]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - net/wireless/nl80211.c
projects / mirror_ubuntu-bionic-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
mac80211: allow action frames with unknown BSSID in GO mode
[mirror_ubuntu-bionic-kernel.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
5a0e3ad6 10#include <linux/slab.h>
55682965
JB		 11#include <linux/list.h>
12#include <linux/if_ether.h>
13#include <linux/ieee80211.h>
14#include <linux/nl80211.h>
15#include <linux/rtnetlink.h>
16#include <linux/netlink.h>
2a519311 17#include <linux/etherdevice.h>
463d0183 18#include <net/net_namespace.h>
55682965
JB		 19#include <net/genetlink.h>
20#include <net/cfg80211.h>
463d0183 21#include <net/sock.h>
55682965
JB		 22#include "core.h"
23#include "nl80211.h"
b2e1b302 24#include "reg.h"
55682965 25
5fb628e9
JM		 26static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type);
27static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
28 struct genl_info *info,
29 struct cfg80211_crypto_settings *settings,
30 int cipher_limit);
31
4c476991
JB		 32static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
33 struct genl_info *info);
34static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
35 struct genl_info *info);
36
55682965
JB		 37/* the netlink family */
38static struct genl_family nl80211_fam = {
39 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
40 .name = "nl80211", /* have users key off the name instead */
41 .hdrsize = 0, /* no private header */
42 .version = 1, /* no particular meaning now */
43 .maxattr = NL80211_ATTR_MAX,
463d0183 44 .netnsok = true,
4c476991
JB		 45 .pre_doit = nl80211_pre_doit,
46 .post_doit = nl80211_post_doit,
55682965
JB		 47};
48
79c97e97 49/* internal helper: get rdev and dev */
463d0183 50static int get_rdev_dev_by_info_ifindex(struct genl_info *info,
79c97e97 51 struct cfg80211_registered_device **rdev,
55682965
JB		 52 struct net_device **dev)
53{
463d0183 54 struct nlattr **attrs = info->attrs;
55682965
JB		 55 int ifindex;
56
bba95fef 57 if (!attrs[NL80211_ATTR_IFINDEX])
55682965
JB		 58 return -EINVAL;
59
bba95fef 60 ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
463d0183 61 *dev = dev_get_by_index(genl_info_net(info), ifindex);
55682965
JB		 62 if (!*dev)
63 return -ENODEV;
64
463d0183 65 *rdev = cfg80211_get_dev_from_ifindex(genl_info_net(info), ifindex);
79c97e97 66 if (IS_ERR(*rdev)) {
55682965 67 dev_put(*dev);
79c97e97 68 return PTR_ERR(*rdev);
55682965
JB		 69 }
70
71 return 0;
72}
73
74/* policy for the attributes */
b54452b0 75static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
55682965
JB		 76 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
77 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 78 .len = 20-1 },
31888487 79 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
72bdcf34 80 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 81 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
b9a5f8ca
JM		 82 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
83 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
84 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
85 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 86 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
55682965
JB		 87
88 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
89 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
90 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f
JB		 91
92 [NL80211_ATTR_MAC] = { .type = NLA_BINARY, .len = ETH_ALEN },
3e5d7649 93 [NL80211_ATTR_PREV_BSSID] = { .type = NLA_BINARY, .len = ETH_ALEN },
41ade00f 94
b9454e83 95 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 96 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
97 .len = WLAN_MAX_KEY_LEN },
98 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
99 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
100 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
9f26a952 101 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
e31b8213 102 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
ed1b6cc7
JB		 103
104 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
105 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
106 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
107 .len = IEEE80211_MAX_DATA_LEN },
108 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
109 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 110 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
111 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
112 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
113 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
114 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 115 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 116 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 117 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6
LCC		 118 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
119 .len = IEEE80211_MAX_MESH_ID_LEN },
120 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 121
b2e1b302
LR		 122 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
123 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
124
9f1ba906
JM		 125 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
126 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
127 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 128 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
129 .len = NL80211_MAX_SUPP_RATES },
50b12f59 130 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 131
24bdd9f4 132 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 133 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 134
36aedc90
JM		 135 [NL80211_ATTR_HT_CAPABILITY] = { .type = NLA_BINARY,
136 .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 137
138 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
139 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
140 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 141 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
142 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 143
144 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
145 .len = IEEE80211_MAX_SSID_LEN },
146 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
147 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 148 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 149 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 150 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 151 [NL80211_ATTR_STA_FLAGS2] = {
152 .len = sizeof(struct nl80211_sta_flag_update),
153 },
3f77316c 154 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 155 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
156 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
b23aa676
SO		 157 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
158 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
159 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 160 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 161 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
67fbb16b
SO		 162 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
163 .len = WLAN_PMKID_LEN },
9588bbd5
JM		 164 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
165 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 166 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 167 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
168 .len = IEEE80211_MAX_DATA_LEN },
169 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ffb9eb3d 170 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
d6dc1a38 171 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 172 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 173 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 174 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
175 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 176 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 177 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
178 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 179 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 180 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 181 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 182 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
9c3990aa 183 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
bbe6ad6d 184 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 185 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 186 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
32e9de84 187 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
9946ecfb
JM		 188 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
189 .len = IEEE80211_MAX_DATA_LEN },
190 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
191 .len = IEEE80211_MAX_DATA_LEN },
55682965
JB		 192};
193
e31b8213 194/* policy for the key attributes */
b54452b0 195static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 196 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 197 [NL80211_KEY_IDX] = { .type = NLA_U8 },
198 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
199 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
200 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
201 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
e31b8213 202 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
dbd2fd65
JB		 203 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
204};
205
206/* policy for the key default flags */
207static const struct nla_policy
208nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
209 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
210 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 211};
212
ff1b6e69
JB		 213/* policy for WoWLAN attributes */
214static const struct nla_policy
215nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
216 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
217 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
218 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
219 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 220 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
221 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
222 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
223 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
ff1b6e69
JB		 224};
225
e5497d76
JB		 226/* policy for GTK rekey offload attributes */
227static const struct nla_policy
228nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
229 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
230 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
231 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
232};
233
a043897a
HS		 234/* ifidx get helper */
235static int nl80211_get_ifidx(struct netlink_callback *cb)
236{
237 int res;
238
239 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
240 nl80211_fam.attrbuf, nl80211_fam.maxattr,
241 nl80211_policy);
242 if (res)
243 return res;
244
245 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
246 return -EINVAL;
247
248 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
249 if (!res)
250 return -EINVAL;
251 return res;
252}
253
67748893
JB		 254static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
255 struct netlink_callback *cb,
256 struct cfg80211_registered_device **rdev,
257 struct net_device **dev)
258{
259 int ifidx = cb->args[0];
260 int err;
261
262 if (!ifidx)
263 ifidx = nl80211_get_ifidx(cb);
264 if (ifidx < 0)
265 return ifidx;
266
267 cb->args[0] = ifidx;
268
269 rtnl_lock();
270
271 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
272 if (!*dev) {
273 err = -ENODEV;
274 goto out_rtnl;
275 }
276
277 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3cc25e51
FF		 278 if (IS_ERR(*rdev)) {
279 err = PTR_ERR(*rdev);
67748893
JB		 280 goto out_rtnl;
281 }
282
283 return 0;
284 out_rtnl:
285 rtnl_unlock();
286 return err;
287}
288
289static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
290{
291 cfg80211_unlock_rdev(rdev);
292 rtnl_unlock();
293}
294
f4a11bb0
JB		 295/* IE validation */
296static bool is_valid_ie_attr(const struct nlattr *attr)
297{
298 const u8 *pos;
299 int len;
300
301 if (!attr)
302 return true;
303
304 pos = nla_data(attr);
305 len = nla_len(attr);
306
307 while (len) {
308 u8 elemlen;
309
310 if (len < 2)
311 return false;
312 len -= 2;
313
314 elemlen = pos[1];
315 if (elemlen > len)
316 return false;
317
318 len -= elemlen;
319 pos += 2 + elemlen;
320 }
321
322 return true;
323}
324
55682965
JB		 325/* message building helper */
326static inline void *nl80211hdr_put(struct sk_buff *skb, u32 pid, u32 seq,
327 int flags, u8 cmd)
328{
329 /* since there is no private header just add the generic one */
330 return genlmsg_put(skb, pid, seq, &nl80211_fam, flags, cmd);
331}
332
5dab3b8a
LR		 333static int nl80211_msg_put_channel(struct sk_buff *msg,
334 struct ieee80211_channel *chan)
335{
336 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_FREQ,
337 chan->center_freq);
338
339 if (chan->flags & IEEE80211_CHAN_DISABLED)
340 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_DISABLED);
341 if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN)
342 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN);
343 if (chan->flags & IEEE80211_CHAN_NO_IBSS)
344 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_NO_IBSS);
345 if (chan->flags & IEEE80211_CHAN_RADAR)
346 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_RADAR);
347
348 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
349 DBM_TO_MBM(chan->max_power));
350
351 return 0;
352
353 nla_put_failure:
354 return -ENOBUFS;
355}
356
55682965
JB		 357/* netlink command implementations */
358
b9454e83
JB		 359struct key_parse {
360 struct key_params p;
361 int idx;
e31b8213 362 int type;
b9454e83 363 bool def, defmgmt;
dbd2fd65 364 bool def_uni, def_multi;
b9454e83
JB		 365};
366
367static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
368{
369 struct nlattr *tb[NL80211_KEY_MAX + 1];
370 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
371 nl80211_key_policy);
372 if (err)
373 return err;
374
375 k->def = !!tb[NL80211_KEY_DEFAULT];
376 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
377
dbd2fd65
JB		 378 if (k->def) {
379 k->def_uni = true;
380 k->def_multi = true;
381 }
382 if (k->defmgmt)
383 k->def_multi = true;
384
b9454e83
JB		 385 if (tb[NL80211_KEY_IDX])
386 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
387
388 if (tb[NL80211_KEY_DATA]) {
389 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
390 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
391 }
392
393 if (tb[NL80211_KEY_SEQ]) {
394 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
395 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
396 }
397
398 if (tb[NL80211_KEY_CIPHER])
399 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
400
e31b8213
JB		 401 if (tb[NL80211_KEY_TYPE]) {
402 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
403 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
404 return -EINVAL;
405 }
406
dbd2fd65
JB		 407 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
408 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
409 int err = nla_parse_nested(kdt,
410 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
411 tb[NL80211_KEY_DEFAULT_TYPES],
412 nl80211_key_default_policy);
413 if (err)
414 return err;
415
416 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
417 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
418 }
419
b9454e83
JB		 420 return 0;
421}
422
423static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
424{
425 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
426 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
427 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
428 }
429
430 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
431 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
432 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
433 }
434
435 if (info->attrs[NL80211_ATTR_KEY_IDX])
436 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
437
438 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
439 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
440
441 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
442 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
443
dbd2fd65
JB		 444 if (k->def) {
445 k->def_uni = true;
446 k->def_multi = true;
447 }
448 if (k->defmgmt)
449 k->def_multi = true;
450
e31b8213
JB		 451 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
452 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
453 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
454 return -EINVAL;
455 }
456
dbd2fd65
JB		 457 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
458 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
459 int err = nla_parse_nested(
460 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
461 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
462 nl80211_key_default_policy);
463 if (err)
464 return err;
465
466 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
467 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
468 }
469
b9454e83
JB		 470 return 0;
471}
472
473static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
474{
475 int err;
476
477 memset(k, 0, sizeof(*k));
478 k->idx = -1;
e31b8213 479 k->type = -1;
b9454e83
JB		 480
481 if (info->attrs[NL80211_ATTR_KEY])
482 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
483 else
484 err = nl80211_parse_key_old(info, k);
485
486 if (err)
487 return err;
488
489 if (k->def && k->defmgmt)
490 return -EINVAL;
491
dbd2fd65
JB		 492 if (k->defmgmt) {
493 if (k->def_uni || !k->def_multi)
494 return -EINVAL;
495 }
496
b9454e83
JB		 497 if (k->idx != -1) {
498 if (k->defmgmt) {
499 if (k->idx < 4 || k->idx > 5)
500 return -EINVAL;
501 } else if (k->def) {
502 if (k->idx < 0 || k->idx > 3)
503 return -EINVAL;
504 } else {
505 if (k->idx < 0 || k->idx > 5)
506 return -EINVAL;
507 }
508 }
509
510 return 0;
511}
512
fffd0934
JB		 513static struct cfg80211_cached_keys *
514nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
515 struct nlattr *keys)
516{
517 struct key_parse parse;
518 struct nlattr *key;
519 struct cfg80211_cached_keys *result;
520 int rem, err, def = 0;
521
522 result = kzalloc(sizeof(*result), GFP_KERNEL);
523 if (!result)
524 return ERR_PTR(-ENOMEM);
525
526 result->def = -1;
527 result->defmgmt = -1;
528
529 nla_for_each_nested(key, keys, rem) {
530 memset(&parse, 0, sizeof(parse));
531 parse.idx = -1;
532
533 err = nl80211_parse_key_new(key, &parse);
534 if (err)
535 goto error;
536 err = -EINVAL;
537 if (!parse.p.key)
538 goto error;
539 if (parse.idx < 0 || parse.idx > 4)
540 goto error;
541 if (parse.def) {
542 if (def)
543 goto error;
544 def = 1;
545 result->def = parse.idx;
dbd2fd65
JB		 546 if (!parse.def_uni || !parse.def_multi)
547 goto error;
fffd0934
JB		 548 } else if (parse.defmgmt)
549 goto error;
550 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 551 parse.idx, false, NULL);
fffd0934
JB		 552 if (err)
553 goto error;
554 result->params[parse.idx].cipher = parse.p.cipher;
555 result->params[parse.idx].key_len = parse.p.key_len;
556 result->params[parse.idx].key = result->data[parse.idx];
557 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
558 }
559
560 return result;
561 error:
562 kfree(result);
563 return ERR_PTR(err);
564}
565
566static int nl80211_key_allowed(struct wireless_dev *wdev)
567{
568 ASSERT_WDEV_LOCK(wdev);
569
fffd0934
JB		 570 switch (wdev->iftype) {
571 case NL80211_IFTYPE_AP:
572 case NL80211_IFTYPE_AP_VLAN:
074ac8df 573 case NL80211_IFTYPE_P2P_GO:
ff973af7 574 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 575 break;
576 case NL80211_IFTYPE_ADHOC:
577 if (!wdev->current_bss)
578 return -ENOLINK;
579 break;
580 case NL80211_IFTYPE_STATION:
074ac8df 581 case NL80211_IFTYPE_P2P_CLIENT:
fffd0934
JB		 582 if (wdev->sme_state != CFG80211_SME_CONNECTED)
583 return -ENOLINK;
584 break;
585 default:
586 return -EINVAL;
587 }
588
589 return 0;
590}
591
7527a782
JB		 592static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
593{
594 struct nlattr *nl_modes = nla_nest_start(msg, attr);
595 int i;
596
597 if (!nl_modes)
598 goto nla_put_failure;
599
600 i = 0;
601 while (ifmodes) {
602 if (ifmodes & 1)
603 NLA_PUT_FLAG(msg, i);
604 ifmodes >>= 1;
605 i++;
606 }
607
608 nla_nest_end(msg, nl_modes);
609 return 0;
610
611nla_put_failure:
612 return -ENOBUFS;
613}
614
615static int nl80211_put_iface_combinations(struct wiphy *wiphy,
616 struct sk_buff *msg)
617{
618 struct nlattr *nl_combis;
619 int i, j;
620
621 nl_combis = nla_nest_start(msg,
622 NL80211_ATTR_INTERFACE_COMBINATIONS);
623 if (!nl_combis)
624 goto nla_put_failure;
625
626 for (i = 0; i < wiphy->n_iface_combinations; i++) {
627 const struct ieee80211_iface_combination *c;
628 struct nlattr *nl_combi, *nl_limits;
629
630 c = &wiphy->iface_combinations[i];
631
632 nl_combi = nla_nest_start(msg, i + 1);
633 if (!nl_combi)
634 goto nla_put_failure;
635
636 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
637 if (!nl_limits)
638 goto nla_put_failure;
639
640 for (j = 0; j < c->n_limits; j++) {
641 struct nlattr *nl_limit;
642
643 nl_limit = nla_nest_start(msg, j + 1);
644 if (!nl_limit)
645 goto nla_put_failure;
646 NLA_PUT_U32(msg, NL80211_IFACE_LIMIT_MAX,
647 c->limits[j].max);
648 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
649 c->limits[j].types))
650 goto nla_put_failure;
651 nla_nest_end(msg, nl_limit);
652 }
653
654 nla_nest_end(msg, nl_limits);
655
656 if (c->beacon_int_infra_match)
657 NLA_PUT_FLAG(msg,
658 NL80211_IFACE_COMB_STA_AP_BI_MATCH);
659 NLA_PUT_U32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
660 c->num_different_channels);
661 NLA_PUT_U32(msg, NL80211_IFACE_COMB_MAXNUM,
662 c->max_interfaces);
663
664 nla_nest_end(msg, nl_combi);
665 }
666
667 nla_nest_end(msg, nl_combis);
668
669 return 0;
670nla_put_failure:
671 return -ENOBUFS;
672}
673
55682965
JB		 674static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags,
675 struct cfg80211_registered_device *dev)
676{
677 void *hdr;
ee688b00
JB		 678 struct nlattr *nl_bands, *nl_band;
679 struct nlattr *nl_freqs, *nl_freq;
680 struct nlattr *nl_rates, *nl_rate;
8fdc621d 681 struct nlattr *nl_cmds;
ee688b00
JB		 682 enum ieee80211_band band;
683 struct ieee80211_channel *chan;
684 struct ieee80211_rate *rate;
685 int i;
2e161f78
JB		 686 const struct ieee80211_txrx_stypes *mgmt_stypes =
687 dev->wiphy.mgmt_stypes;
55682965
JB		 688
689 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_WIPHY);
690 if (!hdr)
691 return -1;
692
b5850a7a 693 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx);
55682965 694 NLA_PUT_STRING(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy));
b9a5f8ca 695
f5ea9120
JB		 696 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
697 cfg80211_rdev_list_generation);
698
b9a5f8ca
JM		 699 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
700 dev->wiphy.retry_short);
701 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
702 dev->wiphy.retry_long);
703 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
704 dev->wiphy.frag_threshold);
705 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
706 dev->wiphy.rts_threshold);
81077e82
LT		 707 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
708 dev->wiphy.coverage_class);
2a519311
JB		 709 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
710 dev->wiphy.max_scan_ssids);
93b6aa69
LC		 711 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
712 dev->wiphy.max_sched_scan_ssids);
18a83659
JB		 713 NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
714 dev->wiphy.max_scan_ie_len);
5a865bad
LC		 715 NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
716 dev->wiphy.max_sched_scan_ie_len);
ee688b00 717
e31b8213
JB		 718 if (dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN)
719 NLA_PUT_FLAG(msg, NL80211_ATTR_SUPPORT_IBSS_RSN);
15d5dda6
JC		 720 if (dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH)
721 NLA_PUT_FLAG(msg, NL80211_ATTR_SUPPORT_MESH_AUTH);
e31b8213 722
25e47c18
JB		 723 NLA_PUT(msg, NL80211_ATTR_CIPHER_SUITES,
724 sizeof(u32) * dev->wiphy.n_cipher_suites,
725 dev->wiphy.cipher_suites);
726
67fbb16b
SO		 727 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
728 dev->wiphy.max_num_pmkids);
729
c0692b8f
JB		 730 if (dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL)
731 NLA_PUT_FLAG(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE);
732
39fd5de4
BR		 733 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
734 dev->wiphy.available_antennas_tx);
735 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
736 dev->wiphy.available_antennas_rx);
737
7f531e03
BR		 738 if ((dev->wiphy.available_antennas_tx ||
739 dev->wiphy.available_antennas_rx) && dev->ops->get_antenna) {
afe0cbf8
BR		 740 u32 tx_ant = 0, rx_ant = 0;
741 int res;
742 res = dev->ops->get_antenna(&dev->wiphy, &tx_ant, &rx_ant);
743 if (!res) {
744 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_TX, tx_ant);
745 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_RX, rx_ant);
746 }
747 }
748
7527a782
JB		 749 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
750 dev->wiphy.interface_modes))
f59ac048
LR		 751 goto nla_put_failure;
752
ee688b00
JB		 753 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
754 if (!nl_bands)
755 goto nla_put_failure;
756
757 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
758 if (!dev->wiphy.bands[band])
759 continue;
760
761 nl_band = nla_nest_start(msg, band);
762 if (!nl_band)
763 goto nla_put_failure;
764
d51626df
JB		 765 /* add HT info */
766 if (dev->wiphy.bands[band]->ht_cap.ht_supported) {
767 NLA_PUT(msg, NL80211_BAND_ATTR_HT_MCS_SET,
768 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
769 &dev->wiphy.bands[band]->ht_cap.mcs);
770 NLA_PUT_U16(msg, NL80211_BAND_ATTR_HT_CAPA,
771 dev->wiphy.bands[band]->ht_cap.cap);
772 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
773 dev->wiphy.bands[band]->ht_cap.ampdu_factor);
774 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
775 dev->wiphy.bands[band]->ht_cap.ampdu_density);
776 }
777
ee688b00
JB		 778 /* add frequencies */
779 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
780 if (!nl_freqs)
781 goto nla_put_failure;
782
783 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
784 nl_freq = nla_nest_start(msg, i);
785 if (!nl_freq)
786 goto nla_put_failure;
787
788 chan = &dev->wiphy.bands[band]->channels[i];
5dab3b8a
LR		 789
790 if (nl80211_msg_put_channel(msg, chan))
791 goto nla_put_failure;
e2f367f2 792
ee688b00
JB		 793 nla_nest_end(msg, nl_freq);
794 }
795
796 nla_nest_end(msg, nl_freqs);
797
798 /* add bitrates */
799 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
800 if (!nl_rates)
801 goto nla_put_failure;
802
803 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
804 nl_rate = nla_nest_start(msg, i);
805 if (!nl_rate)
806 goto nla_put_failure;
807
808 rate = &dev->wiphy.bands[band]->bitrates[i];
809 NLA_PUT_U32(msg, NL80211_BITRATE_ATTR_RATE,
810 rate->bitrate);
811 if (rate->flags & IEEE80211_RATE_SHORT_PREAMBLE)
812 NLA_PUT_FLAG(msg,
813 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE);
814
815 nla_nest_end(msg, nl_rate);
816 }
817
818 nla_nest_end(msg, nl_rates);
819
820 nla_nest_end(msg, nl_band);
821 }
822 nla_nest_end(msg, nl_bands);
823
8fdc621d
JB		 824 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
825 if (!nl_cmds)
826 goto nla_put_failure;
827
828 i = 0;
829#define CMD(op, n) \
830 do { \
831 if (dev->ops->op) { \
832 i++; \
833 NLA_PUT_U32(msg, i, NL80211_CMD_ ## n); \
834 } \
835 } while (0)
836
837 CMD(add_virtual_intf, NEW_INTERFACE);
838 CMD(change_virtual_intf, SET_INTERFACE);
839 CMD(add_key, NEW_KEY);
840 CMD(add_beacon, NEW_BEACON);
841 CMD(add_station, NEW_STATION);
842 CMD(add_mpath, NEW_MPATH);
24bdd9f4 843 CMD(update_mesh_config, SET_MESH_CONFIG);
8fdc621d 844 CMD(change_bss, SET_BSS);
636a5d36
JM		 845 CMD(auth, AUTHENTICATE);
846 CMD(assoc, ASSOCIATE);
847 CMD(deauth, DEAUTHENTICATE);
848 CMD(disassoc, DISASSOCIATE);
04a773ad 849 CMD(join_ibss, JOIN_IBSS);
29cbe68c 850 CMD(join_mesh, JOIN_MESH);
67fbb16b
SO		 851 CMD(set_pmksa, SET_PMKSA);
852 CMD(del_pmksa, DEL_PMKSA);
853 CMD(flush_pmksa, FLUSH_PMKSA);
9588bbd5 854 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
13ae75b1 855 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2e161f78 856 CMD(mgmt_tx, FRAME);
f7ca38df 857 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
5be83de5 858 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
463d0183
JB		 859 i++;
860 NLA_PUT_U32(msg, i, NL80211_CMD_SET_WIPHY_NETNS);
861 }
f444de05 862 CMD(set_channel, SET_CHANNEL);
e8347eba 863 CMD(set_wds_peer, SET_WDS_PEER);
807f8a8c
LC		 864 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
865 CMD(sched_scan_start, START_SCHED_SCAN);
8fdc621d
JB		 866
867#undef CMD
b23aa676 868
6829c878 869 if (dev->ops->connect || dev->ops->auth) {
b23aa676
SO		 870 i++;
871 NLA_PUT_U32(msg, i, NL80211_CMD_CONNECT);
872 }
873
6829c878 874 if (dev->ops->disconnect || dev->ops->deauth) {
b23aa676
SO		 875 i++;
876 NLA_PUT_U32(msg, i, NL80211_CMD_DISCONNECT);
877 }
878
8fdc621d
JB		 879 nla_nest_end(msg, nl_cmds);
880
a293911d
JB		 881 if (dev->ops->remain_on_channel)
882 NLA_PUT_U32(msg, NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
883 dev->wiphy.max_remain_on_channel_duration);
884
d2da5878 885 if (dev->ops->mgmt_tx_cancel_wait)
f7ca38df
JB		 886 NLA_PUT_FLAG(msg, NL80211_ATTR_OFFCHANNEL_TX_OK);
887
2e161f78
JB		 888 if (mgmt_stypes) {
889 u16 stypes;
890 struct nlattr *nl_ftypes, *nl_ifs;
891 enum nl80211_iftype ift;
892
893 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
894 if (!nl_ifs)
895 goto nla_put_failure;
896
897 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
898 nl_ftypes = nla_nest_start(msg, ift);
899 if (!nl_ftypes)
900 goto nla_put_failure;
901 i = 0;
902 stypes = mgmt_stypes[ift].tx;
903 while (stypes) {
904 if (stypes & 1)
905 NLA_PUT_U16(msg, NL80211_ATTR_FRAME_TYPE,
906 (i << 4) | IEEE80211_FTYPE_MGMT);
907 stypes >>= 1;
908 i++;
909 }
910 nla_nest_end(msg, nl_ftypes);
911 }
912
74b70a4e
JB		 913 nla_nest_end(msg, nl_ifs);
914
2e161f78
JB		 915 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
916 if (!nl_ifs)
917 goto nla_put_failure;
918
919 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
920 nl_ftypes = nla_nest_start(msg, ift);
921 if (!nl_ftypes)
922 goto nla_put_failure;
923 i = 0;
924 stypes = mgmt_stypes[ift].rx;
925 while (stypes) {
926 if (stypes & 1)
927 NLA_PUT_U16(msg, NL80211_ATTR_FRAME_TYPE,
928 (i << 4) | IEEE80211_FTYPE_MGMT);
929 stypes >>= 1;
930 i++;
931 }
932 nla_nest_end(msg, nl_ftypes);
933 }
934 nla_nest_end(msg, nl_ifs);
935 }
936
ff1b6e69
JB		 937 if (dev->wiphy.wowlan.flags || dev->wiphy.wowlan.n_patterns) {
938 struct nlattr *nl_wowlan;
939
940 nl_wowlan = nla_nest_start(msg,
941 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
942 if (!nl_wowlan)
943 goto nla_put_failure;
944
945 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY)
946 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_ANY);
947 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT)
948 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_DISCONNECT);
949 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT)
950 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT);
77dbbb13
JB		 951 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY)
952 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED);
953 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE)
954 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE);
955 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ)
956 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST);
957 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE)
958 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE);
959 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE)
960 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE);
ff1b6e69
JB		 961 if (dev->wiphy.wowlan.n_patterns) {
962 struct nl80211_wowlan_pattern_support pat = {
963 .max_patterns = dev->wiphy.wowlan.n_patterns,
964 .min_pattern_len =
965 dev->wiphy.wowlan.pattern_min_len,
966 .max_pattern_len =
967 dev->wiphy.wowlan.pattern_max_len,
968 };
969 NLA_PUT(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
970 sizeof(pat), &pat);
971 }
972
973 nla_nest_end(msg, nl_wowlan);
974 }
975
7527a782
JB		 976 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
977 dev->wiphy.software_iftypes))
978 goto nla_put_failure;
979
980 if (nl80211_put_iface_combinations(&dev->wiphy, msg))
981 goto nla_put_failure;
982
55682965
JB		 983 return genlmsg_end(msg, hdr);
984
985 nla_put_failure:
bc3ed28c
TG		 986 genlmsg_cancel(msg, hdr);
987 return -EMSGSIZE;
55682965
JB		 988}
989
990static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
991{
992 int idx = 0;
993 int start = cb->args[0];
994 struct cfg80211_registered_device *dev;
995
a1794390 996 mutex_lock(&cfg80211_mutex);
79c97e97 997 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 998 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
999 continue;
b4637271 1000 if (++idx <= start)
55682965
JB		 1001 continue;
1002 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).pid,
1003 cb->nlh->nlmsg_seq, NLM_F_MULTI,
b4637271
JV		 1004 dev) < 0) {
1005 idx--;
55682965 1006 break;
b4637271 1007 }
55682965 1008 }
a1794390 1009 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1010
1011 cb->args[0] = idx;
1012
1013 return skb->len;
1014}
1015
1016static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1017{
1018 struct sk_buff *msg;
4c476991 1019 struct cfg80211_registered_device *dev = info->user_ptr[0];
55682965 1020
fd2120ca 1021 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1022 if (!msg)
4c476991 1023 return -ENOMEM;
55682965 1024
4c476991
JB		 1025 if (nl80211_send_wiphy(msg, info->snd_pid, info->snd_seq, 0, dev) < 0) {
1026 nlmsg_free(msg);
1027 return -ENOBUFS;
1028 }
55682965 1029
134e6375 1030 return genlmsg_reply(msg, info);
55682965
JB		 1031}
1032
31888487
JM		 1033static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1034 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1035 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1036 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1037 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1038 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1039};
1040
1041static int parse_txq_params(struct nlattr *tb[],
1042 struct ieee80211_txq_params *txq_params)
1043{
1044 if (!tb[NL80211_TXQ_ATTR_QUEUE] || !tb[NL80211_TXQ_ATTR_TXOP] ||
1045 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1046 !tb[NL80211_TXQ_ATTR_AIFS])
1047 return -EINVAL;
1048
1049 txq_params->queue = nla_get_u8(tb[NL80211_TXQ_ATTR_QUEUE]);
1050 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1051 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1052 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1053 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1054
1055 return 0;
1056}
1057
f444de05
JB		 1058static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1059{
1060 /*
1061 * You can only set the channel explicitly for AP, mesh
1062 * and WDS type interfaces; all others have their channel
1063 * managed via their respective "establish a connection"
1064 * command (connect, join, ...)
1065 *
1066 * Monitors are special as they are normally slaved to
1067 * whatever else is going on, so they behave as though
1068 * you tried setting the wiphy channel itself.
1069 */
1070 return !wdev ||
1071 wdev->iftype == NL80211_IFTYPE_AP ||
1072 wdev->iftype == NL80211_IFTYPE_WDS ||
1073 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 1074 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1075 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 1076}
1077
1078static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1079 struct wireless_dev *wdev,
1080 struct genl_info *info)
1081{
1082 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
1083 u32 freq;
1084 int result;
1085
1086 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1087 return -EINVAL;
1088
1089 if (!nl80211_can_set_dev_channel(wdev))
1090 return -EOPNOTSUPP;
1091
1092 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
1093 channel_type = nla_get_u32(info->attrs[
1094 NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1095 if (channel_type != NL80211_CHAN_NO_HT &&
1096 channel_type != NL80211_CHAN_HT20 &&
1097 channel_type != NL80211_CHAN_HT40PLUS &&
1098 channel_type != NL80211_CHAN_HT40MINUS)
1099 return -EINVAL;
1100 }
1101
1102 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1103
1104 mutex_lock(&rdev->devlist_mtx);
1105 if (wdev) {
1106 wdev_lock(wdev);
1107 result = cfg80211_set_freq(rdev, wdev, freq, channel_type);
1108 wdev_unlock(wdev);
1109 } else {
1110 result = cfg80211_set_freq(rdev, NULL, freq, channel_type);
1111 }
1112 mutex_unlock(&rdev->devlist_mtx);
1113
1114 return result;
1115}
1116
1117static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1118{
4c476991
JB		 1119 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1120 struct net_device *netdev = info->user_ptr[1];
f444de05 1121
4c476991 1122 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
f444de05
JB		 1123}
1124
e8347eba
BJ		 1125static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1126{
43b19952
JB		 1127 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1128 struct net_device *dev = info->user_ptr[1];
1129 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 1130 const u8 *bssid;
e8347eba
BJ		 1131
1132 if (!info->attrs[NL80211_ATTR_MAC])
1133 return -EINVAL;
1134
43b19952
JB		 1135 if (netif_running(dev))
1136 return -EBUSY;
e8347eba 1137
43b19952
JB		 1138 if (!rdev->ops->set_wds_peer)
1139 return -EOPNOTSUPP;
e8347eba 1140
43b19952
JB		 1141 if (wdev->iftype != NL80211_IFTYPE_WDS)
1142 return -EOPNOTSUPP;
e8347eba
BJ		 1143
1144 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
43b19952 1145 return rdev->ops->set_wds_peer(wdev->wiphy, dev, bssid);
e8347eba
BJ		 1146}
1147
1148
55682965
JB		 1149static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1150{
1151 struct cfg80211_registered_device *rdev;
f444de05
JB		 1152 struct net_device *netdev = NULL;
1153 struct wireless_dev *wdev;
a1e567c8 1154 int result = 0, rem_txq_params = 0;
31888487 1155 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 1156 u32 changed;
1157 u8 retry_short = 0, retry_long = 0;
1158 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 1159 u8 coverage_class = 0;
55682965 1160
f444de05
JB		 1161 /*
1162 * Try to find the wiphy and netdev. Normally this
1163 * function shouldn't need the netdev, but this is
1164 * done for backward compatibility -- previously
1165 * setting the channel was done per wiphy, but now
1166 * it is per netdev. Previous userland like hostapd
1167 * also passed a netdev to set_wiphy, so that it is
1168 * possible to let that go to the right netdev!
1169 */
4bbf4d56
JB		 1170 mutex_lock(&cfg80211_mutex);
1171
f444de05
JB		 1172 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1173 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1174
1175 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1176 if (netdev && netdev->ieee80211_ptr) {
1177 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1178 mutex_lock(&rdev->mtx);
1179 } else
1180 netdev = NULL;
4bbf4d56
JB		 1181 }
1182
f444de05
JB		 1183 if (!netdev) {
1184 rdev = __cfg80211_rdev_from_info(info);
1185 if (IS_ERR(rdev)) {
1186 mutex_unlock(&cfg80211_mutex);
4c476991 1187 return PTR_ERR(rdev);
f444de05
JB		 1188 }
1189 wdev = NULL;
1190 netdev = NULL;
1191 result = 0;
1192
1193 mutex_lock(&rdev->mtx);
1194 } else if (netif_running(netdev) &&
1195 nl80211_can_set_dev_channel(netdev->ieee80211_ptr))
1196 wdev = netdev->ieee80211_ptr;
1197 else
1198 wdev = NULL;
1199
1200 /*
1201 * end workaround code, by now the rdev is available
1202 * and locked, and wdev may or may not be NULL.
1203 */
4bbf4d56
JB		 1204
1205 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 1206 result = cfg80211_dev_rename(
1207 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 1208
1209 mutex_unlock(&cfg80211_mutex);
1210
1211 if (result)
1212 goto bad_res;
31888487
JM		 1213
1214 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1215 struct ieee80211_txq_params txq_params;
1216 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1217
1218 if (!rdev->ops->set_txq_params) {
1219 result = -EOPNOTSUPP;
1220 goto bad_res;
1221 }
1222
1223 nla_for_each_nested(nl_txq_params,
1224 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1225 rem_txq_params) {
1226 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1227 nla_data(nl_txq_params),
1228 nla_len(nl_txq_params),
1229 txq_params_policy);
1230 result = parse_txq_params(tb, &txq_params);
1231 if (result)
1232 goto bad_res;
1233
1234 result = rdev->ops->set_txq_params(&rdev->wiphy,
1235 &txq_params);
1236 if (result)
1237 goto bad_res;
1238 }
1239 }
55682965 1240
72bdcf34 1241 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
f444de05 1242 result = __nl80211_set_channel(rdev, wdev, info);
72bdcf34
JM		 1243 if (result)
1244 goto bad_res;
1245 }
1246
98d2ff8b
JO		 1247 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
1248 enum nl80211_tx_power_setting type;
1249 int idx, mbm = 0;
1250
1251 if (!rdev->ops->set_tx_power) {
60ea385f 1252 result = -EOPNOTSUPP;
98d2ff8b
JO		 1253 goto bad_res;
1254 }
1255
1256 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1257 type = nla_get_u32(info->attrs[idx]);
1258
1259 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1260 (type != NL80211_TX_POWER_AUTOMATIC)) {
1261 result = -EINVAL;
1262 goto bad_res;
1263 }
1264
1265 if (type != NL80211_TX_POWER_AUTOMATIC) {
1266 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1267 mbm = nla_get_u32(info->attrs[idx]);
1268 }
1269
1270 result = rdev->ops->set_tx_power(&rdev->wiphy, type, mbm);
1271 if (result)
1272 goto bad_res;
1273 }
1274
afe0cbf8
BR		 1275 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1276 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1277 u32 tx_ant, rx_ant;
7f531e03
BR		 1278 if ((!rdev->wiphy.available_antennas_tx &&
1279 !rdev->wiphy.available_antennas_rx) ||
1280 !rdev->ops->set_antenna) {
afe0cbf8
BR		 1281 result = -EOPNOTSUPP;
1282 goto bad_res;
1283 }
1284
1285 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1286 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1287
a7ffac95 1288 /* reject antenna configurations which don't match the
7f531e03
BR		 1289 * available antenna masks, except for the "all" mask */
1290 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1291 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
a7ffac95
BR		 1292 result = -EINVAL;
1293 goto bad_res;
1294 }
1295
7f531e03
BR		 1296 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1297 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 1298
afe0cbf8
BR		 1299 result = rdev->ops->set_antenna(&rdev->wiphy, tx_ant, rx_ant);
1300 if (result)
1301 goto bad_res;
1302 }
1303
b9a5f8ca
JM		 1304 changed = 0;
1305
1306 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1307 retry_short = nla_get_u8(
1308 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1309 if (retry_short == 0) {
1310 result = -EINVAL;
1311 goto bad_res;
1312 }
1313 changed |= WIPHY_PARAM_RETRY_SHORT;
1314 }
1315
1316 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1317 retry_long = nla_get_u8(
1318 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1319 if (retry_long == 0) {
1320 result = -EINVAL;
1321 goto bad_res;
1322 }
1323 changed |= WIPHY_PARAM_RETRY_LONG;
1324 }
1325
1326 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
1327 frag_threshold = nla_get_u32(
1328 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
1329 if (frag_threshold < 256) {
1330 result = -EINVAL;
1331 goto bad_res;
1332 }
1333 if (frag_threshold != (u32) -1) {
1334 /*
1335 * Fragments (apart from the last one) are required to
1336 * have even length. Make the fragmentation code
1337 * simpler by stripping LSB should someone try to use
1338 * odd threshold value.
1339 */
1340 frag_threshold &= ~0x1;
1341 }
1342 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
1343 }
1344
1345 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
1346 rts_threshold = nla_get_u32(
1347 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
1348 changed |= WIPHY_PARAM_RTS_THRESHOLD;
1349 }
1350
81077e82
LT		 1351 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
1352 coverage_class = nla_get_u8(
1353 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
1354 changed |= WIPHY_PARAM_COVERAGE_CLASS;
1355 }
1356
b9a5f8ca
JM		 1357 if (changed) {
1358 u8 old_retry_short, old_retry_long;
1359 u32 old_frag_threshold, old_rts_threshold;
81077e82 1360 u8 old_coverage_class;
b9a5f8ca
JM		 1361
1362 if (!rdev->ops->set_wiphy_params) {
1363 result = -EOPNOTSUPP;
1364 goto bad_res;
1365 }
1366
1367 old_retry_short = rdev->wiphy.retry_short;
1368 old_retry_long = rdev->wiphy.retry_long;
1369 old_frag_threshold = rdev->wiphy.frag_threshold;
1370 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 1371 old_coverage_class = rdev->wiphy.coverage_class;
b9a5f8ca
JM		 1372
1373 if (changed & WIPHY_PARAM_RETRY_SHORT)
1374 rdev->wiphy.retry_short = retry_short;
1375 if (changed & WIPHY_PARAM_RETRY_LONG)
1376 rdev->wiphy.retry_long = retry_long;
1377 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1378 rdev->wiphy.frag_threshold = frag_threshold;
1379 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1380 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 1381 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1382 rdev->wiphy.coverage_class = coverage_class;
b9a5f8ca
JM		 1383
1384 result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
1385 if (result) {
1386 rdev->wiphy.retry_short = old_retry_short;
1387 rdev->wiphy.retry_long = old_retry_long;
1388 rdev->wiphy.frag_threshold = old_frag_threshold;
1389 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 1390 rdev->wiphy.coverage_class = old_coverage_class;
b9a5f8ca
JM		 1391 }
1392 }
72bdcf34 1393
306d6112 1394 bad_res:
4bbf4d56 1395 mutex_unlock(&rdev->mtx);
f444de05
JB		 1396 if (netdev)
1397 dev_put(netdev);
55682965
JB		 1398 return result;
1399}
1400
1401
1402static int nl80211_send_iface(struct sk_buff *msg, u32 pid, u32 seq, int flags,
d726405a 1403 struct cfg80211_registered_device *rdev,
55682965
JB		 1404 struct net_device *dev)
1405{
1406 void *hdr;
1407
1408 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_INTERFACE);
1409 if (!hdr)
1410 return -1;
1411
1412 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
d726405a 1413 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
55682965 1414 NLA_PUT_STRING(msg, NL80211_ATTR_IFNAME, dev->name);
60719ffd 1415 NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, dev->ieee80211_ptr->iftype);
f5ea9120
JB		 1416
1417 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
1418 rdev->devlist_generation ^
1419 (cfg80211_rdev_list_generation << 2));
1420
55682965
JB		 1421 return genlmsg_end(msg, hdr);
1422
1423 nla_put_failure:
bc3ed28c
TG		 1424 genlmsg_cancel(msg, hdr);
1425 return -EMSGSIZE;
55682965
JB		 1426}
1427
1428static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
1429{
1430 int wp_idx = 0;
1431 int if_idx = 0;
1432 int wp_start = cb->args[0];
1433 int if_start = cb->args[1];
f5ea9120 1434 struct cfg80211_registered_device *rdev;
55682965
JB		 1435 struct wireless_dev *wdev;
1436
a1794390 1437 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 1438 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1439 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 1440 continue;
bba95fef
JB		 1441 if (wp_idx < wp_start) {
1442 wp_idx++;
55682965 1443 continue;
bba95fef 1444 }
55682965
JB		 1445 if_idx = 0;
1446
f5ea9120
JB		 1447 mutex_lock(&rdev->devlist_mtx);
1448 list_for_each_entry(wdev, &rdev->netdev_list, list) {
bba95fef
JB		 1449 if (if_idx < if_start) {
1450 if_idx++;
55682965 1451 continue;
bba95fef 1452 }
55682965
JB		 1453 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).pid,
1454 cb->nlh->nlmsg_seq, NLM_F_MULTI,
f5ea9120
JB		 1455 rdev, wdev->netdev) < 0) {
1456 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1457 goto out;
1458 }
1459 if_idx++;
55682965 1460 }
f5ea9120 1461 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1462
1463 wp_idx++;
55682965 1464 }
bba95fef 1465 out:
a1794390 1466 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1467
1468 cb->args[0] = wp_idx;
1469 cb->args[1] = if_idx;
1470
1471 return skb->len;
1472}
1473
1474static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
1475{
1476 struct sk_buff *msg;
4c476991
JB		 1477 struct cfg80211_registered_device *dev = info->user_ptr[0];
1478 struct net_device *netdev = info->user_ptr[1];
55682965 1479
fd2120ca 1480 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1481 if (!msg)
4c476991 1482 return -ENOMEM;
55682965 1483
d726405a 1484 if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 1485 dev, netdev) < 0) {
1486 nlmsg_free(msg);
1487 return -ENOBUFS;
1488 }
55682965 1489
134e6375 1490 return genlmsg_reply(msg, info);
55682965
JB		 1491}
1492
66f7ac50
MW		 1493static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
1494 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
1495 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
1496 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
1497 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
1498 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
1499};
1500
1501static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
1502{
1503 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
1504 int flag;
1505
1506 *mntrflags = 0;
1507
1508 if (!nla)
1509 return -EINVAL;
1510
1511 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
1512 nla, mntr_flags_policy))
1513 return -EINVAL;
1514
1515 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
1516 if (flags[flag])
1517 *mntrflags |= (1<<flag);
1518
1519 return 0;
1520}
1521
9bc383de 1522static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 1523 struct net_device *netdev, u8 use_4addr,
1524 enum nl80211_iftype iftype)
9bc383de 1525{
ad4bb6f8 1526 if (!use_4addr) {
f350a0a8 1527 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
ad4bb6f8 1528 return -EBUSY;
9bc383de 1529 return 0;
ad4bb6f8 1530 }
9bc383de
JB		 1531
1532 switch (iftype) {
1533 case NL80211_IFTYPE_AP_VLAN:
1534 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
1535 return 0;
1536 break;
1537 case NL80211_IFTYPE_STATION:
1538 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
1539 return 0;
1540 break;
1541 default:
1542 break;
1543 }
1544
1545 return -EOPNOTSUPP;
1546}
1547
55682965
JB		 1548static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
1549{
4c476991 1550 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1551 struct vif_params params;
e36d56b6 1552 int err;
04a773ad 1553 enum nl80211_iftype otype, ntype;
4c476991 1554 struct net_device *dev = info->user_ptr[1];
92ffe055 1555 u32 _flags, *flags = NULL;
ac7f9cfa 1556 bool change = false;
55682965 1557
2ec600d6
LCC		 1558 memset(&params, 0, sizeof(params));
1559
04a773ad 1560 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 1561
723b038d 1562 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 1563 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 1564 if (otype != ntype)
ac7f9cfa 1565 change = true;
4c476991
JB		 1566 if (ntype > NL80211_IFTYPE_MAX)
1567 return -EINVAL;
723b038d
JB		 1568 }
1569
92ffe055 1570 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 1571 struct wireless_dev *wdev = dev->ieee80211_ptr;
1572
4c476991
JB		 1573 if (ntype != NL80211_IFTYPE_MESH_POINT)
1574 return -EINVAL;
29cbe68c
JB		 1575 if (netif_running(dev))
1576 return -EBUSY;
1577
1578 wdev_lock(wdev);
1579 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1580 IEEE80211_MAX_MESH_ID_LEN);
1581 wdev->mesh_id_up_len =
1582 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1583 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1584 wdev->mesh_id_up_len);
1585 wdev_unlock(wdev);
2ec600d6
LCC		 1586 }
1587
8b787643
FF		 1588 if (info->attrs[NL80211_ATTR_4ADDR]) {
1589 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1590 change = true;
ad4bb6f8 1591 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 1592 if (err)
4c476991 1593 return err;
8b787643
FF		 1594 } else {
1595 params.use_4addr = -1;
1596 }
1597
92ffe055 1598 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4c476991
JB		 1599 if (ntype != NL80211_IFTYPE_MONITOR)
1600 return -EINVAL;
92ffe055
JB		 1601 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1602 &_flags);
ac7f9cfa 1603 if (err)
4c476991 1604 return err;
ac7f9cfa
JB		 1605
1606 flags = &_flags;
1607 change = true;
92ffe055 1608 }
3b85875a 1609
ac7f9cfa 1610 if (change)
3d54d255 1611 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
ac7f9cfa
JB		 1612 else
1613 err = 0;
60719ffd 1614
9bc383de
JB		 1615 if (!err && params.use_4addr != -1)
1616 dev->ieee80211_ptr->use_4addr = params.use_4addr;
1617
55682965
JB		 1618 return err;
1619}
1620
1621static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1622{
4c476991 1623 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1624 struct vif_params params;
f9e10ce4 1625 struct net_device *dev;
55682965
JB		 1626 int err;
1627 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 1628 u32 flags;
55682965 1629
2ec600d6
LCC		 1630 memset(&params, 0, sizeof(params));
1631
55682965
JB		 1632 if (!info->attrs[NL80211_ATTR_IFNAME])
1633 return -EINVAL;
1634
1635 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1636 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1637 if (type > NL80211_IFTYPE_MAX)
1638 return -EINVAL;
1639 }
1640
79c97e97 1641 if (!rdev->ops->add_virtual_intf ||
4c476991
JB		 1642 !(rdev->wiphy.interface_modes & (1 << type)))
1643 return -EOPNOTSUPP;
55682965 1644
9bc383de 1645 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 1646 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 1647 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 1648 if (err)
4c476991 1649 return err;
9bc383de 1650 }
8b787643 1651
66f7ac50
MW		 1652 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
1653 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
1654 &flags);
f9e10ce4 1655 dev = rdev->ops->add_virtual_intf(&rdev->wiphy,
66f7ac50 1656 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2ec600d6 1657 type, err ? NULL : &flags, &params);
f9e10ce4
JB		 1658 if (IS_ERR(dev))
1659 return PTR_ERR(dev);
2ec600d6 1660
29cbe68c
JB		 1661 if (type == NL80211_IFTYPE_MESH_POINT &&
1662 info->attrs[NL80211_ATTR_MESH_ID]) {
1663 struct wireless_dev *wdev = dev->ieee80211_ptr;
1664
1665 wdev_lock(wdev);
1666 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1667 IEEE80211_MAX_MESH_ID_LEN);
1668 wdev->mesh_id_up_len =
1669 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1670 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1671 wdev->mesh_id_up_len);
1672 wdev_unlock(wdev);
1673 }
1674
f9e10ce4 1675 return 0;
55682965
JB		 1676}
1677
1678static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
1679{
4c476991
JB		 1680 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1681 struct net_device *dev = info->user_ptr[1];
55682965 1682
4c476991
JB		 1683 if (!rdev->ops->del_virtual_intf)
1684 return -EOPNOTSUPP;
55682965 1685
4c476991 1686 return rdev->ops->del_virtual_intf(&rdev->wiphy, dev);
55682965
JB		 1687}
1688
41ade00f
JB		 1689struct get_key_cookie {
1690 struct sk_buff *msg;
1691 int error;
b9454e83 1692 int idx;
41ade00f
JB		 1693};
1694
1695static void get_key_callback(void *c, struct key_params *params)
1696{
b9454e83 1697 struct nlattr *key;
41ade00f
JB		 1698 struct get_key_cookie *cookie = c;
1699
1700 if (params->key)
1701 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_DATA,
1702 params->key_len, params->key);
1703
1704 if (params->seq)
1705 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_SEQ,
1706 params->seq_len, params->seq);
1707
1708 if (params->cipher)
1709 NLA_PUT_U32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
1710 params->cipher);
1711
b9454e83
JB		 1712 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
1713 if (!key)
1714 goto nla_put_failure;
1715
1716 if (params->key)
1717 NLA_PUT(cookie->msg, NL80211_KEY_DATA,
1718 params->key_len, params->key);
1719
1720 if (params->seq)
1721 NLA_PUT(cookie->msg, NL80211_KEY_SEQ,
1722 params->seq_len, params->seq);
1723
1724 if (params->cipher)
1725 NLA_PUT_U32(cookie->msg, NL80211_KEY_CIPHER,
1726 params->cipher);
1727
1728 NLA_PUT_U8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx);
1729
1730 nla_nest_end(cookie->msg, key);
1731
41ade00f
JB		 1732 return;
1733 nla_put_failure:
1734 cookie->error = 1;
1735}
1736
1737static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
1738{
4c476991 1739 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 1740 int err;
4c476991 1741 struct net_device *dev = info->user_ptr[1];
41ade00f 1742 u8 key_idx = 0;
e31b8213
JB		 1743 const u8 *mac_addr = NULL;
1744 bool pairwise;
41ade00f
JB		 1745 struct get_key_cookie cookie = {
1746 .error = 0,
1747 };
1748 void *hdr;
1749 struct sk_buff *msg;
1750
1751 if (info->attrs[NL80211_ATTR_KEY_IDX])
1752 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1753
3cfcf6ac 1754 if (key_idx > 5)
41ade00f
JB		 1755 return -EINVAL;
1756
1757 if (info->attrs[NL80211_ATTR_MAC])
1758 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1759
e31b8213
JB		 1760 pairwise = !!mac_addr;
1761 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
1762 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
1763 if (kt >= NUM_NL80211_KEYTYPES)
1764 return -EINVAL;
1765 if (kt != NL80211_KEYTYPE_GROUP &&
1766 kt != NL80211_KEYTYPE_PAIRWISE)
1767 return -EINVAL;
1768 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
1769 }
1770
4c476991
JB		 1771 if (!rdev->ops->get_key)
1772 return -EOPNOTSUPP;
41ade00f 1773
fd2120ca 1774 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 1775 if (!msg)
1776 return -ENOMEM;
41ade00f
JB		 1777
1778 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
1779 NL80211_CMD_NEW_KEY);
4c476991
JB		 1780 if (IS_ERR(hdr))
1781 return PTR_ERR(hdr);
41ade00f
JB		 1782
1783 cookie.msg = msg;
b9454e83 1784 cookie.idx = key_idx;
41ade00f
JB		 1785
1786 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
1787 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_idx);
1788 if (mac_addr)
1789 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
1790
e31b8213
JB		 1791 if (pairwise && mac_addr &&
1792 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
1793 return -ENOENT;
1794
1795 err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, pairwise,
1796 mac_addr, &cookie, get_key_callback);
41ade00f
JB		 1797
1798 if (err)
6c95e2a2 1799 goto free_msg;
41ade00f
JB		 1800
1801 if (cookie.error)
1802 goto nla_put_failure;
1803
1804 genlmsg_end(msg, hdr);
4c476991 1805 return genlmsg_reply(msg, info);
41ade00f
JB		 1806
1807 nla_put_failure:
1808 err = -ENOBUFS;
6c95e2a2 1809 free_msg:
41ade00f 1810 nlmsg_free(msg);
41ade00f
JB		 1811 return err;
1812}
1813
1814static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
1815{
4c476991 1816 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 1817 struct key_parse key;
41ade00f 1818 int err;
4c476991 1819 struct net_device *dev = info->user_ptr[1];
41ade00f 1820
b9454e83
JB		 1821 err = nl80211_parse_key(info, &key);
1822 if (err)
1823 return err;
41ade00f 1824
b9454e83 1825 if (key.idx < 0)
41ade00f
JB		 1826 return -EINVAL;
1827
b9454e83
JB		 1828 /* only support setting default key */
1829 if (!key.def && !key.defmgmt)
41ade00f
JB		 1830 return -EINVAL;
1831
dbd2fd65 1832 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 1833
dbd2fd65
JB		 1834 if (key.def) {
1835 if (!rdev->ops->set_default_key) {
1836 err = -EOPNOTSUPP;
1837 goto out;
1838 }
41ade00f 1839
dbd2fd65
JB		 1840 err = nl80211_key_allowed(dev->ieee80211_ptr);
1841 if (err)
1842 goto out;
1843
dbd2fd65
JB		 1844 err = rdev->ops->set_default_key(&rdev->wiphy, dev, key.idx,
1845 key.def_uni, key.def_multi);
1846
1847 if (err)
1848 goto out;
fffd0934 1849
3d23e349 1850#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 1851 dev->ieee80211_ptr->wext.default_key = key.idx;
1852#endif
1853 } else {
1854 if (key.def_uni || !key.def_multi) {
1855 err = -EINVAL;
1856 goto out;
1857 }
1858
1859 if (!rdev->ops->set_default_mgmt_key) {
1860 err = -EOPNOTSUPP;
1861 goto out;
1862 }
1863
1864 err = nl80211_key_allowed(dev->ieee80211_ptr);
1865 if (err)
1866 goto out;
1867
1868 err = rdev->ops->set_default_mgmt_key(&rdev->wiphy,
1869 dev, key.idx);
1870 if (err)
1871 goto out;
1872
1873#ifdef CONFIG_CFG80211_WEXT
1874 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 1875#endif
dbd2fd65
JB		 1876 }
1877
1878 out:
fffd0934 1879 wdev_unlock(dev->ieee80211_ptr);
41ade00f 1880
41ade00f
JB		 1881 return err;
1882}
1883
1884static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
1885{
4c476991 1886 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 1887 int err;
4c476991 1888 struct net_device *dev = info->user_ptr[1];
b9454e83 1889 struct key_parse key;
e31b8213 1890 const u8 *mac_addr = NULL;
41ade00f 1891
b9454e83
JB		 1892 err = nl80211_parse_key(info, &key);
1893 if (err)
1894 return err;
41ade00f 1895
b9454e83 1896 if (!key.p.key)
41ade00f
JB		 1897 return -EINVAL;
1898
41ade00f
JB		 1899 if (info->attrs[NL80211_ATTR_MAC])
1900 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1901
e31b8213
JB		 1902 if (key.type == -1) {
1903 if (mac_addr)
1904 key.type = NL80211_KEYTYPE_PAIRWISE;
1905 else
1906 key.type = NL80211_KEYTYPE_GROUP;
1907 }
1908
1909 /* for now */
1910 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
1911 key.type != NL80211_KEYTYPE_GROUP)
1912 return -EINVAL;
1913
4c476991
JB		 1914 if (!rdev->ops->add_key)
1915 return -EOPNOTSUPP;
25e47c18 1916
e31b8213
JB		 1917 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
1918 key.type == NL80211_KEYTYPE_PAIRWISE,
1919 mac_addr))
4c476991 1920 return -EINVAL;
41ade00f 1921
fffd0934
JB		 1922 wdev_lock(dev->ieee80211_ptr);
1923 err = nl80211_key_allowed(dev->ieee80211_ptr);
1924 if (!err)
1925 err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
e31b8213 1926 key.type == NL80211_KEYTYPE_PAIRWISE,
fffd0934
JB		 1927 mac_addr, &key.p);
1928 wdev_unlock(dev->ieee80211_ptr);
41ade00f 1929
41ade00f
JB		 1930 return err;
1931}
1932
1933static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
1934{
4c476991 1935 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 1936 int err;
4c476991 1937 struct net_device *dev = info->user_ptr[1];
41ade00f 1938 u8 *mac_addr = NULL;
b9454e83 1939 struct key_parse key;
41ade00f 1940
b9454e83
JB		 1941 err = nl80211_parse_key(info, &key);
1942 if (err)
1943 return err;
41ade00f
JB		 1944
1945 if (info->attrs[NL80211_ATTR_MAC])
1946 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1947
e31b8213
JB		 1948 if (key.type == -1) {
1949 if (mac_addr)
1950 key.type = NL80211_KEYTYPE_PAIRWISE;
1951 else
1952 key.type = NL80211_KEYTYPE_GROUP;
1953 }
1954
1955 /* for now */
1956 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
1957 key.type != NL80211_KEYTYPE_GROUP)
1958 return -EINVAL;
1959
4c476991
JB		 1960 if (!rdev->ops->del_key)
1961 return -EOPNOTSUPP;
41ade00f 1962
fffd0934
JB		 1963 wdev_lock(dev->ieee80211_ptr);
1964 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213
JB		 1965
1966 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
1967 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
1968 err = -ENOENT;
1969
fffd0934 1970 if (!err)
e31b8213
JB		 1971 err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx,
1972 key.type == NL80211_KEYTYPE_PAIRWISE,
1973 mac_addr);
41ade00f 1974
3d23e349 1975#ifdef CONFIG_CFG80211_WEXT
08645126 1976 if (!err) {
b9454e83 1977 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 1978 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 1979 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 1980 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
1981 }
1982#endif
fffd0934 1983 wdev_unlock(dev->ieee80211_ptr);
08645126 1984
41ade00f
JB		 1985 return err;
1986}
1987
ed1b6cc7
JB		 1988static int nl80211_addset_beacon(struct sk_buff *skb, struct genl_info *info)
1989{
1990 int (*call)(struct wiphy *wiphy, struct net_device *dev,
1991 struct beacon_parameters *info);
4c476991
JB		 1992 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1993 struct net_device *dev = info->user_ptr[1];
56d1893d 1994 struct wireless_dev *wdev = dev->ieee80211_ptr;
ed1b6cc7 1995 struct beacon_parameters params;
56d1893d 1996 int haveinfo = 0, err;
ed1b6cc7 1997
9946ecfb
JM		 1998 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
1999 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2000 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2001 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
f4a11bb0
JB		 2002 return -EINVAL;
2003
074ac8df 2004 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2005 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2006 return -EOPNOTSUPP;
eec60b03 2007
56d1893d
JB		 2008 memset(&params, 0, sizeof(params));
2009
ed1b6cc7
JB		 2010 switch (info->genlhdr->cmd) {
2011 case NL80211_CMD_NEW_BEACON:
2012 /* these are required for NEW_BEACON */
2013 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
2014 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
4c476991
JB		 2015 !info->attrs[NL80211_ATTR_BEACON_HEAD])
2016 return -EINVAL;
ed1b6cc7 2017
56d1893d
JB		 2018 params.interval =
2019 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
2020 params.dtim_period =
2021 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
2022
2023 err = cfg80211_validate_beacon_int(rdev, params.interval);
2024 if (err)
2025 return err;
2026
32e9de84
JM		 2027 /*
2028 * In theory, some of these attributes could be required for
2029 * NEW_BEACON, but since they were not used when the command was
2030 * originally added, keep them optional for old user space
2031 * programs to work with drivers that do not need the additional
2032 * information.
2033 */
2034 if (info->attrs[NL80211_ATTR_SSID]) {
2035 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
2036 params.ssid_len =
2037 nla_len(info->attrs[NL80211_ATTR_SSID]);
2038 if (params.ssid_len == 0 ||
2039 params.ssid_len > IEEE80211_MAX_SSID_LEN)
2040 return -EINVAL;
2041 }
2042
2043 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
2044 params.hidden_ssid = nla_get_u32(
2045 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
2046 if (params.hidden_ssid !=
2047 NL80211_HIDDEN_SSID_NOT_IN_USE &&
2048 params.hidden_ssid !=
2049 NL80211_HIDDEN_SSID_ZERO_LEN &&
2050 params.hidden_ssid !=
2051 NL80211_HIDDEN_SSID_ZERO_CONTENTS)
2052 return -EINVAL;
2053 }
2054
5fb628e9
JM		 2055 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
2056
2057 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
2058 params.auth_type = nla_get_u32(
2059 info->attrs[NL80211_ATTR_AUTH_TYPE]);
2060 if (!nl80211_valid_auth_type(params.auth_type))
2061 return -EINVAL;
2062 } else
2063 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
2064
2065 err = nl80211_crypto_settings(rdev, info, &params.crypto,
2066 NL80211_MAX_NR_CIPHER_SUITES);
2067 if (err)
2068 return err;
2069
79c97e97 2070 call = rdev->ops->add_beacon;
ed1b6cc7
JB		 2071 break;
2072 case NL80211_CMD_SET_BEACON:
79c97e97 2073 call = rdev->ops->set_beacon;
ed1b6cc7
JB		 2074 break;
2075 default:
2076 WARN_ON(1);
4c476991 2077 return -EOPNOTSUPP;
ed1b6cc7
JB		 2078 }
2079
4c476991
JB		 2080 if (!call)
2081 return -EOPNOTSUPP;
ed1b6cc7 2082
ed1b6cc7
JB		 2083 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
2084 params.head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2085 params.head_len =
2086 nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2087 haveinfo = 1;
2088 }
2089
2090 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
2091 params.tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2092 params.tail_len =
2093 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2094 haveinfo = 1;
2095 }
2096
4c476991
JB		 2097 if (!haveinfo)
2098 return -EINVAL;
3b85875a 2099
9946ecfb
JM		 2100 if (info->attrs[NL80211_ATTR_IE]) {
2101 params.beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2102 params.beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
2103 }
2104
2105 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
2106 params.proberesp_ies =
2107 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2108 params.proberesp_ies_len =
2109 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2110 }
2111
2112 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
2113 params.assocresp_ies =
2114 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2115 params.assocresp_ies_len =
2116 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2117 }
2118
56d1893d
JB		 2119 err = call(&rdev->wiphy, dev, &params);
2120 if (!err && params.interval)
2121 wdev->beacon_interval = params.interval;
2122 return err;
ed1b6cc7
JB		 2123}
2124
2125static int nl80211_del_beacon(struct sk_buff *skb, struct genl_info *info)
2126{
4c476991
JB		 2127 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2128 struct net_device *dev = info->user_ptr[1];
56d1893d
JB		 2129 struct wireless_dev *wdev = dev->ieee80211_ptr;
2130 int err;
ed1b6cc7 2131
4c476991
JB		 2132 if (!rdev->ops->del_beacon)
2133 return -EOPNOTSUPP;
ed1b6cc7 2134
074ac8df 2135 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2136 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2137 return -EOPNOTSUPP;
3b85875a 2138
56d1893d
JB		 2139 err = rdev->ops->del_beacon(&rdev->wiphy, dev);
2140 if (!err)
2141 wdev->beacon_interval = 0;
2142 return err;
ed1b6cc7
JB		 2143}
2144
5727ef1b
JB		 2145static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
2146 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
2147 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
2148 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 2149 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 2150 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
5727ef1b
JB		 2151};
2152
eccb8e8f
JB		 2153static int parse_station_flags(struct genl_info *info,
2154 struct station_parameters *params)
5727ef1b
JB		 2155{
2156 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 2157 struct nlattr *nla;
5727ef1b
JB		 2158 int flag;
2159
eccb8e8f
JB		 2160 /*
2161 * Try parsing the new attribute first so userspace
2162 * can specify both for older kernels.
2163 */
2164 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
2165 if (nla) {
2166 struct nl80211_sta_flag_update *sta_flags;
2167
2168 sta_flags = nla_data(nla);
2169 params->sta_flags_mask = sta_flags->mask;
2170 params->sta_flags_set = sta_flags->set;
2171 if ((params->sta_flags_mask |
2172 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
2173 return -EINVAL;
2174 return 0;
2175 }
2176
2177 /* if present, parse the old attribute */
5727ef1b 2178
eccb8e8f 2179 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 2180 if (!nla)
2181 return 0;
2182
2183 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
2184 nla, sta_flags_policy))
2185 return -EINVAL;
2186
eccb8e8f
JB		 2187 params->sta_flags_mask = (1 << __NL80211_STA_FLAG_AFTER_LAST) - 1;
2188 params->sta_flags_mask &= ~1;
5727ef1b
JB		 2189
2190 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++)
2191 if (flags[flag])
eccb8e8f 2192 params->sta_flags_set |= (1<<flag);
5727ef1b
JB		 2193
2194 return 0;
2195}
2196
c8dcfd8a
FF		 2197static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
2198 int attr)
2199{
2200 struct nlattr *rate;
2201 u16 bitrate;
2202
2203 rate = nla_nest_start(msg, attr);
2204 if (!rate)
2205 goto nla_put_failure;
2206
2207 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
2208 bitrate = cfg80211_calculate_bitrate(info);
2209 if (bitrate > 0)
2210 NLA_PUT_U16(msg, NL80211_RATE_INFO_BITRATE, bitrate);
2211
2212 if (info->flags & RATE_INFO_FLAGS_MCS)
2213 NLA_PUT_U8(msg, NL80211_RATE_INFO_MCS, info->mcs);
2214 if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH)
2215 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_40_MHZ_WIDTH);
2216 if (info->flags & RATE_INFO_FLAGS_SHORT_GI)
2217 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_SHORT_GI);
2218
2219 nla_nest_end(msg, rate);
2220 return true;
2221
2222nla_put_failure:
2223 return false;
2224}
2225
fd5b74dc
JB		 2226static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
2227 int flags, struct net_device *dev,
98b62183 2228 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 2229{
2230 void *hdr;
f4263c98 2231 struct nlattr *sinfoattr, *bss_param;
fd5b74dc
JB		 2232
2233 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2234 if (!hdr)
2235 return -1;
2236
2237 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2238 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
2239
f5ea9120
JB		 2240 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, sinfo->generation);
2241
2ec600d6
LCC		 2242 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
2243 if (!sinfoattr)
fd5b74dc 2244 goto nla_put_failure;
ebe27c91
MSS		 2245 if (sinfo->filled & STATION_INFO_CONNECTED_TIME)
2246 NLA_PUT_U32(msg, NL80211_STA_INFO_CONNECTED_TIME,
2247 sinfo->connected_time);
2ec600d6
LCC		 2248 if (sinfo->filled & STATION_INFO_INACTIVE_TIME)
2249 NLA_PUT_U32(msg, NL80211_STA_INFO_INACTIVE_TIME,
2250 sinfo->inactive_time);
2251 if (sinfo->filled & STATION_INFO_RX_BYTES)
2252 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_BYTES,
2253 sinfo->rx_bytes);
2254 if (sinfo->filled & STATION_INFO_TX_BYTES)
2255 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_BYTES,
2256 sinfo->tx_bytes);
2257 if (sinfo->filled & STATION_INFO_LLID)
2258 NLA_PUT_U16(msg, NL80211_STA_INFO_LLID,
2259 sinfo->llid);
2260 if (sinfo->filled & STATION_INFO_PLID)
2261 NLA_PUT_U16(msg, NL80211_STA_INFO_PLID,
2262 sinfo->plid);
2263 if (sinfo->filled & STATION_INFO_PLINK_STATE)
2264 NLA_PUT_U8(msg, NL80211_STA_INFO_PLINK_STATE,
2265 sinfo->plink_state);
420e7fab
HR		 2266 if (sinfo->filled & STATION_INFO_SIGNAL)
2267 NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL,
2268 sinfo->signal);
541a45a1
BR		 2269 if (sinfo->filled & STATION_INFO_SIGNAL_AVG)
2270 NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL_AVG,
2271 sinfo->signal_avg);
420e7fab 2272 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
c8dcfd8a
FF		 2273 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
2274 NL80211_STA_INFO_TX_BITRATE))
2275 goto nla_put_failure;
2276 }
2277 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
2278 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
2279 NL80211_STA_INFO_RX_BITRATE))
420e7fab 2280 goto nla_put_failure;
420e7fab 2281 }
98c8a60a
JM		 2282 if (sinfo->filled & STATION_INFO_RX_PACKETS)
2283 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_PACKETS,
2284 sinfo->rx_packets);
2285 if (sinfo->filled & STATION_INFO_TX_PACKETS)
2286 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_PACKETS,
2287 sinfo->tx_packets);
b206b4ef
BR		 2288 if (sinfo->filled & STATION_INFO_TX_RETRIES)
2289 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_RETRIES,
2290 sinfo->tx_retries);
2291 if (sinfo->filled & STATION_INFO_TX_FAILED)
2292 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_FAILED,
2293 sinfo->tx_failed);
f4263c98
PS		 2294 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
2295 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
2296 if (!bss_param)
2297 goto nla_put_failure;
2298
2299 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT)
2300 NLA_PUT_FLAG(msg, NL80211_STA_BSS_PARAM_CTS_PROT);
2301 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE)
2302 NLA_PUT_FLAG(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE);
2303 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME)
2304 NLA_PUT_FLAG(msg,
2305 NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME);
2306 NLA_PUT_U8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
2307 sinfo->bss_param.dtim_period);
2308 NLA_PUT_U16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
2309 sinfo->bss_param.beacon_interval);
2310
2311 nla_nest_end(msg, bss_param);
2312 }
2ec600d6 2313 nla_nest_end(msg, sinfoattr);
fd5b74dc 2314
040bdf71 2315 if (sinfo->filled & STATION_INFO_ASSOC_REQ_IES)
50d3dfb7
JM		 2316 NLA_PUT(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
2317 sinfo->assoc_req_ies);
2318
fd5b74dc
JB		 2319 return genlmsg_end(msg, hdr);
2320
2321 nla_put_failure:
bc3ed28c
TG		 2322 genlmsg_cancel(msg, hdr);
2323 return -EMSGSIZE;
fd5b74dc
JB		 2324}
2325
2ec600d6 2326static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 2327 struct netlink_callback *cb)
2ec600d6 2328{
2ec600d6
LCC		 2329 struct station_info sinfo;
2330 struct cfg80211_registered_device *dev;
bba95fef 2331 struct net_device *netdev;
2ec600d6 2332 u8 mac_addr[ETH_ALEN];
bba95fef 2333 int sta_idx = cb->args[1];
2ec600d6 2334 int err;
2ec600d6 2335
67748893
JB		 2336 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2337 if (err)
2338 return err;
bba95fef
JB		 2339
2340 if (!dev->ops->dump_station) {
eec60b03 2341 err = -EOPNOTSUPP;
bba95fef
JB		 2342 goto out_err;
2343 }
2344
bba95fef 2345 while (1) {
f612cedf 2346 memset(&sinfo, 0, sizeof(sinfo));
bba95fef
JB		 2347 err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
2348 mac_addr, &sinfo);
2349 if (err == -ENOENT)
2350 break;
2351 if (err)
3b85875a 2352 goto out_err;
bba95fef
JB		 2353
2354 if (nl80211_send_station(skb,
2355 NETLINK_CB(cb->skb).pid,
2356 cb->nlh->nlmsg_seq, NLM_F_MULTI,
2357 netdev, mac_addr,
2358 &sinfo) < 0)
2359 goto out;
2360
2361 sta_idx++;
2362 }
2363
2364
2365 out:
2366 cb->args[1] = sta_idx;
2367 err = skb->len;
bba95fef 2368 out_err:
67748893 2369 nl80211_finish_netdev_dump(dev);
bba95fef
JB		 2370
2371 return err;
2ec600d6 2372}
fd5b74dc 2373
5727ef1b
JB		 2374static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
2375{
4c476991
JB		 2376 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2377 struct net_device *dev = info->user_ptr[1];
2ec600d6 2378 struct station_info sinfo;
fd5b74dc
JB		 2379 struct sk_buff *msg;
2380 u8 *mac_addr = NULL;
4c476991 2381 int err;
fd5b74dc 2382
2ec600d6 2383 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 2384
2385 if (!info->attrs[NL80211_ATTR_MAC])
2386 return -EINVAL;
2387
2388 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2389
4c476991
JB		 2390 if (!rdev->ops->get_station)
2391 return -EOPNOTSUPP;
3b85875a 2392
4c476991 2393 err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
fd5b74dc 2394 if (err)
4c476991 2395 return err;
2ec600d6 2396
fd2120ca 2397 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc 2398 if (!msg)
4c476991 2399 return -ENOMEM;
fd5b74dc
JB		 2400
2401 if (nl80211_send_station(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 2402 dev, mac_addr, &sinfo) < 0) {
2403 nlmsg_free(msg);
2404 return -ENOBUFS;
2405 }
3b85875a 2406
4c476991 2407 return genlmsg_reply(msg, info);
5727ef1b
JB		 2408}
2409
2410/*
c258d2de 2411 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 2412 */
463d0183 2413static int get_vlan(struct genl_info *info,
5727ef1b
JB		 2414 struct cfg80211_registered_device *rdev,
2415 struct net_device **vlan)
2416{
463d0183 2417 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
5727ef1b
JB		 2418 *vlan = NULL;
2419
2420 if (vlanattr) {
463d0183
JB		 2421 *vlan = dev_get_by_index(genl_info_net(info),
2422 nla_get_u32(vlanattr));
5727ef1b
JB		 2423 if (!*vlan)
2424 return -ENODEV;
2425 if (!(*vlan)->ieee80211_ptr)
2426 return -EINVAL;
2427 if ((*vlan)->ieee80211_ptr->wiphy != &rdev->wiphy)
2428 return -EINVAL;
c258d2de
FF		 2429 if (!netif_running(*vlan))
2430 return -ENETDOWN;
5727ef1b
JB		 2431 }
2432 return 0;
2433}
2434
2435static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
2436{
4c476991 2437 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2438 int err;
4c476991 2439 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2440 struct station_parameters params;
2441 u8 *mac_addr = NULL;
2442
2443 memset(&params, 0, sizeof(params));
2444
2445 params.listen_interval = -1;
57cf8043 2446 params.plink_state = -1;
5727ef1b
JB		 2447
2448 if (info->attrs[NL80211_ATTR_STA_AID])
2449 return -EINVAL;
2450
2451 if (!info->attrs[NL80211_ATTR_MAC])
2452 return -EINVAL;
2453
2454 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2455
2456 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
2457 params.supported_rates =
2458 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2459 params.supported_rates_len =
2460 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2461 }
2462
2463 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
2464 params.listen_interval =
2465 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
2466
36aedc90
JM		 2467 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2468 params.ht_capa =
2469 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
2470
eccb8e8f 2471 if (parse_station_flags(info, &params))
5727ef1b
JB		 2472 return -EINVAL;
2473
2ec600d6
LCC		 2474 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2475 params.plink_action =
2476 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2477
9c3990aa
JC		 2478 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE])
2479 params.plink_state =
2480 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
2481
463d0183 2482 err = get_vlan(info, rdev, &params.vlan);
a97f4424 2483 if (err)
034d655e 2484 goto out;
a97f4424
JB		 2485
2486 /* validate settings */
2487 err = 0;
2488
2489 switch (dev->ieee80211_ptr->iftype) {
2490 case NL80211_IFTYPE_AP:
2491 case NL80211_IFTYPE_AP_VLAN:
074ac8df 2492 case NL80211_IFTYPE_P2P_GO:
a97f4424
JB		 2493 /* disallow mesh-specific things */
2494 if (params.plink_action)
2495 err = -EINVAL;
2496 break;
074ac8df 2497 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424
JB		 2498 case NL80211_IFTYPE_STATION:
2499 /* disallow everything but AUTHORIZED flag */
2500 if (params.plink_action)
2501 err = -EINVAL;
2502 if (params.vlan)
2503 err = -EINVAL;
2504 if (params.supported_rates)
2505 err = -EINVAL;
2506 if (params.ht_capa)
2507 err = -EINVAL;
2508 if (params.listen_interval >= 0)
2509 err = -EINVAL;
2510 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
2511 err = -EINVAL;
2512 break;
2513 case NL80211_IFTYPE_MESH_POINT:
2514 /* disallow things mesh doesn't support */
2515 if (params.vlan)
2516 err = -EINVAL;
2517 if (params.ht_capa)
2518 err = -EINVAL;
2519 if (params.listen_interval >= 0)
2520 err = -EINVAL;
b39c48fa
JC		 2521 if (params.sta_flags_mask &
2522 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
8429828e 2523 BIT(NL80211_STA_FLAG_MFP) |
b39c48fa 2524 BIT(NL80211_STA_FLAG_AUTHORIZED)))
a97f4424
JB		 2525 err = -EINVAL;
2526 break;
2527 default:
2528 err = -EINVAL;
034d655e
JB		 2529 }
2530
5727ef1b
JB		 2531 if (err)
2532 goto out;
2533
79c97e97 2534 if (!rdev->ops->change_station) {
5727ef1b
JB		 2535 err = -EOPNOTSUPP;
2536 goto out;
2537 }
2538
79c97e97 2539 err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b
JB		 2540
2541 out:
2542 if (params.vlan)
2543 dev_put(params.vlan);
3b85875a 2544
5727ef1b
JB		 2545 return err;
2546}
2547
2548static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
2549{
4c476991 2550 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2551 int err;
4c476991 2552 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2553 struct station_parameters params;
2554 u8 *mac_addr = NULL;
2555
2556 memset(&params, 0, sizeof(params));
2557
2558 if (!info->attrs[NL80211_ATTR_MAC])
2559 return -EINVAL;
2560
5727ef1b
JB		 2561 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
2562 return -EINVAL;
2563
2564 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
2565 return -EINVAL;
2566
0e956c13
TLSC		 2567 if (!info->attrs[NL80211_ATTR_STA_AID])
2568 return -EINVAL;
2569
5727ef1b
JB		 2570 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2571 params.supported_rates =
2572 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2573 params.supported_rates_len =
2574 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2575 params.listen_interval =
2576 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 2577
0e956c13
TLSC		 2578 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
2579 if (!params.aid || params.aid > IEEE80211_MAX_AID)
2580 return -EINVAL;
51b50fbe 2581
36aedc90
JM		 2582 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2583 params.ht_capa =
2584 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 2585
96b78dff
JC		 2586 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2587 params.plink_action =
2588 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2589
eccb8e8f 2590 if (parse_station_flags(info, &params))
5727ef1b
JB		 2591 return -EINVAL;
2592
0e956c13 2593 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
074ac8df 2594 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
96b78dff 2595 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 2596 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2597 return -EINVAL;
0e956c13 2598
463d0183 2599 err = get_vlan(info, rdev, &params.vlan);
a97f4424 2600 if (err)
e80cf853 2601 goto out;
a97f4424
JB		 2602
2603 /* validate settings */
2604 err = 0;
2605
79c97e97 2606 if (!rdev->ops->add_station) {
5727ef1b
JB		 2607 err = -EOPNOTSUPP;
2608 goto out;
2609 }
2610
79c97e97 2611 err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b
JB		 2612
2613 out:
2614 if (params.vlan)
2615 dev_put(params.vlan);
5727ef1b
JB		 2616 return err;
2617}
2618
2619static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
2620{
4c476991
JB		 2621 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2622 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2623 u8 *mac_addr = NULL;
2624
2625 if (info->attrs[NL80211_ATTR_MAC])
2626 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2627
e80cf853 2628 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 2629 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 2630 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 2631 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2632 return -EINVAL;
5727ef1b 2633
4c476991
JB		 2634 if (!rdev->ops->del_station)
2635 return -EOPNOTSUPP;
3b85875a 2636
4c476991 2637 return rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
5727ef1b
JB		 2638}
2639
2ec600d6
LCC		 2640static int nl80211_send_mpath(struct sk_buff *msg, u32 pid, u32 seq,
2641 int flags, struct net_device *dev,
2642 u8 *dst, u8 *next_hop,
2643 struct mpath_info *pinfo)
2644{
2645 void *hdr;
2646 struct nlattr *pinfoattr;
2647
2648 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2649 if (!hdr)
2650 return -1;
2651
2652 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2653 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, dst);
2654 NLA_PUT(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop);
2655
f5ea9120
JB		 2656 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, pinfo->generation);
2657
2ec600d6
LCC		 2658 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
2659 if (!pinfoattr)
2660 goto nla_put_failure;
2661 if (pinfo->filled & MPATH_INFO_FRAME_QLEN)
2662 NLA_PUT_U32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
2663 pinfo->frame_qlen);
d19b3bf6
RP		 2664 if (pinfo->filled & MPATH_INFO_SN)
2665 NLA_PUT_U32(msg, NL80211_MPATH_INFO_SN,
2666 pinfo->sn);
2ec600d6
LCC		 2667 if (pinfo->filled & MPATH_INFO_METRIC)
2668 NLA_PUT_U32(msg, NL80211_MPATH_INFO_METRIC,
2669 pinfo->metric);
2670 if (pinfo->filled & MPATH_INFO_EXPTIME)
2671 NLA_PUT_U32(msg, NL80211_MPATH_INFO_EXPTIME,
2672 pinfo->exptime);
2673 if (pinfo->filled & MPATH_INFO_FLAGS)
2674 NLA_PUT_U8(msg, NL80211_MPATH_INFO_FLAGS,
2675 pinfo->flags);
2676 if (pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT)
2677 NLA_PUT_U32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
2678 pinfo->discovery_timeout);
2679 if (pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES)
2680 NLA_PUT_U8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
2681 pinfo->discovery_retries);
2682
2683 nla_nest_end(msg, pinfoattr);
2684
2685 return genlmsg_end(msg, hdr);
2686
2687 nla_put_failure:
bc3ed28c
TG		 2688 genlmsg_cancel(msg, hdr);
2689 return -EMSGSIZE;
2ec600d6
LCC		 2690}
2691
2692static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 2693 struct netlink_callback *cb)
2ec600d6 2694{
2ec600d6
LCC		 2695 struct mpath_info pinfo;
2696 struct cfg80211_registered_device *dev;
bba95fef 2697 struct net_device *netdev;
2ec600d6
LCC		 2698 u8 dst[ETH_ALEN];
2699 u8 next_hop[ETH_ALEN];
bba95fef 2700 int path_idx = cb->args[1];
2ec600d6 2701 int err;
2ec600d6 2702
67748893
JB		 2703 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2704 if (err)
2705 return err;
bba95fef
JB		 2706
2707 if (!dev->ops->dump_mpath) {
eec60b03 2708 err = -EOPNOTSUPP;
bba95fef
JB		 2709 goto out_err;
2710 }
2711
eec60b03
JM		 2712 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2713 err = -EOPNOTSUPP;
0448b5fc 2714 goto out_err;
eec60b03
JM		 2715 }
2716
bba95fef
JB		 2717 while (1) {
2718 err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
2719 dst, next_hop, &pinfo);
2720 if (err == -ENOENT)
2ec600d6 2721 break;
bba95fef 2722 if (err)
3b85875a 2723 goto out_err;
2ec600d6 2724
bba95fef
JB		 2725 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).pid,
2726 cb->nlh->nlmsg_seq, NLM_F_MULTI,
2727 netdev, dst, next_hop,
2728 &pinfo) < 0)
2729 goto out;
2ec600d6 2730
bba95fef 2731 path_idx++;
2ec600d6 2732 }
2ec600d6 2733
2ec600d6 2734
bba95fef
JB		 2735 out:
2736 cb->args[1] = path_idx;
2737 err = skb->len;
bba95fef 2738 out_err:
67748893 2739 nl80211_finish_netdev_dump(dev);
bba95fef 2740 return err;
2ec600d6
LCC		 2741}
2742
2743static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
2744{
4c476991 2745 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 2746 int err;
4c476991 2747 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2748 struct mpath_info pinfo;
2749 struct sk_buff *msg;
2750 u8 *dst = NULL;
2751 u8 next_hop[ETH_ALEN];
2752
2753 memset(&pinfo, 0, sizeof(pinfo));
2754
2755 if (!info->attrs[NL80211_ATTR_MAC])
2756 return -EINVAL;
2757
2758 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2759
4c476991
JB		 2760 if (!rdev->ops->get_mpath)
2761 return -EOPNOTSUPP;
2ec600d6 2762
4c476991
JB		 2763 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2764 return -EOPNOTSUPP;
eec60b03 2765
79c97e97 2766 err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
2ec600d6 2767 if (err)
4c476991 2768 return err;
2ec600d6 2769
fd2120ca 2770 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 2771 if (!msg)
4c476991 2772 return -ENOMEM;
2ec600d6
LCC		 2773
2774 if (nl80211_send_mpath(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 2775 dev, dst, next_hop, &pinfo) < 0) {
2776 nlmsg_free(msg);
2777 return -ENOBUFS;
2778 }
3b85875a 2779
4c476991 2780 return genlmsg_reply(msg, info);
2ec600d6
LCC		 2781}
2782
2783static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
2784{
4c476991
JB		 2785 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2786 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2787 u8 *dst = NULL;
2788 u8 *next_hop = NULL;
2789
2790 if (!info->attrs[NL80211_ATTR_MAC])
2791 return -EINVAL;
2792
2793 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2794 return -EINVAL;
2795
2796 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2797 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2798
4c476991
JB		 2799 if (!rdev->ops->change_mpath)
2800 return -EOPNOTSUPP;
35a8efe1 2801
4c476991
JB		 2802 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2803 return -EOPNOTSUPP;
2ec600d6 2804
4c476991 2805 return rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6 2806}
4c476991 2807
2ec600d6
LCC		 2808static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
2809{
4c476991
JB		 2810 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2811 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2812 u8 *dst = NULL;
2813 u8 *next_hop = NULL;
2814
2815 if (!info->attrs[NL80211_ATTR_MAC])
2816 return -EINVAL;
2817
2818 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2819 return -EINVAL;
2820
2821 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2822 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2823
4c476991
JB		 2824 if (!rdev->ops->add_mpath)
2825 return -EOPNOTSUPP;
35a8efe1 2826
4c476991
JB		 2827 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2828 return -EOPNOTSUPP;
2ec600d6 2829
4c476991 2830 return rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6
LCC		 2831}
2832
2833static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
2834{
4c476991
JB		 2835 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2836 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2837 u8 *dst = NULL;
2838
2839 if (info->attrs[NL80211_ATTR_MAC])
2840 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2841
4c476991
JB		 2842 if (!rdev->ops->del_mpath)
2843 return -EOPNOTSUPP;
3b85875a 2844
4c476991 2845 return rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
2ec600d6
LCC		 2846}
2847
9f1ba906
JM		 2848static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
2849{
4c476991
JB		 2850 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2851 struct net_device *dev = info->user_ptr[1];
9f1ba906
JM		 2852 struct bss_parameters params;
2853
2854 memset(&params, 0, sizeof(params));
2855 /* default to not changing parameters */
2856 params.use_cts_prot = -1;
2857 params.use_short_preamble = -1;
2858 params.use_short_slot_time = -1;
fd8aaaf3 2859 params.ap_isolate = -1;
50b12f59 2860 params.ht_opmode = -1;
9f1ba906
JM		 2861
2862 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
2863 params.use_cts_prot =
2864 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
2865 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
2866 params.use_short_preamble =
2867 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
2868 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
2869 params.use_short_slot_time =
2870 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 2871 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
2872 params.basic_rates =
2873 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2874 params.basic_rates_len =
2875 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2876 }
fd8aaaf3
FF		 2877 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
2878 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 2879 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
2880 params.ht_opmode =
2881 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 2882
4c476991
JB		 2883 if (!rdev->ops->change_bss)
2884 return -EOPNOTSUPP;
9f1ba906 2885
074ac8df 2886 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2887 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2888 return -EOPNOTSUPP;
3b85875a 2889
4c476991 2890 return rdev->ops->change_bss(&rdev->wiphy, dev, &params);
9f1ba906
JM		 2891}
2892
b54452b0 2893static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
b2e1b302
LR		 2894 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
2895 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
2896 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
2897 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
2898 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
2899 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
2900};
2901
2902static int parse_reg_rule(struct nlattr *tb[],
2903 struct ieee80211_reg_rule *reg_rule)
2904{
2905 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
2906 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
2907
2908 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
2909 return -EINVAL;
2910 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
2911 return -EINVAL;
2912 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
2913 return -EINVAL;
2914 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
2915 return -EINVAL;
2916 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
2917 return -EINVAL;
2918
2919 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
2920
2921 freq_range->start_freq_khz =
2922 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
2923 freq_range->end_freq_khz =
2924 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
2925 freq_range->max_bandwidth_khz =
2926 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
2927
2928 power_rule->max_eirp =
2929 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
2930
2931 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
2932 power_rule->max_antenna_gain =
2933 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
2934
2935 return 0;
2936}
2937
2938static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
2939{
2940 int r;
2941 char *data = NULL;
2942
80778f18
LR		 2943 /*
2944 * You should only get this when cfg80211 hasn't yet initialized
2945 * completely when built-in to the kernel right between the time
2946 * window between nl80211_init() and regulatory_init(), if that is
2947 * even possible.
2948 */
2949 mutex_lock(&cfg80211_mutex);
2950 if (unlikely(!cfg80211_regdomain)) {
fe33eb39
LR		 2951 mutex_unlock(&cfg80211_mutex);
2952 return -EINPROGRESS;
80778f18 2953 }
fe33eb39 2954 mutex_unlock(&cfg80211_mutex);
80778f18 2955
fe33eb39
LR		 2956 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
2957 return -EINVAL;
b2e1b302
LR		 2958
2959 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
2960
fe33eb39
LR		 2961 r = regulatory_hint_user(data);
2962
b2e1b302
LR		 2963 return r;
2964}
2965
24bdd9f4 2966static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 2967 struct genl_info *info)
93da9cc1 2968{
4c476991 2969 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 2970 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 2971 struct wireless_dev *wdev = dev->ieee80211_ptr;
2972 struct mesh_config cur_params;
2973 int err = 0;
93da9cc1 2974 void *hdr;
2975 struct nlattr *pinfoattr;
2976 struct sk_buff *msg;
2977
29cbe68c
JB		 2978 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
2979 return -EOPNOTSUPP;
2980
24bdd9f4 2981 if (!rdev->ops->get_mesh_config)
4c476991 2982 return -EOPNOTSUPP;
f3f92586 2983
29cbe68c
JB		 2984 wdev_lock(wdev);
2985 /* If not connected, get default parameters */
2986 if (!wdev->mesh_id_len)
2987 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
2988 else
24bdd9f4 2989 err = rdev->ops->get_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 2990 &cur_params);
2991 wdev_unlock(wdev);
2992
93da9cc1 2993 if (err)
4c476991 2994 return err;
93da9cc1 2995
2996 /* Draw up a netlink message to send back */
fd2120ca 2997 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 2998 if (!msg)
2999 return -ENOMEM;
93da9cc1 3000 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
24bdd9f4 3001 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 3002 if (!hdr)
efe1cf0c 3003 goto out;
24bdd9f4 3004 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 3005 if (!pinfoattr)
3006 goto nla_put_failure;
3007 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
3008 NLA_PUT_U16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
3009 cur_params.dot11MeshRetryTimeout);
3010 NLA_PUT_U16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3011 cur_params.dot11MeshConfirmTimeout);
3012 NLA_PUT_U16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
3013 cur_params.dot11MeshHoldingTimeout);
3014 NLA_PUT_U16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
3015 cur_params.dot11MeshMaxPeerLinks);
3016 NLA_PUT_U8(msg, NL80211_MESHCONF_MAX_RETRIES,
3017 cur_params.dot11MeshMaxRetries);
3018 NLA_PUT_U8(msg, NL80211_MESHCONF_TTL,
3019 cur_params.dot11MeshTTL);
45904f21
JC		 3020 NLA_PUT_U8(msg, NL80211_MESHCONF_ELEMENT_TTL,
3021 cur_params.element_ttl);
93da9cc1 3022 NLA_PUT_U8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3023 cur_params.auto_open_plinks);
3024 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3025 cur_params.dot11MeshHWMPmaxPREQretries);
3026 NLA_PUT_U32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
3027 cur_params.path_refresh_time);
3028 NLA_PUT_U16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3029 cur_params.min_discovery_timeout);
3030 NLA_PUT_U32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3031 cur_params.dot11MeshHWMPactivePathTimeout);
3032 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3033 cur_params.dot11MeshHWMPpreqMinInterval);
3034 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3035 cur_params.dot11MeshHWMPnetDiameterTraversalTime);
63c5723b
RP		 3036 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
3037 cur_params.dot11MeshHWMPRootMode);
0507e159
JC		 3038 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3039 cur_params.dot11MeshHWMPRannInterval);
16dd7267
JC		 3040 NLA_PUT_U8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3041 cur_params.dot11MeshGateAnnouncementProtocol);
93da9cc1 3042 nla_nest_end(msg, pinfoattr);
3043 genlmsg_end(msg, hdr);
4c476991 3044 return genlmsg_reply(msg, info);
93da9cc1 3045
3b85875a 3046 nla_put_failure:
93da9cc1 3047 genlmsg_cancel(msg, hdr);
efe1cf0c 3048 out:
d080e275 3049 nlmsg_free(msg);
4c476991 3050 return -ENOBUFS;
93da9cc1 3051}
3052
b54452b0 3053static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
93da9cc1 3054 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
3055 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
3056 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
3057 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
3058 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
3059 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
45904f21 3060 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
93da9cc1 3061 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
3062
3063 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
3064 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
3065 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
3066 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
3067 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
3068 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
699403db 3069 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
0507e159 3070 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
16dd7267 3071 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
93da9cc1 3072};
3073
c80d545d
JC		 3074static const struct nla_policy
3075 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
3076 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
3077 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 3078 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
581a8b0f 3079 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
c80d545d 3080 .len = IEEE80211_MAX_DATA_LEN },
b130e5ce 3081 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 3082};
3083
24bdd9f4 3084static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 3085 struct mesh_config *cfg,
3086 u32 *mask_out)
93da9cc1 3087{
93da9cc1 3088 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 3089 u32 mask = 0;
93da9cc1 3090
bd90fdcc
JB		 3091#define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
3092do {\
3093 if (table[attr_num]) {\
3094 cfg->param = nla_fn(table[attr_num]); \
3095 mask |= (1 << (attr_num - 1)); \
3096 } \
3097} while (0);\
3098
3099
24bdd9f4 3100 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 3101 return -EINVAL;
3102 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
24bdd9f4 3103 info->attrs[NL80211_ATTR_MESH_CONFIG],
bd90fdcc 3104 nl80211_meshconf_params_policy))
93da9cc1 3105 return -EINVAL;
3106
93da9cc1 3107 /* This makes sure that there aren't more than 32 mesh config
3108 * parameters (otherwise our bitfield scheme would not work.) */
3109 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
3110
3111 /* Fill in the params struct */
93da9cc1 3112 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
3113 mask, NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
3114 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
3115 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT, nla_get_u16);
3116 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
3117 mask, NL80211_MESHCONF_HOLDING_TIMEOUT, nla_get_u16);
3118 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
3119 mask, NL80211_MESHCONF_MAX_PEER_LINKS, nla_get_u16);
3120 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
3121 mask, NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
3122 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
3123 mask, NL80211_MESHCONF_TTL, nla_get_u8);
45904f21
JC		 3124 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl,
3125 mask, NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
93da9cc1 3126 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
3127 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS, nla_get_u8);
3128 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
3129 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3130 nla_get_u8);
3131 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
3132 mask, NL80211_MESHCONF_PATH_REFRESH_TIME, nla_get_u32);
3133 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
3134 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3135 nla_get_u16);
3136 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
3137 mask, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3138 nla_get_u32);
3139 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
3140 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3141 nla_get_u16);
3142 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3143 dot11MeshHWMPnetDiameterTraversalTime,
3144 mask, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3145 nla_get_u16);
63c5723b
RP		 3146 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3147 dot11MeshHWMPRootMode, mask,
3148 NL80211_MESHCONF_HWMP_ROOTMODE,
3149 nla_get_u8);
0507e159
JC		 3150 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3151 dot11MeshHWMPRannInterval, mask,
3152 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3153 nla_get_u16);
16dd7267
JC		 3154 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3155 dot11MeshGateAnnouncementProtocol, mask,
3156 NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3157 nla_get_u8);
bd90fdcc
JB		 3158 if (mask_out)
3159 *mask_out = mask;
c80d545d 3160
bd90fdcc
JB		 3161 return 0;
3162
3163#undef FILL_IN_MESH_PARAM_IF_SET
3164}
3165
c80d545d
JC		 3166static int nl80211_parse_mesh_setup(struct genl_info *info,
3167 struct mesh_setup *setup)
3168{
3169 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
3170
3171 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
3172 return -EINVAL;
3173 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
3174 info->attrs[NL80211_ATTR_MESH_SETUP],
3175 nl80211_mesh_setup_params_policy))
3176 return -EINVAL;
3177
3178 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
3179 setup->path_sel_proto =
3180 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
3181 IEEE80211_PATH_PROTOCOL_VENDOR :
3182 IEEE80211_PATH_PROTOCOL_HWMP;
3183
3184 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
3185 setup->path_metric =
3186 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
3187 IEEE80211_PATH_METRIC_VENDOR :
3188 IEEE80211_PATH_METRIC_AIRTIME;
3189
581a8b0f
JC		 3190
3191 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 3192 struct nlattr *ieattr =
581a8b0f 3193 tb[NL80211_MESH_SETUP_IE];
c80d545d
JC		 3194 if (!is_valid_ie_attr(ieattr))
3195 return -EINVAL;
581a8b0f
JC		 3196 setup->ie = nla_data(ieattr);
3197 setup->ie_len = nla_len(ieattr);
c80d545d 3198 }
b130e5ce
JC		 3199 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
3200 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
c80d545d
JC		 3201
3202 return 0;
3203}
3204
24bdd9f4 3205static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 3206 struct genl_info *info)
bd90fdcc
JB		 3207{
3208 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3209 struct net_device *dev = info->user_ptr[1];
29cbe68c 3210 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 3211 struct mesh_config cfg;
3212 u32 mask;
3213 int err;
3214
29cbe68c
JB		 3215 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3216 return -EOPNOTSUPP;
3217
24bdd9f4 3218 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 3219 return -EOPNOTSUPP;
3220
24bdd9f4 3221 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 3222 if (err)
3223 return err;
3224
29cbe68c
JB		 3225 wdev_lock(wdev);
3226 if (!wdev->mesh_id_len)
3227 err = -ENOLINK;
3228
3229 if (!err)
24bdd9f4 3230 err = rdev->ops->update_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3231 mask, &cfg);
3232
3233 wdev_unlock(wdev);
3234
3235 return err;
93da9cc1 3236}
3237
f130347c
LR		 3238static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
3239{
3240 struct sk_buff *msg;
3241 void *hdr = NULL;
3242 struct nlattr *nl_reg_rules;
3243 unsigned int i;
3244 int err = -EINVAL;
3245
a1794390 3246 mutex_lock(&cfg80211_mutex);
f130347c
LR		 3247
3248 if (!cfg80211_regdomain)
3249 goto out;
3250
fd2120ca 3251 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 3252 if (!msg) {
3253 err = -ENOBUFS;
3254 goto out;
3255 }
3256
3257 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
3258 NL80211_CMD_GET_REG);
3259 if (!hdr)
efe1cf0c 3260 goto put_failure;
f130347c
LR		 3261
3262 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2,
3263 cfg80211_regdomain->alpha2);
3264
3265 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
3266 if (!nl_reg_rules)
3267 goto nla_put_failure;
3268
3269 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
3270 struct nlattr *nl_reg_rule;
3271 const struct ieee80211_reg_rule *reg_rule;
3272 const struct ieee80211_freq_range *freq_range;
3273 const struct ieee80211_power_rule *power_rule;
3274
3275 reg_rule = &cfg80211_regdomain->reg_rules[i];
3276 freq_range = &reg_rule->freq_range;
3277 power_rule = &reg_rule->power_rule;
3278
3279 nl_reg_rule = nla_nest_start(msg, i);
3280 if (!nl_reg_rule)
3281 goto nla_put_failure;
3282
3283 NLA_PUT_U32(msg, NL80211_ATTR_REG_RULE_FLAGS,
3284 reg_rule->flags);
3285 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_START,
3286 freq_range->start_freq_khz);
3287 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_END,
3288 freq_range->end_freq_khz);
3289 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
3290 freq_range->max_bandwidth_khz);
3291 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
3292 power_rule->max_antenna_gain);
3293 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
3294 power_rule->max_eirp);
3295
3296 nla_nest_end(msg, nl_reg_rule);
3297 }
3298
3299 nla_nest_end(msg, nl_reg_rules);
3300
3301 genlmsg_end(msg, hdr);
134e6375 3302 err = genlmsg_reply(msg, info);
f130347c
LR		 3303 goto out;
3304
3305nla_put_failure:
3306 genlmsg_cancel(msg, hdr);
efe1cf0c 3307put_failure:
d080e275 3308 nlmsg_free(msg);
f130347c
LR		 3309 err = -EMSGSIZE;
3310out:
a1794390 3311 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 3312 return err;
3313}
3314
b2e1b302
LR		 3315static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
3316{
3317 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
3318 struct nlattr *nl_reg_rule;
3319 char *alpha2 = NULL;
3320 int rem_reg_rules = 0, r = 0;
3321 u32 num_rules = 0, rule_idx = 0, size_of_regd;
3322 struct ieee80211_regdomain *rd = NULL;
3323
3324 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3325 return -EINVAL;
3326
3327 if (!info->attrs[NL80211_ATTR_REG_RULES])
3328 return -EINVAL;
3329
3330 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3331
3332 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
3333 rem_reg_rules) {
3334 num_rules++;
3335 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 3336 return -EINVAL;
b2e1b302
LR		 3337 }
3338
61405e97
LR		 3339 mutex_lock(&cfg80211_mutex);
3340
d0e18f83
LR		 3341 if (!reg_is_valid_request(alpha2)) {
3342 r = -EINVAL;
3343 goto bad_reg;
3344 }
b2e1b302
LR		 3345
3346 size_of_regd = sizeof(struct ieee80211_regdomain) +
3347 (num_rules * sizeof(struct ieee80211_reg_rule));
3348
3349 rd = kzalloc(size_of_regd, GFP_KERNEL);
d0e18f83
LR		 3350 if (!rd) {
3351 r = -ENOMEM;
3352 goto bad_reg;
3353 }
b2e1b302
LR		 3354
3355 rd->n_reg_rules = num_rules;
3356 rd->alpha2[0] = alpha2[0];
3357 rd->alpha2[1] = alpha2[1];
3358
3359 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
3360 rem_reg_rules) {
3361 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
3362 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
3363 reg_rule_policy);
3364 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
3365 if (r)
3366 goto bad_reg;
3367
3368 rule_idx++;
3369
d0e18f83
LR		 3370 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
3371 r = -EINVAL;
b2e1b302 3372 goto bad_reg;
d0e18f83 3373 }
b2e1b302
LR		 3374 }
3375
3376 BUG_ON(rule_idx != num_rules);
3377
b2e1b302 3378 r = set_regdom(rd);
61405e97 3379
a1794390 3380 mutex_unlock(&cfg80211_mutex);
d0e18f83 3381
b2e1b302
LR		 3382 return r;
3383
d2372b31 3384 bad_reg:
61405e97 3385 mutex_unlock(&cfg80211_mutex);
b2e1b302 3386 kfree(rd);
d0e18f83 3387 return r;
b2e1b302
LR		 3388}
3389
83f5e2cf
JB		 3390static int validate_scan_freqs(struct nlattr *freqs)
3391{
3392 struct nlattr *attr1, *attr2;
3393 int n_channels = 0, tmp1, tmp2;
3394
3395 nla_for_each_nested(attr1, freqs, tmp1) {
3396 n_channels++;
3397 /*
3398 * Some hardware has a limited channel list for
3399 * scanning, and it is pretty much nonsensical
3400 * to scan for a channel twice, so disallow that
3401 * and don't require drivers to check that the
3402 * channel list they get isn't longer than what
3403 * they can scan, as long as they can scan all
3404 * the channels they registered at once.
3405 */
3406 nla_for_each_nested(attr2, freqs, tmp2)
3407 if (attr1 != attr2 &&
3408 nla_get_u32(attr1) == nla_get_u32(attr2))
3409 return 0;
3410 }
3411
3412 return n_channels;
3413}
3414
2a519311
JB		 3415static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
3416{
4c476991
JB		 3417 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3418 struct net_device *dev = info->user_ptr[1];
2a519311 3419 struct cfg80211_scan_request *request;
2a519311
JB		 3420 struct nlattr *attr;
3421 struct wiphy *wiphy;
83f5e2cf 3422 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 3423 size_t ie_len;
2a519311 3424
f4a11bb0
JB		 3425 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3426 return -EINVAL;
3427
79c97e97 3428 wiphy = &rdev->wiphy;
2a519311 3429
4c476991
JB		 3430 if (!rdev->ops->scan)
3431 return -EOPNOTSUPP;
2a519311 3432
4c476991
JB		 3433 if (rdev->scan_req)
3434 return -EBUSY;
2a519311
JB		 3435
3436 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 3437 n_channels = validate_scan_freqs(
3438 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4c476991
JB		 3439 if (!n_channels)
3440 return -EINVAL;
2a519311 3441 } else {
34850ab2 3442 enum ieee80211_band band;
83f5e2cf
JB		 3443 n_channels = 0;
3444
2a519311
JB		 3445 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
3446 if (wiphy->bands[band])
3447 n_channels += wiphy->bands[band]->n_channels;
3448 }
3449
3450 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
3451 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
3452 n_ssids++;
3453
4c476991
JB		 3454 if (n_ssids > wiphy->max_scan_ssids)
3455 return -EINVAL;
2a519311 3456
70692ad2
JM		 3457 if (info->attrs[NL80211_ATTR_IE])
3458 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3459 else
3460 ie_len = 0;
3461
4c476991
JB		 3462 if (ie_len > wiphy->max_scan_ie_len)
3463 return -EINVAL;
18a83659 3464
2a519311 3465 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 3466 + sizeof(*request->ssids) * n_ssids
3467 + sizeof(*request->channels) * n_channels
70692ad2 3468 + ie_len, GFP_KERNEL);
4c476991
JB		 3469 if (!request)
3470 return -ENOMEM;
2a519311 3471
2a519311 3472 if (n_ssids)
5ba63533 3473 request->ssids = (void *)&request->channels[n_channels];
2a519311 3474 request->n_ssids = n_ssids;
70692ad2
JM		 3475 if (ie_len) {
3476 if (request->ssids)
3477 request->ie = (void *)(request->ssids + n_ssids);
3478 else
3479 request->ie = (void *)(request->channels + n_channels);
3480 }
2a519311 3481
584991dc 3482 i = 0;
2a519311
JB		 3483 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3484 /* user specified, bail out if channel not found */
2a519311 3485 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 3486 struct ieee80211_channel *chan;
3487
3488 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3489
3490 if (!chan) {
2a519311
JB		 3491 err = -EINVAL;
3492 goto out_free;
3493 }
584991dc
JB		 3494
3495 /* ignore disabled channels */
3496 if (chan->flags & IEEE80211_CHAN_DISABLED)
3497 continue;
3498
3499 request->channels[i] = chan;
2a519311
JB		 3500 i++;
3501 }
3502 } else {
34850ab2
JB		 3503 enum ieee80211_band band;
3504
2a519311 3505 /* all channels */
2a519311
JB		 3506 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3507 int j;
3508 if (!wiphy->bands[band])
3509 continue;
3510 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 3511 struct ieee80211_channel *chan;
3512
3513 chan = &wiphy->bands[band]->channels[j];
3514
3515 if (chan->flags & IEEE80211_CHAN_DISABLED)
3516 continue;
3517
3518 request->channels[i] = chan;
2a519311
JB		 3519 i++;
3520 }
3521 }
3522 }
3523
584991dc
JB		 3524 if (!i) {
3525 err = -EINVAL;
3526 goto out_free;
3527 }
3528
3529 request->n_channels = i;
3530
2a519311
JB		 3531 i = 0;
3532 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
3533 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 3534 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 3535 err = -EINVAL;
3536 goto out_free;
3537 }
57a27e1d 3538 request->ssids[i].ssid_len = nla_len(attr);
2a519311 3539 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 3540 i++;
3541 }
3542 }
3543
70692ad2
JM		 3544 if (info->attrs[NL80211_ATTR_IE]) {
3545 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 3546 memcpy((void *)request->ie,
3547 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 3548 request->ie_len);
3549 }
3550
34850ab2 3551 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
a401d2bb
JB		 3552 if (wiphy->bands[i])
3553 request->rates[i] =
3554 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 3555
3556 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
3557 nla_for_each_nested(attr,
3558 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
3559 tmp) {
3560 enum ieee80211_band band = nla_type(attr);
3561
84404623 3562 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
34850ab2
JB		 3563 err = -EINVAL;
3564 goto out_free;
3565 }
3566 err = ieee80211_get_ratemask(wiphy->bands[band],
3567 nla_data(attr),
3568 nla_len(attr),
3569 &request->rates[band]);
3570 if (err)
3571 goto out_free;
3572 }
3573 }
3574
463d0183 3575 request->dev = dev;
79c97e97 3576 request->wiphy = &rdev->wiphy;
2a519311 3577
79c97e97
JB		 3578 rdev->scan_req = request;
3579 err = rdev->ops->scan(&rdev->wiphy, dev, request);
2a519311 3580
463d0183 3581 if (!err) {
79c97e97 3582 nl80211_send_scan_start(rdev, dev);
463d0183 3583 dev_hold(dev);
4c476991 3584 } else {
2a519311 3585 out_free:
79c97e97 3586 rdev->scan_req = NULL;
2a519311
JB		 3587 kfree(request);
3588 }
3b85875a 3589
2a519311
JB		 3590 return err;
3591}
3592
807f8a8c
LC		 3593static int nl80211_start_sched_scan(struct sk_buff *skb,
3594 struct genl_info *info)
3595{
3596 struct cfg80211_sched_scan_request *request;
3597 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3598 struct net_device *dev = info->user_ptr[1];
807f8a8c
LC		 3599 struct nlattr *attr;
3600 struct wiphy *wiphy;
3601 int err, tmp, n_ssids = 0, n_channels, i;
bbe6ad6d 3602 u32 interval;
807f8a8c
LC		 3603 enum ieee80211_band band;
3604 size_t ie_len;
3605
3606 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
3607 !rdev->ops->sched_scan_start)
3608 return -EOPNOTSUPP;
3609
3610 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3611 return -EINVAL;
3612
bbe6ad6d
LC		 3613 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
3614 return -EINVAL;
3615
3616 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
3617 if (interval == 0)
3618 return -EINVAL;
3619
807f8a8c
LC		 3620 wiphy = &rdev->wiphy;
3621
3622 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3623 n_channels = validate_scan_freqs(
3624 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
3625 if (!n_channels)
3626 return -EINVAL;
3627 } else {
3628 n_channels = 0;
3629
3630 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
3631 if (wiphy->bands[band])
3632 n_channels += wiphy->bands[band]->n_channels;
3633 }
3634
3635 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
3636 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
3637 tmp)
3638 n_ssids++;
3639
93b6aa69 3640 if (n_ssids > wiphy->max_sched_scan_ssids)
807f8a8c
LC		 3641 return -EINVAL;
3642
3643 if (info->attrs[NL80211_ATTR_IE])
3644 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3645 else
3646 ie_len = 0;
3647
5a865bad 3648 if (ie_len > wiphy->max_sched_scan_ie_len)
807f8a8c
LC		 3649 return -EINVAL;
3650
c10841ca
LC		 3651 mutex_lock(&rdev->sched_scan_mtx);
3652
3653 if (rdev->sched_scan_req) {
3654 err = -EINPROGRESS;
3655 goto out;
3656 }
3657
807f8a8c 3658 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 3659 + sizeof(*request->ssids) * n_ssids
3660 + sizeof(*request->channels) * n_channels
807f8a8c 3661 + ie_len, GFP_KERNEL);
c10841ca
LC		 3662 if (!request) {
3663 err = -ENOMEM;
3664 goto out;
3665 }
807f8a8c
LC		 3666
3667 if (n_ssids)
3668 request->ssids = (void *)&request->channels[n_channels];
3669 request->n_ssids = n_ssids;
3670 if (ie_len) {
3671 if (request->ssids)
3672 request->ie = (void *)(request->ssids + n_ssids);
3673 else
3674 request->ie = (void *)(request->channels + n_channels);
3675 }
3676
3677 i = 0;
3678 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3679 /* user specified, bail out if channel not found */
3680 nla_for_each_nested(attr,
3681 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
3682 tmp) {
3683 struct ieee80211_channel *chan;
3684
3685 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3686
3687 if (!chan) {
3688 err = -EINVAL;
3689 goto out_free;
3690 }
3691
3692 /* ignore disabled channels */
3693 if (chan->flags & IEEE80211_CHAN_DISABLED)
3694 continue;
3695
3696 request->channels[i] = chan;
3697 i++;
3698 }
3699 } else {
3700 /* all channels */
3701 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3702 int j;
3703 if (!wiphy->bands[band])
3704 continue;
3705 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
3706 struct ieee80211_channel *chan;
3707
3708 chan = &wiphy->bands[band]->channels[j];
3709
3710 if (chan->flags & IEEE80211_CHAN_DISABLED)
3711 continue;
3712
3713 request->channels[i] = chan;
3714 i++;
3715 }
3716 }
3717 }
3718
3719 if (!i) {
3720 err = -EINVAL;
3721 goto out_free;
3722 }
3723
3724 request->n_channels = i;
3725
3726 i = 0;
3727 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
3728 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
3729 tmp) {
57a27e1d 3730 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 3731 err = -EINVAL;
3732 goto out_free;
3733 }
57a27e1d 3734 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 3735 memcpy(request->ssids[i].ssid, nla_data(attr),
3736 nla_len(attr));
807f8a8c
LC		 3737 i++;
3738 }
3739 }
3740
3741 if (info->attrs[NL80211_ATTR_IE]) {
3742 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3743 memcpy((void *)request->ie,
3744 nla_data(info->attrs[NL80211_ATTR_IE]),
3745 request->ie_len);
3746 }
3747
3748 request->dev = dev;
3749 request->wiphy = &rdev->wiphy;
bbe6ad6d 3750 request->interval = interval;
807f8a8c
LC		 3751
3752 err = rdev->ops->sched_scan_start(&rdev->wiphy, dev, request);
3753 if (!err) {
3754 rdev->sched_scan_req = request;
3755 nl80211_send_sched_scan(rdev, dev,
3756 NL80211_CMD_START_SCHED_SCAN);
3757 goto out;
3758 }
3759
3760out_free:
3761 kfree(request);
3762out:
c10841ca 3763 mutex_unlock(&rdev->sched_scan_mtx);
807f8a8c
LC		 3764 return err;
3765}
3766
3767static int nl80211_stop_sched_scan(struct sk_buff *skb,
3768 struct genl_info *info)
3769{
3770 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c10841ca 3771 int err;
807f8a8c
LC		 3772
3773 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
3774 !rdev->ops->sched_scan_stop)
3775 return -EOPNOTSUPP;
3776
c10841ca
LC		 3777 mutex_lock(&rdev->sched_scan_mtx);
3778 err = __cfg80211_stop_sched_scan(rdev, false);
3779 mutex_unlock(&rdev->sched_scan_mtx);
3780
3781 return err;
807f8a8c
LC		 3782}
3783
9720bb3a
JB		 3784static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
3785 u32 seq, int flags,
2a519311 3786 struct cfg80211_registered_device *rdev,
48ab905d
JB		 3787 struct wireless_dev *wdev,
3788 struct cfg80211_internal_bss *intbss)
2a519311 3789{
48ab905d 3790 struct cfg80211_bss *res = &intbss->pub;
2a519311
JB		 3791 void *hdr;
3792 struct nlattr *bss;
48ab905d
JB		 3793 int i;
3794
3795 ASSERT_WDEV_LOCK(wdev);
2a519311 3796
9720bb3a 3797 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).pid, seq, flags,
2a519311
JB		 3798 NL80211_CMD_NEW_SCAN_RESULTS);
3799 if (!hdr)
3800 return -1;
3801
9720bb3a
JB		 3802 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
3803
f5ea9120 3804 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation);
48ab905d 3805 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex);
2a519311
JB		 3806
3807 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
3808 if (!bss)
3809 goto nla_put_failure;
3810 if (!is_zero_ether_addr(res->bssid))
3811 NLA_PUT(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid);
3812 if (res->information_elements && res->len_information_elements)
3813 NLA_PUT(msg, NL80211_BSS_INFORMATION_ELEMENTS,
3814 res->len_information_elements,
3815 res->information_elements);
34a6eddb
JM		 3816 if (res->beacon_ies && res->len_beacon_ies &&
3817 res->beacon_ies != res->information_elements)
3818 NLA_PUT(msg, NL80211_BSS_BEACON_IES,
3819 res->len_beacon_ies, res->beacon_ies);
2a519311
JB		 3820 if (res->tsf)
3821 NLA_PUT_U64(msg, NL80211_BSS_TSF, res->tsf);
3822 if (res->beacon_interval)
3823 NLA_PUT_U16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval);
3824 NLA_PUT_U16(msg, NL80211_BSS_CAPABILITY, res->capability);
3825 NLA_PUT_U32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq);
7c89606e
HS		 3826 NLA_PUT_U32(msg, NL80211_BSS_SEEN_MS_AGO,
3827 jiffies_to_msecs(jiffies - intbss->ts));
2a519311 3828
77965c97 3829 switch (rdev->wiphy.signal_type) {
2a519311
JB		 3830 case CFG80211_SIGNAL_TYPE_MBM:
3831 NLA_PUT_U32(msg, NL80211_BSS_SIGNAL_MBM, res->signal);
3832 break;
3833 case CFG80211_SIGNAL_TYPE_UNSPEC:
3834 NLA_PUT_U8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal);
3835 break;
3836 default:
3837 break;
3838 }
3839
48ab905d 3840 switch (wdev->iftype) {
074ac8df 3841 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d
JB		 3842 case NL80211_IFTYPE_STATION:
3843 if (intbss == wdev->current_bss)
3844 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3845 NL80211_BSS_STATUS_ASSOCIATED);
3846 else for (i = 0; i < MAX_AUTH_BSSES; i++) {
3847 if (intbss != wdev->auth_bsses[i])
3848 continue;
3849 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3850 NL80211_BSS_STATUS_AUTHENTICATED);
3851 break;
3852 }
3853 break;
3854 case NL80211_IFTYPE_ADHOC:
3855 if (intbss == wdev->current_bss)
3856 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3857 NL80211_BSS_STATUS_IBSS_JOINED);
3858 break;
3859 default:
3860 break;
3861 }
3862
2a519311
JB		 3863 nla_nest_end(msg, bss);
3864
3865 return genlmsg_end(msg, hdr);
3866
3867 nla_put_failure:
3868 genlmsg_cancel(msg, hdr);
3869 return -EMSGSIZE;
3870}
3871
3872static int nl80211_dump_scan(struct sk_buff *skb,
3873 struct netlink_callback *cb)
3874{
48ab905d
JB		 3875 struct cfg80211_registered_device *rdev;
3876 struct net_device *dev;
2a519311 3877 struct cfg80211_internal_bss *scan;
48ab905d 3878 struct wireless_dev *wdev;
2a519311
JB		 3879 int start = cb->args[1], idx = 0;
3880 int err;
3881
67748893
JB		 3882 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
3883 if (err)
3884 return err;
2a519311 3885
48ab905d 3886 wdev = dev->ieee80211_ptr;
2a519311 3887
48ab905d
JB		 3888 wdev_lock(wdev);
3889 spin_lock_bh(&rdev->bss_lock);
3890 cfg80211_bss_expire(rdev);
3891
9720bb3a
JB		 3892 cb->seq = rdev->bss_generation;
3893
48ab905d 3894 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 3895 if (++idx <= start)
3896 continue;
9720bb3a 3897 if (nl80211_send_bss(skb, cb,
2a519311 3898 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 3899 rdev, wdev, scan) < 0) {
2a519311 3900 idx--;
67748893 3901 break;
2a519311
JB		 3902 }
3903 }
3904
48ab905d
JB		 3905 spin_unlock_bh(&rdev->bss_lock);
3906 wdev_unlock(wdev);
2a519311
JB		 3907
3908 cb->args[1] = idx;
67748893 3909 nl80211_finish_netdev_dump(rdev);
2a519311 3910
67748893 3911 return skb->len;
2a519311
JB		 3912}
3913
61fa713c
HS		 3914static int nl80211_send_survey(struct sk_buff *msg, u32 pid, u32 seq,
3915 int flags, struct net_device *dev,
3916 struct survey_info *survey)
3917{
3918 void *hdr;
3919 struct nlattr *infoattr;
3920
61fa713c
HS		 3921 hdr = nl80211hdr_put(msg, pid, seq, flags,
3922 NL80211_CMD_NEW_SURVEY_RESULTS);
3923 if (!hdr)
3924 return -ENOMEM;
3925
3926 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
3927
3928 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
3929 if (!infoattr)
3930 goto nla_put_failure;
3931
3932 NLA_PUT_U32(msg, NL80211_SURVEY_INFO_FREQUENCY,
3933 survey->channel->center_freq);
3934 if (survey->filled & SURVEY_INFO_NOISE_DBM)
3935 NLA_PUT_U8(msg, NL80211_SURVEY_INFO_NOISE,
3936 survey->noise);
17e5a808
FF		 3937 if (survey->filled & SURVEY_INFO_IN_USE)
3938 NLA_PUT_FLAG(msg, NL80211_SURVEY_INFO_IN_USE);
8610c29a
FF		 3939 if (survey->filled & SURVEY_INFO_CHANNEL_TIME)
3940 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
3941 survey->channel_time);
3942 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY)
3943 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
3944 survey->channel_time_busy);
3945 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY)
3946 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
3947 survey->channel_time_ext_busy);
3948 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_RX)
3949 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
3950 survey->channel_time_rx);
3951 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_TX)
3952 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
3953 survey->channel_time_tx);
61fa713c
HS		 3954
3955 nla_nest_end(msg, infoattr);
3956
3957 return genlmsg_end(msg, hdr);
3958
3959 nla_put_failure:
3960 genlmsg_cancel(msg, hdr);
3961 return -EMSGSIZE;
3962}
3963
3964static int nl80211_dump_survey(struct sk_buff *skb,
3965 struct netlink_callback *cb)
3966{
3967 struct survey_info survey;
3968 struct cfg80211_registered_device *dev;
3969 struct net_device *netdev;
61fa713c
HS		 3970 int survey_idx = cb->args[1];
3971 int res;
3972
67748893
JB		 3973 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
3974 if (res)
3975 return res;
61fa713c
HS		 3976
3977 if (!dev->ops->dump_survey) {
3978 res = -EOPNOTSUPP;
3979 goto out_err;
3980 }
3981
3982 while (1) {
180cdc79
LR		 3983 struct ieee80211_channel *chan;
3984
61fa713c
HS		 3985 res = dev->ops->dump_survey(&dev->wiphy, netdev, survey_idx,
3986 &survey);
3987 if (res == -ENOENT)
3988 break;
3989 if (res)
3990 goto out_err;
3991
180cdc79
LR		 3992 /* Survey without a channel doesn't make sense */
3993 if (!survey.channel) {
3994 res = -EINVAL;
3995 goto out;
3996 }
3997
3998 chan = ieee80211_get_channel(&dev->wiphy,
3999 survey.channel->center_freq);
4000 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
4001 survey_idx++;
4002 continue;
4003 }
4004
61fa713c
HS		 4005 if (nl80211_send_survey(skb,
4006 NETLINK_CB(cb->skb).pid,
4007 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4008 netdev,
4009 &survey) < 0)
4010 goto out;
4011 survey_idx++;
4012 }
4013
4014 out:
4015 cb->args[1] = survey_idx;
4016 res = skb->len;
4017 out_err:
67748893 4018 nl80211_finish_netdev_dump(dev);
61fa713c
HS		 4019 return res;
4020}
4021
255e737e
JM		 4022static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type)
4023{
b23aa676
SO		 4024 return auth_type <= NL80211_AUTHTYPE_MAX;
4025}
4026
4027static bool nl80211_valid_wpa_versions(u32 wpa_versions)
4028{
4029 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
4030 NL80211_WPA_VERSION_2));
4031}
4032
4033static bool nl80211_valid_akm_suite(u32 akm)
4034{
4035 return akm == WLAN_AKM_SUITE_8021X ||
4036 akm == WLAN_AKM_SUITE_PSK;
4037}
4038
4039static bool nl80211_valid_cipher_suite(u32 cipher)
4040{
4041 return cipher == WLAN_CIPHER_SUITE_WEP40 ||
4042 cipher == WLAN_CIPHER_SUITE_WEP104 ||
4043 cipher == WLAN_CIPHER_SUITE_TKIP ||
4044 cipher == WLAN_CIPHER_SUITE_CCMP ||
4045 cipher == WLAN_CIPHER_SUITE_AES_CMAC;
255e737e
JM		 4046}
4047
b23aa676 4048
636a5d36
JM		 4049static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
4050{
4c476991
JB		 4051 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4052 struct net_device *dev = info->user_ptr[1];
19957bb3
JB		 4053 struct ieee80211_channel *chan;
4054 const u8 *bssid, *ssid, *ie = NULL;
4055 int err, ssid_len, ie_len = 0;
4056 enum nl80211_auth_type auth_type;
fffd0934 4057 struct key_parse key;
d5cdfacb 4058 bool local_state_change;
636a5d36 4059
f4a11bb0
JB		 4060 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4061 return -EINVAL;
4062
4063 if (!info->attrs[NL80211_ATTR_MAC])
4064 return -EINVAL;
4065
1778092e
JM		 4066 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
4067 return -EINVAL;
4068
19957bb3
JB		 4069 if (!info->attrs[NL80211_ATTR_SSID])
4070 return -EINVAL;
4071
4072 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
4073 return -EINVAL;
4074
fffd0934
JB		 4075 err = nl80211_parse_key(info, &key);
4076 if (err)
4077 return err;
4078
4079 if (key.idx >= 0) {
e31b8213
JB		 4080 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
4081 return -EINVAL;
fffd0934
JB		 4082 if (!key.p.key || !key.p.key_len)
4083 return -EINVAL;
4084 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
4085 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
4086 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
4087 key.p.key_len != WLAN_KEY_LEN_WEP104))
4088 return -EINVAL;
4089 if (key.idx > 4)
4090 return -EINVAL;
4091 } else {
4092 key.p.key_len = 0;
4093 key.p.key = NULL;
4094 }
4095
afea0b7a
JB		 4096 if (key.idx >= 0) {
4097 int i;
4098 bool ok = false;
4099 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
4100 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
4101 ok = true;
4102 break;
4103 }
4104 }
4c476991
JB		 4105 if (!ok)
4106 return -EINVAL;
afea0b7a
JB		 4107 }
4108
4c476991
JB		 4109 if (!rdev->ops->auth)
4110 return -EOPNOTSUPP;
636a5d36 4111
074ac8df 4112 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4113 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4114 return -EOPNOTSUPP;
eec60b03 4115
19957bb3 4116 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 4117 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3 4118 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4119 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4120 return -EINVAL;
636a5d36 4121
19957bb3
JB		 4122 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4123 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4124
4125 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4126 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4127 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4128 }
4129
19957bb3 4130 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4c476991
JB		 4131 if (!nl80211_valid_auth_type(auth_type))
4132 return -EINVAL;
636a5d36 4133
d5cdfacb
JM		 4134 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4135
4c476991
JB		 4136 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
4137 ssid, ssid_len, ie, ie_len,
4138 key.p.key, key.p.key_len, key.idx,
4139 local_state_change);
636a5d36
JM		 4140}
4141
c0692b8f
JB		 4142static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
4143 struct genl_info *info,
3dc27d25
JB		 4144 struct cfg80211_crypto_settings *settings,
4145 int cipher_limit)
b23aa676 4146{
c0b2bbd8
JB		 4147 memset(settings, 0, sizeof(*settings));
4148
b23aa676
SO		 4149 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
4150
c0692b8f
JB		 4151 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
4152 u16 proto;
4153 proto = nla_get_u16(
4154 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
4155 settings->control_port_ethertype = cpu_to_be16(proto);
4156 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
4157 proto != ETH_P_PAE)
4158 return -EINVAL;
4159 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
4160 settings->control_port_no_encrypt = true;
4161 } else
4162 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
4163
b23aa676
SO		 4164 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
4165 void *data;
4166 int len, i;
4167
4168 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4169 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4170 settings->n_ciphers_pairwise = len / sizeof(u32);
4171
4172 if (len % sizeof(u32))
4173 return -EINVAL;
4174
3dc27d25 4175 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 4176 return -EINVAL;
4177
4178 memcpy(settings->ciphers_pairwise, data, len);
4179
4180 for (i = 0; i < settings->n_ciphers_pairwise; i++)
4181 if (!nl80211_valid_cipher_suite(
4182 settings->ciphers_pairwise[i]))
4183 return -EINVAL;
4184 }
4185
4186 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
4187 settings->cipher_group =
4188 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
4189 if (!nl80211_valid_cipher_suite(settings->cipher_group))
4190 return -EINVAL;
4191 }
4192
4193 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
4194 settings->wpa_versions =
4195 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
4196 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
4197 return -EINVAL;
4198 }
4199
4200 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
4201 void *data;
4202 int len, i;
4203
4204 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
4205 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
4206 settings->n_akm_suites = len / sizeof(u32);
4207
4208 if (len % sizeof(u32))
4209 return -EINVAL;
4210
4211 memcpy(settings->akm_suites, data, len);
4212
4213 for (i = 0; i < settings->n_ciphers_pairwise; i++)
4214 if (!nl80211_valid_akm_suite(settings->akm_suites[i]))
4215 return -EINVAL;
4216 }
4217
4218 return 0;
4219}
4220
636a5d36
JM		 4221static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
4222{
4c476991
JB		 4223 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4224 struct net_device *dev = info->user_ptr[1];
19957bb3 4225 struct cfg80211_crypto_settings crypto;
f444de05 4226 struct ieee80211_channel *chan;
3e5d7649 4227 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 4228 int err, ssid_len, ie_len = 0;
4229 bool use_mfp = false;
636a5d36 4230
f4a11bb0
JB		 4231 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4232 return -EINVAL;
4233
4234 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 4235 !info->attrs[NL80211_ATTR_SSID] ||
4236 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 4237 return -EINVAL;
4238
4c476991
JB		 4239 if (!rdev->ops->assoc)
4240 return -EOPNOTSUPP;
636a5d36 4241
074ac8df 4242 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4243 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4244 return -EOPNOTSUPP;
eec60b03 4245
19957bb3 4246 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4247
19957bb3
JB		 4248 chan = ieee80211_get_channel(&rdev->wiphy,
4249 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4250 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4251 return -EINVAL;
636a5d36 4252
19957bb3
JB		 4253 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4254 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4255
4256 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4257 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4258 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4259 }
4260
dc6382ce 4261 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 4262 enum nl80211_mfp mfp =
dc6382ce 4263 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 4264 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 4265 use_mfp = true;
4c476991
JB		 4266 else if (mfp != NL80211_MFP_NO)
4267 return -EINVAL;
dc6382ce
JM		 4268 }
4269
3e5d7649
JB		 4270 if (info->attrs[NL80211_ATTR_PREV_BSSID])
4271 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
4272
c0692b8f 4273 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
b23aa676 4274 if (!err)
3e5d7649
JB		 4275 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
4276 ssid, ssid_len, ie, ie_len, use_mfp,
19957bb3 4277 &crypto);
636a5d36 4278
636a5d36
JM		 4279 return err;
4280}
4281
4282static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
4283{
4c476991
JB		 4284 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4285 struct net_device *dev = info->user_ptr[1];
19957bb3 4286 const u8 *ie = NULL, *bssid;
4c476991 4287 int ie_len = 0;
19957bb3 4288 u16 reason_code;
d5cdfacb 4289 bool local_state_change;
636a5d36 4290
f4a11bb0
JB		 4291 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4292 return -EINVAL;
4293
4294 if (!info->attrs[NL80211_ATTR_MAC])
4295 return -EINVAL;
4296
4297 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4298 return -EINVAL;
4299
4c476991
JB		 4300 if (!rdev->ops->deauth)
4301 return -EOPNOTSUPP;
636a5d36 4302
074ac8df 4303 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4304 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4305 return -EOPNOTSUPP;
eec60b03 4306
19957bb3 4307 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4308
19957bb3
JB		 4309 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4310 if (reason_code == 0) {
f4a11bb0 4311 /* Reason Code 0 is reserved */
4c476991 4312 return -EINVAL;
255e737e 4313 }
636a5d36
JM		 4314
4315 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4316 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4317 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4318 }
4319
d5cdfacb
JM		 4320 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4321
4c476991
JB		 4322 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
4323 local_state_change);
636a5d36
JM		 4324}
4325
4326static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
4327{
4c476991
JB		 4328 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4329 struct net_device *dev = info->user_ptr[1];
19957bb3 4330 const u8 *ie = NULL, *bssid;
4c476991 4331 int ie_len = 0;
19957bb3 4332 u16 reason_code;
d5cdfacb 4333 bool local_state_change;
636a5d36 4334
f4a11bb0
JB		 4335 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4336 return -EINVAL;
4337
4338 if (!info->attrs[NL80211_ATTR_MAC])
4339 return -EINVAL;
4340
4341 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4342 return -EINVAL;
4343
4c476991
JB		 4344 if (!rdev->ops->disassoc)
4345 return -EOPNOTSUPP;
636a5d36 4346
074ac8df 4347 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4348 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4349 return -EOPNOTSUPP;
eec60b03 4350
19957bb3 4351 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4352
19957bb3
JB		 4353 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4354 if (reason_code == 0) {
f4a11bb0 4355 /* Reason Code 0 is reserved */
4c476991 4356 return -EINVAL;
255e737e 4357 }
636a5d36
JM		 4358
4359 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4360 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4361 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4362 }
4363
d5cdfacb
JM		 4364 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4365
4c476991
JB		 4366 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
4367 local_state_change);
636a5d36
JM		 4368}
4369
dd5b4cc7
FF		 4370static bool
4371nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
4372 int mcast_rate[IEEE80211_NUM_BANDS],
4373 int rateval)
4374{
4375 struct wiphy *wiphy = &rdev->wiphy;
4376 bool found = false;
4377 int band, i;
4378
4379 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4380 struct ieee80211_supported_band *sband;
4381
4382 sband = wiphy->bands[band];
4383 if (!sband)
4384 continue;
4385
4386 for (i = 0; i < sband->n_bitrates; i++) {
4387 if (sband->bitrates[i].bitrate == rateval) {
4388 mcast_rate[band] = i + 1;
4389 found = true;
4390 break;
4391 }
4392 }
4393 }
4394
4395 return found;
4396}
4397
04a773ad
JB		 4398static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
4399{
4c476991
JB		 4400 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4401 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 4402 struct cfg80211_ibss_params ibss;
4403 struct wiphy *wiphy;
fffd0934 4404 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 4405 int err;
4406
8e30bc55
JB		 4407 memset(&ibss, 0, sizeof(ibss));
4408
04a773ad
JB		 4409 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4410 return -EINVAL;
4411
4412 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
4413 !info->attrs[NL80211_ATTR_SSID] ||
4414 !nla_len(info->attrs[NL80211_ATTR_SSID]))
4415 return -EINVAL;
4416
8e30bc55
JB		 4417 ibss.beacon_interval = 100;
4418
4419 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
4420 ibss.beacon_interval =
4421 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
4422 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
4423 return -EINVAL;
4424 }
4425
4c476991
JB		 4426 if (!rdev->ops->join_ibss)
4427 return -EOPNOTSUPP;
04a773ad 4428
4c476991
JB		 4429 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
4430 return -EOPNOTSUPP;
04a773ad 4431
79c97e97 4432 wiphy = &rdev->wiphy;
04a773ad
JB		 4433
4434 if (info->attrs[NL80211_ATTR_MAC])
4435 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4436 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4437 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
4438
4439 if (info->attrs[NL80211_ATTR_IE]) {
4440 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4441 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4442 }
4443
4444 ibss.channel = ieee80211_get_channel(wiphy,
4445 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4446 if (!ibss.channel ||
4447 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
4c476991
JB		 4448 ibss.channel->flags & IEEE80211_CHAN_DISABLED)
4449 return -EINVAL;
04a773ad
JB		 4450
4451 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 4452 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
4453
fbd2c8dc
TP		 4454 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
4455 u8 *rates =
4456 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4457 int n_rates =
4458 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4459 struct ieee80211_supported_band *sband =
4460 wiphy->bands[ibss.channel->band];
34850ab2 4461 int err;
fbd2c8dc 4462
34850ab2
JB		 4463 err = ieee80211_get_ratemask(sband, rates, n_rates,
4464 &ibss.basic_rates);
4465 if (err)
4466 return err;
fbd2c8dc 4467 }
dd5b4cc7
FF		 4468
4469 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
4470 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
4471 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
4472 return -EINVAL;
fbd2c8dc 4473
4c476991
JB		 4474 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
4475 connkeys = nl80211_parse_connkeys(rdev,
4476 info->attrs[NL80211_ATTR_KEYS]);
4477 if (IS_ERR(connkeys))
4478 return PTR_ERR(connkeys);
4479 }
04a773ad 4480
4c476991 4481 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934
JB		 4482 if (err)
4483 kfree(connkeys);
04a773ad
JB		 4484 return err;
4485}
4486
4487static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
4488{
4c476991
JB		 4489 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4490 struct net_device *dev = info->user_ptr[1];
04a773ad 4491
4c476991
JB		 4492 if (!rdev->ops->leave_ibss)
4493 return -EOPNOTSUPP;
04a773ad 4494
4c476991
JB		 4495 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
4496 return -EOPNOTSUPP;
04a773ad 4497
4c476991 4498 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 4499}
4500
aff89a9b
JB		 4501#ifdef CONFIG_NL80211_TESTMODE
4502static struct genl_multicast_group nl80211_testmode_mcgrp = {
4503 .name = "testmode",
4504};
4505
4506static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
4507{
4c476991 4508 struct cfg80211_registered_device *rdev = info->user_ptr[0];
aff89a9b
JB		 4509 int err;
4510
4511 if (!info->attrs[NL80211_ATTR_TESTDATA])
4512 return -EINVAL;
4513
aff89a9b
JB		 4514 err = -EOPNOTSUPP;
4515 if (rdev->ops->testmode_cmd) {
4516 rdev->testmode_info = info;
4517 err = rdev->ops->testmode_cmd(&rdev->wiphy,
4518 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
4519 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
4520 rdev->testmode_info = NULL;
4521 }
4522
aff89a9b
JB		 4523 return err;
4524}
4525
71063f0e
WYG		 4526static int nl80211_testmode_dump(struct sk_buff *skb,
4527 struct netlink_callback *cb)
4528{
4529 struct cfg80211_registered_device *dev;
4530 int err;
4531 long phy_idx;
4532 void *data = NULL;
4533 int data_len = 0;
4534
4535 if (cb->args[0]) {
4536 /*
4537 * 0 is a valid index, but not valid for args[0],
4538 * so we need to offset by 1.
4539 */
4540 phy_idx = cb->args[0] - 1;
4541 } else {
4542 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
4543 nl80211_fam.attrbuf, nl80211_fam.maxattr,
4544 nl80211_policy);
4545 if (err)
4546 return err;
4547 if (!nl80211_fam.attrbuf[NL80211_ATTR_WIPHY])
4548 return -EINVAL;
4549 phy_idx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_WIPHY]);
4550 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
4551 cb->args[1] =
4552 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
4553 }
4554
4555 if (cb->args[1]) {
4556 data = nla_data((void *)cb->args[1]);
4557 data_len = nla_len((void *)cb->args[1]);
4558 }
4559
4560 mutex_lock(&cfg80211_mutex);
4561 dev = cfg80211_rdev_by_wiphy_idx(phy_idx);
4562 if (!dev) {
4563 mutex_unlock(&cfg80211_mutex);
4564 return -ENOENT;
4565 }
4566 cfg80211_lock_rdev(dev);
4567 mutex_unlock(&cfg80211_mutex);
4568
4569 if (!dev->ops->testmode_dump) {
4570 err = -EOPNOTSUPP;
4571 goto out_err;
4572 }
4573
4574 while (1) {
4575 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).pid,
4576 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4577 NL80211_CMD_TESTMODE);
4578 struct nlattr *tmdata;
4579
4580 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, dev->wiphy_idx) < 0) {
4581 genlmsg_cancel(skb, hdr);
4582 break;
4583 }
4584
4585 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
4586 if (!tmdata) {
4587 genlmsg_cancel(skb, hdr);
4588 break;
4589 }
4590 err = dev->ops->testmode_dump(&dev->wiphy, skb, cb,
4591 data, data_len);
4592 nla_nest_end(skb, tmdata);
4593
4594 if (err == -ENOBUFS || err == -ENOENT) {
4595 genlmsg_cancel(skb, hdr);
4596 break;
4597 } else if (err) {
4598 genlmsg_cancel(skb, hdr);
4599 goto out_err;
4600 }
4601
4602 genlmsg_end(skb, hdr);
4603 }
4604
4605 err = skb->len;
4606 /* see above */
4607 cb->args[0] = phy_idx + 1;
4608 out_err:
4609 cfg80211_unlock_rdev(dev);
4610 return err;
4611}
4612
aff89a9b
JB		 4613static struct sk_buff *
4614__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
4615 int approxlen, u32 pid, u32 seq, gfp_t gfp)
4616{
4617 struct sk_buff *skb;
4618 void *hdr;
4619 struct nlattr *data;
4620
4621 skb = nlmsg_new(approxlen + 100, gfp);
4622 if (!skb)
4623 return NULL;
4624
4625 hdr = nl80211hdr_put(skb, pid, seq, 0, NL80211_CMD_TESTMODE);
4626 if (!hdr) {
4627 kfree_skb(skb);
4628 return NULL;
4629 }
4630
4631 NLA_PUT_U32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4632 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
4633
4634 ((void **)skb->cb)[0] = rdev;
4635 ((void **)skb->cb)[1] = hdr;
4636 ((void **)skb->cb)[2] = data;
4637
4638 return skb;
4639
4640 nla_put_failure:
4641 kfree_skb(skb);
4642 return NULL;
4643}
4644
4645struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
4646 int approxlen)
4647{
4648 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
4649
4650 if (WARN_ON(!rdev->testmode_info))
4651 return NULL;
4652
4653 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
4654 rdev->testmode_info->snd_pid,
4655 rdev->testmode_info->snd_seq,
4656 GFP_KERNEL);
4657}
4658EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
4659
4660int cfg80211_testmode_reply(struct sk_buff *skb)
4661{
4662 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
4663 void *hdr = ((void **)skb->cb)[1];
4664 struct nlattr *data = ((void **)skb->cb)[2];
4665
4666 if (WARN_ON(!rdev->testmode_info)) {
4667 kfree_skb(skb);
4668 return -EINVAL;
4669 }
4670
4671 nla_nest_end(skb, data);
4672 genlmsg_end(skb, hdr);
4673 return genlmsg_reply(skb, rdev->testmode_info);
4674}
4675EXPORT_SYMBOL(cfg80211_testmode_reply);
4676
4677struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
4678 int approxlen, gfp_t gfp)
4679{
4680 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
4681
4682 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
4683}
4684EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
4685
4686void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
4687{
4688 void *hdr = ((void **)skb->cb)[1];
4689 struct nlattr *data = ((void **)skb->cb)[2];
4690
4691 nla_nest_end(skb, data);
4692 genlmsg_end(skb, hdr);
4693 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
4694}
4695EXPORT_SYMBOL(cfg80211_testmode_event);
4696#endif
4697
b23aa676
SO		 4698static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
4699{
4c476991
JB		 4700 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4701 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 4702 struct cfg80211_connect_params connect;
4703 struct wiphy *wiphy;
fffd0934 4704 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 4705 int err;
4706
4707 memset(&connect, 0, sizeof(connect));
4708
4709 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4710 return -EINVAL;
4711
4712 if (!info->attrs[NL80211_ATTR_SSID] ||
4713 !nla_len(info->attrs[NL80211_ATTR_SSID]))
4714 return -EINVAL;
4715
4716 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
4717 connect.auth_type =
4718 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4719 if (!nl80211_valid_auth_type(connect.auth_type))
4720 return -EINVAL;
4721 } else
4722 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
4723
4724 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
4725
c0692b8f 4726 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 4727 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 4728 if (err)
4729 return err;
b23aa676 4730
074ac8df 4731 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4732 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4733 return -EOPNOTSUPP;
b23aa676 4734
79c97e97 4735 wiphy = &rdev->wiphy;
b23aa676 4736
b23aa676
SO		 4737 if (info->attrs[NL80211_ATTR_MAC])
4738 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4739 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4740 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
4741
4742 if (info->attrs[NL80211_ATTR_IE]) {
4743 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4744 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4745 }
4746
4747 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
4748 connect.channel =
4749 ieee80211_get_channel(wiphy,
4750 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4751 if (!connect.channel ||
4c476991
JB		 4752 connect.channel->flags & IEEE80211_CHAN_DISABLED)
4753 return -EINVAL;
b23aa676
SO		 4754 }
4755
fffd0934
JB		 4756 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
4757 connkeys = nl80211_parse_connkeys(rdev,
4758 info->attrs[NL80211_ATTR_KEYS]);
4c476991
JB		 4759 if (IS_ERR(connkeys))
4760 return PTR_ERR(connkeys);
fffd0934
JB		 4761 }
4762
4763 err = cfg80211_connect(rdev, dev, &connect, connkeys);
fffd0934
JB		 4764 if (err)
4765 kfree(connkeys);
b23aa676
SO		 4766 return err;
4767}
4768
4769static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
4770{
4c476991
JB		 4771 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4772 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 4773 u16 reason;
4774
4775 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4776 reason = WLAN_REASON_DEAUTH_LEAVING;
4777 else
4778 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4779
4780 if (reason == 0)
4781 return -EINVAL;
4782
074ac8df 4783 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4784 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4785 return -EOPNOTSUPP;
b23aa676 4786
4c476991 4787 return cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 4788}
4789
463d0183
JB		 4790static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
4791{
4c476991 4792 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 4793 struct net *net;
4794 int err;
4795 u32 pid;
4796
4797 if (!info->attrs[NL80211_ATTR_PID])
4798 return -EINVAL;
4799
4800 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
4801
463d0183 4802 net = get_net_ns_by_pid(pid);
4c476991
JB		 4803 if (IS_ERR(net))
4804 return PTR_ERR(net);
463d0183
JB		 4805
4806 err = 0;
4807
4808 /* check if anything to do */
4c476991
JB		 4809 if (!net_eq(wiphy_net(&rdev->wiphy), net))
4810 err = cfg80211_switch_netns(rdev, net);
463d0183 4811
463d0183 4812 put_net(net);
463d0183
JB		 4813 return err;
4814}
4815
67fbb16b
SO		 4816static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
4817{
4c476991 4818 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 4819 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
4820 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 4821 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 4822 struct cfg80211_pmksa pmksa;
4823
4824 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
4825
4826 if (!info->attrs[NL80211_ATTR_MAC])
4827 return -EINVAL;
4828
4829 if (!info->attrs[NL80211_ATTR_PMKID])
4830 return -EINVAL;
4831
67fbb16b
SO		 4832 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
4833 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4834
074ac8df 4835 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4836 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4837 return -EOPNOTSUPP;
67fbb16b
SO		 4838
4839 switch (info->genlhdr->cmd) {
4840 case NL80211_CMD_SET_PMKSA:
4841 rdev_ops = rdev->ops->set_pmksa;
4842 break;
4843 case NL80211_CMD_DEL_PMKSA:
4844 rdev_ops = rdev->ops->del_pmksa;
4845 break;
4846 default:
4847 WARN_ON(1);
4848 break;
4849 }
4850
4c476991
JB		 4851 if (!rdev_ops)
4852 return -EOPNOTSUPP;
67fbb16b 4853
4c476991 4854 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 4855}
4856
4857static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
4858{
4c476991
JB		 4859 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4860 struct net_device *dev = info->user_ptr[1];
67fbb16b 4861
074ac8df 4862 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4863 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4864 return -EOPNOTSUPP;
67fbb16b 4865
4c476991
JB		 4866 if (!rdev->ops->flush_pmksa)
4867 return -EOPNOTSUPP;
67fbb16b 4868
4c476991 4869 return rdev->ops->flush_pmksa(&rdev->wiphy, dev);
67fbb16b
SO		 4870}
4871
9588bbd5
JM		 4872static int nl80211_remain_on_channel(struct sk_buff *skb,
4873 struct genl_info *info)
4874{
4c476991
JB		 4875 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4876 struct net_device *dev = info->user_ptr[1];
9588bbd5
JM		 4877 struct ieee80211_channel *chan;
4878 struct sk_buff *msg;
4879 void *hdr;
4880 u64 cookie;
4881 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
4882 u32 freq, duration;
4883 int err;
4884
4885 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
4886 !info->attrs[NL80211_ATTR_DURATION])
4887 return -EINVAL;
4888
4889 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
4890
4891 /*
4892 * We should be on that channel for at least one jiffie,
4893 * and more than 5 seconds seems excessive.
4894 */
a293911d
JB		 4895 if (!duration || !msecs_to_jiffies(duration) ||
4896 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 4897 return -EINVAL;
4898
4c476991
JB		 4899 if (!rdev->ops->remain_on_channel)
4900 return -EOPNOTSUPP;
9588bbd5 4901
9588bbd5
JM		 4902 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
4903 channel_type = nla_get_u32(
4904 info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
4905 if (channel_type != NL80211_CHAN_NO_HT &&
4906 channel_type != NL80211_CHAN_HT20 &&
4907 channel_type != NL80211_CHAN_HT40PLUS &&
4c476991
JB		 4908 channel_type != NL80211_CHAN_HT40MINUS)
4909 return -EINVAL;
9588bbd5
JM		 4910 }
4911
4912 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
4913 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 4914 if (chan == NULL)
4915 return -EINVAL;
9588bbd5
JM		 4916
4917 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 4918 if (!msg)
4919 return -ENOMEM;
9588bbd5
JM		 4920
4921 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
4922 NL80211_CMD_REMAIN_ON_CHANNEL);
4923
4924 if (IS_ERR(hdr)) {
4925 err = PTR_ERR(hdr);
4926 goto free_msg;
4927 }
4928
4929 err = rdev->ops->remain_on_channel(&rdev->wiphy, dev, chan,
4930 channel_type, duration, &cookie);
4931
4932 if (err)
4933 goto free_msg;
4934
4935 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
4936
4937 genlmsg_end(msg, hdr);
4c476991
JB		 4938
4939 return genlmsg_reply(msg, info);
9588bbd5
JM		 4940
4941 nla_put_failure:
4942 err = -ENOBUFS;
4943 free_msg:
4944 nlmsg_free(msg);
9588bbd5
JM		 4945 return err;
4946}
4947
4948static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
4949 struct genl_info *info)
4950{
4c476991
JB		 4951 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4952 struct net_device *dev = info->user_ptr[1];
9588bbd5 4953 u64 cookie;
9588bbd5
JM		 4954
4955 if (!info->attrs[NL80211_ATTR_COOKIE])
4956 return -EINVAL;
4957
4c476991
JB		 4958 if (!rdev->ops->cancel_remain_on_channel)
4959 return -EOPNOTSUPP;
9588bbd5 4960
9588bbd5
JM		 4961 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
4962
4c476991 4963 return rdev->ops->cancel_remain_on_channel(&rdev->wiphy, dev, cookie);
9588bbd5
JM		 4964}
4965
13ae75b1
JM		 4966static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4967 u8 *rates, u8 rates_len)
4968{
4969 u8 i;
4970 u32 mask = 0;
4971
4972 for (i = 0; i < rates_len; i++) {
4973 int rate = (rates[i] & 0x7f) * 5;
4974 int ridx;
4975 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
4976 struct ieee80211_rate *srate =
4977 &sband->bitrates[ridx];
4978 if (rate == srate->bitrate) {
4979 mask |= 1 << ridx;
4980 break;
4981 }
4982 }
4983 if (ridx == sband->n_bitrates)
4984 return 0; /* rate not found */
4985 }
4986
4987 return mask;
4988}
4989
b54452b0 4990static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
13ae75b1
JM		 4991 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
4992 .len = NL80211_MAX_SUPP_RATES },
4993};
4994
4995static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
4996 struct genl_info *info)
4997{
4998 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4c476991 4999 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13ae75b1 5000 struct cfg80211_bitrate_mask mask;
4c476991
JB		 5001 int rem, i;
5002 struct net_device *dev = info->user_ptr[1];
13ae75b1
JM		 5003 struct nlattr *tx_rates;
5004 struct ieee80211_supported_band *sband;
5005
5006 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
5007 return -EINVAL;
5008
4c476991
JB		 5009 if (!rdev->ops->set_bitrate_mask)
5010 return -EOPNOTSUPP;
13ae75b1
JM		 5011
5012 memset(&mask, 0, sizeof(mask));
5013 /* Default to all rates enabled */
5014 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
5015 sband = rdev->wiphy.bands[i];
5016 mask.control[i].legacy =
5017 sband ? (1 << sband->n_bitrates) - 1 : 0;
5018 }
5019
5020 /*
5021 * The nested attribute uses enum nl80211_band as the index. This maps
5022 * directly to the enum ieee80211_band values used in cfg80211.
5023 */
5024 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
5025 {
5026 enum ieee80211_band band = nla_type(tx_rates);
4c476991
JB		 5027 if (band < 0 || band >= IEEE80211_NUM_BANDS)
5028 return -EINVAL;
13ae75b1 5029 sband = rdev->wiphy.bands[band];
4c476991
JB		 5030 if (sband == NULL)
5031 return -EINVAL;
13ae75b1
JM		 5032 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
5033 nla_len(tx_rates), nl80211_txattr_policy);
5034 if (tb[NL80211_TXRATE_LEGACY]) {
5035 mask.control[band].legacy = rateset_to_mask(
5036 sband,
5037 nla_data(tb[NL80211_TXRATE_LEGACY]),
5038 nla_len(tb[NL80211_TXRATE_LEGACY]));
4c476991
JB		 5039 if (mask.control[band].legacy == 0)
5040 return -EINVAL;
13ae75b1
JM		 5041 }
5042 }
5043
4c476991 5044 return rdev->ops->set_bitrate_mask(&rdev->wiphy, dev, NULL, &mask);
13ae75b1
JM		 5045}
5046
2e161f78 5047static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 5048{
4c476991
JB		 5049 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5050 struct net_device *dev = info->user_ptr[1];
2e161f78 5051 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 5052
5053 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
5054 return -EINVAL;
5055
2e161f78
JB		 5056 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
5057 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 5058
9d38d85d 5059 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
074ac8df 5060 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
663fcafd
JB		 5061 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5062 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5063 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
c7108a71 5064 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 5065 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5066 return -EOPNOTSUPP;
026331c4
JM		 5067
5068 /* not much point in registering if we can't reply */
4c476991
JB		 5069 if (!rdev->ops->mgmt_tx)
5070 return -EOPNOTSUPP;
026331c4 5071
4c476991 5072 return cfg80211_mlme_register_mgmt(dev->ieee80211_ptr, info->snd_pid,
2e161f78 5073 frame_type,
026331c4
JM		 5074 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
5075 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
026331c4
JM		 5076}
5077
2e161f78 5078static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 5079{
4c476991
JB		 5080 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5081 struct net_device *dev = info->user_ptr[1];
026331c4
JM		 5082 struct ieee80211_channel *chan;
5083 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
252aa631 5084 bool channel_type_valid = false;
026331c4
JM		 5085 u32 freq;
5086 int err;
5087 void *hdr;
5088 u64 cookie;
5089 struct sk_buff *msg;
f7ca38df
JB		 5090 unsigned int wait = 0;
5091 bool offchan;
026331c4
JM		 5092
5093 if (!info->attrs[NL80211_ATTR_FRAME] ||
5094 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
5095 return -EINVAL;
5096
4c476991
JB		 5097 if (!rdev->ops->mgmt_tx)
5098 return -EOPNOTSUPP;
026331c4 5099
9d38d85d 5100 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
074ac8df 5101 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
663fcafd
JB		 5102 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5103 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5104 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
c7108a71 5105 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 5106 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5107 return -EOPNOTSUPP;
026331c4 5108
f7ca38df
JB		 5109 if (info->attrs[NL80211_ATTR_DURATION]) {
5110 if (!rdev->ops->mgmt_tx_cancel_wait)
5111 return -EINVAL;
5112 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
5113 }
5114
026331c4
JM		 5115 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
5116 channel_type = nla_get_u32(
5117 info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
5118 if (channel_type != NL80211_CHAN_NO_HT &&
5119 channel_type != NL80211_CHAN_HT20 &&
5120 channel_type != NL80211_CHAN_HT40PLUS &&
4c476991
JB		 5121 channel_type != NL80211_CHAN_HT40MINUS)
5122 return -EINVAL;
252aa631 5123 channel_type_valid = true;
026331c4
JM		 5124 }
5125
f7ca38df
JB		 5126 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
5127
026331c4
JM		 5128 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5129 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5130 if (chan == NULL)
5131 return -EINVAL;
026331c4
JM		 5132
5133 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5134 if (!msg)
5135 return -ENOMEM;
026331c4
JM		 5136
5137 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
2e161f78 5138 NL80211_CMD_FRAME);
026331c4
JM		 5139
5140 if (IS_ERR(hdr)) {
5141 err = PTR_ERR(hdr);
5142 goto free_msg;
5143 }
f7ca38df
JB		 5144 err = cfg80211_mlme_mgmt_tx(rdev, dev, chan, offchan, channel_type,
5145 channel_type_valid, wait,
2e161f78
JB		 5146 nla_data(info->attrs[NL80211_ATTR_FRAME]),
5147 nla_len(info->attrs[NL80211_ATTR_FRAME]),
5148 &cookie);
026331c4
JM		 5149 if (err)
5150 goto free_msg;
5151
5152 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
5153
5154 genlmsg_end(msg, hdr);
4c476991 5155 return genlmsg_reply(msg, info);
026331c4
JM		 5156
5157 nla_put_failure:
5158 err = -ENOBUFS;
5159 free_msg:
5160 nlmsg_free(msg);
026331c4
JM		 5161 return err;
5162}
5163
f7ca38df
JB		 5164static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
5165{
5166 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5167 struct net_device *dev = info->user_ptr[1];
5168 u64 cookie;
5169
5170 if (!info->attrs[NL80211_ATTR_COOKIE])
5171 return -EINVAL;
5172
5173 if (!rdev->ops->mgmt_tx_cancel_wait)
5174 return -EOPNOTSUPP;
5175
5176 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
5177 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
5178 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5179 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5180 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
5181 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5182 return -EOPNOTSUPP;
5183
5184 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
5185
5186 return rdev->ops->mgmt_tx_cancel_wait(&rdev->wiphy, dev, cookie);
5187}
5188
ffb9eb3d
KV		 5189static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
5190{
4c476991 5191 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 5192 struct wireless_dev *wdev;
4c476991 5193 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 5194 u8 ps_state;
5195 bool state;
5196 int err;
5197
4c476991
JB		 5198 if (!info->attrs[NL80211_ATTR_PS_STATE])
5199 return -EINVAL;
ffb9eb3d
KV		 5200
5201 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
5202
4c476991
JB		 5203 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
5204 return -EINVAL;
ffb9eb3d
KV		 5205
5206 wdev = dev->ieee80211_ptr;
5207
4c476991
JB		 5208 if (!rdev->ops->set_power_mgmt)
5209 return -EOPNOTSUPP;
ffb9eb3d
KV		 5210
5211 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
5212
5213 if (state == wdev->ps)
4c476991 5214 return 0;
ffb9eb3d 5215
4c476991
JB		 5216 err = rdev->ops->set_power_mgmt(wdev->wiphy, dev, state,
5217 wdev->ps_timeout);
5218 if (!err)
5219 wdev->ps = state;
ffb9eb3d
KV		 5220 return err;
5221}
5222
5223static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
5224{
4c476991 5225 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 5226 enum nl80211_ps_state ps_state;
5227 struct wireless_dev *wdev;
4c476991 5228 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 5229 struct sk_buff *msg;
5230 void *hdr;
5231 int err;
5232
ffb9eb3d
KV		 5233 wdev = dev->ieee80211_ptr;
5234
4c476991
JB		 5235 if (!rdev->ops->set_power_mgmt)
5236 return -EOPNOTSUPP;
ffb9eb3d
KV		 5237
5238 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5239 if (!msg)
5240 return -ENOMEM;
ffb9eb3d
KV		 5241
5242 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5243 NL80211_CMD_GET_POWER_SAVE);
5244 if (!hdr) {
4c476991 5245 err = -ENOBUFS;
ffb9eb3d
KV		 5246 goto free_msg;
5247 }
5248
5249 if (wdev->ps)
5250 ps_state = NL80211_PS_ENABLED;
5251 else
5252 ps_state = NL80211_PS_DISABLED;
5253
5254 NLA_PUT_U32(msg, NL80211_ATTR_PS_STATE, ps_state);
5255
5256 genlmsg_end(msg, hdr);
4c476991 5257 return genlmsg_reply(msg, info);
ffb9eb3d 5258
4c476991 5259 nla_put_failure:
ffb9eb3d 5260 err = -ENOBUFS;
4c476991 5261 free_msg:
ffb9eb3d 5262 nlmsg_free(msg);
ffb9eb3d
KV		 5263 return err;
5264}
5265
d6dc1a38
JO		 5266static struct nla_policy
5267nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
5268 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
5269 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
5270 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
5271};
5272
5273static int nl80211_set_cqm_rssi(struct genl_info *info,
5274 s32 threshold, u32 hysteresis)
5275{
4c476991 5276 struct cfg80211_registered_device *rdev = info->user_ptr[0];
d6dc1a38 5277 struct wireless_dev *wdev;
4c476991 5278 struct net_device *dev = info->user_ptr[1];
d6dc1a38
JO		 5279
5280 if (threshold > 0)
5281 return -EINVAL;
5282
d6dc1a38
JO		 5283 wdev = dev->ieee80211_ptr;
5284
4c476991
JB		 5285 if (!rdev->ops->set_cqm_rssi_config)
5286 return -EOPNOTSUPP;
d6dc1a38 5287
074ac8df 5288 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5289 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
5290 return -EOPNOTSUPP;
d6dc1a38 5291
4c476991
JB		 5292 return rdev->ops->set_cqm_rssi_config(wdev->wiphy, dev,
5293 threshold, hysteresis);
d6dc1a38
JO		 5294}
5295
5296static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
5297{
5298 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
5299 struct nlattr *cqm;
5300 int err;
5301
5302 cqm = info->attrs[NL80211_ATTR_CQM];
5303 if (!cqm) {
5304 err = -EINVAL;
5305 goto out;
5306 }
5307
5308 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
5309 nl80211_attr_cqm_policy);
5310 if (err)
5311 goto out;
5312
5313 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
5314 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
5315 s32 threshold;
5316 u32 hysteresis;
5317 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
5318 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
5319 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
5320 } else
5321 err = -EINVAL;
5322
5323out:
5324 return err;
5325}
5326
29cbe68c
JB		 5327static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
5328{
5329 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5330 struct net_device *dev = info->user_ptr[1];
5331 struct mesh_config cfg;
c80d545d 5332 struct mesh_setup setup;
29cbe68c
JB		 5333 int err;
5334
5335 /* start with default */
5336 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 5337 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 5338
24bdd9f4 5339 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 5340 /* and parse parameters if given */
24bdd9f4 5341 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 5342 if (err)
5343 return err;
5344 }
5345
5346 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
5347 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
5348 return -EINVAL;
5349
c80d545d
JC		 5350 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
5351 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
5352
5353 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
5354 /* parse additional setup parameters if given */
5355 err = nl80211_parse_mesh_setup(info, &setup);
5356 if (err)
5357 return err;
5358 }
5359
5360 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
29cbe68c
JB		 5361}
5362
5363static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
5364{
5365 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5366 struct net_device *dev = info->user_ptr[1];
5367
5368 return cfg80211_leave_mesh(rdev, dev);
5369}
5370
ff1b6e69
JB		 5371static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
5372{
5373 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5374 struct sk_buff *msg;
5375 void *hdr;
5376
5377 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
5378 return -EOPNOTSUPP;
5379
5380 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
5381 if (!msg)
5382 return -ENOMEM;
5383
5384 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5385 NL80211_CMD_GET_WOWLAN);
5386 if (!hdr)
5387 goto nla_put_failure;
5388
5389 if (rdev->wowlan) {
5390 struct nlattr *nl_wowlan;
5391
5392 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
5393 if (!nl_wowlan)
5394 goto nla_put_failure;
5395
5396 if (rdev->wowlan->any)
5397 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_ANY);
5398 if (rdev->wowlan->disconnect)
5399 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_DISCONNECT);
5400 if (rdev->wowlan->magic_pkt)
5401 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT);
77dbbb13
JB		 5402 if (rdev->wowlan->gtk_rekey_failure)
5403 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE);
5404 if (rdev->wowlan->eap_identity_req)
5405 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST);
5406 if (rdev->wowlan->four_way_handshake)
5407 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE);
5408 if (rdev->wowlan->rfkill_release)
5409 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE);
ff1b6e69
JB		 5410 if (rdev->wowlan->n_patterns) {
5411 struct nlattr *nl_pats, *nl_pat;
5412 int i, pat_len;
5413
5414 nl_pats = nla_nest_start(msg,
5415 NL80211_WOWLAN_TRIG_PKT_PATTERN);
5416 if (!nl_pats)
5417 goto nla_put_failure;
5418
5419 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
5420 nl_pat = nla_nest_start(msg, i + 1);
5421 if (!nl_pat)
5422 goto nla_put_failure;
5423 pat_len = rdev->wowlan->patterns[i].pattern_len;
5424 NLA_PUT(msg, NL80211_WOWLAN_PKTPAT_MASK,
5425 DIV_ROUND_UP(pat_len, 8),
5426 rdev->wowlan->patterns[i].mask);
5427 NLA_PUT(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
5428 pat_len,
5429 rdev->wowlan->patterns[i].pattern);
5430 nla_nest_end(msg, nl_pat);
5431 }
5432 nla_nest_end(msg, nl_pats);
5433 }
5434
5435 nla_nest_end(msg, nl_wowlan);
5436 }
5437
5438 genlmsg_end(msg, hdr);
5439 return genlmsg_reply(msg, info);
5440
5441nla_put_failure:
5442 nlmsg_free(msg);
5443 return -ENOBUFS;
5444}
5445
5446static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
5447{
5448 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5449 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
5450 struct cfg80211_wowlan no_triggers = {};
5451 struct cfg80211_wowlan new_triggers = {};
5452 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
5453 int err, i;
5454
5455 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
5456 return -EOPNOTSUPP;
5457
5458 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS])
5459 goto no_triggers;
5460
5461 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
5462 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
5463 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
5464 nl80211_wowlan_policy);
5465 if (err)
5466 return err;
5467
5468 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
5469 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
5470 return -EINVAL;
5471 new_triggers.any = true;
5472 }
5473
5474 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
5475 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
5476 return -EINVAL;
5477 new_triggers.disconnect = true;
5478 }
5479
5480 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
5481 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
5482 return -EINVAL;
5483 new_triggers.magic_pkt = true;
5484 }
5485
77dbbb13
JB		 5486 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
5487 return -EINVAL;
5488
5489 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
5490 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
5491 return -EINVAL;
5492 new_triggers.gtk_rekey_failure = true;
5493 }
5494
5495 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
5496 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
5497 return -EINVAL;
5498 new_triggers.eap_identity_req = true;
5499 }
5500
5501 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
5502 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
5503 return -EINVAL;
5504 new_triggers.four_way_handshake = true;
5505 }
5506
5507 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
5508 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
5509 return -EINVAL;
5510 new_triggers.rfkill_release = true;
5511 }
5512
ff1b6e69
JB		 5513 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
5514 struct nlattr *pat;
5515 int n_patterns = 0;
5516 int rem, pat_len, mask_len;
5517 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
5518
5519 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
5520 rem)
5521 n_patterns++;
5522 if (n_patterns > wowlan->n_patterns)
5523 return -EINVAL;
5524
5525 new_triggers.patterns = kcalloc(n_patterns,
5526 sizeof(new_triggers.patterns[0]),
5527 GFP_KERNEL);
5528 if (!new_triggers.patterns)
5529 return -ENOMEM;
5530
5531 new_triggers.n_patterns = n_patterns;
5532 i = 0;
5533
5534 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
5535 rem) {
5536 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
5537 nla_data(pat), nla_len(pat), NULL);
5538 err = -EINVAL;
5539 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
5540 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
5541 goto error;
5542 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
5543 mask_len = DIV_ROUND_UP(pat_len, 8);
5544 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
5545 mask_len)
5546 goto error;
5547 if (pat_len > wowlan->pattern_max_len ||
5548 pat_len < wowlan->pattern_min_len)
5549 goto error;
5550
5551 new_triggers.patterns[i].mask =
5552 kmalloc(mask_len + pat_len, GFP_KERNEL);
5553 if (!new_triggers.patterns[i].mask) {
5554 err = -ENOMEM;
5555 goto error;
5556 }
5557 new_triggers.patterns[i].pattern =
5558 new_triggers.patterns[i].mask + mask_len;
5559 memcpy(new_triggers.patterns[i].mask,
5560 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
5561 mask_len);
5562 new_triggers.patterns[i].pattern_len = pat_len;
5563 memcpy(new_triggers.patterns[i].pattern,
5564 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
5565 pat_len);
5566 i++;
5567 }
5568 }
5569
5570 if (memcmp(&new_triggers, &no_triggers, sizeof(new_triggers))) {
5571 struct cfg80211_wowlan *ntrig;
5572 ntrig = kmemdup(&new_triggers, sizeof(new_triggers),
5573 GFP_KERNEL);
5574 if (!ntrig) {
5575 err = -ENOMEM;
5576 goto error;
5577 }
5578 cfg80211_rdev_free_wowlan(rdev);
5579 rdev->wowlan = ntrig;
5580 } else {
5581 no_triggers:
5582 cfg80211_rdev_free_wowlan(rdev);
5583 rdev->wowlan = NULL;
5584 }
5585
5586 return 0;
5587 error:
5588 for (i = 0; i < new_triggers.n_patterns; i++)
5589 kfree(new_triggers.patterns[i].mask);
5590 kfree(new_triggers.patterns);
5591 return err;
5592}
5593
e5497d76
JB		 5594static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
5595{
5596 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5597 struct net_device *dev = info->user_ptr[1];
5598 struct wireless_dev *wdev = dev->ieee80211_ptr;
5599 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
5600 struct cfg80211_gtk_rekey_data rekey_data;
5601 int err;
5602
5603 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
5604 return -EINVAL;
5605
5606 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
5607 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
5608 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
5609 nl80211_rekey_policy);
5610 if (err)
5611 return err;
5612
5613 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
5614 return -ERANGE;
5615 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
5616 return -ERANGE;
5617 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
5618 return -ERANGE;
5619
5620 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
5621 NL80211_KEK_LEN);
5622 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
5623 NL80211_KCK_LEN);
5624 memcpy(rekey_data.replay_ctr,
5625 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
5626 NL80211_REPLAY_CTR_LEN);
5627
5628 wdev_lock(wdev);
5629 if (!wdev->current_bss) {
5630 err = -ENOTCONN;
5631 goto out;
5632 }
5633
5634 if (!rdev->ops->set_rekey_data) {
5635 err = -EOPNOTSUPP;
5636 goto out;
5637 }
5638
5639 err = rdev->ops->set_rekey_data(&rdev->wiphy, dev, &rekey_data);
5640 out:
5641 wdev_unlock(wdev);
5642 return err;
5643}
5644
4c476991
JB		 5645#define NL80211_FLAG_NEED_WIPHY 0x01
5646#define NL80211_FLAG_NEED_NETDEV 0x02
5647#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 5648#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
5649#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
5650 NL80211_FLAG_CHECK_NETDEV_UP)
4c476991
JB		 5651
5652static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
5653 struct genl_info *info)
5654{
5655 struct cfg80211_registered_device *rdev;
5656 struct net_device *dev;
5657 int err;
5658 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
5659
5660 if (rtnl)
5661 rtnl_lock();
5662
5663 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
5664 rdev = cfg80211_get_dev_from_info(info);
5665 if (IS_ERR(rdev)) {
5666 if (rtnl)
5667 rtnl_unlock();
5668 return PTR_ERR(rdev);
5669 }
5670 info->user_ptr[0] = rdev;
5671 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
5672 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
5673 if (err) {
5674 if (rtnl)
5675 rtnl_unlock();
5676 return err;
5677 }
41265714
JB		 5678 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
5679 !netif_running(dev)) {
d537f5fd
JB		 5680 cfg80211_unlock_rdev(rdev);
5681 dev_put(dev);
41265714
JB		 5682 if (rtnl)
5683 rtnl_unlock();
5684 return -ENETDOWN;
5685 }
4c476991
JB		 5686 info->user_ptr[0] = rdev;
5687 info->user_ptr[1] = dev;
5688 }
5689
5690 return 0;
5691}
5692
5693static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
5694 struct genl_info *info)
5695{
5696 if (info->user_ptr[0])
5697 cfg80211_unlock_rdev(info->user_ptr[0]);
5698 if (info->user_ptr[1])
5699 dev_put(info->user_ptr[1]);
5700 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
5701 rtnl_unlock();
5702}
5703
55682965
JB		 5704static struct genl_ops nl80211_ops[] = {
5705 {
5706 .cmd = NL80211_CMD_GET_WIPHY,
5707 .doit = nl80211_get_wiphy,
5708 .dumpit = nl80211_dump_wiphy,
5709 .policy = nl80211_policy,
5710 /* can be retrieved by unprivileged users */
4c476991 5711 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965
JB		 5712 },
5713 {
5714 .cmd = NL80211_CMD_SET_WIPHY,
5715 .doit = nl80211_set_wiphy,
5716 .policy = nl80211_policy,
5717 .flags = GENL_ADMIN_PERM,
4c476991 5718 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 5719 },
5720 {
5721 .cmd = NL80211_CMD_GET_INTERFACE,
5722 .doit = nl80211_get_interface,
5723 .dumpit = nl80211_dump_interface,
5724 .policy = nl80211_policy,
5725 /* can be retrieved by unprivileged users */
4c476991 5726 .internal_flags = NL80211_FLAG_NEED_NETDEV,
55682965
JB		 5727 },
5728 {
5729 .cmd = NL80211_CMD_SET_INTERFACE,
5730 .doit = nl80211_set_interface,
5731 .policy = nl80211_policy,
5732 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5733 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5734 NL80211_FLAG_NEED_RTNL,
55682965
JB		 5735 },
5736 {
5737 .cmd = NL80211_CMD_NEW_INTERFACE,
5738 .doit = nl80211_new_interface,
5739 .policy = nl80211_policy,
5740 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5741 .internal_flags = NL80211_FLAG_NEED_WIPHY |
5742 NL80211_FLAG_NEED_RTNL,
55682965
JB		 5743 },
5744 {
5745 .cmd = NL80211_CMD_DEL_INTERFACE,
5746 .doit = nl80211_del_interface,
5747 .policy = nl80211_policy,
41ade00f 5748 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5749 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5750 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5751 },
5752 {
5753 .cmd = NL80211_CMD_GET_KEY,
5754 .doit = nl80211_get_key,
5755 .policy = nl80211_policy,
5756 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5757 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5758 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5759 },
5760 {
5761 .cmd = NL80211_CMD_SET_KEY,
5762 .doit = nl80211_set_key,
5763 .policy = nl80211_policy,
5764 .flags = GENL_ADMIN_PERM,
41265714 5765 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5766 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5767 },
5768 {
5769 .cmd = NL80211_CMD_NEW_KEY,
5770 .doit = nl80211_new_key,
5771 .policy = nl80211_policy,
5772 .flags = GENL_ADMIN_PERM,
41265714 5773 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5774 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5775 },
5776 {
5777 .cmd = NL80211_CMD_DEL_KEY,
5778 .doit = nl80211_del_key,
5779 .policy = nl80211_policy,
55682965 5780 .flags = GENL_ADMIN_PERM,
41265714 5781 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5782 NL80211_FLAG_NEED_RTNL,
55682965 5783 },
ed1b6cc7
JB		 5784 {
5785 .cmd = NL80211_CMD_SET_BEACON,
5786 .policy = nl80211_policy,
5787 .flags = GENL_ADMIN_PERM,
5788 .doit = nl80211_addset_beacon,
4c476991
JB		 5789 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5790 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 5791 },
5792 {
5793 .cmd = NL80211_CMD_NEW_BEACON,
5794 .policy = nl80211_policy,
5795 .flags = GENL_ADMIN_PERM,
5796 .doit = nl80211_addset_beacon,
4c476991
JB		 5797 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5798 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 5799 },
5800 {
5801 .cmd = NL80211_CMD_DEL_BEACON,
5802 .policy = nl80211_policy,
5803 .flags = GENL_ADMIN_PERM,
5804 .doit = nl80211_del_beacon,
4c476991
JB		 5805 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5806 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 5807 },
5727ef1b
JB		 5808 {
5809 .cmd = NL80211_CMD_GET_STATION,
5810 .doit = nl80211_get_station,
2ec600d6 5811 .dumpit = nl80211_dump_station,
5727ef1b 5812 .policy = nl80211_policy,
4c476991
JB		 5813 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5814 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5815 },
5816 {
5817 .cmd = NL80211_CMD_SET_STATION,
5818 .doit = nl80211_set_station,
5819 .policy = nl80211_policy,
5820 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5821 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5822 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5823 },
5824 {
5825 .cmd = NL80211_CMD_NEW_STATION,
5826 .doit = nl80211_new_station,
5827 .policy = nl80211_policy,
5828 .flags = GENL_ADMIN_PERM,
41265714 5829 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5830 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5831 },
5832 {
5833 .cmd = NL80211_CMD_DEL_STATION,
5834 .doit = nl80211_del_station,
5835 .policy = nl80211_policy,
2ec600d6 5836 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5837 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5838 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5839 },
5840 {
5841 .cmd = NL80211_CMD_GET_MPATH,
5842 .doit = nl80211_get_mpath,
5843 .dumpit = nl80211_dump_mpath,
5844 .policy = nl80211_policy,
5845 .flags = GENL_ADMIN_PERM,
41265714 5846 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5847 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5848 },
5849 {
5850 .cmd = NL80211_CMD_SET_MPATH,
5851 .doit = nl80211_set_mpath,
5852 .policy = nl80211_policy,
5853 .flags = GENL_ADMIN_PERM,
41265714 5854 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5855 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5856 },
5857 {
5858 .cmd = NL80211_CMD_NEW_MPATH,
5859 .doit = nl80211_new_mpath,
5860 .policy = nl80211_policy,
5861 .flags = GENL_ADMIN_PERM,
41265714 5862 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5863 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5864 },
5865 {
5866 .cmd = NL80211_CMD_DEL_MPATH,
5867 .doit = nl80211_del_mpath,
5868 .policy = nl80211_policy,
9f1ba906 5869 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5870 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5871 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 5872 },
5873 {
5874 .cmd = NL80211_CMD_SET_BSS,
5875 .doit = nl80211_set_bss,
5876 .policy = nl80211_policy,
b2e1b302 5877 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5878 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5879 NL80211_FLAG_NEED_RTNL,
b2e1b302 5880 },
f130347c
LR		 5881 {
5882 .cmd = NL80211_CMD_GET_REG,
5883 .doit = nl80211_get_reg,
5884 .policy = nl80211_policy,
5885 /* can be retrieved by unprivileged users */
5886 },
b2e1b302
LR		 5887 {
5888 .cmd = NL80211_CMD_SET_REG,
5889 .doit = nl80211_set_reg,
5890 .policy = nl80211_policy,
5891 .flags = GENL_ADMIN_PERM,
5892 },
5893 {
5894 .cmd = NL80211_CMD_REQ_SET_REG,
5895 .doit = nl80211_req_set_reg,
5896 .policy = nl80211_policy,
93da9cc1 5897 .flags = GENL_ADMIN_PERM,
5898 },
5899 {
24bdd9f4
JC		 5900 .cmd = NL80211_CMD_GET_MESH_CONFIG,
5901 .doit = nl80211_get_mesh_config,
93da9cc1 5902 .policy = nl80211_policy,
5903 /* can be retrieved by unprivileged users */
4c476991
JB		 5904 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5905 NL80211_FLAG_NEED_RTNL,
93da9cc1 5906 },
5907 {
24bdd9f4
JC		 5908 .cmd = NL80211_CMD_SET_MESH_CONFIG,
5909 .doit = nl80211_update_mesh_config,
93da9cc1 5910 .policy = nl80211_policy,
9aed3cc1 5911 .flags = GENL_ADMIN_PERM,
29cbe68c 5912 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5913 NL80211_FLAG_NEED_RTNL,
9aed3cc1 5914 },
2a519311
JB		 5915 {
5916 .cmd = NL80211_CMD_TRIGGER_SCAN,
5917 .doit = nl80211_trigger_scan,
5918 .policy = nl80211_policy,
5919 .flags = GENL_ADMIN_PERM,
41265714 5920 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5921 NL80211_FLAG_NEED_RTNL,
2a519311
JB		 5922 },
5923 {
5924 .cmd = NL80211_CMD_GET_SCAN,
5925 .policy = nl80211_policy,
5926 .dumpit = nl80211_dump_scan,
5927 },
807f8a8c
LC		 5928 {
5929 .cmd = NL80211_CMD_START_SCHED_SCAN,
5930 .doit = nl80211_start_sched_scan,
5931 .policy = nl80211_policy,
5932 .flags = GENL_ADMIN_PERM,
5933 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5934 NL80211_FLAG_NEED_RTNL,
5935 },
5936 {
5937 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
5938 .doit = nl80211_stop_sched_scan,
5939 .policy = nl80211_policy,
5940 .flags = GENL_ADMIN_PERM,
5941 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5942 NL80211_FLAG_NEED_RTNL,
5943 },
636a5d36
JM		 5944 {
5945 .cmd = NL80211_CMD_AUTHENTICATE,
5946 .doit = nl80211_authenticate,
5947 .policy = nl80211_policy,
5948 .flags = GENL_ADMIN_PERM,
41265714 5949 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5950 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 5951 },
5952 {
5953 .cmd = NL80211_CMD_ASSOCIATE,
5954 .doit = nl80211_associate,
5955 .policy = nl80211_policy,
5956 .flags = GENL_ADMIN_PERM,
41265714 5957 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5958 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 5959 },
5960 {
5961 .cmd = NL80211_CMD_DEAUTHENTICATE,
5962 .doit = nl80211_deauthenticate,
5963 .policy = nl80211_policy,
5964 .flags = GENL_ADMIN_PERM,
41265714 5965 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5966 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 5967 },
5968 {
5969 .cmd = NL80211_CMD_DISASSOCIATE,
5970 .doit = nl80211_disassociate,
5971 .policy = nl80211_policy,
5972 .flags = GENL_ADMIN_PERM,
41265714 5973 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5974 NL80211_FLAG_NEED_RTNL,
636a5d36 5975 },
04a773ad
JB		 5976 {
5977 .cmd = NL80211_CMD_JOIN_IBSS,
5978 .doit = nl80211_join_ibss,
5979 .policy = nl80211_policy,
5980 .flags = GENL_ADMIN_PERM,
41265714 5981 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5982 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 5983 },
5984 {
5985 .cmd = NL80211_CMD_LEAVE_IBSS,
5986 .doit = nl80211_leave_ibss,
5987 .policy = nl80211_policy,
5988 .flags = GENL_ADMIN_PERM,
41265714 5989 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5990 NL80211_FLAG_NEED_RTNL,
04a773ad 5991 },
aff89a9b
JB		 5992#ifdef CONFIG_NL80211_TESTMODE
5993 {
5994 .cmd = NL80211_CMD_TESTMODE,
5995 .doit = nl80211_testmode_do,
71063f0e 5996 .dumpit = nl80211_testmode_dump,
aff89a9b
JB		 5997 .policy = nl80211_policy,
5998 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5999 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6000 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 6001 },
6002#endif
b23aa676
SO		 6003 {
6004 .cmd = NL80211_CMD_CONNECT,
6005 .doit = nl80211_connect,
6006 .policy = nl80211_policy,
6007 .flags = GENL_ADMIN_PERM,
41265714 6008 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6009 NL80211_FLAG_NEED_RTNL,
b23aa676
SO		 6010 },
6011 {
6012 .cmd = NL80211_CMD_DISCONNECT,
6013 .doit = nl80211_disconnect,
6014 .policy = nl80211_policy,
6015 .flags = GENL_ADMIN_PERM,
41265714 6016 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6017 NL80211_FLAG_NEED_RTNL,
b23aa676 6018 },
463d0183
JB		 6019 {
6020 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
6021 .doit = nl80211_wiphy_netns,
6022 .policy = nl80211_policy,
6023 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6024 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6025 NL80211_FLAG_NEED_RTNL,
463d0183 6026 },
61fa713c
HS		 6027 {
6028 .cmd = NL80211_CMD_GET_SURVEY,
6029 .policy = nl80211_policy,
6030 .dumpit = nl80211_dump_survey,
6031 },
67fbb16b
SO		 6032 {
6033 .cmd = NL80211_CMD_SET_PMKSA,
6034 .doit = nl80211_setdel_pmksa,
6035 .policy = nl80211_policy,
6036 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6037 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6038 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 6039 },
6040 {
6041 .cmd = NL80211_CMD_DEL_PMKSA,
6042 .doit = nl80211_setdel_pmksa,
6043 .policy = nl80211_policy,
6044 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6045 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6046 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 6047 },
6048 {
6049 .cmd = NL80211_CMD_FLUSH_PMKSA,
6050 .doit = nl80211_flush_pmksa,
6051 .policy = nl80211_policy,
6052 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6053 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6054 NL80211_FLAG_NEED_RTNL,
67fbb16b 6055 },
9588bbd5
JM		 6056 {
6057 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
6058 .doit = nl80211_remain_on_channel,
6059 .policy = nl80211_policy,
6060 .flags = GENL_ADMIN_PERM,
41265714 6061 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6062 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 6063 },
6064 {
6065 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
6066 .doit = nl80211_cancel_remain_on_channel,
6067 .policy = nl80211_policy,
6068 .flags = GENL_ADMIN_PERM,
41265714 6069 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6070 NL80211_FLAG_NEED_RTNL,
9588bbd5 6071 },
13ae75b1
JM		 6072 {
6073 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
6074 .doit = nl80211_set_tx_bitrate_mask,
6075 .policy = nl80211_policy,
6076 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6077 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6078 NL80211_FLAG_NEED_RTNL,
13ae75b1 6079 },
026331c4 6080 {
2e161f78
JB		 6081 .cmd = NL80211_CMD_REGISTER_FRAME,
6082 .doit = nl80211_register_mgmt,
026331c4
JM		 6083 .policy = nl80211_policy,
6084 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6085 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6086 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 6087 },
6088 {
2e161f78
JB		 6089 .cmd = NL80211_CMD_FRAME,
6090 .doit = nl80211_tx_mgmt,
026331c4 6091 .policy = nl80211_policy,
f7ca38df
JB		 6092 .flags = GENL_ADMIN_PERM,
6093 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6094 NL80211_FLAG_NEED_RTNL,
6095 },
6096 {
6097 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
6098 .doit = nl80211_tx_mgmt_cancel_wait,
6099 .policy = nl80211_policy,
026331c4 6100 .flags = GENL_ADMIN_PERM,
41265714 6101 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6102 NL80211_FLAG_NEED_RTNL,
026331c4 6103 },
ffb9eb3d
KV		 6104 {
6105 .cmd = NL80211_CMD_SET_POWER_SAVE,
6106 .doit = nl80211_set_power_save,
6107 .policy = nl80211_policy,
6108 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6109 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6110 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 6111 },
6112 {
6113 .cmd = NL80211_CMD_GET_POWER_SAVE,
6114 .doit = nl80211_get_power_save,
6115 .policy = nl80211_policy,
6116 /* can be retrieved by unprivileged users */
4c476991
JB		 6117 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6118 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 6119 },
d6dc1a38
JO		 6120 {
6121 .cmd = NL80211_CMD_SET_CQM,
6122 .doit = nl80211_set_cqm,
6123 .policy = nl80211_policy,
6124 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6125 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6126 NL80211_FLAG_NEED_RTNL,
d6dc1a38 6127 },
f444de05
JB		 6128 {
6129 .cmd = NL80211_CMD_SET_CHANNEL,
6130 .doit = nl80211_set_channel,
6131 .policy = nl80211_policy,
6132 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6133 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6134 NL80211_FLAG_NEED_RTNL,
f444de05 6135 },
e8347eba
BJ		 6136 {
6137 .cmd = NL80211_CMD_SET_WDS_PEER,
6138 .doit = nl80211_set_wds_peer,
6139 .policy = nl80211_policy,
6140 .flags = GENL_ADMIN_PERM,
43b19952
JB		 6141 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6142 NL80211_FLAG_NEED_RTNL,
e8347eba 6143 },
29cbe68c
JB		 6144 {
6145 .cmd = NL80211_CMD_JOIN_MESH,
6146 .doit = nl80211_join_mesh,
6147 .policy = nl80211_policy,
6148 .flags = GENL_ADMIN_PERM,
6149 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6150 NL80211_FLAG_NEED_RTNL,
6151 },
6152 {
6153 .cmd = NL80211_CMD_LEAVE_MESH,
6154 .doit = nl80211_leave_mesh,
6155 .policy = nl80211_policy,
6156 .flags = GENL_ADMIN_PERM,
6157 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6158 NL80211_FLAG_NEED_RTNL,
6159 },
ff1b6e69
JB		 6160 {
6161 .cmd = NL80211_CMD_GET_WOWLAN,
6162 .doit = nl80211_get_wowlan,
6163 .policy = nl80211_policy,
6164 /* can be retrieved by unprivileged users */
6165 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6166 NL80211_FLAG_NEED_RTNL,
6167 },
6168 {
6169 .cmd = NL80211_CMD_SET_WOWLAN,
6170 .doit = nl80211_set_wowlan,
6171 .policy = nl80211_policy,
6172 .flags = GENL_ADMIN_PERM,
6173 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6174 NL80211_FLAG_NEED_RTNL,
6175 },
e5497d76
JB		 6176 {
6177 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
6178 .doit = nl80211_set_rekey_data,
6179 .policy = nl80211_policy,
6180 .flags = GENL_ADMIN_PERM,
6181 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6182 NL80211_FLAG_NEED_RTNL,
6183 },
55682965 6184};
9588bbd5 6185
6039f6d2
JM		 6186static struct genl_multicast_group nl80211_mlme_mcgrp = {
6187 .name = "mlme",
6188};
55682965
JB		 6189
6190/* multicast groups */
6191static struct genl_multicast_group nl80211_config_mcgrp = {
6192 .name = "config",
6193};
2a519311
JB		 6194static struct genl_multicast_group nl80211_scan_mcgrp = {
6195 .name = "scan",
6196};
73d54c9e
LR		 6197static struct genl_multicast_group nl80211_regulatory_mcgrp = {
6198 .name = "regulatory",
6199};
55682965
JB		 6200
6201/* notification functions */
6202
6203void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
6204{
6205 struct sk_buff *msg;
6206
fd2120ca 6207 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 6208 if (!msg)
6209 return;
6210
6211 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
6212 nlmsg_free(msg);
6213 return;
6214 }
6215
463d0183
JB		 6216 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6217 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 6218}
6219
362a415d
JB		 6220static int nl80211_add_scan_req(struct sk_buff *msg,
6221 struct cfg80211_registered_device *rdev)
6222{
6223 struct cfg80211_scan_request *req = rdev->scan_req;
6224 struct nlattr *nest;
6225 int i;
6226
667503dd
JB		 6227 ASSERT_RDEV_LOCK(rdev);
6228
362a415d
JB		 6229 if (WARN_ON(!req))
6230 return 0;
6231
6232 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
6233 if (!nest)
6234 goto nla_put_failure;
6235 for (i = 0; i < req->n_ssids; i++)
6236 NLA_PUT(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid);
6237 nla_nest_end(msg, nest);
6238
6239 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
6240 if (!nest)
6241 goto nla_put_failure;
6242 for (i = 0; i < req->n_channels; i++)
6243 NLA_PUT_U32(msg, i, req->channels[i]->center_freq);
6244 nla_nest_end(msg, nest);
6245
6246 if (req->ie)
6247 NLA_PUT(msg, NL80211_ATTR_IE, req->ie_len, req->ie);
6248
6249 return 0;
6250 nla_put_failure:
6251 return -ENOBUFS;
6252}
6253
a538e2d5
JB		 6254static int nl80211_send_scan_msg(struct sk_buff *msg,
6255 struct cfg80211_registered_device *rdev,
6256 struct net_device *netdev,
6257 u32 pid, u32 seq, int flags,
6258 u32 cmd)
2a519311
JB		 6259{
6260 void *hdr;
6261
6262 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
6263 if (!hdr)
6264 return -1;
6265
b5850a7a 6266 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
2a519311
JB		 6267 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6268
362a415d
JB		 6269 /* ignore errors and send incomplete event anyway */
6270 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 6271
6272 return genlmsg_end(msg, hdr);
6273
6274 nla_put_failure:
6275 genlmsg_cancel(msg, hdr);
6276 return -EMSGSIZE;
6277}
6278
807f8a8c
LC		 6279static int
6280nl80211_send_sched_scan_msg(struct sk_buff *msg,
6281 struct cfg80211_registered_device *rdev,
6282 struct net_device *netdev,
6283 u32 pid, u32 seq, int flags, u32 cmd)
6284{
6285 void *hdr;
6286
6287 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
6288 if (!hdr)
6289 return -1;
6290
6291 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6292 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6293
6294 return genlmsg_end(msg, hdr);
6295
6296 nla_put_failure:
6297 genlmsg_cancel(msg, hdr);
6298 return -EMSGSIZE;
6299}
6300
a538e2d5
JB		 6301void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
6302 struct net_device *netdev)
6303{
6304 struct sk_buff *msg;
6305
6306 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
6307 if (!msg)
6308 return;
6309
6310 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6311 NL80211_CMD_TRIGGER_SCAN) < 0) {
6312 nlmsg_free(msg);
6313 return;
6314 }
6315
463d0183
JB		 6316 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6317 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 6318}
6319
2a519311
JB		 6320void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
6321 struct net_device *netdev)
6322{
6323 struct sk_buff *msg;
6324
fd2120ca 6325 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 6326 if (!msg)
6327 return;
6328
a538e2d5
JB		 6329 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6330 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 6331 nlmsg_free(msg);
6332 return;
6333 }
6334
463d0183
JB		 6335 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6336 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 6337}
6338
6339void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
6340 struct net_device *netdev)
6341{
6342 struct sk_buff *msg;
6343
fd2120ca 6344 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 6345 if (!msg)
6346 return;
6347
a538e2d5
JB		 6348 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6349 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 6350 nlmsg_free(msg);
6351 return;
6352 }
6353
463d0183
JB		 6354 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6355 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 6356}
6357
807f8a8c
LC		 6358void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
6359 struct net_device *netdev)
6360{
6361 struct sk_buff *msg;
6362
6363 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6364 if (!msg)
6365 return;
6366
6367 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
6368 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
6369 nlmsg_free(msg);
6370 return;
6371 }
6372
6373 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6374 nl80211_scan_mcgrp.id, GFP_KERNEL);
6375}
6376
6377void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
6378 struct net_device *netdev, u32 cmd)
6379{
6380 struct sk_buff *msg;
6381
6382 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
6383 if (!msg)
6384 return;
6385
6386 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
6387 nlmsg_free(msg);
6388 return;
6389 }
6390
6391 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6392 nl80211_scan_mcgrp.id, GFP_KERNEL);
6393}
6394
73d54c9e
LR		 6395/*
6396 * This can happen on global regulatory changes or device specific settings
6397 * based on custom world regulatory domains.
6398 */
6399void nl80211_send_reg_change_event(struct regulatory_request *request)
6400{
6401 struct sk_buff *msg;
6402 void *hdr;
6403
fd2120ca 6404 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 6405 if (!msg)
6406 return;
6407
6408 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
6409 if (!hdr) {
6410 nlmsg_free(msg);
6411 return;
6412 }
6413
6414 /* Userspace can always count this one always being set */
6415 NLA_PUT_U8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator);
6416
6417 if (request->alpha2[0] == '0' && request->alpha2[1] == '0')
6418 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6419 NL80211_REGDOM_TYPE_WORLD);
6420 else if (request->alpha2[0] == '9' && request->alpha2[1] == '9')
6421 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6422 NL80211_REGDOM_TYPE_CUSTOM_WORLD);
6423 else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
6424 request->intersect)
6425 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6426 NL80211_REGDOM_TYPE_INTERSECTION);
6427 else {
6428 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6429 NL80211_REGDOM_TYPE_COUNTRY);
6430 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2, request->alpha2);
6431 }
6432
6433 if (wiphy_idx_valid(request->wiphy_idx))
6434 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx);
6435
6436 if (genlmsg_end(msg, hdr) < 0) {
6437 nlmsg_free(msg);
6438 return;
6439 }
6440
bc43b28c 6441 rcu_read_lock();
463d0183 6442 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 6443 GFP_ATOMIC);
6444 rcu_read_unlock();
73d54c9e
LR		 6445
6446 return;
6447
6448nla_put_failure:
6449 genlmsg_cancel(msg, hdr);
6450 nlmsg_free(msg);
6451}
6452
6039f6d2
JM		 6453static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
6454 struct net_device *netdev,
6455 const u8 *buf, size_t len,
e6d6e342 6456 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 6457{
6458 struct sk_buff *msg;
6459 void *hdr;
6460
e6d6e342 6461 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 6462 if (!msg)
6463 return;
6464
6465 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
6466 if (!hdr) {
6467 nlmsg_free(msg);
6468 return;
6469 }
6470
6471 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6472 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6473 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
6474
6475 if (genlmsg_end(msg, hdr) < 0) {
6476 nlmsg_free(msg);
6477 return;
6478 }
6479
463d0183
JB		 6480 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6481 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 6482 return;
6483
6484 nla_put_failure:
6485 genlmsg_cancel(msg, hdr);
6486 nlmsg_free(msg);
6487}
6488
6489void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6490 struct net_device *netdev, const u8 *buf,
6491 size_t len, gfp_t gfp)
6039f6d2
JM		 6492{
6493 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6494 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 6495}
6496
6497void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
6498 struct net_device *netdev, const u8 *buf,
e6d6e342 6499 size_t len, gfp_t gfp)
6039f6d2 6500{
e6d6e342
JB		 6501 nl80211_send_mlme_event(rdev, netdev, buf, len,
6502 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 6503}
6504
53b46b84 6505void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6506 struct net_device *netdev, const u8 *buf,
6507 size_t len, gfp_t gfp)
6039f6d2
JM		 6508{
6509 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6510 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 6511}
6512
53b46b84
JM		 6513void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
6514 struct net_device *netdev, const u8 *buf,
e6d6e342 6515 size_t len, gfp_t gfp)
6039f6d2
JM		 6516{
6517 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6518 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 6519}
6520
cf4e594e
JM		 6521void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
6522 struct net_device *netdev, const u8 *buf,
6523 size_t len, gfp_t gfp)
6524{
6525 nl80211_send_mlme_event(rdev, netdev, buf, len,
6526 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
6527}
6528
6529void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
6530 struct net_device *netdev, const u8 *buf,
6531 size_t len, gfp_t gfp)
6532{
6533 nl80211_send_mlme_event(rdev, netdev, buf, len,
6534 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
6535}
6536
1b06bb40
LR		 6537static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
6538 struct net_device *netdev, int cmd,
e6d6e342 6539 const u8 *addr, gfp_t gfp)
1965c853
JM		 6540{
6541 struct sk_buff *msg;
6542 void *hdr;
6543
e6d6e342 6544 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 6545 if (!msg)
6546 return;
6547
6548 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
6549 if (!hdr) {
6550 nlmsg_free(msg);
6551 return;
6552 }
6553
6554 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6555 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6556 NLA_PUT_FLAG(msg, NL80211_ATTR_TIMED_OUT);
6557 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
6558
6559 if (genlmsg_end(msg, hdr) < 0) {
6560 nlmsg_free(msg);
6561 return;
6562 }
6563
463d0183
JB		 6564 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6565 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 6566 return;
6567
6568 nla_put_failure:
6569 genlmsg_cancel(msg, hdr);
6570 nlmsg_free(msg);
6571}
6572
6573void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6574 struct net_device *netdev, const u8 *addr,
6575 gfp_t gfp)
1965c853
JM		 6576{
6577 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 6578 addr, gfp);
1965c853
JM		 6579}
6580
6581void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6582 struct net_device *netdev, const u8 *addr,
6583 gfp_t gfp)
1965c853 6584{
e6d6e342
JB		 6585 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
6586 addr, gfp);
1965c853
JM		 6587}
6588
b23aa676
SO		 6589void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
6590 struct net_device *netdev, const u8 *bssid,
6591 const u8 *req_ie, size_t req_ie_len,
6592 const u8 *resp_ie, size_t resp_ie_len,
6593 u16 status, gfp_t gfp)
6594{
6595 struct sk_buff *msg;
6596 void *hdr;
6597
6598 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6599 if (!msg)
6600 return;
6601
6602 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
6603 if (!hdr) {
6604 nlmsg_free(msg);
6605 return;
6606 }
6607
6608 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6609 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6610 if (bssid)
6611 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6612 NLA_PUT_U16(msg, NL80211_ATTR_STATUS_CODE, status);
6613 if (req_ie)
6614 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
6615 if (resp_ie)
6616 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
6617
6618 if (genlmsg_end(msg, hdr) < 0) {
6619 nlmsg_free(msg);
6620 return;
6621 }
6622
463d0183
JB		 6623 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6624 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 6625 return;
6626
6627 nla_put_failure:
6628 genlmsg_cancel(msg, hdr);
6629 nlmsg_free(msg);
6630
6631}
6632
6633void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
6634 struct net_device *netdev, const u8 *bssid,
6635 const u8 *req_ie, size_t req_ie_len,
6636 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
6637{
6638 struct sk_buff *msg;
6639 void *hdr;
6640
6641 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6642 if (!msg)
6643 return;
6644
6645 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
6646 if (!hdr) {
6647 nlmsg_free(msg);
6648 return;
6649 }
6650
6651 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6652 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6653 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6654 if (req_ie)
6655 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
6656 if (resp_ie)
6657 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
6658
6659 if (genlmsg_end(msg, hdr) < 0) {
6660 nlmsg_free(msg);
6661 return;
6662 }
6663
463d0183
JB		 6664 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6665 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 6666 return;
6667
6668 nla_put_failure:
6669 genlmsg_cancel(msg, hdr);
6670 nlmsg_free(msg);
6671
6672}
6673
6674void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
6675 struct net_device *netdev, u16 reason,
667503dd 6676 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 6677{
6678 struct sk_buff *msg;
6679 void *hdr;
6680
667503dd 6681 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
b23aa676
SO		 6682 if (!msg)
6683 return;
6684
6685 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
6686 if (!hdr) {
6687 nlmsg_free(msg);
6688 return;
6689 }
6690
6691 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6692 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6693 if (from_ap && reason)
6694 NLA_PUT_U16(msg, NL80211_ATTR_REASON_CODE, reason);
6695 if (from_ap)
6696 NLA_PUT_FLAG(msg, NL80211_ATTR_DISCONNECTED_BY_AP);
6697 if (ie)
6698 NLA_PUT(msg, NL80211_ATTR_IE, ie_len, ie);
6699
6700 if (genlmsg_end(msg, hdr) < 0) {
6701 nlmsg_free(msg);
6702 return;
6703 }
6704
463d0183
JB		 6705 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6706 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 6707 return;
6708
6709 nla_put_failure:
6710 genlmsg_cancel(msg, hdr);
6711 nlmsg_free(msg);
6712
6713}
6714
04a773ad
JB		 6715void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
6716 struct net_device *netdev, const u8 *bssid,
6717 gfp_t gfp)
6718{
6719 struct sk_buff *msg;
6720 void *hdr;
6721
fd2120ca 6722 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 6723 if (!msg)
6724 return;
6725
6726 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
6727 if (!hdr) {
6728 nlmsg_free(msg);
6729 return;
6730 }
6731
6732 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6733 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6734 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6735
6736 if (genlmsg_end(msg, hdr) < 0) {
6737 nlmsg_free(msg);
6738 return;
6739 }
6740
463d0183
JB		 6741 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6742 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 6743 return;
6744
6745 nla_put_failure:
6746 genlmsg_cancel(msg, hdr);
6747 nlmsg_free(msg);
6748}
6749
c93b5e71
JC		 6750void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
6751 struct net_device *netdev,
6752 const u8 *macaddr, const u8* ie, u8 ie_len,
6753 gfp_t gfp)
6754{
6755 struct sk_buff *msg;
6756 void *hdr;
6757
6758 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6759 if (!msg)
6760 return;
6761
6762 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
6763 if (!hdr) {
6764 nlmsg_free(msg);
6765 return;
6766 }
6767
6768 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6769 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6770 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr);
6771 if (ie_len && ie)
6772 NLA_PUT(msg, NL80211_ATTR_IE, ie_len , ie);
6773
6774 if (genlmsg_end(msg, hdr) < 0) {
6775 nlmsg_free(msg);
6776 return;
6777 }
6778
6779 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6780 nl80211_mlme_mcgrp.id, gfp);
6781 return;
6782
6783 nla_put_failure:
6784 genlmsg_cancel(msg, hdr);
6785 nlmsg_free(msg);
6786}
6787
a3b8b056
JM		 6788void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
6789 struct net_device *netdev, const u8 *addr,
6790 enum nl80211_key_type key_type, int key_id,
e6d6e342 6791 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 6792{
6793 struct sk_buff *msg;
6794 void *hdr;
6795
e6d6e342 6796 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 6797 if (!msg)
6798 return;
6799
6800 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
6801 if (!hdr) {
6802 nlmsg_free(msg);
6803 return;
6804 }
6805
6806 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6807 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6808 if (addr)
6809 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
6810 NLA_PUT_U32(msg, NL80211_ATTR_KEY_TYPE, key_type);
a66b98db
AN		 6811 if (key_id != -1)
6812 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_id);
a3b8b056
JM		 6813 if (tsc)
6814 NLA_PUT(msg, NL80211_ATTR_KEY_SEQ, 6, tsc);
6815
6816 if (genlmsg_end(msg, hdr) < 0) {
6817 nlmsg_free(msg);
6818 return;
6819 }
6820
463d0183
JB		 6821 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6822 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 6823 return;
6824
6825 nla_put_failure:
6826 genlmsg_cancel(msg, hdr);
6827 nlmsg_free(msg);
6828}
6829
6bad8766
LR		 6830void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
6831 struct ieee80211_channel *channel_before,
6832 struct ieee80211_channel *channel_after)
6833{
6834 struct sk_buff *msg;
6835 void *hdr;
6836 struct nlattr *nl_freq;
6837
fd2120ca 6838 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 6839 if (!msg)
6840 return;
6841
6842 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
6843 if (!hdr) {
6844 nlmsg_free(msg);
6845 return;
6846 }
6847
6848 /*
6849 * Since we are applying the beacon hint to a wiphy we know its
6850 * wiphy_idx is valid
6851 */
6852 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy));
6853
6854 /* Before */
6855 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
6856 if (!nl_freq)
6857 goto nla_put_failure;
6858 if (nl80211_msg_put_channel(msg, channel_before))
6859 goto nla_put_failure;
6860 nla_nest_end(msg, nl_freq);
6861
6862 /* After */
6863 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
6864 if (!nl_freq)
6865 goto nla_put_failure;
6866 if (nl80211_msg_put_channel(msg, channel_after))
6867 goto nla_put_failure;
6868 nla_nest_end(msg, nl_freq);
6869
6870 if (genlmsg_end(msg, hdr) < 0) {
6871 nlmsg_free(msg);
6872 return;
6873 }
6874
463d0183
JB		 6875 rcu_read_lock();
6876 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
6877 GFP_ATOMIC);
6878 rcu_read_unlock();
6bad8766
LR		 6879
6880 return;
6881
6882nla_put_failure:
6883 genlmsg_cancel(msg, hdr);
6884 nlmsg_free(msg);
6885}
6886
9588bbd5
JM		 6887static void nl80211_send_remain_on_chan_event(
6888 int cmd, struct cfg80211_registered_device *rdev,
6889 struct net_device *netdev, u64 cookie,
6890 struct ieee80211_channel *chan,
6891 enum nl80211_channel_type channel_type,
6892 unsigned int duration, gfp_t gfp)
6893{
6894 struct sk_buff *msg;
6895 void *hdr;
6896
6897 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6898 if (!msg)
6899 return;
6900
6901 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
6902 if (!hdr) {
6903 nlmsg_free(msg);
6904 return;
6905 }
6906
6907 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6908 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6909 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq);
6910 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, channel_type);
6911 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
6912
6913 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL)
6914 NLA_PUT_U32(msg, NL80211_ATTR_DURATION, duration);
6915
6916 if (genlmsg_end(msg, hdr) < 0) {
6917 nlmsg_free(msg);
6918 return;
6919 }
6920
6921 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6922 nl80211_mlme_mcgrp.id, gfp);
6923 return;
6924
6925 nla_put_failure:
6926 genlmsg_cancel(msg, hdr);
6927 nlmsg_free(msg);
6928}
6929
6930void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
6931 struct net_device *netdev, u64 cookie,
6932 struct ieee80211_channel *chan,
6933 enum nl80211_channel_type channel_type,
6934 unsigned int duration, gfp_t gfp)
6935{
6936 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
6937 rdev, netdev, cookie, chan,
6938 channel_type, duration, gfp);
6939}
6940
6941void nl80211_send_remain_on_channel_cancel(
6942 struct cfg80211_registered_device *rdev, struct net_device *netdev,
6943 u64 cookie, struct ieee80211_channel *chan,
6944 enum nl80211_channel_type channel_type, gfp_t gfp)
6945{
6946 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
6947 rdev, netdev, cookie, chan,
6948 channel_type, 0, gfp);
6949}
6950
98b62183
JB		 6951void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
6952 struct net_device *dev, const u8 *mac_addr,
6953 struct station_info *sinfo, gfp_t gfp)
6954{
6955 struct sk_buff *msg;
6956
6957 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6958 if (!msg)
6959 return;
6960
6961 if (nl80211_send_station(msg, 0, 0, 0, dev, mac_addr, sinfo) < 0) {
6962 nlmsg_free(msg);
6963 return;
6964 }
6965
6966 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6967 nl80211_mlme_mcgrp.id, gfp);
6968}
6969
ec15e68b
JM		 6970void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
6971 struct net_device *dev, const u8 *mac_addr,
6972 gfp_t gfp)
6973{
6974 struct sk_buff *msg;
6975 void *hdr;
6976
6977 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6978 if (!msg)
6979 return;
6980
6981 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
6982 if (!hdr) {
6983 nlmsg_free(msg);
6984 return;
6985 }
6986
6987 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
6988 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
6989
6990 if (genlmsg_end(msg, hdr) < 0) {
6991 nlmsg_free(msg);
6992 return;
6993 }
6994
6995 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6996 nl80211_mlme_mcgrp.id, gfp);
6997 return;
6998
6999 nla_put_failure:
7000 genlmsg_cancel(msg, hdr);
7001 nlmsg_free(msg);
7002}
7003
2e161f78
JB		 7004int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
7005 struct net_device *netdev, u32 nlpid,
7006 int freq, const u8 *buf, size_t len, gfp_t gfp)
026331c4
JM		 7007{
7008 struct sk_buff *msg;
7009 void *hdr;
7010 int err;
7011
7012 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7013 if (!msg)
7014 return -ENOMEM;
7015
2e161f78 7016 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 7017 if (!hdr) {
7018 nlmsg_free(msg);
7019 return -ENOMEM;
7020 }
7021
7022 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7023 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7024 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, freq);
7025 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
7026
7027 err = genlmsg_end(msg, hdr);
7028 if (err < 0) {
7029 nlmsg_free(msg);
7030 return err;
7031 }
7032
7033 err = genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
7034 if (err < 0)
7035 return err;
7036 return 0;
7037
7038 nla_put_failure:
7039 genlmsg_cancel(msg, hdr);
7040 nlmsg_free(msg);
7041 return -ENOBUFS;
7042}
7043
2e161f78
JB		 7044void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
7045 struct net_device *netdev, u64 cookie,
7046 const u8 *buf, size_t len, bool ack,
7047 gfp_t gfp)
026331c4
JM		 7048{
7049 struct sk_buff *msg;
7050 void *hdr;
7051
7052 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7053 if (!msg)
7054 return;
7055
2e161f78 7056 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 7057 if (!hdr) {
7058 nlmsg_free(msg);
7059 return;
7060 }
7061
7062 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7063 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7064 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
7065 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
7066 if (ack)
7067 NLA_PUT_FLAG(msg, NL80211_ATTR_ACK);
7068
7069 if (genlmsg_end(msg, hdr) < 0) {
7070 nlmsg_free(msg);
7071 return;
7072 }
7073
7074 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
7075 return;
7076
7077 nla_put_failure:
7078 genlmsg_cancel(msg, hdr);
7079 nlmsg_free(msg);
7080}
7081
d6dc1a38
JO		 7082void
7083nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
7084 struct net_device *netdev,
7085 enum nl80211_cqm_rssi_threshold_event rssi_event,
7086 gfp_t gfp)
7087{
7088 struct sk_buff *msg;
7089 struct nlattr *pinfoattr;
7090 void *hdr;
7091
7092 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7093 if (!msg)
7094 return;
7095
7096 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
7097 if (!hdr) {
7098 nlmsg_free(msg);
7099 return;
7100 }
7101
7102 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7103 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7104
7105 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
7106 if (!pinfoattr)
7107 goto nla_put_failure;
7108
7109 NLA_PUT_U32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
7110 rssi_event);
7111
7112 nla_nest_end(msg, pinfoattr);
7113
7114 if (genlmsg_end(msg, hdr) < 0) {
7115 nlmsg_free(msg);
7116 return;
7117 }
7118
7119 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7120 nl80211_mlme_mcgrp.id, gfp);
7121 return;
7122
7123 nla_put_failure:
7124 genlmsg_cancel(msg, hdr);
7125 nlmsg_free(msg);
7126}
7127
e5497d76
JB		 7128void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
7129 struct net_device *netdev, const u8 *bssid,
7130 const u8 *replay_ctr, gfp_t gfp)
7131{
7132 struct sk_buff *msg;
7133 struct nlattr *rekey_attr;
7134 void *hdr;
7135
7136 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7137 if (!msg)
7138 return;
7139
7140 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
7141 if (!hdr) {
7142 nlmsg_free(msg);
7143 return;
7144 }
7145
7146 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7147 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7148 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
7149
7150 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
7151 if (!rekey_attr)
7152 goto nla_put_failure;
7153
7154 NLA_PUT(msg, NL80211_REKEY_DATA_REPLAY_CTR,
7155 NL80211_REPLAY_CTR_LEN, replay_ctr);
7156
7157 nla_nest_end(msg, rekey_attr);
7158
7159 if (genlmsg_end(msg, hdr) < 0) {
7160 nlmsg_free(msg);
7161 return;
7162 }
7163
7164 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7165 nl80211_mlme_mcgrp.id, gfp);
7166 return;
7167
7168 nla_put_failure:
7169 genlmsg_cancel(msg, hdr);
7170 nlmsg_free(msg);
7171}
7172
c063dbf5
JB		 7173void
7174nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
7175 struct net_device *netdev, const u8 *peer,
7176 u32 num_packets, gfp_t gfp)
7177{
7178 struct sk_buff *msg;
7179 struct nlattr *pinfoattr;
7180 void *hdr;
7181
7182 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7183 if (!msg)
7184 return;
7185
7186 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
7187 if (!hdr) {
7188 nlmsg_free(msg);
7189 return;
7190 }
7191
7192 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7193 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7194 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, peer);
7195
7196 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
7197 if (!pinfoattr)
7198 goto nla_put_failure;
7199
7200 NLA_PUT_U32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets);
7201
7202 nla_nest_end(msg, pinfoattr);
7203
7204 if (genlmsg_end(msg, hdr) < 0) {
7205 nlmsg_free(msg);
7206 return;
7207 }
7208
7209 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7210 nl80211_mlme_mcgrp.id, gfp);
7211 return;
7212
7213 nla_put_failure:
7214 genlmsg_cancel(msg, hdr);
7215 nlmsg_free(msg);
7216}
7217
026331c4
JM		 7218static int nl80211_netlink_notify(struct notifier_block * nb,
7219 unsigned long state,
7220 void *_notify)
7221{
7222 struct netlink_notify *notify = _notify;
7223 struct cfg80211_registered_device *rdev;
7224 struct wireless_dev *wdev;
7225
7226 if (state != NETLINK_URELEASE)
7227 return NOTIFY_DONE;
7228
7229 rcu_read_lock();
7230
7231 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list)
7232 list_for_each_entry_rcu(wdev, &rdev->netdev_list, list)
2e161f78 7233 cfg80211_mlme_unregister_socket(wdev, notify->pid);
026331c4
JM		 7234
7235 rcu_read_unlock();
7236
7237 return NOTIFY_DONE;
7238}
7239
7240static struct notifier_block nl80211_netlink_notifier = {
7241 .notifier_call = nl80211_netlink_notify,
7242};
7243
55682965
JB		 7244/* initialisation/exit functions */
7245
7246int nl80211_init(void)
7247{
0d63cbb5 7248 int err;
55682965 7249
0d63cbb5
MM		 7250 err = genl_register_family_with_ops(&nl80211_fam,
7251 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 7252 if (err)
7253 return err;
7254
55682965
JB		 7255 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
7256 if (err)
7257 goto err_out;
7258
2a519311
JB		 7259 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
7260 if (err)
7261 goto err_out;
7262
73d54c9e
LR		 7263 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
7264 if (err)
7265 goto err_out;
7266
6039f6d2
JM		 7267 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
7268 if (err)
7269 goto err_out;
7270
aff89a9b
JB		 7271#ifdef CONFIG_NL80211_TESTMODE
7272 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
7273 if (err)
7274 goto err_out;
7275#endif
7276
026331c4
JM		 7277 err = netlink_register_notifier(&nl80211_netlink_notifier);
7278 if (err)
7279 goto err_out;
7280
55682965
JB		 7281 return 0;
7282 err_out:
7283 genl_unregister_family(&nl80211_fam);
7284 return err;
7285}
7286
7287void nl80211_exit(void)
7288{
026331c4 7289 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 7290 genl_unregister_family(&nl80211_fam);
7291}
ubuntu-bionic-kernel mirror