 5084 struct cfg80211_crypto_settings crypto;
f444de05 5085 struct ieee80211_channel *chan;
3e5d7649 5086 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 5087 int err, ssid_len, ie_len = 0;
5088 bool use_mfp = false;
7e7c8926
BG		 5089 u32 flags = 0;
5090 struct ieee80211_ht_cap *ht_capa = NULL;
5091 struct ieee80211_ht_cap *ht_capa_mask = NULL;
636a5d36 5092
f4a11bb0
JB		 5093 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5094 return -EINVAL;
5095
5096 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 5097 !info->attrs[NL80211_ATTR_SSID] ||
5098 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 5099 return -EINVAL;
5100
4c476991
JB		 5101 if (!rdev->ops->assoc)
5102 return -EOPNOTSUPP;
636a5d36 5103
074ac8df 5104 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5105 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5106 return -EOPNOTSUPP;
eec60b03 5107
19957bb3 5108 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5109
19957bb3
JB		 5110 chan = ieee80211_get_channel(&rdev->wiphy,
5111 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 5112 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
5113 return -EINVAL;
636a5d36 5114
19957bb3
JB		 5115 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5116 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 5117
5118 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5119 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5120 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5121 }
5122
dc6382ce 5123 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 5124 enum nl80211_mfp mfp =
dc6382ce 5125 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 5126 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 5127 use_mfp = true;
4c476991
JB		 5128 else if (mfp != NL80211_MFP_NO)
5129 return -EINVAL;
dc6382ce
JM		 5130 }
5131
3e5d7649
JB		 5132 if (info->attrs[NL80211_ATTR_PREV_BSSID])
5133 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
5134
7e7c8926
BG		 5135 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5136 flags |= ASSOC_REQ_DISABLE_HT;
5137
5138 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5139 ht_capa_mask =
5140 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]);
5141
5142 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
5143 if (!ht_capa_mask)
5144 return -EINVAL;
5145 ht_capa = nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5146 }
5147
c0692b8f 5148 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
b23aa676 5149 if (!err)
3e5d7649
JB		 5150 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
5151 ssid, ssid_len, ie, ie_len, use_mfp,
7e7c8926
BG		 5152 &crypto, flags, ht_capa,
5153 ht_capa_mask);
636a5d36 5154
636a5d36
JM		 5155 return err;
5156}
5157
5158static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
5159{
4c476991
JB		 5160 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5161 struct net_device *dev = info->user_ptr[1];
19957bb3 5162 const u8 *ie = NULL, *bssid;
4c476991 5163 int ie_len = 0;
19957bb3 5164 u16 reason_code;
d5cdfacb 5165 bool local_state_change;
636a5d36 5166
f4a11bb0
JB		 5167 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5168 return -EINVAL;
5169
5170 if (!info->attrs[NL80211_ATTR_MAC])
5171 return -EINVAL;
5172
5173 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5174 return -EINVAL;
5175
4c476991
JB		 5176 if (!rdev->ops->deauth)
5177 return -EOPNOTSUPP;
636a5d36 5178
074ac8df 5179 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5180 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5181 return -EOPNOTSUPP;
eec60b03 5182
19957bb3 5183 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5184
19957bb3
JB		 5185 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5186 if (reason_code == 0) {
f4a11bb0 5187 /* Reason Code 0 is reserved */
4c476991 5188 return -EINVAL;
255e737e 5189 }
636a5d36
JM		 5190
5191 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5192 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5193 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5194 }
5195
d5cdfacb
JM		 5196 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5197
4c476991
JB		 5198 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
5199 local_state_change);
636a5d36
JM		 5200}
5201
5202static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
5203{
4c476991
JB		 5204 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5205 struct net_device *dev = info->user_ptr[1];
19957bb3 5206 const u8 *ie = NULL, *bssid;
4c476991 5207 int ie_len = 0;
19957bb3 5208 u16 reason_code;
d5cdfacb 5209 bool local_state_change;
636a5d36 5210
f4a11bb0
JB		 5211 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5212 return -EINVAL;
5213
5214 if (!info->attrs[NL80211_ATTR_MAC])
5215 return -EINVAL;
5216
5217 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5218 return -EINVAL;
5219
4c476991
JB		 5220 if (!rdev->ops->disassoc)
5221 return -EOPNOTSUPP;
636a5d36 5222
074ac8df 5223 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5224 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5225 return -EOPNOTSUPP;
eec60b03 5226
19957bb3 5227 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5228
19957bb3
JB		 5229 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5230 if (reason_code == 0) {
f4a11bb0 5231 /* Reason Code 0 is reserved */
4c476991 5232 return -EINVAL;
255e737e 5233 }
636a5d36
JM		 5234
5235 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5236 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5237 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5238 }
5239
d5cdfacb
JM		 5240 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5241
4c476991
JB		 5242 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
5243 local_state_change);
636a5d36
JM		 5244}
5245
dd5b4cc7
FF		 5246static bool
5247nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
5248 int mcast_rate[IEEE80211_NUM_BANDS],
5249 int rateval)
5250{
5251 struct wiphy *wiphy = &rdev->wiphy;
5252 bool found = false;
5253 int band, i;
5254
5255 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
5256 struct ieee80211_supported_band *sband;
5257
5258 sband = wiphy->bands[band];
5259 if (!sband)
5260 continue;
5261
5262 for (i = 0; i < sband->n_bitrates; i++) {
5263 if (sband->bitrates[i].bitrate == rateval) {
5264 mcast_rate[band] = i + 1;
5265 found = true;
5266 break;
5267 }
5268 }
5269 }
5270
5271 return found;
5272}
5273
04a773ad
JB		 5274static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
5275{
4c476991
JB		 5276 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5277 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 5278 struct cfg80211_ibss_params ibss;
5279 struct wiphy *wiphy;
fffd0934 5280 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 5281 int err;
5282
8e30bc55
JB		 5283 memset(&ibss, 0, sizeof(ibss));
5284
04a773ad
JB		 5285 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5286 return -EINVAL;
5287
5288 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
5289 !info->attrs[NL80211_ATTR_SSID] ||
5290 !nla_len(info->attrs[NL80211_ATTR_SSID]))
5291 return -EINVAL;
5292
8e30bc55
JB		 5293 ibss.beacon_interval = 100;
5294
5295 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
5296 ibss.beacon_interval =
5297 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
5298 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
5299 return -EINVAL;
5300 }
5301
4c476991
JB		 5302 if (!rdev->ops->join_ibss)
5303 return -EOPNOTSUPP;
04a773ad 5304
4c476991
JB		 5305 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5306 return -EOPNOTSUPP;
04a773ad 5307
79c97e97 5308 wiphy = &rdev->wiphy;
04a773ad 5309
39193498 5310 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 5311 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 5312
5313 if (!is_valid_ether_addr(ibss.bssid))
5314 return -EINVAL;
5315 }
04a773ad
JB		 5316 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5317 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5318
5319 if (info->attrs[NL80211_ATTR_IE]) {
5320 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5321 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5322 }
5323
54858ee5
AS		 5324 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
5325 enum nl80211_channel_type channel_type;
5326
cd6c6598 5327 if (!nl80211_valid_channel_type(info, &channel_type))
54858ee5
AS		 5328 return -EINVAL;
5329
5330 if (channel_type != NL80211_CHAN_NO_HT &&
5331 !(wiphy->features & NL80211_FEATURE_HT_IBSS))
5332 return -EINVAL;
5333
5334 ibss.channel_type = channel_type;
5335 } else {
5336 ibss.channel_type = NL80211_CHAN_NO_HT;
5337 }
5338
5339 ibss.channel = rdev_freq_to_chan(rdev,
5340 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
5341 ibss.channel_type);
04a773ad
JB		 5342 if (!ibss.channel ||
5343 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
4c476991
JB		 5344 ibss.channel->flags & IEEE80211_CHAN_DISABLED)
5345 return -EINVAL;
04a773ad 5346
54858ee5
AS		 5347 /* Both channels should be able to initiate communication */
5348 if ((ibss.channel_type == NL80211_CHAN_HT40PLUS ||
5349 ibss.channel_type == NL80211_CHAN_HT40MINUS) &&
5350 !cfg80211_can_beacon_sec_chan(&rdev->wiphy, ibss.channel,
5351 ibss.channel_type))
5352 return -EINVAL;
5353
04a773ad 5354 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 5355 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
5356
fbd2c8dc
TP		 5357 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
5358 u8 *rates =
5359 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5360 int n_rates =
5361 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5362 struct ieee80211_supported_band *sband =
5363 wiphy->bands[ibss.channel->band];
fbd2c8dc 5364
34850ab2
JB		 5365 err = ieee80211_get_ratemask(sband, rates, n_rates,
5366 &ibss.basic_rates);
5367 if (err)
5368 return err;
fbd2c8dc 5369 }
dd5b4cc7
FF		 5370
5371 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
5372 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
5373 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
5374 return -EINVAL;
fbd2c8dc 5375
4c476991
JB		 5376 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
5377 connkeys = nl80211_parse_connkeys(rdev,
5378 info->attrs[NL80211_ATTR_KEYS]);
5379 if (IS_ERR(connkeys))
5380 return PTR_ERR(connkeys);
5381 }
04a773ad 5382
267335d6
AQ		 5383 ibss.control_port =
5384 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
5385
4c476991 5386 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934
JB		 5387 if (err)
5388 kfree(connkeys);
04a773ad
JB		 5389 return err;
5390}
5391
5392static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
5393{
4c476991
JB		 5394 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5395 struct net_device *dev = info->user_ptr[1];
04a773ad 5396
4c476991
JB		 5397 if (!rdev->ops->leave_ibss)
5398 return -EOPNOTSUPP;
04a773ad 5399
4c476991
JB		 5400 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5401 return -EOPNOTSUPP;
04a773ad 5402
4c476991 5403 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 5404}
5405
aff89a9b
JB		 5406#ifdef CONFIG_NL80211_TESTMODE
5407static struct genl_multicast_group nl80211_testmode_mcgrp = {
5408 .name = "testmode",
5409};
5410
5411static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
5412{
4c476991 5413 struct cfg80211_registered_device *rdev = info->user_ptr[0];
aff89a9b
JB		 5414 int err;
5415
5416 if (!info->attrs[NL80211_ATTR_TESTDATA])
5417 return -EINVAL;
5418
aff89a9b
JB		 5419 err = -EOPNOTSUPP;
5420 if (rdev->ops->testmode_cmd) {
5421 rdev->testmode_info = info;
5422 err = rdev->ops->testmode_cmd(&rdev->wiphy,
5423 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
5424 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
5425 rdev->testmode_info = NULL;
5426 }
5427
aff89a9b
JB		 5428 return err;
5429}
5430
71063f0e
WYG		 5431static int nl80211_testmode_dump(struct sk_buff *skb,
5432 struct netlink_callback *cb)
5433{
00918d33 5434 struct cfg80211_registered_device *rdev;
71063f0e
WYG		 5435 int err;
5436 long phy_idx;
5437 void *data = NULL;
5438 int data_len = 0;
5439
5440 if (cb->args[0]) {
5441 /*
5442 * 0 is a valid index, but not valid for args[0],
5443 * so we need to offset by 1.
5444 */
5445 phy_idx = cb->args[0] - 1;
5446 } else {
5447 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
5448 nl80211_fam.attrbuf, nl80211_fam.maxattr,
5449 nl80211_policy);
5450 if (err)
5451 return err;
00918d33 5452
2bd7e35d
JB		 5453 mutex_lock(&cfg80211_mutex);
5454 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk),
5455 nl80211_fam.attrbuf);
5456 if (IS_ERR(rdev)) {
5457 mutex_unlock(&cfg80211_mutex);
5458 return PTR_ERR(rdev);
00918d33 5459 }
2bd7e35d
JB		 5460 phy_idx = rdev->wiphy_idx;
5461 rdev = NULL;
5462 mutex_unlock(&cfg80211_mutex);
5463
71063f0e
WYG		 5464 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
5465 cb->args[1] =
5466 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
5467 }
5468
5469 if (cb->args[1]) {
5470 data = nla_data((void *)cb->args[1]);
5471 data_len = nla_len((void *)cb->args[1]);
5472 }
5473
5474 mutex_lock(&cfg80211_mutex);
00918d33
JB		 5475 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
5476 if (!rdev) {
71063f0e
WYG		 5477 mutex_unlock(&cfg80211_mutex);
5478 return -ENOENT;
5479 }
00918d33 5480 cfg80211_lock_rdev(rdev);
71063f0e
WYG		 5481 mutex_unlock(&cfg80211_mutex);
5482
00918d33 5483 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 5484 err = -EOPNOTSUPP;
5485 goto out_err;
5486 }
5487
5488 while (1) {
15e47304 5489 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 5490 cb->nlh->nlmsg_seq, NLM_F_MULTI,
5491 NL80211_CMD_TESTMODE);
5492 struct nlattr *tmdata;
5493
9360ffd1 5494 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 5495 genlmsg_cancel(skb, hdr);
5496 break;
5497 }
5498
5499 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
5500 if (!tmdata) {
5501 genlmsg_cancel(skb, hdr);
5502 break;
5503 }
00918d33
JB		 5504 err = rdev->ops->testmode_dump(&rdev->wiphy, skb, cb,
5505 data, data_len);
71063f0e
WYG		 5506 nla_nest_end(skb, tmdata);
5507
5508 if (err == -ENOBUFS || err == -ENOENT) {
5509 genlmsg_cancel(skb, hdr);
5510 break;
5511 } else if (err) {
5512 genlmsg_cancel(skb, hdr);
5513 goto out_err;
5514 }
5515
5516 genlmsg_end(skb, hdr);
5517 }
5518
5519 err = skb->len;
5520 /* see above */
5521 cb->args[0] = phy_idx + 1;
5522 out_err:
00918d33 5523 cfg80211_unlock_rdev(rdev);
71063f0e
WYG		 5524 return err;
5525}
5526
aff89a9b
JB		 5527static struct sk_buff *
5528__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
15e47304 5529 int approxlen, u32 portid, u32 seq, gfp_t gfp)
aff89a9b
JB		 5530{
5531 struct sk_buff *skb;
5532 void *hdr;
5533 struct nlattr *data;
5534
5535 skb = nlmsg_new(approxlen + 100, gfp);
5536 if (!skb)
5537 return NULL;
5538
15e47304 5539 hdr = nl80211hdr_put(skb, portid, seq, 0, NL80211_CMD_TESTMODE);
aff89a9b
JB		 5540 if (!hdr) {
5541 kfree_skb(skb);
5542 return NULL;
5543 }
5544
9360ffd1
DM		 5545 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
5546 goto nla_put_failure;
aff89a9b
JB		 5547 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
5548
5549 ((void **)skb->cb)[0] = rdev;
5550 ((void **)skb->cb)[1] = hdr;
5551 ((void **)skb->cb)[2] = data;
5552
5553 return skb;
5554
5555 nla_put_failure:
5556 kfree_skb(skb);
5557 return NULL;
5558}
5559
5560struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
5561 int approxlen)
5562{
5563 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
5564
5565 if (WARN_ON(!rdev->testmode_info))
5566 return NULL;
5567
5568 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
15e47304 5569 rdev->testmode_info->snd_portid,
aff89a9b
JB		 5570 rdev->testmode_info->snd_seq,
5571 GFP_KERNEL);
5572}
5573EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
5574
5575int cfg80211_testmode_reply(struct sk_buff *skb)
5576{
5577 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
5578 void *hdr = ((void **)skb->cb)[1];
5579 struct nlattr *data = ((void **)skb->cb)[2];
5580
5581 if (WARN_ON(!rdev->testmode_info)) {
5582 kfree_skb(skb);
5583 return -EINVAL;
5584 }
5585
5586 nla_nest_end(skb, data);
5587 genlmsg_end(skb, hdr);
5588 return genlmsg_reply(skb, rdev->testmode_info);
5589}
5590EXPORT_SYMBOL(cfg80211_testmode_reply);
5591
5592struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
5593 int approxlen, gfp_t gfp)
5594{
5595 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
5596
5597 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
5598}
5599EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
5600
5601void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
5602{
5603 void *hdr = ((void **)skb->cb)[1];
5604 struct nlattr *data = ((void **)skb->cb)[2];
5605
5606 nla_nest_end(skb, data);
5607 genlmsg_end(skb, hdr);
5608 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
5609}
5610EXPORT_SYMBOL(cfg80211_testmode_event);
5611#endif
5612
b23aa676
SO		 5613static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
5614{
4c476991
JB		 5615 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5616 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 5617 struct cfg80211_connect_params connect;
5618 struct wiphy *wiphy;
fffd0934 5619 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 5620 int err;
5621
5622 memset(&connect, 0, sizeof(connect));
5623
5624 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5625 return -EINVAL;
5626
5627 if (!info->attrs[NL80211_ATTR_SSID] ||
5628 !nla_len(info->attrs[NL80211_ATTR_SSID]))
5629 return -EINVAL;
5630
5631 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
5632 connect.auth_type =
5633 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 5634 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
5635 NL80211_CMD_CONNECT))
b23aa676
SO		 5636 return -EINVAL;
5637 } else
5638 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
5639
5640 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
5641
c0692b8f 5642 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 5643 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 5644 if (err)
5645 return err;
b23aa676 5646
074ac8df 5647 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5648 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5649 return -EOPNOTSUPP;
b23aa676 5650
79c97e97 5651 wiphy = &rdev->wiphy;
b23aa676 5652
4486ea98
BS		 5653 connect.bg_scan_period = -1;
5654 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
5655 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
5656 connect.bg_scan_period =
5657 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
5658 }
5659
b23aa676
SO		 5660 if (info->attrs[NL80211_ATTR_MAC])
5661 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5662 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5663 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5664
5665 if (info->attrs[NL80211_ATTR_IE]) {
5666 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5667 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5668 }
5669
5670 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
5671 connect.channel =
5672 ieee80211_get_channel(wiphy,
5673 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
5674 if (!connect.channel ||
4c476991
JB		 5675 connect.channel->flags & IEEE80211_CHAN_DISABLED)
5676 return -EINVAL;
b23aa676
SO		 5677 }
5678
fffd0934
JB		 5679 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
5680 connkeys = nl80211_parse_connkeys(rdev,
5681 info->attrs[NL80211_ATTR_KEYS]);
4c476991
JB		 5682 if (IS_ERR(connkeys))
5683 return PTR_ERR(connkeys);
fffd0934
JB		 5684 }
5685
7e7c8926
BG		 5686 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5687 connect.flags |= ASSOC_REQ_DISABLE_HT;
5688
5689 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5690 memcpy(&connect.ht_capa_mask,
5691 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
5692 sizeof(connect.ht_capa_mask));
5693
5694 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e
WY		 5695 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
5696 kfree(connkeys);
7e7c8926 5697 return -EINVAL;
b4e4f47e 5698 }
7e7c8926
BG		 5699 memcpy(&connect.ht_capa,
5700 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
5701 sizeof(connect.ht_capa));
5702 }
5703
fffd0934 5704 err = cfg80211_connect(rdev, dev, &connect, connkeys);
fffd0934
JB		 5705 if (err)
5706 kfree(connkeys);
b23aa676
SO		 5707 return err;
5708}
5709
5710static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
5711{
4c476991
JB		 5712 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5713 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 5714 u16 reason;
5715
5716 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5717 reason = WLAN_REASON_DEAUTH_LEAVING;
5718 else
5719 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5720
5721 if (reason == 0)
5722 return -EINVAL;
5723
074ac8df 5724 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5725 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5726 return -EOPNOTSUPP;
b23aa676 5727
4c476991 5728 return cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 5729}
5730
463d0183
JB		 5731static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
5732{
4c476991 5733 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 5734 struct net *net;
5735 int err;
5736 u32 pid;
5737
5738 if (!info->attrs[NL80211_ATTR_PID])
5739 return -EINVAL;
5740
5741 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
5742
463d0183 5743 net = get_net_ns_by_pid(pid);
4c476991
JB		 5744 if (IS_ERR(net))
5745 return PTR_ERR(net);
463d0183
JB		 5746
5747 err = 0;
5748
5749 /* check if anything to do */
4c476991
JB		 5750 if (!net_eq(wiphy_net(&rdev->wiphy), net))
5751 err = cfg80211_switch_netns(rdev, net);
463d0183 5752
463d0183 5753 put_net(net);
463d0183
JB		 5754 return err;
5755}
5756
67fbb16b
SO		 5757static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
5758{
4c476991 5759 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 5760 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
5761 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 5762 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 5763 struct cfg80211_pmksa pmksa;
5764
5765 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
5766
5767 if (!info->attrs[NL80211_ATTR_MAC])
5768 return -EINVAL;
5769
5770 if (!info->attrs[NL80211_ATTR_PMKID])
5771 return -EINVAL;
5772
67fbb16b
SO		 5773 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
5774 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5775
074ac8df 5776 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5777 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5778 return -EOPNOTSUPP;
67fbb16b
SO		 5779
5780 switch (info->genlhdr->cmd) {
5781 case NL80211_CMD_SET_PMKSA:
5782 rdev_ops = rdev->ops->set_pmksa;
5783 break;
5784 case NL80211_CMD_DEL_PMKSA:
5785 rdev_ops = rdev->ops->del_pmksa;
5786 break;
5787 default:
5788 WARN_ON(1);
5789 break;
5790 }
5791
4c476991
JB		 5792 if (!rdev_ops)
5793 return -EOPNOTSUPP;
67fbb16b 5794
4c476991 5795 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 5796}
5797
5798static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
5799{
4c476991
JB		 5800 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5801 struct net_device *dev = info->user_ptr[1];
67fbb16b 5802
074ac8df 5803 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5804 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5805 return -EOPNOTSUPP;
67fbb16b 5806
4c476991
JB		 5807 if (!rdev->ops->flush_pmksa)
5808 return -EOPNOTSUPP;
67fbb16b 5809
4c476991 5810 return rdev->ops->flush_pmksa(&rdev->wiphy, dev);
67fbb16b
SO		 5811}
5812
109086ce
AN		 5813static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
5814{
5815 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5816 struct net_device *dev = info->user_ptr[1];
5817 u8 action_code, dialog_token;
5818 u16 status_code;
5819 u8 *peer;
5820
5821 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
5822 !rdev->ops->tdls_mgmt)
5823 return -EOPNOTSUPP;
5824
5825 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
5826 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
5827 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
5828 !info->attrs[NL80211_ATTR_IE] ||
5829 !info->attrs[NL80211_ATTR_MAC])
5830 return -EINVAL;
5831
5832 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
5833 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
5834 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
5835 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
5836
5837 return rdev->ops->tdls_mgmt(&rdev->wiphy, dev, peer, action_code,
5838 dialog_token, status_code,
5839 nla_data(info->attrs[NL80211_ATTR_IE]),
5840 nla_len(info->attrs[NL80211_ATTR_IE]));
5841}
5842
5843static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
5844{
5845 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5846 struct net_device *dev = info->user_ptr[1];
5847 enum nl80211_tdls_operation operation;
5848 u8 *peer;
5849
5850 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
5851 !rdev->ops->tdls_oper)
5852 return -EOPNOTSUPP;
5853
5854 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
5855 !info->attrs[NL80211_ATTR_MAC])
5856 return -EINVAL;
5857
5858 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
5859 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
5860
5861 return rdev->ops->tdls_oper(&rdev->wiphy, dev, peer, operation);
5862}
5863
9588bbd5
JM		 5864static int nl80211_remain_on_channel(struct sk_buff *skb,
5865 struct genl_info *info)
5866{
4c476991 5867 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 5868 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5
JM		 5869 struct ieee80211_channel *chan;
5870 struct sk_buff *msg;
5871 void *hdr;
5872 u64 cookie;
5873 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
5874 u32 freq, duration;
5875 int err;
5876
5877 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
5878 !info->attrs[NL80211_ATTR_DURATION])
5879 return -EINVAL;
5880
5881 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
5882
ebf348fc
JB		 5883 if (!rdev->ops->remain_on_channel ||
5884 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
5885 return -EOPNOTSUPP;
5886
9588bbd5 5887 /*
ebf348fc
JB		 5888 * We should be on that channel for at least a minimum amount of
5889 * time (10ms) but no longer than the driver supports.
9588bbd5 5890 */
ebf348fc 5891 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 5892 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 5893 return -EINVAL;
5894
cd6c6598
JB		 5895 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
5896 !nl80211_valid_channel_type(info, &channel_type))
5897 return -EINVAL;
9588bbd5
JM		 5898
5899 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5900 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5901 if (chan == NULL)
5902 return -EINVAL;
9588bbd5
JM		 5903
5904 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5905 if (!msg)
5906 return -ENOMEM;
9588bbd5 5907
15e47304 5908 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5
JM		 5909 NL80211_CMD_REMAIN_ON_CHANNEL);
5910
5911 if (IS_ERR(hdr)) {
5912 err = PTR_ERR(hdr);
5913 goto free_msg;
5914 }
5915
71bbc994 5916 err = rdev->ops->remain_on_channel(&rdev->wiphy, wdev, chan,
9588bbd5
JM		 5917 channel_type, duration, &cookie);
5918
5919 if (err)
5920 goto free_msg;
5921
9360ffd1
DM		 5922 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
5923 goto nla_put_failure;
9588bbd5
JM		 5924
5925 genlmsg_end(msg, hdr);
4c476991
JB		 5926
5927 return genlmsg_reply(msg, info);
9588bbd5
JM		 5928
5929 nla_put_failure:
5930 err = -ENOBUFS;
5931 free_msg:
5932 nlmsg_free(msg);
9588bbd5
JM		 5933 return err;
5934}
5935
5936static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
5937 struct genl_info *info)
5938{
4c476991 5939 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 5940 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 5941 u64 cookie;
9588bbd5
JM		 5942
5943 if (!info->attrs[NL80211_ATTR_COOKIE])
5944 return -EINVAL;
5945
4c476991
JB		 5946 if (!rdev->ops->cancel_remain_on_channel)
5947 return -EOPNOTSUPP;
9588bbd5 5948
9588bbd5
JM		 5949 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
5950
71bbc994 5951 return rdev->ops->cancel_remain_on_channel(&rdev->wiphy, wdev, cookie);
9588bbd5
JM		 5952}
5953
13ae75b1
JM		 5954static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
5955 u8 *rates, u8 rates_len)
5956{
5957 u8 i;
5958 u32 mask = 0;
5959
5960 for (i = 0; i < rates_len; i++) {
5961 int rate = (rates[i] & 0x7f) * 5;
5962 int ridx;
5963 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
5964 struct ieee80211_rate *srate =
5965 &sband->bitrates[ridx];
5966 if (rate == srate->bitrate) {
5967 mask |= 1 << ridx;
5968 break;
5969 }
5970 }
5971 if (ridx == sband->n_bitrates)
5972 return 0; /* rate not found */
5973 }
5974
5975 return mask;
5976}
5977
24db78c0
SW		 5978static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
5979 u8 *rates, u8 rates_len,
5980 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
5981{
5982 u8 i;
5983
5984 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
5985
5986 for (i = 0; i < rates_len; i++) {
5987 int ridx, rbit;
5988
5989 ridx = rates[i] / 8;
5990 rbit = BIT(rates[i] % 8);
5991
5992 /* check validity */
910570b5 5993 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
24db78c0
SW		 5994 return false;
5995
5996 /* check availability */
5997 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
5998 mcs[ridx] |= rbit;
5999 else
6000 return false;
6001 }
6002
6003 return true;
6004}
6005
b54452b0 6006static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
13ae75b1
JM		 6007 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
6008 .len = NL80211_MAX_SUPP_RATES },
24db78c0
SW		 6009 [NL80211_TXRATE_MCS] = { .type = NLA_BINARY,
6010 .len = NL80211_MAX_SUPP_HT_RATES },
13ae75b1
JM		 6011};
6012
6013static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
6014 struct genl_info *info)
6015{
6016 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4c476991 6017 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13ae75b1 6018 struct cfg80211_bitrate_mask mask;
4c476991
JB		 6019 int rem, i;
6020 struct net_device *dev = info->user_ptr[1];
13ae75b1
JM		 6021 struct nlattr *tx_rates;
6022 struct ieee80211_supported_band *sband;
6023
6024 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
6025 return -EINVAL;
6026
4c476991
JB		 6027 if (!rdev->ops->set_bitrate_mask)
6028 return -EOPNOTSUPP;
13ae75b1
JM		 6029
6030 memset(&mask, 0, sizeof(mask));
6031 /* Default to all rates enabled */
6032 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
6033 sband = rdev->wiphy.bands[i];
6034 mask.control[i].legacy =
6035 sband ? (1 << sband->n_bitrates) - 1 : 0;
24db78c0
SW		 6036 if (sband)
6037 memcpy(mask.control[i].mcs,
6038 sband->ht_cap.mcs.rx_mask,
6039 sizeof(mask.control[i].mcs));
6040 else
6041 memset(mask.control[i].mcs, 0,
6042 sizeof(mask.control[i].mcs));
13ae75b1
JM		 6043 }
6044
6045 /*
6046 * The nested attribute uses enum nl80211_band as the index. This maps
6047 * directly to the enum ieee80211_band values used in cfg80211.
6048 */
24db78c0 6049 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
13ae75b1
JM		 6050 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
6051 {
6052 enum ieee80211_band band = nla_type(tx_rates);
4c476991
JB		 6053 if (band < 0 || band >= IEEE80211_NUM_BANDS)
6054 return -EINVAL;
13ae75b1 6055 sband = rdev->wiphy.bands[band];
4c476991
JB		 6056 if (sband == NULL)
6057 return -EINVAL;
13ae75b1
JM		 6058 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
6059 nla_len(tx_rates), nl80211_txattr_policy);
6060 if (tb[NL80211_TXRATE_LEGACY]) {
6061 mask.control[band].legacy = rateset_to_mask(
6062 sband,
6063 nla_data(tb[NL80211_TXRATE_LEGACY]),
6064 nla_len(tb[NL80211_TXRATE_LEGACY]));
218d2e26
BS		 6065 if ((mask.control[band].legacy == 0) &&
6066 nla_len(tb[NL80211_TXRATE_LEGACY]))
6067 return -EINVAL;
24db78c0
SW		 6068 }
6069 if (tb[NL80211_TXRATE_MCS]) {
6070 if (!ht_rateset_to_mask(
6071 sband,
6072 nla_data(tb[NL80211_TXRATE_MCS]),
6073 nla_len(tb[NL80211_TXRATE_MCS]),
6074 mask.control[band].mcs))
6075 return -EINVAL;
6076 }
6077
6078 if (mask.control[band].legacy == 0) {
6079 /* don't allow empty legacy rates if HT
6080 * is not even supported. */
6081 if (!rdev->wiphy.bands[band]->ht_cap.ht_supported)
6082 return -EINVAL;
6083
6084 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
6085 if (mask.control[band].mcs[i])
6086 break;
6087
6088 /* legacy and mcs rates may not be both empty */
6089 if (i == IEEE80211_HT_MCS_MASK_LEN)
4c476991 6090 return -EINVAL;
13ae75b1
JM		 6091 }
6092 }
6093
4c476991 6094 return rdev->ops->set_bitrate_mask(&rdev->wiphy, dev, NULL, &mask);
13ae75b1
JM		 6095}
6096
2e161f78 6097static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 6098{
4c476991 6099 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6100 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 6101 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 6102
6103 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
6104 return -EINVAL;
6105
2e161f78
JB		 6106 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
6107 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 6108
71bbc994
JB		 6109 switch (wdev->iftype) {
6110 case NL80211_IFTYPE_STATION:
6111 case NL80211_IFTYPE_ADHOC:
6112 case NL80211_IFTYPE_P2P_CLIENT:
6113 case NL80211_IFTYPE_AP:
6114 case NL80211_IFTYPE_AP_VLAN:
6115 case NL80211_IFTYPE_MESH_POINT:
6116 case NL80211_IFTYPE_P2P_GO:
98104fde 6117 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 6118 break;
6119 default:
4c476991 6120 return -EOPNOTSUPP;
71bbc994 6121 }
026331c4
JM		 6122
6123 /* not much point in registering if we can't reply */
4c476991
JB		 6124 if (!rdev->ops->mgmt_tx)
6125 return -EOPNOTSUPP;
026331c4 6126
15e47304 6127 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
026331c4
JM		 6128 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
6129 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
026331c4
JM		 6130}
6131
2e161f78 6132static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 6133{
4c476991 6134 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6135 struct wireless_dev *wdev = info->user_ptr[1];
026331c4
JM		 6136 struct ieee80211_channel *chan;
6137 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
252aa631 6138 bool channel_type_valid = false;
026331c4
JM		 6139 u32 freq;
6140 int err;
d64d373f 6141 void *hdr = NULL;
026331c4 6142 u64 cookie;
e247bd90 6143 struct sk_buff *msg = NULL;
f7ca38df 6144 unsigned int wait = 0;
e247bd90
JB		 6145 bool offchan, no_cck, dont_wait_for_ack;
6146
6147 dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
026331c4
JM		 6148
6149 if (!info->attrs[NL80211_ATTR_FRAME] ||
6150 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
6151 return -EINVAL;
6152
4c476991
JB		 6153 if (!rdev->ops->mgmt_tx)
6154 return -EOPNOTSUPP;
026331c4 6155
71bbc994
JB		 6156 switch (wdev->iftype) {
6157 case NL80211_IFTYPE_STATION:
6158 case NL80211_IFTYPE_ADHOC:
6159 case NL80211_IFTYPE_P2P_CLIENT:
6160 case NL80211_IFTYPE_AP:
6161 case NL80211_IFTYPE_AP_VLAN:
6162 case NL80211_IFTYPE_MESH_POINT:
6163 case NL80211_IFTYPE_P2P_GO:
98104fde 6164 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 6165 break;
6166 default:
4c476991 6167 return -EOPNOTSUPP;
71bbc994 6168 }
026331c4 6169
f7ca38df 6170 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 6171 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df
JB		 6172 return -EINVAL;
6173 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 6174
6175 /*
6176 * We should wait on the channel for at least a minimum amount
6177 * of time (10ms) but no longer than the driver supports.
6178 */
6179 if (wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
6180 wait > rdev->wiphy.max_remain_on_channel_duration)
6181 return -EINVAL;
6182
f7ca38df
JB		 6183 }
6184
026331c4 6185 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
cd6c6598 6186 if (!nl80211_valid_channel_type(info, &channel_type))
4c476991 6187 return -EINVAL;
252aa631 6188 channel_type_valid = true;
026331c4
JM		 6189 }
6190
f7ca38df
JB		 6191 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
6192
7c4ef712
JB		 6193 if (offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
6194 return -EINVAL;
6195
e9f935e3
RM		 6196 no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
6197
026331c4
JM		 6198 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
6199 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 6200 if (chan == NULL)
6201 return -EINVAL;
026331c4 6202
e247bd90
JB		 6203 if (!dont_wait_for_ack) {
6204 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6205 if (!msg)
6206 return -ENOMEM;
026331c4 6207
15e47304 6208 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 6209 NL80211_CMD_FRAME);
026331c4 6210
e247bd90
JB		 6211 if (IS_ERR(hdr)) {
6212 err = PTR_ERR(hdr);
6213 goto free_msg;
6214 }
026331c4 6215 }
e247bd90 6216
71bbc994 6217 err = cfg80211_mlme_mgmt_tx(rdev, wdev, chan, offchan, channel_type,
f7ca38df 6218 channel_type_valid, wait,
2e161f78
JB		 6219 nla_data(info->attrs[NL80211_ATTR_FRAME]),
6220 nla_len(info->attrs[NL80211_ATTR_FRAME]),
e247bd90 6221 no_cck, dont_wait_for_ack, &cookie);
026331c4
JM		 6222 if (err)
6223 goto free_msg;
6224
e247bd90 6225 if (msg) {
9360ffd1
DM		 6226 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6227 goto nla_put_failure;
026331c4 6228
e247bd90
JB		 6229 genlmsg_end(msg, hdr);
6230 return genlmsg_reply(msg, info);
6231 }
6232
6233 return 0;
026331c4
JM		 6234
6235 nla_put_failure:
6236 err = -ENOBUFS;
6237 free_msg:
6238 nlmsg_free(msg);
026331c4
JM		 6239 return err;
6240}
6241
f7ca38df
JB		 6242static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
6243{
6244 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6245 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 6246 u64 cookie;
6247
6248 if (!info->attrs[NL80211_ATTR_COOKIE])
6249 return -EINVAL;
6250
6251 if (!rdev->ops->mgmt_tx_cancel_wait)
6252 return -EOPNOTSUPP;
6253
71bbc994
JB		 6254 switch (wdev->iftype) {
6255 case NL80211_IFTYPE_STATION:
6256 case NL80211_IFTYPE_ADHOC:
6257 case NL80211_IFTYPE_P2P_CLIENT:
6258 case NL80211_IFTYPE_AP:
6259 case NL80211_IFTYPE_AP_VLAN:
6260 case NL80211_IFTYPE_P2P_GO:
98104fde 6261 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 6262 break;
6263 default:
f7ca38df 6264 return -EOPNOTSUPP;
71bbc994 6265 }
f7ca38df
JB		 6266
6267 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
6268
71bbc994 6269 return rdev->ops->mgmt_tx_cancel_wait(&rdev->wiphy, wdev, cookie);
f7ca38df
JB		 6270}
6271
ffb9eb3d
KV		 6272static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
6273{
4c476991 6274 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 6275 struct wireless_dev *wdev;
4c476991 6276 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 6277 u8 ps_state;
6278 bool state;
6279 int err;
6280
4c476991
JB		 6281 if (!info->attrs[NL80211_ATTR_PS_STATE])
6282 return -EINVAL;
ffb9eb3d
KV		 6283
6284 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
6285
4c476991
JB		 6286 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
6287 return -EINVAL;
ffb9eb3d
KV		 6288
6289 wdev = dev->ieee80211_ptr;
6290
4c476991
JB		 6291 if (!rdev->ops->set_power_mgmt)
6292 return -EOPNOTSUPP;
ffb9eb3d
KV		 6293
6294 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
6295
6296 if (state == wdev->ps)
4c476991 6297 return 0;
ffb9eb3d 6298
4c476991
JB		 6299 err = rdev->ops->set_power_mgmt(wdev->wiphy, dev, state,
6300 wdev->ps_timeout);
6301 if (!err)
6302 wdev->ps = state;
ffb9eb3d
KV		 6303 return err;
6304}
6305
6306static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
6307{
4c476991 6308 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 6309 enum nl80211_ps_state ps_state;
6310 struct wireless_dev *wdev;
4c476991 6311 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 6312 struct sk_buff *msg;
6313 void *hdr;
6314 int err;
6315
ffb9eb3d
KV		 6316 wdev = dev->ieee80211_ptr;
6317
4c476991
JB		 6318 if (!rdev->ops->set_power_mgmt)
6319 return -EOPNOTSUPP;
ffb9eb3d
KV		 6320
6321 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 6322 if (!msg)
6323 return -ENOMEM;
ffb9eb3d 6324
15e47304 6325 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 6326 NL80211_CMD_GET_POWER_SAVE);
6327 if (!hdr) {
4c476991 6328 err = -ENOBUFS;
ffb9eb3d
KV		 6329 goto free_msg;
6330 }
6331
6332 if (wdev->ps)
6333 ps_state = NL80211_PS_ENABLED;
6334 else
6335 ps_state = NL80211_PS_DISABLED;
6336
9360ffd1
DM		 6337 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
6338 goto nla_put_failure;
ffb9eb3d
KV		 6339
6340 genlmsg_end(msg, hdr);
4c476991 6341 return genlmsg_reply(msg, info);
ffb9eb3d 6342
4c476991 6343 nla_put_failure:
ffb9eb3d 6344 err = -ENOBUFS;
4c476991 6345 free_msg:
ffb9eb3d 6346 nlmsg_free(msg);
ffb9eb3d
KV		 6347 return err;
6348}
6349
d6dc1a38
JO		 6350static struct nla_policy
6351nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
6352 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
6353 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
6354 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 6355 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
6356 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
6357 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
d6dc1a38
JO		 6358};
6359
84f10708
TP		 6360static int nl80211_set_cqm_txe(struct genl_info *info,
6361 u32 rate, u32 pkts, u32 intvl)
6362{
6363 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6364 struct wireless_dev *wdev;
6365 struct net_device *dev = info->user_ptr[1];
6366
6367 if ((rate < 0 || rate > 100) ||
6368 (intvl < 0 || intvl > NL80211_CQM_TXE_MAX_INTVL))
6369 return -EINVAL;
6370
6371 wdev = dev->ieee80211_ptr;
6372
6373 if (!rdev->ops->set_cqm_txe_config)
6374 return -EOPNOTSUPP;
6375
6376 if (wdev->iftype != NL80211_IFTYPE_STATION &&
6377 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
6378 return -EOPNOTSUPP;
6379
6380 return rdev->ops->set_cqm_txe_config(wdev->wiphy, dev,
6381 rate, pkts, intvl);
6382}
6383
d6dc1a38
JO		 6384static int nl80211_set_cqm_rssi(struct genl_info *info,
6385 s32 threshold, u32 hysteresis)
6386{
4c476991 6387 struct cfg80211_registered_device *rdev = info->user_ptr[0];
d6dc1a38 6388 struct wireless_dev *wdev;
4c476991 6389 struct net_device *dev = info->user_ptr[1];
d6dc1a38
JO		 6390
6391 if (threshold > 0)
6392 return -EINVAL;
6393
d6dc1a38
JO		 6394 wdev = dev->ieee80211_ptr;
6395
4c476991
JB		 6396 if (!rdev->ops->set_cqm_rssi_config)
6397 return -EOPNOTSUPP;
d6dc1a38 6398
074ac8df 6399 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6400 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
6401 return -EOPNOTSUPP;
d6dc1a38 6402
4c476991
JB		 6403 return rdev->ops->set_cqm_rssi_config(wdev->wiphy, dev,
6404 threshold, hysteresis);
d6dc1a38
JO		 6405}
6406
6407static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
6408{
6409 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
6410 struct nlattr *cqm;
6411 int err;
6412
6413 cqm = info->attrs[NL80211_ATTR_CQM];
6414 if (!cqm) {
6415 err = -EINVAL;
6416 goto out;
6417 }
6418
6419 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
6420 nl80211_attr_cqm_policy);
6421 if (err)
6422 goto out;
6423
6424 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
6425 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
6426 s32 threshold;
6427 u32 hysteresis;
6428 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
6429 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
6430 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
84f10708
TP		 6431 } else if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
6432 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
6433 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
6434 u32 rate, pkts, intvl;
6435 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
6436 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
6437 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
6438 err = nl80211_set_cqm_txe(info, rate, pkts, intvl);
d6dc1a38
JO		 6439 } else
6440 err = -EINVAL;
6441
6442out:
6443 return err;
6444}
6445
29cbe68c
JB		 6446static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
6447{
6448 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6449 struct net_device *dev = info->user_ptr[1];
6450 struct mesh_config cfg;
c80d545d 6451 struct mesh_setup setup;
29cbe68c
JB		 6452 int err;
6453
6454 /* start with default */
6455 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 6456 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 6457
24bdd9f4 6458 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 6459 /* and parse parameters if given */
24bdd9f4 6460 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 6461 if (err)
6462 return err;
6463 }
6464
6465 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
6466 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
6467 return -EINVAL;
6468
c80d545d
JC		 6469 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
6470 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
6471
4bb62344
CYY		 6472 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
6473 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
6474 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
6475 return -EINVAL;
6476
c80d545d
JC		 6477 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
6478 /* parse additional setup parameters if given */
6479 err = nl80211_parse_mesh_setup(info, &setup);
6480 if (err)
6481 return err;
6482 }
6483
cc1d2806
JB		 6484 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
6485 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
6486
6487 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
6488 !nl80211_valid_channel_type(info, &channel_type))
6489 return -EINVAL;
6490
6491 setup.channel = rdev_freq_to_chan(rdev,
6492 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
6493 channel_type);
6494 if (!setup.channel)
6495 return -EINVAL;
6496 setup.channel_type = channel_type;
6497 } else {
6498 /* cfg80211_join_mesh() will sort it out */
6499 setup.channel = NULL;
6500 }
6501
c80d545d 6502 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
29cbe68c
JB		 6503}
6504
6505static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
6506{
6507 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6508 struct net_device *dev = info->user_ptr[1];
6509
6510 return cfg80211_leave_mesh(rdev, dev);
6511}
6512
dfb89c56 6513#ifdef CONFIG_PM
ff1b6e69
JB		 6514static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
6515{
6516 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6517 struct sk_buff *msg;
6518 void *hdr;
6519
6520 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
6521 return -EOPNOTSUPP;
6522
6523 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6524 if (!msg)
6525 return -ENOMEM;
6526
15e47304 6527 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 6528 NL80211_CMD_GET_WOWLAN);
6529 if (!hdr)
6530 goto nla_put_failure;
6531
6532 if (rdev->wowlan) {
6533 struct nlattr *nl_wowlan;
6534
6535 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
6536 if (!nl_wowlan)
6537 goto nla_put_failure;
6538
9360ffd1
DM		 6539 if ((rdev->wowlan->any &&
6540 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6541 (rdev->wowlan->disconnect &&
6542 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6543 (rdev->wowlan->magic_pkt &&
6544 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6545 (rdev->wowlan->gtk_rekey_failure &&
6546 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6547 (rdev->wowlan->eap_identity_req &&
6548 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6549 (rdev->wowlan->four_way_handshake &&
6550 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6551 (rdev->wowlan->rfkill_release &&
6552 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
6553 goto nla_put_failure;
ff1b6e69
JB		 6554 if (rdev->wowlan->n_patterns) {
6555 struct nlattr *nl_pats, *nl_pat;
6556 int i, pat_len;
6557
6558 nl_pats = nla_nest_start(msg,
6559 NL80211_WOWLAN_TRIG_PKT_PATTERN);
6560 if (!nl_pats)
6561 goto nla_put_failure;
6562
6563 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
6564 nl_pat = nla_nest_start(msg, i + 1);
6565 if (!nl_pat)
6566 goto nla_put_failure;
6567 pat_len = rdev->wowlan->patterns[i].pattern_len;
9360ffd1
DM		 6568 if (nla_put(msg, NL80211_WOWLAN_PKTPAT_MASK,
6569 DIV_ROUND_UP(pat_len, 8),
6570 rdev->wowlan->patterns[i].mask) ||
6571 nla_put(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
6572 pat_len,
6573 rdev->wowlan->patterns[i].pattern))
6574 goto nla_put_failure;
ff1b6e69
JB		 6575 nla_nest_end(msg, nl_pat);
6576 }
6577 nla_nest_end(msg, nl_pats);
6578 }
6579
6580 nla_nest_end(msg, nl_wowlan);
6581 }
6582
6583 genlmsg_end(msg, hdr);
6584 return genlmsg_reply(msg, info);
6585
6586nla_put_failure:
6587 nlmsg_free(msg);
6588 return -ENOBUFS;
6589}
6590
6591static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
6592{
6593 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6594 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 6595 struct cfg80211_wowlan new_triggers = {};
ae33bd81 6596 struct cfg80211_wowlan *ntrig;
ff1b6e69
JB		 6597 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
6598 int err, i;
6d52563f 6599 bool prev_enabled = rdev->wowlan;
ff1b6e69
JB		 6600
6601 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
6602 return -EOPNOTSUPP;
6603
ae33bd81
JB		 6604 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
6605 cfg80211_rdev_free_wowlan(rdev);
6606 rdev->wowlan = NULL;
6607 goto set_wakeup;
6608 }
ff1b6e69
JB		 6609
6610 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
6611 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
6612 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
6613 nl80211_wowlan_policy);
6614 if (err)
6615 return err;
6616
6617 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
6618 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
6619 return -EINVAL;
6620 new_triggers.any = true;
6621 }
6622
6623 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
6624 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
6625 return -EINVAL;
6626 new_triggers.disconnect = true;
6627 }
6628
6629 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
6630 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
6631 return -EINVAL;
6632 new_triggers.magic_pkt = true;
6633 }
6634
77dbbb13
JB		 6635 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
6636 return -EINVAL;
6637
6638 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
6639 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
6640 return -EINVAL;
6641 new_triggers.gtk_rekey_failure = true;
6642 }
6643
6644 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
6645 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
6646 return -EINVAL;
6647 new_triggers.eap_identity_req = true;
6648 }
6649
6650 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
6651 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
6652 return -EINVAL;
6653 new_triggers.four_way_handshake = true;
6654 }
6655
6656 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
6657 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
6658 return -EINVAL;
6659 new_triggers.rfkill_release = true;
6660 }
6661
ff1b6e69
JB		 6662 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
6663 struct nlattr *pat;
6664 int n_patterns = 0;
6665 int rem, pat_len, mask_len;
6666 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
6667
6668 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
6669 rem)
6670 n_patterns++;
6671 if (n_patterns > wowlan->n_patterns)
6672 return -EINVAL;
6673
6674 new_triggers.patterns = kcalloc(n_patterns,
6675 sizeof(new_triggers.patterns[0]),
6676 GFP_KERNEL);
6677 if (!new_triggers.patterns)
6678 return -ENOMEM;
6679
6680 new_triggers.n_patterns = n_patterns;
6681 i = 0;
6682
6683 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
6684 rem) {
6685 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
6686 nla_data(pat), nla_len(pat), NULL);
6687 err = -EINVAL;
6688 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
6689 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
6690 goto error;
6691 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
6692 mask_len = DIV_ROUND_UP(pat_len, 8);
6693 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
6694 mask_len)
6695 goto error;
6696 if (pat_len > wowlan->pattern_max_len ||
6697 pat_len < wowlan->pattern_min_len)
6698 goto error;
6699
6700 new_triggers.patterns[i].mask =
6701 kmalloc(mask_len + pat_len, GFP_KERNEL);
6702 if (!new_triggers.patterns[i].mask) {
6703 err = -ENOMEM;
6704 goto error;
6705 }
6706 new_triggers.patterns[i].pattern =
6707 new_triggers.patterns[i].mask + mask_len;
6708 memcpy(new_triggers.patterns[i].mask,
6709 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
6710 mask_len);
6711 new_triggers.patterns[i].pattern_len = pat_len;
6712 memcpy(new_triggers.patterns[i].pattern,
6713 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
6714 pat_len);
6715 i++;
6716 }
6717 }
6718
ae33bd81
JB		 6719 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
6720 if (!ntrig) {
6721 err = -ENOMEM;
6722 goto error;
ff1b6e69 6723 }
ae33bd81
JB		 6724 cfg80211_rdev_free_wowlan(rdev);
6725 rdev->wowlan = ntrig;
ff1b6e69 6726
ae33bd81 6727 set_wakeup:
6d52563f
JB		 6728 if (rdev->ops->set_wakeup && prev_enabled != !!rdev->wowlan)
6729 rdev->ops->set_wakeup(&rdev->wiphy, rdev->wowlan);
6730
ff1b6e69
JB		 6731 return 0;
6732 error:
6733 for (i = 0; i < new_triggers.n_patterns; i++)
6734 kfree(new_triggers.patterns[i].mask);
6735 kfree(new_triggers.patterns);
6736 return err;
6737}
dfb89c56 6738#endif
ff1b6e69 6739
e5497d76
JB		 6740static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
6741{
6742 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6743 struct net_device *dev = info->user_ptr[1];
6744 struct wireless_dev *wdev = dev->ieee80211_ptr;
6745 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
6746 struct cfg80211_gtk_rekey_data rekey_data;
6747 int err;
6748
6749 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
6750 return -EINVAL;
6751
6752 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
6753 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
6754 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
6755 nl80211_rekey_policy);
6756 if (err)
6757 return err;
6758
6759 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
6760 return -ERANGE;
6761 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
6762 return -ERANGE;
6763 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
6764 return -ERANGE;
6765
6766 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
6767 NL80211_KEK_LEN);
6768 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
6769 NL80211_KCK_LEN);
6770 memcpy(rekey_data.replay_ctr,
6771 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
6772 NL80211_REPLAY_CTR_LEN);
6773
6774 wdev_lock(wdev);
6775 if (!wdev->current_bss) {
6776 err = -ENOTCONN;
6777 goto out;
6778 }
6779
6780 if (!rdev->ops->set_rekey_data) {
6781 err = -EOPNOTSUPP;
6782 goto out;
6783 }
6784
6785 err = rdev->ops->set_rekey_data(&rdev->wiphy, dev, &rekey_data);
6786 out:
6787 wdev_unlock(wdev);
6788 return err;
6789}
6790
28946da7
JB		 6791static int nl80211_register_unexpected_frame(struct sk_buff *skb,
6792 struct genl_info *info)
6793{
6794 struct net_device *dev = info->user_ptr[1];
6795 struct wireless_dev *wdev = dev->ieee80211_ptr;
6796
6797 if (wdev->iftype != NL80211_IFTYPE_AP &&
6798 wdev->iftype != NL80211_IFTYPE_P2P_GO)
6799 return -EINVAL;
6800
15e47304 6801 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 6802 return -EBUSY;
6803
15e47304 6804 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 6805 return 0;
6806}
6807
7f6cf311
JB		 6808static int nl80211_probe_client(struct sk_buff *skb,
6809 struct genl_info *info)
6810{
6811 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6812 struct net_device *dev = info->user_ptr[1];
6813 struct wireless_dev *wdev = dev->ieee80211_ptr;
6814 struct sk_buff *msg;
6815 void *hdr;
6816 const u8 *addr;
6817 u64 cookie;
6818 int err;
6819
6820 if (wdev->iftype != NL80211_IFTYPE_AP &&
6821 wdev->iftype != NL80211_IFTYPE_P2P_GO)
6822 return -EOPNOTSUPP;
6823
6824 if (!info->attrs[NL80211_ATTR_MAC])
6825 return -EINVAL;
6826
6827 if (!rdev->ops->probe_client)
6828 return -EOPNOTSUPP;
6829
6830 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6831 if (!msg)
6832 return -ENOMEM;
6833
15e47304 6834 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311
JB		 6835 NL80211_CMD_PROBE_CLIENT);
6836
6837 if (IS_ERR(hdr)) {
6838 err = PTR_ERR(hdr);
6839 goto free_msg;
6840 }
6841
6842 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6843
6844 err = rdev->ops->probe_client(&rdev->wiphy, dev, addr, &cookie);
6845 if (err)
6846 goto free_msg;
6847
9360ffd1
DM		 6848 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6849 goto nla_put_failure;
7f6cf311
JB		 6850
6851 genlmsg_end(msg, hdr);
6852
6853 return genlmsg_reply(msg, info);
6854
6855 nla_put_failure:
6856 err = -ENOBUFS;
6857 free_msg:
6858 nlmsg_free(msg);
6859 return err;
6860}
6861
5e760230
JB		 6862static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
6863{
6864 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6865
6866 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
6867 return -EOPNOTSUPP;
6868
15e47304 6869 if (rdev->ap_beacons_nlportid)
5e760230
JB		 6870 return -EBUSY;
6871
15e47304 6872 rdev->ap_beacons_nlportid = info->snd_portid;
5e760230
JB		 6873
6874 return 0;
6875}
6876
98104fde
JB		 6877static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
6878{
6879 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6880 struct wireless_dev *wdev = info->user_ptr[1];
6881 int err;
6882
6883 if (!rdev->ops->start_p2p_device)
6884 return -EOPNOTSUPP;
6885
6886 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
6887 return -EOPNOTSUPP;
6888
6889 if (wdev->p2p_started)
6890 return 0;
6891
6892 mutex_lock(&rdev->devlist_mtx);
6893 err = cfg80211_can_add_interface(rdev, wdev->iftype);
6894 mutex_unlock(&rdev->devlist_mtx);
6895 if (err)
6896 return err;
6897
6898 err = rdev->ops->start_p2p_device(&rdev->wiphy, wdev);
6899 if (err)
6900 return err;
6901
6902 wdev->p2p_started = true;
6903 mutex_lock(&rdev->devlist_mtx);
6904 rdev->opencount++;
6905 mutex_unlock(&rdev->devlist_mtx);
6906
6907 return 0;
6908}
6909
6910static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
6911{
6912 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6913 struct wireless_dev *wdev = info->user_ptr[1];
6914
6915 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
6916 return -EOPNOTSUPP;
6917
6918 if (!rdev->ops->stop_p2p_device)
6919 return -EOPNOTSUPP;
6920
6921 if (!wdev->p2p_started)
6922 return 0;
6923
6924 rdev->ops->stop_p2p_device(&rdev->wiphy, wdev);
6925 wdev->p2p_started = false;
6926
6927 mutex_lock(&rdev->devlist_mtx);
6928 rdev->opencount--;
6929 mutex_unlock(&rdev->devlist_mtx);
6930
6931 if (WARN_ON(rdev->scan_req && rdev->scan_req->wdev == wdev)) {
6932 rdev->scan_req->aborted = true;
6933 ___cfg80211_scan_done(rdev, true);
6934 }
6935
6936 return 0;
6937}
6938
4c476991
JB		 6939#define NL80211_FLAG_NEED_WIPHY 0x01
6940#define NL80211_FLAG_NEED_NETDEV 0x02
6941#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 6942#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
6943#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
6944 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 6945#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 6946/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 6947#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
6948 NL80211_FLAG_CHECK_NETDEV_UP)
4c476991
JB		 6949
6950static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
6951 struct genl_info *info)
6952{
6953 struct cfg80211_registered_device *rdev;
89a54e48 6954 struct wireless_dev *wdev;
4c476991 6955 struct net_device *dev;
4c476991
JB		 6956 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
6957
6958 if (rtnl)
6959 rtnl_lock();
6960
6961 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 6962 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991
JB		 6963 if (IS_ERR(rdev)) {
6964 if (rtnl)
6965 rtnl_unlock();
6966 return PTR_ERR(rdev);
6967 }
6968 info->user_ptr[0] = rdev;
1bf614ef
JB		 6969 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
6970 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
89a54e48
JB		 6971 mutex_lock(&cfg80211_mutex);
6972 wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
6973 info->attrs);
6974 if (IS_ERR(wdev)) {
6975 mutex_unlock(&cfg80211_mutex);
4c476991
JB		 6976 if (rtnl)
6977 rtnl_unlock();
89a54e48 6978 return PTR_ERR(wdev);
4c476991 6979 }
89a54e48 6980
89a54e48
JB		 6981 dev = wdev->netdev;
6982 rdev = wiphy_to_dev(wdev->wiphy);
6983
1bf614ef
JB		 6984 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
6985 if (!dev) {
6986 mutex_unlock(&cfg80211_mutex);
6987 if (rtnl)
6988 rtnl_unlock();
6989 return -EINVAL;
6990 }
6991
6992 info->user_ptr[1] = dev;
6993 } else {
6994 info->user_ptr[1] = wdev;
41265714 6995 }
1bf614ef
JB		 6996
6997 if (dev) {
6998 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
6999 !netif_running(dev)) {
7000 mutex_unlock(&cfg80211_mutex);
7001 if (rtnl)
7002 rtnl_unlock();
7003 return -ENETDOWN;
7004 }
7005
7006 dev_hold(dev);
98104fde
JB		 7007 } else if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP) {
7008 if (!wdev->p2p_started) {
7009 mutex_unlock(&cfg80211_mutex);
7010 if (rtnl)
7011 rtnl_unlock();
7012 return -ENETDOWN;
7013 }
41265714 7014 }
89a54e48 7015
89a54e48
JB		 7016 cfg80211_lock_rdev(rdev);
7017
7018 mutex_unlock(&cfg80211_mutex);
7019
4c476991 7020 info->user_ptr[0] = rdev;
4c476991
JB		 7021 }
7022
7023 return 0;
7024}
7025
7026static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
7027 struct genl_info *info)
7028{
7029 if (info->user_ptr[0])
7030 cfg80211_unlock_rdev(info->user_ptr[0]);
1bf614ef
JB		 7031 if (info->user_ptr[1]) {
7032 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
7033 struct wireless_dev *wdev = info->user_ptr[1];
7034
7035 if (wdev->netdev)
7036 dev_put(wdev->netdev);
7037 } else {
7038 dev_put(info->user_ptr[1]);
7039 }
7040 }
4c476991
JB		 7041 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
7042 rtnl_unlock();
7043}
7044
55682965
JB		 7045static struct genl_ops nl80211_ops[] = {
7046 {
7047 .cmd = NL80211_CMD_GET_WIPHY,
7048 .doit = nl80211_get_wiphy,
7049 .dumpit = nl80211_dump_wiphy,
7050 .policy = nl80211_policy,
7051 /* can be retrieved by unprivileged users */
4c476991 7052 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965
JB		 7053 },
7054 {
7055 .cmd = NL80211_CMD_SET_WIPHY,
7056 .doit = nl80211_set_wiphy,
7057 .policy = nl80211_policy,
7058 .flags = GENL_ADMIN_PERM,
4c476991 7059 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 7060 },
7061 {
7062 .cmd = NL80211_CMD_GET_INTERFACE,
7063 .doit = nl80211_get_interface,
7064 .dumpit = nl80211_dump_interface,
7065 .policy = nl80211_policy,
7066 /* can be retrieved by unprivileged users */
72fb2abc 7067 .internal_flags = NL80211_FLAG_NEED_WDEV,
55682965
JB		 7068 },
7069 {
7070 .cmd = NL80211_CMD_SET_INTERFACE,
7071 .doit = nl80211_set_interface,
7072 .policy = nl80211_policy,
7073 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7074 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7075 NL80211_FLAG_NEED_RTNL,
55682965
JB		 7076 },
7077 {
7078 .cmd = NL80211_CMD_NEW_INTERFACE,
7079 .doit = nl80211_new_interface,
7080 .policy = nl80211_policy,
7081 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7082 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7083 NL80211_FLAG_NEED_RTNL,
55682965
JB		 7084 },
7085 {
7086 .cmd = NL80211_CMD_DEL_INTERFACE,
7087 .doit = nl80211_del_interface,
7088 .policy = nl80211_policy,
41ade00f 7089 .flags = GENL_ADMIN_PERM,
84efbb84 7090 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 7091 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 7092 },
7093 {
7094 .cmd = NL80211_CMD_GET_KEY,
7095 .doit = nl80211_get_key,
7096 .policy = nl80211_policy,
7097 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7098 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7099 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 7100 },
7101 {
7102 .cmd = NL80211_CMD_SET_KEY,
7103 .doit = nl80211_set_key,
7104 .policy = nl80211_policy,
7105 .flags = GENL_ADMIN_PERM,
41265714 7106 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7107 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 7108 },
7109 {
7110 .cmd = NL80211_CMD_NEW_KEY,
7111 .doit = nl80211_new_key,
7112 .policy = nl80211_policy,
7113 .flags = GENL_ADMIN_PERM,
41265714 7114 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7115 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 7116 },
7117 {
7118 .cmd = NL80211_CMD_DEL_KEY,
7119 .doit = nl80211_del_key,
7120 .policy = nl80211_policy,
55682965 7121 .flags = GENL_ADMIN_PERM,
41265714 7122 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7123 NL80211_FLAG_NEED_RTNL,
55682965 7124 },
ed1b6cc7
JB		 7125 {
7126 .cmd = NL80211_CMD_SET_BEACON,
7127 .policy = nl80211_policy,
7128 .flags = GENL_ADMIN_PERM,
8860020e 7129 .doit = nl80211_set_beacon,
2b5f8b0b 7130 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7131 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 7132 },
7133 {
8860020e 7134 .cmd = NL80211_CMD_START_AP,
ed1b6cc7
JB		 7135 .policy = nl80211_policy,
7136 .flags = GENL_ADMIN_PERM,
8860020e 7137 .doit = nl80211_start_ap,
2b5f8b0b 7138 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7139 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 7140 },
7141 {
8860020e 7142 .cmd = NL80211_CMD_STOP_AP,
ed1b6cc7
JB		 7143 .policy = nl80211_policy,
7144 .flags = GENL_ADMIN_PERM,
8860020e 7145 .doit = nl80211_stop_ap,
2b5f8b0b 7146 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7147 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 7148 },
5727ef1b
JB		 7149 {
7150 .cmd = NL80211_CMD_GET_STATION,
7151 .doit = nl80211_get_station,
2ec600d6 7152 .dumpit = nl80211_dump_station,
5727ef1b 7153 .policy = nl80211_policy,
4c476991
JB		 7154 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7155 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 7156 },
7157 {
7158 .cmd = NL80211_CMD_SET_STATION,
7159 .doit = nl80211_set_station,
7160 .policy = nl80211_policy,
7161 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7162 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7163 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 7164 },
7165 {
7166 .cmd = NL80211_CMD_NEW_STATION,
7167 .doit = nl80211_new_station,
7168 .policy = nl80211_policy,
7169 .flags = GENL_ADMIN_PERM,
41265714 7170 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7171 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 7172 },
7173 {
7174 .cmd = NL80211_CMD_DEL_STATION,
7175 .doit = nl80211_del_station,
7176 .policy = nl80211_policy,
2ec600d6 7177 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7178 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7179 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7180 },
7181 {
7182 .cmd = NL80211_CMD_GET_MPATH,
7183 .doit = nl80211_get_mpath,
7184 .dumpit = nl80211_dump_mpath,
7185 .policy = nl80211_policy,
7186 .flags = GENL_ADMIN_PERM,
41265714 7187 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7188 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7189 },
7190 {
7191 .cmd = NL80211_CMD_SET_MPATH,
7192 .doit = nl80211_set_mpath,
7193 .policy = nl80211_policy,
7194 .flags = GENL_ADMIN_PERM,
41265714 7195 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7196 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7197 },
7198 {
7199 .cmd = NL80211_CMD_NEW_MPATH,
7200 .doit = nl80211_new_mpath,
7201 .policy = nl80211_policy,
7202 .flags = GENL_ADMIN_PERM,
41265714 7203 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7204 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 7205 },
7206 {
7207 .cmd = NL80211_CMD_DEL_MPATH,
7208 .doit = nl80211_del_mpath,
7209 .policy = nl80211_policy,
9f1ba906 7210 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7211 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7212 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 7213 },
7214 {
7215 .cmd = NL80211_CMD_SET_BSS,
7216 .doit = nl80211_set_bss,
7217 .policy = nl80211_policy,
b2e1b302 7218 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7219 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7220 NL80211_FLAG_NEED_RTNL,
b2e1b302 7221 },
f130347c
LR		 7222 {
7223 .cmd = NL80211_CMD_GET_REG,
7224 .doit = nl80211_get_reg,
7225 .policy = nl80211_policy,
7226 /* can be retrieved by unprivileged users */
7227 },
b2e1b302
LR		 7228 {
7229 .cmd = NL80211_CMD_SET_REG,
7230 .doit = nl80211_set_reg,
7231 .policy = nl80211_policy,
7232 .flags = GENL_ADMIN_PERM,
7233 },
7234 {
7235 .cmd = NL80211_CMD_REQ_SET_REG,
7236 .doit = nl80211_req_set_reg,
7237 .policy = nl80211_policy,
93da9cc1 7238 .flags = GENL_ADMIN_PERM,
7239 },
7240 {
24bdd9f4
JC		 7241 .cmd = NL80211_CMD_GET_MESH_CONFIG,
7242 .doit = nl80211_get_mesh_config,
93da9cc1 7243 .policy = nl80211_policy,
7244 /* can be retrieved by unprivileged users */
2b5f8b0b 7245 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7246 NL80211_FLAG_NEED_RTNL,
93da9cc1 7247 },
7248 {
24bdd9f4
JC		 7249 .cmd = NL80211_CMD_SET_MESH_CONFIG,
7250 .doit = nl80211_update_mesh_config,
93da9cc1 7251 .policy = nl80211_policy,
9aed3cc1 7252 .flags = GENL_ADMIN_PERM,
29cbe68c 7253 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7254 NL80211_FLAG_NEED_RTNL,
9aed3cc1 7255 },
2a519311
JB		 7256 {
7257 .cmd = NL80211_CMD_TRIGGER_SCAN,
7258 .doit = nl80211_trigger_scan,
7259 .policy = nl80211_policy,
7260 .flags = GENL_ADMIN_PERM,
fd014284 7261 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7262 NL80211_FLAG_NEED_RTNL,
2a519311
JB		 7263 },
7264 {
7265 .cmd = NL80211_CMD_GET_SCAN,
7266 .policy = nl80211_policy,
7267 .dumpit = nl80211_dump_scan,
7268 },
807f8a8c
LC		 7269 {
7270 .cmd = NL80211_CMD_START_SCHED_SCAN,
7271 .doit = nl80211_start_sched_scan,
7272 .policy = nl80211_policy,
7273 .flags = GENL_ADMIN_PERM,
7274 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7275 NL80211_FLAG_NEED_RTNL,
7276 },
7277 {
7278 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
7279 .doit = nl80211_stop_sched_scan,
7280 .policy = nl80211_policy,
7281 .flags = GENL_ADMIN_PERM,
7282 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7283 NL80211_FLAG_NEED_RTNL,
7284 },
636a5d36
JM		 7285 {
7286 .cmd = NL80211_CMD_AUTHENTICATE,
7287 .doit = nl80211_authenticate,
7288 .policy = nl80211_policy,
7289 .flags = GENL_ADMIN_PERM,
41265714 7290 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7291 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7292 },
7293 {
7294 .cmd = NL80211_CMD_ASSOCIATE,
7295 .doit = nl80211_associate,
7296 .policy = nl80211_policy,
7297 .flags = GENL_ADMIN_PERM,
41265714 7298 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7299 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7300 },
7301 {
7302 .cmd = NL80211_CMD_DEAUTHENTICATE,
7303 .doit = nl80211_deauthenticate,
7304 .policy = nl80211_policy,
7305 .flags = GENL_ADMIN_PERM,
41265714 7306 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7307 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 7308 },
7309 {
7310 .cmd = NL80211_CMD_DISASSOCIATE,
7311 .doit = nl80211_disassociate,
7312 .policy = nl80211_policy,
7313 .flags = GENL_ADMIN_PERM,
41265714 7314 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7315 NL80211_FLAG_NEED_RTNL,
636a5d36 7316 },
04a773ad
JB		 7317 {
7318 .cmd = NL80211_CMD_JOIN_IBSS,
7319 .doit = nl80211_join_ibss,
7320 .policy = nl80211_policy,
7321 .flags = GENL_ADMIN_PERM,
41265714 7322 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7323 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 7324 },
7325 {
7326 .cmd = NL80211_CMD_LEAVE_IBSS,
7327 .doit = nl80211_leave_ibss,
7328 .policy = nl80211_policy,
7329 .flags = GENL_ADMIN_PERM,
41265714 7330 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7331 NL80211_FLAG_NEED_RTNL,
04a773ad 7332 },
aff89a9b
JB		 7333#ifdef CONFIG_NL80211_TESTMODE
7334 {
7335 .cmd = NL80211_CMD_TESTMODE,
7336 .doit = nl80211_testmode_do,
71063f0e 7337 .dumpit = nl80211_testmode_dump,
aff89a9b
JB		 7338 .policy = nl80211_policy,
7339 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7340 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7341 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 7342 },
7343#endif
b23aa676
SO		 7344 {
7345 .cmd = NL80211_CMD_CONNECT,
7346 .doit = nl80211_connect,
7347 .policy = nl80211_policy,
7348 .flags = GENL_ADMIN_PERM,
41265714 7349 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7350 NL80211_FLAG_NEED_RTNL,
b23aa676
SO		 7351 },
7352 {
7353 .cmd = NL80211_CMD_DISCONNECT,
7354 .doit = nl80211_disconnect,
7355 .policy = nl80211_policy,
7356 .flags = GENL_ADMIN_PERM,
41265714 7357 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7358 NL80211_FLAG_NEED_RTNL,
b23aa676 7359 },
463d0183
JB		 7360 {
7361 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
7362 .doit = nl80211_wiphy_netns,
7363 .policy = nl80211_policy,
7364 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7365 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7366 NL80211_FLAG_NEED_RTNL,
463d0183 7367 },
61fa713c
HS		 7368 {
7369 .cmd = NL80211_CMD_GET_SURVEY,
7370 .policy = nl80211_policy,
7371 .dumpit = nl80211_dump_survey,
7372 },
67fbb16b
SO		 7373 {
7374 .cmd = NL80211_CMD_SET_PMKSA,
7375 .doit = nl80211_setdel_pmksa,
7376 .policy = nl80211_policy,
7377 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7378 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7379 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 7380 },
7381 {
7382 .cmd = NL80211_CMD_DEL_PMKSA,
7383 .doit = nl80211_setdel_pmksa,
7384 .policy = nl80211_policy,
7385 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7386 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7387 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 7388 },
7389 {
7390 .cmd = NL80211_CMD_FLUSH_PMKSA,
7391 .doit = nl80211_flush_pmksa,
7392 .policy = nl80211_policy,
7393 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7394 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 7395 NL80211_FLAG_NEED_RTNL,
67fbb16b 7396 },
9588bbd5
JM		 7397 {
7398 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
7399 .doit = nl80211_remain_on_channel,
7400 .policy = nl80211_policy,
7401 .flags = GENL_ADMIN_PERM,
71bbc994 7402 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7403 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 7404 },
7405 {
7406 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
7407 .doit = nl80211_cancel_remain_on_channel,
7408 .policy = nl80211_policy,
7409 .flags = GENL_ADMIN_PERM,
71bbc994 7410 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7411 NL80211_FLAG_NEED_RTNL,
9588bbd5 7412 },
13ae75b1
JM		 7413 {
7414 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
7415 .doit = nl80211_set_tx_bitrate_mask,
7416 .policy = nl80211_policy,
7417 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7418 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7419 NL80211_FLAG_NEED_RTNL,
13ae75b1 7420 },
026331c4 7421 {
2e161f78
JB		 7422 .cmd = NL80211_CMD_REGISTER_FRAME,
7423 .doit = nl80211_register_mgmt,
026331c4
JM		 7424 .policy = nl80211_policy,
7425 .flags = GENL_ADMIN_PERM,
71bbc994 7426 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 7427 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 7428 },
7429 {
2e161f78
JB		 7430 .cmd = NL80211_CMD_FRAME,
7431 .doit = nl80211_tx_mgmt,
026331c4 7432 .policy = nl80211_policy,
f7ca38df 7433 .flags = GENL_ADMIN_PERM,
71bbc994 7434 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
f7ca38df
JB		 7435 NL80211_FLAG_NEED_RTNL,
7436 },
7437 {
7438 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
7439 .doit = nl80211_tx_mgmt_cancel_wait,
7440 .policy = nl80211_policy,
026331c4 7441 .flags = GENL_ADMIN_PERM,
71bbc994 7442 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 7443 NL80211_FLAG_NEED_RTNL,
026331c4 7444 },
ffb9eb3d
KV		 7445 {
7446 .cmd = NL80211_CMD_SET_POWER_SAVE,
7447 .doit = nl80211_set_power_save,
7448 .policy = nl80211_policy,
7449 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7450 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7451 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 7452 },
7453 {
7454 .cmd = NL80211_CMD_GET_POWER_SAVE,
7455 .doit = nl80211_get_power_save,
7456 .policy = nl80211_policy,
7457 /* can be retrieved by unprivileged users */
4c476991
JB		 7458 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7459 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 7460 },
d6dc1a38
JO		 7461 {
7462 .cmd = NL80211_CMD_SET_CQM,
7463 .doit = nl80211_set_cqm,
7464 .policy = nl80211_policy,
7465 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7466 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7467 NL80211_FLAG_NEED_RTNL,
d6dc1a38 7468 },
f444de05
JB		 7469 {
7470 .cmd = NL80211_CMD_SET_CHANNEL,
7471 .doit = nl80211_set_channel,
7472 .policy = nl80211_policy,
7473 .flags = GENL_ADMIN_PERM,
4c476991
JB		 7474 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7475 NL80211_FLAG_NEED_RTNL,
f444de05 7476 },
e8347eba
BJ		 7477 {
7478 .cmd = NL80211_CMD_SET_WDS_PEER,
7479 .doit = nl80211_set_wds_peer,
7480 .policy = nl80211_policy,
7481 .flags = GENL_ADMIN_PERM,
43b19952
JB		 7482 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7483 NL80211_FLAG_NEED_RTNL,
e8347eba 7484 },
29cbe68c
JB		 7485 {
7486 .cmd = NL80211_CMD_JOIN_MESH,
7487 .doit = nl80211_join_mesh,
7488 .policy = nl80211_policy,
7489 .flags = GENL_ADMIN_PERM,
7490 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7491 NL80211_FLAG_NEED_RTNL,
7492 },
7493 {
7494 .cmd = NL80211_CMD_LEAVE_MESH,
7495 .doit = nl80211_leave_mesh,
7496 .policy = nl80211_policy,
7497 .flags = GENL_ADMIN_PERM,
7498 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7499 NL80211_FLAG_NEED_RTNL,
7500 },
dfb89c56 7501#ifdef CONFIG_PM
ff1b6e69
JB		 7502 {
7503 .cmd = NL80211_CMD_GET_WOWLAN,
7504 .doit = nl80211_get_wowlan,
7505 .policy = nl80211_policy,
7506 /* can be retrieved by unprivileged users */
7507 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7508 NL80211_FLAG_NEED_RTNL,
7509 },
7510 {
7511 .cmd = NL80211_CMD_SET_WOWLAN,
7512 .doit = nl80211_set_wowlan,
7513 .policy = nl80211_policy,
7514 .flags = GENL_ADMIN_PERM,
7515 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7516 NL80211_FLAG_NEED_RTNL,
7517 },
dfb89c56 7518#endif
e5497d76
JB		 7519 {
7520 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
7521 .doit = nl80211_set_rekey_data,
7522 .policy = nl80211_policy,
7523 .flags = GENL_ADMIN_PERM,
7524 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7525 NL80211_FLAG_NEED_RTNL,
7526 },
109086ce
AN		 7527 {
7528 .cmd = NL80211_CMD_TDLS_MGMT,
7529 .doit = nl80211_tdls_mgmt,
7530 .policy = nl80211_policy,
7531 .flags = GENL_ADMIN_PERM,
7532 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7533 NL80211_FLAG_NEED_RTNL,
7534 },
7535 {
7536 .cmd = NL80211_CMD_TDLS_OPER,
7537 .doit = nl80211_tdls_oper,
7538 .policy = nl80211_policy,
7539 .flags = GENL_ADMIN_PERM,
7540 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7541 NL80211_FLAG_NEED_RTNL,
7542 },
28946da7
JB		 7543 {
7544 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
7545 .doit = nl80211_register_unexpected_frame,
7546 .policy = nl80211_policy,
7547 .flags = GENL_ADMIN_PERM,
7548 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7549 NL80211_FLAG_NEED_RTNL,
7550 },
7f6cf311
JB		 7551 {
7552 .cmd = NL80211_CMD_PROBE_CLIENT,
7553 .doit = nl80211_probe_client,
7554 .policy = nl80211_policy,
7555 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7556 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7f6cf311
JB		 7557 NL80211_FLAG_NEED_RTNL,
7558 },
5e760230
JB		 7559 {
7560 .cmd = NL80211_CMD_REGISTER_BEACONS,
7561 .doit = nl80211_register_beacons,
7562 .policy = nl80211_policy,
7563 .flags = GENL_ADMIN_PERM,
7564 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7565 NL80211_FLAG_NEED_RTNL,
7566 },
1d9d9213
SW		 7567 {
7568 .cmd = NL80211_CMD_SET_NOACK_MAP,
7569 .doit = nl80211_set_noack_map,
7570 .policy = nl80211_policy,
7571 .flags = GENL_ADMIN_PERM,
7572 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7573 NL80211_FLAG_NEED_RTNL,
7574 },
98104fde
JB		 7575 {
7576 .cmd = NL80211_CMD_START_P2P_DEVICE,
7577 .doit = nl80211_start_p2p_device,
7578 .policy = nl80211_policy,
7579 .flags = GENL_ADMIN_PERM,
7580 .internal_flags = NL80211_FLAG_NEED_WDEV |
7581 NL80211_FLAG_NEED_RTNL,
7582 },
7583 {
7584 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
7585 .doit = nl80211_stop_p2p_device,
7586 .policy = nl80211_policy,
7587 .flags = GENL_ADMIN_PERM,
7588 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
7589 NL80211_FLAG_NEED_RTNL,
7590 },
55682965 7591};
9588bbd5 7592
6039f6d2
JM		 7593static struct genl_multicast_group nl80211_mlme_mcgrp = {
7594 .name = "mlme",
7595};
55682965
JB		 7596
7597/* multicast groups */
7598static struct genl_multicast_group nl80211_config_mcgrp = {
7599 .name = "config",
7600};
2a519311
JB		 7601static struct genl_multicast_group nl80211_scan_mcgrp = {
7602 .name = "scan",
7603};
73d54c9e
LR		 7604static struct genl_multicast_group nl80211_regulatory_mcgrp = {
7605 .name = "regulatory",
7606};
55682965
JB		 7607
7608/* notification functions */
7609
7610void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
7611{
7612 struct sk_buff *msg;
7613
fd2120ca 7614 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 7615 if (!msg)
7616 return;
7617
7618 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
7619 nlmsg_free(msg);
7620 return;
7621 }
7622
463d0183
JB		 7623 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7624 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 7625}
7626
362a415d
JB		 7627static int nl80211_add_scan_req(struct sk_buff *msg,
7628 struct cfg80211_registered_device *rdev)
7629{
7630 struct cfg80211_scan_request *req = rdev->scan_req;
7631 struct nlattr *nest;
7632 int i;
7633
667503dd
JB		 7634 ASSERT_RDEV_LOCK(rdev);
7635
362a415d
JB		 7636 if (WARN_ON(!req))
7637 return 0;
7638
7639 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
7640 if (!nest)
7641 goto nla_put_failure;
9360ffd1
DM		 7642 for (i = 0; i < req->n_ssids; i++) {
7643 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
7644 goto nla_put_failure;
7645 }
362a415d
JB		 7646 nla_nest_end(msg, nest);
7647
7648 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
7649 if (!nest)
7650 goto nla_put_failure;
9360ffd1
DM		 7651 for (i = 0; i < req->n_channels; i++) {
7652 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
7653 goto nla_put_failure;
7654 }
362a415d
JB		 7655 nla_nest_end(msg, nest);
7656
9360ffd1
DM		 7657 if (req->ie &&
7658 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
7659 goto nla_put_failure;
362a415d
JB		 7660
7661 return 0;
7662 nla_put_failure:
7663 return -ENOBUFS;
7664}
7665
a538e2d5
JB		 7666static int nl80211_send_scan_msg(struct sk_buff *msg,
7667 struct cfg80211_registered_device *rdev,
fd014284 7668 struct wireless_dev *wdev,
15e47304 7669 u32 portid, u32 seq, int flags,
a538e2d5 7670 u32 cmd)
2a519311
JB		 7671{
7672 void *hdr;
7673
15e47304 7674 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 7675 if (!hdr)
7676 return -1;
7677
9360ffd1 7678 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 7679 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
7680 wdev->netdev->ifindex)) ||
7681 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
9360ffd1 7682 goto nla_put_failure;
2a519311 7683
362a415d
JB		 7684 /* ignore errors and send incomplete event anyway */
7685 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 7686
7687 return genlmsg_end(msg, hdr);
7688
7689 nla_put_failure:
7690 genlmsg_cancel(msg, hdr);
7691 return -EMSGSIZE;
7692}
7693
807f8a8c
LC		 7694static int
7695nl80211_send_sched_scan_msg(struct sk_buff *msg,
7696 struct cfg80211_registered_device *rdev,
7697 struct net_device *netdev,
15e47304 7698 u32 portid, u32 seq, int flags, u32 cmd)
807f8a8c
LC		 7699{
7700 void *hdr;
7701
15e47304 7702 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
807f8a8c
LC		 7703 if (!hdr)
7704 return -1;
7705
9360ffd1
DM		 7706 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7707 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
7708 goto nla_put_failure;
807f8a8c
LC		 7709
7710 return genlmsg_end(msg, hdr);
7711
7712 nla_put_failure:
7713 genlmsg_cancel(msg, hdr);
7714 return -EMSGSIZE;
7715}
7716
a538e2d5 7717void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 7718 struct wireless_dev *wdev)
a538e2d5
JB		 7719{
7720 struct sk_buff *msg;
7721
58050fce 7722 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 7723 if (!msg)
7724 return;
7725
fd014284 7726 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 7727 NL80211_CMD_TRIGGER_SCAN) < 0) {
7728 nlmsg_free(msg);
7729 return;
7730 }
7731
463d0183
JB		 7732 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7733 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 7734}
7735
2a519311 7736void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
fd014284 7737 struct wireless_dev *wdev)
2a519311
JB		 7738{
7739 struct sk_buff *msg;
7740
fd2120ca 7741 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 7742 if (!msg)
7743 return;
7744
fd014284 7745 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5 7746 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 7747 nlmsg_free(msg);
7748 return;
7749 }
7750
463d0183
JB		 7751 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7752 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 7753}
7754
7755void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
fd014284 7756 struct wireless_dev *wdev)
2a519311
JB		 7757{
7758 struct sk_buff *msg;
7759
fd2120ca 7760 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 7761 if (!msg)
7762 return;
7763
fd014284 7764 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5 7765 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 7766 nlmsg_free(msg);
7767 return;
7768 }
7769
463d0183
JB		 7770 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7771 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 7772}
7773
807f8a8c
LC		 7774void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
7775 struct net_device *netdev)
7776{
7777 struct sk_buff *msg;
7778
7779 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7780 if (!msg)
7781 return;
7782
7783 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
7784 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
7785 nlmsg_free(msg);
7786 return;
7787 }
7788
7789 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7790 nl80211_scan_mcgrp.id, GFP_KERNEL);
7791}
7792
7793void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
7794 struct net_device *netdev, u32 cmd)
7795{
7796 struct sk_buff *msg;
7797
58050fce 7798 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 7799 if (!msg)
7800 return;
7801
7802 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
7803 nlmsg_free(msg);
7804 return;
7805 }
7806
7807 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7808 nl80211_scan_mcgrp.id, GFP_KERNEL);
7809}
7810
73d54c9e
LR		 7811/*
7812 * This can happen on global regulatory changes or device specific settings
7813 * based on custom world regulatory domains.
7814 */
7815void nl80211_send_reg_change_event(struct regulatory_request *request)
7816{
7817 struct sk_buff *msg;
7818 void *hdr;
7819
fd2120ca 7820 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 7821 if (!msg)
7822 return;
7823
7824 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
7825 if (!hdr) {
7826 nlmsg_free(msg);
7827 return;
7828 }
7829
7830 /* Userspace can always count this one always being set */
9360ffd1
DM		 7831 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
7832 goto nla_put_failure;
7833
7834 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
7835 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7836 NL80211_REGDOM_TYPE_WORLD))
7837 goto nla_put_failure;
7838 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
7839 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7840 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
7841 goto nla_put_failure;
7842 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
7843 request->intersect) {
7844 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7845 NL80211_REGDOM_TYPE_INTERSECTION))
7846 goto nla_put_failure;
7847 } else {
7848 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7849 NL80211_REGDOM_TYPE_COUNTRY) ||
7850 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
7851 request->alpha2))
7852 goto nla_put_failure;
7853 }
7854
7855 if (wiphy_idx_valid(request->wiphy_idx) &&
7856 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
7857 goto nla_put_failure;
73d54c9e 7858
3b7b72ee 7859 genlmsg_end(msg, hdr);
73d54c9e 7860
bc43b28c 7861 rcu_read_lock();
463d0183 7862 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 7863 GFP_ATOMIC);
7864 rcu_read_unlock();
73d54c9e
LR		 7865
7866 return;
7867
7868nla_put_failure:
7869 genlmsg_cancel(msg, hdr);
7870 nlmsg_free(msg);
7871}
7872
6039f6d2
JM		 7873static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
7874 struct net_device *netdev,
7875 const u8 *buf, size_t len,
e6d6e342 7876 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 7877{
7878 struct sk_buff *msg;
7879 void *hdr;
7880
e6d6e342 7881 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 7882 if (!msg)
7883 return;
7884
7885 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7886 if (!hdr) {
7887 nlmsg_free(msg);
7888 return;
7889 }
7890
9360ffd1
DM		 7891 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7892 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7893 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
7894 goto nla_put_failure;
6039f6d2 7895
3b7b72ee 7896 genlmsg_end(msg, hdr);
6039f6d2 7897
463d0183
JB		 7898 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7899 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 7900 return;
7901
7902 nla_put_failure:
7903 genlmsg_cancel(msg, hdr);
7904 nlmsg_free(msg);
7905}
7906
7907void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7908 struct net_device *netdev, const u8 *buf,
7909 size_t len, gfp_t gfp)
6039f6d2
JM		 7910{
7911 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7912 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 7913}
7914
7915void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
7916 struct net_device *netdev, const u8 *buf,
e6d6e342 7917 size_t len, gfp_t gfp)
6039f6d2 7918{
e6d6e342
JB		 7919 nl80211_send_mlme_event(rdev, netdev, buf, len,
7920 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 7921}
7922
53b46b84 7923void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7924 struct net_device *netdev, const u8 *buf,
7925 size_t len, gfp_t gfp)
6039f6d2
JM		 7926{
7927 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7928 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 7929}
7930
53b46b84
JM		 7931void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
7932 struct net_device *netdev, const u8 *buf,
e6d6e342 7933 size_t len, gfp_t gfp)
6039f6d2
JM		 7934{
7935 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7936 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 7937}
7938
cf4e594e
JM		 7939void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
7940 struct net_device *netdev, const u8 *buf,
7941 size_t len, gfp_t gfp)
7942{
7943 nl80211_send_mlme_event(rdev, netdev, buf, len,
7944 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
7945}
7946
7947void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
7948 struct net_device *netdev, const u8 *buf,
7949 size_t len, gfp_t gfp)
7950{
7951 nl80211_send_mlme_event(rdev, netdev, buf, len,
7952 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
7953}
7954
1b06bb40
LR		 7955static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
7956 struct net_device *netdev, int cmd,
e6d6e342 7957 const u8 *addr, gfp_t gfp)
1965c853
JM		 7958{
7959 struct sk_buff *msg;
7960 void *hdr;
7961
e6d6e342 7962 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 7963 if (!msg)
7964 return;
7965
7966 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7967 if (!hdr) {
7968 nlmsg_free(msg);
7969 return;
7970 }
7971
9360ffd1
DM		 7972 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7973 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7974 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
7975 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
7976 goto nla_put_failure;
1965c853 7977
3b7b72ee 7978 genlmsg_end(msg, hdr);
1965c853 7979
463d0183
JB		 7980 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7981 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 7982 return;
7983
7984 nla_put_failure:
7985 genlmsg_cancel(msg, hdr);
7986 nlmsg_free(msg);
7987}
7988
7989void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7990 struct net_device *netdev, const u8 *addr,
7991 gfp_t gfp)
1965c853
JM		 7992{
7993 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 7994 addr, gfp);
1965c853
JM		 7995}
7996
7997void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7998 struct net_device *netdev, const u8 *addr,
7999 gfp_t gfp)
1965c853 8000{
e6d6e342
JB		 8001 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
8002 addr, gfp);
1965c853
JM		 8003}
8004
b23aa676
SO		 8005void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
8006 struct net_device *netdev, const u8 *bssid,
8007 const u8 *req_ie, size_t req_ie_len,
8008 const u8 *resp_ie, size_t resp_ie_len,
8009 u16 status, gfp_t gfp)
8010{
8011 struct sk_buff *msg;
8012 void *hdr;
8013
58050fce 8014 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
b23aa676
SO		 8015 if (!msg)
8016 return;
8017
8018 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
8019 if (!hdr) {
8020 nlmsg_free(msg);
8021 return;
8022 }
8023
9360ffd1
DM		 8024 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8025 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8026 (bssid && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid)) ||
8027 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE, status) ||
8028 (req_ie &&
8029 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
8030 (resp_ie &&
8031 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
8032 goto nla_put_failure;
b23aa676 8033
3b7b72ee 8034 genlmsg_end(msg, hdr);
b23aa676 8035
463d0183
JB		 8036 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8037 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 8038 return;
8039
8040 nla_put_failure:
8041 genlmsg_cancel(msg, hdr);
8042 nlmsg_free(msg);
8043
8044}
8045
8046void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
8047 struct net_device *netdev, const u8 *bssid,
8048 const u8 *req_ie, size_t req_ie_len,
8049 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
8050{
8051 struct sk_buff *msg;
8052 void *hdr;
8053
58050fce 8054 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
b23aa676
SO		 8055 if (!msg)
8056 return;
8057
8058 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
8059 if (!hdr) {
8060 nlmsg_free(msg);
8061 return;
8062 }
8063
9360ffd1
DM		 8064 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8065 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8066 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
8067 (req_ie &&
8068 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
8069 (resp_ie &&
8070 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
8071 goto nla_put_failure;
b23aa676 8072
3b7b72ee 8073 genlmsg_end(msg, hdr);
b23aa676 8074
463d0183
JB		 8075 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8076 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 8077 return;
8078
8079 nla_put_failure:
8080 genlmsg_cancel(msg, hdr);
8081 nlmsg_free(msg);
8082
8083}
8084
8085void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
8086 struct net_device *netdev, u16 reason,
667503dd 8087 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 8088{
8089 struct sk_buff *msg;
8090 void *hdr;
8091
58050fce 8092 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
b23aa676
SO		 8093 if (!msg)
8094 return;
8095
8096 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
8097 if (!hdr) {
8098 nlmsg_free(msg);
8099 return;
8100 }
8101
9360ffd1
DM		 8102 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8103 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8104 (from_ap && reason &&
8105 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
8106 (from_ap &&
8107 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
8108 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
8109 goto nla_put_failure;
b23aa676 8110
3b7b72ee 8111 genlmsg_end(msg, hdr);
b23aa676 8112
463d0183
JB		 8113 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8114 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 8115 return;
8116
8117 nla_put_failure:
8118 genlmsg_cancel(msg, hdr);
8119 nlmsg_free(msg);
8120
8121}
8122
04a773ad
JB		 8123void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
8124 struct net_device *netdev, const u8 *bssid,
8125 gfp_t gfp)
8126{
8127 struct sk_buff *msg;
8128 void *hdr;
8129
fd2120ca 8130 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 8131 if (!msg)
8132 return;
8133
8134 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
8135 if (!hdr) {
8136 nlmsg_free(msg);
8137 return;
8138 }
8139
9360ffd1
DM		 8140 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8141 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8142 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
8143 goto nla_put_failure;
04a773ad 8144
3b7b72ee 8145 genlmsg_end(msg, hdr);
04a773ad 8146
463d0183
JB		 8147 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8148 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 8149 return;
8150
8151 nla_put_failure:
8152 genlmsg_cancel(msg, hdr);
8153 nlmsg_free(msg);
8154}
8155
c93b5e71
JC		 8156void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
8157 struct net_device *netdev,
8158 const u8 *macaddr, const u8* ie, u8 ie_len,
8159 gfp_t gfp)
8160{
8161 struct sk_buff *msg;
8162 void *hdr;
8163
8164 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8165 if (!msg)
8166 return;
8167
8168 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
8169 if (!hdr) {
8170 nlmsg_free(msg);
8171 return;
8172 }
8173
9360ffd1
DM		 8174 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8175 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8176 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr) ||
8177 (ie_len && ie &&
8178 nla_put(msg, NL80211_ATTR_IE, ie_len , ie)))
8179 goto nla_put_failure;
c93b5e71 8180
3b7b72ee 8181 genlmsg_end(msg, hdr);
c93b5e71
JC		 8182
8183 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8184 nl80211_mlme_mcgrp.id, gfp);
8185 return;
8186
8187 nla_put_failure:
8188 genlmsg_cancel(msg, hdr);
8189 nlmsg_free(msg);
8190}
8191
a3b8b056
JM		 8192void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
8193 struct net_device *netdev, const u8 *addr,
8194 enum nl80211_key_type key_type, int key_id,
e6d6e342 8195 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 8196{
8197 struct sk_buff *msg;
8198 void *hdr;
8199
e6d6e342 8200 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 8201 if (!msg)
8202 return;
8203
8204 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
8205 if (!hdr) {
8206 nlmsg_free(msg);
8207 return;
8208 }
8209
9360ffd1
DM		 8210 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8211 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8212 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
8213 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
8214 (key_id != -1 &&
8215 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
8216 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
8217 goto nla_put_failure;
a3b8b056 8218
3b7b72ee 8219 genlmsg_end(msg, hdr);
a3b8b056 8220
463d0183
JB		 8221 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8222 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 8223 return;
8224
8225 nla_put_failure:
8226 genlmsg_cancel(msg, hdr);
8227 nlmsg_free(msg);
8228}
8229
6bad8766
LR		 8230void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
8231 struct ieee80211_channel *channel_before,
8232 struct ieee80211_channel *channel_after)
8233{
8234 struct sk_buff *msg;
8235 void *hdr;
8236 struct nlattr *nl_freq;
8237
fd2120ca 8238 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 8239 if (!msg)
8240 return;
8241
8242 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
8243 if (!hdr) {
8244 nlmsg_free(msg);
8245 return;
8246 }
8247
8248 /*
8249 * Since we are applying the beacon hint to a wiphy we know its
8250 * wiphy_idx is valid
8251 */
9360ffd1
DM		 8252 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
8253 goto nla_put_failure;
6bad8766
LR		 8254
8255 /* Before */
8256 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
8257 if (!nl_freq)
8258 goto nla_put_failure;
8259 if (nl80211_msg_put_channel(msg, channel_before))
8260 goto nla_put_failure;
8261 nla_nest_end(msg, nl_freq);
8262
8263 /* After */
8264 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
8265 if (!nl_freq)
8266 goto nla_put_failure;
8267 if (nl80211_msg_put_channel(msg, channel_after))
8268 goto nla_put_failure;
8269 nla_nest_end(msg, nl_freq);
8270
3b7b72ee 8271 genlmsg_end(msg, hdr);
6bad8766 8272
463d0183
JB		 8273 rcu_read_lock();
8274 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
8275 GFP_ATOMIC);
8276 rcu_read_unlock();
6bad8766
LR		 8277
8278 return;
8279
8280nla_put_failure:
8281 genlmsg_cancel(msg, hdr);
8282 nlmsg_free(msg);
8283}
8284
9588bbd5
JM		 8285static void nl80211_send_remain_on_chan_event(
8286 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 8287 struct wireless_dev *wdev, u64 cookie,
9588bbd5
JM		 8288 struct ieee80211_channel *chan,
8289 enum nl80211_channel_type channel_type,
8290 unsigned int duration, gfp_t gfp)
8291{
8292 struct sk_buff *msg;
8293 void *hdr;
8294
8295 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8296 if (!msg)
8297 return;
8298
8299 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
8300 if (!hdr) {
8301 nlmsg_free(msg);
8302 return;
8303 }
8304
9360ffd1 8305 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8306 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8307 wdev->netdev->ifindex)) ||
00f53350 8308 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
9360ffd1
DM		 8309 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
8310 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, channel_type) ||
8311 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
8312 goto nla_put_failure;
9588bbd5 8313
9360ffd1
DM		 8314 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
8315 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
8316 goto nla_put_failure;
9588bbd5 8317
3b7b72ee 8318 genlmsg_end(msg, hdr);
9588bbd5
JM		 8319
8320 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8321 nl80211_mlme_mcgrp.id, gfp);
8322 return;
8323
8324 nla_put_failure:
8325 genlmsg_cancel(msg, hdr);
8326 nlmsg_free(msg);
8327}
8328
8329void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
71bbc994 8330 struct wireless_dev *wdev, u64 cookie,
9588bbd5
JM		 8331 struct ieee80211_channel *chan,
8332 enum nl80211_channel_type channel_type,
8333 unsigned int duration, gfp_t gfp)
8334{
8335 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 8336 rdev, wdev, cookie, chan,
9588bbd5
JM		 8337 channel_type, duration, gfp);
8338}
8339
8340void nl80211_send_remain_on_channel_cancel(
71bbc994
JB		 8341 struct cfg80211_registered_device *rdev,
8342 struct wireless_dev *wdev,
9588bbd5
JM		 8343 u64 cookie, struct ieee80211_channel *chan,
8344 enum nl80211_channel_type channel_type, gfp_t gfp)
8345{
8346 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
71bbc994 8347 rdev, wdev, cookie, chan,
9588bbd5
JM		 8348 channel_type, 0, gfp);
8349}
8350
98b62183
JB		 8351void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
8352 struct net_device *dev, const u8 *mac_addr,
8353 struct station_info *sinfo, gfp_t gfp)
8354{
8355 struct sk_buff *msg;
8356
58050fce 8357 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 8358 if (!msg)
8359 return;
8360
66266b3a
JL		 8361 if (nl80211_send_station(msg, 0, 0, 0,
8362 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 8363 nlmsg_free(msg);
8364 return;
8365 }
8366
8367 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8368 nl80211_mlme_mcgrp.id, gfp);
8369}
8370
ec15e68b
JM		 8371void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
8372 struct net_device *dev, const u8 *mac_addr,
8373 gfp_t gfp)
8374{
8375 struct sk_buff *msg;
8376 void *hdr;
8377
58050fce 8378 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
ec15e68b
JM		 8379 if (!msg)
8380 return;
8381
8382 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
8383 if (!hdr) {
8384 nlmsg_free(msg);
8385 return;
8386 }
8387
9360ffd1
DM		 8388 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8389 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
8390 goto nla_put_failure;
ec15e68b 8391
3b7b72ee 8392 genlmsg_end(msg, hdr);
ec15e68b
JM		 8393
8394 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8395 nl80211_mlme_mcgrp.id, gfp);
8396 return;
8397
8398 nla_put_failure:
8399 genlmsg_cancel(msg, hdr);
8400 nlmsg_free(msg);
8401}
8402
ed44a951
PP		 8403void nl80211_send_conn_failed_event(struct cfg80211_registered_device *rdev,
8404 struct net_device *dev, const u8 *mac_addr,
8405 enum nl80211_connect_failed_reason reason,
8406 gfp_t gfp)
8407{
8408 struct sk_buff *msg;
8409 void *hdr;
8410
8411 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8412 if (!msg)
8413 return;
8414
8415 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
8416 if (!hdr) {
8417 nlmsg_free(msg);
8418 return;
8419 }
8420
8421 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8422 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
8423 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
8424 goto nla_put_failure;
8425
8426 genlmsg_end(msg, hdr);
8427
8428 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8429 nl80211_mlme_mcgrp.id, gfp);
8430 return;
8431
8432 nla_put_failure:
8433 genlmsg_cancel(msg, hdr);
8434 nlmsg_free(msg);
8435}
8436
b92ab5d8
JB		 8437static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
8438 const u8 *addr, gfp_t gfp)
28946da7
JB		 8439{
8440 struct wireless_dev *wdev = dev->ieee80211_ptr;
8441 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
8442 struct sk_buff *msg;
8443 void *hdr;
8444 int err;
15e47304 8445 u32 nlportid = ACCESS_ONCE(wdev->ap_unexpected_nlportid);
28946da7 8446
15e47304 8447 if (!nlportid)
28946da7
JB		 8448 return false;
8449
8450 msg = nlmsg_new(100, gfp);
8451 if (!msg)
8452 return true;
8453
b92ab5d8 8454 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 8455 if (!hdr) {
8456 nlmsg_free(msg);
8457 return true;
8458 }
8459
9360ffd1
DM		 8460 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8461 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8462 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
8463 goto nla_put_failure;
28946da7
JB		 8464
8465 err = genlmsg_end(msg, hdr);
8466 if (err < 0) {
8467 nlmsg_free(msg);
8468 return true;
8469 }
8470
15e47304 8471 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 8472 return true;
8473
8474 nla_put_failure:
8475 genlmsg_cancel(msg, hdr);
8476 nlmsg_free(msg);
8477 return true;
8478}
8479
b92ab5d8
JB		 8480bool nl80211_unexpected_frame(struct net_device *dev, const u8 *addr, gfp_t gfp)
8481{
8482 return __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
8483 addr, gfp);
8484}
8485
8486bool nl80211_unexpected_4addr_frame(struct net_device *dev,
8487 const u8 *addr, gfp_t gfp)
8488{
8489 return __nl80211_unexpected_frame(dev,
8490 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
8491 addr, gfp);
8492}
8493
2e161f78 8494int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 8495 struct wireless_dev *wdev, u32 nlportid,
804483e9
JB		 8496 int freq, int sig_dbm,
8497 const u8 *buf, size_t len, gfp_t gfp)
026331c4 8498{
71bbc994 8499 struct net_device *netdev = wdev->netdev;
026331c4
JM		 8500 struct sk_buff *msg;
8501 void *hdr;
026331c4
JM		 8502
8503 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8504 if (!msg)
8505 return -ENOMEM;
8506
2e161f78 8507 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 8508 if (!hdr) {
8509 nlmsg_free(msg);
8510 return -ENOMEM;
8511 }
8512
9360ffd1 8513 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8514 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8515 netdev->ifindex)) ||
9360ffd1
DM		 8516 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
8517 (sig_dbm &&
8518 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
8519 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
8520 goto nla_put_failure;
026331c4 8521
3b7b72ee 8522 genlmsg_end(msg, hdr);
026331c4 8523
15e47304 8524 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 8525
8526 nla_put_failure:
8527 genlmsg_cancel(msg, hdr);
8528 nlmsg_free(msg);
8529 return -ENOBUFS;
8530}
8531
2e161f78 8532void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
71bbc994 8533 struct wireless_dev *wdev, u64 cookie,
2e161f78
JB		 8534 const u8 *buf, size_t len, bool ack,
8535 gfp_t gfp)
026331c4 8536{
71bbc994 8537 struct net_device *netdev = wdev->netdev;
026331c4
JM		 8538 struct sk_buff *msg;
8539 void *hdr;
8540
8541 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8542 if (!msg)
8543 return;
8544
2e161f78 8545 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 8546 if (!hdr) {
8547 nlmsg_free(msg);
8548 return;
8549 }
8550
9360ffd1 8551 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 8552 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8553 netdev->ifindex)) ||
9360ffd1
DM		 8554 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
8555 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
8556 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
8557 goto nla_put_failure;
026331c4 8558
3b7b72ee 8559 genlmsg_end(msg, hdr);
026331c4
JM		 8560
8561 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
8562 return;
8563
8564 nla_put_failure:
8565 genlmsg_cancel(msg, hdr);
8566 nlmsg_free(msg);
8567}
8568
d6dc1a38
JO		 8569void
8570nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
8571 struct net_device *netdev,
8572 enum nl80211_cqm_rssi_threshold_event rssi_event,
8573 gfp_t gfp)
8574{
8575 struct sk_buff *msg;
8576 struct nlattr *pinfoattr;
8577 void *hdr;
8578
58050fce 8579 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
d6dc1a38
JO		 8580 if (!msg)
8581 return;
8582
8583 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8584 if (!hdr) {
8585 nlmsg_free(msg);
8586 return;
8587 }
8588
9360ffd1
DM		 8589 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8590 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8591 goto nla_put_failure;
d6dc1a38
JO		 8592
8593 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8594 if (!pinfoattr)
8595 goto nla_put_failure;
8596
9360ffd1
DM		 8597 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
8598 rssi_event))
8599 goto nla_put_failure;
d6dc1a38
JO		 8600
8601 nla_nest_end(msg, pinfoattr);
8602
3b7b72ee 8603 genlmsg_end(msg, hdr);
d6dc1a38
JO		 8604
8605 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8606 nl80211_mlme_mcgrp.id, gfp);
8607 return;
8608
8609 nla_put_failure:
8610 genlmsg_cancel(msg, hdr);
8611 nlmsg_free(msg);
8612}
8613
e5497d76
JB		 8614void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
8615 struct net_device *netdev, const u8 *bssid,
8616 const u8 *replay_ctr, gfp_t gfp)
8617{
8618 struct sk_buff *msg;
8619 struct nlattr *rekey_attr;
8620 void *hdr;
8621
58050fce 8622 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 8623 if (!msg)
8624 return;
8625
8626 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
8627 if (!hdr) {
8628 nlmsg_free(msg);
8629 return;
8630 }
8631
9360ffd1
DM		 8632 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8633 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8634 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
8635 goto nla_put_failure;
e5497d76
JB		 8636
8637 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
8638 if (!rekey_attr)
8639 goto nla_put_failure;
8640
9360ffd1
DM		 8641 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
8642 NL80211_REPLAY_CTR_LEN, replay_ctr))
8643 goto nla_put_failure;
e5497d76
JB		 8644
8645 nla_nest_end(msg, rekey_attr);
8646
3b7b72ee 8647 genlmsg_end(msg, hdr);
e5497d76
JB		 8648
8649 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8650 nl80211_mlme_mcgrp.id, gfp);
8651 return;
8652
8653 nla_put_failure:
8654 genlmsg_cancel(msg, hdr);
8655 nlmsg_free(msg);
8656}
8657
c9df56b4
JM		 8658void nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
8659 struct net_device *netdev, int index,
8660 const u8 *bssid, bool preauth, gfp_t gfp)
8661{
8662 struct sk_buff *msg;
8663 struct nlattr *attr;
8664 void *hdr;
8665
58050fce 8666 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 8667 if (!msg)
8668 return;
8669
8670 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
8671 if (!hdr) {
8672 nlmsg_free(msg);
8673 return;
8674 }
8675
9360ffd1
DM		 8676 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8677 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8678 goto nla_put_failure;
c9df56b4
JM		 8679
8680 attr = nla_nest_start(msg, NL80211_ATTR_PMKSA_CANDIDATE);
8681 if (!attr)
8682 goto nla_put_failure;
8683
9360ffd1
DM		 8684 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
8685 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
8686 (preauth &&
8687 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
8688 goto nla_put_failure;
c9df56b4
JM		 8689
8690 nla_nest_end(msg, attr);
8691
3b7b72ee 8692 genlmsg_end(msg, hdr);
c9df56b4
JM		 8693
8694 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8695 nl80211_mlme_mcgrp.id, gfp);
8696 return;
8697
8698 nla_put_failure:
8699 genlmsg_cancel(msg, hdr);
8700 nlmsg_free(msg);
8701}
8702
5314526b
TP		 8703void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
8704 struct net_device *netdev, int freq,
8705 enum nl80211_channel_type type, gfp_t gfp)
8706{
8707 struct sk_buff *msg;
8708 void *hdr;
8709
58050fce 8710 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 8711 if (!msg)
8712 return;
8713
8714 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CH_SWITCH_NOTIFY);
8715 if (!hdr) {
8716 nlmsg_free(msg);
8717 return;
8718 }
8719
7eab0f64
JL		 8720 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8721 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
8722 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, type))
8723 goto nla_put_failure;
5314526b
TP		 8724
8725 genlmsg_end(msg, hdr);
8726
8727 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8728 nl80211_mlme_mcgrp.id, gfp);
8729 return;
8730
8731 nla_put_failure:
8732 genlmsg_cancel(msg, hdr);
8733 nlmsg_free(msg);
8734}
8735
84f10708
TP		 8736void
8737nl80211_send_cqm_txe_notify(struct cfg80211_registered_device *rdev,
8738 struct net_device *netdev, const u8 *peer,
8739 u32 num_packets, u32 rate, u32 intvl, gfp_t gfp)
8740{
8741 struct sk_buff *msg;
8742 struct nlattr *pinfoattr;
8743 void *hdr;
8744
8745 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8746 if (!msg)
8747 return;
8748
8749 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8750 if (!hdr) {
8751 nlmsg_free(msg);
8752 return;
8753 }
8754
8755 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8756 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8757 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
8758 goto nla_put_failure;
8759
8760 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8761 if (!pinfoattr)
8762 goto nla_put_failure;
8763
8764 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
8765 goto nla_put_failure;
8766
8767 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
8768 goto nla_put_failure;
8769
8770 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
8771 goto nla_put_failure;
8772
8773 nla_nest_end(msg, pinfoattr);
8774
8775 genlmsg_end(msg, hdr);
8776
8777 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8778 nl80211_mlme_mcgrp.id, gfp);
8779 return;
8780
8781 nla_put_failure:
8782 genlmsg_cancel(msg, hdr);
8783 nlmsg_free(msg);
8784}
8785
c063dbf5
JB		 8786void
8787nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
8788 struct net_device *netdev, const u8 *peer,
8789 u32 num_packets, gfp_t gfp)
8790{
8791 struct sk_buff *msg;
8792 struct nlattr *pinfoattr;
8793 void *hdr;
8794
58050fce 8795 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c063dbf5
JB		 8796 if (!msg)
8797 return;
8798
8799 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8800 if (!hdr) {
8801 nlmsg_free(msg);
8802 return;
8803 }
8804
9360ffd1
DM		 8805 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8806 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8807 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
8808 goto nla_put_failure;
c063dbf5
JB		 8809
8810 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8811 if (!pinfoattr)
8812 goto nla_put_failure;
8813
9360ffd1
DM		 8814 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
8815 goto nla_put_failure;
c063dbf5
JB		 8816
8817 nla_nest_end(msg, pinfoattr);
8818
3b7b72ee 8819 genlmsg_end(msg, hdr);
c063dbf5
JB		 8820
8821 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8822 nl80211_mlme_mcgrp.id, gfp);
8823 return;
8824
8825 nla_put_failure:
8826 genlmsg_cancel(msg, hdr);
8827 nlmsg_free(msg);
8828}
8829
7f6cf311
JB		 8830void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
8831 u64 cookie, bool acked, gfp_t gfp)
8832{
8833 struct wireless_dev *wdev = dev->ieee80211_ptr;
8834 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
8835 struct sk_buff *msg;
8836 void *hdr;
8837 int err;
8838
58050fce 8839 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7f6cf311
JB		 8840 if (!msg)
8841 return;
8842
8843 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
8844 if (!hdr) {
8845 nlmsg_free(msg);
8846 return;
8847 }
8848
9360ffd1
DM		 8849 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8850 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8851 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
8852 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
8853 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)))
8854 goto nla_put_failure;
7f6cf311
JB		 8855
8856 err = genlmsg_end(msg, hdr);
8857 if (err < 0) {
8858 nlmsg_free(msg);
8859 return;
8860 }
8861
8862 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8863 nl80211_mlme_mcgrp.id, gfp);
8864 return;
8865
8866 nla_put_failure:
8867 genlmsg_cancel(msg, hdr);
8868 nlmsg_free(msg);
8869}
8870EXPORT_SYMBOL(cfg80211_probe_status);
8871
5e760230
JB		 8872void cfg80211_report_obss_beacon(struct wiphy *wiphy,
8873 const u8 *frame, size_t len,
804483e9 8874 int freq, int sig_dbm, gfp_t gfp)
5e760230
JB		 8875{
8876 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
8877 struct sk_buff *msg;
8878 void *hdr;
15e47304 8879 u32 nlportid = ACCESS_ONCE(rdev->ap_beacons_nlportid);
5e760230 8880
15e47304 8881 if (!nlportid)
5e760230
JB		 8882 return;
8883
8884 msg = nlmsg_new(len + 100, gfp);
8885 if (!msg)
8886 return;
8887
8888 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
8889 if (!hdr) {
8890 nlmsg_free(msg);
8891 return;
8892 }
8893
9360ffd1
DM		 8894 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8895 (freq &&
8896 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq)) ||
8897 (sig_dbm &&
8898 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
8899 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
8900 goto nla_put_failure;
5e760230
JB		 8901
8902 genlmsg_end(msg, hdr);
8903
15e47304 8904 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
5e760230
JB		 8905 return;
8906
8907 nla_put_failure:
8908 genlmsg_cancel(msg, hdr);
8909 nlmsg_free(msg);
8910}
8911EXPORT_SYMBOL(cfg80211_report_obss_beacon);
8912
026331c4
JM		 8913static int nl80211_netlink_notify(struct notifier_block * nb,
8914 unsigned long state,
8915 void *_notify)
8916{
8917 struct netlink_notify *notify = _notify;
8918 struct cfg80211_registered_device *rdev;
8919 struct wireless_dev *wdev;
8920
8921 if (state != NETLINK_URELEASE)
8922 return NOTIFY_DONE;
8923
8924 rcu_read_lock();
8925
5e760230 8926 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
89a54e48 8927 list_for_each_entry_rcu(wdev, &rdev->wdev_list, list)
15e47304
EB		 8928 cfg80211_mlme_unregister_socket(wdev, notify->portid);
8929 if (rdev->ap_beacons_nlportid == notify->portid)
8930 rdev->ap_beacons_nlportid = 0;
5e760230 8931 }
026331c4
JM		 8932
8933 rcu_read_unlock();
8934
8935 return NOTIFY_DONE;
8936}
8937
8938static struct notifier_block nl80211_netlink_notifier = {
8939 .notifier_call = nl80211_netlink_notify,
8940};
8941
55682965
JB		 8942/* initialisation/exit functions */
8943
8944int nl80211_init(void)
8945{
0d63cbb5 8946 int err;
55682965 8947
0d63cbb5
MM		 8948 err = genl_register_family_with_ops(&nl80211_fam,
8949 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 8950 if (err)
8951 return err;
8952
55682965
JB		 8953 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
8954 if (err)
8955 goto err_out;
8956
2a519311
JB		 8957 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
8958 if (err)
8959 goto err_out;
8960
73d54c9e
LR		 8961 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
8962 if (err)
8963 goto err_out;
8964
6039f6d2
JM		 8965 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
8966 if (err)
8967 goto err_out;
8968
aff89a9b
JB		 8969#ifdef CONFIG_NL80211_TESTMODE
8970 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
8971 if (err)
8972 goto err_out;
8973#endif
8974
026331c4
JM		 8975 err = netlink_register_notifier(&nl80211_netlink_notifier);
8976 if (err)
8977 goto err_out;
8978
55682965
JB		 8979 return 0;
8980 err_out:
8981 genl_unregister_family(&nl80211_fam);
8982 return err;
8983}
8984
8985void nl80211_exit(void)
8986{
026331c4 8987 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 8988 genl_unregister_family(&nl80211_fam);
8989}
Ubuntu Focal Linux kernel mirror