]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - net/wireless/nl80211.c
projects / mirror_ubuntu-bionic-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
mac80211: allow DMA optimisation
[mirror_ubuntu-bionic-kernel.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
08645126 4 * Copyright 2006-2009 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
55682965
JB		 10#include <linux/list.h>
11#include <linux/if_ether.h>
12#include <linux/ieee80211.h>
13#include <linux/nl80211.h>
14#include <linux/rtnetlink.h>
15#include <linux/netlink.h>
2a519311 16#include <linux/etherdevice.h>
463d0183 17#include <net/net_namespace.h>
55682965
JB		 18#include <net/genetlink.h>
19#include <net/cfg80211.h>
463d0183 20#include <net/sock.h>
55682965
JB		 21#include "core.h"
22#include "nl80211.h"
b2e1b302 23#include "reg.h"
55682965
JB		 24
25/* the netlink family */
26static struct genl_family nl80211_fam = {
27 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
28 .name = "nl80211", /* have users key off the name instead */
29 .hdrsize = 0, /* no private header */
30 .version = 1, /* no particular meaning now */
31 .maxattr = NL80211_ATTR_MAX,
463d0183 32 .netnsok = true,
55682965
JB		 33};
34
79c97e97 35/* internal helper: get rdev and dev */
463d0183 36static int get_rdev_dev_by_info_ifindex(struct genl_info *info,
79c97e97 37 struct cfg80211_registered_device **rdev,
55682965
JB		 38 struct net_device **dev)
39{
463d0183 40 struct nlattr **attrs = info->attrs;
55682965
JB		 41 int ifindex;
42
bba95fef 43 if (!attrs[NL80211_ATTR_IFINDEX])
55682965
JB		 44 return -EINVAL;
45
bba95fef 46 ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
463d0183 47 *dev = dev_get_by_index(genl_info_net(info), ifindex);
55682965
JB		 48 if (!*dev)
49 return -ENODEV;
50
463d0183 51 *rdev = cfg80211_get_dev_from_ifindex(genl_info_net(info), ifindex);
79c97e97 52 if (IS_ERR(*rdev)) {
55682965 53 dev_put(*dev);
79c97e97 54 return PTR_ERR(*rdev);
55682965
JB		 55 }
56
57 return 0;
58}
59
60/* policy for the attributes */
61static struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] __read_mostly = {
62 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
63 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 64 .len = 20-1 },
31888487 65 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
72bdcf34 66 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 67 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
b9a5f8ca
JM		 68 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
69 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
70 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
71 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
55682965
JB		 72
73 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
74 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
75 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f
JB		 76
77 [NL80211_ATTR_MAC] = { .type = NLA_BINARY, .len = ETH_ALEN },
3e5d7649 78 [NL80211_ATTR_PREV_BSSID] = { .type = NLA_BINARY, .len = ETH_ALEN },
41ade00f 79
b9454e83 80 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 81 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
82 .len = WLAN_MAX_KEY_LEN },
83 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
84 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
85 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
9f26a952 86 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
ed1b6cc7
JB		 87
88 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
89 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
90 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
91 .len = IEEE80211_MAX_DATA_LEN },
92 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
93 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 94 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
95 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
96 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
97 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
98 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 99 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 100 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 101 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6
LCC		 102 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
103 .len = IEEE80211_MAX_MESH_ID_LEN },
104 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 105
b2e1b302
LR		 106 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
107 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
108
9f1ba906
JM		 109 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
110 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
111 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 112 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
113 .len = NL80211_MAX_SUPP_RATES },
36aedc90 114
93da9cc1 115 [NL80211_ATTR_MESH_PARAMS] = { .type = NLA_NESTED },
116
36aedc90
JM		 117 [NL80211_ATTR_HT_CAPABILITY] = { .type = NLA_BINARY,
118 .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 119
120 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
121 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
122 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 123 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
124 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 125
126 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
127 .len = IEEE80211_MAX_SSID_LEN },
128 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
129 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 130 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 131 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 132 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 133 [NL80211_ATTR_STA_FLAGS2] = {
134 .len = sizeof(struct nl80211_sta_flag_update),
135 },
3f77316c 136 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
b23aa676
SO		 137 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
138 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
139 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 140 [NL80211_ATTR_PID] = { .type = NLA_U32 },
55682965
JB		 141};
142
b9454e83
JB		 143/* policy for the attributes */
144static struct nla_policy
145nl80211_key_policy[NL80211_KEY_MAX + 1] __read_mostly = {
fffd0934 146 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 147 [NL80211_KEY_IDX] = { .type = NLA_U8 },
148 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
149 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
150 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
151 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
152};
153
f4a11bb0
JB		 154/* IE validation */
155static bool is_valid_ie_attr(const struct nlattr *attr)
156{
157 const u8 *pos;
158 int len;
159
160 if (!attr)
161 return true;
162
163 pos = nla_data(attr);
164 len = nla_len(attr);
165
166 while (len) {
167 u8 elemlen;
168
169 if (len < 2)
170 return false;
171 len -= 2;
172
173 elemlen = pos[1];
174 if (elemlen > len)
175 return false;
176
177 len -= elemlen;
178 pos += 2 + elemlen;
179 }
180
181 return true;
182}
183
55682965
JB		 184/* message building helper */
185static inline void *nl80211hdr_put(struct sk_buff *skb, u32 pid, u32 seq,
186 int flags, u8 cmd)
187{
188 /* since there is no private header just add the generic one */
189 return genlmsg_put(skb, pid, seq, &nl80211_fam, flags, cmd);
190}
191
5dab3b8a
LR		 192static int nl80211_msg_put_channel(struct sk_buff *msg,
193 struct ieee80211_channel *chan)
194{
195 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_FREQ,
196 chan->center_freq);
197
198 if (chan->flags & IEEE80211_CHAN_DISABLED)
199 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_DISABLED);
200 if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN)
201 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN);
202 if (chan->flags & IEEE80211_CHAN_NO_IBSS)
203 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_NO_IBSS);
204 if (chan->flags & IEEE80211_CHAN_RADAR)
205 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_RADAR);
206
207 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
208 DBM_TO_MBM(chan->max_power));
209
210 return 0;
211
212 nla_put_failure:
213 return -ENOBUFS;
214}
215
55682965
JB		 216/* netlink command implementations */
217
b9454e83
JB		 218struct key_parse {
219 struct key_params p;
220 int idx;
221 bool def, defmgmt;
222};
223
224static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
225{
226 struct nlattr *tb[NL80211_KEY_MAX + 1];
227 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
228 nl80211_key_policy);
229 if (err)
230 return err;
231
232 k->def = !!tb[NL80211_KEY_DEFAULT];
233 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
234
235 if (tb[NL80211_KEY_IDX])
236 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
237
238 if (tb[NL80211_KEY_DATA]) {
239 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
240 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
241 }
242
243 if (tb[NL80211_KEY_SEQ]) {
244 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
245 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
246 }
247
248 if (tb[NL80211_KEY_CIPHER])
249 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
250
251 return 0;
252}
253
254static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
255{
256 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
257 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
258 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
259 }
260
261 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
262 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
263 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
264 }
265
266 if (info->attrs[NL80211_ATTR_KEY_IDX])
267 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
268
269 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
270 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
271
272 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
273 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
274
275 return 0;
276}
277
278static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
279{
280 int err;
281
282 memset(k, 0, sizeof(*k));
283 k->idx = -1;
284
285 if (info->attrs[NL80211_ATTR_KEY])
286 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
287 else
288 err = nl80211_parse_key_old(info, k);
289
290 if (err)
291 return err;
292
293 if (k->def && k->defmgmt)
294 return -EINVAL;
295
296 if (k->idx != -1) {
297 if (k->defmgmt) {
298 if (k->idx < 4 || k->idx > 5)
299 return -EINVAL;
300 } else if (k->def) {
301 if (k->idx < 0 || k->idx > 3)
302 return -EINVAL;
303 } else {
304 if (k->idx < 0 || k->idx > 5)
305 return -EINVAL;
306 }
307 }
308
309 return 0;
310}
311
fffd0934
JB		 312static struct cfg80211_cached_keys *
313nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
314 struct nlattr *keys)
315{
316 struct key_parse parse;
317 struct nlattr *key;
318 struct cfg80211_cached_keys *result;
319 int rem, err, def = 0;
320
321 result = kzalloc(sizeof(*result), GFP_KERNEL);
322 if (!result)
323 return ERR_PTR(-ENOMEM);
324
325 result->def = -1;
326 result->defmgmt = -1;
327
328 nla_for_each_nested(key, keys, rem) {
329 memset(&parse, 0, sizeof(parse));
330 parse.idx = -1;
331
332 err = nl80211_parse_key_new(key, &parse);
333 if (err)
334 goto error;
335 err = -EINVAL;
336 if (!parse.p.key)
337 goto error;
338 if (parse.idx < 0 || parse.idx > 4)
339 goto error;
340 if (parse.def) {
341 if (def)
342 goto error;
343 def = 1;
344 result->def = parse.idx;
345 } else if (parse.defmgmt)
346 goto error;
347 err = cfg80211_validate_key_settings(rdev, &parse.p,
348 parse.idx, NULL);
349 if (err)
350 goto error;
351 result->params[parse.idx].cipher = parse.p.cipher;
352 result->params[parse.idx].key_len = parse.p.key_len;
353 result->params[parse.idx].key = result->data[parse.idx];
354 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
355 }
356
357 return result;
358 error:
359 kfree(result);
360 return ERR_PTR(err);
361}
362
363static int nl80211_key_allowed(struct wireless_dev *wdev)
364{
365 ASSERT_WDEV_LOCK(wdev);
366
367 if (!netif_running(wdev->netdev))
368 return -ENETDOWN;
369
370 switch (wdev->iftype) {
371 case NL80211_IFTYPE_AP:
372 case NL80211_IFTYPE_AP_VLAN:
373 break;
374 case NL80211_IFTYPE_ADHOC:
375 if (!wdev->current_bss)
376 return -ENOLINK;
377 break;
378 case NL80211_IFTYPE_STATION:
379 if (wdev->sme_state != CFG80211_SME_CONNECTED)
380 return -ENOLINK;
381 break;
382 default:
383 return -EINVAL;
384 }
385
386 return 0;
387}
388
55682965
JB		 389static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags,
390 struct cfg80211_registered_device *dev)
391{
392 void *hdr;
ee688b00
JB		 393 struct nlattr *nl_bands, *nl_band;
394 struct nlattr *nl_freqs, *nl_freq;
395 struct nlattr *nl_rates, *nl_rate;
f59ac048 396 struct nlattr *nl_modes;
8fdc621d 397 struct nlattr *nl_cmds;
ee688b00
JB		 398 enum ieee80211_band band;
399 struct ieee80211_channel *chan;
400 struct ieee80211_rate *rate;
401 int i;
f59ac048 402 u16 ifmodes = dev->wiphy.interface_modes;
55682965
JB		 403
404 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_WIPHY);
405 if (!hdr)
406 return -1;
407
b5850a7a 408 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx);
55682965 409 NLA_PUT_STRING(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy));
b9a5f8ca 410
f5ea9120
JB		 411 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
412 cfg80211_rdev_list_generation);
413
b9a5f8ca
JM		 414 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
415 dev->wiphy.retry_short);
416 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
417 dev->wiphy.retry_long);
418 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
419 dev->wiphy.frag_threshold);
420 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
421 dev->wiphy.rts_threshold);
422
2a519311
JB		 423 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
424 dev->wiphy.max_scan_ssids);
18a83659
JB		 425 NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
426 dev->wiphy.max_scan_ie_len);
ee688b00 427
25e47c18
JB		 428 NLA_PUT(msg, NL80211_ATTR_CIPHER_SUITES,
429 sizeof(u32) * dev->wiphy.n_cipher_suites,
430 dev->wiphy.cipher_suites);
431
f59ac048
LR		 432 nl_modes = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_IFTYPES);
433 if (!nl_modes)
434 goto nla_put_failure;
435
436 i = 0;
437 while (ifmodes) {
438 if (ifmodes & 1)
439 NLA_PUT_FLAG(msg, i);
440 ifmodes >>= 1;
441 i++;
442 }
443
444 nla_nest_end(msg, nl_modes);
445
ee688b00
JB		 446 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
447 if (!nl_bands)
448 goto nla_put_failure;
449
450 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
451 if (!dev->wiphy.bands[band])
452 continue;
453
454 nl_band = nla_nest_start(msg, band);
455 if (!nl_band)
456 goto nla_put_failure;
457
d51626df
JB		 458 /* add HT info */
459 if (dev->wiphy.bands[band]->ht_cap.ht_supported) {
460 NLA_PUT(msg, NL80211_BAND_ATTR_HT_MCS_SET,
461 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
462 &dev->wiphy.bands[band]->ht_cap.mcs);
463 NLA_PUT_U16(msg, NL80211_BAND_ATTR_HT_CAPA,
464 dev->wiphy.bands[band]->ht_cap.cap);
465 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
466 dev->wiphy.bands[band]->ht_cap.ampdu_factor);
467 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
468 dev->wiphy.bands[band]->ht_cap.ampdu_density);
469 }
470
ee688b00
JB		 471 /* add frequencies */
472 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
473 if (!nl_freqs)
474 goto nla_put_failure;
475
476 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
477 nl_freq = nla_nest_start(msg, i);
478 if (!nl_freq)
479 goto nla_put_failure;
480
481 chan = &dev->wiphy.bands[band]->channels[i];
5dab3b8a
LR		 482
483 if (nl80211_msg_put_channel(msg, chan))
484 goto nla_put_failure;
e2f367f2 485
ee688b00
JB		 486 nla_nest_end(msg, nl_freq);
487 }
488
489 nla_nest_end(msg, nl_freqs);
490
491 /* add bitrates */
492 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
493 if (!nl_rates)
494 goto nla_put_failure;
495
496 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
497 nl_rate = nla_nest_start(msg, i);
498 if (!nl_rate)
499 goto nla_put_failure;
500
501 rate = &dev->wiphy.bands[band]->bitrates[i];
502 NLA_PUT_U32(msg, NL80211_BITRATE_ATTR_RATE,
503 rate->bitrate);
504 if (rate->flags & IEEE80211_RATE_SHORT_PREAMBLE)
505 NLA_PUT_FLAG(msg,
506 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE);
507
508 nla_nest_end(msg, nl_rate);
509 }
510
511 nla_nest_end(msg, nl_rates);
512
513 nla_nest_end(msg, nl_band);
514 }
515 nla_nest_end(msg, nl_bands);
516
8fdc621d
JB		 517 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
518 if (!nl_cmds)
519 goto nla_put_failure;
520
521 i = 0;
522#define CMD(op, n) \
523 do { \
524 if (dev->ops->op) { \
525 i++; \
526 NLA_PUT_U32(msg, i, NL80211_CMD_ ## n); \
527 } \
528 } while (0)
529
530 CMD(add_virtual_intf, NEW_INTERFACE);
531 CMD(change_virtual_intf, SET_INTERFACE);
532 CMD(add_key, NEW_KEY);
533 CMD(add_beacon, NEW_BEACON);
534 CMD(add_station, NEW_STATION);
535 CMD(add_mpath, NEW_MPATH);
536 CMD(set_mesh_params, SET_MESH_PARAMS);
537 CMD(change_bss, SET_BSS);
636a5d36
JM		 538 CMD(auth, AUTHENTICATE);
539 CMD(assoc, ASSOCIATE);
540 CMD(deauth, DEAUTHENTICATE);
541 CMD(disassoc, DISASSOCIATE);
04a773ad 542 CMD(join_ibss, JOIN_IBSS);
463d0183
JB		 543 if (dev->wiphy.netnsok) {
544 i++;
545 NLA_PUT_U32(msg, i, NL80211_CMD_SET_WIPHY_NETNS);
546 }
8fdc621d
JB		 547
548#undef CMD
b23aa676 549
6829c878 550 if (dev->ops->connect || dev->ops->auth) {
b23aa676
SO		 551 i++;
552 NLA_PUT_U32(msg, i, NL80211_CMD_CONNECT);
553 }
554
6829c878 555 if (dev->ops->disconnect || dev->ops->deauth) {
b23aa676
SO		 556 i++;
557 NLA_PUT_U32(msg, i, NL80211_CMD_DISCONNECT);
558 }
559
8fdc621d
JB		 560 nla_nest_end(msg, nl_cmds);
561
55682965
JB		 562 return genlmsg_end(msg, hdr);
563
564 nla_put_failure:
bc3ed28c
TG		 565 genlmsg_cancel(msg, hdr);
566 return -EMSGSIZE;
55682965
JB		 567}
568
569static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
570{
571 int idx = 0;
572 int start = cb->args[0];
573 struct cfg80211_registered_device *dev;
574
a1794390 575 mutex_lock(&cfg80211_mutex);
79c97e97 576 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 577 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
578 continue;
b4637271 579 if (++idx <= start)
55682965
JB		 580 continue;
581 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).pid,
582 cb->nlh->nlmsg_seq, NLM_F_MULTI,
b4637271
JV		 583 dev) < 0) {
584 idx--;
55682965 585 break;
b4637271 586 }
55682965 587 }
a1794390 588 mutex_unlock(&cfg80211_mutex);
55682965
JB		 589
590 cb->args[0] = idx;
591
592 return skb->len;
593}
594
595static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
596{
597 struct sk_buff *msg;
598 struct cfg80211_registered_device *dev;
599
600 dev = cfg80211_get_dev_from_info(info);
601 if (IS_ERR(dev))
602 return PTR_ERR(dev);
603
fd2120ca 604 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 605 if (!msg)
606 goto out_err;
607
608 if (nl80211_send_wiphy(msg, info->snd_pid, info->snd_seq, 0, dev) < 0)
609 goto out_free;
610
4d0c8aea 611 cfg80211_unlock_rdev(dev);
55682965 612
134e6375 613 return genlmsg_reply(msg, info);
55682965
JB		 614
615 out_free:
616 nlmsg_free(msg);
617 out_err:
4d0c8aea 618 cfg80211_unlock_rdev(dev);
55682965
JB		 619 return -ENOBUFS;
620}
621
31888487
JM		 622static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
623 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
624 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
625 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
626 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
627 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
628};
629
630static int parse_txq_params(struct nlattr *tb[],
631 struct ieee80211_txq_params *txq_params)
632{
633 if (!tb[NL80211_TXQ_ATTR_QUEUE] || !tb[NL80211_TXQ_ATTR_TXOP] ||
634 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
635 !tb[NL80211_TXQ_ATTR_AIFS])
636 return -EINVAL;
637
638 txq_params->queue = nla_get_u8(tb[NL80211_TXQ_ATTR_QUEUE]);
639 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
640 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
641 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
642 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
643
644 return 0;
645}
646
55682965
JB		 647static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
648{
649 struct cfg80211_registered_device *rdev;
31888487
JM		 650 int result = 0, rem_txq_params = 0;
651 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 652 u32 changed;
653 u8 retry_short = 0, retry_long = 0;
654 u32 frag_threshold = 0, rts_threshold = 0;
55682965 655
4bbf4d56 656 rtnl_lock();
55682965 657
4bbf4d56
JB		 658 mutex_lock(&cfg80211_mutex);
659
79c97e97 660 rdev = __cfg80211_rdev_from_info(info);
4bbf4d56 661 if (IS_ERR(rdev)) {
1f5fc70a 662 mutex_unlock(&cfg80211_mutex);
4bbf4d56
JB		 663 result = PTR_ERR(rdev);
664 goto unlock;
665 }
666
667 mutex_lock(&rdev->mtx);
668
669 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 670 result = cfg80211_dev_rename(
671 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 672
673 mutex_unlock(&cfg80211_mutex);
674
675 if (result)
676 goto bad_res;
31888487
JM		 677
678 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
679 struct ieee80211_txq_params txq_params;
680 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
681
682 if (!rdev->ops->set_txq_params) {
683 result = -EOPNOTSUPP;
684 goto bad_res;
685 }
686
687 nla_for_each_nested(nl_txq_params,
688 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
689 rem_txq_params) {
690 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
691 nla_data(nl_txq_params),
692 nla_len(nl_txq_params),
693 txq_params_policy);
694 result = parse_txq_params(tb, &txq_params);
695 if (result)
696 goto bad_res;
697
698 result = rdev->ops->set_txq_params(&rdev->wiphy,
699 &txq_params);
700 if (result)
701 goto bad_res;
702 }
703 }
55682965 704
72bdcf34 705 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
094d05dc 706 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
294196ab 707 u32 freq;
72bdcf34 708
306d6112
JB		 709 result = -EINVAL;
710
094d05dc
S		 711 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
712 channel_type = nla_get_u32(info->attrs[
713 NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
714 if (channel_type != NL80211_CHAN_NO_HT &&
715 channel_type != NL80211_CHAN_HT20 &&
716 channel_type != NL80211_CHAN_HT40PLUS &&
717 channel_type != NL80211_CHAN_HT40MINUS)
72bdcf34 718 goto bad_res;
72bdcf34
JM		 719 }
720
721 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
306d6112 722
59bbb6f7
JB		 723 mutex_lock(&rdev->devlist_mtx);
724 result = rdev_set_freq(rdev, freq, channel_type);
725 mutex_unlock(&rdev->devlist_mtx);
72bdcf34
JM		 726 if (result)
727 goto bad_res;
728 }
729
b9a5f8ca
JM		 730 changed = 0;
731
732 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
733 retry_short = nla_get_u8(
734 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
735 if (retry_short == 0) {
736 result = -EINVAL;
737 goto bad_res;
738 }
739 changed |= WIPHY_PARAM_RETRY_SHORT;
740 }
741
742 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
743 retry_long = nla_get_u8(
744 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
745 if (retry_long == 0) {
746 result = -EINVAL;
747 goto bad_res;
748 }
749 changed |= WIPHY_PARAM_RETRY_LONG;
750 }
751
752 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
753 frag_threshold = nla_get_u32(
754 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
755 if (frag_threshold < 256) {
756 result = -EINVAL;
757 goto bad_res;
758 }
759 if (frag_threshold != (u32) -1) {
760 /*
761 * Fragments (apart from the last one) are required to
762 * have even length. Make the fragmentation code
763 * simpler by stripping LSB should someone try to use
764 * odd threshold value.
765 */
766 frag_threshold &= ~0x1;
767 }
768 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
769 }
770
771 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
772 rts_threshold = nla_get_u32(
773 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
774 changed |= WIPHY_PARAM_RTS_THRESHOLD;
775 }
776
777 if (changed) {
778 u8 old_retry_short, old_retry_long;
779 u32 old_frag_threshold, old_rts_threshold;
780
781 if (!rdev->ops->set_wiphy_params) {
782 result = -EOPNOTSUPP;
783 goto bad_res;
784 }
785
786 old_retry_short = rdev->wiphy.retry_short;
787 old_retry_long = rdev->wiphy.retry_long;
788 old_frag_threshold = rdev->wiphy.frag_threshold;
789 old_rts_threshold = rdev->wiphy.rts_threshold;
790
791 if (changed & WIPHY_PARAM_RETRY_SHORT)
792 rdev->wiphy.retry_short = retry_short;
793 if (changed & WIPHY_PARAM_RETRY_LONG)
794 rdev->wiphy.retry_long = retry_long;
795 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
796 rdev->wiphy.frag_threshold = frag_threshold;
797 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
798 rdev->wiphy.rts_threshold = rts_threshold;
799
800 result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
801 if (result) {
802 rdev->wiphy.retry_short = old_retry_short;
803 rdev->wiphy.retry_long = old_retry_long;
804 rdev->wiphy.frag_threshold = old_frag_threshold;
805 rdev->wiphy.rts_threshold = old_rts_threshold;
806 }
807 }
72bdcf34 808
306d6112 809 bad_res:
4bbf4d56
JB		 810 mutex_unlock(&rdev->mtx);
811 unlock:
812 rtnl_unlock();
55682965
JB		 813 return result;
814}
815
816
817static int nl80211_send_iface(struct sk_buff *msg, u32 pid, u32 seq, int flags,
d726405a 818 struct cfg80211_registered_device *rdev,
55682965
JB		 819 struct net_device *dev)
820{
821 void *hdr;
822
823 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_INTERFACE);
824 if (!hdr)
825 return -1;
826
827 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
d726405a 828 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
55682965 829 NLA_PUT_STRING(msg, NL80211_ATTR_IFNAME, dev->name);
60719ffd 830 NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, dev->ieee80211_ptr->iftype);
f5ea9120
JB		 831
832 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
833 rdev->devlist_generation ^
834 (cfg80211_rdev_list_generation << 2));
835
55682965
JB		 836 return genlmsg_end(msg, hdr);
837
838 nla_put_failure:
bc3ed28c
TG		 839 genlmsg_cancel(msg, hdr);
840 return -EMSGSIZE;
55682965
JB		 841}
842
843static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
844{
845 int wp_idx = 0;
846 int if_idx = 0;
847 int wp_start = cb->args[0];
848 int if_start = cb->args[1];
f5ea9120 849 struct cfg80211_registered_device *rdev;
55682965
JB		 850 struct wireless_dev *wdev;
851
a1794390 852 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 853 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
854 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 855 continue;
bba95fef
JB		 856 if (wp_idx < wp_start) {
857 wp_idx++;
55682965 858 continue;
bba95fef 859 }
55682965
JB		 860 if_idx = 0;
861
f5ea9120
JB		 862 mutex_lock(&rdev->devlist_mtx);
863 list_for_each_entry(wdev, &rdev->netdev_list, list) {
bba95fef
JB		 864 if (if_idx < if_start) {
865 if_idx++;
55682965 866 continue;
bba95fef 867 }
55682965
JB		 868 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).pid,
869 cb->nlh->nlmsg_seq, NLM_F_MULTI,
f5ea9120
JB		 870 rdev, wdev->netdev) < 0) {
871 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 872 goto out;
873 }
874 if_idx++;
55682965 875 }
f5ea9120 876 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 877
878 wp_idx++;
55682965 879 }
bba95fef 880 out:
a1794390 881 mutex_unlock(&cfg80211_mutex);
55682965
JB		 882
883 cb->args[0] = wp_idx;
884 cb->args[1] = if_idx;
885
886 return skb->len;
887}
888
889static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
890{
891 struct sk_buff *msg;
892 struct cfg80211_registered_device *dev;
893 struct net_device *netdev;
894 int err;
895
463d0183 896 err = get_rdev_dev_by_info_ifindex(info, &dev, &netdev);
55682965
JB		 897 if (err)
898 return err;
899
fd2120ca 900 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 901 if (!msg)
902 goto out_err;
903
d726405a
JB		 904 if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
905 dev, netdev) < 0)
55682965
JB		 906 goto out_free;
907
908 dev_put(netdev);
4d0c8aea 909 cfg80211_unlock_rdev(dev);
55682965 910
134e6375 911 return genlmsg_reply(msg, info);
55682965
JB		 912
913 out_free:
914 nlmsg_free(msg);
915 out_err:
916 dev_put(netdev);
4d0c8aea 917 cfg80211_unlock_rdev(dev);
55682965
JB		 918 return -ENOBUFS;
919}
920
66f7ac50
MW		 921static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
922 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
923 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
924 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
925 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
926 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
927};
928
929static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
930{
931 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
932 int flag;
933
934 *mntrflags = 0;
935
936 if (!nla)
937 return -EINVAL;
938
939 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
940 nla, mntr_flags_policy))
941 return -EINVAL;
942
943 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
944 if (flags[flag])
945 *mntrflags |= (1<<flag);
946
947 return 0;
948}
949
55682965
JB		 950static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
951{
79c97e97 952 struct cfg80211_registered_device *rdev;
2ec600d6 953 struct vif_params params;
e36d56b6 954 int err;
04a773ad 955 enum nl80211_iftype otype, ntype;
55682965 956 struct net_device *dev;
92ffe055 957 u32 _flags, *flags = NULL;
ac7f9cfa 958 bool change = false;
55682965 959
2ec600d6
LCC		 960 memset(&params, 0, sizeof(params));
961
3b85875a
JB		 962 rtnl_lock();
963
463d0183 964 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
55682965 965 if (err)
3b85875a
JB		 966 goto unlock_rtnl;
967
04a773ad 968 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 969
723b038d 970 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 971 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 972 if (otype != ntype)
ac7f9cfa 973 change = true;
04a773ad 974 if (ntype > NL80211_IFTYPE_MAX) {
ac7f9cfa 975 err = -EINVAL;
723b038d 976 goto unlock;
ac7f9cfa 977 }
723b038d
JB		 978 }
979
79c97e97
JB		 980 if (!rdev->ops->change_virtual_intf ||
981 !(rdev->wiphy.interface_modes & (1 << ntype))) {
55682965
JB		 982 err = -EOPNOTSUPP;
983 goto unlock;
984 }
985
92ffe055 986 if (info->attrs[NL80211_ATTR_MESH_ID]) {
04a773ad 987 if (ntype != NL80211_IFTYPE_MESH_POINT) {
92ffe055
JB		 988 err = -EINVAL;
989 goto unlock;
990 }
2ec600d6
LCC		 991 params.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
992 params.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
ac7f9cfa 993 change = true;
2ec600d6
LCC		 994 }
995
92ffe055 996 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
04a773ad 997 if (ntype != NL80211_IFTYPE_MONITOR) {
92ffe055
JB		 998 err = -EINVAL;
999 goto unlock;
1000 }
1001 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1002 &_flags);
ac7f9cfa
JB		 1003 if (err)
1004 goto unlock;
1005
1006 flags = &_flags;
1007 change = true;
92ffe055 1008 }
3b85875a 1009
ac7f9cfa 1010 if (change)
79c97e97 1011 err = rdev->ops->change_virtual_intf(&rdev->wiphy, dev,
04a773ad 1012 ntype, flags, &params);
ac7f9cfa
JB		 1013 else
1014 err = 0;
60719ffd 1015
e36d56b6 1016 WARN_ON(!err && dev->ieee80211_ptr->iftype != ntype);
04a773ad 1017
e36d56b6 1018 if (!err && (ntype != otype)) {
04a773ad 1019 if (otype == NL80211_IFTYPE_ADHOC)
9d308429 1020 cfg80211_clear_ibss(dev, false);
04a773ad 1021 }
60719ffd 1022
55682965 1023 unlock:
e36d56b6 1024 dev_put(dev);
79c97e97 1025 cfg80211_unlock_rdev(rdev);
3b85875a
JB		 1026 unlock_rtnl:
1027 rtnl_unlock();
55682965
JB		 1028 return err;
1029}
1030
1031static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1032{
79c97e97 1033 struct cfg80211_registered_device *rdev;
2ec600d6 1034 struct vif_params params;
55682965
JB		 1035 int err;
1036 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 1037 u32 flags;
55682965 1038
2ec600d6
LCC		 1039 memset(&params, 0, sizeof(params));
1040
55682965
JB		 1041 if (!info->attrs[NL80211_ATTR_IFNAME])
1042 return -EINVAL;
1043
1044 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1045 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1046 if (type > NL80211_IFTYPE_MAX)
1047 return -EINVAL;
1048 }
1049
3b85875a
JB		 1050 rtnl_lock();
1051
79c97e97
JB		 1052 rdev = cfg80211_get_dev_from_info(info);
1053 if (IS_ERR(rdev)) {
1054 err = PTR_ERR(rdev);
3b85875a
JB		 1055 goto unlock_rtnl;
1056 }
55682965 1057
79c97e97
JB		 1058 if (!rdev->ops->add_virtual_intf ||
1059 !(rdev->wiphy.interface_modes & (1 << type))) {
55682965
JB		 1060 err = -EOPNOTSUPP;
1061 goto unlock;
1062 }
1063
2ec600d6
LCC		 1064 if (type == NL80211_IFTYPE_MESH_POINT &&
1065 info->attrs[NL80211_ATTR_MESH_ID]) {
1066 params.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
1067 params.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1068 }
1069
66f7ac50
MW		 1070 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
1071 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
1072 &flags);
79c97e97 1073 err = rdev->ops->add_virtual_intf(&rdev->wiphy,
66f7ac50 1074 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2ec600d6 1075 type, err ? NULL : &flags, &params);
2ec600d6 1076
55682965 1077 unlock:
79c97e97 1078 cfg80211_unlock_rdev(rdev);
3b85875a
JB		 1079 unlock_rtnl:
1080 rtnl_unlock();
55682965
JB		 1081 return err;
1082}
1083
1084static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
1085{
79c97e97 1086 struct cfg80211_registered_device *rdev;
463d0183 1087 int err;
55682965
JB		 1088 struct net_device *dev;
1089
3b85875a
JB		 1090 rtnl_lock();
1091
463d0183 1092 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
55682965 1093 if (err)
3b85875a 1094 goto unlock_rtnl;
55682965 1095
79c97e97 1096 if (!rdev->ops->del_virtual_intf) {
55682965
JB		 1097 err = -EOPNOTSUPP;
1098 goto out;
1099 }
1100
463d0183 1101 err = rdev->ops->del_virtual_intf(&rdev->wiphy, dev);
55682965
JB		 1102
1103 out:
79c97e97 1104 cfg80211_unlock_rdev(rdev);
463d0183 1105 dev_put(dev);
3b85875a
JB		 1106 unlock_rtnl:
1107 rtnl_unlock();
55682965
JB		 1108 return err;
1109}
1110
41ade00f
JB		 1111struct get_key_cookie {
1112 struct sk_buff *msg;
1113 int error;
b9454e83 1114 int idx;
41ade00f
JB		 1115};
1116
1117static void get_key_callback(void *c, struct key_params *params)
1118{
b9454e83 1119 struct nlattr *key;
41ade00f
JB		 1120 struct get_key_cookie *cookie = c;
1121
1122 if (params->key)
1123 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_DATA,
1124 params->key_len, params->key);
1125
1126 if (params->seq)
1127 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_SEQ,
1128 params->seq_len, params->seq);
1129
1130 if (params->cipher)
1131 NLA_PUT_U32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
1132 params->cipher);
1133
b9454e83
JB		 1134 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
1135 if (!key)
1136 goto nla_put_failure;
1137
1138 if (params->key)
1139 NLA_PUT(cookie->msg, NL80211_KEY_DATA,
1140 params->key_len, params->key);
1141
1142 if (params->seq)
1143 NLA_PUT(cookie->msg, NL80211_KEY_SEQ,
1144 params->seq_len, params->seq);
1145
1146 if (params->cipher)
1147 NLA_PUT_U32(cookie->msg, NL80211_KEY_CIPHER,
1148 params->cipher);
1149
1150 NLA_PUT_U8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx);
1151
1152 nla_nest_end(cookie->msg, key);
1153
41ade00f
JB		 1154 return;
1155 nla_put_failure:
1156 cookie->error = 1;
1157}
1158
1159static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
1160{
79c97e97 1161 struct cfg80211_registered_device *rdev;
41ade00f
JB		 1162 int err;
1163 struct net_device *dev;
1164 u8 key_idx = 0;
1165 u8 *mac_addr = NULL;
1166 struct get_key_cookie cookie = {
1167 .error = 0,
1168 };
1169 void *hdr;
1170 struct sk_buff *msg;
1171
1172 if (info->attrs[NL80211_ATTR_KEY_IDX])
1173 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1174
3cfcf6ac 1175 if (key_idx > 5)
41ade00f
JB		 1176 return -EINVAL;
1177
1178 if (info->attrs[NL80211_ATTR_MAC])
1179 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1180
3b85875a
JB		 1181 rtnl_lock();
1182
463d0183 1183 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
41ade00f 1184 if (err)
3b85875a 1185 goto unlock_rtnl;
41ade00f 1186
79c97e97 1187 if (!rdev->ops->get_key) {
41ade00f
JB		 1188 err = -EOPNOTSUPP;
1189 goto out;
1190 }
1191
fd2120ca 1192 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
41ade00f
JB		 1193 if (!msg) {
1194 err = -ENOMEM;
1195 goto out;
1196 }
1197
1198 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
1199 NL80211_CMD_NEW_KEY);
1200
1201 if (IS_ERR(hdr)) {
1202 err = PTR_ERR(hdr);
6c95e2a2 1203 goto free_msg;
41ade00f
JB		 1204 }
1205
1206 cookie.msg = msg;
b9454e83 1207 cookie.idx = key_idx;
41ade00f
JB		 1208
1209 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
1210 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_idx);
1211 if (mac_addr)
1212 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
1213
79c97e97 1214 err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, mac_addr,
41ade00f 1215 &cookie, get_key_callback);
41ade00f
JB		 1216
1217 if (err)
6c95e2a2 1218 goto free_msg;
41ade00f
JB		 1219
1220 if (cookie.error)
1221 goto nla_put_failure;
1222
1223 genlmsg_end(msg, hdr);
134e6375 1224 err = genlmsg_reply(msg, info);
41ade00f
JB		 1225 goto out;
1226
1227 nla_put_failure:
1228 err = -ENOBUFS;
6c95e2a2 1229 free_msg:
41ade00f
JB		 1230 nlmsg_free(msg);
1231 out:
79c97e97 1232 cfg80211_unlock_rdev(rdev);
41ade00f 1233 dev_put(dev);
3b85875a
JB		 1234 unlock_rtnl:
1235 rtnl_unlock();
1236
41ade00f
JB		 1237 return err;
1238}
1239
1240static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
1241{
79c97e97 1242 struct cfg80211_registered_device *rdev;
b9454e83 1243 struct key_parse key;
41ade00f
JB		 1244 int err;
1245 struct net_device *dev;
3cfcf6ac
JM		 1246 int (*func)(struct wiphy *wiphy, struct net_device *netdev,
1247 u8 key_index);
41ade00f 1248
b9454e83
JB		 1249 err = nl80211_parse_key(info, &key);
1250 if (err)
1251 return err;
41ade00f 1252
b9454e83 1253 if (key.idx < 0)
41ade00f
JB		 1254 return -EINVAL;
1255
b9454e83
JB		 1256 /* only support setting default key */
1257 if (!key.def && !key.defmgmt)
41ade00f
JB		 1258 return -EINVAL;
1259
3b85875a
JB		 1260 rtnl_lock();
1261
463d0183 1262 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
41ade00f 1263 if (err)
3b85875a 1264 goto unlock_rtnl;
41ade00f 1265
b9454e83 1266 if (key.def)
79c97e97 1267 func = rdev->ops->set_default_key;
3cfcf6ac 1268 else
79c97e97 1269 func = rdev->ops->set_default_mgmt_key;
3cfcf6ac
JM		 1270
1271 if (!func) {
41ade00f
JB		 1272 err = -EOPNOTSUPP;
1273 goto out;
1274 }
1275
fffd0934
JB		 1276 wdev_lock(dev->ieee80211_ptr);
1277 err = nl80211_key_allowed(dev->ieee80211_ptr);
1278 if (!err)
1279 err = func(&rdev->wiphy, dev, key.idx);
1280
08645126
JB		 1281#ifdef CONFIG_WIRELESS_EXT
1282 if (!err) {
79c97e97 1283 if (func == rdev->ops->set_default_key)
b9454e83 1284 dev->ieee80211_ptr->wext.default_key = key.idx;
08645126 1285 else
b9454e83 1286 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126
JB		 1287 }
1288#endif
fffd0934 1289 wdev_unlock(dev->ieee80211_ptr);
41ade00f
JB		 1290
1291 out:
79c97e97 1292 cfg80211_unlock_rdev(rdev);
41ade00f 1293 dev_put(dev);
3b85875a
JB		 1294
1295 unlock_rtnl:
1296 rtnl_unlock();
1297
41ade00f
JB		 1298 return err;
1299}
1300
1301static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
1302{
79c97e97 1303 struct cfg80211_registered_device *rdev;
fffd0934 1304 int err;
41ade00f 1305 struct net_device *dev;
b9454e83 1306 struct key_parse key;
41ade00f
JB		 1307 u8 *mac_addr = NULL;
1308
b9454e83
JB		 1309 err = nl80211_parse_key(info, &key);
1310 if (err)
1311 return err;
41ade00f 1312
b9454e83 1313 if (!key.p.key)
41ade00f
JB		 1314 return -EINVAL;
1315
41ade00f
JB		 1316 if (info->attrs[NL80211_ATTR_MAC])
1317 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1318
3b85875a
JB		 1319 rtnl_lock();
1320
463d0183 1321 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
41ade00f 1322 if (err)
3b85875a 1323 goto unlock_rtnl;
41ade00f 1324
fffd0934
JB		 1325 if (!rdev->ops->add_key) {
1326 err = -EOPNOTSUPP;
25e47c18
JB		 1327 goto out;
1328 }
1329
fffd0934
JB		 1330 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx, mac_addr)) {
1331 err = -EINVAL;
41ade00f
JB		 1332 goto out;
1333 }
1334
fffd0934
JB		 1335 wdev_lock(dev->ieee80211_ptr);
1336 err = nl80211_key_allowed(dev->ieee80211_ptr);
1337 if (!err)
1338 err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
1339 mac_addr, &key.p);
1340 wdev_unlock(dev->ieee80211_ptr);
41ade00f
JB		 1341
1342 out:
79c97e97 1343 cfg80211_unlock_rdev(rdev);
41ade00f 1344 dev_put(dev);
3b85875a
JB		 1345 unlock_rtnl:
1346 rtnl_unlock();
1347
41ade00f
JB		 1348 return err;
1349}
1350
1351static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
1352{
79c97e97 1353 struct cfg80211_registered_device *rdev;
41ade00f
JB		 1354 int err;
1355 struct net_device *dev;
41ade00f 1356 u8 *mac_addr = NULL;
b9454e83 1357 struct key_parse key;
41ade00f 1358
b9454e83
JB		 1359 err = nl80211_parse_key(info, &key);
1360 if (err)
1361 return err;
41ade00f
JB		 1362
1363 if (info->attrs[NL80211_ATTR_MAC])
1364 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1365
3b85875a
JB		 1366 rtnl_lock();
1367
463d0183 1368 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
41ade00f 1369 if (err)
3b85875a 1370 goto unlock_rtnl;
41ade00f 1371
79c97e97 1372 if (!rdev->ops->del_key) {
41ade00f
JB		 1373 err = -EOPNOTSUPP;
1374 goto out;
1375 }
1376
fffd0934
JB		 1377 wdev_lock(dev->ieee80211_ptr);
1378 err = nl80211_key_allowed(dev->ieee80211_ptr);
1379 if (!err)
1380 err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx, mac_addr);
41ade00f 1381
08645126
JB		 1382#ifdef CONFIG_WIRELESS_EXT
1383 if (!err) {
b9454e83 1384 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 1385 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 1386 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 1387 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
1388 }
1389#endif
fffd0934 1390 wdev_unlock(dev->ieee80211_ptr);
08645126 1391
41ade00f 1392 out:
79c97e97 1393 cfg80211_unlock_rdev(rdev);
41ade00f 1394 dev_put(dev);
3b85875a
JB		 1395
1396 unlock_rtnl:
1397 rtnl_unlock();
1398
41ade00f
JB		 1399 return err;
1400}
1401
ed1b6cc7
JB		 1402static int nl80211_addset_beacon(struct sk_buff *skb, struct genl_info *info)
1403{
1404 int (*call)(struct wiphy *wiphy, struct net_device *dev,
1405 struct beacon_parameters *info);
79c97e97 1406 struct cfg80211_registered_device *rdev;
ed1b6cc7
JB		 1407 int err;
1408 struct net_device *dev;
1409 struct beacon_parameters params;
1410 int haveinfo = 0;
1411
f4a11bb0
JB		 1412 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]))
1413 return -EINVAL;
1414
3b85875a
JB		 1415 rtnl_lock();
1416
463d0183 1417 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
ed1b6cc7 1418 if (err)
3b85875a 1419 goto unlock_rtnl;
ed1b6cc7 1420
eec60b03
JM		 1421 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
1422 err = -EOPNOTSUPP;
1423 goto out;
1424 }
1425
ed1b6cc7
JB		 1426 switch (info->genlhdr->cmd) {
1427 case NL80211_CMD_NEW_BEACON:
1428 /* these are required for NEW_BEACON */
1429 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
1430 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
1431 !info->attrs[NL80211_ATTR_BEACON_HEAD]) {
1432 err = -EINVAL;
1433 goto out;
1434 }
1435
79c97e97 1436 call = rdev->ops->add_beacon;
ed1b6cc7
JB		 1437 break;
1438 case NL80211_CMD_SET_BEACON:
79c97e97 1439 call = rdev->ops->set_beacon;
ed1b6cc7
JB		 1440 break;
1441 default:
1442 WARN_ON(1);
1443 err = -EOPNOTSUPP;
1444 goto out;
1445 }
1446
1447 if (!call) {
1448 err = -EOPNOTSUPP;
1449 goto out;
1450 }
1451
1452 memset(&params, 0, sizeof(params));
1453
1454 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
1455 params.interval =
1456 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
1457 haveinfo = 1;
1458 }
1459
1460 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
1461 params.dtim_period =
1462 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
1463 haveinfo = 1;
1464 }
1465
1466 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
1467 params.head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
1468 params.head_len =
1469 nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
1470 haveinfo = 1;
1471 }
1472
1473 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
1474 params.tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
1475 params.tail_len =
1476 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
1477 haveinfo = 1;
1478 }
1479
1480 if (!haveinfo) {
1481 err = -EINVAL;
1482 goto out;
1483 }
1484
79c97e97 1485 err = call(&rdev->wiphy, dev, &params);
ed1b6cc7
JB		 1486
1487 out:
79c97e97 1488 cfg80211_unlock_rdev(rdev);
ed1b6cc7 1489 dev_put(dev);
3b85875a
JB		 1490 unlock_rtnl:
1491 rtnl_unlock();
1492
ed1b6cc7
JB		 1493 return err;
1494}
1495
1496static int nl80211_del_beacon(struct sk_buff *skb, struct genl_info *info)
1497{
79c97e97 1498 struct cfg80211_registered_device *rdev;
ed1b6cc7
JB		 1499 int err;
1500 struct net_device *dev;
1501
3b85875a
JB		 1502 rtnl_lock();
1503
463d0183 1504 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
ed1b6cc7 1505 if (err)
3b85875a 1506 goto unlock_rtnl;
ed1b6cc7 1507
79c97e97 1508 if (!rdev->ops->del_beacon) {
ed1b6cc7
JB		 1509 err = -EOPNOTSUPP;
1510 goto out;
1511 }
1512
eec60b03
JM		 1513 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
1514 err = -EOPNOTSUPP;
1515 goto out;
1516 }
79c97e97 1517 err = rdev->ops->del_beacon(&rdev->wiphy, dev);
ed1b6cc7
JB		 1518
1519 out:
79c97e97 1520 cfg80211_unlock_rdev(rdev);
ed1b6cc7 1521 dev_put(dev);
3b85875a
JB		 1522 unlock_rtnl:
1523 rtnl_unlock();
1524
ed1b6cc7
JB		 1525 return err;
1526}
1527
5727ef1b
JB		 1528static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
1529 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
1530 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
1531 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 1532 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
5727ef1b
JB		 1533};
1534
eccb8e8f
JB		 1535static int parse_station_flags(struct genl_info *info,
1536 struct station_parameters *params)
5727ef1b
JB		 1537{
1538 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 1539 struct nlattr *nla;
5727ef1b
JB		 1540 int flag;
1541
eccb8e8f
JB		 1542 /*
1543 * Try parsing the new attribute first so userspace
1544 * can specify both for older kernels.
1545 */
1546 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
1547 if (nla) {
1548 struct nl80211_sta_flag_update *sta_flags;
1549
1550 sta_flags = nla_data(nla);
1551 params->sta_flags_mask = sta_flags->mask;
1552 params->sta_flags_set = sta_flags->set;
1553 if ((params->sta_flags_mask |
1554 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
1555 return -EINVAL;
1556 return 0;
1557 }
1558
1559 /* if present, parse the old attribute */
5727ef1b 1560
eccb8e8f 1561 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 1562 if (!nla)
1563 return 0;
1564
1565 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
1566 nla, sta_flags_policy))
1567 return -EINVAL;
1568
eccb8e8f
JB		 1569 params->sta_flags_mask = (1 << __NL80211_STA_FLAG_AFTER_LAST) - 1;
1570 params->sta_flags_mask &= ~1;
5727ef1b
JB		 1571
1572 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++)
1573 if (flags[flag])
eccb8e8f 1574 params->sta_flags_set |= (1<<flag);
5727ef1b
JB		 1575
1576 return 0;
1577}
1578
420e7fab
HR		 1579static u16 nl80211_calculate_bitrate(struct rate_info *rate)
1580{
1581 int modulation, streams, bitrate;
1582
1583 if (!(rate->flags & RATE_INFO_FLAGS_MCS))
1584 return rate->legacy;
1585
1586 /* the formula below does only work for MCS values smaller than 32 */
1587 if (rate->mcs >= 32)
1588 return 0;
1589
1590 modulation = rate->mcs & 7;
1591 streams = (rate->mcs >> 3) + 1;
1592
1593 bitrate = (rate->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH) ?
1594 13500000 : 6500000;
1595
1596 if (modulation < 4)
1597 bitrate *= (modulation + 1);
1598 else if (modulation == 4)
1599 bitrate *= (modulation + 2);
1600 else
1601 bitrate *= (modulation + 3);
1602
1603 bitrate *= streams;
1604
1605 if (rate->flags & RATE_INFO_FLAGS_SHORT_GI)
1606 bitrate = (bitrate / 9) * 10;
1607
1608 /* do NOT round down here */
1609 return (bitrate + 50000) / 100000;
1610}
1611
fd5b74dc
JB		 1612static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
1613 int flags, struct net_device *dev,
2ec600d6 1614 u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 1615{
1616 void *hdr;
420e7fab
HR		 1617 struct nlattr *sinfoattr, *txrate;
1618 u16 bitrate;
fd5b74dc
JB		 1619
1620 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
1621 if (!hdr)
1622 return -1;
1623
1624 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
1625 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
1626
f5ea9120
JB		 1627 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, sinfo->generation);
1628
2ec600d6
LCC		 1629 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
1630 if (!sinfoattr)
fd5b74dc 1631 goto nla_put_failure;
2ec600d6
LCC		 1632 if (sinfo->filled & STATION_INFO_INACTIVE_TIME)
1633 NLA_PUT_U32(msg, NL80211_STA_INFO_INACTIVE_TIME,
1634 sinfo->inactive_time);
1635 if (sinfo->filled & STATION_INFO_RX_BYTES)
1636 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_BYTES,
1637 sinfo->rx_bytes);
1638 if (sinfo->filled & STATION_INFO_TX_BYTES)
1639 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_BYTES,
1640 sinfo->tx_bytes);
1641 if (sinfo->filled & STATION_INFO_LLID)
1642 NLA_PUT_U16(msg, NL80211_STA_INFO_LLID,
1643 sinfo->llid);
1644 if (sinfo->filled & STATION_INFO_PLID)
1645 NLA_PUT_U16(msg, NL80211_STA_INFO_PLID,
1646 sinfo->plid);
1647 if (sinfo->filled & STATION_INFO_PLINK_STATE)
1648 NLA_PUT_U8(msg, NL80211_STA_INFO_PLINK_STATE,
1649 sinfo->plink_state);
420e7fab
HR		 1650 if (sinfo->filled & STATION_INFO_SIGNAL)
1651 NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL,
1652 sinfo->signal);
1653 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
1654 txrate = nla_nest_start(msg, NL80211_STA_INFO_TX_BITRATE);
1655 if (!txrate)
1656 goto nla_put_failure;
1657
1658 /* nl80211_calculate_bitrate will return 0 for mcs >= 32 */
1659 bitrate = nl80211_calculate_bitrate(&sinfo->txrate);
1660 if (bitrate > 0)
1661 NLA_PUT_U16(msg, NL80211_RATE_INFO_BITRATE, bitrate);
2ec600d6 1662
420e7fab
HR		 1663 if (sinfo->txrate.flags & RATE_INFO_FLAGS_MCS)
1664 NLA_PUT_U8(msg, NL80211_RATE_INFO_MCS,
1665 sinfo->txrate.mcs);
1666 if (sinfo->txrate.flags & RATE_INFO_FLAGS_40_MHZ_WIDTH)
1667 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_40_MHZ_WIDTH);
1668 if (sinfo->txrate.flags & RATE_INFO_FLAGS_SHORT_GI)
1669 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_SHORT_GI);
1670
1671 nla_nest_end(msg, txrate);
1672 }
98c8a60a
JM		 1673 if (sinfo->filled & STATION_INFO_RX_PACKETS)
1674 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_PACKETS,
1675 sinfo->rx_packets);
1676 if (sinfo->filled & STATION_INFO_TX_PACKETS)
1677 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_PACKETS,
1678 sinfo->tx_packets);
2ec600d6 1679 nla_nest_end(msg, sinfoattr);
fd5b74dc
JB		 1680
1681 return genlmsg_end(msg, hdr);
1682
1683 nla_put_failure:
bc3ed28c
TG		 1684 genlmsg_cancel(msg, hdr);
1685 return -EMSGSIZE;
fd5b74dc
JB		 1686}
1687
2ec600d6 1688static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 1689 struct netlink_callback *cb)
2ec600d6 1690{
2ec600d6
LCC		 1691 struct station_info sinfo;
1692 struct cfg80211_registered_device *dev;
bba95fef 1693 struct net_device *netdev;
2ec600d6 1694 u8 mac_addr[ETH_ALEN];
bba95fef
JB		 1695 int ifidx = cb->args[0];
1696 int sta_idx = cb->args[1];
2ec600d6 1697 int err;
2ec600d6 1698
bba95fef
JB		 1699 if (!ifidx) {
1700 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
1701 nl80211_fam.attrbuf, nl80211_fam.maxattr,
1702 nl80211_policy);
1703 if (err)
1704 return err;
2ec600d6 1705
bba95fef
JB		 1706 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
1707 return -EINVAL;
2ec600d6 1708
bba95fef
JB		 1709 ifidx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
1710 if (!ifidx)
1711 return -EINVAL;
2ec600d6 1712 }
2ec600d6 1713
3b85875a
JB		 1714 rtnl_lock();
1715
463d0183 1716 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
3b85875a
JB		 1717 if (!netdev) {
1718 err = -ENODEV;
1719 goto out_rtnl;
1720 }
2ec600d6 1721
463d0183 1722 dev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
bba95fef
JB		 1723 if (IS_ERR(dev)) {
1724 err = PTR_ERR(dev);
3b85875a 1725 goto out_rtnl;
bba95fef
JB		 1726 }
1727
1728 if (!dev->ops->dump_station) {
eec60b03 1729 err = -EOPNOTSUPP;
bba95fef
JB		 1730 goto out_err;
1731 }
1732
bba95fef
JB		 1733 while (1) {
1734 err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
1735 mac_addr, &sinfo);
1736 if (err == -ENOENT)
1737 break;
1738 if (err)
3b85875a 1739 goto out_err;
bba95fef
JB		 1740
1741 if (nl80211_send_station(skb,
1742 NETLINK_CB(cb->skb).pid,
1743 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1744 netdev, mac_addr,
1745 &sinfo) < 0)
1746 goto out;
1747
1748 sta_idx++;
1749 }
1750
1751
1752 out:
1753 cb->args[1] = sta_idx;
1754 err = skb->len;
bba95fef 1755 out_err:
4d0c8aea 1756 cfg80211_unlock_rdev(dev);
3b85875a
JB		 1757 out_rtnl:
1758 rtnl_unlock();
bba95fef
JB		 1759
1760 return err;
2ec600d6 1761}
fd5b74dc 1762
5727ef1b
JB		 1763static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
1764{
79c97e97 1765 struct cfg80211_registered_device *rdev;
fd5b74dc
JB		 1766 int err;
1767 struct net_device *dev;
2ec600d6 1768 struct station_info sinfo;
fd5b74dc
JB		 1769 struct sk_buff *msg;
1770 u8 *mac_addr = NULL;
1771
2ec600d6 1772 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 1773
1774 if (!info->attrs[NL80211_ATTR_MAC])
1775 return -EINVAL;
1776
1777 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1778
3b85875a
JB		 1779 rtnl_lock();
1780
463d0183 1781 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
fd5b74dc 1782 if (err)
3b85875a 1783 goto out_rtnl;
fd5b74dc 1784
79c97e97 1785 if (!rdev->ops->get_station) {
fd5b74dc
JB		 1786 err = -EOPNOTSUPP;
1787 goto out;
1788 }
1789
79c97e97 1790 err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
2ec600d6
LCC		 1791 if (err)
1792 goto out;
1793
fd2120ca 1794 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc
JB		 1795 if (!msg)
1796 goto out;
1797
1798 if (nl80211_send_station(msg, info->snd_pid, info->snd_seq, 0,
2ec600d6 1799 dev, mac_addr, &sinfo) < 0)
fd5b74dc
JB		 1800 goto out_free;
1801
134e6375 1802 err = genlmsg_reply(msg, info);
fd5b74dc
JB		 1803 goto out;
1804
1805 out_free:
1806 nlmsg_free(msg);
fd5b74dc 1807 out:
79c97e97 1808 cfg80211_unlock_rdev(rdev);
fd5b74dc 1809 dev_put(dev);
3b85875a
JB		 1810 out_rtnl:
1811 rtnl_unlock();
1812
fd5b74dc 1813 return err;
5727ef1b
JB		 1814}
1815
1816/*
1817 * Get vlan interface making sure it is on the right wiphy.
1818 */
463d0183 1819static int get_vlan(struct genl_info *info,
5727ef1b
JB		 1820 struct cfg80211_registered_device *rdev,
1821 struct net_device **vlan)
1822{
463d0183 1823 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
5727ef1b
JB		 1824 *vlan = NULL;
1825
1826 if (vlanattr) {
463d0183
JB		 1827 *vlan = dev_get_by_index(genl_info_net(info),
1828 nla_get_u32(vlanattr));
5727ef1b
JB		 1829 if (!*vlan)
1830 return -ENODEV;
1831 if (!(*vlan)->ieee80211_ptr)
1832 return -EINVAL;
1833 if ((*vlan)->ieee80211_ptr->wiphy != &rdev->wiphy)
1834 return -EINVAL;
1835 }
1836 return 0;
1837}
1838
1839static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
1840{
79c97e97 1841 struct cfg80211_registered_device *rdev;
5727ef1b
JB		 1842 int err;
1843 struct net_device *dev;
1844 struct station_parameters params;
1845 u8 *mac_addr = NULL;
1846
1847 memset(&params, 0, sizeof(params));
1848
1849 params.listen_interval = -1;
1850
1851 if (info->attrs[NL80211_ATTR_STA_AID])
1852 return -EINVAL;
1853
1854 if (!info->attrs[NL80211_ATTR_MAC])
1855 return -EINVAL;
1856
1857 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1858
1859 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
1860 params.supported_rates =
1861 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
1862 params.supported_rates_len =
1863 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
1864 }
1865
1866 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
1867 params.listen_interval =
1868 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
1869
36aedc90
JM		 1870 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
1871 params.ht_capa =
1872 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
1873
eccb8e8f 1874 if (parse_station_flags(info, &params))
5727ef1b
JB		 1875 return -EINVAL;
1876
2ec600d6
LCC		 1877 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
1878 params.plink_action =
1879 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
1880
3b85875a
JB		 1881 rtnl_lock();
1882
463d0183 1883 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
5727ef1b 1884 if (err)
3b85875a 1885 goto out_rtnl;
5727ef1b 1886
463d0183 1887 err = get_vlan(info, rdev, &params.vlan);
a97f4424 1888 if (err)
034d655e 1889 goto out;
a97f4424
JB		 1890
1891 /* validate settings */
1892 err = 0;
1893
1894 switch (dev->ieee80211_ptr->iftype) {
1895 case NL80211_IFTYPE_AP:
1896 case NL80211_IFTYPE_AP_VLAN:
1897 /* disallow mesh-specific things */
1898 if (params.plink_action)
1899 err = -EINVAL;
1900 break;
1901 case NL80211_IFTYPE_STATION:
1902 /* disallow everything but AUTHORIZED flag */
1903 if (params.plink_action)
1904 err = -EINVAL;
1905 if (params.vlan)
1906 err = -EINVAL;
1907 if (params.supported_rates)
1908 err = -EINVAL;
1909 if (params.ht_capa)
1910 err = -EINVAL;
1911 if (params.listen_interval >= 0)
1912 err = -EINVAL;
1913 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
1914 err = -EINVAL;
1915 break;
1916 case NL80211_IFTYPE_MESH_POINT:
1917 /* disallow things mesh doesn't support */
1918 if (params.vlan)
1919 err = -EINVAL;
1920 if (params.ht_capa)
1921 err = -EINVAL;
1922 if (params.listen_interval >= 0)
1923 err = -EINVAL;
1924 if (params.supported_rates)
1925 err = -EINVAL;
1926 if (params.sta_flags_mask)
1927 err = -EINVAL;
1928 break;
1929 default:
1930 err = -EINVAL;
034d655e
JB		 1931 }
1932
5727ef1b
JB		 1933 if (err)
1934 goto out;
1935
79c97e97 1936 if (!rdev->ops->change_station) {
5727ef1b
JB		 1937 err = -EOPNOTSUPP;
1938 goto out;
1939 }
1940
79c97e97 1941 err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b
JB		 1942
1943 out:
1944 if (params.vlan)
1945 dev_put(params.vlan);
79c97e97 1946 cfg80211_unlock_rdev(rdev);
5727ef1b 1947 dev_put(dev);
3b85875a
JB		 1948 out_rtnl:
1949 rtnl_unlock();
1950
5727ef1b
JB		 1951 return err;
1952}
1953
1954static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
1955{
79c97e97 1956 struct cfg80211_registered_device *rdev;
5727ef1b
JB		 1957 int err;
1958 struct net_device *dev;
1959 struct station_parameters params;
1960 u8 *mac_addr = NULL;
1961
1962 memset(&params, 0, sizeof(params));
1963
1964 if (!info->attrs[NL80211_ATTR_MAC])
1965 return -EINVAL;
1966
5727ef1b
JB		 1967 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
1968 return -EINVAL;
1969
1970 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
1971 return -EINVAL;
1972
1973 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1974 params.supported_rates =
1975 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
1976 params.supported_rates_len =
1977 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
1978 params.listen_interval =
1979 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 1980
a97f4424
JB		 1981 if (info->attrs[NL80211_ATTR_STA_AID]) {
1982 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
1983 if (!params.aid || params.aid > IEEE80211_MAX_AID)
1984 return -EINVAL;
1985 }
51b50fbe 1986
36aedc90
JM		 1987 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
1988 params.ht_capa =
1989 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 1990
eccb8e8f 1991 if (parse_station_flags(info, &params))
5727ef1b
JB		 1992 return -EINVAL;
1993
3b85875a
JB		 1994 rtnl_lock();
1995
463d0183 1996 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
5727ef1b 1997 if (err)
3b85875a 1998 goto out_rtnl;
5727ef1b 1999
463d0183 2000 err = get_vlan(info, rdev, &params.vlan);
a97f4424 2001 if (err)
e80cf853 2002 goto out;
a97f4424
JB		 2003
2004 /* validate settings */
2005 err = 0;
2006
2007 switch (dev->ieee80211_ptr->iftype) {
2008 case NL80211_IFTYPE_AP:
2009 case NL80211_IFTYPE_AP_VLAN:
2010 /* all ok but must have AID */
2011 if (!params.aid)
2012 err = -EINVAL;
2013 break;
2014 case NL80211_IFTYPE_MESH_POINT:
2015 /* disallow things mesh doesn't support */
2016 if (params.vlan)
2017 err = -EINVAL;
2018 if (params.aid)
2019 err = -EINVAL;
2020 if (params.ht_capa)
2021 err = -EINVAL;
2022 if (params.listen_interval >= 0)
2023 err = -EINVAL;
2024 if (params.supported_rates)
2025 err = -EINVAL;
2026 if (params.sta_flags_mask)
2027 err = -EINVAL;
2028 break;
2029 default:
2030 err = -EINVAL;
e80cf853
JB		 2031 }
2032
5727ef1b
JB		 2033 if (err)
2034 goto out;
2035
79c97e97 2036 if (!rdev->ops->add_station) {
5727ef1b
JB		 2037 err = -EOPNOTSUPP;
2038 goto out;
2039 }
2040
35a8efe1
JM		 2041 if (!netif_running(dev)) {
2042 err = -ENETDOWN;
2043 goto out;
2044 }
2045
79c97e97 2046 err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b
JB		 2047
2048 out:
2049 if (params.vlan)
2050 dev_put(params.vlan);
79c97e97 2051 cfg80211_unlock_rdev(rdev);
5727ef1b 2052 dev_put(dev);
3b85875a
JB		 2053 out_rtnl:
2054 rtnl_unlock();
2055
5727ef1b
JB		 2056 return err;
2057}
2058
2059static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
2060{
79c97e97 2061 struct cfg80211_registered_device *rdev;
5727ef1b
JB		 2062 int err;
2063 struct net_device *dev;
2064 u8 *mac_addr = NULL;
2065
2066 if (info->attrs[NL80211_ATTR_MAC])
2067 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2068
3b85875a
JB		 2069 rtnl_lock();
2070
463d0183 2071 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
5727ef1b 2072 if (err)
3b85875a 2073 goto out_rtnl;
5727ef1b 2074
e80cf853 2075 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
155cc9e4
AY		 2076 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
2077 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
e80cf853
JB		 2078 err = -EINVAL;
2079 goto out;
2080 }
2081
79c97e97 2082 if (!rdev->ops->del_station) {
5727ef1b
JB		 2083 err = -EOPNOTSUPP;
2084 goto out;
2085 }
2086
79c97e97 2087 err = rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
5727ef1b
JB		 2088
2089 out:
79c97e97 2090 cfg80211_unlock_rdev(rdev);
5727ef1b 2091 dev_put(dev);
3b85875a
JB		 2092 out_rtnl:
2093 rtnl_unlock();
2094
5727ef1b
JB		 2095 return err;
2096}
2097
2ec600d6
LCC		 2098static int nl80211_send_mpath(struct sk_buff *msg, u32 pid, u32 seq,
2099 int flags, struct net_device *dev,
2100 u8 *dst, u8 *next_hop,
2101 struct mpath_info *pinfo)
2102{
2103 void *hdr;
2104 struct nlattr *pinfoattr;
2105
2106 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2107 if (!hdr)
2108 return -1;
2109
2110 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2111 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, dst);
2112 NLA_PUT(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop);
2113
f5ea9120
JB		 2114 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, pinfo->generation);
2115
2ec600d6
LCC		 2116 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
2117 if (!pinfoattr)
2118 goto nla_put_failure;
2119 if (pinfo->filled & MPATH_INFO_FRAME_QLEN)
2120 NLA_PUT_U32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
2121 pinfo->frame_qlen);
2122 if (pinfo->filled & MPATH_INFO_DSN)
2123 NLA_PUT_U32(msg, NL80211_MPATH_INFO_DSN,
2124 pinfo->dsn);
2125 if (pinfo->filled & MPATH_INFO_METRIC)
2126 NLA_PUT_U32(msg, NL80211_MPATH_INFO_METRIC,
2127 pinfo->metric);
2128 if (pinfo->filled & MPATH_INFO_EXPTIME)
2129 NLA_PUT_U32(msg, NL80211_MPATH_INFO_EXPTIME,
2130 pinfo->exptime);
2131 if (pinfo->filled & MPATH_INFO_FLAGS)
2132 NLA_PUT_U8(msg, NL80211_MPATH_INFO_FLAGS,
2133 pinfo->flags);
2134 if (pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT)
2135 NLA_PUT_U32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
2136 pinfo->discovery_timeout);
2137 if (pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES)
2138 NLA_PUT_U8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
2139 pinfo->discovery_retries);
2140
2141 nla_nest_end(msg, pinfoattr);
2142
2143 return genlmsg_end(msg, hdr);
2144
2145 nla_put_failure:
bc3ed28c
TG		 2146 genlmsg_cancel(msg, hdr);
2147 return -EMSGSIZE;
2ec600d6
LCC		 2148}
2149
2150static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 2151 struct netlink_callback *cb)
2ec600d6 2152{
2ec600d6
LCC		 2153 struct mpath_info pinfo;
2154 struct cfg80211_registered_device *dev;
bba95fef 2155 struct net_device *netdev;
2ec600d6
LCC		 2156 u8 dst[ETH_ALEN];
2157 u8 next_hop[ETH_ALEN];
bba95fef
JB		 2158 int ifidx = cb->args[0];
2159 int path_idx = cb->args[1];
2ec600d6 2160 int err;
2ec600d6 2161
bba95fef
JB		 2162 if (!ifidx) {
2163 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
2164 nl80211_fam.attrbuf, nl80211_fam.maxattr,
2165 nl80211_policy);
2166 if (err)
2167 return err;
2168
2169 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
2170 return -EINVAL;
2171
2172 ifidx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
2173 if (!ifidx)
2174 return -EINVAL;
2175 }
2176
3b85875a
JB		 2177 rtnl_lock();
2178
463d0183 2179 netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
3b85875a
JB		 2180 if (!netdev) {
2181 err = -ENODEV;
2182 goto out_rtnl;
2183 }
bba95fef 2184
463d0183 2185 dev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
bba95fef
JB		 2186 if (IS_ERR(dev)) {
2187 err = PTR_ERR(dev);
3b85875a 2188 goto out_rtnl;
bba95fef
JB		 2189 }
2190
2191 if (!dev->ops->dump_mpath) {
eec60b03 2192 err = -EOPNOTSUPP;
bba95fef
JB		 2193 goto out_err;
2194 }
2195
eec60b03
JM		 2196 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2197 err = -EOPNOTSUPP;
2198 goto out;
2199 }
2200
bba95fef
JB		 2201 while (1) {
2202 err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
2203 dst, next_hop, &pinfo);
2204 if (err == -ENOENT)
2ec600d6 2205 break;
bba95fef 2206 if (err)
3b85875a 2207 goto out_err;
2ec600d6 2208
bba95fef
JB		 2209 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).pid,
2210 cb->nlh->nlmsg_seq, NLM_F_MULTI,
2211 netdev, dst, next_hop,
2212 &pinfo) < 0)
2213 goto out;
2ec600d6 2214
bba95fef 2215 path_idx++;
2ec600d6 2216 }
2ec600d6 2217
2ec600d6 2218
bba95fef
JB		 2219 out:
2220 cb->args[1] = path_idx;
2221 err = skb->len;
bba95fef 2222 out_err:
4d0c8aea 2223 cfg80211_unlock_rdev(dev);
3b85875a
JB		 2224 out_rtnl:
2225 rtnl_unlock();
bba95fef
JB		 2226
2227 return err;
2ec600d6
LCC		 2228}
2229
2230static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
2231{
79c97e97 2232 struct cfg80211_registered_device *rdev;
2ec600d6
LCC		 2233 int err;
2234 struct net_device *dev;
2235 struct mpath_info pinfo;
2236 struct sk_buff *msg;
2237 u8 *dst = NULL;
2238 u8 next_hop[ETH_ALEN];
2239
2240 memset(&pinfo, 0, sizeof(pinfo));
2241
2242 if (!info->attrs[NL80211_ATTR_MAC])
2243 return -EINVAL;
2244
2245 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2246
3b85875a
JB		 2247 rtnl_lock();
2248
463d0183 2249 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2ec600d6 2250 if (err)
3b85875a 2251 goto out_rtnl;
2ec600d6 2252
79c97e97 2253 if (!rdev->ops->get_mpath) {
2ec600d6
LCC		 2254 err = -EOPNOTSUPP;
2255 goto out;
2256 }
2257
eec60b03
JM		 2258 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2259 err = -EOPNOTSUPP;
2260 goto out;
2261 }
2262
79c97e97 2263 err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
2ec600d6
LCC		 2264 if (err)
2265 goto out;
2266
fd2120ca 2267 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6
LCC		 2268 if (!msg)
2269 goto out;
2270
2271 if (nl80211_send_mpath(msg, info->snd_pid, info->snd_seq, 0,
2272 dev, dst, next_hop, &pinfo) < 0)
2273 goto out_free;
2274
134e6375 2275 err = genlmsg_reply(msg, info);
2ec600d6
LCC		 2276 goto out;
2277
2278 out_free:
2279 nlmsg_free(msg);
2ec600d6 2280 out:
79c97e97 2281 cfg80211_unlock_rdev(rdev);
2ec600d6 2282 dev_put(dev);
3b85875a
JB		 2283 out_rtnl:
2284 rtnl_unlock();
2285
2ec600d6
LCC		 2286 return err;
2287}
2288
2289static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
2290{
79c97e97 2291 struct cfg80211_registered_device *rdev;
2ec600d6
LCC		 2292 int err;
2293 struct net_device *dev;
2294 u8 *dst = NULL;
2295 u8 *next_hop = NULL;
2296
2297 if (!info->attrs[NL80211_ATTR_MAC])
2298 return -EINVAL;
2299
2300 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2301 return -EINVAL;
2302
2303 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2304 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2305
3b85875a
JB		 2306 rtnl_lock();
2307
463d0183 2308 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2ec600d6 2309 if (err)
3b85875a 2310 goto out_rtnl;
2ec600d6 2311
79c97e97 2312 if (!rdev->ops->change_mpath) {
2ec600d6
LCC		 2313 err = -EOPNOTSUPP;
2314 goto out;
2315 }
2316
eec60b03
JM		 2317 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2318 err = -EOPNOTSUPP;
2319 goto out;
2320 }
2321
35a8efe1
JM		 2322 if (!netif_running(dev)) {
2323 err = -ENETDOWN;
2324 goto out;
2325 }
2326
79c97e97 2327 err = rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6
LCC		 2328
2329 out:
79c97e97 2330 cfg80211_unlock_rdev(rdev);
2ec600d6 2331 dev_put(dev);
3b85875a
JB		 2332 out_rtnl:
2333 rtnl_unlock();
2334
2ec600d6
LCC		 2335 return err;
2336}
2337static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
2338{
79c97e97 2339 struct cfg80211_registered_device *rdev;
2ec600d6
LCC		 2340 int err;
2341 struct net_device *dev;
2342 u8 *dst = NULL;
2343 u8 *next_hop = NULL;
2344
2345 if (!info->attrs[NL80211_ATTR_MAC])
2346 return -EINVAL;
2347
2348 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2349 return -EINVAL;
2350
2351 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2352 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2353
3b85875a
JB		 2354 rtnl_lock();
2355
463d0183 2356 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2ec600d6 2357 if (err)
3b85875a 2358 goto out_rtnl;
2ec600d6 2359
79c97e97 2360 if (!rdev->ops->add_mpath) {
2ec600d6
LCC		 2361 err = -EOPNOTSUPP;
2362 goto out;
2363 }
2364
eec60b03
JM		 2365 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2366 err = -EOPNOTSUPP;
2367 goto out;
2368 }
2369
35a8efe1
JM		 2370 if (!netif_running(dev)) {
2371 err = -ENETDOWN;
2372 goto out;
2373 }
2374
79c97e97 2375 err = rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6
LCC		 2376
2377 out:
79c97e97 2378 cfg80211_unlock_rdev(rdev);
2ec600d6 2379 dev_put(dev);
3b85875a
JB		 2380 out_rtnl:
2381 rtnl_unlock();
2382
2ec600d6
LCC		 2383 return err;
2384}
2385
2386static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
2387{
79c97e97 2388 struct cfg80211_registered_device *rdev;
2ec600d6
LCC		 2389 int err;
2390 struct net_device *dev;
2391 u8 *dst = NULL;
2392
2393 if (info->attrs[NL80211_ATTR_MAC])
2394 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2395
3b85875a
JB		 2396 rtnl_lock();
2397
463d0183 2398 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2ec600d6 2399 if (err)
3b85875a 2400 goto out_rtnl;
2ec600d6 2401
79c97e97 2402 if (!rdev->ops->del_mpath) {
2ec600d6
LCC		 2403 err = -EOPNOTSUPP;
2404 goto out;
2405 }
2406
79c97e97 2407 err = rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
2ec600d6
LCC		 2408
2409 out:
79c97e97 2410 cfg80211_unlock_rdev(rdev);
2ec600d6 2411 dev_put(dev);
3b85875a
JB		 2412 out_rtnl:
2413 rtnl_unlock();
2414
2ec600d6
LCC		 2415 return err;
2416}
2417
9f1ba906
JM		 2418static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
2419{
79c97e97 2420 struct cfg80211_registered_device *rdev;
9f1ba906
JM		 2421 int err;
2422 struct net_device *dev;
2423 struct bss_parameters params;
2424
2425 memset(&params, 0, sizeof(params));
2426 /* default to not changing parameters */
2427 params.use_cts_prot = -1;
2428 params.use_short_preamble = -1;
2429 params.use_short_slot_time = -1;
2430
2431 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
2432 params.use_cts_prot =
2433 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
2434 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
2435 params.use_short_preamble =
2436 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
2437 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
2438 params.use_short_slot_time =
2439 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 2440 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
2441 params.basic_rates =
2442 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2443 params.basic_rates_len =
2444 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2445 }
9f1ba906 2446
3b85875a
JB		 2447 rtnl_lock();
2448
463d0183 2449 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
9f1ba906 2450 if (err)
3b85875a 2451 goto out_rtnl;
9f1ba906 2452
79c97e97 2453 if (!rdev->ops->change_bss) {
9f1ba906
JM		 2454 err = -EOPNOTSUPP;
2455 goto out;
2456 }
2457
eec60b03
JM		 2458 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
2459 err = -EOPNOTSUPP;
2460 goto out;
2461 }
2462
79c97e97 2463 err = rdev->ops->change_bss(&rdev->wiphy, dev, &params);
9f1ba906
JM		 2464
2465 out:
79c97e97 2466 cfg80211_unlock_rdev(rdev);
9f1ba906 2467 dev_put(dev);
3b85875a
JB		 2468 out_rtnl:
2469 rtnl_unlock();
2470
9f1ba906
JM		 2471 return err;
2472}
2473
b2e1b302
LR		 2474static const struct nla_policy
2475 reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
2476 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
2477 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
2478 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
2479 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
2480 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
2481 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
2482};
2483
2484static int parse_reg_rule(struct nlattr *tb[],
2485 struct ieee80211_reg_rule *reg_rule)
2486{
2487 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
2488 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
2489
2490 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
2491 return -EINVAL;
2492 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
2493 return -EINVAL;
2494 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
2495 return -EINVAL;
2496 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
2497 return -EINVAL;
2498 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
2499 return -EINVAL;
2500
2501 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
2502
2503 freq_range->start_freq_khz =
2504 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
2505 freq_range->end_freq_khz =
2506 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
2507 freq_range->max_bandwidth_khz =
2508 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
2509
2510 power_rule->max_eirp =
2511 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
2512
2513 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
2514 power_rule->max_antenna_gain =
2515 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
2516
2517 return 0;
2518}
2519
2520static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
2521{
2522 int r;
2523 char *data = NULL;
2524
80778f18
LR		 2525 /*
2526 * You should only get this when cfg80211 hasn't yet initialized
2527 * completely when built-in to the kernel right between the time
2528 * window between nl80211_init() and regulatory_init(), if that is
2529 * even possible.
2530 */
2531 mutex_lock(&cfg80211_mutex);
2532 if (unlikely(!cfg80211_regdomain)) {
fe33eb39
LR		 2533 mutex_unlock(&cfg80211_mutex);
2534 return -EINPROGRESS;
80778f18 2535 }
fe33eb39 2536 mutex_unlock(&cfg80211_mutex);
80778f18 2537
fe33eb39
LR		 2538 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
2539 return -EINVAL;
b2e1b302
LR		 2540
2541 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
2542
2543#ifdef CONFIG_WIRELESS_OLD_REGULATORY
2544 /* We ignore world regdom requests with the old regdom setup */
fe33eb39
LR		 2545 if (is_world_regdom(data))
2546 return -EINVAL;
b2e1b302 2547#endif
fe33eb39
LR		 2548
2549 r = regulatory_hint_user(data);
2550
b2e1b302
LR		 2551 return r;
2552}
2553
93da9cc1 2554static int nl80211_get_mesh_params(struct sk_buff *skb,
2555 struct genl_info *info)
2556{
79c97e97 2557 struct cfg80211_registered_device *rdev;
93da9cc1 2558 struct mesh_config cur_params;
2559 int err;
2560 struct net_device *dev;
2561 void *hdr;
2562 struct nlattr *pinfoattr;
2563 struct sk_buff *msg;
2564
3b85875a
JB		 2565 rtnl_lock();
2566
93da9cc1 2567 /* Look up our device */
463d0183 2568 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
93da9cc1 2569 if (err)
3b85875a 2570 goto out_rtnl;
93da9cc1 2571
79c97e97 2572 if (!rdev->ops->get_mesh_params) {
f3f92586
JM		 2573 err = -EOPNOTSUPP;
2574 goto out;
2575 }
2576
93da9cc1 2577 /* Get the mesh params */
79c97e97 2578 err = rdev->ops->get_mesh_params(&rdev->wiphy, dev, &cur_params);
93da9cc1 2579 if (err)
2580 goto out;
2581
2582 /* Draw up a netlink message to send back */
fd2120ca 2583 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
93da9cc1 2584 if (!msg) {
2585 err = -ENOBUFS;
2586 goto out;
2587 }
2588 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
2589 NL80211_CMD_GET_MESH_PARAMS);
2590 if (!hdr)
2591 goto nla_put_failure;
2592 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_PARAMS);
2593 if (!pinfoattr)
2594 goto nla_put_failure;
2595 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2596 NLA_PUT_U16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
2597 cur_params.dot11MeshRetryTimeout);
2598 NLA_PUT_U16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
2599 cur_params.dot11MeshConfirmTimeout);
2600 NLA_PUT_U16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
2601 cur_params.dot11MeshHoldingTimeout);
2602 NLA_PUT_U16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
2603 cur_params.dot11MeshMaxPeerLinks);
2604 NLA_PUT_U8(msg, NL80211_MESHCONF_MAX_RETRIES,
2605 cur_params.dot11MeshMaxRetries);
2606 NLA_PUT_U8(msg, NL80211_MESHCONF_TTL,
2607 cur_params.dot11MeshTTL);
2608 NLA_PUT_U8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
2609 cur_params.auto_open_plinks);
2610 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
2611 cur_params.dot11MeshHWMPmaxPREQretries);
2612 NLA_PUT_U32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
2613 cur_params.path_refresh_time);
2614 NLA_PUT_U16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
2615 cur_params.min_discovery_timeout);
2616 NLA_PUT_U32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
2617 cur_params.dot11MeshHWMPactivePathTimeout);
2618 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
2619 cur_params.dot11MeshHWMPpreqMinInterval);
2620 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
2621 cur_params.dot11MeshHWMPnetDiameterTraversalTime);
2622 nla_nest_end(msg, pinfoattr);
2623 genlmsg_end(msg, hdr);
134e6375 2624 err = genlmsg_reply(msg, info);
93da9cc1 2625 goto out;
2626
3b85875a 2627 nla_put_failure:
93da9cc1 2628 genlmsg_cancel(msg, hdr);
2629 err = -EMSGSIZE;
3b85875a 2630 out:
93da9cc1 2631 /* Cleanup */
79c97e97 2632 cfg80211_unlock_rdev(rdev);
93da9cc1 2633 dev_put(dev);
3b85875a
JB		 2634 out_rtnl:
2635 rtnl_unlock();
2636
93da9cc1 2637 return err;
2638}
2639
2640#define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
2641do {\
2642 if (table[attr_num]) {\
2643 cfg.param = nla_fn(table[attr_num]); \
2644 mask |= (1 << (attr_num - 1)); \
2645 } \
2646} while (0);\
2647
2648static struct nla_policy
2649nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] __read_mostly = {
2650 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
2651 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
2652 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
2653 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
2654 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
2655 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
2656 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
2657
2658 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
2659 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
2660 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
2661 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
2662 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
2663 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
2664};
2665
2666static int nl80211_set_mesh_params(struct sk_buff *skb, struct genl_info *info)
2667{
2668 int err;
2669 u32 mask;
79c97e97 2670 struct cfg80211_registered_device *rdev;
93da9cc1 2671 struct net_device *dev;
2672 struct mesh_config cfg;
2673 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
2674 struct nlattr *parent_attr;
2675
2676 parent_attr = info->attrs[NL80211_ATTR_MESH_PARAMS];
2677 if (!parent_attr)
2678 return -EINVAL;
2679 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
2680 parent_attr, nl80211_meshconf_params_policy))
2681 return -EINVAL;
2682
3b85875a
JB		 2683 rtnl_lock();
2684
463d0183 2685 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
93da9cc1 2686 if (err)
3b85875a 2687 goto out_rtnl;
93da9cc1 2688
79c97e97 2689 if (!rdev->ops->set_mesh_params) {
f3f92586
JM		 2690 err = -EOPNOTSUPP;
2691 goto out;
2692 }
2693
93da9cc1 2694 /* This makes sure that there aren't more than 32 mesh config
2695 * parameters (otherwise our bitfield scheme would not work.) */
2696 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
2697
2698 /* Fill in the params struct */
2699 mask = 0;
2700 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
2701 mask, NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
2702 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
2703 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT, nla_get_u16);
2704 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
2705 mask, NL80211_MESHCONF_HOLDING_TIMEOUT, nla_get_u16);
2706 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
2707 mask, NL80211_MESHCONF_MAX_PEER_LINKS, nla_get_u16);
2708 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
2709 mask, NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
2710 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
2711 mask, NL80211_MESHCONF_TTL, nla_get_u8);
2712 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
2713 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS, nla_get_u8);
2714 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
2715 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
2716 nla_get_u8);
2717 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
2718 mask, NL80211_MESHCONF_PATH_REFRESH_TIME, nla_get_u32);
2719 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
2720 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
2721 nla_get_u16);
2722 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
2723 mask, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
2724 nla_get_u32);
2725 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
2726 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
2727 nla_get_u16);
2728 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
2729 dot11MeshHWMPnetDiameterTraversalTime,
2730 mask, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
2731 nla_get_u16);
2732
2733 /* Apply changes */
79c97e97 2734 err = rdev->ops->set_mesh_params(&rdev->wiphy, dev, &cfg, mask);
93da9cc1 2735
f3f92586 2736 out:
93da9cc1 2737 /* cleanup */
79c97e97 2738 cfg80211_unlock_rdev(rdev);
93da9cc1 2739 dev_put(dev);
3b85875a
JB		 2740 out_rtnl:
2741 rtnl_unlock();
2742
93da9cc1 2743 return err;
2744}
2745
2746#undef FILL_IN_MESH_PARAM_IF_SET
2747
f130347c
LR		 2748static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
2749{
2750 struct sk_buff *msg;
2751 void *hdr = NULL;
2752 struct nlattr *nl_reg_rules;
2753 unsigned int i;
2754 int err = -EINVAL;
2755
a1794390 2756 mutex_lock(&cfg80211_mutex);
f130347c
LR		 2757
2758 if (!cfg80211_regdomain)
2759 goto out;
2760
fd2120ca 2761 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 2762 if (!msg) {
2763 err = -ENOBUFS;
2764 goto out;
2765 }
2766
2767 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
2768 NL80211_CMD_GET_REG);
2769 if (!hdr)
2770 goto nla_put_failure;
2771
2772 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2,
2773 cfg80211_regdomain->alpha2);
2774
2775 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
2776 if (!nl_reg_rules)
2777 goto nla_put_failure;
2778
2779 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
2780 struct nlattr *nl_reg_rule;
2781 const struct ieee80211_reg_rule *reg_rule;
2782 const struct ieee80211_freq_range *freq_range;
2783 const struct ieee80211_power_rule *power_rule;
2784
2785 reg_rule = &cfg80211_regdomain->reg_rules[i];
2786 freq_range = &reg_rule->freq_range;
2787 power_rule = &reg_rule->power_rule;
2788
2789 nl_reg_rule = nla_nest_start(msg, i);
2790 if (!nl_reg_rule)
2791 goto nla_put_failure;
2792
2793 NLA_PUT_U32(msg, NL80211_ATTR_REG_RULE_FLAGS,
2794 reg_rule->flags);
2795 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_START,
2796 freq_range->start_freq_khz);
2797 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_END,
2798 freq_range->end_freq_khz);
2799 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
2800 freq_range->max_bandwidth_khz);
2801 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
2802 power_rule->max_antenna_gain);
2803 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
2804 power_rule->max_eirp);
2805
2806 nla_nest_end(msg, nl_reg_rule);
2807 }
2808
2809 nla_nest_end(msg, nl_reg_rules);
2810
2811 genlmsg_end(msg, hdr);
134e6375 2812 err = genlmsg_reply(msg, info);
f130347c
LR		 2813 goto out;
2814
2815nla_put_failure:
2816 genlmsg_cancel(msg, hdr);
2817 err = -EMSGSIZE;
2818out:
a1794390 2819 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 2820 return err;
2821}
2822
b2e1b302
LR		 2823static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
2824{
2825 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
2826 struct nlattr *nl_reg_rule;
2827 char *alpha2 = NULL;
2828 int rem_reg_rules = 0, r = 0;
2829 u32 num_rules = 0, rule_idx = 0, size_of_regd;
2830 struct ieee80211_regdomain *rd = NULL;
2831
2832 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
2833 return -EINVAL;
2834
2835 if (!info->attrs[NL80211_ATTR_REG_RULES])
2836 return -EINVAL;
2837
2838 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
2839
2840 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
2841 rem_reg_rules) {
2842 num_rules++;
2843 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 2844 return -EINVAL;
b2e1b302
LR		 2845 }
2846
61405e97
LR		 2847 mutex_lock(&cfg80211_mutex);
2848
d0e18f83
LR		 2849 if (!reg_is_valid_request(alpha2)) {
2850 r = -EINVAL;
2851 goto bad_reg;
2852 }
b2e1b302
LR		 2853
2854 size_of_regd = sizeof(struct ieee80211_regdomain) +
2855 (num_rules * sizeof(struct ieee80211_reg_rule));
2856
2857 rd = kzalloc(size_of_regd, GFP_KERNEL);
d0e18f83
LR		 2858 if (!rd) {
2859 r = -ENOMEM;
2860 goto bad_reg;
2861 }
b2e1b302
LR		 2862
2863 rd->n_reg_rules = num_rules;
2864 rd->alpha2[0] = alpha2[0];
2865 rd->alpha2[1] = alpha2[1];
2866
2867 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
2868 rem_reg_rules) {
2869 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
2870 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
2871 reg_rule_policy);
2872 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
2873 if (r)
2874 goto bad_reg;
2875
2876 rule_idx++;
2877
d0e18f83
LR		 2878 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
2879 r = -EINVAL;
b2e1b302 2880 goto bad_reg;
d0e18f83 2881 }
b2e1b302
LR		 2882 }
2883
2884 BUG_ON(rule_idx != num_rules);
2885
b2e1b302 2886 r = set_regdom(rd);
61405e97 2887
a1794390 2888 mutex_unlock(&cfg80211_mutex);
d0e18f83 2889
b2e1b302
LR		 2890 return r;
2891
d2372b31 2892 bad_reg:
61405e97 2893 mutex_unlock(&cfg80211_mutex);
b2e1b302 2894 kfree(rd);
d0e18f83 2895 return r;
b2e1b302
LR		 2896}
2897
83f5e2cf
JB		 2898static int validate_scan_freqs(struct nlattr *freqs)
2899{
2900 struct nlattr *attr1, *attr2;
2901 int n_channels = 0, tmp1, tmp2;
2902
2903 nla_for_each_nested(attr1, freqs, tmp1) {
2904 n_channels++;
2905 /*
2906 * Some hardware has a limited channel list for
2907 * scanning, and it is pretty much nonsensical
2908 * to scan for a channel twice, so disallow that
2909 * and don't require drivers to check that the
2910 * channel list they get isn't longer than what
2911 * they can scan, as long as they can scan all
2912 * the channels they registered at once.
2913 */
2914 nla_for_each_nested(attr2, freqs, tmp2)
2915 if (attr1 != attr2 &&
2916 nla_get_u32(attr1) == nla_get_u32(attr2))
2917 return 0;
2918 }
2919
2920 return n_channels;
2921}
2922
2a519311
JB		 2923static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
2924{
79c97e97 2925 struct cfg80211_registered_device *rdev;
2a519311
JB		 2926 struct net_device *dev;
2927 struct cfg80211_scan_request *request;
2928 struct cfg80211_ssid *ssid;
2929 struct ieee80211_channel *channel;
2930 struct nlattr *attr;
2931 struct wiphy *wiphy;
83f5e2cf 2932 int err, tmp, n_ssids = 0, n_channels, i;
2a519311 2933 enum ieee80211_band band;
70692ad2 2934 size_t ie_len;
2a519311 2935
f4a11bb0
JB		 2936 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
2937 return -EINVAL;
2938
3b85875a
JB		 2939 rtnl_lock();
2940
463d0183 2941 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
2a519311 2942 if (err)
3b85875a 2943 goto out_rtnl;
2a519311 2944
79c97e97 2945 wiphy = &rdev->wiphy;
2a519311 2946
79c97e97 2947 if (!rdev->ops->scan) {
2a519311
JB		 2948 err = -EOPNOTSUPP;
2949 goto out;
2950 }
2951
35a8efe1
JM		 2952 if (!netif_running(dev)) {
2953 err = -ENETDOWN;
2954 goto out;
2955 }
2956
79c97e97 2957 if (rdev->scan_req) {
2a519311 2958 err = -EBUSY;
3b85875a 2959 goto out;
2a519311
JB		 2960 }
2961
2962 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 2963 n_channels = validate_scan_freqs(
2964 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
2a519311
JB		 2965 if (!n_channels) {
2966 err = -EINVAL;
3b85875a 2967 goto out;
2a519311
JB		 2968 }
2969 } else {
83f5e2cf
JB		 2970 n_channels = 0;
2971
2a519311
JB		 2972 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
2973 if (wiphy->bands[band])
2974 n_channels += wiphy->bands[band]->n_channels;
2975 }
2976
2977 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
2978 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
2979 n_ssids++;
2980
2981 if (n_ssids > wiphy->max_scan_ssids) {
2982 err = -EINVAL;
3b85875a 2983 goto out;
2a519311
JB		 2984 }
2985
70692ad2
JM		 2986 if (info->attrs[NL80211_ATTR_IE])
2987 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
2988 else
2989 ie_len = 0;
2990
18a83659
JB		 2991 if (ie_len > wiphy->max_scan_ie_len) {
2992 err = -EINVAL;
2993 goto out;
2994 }
2995
2a519311
JB		 2996 request = kzalloc(sizeof(*request)
2997 + sizeof(*ssid) * n_ssids
70692ad2
JM		 2998 + sizeof(channel) * n_channels
2999 + ie_len, GFP_KERNEL);
2a519311
JB		 3000 if (!request) {
3001 err = -ENOMEM;
3b85875a 3002 goto out;
2a519311
JB		 3003 }
3004
3005 request->channels = (void *)((char *)request + sizeof(*request));
3006 request->n_channels = n_channels;
3007 if (n_ssids)
3008 request->ssids = (void *)(request->channels + n_channels);
3009 request->n_ssids = n_ssids;
70692ad2
JM		 3010 if (ie_len) {
3011 if (request->ssids)
3012 request->ie = (void *)(request->ssids + n_ssids);
3013 else
3014 request->ie = (void *)(request->channels + n_channels);
3015 }
2a519311
JB		 3016
3017 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3018 /* user specified, bail out if channel not found */
3019 request->n_channels = n_channels;
3020 i = 0;
3021 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
3022 request->channels[i] = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3023 if (!request->channels[i]) {
3024 err = -EINVAL;
3025 goto out_free;
3026 }
3027 i++;
3028 }
3029 } else {
3030 /* all channels */
3031 i = 0;
3032 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3033 int j;
3034 if (!wiphy->bands[band])
3035 continue;
3036 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
3037 request->channels[i] = &wiphy->bands[band]->channels[j];
3038 i++;
3039 }
3040 }
3041 }
3042
3043 i = 0;
3044 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
3045 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
3046 if (request->ssids[i].ssid_len > IEEE80211_MAX_SSID_LEN) {
3047 err = -EINVAL;
3048 goto out_free;
3049 }
3050 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
3051 request->ssids[i].ssid_len = nla_len(attr);
3052 i++;
3053 }
3054 }
3055
70692ad2
JM		 3056 if (info->attrs[NL80211_ATTR_IE]) {
3057 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 3058 memcpy((void *)request->ie,
3059 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 3060 request->ie_len);
3061 }
3062
463d0183 3063 request->dev = dev;
79c97e97 3064 request->wiphy = &rdev->wiphy;
2a519311 3065
79c97e97
JB		 3066 rdev->scan_req = request;
3067 err = rdev->ops->scan(&rdev->wiphy, dev, request);
2a519311 3068
463d0183 3069 if (!err) {
79c97e97 3070 nl80211_send_scan_start(rdev, dev);
463d0183
JB		 3071 dev_hold(dev);
3072 }
a538e2d5 3073
2a519311
JB		 3074 out_free:
3075 if (err) {
79c97e97 3076 rdev->scan_req = NULL;
2a519311
JB		 3077 kfree(request);
3078 }
2a519311 3079 out:
79c97e97 3080 cfg80211_unlock_rdev(rdev);
2a519311 3081 dev_put(dev);
3b85875a
JB		 3082 out_rtnl:
3083 rtnl_unlock();
3084
2a519311
JB		 3085 return err;
3086}
3087
3088static int nl80211_send_bss(struct sk_buff *msg, u32 pid, u32 seq, int flags,
3089 struct cfg80211_registered_device *rdev,
48ab905d
JB		 3090 struct wireless_dev *wdev,
3091 struct cfg80211_internal_bss *intbss)
2a519311 3092{
48ab905d 3093 struct cfg80211_bss *res = &intbss->pub;
2a519311
JB		 3094 void *hdr;
3095 struct nlattr *bss;
48ab905d
JB		 3096 int i;
3097
3098 ASSERT_WDEV_LOCK(wdev);
2a519311
JB		 3099
3100 hdr = nl80211hdr_put(msg, pid, seq, flags,
3101 NL80211_CMD_NEW_SCAN_RESULTS);
3102 if (!hdr)
3103 return -1;
3104
f5ea9120 3105 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation);
48ab905d 3106 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex);
2a519311
JB		 3107
3108 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
3109 if (!bss)
3110 goto nla_put_failure;
3111 if (!is_zero_ether_addr(res->bssid))
3112 NLA_PUT(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid);
3113 if (res->information_elements && res->len_information_elements)
3114 NLA_PUT(msg, NL80211_BSS_INFORMATION_ELEMENTS,
3115 res->len_information_elements,
3116 res->information_elements);
3117 if (res->tsf)
3118 NLA_PUT_U64(msg, NL80211_BSS_TSF, res->tsf);
3119 if (res->beacon_interval)
3120 NLA_PUT_U16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval);
3121 NLA_PUT_U16(msg, NL80211_BSS_CAPABILITY, res->capability);
3122 NLA_PUT_U32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq);
3123
77965c97 3124 switch (rdev->wiphy.signal_type) {
2a519311
JB		 3125 case CFG80211_SIGNAL_TYPE_MBM:
3126 NLA_PUT_U32(msg, NL80211_BSS_SIGNAL_MBM, res->signal);
3127 break;
3128 case CFG80211_SIGNAL_TYPE_UNSPEC:
3129 NLA_PUT_U8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal);
3130 break;
3131 default:
3132 break;
3133 }
3134
48ab905d
JB		 3135 switch (wdev->iftype) {
3136 case NL80211_IFTYPE_STATION:
3137 if (intbss == wdev->current_bss)
3138 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3139 NL80211_BSS_STATUS_ASSOCIATED);
3140 else for (i = 0; i < MAX_AUTH_BSSES; i++) {
3141 if (intbss != wdev->auth_bsses[i])
3142 continue;
3143 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3144 NL80211_BSS_STATUS_AUTHENTICATED);
3145 break;
3146 }
3147 break;
3148 case NL80211_IFTYPE_ADHOC:
3149 if (intbss == wdev->current_bss)
3150 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3151 NL80211_BSS_STATUS_IBSS_JOINED);
3152 break;
3153 default:
3154 break;
3155 }
3156
2a519311
JB		 3157 nla_nest_end(msg, bss);
3158
3159 return genlmsg_end(msg, hdr);
3160
3161 nla_put_failure:
3162 genlmsg_cancel(msg, hdr);
3163 return -EMSGSIZE;
3164}
3165
3166static int nl80211_dump_scan(struct sk_buff *skb,
3167 struct netlink_callback *cb)
3168{
48ab905d
JB		 3169 struct cfg80211_registered_device *rdev;
3170 struct net_device *dev;
2a519311 3171 struct cfg80211_internal_bss *scan;
48ab905d 3172 struct wireless_dev *wdev;
2a519311
JB		 3173 int ifidx = cb->args[0];
3174 int start = cb->args[1], idx = 0;
3175 int err;
3176
3177 if (!ifidx) {
3178 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
3179 nl80211_fam.attrbuf, nl80211_fam.maxattr,
3180 nl80211_policy);
3181 if (err)
3182 return err;
3183
3184 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
3185 return -EINVAL;
3186
3187 ifidx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
3188 if (!ifidx)
3189 return -EINVAL;
3190 cb->args[0] = ifidx;
3191 }
3192
463d0183 3193 dev = dev_get_by_index(sock_net(skb->sk), ifidx);
48ab905d 3194 if (!dev)
2a519311
JB		 3195 return -ENODEV;
3196
463d0183 3197 rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
48ab905d
JB		 3198 if (IS_ERR(rdev)) {
3199 err = PTR_ERR(rdev);
2a519311
JB		 3200 goto out_put_netdev;
3201 }
3202
48ab905d 3203 wdev = dev->ieee80211_ptr;
2a519311 3204
48ab905d
JB		 3205 wdev_lock(wdev);
3206 spin_lock_bh(&rdev->bss_lock);
3207 cfg80211_bss_expire(rdev);
3208
3209 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 3210 if (++idx <= start)
3211 continue;
3212 if (nl80211_send_bss(skb,
3213 NETLINK_CB(cb->skb).pid,
3214 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 3215 rdev, wdev, scan) < 0) {
2a519311
JB		 3216 idx--;
3217 goto out;
3218 }
3219 }
3220
3221 out:
48ab905d
JB		 3222 spin_unlock_bh(&rdev->bss_lock);
3223 wdev_unlock(wdev);
2a519311
JB		 3224
3225 cb->args[1] = idx;
3226 err = skb->len;
48ab905d 3227 cfg80211_unlock_rdev(rdev);
2a519311 3228 out_put_netdev:
48ab905d 3229 dev_put(dev);
2a519311
JB		 3230
3231 return err;
3232}
3233
255e737e
JM		 3234static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type)
3235{
b23aa676
SO		 3236 return auth_type <= NL80211_AUTHTYPE_MAX;
3237}
3238
3239static bool nl80211_valid_wpa_versions(u32 wpa_versions)
3240{
3241 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
3242 NL80211_WPA_VERSION_2));
3243}
3244
3245static bool nl80211_valid_akm_suite(u32 akm)
3246{
3247 return akm == WLAN_AKM_SUITE_8021X ||
3248 akm == WLAN_AKM_SUITE_PSK;
3249}
3250
3251static bool nl80211_valid_cipher_suite(u32 cipher)
3252{
3253 return cipher == WLAN_CIPHER_SUITE_WEP40 ||
3254 cipher == WLAN_CIPHER_SUITE_WEP104 ||
3255 cipher == WLAN_CIPHER_SUITE_TKIP ||
3256 cipher == WLAN_CIPHER_SUITE_CCMP ||
3257 cipher == WLAN_CIPHER_SUITE_AES_CMAC;
255e737e
JM		 3258}
3259
b23aa676 3260
636a5d36
JM		 3261static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
3262{
79c97e97 3263 struct cfg80211_registered_device *rdev;
636a5d36 3264 struct net_device *dev;
19957bb3
JB		 3265 struct ieee80211_channel *chan;
3266 const u8 *bssid, *ssid, *ie = NULL;
3267 int err, ssid_len, ie_len = 0;
3268 enum nl80211_auth_type auth_type;
fffd0934 3269 struct key_parse key;
636a5d36 3270
f4a11bb0
JB		 3271 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3272 return -EINVAL;
3273
3274 if (!info->attrs[NL80211_ATTR_MAC])
3275 return -EINVAL;
3276
1778092e
JM		 3277 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
3278 return -EINVAL;
3279
19957bb3
JB		 3280 if (!info->attrs[NL80211_ATTR_SSID])
3281 return -EINVAL;
3282
3283 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
3284 return -EINVAL;
3285
fffd0934
JB		 3286 err = nl80211_parse_key(info, &key);
3287 if (err)
3288 return err;
3289
3290 if (key.idx >= 0) {
3291 if (!key.p.key || !key.p.key_len)
3292 return -EINVAL;
3293 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
3294 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
3295 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
3296 key.p.key_len != WLAN_KEY_LEN_WEP104))
3297 return -EINVAL;
3298 if (key.idx > 4)
3299 return -EINVAL;
3300 } else {
3301 key.p.key_len = 0;
3302 key.p.key = NULL;
3303 }
3304
636a5d36
JM		 3305 rtnl_lock();
3306
463d0183 3307 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
636a5d36
JM		 3308 if (err)
3309 goto unlock_rtnl;
3310
79c97e97 3311 if (!rdev->ops->auth) {
636a5d36
JM		 3312 err = -EOPNOTSUPP;
3313 goto out;
3314 }
3315
eec60b03
JM		 3316 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3317 err = -EOPNOTSUPP;
3318 goto out;
3319 }
3320
35a8efe1
JM		 3321 if (!netif_running(dev)) {
3322 err = -ENETDOWN;
3323 goto out;
3324 }
3325
19957bb3 3326 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 3327 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3
JB		 3328 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3329 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED)) {
3330 err = -EINVAL;
3331 goto out;
636a5d36
JM		 3332 }
3333
19957bb3
JB		 3334 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
3335 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 3336
3337 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 3338 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3339 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 3340 }
3341
19957bb3
JB		 3342 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
3343 if (!nl80211_valid_auth_type(auth_type)) {
1778092e
JM		 3344 err = -EINVAL;
3345 goto out;
636a5d36
JM		 3346 }
3347
79c97e97 3348 err = cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
fffd0934
JB		 3349 ssid, ssid_len, ie, ie_len,
3350 key.p.key, key.p.key_len, key.idx);
636a5d36
JM		 3351
3352out:
79c97e97 3353 cfg80211_unlock_rdev(rdev);
636a5d36
JM		 3354 dev_put(dev);
3355unlock_rtnl:
3356 rtnl_unlock();
3357 return err;
3358}
3359
b23aa676 3360static int nl80211_crypto_settings(struct genl_info *info,
3dc27d25
JB		 3361 struct cfg80211_crypto_settings *settings,
3362 int cipher_limit)
b23aa676 3363{
c0b2bbd8
JB		 3364 memset(settings, 0, sizeof(*settings));
3365
b23aa676
SO		 3366 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
3367
3368 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
3369 void *data;
3370 int len, i;
3371
3372 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
3373 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
3374 settings->n_ciphers_pairwise = len / sizeof(u32);
3375
3376 if (len % sizeof(u32))
3377 return -EINVAL;
3378
3dc27d25 3379 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 3380 return -EINVAL;
3381
3382 memcpy(settings->ciphers_pairwise, data, len);
3383
3384 for (i = 0; i < settings->n_ciphers_pairwise; i++)
3385 if (!nl80211_valid_cipher_suite(
3386 settings->ciphers_pairwise[i]))
3387 return -EINVAL;
3388 }
3389
3390 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
3391 settings->cipher_group =
3392 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
3393 if (!nl80211_valid_cipher_suite(settings->cipher_group))
3394 return -EINVAL;
3395 }
3396
3397 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
3398 settings->wpa_versions =
3399 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
3400 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
3401 return -EINVAL;
3402 }
3403
3404 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
3405 void *data;
3406 int len, i;
3407
3408 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
3409 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
3410 settings->n_akm_suites = len / sizeof(u32);
3411
3412 if (len % sizeof(u32))
3413 return -EINVAL;
3414
3415 memcpy(settings->akm_suites, data, len);
3416
3417 for (i = 0; i < settings->n_ciphers_pairwise; i++)
3418 if (!nl80211_valid_akm_suite(settings->akm_suites[i]))
3419 return -EINVAL;
3420 }
3421
3422 return 0;
3423}
3424
636a5d36
JM		 3425static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
3426{
19957bb3 3427 struct cfg80211_registered_device *rdev;
636a5d36 3428 struct net_device *dev;
19957bb3 3429 struct cfg80211_crypto_settings crypto;
59bbb6f7 3430 struct ieee80211_channel *chan, *fixedchan;
3e5d7649 3431 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 3432 int err, ssid_len, ie_len = 0;
3433 bool use_mfp = false;
636a5d36 3434
f4a11bb0
JB		 3435 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3436 return -EINVAL;
3437
3438 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 3439 !info->attrs[NL80211_ATTR_SSID] ||
3440 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 3441 return -EINVAL;
3442
636a5d36
JM		 3443 rtnl_lock();
3444
463d0183 3445 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
636a5d36
JM		 3446 if (err)
3447 goto unlock_rtnl;
3448
19957bb3 3449 if (!rdev->ops->assoc) {
636a5d36
JM		 3450 err = -EOPNOTSUPP;
3451 goto out;
3452 }
3453
eec60b03
JM		 3454 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3455 err = -EOPNOTSUPP;
3456 goto out;
3457 }
3458
35a8efe1
JM		 3459 if (!netif_running(dev)) {
3460 err = -ENETDOWN;
3461 goto out;
3462 }
3463
19957bb3 3464 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 3465
19957bb3
JB		 3466 chan = ieee80211_get_channel(&rdev->wiphy,
3467 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3468 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED)) {
3469 err = -EINVAL;
3470 goto out;
636a5d36
JM		 3471 }
3472
59bbb6f7
JB		 3473 mutex_lock(&rdev->devlist_mtx);
3474 fixedchan = rdev_fixed_channel(rdev, NULL);
3475 if (fixedchan && chan != fixedchan) {
3476 err = -EBUSY;
3477 mutex_unlock(&rdev->devlist_mtx);
3478 goto out;
3479 }
3480 mutex_unlock(&rdev->devlist_mtx);
3481
19957bb3
JB		 3482 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
3483 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 3484
3485 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 3486 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3487 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 3488 }
3489
dc6382ce 3490 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 3491 enum nl80211_mfp mfp =
dc6382ce 3492 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 3493 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 3494 use_mfp = true;
4f5dadce 3495 else if (mfp != NL80211_MFP_NO) {
dc6382ce
JM		 3496 err = -EINVAL;
3497 goto out;
3498 }
3499 }
3500
3e5d7649
JB		 3501 if (info->attrs[NL80211_ATTR_PREV_BSSID])
3502 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
3503
3dc27d25 3504 err = nl80211_crypto_settings(info, &crypto, 1);
b23aa676 3505 if (!err)
3e5d7649
JB		 3506 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
3507 ssid, ssid_len, ie, ie_len, use_mfp,
19957bb3 3508 &crypto);
636a5d36
JM		 3509
3510out:
4d0c8aea 3511 cfg80211_unlock_rdev(rdev);
636a5d36
JM		 3512 dev_put(dev);
3513unlock_rtnl:
3514 rtnl_unlock();
3515 return err;
3516}
3517
3518static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
3519{
79c97e97 3520 struct cfg80211_registered_device *rdev;
636a5d36 3521 struct net_device *dev;
19957bb3
JB		 3522 const u8 *ie = NULL, *bssid;
3523 int err, ie_len = 0;
3524 u16 reason_code;
636a5d36 3525
f4a11bb0
JB		 3526 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3527 return -EINVAL;
3528
3529 if (!info->attrs[NL80211_ATTR_MAC])
3530 return -EINVAL;
3531
3532 if (!info->attrs[NL80211_ATTR_REASON_CODE])
3533 return -EINVAL;
3534
636a5d36
JM		 3535 rtnl_lock();
3536
463d0183 3537 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
636a5d36
JM		 3538 if (err)
3539 goto unlock_rtnl;
3540
79c97e97 3541 if (!rdev->ops->deauth) {
636a5d36
JM		 3542 err = -EOPNOTSUPP;
3543 goto out;
3544 }
3545
eec60b03
JM		 3546 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3547 err = -EOPNOTSUPP;
3548 goto out;
3549 }
3550
35a8efe1
JM		 3551 if (!netif_running(dev)) {
3552 err = -ENETDOWN;
3553 goto out;
3554 }
3555
19957bb3 3556 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 3557
19957bb3
JB		 3558 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
3559 if (reason_code == 0) {
f4a11bb0
JB		 3560 /* Reason Code 0 is reserved */
3561 err = -EINVAL;
3562 goto out;
255e737e 3563 }
636a5d36
JM		 3564
3565 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 3566 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3567 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 3568 }
3569
79c97e97 3570 err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code);
636a5d36
JM		 3571
3572out:
79c97e97 3573 cfg80211_unlock_rdev(rdev);
636a5d36
JM		 3574 dev_put(dev);
3575unlock_rtnl:
3576 rtnl_unlock();
3577 return err;
3578}
3579
3580static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
3581{
79c97e97 3582 struct cfg80211_registered_device *rdev;
636a5d36 3583 struct net_device *dev;
19957bb3
JB		 3584 const u8 *ie = NULL, *bssid;
3585 int err, ie_len = 0;
3586 u16 reason_code;
636a5d36 3587
f4a11bb0
JB		 3588 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3589 return -EINVAL;
3590
3591 if (!info->attrs[NL80211_ATTR_MAC])
3592 return -EINVAL;
3593
3594 if (!info->attrs[NL80211_ATTR_REASON_CODE])
3595 return -EINVAL;
3596
636a5d36
JM		 3597 rtnl_lock();
3598
463d0183 3599 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
636a5d36
JM		 3600 if (err)
3601 goto unlock_rtnl;
3602
79c97e97 3603 if (!rdev->ops->disassoc) {
636a5d36
JM		 3604 err = -EOPNOTSUPP;
3605 goto out;
3606 }
3607
eec60b03
JM		 3608 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3609 err = -EOPNOTSUPP;
3610 goto out;
3611 }
3612
35a8efe1
JM		 3613 if (!netif_running(dev)) {
3614 err = -ENETDOWN;
3615 goto out;
3616 }
3617
19957bb3 3618 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 3619
19957bb3
JB		 3620 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
3621 if (reason_code == 0) {
f4a11bb0
JB		 3622 /* Reason Code 0 is reserved */
3623 err = -EINVAL;
3624 goto out;
255e737e 3625 }
636a5d36
JM		 3626
3627 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 3628 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3629 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 3630 }
3631
79c97e97 3632 err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code);
636a5d36
JM		 3633
3634out:
79c97e97 3635 cfg80211_unlock_rdev(rdev);
636a5d36
JM		 3636 dev_put(dev);
3637unlock_rtnl:
3638 rtnl_unlock();
3639 return err;
3640}
3641
04a773ad
JB		 3642static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
3643{
79c97e97 3644 struct cfg80211_registered_device *rdev;
04a773ad
JB		 3645 struct net_device *dev;
3646 struct cfg80211_ibss_params ibss;
3647 struct wiphy *wiphy;
fffd0934 3648 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 3649 int err;
3650
8e30bc55
JB		 3651 memset(&ibss, 0, sizeof(ibss));
3652
04a773ad
JB		 3653 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3654 return -EINVAL;
3655
3656 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
3657 !info->attrs[NL80211_ATTR_SSID] ||
3658 !nla_len(info->attrs[NL80211_ATTR_SSID]))
3659 return -EINVAL;
3660
8e30bc55
JB		 3661 ibss.beacon_interval = 100;
3662
3663 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
3664 ibss.beacon_interval =
3665 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
3666 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
3667 return -EINVAL;
3668 }
3669
04a773ad
JB		 3670 rtnl_lock();
3671
463d0183 3672 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
04a773ad
JB		 3673 if (err)
3674 goto unlock_rtnl;
3675
79c97e97 3676 if (!rdev->ops->join_ibss) {
04a773ad
JB		 3677 err = -EOPNOTSUPP;
3678 goto out;
3679 }
3680
3681 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC) {
3682 err = -EOPNOTSUPP;
3683 goto out;
3684 }
3685
3686 if (!netif_running(dev)) {
3687 err = -ENETDOWN;
3688 goto out;
3689 }
3690
79c97e97 3691 wiphy = &rdev->wiphy;
04a773ad
JB		 3692
3693 if (info->attrs[NL80211_ATTR_MAC])
3694 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
3695 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
3696 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
3697
3698 if (info->attrs[NL80211_ATTR_IE]) {
3699 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3700 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3701 }
3702
3703 ibss.channel = ieee80211_get_channel(wiphy,
3704 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3705 if (!ibss.channel ||
3706 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
3707 ibss.channel->flags & IEEE80211_CHAN_DISABLED) {
3708 err = -EINVAL;
3709 goto out;
3710 }
3711
3712 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 3713 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
3714
3715 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
3716 connkeys = nl80211_parse_connkeys(rdev,
3717 info->attrs[NL80211_ATTR_KEYS]);
3718 if (IS_ERR(connkeys)) {
3719 err = PTR_ERR(connkeys);
3720 connkeys = NULL;
3721 goto out;
3722 }
3723 }
04a773ad 3724
fffd0934 3725 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
04a773ad
JB		 3726
3727out:
79c97e97 3728 cfg80211_unlock_rdev(rdev);
04a773ad
JB		 3729 dev_put(dev);
3730unlock_rtnl:
fffd0934
JB		 3731 if (err)
3732 kfree(connkeys);
04a773ad
JB		 3733 rtnl_unlock();
3734 return err;
3735}
3736
3737static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
3738{
79c97e97 3739 struct cfg80211_registered_device *rdev;
04a773ad
JB		 3740 struct net_device *dev;
3741 int err;
3742
3743 rtnl_lock();
3744
463d0183 3745 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
04a773ad
JB		 3746 if (err)
3747 goto unlock_rtnl;
3748
79c97e97 3749 if (!rdev->ops->leave_ibss) {
04a773ad
JB		 3750 err = -EOPNOTSUPP;
3751 goto out;
3752 }
3753
3754 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC) {
3755 err = -EOPNOTSUPP;
3756 goto out;
3757 }
3758
3759 if (!netif_running(dev)) {
3760 err = -ENETDOWN;
3761 goto out;
3762 }
3763
79c97e97 3764 err = cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 3765
3766out:
79c97e97 3767 cfg80211_unlock_rdev(rdev);
04a773ad
JB		 3768 dev_put(dev);
3769unlock_rtnl:
3770 rtnl_unlock();
3771 return err;
3772}
3773
aff89a9b
JB		 3774#ifdef CONFIG_NL80211_TESTMODE
3775static struct genl_multicast_group nl80211_testmode_mcgrp = {
3776 .name = "testmode",
3777};
3778
3779static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
3780{
3781 struct cfg80211_registered_device *rdev;
3782 int err;
3783
3784 if (!info->attrs[NL80211_ATTR_TESTDATA])
3785 return -EINVAL;
3786
3787 rtnl_lock();
3788
3789 rdev = cfg80211_get_dev_from_info(info);
3790 if (IS_ERR(rdev)) {
3791 err = PTR_ERR(rdev);
3792 goto unlock_rtnl;
3793 }
3794
3795 err = -EOPNOTSUPP;
3796 if (rdev->ops->testmode_cmd) {
3797 rdev->testmode_info = info;
3798 err = rdev->ops->testmode_cmd(&rdev->wiphy,
3799 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
3800 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
3801 rdev->testmode_info = NULL;
3802 }
3803
4d0c8aea 3804 cfg80211_unlock_rdev(rdev);
aff89a9b
JB		 3805
3806 unlock_rtnl:
3807 rtnl_unlock();
3808 return err;
3809}
3810
3811static struct sk_buff *
3812__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
3813 int approxlen, u32 pid, u32 seq, gfp_t gfp)
3814{
3815 struct sk_buff *skb;
3816 void *hdr;
3817 struct nlattr *data;
3818
3819 skb = nlmsg_new(approxlen + 100, gfp);
3820 if (!skb)
3821 return NULL;
3822
3823 hdr = nl80211hdr_put(skb, pid, seq, 0, NL80211_CMD_TESTMODE);
3824 if (!hdr) {
3825 kfree_skb(skb);
3826 return NULL;
3827 }
3828
3829 NLA_PUT_U32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
3830 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
3831
3832 ((void **)skb->cb)[0] = rdev;
3833 ((void **)skb->cb)[1] = hdr;
3834 ((void **)skb->cb)[2] = data;
3835
3836 return skb;
3837
3838 nla_put_failure:
3839 kfree_skb(skb);
3840 return NULL;
3841}
3842
3843struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
3844 int approxlen)
3845{
3846 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
3847
3848 if (WARN_ON(!rdev->testmode_info))
3849 return NULL;
3850
3851 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
3852 rdev->testmode_info->snd_pid,
3853 rdev->testmode_info->snd_seq,
3854 GFP_KERNEL);
3855}
3856EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
3857
3858int cfg80211_testmode_reply(struct sk_buff *skb)
3859{
3860 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
3861 void *hdr = ((void **)skb->cb)[1];
3862 struct nlattr *data = ((void **)skb->cb)[2];
3863
3864 if (WARN_ON(!rdev->testmode_info)) {
3865 kfree_skb(skb);
3866 return -EINVAL;
3867 }
3868
3869 nla_nest_end(skb, data);
3870 genlmsg_end(skb, hdr);
3871 return genlmsg_reply(skb, rdev->testmode_info);
3872}
3873EXPORT_SYMBOL(cfg80211_testmode_reply);
3874
3875struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
3876 int approxlen, gfp_t gfp)
3877{
3878 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
3879
3880 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
3881}
3882EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
3883
3884void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
3885{
3886 void *hdr = ((void **)skb->cb)[1];
3887 struct nlattr *data = ((void **)skb->cb)[2];
3888
3889 nla_nest_end(skb, data);
3890 genlmsg_end(skb, hdr);
3891 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
3892}
3893EXPORT_SYMBOL(cfg80211_testmode_event);
3894#endif
3895
b23aa676
SO		 3896static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
3897{
79c97e97 3898 struct cfg80211_registered_device *rdev;
b23aa676
SO		 3899 struct net_device *dev;
3900 struct cfg80211_connect_params connect;
3901 struct wiphy *wiphy;
fffd0934 3902 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 3903 int err;
3904
3905 memset(&connect, 0, sizeof(connect));
3906
3907 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3908 return -EINVAL;
3909
3910 if (!info->attrs[NL80211_ATTR_SSID] ||
3911 !nla_len(info->attrs[NL80211_ATTR_SSID]))
3912 return -EINVAL;
3913
3914 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
3915 connect.auth_type =
3916 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
3917 if (!nl80211_valid_auth_type(connect.auth_type))
3918 return -EINVAL;
3919 } else
3920 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
3921
3922 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
3923
3dc27d25
JB		 3924 err = nl80211_crypto_settings(info, &connect.crypto,
3925 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 3926 if (err)
3927 return err;
3928 rtnl_lock();
3929
463d0183 3930 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
b23aa676
SO		 3931 if (err)
3932 goto unlock_rtnl;
3933
3934 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
3935 err = -EOPNOTSUPP;
3936 goto out;
3937 }
3938
3939 if (!netif_running(dev)) {
3940 err = -ENETDOWN;
3941 goto out;
3942 }
3943
79c97e97 3944 wiphy = &rdev->wiphy;
b23aa676 3945
b23aa676
SO		 3946 if (info->attrs[NL80211_ATTR_MAC])
3947 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
3948 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
3949 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
3950
3951 if (info->attrs[NL80211_ATTR_IE]) {
3952 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
3953 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3954 }
3955
3956 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
3957 connect.channel =
3958 ieee80211_get_channel(wiphy,
3959 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
3960 if (!connect.channel ||
3961 connect.channel->flags & IEEE80211_CHAN_DISABLED) {
3962 err = -EINVAL;
3963 goto out;
3964 }
3965 }
3966
fffd0934
JB		 3967 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
3968 connkeys = nl80211_parse_connkeys(rdev,
3969 info->attrs[NL80211_ATTR_KEYS]);
3970 if (IS_ERR(connkeys)) {
3971 err = PTR_ERR(connkeys);
3972 connkeys = NULL;
3973 goto out;
3974 }
3975 }
3976
3977 err = cfg80211_connect(rdev, dev, &connect, connkeys);
b23aa676
SO		 3978
3979out:
79c97e97 3980 cfg80211_unlock_rdev(rdev);
b23aa676
SO		 3981 dev_put(dev);
3982unlock_rtnl:
fffd0934
JB		 3983 if (err)
3984 kfree(connkeys);
b23aa676
SO		 3985 rtnl_unlock();
3986 return err;
3987}
3988
3989static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
3990{
79c97e97 3991 struct cfg80211_registered_device *rdev;
b23aa676
SO		 3992 struct net_device *dev;
3993 int err;
3994 u16 reason;
3995
3996 if (!info->attrs[NL80211_ATTR_REASON_CODE])
3997 reason = WLAN_REASON_DEAUTH_LEAVING;
3998 else
3999 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4000
4001 if (reason == 0)
4002 return -EINVAL;
4003
4004 rtnl_lock();
4005
463d0183 4006 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
b23aa676
SO		 4007 if (err)
4008 goto unlock_rtnl;
4009
4010 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
4011 err = -EOPNOTSUPP;
4012 goto out;
4013 }
4014
4015 if (!netif_running(dev)) {
4016 err = -ENETDOWN;
4017 goto out;
4018 }
4019
79c97e97 4020 err = cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 4021
4022out:
79c97e97 4023 cfg80211_unlock_rdev(rdev);
b23aa676
SO		 4024 dev_put(dev);
4025unlock_rtnl:
4026 rtnl_unlock();
4027 return err;
4028}
4029
463d0183
JB		 4030static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
4031{
4032 struct cfg80211_registered_device *rdev;
4033 struct net *net;
4034 int err;
4035 u32 pid;
4036
4037 if (!info->attrs[NL80211_ATTR_PID])
4038 return -EINVAL;
4039
4040 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
4041
4042 rtnl_lock();
4043
4044 rdev = cfg80211_get_dev_from_info(info);
4045 if (IS_ERR(rdev)) {
4046 err = PTR_ERR(rdev);
4047 goto out;
4048 }
4049
4050 net = get_net_ns_by_pid(pid);
4051 if (IS_ERR(net)) {
4052 err = PTR_ERR(net);
4053 goto out;
4054 }
4055
4056 err = 0;
4057
4058 /* check if anything to do */
4059 if (net_eq(wiphy_net(&rdev->wiphy), net))
4060 goto out_put_net;
4061
4062 err = cfg80211_switch_netns(rdev, net);
4063 out_put_net:
4064 put_net(net);
4065 out:
4066 cfg80211_unlock_rdev(rdev);
4067 rtnl_unlock();
4068 return err;
4069}
4070
55682965
JB		 4071static struct genl_ops nl80211_ops[] = {
4072 {
4073 .cmd = NL80211_CMD_GET_WIPHY,
4074 .doit = nl80211_get_wiphy,
4075 .dumpit = nl80211_dump_wiphy,
4076 .policy = nl80211_policy,
4077 /* can be retrieved by unprivileged users */
4078 },
4079 {
4080 .cmd = NL80211_CMD_SET_WIPHY,
4081 .doit = nl80211_set_wiphy,
4082 .policy = nl80211_policy,
4083 .flags = GENL_ADMIN_PERM,
4084 },
4085 {
4086 .cmd = NL80211_CMD_GET_INTERFACE,
4087 .doit = nl80211_get_interface,
4088 .dumpit = nl80211_dump_interface,
4089 .policy = nl80211_policy,
4090 /* can be retrieved by unprivileged users */
4091 },
4092 {
4093 .cmd = NL80211_CMD_SET_INTERFACE,
4094 .doit = nl80211_set_interface,
4095 .policy = nl80211_policy,
4096 .flags = GENL_ADMIN_PERM,
4097 },
4098 {
4099 .cmd = NL80211_CMD_NEW_INTERFACE,
4100 .doit = nl80211_new_interface,
4101 .policy = nl80211_policy,
4102 .flags = GENL_ADMIN_PERM,
4103 },
4104 {
4105 .cmd = NL80211_CMD_DEL_INTERFACE,
4106 .doit = nl80211_del_interface,
4107 .policy = nl80211_policy,
41ade00f
JB		 4108 .flags = GENL_ADMIN_PERM,
4109 },
4110 {
4111 .cmd = NL80211_CMD_GET_KEY,
4112 .doit = nl80211_get_key,
4113 .policy = nl80211_policy,
4114 .flags = GENL_ADMIN_PERM,
4115 },
4116 {
4117 .cmd = NL80211_CMD_SET_KEY,
4118 .doit = nl80211_set_key,
4119 .policy = nl80211_policy,
4120 .flags = GENL_ADMIN_PERM,
4121 },
4122 {
4123 .cmd = NL80211_CMD_NEW_KEY,
4124 .doit = nl80211_new_key,
4125 .policy = nl80211_policy,
4126 .flags = GENL_ADMIN_PERM,
4127 },
4128 {
4129 .cmd = NL80211_CMD_DEL_KEY,
4130 .doit = nl80211_del_key,
4131 .policy = nl80211_policy,
55682965
JB		 4132 .flags = GENL_ADMIN_PERM,
4133 },
ed1b6cc7
JB		 4134 {
4135 .cmd = NL80211_CMD_SET_BEACON,
4136 .policy = nl80211_policy,
4137 .flags = GENL_ADMIN_PERM,
4138 .doit = nl80211_addset_beacon,
4139 },
4140 {
4141 .cmd = NL80211_CMD_NEW_BEACON,
4142 .policy = nl80211_policy,
4143 .flags = GENL_ADMIN_PERM,
4144 .doit = nl80211_addset_beacon,
4145 },
4146 {
4147 .cmd = NL80211_CMD_DEL_BEACON,
4148 .policy = nl80211_policy,
4149 .flags = GENL_ADMIN_PERM,
4150 .doit = nl80211_del_beacon,
4151 },
5727ef1b
JB		 4152 {
4153 .cmd = NL80211_CMD_GET_STATION,
4154 .doit = nl80211_get_station,
2ec600d6 4155 .dumpit = nl80211_dump_station,
5727ef1b 4156 .policy = nl80211_policy,
5727ef1b
JB		 4157 },
4158 {
4159 .cmd = NL80211_CMD_SET_STATION,
4160 .doit = nl80211_set_station,
4161 .policy = nl80211_policy,
4162 .flags = GENL_ADMIN_PERM,
4163 },
4164 {
4165 .cmd = NL80211_CMD_NEW_STATION,
4166 .doit = nl80211_new_station,
4167 .policy = nl80211_policy,
4168 .flags = GENL_ADMIN_PERM,
4169 },
4170 {
4171 .cmd = NL80211_CMD_DEL_STATION,
4172 .doit = nl80211_del_station,
4173 .policy = nl80211_policy,
2ec600d6
LCC		 4174 .flags = GENL_ADMIN_PERM,
4175 },
4176 {
4177 .cmd = NL80211_CMD_GET_MPATH,
4178 .doit = nl80211_get_mpath,
4179 .dumpit = nl80211_dump_mpath,
4180 .policy = nl80211_policy,
4181 .flags = GENL_ADMIN_PERM,
4182 },
4183 {
4184 .cmd = NL80211_CMD_SET_MPATH,
4185 .doit = nl80211_set_mpath,
4186 .policy = nl80211_policy,
4187 .flags = GENL_ADMIN_PERM,
4188 },
4189 {
4190 .cmd = NL80211_CMD_NEW_MPATH,
4191 .doit = nl80211_new_mpath,
4192 .policy = nl80211_policy,
4193 .flags = GENL_ADMIN_PERM,
4194 },
4195 {
4196 .cmd = NL80211_CMD_DEL_MPATH,
4197 .doit = nl80211_del_mpath,
4198 .policy = nl80211_policy,
9f1ba906
JM		 4199 .flags = GENL_ADMIN_PERM,
4200 },
4201 {
4202 .cmd = NL80211_CMD_SET_BSS,
4203 .doit = nl80211_set_bss,
4204 .policy = nl80211_policy,
b2e1b302
LR		 4205 .flags = GENL_ADMIN_PERM,
4206 },
f130347c
LR		 4207 {
4208 .cmd = NL80211_CMD_GET_REG,
4209 .doit = nl80211_get_reg,
4210 .policy = nl80211_policy,
4211 /* can be retrieved by unprivileged users */
4212 },
b2e1b302
LR		 4213 {
4214 .cmd = NL80211_CMD_SET_REG,
4215 .doit = nl80211_set_reg,
4216 .policy = nl80211_policy,
4217 .flags = GENL_ADMIN_PERM,
4218 },
4219 {
4220 .cmd = NL80211_CMD_REQ_SET_REG,
4221 .doit = nl80211_req_set_reg,
4222 .policy = nl80211_policy,
93da9cc1 4223 .flags = GENL_ADMIN_PERM,
4224 },
4225 {
4226 .cmd = NL80211_CMD_GET_MESH_PARAMS,
4227 .doit = nl80211_get_mesh_params,
4228 .policy = nl80211_policy,
4229 /* can be retrieved by unprivileged users */
4230 },
4231 {
4232 .cmd = NL80211_CMD_SET_MESH_PARAMS,
4233 .doit = nl80211_set_mesh_params,
4234 .policy = nl80211_policy,
9aed3cc1
JM		 4235 .flags = GENL_ADMIN_PERM,
4236 },
2a519311
JB		 4237 {
4238 .cmd = NL80211_CMD_TRIGGER_SCAN,
4239 .doit = nl80211_trigger_scan,
4240 .policy = nl80211_policy,
4241 .flags = GENL_ADMIN_PERM,
4242 },
4243 {
4244 .cmd = NL80211_CMD_GET_SCAN,
4245 .policy = nl80211_policy,
4246 .dumpit = nl80211_dump_scan,
4247 },
636a5d36
JM		 4248 {
4249 .cmd = NL80211_CMD_AUTHENTICATE,
4250 .doit = nl80211_authenticate,
4251 .policy = nl80211_policy,
4252 .flags = GENL_ADMIN_PERM,
4253 },
4254 {
4255 .cmd = NL80211_CMD_ASSOCIATE,
4256 .doit = nl80211_associate,
4257 .policy = nl80211_policy,
4258 .flags = GENL_ADMIN_PERM,
4259 },
4260 {
4261 .cmd = NL80211_CMD_DEAUTHENTICATE,
4262 .doit = nl80211_deauthenticate,
4263 .policy = nl80211_policy,
4264 .flags = GENL_ADMIN_PERM,
4265 },
4266 {
4267 .cmd = NL80211_CMD_DISASSOCIATE,
4268 .doit = nl80211_disassociate,
4269 .policy = nl80211_policy,
4270 .flags = GENL_ADMIN_PERM,
4271 },
04a773ad
JB		 4272 {
4273 .cmd = NL80211_CMD_JOIN_IBSS,
4274 .doit = nl80211_join_ibss,
4275 .policy = nl80211_policy,
4276 .flags = GENL_ADMIN_PERM,
4277 },
4278 {
4279 .cmd = NL80211_CMD_LEAVE_IBSS,
4280 .doit = nl80211_leave_ibss,
4281 .policy = nl80211_policy,
4282 .flags = GENL_ADMIN_PERM,
4283 },
aff89a9b
JB		 4284#ifdef CONFIG_NL80211_TESTMODE
4285 {
4286 .cmd = NL80211_CMD_TESTMODE,
4287 .doit = nl80211_testmode_do,
4288 .policy = nl80211_policy,
4289 .flags = GENL_ADMIN_PERM,
4290 },
4291#endif
b23aa676
SO		 4292 {
4293 .cmd = NL80211_CMD_CONNECT,
4294 .doit = nl80211_connect,
4295 .policy = nl80211_policy,
4296 .flags = GENL_ADMIN_PERM,
4297 },
4298 {
4299 .cmd = NL80211_CMD_DISCONNECT,
4300 .doit = nl80211_disconnect,
4301 .policy = nl80211_policy,
4302 .flags = GENL_ADMIN_PERM,
4303 },
463d0183
JB		 4304 {
4305 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
4306 .doit = nl80211_wiphy_netns,
4307 .policy = nl80211_policy,
4308 .flags = GENL_ADMIN_PERM,
4309 },
55682965 4310};
6039f6d2
JM		 4311static struct genl_multicast_group nl80211_mlme_mcgrp = {
4312 .name = "mlme",
4313};
55682965
JB		 4314
4315/* multicast groups */
4316static struct genl_multicast_group nl80211_config_mcgrp = {
4317 .name = "config",
4318};
2a519311
JB		 4319static struct genl_multicast_group nl80211_scan_mcgrp = {
4320 .name = "scan",
4321};
73d54c9e
LR		 4322static struct genl_multicast_group nl80211_regulatory_mcgrp = {
4323 .name = "regulatory",
4324};
55682965
JB		 4325
4326/* notification functions */
4327
4328void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
4329{
4330 struct sk_buff *msg;
4331
fd2120ca 4332 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 4333 if (!msg)
4334 return;
4335
4336 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
4337 nlmsg_free(msg);
4338 return;
4339 }
4340
463d0183
JB		 4341 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4342 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 4343}
4344
362a415d
JB		 4345static int nl80211_add_scan_req(struct sk_buff *msg,
4346 struct cfg80211_registered_device *rdev)
4347{
4348 struct cfg80211_scan_request *req = rdev->scan_req;
4349 struct nlattr *nest;
4350 int i;
4351
667503dd
JB		 4352 ASSERT_RDEV_LOCK(rdev);
4353
362a415d
JB		 4354 if (WARN_ON(!req))
4355 return 0;
4356
4357 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
4358 if (!nest)
4359 goto nla_put_failure;
4360 for (i = 0; i < req->n_ssids; i++)
4361 NLA_PUT(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid);
4362 nla_nest_end(msg, nest);
4363
4364 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
4365 if (!nest)
4366 goto nla_put_failure;
4367 for (i = 0; i < req->n_channels; i++)
4368 NLA_PUT_U32(msg, i, req->channels[i]->center_freq);
4369 nla_nest_end(msg, nest);
4370
4371 if (req->ie)
4372 NLA_PUT(msg, NL80211_ATTR_IE, req->ie_len, req->ie);
4373
4374 return 0;
4375 nla_put_failure:
4376 return -ENOBUFS;
4377}
4378
a538e2d5
JB		 4379static int nl80211_send_scan_msg(struct sk_buff *msg,
4380 struct cfg80211_registered_device *rdev,
4381 struct net_device *netdev,
4382 u32 pid, u32 seq, int flags,
4383 u32 cmd)
2a519311
JB		 4384{
4385 void *hdr;
4386
4387 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
4388 if (!hdr)
4389 return -1;
4390
b5850a7a 4391 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
2a519311
JB		 4392 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4393
362a415d
JB		 4394 /* ignore errors and send incomplete event anyway */
4395 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 4396
4397 return genlmsg_end(msg, hdr);
4398
4399 nla_put_failure:
4400 genlmsg_cancel(msg, hdr);
4401 return -EMSGSIZE;
4402}
4403
a538e2d5
JB		 4404void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
4405 struct net_device *netdev)
4406{
4407 struct sk_buff *msg;
4408
4409 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
4410 if (!msg)
4411 return;
4412
4413 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
4414 NL80211_CMD_TRIGGER_SCAN) < 0) {
4415 nlmsg_free(msg);
4416 return;
4417 }
4418
463d0183
JB		 4419 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4420 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 4421}
4422
2a519311
JB		 4423void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
4424 struct net_device *netdev)
4425{
4426 struct sk_buff *msg;
4427
fd2120ca 4428 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 4429 if (!msg)
4430 return;
4431
a538e2d5
JB		 4432 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
4433 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 4434 nlmsg_free(msg);
4435 return;
4436 }
4437
463d0183
JB		 4438 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4439 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 4440}
4441
4442void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
4443 struct net_device *netdev)
4444{
4445 struct sk_buff *msg;
4446
fd2120ca 4447 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 4448 if (!msg)
4449 return;
4450
a538e2d5
JB		 4451 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
4452 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 4453 nlmsg_free(msg);
4454 return;
4455 }
4456
463d0183
JB		 4457 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4458 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 4459}
4460
73d54c9e
LR		 4461/*
4462 * This can happen on global regulatory changes or device specific settings
4463 * based on custom world regulatory domains.
4464 */
4465void nl80211_send_reg_change_event(struct regulatory_request *request)
4466{
4467 struct sk_buff *msg;
4468 void *hdr;
4469
fd2120ca 4470 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 4471 if (!msg)
4472 return;
4473
4474 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
4475 if (!hdr) {
4476 nlmsg_free(msg);
4477 return;
4478 }
4479
4480 /* Userspace can always count this one always being set */
4481 NLA_PUT_U8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator);
4482
4483 if (request->alpha2[0] == '0' && request->alpha2[1] == '0')
4484 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
4485 NL80211_REGDOM_TYPE_WORLD);
4486 else if (request->alpha2[0] == '9' && request->alpha2[1] == '9')
4487 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
4488 NL80211_REGDOM_TYPE_CUSTOM_WORLD);
4489 else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
4490 request->intersect)
4491 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
4492 NL80211_REGDOM_TYPE_INTERSECTION);
4493 else {
4494 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
4495 NL80211_REGDOM_TYPE_COUNTRY);
4496 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2, request->alpha2);
4497 }
4498
4499 if (wiphy_idx_valid(request->wiphy_idx))
4500 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx);
4501
4502 if (genlmsg_end(msg, hdr) < 0) {
4503 nlmsg_free(msg);
4504 return;
4505 }
4506
bc43b28c 4507 rcu_read_lock();
463d0183 4508 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 4509 GFP_ATOMIC);
4510 rcu_read_unlock();
73d54c9e
LR		 4511
4512 return;
4513
4514nla_put_failure:
4515 genlmsg_cancel(msg, hdr);
4516 nlmsg_free(msg);
4517}
4518
6039f6d2
JM		 4519static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
4520 struct net_device *netdev,
4521 const u8 *buf, size_t len,
e6d6e342 4522 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 4523{
4524 struct sk_buff *msg;
4525 void *hdr;
4526
e6d6e342 4527 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 4528 if (!msg)
4529 return;
4530
4531 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
4532 if (!hdr) {
4533 nlmsg_free(msg);
4534 return;
4535 }
4536
4537 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4538 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4539 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
4540
4541 if (genlmsg_end(msg, hdr) < 0) {
4542 nlmsg_free(msg);
4543 return;
4544 }
4545
463d0183
JB		 4546 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4547 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 4548 return;
4549
4550 nla_put_failure:
4551 genlmsg_cancel(msg, hdr);
4552 nlmsg_free(msg);
4553}
4554
4555void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 4556 struct net_device *netdev, const u8 *buf,
4557 size_t len, gfp_t gfp)
6039f6d2
JM		 4558{
4559 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 4560 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 4561}
4562
4563void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
4564 struct net_device *netdev, const u8 *buf,
e6d6e342 4565 size_t len, gfp_t gfp)
6039f6d2 4566{
e6d6e342
JB		 4567 nl80211_send_mlme_event(rdev, netdev, buf, len,
4568 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 4569}
4570
53b46b84 4571void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 4572 struct net_device *netdev, const u8 *buf,
4573 size_t len, gfp_t gfp)
6039f6d2
JM		 4574{
4575 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 4576 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 4577}
4578
53b46b84
JM		 4579void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
4580 struct net_device *netdev, const u8 *buf,
e6d6e342 4581 size_t len, gfp_t gfp)
6039f6d2
JM		 4582{
4583 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 4584 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 4585}
4586
1b06bb40
LR		 4587static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
4588 struct net_device *netdev, int cmd,
e6d6e342 4589 const u8 *addr, gfp_t gfp)
1965c853
JM		 4590{
4591 struct sk_buff *msg;
4592 void *hdr;
4593
e6d6e342 4594 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 4595 if (!msg)
4596 return;
4597
4598 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
4599 if (!hdr) {
4600 nlmsg_free(msg);
4601 return;
4602 }
4603
4604 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4605 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4606 NLA_PUT_FLAG(msg, NL80211_ATTR_TIMED_OUT);
4607 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
4608
4609 if (genlmsg_end(msg, hdr) < 0) {
4610 nlmsg_free(msg);
4611 return;
4612 }
4613
463d0183
JB		 4614 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4615 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 4616 return;
4617
4618 nla_put_failure:
4619 genlmsg_cancel(msg, hdr);
4620 nlmsg_free(msg);
4621}
4622
4623void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 4624 struct net_device *netdev, const u8 *addr,
4625 gfp_t gfp)
1965c853
JM		 4626{
4627 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 4628 addr, gfp);
1965c853
JM		 4629}
4630
4631void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 4632 struct net_device *netdev, const u8 *addr,
4633 gfp_t gfp)
1965c853 4634{
e6d6e342
JB		 4635 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
4636 addr, gfp);
1965c853
JM		 4637}
4638
b23aa676
SO		 4639void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
4640 struct net_device *netdev, const u8 *bssid,
4641 const u8 *req_ie, size_t req_ie_len,
4642 const u8 *resp_ie, size_t resp_ie_len,
4643 u16 status, gfp_t gfp)
4644{
4645 struct sk_buff *msg;
4646 void *hdr;
4647
4648 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
4649 if (!msg)
4650 return;
4651
4652 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
4653 if (!hdr) {
4654 nlmsg_free(msg);
4655 return;
4656 }
4657
4658 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4659 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4660 if (bssid)
4661 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
4662 NLA_PUT_U16(msg, NL80211_ATTR_STATUS_CODE, status);
4663 if (req_ie)
4664 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
4665 if (resp_ie)
4666 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
4667
4668 if (genlmsg_end(msg, hdr) < 0) {
4669 nlmsg_free(msg);
4670 return;
4671 }
4672
463d0183
JB		 4673 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4674 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 4675 return;
4676
4677 nla_put_failure:
4678 genlmsg_cancel(msg, hdr);
4679 nlmsg_free(msg);
4680
4681}
4682
4683void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
4684 struct net_device *netdev, const u8 *bssid,
4685 const u8 *req_ie, size_t req_ie_len,
4686 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
4687{
4688 struct sk_buff *msg;
4689 void *hdr;
4690
4691 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
4692 if (!msg)
4693 return;
4694
4695 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
4696 if (!hdr) {
4697 nlmsg_free(msg);
4698 return;
4699 }
4700
4701 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4702 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4703 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
4704 if (req_ie)
4705 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
4706 if (resp_ie)
4707 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
4708
4709 if (genlmsg_end(msg, hdr) < 0) {
4710 nlmsg_free(msg);
4711 return;
4712 }
4713
463d0183
JB		 4714 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4715 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 4716 return;
4717
4718 nla_put_failure:
4719 genlmsg_cancel(msg, hdr);
4720 nlmsg_free(msg);
4721
4722}
4723
4724void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
4725 struct net_device *netdev, u16 reason,
667503dd 4726 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 4727{
4728 struct sk_buff *msg;
4729 void *hdr;
4730
667503dd 4731 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
b23aa676
SO		 4732 if (!msg)
4733 return;
4734
4735 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
4736 if (!hdr) {
4737 nlmsg_free(msg);
4738 return;
4739 }
4740
4741 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4742 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4743 if (from_ap && reason)
4744 NLA_PUT_U16(msg, NL80211_ATTR_REASON_CODE, reason);
4745 if (from_ap)
4746 NLA_PUT_FLAG(msg, NL80211_ATTR_DISCONNECTED_BY_AP);
4747 if (ie)
4748 NLA_PUT(msg, NL80211_ATTR_IE, ie_len, ie);
4749
4750 if (genlmsg_end(msg, hdr) < 0) {
4751 nlmsg_free(msg);
4752 return;
4753 }
4754
463d0183
JB		 4755 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4756 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 4757 return;
4758
4759 nla_put_failure:
4760 genlmsg_cancel(msg, hdr);
4761 nlmsg_free(msg);
4762
4763}
4764
04a773ad
JB		 4765void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
4766 struct net_device *netdev, const u8 *bssid,
4767 gfp_t gfp)
4768{
4769 struct sk_buff *msg;
4770 void *hdr;
4771
fd2120ca 4772 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 4773 if (!msg)
4774 return;
4775
4776 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
4777 if (!hdr) {
4778 nlmsg_free(msg);
4779 return;
4780 }
4781
4782 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4783 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4784 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
4785
4786 if (genlmsg_end(msg, hdr) < 0) {
4787 nlmsg_free(msg);
4788 return;
4789 }
4790
463d0183
JB		 4791 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4792 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 4793 return;
4794
4795 nla_put_failure:
4796 genlmsg_cancel(msg, hdr);
4797 nlmsg_free(msg);
4798}
4799
a3b8b056
JM		 4800void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
4801 struct net_device *netdev, const u8 *addr,
4802 enum nl80211_key_type key_type, int key_id,
e6d6e342 4803 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 4804{
4805 struct sk_buff *msg;
4806 void *hdr;
4807
e6d6e342 4808 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 4809 if (!msg)
4810 return;
4811
4812 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
4813 if (!hdr) {
4814 nlmsg_free(msg);
4815 return;
4816 }
4817
4818 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4819 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
4820 if (addr)
4821 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
4822 NLA_PUT_U32(msg, NL80211_ATTR_KEY_TYPE, key_type);
4823 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_id);
4824 if (tsc)
4825 NLA_PUT(msg, NL80211_ATTR_KEY_SEQ, 6, tsc);
4826
4827 if (genlmsg_end(msg, hdr) < 0) {
4828 nlmsg_free(msg);
4829 return;
4830 }
4831
463d0183
JB		 4832 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
4833 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 4834 return;
4835
4836 nla_put_failure:
4837 genlmsg_cancel(msg, hdr);
4838 nlmsg_free(msg);
4839}
4840
6bad8766
LR		 4841void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
4842 struct ieee80211_channel *channel_before,
4843 struct ieee80211_channel *channel_after)
4844{
4845 struct sk_buff *msg;
4846 void *hdr;
4847 struct nlattr *nl_freq;
4848
fd2120ca 4849 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 4850 if (!msg)
4851 return;
4852
4853 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
4854 if (!hdr) {
4855 nlmsg_free(msg);
4856 return;
4857 }
4858
4859 /*
4860 * Since we are applying the beacon hint to a wiphy we know its
4861 * wiphy_idx is valid
4862 */
4863 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy));
4864
4865 /* Before */
4866 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
4867 if (!nl_freq)
4868 goto nla_put_failure;
4869 if (nl80211_msg_put_channel(msg, channel_before))
4870 goto nla_put_failure;
4871 nla_nest_end(msg, nl_freq);
4872
4873 /* After */
4874 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
4875 if (!nl_freq)
4876 goto nla_put_failure;
4877 if (nl80211_msg_put_channel(msg, channel_after))
4878 goto nla_put_failure;
4879 nla_nest_end(msg, nl_freq);
4880
4881 if (genlmsg_end(msg, hdr) < 0) {
4882 nlmsg_free(msg);
4883 return;
4884 }
4885
463d0183
JB		 4886 rcu_read_lock();
4887 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
4888 GFP_ATOMIC);
4889 rcu_read_unlock();
6bad8766
LR		 4890
4891 return;
4892
4893nla_put_failure:
4894 genlmsg_cancel(msg, hdr);
4895 nlmsg_free(msg);
4896}
4897
55682965
JB		 4898/* initialisation/exit functions */
4899
4900int nl80211_init(void)
4901{
0d63cbb5 4902 int err;
55682965 4903
0d63cbb5
MM		 4904 err = genl_register_family_with_ops(&nl80211_fam,
4905 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 4906 if (err)
4907 return err;
4908
55682965
JB		 4909 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
4910 if (err)
4911 goto err_out;
4912
2a519311
JB		 4913 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
4914 if (err)
4915 goto err_out;
4916
73d54c9e
LR		 4917 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
4918 if (err)
4919 goto err_out;
4920
6039f6d2
JM		 4921 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
4922 if (err)
4923 goto err_out;
4924
aff89a9b
JB		 4925#ifdef CONFIG_NL80211_TESTMODE
4926 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
4927 if (err)
4928 goto err_out;
4929#endif
4930
55682965
JB		 4931 return 0;
4932 err_out:
4933 genl_unregister_family(&nl80211_fam);
4934 return err;
4935}
4936
4937void nl80211_exit(void)
4938{
4939 genl_unregister_family(&nl80211_fam);
4940}
ubuntu-bionic-kernel mirror