]> git.proxmox.com Git - mirror_ubuntu-eoan-kernel.git/blame - net/wireless/nl80211.c
projects / mirror_ubuntu-eoan-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
iwlagn: iwl-agn-rs: remove unnecessary null check for sta and lq_sta
[mirror_ubuntu-eoan-kernel.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
5a0e3ad6 10#include <linux/slab.h>
55682965
JB		 11#include <linux/list.h>
12#include <linux/if_ether.h>
13#include <linux/ieee80211.h>
14#include <linux/nl80211.h>
15#include <linux/rtnetlink.h>
16#include <linux/netlink.h>
2a519311 17#include <linux/etherdevice.h>
463d0183 18#include <net/net_namespace.h>
55682965
JB		 19#include <net/genetlink.h>
20#include <net/cfg80211.h>
463d0183 21#include <net/sock.h>
55682965
JB		 22#include "core.h"
23#include "nl80211.h"
b2e1b302 24#include "reg.h"
55682965 25
5fb628e9
JM		 26static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type);
27static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
28 struct genl_info *info,
29 struct cfg80211_crypto_settings *settings,
30 int cipher_limit);
31
4c476991
JB		 32static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
33 struct genl_info *info);
34static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
35 struct genl_info *info);
36
55682965
JB		 37/* the netlink family */
38static struct genl_family nl80211_fam = {
39 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
40 .name = "nl80211", /* have users key off the name instead */
41 .hdrsize = 0, /* no private header */
42 .version = 1, /* no particular meaning now */
43 .maxattr = NL80211_ATTR_MAX,
463d0183 44 .netnsok = true,
4c476991
JB		 45 .pre_doit = nl80211_pre_doit,
46 .post_doit = nl80211_post_doit,
55682965
JB		 47};
48
79c97e97 49/* internal helper: get rdev and dev */
463d0183 50static int get_rdev_dev_by_info_ifindex(struct genl_info *info,
79c97e97 51 struct cfg80211_registered_device **rdev,
55682965
JB		 52 struct net_device **dev)
53{
463d0183 54 struct nlattr **attrs = info->attrs;
55682965
JB		 55 int ifindex;
56
bba95fef 57 if (!attrs[NL80211_ATTR_IFINDEX])
55682965
JB		 58 return -EINVAL;
59
bba95fef 60 ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
463d0183 61 *dev = dev_get_by_index(genl_info_net(info), ifindex);
55682965
JB		 62 if (!*dev)
63 return -ENODEV;
64
463d0183 65 *rdev = cfg80211_get_dev_from_ifindex(genl_info_net(info), ifindex);
79c97e97 66 if (IS_ERR(*rdev)) {
55682965 67 dev_put(*dev);
79c97e97 68 return PTR_ERR(*rdev);
55682965
JB		 69 }
70
71 return 0;
72}
73
74/* policy for the attributes */
b54452b0 75static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
55682965
JB		 76 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
77 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 78 .len = 20-1 },
31888487 79 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
72bdcf34 80 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 81 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
b9a5f8ca
JM		 82 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
83 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
84 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
85 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 86 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
55682965
JB		 87
88 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
89 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
90 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f
JB		 91
92 [NL80211_ATTR_MAC] = { .type = NLA_BINARY, .len = ETH_ALEN },
3e5d7649 93 [NL80211_ATTR_PREV_BSSID] = { .type = NLA_BINARY, .len = ETH_ALEN },
41ade00f 94
b9454e83 95 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 96 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
97 .len = WLAN_MAX_KEY_LEN },
98 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
99 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
100 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
9f26a952 101 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
e31b8213 102 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
ed1b6cc7
JB		 103
104 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
105 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
106 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
107 .len = IEEE80211_MAX_DATA_LEN },
108 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
109 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 110 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
111 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
112 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
113 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
114 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 115 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 116 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 117 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6
LCC		 118 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
119 .len = IEEE80211_MAX_MESH_ID_LEN },
120 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 121
b2e1b302
LR		 122 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
123 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
124
9f1ba906
JM		 125 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
126 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
127 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 128 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
129 .len = NL80211_MAX_SUPP_RATES },
50b12f59 130 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 131
24bdd9f4 132 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 133 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 134
36aedc90
JM		 135 [NL80211_ATTR_HT_CAPABILITY] = { .type = NLA_BINARY,
136 .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 137
138 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
139 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
140 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 141 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
142 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 143
144 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
145 .len = IEEE80211_MAX_SSID_LEN },
146 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
147 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 148 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 149 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 150 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 151 [NL80211_ATTR_STA_FLAGS2] = {
152 .len = sizeof(struct nl80211_sta_flag_update),
153 },
3f77316c 154 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 155 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
156 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
b23aa676
SO		 157 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
158 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
159 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 160 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 161 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
67fbb16b
SO		 162 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
163 .len = WLAN_PMKID_LEN },
9588bbd5
JM		 164 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
165 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 166 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 167 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
168 .len = IEEE80211_MAX_DATA_LEN },
169 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ffb9eb3d 170 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
d6dc1a38 171 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 172 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 173 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 174 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
175 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 176 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 177 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
178 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 179 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 180 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 181 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 182 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
9c3990aa 183 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
bbe6ad6d 184 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 185 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 186 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
32e9de84 187 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
9946ecfb
JM		 188 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
189 .len = IEEE80211_MAX_DATA_LEN },
190 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
191 .len = IEEE80211_MAX_DATA_LEN },
f4b34b55 192 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 193 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 194 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
55682965
JB		 195};
196
e31b8213 197/* policy for the key attributes */
b54452b0 198static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 199 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 200 [NL80211_KEY_IDX] = { .type = NLA_U8 },
201 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
202 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
203 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
204 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
e31b8213 205 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
dbd2fd65
JB		 206 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
207};
208
209/* policy for the key default flags */
210static const struct nla_policy
211nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
212 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
213 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 214};
215
ff1b6e69
JB		 216/* policy for WoWLAN attributes */
217static const struct nla_policy
218nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
219 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
220 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
221 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
222 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 223 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
224 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
225 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
226 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
ff1b6e69
JB		 227};
228
e5497d76
JB		 229/* policy for GTK rekey offload attributes */
230static const struct nla_policy
231nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
232 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
233 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
234 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
235};
236
a1f1c21c
LC		 237static const struct nla_policy
238nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
239 [NL80211_ATTR_SCHED_SCAN_MATCH_SSID] = { .type = NLA_BINARY,
240 .len = IEEE80211_MAX_SSID_LEN },
241};
242
a043897a
HS		 243/* ifidx get helper */
244static int nl80211_get_ifidx(struct netlink_callback *cb)
245{
246 int res;
247
248 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
249 nl80211_fam.attrbuf, nl80211_fam.maxattr,
250 nl80211_policy);
251 if (res)
252 return res;
253
254 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
255 return -EINVAL;
256
257 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
258 if (!res)
259 return -EINVAL;
260 return res;
261}
262
67748893
JB		 263static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
264 struct netlink_callback *cb,
265 struct cfg80211_registered_device **rdev,
266 struct net_device **dev)
267{
268 int ifidx = cb->args[0];
269 int err;
270
271 if (!ifidx)
272 ifidx = nl80211_get_ifidx(cb);
273 if (ifidx < 0)
274 return ifidx;
275
276 cb->args[0] = ifidx;
277
278 rtnl_lock();
279
280 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
281 if (!*dev) {
282 err = -ENODEV;
283 goto out_rtnl;
284 }
285
286 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3cc25e51
FF		 287 if (IS_ERR(*rdev)) {
288 err = PTR_ERR(*rdev);
67748893
JB		 289 goto out_rtnl;
290 }
291
292 return 0;
293 out_rtnl:
294 rtnl_unlock();
295 return err;
296}
297
298static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
299{
300 cfg80211_unlock_rdev(rdev);
301 rtnl_unlock();
302}
303
f4a11bb0
JB		 304/* IE validation */
305static bool is_valid_ie_attr(const struct nlattr *attr)
306{
307 const u8 *pos;
308 int len;
309
310 if (!attr)
311 return true;
312
313 pos = nla_data(attr);
314 len = nla_len(attr);
315
316 while (len) {
317 u8 elemlen;
318
319 if (len < 2)
320 return false;
321 len -= 2;
322
323 elemlen = pos[1];
324 if (elemlen > len)
325 return false;
326
327 len -= elemlen;
328 pos += 2 + elemlen;
329 }
330
331 return true;
332}
333
55682965
JB		 334/* message building helper */
335static inline void *nl80211hdr_put(struct sk_buff *skb, u32 pid, u32 seq,
336 int flags, u8 cmd)
337{
338 /* since there is no private header just add the generic one */
339 return genlmsg_put(skb, pid, seq, &nl80211_fam, flags, cmd);
340}
341
5dab3b8a
LR		 342static int nl80211_msg_put_channel(struct sk_buff *msg,
343 struct ieee80211_channel *chan)
344{
345 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_FREQ,
346 chan->center_freq);
347
348 if (chan->flags & IEEE80211_CHAN_DISABLED)
349 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_DISABLED);
350 if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN)
351 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN);
352 if (chan->flags & IEEE80211_CHAN_NO_IBSS)
353 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_NO_IBSS);
354 if (chan->flags & IEEE80211_CHAN_RADAR)
355 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_RADAR);
356
357 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
358 DBM_TO_MBM(chan->max_power));
359
360 return 0;
361
362 nla_put_failure:
363 return -ENOBUFS;
364}
365
55682965
JB		 366/* netlink command implementations */
367
b9454e83
JB		 368struct key_parse {
369 struct key_params p;
370 int idx;
e31b8213 371 int type;
b9454e83 372 bool def, defmgmt;
dbd2fd65 373 bool def_uni, def_multi;
b9454e83
JB		 374};
375
376static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
377{
378 struct nlattr *tb[NL80211_KEY_MAX + 1];
379 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
380 nl80211_key_policy);
381 if (err)
382 return err;
383
384 k->def = !!tb[NL80211_KEY_DEFAULT];
385 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
386
dbd2fd65
JB		 387 if (k->def) {
388 k->def_uni = true;
389 k->def_multi = true;
390 }
391 if (k->defmgmt)
392 k->def_multi = true;
393
b9454e83
JB		 394 if (tb[NL80211_KEY_IDX])
395 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
396
397 if (tb[NL80211_KEY_DATA]) {
398 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
399 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
400 }
401
402 if (tb[NL80211_KEY_SEQ]) {
403 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
404 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
405 }
406
407 if (tb[NL80211_KEY_CIPHER])
408 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
409
e31b8213
JB		 410 if (tb[NL80211_KEY_TYPE]) {
411 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
412 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
413 return -EINVAL;
414 }
415
dbd2fd65
JB		 416 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
417 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
418 int err = nla_parse_nested(kdt,
419 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
420 tb[NL80211_KEY_DEFAULT_TYPES],
421 nl80211_key_default_policy);
422 if (err)
423 return err;
424
425 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
426 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
427 }
428
b9454e83
JB		 429 return 0;
430}
431
432static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
433{
434 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
435 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
436 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
437 }
438
439 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
440 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
441 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
442 }
443
444 if (info->attrs[NL80211_ATTR_KEY_IDX])
445 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
446
447 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
448 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
449
450 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
451 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
452
dbd2fd65
JB		 453 if (k->def) {
454 k->def_uni = true;
455 k->def_multi = true;
456 }
457 if (k->defmgmt)
458 k->def_multi = true;
459
e31b8213
JB		 460 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
461 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
462 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
463 return -EINVAL;
464 }
465
dbd2fd65
JB		 466 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
467 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
468 int err = nla_parse_nested(
469 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
470 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
471 nl80211_key_default_policy);
472 if (err)
473 return err;
474
475 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
476 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
477 }
478
b9454e83
JB		 479 return 0;
480}
481
482static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
483{
484 int err;
485
486 memset(k, 0, sizeof(*k));
487 k->idx = -1;
e31b8213 488 k->type = -1;
b9454e83
JB		 489
490 if (info->attrs[NL80211_ATTR_KEY])
491 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
492 else
493 err = nl80211_parse_key_old(info, k);
494
495 if (err)
496 return err;
497
498 if (k->def && k->defmgmt)
499 return -EINVAL;
500
dbd2fd65
JB		 501 if (k->defmgmt) {
502 if (k->def_uni || !k->def_multi)
503 return -EINVAL;
504 }
505
b9454e83
JB		 506 if (k->idx != -1) {
507 if (k->defmgmt) {
508 if (k->idx < 4 || k->idx > 5)
509 return -EINVAL;
510 } else if (k->def) {
511 if (k->idx < 0 || k->idx > 3)
512 return -EINVAL;
513 } else {
514 if (k->idx < 0 || k->idx > 5)
515 return -EINVAL;
516 }
517 }
518
519 return 0;
520}
521
fffd0934
JB		 522static struct cfg80211_cached_keys *
523nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
524 struct nlattr *keys)
525{
526 struct key_parse parse;
527 struct nlattr *key;
528 struct cfg80211_cached_keys *result;
529 int rem, err, def = 0;
530
531 result = kzalloc(sizeof(*result), GFP_KERNEL);
532 if (!result)
533 return ERR_PTR(-ENOMEM);
534
535 result->def = -1;
536 result->defmgmt = -1;
537
538 nla_for_each_nested(key, keys, rem) {
539 memset(&parse, 0, sizeof(parse));
540 parse.idx = -1;
541
542 err = nl80211_parse_key_new(key, &parse);
543 if (err)
544 goto error;
545 err = -EINVAL;
546 if (!parse.p.key)
547 goto error;
548 if (parse.idx < 0 || parse.idx > 4)
549 goto error;
550 if (parse.def) {
551 if (def)
552 goto error;
553 def = 1;
554 result->def = parse.idx;
dbd2fd65
JB		 555 if (!parse.def_uni || !parse.def_multi)
556 goto error;
fffd0934
JB		 557 } else if (parse.defmgmt)
558 goto error;
559 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 560 parse.idx, false, NULL);
fffd0934
JB		 561 if (err)
562 goto error;
563 result->params[parse.idx].cipher = parse.p.cipher;
564 result->params[parse.idx].key_len = parse.p.key_len;
565 result->params[parse.idx].key = result->data[parse.idx];
566 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
567 }
568
569 return result;
570 error:
571 kfree(result);
572 return ERR_PTR(err);
573}
574
575static int nl80211_key_allowed(struct wireless_dev *wdev)
576{
577 ASSERT_WDEV_LOCK(wdev);
578
fffd0934
JB		 579 switch (wdev->iftype) {
580 case NL80211_IFTYPE_AP:
581 case NL80211_IFTYPE_AP_VLAN:
074ac8df 582 case NL80211_IFTYPE_P2P_GO:
ff973af7 583 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 584 break;
585 case NL80211_IFTYPE_ADHOC:
586 if (!wdev->current_bss)
587 return -ENOLINK;
588 break;
589 case NL80211_IFTYPE_STATION:
074ac8df 590 case NL80211_IFTYPE_P2P_CLIENT:
fffd0934
JB		 591 if (wdev->sme_state != CFG80211_SME_CONNECTED)
592 return -ENOLINK;
593 break;
594 default:
595 return -EINVAL;
596 }
597
598 return 0;
599}
600
7527a782
JB		 601static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
602{
603 struct nlattr *nl_modes = nla_nest_start(msg, attr);
604 int i;
605
606 if (!nl_modes)
607 goto nla_put_failure;
608
609 i = 0;
610 while (ifmodes) {
611 if (ifmodes & 1)
612 NLA_PUT_FLAG(msg, i);
613 ifmodes >>= 1;
614 i++;
615 }
616
617 nla_nest_end(msg, nl_modes);
618 return 0;
619
620nla_put_failure:
621 return -ENOBUFS;
622}
623
624static int nl80211_put_iface_combinations(struct wiphy *wiphy,
625 struct sk_buff *msg)
626{
627 struct nlattr *nl_combis;
628 int i, j;
629
630 nl_combis = nla_nest_start(msg,
631 NL80211_ATTR_INTERFACE_COMBINATIONS);
632 if (!nl_combis)
633 goto nla_put_failure;
634
635 for (i = 0; i < wiphy->n_iface_combinations; i++) {
636 const struct ieee80211_iface_combination *c;
637 struct nlattr *nl_combi, *nl_limits;
638
639 c = &wiphy->iface_combinations[i];
640
641 nl_combi = nla_nest_start(msg, i + 1);
642 if (!nl_combi)
643 goto nla_put_failure;
644
645 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
646 if (!nl_limits)
647 goto nla_put_failure;
648
649 for (j = 0; j < c->n_limits; j++) {
650 struct nlattr *nl_limit;
651
652 nl_limit = nla_nest_start(msg, j + 1);
653 if (!nl_limit)
654 goto nla_put_failure;
655 NLA_PUT_U32(msg, NL80211_IFACE_LIMIT_MAX,
656 c->limits[j].max);
657 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
658 c->limits[j].types))
659 goto nla_put_failure;
660 nla_nest_end(msg, nl_limit);
661 }
662
663 nla_nest_end(msg, nl_limits);
664
665 if (c->beacon_int_infra_match)
666 NLA_PUT_FLAG(msg,
667 NL80211_IFACE_COMB_STA_AP_BI_MATCH);
668 NLA_PUT_U32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
669 c->num_different_channels);
670 NLA_PUT_U32(msg, NL80211_IFACE_COMB_MAXNUM,
671 c->max_interfaces);
672
673 nla_nest_end(msg, nl_combi);
674 }
675
676 nla_nest_end(msg, nl_combis);
677
678 return 0;
679nla_put_failure:
680 return -ENOBUFS;
681}
682
55682965
JB		 683static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags,
684 struct cfg80211_registered_device *dev)
685{
686 void *hdr;
ee688b00
JB		 687 struct nlattr *nl_bands, *nl_band;
688 struct nlattr *nl_freqs, *nl_freq;
689 struct nlattr *nl_rates, *nl_rate;
8fdc621d 690 struct nlattr *nl_cmds;
ee688b00
JB		 691 enum ieee80211_band band;
692 struct ieee80211_channel *chan;
693 struct ieee80211_rate *rate;
694 int i;
2e161f78
JB		 695 const struct ieee80211_txrx_stypes *mgmt_stypes =
696 dev->wiphy.mgmt_stypes;
55682965
JB		 697
698 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_WIPHY);
699 if (!hdr)
700 return -1;
701
b5850a7a 702 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx);
55682965 703 NLA_PUT_STRING(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy));
b9a5f8ca 704
f5ea9120
JB		 705 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
706 cfg80211_rdev_list_generation);
707
b9a5f8ca
JM		 708 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
709 dev->wiphy.retry_short);
710 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
711 dev->wiphy.retry_long);
712 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
713 dev->wiphy.frag_threshold);
714 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
715 dev->wiphy.rts_threshold);
81077e82
LT		 716 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
717 dev->wiphy.coverage_class);
2a519311
JB		 718 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
719 dev->wiphy.max_scan_ssids);
93b6aa69
LC		 720 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
721 dev->wiphy.max_sched_scan_ssids);
18a83659
JB		 722 NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
723 dev->wiphy.max_scan_ie_len);
5a865bad
LC		 724 NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
725 dev->wiphy.max_sched_scan_ie_len);
a1f1c21c
LC		 726 NLA_PUT_U8(msg, NL80211_ATTR_MAX_MATCH_SETS,
727 dev->wiphy.max_match_sets);
ee688b00 728
e31b8213
JB		 729 if (dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN)
730 NLA_PUT_FLAG(msg, NL80211_ATTR_SUPPORT_IBSS_RSN);
15d5dda6
JC		 731 if (dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH)
732 NLA_PUT_FLAG(msg, NL80211_ATTR_SUPPORT_MESH_AUTH);
cedb5412
EP		 733 if (dev->wiphy.flags & WIPHY_FLAG_AP_UAPSD)
734 NLA_PUT_FLAG(msg, NL80211_ATTR_SUPPORT_AP_UAPSD);
e31b8213 735
f4b34b55
VN		 736 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)
737 NLA_PUT_FLAG(msg, NL80211_ATTR_ROAM_SUPPORT);
738
25e47c18
JB		 739 NLA_PUT(msg, NL80211_ATTR_CIPHER_SUITES,
740 sizeof(u32) * dev->wiphy.n_cipher_suites,
741 dev->wiphy.cipher_suites);
742
67fbb16b
SO		 743 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
744 dev->wiphy.max_num_pmkids);
745
c0692b8f
JB		 746 if (dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL)
747 NLA_PUT_FLAG(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE);
748
39fd5de4
BR		 749 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
750 dev->wiphy.available_antennas_tx);
751 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
752 dev->wiphy.available_antennas_rx);
753
7f531e03
BR		 754 if ((dev->wiphy.available_antennas_tx ||
755 dev->wiphy.available_antennas_rx) && dev->ops->get_antenna) {
afe0cbf8
BR		 756 u32 tx_ant = 0, rx_ant = 0;
757 int res;
758 res = dev->ops->get_antenna(&dev->wiphy, &tx_ant, &rx_ant);
759 if (!res) {
760 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_TX, tx_ant);
761 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_RX, rx_ant);
762 }
763 }
764
7527a782
JB		 765 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
766 dev->wiphy.interface_modes))
f59ac048
LR		 767 goto nla_put_failure;
768
ee688b00
JB		 769 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
770 if (!nl_bands)
771 goto nla_put_failure;
772
773 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
774 if (!dev->wiphy.bands[band])
775 continue;
776
777 nl_band = nla_nest_start(msg, band);
778 if (!nl_band)
779 goto nla_put_failure;
780
d51626df
JB		 781 /* add HT info */
782 if (dev->wiphy.bands[band]->ht_cap.ht_supported) {
783 NLA_PUT(msg, NL80211_BAND_ATTR_HT_MCS_SET,
784 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
785 &dev->wiphy.bands[band]->ht_cap.mcs);
786 NLA_PUT_U16(msg, NL80211_BAND_ATTR_HT_CAPA,
787 dev->wiphy.bands[band]->ht_cap.cap);
788 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
789 dev->wiphy.bands[band]->ht_cap.ampdu_factor);
790 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
791 dev->wiphy.bands[band]->ht_cap.ampdu_density);
792 }
793
ee688b00
JB		 794 /* add frequencies */
795 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
796 if (!nl_freqs)
797 goto nla_put_failure;
798
799 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
800 nl_freq = nla_nest_start(msg, i);
801 if (!nl_freq)
802 goto nla_put_failure;
803
804 chan = &dev->wiphy.bands[band]->channels[i];
5dab3b8a
LR		 805
806 if (nl80211_msg_put_channel(msg, chan))
807 goto nla_put_failure;
e2f367f2 808
ee688b00
JB		 809 nla_nest_end(msg, nl_freq);
810 }
811
812 nla_nest_end(msg, nl_freqs);
813
814 /* add bitrates */
815 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
816 if (!nl_rates)
817 goto nla_put_failure;
818
819 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
820 nl_rate = nla_nest_start(msg, i);
821 if (!nl_rate)
822 goto nla_put_failure;
823
824 rate = &dev->wiphy.bands[band]->bitrates[i];
825 NLA_PUT_U32(msg, NL80211_BITRATE_ATTR_RATE,
826 rate->bitrate);
827 if (rate->flags & IEEE80211_RATE_SHORT_PREAMBLE)
828 NLA_PUT_FLAG(msg,
829 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE);
830
831 nla_nest_end(msg, nl_rate);
832 }
833
834 nla_nest_end(msg, nl_rates);
835
836 nla_nest_end(msg, nl_band);
837 }
838 nla_nest_end(msg, nl_bands);
839
8fdc621d
JB		 840 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
841 if (!nl_cmds)
842 goto nla_put_failure;
843
844 i = 0;
845#define CMD(op, n) \
846 do { \
847 if (dev->ops->op) { \
848 i++; \
849 NLA_PUT_U32(msg, i, NL80211_CMD_ ## n); \
850 } \
851 } while (0)
852
853 CMD(add_virtual_intf, NEW_INTERFACE);
854 CMD(change_virtual_intf, SET_INTERFACE);
855 CMD(add_key, NEW_KEY);
856 CMD(add_beacon, NEW_BEACON);
857 CMD(add_station, NEW_STATION);
858 CMD(add_mpath, NEW_MPATH);
24bdd9f4 859 CMD(update_mesh_config, SET_MESH_CONFIG);
8fdc621d 860 CMD(change_bss, SET_BSS);
636a5d36
JM		 861 CMD(auth, AUTHENTICATE);
862 CMD(assoc, ASSOCIATE);
863 CMD(deauth, DEAUTHENTICATE);
864 CMD(disassoc, DISASSOCIATE);
04a773ad 865 CMD(join_ibss, JOIN_IBSS);
29cbe68c 866 CMD(join_mesh, JOIN_MESH);
67fbb16b
SO		 867 CMD(set_pmksa, SET_PMKSA);
868 CMD(del_pmksa, DEL_PMKSA);
869 CMD(flush_pmksa, FLUSH_PMKSA);
9588bbd5 870 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
13ae75b1 871 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2e161f78 872 CMD(mgmt_tx, FRAME);
f7ca38df 873 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
5be83de5 874 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
463d0183
JB		 875 i++;
876 NLA_PUT_U32(msg, i, NL80211_CMD_SET_WIPHY_NETNS);
877 }
f444de05 878 CMD(set_channel, SET_CHANNEL);
e8347eba 879 CMD(set_wds_peer, SET_WDS_PEER);
807f8a8c
LC		 880 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
881 CMD(sched_scan_start, START_SCHED_SCAN);
8fdc621d
JB		 882
883#undef CMD
b23aa676 884
6829c878 885 if (dev->ops->connect || dev->ops->auth) {
b23aa676
SO		 886 i++;
887 NLA_PUT_U32(msg, i, NL80211_CMD_CONNECT);
888 }
889
6829c878 890 if (dev->ops->disconnect || dev->ops->deauth) {
b23aa676
SO		 891 i++;
892 NLA_PUT_U32(msg, i, NL80211_CMD_DISCONNECT);
893 }
894
8fdc621d
JB		 895 nla_nest_end(msg, nl_cmds);
896
a293911d
JB		 897 if (dev->ops->remain_on_channel)
898 NLA_PUT_U32(msg, NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
899 dev->wiphy.max_remain_on_channel_duration);
900
d2da5878 901 if (dev->ops->mgmt_tx_cancel_wait)
f7ca38df
JB		 902 NLA_PUT_FLAG(msg, NL80211_ATTR_OFFCHANNEL_TX_OK);
903
2e161f78
JB		 904 if (mgmt_stypes) {
905 u16 stypes;
906 struct nlattr *nl_ftypes, *nl_ifs;
907 enum nl80211_iftype ift;
908
909 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
910 if (!nl_ifs)
911 goto nla_put_failure;
912
913 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
914 nl_ftypes = nla_nest_start(msg, ift);
915 if (!nl_ftypes)
916 goto nla_put_failure;
917 i = 0;
918 stypes = mgmt_stypes[ift].tx;
919 while (stypes) {
920 if (stypes & 1)
921 NLA_PUT_U16(msg, NL80211_ATTR_FRAME_TYPE,
922 (i << 4) | IEEE80211_FTYPE_MGMT);
923 stypes >>= 1;
924 i++;
925 }
926 nla_nest_end(msg, nl_ftypes);
927 }
928
74b70a4e
JB		 929 nla_nest_end(msg, nl_ifs);
930
2e161f78
JB		 931 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
932 if (!nl_ifs)
933 goto nla_put_failure;
934
935 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
936 nl_ftypes = nla_nest_start(msg, ift);
937 if (!nl_ftypes)
938 goto nla_put_failure;
939 i = 0;
940 stypes = mgmt_stypes[ift].rx;
941 while (stypes) {
942 if (stypes & 1)
943 NLA_PUT_U16(msg, NL80211_ATTR_FRAME_TYPE,
944 (i << 4) | IEEE80211_FTYPE_MGMT);
945 stypes >>= 1;
946 i++;
947 }
948 nla_nest_end(msg, nl_ftypes);
949 }
950 nla_nest_end(msg, nl_ifs);
951 }
952
ff1b6e69
JB		 953 if (dev->wiphy.wowlan.flags || dev->wiphy.wowlan.n_patterns) {
954 struct nlattr *nl_wowlan;
955
956 nl_wowlan = nla_nest_start(msg,
957 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
958 if (!nl_wowlan)
959 goto nla_put_failure;
960
961 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY)
962 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_ANY);
963 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT)
964 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_DISCONNECT);
965 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT)
966 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT);
77dbbb13
JB		 967 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY)
968 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED);
969 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE)
970 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE);
971 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ)
972 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST);
973 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE)
974 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE);
975 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE)
976 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE);
ff1b6e69
JB		 977 if (dev->wiphy.wowlan.n_patterns) {
978 struct nl80211_wowlan_pattern_support pat = {
979 .max_patterns = dev->wiphy.wowlan.n_patterns,
980 .min_pattern_len =
981 dev->wiphy.wowlan.pattern_min_len,
982 .max_pattern_len =
983 dev->wiphy.wowlan.pattern_max_len,
984 };
985 NLA_PUT(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
986 sizeof(pat), &pat);
987 }
988
989 nla_nest_end(msg, nl_wowlan);
990 }
991
7527a782
JB		 992 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
993 dev->wiphy.software_iftypes))
994 goto nla_put_failure;
995
996 if (nl80211_put_iface_combinations(&dev->wiphy, msg))
997 goto nla_put_failure;
998
55682965
JB		 999 return genlmsg_end(msg, hdr);
1000
1001 nla_put_failure:
bc3ed28c
TG		 1002 genlmsg_cancel(msg, hdr);
1003 return -EMSGSIZE;
55682965
JB		 1004}
1005
1006static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
1007{
1008 int idx = 0;
1009 int start = cb->args[0];
1010 struct cfg80211_registered_device *dev;
1011
a1794390 1012 mutex_lock(&cfg80211_mutex);
79c97e97 1013 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 1014 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
1015 continue;
b4637271 1016 if (++idx <= start)
55682965
JB		 1017 continue;
1018 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).pid,
1019 cb->nlh->nlmsg_seq, NLM_F_MULTI,
b4637271
JV		 1020 dev) < 0) {
1021 idx--;
55682965 1022 break;
b4637271 1023 }
55682965 1024 }
a1794390 1025 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1026
1027 cb->args[0] = idx;
1028
1029 return skb->len;
1030}
1031
1032static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1033{
1034 struct sk_buff *msg;
4c476991 1035 struct cfg80211_registered_device *dev = info->user_ptr[0];
55682965 1036
fd2120ca 1037 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1038 if (!msg)
4c476991 1039 return -ENOMEM;
55682965 1040
4c476991
JB		 1041 if (nl80211_send_wiphy(msg, info->snd_pid, info->snd_seq, 0, dev) < 0) {
1042 nlmsg_free(msg);
1043 return -ENOBUFS;
1044 }
55682965 1045
134e6375 1046 return genlmsg_reply(msg, info);
55682965
JB		 1047}
1048
31888487
JM		 1049static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1050 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1051 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1052 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1053 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1054 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1055};
1056
1057static int parse_txq_params(struct nlattr *tb[],
1058 struct ieee80211_txq_params *txq_params)
1059{
1060 if (!tb[NL80211_TXQ_ATTR_QUEUE] || !tb[NL80211_TXQ_ATTR_TXOP] ||
1061 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1062 !tb[NL80211_TXQ_ATTR_AIFS])
1063 return -EINVAL;
1064
1065 txq_params->queue = nla_get_u8(tb[NL80211_TXQ_ATTR_QUEUE]);
1066 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1067 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1068 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1069 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1070
1071 return 0;
1072}
1073
f444de05
JB		 1074static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1075{
1076 /*
1077 * You can only set the channel explicitly for AP, mesh
1078 * and WDS type interfaces; all others have their channel
1079 * managed via their respective "establish a connection"
1080 * command (connect, join, ...)
1081 *
1082 * Monitors are special as they are normally slaved to
1083 * whatever else is going on, so they behave as though
1084 * you tried setting the wiphy channel itself.
1085 */
1086 return !wdev ||
1087 wdev->iftype == NL80211_IFTYPE_AP ||
1088 wdev->iftype == NL80211_IFTYPE_WDS ||
1089 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 1090 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1091 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 1092}
1093
1094static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1095 struct wireless_dev *wdev,
1096 struct genl_info *info)
1097{
1098 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
1099 u32 freq;
1100 int result;
1101
1102 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1103 return -EINVAL;
1104
1105 if (!nl80211_can_set_dev_channel(wdev))
1106 return -EOPNOTSUPP;
1107
1108 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
1109 channel_type = nla_get_u32(info->attrs[
1110 NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1111 if (channel_type != NL80211_CHAN_NO_HT &&
1112 channel_type != NL80211_CHAN_HT20 &&
1113 channel_type != NL80211_CHAN_HT40PLUS &&
1114 channel_type != NL80211_CHAN_HT40MINUS)
1115 return -EINVAL;
1116 }
1117
1118 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1119
1120 mutex_lock(&rdev->devlist_mtx);
1121 if (wdev) {
1122 wdev_lock(wdev);
1123 result = cfg80211_set_freq(rdev, wdev, freq, channel_type);
1124 wdev_unlock(wdev);
1125 } else {
1126 result = cfg80211_set_freq(rdev, NULL, freq, channel_type);
1127 }
1128 mutex_unlock(&rdev->devlist_mtx);
1129
1130 return result;
1131}
1132
1133static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1134{
4c476991
JB		 1135 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1136 struct net_device *netdev = info->user_ptr[1];
f444de05 1137
4c476991 1138 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
f444de05
JB		 1139}
1140
e8347eba
BJ		 1141static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1142{
43b19952
JB		 1143 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1144 struct net_device *dev = info->user_ptr[1];
1145 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 1146 const u8 *bssid;
e8347eba
BJ		 1147
1148 if (!info->attrs[NL80211_ATTR_MAC])
1149 return -EINVAL;
1150
43b19952
JB		 1151 if (netif_running(dev))
1152 return -EBUSY;
e8347eba 1153
43b19952
JB		 1154 if (!rdev->ops->set_wds_peer)
1155 return -EOPNOTSUPP;
e8347eba 1156
43b19952
JB		 1157 if (wdev->iftype != NL80211_IFTYPE_WDS)
1158 return -EOPNOTSUPP;
e8347eba
BJ		 1159
1160 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
43b19952 1161 return rdev->ops->set_wds_peer(wdev->wiphy, dev, bssid);
e8347eba
BJ		 1162}
1163
1164
55682965
JB		 1165static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1166{
1167 struct cfg80211_registered_device *rdev;
f444de05
JB		 1168 struct net_device *netdev = NULL;
1169 struct wireless_dev *wdev;
a1e567c8 1170 int result = 0, rem_txq_params = 0;
31888487 1171 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 1172 u32 changed;
1173 u8 retry_short = 0, retry_long = 0;
1174 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 1175 u8 coverage_class = 0;
55682965 1176
f444de05
JB		 1177 /*
1178 * Try to find the wiphy and netdev. Normally this
1179 * function shouldn't need the netdev, but this is
1180 * done for backward compatibility -- previously
1181 * setting the channel was done per wiphy, but now
1182 * it is per netdev. Previous userland like hostapd
1183 * also passed a netdev to set_wiphy, so that it is
1184 * possible to let that go to the right netdev!
1185 */
4bbf4d56
JB		 1186 mutex_lock(&cfg80211_mutex);
1187
f444de05
JB		 1188 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1189 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1190
1191 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1192 if (netdev && netdev->ieee80211_ptr) {
1193 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1194 mutex_lock(&rdev->mtx);
1195 } else
1196 netdev = NULL;
4bbf4d56
JB		 1197 }
1198
f444de05
JB		 1199 if (!netdev) {
1200 rdev = __cfg80211_rdev_from_info(info);
1201 if (IS_ERR(rdev)) {
1202 mutex_unlock(&cfg80211_mutex);
4c476991 1203 return PTR_ERR(rdev);
f444de05
JB		 1204 }
1205 wdev = NULL;
1206 netdev = NULL;
1207 result = 0;
1208
1209 mutex_lock(&rdev->mtx);
1210 } else if (netif_running(netdev) &&
1211 nl80211_can_set_dev_channel(netdev->ieee80211_ptr))
1212 wdev = netdev->ieee80211_ptr;
1213 else
1214 wdev = NULL;
1215
1216 /*
1217 * end workaround code, by now the rdev is available
1218 * and locked, and wdev may or may not be NULL.
1219 */
4bbf4d56
JB		 1220
1221 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 1222 result = cfg80211_dev_rename(
1223 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 1224
1225 mutex_unlock(&cfg80211_mutex);
1226
1227 if (result)
1228 goto bad_res;
31888487
JM		 1229
1230 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1231 struct ieee80211_txq_params txq_params;
1232 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1233
1234 if (!rdev->ops->set_txq_params) {
1235 result = -EOPNOTSUPP;
1236 goto bad_res;
1237 }
1238
f70f01c2
EP		 1239 if (!netdev) {
1240 result = -EINVAL;
1241 goto bad_res;
1242 }
1243
31888487
JM		 1244 nla_for_each_nested(nl_txq_params,
1245 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1246 rem_txq_params) {
1247 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1248 nla_data(nl_txq_params),
1249 nla_len(nl_txq_params),
1250 txq_params_policy);
1251 result = parse_txq_params(tb, &txq_params);
1252 if (result)
1253 goto bad_res;
1254
1255 result = rdev->ops->set_txq_params(&rdev->wiphy,
f70f01c2 1256 netdev,
31888487
JM		 1257 &txq_params);
1258 if (result)
1259 goto bad_res;
1260 }
1261 }
55682965 1262
72bdcf34 1263 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
f444de05 1264 result = __nl80211_set_channel(rdev, wdev, info);
72bdcf34
JM		 1265 if (result)
1266 goto bad_res;
1267 }
1268
98d2ff8b
JO		 1269 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
1270 enum nl80211_tx_power_setting type;
1271 int idx, mbm = 0;
1272
1273 if (!rdev->ops->set_tx_power) {
60ea385f 1274 result = -EOPNOTSUPP;
98d2ff8b
JO		 1275 goto bad_res;
1276 }
1277
1278 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1279 type = nla_get_u32(info->attrs[idx]);
1280
1281 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1282 (type != NL80211_TX_POWER_AUTOMATIC)) {
1283 result = -EINVAL;
1284 goto bad_res;
1285 }
1286
1287 if (type != NL80211_TX_POWER_AUTOMATIC) {
1288 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1289 mbm = nla_get_u32(info->attrs[idx]);
1290 }
1291
1292 result = rdev->ops->set_tx_power(&rdev->wiphy, type, mbm);
1293 if (result)
1294 goto bad_res;
1295 }
1296
afe0cbf8
BR		 1297 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1298 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1299 u32 tx_ant, rx_ant;
7f531e03
BR		 1300 if ((!rdev->wiphy.available_antennas_tx &&
1301 !rdev->wiphy.available_antennas_rx) ||
1302 !rdev->ops->set_antenna) {
afe0cbf8
BR		 1303 result = -EOPNOTSUPP;
1304 goto bad_res;
1305 }
1306
1307 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1308 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1309
a7ffac95 1310 /* reject antenna configurations which don't match the
7f531e03
BR		 1311 * available antenna masks, except for the "all" mask */
1312 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1313 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
a7ffac95
BR		 1314 result = -EINVAL;
1315 goto bad_res;
1316 }
1317
7f531e03
BR		 1318 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1319 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 1320
afe0cbf8
BR		 1321 result = rdev->ops->set_antenna(&rdev->wiphy, tx_ant, rx_ant);
1322 if (result)
1323 goto bad_res;
1324 }
1325
b9a5f8ca
JM		 1326 changed = 0;
1327
1328 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1329 retry_short = nla_get_u8(
1330 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1331 if (retry_short == 0) {
1332 result = -EINVAL;
1333 goto bad_res;
1334 }
1335 changed |= WIPHY_PARAM_RETRY_SHORT;
1336 }
1337
1338 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1339 retry_long = nla_get_u8(
1340 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1341 if (retry_long == 0) {
1342 result = -EINVAL;
1343 goto bad_res;
1344 }
1345 changed |= WIPHY_PARAM_RETRY_LONG;
1346 }
1347
1348 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
1349 frag_threshold = nla_get_u32(
1350 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
1351 if (frag_threshold < 256) {
1352 result = -EINVAL;
1353 goto bad_res;
1354 }
1355 if (frag_threshold != (u32) -1) {
1356 /*
1357 * Fragments (apart from the last one) are required to
1358 * have even length. Make the fragmentation code
1359 * simpler by stripping LSB should someone try to use
1360 * odd threshold value.
1361 */
1362 frag_threshold &= ~0x1;
1363 }
1364 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
1365 }
1366
1367 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
1368 rts_threshold = nla_get_u32(
1369 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
1370 changed |= WIPHY_PARAM_RTS_THRESHOLD;
1371 }
1372
81077e82
LT		 1373 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
1374 coverage_class = nla_get_u8(
1375 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
1376 changed |= WIPHY_PARAM_COVERAGE_CLASS;
1377 }
1378
b9a5f8ca
JM		 1379 if (changed) {
1380 u8 old_retry_short, old_retry_long;
1381 u32 old_frag_threshold, old_rts_threshold;
81077e82 1382 u8 old_coverage_class;
b9a5f8ca
JM		 1383
1384 if (!rdev->ops->set_wiphy_params) {
1385 result = -EOPNOTSUPP;
1386 goto bad_res;
1387 }
1388
1389 old_retry_short = rdev->wiphy.retry_short;
1390 old_retry_long = rdev->wiphy.retry_long;
1391 old_frag_threshold = rdev->wiphy.frag_threshold;
1392 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 1393 old_coverage_class = rdev->wiphy.coverage_class;
b9a5f8ca
JM		 1394
1395 if (changed & WIPHY_PARAM_RETRY_SHORT)
1396 rdev->wiphy.retry_short = retry_short;
1397 if (changed & WIPHY_PARAM_RETRY_LONG)
1398 rdev->wiphy.retry_long = retry_long;
1399 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1400 rdev->wiphy.frag_threshold = frag_threshold;
1401 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1402 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 1403 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1404 rdev->wiphy.coverage_class = coverage_class;
b9a5f8ca
JM		 1405
1406 result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
1407 if (result) {
1408 rdev->wiphy.retry_short = old_retry_short;
1409 rdev->wiphy.retry_long = old_retry_long;
1410 rdev->wiphy.frag_threshold = old_frag_threshold;
1411 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 1412 rdev->wiphy.coverage_class = old_coverage_class;
b9a5f8ca
JM		 1413 }
1414 }
72bdcf34 1415
306d6112 1416 bad_res:
4bbf4d56 1417 mutex_unlock(&rdev->mtx);
f444de05
JB		 1418 if (netdev)
1419 dev_put(netdev);
55682965
JB		 1420 return result;
1421}
1422
1423
1424static int nl80211_send_iface(struct sk_buff *msg, u32 pid, u32 seq, int flags,
d726405a 1425 struct cfg80211_registered_device *rdev,
55682965
JB		 1426 struct net_device *dev)
1427{
1428 void *hdr;
1429
1430 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_INTERFACE);
1431 if (!hdr)
1432 return -1;
1433
1434 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
d726405a 1435 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
55682965 1436 NLA_PUT_STRING(msg, NL80211_ATTR_IFNAME, dev->name);
60719ffd 1437 NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, dev->ieee80211_ptr->iftype);
f5ea9120
JB		 1438
1439 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
1440 rdev->devlist_generation ^
1441 (cfg80211_rdev_list_generation << 2));
1442
55682965
JB		 1443 return genlmsg_end(msg, hdr);
1444
1445 nla_put_failure:
bc3ed28c
TG		 1446 genlmsg_cancel(msg, hdr);
1447 return -EMSGSIZE;
55682965
JB		 1448}
1449
1450static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
1451{
1452 int wp_idx = 0;
1453 int if_idx = 0;
1454 int wp_start = cb->args[0];
1455 int if_start = cb->args[1];
f5ea9120 1456 struct cfg80211_registered_device *rdev;
55682965
JB		 1457 struct wireless_dev *wdev;
1458
a1794390 1459 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 1460 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1461 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 1462 continue;
bba95fef
JB		 1463 if (wp_idx < wp_start) {
1464 wp_idx++;
55682965 1465 continue;
bba95fef 1466 }
55682965
JB		 1467 if_idx = 0;
1468
f5ea9120
JB		 1469 mutex_lock(&rdev->devlist_mtx);
1470 list_for_each_entry(wdev, &rdev->netdev_list, list) {
bba95fef
JB		 1471 if (if_idx < if_start) {
1472 if_idx++;
55682965 1473 continue;
bba95fef 1474 }
55682965
JB		 1475 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).pid,
1476 cb->nlh->nlmsg_seq, NLM_F_MULTI,
f5ea9120
JB		 1477 rdev, wdev->netdev) < 0) {
1478 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1479 goto out;
1480 }
1481 if_idx++;
55682965 1482 }
f5ea9120 1483 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1484
1485 wp_idx++;
55682965 1486 }
bba95fef 1487 out:
a1794390 1488 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1489
1490 cb->args[0] = wp_idx;
1491 cb->args[1] = if_idx;
1492
1493 return skb->len;
1494}
1495
1496static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
1497{
1498 struct sk_buff *msg;
4c476991
JB		 1499 struct cfg80211_registered_device *dev = info->user_ptr[0];
1500 struct net_device *netdev = info->user_ptr[1];
55682965 1501
fd2120ca 1502 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1503 if (!msg)
4c476991 1504 return -ENOMEM;
55682965 1505
d726405a 1506 if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 1507 dev, netdev) < 0) {
1508 nlmsg_free(msg);
1509 return -ENOBUFS;
1510 }
55682965 1511
134e6375 1512 return genlmsg_reply(msg, info);
55682965
JB		 1513}
1514
66f7ac50
MW		 1515static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
1516 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
1517 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
1518 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
1519 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
1520 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
1521};
1522
1523static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
1524{
1525 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
1526 int flag;
1527
1528 *mntrflags = 0;
1529
1530 if (!nla)
1531 return -EINVAL;
1532
1533 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
1534 nla, mntr_flags_policy))
1535 return -EINVAL;
1536
1537 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
1538 if (flags[flag])
1539 *mntrflags |= (1<<flag);
1540
1541 return 0;
1542}
1543
9bc383de 1544static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 1545 struct net_device *netdev, u8 use_4addr,
1546 enum nl80211_iftype iftype)
9bc383de 1547{
ad4bb6f8 1548 if (!use_4addr) {
f350a0a8 1549 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
ad4bb6f8 1550 return -EBUSY;
9bc383de 1551 return 0;
ad4bb6f8 1552 }
9bc383de
JB		 1553
1554 switch (iftype) {
1555 case NL80211_IFTYPE_AP_VLAN:
1556 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
1557 return 0;
1558 break;
1559 case NL80211_IFTYPE_STATION:
1560 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
1561 return 0;
1562 break;
1563 default:
1564 break;
1565 }
1566
1567 return -EOPNOTSUPP;
1568}
1569
55682965
JB		 1570static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
1571{
4c476991 1572 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1573 struct vif_params params;
e36d56b6 1574 int err;
04a773ad 1575 enum nl80211_iftype otype, ntype;
4c476991 1576 struct net_device *dev = info->user_ptr[1];
92ffe055 1577 u32 _flags, *flags = NULL;
ac7f9cfa 1578 bool change = false;
55682965 1579
2ec600d6
LCC		 1580 memset(&params, 0, sizeof(params));
1581
04a773ad 1582 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 1583
723b038d 1584 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 1585 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 1586 if (otype != ntype)
ac7f9cfa 1587 change = true;
4c476991
JB		 1588 if (ntype > NL80211_IFTYPE_MAX)
1589 return -EINVAL;
723b038d
JB		 1590 }
1591
92ffe055 1592 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 1593 struct wireless_dev *wdev = dev->ieee80211_ptr;
1594
4c476991
JB		 1595 if (ntype != NL80211_IFTYPE_MESH_POINT)
1596 return -EINVAL;
29cbe68c
JB		 1597 if (netif_running(dev))
1598 return -EBUSY;
1599
1600 wdev_lock(wdev);
1601 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1602 IEEE80211_MAX_MESH_ID_LEN);
1603 wdev->mesh_id_up_len =
1604 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1605 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1606 wdev->mesh_id_up_len);
1607 wdev_unlock(wdev);
2ec600d6
LCC		 1608 }
1609
8b787643
FF		 1610 if (info->attrs[NL80211_ATTR_4ADDR]) {
1611 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1612 change = true;
ad4bb6f8 1613 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 1614 if (err)
4c476991 1615 return err;
8b787643
FF		 1616 } else {
1617 params.use_4addr = -1;
1618 }
1619
92ffe055 1620 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4c476991
JB		 1621 if (ntype != NL80211_IFTYPE_MONITOR)
1622 return -EINVAL;
92ffe055
JB		 1623 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1624 &_flags);
ac7f9cfa 1625 if (err)
4c476991 1626 return err;
ac7f9cfa
JB		 1627
1628 flags = &_flags;
1629 change = true;
92ffe055 1630 }
3b85875a 1631
ac7f9cfa 1632 if (change)
3d54d255 1633 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
ac7f9cfa
JB		 1634 else
1635 err = 0;
60719ffd 1636
9bc383de
JB		 1637 if (!err && params.use_4addr != -1)
1638 dev->ieee80211_ptr->use_4addr = params.use_4addr;
1639
55682965
JB		 1640 return err;
1641}
1642
1643static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1644{
4c476991 1645 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1646 struct vif_params params;
f9e10ce4 1647 struct net_device *dev;
55682965
JB		 1648 int err;
1649 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 1650 u32 flags;
55682965 1651
2ec600d6
LCC		 1652 memset(&params, 0, sizeof(params));
1653
55682965
JB		 1654 if (!info->attrs[NL80211_ATTR_IFNAME])
1655 return -EINVAL;
1656
1657 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1658 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1659 if (type > NL80211_IFTYPE_MAX)
1660 return -EINVAL;
1661 }
1662
79c97e97 1663 if (!rdev->ops->add_virtual_intf ||
4c476991
JB		 1664 !(rdev->wiphy.interface_modes & (1 << type)))
1665 return -EOPNOTSUPP;
55682965 1666
9bc383de 1667 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 1668 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 1669 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 1670 if (err)
4c476991 1671 return err;
9bc383de 1672 }
8b787643 1673
66f7ac50
MW		 1674 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
1675 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
1676 &flags);
f9e10ce4 1677 dev = rdev->ops->add_virtual_intf(&rdev->wiphy,
66f7ac50 1678 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2ec600d6 1679 type, err ? NULL : &flags, &params);
f9e10ce4
JB		 1680 if (IS_ERR(dev))
1681 return PTR_ERR(dev);
2ec600d6 1682
29cbe68c
JB		 1683 if (type == NL80211_IFTYPE_MESH_POINT &&
1684 info->attrs[NL80211_ATTR_MESH_ID]) {
1685 struct wireless_dev *wdev = dev->ieee80211_ptr;
1686
1687 wdev_lock(wdev);
1688 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1689 IEEE80211_MAX_MESH_ID_LEN);
1690 wdev->mesh_id_up_len =
1691 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1692 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1693 wdev->mesh_id_up_len);
1694 wdev_unlock(wdev);
1695 }
1696
f9e10ce4 1697 return 0;
55682965
JB		 1698}
1699
1700static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
1701{
4c476991
JB		 1702 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1703 struct net_device *dev = info->user_ptr[1];
55682965 1704
4c476991
JB		 1705 if (!rdev->ops->del_virtual_intf)
1706 return -EOPNOTSUPP;
55682965 1707
4c476991 1708 return rdev->ops->del_virtual_intf(&rdev->wiphy, dev);
55682965
JB		 1709}
1710
41ade00f
JB		 1711struct get_key_cookie {
1712 struct sk_buff *msg;
1713 int error;
b9454e83 1714 int idx;
41ade00f
JB		 1715};
1716
1717static void get_key_callback(void *c, struct key_params *params)
1718{
b9454e83 1719 struct nlattr *key;
41ade00f
JB		 1720 struct get_key_cookie *cookie = c;
1721
1722 if (params->key)
1723 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_DATA,
1724 params->key_len, params->key);
1725
1726 if (params->seq)
1727 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_SEQ,
1728 params->seq_len, params->seq);
1729
1730 if (params->cipher)
1731 NLA_PUT_U32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
1732 params->cipher);
1733
b9454e83
JB		 1734 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
1735 if (!key)
1736 goto nla_put_failure;
1737
1738 if (params->key)
1739 NLA_PUT(cookie->msg, NL80211_KEY_DATA,
1740 params->key_len, params->key);
1741
1742 if (params->seq)
1743 NLA_PUT(cookie->msg, NL80211_KEY_SEQ,
1744 params->seq_len, params->seq);
1745
1746 if (params->cipher)
1747 NLA_PUT_U32(cookie->msg, NL80211_KEY_CIPHER,
1748 params->cipher);
1749
1750 NLA_PUT_U8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx);
1751
1752 nla_nest_end(cookie->msg, key);
1753
41ade00f
JB		 1754 return;
1755 nla_put_failure:
1756 cookie->error = 1;
1757}
1758
1759static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
1760{
4c476991 1761 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 1762 int err;
4c476991 1763 struct net_device *dev = info->user_ptr[1];
41ade00f 1764 u8 key_idx = 0;
e31b8213
JB		 1765 const u8 *mac_addr = NULL;
1766 bool pairwise;
41ade00f
JB		 1767 struct get_key_cookie cookie = {
1768 .error = 0,
1769 };
1770 void *hdr;
1771 struct sk_buff *msg;
1772
1773 if (info->attrs[NL80211_ATTR_KEY_IDX])
1774 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1775
3cfcf6ac 1776 if (key_idx > 5)
41ade00f
JB		 1777 return -EINVAL;
1778
1779 if (info->attrs[NL80211_ATTR_MAC])
1780 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1781
e31b8213
JB		 1782 pairwise = !!mac_addr;
1783 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
1784 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
1785 if (kt >= NUM_NL80211_KEYTYPES)
1786 return -EINVAL;
1787 if (kt != NL80211_KEYTYPE_GROUP &&
1788 kt != NL80211_KEYTYPE_PAIRWISE)
1789 return -EINVAL;
1790 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
1791 }
1792
4c476991
JB		 1793 if (!rdev->ops->get_key)
1794 return -EOPNOTSUPP;
41ade00f 1795
fd2120ca 1796 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 1797 if (!msg)
1798 return -ENOMEM;
41ade00f
JB		 1799
1800 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
1801 NL80211_CMD_NEW_KEY);
4c476991
JB		 1802 if (IS_ERR(hdr))
1803 return PTR_ERR(hdr);
41ade00f
JB		 1804
1805 cookie.msg = msg;
b9454e83 1806 cookie.idx = key_idx;
41ade00f
JB		 1807
1808 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
1809 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_idx);
1810 if (mac_addr)
1811 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
1812
e31b8213
JB		 1813 if (pairwise && mac_addr &&
1814 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
1815 return -ENOENT;
1816
1817 err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, pairwise,
1818 mac_addr, &cookie, get_key_callback);
41ade00f
JB		 1819
1820 if (err)
6c95e2a2 1821 goto free_msg;
41ade00f
JB		 1822
1823 if (cookie.error)
1824 goto nla_put_failure;
1825
1826 genlmsg_end(msg, hdr);
4c476991 1827 return genlmsg_reply(msg, info);
41ade00f
JB		 1828
1829 nla_put_failure:
1830 err = -ENOBUFS;
6c95e2a2 1831 free_msg:
41ade00f 1832 nlmsg_free(msg);
41ade00f
JB		 1833 return err;
1834}
1835
1836static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
1837{
4c476991 1838 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 1839 struct key_parse key;
41ade00f 1840 int err;
4c476991 1841 struct net_device *dev = info->user_ptr[1];
41ade00f 1842
b9454e83
JB		 1843 err = nl80211_parse_key(info, &key);
1844 if (err)
1845 return err;
41ade00f 1846
b9454e83 1847 if (key.idx < 0)
41ade00f
JB		 1848 return -EINVAL;
1849
b9454e83
JB		 1850 /* only support setting default key */
1851 if (!key.def && !key.defmgmt)
41ade00f
JB		 1852 return -EINVAL;
1853
dbd2fd65 1854 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 1855
dbd2fd65
JB		 1856 if (key.def) {
1857 if (!rdev->ops->set_default_key) {
1858 err = -EOPNOTSUPP;
1859 goto out;
1860 }
41ade00f 1861
dbd2fd65
JB		 1862 err = nl80211_key_allowed(dev->ieee80211_ptr);
1863 if (err)
1864 goto out;
1865
dbd2fd65
JB		 1866 err = rdev->ops->set_default_key(&rdev->wiphy, dev, key.idx,
1867 key.def_uni, key.def_multi);
1868
1869 if (err)
1870 goto out;
fffd0934 1871
3d23e349 1872#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 1873 dev->ieee80211_ptr->wext.default_key = key.idx;
1874#endif
1875 } else {
1876 if (key.def_uni || !key.def_multi) {
1877 err = -EINVAL;
1878 goto out;
1879 }
1880
1881 if (!rdev->ops->set_default_mgmt_key) {
1882 err = -EOPNOTSUPP;
1883 goto out;
1884 }
1885
1886 err = nl80211_key_allowed(dev->ieee80211_ptr);
1887 if (err)
1888 goto out;
1889
1890 err = rdev->ops->set_default_mgmt_key(&rdev->wiphy,
1891 dev, key.idx);
1892 if (err)
1893 goto out;
1894
1895#ifdef CONFIG_CFG80211_WEXT
1896 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 1897#endif
dbd2fd65
JB		 1898 }
1899
1900 out:
fffd0934 1901 wdev_unlock(dev->ieee80211_ptr);
41ade00f 1902
41ade00f
JB		 1903 return err;
1904}
1905
1906static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
1907{
4c476991 1908 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 1909 int err;
4c476991 1910 struct net_device *dev = info->user_ptr[1];
b9454e83 1911 struct key_parse key;
e31b8213 1912 const u8 *mac_addr = NULL;
41ade00f 1913
b9454e83
JB		 1914 err = nl80211_parse_key(info, &key);
1915 if (err)
1916 return err;
41ade00f 1917
b9454e83 1918 if (!key.p.key)
41ade00f
JB		 1919 return -EINVAL;
1920
41ade00f
JB		 1921 if (info->attrs[NL80211_ATTR_MAC])
1922 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1923
e31b8213
JB		 1924 if (key.type == -1) {
1925 if (mac_addr)
1926 key.type = NL80211_KEYTYPE_PAIRWISE;
1927 else
1928 key.type = NL80211_KEYTYPE_GROUP;
1929 }
1930
1931 /* for now */
1932 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
1933 key.type != NL80211_KEYTYPE_GROUP)
1934 return -EINVAL;
1935
4c476991
JB		 1936 if (!rdev->ops->add_key)
1937 return -EOPNOTSUPP;
25e47c18 1938
e31b8213
JB		 1939 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
1940 key.type == NL80211_KEYTYPE_PAIRWISE,
1941 mac_addr))
4c476991 1942 return -EINVAL;
41ade00f 1943
fffd0934
JB		 1944 wdev_lock(dev->ieee80211_ptr);
1945 err = nl80211_key_allowed(dev->ieee80211_ptr);
1946 if (!err)
1947 err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
e31b8213 1948 key.type == NL80211_KEYTYPE_PAIRWISE,
fffd0934
JB		 1949 mac_addr, &key.p);
1950 wdev_unlock(dev->ieee80211_ptr);
41ade00f 1951
41ade00f
JB		 1952 return err;
1953}
1954
1955static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
1956{
4c476991 1957 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 1958 int err;
4c476991 1959 struct net_device *dev = info->user_ptr[1];
41ade00f 1960 u8 *mac_addr = NULL;
b9454e83 1961 struct key_parse key;
41ade00f 1962
b9454e83
JB		 1963 err = nl80211_parse_key(info, &key);
1964 if (err)
1965 return err;
41ade00f
JB		 1966
1967 if (info->attrs[NL80211_ATTR_MAC])
1968 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1969
e31b8213
JB		 1970 if (key.type == -1) {
1971 if (mac_addr)
1972 key.type = NL80211_KEYTYPE_PAIRWISE;
1973 else
1974 key.type = NL80211_KEYTYPE_GROUP;
1975 }
1976
1977 /* for now */
1978 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
1979 key.type != NL80211_KEYTYPE_GROUP)
1980 return -EINVAL;
1981
4c476991
JB		 1982 if (!rdev->ops->del_key)
1983 return -EOPNOTSUPP;
41ade00f 1984
fffd0934
JB		 1985 wdev_lock(dev->ieee80211_ptr);
1986 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213
JB		 1987
1988 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
1989 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
1990 err = -ENOENT;
1991
fffd0934 1992 if (!err)
e31b8213
JB		 1993 err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx,
1994 key.type == NL80211_KEYTYPE_PAIRWISE,
1995 mac_addr);
41ade00f 1996
3d23e349 1997#ifdef CONFIG_CFG80211_WEXT
08645126 1998 if (!err) {
b9454e83 1999 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 2000 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 2001 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 2002 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
2003 }
2004#endif
fffd0934 2005 wdev_unlock(dev->ieee80211_ptr);
08645126 2006
41ade00f
JB		 2007 return err;
2008}
2009
ed1b6cc7
JB		 2010static int nl80211_addset_beacon(struct sk_buff *skb, struct genl_info *info)
2011{
2012 int (*call)(struct wiphy *wiphy, struct net_device *dev,
2013 struct beacon_parameters *info);
4c476991
JB		 2014 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2015 struct net_device *dev = info->user_ptr[1];
56d1893d 2016 struct wireless_dev *wdev = dev->ieee80211_ptr;
ed1b6cc7 2017 struct beacon_parameters params;
56d1893d 2018 int haveinfo = 0, err;
ed1b6cc7 2019
9946ecfb
JM		 2020 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
2021 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2022 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2023 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
f4a11bb0
JB		 2024 return -EINVAL;
2025
074ac8df 2026 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2027 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2028 return -EOPNOTSUPP;
eec60b03 2029
56d1893d
JB		 2030 memset(&params, 0, sizeof(params));
2031
ed1b6cc7
JB		 2032 switch (info->genlhdr->cmd) {
2033 case NL80211_CMD_NEW_BEACON:
2034 /* these are required for NEW_BEACON */
2035 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
2036 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
4c476991
JB		 2037 !info->attrs[NL80211_ATTR_BEACON_HEAD])
2038 return -EINVAL;
ed1b6cc7 2039
56d1893d
JB		 2040 params.interval =
2041 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
2042 params.dtim_period =
2043 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
2044
2045 err = cfg80211_validate_beacon_int(rdev, params.interval);
2046 if (err)
2047 return err;
2048
32e9de84
JM		 2049 /*
2050 * In theory, some of these attributes could be required for
2051 * NEW_BEACON, but since they were not used when the command was
2052 * originally added, keep them optional for old user space
2053 * programs to work with drivers that do not need the additional
2054 * information.
2055 */
2056 if (info->attrs[NL80211_ATTR_SSID]) {
2057 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
2058 params.ssid_len =
2059 nla_len(info->attrs[NL80211_ATTR_SSID]);
2060 if (params.ssid_len == 0 ||
2061 params.ssid_len > IEEE80211_MAX_SSID_LEN)
2062 return -EINVAL;
2063 }
2064
2065 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
2066 params.hidden_ssid = nla_get_u32(
2067 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
2068 if (params.hidden_ssid !=
2069 NL80211_HIDDEN_SSID_NOT_IN_USE &&
2070 params.hidden_ssid !=
2071 NL80211_HIDDEN_SSID_ZERO_LEN &&
2072 params.hidden_ssid !=
2073 NL80211_HIDDEN_SSID_ZERO_CONTENTS)
2074 return -EINVAL;
2075 }
2076
5fb628e9
JM		 2077 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
2078
2079 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
2080 params.auth_type = nla_get_u32(
2081 info->attrs[NL80211_ATTR_AUTH_TYPE]);
2082 if (!nl80211_valid_auth_type(params.auth_type))
2083 return -EINVAL;
2084 } else
2085 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
2086
2087 err = nl80211_crypto_settings(rdev, info, &params.crypto,
2088 NL80211_MAX_NR_CIPHER_SUITES);
2089 if (err)
2090 return err;
2091
79c97e97 2092 call = rdev->ops->add_beacon;
ed1b6cc7
JB		 2093 break;
2094 case NL80211_CMD_SET_BEACON:
79c97e97 2095 call = rdev->ops->set_beacon;
ed1b6cc7
JB		 2096 break;
2097 default:
2098 WARN_ON(1);
4c476991 2099 return -EOPNOTSUPP;
ed1b6cc7
JB		 2100 }
2101
4c476991
JB		 2102 if (!call)
2103 return -EOPNOTSUPP;
ed1b6cc7 2104
ed1b6cc7
JB		 2105 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
2106 params.head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2107 params.head_len =
2108 nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2109 haveinfo = 1;
2110 }
2111
2112 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
2113 params.tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2114 params.tail_len =
2115 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2116 haveinfo = 1;
2117 }
2118
4c476991
JB		 2119 if (!haveinfo)
2120 return -EINVAL;
3b85875a 2121
9946ecfb
JM		 2122 if (info->attrs[NL80211_ATTR_IE]) {
2123 params.beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2124 params.beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
2125 }
2126
2127 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
2128 params.proberesp_ies =
2129 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2130 params.proberesp_ies_len =
2131 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2132 }
2133
2134 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
2135 params.assocresp_ies =
2136 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2137 params.assocresp_ies_len =
2138 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2139 }
2140
56d1893d
JB		 2141 err = call(&rdev->wiphy, dev, &params);
2142 if (!err && params.interval)
2143 wdev->beacon_interval = params.interval;
2144 return err;
ed1b6cc7
JB		 2145}
2146
2147static int nl80211_del_beacon(struct sk_buff *skb, struct genl_info *info)
2148{
4c476991
JB		 2149 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2150 struct net_device *dev = info->user_ptr[1];
56d1893d
JB		 2151 struct wireless_dev *wdev = dev->ieee80211_ptr;
2152 int err;
ed1b6cc7 2153
4c476991
JB		 2154 if (!rdev->ops->del_beacon)
2155 return -EOPNOTSUPP;
ed1b6cc7 2156
074ac8df 2157 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2158 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2159 return -EOPNOTSUPP;
3b85875a 2160
56d1893d
JB		 2161 err = rdev->ops->del_beacon(&rdev->wiphy, dev);
2162 if (!err)
2163 wdev->beacon_interval = 0;
2164 return err;
ed1b6cc7
JB		 2165}
2166
5727ef1b
JB		 2167static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
2168 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
2169 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
2170 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 2171 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 2172 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
5727ef1b
JB		 2173};
2174
eccb8e8f
JB		 2175static int parse_station_flags(struct genl_info *info,
2176 struct station_parameters *params)
5727ef1b
JB		 2177{
2178 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 2179 struct nlattr *nla;
5727ef1b
JB		 2180 int flag;
2181
eccb8e8f
JB		 2182 /*
2183 * Try parsing the new attribute first so userspace
2184 * can specify both for older kernels.
2185 */
2186 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
2187 if (nla) {
2188 struct nl80211_sta_flag_update *sta_flags;
2189
2190 sta_flags = nla_data(nla);
2191 params->sta_flags_mask = sta_flags->mask;
2192 params->sta_flags_set = sta_flags->set;
2193 if ((params->sta_flags_mask |
2194 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
2195 return -EINVAL;
2196 return 0;
2197 }
2198
2199 /* if present, parse the old attribute */
5727ef1b 2200
eccb8e8f 2201 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 2202 if (!nla)
2203 return 0;
2204
2205 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
2206 nla, sta_flags_policy))
2207 return -EINVAL;
2208
eccb8e8f
JB		 2209 params->sta_flags_mask = (1 << __NL80211_STA_FLAG_AFTER_LAST) - 1;
2210 params->sta_flags_mask &= ~1;
5727ef1b
JB		 2211
2212 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++)
2213 if (flags[flag])
eccb8e8f 2214 params->sta_flags_set |= (1<<flag);
5727ef1b
JB		 2215
2216 return 0;
2217}
2218
c8dcfd8a
FF		 2219static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
2220 int attr)
2221{
2222 struct nlattr *rate;
2223 u16 bitrate;
2224
2225 rate = nla_nest_start(msg, attr);
2226 if (!rate)
2227 goto nla_put_failure;
2228
2229 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
2230 bitrate = cfg80211_calculate_bitrate(info);
2231 if (bitrate > 0)
2232 NLA_PUT_U16(msg, NL80211_RATE_INFO_BITRATE, bitrate);
2233
2234 if (info->flags & RATE_INFO_FLAGS_MCS)
2235 NLA_PUT_U8(msg, NL80211_RATE_INFO_MCS, info->mcs);
2236 if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH)
2237 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_40_MHZ_WIDTH);
2238 if (info->flags & RATE_INFO_FLAGS_SHORT_GI)
2239 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_SHORT_GI);
2240
2241 nla_nest_end(msg, rate);
2242 return true;
2243
2244nla_put_failure:
2245 return false;
2246}
2247
fd5b74dc
JB		 2248static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
2249 int flags, struct net_device *dev,
98b62183 2250 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 2251{
2252 void *hdr;
f4263c98 2253 struct nlattr *sinfoattr, *bss_param;
fd5b74dc
JB		 2254
2255 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2256 if (!hdr)
2257 return -1;
2258
2259 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2260 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
2261
f5ea9120
JB		 2262 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, sinfo->generation);
2263
2ec600d6
LCC		 2264 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
2265 if (!sinfoattr)
fd5b74dc 2266 goto nla_put_failure;
ebe27c91
MSS		 2267 if (sinfo->filled & STATION_INFO_CONNECTED_TIME)
2268 NLA_PUT_U32(msg, NL80211_STA_INFO_CONNECTED_TIME,
2269 sinfo->connected_time);
2ec600d6
LCC		 2270 if (sinfo->filled & STATION_INFO_INACTIVE_TIME)
2271 NLA_PUT_U32(msg, NL80211_STA_INFO_INACTIVE_TIME,
2272 sinfo->inactive_time);
2273 if (sinfo->filled & STATION_INFO_RX_BYTES)
2274 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_BYTES,
2275 sinfo->rx_bytes);
2276 if (sinfo->filled & STATION_INFO_TX_BYTES)
2277 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_BYTES,
2278 sinfo->tx_bytes);
2279 if (sinfo->filled & STATION_INFO_LLID)
2280 NLA_PUT_U16(msg, NL80211_STA_INFO_LLID,
2281 sinfo->llid);
2282 if (sinfo->filled & STATION_INFO_PLID)
2283 NLA_PUT_U16(msg, NL80211_STA_INFO_PLID,
2284 sinfo->plid);
2285 if (sinfo->filled & STATION_INFO_PLINK_STATE)
2286 NLA_PUT_U8(msg, NL80211_STA_INFO_PLINK_STATE,
2287 sinfo->plink_state);
420e7fab
HR		 2288 if (sinfo->filled & STATION_INFO_SIGNAL)
2289 NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL,
2290 sinfo->signal);
541a45a1
BR		 2291 if (sinfo->filled & STATION_INFO_SIGNAL_AVG)
2292 NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL_AVG,
2293 sinfo->signal_avg);
420e7fab 2294 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
c8dcfd8a
FF		 2295 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
2296 NL80211_STA_INFO_TX_BITRATE))
2297 goto nla_put_failure;
2298 }
2299 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
2300 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
2301 NL80211_STA_INFO_RX_BITRATE))
420e7fab 2302 goto nla_put_failure;
420e7fab 2303 }
98c8a60a
JM		 2304 if (sinfo->filled & STATION_INFO_RX_PACKETS)
2305 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_PACKETS,
2306 sinfo->rx_packets);
2307 if (sinfo->filled & STATION_INFO_TX_PACKETS)
2308 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_PACKETS,
2309 sinfo->tx_packets);
b206b4ef
BR		 2310 if (sinfo->filled & STATION_INFO_TX_RETRIES)
2311 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_RETRIES,
2312 sinfo->tx_retries);
2313 if (sinfo->filled & STATION_INFO_TX_FAILED)
2314 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_FAILED,
2315 sinfo->tx_failed);
f4263c98
PS		 2316 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
2317 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
2318 if (!bss_param)
2319 goto nla_put_failure;
2320
2321 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT)
2322 NLA_PUT_FLAG(msg, NL80211_STA_BSS_PARAM_CTS_PROT);
2323 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE)
2324 NLA_PUT_FLAG(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE);
2325 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME)
2326 NLA_PUT_FLAG(msg,
2327 NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME);
2328 NLA_PUT_U8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
2329 sinfo->bss_param.dtim_period);
2330 NLA_PUT_U16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
2331 sinfo->bss_param.beacon_interval);
2332
2333 nla_nest_end(msg, bss_param);
2334 }
2ec600d6 2335 nla_nest_end(msg, sinfoattr);
fd5b74dc 2336
040bdf71 2337 if (sinfo->filled & STATION_INFO_ASSOC_REQ_IES)
50d3dfb7
JM		 2338 NLA_PUT(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
2339 sinfo->assoc_req_ies);
2340
fd5b74dc
JB		 2341 return genlmsg_end(msg, hdr);
2342
2343 nla_put_failure:
bc3ed28c
TG		 2344 genlmsg_cancel(msg, hdr);
2345 return -EMSGSIZE;
fd5b74dc
JB		 2346}
2347
2ec600d6 2348static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 2349 struct netlink_callback *cb)
2ec600d6 2350{
2ec600d6
LCC		 2351 struct station_info sinfo;
2352 struct cfg80211_registered_device *dev;
bba95fef 2353 struct net_device *netdev;
2ec600d6 2354 u8 mac_addr[ETH_ALEN];
bba95fef 2355 int sta_idx = cb->args[1];
2ec600d6 2356 int err;
2ec600d6 2357
67748893
JB		 2358 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2359 if (err)
2360 return err;
bba95fef
JB		 2361
2362 if (!dev->ops->dump_station) {
eec60b03 2363 err = -EOPNOTSUPP;
bba95fef
JB		 2364 goto out_err;
2365 }
2366
bba95fef 2367 while (1) {
f612cedf 2368 memset(&sinfo, 0, sizeof(sinfo));
bba95fef
JB		 2369 err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
2370 mac_addr, &sinfo);
2371 if (err == -ENOENT)
2372 break;
2373 if (err)
3b85875a 2374 goto out_err;
bba95fef
JB		 2375
2376 if (nl80211_send_station(skb,
2377 NETLINK_CB(cb->skb).pid,
2378 cb->nlh->nlmsg_seq, NLM_F_MULTI,
2379 netdev, mac_addr,
2380 &sinfo) < 0)
2381 goto out;
2382
2383 sta_idx++;
2384 }
2385
2386
2387 out:
2388 cb->args[1] = sta_idx;
2389 err = skb->len;
bba95fef 2390 out_err:
67748893 2391 nl80211_finish_netdev_dump(dev);
bba95fef
JB		 2392
2393 return err;
2ec600d6 2394}
fd5b74dc 2395
5727ef1b
JB		 2396static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
2397{
4c476991
JB		 2398 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2399 struct net_device *dev = info->user_ptr[1];
2ec600d6 2400 struct station_info sinfo;
fd5b74dc
JB		 2401 struct sk_buff *msg;
2402 u8 *mac_addr = NULL;
4c476991 2403 int err;
fd5b74dc 2404
2ec600d6 2405 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 2406
2407 if (!info->attrs[NL80211_ATTR_MAC])
2408 return -EINVAL;
2409
2410 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2411
4c476991
JB		 2412 if (!rdev->ops->get_station)
2413 return -EOPNOTSUPP;
3b85875a 2414
4c476991 2415 err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
fd5b74dc 2416 if (err)
4c476991 2417 return err;
2ec600d6 2418
fd2120ca 2419 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc 2420 if (!msg)
4c476991 2421 return -ENOMEM;
fd5b74dc
JB		 2422
2423 if (nl80211_send_station(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 2424 dev, mac_addr, &sinfo) < 0) {
2425 nlmsg_free(msg);
2426 return -ENOBUFS;
2427 }
3b85875a 2428
4c476991 2429 return genlmsg_reply(msg, info);
5727ef1b
JB		 2430}
2431
2432/*
c258d2de 2433 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 2434 */
463d0183 2435static int get_vlan(struct genl_info *info,
5727ef1b
JB		 2436 struct cfg80211_registered_device *rdev,
2437 struct net_device **vlan)
2438{
463d0183 2439 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
5727ef1b
JB		 2440 *vlan = NULL;
2441
2442 if (vlanattr) {
463d0183
JB		 2443 *vlan = dev_get_by_index(genl_info_net(info),
2444 nla_get_u32(vlanattr));
5727ef1b
JB		 2445 if (!*vlan)
2446 return -ENODEV;
2447 if (!(*vlan)->ieee80211_ptr)
2448 return -EINVAL;
2449 if ((*vlan)->ieee80211_ptr->wiphy != &rdev->wiphy)
2450 return -EINVAL;
c258d2de
FF		 2451 if (!netif_running(*vlan))
2452 return -ENETDOWN;
5727ef1b
JB		 2453 }
2454 return 0;
2455}
2456
2457static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
2458{
4c476991 2459 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2460 int err;
4c476991 2461 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2462 struct station_parameters params;
2463 u8 *mac_addr = NULL;
2464
2465 memset(&params, 0, sizeof(params));
2466
2467 params.listen_interval = -1;
57cf8043 2468 params.plink_state = -1;
5727ef1b
JB		 2469
2470 if (info->attrs[NL80211_ATTR_STA_AID])
2471 return -EINVAL;
2472
2473 if (!info->attrs[NL80211_ATTR_MAC])
2474 return -EINVAL;
2475
2476 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2477
2478 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
2479 params.supported_rates =
2480 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2481 params.supported_rates_len =
2482 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2483 }
2484
2485 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
2486 params.listen_interval =
2487 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
2488
36aedc90
JM		 2489 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2490 params.ht_capa =
2491 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
2492
eccb8e8f 2493 if (parse_station_flags(info, &params))
5727ef1b
JB		 2494 return -EINVAL;
2495
2ec600d6
LCC		 2496 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2497 params.plink_action =
2498 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2499
9c3990aa
JC		 2500 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE])
2501 params.plink_state =
2502 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
2503
463d0183 2504 err = get_vlan(info, rdev, &params.vlan);
a97f4424 2505 if (err)
034d655e 2506 goto out;
a97f4424
JB		 2507
2508 /* validate settings */
2509 err = 0;
2510
2511 switch (dev->ieee80211_ptr->iftype) {
2512 case NL80211_IFTYPE_AP:
2513 case NL80211_IFTYPE_AP_VLAN:
074ac8df 2514 case NL80211_IFTYPE_P2P_GO:
a97f4424
JB		 2515 /* disallow mesh-specific things */
2516 if (params.plink_action)
2517 err = -EINVAL;
2518 break;
074ac8df 2519 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424
JB		 2520 case NL80211_IFTYPE_STATION:
2521 /* disallow everything but AUTHORIZED flag */
2522 if (params.plink_action)
2523 err = -EINVAL;
2524 if (params.vlan)
2525 err = -EINVAL;
2526 if (params.supported_rates)
2527 err = -EINVAL;
2528 if (params.ht_capa)
2529 err = -EINVAL;
2530 if (params.listen_interval >= 0)
2531 err = -EINVAL;
2532 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
2533 err = -EINVAL;
2534 break;
2535 case NL80211_IFTYPE_MESH_POINT:
2536 /* disallow things mesh doesn't support */
2537 if (params.vlan)
2538 err = -EINVAL;
2539 if (params.ht_capa)
2540 err = -EINVAL;
2541 if (params.listen_interval >= 0)
2542 err = -EINVAL;
b39c48fa
JC		 2543 if (params.sta_flags_mask &
2544 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
8429828e 2545 BIT(NL80211_STA_FLAG_MFP) |
b39c48fa 2546 BIT(NL80211_STA_FLAG_AUTHORIZED)))
a97f4424
JB		 2547 err = -EINVAL;
2548 break;
2549 default:
2550 err = -EINVAL;
034d655e
JB		 2551 }
2552
5727ef1b
JB		 2553 if (err)
2554 goto out;
2555
79c97e97 2556 if (!rdev->ops->change_station) {
5727ef1b
JB		 2557 err = -EOPNOTSUPP;
2558 goto out;
2559 }
2560
79c97e97 2561 err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b
JB		 2562
2563 out:
2564 if (params.vlan)
2565 dev_put(params.vlan);
3b85875a 2566
5727ef1b
JB		 2567 return err;
2568}
2569
c75786c9
EP		 2570static struct nla_policy
2571nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] __read_mostly = {
2572 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
2573 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
2574};
2575
5727ef1b
JB		 2576static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
2577{
4c476991 2578 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2579 int err;
4c476991 2580 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2581 struct station_parameters params;
2582 u8 *mac_addr = NULL;
2583
2584 memset(&params, 0, sizeof(params));
2585
2586 if (!info->attrs[NL80211_ATTR_MAC])
2587 return -EINVAL;
2588
5727ef1b
JB		 2589 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
2590 return -EINVAL;
2591
2592 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
2593 return -EINVAL;
2594
0e956c13
TLSC		 2595 if (!info->attrs[NL80211_ATTR_STA_AID])
2596 return -EINVAL;
2597
5727ef1b
JB		 2598 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2599 params.supported_rates =
2600 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2601 params.supported_rates_len =
2602 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2603 params.listen_interval =
2604 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 2605
0e956c13
TLSC		 2606 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
2607 if (!params.aid || params.aid > IEEE80211_MAX_AID)
2608 return -EINVAL;
51b50fbe 2609
36aedc90
JM		 2610 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2611 params.ht_capa =
2612 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 2613
96b78dff
JC		 2614 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2615 params.plink_action =
2616 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2617
eccb8e8f 2618 if (parse_station_flags(info, &params))
5727ef1b
JB		 2619 return -EINVAL;
2620
c75786c9 2621 /* parse WME attributes if sta is WME capable */
cedb5412 2622 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
cd32984f 2623 (params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)) &&
c75786c9
EP		 2624 info->attrs[NL80211_ATTR_STA_WME]) {
2625 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
2626 struct nlattr *nla;
2627
2628 nla = info->attrs[NL80211_ATTR_STA_WME];
2629 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
2630 nl80211_sta_wme_policy);
2631 if (err)
2632 return err;
2633
2634 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
2635 params.uapsd_queues =
2636 nla_get_u8(tb[NL80211_STA_WME_UAPSD_QUEUES]);
4319e193
JB		 2637 if (params.uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
2638 return -EINVAL;
c75786c9
EP		 2639
2640 if (tb[NL80211_STA_WME_MAX_SP])
2641 params.max_sp =
2642 nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
4319e193
JB		 2643
2644 if (params.max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
2645 return -EINVAL;
3b9ce80c
JB		 2646
2647 params.sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
c75786c9
EP		 2648 }
2649
0e956c13 2650 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
074ac8df 2651 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
96b78dff 2652 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 2653 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2654 return -EINVAL;
0e956c13 2655
463d0183 2656 err = get_vlan(info, rdev, &params.vlan);
a97f4424 2657 if (err)
e80cf853 2658 goto out;
a97f4424
JB		 2659
2660 /* validate settings */
2661 err = 0;
2662
79c97e97 2663 if (!rdev->ops->add_station) {
5727ef1b
JB		 2664 err = -EOPNOTSUPP;
2665 goto out;
2666 }
2667
79c97e97 2668 err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b
JB		 2669
2670 out:
2671 if (params.vlan)
2672 dev_put(params.vlan);
5727ef1b
JB		 2673 return err;
2674}
2675
2676static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
2677{
4c476991
JB		 2678 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2679 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2680 u8 *mac_addr = NULL;
2681
2682 if (info->attrs[NL80211_ATTR_MAC])
2683 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2684
e80cf853 2685 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 2686 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 2687 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 2688 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2689 return -EINVAL;
5727ef1b 2690
4c476991
JB		 2691 if (!rdev->ops->del_station)
2692 return -EOPNOTSUPP;
3b85875a 2693
4c476991 2694 return rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
5727ef1b
JB		 2695}
2696
2ec600d6
LCC		 2697static int nl80211_send_mpath(struct sk_buff *msg, u32 pid, u32 seq,
2698 int flags, struct net_device *dev,
2699 u8 *dst, u8 *next_hop,
2700 struct mpath_info *pinfo)
2701{
2702 void *hdr;
2703 struct nlattr *pinfoattr;
2704
2705 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2706 if (!hdr)
2707 return -1;
2708
2709 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2710 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, dst);
2711 NLA_PUT(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop);
2712
f5ea9120
JB		 2713 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, pinfo->generation);
2714
2ec600d6
LCC		 2715 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
2716 if (!pinfoattr)
2717 goto nla_put_failure;
2718 if (pinfo->filled & MPATH_INFO_FRAME_QLEN)
2719 NLA_PUT_U32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
2720 pinfo->frame_qlen);
d19b3bf6
RP		 2721 if (pinfo->filled & MPATH_INFO_SN)
2722 NLA_PUT_U32(msg, NL80211_MPATH_INFO_SN,
2723 pinfo->sn);
2ec600d6
LCC		 2724 if (pinfo->filled & MPATH_INFO_METRIC)
2725 NLA_PUT_U32(msg, NL80211_MPATH_INFO_METRIC,
2726 pinfo->metric);
2727 if (pinfo->filled & MPATH_INFO_EXPTIME)
2728 NLA_PUT_U32(msg, NL80211_MPATH_INFO_EXPTIME,
2729 pinfo->exptime);
2730 if (pinfo->filled & MPATH_INFO_FLAGS)
2731 NLA_PUT_U8(msg, NL80211_MPATH_INFO_FLAGS,
2732 pinfo->flags);
2733 if (pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT)
2734 NLA_PUT_U32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
2735 pinfo->discovery_timeout);
2736 if (pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES)
2737 NLA_PUT_U8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
2738 pinfo->discovery_retries);
2739
2740 nla_nest_end(msg, pinfoattr);
2741
2742 return genlmsg_end(msg, hdr);
2743
2744 nla_put_failure:
bc3ed28c
TG		 2745 genlmsg_cancel(msg, hdr);
2746 return -EMSGSIZE;
2ec600d6
LCC		 2747}
2748
2749static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 2750 struct netlink_callback *cb)
2ec600d6 2751{
2ec600d6
LCC		 2752 struct mpath_info pinfo;
2753 struct cfg80211_registered_device *dev;
bba95fef 2754 struct net_device *netdev;
2ec600d6
LCC		 2755 u8 dst[ETH_ALEN];
2756 u8 next_hop[ETH_ALEN];
bba95fef 2757 int path_idx = cb->args[1];
2ec600d6 2758 int err;
2ec600d6 2759
67748893
JB		 2760 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2761 if (err)
2762 return err;
bba95fef
JB		 2763
2764 if (!dev->ops->dump_mpath) {
eec60b03 2765 err = -EOPNOTSUPP;
bba95fef
JB		 2766 goto out_err;
2767 }
2768
eec60b03
JM		 2769 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2770 err = -EOPNOTSUPP;
0448b5fc 2771 goto out_err;
eec60b03
JM		 2772 }
2773
bba95fef
JB		 2774 while (1) {
2775 err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
2776 dst, next_hop, &pinfo);
2777 if (err == -ENOENT)
2ec600d6 2778 break;
bba95fef 2779 if (err)
3b85875a 2780 goto out_err;
2ec600d6 2781
bba95fef
JB		 2782 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).pid,
2783 cb->nlh->nlmsg_seq, NLM_F_MULTI,
2784 netdev, dst, next_hop,
2785 &pinfo) < 0)
2786 goto out;
2ec600d6 2787
bba95fef 2788 path_idx++;
2ec600d6 2789 }
2ec600d6 2790
2ec600d6 2791
bba95fef
JB		 2792 out:
2793 cb->args[1] = path_idx;
2794 err = skb->len;
bba95fef 2795 out_err:
67748893 2796 nl80211_finish_netdev_dump(dev);
bba95fef 2797 return err;
2ec600d6
LCC		 2798}
2799
2800static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
2801{
4c476991 2802 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 2803 int err;
4c476991 2804 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2805 struct mpath_info pinfo;
2806 struct sk_buff *msg;
2807 u8 *dst = NULL;
2808 u8 next_hop[ETH_ALEN];
2809
2810 memset(&pinfo, 0, sizeof(pinfo));
2811
2812 if (!info->attrs[NL80211_ATTR_MAC])
2813 return -EINVAL;
2814
2815 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2816
4c476991
JB		 2817 if (!rdev->ops->get_mpath)
2818 return -EOPNOTSUPP;
2ec600d6 2819
4c476991
JB		 2820 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2821 return -EOPNOTSUPP;
eec60b03 2822
79c97e97 2823 err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
2ec600d6 2824 if (err)
4c476991 2825 return err;
2ec600d6 2826
fd2120ca 2827 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 2828 if (!msg)
4c476991 2829 return -ENOMEM;
2ec600d6
LCC		 2830
2831 if (nl80211_send_mpath(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 2832 dev, dst, next_hop, &pinfo) < 0) {
2833 nlmsg_free(msg);
2834 return -ENOBUFS;
2835 }
3b85875a 2836
4c476991 2837 return genlmsg_reply(msg, info);
2ec600d6
LCC		 2838}
2839
2840static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
2841{
4c476991
JB		 2842 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2843 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2844 u8 *dst = NULL;
2845 u8 *next_hop = NULL;
2846
2847 if (!info->attrs[NL80211_ATTR_MAC])
2848 return -EINVAL;
2849
2850 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2851 return -EINVAL;
2852
2853 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2854 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2855
4c476991
JB		 2856 if (!rdev->ops->change_mpath)
2857 return -EOPNOTSUPP;
35a8efe1 2858
4c476991
JB		 2859 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2860 return -EOPNOTSUPP;
2ec600d6 2861
4c476991 2862 return rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6 2863}
4c476991 2864
2ec600d6
LCC		 2865static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
2866{
4c476991
JB		 2867 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2868 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2869 u8 *dst = NULL;
2870 u8 *next_hop = NULL;
2871
2872 if (!info->attrs[NL80211_ATTR_MAC])
2873 return -EINVAL;
2874
2875 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2876 return -EINVAL;
2877
2878 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2879 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2880
4c476991
JB		 2881 if (!rdev->ops->add_mpath)
2882 return -EOPNOTSUPP;
35a8efe1 2883
4c476991
JB		 2884 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2885 return -EOPNOTSUPP;
2ec600d6 2886
4c476991 2887 return rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6
LCC		 2888}
2889
2890static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
2891{
4c476991
JB		 2892 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2893 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2894 u8 *dst = NULL;
2895
2896 if (info->attrs[NL80211_ATTR_MAC])
2897 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2898
4c476991
JB		 2899 if (!rdev->ops->del_mpath)
2900 return -EOPNOTSUPP;
3b85875a 2901
4c476991 2902 return rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
2ec600d6
LCC		 2903}
2904
9f1ba906
JM		 2905static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
2906{
4c476991
JB		 2907 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2908 struct net_device *dev = info->user_ptr[1];
9f1ba906
JM		 2909 struct bss_parameters params;
2910
2911 memset(&params, 0, sizeof(params));
2912 /* default to not changing parameters */
2913 params.use_cts_prot = -1;
2914 params.use_short_preamble = -1;
2915 params.use_short_slot_time = -1;
fd8aaaf3 2916 params.ap_isolate = -1;
50b12f59 2917 params.ht_opmode = -1;
9f1ba906
JM		 2918
2919 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
2920 params.use_cts_prot =
2921 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
2922 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
2923 params.use_short_preamble =
2924 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
2925 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
2926 params.use_short_slot_time =
2927 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 2928 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
2929 params.basic_rates =
2930 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2931 params.basic_rates_len =
2932 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2933 }
fd8aaaf3
FF		 2934 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
2935 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 2936 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
2937 params.ht_opmode =
2938 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 2939
4c476991
JB		 2940 if (!rdev->ops->change_bss)
2941 return -EOPNOTSUPP;
9f1ba906 2942
074ac8df 2943 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2944 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2945 return -EOPNOTSUPP;
3b85875a 2946
4c476991 2947 return rdev->ops->change_bss(&rdev->wiphy, dev, &params);
9f1ba906
JM		 2948}
2949
b54452b0 2950static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
b2e1b302
LR		 2951 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
2952 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
2953 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
2954 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
2955 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
2956 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
2957};
2958
2959static int parse_reg_rule(struct nlattr *tb[],
2960 struct ieee80211_reg_rule *reg_rule)
2961{
2962 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
2963 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
2964
2965 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
2966 return -EINVAL;
2967 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
2968 return -EINVAL;
2969 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
2970 return -EINVAL;
2971 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
2972 return -EINVAL;
2973 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
2974 return -EINVAL;
2975
2976 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
2977
2978 freq_range->start_freq_khz =
2979 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
2980 freq_range->end_freq_khz =
2981 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
2982 freq_range->max_bandwidth_khz =
2983 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
2984
2985 power_rule->max_eirp =
2986 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
2987
2988 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
2989 power_rule->max_antenna_gain =
2990 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
2991
2992 return 0;
2993}
2994
2995static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
2996{
2997 int r;
2998 char *data = NULL;
2999
80778f18
LR		 3000 /*
3001 * You should only get this when cfg80211 hasn't yet initialized
3002 * completely when built-in to the kernel right between the time
3003 * window between nl80211_init() and regulatory_init(), if that is
3004 * even possible.
3005 */
3006 mutex_lock(&cfg80211_mutex);
3007 if (unlikely(!cfg80211_regdomain)) {
fe33eb39
LR		 3008 mutex_unlock(&cfg80211_mutex);
3009 return -EINPROGRESS;
80778f18 3010 }
fe33eb39 3011 mutex_unlock(&cfg80211_mutex);
80778f18 3012
fe33eb39
LR		 3013 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3014 return -EINVAL;
b2e1b302
LR		 3015
3016 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3017
fe33eb39
LR		 3018 r = regulatory_hint_user(data);
3019
b2e1b302
LR		 3020 return r;
3021}
3022
24bdd9f4 3023static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 3024 struct genl_info *info)
93da9cc1 3025{
4c476991 3026 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 3027 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 3028 struct wireless_dev *wdev = dev->ieee80211_ptr;
3029 struct mesh_config cur_params;
3030 int err = 0;
93da9cc1 3031 void *hdr;
3032 struct nlattr *pinfoattr;
3033 struct sk_buff *msg;
3034
29cbe68c
JB		 3035 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3036 return -EOPNOTSUPP;
3037
24bdd9f4 3038 if (!rdev->ops->get_mesh_config)
4c476991 3039 return -EOPNOTSUPP;
f3f92586 3040
29cbe68c
JB		 3041 wdev_lock(wdev);
3042 /* If not connected, get default parameters */
3043 if (!wdev->mesh_id_len)
3044 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
3045 else
24bdd9f4 3046 err = rdev->ops->get_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3047 &cur_params);
3048 wdev_unlock(wdev);
3049
93da9cc1 3050 if (err)
4c476991 3051 return err;
93da9cc1 3052
3053 /* Draw up a netlink message to send back */
fd2120ca 3054 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 3055 if (!msg)
3056 return -ENOMEM;
93da9cc1 3057 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
24bdd9f4 3058 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 3059 if (!hdr)
efe1cf0c 3060 goto out;
24bdd9f4 3061 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 3062 if (!pinfoattr)
3063 goto nla_put_failure;
3064 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
3065 NLA_PUT_U16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
3066 cur_params.dot11MeshRetryTimeout);
3067 NLA_PUT_U16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3068 cur_params.dot11MeshConfirmTimeout);
3069 NLA_PUT_U16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
3070 cur_params.dot11MeshHoldingTimeout);
3071 NLA_PUT_U16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
3072 cur_params.dot11MeshMaxPeerLinks);
3073 NLA_PUT_U8(msg, NL80211_MESHCONF_MAX_RETRIES,
3074 cur_params.dot11MeshMaxRetries);
3075 NLA_PUT_U8(msg, NL80211_MESHCONF_TTL,
3076 cur_params.dot11MeshTTL);
45904f21
JC		 3077 NLA_PUT_U8(msg, NL80211_MESHCONF_ELEMENT_TTL,
3078 cur_params.element_ttl);
93da9cc1 3079 NLA_PUT_U8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3080 cur_params.auto_open_plinks);
3081 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3082 cur_params.dot11MeshHWMPmaxPREQretries);
3083 NLA_PUT_U32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
3084 cur_params.path_refresh_time);
3085 NLA_PUT_U16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3086 cur_params.min_discovery_timeout);
3087 NLA_PUT_U32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3088 cur_params.dot11MeshHWMPactivePathTimeout);
3089 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3090 cur_params.dot11MeshHWMPpreqMinInterval);
3091 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3092 cur_params.dot11MeshHWMPnetDiameterTraversalTime);
63c5723b
RP		 3093 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
3094 cur_params.dot11MeshHWMPRootMode);
0507e159
JC		 3095 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3096 cur_params.dot11MeshHWMPRannInterval);
16dd7267
JC		 3097 NLA_PUT_U8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3098 cur_params.dot11MeshGateAnnouncementProtocol);
93da9cc1 3099 nla_nest_end(msg, pinfoattr);
3100 genlmsg_end(msg, hdr);
4c476991 3101 return genlmsg_reply(msg, info);
93da9cc1 3102
3b85875a 3103 nla_put_failure:
93da9cc1 3104 genlmsg_cancel(msg, hdr);
efe1cf0c 3105 out:
d080e275 3106 nlmsg_free(msg);
4c476991 3107 return -ENOBUFS;
93da9cc1 3108}
3109
b54452b0 3110static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
93da9cc1 3111 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
3112 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
3113 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
3114 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
3115 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
3116 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
45904f21 3117 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
93da9cc1 3118 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
3119
3120 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
3121 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
3122 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
3123 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
3124 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
3125 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
699403db 3126 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
0507e159 3127 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
16dd7267 3128 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
93da9cc1 3129};
3130
c80d545d
JC		 3131static const struct nla_policy
3132 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
3133 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
3134 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 3135 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
581a8b0f 3136 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
c80d545d 3137 .len = IEEE80211_MAX_DATA_LEN },
b130e5ce 3138 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 3139};
3140
24bdd9f4 3141static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 3142 struct mesh_config *cfg,
3143 u32 *mask_out)
93da9cc1 3144{
93da9cc1 3145 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 3146 u32 mask = 0;
93da9cc1 3147
bd90fdcc
JB		 3148#define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
3149do {\
3150 if (table[attr_num]) {\
3151 cfg->param = nla_fn(table[attr_num]); \
3152 mask |= (1 << (attr_num - 1)); \
3153 } \
3154} while (0);\
3155
3156
24bdd9f4 3157 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 3158 return -EINVAL;
3159 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
24bdd9f4 3160 info->attrs[NL80211_ATTR_MESH_CONFIG],
bd90fdcc 3161 nl80211_meshconf_params_policy))
93da9cc1 3162 return -EINVAL;
3163
93da9cc1 3164 /* This makes sure that there aren't more than 32 mesh config
3165 * parameters (otherwise our bitfield scheme would not work.) */
3166 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
3167
3168 /* Fill in the params struct */
93da9cc1 3169 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
3170 mask, NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
3171 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
3172 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT, nla_get_u16);
3173 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
3174 mask, NL80211_MESHCONF_HOLDING_TIMEOUT, nla_get_u16);
3175 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
3176 mask, NL80211_MESHCONF_MAX_PEER_LINKS, nla_get_u16);
3177 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
3178 mask, NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
3179 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
3180 mask, NL80211_MESHCONF_TTL, nla_get_u8);
45904f21
JC		 3181 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl,
3182 mask, NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
93da9cc1 3183 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
3184 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS, nla_get_u8);
3185 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
3186 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3187 nla_get_u8);
3188 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
3189 mask, NL80211_MESHCONF_PATH_REFRESH_TIME, nla_get_u32);
3190 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
3191 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3192 nla_get_u16);
3193 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
3194 mask, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3195 nla_get_u32);
3196 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
3197 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3198 nla_get_u16);
3199 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3200 dot11MeshHWMPnetDiameterTraversalTime,
3201 mask, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3202 nla_get_u16);
63c5723b
RP		 3203 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3204 dot11MeshHWMPRootMode, mask,
3205 NL80211_MESHCONF_HWMP_ROOTMODE,
3206 nla_get_u8);
0507e159
JC		 3207 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3208 dot11MeshHWMPRannInterval, mask,
3209 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3210 nla_get_u16);
16dd7267
JC		 3211 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3212 dot11MeshGateAnnouncementProtocol, mask,
3213 NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3214 nla_get_u8);
bd90fdcc
JB		 3215 if (mask_out)
3216 *mask_out = mask;
c80d545d 3217
bd90fdcc
JB		 3218 return 0;
3219
3220#undef FILL_IN_MESH_PARAM_IF_SET
3221}
3222
c80d545d
JC		 3223static int nl80211_parse_mesh_setup(struct genl_info *info,
3224 struct mesh_setup *setup)
3225{
3226 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
3227
3228 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
3229 return -EINVAL;
3230 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
3231 info->attrs[NL80211_ATTR_MESH_SETUP],
3232 nl80211_mesh_setup_params_policy))
3233 return -EINVAL;
3234
3235 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
3236 setup->path_sel_proto =
3237 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
3238 IEEE80211_PATH_PROTOCOL_VENDOR :
3239 IEEE80211_PATH_PROTOCOL_HWMP;
3240
3241 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
3242 setup->path_metric =
3243 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
3244 IEEE80211_PATH_METRIC_VENDOR :
3245 IEEE80211_PATH_METRIC_AIRTIME;
3246
581a8b0f
JC		 3247
3248 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 3249 struct nlattr *ieattr =
581a8b0f 3250 tb[NL80211_MESH_SETUP_IE];
c80d545d
JC		 3251 if (!is_valid_ie_attr(ieattr))
3252 return -EINVAL;
581a8b0f
JC		 3253 setup->ie = nla_data(ieattr);
3254 setup->ie_len = nla_len(ieattr);
c80d545d 3255 }
b130e5ce
JC		 3256 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
3257 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
c80d545d
JC		 3258
3259 return 0;
3260}
3261
24bdd9f4 3262static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 3263 struct genl_info *info)
bd90fdcc
JB		 3264{
3265 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3266 struct net_device *dev = info->user_ptr[1];
29cbe68c 3267 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 3268 struct mesh_config cfg;
3269 u32 mask;
3270 int err;
3271
29cbe68c
JB		 3272 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3273 return -EOPNOTSUPP;
3274
24bdd9f4 3275 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 3276 return -EOPNOTSUPP;
3277
24bdd9f4 3278 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 3279 if (err)
3280 return err;
3281
29cbe68c
JB		 3282 wdev_lock(wdev);
3283 if (!wdev->mesh_id_len)
3284 err = -ENOLINK;
3285
3286 if (!err)
24bdd9f4 3287 err = rdev->ops->update_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3288 mask, &cfg);
3289
3290 wdev_unlock(wdev);
3291
3292 return err;
93da9cc1 3293}
3294
f130347c
LR		 3295static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
3296{
3297 struct sk_buff *msg;
3298 void *hdr = NULL;
3299 struct nlattr *nl_reg_rules;
3300 unsigned int i;
3301 int err = -EINVAL;
3302
a1794390 3303 mutex_lock(&cfg80211_mutex);
f130347c
LR		 3304
3305 if (!cfg80211_regdomain)
3306 goto out;
3307
fd2120ca 3308 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 3309 if (!msg) {
3310 err = -ENOBUFS;
3311 goto out;
3312 }
3313
3314 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
3315 NL80211_CMD_GET_REG);
3316 if (!hdr)
efe1cf0c 3317 goto put_failure;
f130347c
LR		 3318
3319 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2,
3320 cfg80211_regdomain->alpha2);
3321
3322 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
3323 if (!nl_reg_rules)
3324 goto nla_put_failure;
3325
3326 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
3327 struct nlattr *nl_reg_rule;
3328 const struct ieee80211_reg_rule *reg_rule;
3329 const struct ieee80211_freq_range *freq_range;
3330 const struct ieee80211_power_rule *power_rule;
3331
3332 reg_rule = &cfg80211_regdomain->reg_rules[i];
3333 freq_range = &reg_rule->freq_range;
3334 power_rule = &reg_rule->power_rule;
3335
3336 nl_reg_rule = nla_nest_start(msg, i);
3337 if (!nl_reg_rule)
3338 goto nla_put_failure;
3339
3340 NLA_PUT_U32(msg, NL80211_ATTR_REG_RULE_FLAGS,
3341 reg_rule->flags);
3342 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_START,
3343 freq_range->start_freq_khz);
3344 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_END,
3345 freq_range->end_freq_khz);
3346 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
3347 freq_range->max_bandwidth_khz);
3348 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
3349 power_rule->max_antenna_gain);
3350 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
3351 power_rule->max_eirp);
3352
3353 nla_nest_end(msg, nl_reg_rule);
3354 }
3355
3356 nla_nest_end(msg, nl_reg_rules);
3357
3358 genlmsg_end(msg, hdr);
134e6375 3359 err = genlmsg_reply(msg, info);
f130347c
LR		 3360 goto out;
3361
3362nla_put_failure:
3363 genlmsg_cancel(msg, hdr);
efe1cf0c 3364put_failure:
d080e275 3365 nlmsg_free(msg);
f130347c
LR		 3366 err = -EMSGSIZE;
3367out:
a1794390 3368 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 3369 return err;
3370}
3371
b2e1b302
LR		 3372static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
3373{
3374 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
3375 struct nlattr *nl_reg_rule;
3376 char *alpha2 = NULL;
3377 int rem_reg_rules = 0, r = 0;
3378 u32 num_rules = 0, rule_idx = 0, size_of_regd;
3379 struct ieee80211_regdomain *rd = NULL;
3380
3381 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3382 return -EINVAL;
3383
3384 if (!info->attrs[NL80211_ATTR_REG_RULES])
3385 return -EINVAL;
3386
3387 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3388
3389 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
3390 rem_reg_rules) {
3391 num_rules++;
3392 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 3393 return -EINVAL;
b2e1b302
LR		 3394 }
3395
61405e97
LR		 3396 mutex_lock(&cfg80211_mutex);
3397
d0e18f83
LR		 3398 if (!reg_is_valid_request(alpha2)) {
3399 r = -EINVAL;
3400 goto bad_reg;
3401 }
b2e1b302
LR		 3402
3403 size_of_regd = sizeof(struct ieee80211_regdomain) +
3404 (num_rules * sizeof(struct ieee80211_reg_rule));
3405
3406 rd = kzalloc(size_of_regd, GFP_KERNEL);
d0e18f83
LR		 3407 if (!rd) {
3408 r = -ENOMEM;
3409 goto bad_reg;
3410 }
b2e1b302
LR		 3411
3412 rd->n_reg_rules = num_rules;
3413 rd->alpha2[0] = alpha2[0];
3414 rd->alpha2[1] = alpha2[1];
3415
3416 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
3417 rem_reg_rules) {
3418 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
3419 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
3420 reg_rule_policy);
3421 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
3422 if (r)
3423 goto bad_reg;
3424
3425 rule_idx++;
3426
d0e18f83
LR		 3427 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
3428 r = -EINVAL;
b2e1b302 3429 goto bad_reg;
d0e18f83 3430 }
b2e1b302
LR		 3431 }
3432
3433 BUG_ON(rule_idx != num_rules);
3434
b2e1b302 3435 r = set_regdom(rd);
61405e97 3436
a1794390 3437 mutex_unlock(&cfg80211_mutex);
d0e18f83 3438
b2e1b302
LR		 3439 return r;
3440
d2372b31 3441 bad_reg:
61405e97 3442 mutex_unlock(&cfg80211_mutex);
b2e1b302 3443 kfree(rd);
d0e18f83 3444 return r;
b2e1b302
LR		 3445}
3446
83f5e2cf
JB		 3447static int validate_scan_freqs(struct nlattr *freqs)
3448{
3449 struct nlattr *attr1, *attr2;
3450 int n_channels = 0, tmp1, tmp2;
3451
3452 nla_for_each_nested(attr1, freqs, tmp1) {
3453 n_channels++;
3454 /*
3455 * Some hardware has a limited channel list for
3456 * scanning, and it is pretty much nonsensical
3457 * to scan for a channel twice, so disallow that
3458 * and don't require drivers to check that the
3459 * channel list they get isn't longer than what
3460 * they can scan, as long as they can scan all
3461 * the channels they registered at once.
3462 */
3463 nla_for_each_nested(attr2, freqs, tmp2)
3464 if (attr1 != attr2 &&
3465 nla_get_u32(attr1) == nla_get_u32(attr2))
3466 return 0;
3467 }
3468
3469 return n_channels;
3470}
3471
2a519311
JB		 3472static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
3473{
4c476991
JB		 3474 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3475 struct net_device *dev = info->user_ptr[1];
2a519311 3476 struct cfg80211_scan_request *request;
2a519311
JB		 3477 struct nlattr *attr;
3478 struct wiphy *wiphy;
83f5e2cf 3479 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 3480 size_t ie_len;
2a519311 3481
f4a11bb0
JB		 3482 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3483 return -EINVAL;
3484
79c97e97 3485 wiphy = &rdev->wiphy;
2a519311 3486
4c476991
JB		 3487 if (!rdev->ops->scan)
3488 return -EOPNOTSUPP;
2a519311 3489
4c476991
JB		 3490 if (rdev->scan_req)
3491 return -EBUSY;
2a519311
JB		 3492
3493 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 3494 n_channels = validate_scan_freqs(
3495 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4c476991
JB		 3496 if (!n_channels)
3497 return -EINVAL;
2a519311 3498 } else {
34850ab2 3499 enum ieee80211_band band;
83f5e2cf
JB		 3500 n_channels = 0;
3501
2a519311
JB		 3502 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
3503 if (wiphy->bands[band])
3504 n_channels += wiphy->bands[band]->n_channels;
3505 }
3506
3507 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
3508 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
3509 n_ssids++;
3510
4c476991
JB		 3511 if (n_ssids > wiphy->max_scan_ssids)
3512 return -EINVAL;
2a519311 3513
70692ad2
JM		 3514 if (info->attrs[NL80211_ATTR_IE])
3515 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3516 else
3517 ie_len = 0;
3518
4c476991
JB		 3519 if (ie_len > wiphy->max_scan_ie_len)
3520 return -EINVAL;
18a83659 3521
2a519311 3522 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 3523 + sizeof(*request->ssids) * n_ssids
3524 + sizeof(*request->channels) * n_channels
70692ad2 3525 + ie_len, GFP_KERNEL);
4c476991
JB		 3526 if (!request)
3527 return -ENOMEM;
2a519311 3528
2a519311 3529 if (n_ssids)
5ba63533 3530 request->ssids = (void *)&request->channels[n_channels];
2a519311 3531 request->n_ssids = n_ssids;
70692ad2
JM		 3532 if (ie_len) {
3533 if (request->ssids)
3534 request->ie = (void *)(request->ssids + n_ssids);
3535 else
3536 request->ie = (void *)(request->channels + n_channels);
3537 }
2a519311 3538
584991dc 3539 i = 0;
2a519311
JB		 3540 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3541 /* user specified, bail out if channel not found */
2a519311 3542 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 3543 struct ieee80211_channel *chan;
3544
3545 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3546
3547 if (!chan) {
2a519311
JB		 3548 err = -EINVAL;
3549 goto out_free;
3550 }
584991dc
JB		 3551
3552 /* ignore disabled channels */
3553 if (chan->flags & IEEE80211_CHAN_DISABLED)
3554 continue;
3555
3556 request->channels[i] = chan;
2a519311
JB		 3557 i++;
3558 }
3559 } else {
34850ab2
JB		 3560 enum ieee80211_band band;
3561
2a519311 3562 /* all channels */
2a519311
JB		 3563 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3564 int j;
3565 if (!wiphy->bands[band])
3566 continue;
3567 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 3568 struct ieee80211_channel *chan;
3569
3570 chan = &wiphy->bands[band]->channels[j];
3571
3572 if (chan->flags & IEEE80211_CHAN_DISABLED)
3573 continue;
3574
3575 request->channels[i] = chan;
2a519311
JB		 3576 i++;
3577 }
3578 }
3579 }
3580
584991dc
JB		 3581 if (!i) {
3582 err = -EINVAL;
3583 goto out_free;
3584 }
3585
3586 request->n_channels = i;
3587
2a519311
JB		 3588 i = 0;
3589 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
3590 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 3591 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 3592 err = -EINVAL;
3593 goto out_free;
3594 }
57a27e1d 3595 request->ssids[i].ssid_len = nla_len(attr);
2a519311 3596 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 3597 i++;
3598 }
3599 }
3600
70692ad2
JM		 3601 if (info->attrs[NL80211_ATTR_IE]) {
3602 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 3603 memcpy((void *)request->ie,
3604 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 3605 request->ie_len);
3606 }
3607
34850ab2 3608 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
a401d2bb
JB		 3609 if (wiphy->bands[i])
3610 request->rates[i] =
3611 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 3612
3613 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
3614 nla_for_each_nested(attr,
3615 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
3616 tmp) {
3617 enum ieee80211_band band = nla_type(attr);
3618
84404623 3619 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
34850ab2
JB		 3620 err = -EINVAL;
3621 goto out_free;
3622 }
3623 err = ieee80211_get_ratemask(wiphy->bands[band],
3624 nla_data(attr),
3625 nla_len(attr),
3626 &request->rates[band]);
3627 if (err)
3628 goto out_free;
3629 }
3630 }
3631
e9f935e3
RM		 3632 request->no_cck =
3633 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
3634
463d0183 3635 request->dev = dev;
79c97e97 3636 request->wiphy = &rdev->wiphy;
2a519311 3637
79c97e97
JB		 3638 rdev->scan_req = request;
3639 err = rdev->ops->scan(&rdev->wiphy, dev, request);
2a519311 3640
463d0183 3641 if (!err) {
79c97e97 3642 nl80211_send_scan_start(rdev, dev);
463d0183 3643 dev_hold(dev);
4c476991 3644 } else {
2a519311 3645 out_free:
79c97e97 3646 rdev->scan_req = NULL;
2a519311
JB		 3647 kfree(request);
3648 }
3b85875a 3649
2a519311
JB		 3650 return err;
3651}
3652
807f8a8c
LC		 3653static int nl80211_start_sched_scan(struct sk_buff *skb,
3654 struct genl_info *info)
3655{
3656 struct cfg80211_sched_scan_request *request;
3657 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3658 struct net_device *dev = info->user_ptr[1];
807f8a8c
LC		 3659 struct nlattr *attr;
3660 struct wiphy *wiphy;
a1f1c21c 3661 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i;
bbe6ad6d 3662 u32 interval;
807f8a8c
LC		 3663 enum ieee80211_band band;
3664 size_t ie_len;
a1f1c21c 3665 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
807f8a8c
LC		 3666
3667 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
3668 !rdev->ops->sched_scan_start)
3669 return -EOPNOTSUPP;
3670
3671 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3672 return -EINVAL;
3673
bbe6ad6d
LC		 3674 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
3675 return -EINVAL;
3676
3677 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
3678 if (interval == 0)
3679 return -EINVAL;
3680
807f8a8c
LC		 3681 wiphy = &rdev->wiphy;
3682
3683 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3684 n_channels = validate_scan_freqs(
3685 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
3686 if (!n_channels)
3687 return -EINVAL;
3688 } else {
3689 n_channels = 0;
3690
3691 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
3692 if (wiphy->bands[band])
3693 n_channels += wiphy->bands[band]->n_channels;
3694 }
3695
3696 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
3697 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
3698 tmp)
3699 n_ssids++;
3700
93b6aa69 3701 if (n_ssids > wiphy->max_sched_scan_ssids)
807f8a8c
LC		 3702 return -EINVAL;
3703
a1f1c21c
LC		 3704 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH])
3705 nla_for_each_nested(attr,
3706 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
3707 tmp)
3708 n_match_sets++;
3709
3710 if (n_match_sets > wiphy->max_match_sets)
3711 return -EINVAL;
3712
807f8a8c
LC		 3713 if (info->attrs[NL80211_ATTR_IE])
3714 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3715 else
3716 ie_len = 0;
3717
5a865bad 3718 if (ie_len > wiphy->max_sched_scan_ie_len)
807f8a8c
LC		 3719 return -EINVAL;
3720
c10841ca
LC		 3721 mutex_lock(&rdev->sched_scan_mtx);
3722
3723 if (rdev->sched_scan_req) {
3724 err = -EINPROGRESS;
3725 goto out;
3726 }
3727
807f8a8c 3728 request = kzalloc(sizeof(*request)
a2cd43c5 3729 + sizeof(*request->ssids) * n_ssids
a1f1c21c 3730 + sizeof(*request->match_sets) * n_match_sets
a2cd43c5 3731 + sizeof(*request->channels) * n_channels
807f8a8c 3732 + ie_len, GFP_KERNEL);
c10841ca
LC		 3733 if (!request) {
3734 err = -ENOMEM;
3735 goto out;
3736 }
807f8a8c
LC		 3737
3738 if (n_ssids)
3739 request->ssids = (void *)&request->channels[n_channels];
3740 request->n_ssids = n_ssids;
3741 if (ie_len) {
3742 if (request->ssids)
3743 request->ie = (void *)(request->ssids + n_ssids);
3744 else
3745 request->ie = (void *)(request->channels + n_channels);
3746 }
3747
a1f1c21c
LC		 3748 if (n_match_sets) {
3749 if (request->ie)
3750 request->match_sets = (void *)(request->ie + ie_len);
3751 else if (request->ssids)
3752 request->match_sets =
3753 (void *)(request->ssids + n_ssids);
3754 else
3755 request->match_sets =
3756 (void *)(request->channels + n_channels);
3757 }
3758 request->n_match_sets = n_match_sets;
3759
807f8a8c
LC		 3760 i = 0;
3761 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3762 /* user specified, bail out if channel not found */
3763 nla_for_each_nested(attr,
3764 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
3765 tmp) {
3766 struct ieee80211_channel *chan;
3767
3768 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3769
3770 if (!chan) {
3771 err = -EINVAL;
3772 goto out_free;
3773 }
3774
3775 /* ignore disabled channels */
3776 if (chan->flags & IEEE80211_CHAN_DISABLED)
3777 continue;
3778
3779 request->channels[i] = chan;
3780 i++;
3781 }
3782 } else {
3783 /* all channels */
3784 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3785 int j;
3786 if (!wiphy->bands[band])
3787 continue;
3788 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
3789 struct ieee80211_channel *chan;
3790
3791 chan = &wiphy->bands[band]->channels[j];
3792
3793 if (chan->flags & IEEE80211_CHAN_DISABLED)
3794 continue;
3795
3796 request->channels[i] = chan;
3797 i++;
3798 }
3799 }
3800 }
3801
3802 if (!i) {
3803 err = -EINVAL;
3804 goto out_free;
3805 }
3806
3807 request->n_channels = i;
3808
3809 i = 0;
3810 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
3811 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
3812 tmp) {
57a27e1d 3813 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 3814 err = -EINVAL;
3815 goto out_free;
3816 }
57a27e1d 3817 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 3818 memcpy(request->ssids[i].ssid, nla_data(attr),
3819 nla_len(attr));
807f8a8c
LC		 3820 i++;
3821 }
3822 }
3823
a1f1c21c
LC		 3824 i = 0;
3825 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
3826 nla_for_each_nested(attr,
3827 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
3828 tmp) {
3829 struct nlattr *ssid;
3830
3831 nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
3832 nla_data(attr), nla_len(attr),
3833 nl80211_match_policy);
3834 ssid = tb[NL80211_ATTR_SCHED_SCAN_MATCH_SSID];
3835 if (ssid) {
3836 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
3837 err = -EINVAL;
3838 goto out_free;
3839 }
3840 memcpy(request->match_sets[i].ssid.ssid,
3841 nla_data(ssid), nla_len(ssid));
3842 request->match_sets[i].ssid.ssid_len =
3843 nla_len(ssid);
3844 }
3845 i++;
3846 }
3847 }
3848
807f8a8c
LC		 3849 if (info->attrs[NL80211_ATTR_IE]) {
3850 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3851 memcpy((void *)request->ie,
3852 nla_data(info->attrs[NL80211_ATTR_IE]),
3853 request->ie_len);
3854 }
3855
3856 request->dev = dev;
3857 request->wiphy = &rdev->wiphy;
bbe6ad6d 3858 request->interval = interval;
807f8a8c
LC		 3859
3860 err = rdev->ops->sched_scan_start(&rdev->wiphy, dev, request);
3861 if (!err) {
3862 rdev->sched_scan_req = request;
3863 nl80211_send_sched_scan(rdev, dev,
3864 NL80211_CMD_START_SCHED_SCAN);
3865 goto out;
3866 }
3867
3868out_free:
3869 kfree(request);
3870out:
c10841ca 3871 mutex_unlock(&rdev->sched_scan_mtx);
807f8a8c
LC		 3872 return err;
3873}
3874
3875static int nl80211_stop_sched_scan(struct sk_buff *skb,
3876 struct genl_info *info)
3877{
3878 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c10841ca 3879 int err;
807f8a8c
LC		 3880
3881 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
3882 !rdev->ops->sched_scan_stop)
3883 return -EOPNOTSUPP;
3884
c10841ca
LC		 3885 mutex_lock(&rdev->sched_scan_mtx);
3886 err = __cfg80211_stop_sched_scan(rdev, false);
3887 mutex_unlock(&rdev->sched_scan_mtx);
3888
3889 return err;
807f8a8c
LC		 3890}
3891
9720bb3a
JB		 3892static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
3893 u32 seq, int flags,
2a519311 3894 struct cfg80211_registered_device *rdev,
48ab905d
JB		 3895 struct wireless_dev *wdev,
3896 struct cfg80211_internal_bss *intbss)
2a519311 3897{
48ab905d 3898 struct cfg80211_bss *res = &intbss->pub;
2a519311
JB		 3899 void *hdr;
3900 struct nlattr *bss;
48ab905d
JB		 3901 int i;
3902
3903 ASSERT_WDEV_LOCK(wdev);
2a519311 3904
9720bb3a 3905 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).pid, seq, flags,
2a519311
JB		 3906 NL80211_CMD_NEW_SCAN_RESULTS);
3907 if (!hdr)
3908 return -1;
3909
9720bb3a
JB		 3910 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
3911
f5ea9120 3912 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation);
48ab905d 3913 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex);
2a519311
JB		 3914
3915 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
3916 if (!bss)
3917 goto nla_put_failure;
3918 if (!is_zero_ether_addr(res->bssid))
3919 NLA_PUT(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid);
3920 if (res->information_elements && res->len_information_elements)
3921 NLA_PUT(msg, NL80211_BSS_INFORMATION_ELEMENTS,
3922 res->len_information_elements,
3923 res->information_elements);
34a6eddb
JM		 3924 if (res->beacon_ies && res->len_beacon_ies &&
3925 res->beacon_ies != res->information_elements)
3926 NLA_PUT(msg, NL80211_BSS_BEACON_IES,
3927 res->len_beacon_ies, res->beacon_ies);
2a519311
JB		 3928 if (res->tsf)
3929 NLA_PUT_U64(msg, NL80211_BSS_TSF, res->tsf);
3930 if (res->beacon_interval)
3931 NLA_PUT_U16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval);
3932 NLA_PUT_U16(msg, NL80211_BSS_CAPABILITY, res->capability);
3933 NLA_PUT_U32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq);
7c89606e
HS		 3934 NLA_PUT_U32(msg, NL80211_BSS_SEEN_MS_AGO,
3935 jiffies_to_msecs(jiffies - intbss->ts));
2a519311 3936
77965c97 3937 switch (rdev->wiphy.signal_type) {
2a519311
JB		 3938 case CFG80211_SIGNAL_TYPE_MBM:
3939 NLA_PUT_U32(msg, NL80211_BSS_SIGNAL_MBM, res->signal);
3940 break;
3941 case CFG80211_SIGNAL_TYPE_UNSPEC:
3942 NLA_PUT_U8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal);
3943 break;
3944 default:
3945 break;
3946 }
3947
48ab905d 3948 switch (wdev->iftype) {
074ac8df 3949 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d
JB		 3950 case NL80211_IFTYPE_STATION:
3951 if (intbss == wdev->current_bss)
3952 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3953 NL80211_BSS_STATUS_ASSOCIATED);
3954 else for (i = 0; i < MAX_AUTH_BSSES; i++) {
3955 if (intbss != wdev->auth_bsses[i])
3956 continue;
3957 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3958 NL80211_BSS_STATUS_AUTHENTICATED);
3959 break;
3960 }
3961 break;
3962 case NL80211_IFTYPE_ADHOC:
3963 if (intbss == wdev->current_bss)
3964 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3965 NL80211_BSS_STATUS_IBSS_JOINED);
3966 break;
3967 default:
3968 break;
3969 }
3970
2a519311
JB		 3971 nla_nest_end(msg, bss);
3972
3973 return genlmsg_end(msg, hdr);
3974
3975 nla_put_failure:
3976 genlmsg_cancel(msg, hdr);
3977 return -EMSGSIZE;
3978}
3979
3980static int nl80211_dump_scan(struct sk_buff *skb,
3981 struct netlink_callback *cb)
3982{
48ab905d
JB		 3983 struct cfg80211_registered_device *rdev;
3984 struct net_device *dev;
2a519311 3985 struct cfg80211_internal_bss *scan;
48ab905d 3986 struct wireless_dev *wdev;
2a519311
JB		 3987 int start = cb->args[1], idx = 0;
3988 int err;
3989
67748893
JB		 3990 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
3991 if (err)
3992 return err;
2a519311 3993
48ab905d 3994 wdev = dev->ieee80211_ptr;
2a519311 3995
48ab905d
JB		 3996 wdev_lock(wdev);
3997 spin_lock_bh(&rdev->bss_lock);
3998 cfg80211_bss_expire(rdev);
3999
9720bb3a
JB		 4000 cb->seq = rdev->bss_generation;
4001
48ab905d 4002 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 4003 if (++idx <= start)
4004 continue;
9720bb3a 4005 if (nl80211_send_bss(skb, cb,
2a519311 4006 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 4007 rdev, wdev, scan) < 0) {
2a519311 4008 idx--;
67748893 4009 break;
2a519311
JB		 4010 }
4011 }
4012
48ab905d
JB		 4013 spin_unlock_bh(&rdev->bss_lock);
4014 wdev_unlock(wdev);
2a519311
JB		 4015
4016 cb->args[1] = idx;
67748893 4017 nl80211_finish_netdev_dump(rdev);
2a519311 4018
67748893 4019 return skb->len;
2a519311
JB		 4020}
4021
61fa713c
HS		 4022static int nl80211_send_survey(struct sk_buff *msg, u32 pid, u32 seq,
4023 int flags, struct net_device *dev,
4024 struct survey_info *survey)
4025{
4026 void *hdr;
4027 struct nlattr *infoattr;
4028
61fa713c
HS		 4029 hdr = nl80211hdr_put(msg, pid, seq, flags,
4030 NL80211_CMD_NEW_SURVEY_RESULTS);
4031 if (!hdr)
4032 return -ENOMEM;
4033
4034 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
4035
4036 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
4037 if (!infoattr)
4038 goto nla_put_failure;
4039
4040 NLA_PUT_U32(msg, NL80211_SURVEY_INFO_FREQUENCY,
4041 survey->channel->center_freq);
4042 if (survey->filled & SURVEY_INFO_NOISE_DBM)
4043 NLA_PUT_U8(msg, NL80211_SURVEY_INFO_NOISE,
4044 survey->noise);
17e5a808
FF		 4045 if (survey->filled & SURVEY_INFO_IN_USE)
4046 NLA_PUT_FLAG(msg, NL80211_SURVEY_INFO_IN_USE);
8610c29a
FF		 4047 if (survey->filled & SURVEY_INFO_CHANNEL_TIME)
4048 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
4049 survey->channel_time);
4050 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY)
4051 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
4052 survey->channel_time_busy);
4053 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY)
4054 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
4055 survey->channel_time_ext_busy);
4056 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_RX)
4057 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
4058 survey->channel_time_rx);
4059 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_TX)
4060 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
4061 survey->channel_time_tx);
61fa713c
HS		 4062
4063 nla_nest_end(msg, infoattr);
4064
4065 return genlmsg_end(msg, hdr);
4066
4067 nla_put_failure:
4068 genlmsg_cancel(msg, hdr);
4069 return -EMSGSIZE;
4070}
4071
4072static int nl80211_dump_survey(struct sk_buff *skb,
4073 struct netlink_callback *cb)
4074{
4075 struct survey_info survey;
4076 struct cfg80211_registered_device *dev;
4077 struct net_device *netdev;
61fa713c
HS		 4078 int survey_idx = cb->args[1];
4079 int res;
4080
67748893
JB		 4081 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
4082 if (res)
4083 return res;
61fa713c
HS		 4084
4085 if (!dev->ops->dump_survey) {
4086 res = -EOPNOTSUPP;
4087 goto out_err;
4088 }
4089
4090 while (1) {
180cdc79
LR		 4091 struct ieee80211_channel *chan;
4092
61fa713c
HS		 4093 res = dev->ops->dump_survey(&dev->wiphy, netdev, survey_idx,
4094 &survey);
4095 if (res == -ENOENT)
4096 break;
4097 if (res)
4098 goto out_err;
4099
180cdc79
LR		 4100 /* Survey without a channel doesn't make sense */
4101 if (!survey.channel) {
4102 res = -EINVAL;
4103 goto out;
4104 }
4105
4106 chan = ieee80211_get_channel(&dev->wiphy,
4107 survey.channel->center_freq);
4108 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
4109 survey_idx++;
4110 continue;
4111 }
4112
61fa713c
HS		 4113 if (nl80211_send_survey(skb,
4114 NETLINK_CB(cb->skb).pid,
4115 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4116 netdev,
4117 &survey) < 0)
4118 goto out;
4119 survey_idx++;
4120 }
4121
4122 out:
4123 cb->args[1] = survey_idx;
4124 res = skb->len;
4125 out_err:
67748893 4126 nl80211_finish_netdev_dump(dev);
61fa713c
HS		 4127 return res;
4128}
4129
255e737e
JM		 4130static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type)
4131{
b23aa676
SO		 4132 return auth_type <= NL80211_AUTHTYPE_MAX;
4133}
4134
4135static bool nl80211_valid_wpa_versions(u32 wpa_versions)
4136{
4137 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
4138 NL80211_WPA_VERSION_2));
4139}
4140
636a5d36
JM		 4141static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
4142{
4c476991
JB		 4143 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4144 struct net_device *dev = info->user_ptr[1];
19957bb3
JB		 4145 struct ieee80211_channel *chan;
4146 const u8 *bssid, *ssid, *ie = NULL;
4147 int err, ssid_len, ie_len = 0;
4148 enum nl80211_auth_type auth_type;
fffd0934 4149 struct key_parse key;
d5cdfacb 4150 bool local_state_change;
636a5d36 4151
f4a11bb0
JB		 4152 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4153 return -EINVAL;
4154
4155 if (!info->attrs[NL80211_ATTR_MAC])
4156 return -EINVAL;
4157
1778092e
JM		 4158 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
4159 return -EINVAL;
4160
19957bb3
JB		 4161 if (!info->attrs[NL80211_ATTR_SSID])
4162 return -EINVAL;
4163
4164 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
4165 return -EINVAL;
4166
fffd0934
JB		 4167 err = nl80211_parse_key(info, &key);
4168 if (err)
4169 return err;
4170
4171 if (key.idx >= 0) {
e31b8213
JB		 4172 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
4173 return -EINVAL;
fffd0934
JB		 4174 if (!key.p.key || !key.p.key_len)
4175 return -EINVAL;
4176 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
4177 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
4178 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
4179 key.p.key_len != WLAN_KEY_LEN_WEP104))
4180 return -EINVAL;
4181 if (key.idx > 4)
4182 return -EINVAL;
4183 } else {
4184 key.p.key_len = 0;
4185 key.p.key = NULL;
4186 }
4187
afea0b7a
JB		 4188 if (key.idx >= 0) {
4189 int i;
4190 bool ok = false;
4191 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
4192 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
4193 ok = true;
4194 break;
4195 }
4196 }
4c476991
JB		 4197 if (!ok)
4198 return -EINVAL;
afea0b7a
JB		 4199 }
4200
4c476991
JB		 4201 if (!rdev->ops->auth)
4202 return -EOPNOTSUPP;
636a5d36 4203
074ac8df 4204 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4205 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4206 return -EOPNOTSUPP;
eec60b03 4207
19957bb3 4208 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 4209 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3 4210 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4211 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4212 return -EINVAL;
636a5d36 4213
19957bb3
JB		 4214 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4215 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4216
4217 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4218 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4219 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4220 }
4221
19957bb3 4222 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4c476991
JB		 4223 if (!nl80211_valid_auth_type(auth_type))
4224 return -EINVAL;
636a5d36 4225
d5cdfacb
JM		 4226 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4227
4c476991
JB		 4228 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
4229 ssid, ssid_len, ie, ie_len,
4230 key.p.key, key.p.key_len, key.idx,
4231 local_state_change);
636a5d36
JM		 4232}
4233
c0692b8f
JB		 4234static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
4235 struct genl_info *info,
3dc27d25
JB		 4236 struct cfg80211_crypto_settings *settings,
4237 int cipher_limit)
b23aa676 4238{
c0b2bbd8
JB		 4239 memset(settings, 0, sizeof(*settings));
4240
b23aa676
SO		 4241 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
4242
c0692b8f
JB		 4243 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
4244 u16 proto;
4245 proto = nla_get_u16(
4246 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
4247 settings->control_port_ethertype = cpu_to_be16(proto);
4248 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
4249 proto != ETH_P_PAE)
4250 return -EINVAL;
4251 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
4252 settings->control_port_no_encrypt = true;
4253 } else
4254 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
4255
b23aa676
SO		 4256 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
4257 void *data;
4258 int len, i;
4259
4260 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4261 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4262 settings->n_ciphers_pairwise = len / sizeof(u32);
4263
4264 if (len % sizeof(u32))
4265 return -EINVAL;
4266
3dc27d25 4267 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 4268 return -EINVAL;
4269
4270 memcpy(settings->ciphers_pairwise, data, len);
4271
4272 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 4273 if (!cfg80211_supported_cipher_suite(
4274 &rdev->wiphy,
b23aa676
SO		 4275 settings->ciphers_pairwise[i]))
4276 return -EINVAL;
4277 }
4278
4279 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
4280 settings->cipher_group =
4281 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 4282 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
4283 settings->cipher_group))
b23aa676
SO		 4284 return -EINVAL;
4285 }
4286
4287 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
4288 settings->wpa_versions =
4289 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
4290 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
4291 return -EINVAL;
4292 }
4293
4294 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
4295 void *data;
6d30240e 4296 int len;
b23aa676
SO		 4297
4298 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
4299 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
4300 settings->n_akm_suites = len / sizeof(u32);
4301
4302 if (len % sizeof(u32))
4303 return -EINVAL;
4304
1b9ca027
JM		 4305 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
4306 return -EINVAL;
4307
b23aa676 4308 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 4309 }
4310
4311 return 0;
4312}
4313
636a5d36
JM		 4314static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
4315{
4c476991
JB		 4316 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4317 struct net_device *dev = info->user_ptr[1];
19957bb3 4318 struct cfg80211_crypto_settings crypto;
f444de05 4319 struct ieee80211_channel *chan;
3e5d7649 4320 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 4321 int err, ssid_len, ie_len = 0;
4322 bool use_mfp = false;
636a5d36 4323
f4a11bb0
JB		 4324 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4325 return -EINVAL;
4326
4327 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 4328 !info->attrs[NL80211_ATTR_SSID] ||
4329 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 4330 return -EINVAL;
4331
4c476991
JB		 4332 if (!rdev->ops->assoc)
4333 return -EOPNOTSUPP;
636a5d36 4334
074ac8df 4335 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4336 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4337 return -EOPNOTSUPP;
eec60b03 4338
19957bb3 4339 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4340
19957bb3
JB		 4341 chan = ieee80211_get_channel(&rdev->wiphy,
4342 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4343 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4344 return -EINVAL;
636a5d36 4345
19957bb3
JB		 4346 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4347 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4348
4349 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4350 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4351 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4352 }
4353
dc6382ce 4354 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 4355 enum nl80211_mfp mfp =
dc6382ce 4356 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 4357 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 4358 use_mfp = true;
4c476991
JB		 4359 else if (mfp != NL80211_MFP_NO)
4360 return -EINVAL;
dc6382ce
JM		 4361 }
4362
3e5d7649
JB		 4363 if (info->attrs[NL80211_ATTR_PREV_BSSID])
4364 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
4365
c0692b8f 4366 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
b23aa676 4367 if (!err)
3e5d7649
JB		 4368 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
4369 ssid, ssid_len, ie, ie_len, use_mfp,
19957bb3 4370 &crypto);
636a5d36 4371
636a5d36
JM		 4372 return err;
4373}
4374
4375static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
4376{
4c476991
JB		 4377 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4378 struct net_device *dev = info->user_ptr[1];
19957bb3 4379 const u8 *ie = NULL, *bssid;
4c476991 4380 int ie_len = 0;
19957bb3 4381 u16 reason_code;
d5cdfacb 4382 bool local_state_change;
636a5d36 4383
f4a11bb0
JB		 4384 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4385 return -EINVAL;
4386
4387 if (!info->attrs[NL80211_ATTR_MAC])
4388 return -EINVAL;
4389
4390 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4391 return -EINVAL;
4392
4c476991
JB		 4393 if (!rdev->ops->deauth)
4394 return -EOPNOTSUPP;
636a5d36 4395
074ac8df 4396 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4397 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4398 return -EOPNOTSUPP;
eec60b03 4399
19957bb3 4400 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4401
19957bb3
JB		 4402 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4403 if (reason_code == 0) {
f4a11bb0 4404 /* Reason Code 0 is reserved */
4c476991 4405 return -EINVAL;
255e737e 4406 }
636a5d36
JM		 4407
4408 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4409 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4410 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4411 }
4412
d5cdfacb
JM		 4413 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4414
4c476991
JB		 4415 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
4416 local_state_change);
636a5d36
JM		 4417}
4418
4419static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
4420{
4c476991
JB		 4421 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4422 struct net_device *dev = info->user_ptr[1];
19957bb3 4423 const u8 *ie = NULL, *bssid;
4c476991 4424 int ie_len = 0;
19957bb3 4425 u16 reason_code;
d5cdfacb 4426 bool local_state_change;
636a5d36 4427
f4a11bb0
JB		 4428 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4429 return -EINVAL;
4430
4431 if (!info->attrs[NL80211_ATTR_MAC])
4432 return -EINVAL;
4433
4434 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4435 return -EINVAL;
4436
4c476991
JB		 4437 if (!rdev->ops->disassoc)
4438 return -EOPNOTSUPP;
636a5d36 4439
074ac8df 4440 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4441 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4442 return -EOPNOTSUPP;
eec60b03 4443
19957bb3 4444 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4445
19957bb3
JB		 4446 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4447 if (reason_code == 0) {
f4a11bb0 4448 /* Reason Code 0 is reserved */
4c476991 4449 return -EINVAL;
255e737e 4450 }
636a5d36
JM		 4451
4452 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4453 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4454 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4455 }
4456
d5cdfacb
JM		 4457 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4458
4c476991
JB		 4459 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
4460 local_state_change);
636a5d36
JM		 4461}
4462
dd5b4cc7
FF		 4463static bool
4464nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
4465 int mcast_rate[IEEE80211_NUM_BANDS],
4466 int rateval)
4467{
4468 struct wiphy *wiphy = &rdev->wiphy;
4469 bool found = false;
4470 int band, i;
4471
4472 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4473 struct ieee80211_supported_band *sband;
4474
4475 sband = wiphy->bands[band];
4476 if (!sband)
4477 continue;
4478
4479 for (i = 0; i < sband->n_bitrates; i++) {
4480 if (sband->bitrates[i].bitrate == rateval) {
4481 mcast_rate[band] = i + 1;
4482 found = true;
4483 break;
4484 }
4485 }
4486 }
4487
4488 return found;
4489}
4490
04a773ad
JB		 4491static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
4492{
4c476991
JB		 4493 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4494 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 4495 struct cfg80211_ibss_params ibss;
4496 struct wiphy *wiphy;
fffd0934 4497 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 4498 int err;
4499
8e30bc55
JB		 4500 memset(&ibss, 0, sizeof(ibss));
4501
04a773ad
JB		 4502 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4503 return -EINVAL;
4504
4505 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
4506 !info->attrs[NL80211_ATTR_SSID] ||
4507 !nla_len(info->attrs[NL80211_ATTR_SSID]))
4508 return -EINVAL;
4509
8e30bc55
JB		 4510 ibss.beacon_interval = 100;
4511
4512 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
4513 ibss.beacon_interval =
4514 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
4515 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
4516 return -EINVAL;
4517 }
4518
4c476991
JB		 4519 if (!rdev->ops->join_ibss)
4520 return -EOPNOTSUPP;
04a773ad 4521
4c476991
JB		 4522 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
4523 return -EOPNOTSUPP;
04a773ad 4524
79c97e97 4525 wiphy = &rdev->wiphy;
04a773ad 4526
39193498 4527 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 4528 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 4529
4530 if (!is_valid_ether_addr(ibss.bssid))
4531 return -EINVAL;
4532 }
04a773ad
JB		 4533 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4534 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
4535
4536 if (info->attrs[NL80211_ATTR_IE]) {
4537 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4538 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4539 }
4540
4541 ibss.channel = ieee80211_get_channel(wiphy,
4542 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4543 if (!ibss.channel ||
4544 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
4c476991
JB		 4545 ibss.channel->flags & IEEE80211_CHAN_DISABLED)
4546 return -EINVAL;
04a773ad
JB		 4547
4548 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 4549 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
4550
fbd2c8dc
TP		 4551 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
4552 u8 *rates =
4553 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4554 int n_rates =
4555 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4556 struct ieee80211_supported_band *sband =
4557 wiphy->bands[ibss.channel->band];
34850ab2 4558 int err;
fbd2c8dc 4559
34850ab2
JB		 4560 err = ieee80211_get_ratemask(sband, rates, n_rates,
4561 &ibss.basic_rates);
4562 if (err)
4563 return err;
fbd2c8dc 4564 }
dd5b4cc7
FF		 4565
4566 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
4567 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
4568 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
4569 return -EINVAL;
fbd2c8dc 4570
4c476991
JB		 4571 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
4572 connkeys = nl80211_parse_connkeys(rdev,
4573 info->attrs[NL80211_ATTR_KEYS]);
4574 if (IS_ERR(connkeys))
4575 return PTR_ERR(connkeys);
4576 }
04a773ad 4577
4c476991 4578 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934
JB		 4579 if (err)
4580 kfree(connkeys);
04a773ad
JB		 4581 return err;
4582}
4583
4584static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
4585{
4c476991
JB		 4586 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4587 struct net_device *dev = info->user_ptr[1];
04a773ad 4588
4c476991
JB		 4589 if (!rdev->ops->leave_ibss)
4590 return -EOPNOTSUPP;
04a773ad 4591
4c476991
JB		 4592 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
4593 return -EOPNOTSUPP;
04a773ad 4594
4c476991 4595 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 4596}
4597
aff89a9b
JB		 4598#ifdef CONFIG_NL80211_TESTMODE
4599static struct genl_multicast_group nl80211_testmode_mcgrp = {
4600 .name = "testmode",
4601};
4602
4603static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
4604{
4c476991 4605 struct cfg80211_registered_device *rdev = info->user_ptr[0];
aff89a9b
JB		 4606 int err;
4607
4608 if (!info->attrs[NL80211_ATTR_TESTDATA])
4609 return -EINVAL;
4610
aff89a9b
JB		 4611 err = -EOPNOTSUPP;
4612 if (rdev->ops->testmode_cmd) {
4613 rdev->testmode_info = info;
4614 err = rdev->ops->testmode_cmd(&rdev->wiphy,
4615 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
4616 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
4617 rdev->testmode_info = NULL;
4618 }
4619
aff89a9b
JB		 4620 return err;
4621}
4622
71063f0e
WYG		 4623static int nl80211_testmode_dump(struct sk_buff *skb,
4624 struct netlink_callback *cb)
4625{
4626 struct cfg80211_registered_device *dev;
4627 int err;
4628 long phy_idx;
4629 void *data = NULL;
4630 int data_len = 0;
4631
4632 if (cb->args[0]) {
4633 /*
4634 * 0 is a valid index, but not valid for args[0],
4635 * so we need to offset by 1.
4636 */
4637 phy_idx = cb->args[0] - 1;
4638 } else {
4639 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
4640 nl80211_fam.attrbuf, nl80211_fam.maxattr,
4641 nl80211_policy);
4642 if (err)
4643 return err;
4644 if (!nl80211_fam.attrbuf[NL80211_ATTR_WIPHY])
4645 return -EINVAL;
4646 phy_idx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_WIPHY]);
4647 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
4648 cb->args[1] =
4649 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
4650 }
4651
4652 if (cb->args[1]) {
4653 data = nla_data((void *)cb->args[1]);
4654 data_len = nla_len((void *)cb->args[1]);
4655 }
4656
4657 mutex_lock(&cfg80211_mutex);
4658 dev = cfg80211_rdev_by_wiphy_idx(phy_idx);
4659 if (!dev) {
4660 mutex_unlock(&cfg80211_mutex);
4661 return -ENOENT;
4662 }
4663 cfg80211_lock_rdev(dev);
4664 mutex_unlock(&cfg80211_mutex);
4665
4666 if (!dev->ops->testmode_dump) {
4667 err = -EOPNOTSUPP;
4668 goto out_err;
4669 }
4670
4671 while (1) {
4672 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).pid,
4673 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4674 NL80211_CMD_TESTMODE);
4675 struct nlattr *tmdata;
4676
4677 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, dev->wiphy_idx) < 0) {
4678 genlmsg_cancel(skb, hdr);
4679 break;
4680 }
4681
4682 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
4683 if (!tmdata) {
4684 genlmsg_cancel(skb, hdr);
4685 break;
4686 }
4687 err = dev->ops->testmode_dump(&dev->wiphy, skb, cb,
4688 data, data_len);
4689 nla_nest_end(skb, tmdata);
4690
4691 if (err == -ENOBUFS || err == -ENOENT) {
4692 genlmsg_cancel(skb, hdr);
4693 break;
4694 } else if (err) {
4695 genlmsg_cancel(skb, hdr);
4696 goto out_err;
4697 }
4698
4699 genlmsg_end(skb, hdr);
4700 }
4701
4702 err = skb->len;
4703 /* see above */
4704 cb->args[0] = phy_idx + 1;
4705 out_err:
4706 cfg80211_unlock_rdev(dev);
4707 return err;
4708}
4709
aff89a9b
JB		 4710static struct sk_buff *
4711__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
4712 int approxlen, u32 pid, u32 seq, gfp_t gfp)
4713{
4714 struct sk_buff *skb;
4715 void *hdr;
4716 struct nlattr *data;
4717
4718 skb = nlmsg_new(approxlen + 100, gfp);
4719 if (!skb)
4720 return NULL;
4721
4722 hdr = nl80211hdr_put(skb, pid, seq, 0, NL80211_CMD_TESTMODE);
4723 if (!hdr) {
4724 kfree_skb(skb);
4725 return NULL;
4726 }
4727
4728 NLA_PUT_U32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4729 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
4730
4731 ((void **)skb->cb)[0] = rdev;
4732 ((void **)skb->cb)[1] = hdr;
4733 ((void **)skb->cb)[2] = data;
4734
4735 return skb;
4736
4737 nla_put_failure:
4738 kfree_skb(skb);
4739 return NULL;
4740}
4741
4742struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
4743 int approxlen)
4744{
4745 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
4746
4747 if (WARN_ON(!rdev->testmode_info))
4748 return NULL;
4749
4750 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
4751 rdev->testmode_info->snd_pid,
4752 rdev->testmode_info->snd_seq,
4753 GFP_KERNEL);
4754}
4755EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
4756
4757int cfg80211_testmode_reply(struct sk_buff *skb)
4758{
4759 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
4760 void *hdr = ((void **)skb->cb)[1];
4761 struct nlattr *data = ((void **)skb->cb)[2];
4762
4763 if (WARN_ON(!rdev->testmode_info)) {
4764 kfree_skb(skb);
4765 return -EINVAL;
4766 }
4767
4768 nla_nest_end(skb, data);
4769 genlmsg_end(skb, hdr);
4770 return genlmsg_reply(skb, rdev->testmode_info);
4771}
4772EXPORT_SYMBOL(cfg80211_testmode_reply);
4773
4774struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
4775 int approxlen, gfp_t gfp)
4776{
4777 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
4778
4779 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
4780}
4781EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
4782
4783void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
4784{
4785 void *hdr = ((void **)skb->cb)[1];
4786 struct nlattr *data = ((void **)skb->cb)[2];
4787
4788 nla_nest_end(skb, data);
4789 genlmsg_end(skb, hdr);
4790 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
4791}
4792EXPORT_SYMBOL(cfg80211_testmode_event);
4793#endif
4794
b23aa676
SO		 4795static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
4796{
4c476991
JB		 4797 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4798 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 4799 struct cfg80211_connect_params connect;
4800 struct wiphy *wiphy;
fffd0934 4801 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 4802 int err;
4803
4804 memset(&connect, 0, sizeof(connect));
4805
4806 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4807 return -EINVAL;
4808
4809 if (!info->attrs[NL80211_ATTR_SSID] ||
4810 !nla_len(info->attrs[NL80211_ATTR_SSID]))
4811 return -EINVAL;
4812
4813 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
4814 connect.auth_type =
4815 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4816 if (!nl80211_valid_auth_type(connect.auth_type))
4817 return -EINVAL;
4818 } else
4819 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
4820
4821 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
4822
c0692b8f 4823 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 4824 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 4825 if (err)
4826 return err;
b23aa676 4827
074ac8df 4828 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4829 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4830 return -EOPNOTSUPP;
b23aa676 4831
79c97e97 4832 wiphy = &rdev->wiphy;
b23aa676 4833
b23aa676
SO		 4834 if (info->attrs[NL80211_ATTR_MAC])
4835 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4836 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4837 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
4838
4839 if (info->attrs[NL80211_ATTR_IE]) {
4840 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4841 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4842 }
4843
4844 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
4845 connect.channel =
4846 ieee80211_get_channel(wiphy,
4847 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4848 if (!connect.channel ||
4c476991
JB		 4849 connect.channel->flags & IEEE80211_CHAN_DISABLED)
4850 return -EINVAL;
b23aa676
SO		 4851 }
4852
fffd0934
JB		 4853 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
4854 connkeys = nl80211_parse_connkeys(rdev,
4855 info->attrs[NL80211_ATTR_KEYS]);
4c476991
JB		 4856 if (IS_ERR(connkeys))
4857 return PTR_ERR(connkeys);
fffd0934
JB		 4858 }
4859
4860 err = cfg80211_connect(rdev, dev, &connect, connkeys);
fffd0934
JB		 4861 if (err)
4862 kfree(connkeys);
b23aa676
SO		 4863 return err;
4864}
4865
4866static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
4867{
4c476991
JB		 4868 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4869 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 4870 u16 reason;
4871
4872 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4873 reason = WLAN_REASON_DEAUTH_LEAVING;
4874 else
4875 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4876
4877 if (reason == 0)
4878 return -EINVAL;
4879
074ac8df 4880 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4881 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4882 return -EOPNOTSUPP;
b23aa676 4883
4c476991 4884 return cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 4885}
4886
463d0183
JB		 4887static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
4888{
4c476991 4889 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 4890 struct net *net;
4891 int err;
4892 u32 pid;
4893
4894 if (!info->attrs[NL80211_ATTR_PID])
4895 return -EINVAL;
4896
4897 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
4898
463d0183 4899 net = get_net_ns_by_pid(pid);
4c476991
JB		 4900 if (IS_ERR(net))
4901 return PTR_ERR(net);
463d0183
JB		 4902
4903 err = 0;
4904
4905 /* check if anything to do */
4c476991
JB		 4906 if (!net_eq(wiphy_net(&rdev->wiphy), net))
4907 err = cfg80211_switch_netns(rdev, net);
463d0183 4908
463d0183 4909 put_net(net);
463d0183
JB		 4910 return err;
4911}
4912
67fbb16b
SO		 4913static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
4914{
4c476991 4915 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 4916 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
4917 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 4918 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 4919 struct cfg80211_pmksa pmksa;
4920
4921 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
4922
4923 if (!info->attrs[NL80211_ATTR_MAC])
4924 return -EINVAL;
4925
4926 if (!info->attrs[NL80211_ATTR_PMKID])
4927 return -EINVAL;
4928
67fbb16b
SO		 4929 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
4930 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4931
074ac8df 4932 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4933 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4934 return -EOPNOTSUPP;
67fbb16b
SO		 4935
4936 switch (info->genlhdr->cmd) {
4937 case NL80211_CMD_SET_PMKSA:
4938 rdev_ops = rdev->ops->set_pmksa;
4939 break;
4940 case NL80211_CMD_DEL_PMKSA:
4941 rdev_ops = rdev->ops->del_pmksa;
4942 break;
4943 default:
4944 WARN_ON(1);
4945 break;
4946 }
4947
4c476991
JB		 4948 if (!rdev_ops)
4949 return -EOPNOTSUPP;
67fbb16b 4950
4c476991 4951 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 4952}
4953
4954static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
4955{
4c476991
JB		 4956 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4957 struct net_device *dev = info->user_ptr[1];
67fbb16b 4958
074ac8df 4959 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4960 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4961 return -EOPNOTSUPP;
67fbb16b 4962
4c476991
JB		 4963 if (!rdev->ops->flush_pmksa)
4964 return -EOPNOTSUPP;
67fbb16b 4965
4c476991 4966 return rdev->ops->flush_pmksa(&rdev->wiphy, dev);
67fbb16b
SO		 4967}
4968
9588bbd5
JM		 4969static int nl80211_remain_on_channel(struct sk_buff *skb,
4970 struct genl_info *info)
4971{
4c476991
JB		 4972 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4973 struct net_device *dev = info->user_ptr[1];
9588bbd5
JM		 4974 struct ieee80211_channel *chan;
4975 struct sk_buff *msg;
4976 void *hdr;
4977 u64 cookie;
4978 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
4979 u32 freq, duration;
4980 int err;
4981
4982 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
4983 !info->attrs[NL80211_ATTR_DURATION])
4984 return -EINVAL;
4985
4986 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
4987
4988 /*
4989 * We should be on that channel for at least one jiffie,
4990 * and more than 5 seconds seems excessive.
4991 */
a293911d
JB		 4992 if (!duration || !msecs_to_jiffies(duration) ||
4993 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 4994 return -EINVAL;
4995
4c476991
JB		 4996 if (!rdev->ops->remain_on_channel)
4997 return -EOPNOTSUPP;
9588bbd5 4998
9588bbd5
JM		 4999 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
5000 channel_type = nla_get_u32(
5001 info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
5002 if (channel_type != NL80211_CHAN_NO_HT &&
5003 channel_type != NL80211_CHAN_HT20 &&
5004 channel_type != NL80211_CHAN_HT40PLUS &&
4c476991
JB		 5005 channel_type != NL80211_CHAN_HT40MINUS)
5006 return -EINVAL;
9588bbd5
JM		 5007 }
5008
5009 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5010 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5011 if (chan == NULL)
5012 return -EINVAL;
9588bbd5
JM		 5013
5014 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5015 if (!msg)
5016 return -ENOMEM;
9588bbd5
JM		 5017
5018 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5019 NL80211_CMD_REMAIN_ON_CHANNEL);
5020
5021 if (IS_ERR(hdr)) {
5022 err = PTR_ERR(hdr);
5023 goto free_msg;
5024 }
5025
5026 err = rdev->ops->remain_on_channel(&rdev->wiphy, dev, chan,
5027 channel_type, duration, &cookie);
5028
5029 if (err)
5030 goto free_msg;
5031
5032 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
5033
5034 genlmsg_end(msg, hdr);
4c476991
JB		 5035
5036 return genlmsg_reply(msg, info);
9588bbd5
JM		 5037
5038 nla_put_failure:
5039 err = -ENOBUFS;
5040 free_msg:
5041 nlmsg_free(msg);
9588bbd5
JM		 5042 return err;
5043}
5044
5045static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
5046 struct genl_info *info)
5047{
4c476991
JB		 5048 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5049 struct net_device *dev = info->user_ptr[1];
9588bbd5 5050 u64 cookie;
9588bbd5
JM		 5051
5052 if (!info->attrs[NL80211_ATTR_COOKIE])
5053 return -EINVAL;
5054
4c476991
JB		 5055 if (!rdev->ops->cancel_remain_on_channel)
5056 return -EOPNOTSUPP;
9588bbd5 5057
9588bbd5
JM		 5058 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
5059
4c476991 5060 return rdev->ops->cancel_remain_on_channel(&rdev->wiphy, dev, cookie);
9588bbd5
JM		 5061}
5062
13ae75b1
JM		 5063static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
5064 u8 *rates, u8 rates_len)
5065{
5066 u8 i;
5067 u32 mask = 0;
5068
5069 for (i = 0; i < rates_len; i++) {
5070 int rate = (rates[i] & 0x7f) * 5;
5071 int ridx;
5072 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
5073 struct ieee80211_rate *srate =
5074 &sband->bitrates[ridx];
5075 if (rate == srate->bitrate) {
5076 mask |= 1 << ridx;
5077 break;
5078 }
5079 }
5080 if (ridx == sband->n_bitrates)
5081 return 0; /* rate not found */
5082 }
5083
5084 return mask;
5085}
5086
b54452b0 5087static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
13ae75b1
JM		 5088 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
5089 .len = NL80211_MAX_SUPP_RATES },
5090};
5091
5092static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
5093 struct genl_info *info)
5094{
5095 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4c476991 5096 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13ae75b1 5097 struct cfg80211_bitrate_mask mask;
4c476991
JB		 5098 int rem, i;
5099 struct net_device *dev = info->user_ptr[1];
13ae75b1
JM		 5100 struct nlattr *tx_rates;
5101 struct ieee80211_supported_band *sband;
5102
5103 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
5104 return -EINVAL;
5105
4c476991
JB		 5106 if (!rdev->ops->set_bitrate_mask)
5107 return -EOPNOTSUPP;
13ae75b1
JM		 5108
5109 memset(&mask, 0, sizeof(mask));
5110 /* Default to all rates enabled */
5111 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
5112 sband = rdev->wiphy.bands[i];
5113 mask.control[i].legacy =
5114 sband ? (1 << sband->n_bitrates) - 1 : 0;
5115 }
5116
5117 /*
5118 * The nested attribute uses enum nl80211_band as the index. This maps
5119 * directly to the enum ieee80211_band values used in cfg80211.
5120 */
5121 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
5122 {
5123 enum ieee80211_band band = nla_type(tx_rates);
4c476991
JB		 5124 if (band < 0 || band >= IEEE80211_NUM_BANDS)
5125 return -EINVAL;
13ae75b1 5126 sband = rdev->wiphy.bands[band];
4c476991
JB		 5127 if (sband == NULL)
5128 return -EINVAL;
13ae75b1
JM		 5129 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
5130 nla_len(tx_rates), nl80211_txattr_policy);
5131 if (tb[NL80211_TXRATE_LEGACY]) {
5132 mask.control[band].legacy = rateset_to_mask(
5133 sband,
5134 nla_data(tb[NL80211_TXRATE_LEGACY]),
5135 nla_len(tb[NL80211_TXRATE_LEGACY]));
4c476991
JB		 5136 if (mask.control[band].legacy == 0)
5137 return -EINVAL;
13ae75b1
JM		 5138 }
5139 }
5140
4c476991 5141 return rdev->ops->set_bitrate_mask(&rdev->wiphy, dev, NULL, &mask);
13ae75b1
JM		 5142}
5143
2e161f78 5144static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 5145{
4c476991
JB		 5146 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5147 struct net_device *dev = info->user_ptr[1];
2e161f78 5148 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 5149
5150 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
5151 return -EINVAL;
5152
2e161f78
JB		 5153 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
5154 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 5155
9d38d85d 5156 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
074ac8df 5157 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
663fcafd
JB		 5158 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5159 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5160 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
c7108a71 5161 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 5162 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5163 return -EOPNOTSUPP;
026331c4
JM		 5164
5165 /* not much point in registering if we can't reply */
4c476991
JB		 5166 if (!rdev->ops->mgmt_tx)
5167 return -EOPNOTSUPP;
026331c4 5168
4c476991 5169 return cfg80211_mlme_register_mgmt(dev->ieee80211_ptr, info->snd_pid,
2e161f78 5170 frame_type,
026331c4
JM		 5171 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
5172 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
026331c4
JM		 5173}
5174
2e161f78 5175static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 5176{
4c476991
JB		 5177 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5178 struct net_device *dev = info->user_ptr[1];
026331c4
JM		 5179 struct ieee80211_channel *chan;
5180 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
252aa631 5181 bool channel_type_valid = false;
026331c4
JM		 5182 u32 freq;
5183 int err;
5184 void *hdr;
5185 u64 cookie;
5186 struct sk_buff *msg;
f7ca38df
JB		 5187 unsigned int wait = 0;
5188 bool offchan;
e9f935e3 5189 bool no_cck;
026331c4
JM		 5190
5191 if (!info->attrs[NL80211_ATTR_FRAME] ||
5192 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
5193 return -EINVAL;
5194
4c476991
JB		 5195 if (!rdev->ops->mgmt_tx)
5196 return -EOPNOTSUPP;
026331c4 5197
9d38d85d 5198 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
074ac8df 5199 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
663fcafd
JB		 5200 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5201 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5202 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
c7108a71 5203 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 5204 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5205 return -EOPNOTSUPP;
026331c4 5206
f7ca38df
JB		 5207 if (info->attrs[NL80211_ATTR_DURATION]) {
5208 if (!rdev->ops->mgmt_tx_cancel_wait)
5209 return -EINVAL;
5210 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
5211 }
5212
026331c4
JM		 5213 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
5214 channel_type = nla_get_u32(
5215 info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
5216 if (channel_type != NL80211_CHAN_NO_HT &&
5217 channel_type != NL80211_CHAN_HT20 &&
5218 channel_type != NL80211_CHAN_HT40PLUS &&
4c476991
JB		 5219 channel_type != NL80211_CHAN_HT40MINUS)
5220 return -EINVAL;
252aa631 5221 channel_type_valid = true;
026331c4
JM		 5222 }
5223
f7ca38df
JB		 5224 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
5225
e9f935e3
RM		 5226 no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
5227
026331c4
JM		 5228 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5229 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5230 if (chan == NULL)
5231 return -EINVAL;
026331c4
JM		 5232
5233 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5234 if (!msg)
5235 return -ENOMEM;
026331c4
JM		 5236
5237 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
2e161f78 5238 NL80211_CMD_FRAME);
026331c4
JM		 5239
5240 if (IS_ERR(hdr)) {
5241 err = PTR_ERR(hdr);
5242 goto free_msg;
5243 }
f7ca38df
JB		 5244 err = cfg80211_mlme_mgmt_tx(rdev, dev, chan, offchan, channel_type,
5245 channel_type_valid, wait,
2e161f78
JB		 5246 nla_data(info->attrs[NL80211_ATTR_FRAME]),
5247 nla_len(info->attrs[NL80211_ATTR_FRAME]),
e9f935e3 5248 no_cck, &cookie);
026331c4
JM		 5249 if (err)
5250 goto free_msg;
5251
5252 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
5253
5254 genlmsg_end(msg, hdr);
4c476991 5255 return genlmsg_reply(msg, info);
026331c4
JM		 5256
5257 nla_put_failure:
5258 err = -ENOBUFS;
5259 free_msg:
5260 nlmsg_free(msg);
026331c4
JM		 5261 return err;
5262}
5263
f7ca38df
JB		 5264static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
5265{
5266 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5267 struct net_device *dev = info->user_ptr[1];
5268 u64 cookie;
5269
5270 if (!info->attrs[NL80211_ATTR_COOKIE])
5271 return -EINVAL;
5272
5273 if (!rdev->ops->mgmt_tx_cancel_wait)
5274 return -EOPNOTSUPP;
5275
5276 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
5277 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
5278 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5279 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5280 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
5281 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5282 return -EOPNOTSUPP;
5283
5284 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
5285
5286 return rdev->ops->mgmt_tx_cancel_wait(&rdev->wiphy, dev, cookie);
5287}
5288
ffb9eb3d
KV		 5289static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
5290{
4c476991 5291 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 5292 struct wireless_dev *wdev;
4c476991 5293 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 5294 u8 ps_state;
5295 bool state;
5296 int err;
5297
4c476991
JB		 5298 if (!info->attrs[NL80211_ATTR_PS_STATE])
5299 return -EINVAL;
ffb9eb3d
KV		 5300
5301 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
5302
4c476991
JB		 5303 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
5304 return -EINVAL;
ffb9eb3d
KV		 5305
5306 wdev = dev->ieee80211_ptr;
5307
4c476991
JB		 5308 if (!rdev->ops->set_power_mgmt)
5309 return -EOPNOTSUPP;
ffb9eb3d
KV		 5310
5311 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
5312
5313 if (state == wdev->ps)
4c476991 5314 return 0;
ffb9eb3d 5315
4c476991
JB		 5316 err = rdev->ops->set_power_mgmt(wdev->wiphy, dev, state,
5317 wdev->ps_timeout);
5318 if (!err)
5319 wdev->ps = state;
ffb9eb3d
KV		 5320 return err;
5321}
5322
5323static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
5324{
4c476991 5325 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 5326 enum nl80211_ps_state ps_state;
5327 struct wireless_dev *wdev;
4c476991 5328 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 5329 struct sk_buff *msg;
5330 void *hdr;
5331 int err;
5332
ffb9eb3d
KV		 5333 wdev = dev->ieee80211_ptr;
5334
4c476991
JB		 5335 if (!rdev->ops->set_power_mgmt)
5336 return -EOPNOTSUPP;
ffb9eb3d
KV		 5337
5338 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5339 if (!msg)
5340 return -ENOMEM;
ffb9eb3d
KV		 5341
5342 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5343 NL80211_CMD_GET_POWER_SAVE);
5344 if (!hdr) {
4c476991 5345 err = -ENOBUFS;
ffb9eb3d
KV		 5346 goto free_msg;
5347 }
5348
5349 if (wdev->ps)
5350 ps_state = NL80211_PS_ENABLED;
5351 else
5352 ps_state = NL80211_PS_DISABLED;
5353
5354 NLA_PUT_U32(msg, NL80211_ATTR_PS_STATE, ps_state);
5355
5356 genlmsg_end(msg, hdr);
4c476991 5357 return genlmsg_reply(msg, info);
ffb9eb3d 5358
4c476991 5359 nla_put_failure:
ffb9eb3d 5360 err = -ENOBUFS;
4c476991 5361 free_msg:
ffb9eb3d 5362 nlmsg_free(msg);
ffb9eb3d
KV		 5363 return err;
5364}
5365
d6dc1a38
JO		 5366static struct nla_policy
5367nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
5368 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
5369 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
5370 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
5371};
5372
5373static int nl80211_set_cqm_rssi(struct genl_info *info,
5374 s32 threshold, u32 hysteresis)
5375{
4c476991 5376 struct cfg80211_registered_device *rdev = info->user_ptr[0];
d6dc1a38 5377 struct wireless_dev *wdev;
4c476991 5378 struct net_device *dev = info->user_ptr[1];
d6dc1a38
JO		 5379
5380 if (threshold > 0)
5381 return -EINVAL;
5382
d6dc1a38
JO		 5383 wdev = dev->ieee80211_ptr;
5384
4c476991
JB		 5385 if (!rdev->ops->set_cqm_rssi_config)
5386 return -EOPNOTSUPP;
d6dc1a38 5387
074ac8df 5388 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5389 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
5390 return -EOPNOTSUPP;
d6dc1a38 5391
4c476991
JB		 5392 return rdev->ops->set_cqm_rssi_config(wdev->wiphy, dev,
5393 threshold, hysteresis);
d6dc1a38
JO		 5394}
5395
5396static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
5397{
5398 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
5399 struct nlattr *cqm;
5400 int err;
5401
5402 cqm = info->attrs[NL80211_ATTR_CQM];
5403 if (!cqm) {
5404 err = -EINVAL;
5405 goto out;
5406 }
5407
5408 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
5409 nl80211_attr_cqm_policy);
5410 if (err)
5411 goto out;
5412
5413 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
5414 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
5415 s32 threshold;
5416 u32 hysteresis;
5417 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
5418 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
5419 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
5420 } else
5421 err = -EINVAL;
5422
5423out:
5424 return err;
5425}
5426
29cbe68c
JB		 5427static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
5428{
5429 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5430 struct net_device *dev = info->user_ptr[1];
5431 struct mesh_config cfg;
c80d545d 5432 struct mesh_setup setup;
29cbe68c
JB		 5433 int err;
5434
5435 /* start with default */
5436 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 5437 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 5438
24bdd9f4 5439 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 5440 /* and parse parameters if given */
24bdd9f4 5441 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 5442 if (err)
5443 return err;
5444 }
5445
5446 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
5447 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
5448 return -EINVAL;
5449
c80d545d
JC		 5450 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
5451 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
5452
5453 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
5454 /* parse additional setup parameters if given */
5455 err = nl80211_parse_mesh_setup(info, &setup);
5456 if (err)
5457 return err;
5458 }
5459
5460 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
29cbe68c
JB		 5461}
5462
5463static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
5464{
5465 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5466 struct net_device *dev = info->user_ptr[1];
5467
5468 return cfg80211_leave_mesh(rdev, dev);
5469}
5470
ff1b6e69
JB		 5471static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
5472{
5473 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5474 struct sk_buff *msg;
5475 void *hdr;
5476
5477 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
5478 return -EOPNOTSUPP;
5479
5480 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
5481 if (!msg)
5482 return -ENOMEM;
5483
5484 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5485 NL80211_CMD_GET_WOWLAN);
5486 if (!hdr)
5487 goto nla_put_failure;
5488
5489 if (rdev->wowlan) {
5490 struct nlattr *nl_wowlan;
5491
5492 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
5493 if (!nl_wowlan)
5494 goto nla_put_failure;
5495
5496 if (rdev->wowlan->any)
5497 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_ANY);
5498 if (rdev->wowlan->disconnect)
5499 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_DISCONNECT);
5500 if (rdev->wowlan->magic_pkt)
5501 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT);
77dbbb13
JB		 5502 if (rdev->wowlan->gtk_rekey_failure)
5503 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE);
5504 if (rdev->wowlan->eap_identity_req)
5505 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST);
5506 if (rdev->wowlan->four_way_handshake)
5507 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE);
5508 if (rdev->wowlan->rfkill_release)
5509 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE);
ff1b6e69
JB		 5510 if (rdev->wowlan->n_patterns) {
5511 struct nlattr *nl_pats, *nl_pat;
5512 int i, pat_len;
5513
5514 nl_pats = nla_nest_start(msg,
5515 NL80211_WOWLAN_TRIG_PKT_PATTERN);
5516 if (!nl_pats)
5517 goto nla_put_failure;
5518
5519 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
5520 nl_pat = nla_nest_start(msg, i + 1);
5521 if (!nl_pat)
5522 goto nla_put_failure;
5523 pat_len = rdev->wowlan->patterns[i].pattern_len;
5524 NLA_PUT(msg, NL80211_WOWLAN_PKTPAT_MASK,
5525 DIV_ROUND_UP(pat_len, 8),
5526 rdev->wowlan->patterns[i].mask);
5527 NLA_PUT(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
5528 pat_len,
5529 rdev->wowlan->patterns[i].pattern);
5530 nla_nest_end(msg, nl_pat);
5531 }
5532 nla_nest_end(msg, nl_pats);
5533 }
5534
5535 nla_nest_end(msg, nl_wowlan);
5536 }
5537
5538 genlmsg_end(msg, hdr);
5539 return genlmsg_reply(msg, info);
5540
5541nla_put_failure:
5542 nlmsg_free(msg);
5543 return -ENOBUFS;
5544}
5545
5546static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
5547{
5548 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5549 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
5550 struct cfg80211_wowlan no_triggers = {};
5551 struct cfg80211_wowlan new_triggers = {};
5552 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
5553 int err, i;
5554
5555 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
5556 return -EOPNOTSUPP;
5557
5558 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS])
5559 goto no_triggers;
5560
5561 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
5562 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
5563 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
5564 nl80211_wowlan_policy);
5565 if (err)
5566 return err;
5567
5568 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
5569 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
5570 return -EINVAL;
5571 new_triggers.any = true;
5572 }
5573
5574 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
5575 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
5576 return -EINVAL;
5577 new_triggers.disconnect = true;
5578 }
5579
5580 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
5581 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
5582 return -EINVAL;
5583 new_triggers.magic_pkt = true;
5584 }
5585
77dbbb13
JB		 5586 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
5587 return -EINVAL;
5588
5589 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
5590 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
5591 return -EINVAL;
5592 new_triggers.gtk_rekey_failure = true;
5593 }
5594
5595 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
5596 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
5597 return -EINVAL;
5598 new_triggers.eap_identity_req = true;
5599 }
5600
5601 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
5602 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
5603 return -EINVAL;
5604 new_triggers.four_way_handshake = true;
5605 }
5606
5607 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
5608 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
5609 return -EINVAL;
5610 new_triggers.rfkill_release = true;
5611 }
5612
ff1b6e69
JB		 5613 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
5614 struct nlattr *pat;
5615 int n_patterns = 0;
5616 int rem, pat_len, mask_len;
5617 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
5618
5619 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
5620 rem)
5621 n_patterns++;
5622 if (n_patterns > wowlan->n_patterns)
5623 return -EINVAL;
5624
5625 new_triggers.patterns = kcalloc(n_patterns,
5626 sizeof(new_triggers.patterns[0]),
5627 GFP_KERNEL);
5628 if (!new_triggers.patterns)
5629 return -ENOMEM;
5630
5631 new_triggers.n_patterns = n_patterns;
5632 i = 0;
5633
5634 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
5635 rem) {
5636 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
5637 nla_data(pat), nla_len(pat), NULL);
5638 err = -EINVAL;
5639 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
5640 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
5641 goto error;
5642 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
5643 mask_len = DIV_ROUND_UP(pat_len, 8);
5644 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
5645 mask_len)
5646 goto error;
5647 if (pat_len > wowlan->pattern_max_len ||
5648 pat_len < wowlan->pattern_min_len)
5649 goto error;
5650
5651 new_triggers.patterns[i].mask =
5652 kmalloc(mask_len + pat_len, GFP_KERNEL);
5653 if (!new_triggers.patterns[i].mask) {
5654 err = -ENOMEM;
5655 goto error;
5656 }
5657 new_triggers.patterns[i].pattern =
5658 new_triggers.patterns[i].mask + mask_len;
5659 memcpy(new_triggers.patterns[i].mask,
5660 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
5661 mask_len);
5662 new_triggers.patterns[i].pattern_len = pat_len;
5663 memcpy(new_triggers.patterns[i].pattern,
5664 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
5665 pat_len);
5666 i++;
5667 }
5668 }
5669
5670 if (memcmp(&new_triggers, &no_triggers, sizeof(new_triggers))) {
5671 struct cfg80211_wowlan *ntrig;
5672 ntrig = kmemdup(&new_triggers, sizeof(new_triggers),
5673 GFP_KERNEL);
5674 if (!ntrig) {
5675 err = -ENOMEM;
5676 goto error;
5677 }
5678 cfg80211_rdev_free_wowlan(rdev);
5679 rdev->wowlan = ntrig;
5680 } else {
5681 no_triggers:
5682 cfg80211_rdev_free_wowlan(rdev);
5683 rdev->wowlan = NULL;
5684 }
5685
5686 return 0;
5687 error:
5688 for (i = 0; i < new_triggers.n_patterns; i++)
5689 kfree(new_triggers.patterns[i].mask);
5690 kfree(new_triggers.patterns);
5691 return err;
5692}
5693
e5497d76
JB		 5694static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
5695{
5696 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5697 struct net_device *dev = info->user_ptr[1];
5698 struct wireless_dev *wdev = dev->ieee80211_ptr;
5699 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
5700 struct cfg80211_gtk_rekey_data rekey_data;
5701 int err;
5702
5703 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
5704 return -EINVAL;
5705
5706 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
5707 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
5708 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
5709 nl80211_rekey_policy);
5710 if (err)
5711 return err;
5712
5713 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
5714 return -ERANGE;
5715 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
5716 return -ERANGE;
5717 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
5718 return -ERANGE;
5719
5720 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
5721 NL80211_KEK_LEN);
5722 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
5723 NL80211_KCK_LEN);
5724 memcpy(rekey_data.replay_ctr,
5725 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
5726 NL80211_REPLAY_CTR_LEN);
5727
5728 wdev_lock(wdev);
5729 if (!wdev->current_bss) {
5730 err = -ENOTCONN;
5731 goto out;
5732 }
5733
5734 if (!rdev->ops->set_rekey_data) {
5735 err = -EOPNOTSUPP;
5736 goto out;
5737 }
5738
5739 err = rdev->ops->set_rekey_data(&rdev->wiphy, dev, &rekey_data);
5740 out:
5741 wdev_unlock(wdev);
5742 return err;
5743}
5744
4c476991
JB		 5745#define NL80211_FLAG_NEED_WIPHY 0x01
5746#define NL80211_FLAG_NEED_NETDEV 0x02
5747#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 5748#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
5749#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
5750 NL80211_FLAG_CHECK_NETDEV_UP)
4c476991
JB		 5751
5752static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
5753 struct genl_info *info)
5754{
5755 struct cfg80211_registered_device *rdev;
5756 struct net_device *dev;
5757 int err;
5758 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
5759
5760 if (rtnl)
5761 rtnl_lock();
5762
5763 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
5764 rdev = cfg80211_get_dev_from_info(info);
5765 if (IS_ERR(rdev)) {
5766 if (rtnl)
5767 rtnl_unlock();
5768 return PTR_ERR(rdev);
5769 }
5770 info->user_ptr[0] = rdev;
5771 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
5772 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
5773 if (err) {
5774 if (rtnl)
5775 rtnl_unlock();
5776 return err;
5777 }
41265714
JB		 5778 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
5779 !netif_running(dev)) {
d537f5fd
JB		 5780 cfg80211_unlock_rdev(rdev);
5781 dev_put(dev);
41265714
JB		 5782 if (rtnl)
5783 rtnl_unlock();
5784 return -ENETDOWN;
5785 }
4c476991
JB		 5786 info->user_ptr[0] = rdev;
5787 info->user_ptr[1] = dev;
5788 }
5789
5790 return 0;
5791}
5792
5793static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
5794 struct genl_info *info)
5795{
5796 if (info->user_ptr[0])
5797 cfg80211_unlock_rdev(info->user_ptr[0]);
5798 if (info->user_ptr[1])
5799 dev_put(info->user_ptr[1]);
5800 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
5801 rtnl_unlock();
5802}
5803
55682965
JB		 5804static struct genl_ops nl80211_ops[] = {
5805 {
5806 .cmd = NL80211_CMD_GET_WIPHY,
5807 .doit = nl80211_get_wiphy,
5808 .dumpit = nl80211_dump_wiphy,
5809 .policy = nl80211_policy,
5810 /* can be retrieved by unprivileged users */
4c476991 5811 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965
JB		 5812 },
5813 {
5814 .cmd = NL80211_CMD_SET_WIPHY,
5815 .doit = nl80211_set_wiphy,
5816 .policy = nl80211_policy,
5817 .flags = GENL_ADMIN_PERM,
4c476991 5818 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 5819 },
5820 {
5821 .cmd = NL80211_CMD_GET_INTERFACE,
5822 .doit = nl80211_get_interface,
5823 .dumpit = nl80211_dump_interface,
5824 .policy = nl80211_policy,
5825 /* can be retrieved by unprivileged users */
4c476991 5826 .internal_flags = NL80211_FLAG_NEED_NETDEV,
55682965
JB		 5827 },
5828 {
5829 .cmd = NL80211_CMD_SET_INTERFACE,
5830 .doit = nl80211_set_interface,
5831 .policy = nl80211_policy,
5832 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5833 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5834 NL80211_FLAG_NEED_RTNL,
55682965
JB		 5835 },
5836 {
5837 .cmd = NL80211_CMD_NEW_INTERFACE,
5838 .doit = nl80211_new_interface,
5839 .policy = nl80211_policy,
5840 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5841 .internal_flags = NL80211_FLAG_NEED_WIPHY |
5842 NL80211_FLAG_NEED_RTNL,
55682965
JB		 5843 },
5844 {
5845 .cmd = NL80211_CMD_DEL_INTERFACE,
5846 .doit = nl80211_del_interface,
5847 .policy = nl80211_policy,
41ade00f 5848 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5849 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5850 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5851 },
5852 {
5853 .cmd = NL80211_CMD_GET_KEY,
5854 .doit = nl80211_get_key,
5855 .policy = nl80211_policy,
5856 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5857 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5858 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5859 },
5860 {
5861 .cmd = NL80211_CMD_SET_KEY,
5862 .doit = nl80211_set_key,
5863 .policy = nl80211_policy,
5864 .flags = GENL_ADMIN_PERM,
41265714 5865 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5866 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5867 },
5868 {
5869 .cmd = NL80211_CMD_NEW_KEY,
5870 .doit = nl80211_new_key,
5871 .policy = nl80211_policy,
5872 .flags = GENL_ADMIN_PERM,
41265714 5873 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5874 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5875 },
5876 {
5877 .cmd = NL80211_CMD_DEL_KEY,
5878 .doit = nl80211_del_key,
5879 .policy = nl80211_policy,
55682965 5880 .flags = GENL_ADMIN_PERM,
41265714 5881 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5882 NL80211_FLAG_NEED_RTNL,
55682965 5883 },
ed1b6cc7
JB		 5884 {
5885 .cmd = NL80211_CMD_SET_BEACON,
5886 .policy = nl80211_policy,
5887 .flags = GENL_ADMIN_PERM,
5888 .doit = nl80211_addset_beacon,
4c476991
JB		 5889 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5890 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 5891 },
5892 {
5893 .cmd = NL80211_CMD_NEW_BEACON,
5894 .policy = nl80211_policy,
5895 .flags = GENL_ADMIN_PERM,
5896 .doit = nl80211_addset_beacon,
4c476991
JB		 5897 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5898 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 5899 },
5900 {
5901 .cmd = NL80211_CMD_DEL_BEACON,
5902 .policy = nl80211_policy,
5903 .flags = GENL_ADMIN_PERM,
5904 .doit = nl80211_del_beacon,
4c476991
JB		 5905 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5906 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 5907 },
5727ef1b
JB		 5908 {
5909 .cmd = NL80211_CMD_GET_STATION,
5910 .doit = nl80211_get_station,
2ec600d6 5911 .dumpit = nl80211_dump_station,
5727ef1b 5912 .policy = nl80211_policy,
4c476991
JB		 5913 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5914 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5915 },
5916 {
5917 .cmd = NL80211_CMD_SET_STATION,
5918 .doit = nl80211_set_station,
5919 .policy = nl80211_policy,
5920 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5921 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5922 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5923 },
5924 {
5925 .cmd = NL80211_CMD_NEW_STATION,
5926 .doit = nl80211_new_station,
5927 .policy = nl80211_policy,
5928 .flags = GENL_ADMIN_PERM,
41265714 5929 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5930 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5931 },
5932 {
5933 .cmd = NL80211_CMD_DEL_STATION,
5934 .doit = nl80211_del_station,
5935 .policy = nl80211_policy,
2ec600d6 5936 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5937 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5938 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5939 },
5940 {
5941 .cmd = NL80211_CMD_GET_MPATH,
5942 .doit = nl80211_get_mpath,
5943 .dumpit = nl80211_dump_mpath,
5944 .policy = nl80211_policy,
5945 .flags = GENL_ADMIN_PERM,
41265714 5946 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5947 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5948 },
5949 {
5950 .cmd = NL80211_CMD_SET_MPATH,
5951 .doit = nl80211_set_mpath,
5952 .policy = nl80211_policy,
5953 .flags = GENL_ADMIN_PERM,
41265714 5954 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5955 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5956 },
5957 {
5958 .cmd = NL80211_CMD_NEW_MPATH,
5959 .doit = nl80211_new_mpath,
5960 .policy = nl80211_policy,
5961 .flags = GENL_ADMIN_PERM,
41265714 5962 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5963 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5964 },
5965 {
5966 .cmd = NL80211_CMD_DEL_MPATH,
5967 .doit = nl80211_del_mpath,
5968 .policy = nl80211_policy,
9f1ba906 5969 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5970 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5971 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 5972 },
5973 {
5974 .cmd = NL80211_CMD_SET_BSS,
5975 .doit = nl80211_set_bss,
5976 .policy = nl80211_policy,
b2e1b302 5977 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5978 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5979 NL80211_FLAG_NEED_RTNL,
b2e1b302 5980 },
f130347c
LR		 5981 {
5982 .cmd = NL80211_CMD_GET_REG,
5983 .doit = nl80211_get_reg,
5984 .policy = nl80211_policy,
5985 /* can be retrieved by unprivileged users */
5986 },
b2e1b302
LR		 5987 {
5988 .cmd = NL80211_CMD_SET_REG,
5989 .doit = nl80211_set_reg,
5990 .policy = nl80211_policy,
5991 .flags = GENL_ADMIN_PERM,
5992 },
5993 {
5994 .cmd = NL80211_CMD_REQ_SET_REG,
5995 .doit = nl80211_req_set_reg,
5996 .policy = nl80211_policy,
93da9cc1 5997 .flags = GENL_ADMIN_PERM,
5998 },
5999 {
24bdd9f4
JC		 6000 .cmd = NL80211_CMD_GET_MESH_CONFIG,
6001 .doit = nl80211_get_mesh_config,
93da9cc1 6002 .policy = nl80211_policy,
6003 /* can be retrieved by unprivileged users */
4c476991
JB		 6004 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6005 NL80211_FLAG_NEED_RTNL,
93da9cc1 6006 },
6007 {
24bdd9f4
JC		 6008 .cmd = NL80211_CMD_SET_MESH_CONFIG,
6009 .doit = nl80211_update_mesh_config,
93da9cc1 6010 .policy = nl80211_policy,
9aed3cc1 6011 .flags = GENL_ADMIN_PERM,
29cbe68c 6012 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6013 NL80211_FLAG_NEED_RTNL,
9aed3cc1 6014 },
2a519311
JB		 6015 {
6016 .cmd = NL80211_CMD_TRIGGER_SCAN,
6017 .doit = nl80211_trigger_scan,
6018 .policy = nl80211_policy,
6019 .flags = GENL_ADMIN_PERM,
41265714 6020 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6021 NL80211_FLAG_NEED_RTNL,
2a519311
JB		 6022 },
6023 {
6024 .cmd = NL80211_CMD_GET_SCAN,
6025 .policy = nl80211_policy,
6026 .dumpit = nl80211_dump_scan,
6027 },
807f8a8c
LC		 6028 {
6029 .cmd = NL80211_CMD_START_SCHED_SCAN,
6030 .doit = nl80211_start_sched_scan,
6031 .policy = nl80211_policy,
6032 .flags = GENL_ADMIN_PERM,
6033 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6034 NL80211_FLAG_NEED_RTNL,
6035 },
6036 {
6037 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
6038 .doit = nl80211_stop_sched_scan,
6039 .policy = nl80211_policy,
6040 .flags = GENL_ADMIN_PERM,
6041 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6042 NL80211_FLAG_NEED_RTNL,
6043 },
636a5d36
JM		 6044 {
6045 .cmd = NL80211_CMD_AUTHENTICATE,
6046 .doit = nl80211_authenticate,
6047 .policy = nl80211_policy,
6048 .flags = GENL_ADMIN_PERM,
41265714 6049 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6050 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 6051 },
6052 {
6053 .cmd = NL80211_CMD_ASSOCIATE,
6054 .doit = nl80211_associate,
6055 .policy = nl80211_policy,
6056 .flags = GENL_ADMIN_PERM,
41265714 6057 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6058 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 6059 },
6060 {
6061 .cmd = NL80211_CMD_DEAUTHENTICATE,
6062 .doit = nl80211_deauthenticate,
6063 .policy = nl80211_policy,
6064 .flags = GENL_ADMIN_PERM,
41265714 6065 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6066 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 6067 },
6068 {
6069 .cmd = NL80211_CMD_DISASSOCIATE,
6070 .doit = nl80211_disassociate,
6071 .policy = nl80211_policy,
6072 .flags = GENL_ADMIN_PERM,
41265714 6073 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6074 NL80211_FLAG_NEED_RTNL,
636a5d36 6075 },
04a773ad
JB		 6076 {
6077 .cmd = NL80211_CMD_JOIN_IBSS,
6078 .doit = nl80211_join_ibss,
6079 .policy = nl80211_policy,
6080 .flags = GENL_ADMIN_PERM,
41265714 6081 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6082 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 6083 },
6084 {
6085 .cmd = NL80211_CMD_LEAVE_IBSS,
6086 .doit = nl80211_leave_ibss,
6087 .policy = nl80211_policy,
6088 .flags = GENL_ADMIN_PERM,
41265714 6089 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6090 NL80211_FLAG_NEED_RTNL,
04a773ad 6091 },
aff89a9b
JB		 6092#ifdef CONFIG_NL80211_TESTMODE
6093 {
6094 .cmd = NL80211_CMD_TESTMODE,
6095 .doit = nl80211_testmode_do,
71063f0e 6096 .dumpit = nl80211_testmode_dump,
aff89a9b
JB		 6097 .policy = nl80211_policy,
6098 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6099 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6100 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 6101 },
6102#endif
b23aa676
SO		 6103 {
6104 .cmd = NL80211_CMD_CONNECT,
6105 .doit = nl80211_connect,
6106 .policy = nl80211_policy,
6107 .flags = GENL_ADMIN_PERM,
41265714 6108 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6109 NL80211_FLAG_NEED_RTNL,
b23aa676
SO		 6110 },
6111 {
6112 .cmd = NL80211_CMD_DISCONNECT,
6113 .doit = nl80211_disconnect,
6114 .policy = nl80211_policy,
6115 .flags = GENL_ADMIN_PERM,
41265714 6116 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6117 NL80211_FLAG_NEED_RTNL,
b23aa676 6118 },
463d0183
JB		 6119 {
6120 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
6121 .doit = nl80211_wiphy_netns,
6122 .policy = nl80211_policy,
6123 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6124 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6125 NL80211_FLAG_NEED_RTNL,
463d0183 6126 },
61fa713c
HS		 6127 {
6128 .cmd = NL80211_CMD_GET_SURVEY,
6129 .policy = nl80211_policy,
6130 .dumpit = nl80211_dump_survey,
6131 },
67fbb16b
SO		 6132 {
6133 .cmd = NL80211_CMD_SET_PMKSA,
6134 .doit = nl80211_setdel_pmksa,
6135 .policy = nl80211_policy,
6136 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6137 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6138 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 6139 },
6140 {
6141 .cmd = NL80211_CMD_DEL_PMKSA,
6142 .doit = nl80211_setdel_pmksa,
6143 .policy = nl80211_policy,
6144 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6145 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6146 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 6147 },
6148 {
6149 .cmd = NL80211_CMD_FLUSH_PMKSA,
6150 .doit = nl80211_flush_pmksa,
6151 .policy = nl80211_policy,
6152 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6153 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6154 NL80211_FLAG_NEED_RTNL,
67fbb16b 6155 },
9588bbd5
JM		 6156 {
6157 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
6158 .doit = nl80211_remain_on_channel,
6159 .policy = nl80211_policy,
6160 .flags = GENL_ADMIN_PERM,
41265714 6161 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6162 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 6163 },
6164 {
6165 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
6166 .doit = nl80211_cancel_remain_on_channel,
6167 .policy = nl80211_policy,
6168 .flags = GENL_ADMIN_PERM,
41265714 6169 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6170 NL80211_FLAG_NEED_RTNL,
9588bbd5 6171 },
13ae75b1
JM		 6172 {
6173 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
6174 .doit = nl80211_set_tx_bitrate_mask,
6175 .policy = nl80211_policy,
6176 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6177 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6178 NL80211_FLAG_NEED_RTNL,
13ae75b1 6179 },
026331c4 6180 {
2e161f78
JB		 6181 .cmd = NL80211_CMD_REGISTER_FRAME,
6182 .doit = nl80211_register_mgmt,
026331c4
JM		 6183 .policy = nl80211_policy,
6184 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6185 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6186 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 6187 },
6188 {
2e161f78
JB		 6189 .cmd = NL80211_CMD_FRAME,
6190 .doit = nl80211_tx_mgmt,
026331c4 6191 .policy = nl80211_policy,
f7ca38df
JB		 6192 .flags = GENL_ADMIN_PERM,
6193 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6194 NL80211_FLAG_NEED_RTNL,
6195 },
6196 {
6197 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
6198 .doit = nl80211_tx_mgmt_cancel_wait,
6199 .policy = nl80211_policy,
026331c4 6200 .flags = GENL_ADMIN_PERM,
41265714 6201 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6202 NL80211_FLAG_NEED_RTNL,
026331c4 6203 },
ffb9eb3d
KV		 6204 {
6205 .cmd = NL80211_CMD_SET_POWER_SAVE,
6206 .doit = nl80211_set_power_save,
6207 .policy = nl80211_policy,
6208 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6209 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6210 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 6211 },
6212 {
6213 .cmd = NL80211_CMD_GET_POWER_SAVE,
6214 .doit = nl80211_get_power_save,
6215 .policy = nl80211_policy,
6216 /* can be retrieved by unprivileged users */
4c476991
JB		 6217 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6218 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 6219 },
d6dc1a38
JO		 6220 {
6221 .cmd = NL80211_CMD_SET_CQM,
6222 .doit = nl80211_set_cqm,
6223 .policy = nl80211_policy,
6224 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6225 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6226 NL80211_FLAG_NEED_RTNL,
d6dc1a38 6227 },
f444de05
JB		 6228 {
6229 .cmd = NL80211_CMD_SET_CHANNEL,
6230 .doit = nl80211_set_channel,
6231 .policy = nl80211_policy,
6232 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6233 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6234 NL80211_FLAG_NEED_RTNL,
f444de05 6235 },
e8347eba
BJ		 6236 {
6237 .cmd = NL80211_CMD_SET_WDS_PEER,
6238 .doit = nl80211_set_wds_peer,
6239 .policy = nl80211_policy,
6240 .flags = GENL_ADMIN_PERM,
43b19952
JB		 6241 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6242 NL80211_FLAG_NEED_RTNL,
e8347eba 6243 },
29cbe68c
JB		 6244 {
6245 .cmd = NL80211_CMD_JOIN_MESH,
6246 .doit = nl80211_join_mesh,
6247 .policy = nl80211_policy,
6248 .flags = GENL_ADMIN_PERM,
6249 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6250 NL80211_FLAG_NEED_RTNL,
6251 },
6252 {
6253 .cmd = NL80211_CMD_LEAVE_MESH,
6254 .doit = nl80211_leave_mesh,
6255 .policy = nl80211_policy,
6256 .flags = GENL_ADMIN_PERM,
6257 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6258 NL80211_FLAG_NEED_RTNL,
6259 },
ff1b6e69
JB		 6260 {
6261 .cmd = NL80211_CMD_GET_WOWLAN,
6262 .doit = nl80211_get_wowlan,
6263 .policy = nl80211_policy,
6264 /* can be retrieved by unprivileged users */
6265 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6266 NL80211_FLAG_NEED_RTNL,
6267 },
6268 {
6269 .cmd = NL80211_CMD_SET_WOWLAN,
6270 .doit = nl80211_set_wowlan,
6271 .policy = nl80211_policy,
6272 .flags = GENL_ADMIN_PERM,
6273 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6274 NL80211_FLAG_NEED_RTNL,
6275 },
e5497d76
JB		 6276 {
6277 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
6278 .doit = nl80211_set_rekey_data,
6279 .policy = nl80211_policy,
6280 .flags = GENL_ADMIN_PERM,
6281 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6282 NL80211_FLAG_NEED_RTNL,
6283 },
55682965 6284};
9588bbd5 6285
6039f6d2
JM		 6286static struct genl_multicast_group nl80211_mlme_mcgrp = {
6287 .name = "mlme",
6288};
55682965
JB		 6289
6290/* multicast groups */
6291static struct genl_multicast_group nl80211_config_mcgrp = {
6292 .name = "config",
6293};
2a519311
JB		 6294static struct genl_multicast_group nl80211_scan_mcgrp = {
6295 .name = "scan",
6296};
73d54c9e
LR		 6297static struct genl_multicast_group nl80211_regulatory_mcgrp = {
6298 .name = "regulatory",
6299};
55682965
JB		 6300
6301/* notification functions */
6302
6303void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
6304{
6305 struct sk_buff *msg;
6306
fd2120ca 6307 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 6308 if (!msg)
6309 return;
6310
6311 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
6312 nlmsg_free(msg);
6313 return;
6314 }
6315
463d0183
JB		 6316 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6317 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 6318}
6319
362a415d
JB		 6320static int nl80211_add_scan_req(struct sk_buff *msg,
6321 struct cfg80211_registered_device *rdev)
6322{
6323 struct cfg80211_scan_request *req = rdev->scan_req;
6324 struct nlattr *nest;
6325 int i;
6326
667503dd
JB		 6327 ASSERT_RDEV_LOCK(rdev);
6328
362a415d
JB		 6329 if (WARN_ON(!req))
6330 return 0;
6331
6332 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
6333 if (!nest)
6334 goto nla_put_failure;
6335 for (i = 0; i < req->n_ssids; i++)
6336 NLA_PUT(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid);
6337 nla_nest_end(msg, nest);
6338
6339 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
6340 if (!nest)
6341 goto nla_put_failure;
6342 for (i = 0; i < req->n_channels; i++)
6343 NLA_PUT_U32(msg, i, req->channels[i]->center_freq);
6344 nla_nest_end(msg, nest);
6345
6346 if (req->ie)
6347 NLA_PUT(msg, NL80211_ATTR_IE, req->ie_len, req->ie);
6348
6349 return 0;
6350 nla_put_failure:
6351 return -ENOBUFS;
6352}
6353
a538e2d5
JB		 6354static int nl80211_send_scan_msg(struct sk_buff *msg,
6355 struct cfg80211_registered_device *rdev,
6356 struct net_device *netdev,
6357 u32 pid, u32 seq, int flags,
6358 u32 cmd)
2a519311
JB		 6359{
6360 void *hdr;
6361
6362 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
6363 if (!hdr)
6364 return -1;
6365
b5850a7a 6366 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
2a519311
JB		 6367 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6368
362a415d
JB		 6369 /* ignore errors and send incomplete event anyway */
6370 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 6371
6372 return genlmsg_end(msg, hdr);
6373
6374 nla_put_failure:
6375 genlmsg_cancel(msg, hdr);
6376 return -EMSGSIZE;
6377}
6378
807f8a8c
LC		 6379static int
6380nl80211_send_sched_scan_msg(struct sk_buff *msg,
6381 struct cfg80211_registered_device *rdev,
6382 struct net_device *netdev,
6383 u32 pid, u32 seq, int flags, u32 cmd)
6384{
6385 void *hdr;
6386
6387 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
6388 if (!hdr)
6389 return -1;
6390
6391 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6392 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6393
6394 return genlmsg_end(msg, hdr);
6395
6396 nla_put_failure:
6397 genlmsg_cancel(msg, hdr);
6398 return -EMSGSIZE;
6399}
6400
a538e2d5
JB		 6401void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
6402 struct net_device *netdev)
6403{
6404 struct sk_buff *msg;
6405
6406 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
6407 if (!msg)
6408 return;
6409
6410 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6411 NL80211_CMD_TRIGGER_SCAN) < 0) {
6412 nlmsg_free(msg);
6413 return;
6414 }
6415
463d0183
JB		 6416 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6417 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 6418}
6419
2a519311
JB		 6420void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
6421 struct net_device *netdev)
6422{
6423 struct sk_buff *msg;
6424
fd2120ca 6425 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 6426 if (!msg)
6427 return;
6428
a538e2d5
JB		 6429 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6430 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 6431 nlmsg_free(msg);
6432 return;
6433 }
6434
463d0183
JB		 6435 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6436 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 6437}
6438
6439void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
6440 struct net_device *netdev)
6441{
6442 struct sk_buff *msg;
6443
fd2120ca 6444 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 6445 if (!msg)
6446 return;
6447
a538e2d5
JB		 6448 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6449 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 6450 nlmsg_free(msg);
6451 return;
6452 }
6453
463d0183
JB		 6454 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6455 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 6456}
6457
807f8a8c
LC		 6458void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
6459 struct net_device *netdev)
6460{
6461 struct sk_buff *msg;
6462
6463 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6464 if (!msg)
6465 return;
6466
6467 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
6468 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
6469 nlmsg_free(msg);
6470 return;
6471 }
6472
6473 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6474 nl80211_scan_mcgrp.id, GFP_KERNEL);
6475}
6476
6477void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
6478 struct net_device *netdev, u32 cmd)
6479{
6480 struct sk_buff *msg;
6481
6482 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
6483 if (!msg)
6484 return;
6485
6486 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
6487 nlmsg_free(msg);
6488 return;
6489 }
6490
6491 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6492 nl80211_scan_mcgrp.id, GFP_KERNEL);
6493}
6494
73d54c9e
LR		 6495/*
6496 * This can happen on global regulatory changes or device specific settings
6497 * based on custom world regulatory domains.
6498 */
6499void nl80211_send_reg_change_event(struct regulatory_request *request)
6500{
6501 struct sk_buff *msg;
6502 void *hdr;
6503
fd2120ca 6504 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 6505 if (!msg)
6506 return;
6507
6508 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
6509 if (!hdr) {
6510 nlmsg_free(msg);
6511 return;
6512 }
6513
6514 /* Userspace can always count this one always being set */
6515 NLA_PUT_U8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator);
6516
6517 if (request->alpha2[0] == '0' && request->alpha2[1] == '0')
6518 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6519 NL80211_REGDOM_TYPE_WORLD);
6520 else if (request->alpha2[0] == '9' && request->alpha2[1] == '9')
6521 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6522 NL80211_REGDOM_TYPE_CUSTOM_WORLD);
6523 else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
6524 request->intersect)
6525 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6526 NL80211_REGDOM_TYPE_INTERSECTION);
6527 else {
6528 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6529 NL80211_REGDOM_TYPE_COUNTRY);
6530 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2, request->alpha2);
6531 }
6532
6533 if (wiphy_idx_valid(request->wiphy_idx))
6534 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx);
6535
6536 if (genlmsg_end(msg, hdr) < 0) {
6537 nlmsg_free(msg);
6538 return;
6539 }
6540
bc43b28c 6541 rcu_read_lock();
463d0183 6542 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 6543 GFP_ATOMIC);
6544 rcu_read_unlock();
73d54c9e
LR		 6545
6546 return;
6547
6548nla_put_failure:
6549 genlmsg_cancel(msg, hdr);
6550 nlmsg_free(msg);
6551}
6552
6039f6d2
JM		 6553static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
6554 struct net_device *netdev,
6555 const u8 *buf, size_t len,
e6d6e342 6556 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 6557{
6558 struct sk_buff *msg;
6559 void *hdr;
6560
e6d6e342 6561 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 6562 if (!msg)
6563 return;
6564
6565 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
6566 if (!hdr) {
6567 nlmsg_free(msg);
6568 return;
6569 }
6570
6571 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6572 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6573 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
6574
6575 if (genlmsg_end(msg, hdr) < 0) {
6576 nlmsg_free(msg);
6577 return;
6578 }
6579
463d0183
JB		 6580 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6581 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 6582 return;
6583
6584 nla_put_failure:
6585 genlmsg_cancel(msg, hdr);
6586 nlmsg_free(msg);
6587}
6588
6589void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6590 struct net_device *netdev, const u8 *buf,
6591 size_t len, gfp_t gfp)
6039f6d2
JM		 6592{
6593 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6594 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 6595}
6596
6597void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
6598 struct net_device *netdev, const u8 *buf,
e6d6e342 6599 size_t len, gfp_t gfp)
6039f6d2 6600{
e6d6e342
JB		 6601 nl80211_send_mlme_event(rdev, netdev, buf, len,
6602 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 6603}
6604
53b46b84 6605void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6606 struct net_device *netdev, const u8 *buf,
6607 size_t len, gfp_t gfp)
6039f6d2
JM		 6608{
6609 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6610 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 6611}
6612
53b46b84
JM		 6613void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
6614 struct net_device *netdev, const u8 *buf,
e6d6e342 6615 size_t len, gfp_t gfp)
6039f6d2
JM		 6616{
6617 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6618 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 6619}
6620
cf4e594e
JM		 6621void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
6622 struct net_device *netdev, const u8 *buf,
6623 size_t len, gfp_t gfp)
6624{
6625 nl80211_send_mlme_event(rdev, netdev, buf, len,
6626 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
6627}
6628
6629void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
6630 struct net_device *netdev, const u8 *buf,
6631 size_t len, gfp_t gfp)
6632{
6633 nl80211_send_mlme_event(rdev, netdev, buf, len,
6634 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
6635}
6636
1b06bb40
LR		 6637static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
6638 struct net_device *netdev, int cmd,
e6d6e342 6639 const u8 *addr, gfp_t gfp)
1965c853
JM		 6640{
6641 struct sk_buff *msg;
6642 void *hdr;
6643
e6d6e342 6644 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 6645 if (!msg)
6646 return;
6647
6648 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
6649 if (!hdr) {
6650 nlmsg_free(msg);
6651 return;
6652 }
6653
6654 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6655 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6656 NLA_PUT_FLAG(msg, NL80211_ATTR_TIMED_OUT);
6657 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
6658
6659 if (genlmsg_end(msg, hdr) < 0) {
6660 nlmsg_free(msg);
6661 return;
6662 }
6663
463d0183
JB		 6664 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6665 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 6666 return;
6667
6668 nla_put_failure:
6669 genlmsg_cancel(msg, hdr);
6670 nlmsg_free(msg);
6671}
6672
6673void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6674 struct net_device *netdev, const u8 *addr,
6675 gfp_t gfp)
1965c853
JM		 6676{
6677 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 6678 addr, gfp);
1965c853
JM		 6679}
6680
6681void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6682 struct net_device *netdev, const u8 *addr,
6683 gfp_t gfp)
1965c853 6684{
e6d6e342
JB		 6685 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
6686 addr, gfp);
1965c853
JM		 6687}
6688
b23aa676
SO		 6689void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
6690 struct net_device *netdev, const u8 *bssid,
6691 const u8 *req_ie, size_t req_ie_len,
6692 const u8 *resp_ie, size_t resp_ie_len,
6693 u16 status, gfp_t gfp)
6694{
6695 struct sk_buff *msg;
6696 void *hdr;
6697
6698 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6699 if (!msg)
6700 return;
6701
6702 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
6703 if (!hdr) {
6704 nlmsg_free(msg);
6705 return;
6706 }
6707
6708 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6709 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6710 if (bssid)
6711 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6712 NLA_PUT_U16(msg, NL80211_ATTR_STATUS_CODE, status);
6713 if (req_ie)
6714 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
6715 if (resp_ie)
6716 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
6717
6718 if (genlmsg_end(msg, hdr) < 0) {
6719 nlmsg_free(msg);
6720 return;
6721 }
6722
463d0183
JB		 6723 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6724 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 6725 return;
6726
6727 nla_put_failure:
6728 genlmsg_cancel(msg, hdr);
6729 nlmsg_free(msg);
6730
6731}
6732
6733void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
6734 struct net_device *netdev, const u8 *bssid,
6735 const u8 *req_ie, size_t req_ie_len,
6736 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
6737{
6738 struct sk_buff *msg;
6739 void *hdr;
6740
6741 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6742 if (!msg)
6743 return;
6744
6745 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
6746 if (!hdr) {
6747 nlmsg_free(msg);
6748 return;
6749 }
6750
6751 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6752 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6753 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6754 if (req_ie)
6755 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
6756 if (resp_ie)
6757 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
6758
6759 if (genlmsg_end(msg, hdr) < 0) {
6760 nlmsg_free(msg);
6761 return;
6762 }
6763
463d0183
JB		 6764 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6765 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 6766 return;
6767
6768 nla_put_failure:
6769 genlmsg_cancel(msg, hdr);
6770 nlmsg_free(msg);
6771
6772}
6773
6774void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
6775 struct net_device *netdev, u16 reason,
667503dd 6776 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 6777{
6778 struct sk_buff *msg;
6779 void *hdr;
6780
667503dd 6781 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
b23aa676
SO		 6782 if (!msg)
6783 return;
6784
6785 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
6786 if (!hdr) {
6787 nlmsg_free(msg);
6788 return;
6789 }
6790
6791 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6792 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6793 if (from_ap && reason)
6794 NLA_PUT_U16(msg, NL80211_ATTR_REASON_CODE, reason);
6795 if (from_ap)
6796 NLA_PUT_FLAG(msg, NL80211_ATTR_DISCONNECTED_BY_AP);
6797 if (ie)
6798 NLA_PUT(msg, NL80211_ATTR_IE, ie_len, ie);
6799
6800 if (genlmsg_end(msg, hdr) < 0) {
6801 nlmsg_free(msg);
6802 return;
6803 }
6804
463d0183
JB		 6805 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6806 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 6807 return;
6808
6809 nla_put_failure:
6810 genlmsg_cancel(msg, hdr);
6811 nlmsg_free(msg);
6812
6813}
6814
04a773ad
JB		 6815void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
6816 struct net_device *netdev, const u8 *bssid,
6817 gfp_t gfp)
6818{
6819 struct sk_buff *msg;
6820 void *hdr;
6821
fd2120ca 6822 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 6823 if (!msg)
6824 return;
6825
6826 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
6827 if (!hdr) {
6828 nlmsg_free(msg);
6829 return;
6830 }
6831
6832 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6833 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6834 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6835
6836 if (genlmsg_end(msg, hdr) < 0) {
6837 nlmsg_free(msg);
6838 return;
6839 }
6840
463d0183
JB		 6841 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6842 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 6843 return;
6844
6845 nla_put_failure:
6846 genlmsg_cancel(msg, hdr);
6847 nlmsg_free(msg);
6848}
6849
c93b5e71
JC		 6850void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
6851 struct net_device *netdev,
6852 const u8 *macaddr, const u8* ie, u8 ie_len,
6853 gfp_t gfp)
6854{
6855 struct sk_buff *msg;
6856 void *hdr;
6857
6858 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6859 if (!msg)
6860 return;
6861
6862 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
6863 if (!hdr) {
6864 nlmsg_free(msg);
6865 return;
6866 }
6867
6868 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6869 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6870 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr);
6871 if (ie_len && ie)
6872 NLA_PUT(msg, NL80211_ATTR_IE, ie_len , ie);
6873
6874 if (genlmsg_end(msg, hdr) < 0) {
6875 nlmsg_free(msg);
6876 return;
6877 }
6878
6879 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6880 nl80211_mlme_mcgrp.id, gfp);
6881 return;
6882
6883 nla_put_failure:
6884 genlmsg_cancel(msg, hdr);
6885 nlmsg_free(msg);
6886}
6887
a3b8b056
JM		 6888void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
6889 struct net_device *netdev, const u8 *addr,
6890 enum nl80211_key_type key_type, int key_id,
e6d6e342 6891 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 6892{
6893 struct sk_buff *msg;
6894 void *hdr;
6895
e6d6e342 6896 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 6897 if (!msg)
6898 return;
6899
6900 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
6901 if (!hdr) {
6902 nlmsg_free(msg);
6903 return;
6904 }
6905
6906 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6907 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6908 if (addr)
6909 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
6910 NLA_PUT_U32(msg, NL80211_ATTR_KEY_TYPE, key_type);
a66b98db
AN		 6911 if (key_id != -1)
6912 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_id);
a3b8b056
JM		 6913 if (tsc)
6914 NLA_PUT(msg, NL80211_ATTR_KEY_SEQ, 6, tsc);
6915
6916 if (genlmsg_end(msg, hdr) < 0) {
6917 nlmsg_free(msg);
6918 return;
6919 }
6920
463d0183
JB		 6921 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6922 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 6923 return;
6924
6925 nla_put_failure:
6926 genlmsg_cancel(msg, hdr);
6927 nlmsg_free(msg);
6928}
6929
6bad8766
LR		 6930void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
6931 struct ieee80211_channel *channel_before,
6932 struct ieee80211_channel *channel_after)
6933{
6934 struct sk_buff *msg;
6935 void *hdr;
6936 struct nlattr *nl_freq;
6937
fd2120ca 6938 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 6939 if (!msg)
6940 return;
6941
6942 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
6943 if (!hdr) {
6944 nlmsg_free(msg);
6945 return;
6946 }
6947
6948 /*
6949 * Since we are applying the beacon hint to a wiphy we know its
6950 * wiphy_idx is valid
6951 */
6952 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy));
6953
6954 /* Before */
6955 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
6956 if (!nl_freq)
6957 goto nla_put_failure;
6958 if (nl80211_msg_put_channel(msg, channel_before))
6959 goto nla_put_failure;
6960 nla_nest_end(msg, nl_freq);
6961
6962 /* After */
6963 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
6964 if (!nl_freq)
6965 goto nla_put_failure;
6966 if (nl80211_msg_put_channel(msg, channel_after))
6967 goto nla_put_failure;
6968 nla_nest_end(msg, nl_freq);
6969
6970 if (genlmsg_end(msg, hdr) < 0) {
6971 nlmsg_free(msg);
6972 return;
6973 }
6974
463d0183
JB		 6975 rcu_read_lock();
6976 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
6977 GFP_ATOMIC);
6978 rcu_read_unlock();
6bad8766
LR		 6979
6980 return;
6981
6982nla_put_failure:
6983 genlmsg_cancel(msg, hdr);
6984 nlmsg_free(msg);
6985}
6986
9588bbd5
JM		 6987static void nl80211_send_remain_on_chan_event(
6988 int cmd, struct cfg80211_registered_device *rdev,
6989 struct net_device *netdev, u64 cookie,
6990 struct ieee80211_channel *chan,
6991 enum nl80211_channel_type channel_type,
6992 unsigned int duration, gfp_t gfp)
6993{
6994 struct sk_buff *msg;
6995 void *hdr;
6996
6997 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6998 if (!msg)
6999 return;
7000
7001 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7002 if (!hdr) {
7003 nlmsg_free(msg);
7004 return;
7005 }
7006
7007 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7008 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7009 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq);
7010 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, channel_type);
7011 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
7012
7013 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL)
7014 NLA_PUT_U32(msg, NL80211_ATTR_DURATION, duration);
7015
7016 if (genlmsg_end(msg, hdr) < 0) {
7017 nlmsg_free(msg);
7018 return;
7019 }
7020
7021 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7022 nl80211_mlme_mcgrp.id, gfp);
7023 return;
7024
7025 nla_put_failure:
7026 genlmsg_cancel(msg, hdr);
7027 nlmsg_free(msg);
7028}
7029
7030void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
7031 struct net_device *netdev, u64 cookie,
7032 struct ieee80211_channel *chan,
7033 enum nl80211_channel_type channel_type,
7034 unsigned int duration, gfp_t gfp)
7035{
7036 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
7037 rdev, netdev, cookie, chan,
7038 channel_type, duration, gfp);
7039}
7040
7041void nl80211_send_remain_on_channel_cancel(
7042 struct cfg80211_registered_device *rdev, struct net_device *netdev,
7043 u64 cookie, struct ieee80211_channel *chan,
7044 enum nl80211_channel_type channel_type, gfp_t gfp)
7045{
7046 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
7047 rdev, netdev, cookie, chan,
7048 channel_type, 0, gfp);
7049}
7050
98b62183
JB		 7051void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
7052 struct net_device *dev, const u8 *mac_addr,
7053 struct station_info *sinfo, gfp_t gfp)
7054{
7055 struct sk_buff *msg;
7056
7057 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7058 if (!msg)
7059 return;
7060
7061 if (nl80211_send_station(msg, 0, 0, 0, dev, mac_addr, sinfo) < 0) {
7062 nlmsg_free(msg);
7063 return;
7064 }
7065
7066 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7067 nl80211_mlme_mcgrp.id, gfp);
7068}
7069
ec15e68b
JM		 7070void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
7071 struct net_device *dev, const u8 *mac_addr,
7072 gfp_t gfp)
7073{
7074 struct sk_buff *msg;
7075 void *hdr;
7076
7077 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7078 if (!msg)
7079 return;
7080
7081 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
7082 if (!hdr) {
7083 nlmsg_free(msg);
7084 return;
7085 }
7086
7087 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
7088 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
7089
7090 if (genlmsg_end(msg, hdr) < 0) {
7091 nlmsg_free(msg);
7092 return;
7093 }
7094
7095 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7096 nl80211_mlme_mcgrp.id, gfp);
7097 return;
7098
7099 nla_put_failure:
7100 genlmsg_cancel(msg, hdr);
7101 nlmsg_free(msg);
7102}
7103
2e161f78
JB		 7104int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
7105 struct net_device *netdev, u32 nlpid,
7106 int freq, const u8 *buf, size_t len, gfp_t gfp)
026331c4
JM		 7107{
7108 struct sk_buff *msg;
7109 void *hdr;
7110 int err;
7111
7112 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7113 if (!msg)
7114 return -ENOMEM;
7115
2e161f78 7116 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 7117 if (!hdr) {
7118 nlmsg_free(msg);
7119 return -ENOMEM;
7120 }
7121
7122 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7123 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7124 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, freq);
7125 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
7126
7127 err = genlmsg_end(msg, hdr);
7128 if (err < 0) {
7129 nlmsg_free(msg);
7130 return err;
7131 }
7132
7133 err = genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
7134 if (err < 0)
7135 return err;
7136 return 0;
7137
7138 nla_put_failure:
7139 genlmsg_cancel(msg, hdr);
7140 nlmsg_free(msg);
7141 return -ENOBUFS;
7142}
7143
2e161f78
JB		 7144void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
7145 struct net_device *netdev, u64 cookie,
7146 const u8 *buf, size_t len, bool ack,
7147 gfp_t gfp)
026331c4
JM		 7148{
7149 struct sk_buff *msg;
7150 void *hdr;
7151
7152 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7153 if (!msg)
7154 return;
7155
2e161f78 7156 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 7157 if (!hdr) {
7158 nlmsg_free(msg);
7159 return;
7160 }
7161
7162 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7163 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7164 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
7165 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
7166 if (ack)
7167 NLA_PUT_FLAG(msg, NL80211_ATTR_ACK);
7168
7169 if (genlmsg_end(msg, hdr) < 0) {
7170 nlmsg_free(msg);
7171 return;
7172 }
7173
7174 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
7175 return;
7176
7177 nla_put_failure:
7178 genlmsg_cancel(msg, hdr);
7179 nlmsg_free(msg);
7180}
7181
d6dc1a38
JO		 7182void
7183nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
7184 struct net_device *netdev,
7185 enum nl80211_cqm_rssi_threshold_event rssi_event,
7186 gfp_t gfp)
7187{
7188 struct sk_buff *msg;
7189 struct nlattr *pinfoattr;
7190 void *hdr;
7191
7192 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7193 if (!msg)
7194 return;
7195
7196 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
7197 if (!hdr) {
7198 nlmsg_free(msg);
7199 return;
7200 }
7201
7202 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7203 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7204
7205 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
7206 if (!pinfoattr)
7207 goto nla_put_failure;
7208
7209 NLA_PUT_U32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
7210 rssi_event);
7211
7212 nla_nest_end(msg, pinfoattr);
7213
7214 if (genlmsg_end(msg, hdr) < 0) {
7215 nlmsg_free(msg);
7216 return;
7217 }
7218
7219 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7220 nl80211_mlme_mcgrp.id, gfp);
7221 return;
7222
7223 nla_put_failure:
7224 genlmsg_cancel(msg, hdr);
7225 nlmsg_free(msg);
7226}
7227
e5497d76
JB		 7228void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
7229 struct net_device *netdev, const u8 *bssid,
7230 const u8 *replay_ctr, gfp_t gfp)
7231{
7232 struct sk_buff *msg;
7233 struct nlattr *rekey_attr;
7234 void *hdr;
7235
7236 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7237 if (!msg)
7238 return;
7239
7240 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
7241 if (!hdr) {
7242 nlmsg_free(msg);
7243 return;
7244 }
7245
7246 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7247 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7248 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
7249
7250 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
7251 if (!rekey_attr)
7252 goto nla_put_failure;
7253
7254 NLA_PUT(msg, NL80211_REKEY_DATA_REPLAY_CTR,
7255 NL80211_REPLAY_CTR_LEN, replay_ctr);
7256
7257 nla_nest_end(msg, rekey_attr);
7258
7259 if (genlmsg_end(msg, hdr) < 0) {
7260 nlmsg_free(msg);
7261 return;
7262 }
7263
7264 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7265 nl80211_mlme_mcgrp.id, gfp);
7266 return;
7267
7268 nla_put_failure:
7269 genlmsg_cancel(msg, hdr);
7270 nlmsg_free(msg);
7271}
7272
c9df56b4
JM		 7273void nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
7274 struct net_device *netdev, int index,
7275 const u8 *bssid, bool preauth, gfp_t gfp)
7276{
7277 struct sk_buff *msg;
7278 struct nlattr *attr;
7279 void *hdr;
7280
7281 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7282 if (!msg)
7283 return;
7284
7285 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
7286 if (!hdr) {
7287 nlmsg_free(msg);
7288 return;
7289 }
7290
7291 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7292 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7293
7294 attr = nla_nest_start(msg, NL80211_ATTR_PMKSA_CANDIDATE);
7295 if (!attr)
7296 goto nla_put_failure;
7297
7298 NLA_PUT_U32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index);
7299 NLA_PUT(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid);
7300 if (preauth)
7301 NLA_PUT_FLAG(msg, NL80211_PMKSA_CANDIDATE_PREAUTH);
7302
7303 nla_nest_end(msg, attr);
7304
7305 if (genlmsg_end(msg, hdr) < 0) {
7306 nlmsg_free(msg);
7307 return;
7308 }
7309
7310 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7311 nl80211_mlme_mcgrp.id, gfp);
7312 return;
7313
7314 nla_put_failure:
7315 genlmsg_cancel(msg, hdr);
7316 nlmsg_free(msg);
7317}
7318
c063dbf5
JB		 7319void
7320nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
7321 struct net_device *netdev, const u8 *peer,
7322 u32 num_packets, gfp_t gfp)
7323{
7324 struct sk_buff *msg;
7325 struct nlattr *pinfoattr;
7326 void *hdr;
7327
7328 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7329 if (!msg)
7330 return;
7331
7332 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
7333 if (!hdr) {
7334 nlmsg_free(msg);
7335 return;
7336 }
7337
7338 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7339 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7340 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, peer);
7341
7342 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
7343 if (!pinfoattr)
7344 goto nla_put_failure;
7345
7346 NLA_PUT_U32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets);
7347
7348 nla_nest_end(msg, pinfoattr);
7349
7350 if (genlmsg_end(msg, hdr) < 0) {
7351 nlmsg_free(msg);
7352 return;
7353 }
7354
7355 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7356 nl80211_mlme_mcgrp.id, gfp);
7357 return;
7358
7359 nla_put_failure:
7360 genlmsg_cancel(msg, hdr);
7361 nlmsg_free(msg);
7362}
7363
026331c4
JM		 7364static int nl80211_netlink_notify(struct notifier_block * nb,
7365 unsigned long state,
7366 void *_notify)
7367{
7368 struct netlink_notify *notify = _notify;
7369 struct cfg80211_registered_device *rdev;
7370 struct wireless_dev *wdev;
7371
7372 if (state != NETLINK_URELEASE)
7373 return NOTIFY_DONE;
7374
7375 rcu_read_lock();
7376
7377 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list)
7378 list_for_each_entry_rcu(wdev, &rdev->netdev_list, list)
2e161f78 7379 cfg80211_mlme_unregister_socket(wdev, notify->pid);
026331c4
JM		 7380
7381 rcu_read_unlock();
7382
7383 return NOTIFY_DONE;
7384}
7385
7386static struct notifier_block nl80211_netlink_notifier = {
7387 .notifier_call = nl80211_netlink_notify,
7388};
7389
55682965
JB		 7390/* initialisation/exit functions */
7391
7392int nl80211_init(void)
7393{
0d63cbb5 7394 int err;
55682965 7395
0d63cbb5
MM		 7396 err = genl_register_family_with_ops(&nl80211_fam,
7397 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 7398 if (err)
7399 return err;
7400
55682965
JB		 7401 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
7402 if (err)
7403 goto err_out;
7404
2a519311
JB		 7405 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
7406 if (err)
7407 goto err_out;
7408
73d54c9e
LR		 7409 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
7410 if (err)
7411 goto err_out;
7412
6039f6d2
JM		 7413 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
7414 if (err)
7415 goto err_out;
7416
aff89a9b
JB		 7417#ifdef CONFIG_NL80211_TESTMODE
7418 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
7419 if (err)
7420 goto err_out;
7421#endif
7422
026331c4
JM		 7423 err = netlink_register_notifier(&nl80211_netlink_notifier);
7424 if (err)
7425 goto err_out;
7426
55682965
JB		 7427 return 0;
7428 err_out:
7429 genl_unregister_family(&nl80211_fam);
7430 return err;
7431}
7432
7433void nl80211_exit(void)
7434{
026331c4 7435 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 7436 genl_unregister_family(&nl80211_fam);
7437}
Ubuntu Eoan Linux kernel mirror